Commit Graph

829 Commits

Author SHA1 Message Date
John Safranek a7ae5155ce fix defragment of handshake messages in TLS 2015-10-06 20:18:55 -07:00
John Safranek d6a5bfb53d Revert "revert defragment of handshake messages in TLS"
This reverts commit 6d21d328fb.
2015-10-05 15:31:39 -07:00
toddouska 27450aca7d increment explicit iv and zero nonce even on GCM/CCM failure 2015-10-02 11:24:32 -07:00
Jacob Barthelmeh 10276944d3 return value on AES CCM encrypt 2015-10-02 11:40:47 -06:00
Ludovic FLAMENT 86d74efc37 return IdeaCbc{Encrypt/Decrypt} error code 2015-09-24 08:13:43 +02:00
Ludovic FLAMENT f68400da40 add IDEA cipher (ECB and CBC mode)
add support of SSL_RSA_WITH_IDEA_CBC_SHA cipher suite (SSLv3, TLS v1.0 and TLSv1.1)
2015-09-23 16:16:39 +02:00
Jacob Barthelmeh 6d21d328fb revert defragment of handshake messages in TLS 2015-09-16 11:57:58 -06:00
Jacob Barthelmeh 578ea44e1e check on return values of QSH 2015-09-15 17:46:45 -06:00
toddouska 764fadeb3b add sanity checks to internal RsaVerifySign inputs 2015-09-15 16:16:04 -07:00
toddouska 797bcb6340 Fix Visual Studio warning/errors 2015-09-15 12:13:11 -07:00
toddouska 9bdcd59338 fix dtls cookie leak 2015-09-14 17:13:16 -07:00
John Safranek b62e5d57fe 1. improved DTLS cookie generation, uses HMAC and parts of Client Hello
message
2. add function to set the cookie Hmac key
3. removed server state for hello verify message
2015-09-14 16:05:30 -07:00
toddouska 21cf0e437e add --enable-cryptonly build option 2015-09-10 16:24:25 -07:00
toddouska 80c5fecdb2 user CA adds use same policy as Context Verify for verification 2015-09-09 12:19:53 -07:00
toddouska 5bbcda3c79 add TLS signature fault checks indpendent of build options, plugins, callbacks, etc 2015-09-09 09:59:10 -07:00
John Safranek 58a36566cb allow for DTLS1.0 version record headers for client hello and hello verify 2015-09-03 15:35:01 -07:00
Takashi Kojo efb06e2559 rolling back internal.c for master conflict 2015-09-01 09:29:44 +09:00
Takashi Kojo 2f3b7d3567 mdk portability, fixed declaration after executing statements 2015-08-30 13:38:52 +09:00
Nickolas Lapp 0b72b28b13 reorganize InitSSL. Rename forcekeep->cacheOnly. Free instead of decrement 2015-08-27 12:57:43 -06:00
Nickolas Lapp 900edc04e5 Adding sni to mimic openssl functionality 2015-08-27 12:57:43 -06:00
Chris Conlon 5e95740d93 Freescale: Add KSDK Bare Metal build, TRNG support 2015-08-27 11:45:40 -06:00
toddouska f2db01bef2 fix defrag memory errors 2015-08-26 12:10:10 -07:00
John Safranek cc216d5079 InitSuites to disallow stream ciphers for DTLS sessions 2015-08-26 14:16:13 -04:00
John Safranek 7d067dfec6 defragment the handshake messages in TLS 2015-08-25 21:09:19 -04:00
John Safranek b0d90918f9 fix issue between certificate fragmentation and secure renegotiation 2015-08-18 21:00:17 -07:00
toddouska 15995d1b2c Merge branch 'TI_hash' of https://github.com/kojo1/wolfssl into kojo-ti 2015-08-18 12:27:57 -07:00
John Safranek 5cffea7aac clean static analysis report in cert fragmentation 2015-08-17 17:27:29 -07:00
Takashi Kojo 6376736129 HashFree for TI hash memory leak 2015-08-15 16:51:23 +09:00
John Safranek 4fb0519b37 clean up GCC and VS build warnings 2015-08-14 15:06:12 -07:00
Chris Conlon 34ac1a33f3 Freescale: Add support for KSDK (FREESCALE_KSDK_MQX) 2015-08-14 15:21:23 -06:00
John Safranek d12308a053 SendCertificate fragments the message based on max_fragment setting for TLS and DTLS. 2015-08-14 11:06:42 -07:00
Takashi Kojo e6ab7de923 TI hardware hash driver memory leak in dummy rounds 2015-08-14 07:44:13 +09:00
John Safranek 8cc9c62911 skip past the pad and mac when skipping a finished message in DTLS 2015-08-13 14:29:56 -07:00
toddouska 46e7e9acf9 disable SSLv3 by default 2015-08-12 16:39:13 -07:00
Jay Satiro e179da07d0 fix mixed declarations by moving them to their block start
In Visual Studio <= 2012 C99 mixed declarations aren't supported.
2015-08-10 01:54:25 -04:00
John Safranek 106abb873f skip the sanity check on a duplicate change cipher spec message in DTLS mode, they are allowed 2015-08-08 23:57:02 -07:00
Chris Conlon 0cd893a51b Freescale: Use new I/O where applicable 2015-08-07 16:22:31 -06:00
Chris Conlon 5d40c5f566 Rename RNG to WC_RNG for Freescale, add NO_OLD_RNGNAME define to completely remove RNG type usage 2015-08-07 11:53:19 -06:00
toddouska cc604d23be fix psk no server hint sanity check 2015-07-30 16:45:31 -07:00
John M. Schanck 53fb9188e7 Use ntru functions from stable libntruencrypt api
ntru_crypto_external_drbg_instantiate has been renamed
to ntru_crypto_drbg_external_instantiate in the 1.0.0
release of libntruencrypt. Made various other small changes
to build against libntruencrypt.
2015-07-16 15:43:50 -04:00
Nickolas Lapp 96cf16848c Stunnel Base Commit 2015-07-14 14:56:26 -06:00
Jacob Barthelmeh df8b48cd0f NTRU suites from earlier code 2015-07-11 12:52:22 -06:00
Jacob Barthelmeh 14723b7e65 QSH (quantum-safe handshake) extension 2015-07-07 09:55:58 -06:00
Moisés Guimarães ca01cebd28 adds SNI abort option to turn SNI mandatory for WebSocket (RFC6455 page 17).
@see WOLFSSL_SNI_ABORT_ON_ABSENCE and the xxxSNI_SetOptions() functions for further details.
2015-07-01 19:21:18 -03:00
toddouska d49a35597f Merge branch 'master' of github.com:wolfssl/wolfssl 2015-06-18 10:16:06 -07:00
toddouska 9e7cb81d5a Merge branch 'TI_hash' of https://github.com/kojo1/wolfssl into kojo-ti 2015-06-18 09:05:13 -07:00
Takashi Kojo 4e546d92d9 BuildMD5/SHA for GetHash, RestorePos 2015-06-18 14:25:48 +09:00
John Safranek 7d9a1ccf42 allow storage of out of order zero length DTLS handshake messages 2015-06-17 12:37:10 -07:00
John Safranek 19cad21a46 fix bug when defragmenting out of order DTLS handshake messages 2015-06-16 21:49:01 -07:00
toddouska 55de33f493 Merge branch 'TI_hash' of https://github.com/kojo1/wolfssl into kojo-ti 2015-06-16 11:38:04 -07:00