Commit Graph

1233 Commits

Author SHA1 Message Date
toddouska
89d9accc4d switch user ticket encrypt ctx to WOLFSSL_CTX 2015-06-10 18:13:13 -07:00
toddouska
47af6459d8 add user context to session ticket encrypt callback 2015-06-10 16:32:43 -07:00
toddouska
53bf8ed7cb fix scan-build warnings 2015-06-10 15:24:24 -07:00
Jacob Barthelmeh
e461bc72b8 curve25519 and ed25519 low memory 2015-06-05 15:39:37 -06:00
toddouska
96a298018d simplify padcheck compare 2015-06-05 09:42:10 -07:00
Moisés Guimarães
3d41595ed4 internal.c: refactoring TimingPadVerify to reduce stack usage:
--- variable dummy replaced with ssl object (~250 bytes saved)

internal.c: refactoring VerifyMac to reduce stack usage:
--- variable dummy replaced with ssl object (~250 bytes saved)
2015-05-30 10:44:14 -03:00
John Safranek
77fe4f3a2e Fixes #71. Disable SHA works with TLS, PWDBASED, testing. 2015-05-28 10:25:41 -07:00
Chris Conlon
b4a6ed1d7f Merge pull request #68 from tass-belgium/master
Improved support for PicoTCP on embedded devices
2015-05-26 13:47:45 -06:00
Moisés Guimarães
67a93a5999 fixes trailing white spaces.
adds port mapping in Vagrantfile.
2015-05-22 20:09:01 -03:00
John Safranek
64602d1969 added check for allowed minimum DH key size 2015-05-21 10:11:21 -07:00
John Safranek
9a10210a2a replaced always-true comparison in PrintSessionStats with preprocessor checks 2015-05-19 09:52:30 -07:00
toddouska
bbec7011d4 add session ticket hint interval setter 2015-05-18 13:15:13 -07:00
toddouska
e730aa571c add sanity checks to user session ticket encrypt callback 2015-05-18 09:29:25 -07:00
toddouska
cedd41432c fix windows session ticket warnings 2015-05-15 16:10:38 -07:00
toddouska
2212381925 add session ticket key returns for reject and use but create 2015-05-15 14:58:16 -07:00
toddouska
f6d12bfc37 initial server side session ticket support 2015-05-15 12:51:44 -07:00
John Safranek
4e482a348e wrapped the min() inline functions with better preprocessor checks 2015-05-13 14:53:11 -07:00
toddouska
dde4b29462 add handshake done callback with ability to end connection 2015-05-09 11:04:47 -07:00
John Safranek
20851c62f9 modify Encrypt and Decrypt switch statements for single return 2015-05-05 14:45:43 -07:00
toddouska
162214924f simplify build verify hashes to one spot 2015-04-30 09:22:25 -07:00
Daniele Lacamera
96bb6e8cd7 Improved support for PicoTCP on embedded devices 2015-04-23 12:35:05 +02:00
John Safranek
99a9d221bc in sniffer, free handshake resources in the right order 2015-04-17 13:42:08 -07:00
toddouska
281decae46 fix github issue #65, don't undef with arg to options.h 2015-04-16 10:36:51 -07:00
toddouska
05b8e1274d add WOLFSSL_SESSION_STATS and optionally WOLFSSL_PEAK_SESSIONS which will slow down servers under load 2015-04-15 13:17:33 -07:00
toddouska
1f8701540d change SESSION_STATS to PRINT_SESSION_STATS, will add WOLFSSL_SESSION_STATS 2015-04-14 12:35:24 -07:00
toddouska
ecfcc533c8 add library version getters 2015-04-10 10:38:31 -07:00
toddouska
edd6b91b56 on send dhe server_key_exchange only do hash(es) required 2015-04-09 09:58:16 -07:00
toddouska
86f2b9a98f turn off DTLSv1 functions for disable old tls 2015-04-08 13:29:25 -07:00
toddouska
b59d922d51 on send echde server_key_exchange only do hash(es) required 2015-04-08 11:22:22 -07:00
toddouska
cf95bc23bb on process server_key_exchange only do hash(es) required 2015-04-07 14:57:40 -07:00
toddouska
0519085c69 add SOCKET_PEER_CLOSED_E vs general SOCKET_E for case where peer closes underlying transport w/o close notify 2015-04-06 11:40:51 -07:00
toddouska
d67a031132 fix scr gcm mode 2015-04-05 09:13:11 -07:00
toddouska
a7d004e47d add sha512 sig_algo processing for server_key_exchange and cert_verify messages 2015-04-04 09:49:34 -07:00
toddouska
b1316796f9 allow CTX set tmp dh w/o asn and certs too 2015-04-02 11:54:16 -07:00
Vikram Adiga
ad29c262d4 use Seconds APIs instead of MYTIME APIs for TI-RTOS 2015-04-01 16:51:54 -07:00
John Safranek
50e829ea79 when keeping peer cert, alt names were getting lost for the peer name check 2015-04-01 15:36:55 -07:00
toddouska
a5f42cc9ca fix opensslextra time shadow on some systems 2015-03-31 13:56:12 -07:00
toddouska
5319eb8f38 fix github issue #56, have tls layer use time_overrides for ticks if available and not using explicit user_ticks 2015-03-31 13:41:10 -07:00
John Safranek
0458e21211 1. In the sniffer, replace call to strnlen with strlen and
accounted for size differences (fixes issue #60)
2. fixed overrun with long SNI names in hello messages
2015-03-31 09:51:55 -07:00
toddouska
3ca0bc0d66 fix windows warning 2015-03-29 14:31:09 -07:00
toddouska
e73b76c8ca fix warning for compilers that don't understand bitfield size 2015-03-29 14:18:52 -07:00
toddouska
500ee73be4 fix opensslextra set_timeout assumes long > int 2015-03-29 12:00:04 -07:00
toddouska
c9a0c9a797 fix some psk warnings 2015-03-27 19:20:31 -07:00
toddouska
32c9f00189 only alloc poly auth size if cipher suite needs it 2015-03-27 15:38:01 -07:00
toddouska
495fbe087e allow dh to be used w/o certs and asn 2015-03-27 14:28:05 -07:00
toddouska
ff11df2c14 enable chacha - poly by default 2015-03-27 11:22:42 -07:00
toddouska
af1fd4719a enable gcm by default 2015-03-27 11:12:42 -07:00
toddouska
d655fb9d74 remove rc4 from default build 2015-03-27 10:17:22 -07:00
Chris Conlon
d4a3e83582 fix OPENSSL_EXTRA + NO_MD5 build, fixes issue #26 2015-03-26 13:52:06 -06:00
John Safranek
0f4216360e fix StoreExternalIV and SetInternalIV for 3DES 2015-03-26 11:09:36 -07:00