Jacob Barthelmeh
|
bb6582896d
|
add sanity check for wolfSSL_X509_NAME_oneline function
|
2017-06-15 11:55:37 -06:00 |
|
toddouska
|
b778ddfea2
|
Merge pull request #957 from SparkiDev/tls13_updates
Tls13 updates
|
2017-06-14 14:59:11 -07:00 |
|
JacobBarthelmeh
|
c283d4aece
|
Merge pull request #962 from NickolasLapp/linux-sgx
Add LINUX SGX Support for building of wolfSSL static library. See README
|
2017-06-14 15:56:30 -06:00 |
|
toddouska
|
70eddc4336
|
Merge pull request #965 from cconlon/threadx
ThreadX/NetX warning and optional dc_log_printf exclusion
|
2017-06-14 14:56:12 -07:00 |
|
Sean Parkinson
|
89e6ac91bf
|
Improve PSK timeout checks
Post-handshake Authentication
Fix KeyUpdate to derive keys properly
Fix supported curves (not checking ctx extensions)
|
2017-06-14 11:28:53 -07:00 |
|
Chris Conlon
|
ea9e4887e9
|
ThreadX/NetX warning and optional dc_log_printf exclusion
|
2017-06-14 11:12:27 -06:00 |
|
Nickolas Lapp
|
1e94868432
|
Add LINUX SGX Support for building of wolfSSL static library. See README
in IDE/LINUX-SGX/README.md.
|
2017-06-13 17:34:45 -07:00 |
|
David Garske
|
adf819458c
|
Fixes for TLS 1.3 without ECC or RSA. Fix for building without ECC where HAVE_SUPPORTED_CURVES was getting defined because of ENABLED_TLSX.
|
2017-06-13 09:44:14 -07:00 |
|
David Garske
|
af2cbcdbab
|
Added new arg documentation for asyncOkay in doxygen style.
|
2017-06-12 11:42:48 -07:00 |
|
David Garske
|
ce231e0cbc
|
Fixes for asynchronous TLS 1.3. Fixes for PK_CALLBACKS with async. New helper API's for wolfSSL_CTX_GetDevId and wolfSSL_CTX_GetHeap. Fix for build to not include tls13.c if not enabled to suppress empty object file warning. Fix typo in fe_low_mem.c. General cleanup. Extra tls13.c debug messages.
|
2017-06-12 11:42:48 -07:00 |
|
toddouska
|
1d2b4226a4
|
Merge pull request #959 from SparkiDev/tls_pss_fix
Fix check for PSS availability in peer
|
2017-06-12 11:20:29 -07:00 |
|
toddouska
|
7cc455259e
|
Merge pull request #941 from SparkiDev/ed25519
ED25519 with certificates and TLS
|
2017-06-12 10:47:21 -07:00 |
|
Sean Parkinson
|
8dbd9a88ee
|
Fix for CCM - TLS v1.3 needs all nonce/IV bytes
|
2017-06-12 14:21:43 +10:00 |
|
Sean Parkinson
|
044417ba01
|
Fix for cache only SNI and TLS v1.3
|
2017-06-12 09:46:50 +10:00 |
|
Sean Parkinson
|
fdcf25b6d1
|
Fix check for PSS availability in peer
|
2017-06-12 09:05:32 +10:00 |
|
kaleb-himes
|
a00165768c
|
Fix compile error, too many args with --enabl-wpas
|
2017-06-08 13:34:44 -06:00 |
|
Sean Parkinson
|
1db52f0c04
|
Fix to use different PEM header for EDDSA keys
Include new cert and key files in distribution
Fix compile issue when only doing TLS13.
|
2017-06-08 09:26:49 +10:00 |
|
Sean Parkinson
|
613d30bcae
|
ED25519 TLS support
|
2017-06-08 09:26:49 +10:00 |
|
Sean Parkinson
|
5d5ff56336
|
External PSK working in TLS13
|
2017-06-07 17:20:22 +10:00 |
|
toddouska
|
26f106c42b
|
Merge pull request #948 from SparkiDev/tls13_down
Implement TLS v1.3 specified downgrade protection mechanism
|
2017-06-05 16:17:49 -07:00 |
|
toddouska
|
af03b7a4ff
|
Merge pull request #944 from SparkiDev/tls13_20
Updates for Draft 20 of TLS v1.3
|
2017-06-05 14:06:09 -07:00 |
|
Sean Parkinson
|
642795db1b
|
Implement TLS v1.3 specified downgrade protection mechanism
TLS v1.2 implementations whould implement the downgrade protection
mechanism too and so is included.
|
2017-06-05 09:18:46 +10:00 |
|
David Garske
|
c55575665f
|
Cleanup to use WANT_READ instead of async WC_PENDING_E for non-blocking OCSP and CRL.
|
2017-06-02 10:35:26 -07:00 |
|
David Garske
|
b3a85bc2c7
|
Fixes for OCSP and CRL with non-blocking sockets. Fix for OCSP and CRL file descriptor check to allow 0.
|
2017-06-02 09:36:35 -07:00 |
|
Sean Parkinson
|
0b32d0368f
|
Updates for Draft 20 of TLS v1.3
|
2017-06-02 15:59:49 +10:00 |
|
Sean Parkinson
|
4134073c8d
|
Initial revision of SHA-3
|
2017-05-25 09:09:50 +10:00 |
|
toddouska
|
77dbf539c8
|
Merge pull request #934 from JacobBarthelmeh/mysql
some MYSQL updates for cmake and with sun 64 bit
|
2017-05-23 15:01:39 -07:00 |
|
toddouska
|
d2b6ab0796
|
Merge pull request #935 from JacobBarthelmeh/Testing
remove size_t dependency with default build
|
2017-05-23 14:58:50 -07:00 |
|
toddouska
|
6b09a7c6e1
|
Merge pull request #922 from SparkiDev/tls_pss
TLS v1.2 and v1.3 RSA PSS
|
2017-05-23 14:57:10 -07:00 |
|
toddouska
|
9f5f1dd00f
|
Merge pull request #936 from SparkiDev/cplusplus
Compiling with g++ when configured with --enable-distro
|
2017-05-22 16:02:56 -07:00 |
|
toddouska
|
19edd47018
|
Merge pull request #917 from SparkiDev/tls_curve25519
Enable X25519 for Key Exchange in TLS
|
2017-05-22 16:00:00 -07:00 |
|
Sean Parkinson
|
47d04ebaff
|
Fix from review.
|
2017-05-23 08:54:25 +10:00 |
|
Sean Parkinson
|
15a2323c09
|
Compiling with g++ when configured with --enable-distro
|
2017-05-22 10:14:02 +10:00 |
|
Sean Parkinson
|
8920cd89e4
|
Fixes from review
|
2017-05-22 09:09:31 +10:00 |
|
Jacob Barthelmeh
|
398c27d848
|
remove size_t dependency with default build
|
2017-05-19 16:16:08 -06:00 |
|
Sean Parkinson
|
4390f4c711
|
TLS v1.2 and PSS
Cleanup the TLS v1.3 PSS code as well.
Added RSA API wc_RsaPSS_CheckPadding() to check the padding - no longer
a simple memcmp with the digest.
|
2017-05-19 11:49:43 +10:00 |
|
Sean Parkinson
|
5ef977aa3d
|
Put X25519 behind P256
Option to have X25519 prioritized.
Show curve name and DH key size in TLS v1.3.
|
2017-05-19 10:58:43 +10:00 |
|
David Garske
|
d61e0243a3
|
Fixes for building AES key wrap and PKCS7 on Windows. Cleanup snprintf to use XSNPRINTF and changed so define is always setup.
|
2017-05-18 14:44:19 -07:00 |
|
Jacob Barthelmeh
|
2086394a35
|
compatibility of get cipher list function and update cmake files
|
2017-05-18 14:36:34 -06:00 |
|
toddouska
|
4370a01778
|
Merge pull request #921 from dgarske/fix_crl
Fix for CRL issue with XFREE using invalid arg for heap.
|
2017-05-18 09:40:40 -07:00 |
|
Sean Parkinson
|
9fb6373cfb
|
Get PSS going on server side
|
2017-05-18 15:36:01 +10:00 |
|
David Garske
|
c1f82ece7a
|
Fix for CRL issue with XFREE using invalid arg for heap.
|
2017-05-17 16:39:35 -07:00 |
|
toddouska
|
2f15d57a6f
|
Merge pull request #640 from jrblixt/unitTest_api_dev
unit test md5, sha, sha256, sha384, sha512
|
2017-05-17 09:17:32 -07:00 |
|
Sean Parkinson
|
63a6618feb
|
Enable X25519 for Key Exchange in TLS
|
2017-05-17 08:58:12 +10:00 |
|
toddouska
|
4c451a6c61
|
Merge pull request #920 from dgarske/fix_sb_tls
Fix for scan-build warning for possible use of uninitialized `eccKey`
|
2017-05-16 12:56:50 -07:00 |
|
jrblixt
|
6acd5dafa7
|
Changes from Todd's code review.
|
2017-05-16 12:58:07 -06:00 |
|
David Garske
|
79b0311952
|
Fix for scan-build warning src/tls.c:4898:20: warning: The left operand of '!=' is a garbage value.
|
2017-05-16 08:50:06 -07:00 |
|
Sean Parkinson
|
e5fe1a3750
|
Unlock on memory allocation failure.
|
2017-05-16 09:41:17 +10:00 |
|
Sean Parkinson
|
1a08143946
|
Fixup for async on master
|
2017-05-15 10:10:28 +10:00 |
|
Sean Parkinson
|
1e2a6412d7
|
Find the CRL entry again after lock
|
2017-05-15 10:10:28 +10:00 |
|