d0c2e9b7a2
switch comverge settings to ecc by default
2013-06-26 17:05:30 -07:00
29b32e582a
DTLS IPv6 Hello Cookie Update
...
1. Add support for IPv6 addresses when calculating DTLS Cookie.
2. Simplify cookie calculation.
2013-06-26 16:32:01 -07:00
0d0fc27e42
Fixed DecodeAuthKeyId fail case not returning.
2013-06-26 11:16:17 -07:00
ed82f06382
Merge branch 'master' of github.com:cyassl/cyassl
2013-06-26 11:05:00 -07:00
60c2388ae7
fix potential NetX packet memory leak
2013-06-26 11:03:54 -07:00
f3af0124e4
Fixed DecodeAltNames extension falling through to next case.
2013-06-25 13:37:43 -07:00
7fd3b8a993
Fixed error string for example server private key file failure.
2013-06-25 13:14:24 -07:00
87eb94b7c4
Merge branch 'master' of github.com:cyassl/cyassl
2013-06-24 14:02:40 -07:00
b51d6f3b8f
add NetX default IO context handling
2013-06-24 14:00:48 -07:00
c3cb9b3b43
add IDE files to distribution
2013-06-24 12:00:21 -07:00
0c34ecb451
OCSP Updates
...
1. Add option to example server and client to check the OCSP responder.
2. Add option to example server and client to override the URL to use
when checking the OCSP responder.
3. Copy the certificate serial number correctly into OCSP request.
Add leading zero only if MS bit is set.
4. Fix responder address used when Auth Info extension is present.
5. Update EmbedOcspLookup callback to better handle the HTTP
response and obtain the complete OCSP response.
2013-06-24 10:47:24 -07:00
e0a84521c5
Make alert description and level enumerations public.
2013-06-21 14:56:42 -07:00
17ab84eb07
Update call to DoAlert()
...
When handling the alerts, the return code wasn't checked for error codes. A corrupted alert message could cause a control flow issue.
2013-06-19 15:01:13 -07:00
42a0f3500f
Update AES-GCM and AES-CCM to use AES-NI
...
1. Added the assembly functions to do AES-ECB.
2. Updated AesEncrypt and AesDecrypt to use the assembly functions
if available.
3. Modified the AES-GCM and AES-CCM key setup functions to use the
the AES-NI key setup if availble.
4. Added tests for the AES-ECB encrypt and decrypt.
5. Only include stdio.h for AES when DEBUG_AESNI is enabled
6. If using local key setup, skip using AES-NI for basic Encrypt
and Decrypt.
2013-06-19 14:52:58 -07:00
affbb3ef27
Merge branch 'master' of https://github.com/cyassl/cyassl
2013-06-19 17:20:48 -03:00
4502716fc4
Merge branch 'master' of https://github.com/cyassl/cyassl
2013-06-19 17:04:43 -03:00
b5ba31501c
make stacksize more portable
2013-06-19 12:56:25 -07:00
25e910a0a9
max fragment length tests and fixes
2013-06-19 16:38:57 -03:00
5f3ee80407
added:
...
- max fragment length extension;
- CyaSSL_SNI_GetRequest() to get client's request at server side;
- Automated tests for SNI;
2013-06-19 15:45:06 -03:00
85d25798a5
update ntru cert expires dates, update crls while at it, don't turn on skid for crls since openssl/firefox don't use by default and cyassl needs crl extension parsing
2013-06-17 14:48:51 -07:00
d02af46256
windows build warning fixes
2013-06-17 12:26:21 -07:00
a1f25a9299
release 2.7.0 init
2013-06-17 12:06:37 -07:00
8c70b11528
add newSession flag to SetServerID to do full handshake w/ new session
2013-06-14 15:29:18 -07:00
7f7c595d10
differentiate between THREADX and RTP_SYS
2013-06-14 13:45:25 -07:00
9559f09028
warning fixes
2013-06-13 12:13:46 -07:00
b40c2c0b1f
Fixed issue with no_server/no_client optional compile losing two functions
2013-06-06 21:59:05 +02:00
33a7d7481d
Merge branch 'master' of github.com:cyassl/cyassl
2013-06-03 14:57:40 -07:00
ae84982777
add STACK_TRAP to track stack use on client, will seqfault if exceed limit to see where use is too high, doesn't work with pthread_create()
2013-06-03 14:56:37 -07:00
f1d1898ddf
Added new option to SNI: CYASSL_SNI_ANSWER_ON_MISMATCH
...
Added new function to SNI API: CyaSSL_SNI_Matched()
2013-06-03 17:55:06 -03:00
cb2082edee
changed CYASSL_SNI_ABORT_ON_MISMATCH to CYASSL_SNI_CONTINUE_ON_MISMATCH
2013-06-03 10:04:49 -03:00
4ad91673ca
fixed description for filesystem configure option to match default
2013-05-31 17:57:08 -07:00
ebd03368c7
for DTLS handshakes, put change cipher spec and finished messages in same datagram
2013-05-31 13:48:49 -07:00
79fad81c32
shrinking function names
2013-05-30 15:40:10 -03:00
5c665fe614
Added options to SNI (now it is possible to choose whether or not to abort on a SNI Host Name mismatch)
...
Exposed SNI Type at ssl.h
2013-05-30 15:26:41 -03:00
baa012b1d9
change = to space for user options defines with = value
2013-05-29 15:03:27 -07:00
b2ef938cbe
fix CYASSL_MALLOC_CHECK hard tabs and extra function not needed
2013-05-29 11:18:16 -07:00
af48800c58
Merge branch 'MDK.STM.LPC' of https://github.com/kojo1/cyassl-test
2013-05-28 11:59:52 -07:00
2b59554245
fix cipherSuite0 byte in sniffer, so ECC is recognised correctly.
2013-05-28 10:56:13 +02:00
cf25dfb16e
Config-BARE-METAL default
2013-05-26 14:02:58 +09:00
1680b47ac6
Release for STM/LPC
2013-05-26 12:17:06 +09:00
e4a95342f1
Merging cyassl/master and STM.LPC
2013-05-26 10:05:35 +09:00
9382f74f2e
Marging cyassl/master and STM.LPC
2013-05-26 09:47:51 +09:00
4b9c3d3512
Merge remote-tracking branch 'cyassl/master' into STM.LPC
...
Conflicts:
IDE/MDK-ARM/MDK-ARM/CyaSSL/config-FS.h
IDE/MDK-ARM/MDK-ARM/CyaSSL/config-RTX-TCP-FS.h
IDE/MDK-ARM/MDK-ARM/CyaSSL/cyassl_MDK_ARM.c
IDE/MDK-ARM/MDK-ARM/CyaSSL/cyassl_MDK_ARM.h
IDE/MDK-ARM/MDK-ARM/CyaSSL/main.c
IDE/MDK-ARM/MDK-ARM/CyaSSL/shell.c
IDE/MDK-ARM/MDK-ARM/CyaSSL/ssl-dummy.c
IDE/MDK-ARM/MDK-ARM/config/File_Config.c
IDE/MDK-ARM/MDK-ARM/config/RTX_Conf_CM.c
IDE/MDK-ARM/Projects/MDK-ARM-STM32F2xx.uvopt
IDE/MDK-ARM/Projects/MDK-ARM-STM32F2xx.uvproj
ctaocrypt/src/random.c
src/internal.c
2013-05-26 09:27:06 +09:00
9753e46721
minor OCSP update
...
1. When doing the HTTP transaction, use recv() and send().
2. When a cert doesn't have an Auth Info extension, and not using
an override server, it is considered good.
3. decode_url() should return -1 in case of error.
4. When decoding HTTP response, process all the headers, skipping all
of those that are not-processed.
2013-05-24 17:23:07 -07:00
616e4a66dd
Merge branch 'master' of github.com:cyassl/cyassl
2013-05-23 15:57:00 -07:00
8b90414f2a
add POSITIVE_EXP_ONLY for fastmath stack reduction when positive exponents only
2013-05-23 15:55:22 -07:00
2030bab8d8
fixed shift, cast and name for extensions semaphore.
2013-05-23 17:02:39 -03:00
4ed2cf4b6e
Earlier DTLS transmit patch, moved local variable definition to top of block
2013-05-22 18:36:13 -07:00
8df0e43384
fix merge differences from this week
2013-05-22 15:50:13 -07:00
acaa2c02bf
Fixed unencrypted TLS alerts having extra data, ssn12
2013-05-21 18:21:22 -07:00
toddouska
John Safranek
Moisés Guimarães
Jasper Spaans
kojo