Moisés Guimarães
f37ea955ec
improves OCSP response signature verification;
...
reference: RFC 2560 - Section 4.2.2.2 Authorized Responders:
The key that signs a certificate’s status information need not be the
same key that signed the certificate. It is necessary however to
ensure that the entity signing this information is authorized to do
so. Therefore, a certificate’s issuer MUST either sign the OCSP
responses itself or it MUST explicitly designate this authority to
another entity.
2015-10-26 19:33:35 -03:00
Moisés Guimarães
a47f98ee19
adds support to nonce extension in OCSP stapling (status request tls extension);
...
fix nonce encoding, there was a missing ASN.1 OctetString header;
2015-10-26 18:11:38 -03:00
Moisés Guimarães
14fa980dad
adds contingence plan (force OCSP check when the server answer the status_request extension but doesn't sends a CertificateStatus message);
...
adds back status_request to context level;
2015-10-26 18:11:38 -03:00
Moisés Guimarães
42380793c9
adds comparison of OcspRequest and OcspResponse;
...
removes TLS Extension Status Request at context level as specific data is always needed for each session;
2015-10-26 18:11:38 -03:00
Moisés Guimarães
daf3155d3c
adds partial client support to TLS Extension Status Request, a.k.a. OCSP stapling;
...
missing:
- compare OcspRequest and OcspResponse;
- execute contingence plan;
- add nonce extension;
2015-10-26 18:11:38 -03:00
Moisés Guimarães
82f86adb8e
renames TLS Extension types to follow the TLSX_ + "extension name" pattern; using names listed by IANA:
...
http://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml
fixes ocsp response extensions parsing in asn.c;
fixes dir slashes in .gitignore: replaces '\' with '/';
removes trailing white spaces;
2015-10-26 18:11:38 -03:00
John Safranek
a42308e28a
Add function ssl_FreeDecodeBuffer() to release the sniffer allocated data buffer and reset the pointer.
2015-10-26 12:01:21 -07:00
John Safranek
b05332c417
Merge branch 'master' of github.com:wolfSSL/wolfssl
2015-10-26 10:17:46 -07:00
toddouska
ab68f38236
have allocate extra byte in case user wants to null terminate returned plaintext
2015-10-23 16:38:59 -07:00
toddouska
d53b6a9132
handle sniffer realloc failure w/o leak
2015-10-23 16:19:26 -07:00
toddouska
c90d0d9607
Merge branch 'sniffer'
2015-10-23 14:10:51 -07:00
John Safranek
2569cd2ca4
simplify the size check for storing a DTLS handshake message fragment
2015-10-21 15:04:55 -07:00
John Safranek
54e06cd04e
added deallocator for DtlsPools
2015-10-21 15:04:55 -07:00
toddouska
7499175bdb
fix jenkins sniffer changes
2015-10-19 15:09:36 -07:00
John Safranek
14d893aeb0
Add decrypt of AES-GCM to the sniffer.
2015-10-19 11:28:25 -07:00
toddouska
e1b0c0ac3d
fix jenkins build#69
2015-10-16 15:12:37 -07:00
Ludovic FLAMENT
9ef43910ed
Merge branch 'master' of https://github.com/wolfssl/wolfssl
2015-10-16 07:46:51 +02:00
Ludovic FLAMENT
d4f3419758
ALPN : add function to get in a server the list of supported protocols sent by the client.
2015-10-15 14:59:35 +02:00
Ludovic FLAMENT
ee8537fb6d
Merge branch 'master' of https://github.com/wolfssl/wolfssl
2015-10-14 20:53:30 +02:00
Ludovic FLAMENT
10f5154389
ALPN : add option to continue in case of client/server protocol mismatch (like OpenSSL)
2015-10-13 09:38:40 +02:00
toddouska
8595890c51
change sniffer decode data to pointer to pointer
2015-10-12 18:10:24 -07:00
toddouska
3a0e25637e
Merge branch 'mdk5-update'
2015-10-12 09:33:10 -07:00
John Safranek
2840fb47ef
fix bounds check of handshake messages in TLS
2015-10-11 21:32:13 -07:00
toddouska
92c222798e
Merge branch 'master' of https://github.com/kaleb-himes/wolfssl into fix-asn
2015-10-09 16:56:53 -07:00
kaleb-himes
91e7d433f8
expected_configure test fixes. Squash for review.
...
fix for --enable-certservice --disable-md5
fix for --disable-md5 --enable-fortress
update macros to reflect referencing code logic for --disable-asn fix
2015-10-09 16:05:36 -06:00
toddouska
cf605f32dd
Merge branch 'MDK5-3.6.9' of https://github.com/kojo1/wolfssl into mdk5-update
2015-10-09 10:39:15 -07:00
Chris Conlon
7e5be2f313
fix resource cleanup in testsuite and wolfcrypt test
2015-10-09 10:57:55 -06:00
Ludovic FLAMENT
266936db93
fix warning on Windows
2015-10-09 16:00:53 +02:00
Ludovic FLAMENT
826034315e
Merge branch 'master' of https://github.com/wolfssl/wolfssl
2015-10-09 15:23:41 +02:00
Ludovic FLAMENT
bf3b0a228d
add support for Application-Layer Protocol Name (RFC 7301) in the TLS extensions
2015-10-09 15:18:41 +02:00
Takashi Kojo
26ca093c76
fixed errno with errno.h
2015-10-09 09:49:38 +09:00
Takashi Kojo
cdc3d61b97
Refactoring WOLFSSL_MDK, MDK5 to KEIL_TCP_NET, KEIL_FS
2015-10-07 14:06:19 +09:00
John Safranek
9f6b07aec2
Merge branch 'defrag'
2015-10-06 20:21:06 -07:00
John Safranek
a7ae5155ce
fix defragment of handshake messages in TLS
2015-10-06 20:18:55 -07:00
toddouska
236df9257b
add openssl script suite test
...
switch to bash for 'read -ra <<<' for now
2015-10-05 15:33:37 -07:00
John Safranek
d6a5bfb53d
Revert "revert defragment of handshake messages in TLS"
...
This reverts commit 6d21d328fb
2015-10-05 15:31:39 -07:00
John Safranek
8c24fa1e66
Merge branch 'master' of github.com:wolfSSL/wolfssl
2015-10-02 15:59:15 -07:00
John Safranek
50d340c261
Merge branch 'sniffer-recovery'
2015-10-02 15:58:57 -07:00
John Safranek
0f6f404938
delete debugging breadcrumb
2015-10-02 15:55:40 -07:00
John Safranek
9fe5401630
sniffer skips partially received record when fixing an ACK fault
2015-10-02 15:13:02 -07:00
John Safranek
1237b35bb8
add option to sniffer to try to restart decoding after an ACK fault
2015-10-02 11:26:45 -07:00
toddouska
27450aca7d
increment explicit iv and zero nonce even on GCM/CCM failure
2015-10-02 11:24:32 -07:00
Jacob Barthelmeh
10276944d3
return value on AES CCM encrypt
2015-10-02 11:40:47 -06:00
toddouska
799dfadf44
Merge branch 'master' of https://github.com/lchristina26/wolfssl into vxworks
2015-09-29 11:46:18 -07:00
lchristina26
7c9490844a
fix formatting for vxworks commits
2015-09-29 12:22:03 -06:00
lchristina26
3c2712da31
vxworks compatibility additions
2015-09-29 12:12:35 -06:00
toddouska
b403036c77
Merge branch 'FreeRTOS_TCP' of https://github.com/kojo1/wolfssl into freertos-tcp
2015-09-28 16:13:21 -07:00
toddouska
292e05dc75
switch memset / memcpy to XMEM in src and wolfcrypt/src proper
2015-09-28 11:37:00 -07:00
toddouska
ab269b277e
Merge branch 'master' into idea
2015-09-25 15:48:00 -07:00
toddouska
8c01c8d8e1
Merge branch 'master' of https://github.com/lfcrypto/wolfssl into idea
2015-09-25 15:42:31 -07:00
