Carie Pointer
5adcee9f2c
Update testsuite to expect ADH-AES256-GCM-SHA384 to fail with TLSv1.0 and TLSv1.1
2019-10-09 08:36:47 -07:00
Daniele Lacamera
99209d78a3
STM32 PKA: added include statement
2019-10-09 13:19:57 +02:00
Daniele Lacamera
0dfc64678c
STM32 PKA: added function prototype
2019-10-09 13:15:56 +02:00
Daniele Lacamera
3465a487d3
STM32 PKA fix: remove reverse array operations
2019-10-09 10:22:04 +02:00
John Safranek
89db0da0aa
Synchronous Quick Assist Support for Sniffer
...
1. Fixed a compiler warnings.
2. Fixed a memory issue when using the storage callback with QAT.
2019-10-08 16:49:38 -07:00
Tesfa Mael
b7fe49c8b4
NULL terminate a character sequence
2019-10-08 15:42:39 -07:00
Tesfa Mael
a84fbeae6b
Fix for a memory BIO and handle BIO chains
2019-10-08 12:26:54 -07:00
John Safranek
ff15b3cfaa
better display of the IPv6 addresses in the sniffer
2019-10-08 11:34:36 -07:00
Carie Pointer
136bc45857
Update wolfSSL_X509_NAME_print_ex for printing X509_NAME in reverse order
2019-10-07 11:36:00 -07:00
Carie Pointer
98b8cd35d8
Add ALT_NAMES_OID to switch in wolfSSL_X509_set_ext and update X509V3_EXT_print
2019-10-07 11:29:35 -07:00
Carie Pointer
b247b4565c
Fixes for build warnings with apache httpd
2019-10-07 11:15:55 -07:00
Carie Pointer
df22115920
Return error with AES-GCM and negotiated versions < TLSv1.2
2019-10-07 08:28:00 -07:00
David Garske
625bd121f2
Merge pull request #2495 from JacobBarthelmeh/staticmemory
...
check on if free'ing ctx/method back to heap hint
2019-10-07 08:10:05 -07:00
John Safranek
8ec90339d9
Change the sniffer testsuite to do the IPv6 test when the "-6" option is
...
on the command line.
2019-10-05 19:26:41 -07:00
John Safranek
f025f08315
Sniffer touches for Windows.
2019-10-04 17:06:35 -07:00
John Safranek
a467c75390
Change the GPL version back to v2 for the quickassist_sync files.
2019-10-04 14:56:42 -07:00
John Safranek
b6b57154e5
Add the new IPv6 sniffer test file to the automake list.
2019-10-04 14:54:17 -07:00
John Safranek
89ff909d73
Sniffer IPv6
...
1. Sorted out IPv6 configuration for sniff test.
2. Tests the sniffer using an IPv6 file.
2019-10-04 14:54:17 -07:00
John Safranek
ebd435ae46
skip IPv6 extended headers
2019-10-04 14:54:17 -07:00
John Safranek
a5bfb8a18b
Change the IP address wrappers to include the version. Makes comparing
...
easier. Hard-coded some IPv6 localhost tests.
2019-10-04 14:54:17 -07:00
John Safranek
d1d2eb0edd
Add IPv6 to the sniffer.
2019-10-04 14:54:17 -07:00
John Safranek
8b21082abe
Use wrapper macros for all touches of the sniffer statistics mutex.
2019-10-04 14:54:17 -07:00
John Safranek
1b057df610
When enabling SHOW_SECRETS one of the array counter variables for a
...
secret had a type mismatch. Changed the index to a word32 to match the
boundary variable's type.
2019-10-04 14:54:17 -07:00
John Safranek
841e469340
Convert the data the snifftest is about to print into printable text.
...
Anything that isprint() or isspace() is kept, anything else is changed
to a period.
2019-10-04 14:54:17 -07:00
John Safranek
725243b132
Changed how the sniffer calculates the sslFrame size, sslBytes, and the
...
end of packet pointer. The end of packet pointer is based on sslFrame
and sslBytes. sslBytes is calculated from the total length in the IP
header, rather than the caplen. The caplen may include things like
Ethernet's FCS, which throws packet processing off.
2019-10-04 14:54:17 -07:00
John Safranek
b2fb6d1a81
Move some stats captures to a different location.
2019-10-04 14:54:17 -07:00
John Safranek
3256fef7f9
Sniffer Chain Buffers
...
1. Fixed an issue when a TLS record is split across two chain buffers.
The second buffer was being treated as a new record.
2. Fixed an issue with STARTTLS_ALLOWED where the input buffer isn't
getting cleared and the skipped data just builds up blocking TLS
records.
2019-10-04 14:54:17 -07:00
John Safranek
53c7f864b2
Add midding function prototype.
2019-10-04 14:54:17 -07:00
John Safranek
b6ca72549c
Sniffer Fixes
...
Added a flag to disable the normally enabled session stats, WOLFSSL_NO_SESSION_STATS.
2019-10-04 14:54:17 -07:00
John Safranek
dea5e73852
Sniffer Chain Input
...
Add a new method for handling input records where the input is in the form of an iovec list.
2019-10-04 14:54:17 -07:00
John Safranek
62ac388f55
Store Data Callback
...
Added a callback and support to allow one to handle storing the data
directly without reallocating the data buffer. Also added an example
that uses this callback if the callback is enabled in the build.
2019-10-04 14:54:17 -07:00
John Safranek
98e94a6f0f
Added a preprocessor guard around ssl_GetSessionStats().
2019-10-04 14:54:17 -07:00
John Safranek
a0ad39cf70
Sniffer Stats
...
Moved the increment of the resume misses statistic.
2019-10-04 14:54:17 -07:00
John Safranek
73273f4fec
Sniffer Memory
...
1. Modify the sniffer code to use XMALLOC and XFREE.
2. Added some new dynamic memory types for the sniffer.
2019-10-04 14:54:17 -07:00
John Safranek
0e1073f622
Sniffer Statistics
...
Addded two more statistics, cache hits and cache inserts.
2019-10-04 14:54:17 -07:00
John Safranek
4292936efc
wolfSSL Global
...
1. Renamed the global variable tag to WOLFSSL_GLOBAL.
2. Tagged several more global variables with WOLFSSL_GLOBAL.
2019-10-04 14:54:17 -07:00
John Safranek
bbc208ad33
Updated some more globals in the sniffer and session cache with being shared.
2019-10-04 14:54:17 -07:00
John Safranek
a991cc42f4
Add function wolfSSL_get_cipher_name_iana_from_suite() a wrapper around
...
internal API GetCipherNameIana().
2019-10-04 14:54:17 -07:00
John Safranek
87a8447f0d
1. Added a tag for global variables in environments where they aren't
...
shared across threads by default.
2. Set the Trace file and flag up with the shared flag.
2019-10-04 14:54:17 -07:00
John Safranek
743a6ab829
Update the decrypted packet and byte counts.
2019-10-04 14:54:17 -07:00
toddouska
dd9635d8ff
Merge pull request #2469 from embhorn/sk_types
...
Sk types
2019-10-04 14:44:25 -07:00
toddouska
30829cec09
Merge pull request #2482 from SparkiDev/cppcheck_fixes_1
...
Fixes from using cppcheck tool
2019-10-04 14:39:31 -07:00
David Garske
b213a962e9
Merge pull request #2493 from ejohnstown/sync-qat
...
Synchronous Quick Assist Support for Sniffer
2019-10-04 11:45:08 -07:00
Daniele Lacamera
c26a7ccb68
Fix copy-paste from LTE module
2019-10-04 20:37:38 +02:00
Daniele Lacamera
52bf19eefd
Added initial support for STM32_PKA ECC accelerator
2019-10-04 20:15:33 +02:00
David Garske
0d43c1f3d7
Merge pull request #2488 from aaronjense/openssh-fixes
...
Fix defines that aren't in configure.ac
2019-10-04 10:35:07 -07:00
David Garske
d48e904c16
Merge pull request #2496 from embhorn/test_ASN1_INTEGER_set
...
Add conditional check to test_wolfSSL_ASN1_INTEGER_set test case failing for 32-bit platform
2019-10-04 10:33:37 -07:00
John Safranek
48d872187d
Synchronous Quick Assist Support for Sniffer
...
1. Add a HardwareStop for the QAT sync build in wolfCrypt_Cleanup();
2019-10-04 09:01:59 -07:00
David Garske
a258b84018
Merge pull request #2497 from danielinux/openssl-cleanup
...
Fix include path issue for openssl compatibility for dh.h.
2019-10-04 08:23:37 -07:00
Eric Blankenhorn
f47a9c8b20
Add conditional to 64-bit tests
2019-10-04 09:41:48 -05:00