Nickolas Lapp
|
f27aca0956
|
Remove redundant dynTicket pointer. Reorder struct for packing/alignment
|
2016-04-25 11:00:31 -06:00 |
|
Nickolas Lapp
|
0eb59d5c35
|
Fix rand num generation on MacOS, Improve organization with tic storage
|
2016-04-22 10:35:44 -06:00 |
|
Nickolas Lapp
|
c8b20d9090
|
Add support for dynamic session tickets, add openssl.test to testuiste
|
2016-04-22 10:35:44 -06:00 |
|
toddouska
|
117231c0e3
|
Merge pull request #387 from JacobBarthelmeh/RSA-min
add check for min RSA key size at TLS/SSL level
|
2016-04-19 13:57:26 -07:00 |
|
Jacob Barthelmeh
|
789f346c5f
|
follow verifyNone variable when checking key size
|
2016-04-19 10:23:01 -06:00 |
|
Jacob Barthelmeh
|
0eb57ccab0
|
set return error before jumping to end of function
|
2016-04-18 14:27:34 -06:00 |
|
toddouska
|
72bfc2aa09
|
Merge pull request #382 from JacobBarthelmeh/master
build with asn disabled and opensslextra enabled
|
2016-04-15 10:12:52 -07:00 |
|
Jacob Barthelmeh
|
c9891567e8
|
add check for min RSA key size at TLS/SSL level
|
2016-04-14 13:35:49 -06:00 |
|
Jacob Barthelmeh
|
23ab4247ea
|
build with asn disabled and opensslextra enabled
|
2016-04-11 11:56:30 -06:00 |
|
kaleb-himes
|
c6e9021732
|
scan-build warnings related to enable-psk, disable-asn,rsa,ecc
|
2016-04-11 11:13:26 -06:00 |
|
toddouska
|
85505b99b9
|
Merge pull request #380 from cconlon/utasker
uTasker Port
|
2016-04-08 15:08:39 -07:00 |
|
Chris Conlon
|
46f4be357b
|
uTasker: add note about XTIME to settings.h
|
2016-04-08 11:20:58 -06:00 |
|
Chris Conlon
|
8d040ad41f
|
uTasker: add initial port, WOLFSSL_UTASKER
|
2016-04-08 11:12:17 -06:00 |
|
Jacob Barthelmeh
|
5b4f17545b
|
autoconf checks on some builds that break, macro for no server, and user rsa
|
2016-04-06 15:36:50 -06:00 |
|
toddouska
|
9f86a91dbd
|
Merge pull request #374 from dgarske/asyncfixes
Fix build issues with new async changes
|
2016-04-01 16:04:08 -07:00 |
|
toddouska
|
29194bd977
|
Merge pull request #371 from cconlon/sniffer-fix
Extra cleanup in sniffer.c with ForceZero
|
2016-04-01 13:39:29 -07:00 |
|
David Garske
|
2d4aa1bbb5
|
Better fix for scan-build warning regarding possible use of NULL in AddRecordHeader. Scan-build considers paths where output is set to NULL, but ssl->spec.kea is corrupted/changed, which could result in output == NULL (even though it should never happen). So added proper NULL check in SendServerKeyExchange on AddHeader to make sure output isn't NULL.
|
2016-04-01 12:57:33 -07:00 |
|
David Garske
|
19f0769ec4
|
Fix for scan-build warning where async changes make it appear like the output buffer could be NULL (even though its not). Added NULL check on the AddRecordHeader function.
|
2016-04-01 10:55:01 -07:00 |
|
David Garske
|
dd28d53cfb
|
Fix build issues with new async changes. Fixed issue with unused args preSigSz and preSigIdx with PSK enabled and ECC + RSA disabled. Fixed issue with missing qsSz variable in DoClientKeyExchange. Fixed missing DhAgree and DhKeyGen with NO_CERTS and PSK enabled. Fixed a couple scan-build warnings with "Value stored to '' is never read".
|
2016-04-01 09:23:46 -07:00 |
|
Chris Conlon
|
2939c3ace1
|
add ssl_FreeZeroDecode() to sniffer.c
|
2016-03-31 13:25:39 -06:00 |
|
toddouska
|
63b1282e67
|
Merge pull request #335 from dgarske/asynccrypt
Asynchronous crypto and wolf event support
|
2016-03-30 20:12:41 -07:00 |
|
David Garske
|
4472152b18
|
Added new "wolfSSL_poll" which filters event queue by ssl object pointer. Changed wolfSSL_CTX_poll to support using WOLF_POLL_FLAG_PEEK flag to peek at events and return count. Removed "wolfssl_CTX_poll_peek". Switched the examples (test.h AsyncCryptPoll) to use just the WOLFSSL object and call new wolfSSL_poll. Added warning when using the "--enable-asynccrypt" option to make sure users know they need real async.c/.h files.
|
2016-03-30 15:15:38 -07:00 |
|
Chris Conlon
|
ec9f10d74f
|
extra cleanup in sniffer.c with ForceZero
|
2016-03-30 10:52:27 -06:00 |
|
Jacob Barthelmeh
|
e60adfc9da
|
better naming of macro and alter misc.c check
|
2016-03-29 13:42:40 -06:00 |
|
Jacob Barthelmeh
|
2665db73a4
|
check for compiling misc.c when not needed
|
2016-03-28 16:03:15 -06:00 |
|
Jacob Barthelmeh
|
67b4d2e2f4
|
case where memory is exhausted before ctx copied to ssl
|
2016-03-25 14:19:51 -06:00 |
|
Jacob Barthelmeh
|
57ea1cdcd7
|
sanity check on ssl pased to wolfSSL_set_fd
|
2016-03-25 11:32:53 -06:00 |
|
Jacob Barthelmeh
|
8f8f7ac152
|
remove unecessary XFREE
|
2016-03-23 13:40:45 -06:00 |
|
Jacob Barthelmeh
|
620e4fa5ca
|
fix free of WOLFSSL_METHOD pointer on create ctx fail
|
2016-03-23 09:27:27 -06:00 |
|
David Garske
|
71683e23e9
|
Resolve 2nd unused "typeH" warning.
|
2016-03-18 06:27:42 -07:00 |
|
David Garske
|
0e43fca1f3
|
Resolve unused "typeH" warning.
|
2016-03-17 15:56:51 -07:00 |
|
Jacob Barthelmeh
|
e99a5b0483
|
prepare for release v3.9.0
|
2016-03-17 16:02:13 -06:00 |
|
David Garske
|
e1787fe160
|
Added "--enable-asynccrypt" option for enabling asynchronous crypto. This includes a refactor of SendServerKeyExchange and DoClientKeyExchange to support WC_PENDING_E on key generation, signing and verification. Currently uses async simulator (WOLFSSL_ASYNC_CRYPT_TEST) if cavium not enabled. All of the examples have been updated to support WC_PENDING_E on accept and connect. A generic WOLF_EVENT infrastructure has been added to support other types of future events and is enabled using "HAVE_WOLF_EVENT". Refactor the ASN OID type (ex: hashType/sigType) to use a more unique name. The real "async.c" and "async.h" files are in a private repo.
|
2016-03-17 13:31:03 -07:00 |
|
David Garske
|
0683ecb727
|
Fixed FreeCRL issue with strdup memory. Added additional checks for WOLF_AES_CBC and WOLF_AES_COUNTER. Disabled memory tracker by default for wolfCrypt test and benchmark. Updated README to better document Linux Binutils LD bug workaround.
|
2016-03-16 09:41:19 -07:00 |
|
Jacob Barthelmeh
|
db758dc98b
|
update test script, fall back to cert name search, fix der free
|
2016-03-12 09:37:32 -07:00 |
|
Jacob Barthelmeh
|
060e278559
|
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into Certs
|
2016-03-11 23:48:39 -07:00 |
|
JacobBarthelmeh
|
154f027c54
|
Merge pull request #347 from dgarske/ScanBuildFix214
Address scan-build issue on build #214 after DerBuffer refactor part 2
|
2016-03-11 16:53:41 -07:00 |
|
David Garske
|
81b0ccdb1a
|
Address scan-build issue on build #214 after DerBuffer refactor part 2 (ceafb25).
|
2016-03-11 09:39:13 -08:00 |
|
Moisés Guimarães
|
2e1c1ca7f8
|
remove unnecessary condition
|
2016-03-10 23:07:36 -03:00 |
|
toddouska
|
1bd7de46bb
|
Merge pull request #342 from dgarske/JenkinsFixes20160310
Fixes multiple Jenkins warnings/failures
|
2016-03-10 14:19:47 -08:00 |
|
David Garske
|
80aa431689
|
Fixes multiple Jenkins warnings/failures. First is PickHashSigAlgo is required for client builds or if certs are enabled. Fixed scan-build warning with OCSP not recognized ForceZero as cleaning memory and using possible garbage value. Also cleaned up the OCSP functions to use struct buffer* instead of void* for clarity with a little forward declaration.
|
2016-03-10 09:38:11 -08:00 |
|
toddouska
|
1435a6ce92
|
Merge pull request #341 from JacobBarthelmeh/master
SEP and CERTEXT, QSH debug
|
2016-03-10 09:36:25 -08:00 |
|
Kaleb Joseph Himes
|
0a1871e77c
|
Merge pull request #337 from dgarske/WarnDoubleFree
Fixes scan-build warning with "--enable-opensslextra --disable-memory"
|
2016-03-09 16:28:18 -08:00 |
|
Jacob Barthelmeh
|
49b547db08
|
make QSH debug compile for C89
|
2016-03-09 17:15:28 -07:00 |
|
toddouska
|
ceafb25f49
|
Merge pull request #338 from dgarske/DerBufferRefactor2
Refactor of DerBuffer, so WOLFSSL object doesn't have to grow as a re…
|
2016-03-09 12:36:22 -08:00 |
|
David Garske
|
f17dfa5b03
|
Moved the x509 XFREE to outside the FreeX509 function. Internally FreeX509 is only used in two places. One is for the ssl->peerCert, which is not dynamic anyways. The second is in the ExternalFreeX509 where it calls FreeX509 if its dynamic and will XFREE there.
|
2016-03-09 09:15:00 -08:00 |
|
David Garske
|
c863300805
|
Fixed scan-build error with possibly using a NULL pointer.
|
2016-03-08 09:34:56 -08:00 |
|
David Garske
|
0f93b86b61
|
Fixes for PK_CALLBACKS and sniffer after DerBuffer refactor #2.
|
2016-03-08 08:56:14 -08:00 |
|
David Garske
|
ce9f14f713
|
Refactor of DerBuffer, so WOLFSSL object doesn't have to grow as a result of additional functionality. Removed InitDer. Changed all DerBuffers to use pointer and pass pointer to DerBuffer* to AllocDer and FreeDer. Result is more efficient code and reduced WOLFSSL object size. AllocDer uses first part of the allocated buffer for the actual DerBuffer.
|
2016-03-08 08:56:14 -08:00 |
|
David Garske
|
daa1cd634e
|
Fixes scan-build warning with "--enable-opensslextra --disable-memory". Problem was different #if defines on the InitX509 and FreeX509, which caused the static analyzer to think the "x509->dynamicMemory" was always true.
|
2016-03-08 08:38:02 -08:00 |
|