Chris Conlon
d51b958334
use ForceZero instead of MEMSET in PKCS7 signed attribute handling
2019-07-16 08:13:47 -07:00
Sean Parkinson
8112c1236d
Don't pick RSA PSS if not compiled in
2019-07-16 14:59:01 +10:00
Sean Parkinson
9af9941b90
Fixes for TLS 1.3 and OCSP Stapling
...
Create the OCSP Response for Stapling and TLS 1.3 when parsing.
When parsing OCSP stapling extension with TLS 1.3, use a new extension
object if it was created.
Set the extension size to 0 before writing extensions when sending a TLS
1.3 Certificate message.
2019-07-16 13:52:36 +10:00
toddouska
d620433d1d
Merge pull request #2209 from tmael/maintenanceDefects
...
Increased ciphers buffer size for testsuite and ECC API for getting curve from dp
2019-07-15 16:49:13 -07:00
toddouska
4e648dd35f
Merge pull request #2347 from JacobBarthelmeh/HardwareAcc
...
adjust time.h for port due to tm struct change
2019-07-15 15:27:58 -07:00
John Safranek
3cdb4f8bf0
Sniffer Watch Cert Chain
...
Modifed the sniffer watch callback so it provides a SHA-256 hash of the
peer certificate, as before, and the entire certificate chain sent by
the server in the Certificate handshake message. The chain is taken
directly from the message payload, unprocessed. It'll be a list of pairs
of 24-bit certificate length and a DER encoded certificate, all in
network byte order.
2019-07-15 14:07:22 -07:00
Chris Conlon
7367da3fb6
sort PKCS7 signed attributes when generating bundle
2019-07-15 13:27:49 -07:00
Jacob Barthelmeh
6e6c93624a
free test RSA key after use
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
cba8a7f155
free buffer when using small stack
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
4362ce5f6b
fix expected size and add sanity checks
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
a25d04044a
save rid for kari callback
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
60fc9b3a1d
add test for manual verify
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
d33a95352a
fix check on ret value and add test case
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
f79a119c82
add storing sig/digest if no certs in bundle
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
d7a86de969
add wrap CEK callback, test, and adjustment for fwWrappedFirmwareKey
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
84653a7fb5
improvements on test code
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
a7a51d8f33
scan-build warnings / fixes
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
ab0029f9ac
add setter function for ctx and pkcs7 callback, add test cases
2019-07-15 12:32:19 -06:00
Jacob Barthelmeh
2972b1c467
getter for signerinfo SID and decrypt callback
2019-07-15 12:26:11 -06:00
Chris Conlon
5743a1c80f
Merge pull request #2341 from miyazakh/fix_ricoh_buildfailure
...
fix build failure when enabling MYSQL_COMPATIBLE
2019-07-15 10:10:34 -06:00
Chris Conlon
9d9495f8b6
allow CSR challenge pass to be encoded as PrintableString
2019-07-12 16:23:48 -07:00
Jacob Barthelmeh
051112a101
adjust time.h for port due to tm struct change
2019-07-12 13:55:04 -06:00
toddouska
b4765a5c9e
Merge pull request #2340 from JacobBarthelmeh/Testing
...
fsanitize report fixes
2019-07-11 11:18:09 -07:00
toddouska
88f923a2a1
Merge pull request #2338 from ejohnstown/md5-null-suite
...
RSA-NULL-MD5 cipher suite
2019-07-11 11:15:48 -07:00
Hideki Miyazaki
3756a2c8c7
fix build failure when enabling MYSQL_COMPATIBLE
2019-07-11 09:00:03 +09:00
Jacob Barthelmeh
a6cc9af1fc
free old peer RSA key in secure renegotiation when getting new one
2019-07-10 17:07:16 -06:00
Jacob Barthelmeh
6c9fac2a71
add wolfSSL_RAND_Cleanup to match wolfSSL_RAND_seed call on init
2019-07-10 16:43:44 -06:00
Jacob Barthelmeh
85ce959031
free peer cert overwritten by secure renegotiation
2019-07-10 16:04:42 -06:00
John Safranek
45b280a53e
RSA Null MD5 cipher suite
...
1. Add the cipher suite TLS_RSA_WITH_NULL_MD5 for use with the sniffer.
2. Added TLS_RSA_WITH_NULL_MD5 to the suite test.
2019-07-10 14:32:14 -05:00
kaleb-himes
d7b50874f6
Fix leak in dh_test
2019-07-10 13:28:00 -06:00
toddouska
92bd585f25
Merge pull request #2329 from JacobBarthelmeh/SanityChecks
...
scan-build fixes
2019-07-10 10:23:39 -07:00
Martin Kinčl
996cef6db2
Added stdio.h include to types.h.
2019-07-10 18:26:43 +02:00
Chris Conlon
9cd6a992c5
Merge pull request #2295 from kojo1/RSA4096
...
Static RSA4096
2019-07-10 09:40:41 -06:00
toddouska
d88458a447
Merge pull request #2322 from SparkiDev/int_is_prime_fix
...
Fix prime testing to do t iterations of random values in range
2019-07-09 08:03:30 -07:00
toddouska
9daccb3300
Merge pull request #2320 from SparkiDev/tls_alerts
...
Send more alerts as per TLS specification
2019-07-09 08:02:32 -07:00
toddouska
964fd95a43
Merge pull request #2335 from SparkiDev/tls_pss_fix
...
Fix duplicate definitions in internal.h (new PSS defines)
2019-07-09 08:01:10 -07:00
kaleb-himes
3e6246af59
Honor the status from peer and do not do internal OCSP lookup regardless
...
Item 2) Suggestion from Sean implemented: "Limit the message types"
Item 3) Removed a hard tab
2019-07-09 07:09:09 -06:00
Sean Parkinson
e01f9961ac
Fix duplicate definitions in internal.h (new PSS defines)
2019-07-09 08:49:04 +10:00
kaleb-himes
b8c6bc0d7f
Changes following peer review, add defines to disable for any HW port
2019-07-08 16:28:35 -06:00
toddouska
b7986ccb17
Merge pull request #2332 from SparkiDev/poly1305_arm64
...
Improve perfomance of Poly1305 on ARM64
2019-07-08 15:08:25 -07:00
toddouska
4d13121de1
Merge pull request #2331 from SparkiDev/sp_c32_fix
...
Fix for C32 implementation in div
2019-07-08 15:06:16 -07:00
Chris Conlon
0bb6b388c0
Merge pull request #2312 from kojo1/RAND_bytes_2
...
RAND_bytes
2019-07-08 15:30:06 -06:00
toddouska
97a6dc9e7e
Merge pull request #2316 from SparkiDev/tls13_ext_fixes
...
TLS 1.3 extension fixes
2019-07-08 14:13:55 -07:00
toddouska
1bcec1b9ab
Merge pull request #2319 from SparkiDev/tls13_alerts
...
Improve alert sending in TLS 1.3 code from fuzz testing
2019-07-08 14:11:35 -07:00
Jacob Barthelmeh
efe276414b
set internal x509 elements to NULL after free
2019-07-08 15:11:03 -06:00
toddouska
79165ce8cb
Merge pull request #2315 from SparkiDev/tlsx_ext_debug
...
Print out extension data being parsed when WOLFSSL_DEBUG_TLS defined.
2019-07-08 13:59:11 -07:00
toddouska
44b8106da6
Merge pull request #2317 from SparkiDev/asn_nofs_fix
...
Fix for NO_FILESYSTEM builds
2019-07-08 13:32:27 -07:00
toddouska
bd40a59f3e
Merge pull request #2318 from SparkiDev/server_fuzz
...
Changes to server example for fuzz testing
2019-07-08 13:16:17 -07:00
toddouska
36920b1469
Merge pull request #2314 from SparkiDev/tls13_fixes
...
TLS 1.3 ClientHello rework and other fixes
2019-07-08 13:14:37 -07:00
toddouska
d824b78af0
Merge pull request #2323 from dgarske/various_fixes
...
Various fixes, improvements to build options for reduced code size and static benchmarks
2019-07-08 13:02:22 -07:00