245a2b7012
sp_int: clamp more results
2019-11-28 10:01:54 +10:00
dadbeff433
sp_int: When setting digit of 0, set used to 0
2019-11-28 10:01:54 +10:00
2ac0ac8776
Fix for sp_div when a > d but same bit length
2019-11-28 10:01:54 +10:00
8315ae892f
sp_div improved to handle when a has less digits than d
2019-11-28 10:01:54 +10:00
b396ed0984
Merge pull request #2627 from SparkiDev/rsa_sign_vfy
...
Change signature generation to verify by default
2019-11-27 14:08:07 -08:00
e1ebb39296
Merge pull request #2618 from ejohnstown/maintenance-prime
...
Maintenance: Prime
2019-11-27 14:06:23 -08:00
ff85cc7740
Merge pull request #2622 from SparkiDev/ber_to_der_rework
...
Rework BER to DER to not be recursive
2019-11-27 14:05:36 -08:00
1026c4359d
Cast XMALLOC
2019-11-27 14:47:48 -06:00
acdfc514b3
Use memset initialize
2019-11-27 11:09:57 -08:00
cc722468be
Maintenance: ASN.1
...
1. Add an additional check in GetCertHeader() to see that sigIndex is
bounded by maxIdx.
2019-11-27 10:43:51 -08:00
806db8096c
Replace use of vasprintf
2019-11-27 11:00:28 -06:00
b06cee333c
Add error on EOF
2019-11-27 17:46:15 +01:00
29a8262ea4
Only test X509_NAME_print_ex when defines enabled
2019-11-27 17:46:15 +01:00
0f4a002f4f
Formatting
2019-11-27 17:46:15 +01:00
9be1b4cfd8
Remove tabs
2019-11-27 17:46:15 +01:00
944d5e1045
Don't count null char in better way
2019-11-27 17:46:15 +01:00
7c1a1dfd1f
Variable declaration at start of scope
2019-11-27 17:46:15 +01:00
308c5f3370
Fix implicit cast
2019-11-27 17:46:15 +01:00
5f39e12b21
Fix leak in SSL_CTX_set0_chain
2019-11-27 17:46:15 +01:00
8dde06bbca
Fix compile errors
2019-11-27 17:46:15 +01:00
dd07344499
SSL_SESSION_dup
2019-11-27 17:46:15 +01:00
3c9d191a5b
Don't propogate ASN_NO_PEM_HEADER from wolfSSL_load_client_CA_file
2019-11-27 17:46:15 +01:00
1962159d89
more NGINX defines
2019-11-27 17:46:15 +01:00
b71758895e
Add support for SSL_CTX_set0_chain
2019-11-27 17:46:15 +01:00
b7913116c0
Remove redeclaration
2019-11-27 17:46:15 +01:00
9fbc167d0c
Declare at start of scope
2019-11-27 17:46:15 +01:00
d9ab0c4bcb
Check bounds
2019-11-27 17:46:15 +01:00
ea5ac675ed
WIP
2019-11-27 17:46:15 +01:00
f0abd4ea82
WIP
2019-11-27 17:45:49 +01:00
9064de1e75
Set proper WOLFSSL_ASN1_TIME in thisupd and nextupd in wolfSSL_OCSP_resp_find_status
2019-11-27 17:45:49 +01:00
31c0abd610
wolfSSL_X509_NAME_print_ex should not put the null terminator in the BIO
2019-11-27 17:45:49 +01:00
de3c11d55c
opensslall required
2019-11-27 17:45:49 +01:00
a892f2a95a
Changes for nginx 1.15
...
- ssl.c: add to check to overwrite existing session ID if found
- evp.c: wolfSSL_EVP_DecryptFinal* was checking for wrong value
2019-11-27 17:45:49 +01:00
2e487a2463
Init uninitialised values
2019-11-27 07:46:33 -08:00
23878512c6
Change signature generation to verify by default
2019-11-27 10:47:03 +10:00
776f4af7f6
Rework BER to DER to not be recursive
2019-11-27 10:20:32 +10:00
1b63ab0e73
Merge pull request #2623 from SparkiDev/set_ser_rand
...
Generating serial number - clear top bit
2019-11-26 16:14:54 -08:00
2de52c7666
Maintenance: Prime
...
When returning a result from mp_prime_is_prime for normal math, the
result should be MP_YES or MP_NO, not a bare number (1 or 0).
2019-11-26 15:44:30 -08:00
7cb5fe5e2a
Merge pull request #2620 from tmael/ALPN_input
...
Fix alpn buffer overrun
2019-11-26 15:31:56 -08:00
57df5c10c9
Merge pull request #2619 from dgarske/async_mem
...
Fix for Intel QuickAssist asynchronous build
2019-11-26 15:29:04 -08:00
0d69950d07
Merge pull request #2615 from SparkiDev/mp_exptmod_neg_p
...
Handle negative modulus with negative exponent in exptmod
2019-11-26 15:20:54 -08:00
95c9dc9fe8
Merge pull request #2614 from ejohnstown/maintenance-OCSP
...
Maintenance: OCSP
2019-11-26 15:19:27 -08:00
9b7cd6bdfd
Merge pull request #2613 from tmael/evp_aes_gcm
...
Set default IV length for EVP aes gcm
2019-11-26 15:18:27 -08:00
5d41ef171c
Merge pull request #2610 from ejohnstown/maintenance-DTLS
...
Maintenance: DTLS
2019-11-26 15:17:22 -08:00
9ecafa7afe
Merge pull request #2557 from tmael/cert_store_ls_x509
...
Retrieve a stack of X509 certs
2019-11-26 15:16:09 -08:00
55540c6bd3
Replace a compile option check around some filenames for certificate testing.
2019-11-25 16:13:01 -08:00
1ac0b1fc0b
Maintenance: ASN.1
...
1. Undo an earlier change with respect to parsing a long length with
length zero. If BerToDer is disabled, this will be treated as a zero
length. With BerToDer enabled, the conversion will do the right thing.
2019-11-25 16:08:32 -08:00
5e0ca866df
Maintenance: ASN.1
...
1. For certificates, when copying a member of a container, one shouldn't read
beyond the enclosing context.
2019-11-25 16:08:32 -08:00
d389133f33
Maintenance: ASN.1
...
1. Update the ParseCRL function to always obey the length value of a tag.
2019-11-25 16:08:31 -08:00
9753bf627b
Maintenance: ASN.1
...
1. Remove the function Word32ToString and replace with calls to
XSNPRINTF().
2. Simplify DecodePolicyOID(), which converts an ASN.1 OID to a text
string in the form a.b.ccccc.d... Return an error if it gets too long.
2019-11-25 16:08:26 -08:00
Sean Parkinson
toddouska
Eric Blankenhorn
Tesfa Mael
John Safranek
Juliusz Sosinowicz