David Garske
|
e8cf4b5ff0
|
Coverity fixes for TLS 1.3, async, small stack and normal math.
|
2017-05-09 09:13:21 -07:00 |
|
Sean Parkinson
|
46c4adcf4c
|
TLS v1.3 interop fixes
|
2017-05-09 14:49:21 +10:00 |
|
David Garske
|
af0103bc94
|
Fix for Valgrind memory leak with the “ssl->hsHashes”. The DTLS wolfSSL_connect for “IsDtlsNotSctpMode” at line 8134 calls InitHandshakeHashes, but doesn’t free existing. Best overall solution is to make sure and free an existing on InitHandshakeHashes, since WOLFSSL is memset to 0.
|
2017-05-04 14:51:31 -07:00 |
|
Sean Parkinson
|
902f5cf53f
|
Stack size enabled config fix
|
2017-05-04 14:51:31 -07:00 |
|
David Garske
|
570befb63f
|
Fixes for using async. Combine duplicate DoCertificate and DoTls13Certificate code into ProcessPeerCerts. Cleanup of the XMALLOC/XFREE to use ssl->heap.
|
2017-05-04 14:51:31 -07:00 |
|
David Garske
|
253140f37e
|
Fixes for TLS 1.3. Fix issue with wc_AesGcmDecrypt checking for authIn arg (allowed to be NULL). Fix for preMasterSz in TLSX_KeyShare_ProcessEcc. Fix for building with --disable-asn (NO_CERTS). Fix to remove client “-t” option from help, which no longer exists. Added new WOLFSSL_DEBUG_TLS option for new messages added.
|
2017-05-04 14:51:31 -07:00 |
|
David Garske
|
77f9126edf
|
Rebase fixes for TLS 1.3. Getting a decrypt error with the TLS 1.3 test from the SendTls13CertificateVerify.
|
2017-05-04 14:51:31 -07:00 |
|
Sean Parkinson
|
2b1e9973ec
|
Add TLS v1.3 as an option
|
2017-05-04 14:51:30 -07:00 |
|
Jacob Barthelmeh
|
7dd877554b
|
build for windows visual studio with AES GCM
|
2017-05-04 14:14:12 -06:00 |
|
Jacob Barthelmeh
|
9b5340d3af
|
sanity checks before copying copying peer certificate
|
2017-05-04 13:10:46 -06:00 |
|
toddouska
|
e771611c29
|
Merge pull request #891 from JacobBarthelmeh/Testing
sanity check on input buffer index
|
2017-05-03 12:13:43 -07:00 |
|
Jacob Barthelmeh
|
55538b5de0
|
sanity check on input buffer index
|
2017-05-03 10:21:03 -06:00 |
|
David Garske
|
338194be25
|
Fix for scan build warning for TLSX_SNI_GetRequest possible use of null pointer.
|
2017-05-03 07:33:13 -07:00 |
|
Jacob Barthelmeh
|
aa990ed1ce
|
in error case close FILE
|
2017-05-02 14:54:27 -06:00 |
|
Jacob Barthelmeh
|
dbb67d8582
|
warnings for builds of haproxy, nginx, and leanpsk
|
2017-05-02 14:29:53 -06:00 |
|
toddouska
|
27aafd674a
|
Merge pull request #886 from dgarske/fixes_coverity2
Fixes for coverity scan (part 2)
|
2017-05-02 08:53:03 -07:00 |
|
John Safranek
|
4135279f82
|
Merge pull request #843 from kaleb-himes/dtls-interop
DTLS update per RFC 6347 Section 4.2.3
|
2017-05-01 19:29:27 -07:00 |
|
toddouska
|
f61380da21
|
Merge pull request #870 from kaleb-himes/PSK-UPDATE
Update PSK identity length per RFC 4279 - section 5.3
|
2017-05-01 19:04:32 -07:00 |
|
David Garske
|
3647e50c17
|
Fixes for the GrowInputBuffer and GrowOutputBuffer changes to only use align when WOLFSSL_GENERAL_ALIGNMENT > 0.
|
2017-05-01 18:48:54 -07:00 |
|
David Garske
|
9491027c85
|
Fixes for coverity scan (part 2).
|
2017-05-01 16:34:24 -07:00 |
|
toddouska
|
1a0b408658
|
Merge pull request #883 from dgarske/fixes_coverity
Fixes for coverity scan
|
2017-05-01 16:30:04 -07:00 |
|
David Garske
|
f19cf4cb34
|
Fix the client PSK callback to always null terminate after callback. Remove the +1 on the test.h examples for PSK callbacks.
|
2017-05-01 12:10:05 -07:00 |
|
John Safranek
|
7a1776e931
|
Merge pull request #881 from cconlon/sniffer
fix sniffer with AES-GCM, add scratch authTag buffer
|
2017-05-01 11:51:01 -07:00 |
|
Jacob Barthelmeh
|
450ff55d83
|
fix warnings and errors with FreeBSD PowerPC
|
2017-04-28 17:57:48 -06:00 |
|
David Garske
|
db63fe83d4
|
Initial pass at fixes for coverity scan.
|
2017-04-28 14:59:45 -07:00 |
|
toddouska
|
4387e1f08e
|
Merge pull request #855 from insane-adding-machines/master
Added support for HAproxy load balancer
|
2017-04-28 13:10:58 -07:00 |
|
David Garske
|
c92b497ea3
|
Fix async merge error which duplicated the wolfSSL_new RNG creation and caused a memory leak. Fix for build error with plainDigestSz not being initialized.
|
2017-04-28 10:11:17 -07:00 |
|
Chris Conlon
|
b8917baa6a
|
fix sniffer with AES-GCM, add scratch authTag buffer
|
2017-04-27 15:22:30 -06:00 |
|
David Garske
|
3e6243eb08
|
Fix for scan-build issues with possible use of null’s in evp.c wolfSSL_EVP_CipherFinal out arg and DoCertificate args->certs. Removed obsolete client example help arg “-t”.
|
2017-04-27 10:53:47 -07:00 |
|
Chris Conlon
|
1f923a11ee
|
Merge pull request #874 from dgarske/fix_builderrors
Build fixes to address Jenkins reports
|
2017-04-25 15:14:37 -06:00 |
|
David Garske
|
fb90a4e498
|
Fix issue with PSK max length by adding 1 for the null terminator on the strings and allowing up to 128 characters for the PSK. Improved the test.h example for PSK callbacks.
|
2017-04-25 11:43:45 -07:00 |
|
David Garske
|
be6b12a350
|
Build fixes to address Jenkins reports. Additionally tested with enable-distro and small-stack identified issue in ssl.c (note: we need to add this combination to Jenkins).
|
2017-04-25 11:10:36 -07:00 |
|
David Garske
|
8b0784bdfa
|
Fix build error with CRL and WOLFSSL_SMALL_STACK.
|
2017-04-24 14:08:59 -07:00 |
|
Maxime Vincent
|
6ada67f93f
|
Prefix stubs with wolfSSL_
|
2017-04-24 11:43:19 +02:00 |
|
Maxime Vincent
|
7bd7de350c
|
More fixes for haproxy port
|
2017-04-24 10:41:39 +02:00 |
|
Daniele Lacamera
|
7058211860
|
Merge from latest masterbranch
|
2017-04-24 06:18:44 +02:00 |
|
Maxime Vincent
|
db835da00b
|
Fixes after wolfSSL feedback
|
2017-04-22 10:58:05 +02:00 |
|
JacobBarthelmeh
|
3600371abf
|
Merge pull request #848 from ghoso/des_ecb_encrypt_impl
openSSL compatibility API
|
2017-04-21 14:05:22 -06:00 |
|
Jacob Barthelmeh
|
a8115d51fa
|
add back in haveTrustPeer variable and put macro guard on WC_RNG typedef
|
2017-04-18 16:53:02 -06:00 |
|
Daniele Lacamera
|
3279865610
|
Fixes after jenkins report
https://test.wolfssl.com/jenkins/job/windows_pull_request_builder/1453/
|
2017-04-18 18:47:04 +02:00 |
|
Daniele Lacamera
|
bf877a636f
|
Merge from masterbranch
|
2017-04-18 18:34:14 +02:00 |
|
toddouska
|
7df7a07a68
|
Merge pull request #863 from JacobBarthelmeh/Testing
fix old version of AEAD cipher suite
|
2017-04-18 09:33:00 -07:00 |
|
Jacob Barthelmeh
|
999328f2a0
|
fix old version of AEAD cipher suite
|
2017-04-14 10:32:15 -06:00 |
|
David Garske
|
7779a64cae
|
Fix for building with NO_OLD_TLS and WOLFSSL_ALLOW_TLS_SHA1.
|
2017-04-13 21:26:20 -07:00 |
|
Daniele Lacamera
|
ef231a039d
|
Updated to latest masterbranch
|
2017-04-13 15:28:19 +02:00 |
|
Go Hosohara
|
fe215c4a57
|
Fix DES_ecb_encrypt function in terms of reviewing point.
|
2017-04-13 12:31:52 +09:00 |
|
dgarske
|
8ee9e4ff8b
|
Merge pull request #851 from toddouska/nosessid
don't send session ID on server side if session cache is off unless w…
|
2017-04-12 14:50:43 -07:00 |
|
toddouska
|
3abcff4db5
|
Merge pull request #850 from JacobBarthelmeh/Testing
fix invalid check on unsigned type
|
2017-04-12 13:56:44 -07:00 |
|
toddouska
|
3810571e0d
|
Merge pull request #715 from dgarske/async_intelqa
Intel QuickAssist (QAT) support and async enhancements/fixes
|
2017-04-12 13:54:19 -07:00 |
|
toddouska
|
b1d59a2334
|
don't send session ID on server side if session cache is off unless we're echoing session ID as part of session tickets
|
2017-04-12 10:54:19 -07:00 |
|