ef20276ab5
Merge pull request #2424 from SparkiDev/enc_then_mac
...
Add support for Encrypt-Then-MAC to TLS 1.2 and below
2019-08-30 11:09:04 -07:00
09f80c7f5f
Merge pull request #2439 from miyazakh/fix_espidf_issues
...
Fix build warnings while compiling wolfssl under esp-idf
2019-08-29 16:24:42 -06:00
b8d2ccee83
Merge branch 'master' into phase2_compatibility_APIs
2019-08-29 09:16:41 -07:00
9034e3a0fe
Merge pull request #2432 from embhorn/api_p2
...
Adding compatibility API phase 2
2019-08-29 09:05:01 -07:00
d6bac37def
Fix build warnings while compiling wolfssl under esp-idf
2019-08-29 17:44:44 +09:00
24e98dd05e
Add support for Encrypt-Then-MAC to TLS 1.2 and below
...
An extension is used to indicate that ETM is to be used.
Only used when doing block ciphers - HMAC performed on encrypted data.
2019-08-29 09:00:30 +10:00
87e876d8c6
Match padding macro values and restore EVP non-AES-GCM
2019-08-28 15:45:07 -07:00
a76f719aac
Fix review comment
2019-08-28 10:42:57 -07:00
0c9ba1b361
Adding compatibility API phase 2
2019-08-28 09:29:49 -05:00
dc5d11fef4
Updated with review comments
2019-08-27 15:14:58 -07:00
a49f447e47
Merge pull request #2413 from dgarske/load_ca_nodate
...
Refactor of the verify option for processing X.509 files
2019-08-27 13:20:30 -07:00
b2555d38bc
Jenkins PRB enable options test
2019-08-26 15:43:58 -07:00
0f60ee8a85
Merge pull request #2402 from schlatterbeck/master
...
Fixes for 16-bit systems
2019-08-26 12:41:47 -07:00
5e28dd94a2
OpenSSL compatible APIs:
...
ASN1_STRING_type
EVP_aes_128_gcm
EVP_CIPHER_CTX_ctrl
EVP_PKEY_sign
EVP_PKEY_sign_init
RSA_print
RSA_NO_PADDING
RSA_PKCS1_PSS_PADDING
2019-08-26 12:20:18 -07:00
2c97b040ff
Merge pull request #2419 from dgarske/ctx_sec_reneg
...
Adds use secure renegotiation at CTX level
2019-08-23 12:55:30 -07:00
681de3e41a
Merge pull request #2375 from dgarske/stm32_cubemx_halv2
...
Fixes for STM32F7 and latest CubeMX HAL
2019-08-23 12:28:51 -07:00
67c3751836
Adds new wolfSSL_CTX_UseSecureRenegotiation API for setting secure renegotiation at the WOLFSSL_CTX level.
2019-08-20 16:43:28 -07:00
586b74b05f
Refactor of the verify option for processing X.509 files. Adds support for ignoring date checks when loading a CA using the WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY flag on wolfSSL_CTX_load_verify_buffer_ex and wolfSSL_CTX_load_verify_locations_ex.
2019-08-16 15:19:55 -07:00
487e66394e
adjust wc_i2d_PKCS12 API
2019-08-16 15:19:33 -06:00
489af0cd2b
Merge pull request #2386 from SparkiDev/tls13_integ_only
...
TLS 1.3 and Integrity-only ciphersuites
2019-08-15 16:02:12 -07:00
51c31695bd
Merge pull request #2391 from SparkiDev/tfm_dh_2
...
Specialized mod exponentiation for base 2 in tfm.c and integer.c
2019-08-15 15:59:20 -07:00
1b841363cc
Adding tests
2019-08-15 12:27:23 -05:00
b2b24a06f3
Adding API
2019-08-14 15:09:17 -05:00
48fa6a458c
Adding compatibility API phase 1
2019-08-13 17:09:56 -05:00
b9ddbb974a
perform domain name check on the peer certificate
2019-08-13 09:55:28 -07:00
63c6c47165
Fixes for 16-bit systems
...
Systems with sizof(int) == 2 default to expressions with that size.
So we have to do some explicit casts or use unigned long constants in
some cases.
In ssl.h the prototype of a function was not matching the definition.
This resulted in a type incompatibility on a 16-bit system.
2019-08-10 18:27:29 +02:00
c1938969aa
Convert to pointer to pass static memory
2019-08-06 10:47:30 -07:00
f5f5947616
New OpenSSL compatible APIs:
...
wolfSSL_PEM_write_bio_PKCS7
wolfSSL_PKCS7_SIGNED_new
wolfSSL_X509_subject_name_hash
wolfSSL_CTX_use_PrivateKey_ASN1
wolfSSL_get0_param
wolfSSL_X509_VERIFY_PARAM_set1_host
2019-08-05 17:35:37 -07:00
9acd952ea1
Merge pull request #2374 from dgarske/ecc_params
...
ECC improvement to get curve param and example curve macro check fix
2019-08-02 15:44:20 -07:00
31461dbfb5
Merge pull request #2373 from dgarske/mpint
...
Improvements to atoi, mp_int allocations and STSAFE-A100 error handling
2019-08-02 15:43:20 -07:00
da6fa384d4
Merge pull request #2273 from danielinux/Riot-OS-GNRC
...
RIOT-OS support with GNRC TCP/IP sockets
2019-08-02 15:42:11 -07:00
f5c1c33dba
Fixes for newer STM CubeMX HAL for STM32F7.
2019-08-02 15:12:09 -07:00
0e1d81e63f
Added ability to define your own XATOI
2019-08-02 06:16:41 -07:00
b4673344c0
Adds new wc_ecc_get_curve_params API for getting the ecc_set_type params for a curve index. Fix for example client and server using wrong macro for detecting ECC 256-bit enabled.
2019-08-02 05:50:00 -07:00
2a22179068
Specialized mod exponentiation for base 2 in tfm.c and integer.c
2019-08-02 15:50:08 +10:00
51dfc35aac
TLS 1.3 and Integrity-only ciphersuites
2019-08-02 11:00:18 +10:00
4f0fd2c2f9
Merge pull request #2302 from SparkiDev/ecc_pubkey_check
...
Add checks of public key for ECC and curve25519
2019-08-01 11:50:02 -07:00
7098fdff29
Merge pull request #2382 from SparkiDev/dsa_ct
...
Use a fixed number of bits with DSA gen and sign
2019-08-01 11:48:53 -07:00
a8d2b6b3c8
Removed exception for EXIT_TEST in RIOT
2019-08-01 15:50:16 +02:00
34b2d257cd
[RIOT-OS/GNRC] Renamed GNRC callback functions
2019-08-01 15:50:16 +02:00
e77161ae9a
Riot-OS/GNRC support: reworked after reviewers' comments
2019-08-01 15:50:16 +02:00
1db036eb75
RIOT-OS support with GNRC UDP/IP sockets
2019-08-01 15:50:16 +02:00
81a9779fc4
Merge pull request #2385 from dgarske/minor_items
...
Minor cleanups for spelling and cast warnings
2019-07-30 15:22:29 -07:00
e3653a7a07
Various spelling corrections.
2019-07-29 08:14:07 -07:00
4778dac49f
Add checks of public key for ECC and curve25519
2019-07-29 10:42:44 +10:00
d7b893f250
Use a fixed number of bits with DSA gen and sign
2019-07-29 09:33:11 +10:00
ca87861915
reduce size of state only save and add option to remove peer info
2019-07-26 14:54:44 -06:00
2cd64c748a
Only require XATOI for build-cases that need it.
2019-07-23 15:36:59 -07:00
b0444bcfa1
Refactor to add XATOI for standard library function.
2019-07-23 15:36:59 -07:00
77fda069a8
prepare for release version 4.1.0
2019-07-23 09:27:39 -06:00
toddouska
Chris Conlon
tmael
Hideki Miyazaki
Sean Parkinson
Eric Blankenhorn
David Garske
Jacob Barthelmeh
Ralf Schlatterbeck
Daniele Lacamera