3cd5dabd0b
Fixes compilation, I have no idea if it still does what it should
2022-06-14 18:23:54 +02:00
3f13b49fa3
Merge pull request #2695 from JacobBarthelmeh/Release
...
prepare for release v4.3.0
2019-12-20 11:10:34 -08:00
e1433867ce
fix for expected nightly config test report
2019-12-20 09:46:12 -07:00
5675a2b3c5
prepare for release v4.3.0
2019-12-20 08:43:34 -07:00
45d55c8f38
Merge pull request #2676 from SparkiDev/sp_cortexm_perf
...
Improve Cortex-M RSA/DH assembly code performance
2019-12-19 15:03:59 -08:00
51f956490f
Merge pull request #2661 from SparkiDev/parse_cert_rel_fixes
...
Cleanup ParseCertRelative code
2019-12-19 11:03:56 -08:00
3342a19e29
Merge pull request #2578 from cariepointer/ZD-9478-and-9479
...
Add sanity checks for parameters in wc_scrypt and wc_Arc4SetKey
2019-12-19 10:59:05 -08:00
2aa8fa2de6
Merge pull request #2688 from kaleb-himes/GH2552
...
use const to declare array rather than variable sz - VS doesn't like …
2019-12-19 08:52:30 -08:00
e10ace21df
Merge pull request #2690 from SparkiDev/sp_int_fixes_1
...
Fix SP to build for different configurations
2019-12-19 08:52:52 -07:00
36f697c93d
Fix SP to build for different configurations
...
Was failing:
--enable-sp --enable-sp-math
--enable-sp --enable-sp-math --enable-smallstack
2019-12-19 15:15:19 +10:00
95c0c1f2a5
use const to declare array rather than variable sz - VS doesn't like this
2019-12-18 16:08:26 -08:00
64a1045dc3
Cleanup ParseCertRelative code
...
Fix for case:
- can't find a signer for a certificate with the AKID
- find it by name
Has to error as the signer's SKID is always set for signer and would
have matched the AKID.
Simplify the path length code - don't look up CA twice.
Don't require the tsip_encRsaKeyIdx field in DecodedCert when
!WOLFSSL_RENESAS_TSIP - use local variable.
2019-12-19 08:53:24 +10:00
6922d7031c
Merge pull request #2685 from embhorn/coverity_fixes
...
Coverity fixes
2019-12-18 14:06:48 -08:00
531fedfbb4
Merge pull request #2687 from ejohnstown/dtls-cap
...
DTLS Handshake Message Cap
2019-12-18 13:50:52 -08:00
031e78e103
Merge pull request #2606 from kaleb-himes/DOCS_UPDATE_19_NOV_2019
...
Add dox documentation for wc_ecc_make_key_ex
2019-12-18 13:49:57 -08:00
0057eb16f8
Merge pull request #2686 from ejohnstown/crl-skid
...
Check name hash after matching AKID for CRL
2019-12-18 13:48:59 -08:00
573d045437
Merge pull request #2682 from SparkiDev/akid_name_check
...
Check name hash after matching AKID
2019-12-18 13:08:19 -08:00
c054293926
Merge pull request #2684 from JacobBarthelmeh/build-tests
...
fix for g++ build warning
2019-12-18 12:09:29 -08:00
52893877d7
Fixes from review
2019-12-18 13:25:25 -06:00
6c6d72e4d6
Find CRL Signer By AuthKeyId
...
When looking up the signer of the CRL by SKID/AKID, also verify that the
CRL issuer name matches the CA's subject name, per RFC 5280 section 4.1.2.6.
2019-12-18 10:17:51 -08:00
2607cf3429
Fix up based on peer feedback
2019-12-18 10:55:20 -07:00
5a04ee0d8b
Merge pull request #2640 from dgarske/alt_chain
...
Fixes for Alternate chain processing
2019-12-18 09:38:45 -08:00
b89121236f
Merge pull request #2635 from dgarske/async_date
...
Fix for async date check issue
2019-12-18 09:34:08 -08:00
74a8fbcff4
Merge pull request #2666 from SparkiDev/b64_dec_fix
...
Bade64_Decode - check out length (malformed input)
2019-12-18 09:30:41 -08:00
c2e5991b50
Merge pull request #2681 from ejohnstown/crl-skid
...
Find CRL Signer By AuthKeyId
2019-12-18 09:29:17 -08:00
b5f645ea00
fix for g++ build warning
2019-12-18 10:01:52 -07:00
b126802c36
Clarify logic for skipping call to AddCA.
2019-12-18 06:04:26 -08:00
c1218a541b
Check name hash after matching AKID
...
RFC 5280, Section 4.1.2.6:
If the subject is a CA (e.g., the basic constraints extension, as
discussed in Section 4.2.1.9, is present and the value of cA is TRUE),
then the subject field MUST be populated with a non-empty distinguished
name matching the contents of the issuer field (Section 4.1.2.4) in all
certificates issued by the subject CA.
The subject name must match - even when the AKID matches.
2019-12-18 17:57:48 +10:00
6ccd146b49
Bade64_Decode - check out length (malformed input)
2019-12-18 17:06:58 +10:00
ef6938d2bc
DTLS Handshake Message CAP
...
Cap the incoming DTLS handshake messages size the same way we do for
TLS. If handshake messages claim to be larger than the largest allowed
certificate message, we error out.
2019-12-17 16:55:58 -08:00
7e74d02da5
Merge pull request #2677 from SparkiDev/p12_pbkdf_tmp_fix
...
PKCS#12 PBKDF - maximum tmp buffer size
2019-12-17 16:48:08 -08:00
ff026efe49
Merge pull request #2670 from SparkiDev/dec_pol_oid_fix
...
DecodePolicyOID - check out index
2019-12-17 16:47:36 -08:00
892e951c8a
Merge pull request #2669 from SparkiDev/name_joi_fix
...
Decode X.509 name - check input length for jurisdiction
2019-12-17 16:46:30 -08:00
435d4bf427
Merge pull request #2658 from SparkiDev/asn_date_check
...
Check ASN date characters are valid
2019-12-17 16:39:35 -08:00
f81ce71c25
Merge pull request #2660 from JacobBarthelmeh/Compatibility-Layer
...
add --disable-errorqueue option
2019-12-17 16:37:02 -08:00
06563ed3fa
Merge pull request #2642 from SparkiDev/sp_exptmod
...
sp_int: support for more values in sp_exptmod
2019-12-17 16:36:12 -08:00
037c319bab
Find CRL Signer By AuthKeyId
...
1. Add parsing of CRL extensions, specifically the Auth Key ID extension.
2. To verify CRL, search for CA signer by AuthKeyId first, then by name. If NO_SKID is set, just use name.
3. Update the ctaocrypt settings.h for the NO_SKID option with CRL so FIPS builds work.
2019-12-17 15:33:39 -08:00
feeb18600f
Merge pull request #2636 from SparkiDev/mp_exptmod_fixes
...
Handle more values in fp_exptmod
2019-12-17 15:22:24 -08:00
138377f30e
Merge pull request #2641 from SparkiDev/sp_c32_lshift
...
Fix lshift in SP 32-bit C code - FFDHE
2019-12-17 15:17:17 -08:00
5ee9f9c7a2
Merge pull request #2637 from SparkiDev/ecc_cache_resist
...
Improve wc_ecc_mulmod_ex cache attack resistance
2019-12-17 15:16:16 -08:00
028d9e5443
Merge pull request #2634 from SparkiDev/pkcs7_libz_fix
...
Fix missing variable declaration
2019-12-17 15:13:13 -08:00
a176789f13
Fix for async issue with "badDate" and "criticalExt" check getting skipped on call to ConfirmSignature
with WC_PENDING_E
response. Added log message when date failure is skipped.
2019-12-17 15:03:00 -08:00
06e5e81b1b
Merge pull request #2663 from embhorn/zd5050
...
Clarify wolfSSL_shutdown error on subsequent calls
2019-12-17 14:59:35 -08:00
774a758f59
Fixes in test and example code
2019-12-17 15:56:40 -06:00
ab14a26be0
Merge pull request #2650 from dgarske/boot_tpm
...
Fix API visibility for ED25519 check key
2019-12-17 13:45:39 -08:00
cfd91fb0b8
Add check for length == 0 in wc_Arc4SetKey
2019-12-17 13:28:50 -07:00
e8594daab6
Merge pull request #2678 from tmael/night_valgrind
...
Fix memory leak detected with Valgrind
2019-12-17 09:11:30 -08:00
88188b79e2
Fix mem leak
2019-12-16 18:03:11 -08:00
8d7d2c74ee
PKCS#12 PBKDF - maximum tmp buffer size
...
Use WC_MAX_BLOCK_SIZE - only an issue if PBKDF is using SHA-3
algorithms.
2019-12-17 09:56:08 +10:00
a71eb11b38
Improve Cortex-M RSA/DH assembly code performance
...
Performance of modular exponentiation improved by about 30%.
2019-12-17 09:03:34 +10:00
8d8ab655fa
Merge pull request #2671 from ejohnstown/maint-conf
...
Maintenance: Configure
2019-12-16 13:38:02 -08:00
c0716b9e3f
Merge pull request #2673 from Naruto/feature/fix_readme_miss
...
fix spell miss of zephyr README.md
2019-12-16 12:31:55 -07:00
af5c98a6a8
Fixes in wolfCrypt test
2019-12-16 10:22:42 -06:00
7fbadeaa17
fix spell miss of zephyr README.md
2019-12-16 21:36:43 +09:00
0bb8ae8564
Fixes for new defects in wolfCryot and wolfSSL (excluding test code)
2019-12-13 17:17:13 -06:00
f2115b2c2b
Merge pull request #2652 from ejohnstown/maintenance-error
...
Maintenance: Error Strings
2019-12-13 15:03:32 -08:00
0348123261
Maintenance: Configure
...
1. Remove some redundant AM_CONDITIONAL macros checking for OCSP and CRL.
2. Moved the AM_CONDITIONAL macro setting BUILD_PKCS12 to the other AM_CONDITIONALS.
2019-12-13 15:02:03 -08:00
1a594d92ba
Merge pull request #2668 from ejohnstown/maintenance-scanbuild
...
Fixed a couple initialization issues scan-build indicated
2019-12-13 14:13:48 -07:00
6a2975c742
DecodePolicyOID - check out index
2019-12-13 12:13:38 +10:00
b3cbab4bf3
Decode X.509 name - check input length for jurisdiction
2019-12-13 11:55:15 +10:00
e7af2d2ba9
Fixed a couple initialization issues scan-build indicated.
2019-12-12 16:50:37 -08:00
a3cc2aa6ff
Merge pull request #2665 from kaleb-himes/ZD-9590-CCM-Benchmarking
...
Add CCM Decryption to benchmarking
2019-12-12 16:48:12 -08:00
e063fb1631
sp_int.c: Strip leading zeros in sp_read_radix
2019-12-13 09:08:55 +10:00
0a38d7c178
Add CCM Decryption to benchmarking
2019-12-12 13:53:30 -07:00
51d5abd63f
Clarify wolfSSL_shutdown error on subsequent calls
2019-12-12 13:16:52 -06:00
adc14f7552
sp_int: Check size of numbers for overflow
2019-12-12 18:36:23 +10:00
2e5258fe15
add --disable-errorqueue option
2019-12-11 11:19:58 -07:00
dffb59ea52
sp_int: support for more values in sp_exptmod and fix
...
SP C - fix mont reduce with fast mul_add
2019-12-11 11:10:18 +10:00
093a31ed49
Merge pull request #2655 from kaleb-himes/ZD-9592
...
Remove forcing NO_SKID on unsuspecting CRL users
2019-12-10 16:33:16 -08:00
05dafd0adb
Check ASN date characters are valid
2019-12-11 09:22:26 +10:00
74e54393ab
Remove a bitfield indicator from a structure member that didn't require it.
2019-12-10 13:17:30 -08:00
2b66a9f1ec
Address reviewed items
2019-12-09 14:44:59 -07:00
e8c7d6f818
Account for ASN disabled
2019-12-07 05:06:41 -07:00
bbdf0d101f
Improve Decoded CRL initialization
2019-12-07 04:23:02 -07:00
072fe8fd6d
More complete fix for removing NO_SKID condition as default with CRL enabled
2019-12-07 03:39:57 -07:00
8450c4ae39
Merge pull request #2643 from ejohnstown/maintenance-prime
...
Maintentance: Prime
2019-12-06 18:50:51 -08:00
05e672428d
Merge pull request #2645 from cconlon/cmsrsacb
...
CMS SignedData RSA sign callback for raw digest
2019-12-06 17:13:32 -07:00
6081bdaad6
free PKCS7 before creating new in API test
2019-12-06 12:00:33 -07:00
19a4371d48
Maintenance: Error Strings
...
1. One of the error string was >80 bytes long. Shortened it.
2. The function that copies an error string to an output array needs to
ensure the string is still null terminated.
3. Added a check to the wolfCrypt test to see that error strings aren't
>= 80 bytes long.
2019-12-06 09:53:39 -08:00
b4f67dabcf
Merge pull request #2647 from kojo1/SN-size
...
EXTERNAL_SERIAL_SIZE to build option
2019-12-06 09:13:07 -07:00
b28f6aeb34
Work to support wolfBoot with wolfTPM. Fix missing visibility marker for wc_ed25519_check_key
.
2019-12-06 06:53:23 -08:00
87ec950221
Rollback the define in internal.h
2019-12-06 10:31:28 +09:00
9fd5628148
Merge pull request #2631 from SparkiDev/mp_invmod_fix
...
mp_invmod handles more inputs
2019-12-05 16:21:33 -08:00
7e391f0fd5
Merge pull request #2629 from SparkiDev/dsa_blinding
...
Blinding for DSA sign
2019-12-05 16:20:21 -08:00
4b31a180c8
Merge pull request #2626 from SparkiDev/sp_invmod_fixes
...
Fix sp_invmod to handle more input values
2019-12-05 16:18:55 -08:00
8cc4c62c14
Merge pull request #2625 from SparkiDev/set_ser_num_2
...
Support 20-byte serial numbers and disallow 0.
2019-12-05 16:17:54 -08:00
bd8a612d6c
Merge pull request #2624 from ejohnstown/maintenance-ASN1
...
Maintenance: ASN.1
2019-12-05 16:16:42 -08:00
7ec448ac0c
Merge pull request #2617 from embhorn/zd9553
...
Fix for vasprintf with AIX
2019-12-05 16:15:24 -08:00
7631fdafa1
Merge pull request #2612 from SparkiDev/sp_div_small_a
...
sp_div improved to handle when a has less digits than d
2019-12-05 16:14:05 -08:00
6d40c20f2c
Merge pull request #2609 from JacobBarthelmeh/Compatibility-Layer
...
Fix for EVP CipherUpdate decrypt and add test case
2019-12-05 16:12:26 -08:00
312d5c98b3
Merge pull request #2535 from julek-wolfssl/nginx-1.15
...
Nginx 1.15.0 & 1.16.1
2019-12-05 14:40:45 -08:00
a13ebf5258
Merge pull request #2543 from embhorn/zd5706
...
Update DoVerifyCallback to check verify param hostName and ipasc
2019-12-05 14:38:47 -08:00
d74a1888bb
move it to build option
2019-12-06 06:28:25 +09:00
2c0fda4168
Maintentance: Prime
...
1. Revisited the option enables around the wolfCrypt prime test. Added a
check for key generation to the check for public MP.
2019-12-05 12:23:42 -08:00
be97444d24
add api test for wc_PKCS7_SetRsaSignRawDigestCb()
2019-12-05 10:33:49 -07:00
2063fa502f
add CMS RSA sign callback for raw digest
2019-12-05 10:33:49 -07:00
0552fbc5de
Fix lshift in SP 32-bit C code - FFDHE
2019-12-05 09:08:30 +10:00
9b437384de
Allow AddCA
for root CA's over the wire that do not have the extended key usage cert_sign set.
2019-12-04 14:14:37 -08:00
b01c558adb
Fix to not send alert until after the verify cert callback and alternate chain logic has been evaluated.
2019-12-04 12:41:23 -08:00
acd4bc3305
Added logging for SendAlert call.
2019-12-04 11:02:22 -08:00
44fc3e14b1
Maintenance: ASN.1
...
1. Fix some preprocessor flag checking for function EncodePolicyOID. It
also needs to be available for OpenSSL Compatibility.
2. Fix for a name string for a test that can get left in or out
incorrectly.
2019-12-04 10:26:37 -08:00
3646051434
Fix for alternate chain logic where presented peer's CA could be marked as trusted.
...
When building with `WOLFSSL_ALT_CERT_CHAINS` a peer's presented CA could be incorrectly added to the certificate manager, marking it as trusted.
Began in PR #1934
ZD 9626
2019-12-04 06:56:36 -08:00
2a0c037f98
Improve wc_ecc_mulmod_ex cache attack resistance
2019-12-04 11:08:28 +10:00
c5f9a601e8
Handle more values in mp_exptmod
...
Handle prime (modulus) of 0 and 1.
Handle exponent of 0.
Fix for base of 0 in fp_exptmod and hadnle base of 0 in mp_exptmod.
fp_exptmod - Don't modify X's sign during operation when passed in as negative.
2019-12-04 09:32:08 +10:00
fd4fb28a2e
Fix missing variable declaration
...
--enable-scep --with-libz
PKCS#7 decompress code
2019-12-03 11:07:29 +10:00
b9a82204e2
Blinding for DSA sign
2019-12-03 09:36:33 +10:00
7e45ae2ec6
Merge pull request #2621 from JacobBarthelmeh/SanityChecks
...
sanity check on "a" input to invmod
2019-12-02 10:57:01 -08:00
2efa91632e
revert adding import check in configure.ac
2019-12-02 08:56:00 -07:00
bfaa970d84
Merge pull request #2628 from tmael/nightly_valgrind
...
Fix Valgrind Known Configs Test
2019-11-29 08:59:58 -08:00
204045223f
Fix sp_invmod to handle more input values
2019-11-29 11:54:36 +10:00
bd7a572a8f
mp_invmod handles more inputs
...
Value to invert: a
Modulus: b
integer.c - normal math
- a is one, or a mod b is one
tfm.c - fast math
- b is -ve (error), or b is zero
- a is zero or a mod b is zero
2019-11-29 09:08:44 +10:00
f0c070b2cf
Merge pull request #2630 from SparkiDev/poly1305_avx2_fix
...
Poly1305 AVX2 asm fix
2019-11-28 09:28:22 -08:00
06ca07c79f
Poly1305 AVX2 asm fix
...
Missed carry when converting from 26 in 64 bits to 64 in 64 bits.
2019-11-28 16:01:29 +10:00
16ac0d8eb6
Support 20-byte serial numbers and disallow 0.
2019-11-28 10:21:48 +10:00
245a2b7012
sp_int: clamp more results
2019-11-28 10:01:54 +10:00
dadbeff433
sp_int: When setting digit of 0, set used to 0
2019-11-28 10:01:54 +10:00
2ac0ac8776
Fix for sp_div when a > d but same bit length
2019-11-28 10:01:54 +10:00
8315ae892f
sp_div improved to handle when a has less digits than d
2019-11-28 10:01:54 +10:00
b396ed0984
Merge pull request #2627 from SparkiDev/rsa_sign_vfy
...
Change signature generation to verify by default
2019-11-27 14:08:07 -08:00
e1ebb39296
Merge pull request #2618 from ejohnstown/maintenance-prime
...
Maintenance: Prime
2019-11-27 14:06:23 -08:00
ff85cc7740
Merge pull request #2622 from SparkiDev/ber_to_der_rework
...
Rework BER to DER to not be recursive
2019-11-27 14:05:36 -08:00
1026c4359d
Cast XMALLOC
2019-11-27 14:47:48 -06:00
acdfc514b3
Use memset initialize
2019-11-27 11:09:57 -08:00
cc722468be
Maintenance: ASN.1
...
1. Add an additional check in GetCertHeader() to see that sigIndex is
bounded by maxIdx.
2019-11-27 10:43:51 -08:00
806db8096c
Replace use of vasprintf
2019-11-27 11:00:28 -06:00
b06cee333c
Add error on EOF
2019-11-27 17:46:15 +01:00
29a8262ea4
Only test X509_NAME_print_ex when defines enabled
2019-11-27 17:46:15 +01:00
0f4a002f4f
Formatting
2019-11-27 17:46:15 +01:00
9be1b4cfd8
Remove tabs
2019-11-27 17:46:15 +01:00
944d5e1045
Don't count null char in better way
2019-11-27 17:46:15 +01:00
7c1a1dfd1f
Variable declaration at start of scope
2019-11-27 17:46:15 +01:00
308c5f3370
Fix implicit cast
2019-11-27 17:46:15 +01:00
5f39e12b21
Fix leak in SSL_CTX_set0_chain
2019-11-27 17:46:15 +01:00
8dde06bbca
Fix compile errors
2019-11-27 17:46:15 +01:00
dd07344499
SSL_SESSION_dup
2019-11-27 17:46:15 +01:00
3c9d191a5b
Don't propogate ASN_NO_PEM_HEADER from wolfSSL_load_client_CA_file
2019-11-27 17:46:15 +01:00
1962159d89
more NGINX defines
2019-11-27 17:46:15 +01:00
b71758895e
Add support for SSL_CTX_set0_chain
2019-11-27 17:46:15 +01:00
b7913116c0
Remove redeclaration
2019-11-27 17:46:15 +01:00
9fbc167d0c
Declare at start of scope
2019-11-27 17:46:15 +01:00
d9ab0c4bcb
Check bounds
2019-11-27 17:46:15 +01:00
ea5ac675ed
WIP
2019-11-27 17:46:15 +01:00
f0abd4ea82
WIP
2019-11-27 17:45:49 +01:00
9064de1e75
Set proper WOLFSSL_ASN1_TIME in thisupd and nextupd in wolfSSL_OCSP_resp_find_status
2019-11-27 17:45:49 +01:00
31c0abd610
wolfSSL_X509_NAME_print_ex should not put the null terminator in the BIO
2019-11-27 17:45:49 +01:00
de3c11d55c
opensslall required
2019-11-27 17:45:49 +01:00
a892f2a95a
Changes for nginx 1.15
...
- ssl.c: add to check to overwrite existing session ID if found
- evp.c: wolfSSL_EVP_DecryptFinal* was checking for wrong value
2019-11-27 17:45:49 +01:00
2e487a2463
Init uninitialised values
2019-11-27 07:46:33 -08:00
23878512c6
Change signature generation to verify by default
2019-11-27 10:47:03 +10:00
776f4af7f6
Rework BER to DER to not be recursive
2019-11-27 10:20:32 +10:00
1b63ab0e73
Merge pull request #2623 from SparkiDev/set_ser_rand
...
Generating serial number - clear top bit
2019-11-26 16:14:54 -08:00
2de52c7666
Maintenance: Prime
...
When returning a result from mp_prime_is_prime for normal math, the
result should be MP_YES or MP_NO, not a bare number (1 or 0).
2019-11-26 15:44:30 -08:00
7cb5fe5e2a
Merge pull request #2620 from tmael/ALPN_input
...
Fix alpn buffer overrun
2019-11-26 15:31:56 -08:00
57df5c10c9
Merge pull request #2619 from dgarske/async_mem
...
Fix for Intel QuickAssist asynchronous build
2019-11-26 15:29:04 -08:00
0d69950d07
Merge pull request #2615 from SparkiDev/mp_exptmod_neg_p
...
Handle negative modulus with negative exponent in exptmod
2019-11-26 15:20:54 -08:00
95c9dc9fe8
Merge pull request #2614 from ejohnstown/maintenance-OCSP
...
Maintenance: OCSP
2019-11-26 15:19:27 -08:00
9b7cd6bdfd
Merge pull request #2613 from tmael/evp_aes_gcm
...
Set default IV length for EVP aes gcm
2019-11-26 15:18:27 -08:00
5d41ef171c
Merge pull request #2610 from ejohnstown/maintenance-DTLS
...
Maintenance: DTLS
2019-11-26 15:17:22 -08:00
9ecafa7afe
Merge pull request #2557 from tmael/cert_store_ls_x509
...
Retrieve a stack of X509 certs
2019-11-26 15:16:09 -08:00
55540c6bd3
Replace a compile option check around some filenames for certificate testing.
2019-11-25 16:13:01 -08:00
1ac0b1fc0b
Maintenance: ASN.1
...
1. Undo an earlier change with respect to parsing a long length with
length zero. If BerToDer is disabled, this will be treated as a zero
length. With BerToDer enabled, the conversion will do the right thing.
2019-11-25 16:08:32 -08:00
5e0ca866df
Maintenance: ASN.1
...
1. For certificates, when copying a member of a container, one shouldn't read
beyond the enclosing context.
2019-11-25 16:08:32 -08:00
d389133f33
Maintenance: ASN.1
...
1. Update the ParseCRL function to always obey the length value of a tag.
2019-11-25 16:08:31 -08:00
9753bf627b
Maintenance: ASN.1
...
1. Remove the function Word32ToString and replace with calls to
XSNPRINTF().
2. Simplify DecodePolicyOID(), which converts an ASN.1 OID to a text
string in the form a.b.ccccc.d... Return an error if it gets too long.
2019-11-25 16:08:26 -08:00
7c3a4a1975
update comment to reflect new sanity check
2019-11-25 10:57:09 -07:00
316b8b0b4d
add early return to normal math and WOLFSSL_VALIDATE_ECC_IMPORT to enable-all and enable-fpecc builds
2019-11-25 10:47:08 -07:00
6325269236
Generating serial number - clear top bit
...
If the top bit is set then the encoding routine will drop a byte of the
serial number.
Better to ensure number is positive, top bit clear, and use as much of
the serial number data as possible.
2019-11-25 15:36:11 +10:00
9a0a48e093
sanity check on "a" input to invmod
2019-11-22 15:47:05 -07:00
8bc3b7df35
Free x509
2019-11-22 14:31:59 -08:00
dc25b79db6
Fix from review
2019-11-22 15:10:13 -06:00
3432a8a1fc
Maintenance: Prime
...
1. Prime test should return NO for 1. (ex function, normal math and fast
math)
2. Call mp_init() on the k value for the primality test case in the
wolfCrypt test.
2019-11-22 13:02:59 -08:00
481da3dcc1
Maintenance: Prime
...
1. Added a test case for checking "1" as a prime number to the wolfCrypt
test.
2. Allow the wolfCrypt prime test for SP builds.
3. Modify the prime test to use mp_mul rather than mp_mul_d, as the SP
math library doesn't export sp_mul_d.
2019-11-22 11:39:19 -08:00
cf127ec05f
Fix buffer overrun
2019-11-22 10:33:17 -08:00
be88bce36d
Fix for issues with wolfSSL_OBJ_nid2sn
and wc_OBJ_sn2nid
and logic finding max item when WOLFSSL_CUSTOM_CURVES
and ECC_CACHE_CURVE
are defined. Improvements to wolfSSL_EC_get_builtin_curves
to avoid using "min" as variable name and eliminate using a local static.
2019-11-22 10:09:10 -08:00
0a924af894
Maintenance: Prime
...
1. Prime test should return NO for 1. (sp math)
2019-11-22 10:01:21 -08:00
ffb3dfd6ec
Fixes for minor test.c build configuration issues.
2019-11-22 07:01:10 -08:00
cdc50d7753
Revert header change in #2504 for asynchronous crypto quickassist_mem.h
.
2019-11-22 05:59:57 -08:00
50c4347748
More corner cases in tfm
...
Handle zero base in fp_exptmod better().
Handle negatives in fp_gcd().
Return FP_OKAY when writing out 0 with mp_toradix().
2019-11-22 09:56:02 +10:00
71943844d6
Maintenance: OCSP
...
1. Add a couple more bounds checks to wolfIO_HttpProcessResponseBuf().
2019-11-21 14:51:35 -08:00
452ba5b502
Maintenance: Prime
...
1. Prime test should return NO for 1. (normal math and fast math)
2019-11-21 13:49:26 -08:00
b57294eff7
Fix for vasprintf with AIX
2019-11-21 12:23:15 -06:00
edb07cf68e
Merge pull request #2587 from guidovranken/ocsp-resp-decoder-bounds-fix
...
Properly limit array access in OCSP response decoder
2019-11-21 10:13:49 -08:00
428d51e664
IV is set in the evp ctx level
2019-11-21 09:58:03 -08:00
e883a2f696
Merge pull request #2611 from SparkiDev/sp_int_add_fix
...
Fix sp_add to handle carries properly
2019-11-21 08:59:09 -08:00
f56a74b6b7
Handle negative modulus with negative exponent in exptmod
2019-11-21 14:55:13 +10:00
6720bc3890
Maintenance: OCSP
...
1. Add some minimum bounds checking on the HTTP responses as some can
end up being too short.
2019-11-20 17:25:03 -08:00
f95d5eebff
Add FreeX509() to clean up when sk stack is empty
2019-11-20 17:02:13 -08:00
6c732725b0
Test evp aes gcm with default IV length
2019-11-20 16:37:15 -08:00
b33ce2207d
Merge pull request #2608 from SparkiDev/use_heap
...
When disabled memory, ensure all heap and types are used
2019-11-20 16:18:07 -08:00
a2d036dcba
Merge pull request #2601 from SparkiDev/certs_exts_fix
...
ProcessPeerCerts allocating memory for exts with OPENSSL_EXTRA properly
2019-11-20 16:17:28 -08:00
a20db0b8ad
Fix sp_add to handle carries properly
2019-11-21 09:47:17 +10:00
ce0136e968
Maintenance: Integers
...
In TFM and Integer, rshb() shouldn't try to shift a value that is 0.
This leads to using a negative offset to a pointer, but isn't used.
2019-11-20 13:55:57 -08:00
6f98d5d348
remove extra parentheses that clang complained about
2019-11-20 14:49:47 -07:00
71690fc73a
Maintenance: DTLS
...
1. Updated the window scrolling. There was a couple off-by-one errors in
the DTLS window handling. They canceled each other out, but there was a
rare case where they would shift too much.
2019-11-20 13:46:23 -08:00
188eb45433
Maintenance: DTLS
...
Removed redundant sequence increment when sending the Server Hello message.
2019-11-20 13:08:01 -08:00
1eb1755f07
add another evp decrypt test case
2019-11-20 12:29:22 -07:00
9880ad6926
updates to EVP_CipherUpdate for handling storage of last block
2019-11-20 11:57:06 -07:00
19d8ef405c
Maintenance: DTLS
...
When encrypting with AES-GCM, AES-CCM, or PolyChacha, do not increment
the DTLS sequence number. The sequence number should only be incremented
in BuildMessage. This was done because the sequence number used to be
incremented after calculating the HMAC or after the encrypt for AEAD
ciphers. The HMAC has been separated from the sequence increment.
2019-11-20 10:56:56 -08:00
4896a48955
fix EVP_CipherUpdate padding
2019-11-20 11:49:30 -07:00
88fb7efb8c
Merge pull request #2602 from SparkiDev/certs_exts_free
...
ProcessPeerCerts jump to error handling instead of returning
2019-11-20 09:25:48 -08:00
2a7fb69523
Merge pull request #2604 from SparkiDev/disabled_curve_fix
...
TLS supported curve extension - validate support fix
2019-11-20 09:17:50 -08:00
ccc8a49fcb
Merge pull request #2607 from SparkiDev/tls13_serverhello_cs
...
TLS 1.3 client detects non-TLS 1.3 cipher suite in ServerHello
2019-11-20 09:16:16 -08:00
d5a1adab5d
Merge pull request #2605 from SparkiDev/set_ser_num
...
Added output size to SetSerialNumber
2019-11-20 09:15:36 -08:00
1ba366920c
Merge pull request #2581 from SparkiDev/ecc_fixes_add
...
Add deterministic ECDSA sig gen. Fix corner cases for add point.
2019-11-20 09:12:28 -08:00
f1fbabbb60
Use default 96-bits IV length when unset
2019-11-20 09:09:12 -08:00
d441cee6fb
When disabled memory, ensure all heap and types are used
2019-11-20 17:06:42 +10:00
917e5b0405
TLS 1.3 client detects non-TLS 1.3 cipher suite in ServerHello
2019-11-20 12:22:00 +10:00
13c6346158
Check error returns from mp calls
2019-11-20 11:09:50 +10:00
79b35860e0
Added output size to SetSerialNumber
...
Some internal calls were passing in output size as max number size.
2019-11-20 10:52:48 +10:00
ad3e105303
Add dox documentation for wc_ecc_make_key_ex
2019-11-19 17:06:52 -07:00
c7f7d1b193
TLS supported curve extension - validate support fix
...
Check curve name is in range before checking for disabled
2019-11-20 09:38:06 +10:00
62eaa27b41
Review comment, avoid double-free
2019-11-19 15:29:48 -08:00
1a3455110e
Merge pull request #2599 from dgarske/cleanup_script
...
Useful script to cleanup test files created
2019-11-19 11:59:50 -08:00
5c4da3e6fa
Merge pull request #2598 from dgarske/max_file_sz
...
Improvements to file size checks
2019-11-19 11:59:21 -08:00
5de27443d0
Merge pull request #2596 from dgarske/mqx_fio_cleanup
...
Support for MQX 5.0 and cleanup of the MQX includes
2019-11-19 11:49:03 -08:00
7b160a8cf3
Make MAX_WOLFSSL_FILE_SIZE
overridable.
2019-11-19 07:46:50 -08:00
9a4614f6e1
Fix for possible uninitialized memSz
in bio.c
2019-11-19 05:35:22 -08:00
e7bff37421
Add settings.h build macro note.
2019-11-19 05:33:59 -08:00
1b8f136d29
ProcessPeerCerts jump to error handling instead of returning
2019-11-19 13:17:29 +10:00
f08dfb4afc
ProcessPeerCerts allocating memory for exts with OPENSSL_EXTRA properly
2019-11-19 13:03:20 +10:00
e6292eca9c
Merge pull request #2597 from ejohnstown/octeon-global
...
Sync OCTEON Sniffer
2019-11-18 17:06:30 -08:00
c6dac64438
Merge pull request #2594 from ejohnstown/maintenance-BLAKE2
...
Maintenance BLAKE2
2019-11-18 17:05:01 -08:00
fea1f1d6e5
Maintenance: ASN.1
...
1. Reject as an error any ASN.1 length value that is multibyte of length 0.
2019-11-18 17:02:19 -08:00
7a5c8f4e07
Merge pull request #2584 from SparkiDev/sp_rsa4096
...
SP now has support for RSA/DH 4096-bit operations
2019-11-18 15:38:47 -08:00
b646b7258b
Merge pull request #2585 from dgarske/webrtc_m79
...
Support for Google WebRTC (ref m79)
2019-11-18 15:33:49 -08:00
20c82f3c4b
Merge pull request #2586 from dgarske/STM32_HW
...
STM32 Crypto hardware fixes and improvements
2019-11-18 15:22:19 -08:00
90f7a96721
Merge pull request #2593 from ejohnstown/maintenance-DH
...
Maintenance: DH
2019-11-18 15:18:16 -08:00
12dfe027ed
Merge pull request #2595 from dgarske/hmac_devid
...
Adds PBKDF2 and Hash wrapper heap ctx and crypto callback support
2019-11-18 15:16:19 -08:00
74dd142a51
Review comment
2019-11-18 15:13:59 -08:00
abee442c1e
Useful script to cleanup test files created.
2019-11-18 15:08:54 -08:00
6ffd931db1
Merge pull request #2564 from SparkiDev/tlsext_list_fix
...
Modify linked list traversal - fix for compiler bug
2019-11-18 15:04:26 -08:00
a1e33e7ec9
Maintenance: OCSP
...
1. Check array index bounds before using them in arrays.
2. When processing an HTTP buffer, check that the new buffer size is
valid before allocating a new one.
2019-11-18 14:15:55 -08:00
48d0b53074
Fix for wolfSSL_cmp_peer_cert_to_file
compiler warning with size_t
vs long
.
2019-11-18 14:01:16 -08:00
ca5549ae91
Improvements for XFTELL
return code and MAX_WOLFSSL_FILE_SIZE
checking.
...
Fixes #2527
2019-11-18 13:49:06 -08:00
8347d00bf2
Maintenance BLAKE2
...
1. Remove the BLAKE2 HMAC from wolfSSL and its testing.
2019-11-18 13:31:15 -08:00
1542482cd5
Cleanup of the MQX file headers for STDIO. Cleanup of fio.h and nio.h includes to use wc_port.h. ZD 9453.
2019-11-18 12:14:34 -08:00
b780982aa4
Adds "devId" crypto device and "heap" context for Hash wrappers and PBKDF
...
* Adds new hash wrapper init `wc_HashInit_ex`.
* Adds new PBKDF2 API `wc_PBKDF2_ex`.
ZD 9494 (using PBKDF2)
2019-11-18 11:26:56 -08:00
14c986360d
Maintenance BLAKE2
...
1. Remove BLAKE2 support from HMAC.
2. Update doxy header for HMAC with removal of BLAKE2 and addition of SHA-3.
2019-11-18 10:45:30 -08:00
cb9f16d3cb
Fix for proper sizing of in-memory buffer for TLS benchmarking (32 is not always the max digest size).
2019-11-18 10:34:15 -08:00
12d2d17d18
Minor cleanups to TLS bench tool configuration.
2019-11-18 10:29:50 -08:00
95b83272dd
Implementation for SSL_CTX_add1_chain_cert
.
2019-11-18 10:19:48 -08:00
c9f7741dfb
Merge pull request #2567 from aaronjense/scan-build-fix
...
Scan-Build Fixes for PKCS7 and PKCS12
2019-11-18 10:21:14 -07:00
ea04dbede1
Merge pull request #2583 from ejohnstown/rng-ebsnet
...
RNG-EBSNET
2019-11-18 09:15:30 -08:00
7e17904c54
Fix for AES GCM Decrypt auth tag. ZD 9507
2019-11-18 06:46:50 -08:00
b676c69561
Fix for DES mutex return code. Fix TLS bench thread shutdown. README.md updates.
2019-11-18 06:46:20 -08:00
520a032b71
Add show x509 test
2019-11-15 13:23:08 -08:00
6ca12787ae
retrieve a stack of X509 certs in a cert manager and a store ctx
2019-11-15 13:23:08 -08:00
7819fedca7
Update for OpenSTM32 project. Adds TLS benchmarking tool, which test client/server for each cipher suite.
2019-11-15 12:10:09 -08:00
0c2c4fd91b
Improvements to tls_bench tool in wolfSSL lib for embedded use.
2019-11-15 12:09:19 -08:00
961f9c4ecc
Cleanup for invalid use of NO_SHA512
in api.c unit test.
2019-11-15 12:08:50 -08:00
a7e415d077
Fix for AEC CTR mode with STM32 and CubeMX.
2019-11-15 12:08:25 -08:00
27d95d1dfd
Add mutex protection on STM32 RNG, AES/DES and Hashing crypto hardware calls for thread safety. Fixes #2580
2019-11-15 12:08:11 -08:00
2a9449182c
* Make the wc_Stm32_Aes_Init
API always available for STM32. ZD 9503
...
* Fix for SHA256 hash context to only be included for `STM32_HASH_SHA2`. ZD 9503
2019-11-15 12:07:08 -08:00
4282346eef
Merge pull request #2551 from kaleb-himes/ZD5815-EBSNET
...
Implement porting efforts from ZD5241 and ZD5815
2019-11-15 09:24:10 -07:00
3cd5a97473
Maintenance
...
1. When getting the DH public key, initialize the P, G, and Pub pointers
to NULL, then set that we own the DH parameters flag. This allows
FreeSSL to correctly clean up the DH key.
2019-11-14 14:42:58 -08:00
604219f2fc
Sync OCTEON fix
...
1. For OCTEON builds, leave out the "-DCVMX_BUILD_FOR_LINUX_HOST" option
from CFLAGS by default so it makes standalone host builds.
2. Add a check of the variable OCTEON_HOST for linux to add back in the
"-DCVMX_BUILD_FOR_LINUX_HOST" to CFLAGS.
2019-11-14 14:21:44 -08:00
2ace532e45
Sync OCTEON fix
...
1. The sniffer's global device ID wasn't tagged as global.
2. Make sure the sniffer's global device ID is used.
2019-11-14 14:21:44 -08:00
7c78130f70
Sync OCTEON fix
...
The preprocessor selection for the WOLFSSL_GLOBAL macro for OCTEON wasn't getting selected.
2019-11-14 14:21:44 -08:00
4a2f8482b5
Remove static RSA setting
...
Customer confirmed their tests are passing without static rsa enabled.
2019-11-14 15:16:32 -07:00
8c6c4e2432
Add unique error codes to verify failures
2019-11-14 16:02:02 -06:00
22042830d6
Merge pull request #2588 from kojo1/BasicConst2
...
BasicConstraint, compatibility
2019-11-14 13:16:30 -07:00
dccb2e165e
if integer it is valid format with CA = False,
2019-11-14 14:51:58 +09:00
cc880e39ae
Add deterministic ECDSA sig gen. Fix corner cases for add point.
...
In verify, two points are added and they may either be the same point
(different z) or result in infinity.
If they are the same point then a double needs to be performed instead.
Detection of infinity added.
Calculation of wc_ecc_sig_size fixed to handle wehn there are more bits
in the order than in the modulus.
2019-11-14 12:49:45 +10:00
a3fca34471
Properly limit array access in OCSP response decoder
2019-11-14 03:19:07 +01:00
411b130369
Add new 4096-bit cert and key to distribution
2019-11-14 09:13:24 +10:00
8f08f001d2
Update the EBSNET GenerateSeed function with a better seed. It was
...
reseeding itself every few bytes and failing the simple entropy check.
2019-11-13 14:50:58 -08:00
af142b307b
Support for WebRTC (ref m79):
...
* Fixed `set1_curves_list` API's to use `const char*` for names.
* Fixed `ossl_typ.h` to include `ssl.h` compatibility.
* Added `SSL_CTX_up_ref`.
* Added `wolfSSL_set1_curves_list`
* Added `TLS_method` and `DTLS_method`
* Added `SSL_CIPHER_standard_name`.
* Added `X509_STORE_CTX_get0_cert`
* Added `SSL_CTX_set_cert_verify_callback`.
* Enabled "either" side support when `--enable-opensslall` is used.
* Changed `SSL_CIPHER_get_rfc_name` to use `wolfSSL_CIPHER_get_name` instead of stub.
2019-11-13 12:34:33 -08:00
99292158e4
Merge pull request #2573 from JacobBarthelmeh/staticmemory
...
handle case to avoid memcpy when staticmemory IO pool gives same buffer
2019-11-13 11:29:13 -08:00
76e7e7349b
Merge pull request #2575 from tmael/valgrind_dhtest
...
Fix memory leak in dh_test
2019-11-13 11:28:04 -08:00
46bc8e092a
Merge pull request #2582 from ejohnstown/abi-current
...
ABI
2019-11-13 11:24:45 -08:00
dab7d09570
Fix the possibility that memory is not free'd when GetLength returns 0
2019-11-13 11:55:45 -07:00
0beeb2356b
Fix scan-build not recognizing FlatAttrib array being initialized
2019-11-13 11:50:26 -07:00
e3fb746f1d
Merge pull request #2503 from dgarske/openvpn
...
wolfSSL Compatibility support for OpenVPN
2019-11-13 11:04:08 -07:00
546442c130
Fix for CAVP test issue trying to use AES_128_KEY_SIZE
and AES_IV_SIZE
.
2019-11-12 09:43:09 -08:00
5221c082f1
SP now has support for RSA/DH 4096-bit operations
2019-11-12 12:04:06 +10:00
d8e40dea3f
Fixes from peer review:
...
* Reduced codesize when building with `OPENSSL_EXTRA_X509_SMALL`.
* Additional argument checks in `wolfSSL_ASN1_BIT_STRING_set_bit`, `wolfSSL_ASN1_STRING_to_UTF8`, `wolfSSL_RSA_meth_new`, `wolfSSL_RSA_meth_set`.
* Fix for compiler warnings in asn.c using strncmp to duplicate string. "specified bound depends on the length of the source argument"
2019-11-11 15:39:23 -08:00
682cf6deac
wolfSSL ABI
...
Hide the RNG and ecc_key allocators from FIPS mode builds.
2019-11-11 15:16:39 -08:00
d17748b1ad
Fix for EC_GROUP_order_bits
and added unit test.
2019-11-11 14:58:23 -08:00
2bae1d27a1
wolfSSL Compatibility support for OpenVPN
...
* Adds compatibility API's for:
* `sk_ASN1_OBJECT_free`
* `sk_ASN1_OBJECT_num`
* `sk_ASN1_OBJECT_value`
* `sk_X509_OBJECT_num`
* `sk_X509_OBJECT_value`
* `sk_X509_OBJECT_delete`
* `sk_X509_NAME_find`
* `sk_X509_INFO_free`
* `BIO_get_len`
* `BIO_set_ssl`
* `BIO_should_retry` (stub)
* `X509_OBJECT_free`
* `X509_NAME_get_index_by_OBJ`
* `X509_INFO_free`
* `X509_STORE_get0_objects`
* `X509_check_purpose` (stub)
* `PEM_read_bio_X509_CRL`
* `PEM_X509_INFO_read_bio`
* `ASN1_BIT_STRING_new`
* `ASN1_BIT_STRING_free`
* `ASN1_BIT_STRING_get_bit`
* `ASN1_BIT_STRING_set_bit`
* `DES_check_key_parity`
* `EC_GROUP_order_bits`
* `EC_get_builtin_curves`
* `EVP_CIPHER_CTX_cipher`
* `EVP_PKEY_get0_EC_KEY`
* `EVP_PKEY_get0_RSA`
* `EVP_PKEY_get0_DSA` (stub)
* `HMAC_CTX_new`
* `HMAC_CTX_free`
* `HMAC_CTX_reset`
* `HMAC_size`
* `OBJ_txt2obj`
* `RSA_meth_new`
* `RSA_meth_free`
* `RSA_meth_set_pub_enc`
* `RSA_meth_set_pub_dec`
* `RSA_meth_set_priv_enc`
* `RSA_meth_set_priv_dec`
* `RSA_meth_set_init`
* `RSA_meth_set_finish`
* `RSA_meth_set0_app_data`
* `RSA_get_method_data`
* `RSA_set_method`
* `RSA_get0_key`
* `RSA_set0_key`
* `RSA_flags`
* `RSA_set_flags`
* `RSA_bits`
* `SSL_CTX_set_ciphersuites`
* `SSL_CTX_set_security_level` (stub)
* `SSL_export_keying_material` (stub)
* `DSA_bits` (stub)
* Changes to support password callback trial and NO_PASSWORD. Replaces PR #2505 .
* Renamed `wolfSSL_SSL_CTX_get_client_CA_list` to `wolfSSL_CTX_get_client_CA_list`.
* Cleanup of "sk" compatibility.
2019-11-11 14:58:23 -08:00
5a21cec030
wolfSSL ABI
...
Add ABI tags to the functions wolfSSL_Cleanup() to match wolfSSL_Init(),
wolfSSL_X509_free to match wolfSSL_load_certificate_file() which
allocates memory.
2019-11-11 10:16:58 -08:00
68e4014c3f
memset DhKeys
2019-11-11 09:43:10 -08:00
8246e02756
Merge pull request #2502 from cariepointer/gcm-tls10-fix
...
Return error with AES-GCM and negotiated versions < TLSv1.2
2019-11-08 15:06:54 -08:00
c6fa49d4b4
wolfSSL ABI
...
Add the ABI tag to the prescribed list of functions in the header and source files.
2019-11-08 15:06:18 -08:00
44552fe707
Merge pull request #2536 from dgarske/nxp_mmcau_align
...
Fix NXP MMCAU when data pointer is not aligned
2019-11-08 15:02:43 -08:00
801ffd4712
Merge pull request #2571 from SparkiDev/asn1_cert_parse_fix
...
Ensure space for name string. Reset policy count.
2019-11-08 15:02:02 -08:00
a2cdb87067
Add check for if length is <= 0 in wc_Arc4SetKey
2019-11-08 14:54:39 -07:00
99ee4a407d
Fix mem leak for valgrind
2019-11-08 12:09:46 -08:00
39eaaddeae
Add tests for AEAD cipher suites with TLSv1.1 and TLSv1.0
2019-11-08 10:04:58 -08:00
e329431bc1
Merge pull request #2572 from kaleb-himes/GH2559
...
Address logical fallacies and syntax issues in example server, addres…
2019-11-08 10:18:12 -07:00
1d02943658
Sanity check in wc_scrypt for invalid params <= 0
2019-11-08 09:40:07 -07:00
c69b6fb6d1
wolfSSL ABI
...
1. Add a blank #define WOLFSSL_ABI to tag functions as part of the ABI
to remind developers there are rules about those functions specifically.
2. Added allocators and deallocators for WC_RNG objects and ecc_key
objects so they don't have to be used on the stack.
3. Add tests for the new allocators.
2019-11-07 13:03:12 -08:00
f0d3d5d71c
80-character per-line coding standard format fix
2019-11-07 13:33:38 -07:00
95796c80b7
Add prototype for ebsnet_fseek
...
Customer confirmed prototype was not present in vfile.h, added prototype to wolfSSL header.
2019-11-07 13:31:02 -07:00
5ce88b5086
seperate sanity checks on size and rnd allocation
2019-11-07 13:12:17 -07:00
fd3e4abb46
handle case to avoid memcpy when staticmemory IO pool gives same buffer
2019-11-07 11:36:20 -07:00
ad192786b1
Remove double assignment to pt caught by scan-build test
2019-11-07 11:35:36 -07:00
e24059691c
Address logical fallacies and syntax issues in example server, addresses GH issue #2559
2019-11-07 10:30:12 -07:00
c06efb6c1f
Ensure space for name string. Reset policy count.
...
Only set the name string in one place, keeping a length of the name type
to copy. Also only move cert data index once.
Reset certificate extension policy number/count in case of malicious
cert with multiple policy extensions.
2019-11-07 13:51:50 +10:00
0fe5d40507
Merge pull request #2568 from aaronjense/iar-build-fix
...
Fix changed sign warning for IAR build
2019-11-06 15:47:15 -08:00
caaab11f60
Update from review
2019-11-06 15:58:50 -06:00
b2270a068f
Merge pull request #2566 from SparkiDev/malloc_unused_fix
...
Fix unused parameter when XMALLOC doesn't use params
2019-11-06 13:08:48 -08:00
c137c5a3e0
Merge pull request #2565 from SparkiDev/rsa_kg_sp_math
...
SP Math and RSA Key Gen working again
2019-11-06 13:08:19 -08:00
1becdb9f3b
Merge pull request #2563 from SparkiDev/x509_dname_index
...
Check domain name location index hasn't exceed maximum before setting
2019-11-06 13:07:42 -08:00
c995417d54
Merge pull request #2554 from SparkiDev/sp_misrac
...
MISRA-C changes to SP plus cppcheck fixes
2019-11-06 13:06:28 -08:00
15d4da1e14
Merge pull request #2562 from JacobBarthelmeh/staticmemory
...
fix for memory management on edge case with staticmemory
2019-11-06 13:04:33 -08:00
ba34b0d09f
Merge pull request #2547 from SparkiDev/rsa_pss_salt_len
...
Compile options for larger salt lengths in RSA-PSS
2019-11-06 13:03:15 -08:00
969488434a
Merge pull request #2544 from JacobBarthelmeh/SanityChecks
...
add null checks (QSH and CRYPTOCELL)
2019-11-06 12:18:00 -08:00
ea77cd743e
Fix changed sign warning for IAR build
2019-11-06 09:59:31 -08:00
cd7001904a
Merge pull request #2561 from ejohnstown/x509-loss
...
X.509 and Secure Renegotiation
2019-11-06 10:53:18 -07:00
d4ca48a513
Fix unused parameter when XMALLOC doesn't use params
2019-11-06 15:46:19 +10:00
65cd8a930e
SP Math and RSA Key Gen working again
2019-11-06 15:24:12 +10:00
a6e4926d2f
Init variables
2019-11-05 15:14:47 -08:00
d2c4798459
Modify linked list traversal - fix for compiler bug
...
KeyShare and PreSharedKey traverse linked list using a handle.
Customer reported their compiler couldn't handle the assignment, so,
using a temporary.
2019-11-06 08:57:33 +10:00
77c36b5ea9
Merge pull request #2542 from kojo1/BasicConst
...
x.509 basic constratint
2019-11-05 15:38:07 -07:00
52f28bd514
Check domain name location index hasn't exceed maximum before setting
2019-11-06 08:31:04 +10:00
890eb415b1
fix for memory management on edge case with staticmemory
2019-11-05 15:13:26 -07:00
165105af95
Merge pull request #2558 from danielinux/pwbased-no-asn
...
Allow pwdbased module to compile without ASN
2019-11-05 13:26:45 -08:00
e48cf88a70
Merge pull request #2556 from embhorn/arm-test-fix
...
Fix for ARM platforms
2019-11-05 12:25:56 -08:00
c337ce2703
Merge pull request #2560 from cconlon/cavppss
...
use wc_RsaPSS_CheckPadding() for selftest build instead of extended
2019-11-05 12:09:25 -08:00
72e1afbe99
X.509 and Secure Renegotiation
...
1. When retaining the handshake resources for a session using resumption, do not delete the peer's certificate. If keeping peer certificates is enabled, the certificate needs to exist so it may be examined.
2. Free the saved peer certificate when receiving a peer certificate during a renegotiation.
2019-11-05 11:03:34 -08:00
e429558166
use wc_RsaPSS_CheckPadding() for selftest build instead of extended
2019-11-05 10:48:36 -07:00
51ea806d8b
Allow pwdbased module to compile without ASN
2019-11-05 10:16:46 +01:00
1361e4dbef
remove extra setting of ecc key size with CRYPTOCELL build
2019-11-04 23:25:47 -07:00
e2b7bee9c8
Merge pull request #2533 from cariepointer/apache_bio_want_read
...
Apache: Return WANT_READ in wolfSSLReceive if BIO retry and read flags are set
2019-11-04 16:52:28 -08:00
32f93be0b6
Replace magic PSS salt length numbers with enums
2019-11-05 09:03:30 +10:00
5141623f48
Merge pull request #2548 from SparkiDev/rsa_check
...
Add more checks of RSA key
2019-11-04 13:05:35 -08:00
28da0075d1
Merge pull request #2545 from SparkiDev/scrypt_iters
...
Add scrypt API that takes iterations rather than cost
2019-11-04 13:01:32 -08:00
b723acf0f6
Merge pull request #2534 from SparkiDev/pss_1024_sha512_tls12
...
Pass the length of the RSA key in bits to PSS padding check in TLS
2019-11-04 11:42:55 -08:00
f4afa4bc87
Merge pull request #2540 from SparkiDev/etm_rehand
...
Fix Encrypt-Then-MAC when rehandshaking
2019-11-04 11:41:44 -08:00
16899b55b2
Fix for ARM platforms
2019-11-04 11:54:36 -06:00
e2fb359538
Merge pull request #2549 from JacobBarthelmeh/Testing
...
fix for macro typo's
2019-11-04 08:05:09 -08:00
683658de20
Merge pull request #2553 from miyazakh/fix_esp_buildfail
...
fix esp build failure
2019-11-04 07:44:01 -08:00
f590f6522d
MISRA-C changes to SP plus cppcheck fixes
2019-11-04 16:13:48 +10:00
35ec2bc6d4
Compile options for larger salt lengths in RSA-PSS
...
Salt length larger than the hash size allowed in RSA-PSS.
Passing -2 to PSS pad function uses maximum salt length.
Passing -2 to PSS un-pad function makes it discover salt length.
2019-11-04 14:27:02 +10:00
0c8ab5b0e4
fix esp build failure
2019-11-03 12:19:59 +09:00
76404c937e
#ifdef guard
2019-11-02 13:01:40 +09:00
2084006b61
Merge pull request #2550 from cconlon/mmcau
...
fix mmCAU classic XFREE on aligned ptr
2019-11-01 15:59:57 -07:00
ffb80126ff
Implement porting efforts from ZD5241 and ZD5815
2019-11-01 16:00:06 -06:00
6ba3aa88ca
fix for build after CI tests
2019-11-01 14:47:50 -06:00
98a2322dd9
Merge pull request #2525 from tmael/open_coexist
...
Raise an error when opensslcoexist option is used with openssl[all][extra]
2019-11-01 11:32:46 -06:00
e07e07f831
Merge pull request #2537 from JacobBarthelmeh/PKCS7
...
fix for pkcs7 verify streaming
2019-11-01 10:15:44 -06:00
be2cb302ea
fix mmCAU classic XFREE on aligned ptr
2019-11-01 09:56:28 -06:00
54f023ac2c
Clarify ipasc parameter usage
2019-11-01 10:33:49 -05:00
efca350cba
fix for macro typo's
2019-11-01 09:21:21 -06:00
54c7619f81
Add more checks of RSA key
...
Check d is in valid range, p*q == n, and dP, dQ and u are valid.
2019-11-01 16:25:57 +10:00
7623777857
Add scrypt API that takes iterations rather than cost
...
iterations = 1 << cost but matches APIs in other products and standard
2019-11-01 10:15:42 +10:00
6839110507
Update from review
2019-10-31 17:45:33 -05:00
9e852b3867
Merge pull request #2539 from dgarske/mutex_ref
...
Fixes for cases where mutex was not being free'd
2019-10-31 13:10:04 -07:00
b27c1df348
Merge pull request #2538 from SparkiDev/cppcheck_fixes_2
...
Fixes for errors using cppcheck
2019-10-31 13:08:19 -07:00
ac76b4b692
Merge pull request #2541 from SparkiDev/x25519_gcc_avx2
...
Fix loading and setting using RIP register with GCC
2019-10-31 13:07:27 -07:00
626e0efd99
Merge pull request #2530 from SparkiDev/pkcs11_tls_client
...
Use the public key type as private key type with PKCS #11
2019-10-31 13:06:32 -07:00
fca0705a0b
Merge pull request #2526 from aaronjense/libwebsockets-build-fix
...
libwebsockets build fixes
2019-10-31 13:05:46 -07:00
550fbcfff7
add null checks (QSH and CRYPTOCELL)
2019-10-31 10:07:47 -06:00
58d800fbb7
Adding support for IP address verification
2019-10-31 09:15:22 -05:00
9fc33e461c
Check names in verify callback.
2019-10-31 09:15:22 -05:00
2ef4d1a16e
Keep else to GetBoolean
2019-10-31 17:29:46 +09:00
4f602e02ba
accept ASN_INTEGER for compatibility
2019-10-31 12:06:59 +09:00
adff4e719a
Fix loading and setting using RIP register with GCC
2019-10-31 12:14:05 +10:00
4be36ef2bd
Fix Encrypt-Then-MAC when rehandshaking
...
New, encrypted handshakes change over to ETM correctly now.
2019-10-31 09:14:42 +10:00
28d466cb10
Fix to ensure 4-byte alignment is default for MMCAU with SHA1, SHA256 and MD5.
2019-10-30 13:34:57 -07:00
760a90ef5d
Fixes for cases where mutex is not being free'd.
2019-10-30 10:11:06 -07:00
c354b240f2
Fixes for errors using cppcheck
2019-10-30 14:48:21 +10:00
a0955f8221
fix for pkcs7 verify streaming
2019-10-29 16:47:30 -06:00
7f42b71571
Fix NXP MMCAU when data pointer is not aligned.
2019-10-29 13:45:25 -07:00
6bc16a4acb
Merge pull request #2532 from aaronjense/mp-public-defines
...
Fix for configure used in wolfssl-examples/signature/rsa_vfy_only.…
2019-10-29 08:46:03 -07:00
eb03e5de1e
Pass the length of the RSA key in bits to PSS padding check in TLS
2019-10-29 11:56:35 +10:00
e8db4cc2a0
Apache: Return WANT_READ in wolfSSLReceive if BIO retry and read flags are set
2019-10-28 15:08:00 -07:00
140796d2aa
Merge pull request #2504 from ejohnstown/sync-octeon
...
Synchronous OCTEON Sniffer Support
2019-10-28 12:25:57 -07:00
0aeb87f284
Merge pull request #2529 from SparkiDev/etm_max
...
Fix check for plaintext length when using Encrypt-Then-MAC
2019-10-28 11:59:32 -07:00
51e8abf126
Merge pull request #2531 from SparkiDev/nginx_unittest
...
Fix unittest to pass when compiling for NGINX
2019-10-28 11:27:22 -07:00
34c37c58f4
Fixes for configure used in wolfssl-examples/signature/rsa_vfy_only and fix for wrong WOLFSSL_MP_PUBLIC defines.
...
./configure CFLAGS=-DWOLFSSL_PUBLIC_MP --disable-asn --disable-filesystem --enable-static --enable-shared --enable-cryptonly --enable-sp=smallrsa2048 --enable-sp-math --disable-dh --disable-ecc --disable-sha224 --enable-rsavfy
2019-10-28 09:50:59 -06:00
8a92e1eae6
Fix check for plaintext length when using Encrypt-Then-MAC
2019-10-28 16:28:52 +10:00
ad9522c765
Add WOLFSSL_OLDTLS_AEAD_CIPHERSUITES to allow AEAD cipher suites in TLSv1.0 and TLSv1.1
2019-10-25 09:51:11 -07:00
b80b10b980
Merge pull request #2498 from danielinux/stm32wb55
...
Support for STM32_PKA accelerator
2019-10-24 15:41:08 -07:00
9f34826173
stm32_pka: fixed remarks from code review
2019-10-24 21:48:35 +02:00
390b936331
stm32_pka: using XMEMCPY
2019-10-24 20:49:43 +02:00
f97452c859
STM32_PKA: using XMEMSET
2019-10-24 20:46:03 +02:00
025754e774
Fixed alignment/padding for hash. ECC tests passing on target.
2019-10-24 20:32:47 +02:00
17f44d4d29
OCTEON Sync
...
1. Add attributes to the OCTEON functions so they aren't optimized.
2. Disable the same test cases for OCTEON as we do QAT in sync.
2019-10-24 10:00:20 -07:00
3ac4aa5a9b
Merge pull request #2524 from cconlon/cau_iar
...
mmCAU Classic AES key alignment, IAR warnings fixes
2019-10-24 09:23:20 -07:00
3677e4d735
[stm32hal-pka] Fixed after reviews, fix result allocation for sign/mulmod
2019-10-24 16:06:38 +02:00
0b93109b3a
throw error when opensslcoexist configured with opensslall or opensslextra
2019-10-23 15:51:19 -07:00
400dcfebba
Merge pull request #2516 from danielinux/freescale-ltc-spmath
...
Fixed Freescale LTC crypto module to compile with SP math
2019-10-23 15:11:43 -07:00
28cc7daa68
Merge pull request #2511 from tmael/BN_bn2hex
...
Fix for hex digits with fastmath and normal integer
2019-10-23 15:10:40 -07:00
954d1ad13e
Sniffer Update
...
1. Add ssl_SetWatchKeyCallback_ex() which was missing.
2. Fix linking issue with OCTEON libraries.
2019-10-23 15:03:50 -07:00
cb7b4af986
Merge pull request #2523 from JacobBarthelmeh/SanityChecks
...
fix for selftest build
2019-10-23 15:24:16 -06:00
4135850a32
Merge pull request #2522 from dgarske/rel_async_4.2.0
...
Fixes for building with async (rel v4.2.0 prep)
2019-10-23 14:33:00 -06:00
5b9e005802
fix for selftest build
2019-10-23 12:09:20 -06:00
b8f4b1a712
QAT Header Hiding
...
For the sync QAT, the QAT headers are included into the library after it
has been built and is being used. The actual headers should only be used
when building wolfSSL and should be hidden from the user.
1. Most of the functions in the sync QAT and OCTEON headers don't need
to be exported. Move all of that into the source files. Only export the
init and deinit functions.
2. Remove inline from the OCTEON support functions.
3. Remove the AES-ECB files for sync OCTEON as unused.
4. Configure defaults to OCTEON2 build, can be overridden with variable.
2019-10-23 09:58:11 -07:00
1ad23334bf
Sync Sniffer API Cleanup
...
1. Switched the IntelQa sync API back to local.
2. Added two functions to setup and cleanup the IntelQA device.
3. Changed the Octeon functions to match the IntelQa functions.
4. Updated sniffer, wolfcryptest, and benchmark.
2019-10-23 09:58:11 -07:00
b0dafbcd1b
Sync Octeon Sniffer
...
Added back some changes from a dropped commit.
1. The Octeon README should be a stub.
2. Changed the license notice in the octeon sync files back to GPLv2.
3. Added a flag to Aes that needed a build guard around it.
4. Replaced the disable for sniffer session stats.
2019-10-23 09:58:11 -07:00
54f0b1a44a
Sync QAT Fixes
...
1. The QAT callback's worker functions need to copy the IV into the AES IV register. QAT doesn't update it automatically.
2. Update the GMAC test to set its device to INVALID_DEVID.
3. Always allocate NUMA buffers before running crypto operation and store the results.
4. The QAT does not like non-multiple of 4 iv lenths, and aad lengths. Or 0. Remove a few test cases for those.
5. QAT wasn't getting a pointer to store the auth tag for GCM. Then store it.
2019-10-23 09:58:11 -07:00
825f311959
add OCTEON and QAT to wolfCrypt test, update SHA-1 to reset ret when it will do the software sha
2019-10-23 09:58:10 -07:00
41e0712eb0
Synchronous Cavium OCTEON Support for Sniffer
...
1. Fixes for AES-GCM.
2019-10-23 09:58:10 -07:00
67b11b8ece
Fixing some play-nice between sync QAT and sync Octeon.
2019-10-23 09:58:10 -07:00
989c964a95
Synchronous Cavium OCTEON Support for Sniffer
...
1. Add configure option for sync IntelQA that uses the crypto callback API.
2. Make a synchonous copy of the quickassist files.
3. Tie in the crypto device to the sniffer.
4. When making a sniffer build, define static DH enabled.
5. The readme files in the Cavium were being added to the distro optionally, changed to always add the readme files.
6. Added an include of the cavium_octeon header in the wc_ports.c.
7. Updated the Cavium OCTEON callback for AES-GCM.
8. Add the global tag to the list of crypto callback function pointers.
9. Add an accessor to the OCTEON crypto callback module to return the device ID of the OCTEON device.
10. Add a new version of ssl_SetWatchKeyCallback which takes an additional parameter of a device ID. This ID is used to set up the wolfSSL_CTXs in the sniffer session trackers.
11. Update the benchmark to use sync OCTEON and QAT.
2019-10-23 09:58:10 -07:00
7386bd4df1
Fixes for building with ./configure --enable-asynccrypt --enable-all CFLAGS="-DWC_ASYNC_NO_CRYPT"
2019-10-22 13:37:16 -07:00
48c4b2fedc
Merge pull request #2521 from JacobBarthelmeh/Release
...
prepare for release version 4.2.0
2019-10-22 09:12:33 -07:00
8ce3b3a5e6
Use the public key type as private key type with PKCS #11
2019-10-22 10:34:44 +10:00
a3c09f6794
Fix unittest to pass when compiling for NGINX
2019-10-22 08:47:49 +10:00
1cbc2536cc
prepare for release version 4.2.0
2019-10-21 16:32:41 -06:00
32f537cb6c
wrap time_t requirement in ssl.h by openssl extra build to fix sgx build
2019-10-21 16:29:31 -06:00
497818525a
check on keygen for make rsa key function
2019-10-21 14:54:17 -06:00
9b8f1dadd0
Merge pull request #2520 from JacobBarthelmeh/Testing
...
Testing
2019-10-21 12:20:53 -07:00
eaa8f2a957
libwebsockets build fixes
...
1. Add --enable-libwebsockets option
2. Add OPENSSL_NO_EC (used in libwebsockets)
3. Add SSL_MODE_RELEASE_BUFFERS and debug message for when wolfSSL_CTX_set_mode doesn't recognize a mode.
2019-10-21 12:03:18 -06:00
132877ea0b
Merge pull request #2519 from ejohnstown/dtls-fips-fix
...
Fix DTLS+OPENSSLALL+FIPS Failure
2019-10-21 10:00:23 -07:00
09a0859865
fix for fortress and no sha build with encrypted keys
2019-10-21 09:37:24 -06:00
e24787c8e4
add ecc header for fp_ecc cache free
2019-10-21 09:21:46 -06:00
ea45da5fa8
change add_all_* to be evp table init and fix valgrind report
2019-10-20 01:13:43 -06:00
26793359a2
Fix DTLS+OPENSSLALL+FIPS Failure
...
There was a problem with the combination of DTLS, OpenSSL Compatibility,
and FIPSv2 where the DTLS server would fail out because a HMAC key was
too short. FIPS requires a HMAC key be a minimum size. The DTLS server
uses HMAC to generate the first cookie key when initialized. When using
OpenSSL, the feature for creating a DTLS endpoint with its side being
set late is tested. The DTLS cookie wasn't getting set at init because
the server was "neither" at the time. Added a call to set cookie when
initializing a neither endpoint into a server.
2019-10-18 16:30:27 -07:00
42ddd63952
exclude packed __attribute__ on IAR ICC < 9
2019-10-18 16:33:01 -06:00
c18ff36959
fix uninitialized variable warning in IAR-EWARM 7.50.2
2019-10-18 14:08:23 -06:00
c4afbb3685
align AES key if needed when using MMCAU classic
2019-10-18 14:02:43 -06:00
0eefa80d74
initialize max pathlen to preserve ASN no signer error
2019-10-18 11:30:08 -06:00
a0a572cf3e
fix sha256 build on armv8
2019-10-18 11:04:45 -06:00
0e73af8b88
Merge pull request #2515 from JacobBarthelmeh/Testing
...
Initial pass on test cycle
2019-10-17 16:02:17 -07:00
7135e9e500
Merge pull request #2517 from dgarske/x509_date
...
Fix to restore notBefore/notAfter functions
2019-10-17 16:59:20 -06:00
fb8d2d4b2f
Fix to restore notBefore/notAfter functions that were removed in PR #2462 . These are not openssl compatibility functions, but are used by JSSE.
2019-10-17 13:02:00 -07:00
78e1336598
Merge pull request #2514 from dgarske/fix_async_next_iv
...
Various fixes for asynchronous mode
2019-10-16 13:52:47 -07:00
b7d4c9f839
fix build with no server and enable all
2019-10-16 14:19:50 -06:00
f41f67d231
Fixed Freescale LTC crypto module to compile with SP math
2019-10-16 15:44:58 +02:00
b4a3ad6e2d
fix test case for enckeys + des3 with md5 disabled
2019-10-15 17:07:05 -06:00
acd0a55d47
add new certs to extra dist
2019-10-15 14:23:01 -06:00
1267987c31
Review comment
2019-10-15 12:24:57 -07:00
1a18e3bba8
Add leading zero padding for odd hex ASCII digits
2019-10-15 11:54:58 -07:00
5c07391f1b
Various fixes for asynchronous mode:
...
* Fix for AES CBC issue with IV (QAT only).
* Fix for test cases with QAT.
* Remove poorly placed debug for AES CFB.
2019-10-15 11:18:55 -07:00
928eb36b5e
Merge pull request #2513 from JacobBarthelmeh/UnitTests
...
update external test certificate
2019-10-15 11:18:01 -07:00
63e74554a8
fix for warning when using c++ compiler
2019-10-15 10:07:02 -07:00
bb6eeefe26
fix for build with --enable-all and gcc-9 on Linux
2019-10-15 09:56:26 -07:00
4bde06fbe3
fix for pkcs11 found running build_test.pl script
2019-10-15 10:25:46 -06:00
b27504b222
update external test certificate
2019-10-15 10:11:38 -06:00
441f3a7f1f
Add leading zero for odd number of hex digits
2019-10-14 16:43:45 -07:00
95c036a08a
static analysis tests for memory management
2019-10-14 17:17:46 -06:00
d30e4ac74f
Merge pull request #2499 from ejohnstown/sniffer-features
...
Sniffer Features
2019-10-14 15:35:55 -07:00
c3e99e1394
Merge pull request #2510 from tmael/bio_base64
...
Fix a return value from wolfSSL_BIO_BASE64_write()
2019-10-14 15:44:14 -06:00
f0dfe5355b
Sniffer for IPv6
...
1. Better length checking on the IPv6 extension headers.
2. Removed the default size update analogous to the IPv4 header check
function. It cannot ever be 0, so the update was unnecessary.
2019-10-14 10:17:37 -07:00
df77088d5c
Merge pull request #2461 from kaleb-himes/ZD_5541_PathLenConstraint
...
addressing non RFC compliance in handling of pathLen constraint
2019-10-14 09:41:09 -07:00
9560b905af
Merge pull request #2509 from cconlon/selftest_version
...
Add CAVP selftest version API prototype
2019-10-14 09:23:16 -07:00
2c3e4a2d18
Merge pull request #2508 from ejohnstown/dtls-fix
...
DTLS Redundant Check
2019-10-13 10:05:44 -07:00
afb1c5f252
Merge pull request #2431 from JacobBarthelmeh/coldfire
...
M68K (coldfire MCF5441X) wolfcrypt build and examples
2019-10-13 09:16:03 -07:00
f2a3da94b6
refactor some openssl extra functions for cryptonly use
2019-10-11 16:40:08 -06:00
54b6148259
Add comment
2019-10-11 15:19:02 -07:00
ccc500e13f
Correct return value from wolfSSL_BIO_BASE64_write()
2019-10-11 14:52:53 -07:00
9357db4d0c
check value of ret in test cases
2019-10-11 15:27:15 -06:00
306b280ccd
Add test cases and implement peer suggestions
...
Fix failing jenkins test cases
Add detection for file size with static memory
Account for cert without pathLen constraint set including test cases
Resolve OCSP case and test where cert->pathLen expected to be NULL
2019-10-11 15:03:38 -06:00
d7fe000cfe
M68K (coldfire MCF5441X) wolfcrypt build and examples
...
fix for make dist and cleanup makefile
add aes file to Makefile
macro guards and entropy warning
add AES to build
2019-10-11 14:56:34 -06:00
fd6328aa8e
adjust NETBSD selftest tag in fips-check.sh for CAVP version API
2019-10-11 14:29:41 -06:00
2c6c88266b
add prototype for wolfCrypt CAVP version in selftest.h
2019-10-11 14:18:04 -06:00
cd934a95a4
Merge pull request #2445 from JacobBarthelmeh/SanityChecks
...
sanity check on resulting ecc size
2019-10-11 10:53:20 -07:00
9c5fd165d0
addressing non RFC compliance in handling of pathLen constraint
2019-10-10 16:45:29 -06:00
774c0c5c3c
Remove a redundant sequence number check for epoch 0.
2019-10-10 14:21:14 -07:00
fabc6596b3
Merge pull request #2369 from JacobBarthelmeh/Testing
...
fix for inject clear alert from client test case
2019-10-10 13:25:51 -07:00
d781734b55
Merge pull request #2507 from cariepointer/apache_updates
...
Apache updates
2019-10-10 12:45:01 -07:00
65d1c3b8ce
Merge pull request #2506 from tmael/bio_mem_base64
...
Fix for BIO and base64 encoding/decoding
2019-10-10 13:41:38 -06:00
1d7f0de5b5
Fixes from review, adds some error checking, and adds const variables
2019-10-10 09:13:35 -07:00
4fa2b71848
Minor changes requested from review
2019-10-09 15:38:26 -07:00
af8968ee5e
Add REQUIRES_AEAD and move functionallity for checking AEAD ciphers to CipherRequires()
2019-10-09 14:37:39 -07:00
d137cab427
Update in XSTRCAT call
2019-10-09 13:12:34 -07:00
2312d0e125
Dynamically allocate buffer in wolfSSL_X509V3_EXT_print
2019-10-09 12:54:23 -07:00
e22563ed00
BIO chain test
2019-10-09 11:38:07 -07:00
d89f9ddc42
Update X509V3_EXT_print for different extension types
2019-10-09 11:10:27 -07:00
5adcee9f2c
Update testsuite to expect ADH-AES256-GCM-SHA384 to fail with TLSv1.0 and TLSv1.1
2019-10-09 08:36:47 -07:00
99209d78a3
STM32 PKA: added include statement
2019-10-09 13:19:57 +02:00
0dfc64678c
STM32 PKA: added function prototype
2019-10-09 13:15:56 +02:00
3465a487d3
STM32 PKA fix: remove reverse array operations
2019-10-09 10:22:04 +02:00
89db0da0aa
Synchronous Quick Assist Support for Sniffer
...
1. Fixed a compiler warnings.
2. Fixed a memory issue when using the storage callback with QAT.
2019-10-08 16:49:38 -07:00
b7fe49c8b4
NULL terminate a character sequence
2019-10-08 15:42:39 -07:00
a84fbeae6b
Fix for a memory BIO and handle BIO chains
2019-10-08 12:26:54 -07:00
ff15b3cfaa
better display of the IPv6 addresses in the sniffer
2019-10-08 11:34:36 -07:00
136bc45857
Update wolfSSL_X509_NAME_print_ex for printing X509_NAME in reverse order
2019-10-07 11:36:00 -07:00
98b8cd35d8
Add ALT_NAMES_OID to switch in wolfSSL_X509_set_ext and update X509V3_EXT_print
2019-10-07 11:29:35 -07:00
b247b4565c
Fixes for build warnings with apache httpd
2019-10-07 11:15:55 -07:00
df22115920
Return error with AES-GCM and negotiated versions < TLSv1.2
2019-10-07 08:28:00 -07:00
625bd121f2
Merge pull request #2495 from JacobBarthelmeh/staticmemory
...
check on if free'ing ctx/method back to heap hint
2019-10-07 08:10:05 -07:00
8ec90339d9
Change the sniffer testsuite to do the IPv6 test when the "-6" option is
...
on the command line.
2019-10-05 19:26:41 -07:00
f025f08315
Sniffer touches for Windows.
2019-10-04 17:06:35 -07:00
a467c75390
Change the GPL version back to v2 for the quickassist_sync files.
2019-10-04 14:56:42 -07:00
b6b57154e5
Add the new IPv6 sniffer test file to the automake list.
2019-10-04 14:54:17 -07:00
89ff909d73
Sniffer IPv6
...
1. Sorted out IPv6 configuration for sniff test.
2. Tests the sniffer using an IPv6 file.
2019-10-04 14:54:17 -07:00
ebd435ae46
skip IPv6 extended headers
2019-10-04 14:54:17 -07:00
a5bfb8a18b
Change the IP address wrappers to include the version. Makes comparing
...
easier. Hard-coded some IPv6 localhost tests.
2019-10-04 14:54:17 -07:00
d1d2eb0edd
Add IPv6 to the sniffer.
2019-10-04 14:54:17 -07:00
8b21082abe
Use wrapper macros for all touches of the sniffer statistics mutex.
2019-10-04 14:54:17 -07:00
1b057df610
When enabling SHOW_SECRETS one of the array counter variables for a
...
secret had a type mismatch. Changed the index to a word32 to match the
boundary variable's type.
2019-10-04 14:54:17 -07:00
841e469340
Convert the data the snifftest is about to print into printable text.
...
Anything that isprint() or isspace() is kept, anything else is changed
to a period.
2019-10-04 14:54:17 -07:00
725243b132
Changed how the sniffer calculates the sslFrame size, sslBytes, and the
...
end of packet pointer. The end of packet pointer is based on sslFrame
and sslBytes. sslBytes is calculated from the total length in the IP
header, rather than the caplen. The caplen may include things like
Ethernet's FCS, which throws packet processing off.
2019-10-04 14:54:17 -07:00
b2fb6d1a81
Move some stats captures to a different location.
2019-10-04 14:54:17 -07:00
3256fef7f9
Sniffer Chain Buffers
...
1. Fixed an issue when a TLS record is split across two chain buffers.
The second buffer was being treated as a new record.
2. Fixed an issue with STARTTLS_ALLOWED where the input buffer isn't
getting cleared and the skipped data just builds up blocking TLS
records.
2019-10-04 14:54:17 -07:00
53c7f864b2
Add midding function prototype.
2019-10-04 14:54:17 -07:00
b6ca72549c
Sniffer Fixes
...
Added a flag to disable the normally enabled session stats, WOLFSSL_NO_SESSION_STATS.
2019-10-04 14:54:17 -07:00
dea5e73852
Sniffer Chain Input
...
Add a new method for handling input records where the input is in the form of an iovec list.
2019-10-04 14:54:17 -07:00
62ac388f55
Store Data Callback
...
Added a callback and support to allow one to handle storing the data
directly without reallocating the data buffer. Also added an example
that uses this callback if the callback is enabled in the build.
2019-10-04 14:54:17 -07:00
98e94a6f0f
Added a preprocessor guard around ssl_GetSessionStats().
2019-10-04 14:54:17 -07:00
a0ad39cf70
Sniffer Stats
...
Moved the increment of the resume misses statistic.
2019-10-04 14:54:17 -07:00
73273f4fec
Sniffer Memory
...
1. Modify the sniffer code to use XMALLOC and XFREE.
2. Added some new dynamic memory types for the sniffer.
2019-10-04 14:54:17 -07:00
0e1073f622
Sniffer Statistics
...
Addded two more statistics, cache hits and cache inserts.
2019-10-04 14:54:17 -07:00
4292936efc
wolfSSL Global
...
1. Renamed the global variable tag to WOLFSSL_GLOBAL.
2. Tagged several more global variables with WOLFSSL_GLOBAL.
2019-10-04 14:54:17 -07:00
bbc208ad33
Updated some more globals in the sniffer and session cache with being shared.
2019-10-04 14:54:17 -07:00
a991cc42f4
Add function wolfSSL_get_cipher_name_iana_from_suite() a wrapper around
...
internal API GetCipherNameIana().
2019-10-04 14:54:17 -07:00
87a8447f0d
1. Added a tag for global variables in environments where they aren't
...
shared across threads by default.
2. Set the Trace file and flag up with the shared flag.
2019-10-04 14:54:17 -07:00
743a6ab829
Update the decrypted packet and byte counts.
2019-10-04 14:54:17 -07:00
dd9635d8ff
Merge pull request #2469 from embhorn/sk_types
...
Sk types
2019-10-04 14:44:25 -07:00
30829cec09
Merge pull request #2482 from SparkiDev/cppcheck_fixes_1
...
Fixes from using cppcheck tool
2019-10-04 14:39:31 -07:00
b213a962e9
Merge pull request #2493 from ejohnstown/sync-qat
...
Synchronous Quick Assist Support for Sniffer
2019-10-04 11:45:08 -07:00
c26a7ccb68
Fix copy-paste from LTE module
2019-10-04 20:37:38 +02:00
52bf19eefd
Added initial support for STM32_PKA ECC accelerator
2019-10-04 20:15:33 +02:00
0d43c1f3d7
Merge pull request #2488 from aaronjense/openssh-fixes
...
Fix defines that aren't in configure.ac
2019-10-04 10:35:07 -07:00
d48e904c16
Merge pull request #2496 from embhorn/test_ASN1_INTEGER_set
...
Add conditional check to test_wolfSSL_ASN1_INTEGER_set test case failing for 32-bit platform
2019-10-04 10:33:37 -07:00
48d872187d
Synchronous Quick Assist Support for Sniffer
...
1. Add a HardwareStop for the QAT sync build in wolfCrypt_Cleanup();
2019-10-04 09:01:59 -07:00
a258b84018
Merge pull request #2497 from danielinux/openssl-cleanup
...
Fix include path issue for openssl compatibility for dh.h.
2019-10-04 08:23:37 -07:00
f47a9c8b20
Add conditional to 64-bit tests
2019-10-04 09:41:48 -05:00
3183ccc0c8
x509.h: include the correct header
2019-10-04 15:04:35 +02:00
5f1dcc3b0c
Removed inclusion of openSSL header
2019-10-04 10:22:38 +02:00
82fc96b7f3
adjust onHeap to be a bit field
2019-10-04 08:44:00 +07:00
197b22973b
Merge pull request #2490 from dgarske/riscv
...
Consolidate RISC-V examples and fix `make dist` file error
2019-10-03 15:08:49 -07:00
12bf46296e
Consolidate RISC-V examples. Fix make dist
file error.
2019-10-03 11:08:50 -07:00
f5a4b82302
Merge pull request #2492 from ejohnstown/titan-cache
...
Titan Session Cache
2019-10-03 09:52:51 -07:00
177bab84e5
Synchronous Quick Assist Support for Sniffer
...
1. Add missing deinitializers for the QAT as the sniffer exits.
2019-10-03 09:15:50 -07:00
df2c27af32
check on if free'ing ctx/method back to heap hint
2019-10-03 08:39:18 -07:00
c0a4143942
Titan Session Cache
...
1. Added a new build option for a TITAN session cache that can hold just over 2 million session entires.
2. Reordered the cache options from largest to smallest.
2019-10-02 14:36:38 -07:00
3b989329cd
Merge pull request #2491 from aaronjense/fix-shadow-ret
...
Fix shadow redeclaration
2019-10-02 12:17:35 -07:00
9a5eb1bb67
Synchronous Quick Assist Support for Sniffer
...
1. Add configure option for sync IntelQA that uses the crypto callback API.
2. Refactor the IntelQA configure checks so they are usable by both the sync and async options.
3. Make a synchonous copy of the quickassist files.
4. Replace the printfs in the code with a logging macro.
5. Added padding to the AES_KEY structure for WOLF_CRYPTO_CB.
6. Tie in the crypto device to the sniffer.
7. When setting up the symmetric operation, add a build case for the sniffer to use malloc instead of realloc. Sniffer usually uses the middle of another buffer for the input data rather than the beginning of the buffer as it has the TCP/IP data to handle as well.
8. Add the raw key to the DES3 structure.
9. Copy the functions from qa_mem over to qa_sync.
2019-10-02 10:08:46 -07:00
0340b323cd
Fix shadow redeclaration
2019-10-02 09:41:06 -06:00
91222bc887
Fix defines that aren't in configure.ac
2019-10-02 09:14:47 -06:00
43e391528d
Merge pull request #2489 from ejohnstown/sniffer-etm
...
Sniffer and Encrypt-Then-Mac
2019-10-02 08:05:25 -07:00
ca817c50aa
Merge pull request #2481 from dgarske/nxp_mmcau
...
Improvements to SHA-1, SHA-256 and MD5 performance
2019-10-01 15:16:50 -06:00
7261ed8b6f
Sniffer and Encrypt-Then-Mac
...
The sniffer doesn't know how to deal with ETM. If the sniffer is enabled, disble ETM.
2019-10-01 13:00:55 -07:00
901ee627fc
Fixes from using cppcheck tool
...
Various fixes for uninitialized variable use.
sniffer.c: close file when seek fails
tls.c: fix QSH_GET_SIZE macro
wolfio.c: uIPGenerateCookie: use the parameter, _ctx, instead of self
referencing.
wolfssl_adds.c: check for equivalent to XBADFILE to indicate error.
SP: change right shift of signed value to unsigned
sp_int.h: define 128-bit types
types.h: change a XMALLOC define to not use (,,) - cppcheck doesn't like
it and is unnecessary.
2019-10-01 09:22:00 +10:00
ea68e146c7
Merge pull request #2487 from JacobBarthelmeh/Fuzzer
...
fix for infinite loop with CSR2
2019-09-30 10:38:26 -07:00
caa5ba7551
Merge pull request #2411 from ejohnstown/wolfrand
...
wolfRand
2019-09-30 11:11:18 -06:00
056c374f85
Merge pull request #2486 from miyazakh/update_tisp_readme
...
update tsip porting readme
2019-09-30 10:07:46 -06:00
e7c2892579
fix for infinite loop with CSR2
2019-09-30 21:32:25 +07:00
5486b535d1
update tsip readme
2019-09-29 17:09:08 +09:00
43476e80d4
Merge pull request #2462 from dgarske/webrtc
...
Support for Google WebRTC
2019-09-27 14:24:11 -07:00
ab4a78fdae
Merge pull request #2485 from aaronjense/HAproxy-defines
...
Fix defines for HAProxy build
2019-09-27 14:37:42 -06:00
4c89a21d12
Updates from peer review. Refactor to combine some BIO elements into ptr
. Revert change to BIO_set_fd.
2019-09-27 11:19:42 -07:00
b47039b7ec
Fix for possible unused local32 warning.
2019-09-27 09:22:18 -07:00
bfa20c53b0
Fix defines for HAProxy build
2019-09-27 09:18:27 -06:00
937a344682
Merge pull request #2484 from SparkiDev/armv8-x18-redo
...
Refix stopping use of x18 register
2019-09-26 18:55:59 -07:00
5bcf54b9e2
Refix stopping use of x18 register
2019-09-27 09:41:54 +10:00
1f393c9dde
Merge pull request #2483 from JacobBarthelmeh/BuildOptions
...
early data and enc-then-mac build fixes
2019-09-27 08:00:53 +10:00
78f6bbcdb8
Adjusted the alignement macro to use WC_HASH_DATA_ALIGNMENT
for shared settings across hash algos.
2019-09-26 11:53:24 -07:00
6bfe6761d8
Disable the new hashing aligned build option by default. Does not increase performance... the memcpy is faster than the alignment check on modern CPU's. Embedded systems may benefit from this though, so leaving support for it in place.
2019-09-26 11:49:33 -07:00
4c709f1f2c
Improvements to SHA-1, SHA-256 and MD5 performance:
...
* Added detection for buffer alignment to avoid memcpy.
* Added MD5 and SHA-1 support for XTRANSFORM_LEN to process blocks.
* Cleanups for consistency between algorithms and code commenting.
* Enhancement for NXP MMCAU to process more than one block at a time.
* Improved MMCAU performance: SHA-1 by 35%, SHA-256 by 20% and MD5 by 78%.
```
NXP K64 w/MMCAU after:
MD5 8 MB took 1.000 seconds, 7.910 MB/s
SHA 4 MB took 1.005 seconds, 3.644 MB/s
SHA-256 2 MB took 1.006 seconds, 2.306 MB/s
NXP K64 w/MMCAU before:
MD5 4 MB took 1.004 seconds, 4.450 MB/s
SHA 3 MB took 1.006 seconds, 2.670 MB/s
SHA-256 2 MB took 1.008 seconds, 1.913 MB/s
```
2019-09-26 11:32:59 -07:00
a1b324f7f8
Adding sk_free support for CONF_VALUE
2019-09-26 11:28:59 -05:00
9571f2fce8
Merge pull request #2447 from SparkiDev/sp_const
...
Change static globals to const where possible
2019-09-26 09:11:23 -07:00
34e0eb498a
Fix for X509_set_subject_name
and X509_set_issuer_name
API unit test macro enables.
2019-09-26 08:42:35 -07:00
606b76d06e
Fix for WPAS certificate size difference. Fix so BIO_METHOD is compatible. Moved BIO stuff into bio.h.
2019-09-26 08:42:35 -07:00
a5f9d38c0d
Remove the BIO method custom... its not compat. Fix bio->ptr to be void*
.
2019-09-26 08:42:35 -07:00
872d222b59
* Adds the following openssl compatibility API's:
...
- SSL_CIPHER_get_id
- SSL_CIPHER_get_rfc_name
- SSL_get_cipher_by_value
- X509_print_ex
- X509_NAME_add_entry_by_NID
- X509_time_adj
- X509_time_adj_ex
- DTLSv1_get_timeout
- DTLSv1_handle_timeout
- DTLSv1_set_initial_timeout_duration
- SSL_CTX_set_current_time_cb
- PEM_write_bio_RSA_PUBKEY
- PEM_read_bio_RSA_PUBKEY
- PEM_write_bio_PUBKEY
- EVP_PKEY_missing_parameters
- EVP_PKEY_cmp
- BN_is_negative
- BIO_set_retry_write
* Improvements to the notBefore and notAfter date handling.
* Improvements to BIO and BIO_METHOD
- Moved structure to public area to allow for dereferencing
- Renamed members to provide compatibility.
- Added support for custom BIO methods for read/write.
* Added advanced openssl compatibility test cases for key and certificate generation.
* Fix for `ASN1_STRING_set` to allow NULL data.
* Fix to populate public key information on `EVP_PKEY_assign_RSA` and `EVP_PKEY_assign_EC_KEY`.
* Fix naming for `X509_get_notBefore` and `X509_get_notAfter` functions.
* Added `wc_EccPublicKeyDerSize`.
* Improvements to `wc_RsaPublicKeyDerSize`, so dummy memory doesn't have to be allocated.
* Made the `wc_*PublicKeyDerSize` functions public.
* Eliminate use of snprintf for UTC to generalized time conversion in `wolfSSL_ASN1_TIME_to_generalizedtime`.
2019-09-26 08:42:35 -07:00
42d04a36d6
Change static globals to const where possible
...
Change parameters to functions to be const where possible (and
necessary).
2019-09-26 23:05:02 +10:00
4a6925e2ef
Merge pull request #2480 from dgarske/nightly_20190925
...
Fixes for minor build issues
2019-09-26 17:34:21 +10:00
c6c7f67dfd
add check on AEAD only mode with enc-then-mac functions
2019-09-26 12:30:17 +07:00
8139fbd026
early data and enc-then-mac build fixes
2019-09-26 12:12:19 +07:00
f1b68873ef
add check on dependencies for tests
2019-09-26 11:43:12 +07:00
02c5d36f72
Fixes for --enable-opensslextra
or --enable-opensslall
with NO_WOLFSSL_CLIENT
or NO_WOLFSSL_SERVER
defined.
2019-09-25 20:11:54 -07:00
9d05e9c0b7
Fixes for minor nightly build tests.
2019-09-25 11:07:32 -07:00
bcd8a521f5
Merge pull request #2479 from tmael/aes_gcm
...
Initialize AES GCM set key
2019-09-20 14:34:25 -07:00
425548565f
Fix after rebase
2019-09-20 16:16:10 -05:00
f01e943448
Adding support for STACKOF(CONF_VALUE)
2019-09-20 16:06:13 -05:00
082d0e459d
Updates from review
2019-09-20 16:04:14 -05:00
793df114f3
Adding stack object type support to sk_value
2019-09-20 16:02:58 -05:00
74386fd0d0
Initialize GCM AAD in case wc_AesInit() wasn't called
2019-09-20 12:04:33 -07:00
b92509144b
Merge pull request #2475 from dgarske/qat_key
...
Fixes and improvements for async
2019-09-20 10:44:33 -07:00
54cdab8005
Initialize AES GCM set key
2019-09-20 10:17:08 -07:00
8636bac12f
Merge pull request #2478 from miyazakh/fix_iar_build
...
Fix build failure on IAR EWRX
2019-09-20 09:01:56 -06:00
3f10a37eda
Merge pull request #2477 from dgarske/keil_sp
...
Fixes for using Keil with single precision math.
2019-09-20 10:42:46 +10:00
d762d2fa5d
Merge pull request #2450 from aaronjense/microsoft-azure-sphere
...
Visual Studio Solution for Azure Sphere Devices
2019-09-19 17:13:46 -07:00
2dafd2102c
Add Apache HTTP Server compatibility and --enable-apachehttpd option ( #2466 )
...
* Added Apache httpd support `--enable-apachehttpd`.
* Added `SSL_CIPHER_get_version`, `BIO_new_fp`, `SSL_SESSION_print` and `SSL_in_connect_init` compatibility API's.
* Fix to expose `ASN1_UTCTIME_print` stub.
* Pulled in `wolfSSL_X509_get_ext_count` from QT.
* Added `X509_get_ext_count`, `BIO_set_callback`, `BIO_set_callback_arg` and `BIO_get_callback_arg`.
* Added `wolfSSL_ERR_print_errors`.
* Added `BIO_set_nbio` template.
* Fixes for building with Apache httpd.
* Added DH prime functions required for Apache httpd.
* Fix and move the BN DH prime macros.
* Fix for `SSL_CTX_set_tlsext_servername_arg` to have return code.
* Only add the `BN_get_rfc*_prime_*` macro's if older than 1.1.0.
* Added `ERR_GET_FUNC`, `SSL_CTX_clear_extra_chain_certs` prototypes.
* Added `wolfSSL_CTX_set_client_cert_cb` template and `OPENSSL_load_builtin_modules` stub macro.
* Added `X509_INFO` templates (`X509_INFO_new`, `X509_INFO_free`, `sk_X509_INFO_new_null`, `sk_X509_INFO_num`, `sk_X509_INFO_value`, `sk_X509_INFO_free`). Added `sk_X509_shift`.
* Added BIO_set_callback, BIO_get_callback, BIO_set_callback_arg, BIO_get_callback_arg
* add BIO_set_nbio, ERR_print_errors and tests
* add X509 INFO stack push function
* Add ASN1_UTCTIME_print and unit test
* Add X509_get_ext_count unit test
* initial commit of wolfSSL_PEM_X509_INFO_read_bio
* Added `sk_X509_NAME_new`, `sk_X509_NAME_push`, `sk_X509_NAME_find`, `sk_X509_NAME_set_cmp_func` and `sk_X509_NAME_free`. Grouped `sk_X509_NAME_*` functions.
* Cleanup sk X509 NAME/INFO pop free template.
* Advance openssl compatibility to v1.1.0 for Apache httpd. Added TLS version macros. Implemented sk X509 NAME/INFO pop and pop_free.
* Added `TLS_client_method` support.
* Added `SSL_get_server_tmp_key` and `EC_curve_nid2nist`.
* Added `SSL_CTX_set_min_proto_version` and `SSL_CTX_set_max_proto_version`. Fix for `BN_get_rfc*_prime_*` with the v1.1.0 change.
* add test cases for PEM_X509_INFO_read_bio
* Fixes for `BN_get_rfc*_prime_*` macros. Added template for `SSL_DH_set0_pqg`. Fix for `SSL_OP_NO_` to use Macro's (as is done in openssl). Added `SSL_set_verify_result`. Added stub for `OPENSSL_malloc_init`.
* Apache httpd compatibility functions. BIO setter/getters.
* implement ASN1_TIME_check and add test case
* add SSL_get_client_CA_list
* add initial implementation of wolfSSL_DH_set0_pqg
* Add apache support to OBJ_txt2nid and unit test, add stub for OBJ_create
* add X509_STORE_CTX_get1_chain, sk_free, sk_X509_dup
* Add sk_SSL_COMP_num and SSL_COMP struct
* implement and test of SSL_SESSION_print
* add SSL_CTX_set_client_cert_cb
* expand BIO_printf and add test case
* Added `OCSP_CERTID_dup`. Added `ASN1_TYPE`.
* add implementation for wolfSSL_get_server_tmp_key
* add wolfSSL_BIO_puts and test case
* Add X509_EXTENSION_get_object and X509_EXTENSION_get_data
* add helper for bio flag set and null x509 stack
* add test adn implementation for wolfSSL_i2d_PrivateKey
* Added `ASN1_OTHERNAME`, `ACCESS_DESCRIPTION` and `GENERAL_NAME`. Added `sk_ACCESS_DESCRIPTION_pop_free` and `ACCESS_DESCRIPTION_free` stubs.
* add wolfSSL_PEM_read_bio_ECPKParameters
* add BIO_vfree
* add X509_up_ref
* add X509_STORE_CTX_set_ex_data
* add _GNU_SOURCE macro and wolfSSL_EVP_read_pw_string
* add wolfSSL_EVP_PKEY_ref_up function
* X509_get_ext, X509V3_EXT_print, and d2i_DISPLAYTEXT stubs
* add X509_set_issuer_name
* add wolfSSL_sk_SSL_CIPHER_* functions and tests
* add prototype for sk_X509_EXTENSION and ACCESS_DESCRIPTION
* fix casting to avoid clang warning
* adjust test_wolfSSL_X509_STORE_CTX test case
* Added `OpenSSL_version`
* renegotiate functions and additional stack functions
* add aditional stub functions
* Add Apache httpd requirements for ALPN, CRL, Cert Gen/Req/Ext and SecRen. Fix for `sk_X509_INFO_new_null`.
* add ocsp stub functions
* Proper fix for `sk_X509_INFO_new_null`. Added templates for `X509_get_ext_by_NID` and `X509_add_ext`. Added templates for `ASN1_TIME_diff` and `ASN1_TIME_set`.
* x509 extension stack additions
* Fixed template for `OCSP_id_get0_info`.
* add X509 stub functions
* add X509_STORE_CTX_get0_store() and unit test
* Added `EVP_PKEY_CTX_new_id`, `EVP_PKEY_CTX_set_rsa_keygen_bits`, `EVP_PKEY_keygen_init`, `EVP_PKEY_keygen` and `BN_to_ASN1_INTEGER`.
* x509v3 stubs and req add extensions
* Add OBJ_txt2obj and unit test; add long name to wolfssl_object_info table for use by OBJ_* functions
* wolfSSL_set_alpn_protos implementation
* Added `EVP_SignInit_ex` and `TLS_server_method` implementation. Added stubs for `RSA_get0_key` and `i2d_OCSP_REQUEST_bio`. Fix typo on `OCSP_response_create`. Fix warning in `wolfSSL_set_alpn_protos`.
* Added `X509_EXTENSION_free` stub. Fixed a few macro typos/adding missing.
* add X509_STORE_CTX_get0_current_issuer and unit test
* add OBJ_cmp and unit test
* add RSA_get0_key and unit test
* add OCSP_check_nonce
* Implement X509_set_notAfter/notBefore/serialNumber/version,X509_STORE_CTX_set_depth,X509V3_set_ctx.
* Modify wolfSSL_X509_set_notAfter/notBefore and add tests for each.
* Add test_wolfSSL_X509_set_version w/ fixes to _set_version and fix _set_notBefore/notAfter tests
* add OCSP_id_get0_info and unit test, move WOLFSSL_ASN1_INTEGER to asn_public.h from ssl.h
* inital implementation of wolfSSL_X509_sign
* add debugging messages and set data for BIO's
* Add i2d_OCSP_REQUEST_bio.
* implementation of some WOLFSSL_BIO_METHOD custom functions
* fix for ASN time structure and remove log node
* initial eNULL support and sanity checks
* fixes after rebasing code
* adjust test cases and ASN1_TIME print
* Various fixes for memory leaks
* Apache compatibility in CTX_set_client_CA_list for X509_NAME use; add X509_NAME_dup as supporting function
* Add initial X509_STORE_load_locations stub for Apache
* Updates to X509_get_ext_d2i to return GENERAL_NAME struct instead of ASN1_OBJECT for alternative names and add supporting GENERAL_NAME functions
* Add X509_STORE_load_locations implementation; add wolfSSL_CertManagerLoadCRL_ex; initial renegotiation fixes/updates
* Fix for freeing peer cert in wolfSSL_Rehandshake instead of FreeHandShakeResources during secure renegotiation
* Add X509_ALGOR and X509_PUBKEY structs for X509_PUBKEY_get0_param and X509_get_X509_PUBKEY implementation
* Initial implementation of wolfSSL_X509_get_X509_PUBKEY and wolfSSL_X509_PUBKEY_get0_param
* Add implementation for X509_get0_tbs_sigalg and X509_ALGOR_get0
* Add OBJ_nid2ln implementation
* Fix compile errors in tests/api.c for some build options
* Updates to X509_STORE_load_locations for non-CRL types; Add additional DETECT_CERT_TYPE enum and logic for detecting certificate type in ProcessFile
* Add X509_STORE_load_locations unit test and minor error handling fixes
* Add unit test for X509_sign
* Set correct alert type for revoked certificates; add/fix a few WOLFSSL_ENTER messages
* Add X509_ALGOR member to X509 struct; refactoring and unit tests for wolfSSL_X509_ALGOR_get0 and wolfSSL_X509_get0_tbs_sigalg
* Add X509_PUBKEY member to X509 struct; refactoring and unit tests for wolfSSL_X509_get_X509_PUBKEY and wolfSSL_X509_PUBKEY_get0_param
* Stack fixes after rebase
* Secure renegotiation refactoring: add ACCEPT_BEGIN_RENEG to AcceptState for use in wolfSSL_SSL_in_connect_init; free old peer cert when receiving new cert to fix memory leak
* Move enc-then-mac enable option in configure.ac for apache httpd compatibility
* Simplify wolfSSL_SSL_in_connect_init logic
* Remove unneeded wolfSSL_CertManagerLoadCRL_ex
* Fixes for jenkins test failures
* SSL_get_secure_renegotiation_support for print statement in Apache
2019-09-19 17:11:10 -07:00
2f818f9508
Fix build failure on IAR EWRX
2019-09-20 09:07:51 +09:00
dfc00bf057
Merge pull request #2476 from dgarske/pkcb_tls13
...
Fix for TLS v1.3 and PK callbacks
2019-09-20 08:10:43 +10:00
3b6112e317
Fixes for using Keil with single precision math.
2019-09-19 14:34:30 -07:00
c16b02a265
Merge pull request #2471 from dgarske/test_date_override
...
Fix for verify callback override not adding to trusted CA list
2019-09-19 13:54:24 -07:00
33a83cdba0
Merge pull request #2436 from miyazakh/Renesas_TSIP_Port
...
Support renesas tsip
2019-09-19 14:44:33 -06:00
2dbf3f81fc
Merge pull request #2474 from SparkiDev/sp_int_prime
...
Add support for prime checking to sp_int.c
2019-09-19 13:44:22 -07:00
fd1d65c4f9
Merge pull request #2470 from SparkiDev/build-fixes
...
Fixes from overnight build failures
2019-09-19 13:38:25 -07:00
cc452adff1
Merge pull request #2465 from JacobBarthelmeh/Fuzzer
...
sanity check on length before read
2019-09-19 13:34:42 -07:00
523b1801ed
Cleanup of the wc_ecc_sign_hash
function to separate the async logic. This improves the ECC r/s local case to appease static analyzers. Fixes https://github.com/wolfSSL/wolfssl/issues/2342 .
2019-09-19 13:33:02 -07:00
ab86e78cbe
Merge pull request #2458 from JacobBarthelmeh/Certs
...
macro guards for re-defines
2019-09-19 12:54:26 -07:00
6aecdf59c1
Fixes for async build and tests.
2019-09-19 12:30:05 -07:00
ae25027135
Fix for TLS v1.3 and PK callbacks.
2019-09-19 12:07:14 -07:00
1493b94b27
Eliminate async NUMA allocation for wc_ecc_gen_k
. Additional DECLARE_VAR checks. Improve mp_rand
to avoid alloc in async case.
2019-09-19 11:34:59 -07:00
f532143094
adjust CheckASNTag to be GetASNTag
2019-09-19 02:09:51 -06:00
5c5aa45a5e
addressed review comments
...
tsip_usable() reconstruction
2019-09-19 14:35:23 +09:00
a37b604da9
addressed review comments
2019-09-19 11:18:52 +09:00
63d61c490d
addressed review comments
2019-09-19 11:18:52 +09:00
a6b2d1621b
Free memory for a msg buffer when calling wc_ShaxxxFree()
2019-09-19 11:18:52 +09:00
778a2065ab
Replaced key information by dummy data
2019-09-19 11:18:52 +09:00
cb0184fe98
update Readme, added file header etc
2019-09-19 11:18:52 +09:00
a292e69d3f
update readme
2019-09-19 11:18:52 +09:00
5c6f6fdb7d
Renesas TSIP Support
...
merged from private repo
removed unneccessary #include
make line as 80 characters
added simple tls server
Disable TLS-linked API use when being SERVER SIDE, still use certificate verify API
Added utility tools, generate signature arrays etc
added vars to store tsip hmac keys
fix build failure when disabling dc_printf
2019-09-19 11:18:52 +09:00
0bc16d47e2
Add support for prime checking to sp_int.c
...
This allows SP to support:
- DH parameter checking
- DH parameter generation
- RSA key generation
Improved performance of sp_mod operation.
Reworked some functions to have one exit point (return statement).
Fixed sp_sub_d().
Changed tests to perform 2048-bit RSA key generation only when using SP
math.
Fixed Intel x86_64 C file to not have DH specific functions available
unless WOLFSSL_HAVE_SP_DH is defined.
Fixed tfm to return an error when t is not the correct size in
fp_isprime_ex().
2019-09-19 09:08:15 +10:00
bdbe0943cf
Add function to print network interface and IP Address
2019-09-18 19:57:19 +01:00
4ef8f53c9e
PR Review Changes
...
1. Add more documentation
2. Add cleanup functions for client and server before return
3. Add the ability for client to use a hostname for SERVER_IP
2019-09-17 14:59:43 -06:00
946a0f593f
Merge pull request #2472 from SparkiDev/enc_then_mac_fix
...
Enc-Then-MAC: when message size is less than digest size return error
2019-09-17 08:57:26 -07:00
f0e774d1e1
Merge pull request #2420 from kojo1/KDS-proj
...
add KDS sample project
2019-09-17 11:53:04 -04:00
bdad0fa53f
Merge pull request #2443 from miyazakh/fix_esp_examples
...
Fixed examples for esp-idf
2019-09-17 11:47:39 -04:00
0e5de0c076
Fix to only AddCA when its CA type and veryNone is not set.
2019-09-17 07:56:02 -07:00
2c2907c2a5
Enc-Then-MAC: when message size is less than digest size return error
2019-09-17 11:23:43 +10:00
b7c08988dc
Fix for verify callback override of intermediate CA provided by peer not being added to trusted CA list.
...
Feature: Added support for testing date override at build-time using `TEST_BEFORE_DATE`.
```
./examples/server/server -H overrideDateErr -A ./certs/ca-cert.pem -k ./certs/server-key.pem -c ./certs/intermediate/server-chain.pem &
./examples/client/client -D -A ./certs/ca-cert.pem -k ./certs/client-key.pem -c ./certs/intermediate/client-chain.pem
```
2019-09-16 14:47:55 -07:00
708556d5c7
adjust sha3 typedef
2019-09-16 10:40:56 -06:00
3b7b81fea7
add local CheckASNTag function
2019-09-15 23:06:11 -06:00
326f02d76d
Fix for buffer overrun check logic.
2019-09-15 23:04:13 -06:00
e6c48327c1
sanity check on length before read
2019-09-15 23:04:13 -06:00
000fc64f27
Fixes from overnight build failures
...
ssl.c: Certificate store fields freed without being NULLed and then
freed again.
integer.c: Compiler complained that a->dp may be NULL in mp_set_bit when
setting bit.
pkcs12.c: ret is zero after GetLength and this is an error but data is
freed only when ret != 0.
pkcs7.c: derArr was not zeroized for full allocated size.
2019-09-16 10:21:08 +10:00
9d69f17f17
Merge pull request #2468 from tmael/RSA_inline
...
Fix for RSA inline
2019-09-13 13:46:33 -07:00
9d3d170411
Merge pull request #2456 from dgarske/freedom_unleashed
...
Support for SiFive HiFive Unleashed board
2019-09-13 11:58:11 -07:00
40fc86dfd2
Merge pull request #2464 from SparkiDev/rshift_neg
...
Use constant time comparison in MaskMac with scanStart and macStart
2019-09-13 11:56:12 -07:00
a2d3da2831
Merge pull request #2463 from ejohnstown/maintenance-dtls
...
Maintenance DTLS
2019-09-13 11:53:20 -07:00
6894dde4e9
Merge pull request #2460 from dgarske/debug_buffer
...
Improvements to `WOLFSSL_BUFFER` function
2019-09-13 11:49:20 -07:00
b70f22e21a
1. Use the session deallocator on the deserialized session in the client.
...
2. Free the flatten session if the size check fails.
2019-09-12 16:04:34 -07:00
09541082d6
Merge pull request #2416 from kojo1/OCSP-error
...
Detail error code
2019-09-12 16:51:34 -04:00
4e62d1f509
Fix for RSA inline
2019-09-11 22:57:54 -07:00
c27a4b3865
TLS Maintenance
...
When serializing the WOLFSSL_SESSION, serialize everything.
2019-09-11 16:44:54 -07:00
852d50adcf
DTLS Maintenance
...
To go with the fix for the functions wolfSSL_(i2d|d2i)_SSL_SESSION,
modify the example client to use a serialized session record for
resumption instead of the direct reference into the session cache. This
change only happens when OPENSSL_EXTRA and HAVE_EXT_CACHE are defined.
2019-09-11 15:29:57 -07:00
2a1a9f36cc
Use constant time comparison in MaskMac with scanStart and macStart
...
Right shift of a negative value is undefined.
Add an 'int' return version of constant time greater than equal.
Change equal and not equal to be constant time in more situations.
2019-09-11 10:57:23 +10:00
ed06f34f55
Updated benchmarks running at 1.5GHz (default is 1 GHz).
2019-09-10 16:09:18 -07:00
22c398494e
DTLS Maintenance
...
The options to switch on and off the code to serialize/deserialize items
in the struct need to match the options for the struct.
(ZD5130, ZD5590)
2019-09-10 16:01:48 -07:00
e93e3b60da
DTLS Maintenance
...
Allow the DTLS server to retransmit a stored flight of messages in an additional acccept state.
(ZD5644)
2019-09-10 11:51:38 -07:00
def36ddfe8
Added instructions for installing Debian on Unleashed board.
2019-09-10 09:16:35 -07:00
66b76a4420
Improvements to WOLFSSL_BUFFER
function to eliminate recursive call and use snprintf
for string safety. Adds support for build-time change of LINE_LEN
.
2019-09-10 08:57:35 -07:00
645f8ddd31
Update RISC 64-bit detection to use __riscv_xlen
.
2019-09-10 07:47:28 -07:00
eb2aa3dce1
macro guards for re-defines
2019-09-09 19:24:45 -06:00
99252cc936
Merge pull request #2399 from dgarske/ovs
...
Compatibility changes for OpenVSwitch
2019-09-09 16:02:27 -07:00
95d3289fa2
Merge pull request #2437 from kaleb-himes/ZD_5546_IAR_CC_CHECK
...
Fix failing IAR builds, thanks to Joseph C. for the report
2019-09-09 11:42:19 -07:00
88036db223
Visual Studio Solution for Azure Sphere Devices
2019-09-09 10:50:56 -06:00
ab5c12fd17
Added parenthesis around types.h pointer size macro.
2019-09-09 09:01:18 -07:00
c0317ad198
Fix to only expose SSL_want
when OPENSSL_EXTRA
is defined.
2019-09-09 08:07:30 -07:00
342d03a294
Added SSL_want
.
2019-09-09 08:07:30 -07:00
2cf26a1353
Compatibility changes for OpenVSwitch.
2019-09-09 08:07:30 -07:00
c52801754c
Fips ready ( #2422 )
...
* Changes to update stunnel support
* Required additions for building fips-ready with speedups
* Fix SetASNIntRSA
2019-09-09 02:47:02 -07:00
02419e248f
Fix clang 3.8 arm ( #2449 )
...
* Fix 'value size does not match register size' error in clang with arm assembly
* More readable casting
2019-09-09 02:46:48 -07:00
87d0c70695
erase compiler complaint, not used var
2019-09-09 08:25:02 +09:00
7433b20d43
renamed wolfSSL_CTX_IsPrivatePkSetForkeyType to wolfSSL_IsPrivatePkSet
2019-09-09 08:25:02 +09:00
348be7fb00
Fix jankis test, known customer config. complaining unused var
2019-09-09 08:25:02 +09:00
82d531562c
Fixed build warnings due to esp-idf update
...
Fixed server application TLS communicatio failure
2019-09-09 08:25:02 +09:00
4c88d94d13
Chacha20 and poly1305 without x18 ( #2454 )
...
* Remove use of x18 and organize new optimizations
* Fix invalid operand
2019-09-08 16:03:04 -07:00
afb15f6521
Merge pull request #2455 from JacobBarthelmeh/HardwareAcc
...
change detection of AESNI support to read bit 25 from ECX
2019-09-09 08:29:00 +10:00
ebe99cf5ef
Support for SiFive HiFive Unleashed board.
2019-09-06 16:04:34 -07:00
37328544ad
Merge pull request #2453 from SparkiDev/armv8_x18
...
ARM64 assembly - x18 not able to be used
2019-09-06 15:45:02 -07:00
85b123046b
Merge pull request #2377 from SparkiDev/sha2_cs_oldtls
...
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 15:41:15 -07:00
3e12d260b8
ARM64 assembly - x18 not able to be used
...
Fix Curve25519/Ed25519, SHA-512 and SP code to not use x18.
2019-09-06 15:49:24 +10:00
a975ba9e97
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
171902f1fb
change detection of AESNI support to read bit 25 from ECX
2019-09-05 17:02:44 -06:00
1785089798
Merge pull request #2433 from kaleb-himes/ZD_5602_MINGW_XSNPRINTF
...
Resolve XSNPRINTF unconditional use in asn.c breaking mingw32 builds
2019-09-05 11:37:21 -07:00
d6685edfa0
Merge pull request #2440 from SparkiDev/tlsfuzzer_fixes
...
Fixes for fuzz testing
2019-09-05 09:01:10 -07:00
eaeaaf12c1
Merge pull request #2446 from SparkiDev/gplusplus_fix_1
...
Fixes for g++ compilation
2019-09-04 16:28:42 -07:00
bf7296aefb
Merge pull request #2438 from SparkiDev/armv8-poly1305-clang
...
Fix ARMv8 Poly1305 inline assembly code to compile with clang 3.5
2019-09-04 16:28:02 -07:00
56df8162bd
Fixes for g++ compilation
2019-09-04 10:09:36 +10:00
b35fd4f1aa
Merge pull request #2441 from JacobBarthelmeh/UnitTests
...
strncpy gcc warning fixes
2019-09-03 15:44:10 -07:00
0927f93b07
Merge pull request #2442 from JacobBarthelmeh/HardwareAcc
...
build fix for aesccm + devcrypto=cbc + wpas and afalg
2019-09-03 15:42:41 -07:00
b19e785c2c
Merge pull request #2418 from dgarske/sha3_keccak256
...
Added support for older KECCAK256
2019-09-03 15:42:05 -07:00
492ce6ac91
Merge pull request #2414 from dgarske/pkcs8_asn1
...
Added support for loading a PKCS8 ASN.1 formatted private key
2019-09-03 15:36:31 -07:00
03967d62f4
sanity check on resulting ecc size
2019-09-03 10:54:11 -06:00
46790080a7
Fix ARMv8 Poly1305 inline assembly code to compile with clang 3.5
2019-09-02 09:52:25 +10:00
60befc82c5
Fixes for fuzz testing
...
Changes
- Don't ignore decryption errors when doing TLS 1.3 and after Client
Finished.
- Put out an alert when TLS 1.3 decryption fails.
- Properly ignore RSA pss_pss algorithms when checking for matching
cipher suite.
- Check X25519 public value before import in TLS v1.2-
- REcognise TLS 1.3 integrity-only cipher suites as not negotiable with
TLS 1.2-.
- Send decode_error alert when bad message data in CertificateVerify.
- Negotiate protocol version in TLS 1.3 using extension and keep
decision when using TLS 1.2 parsing.
- Must have a signature algorithms extension in TLS 1.3 if not doing
PSK.
- More TLS v1.3 alerts.
- MAX_PSK_ID_LEN needs to be modified at compile time for tlsfuzzer to
work.
- change the good ecc public key to be a real public key when compiled
to check imported public keys
- Fix early data in TLS 1.3
- Make max early data size able to be changed at compile time - default
4K but fuzzer sends 16K
- Fix HRR, PSK and message hashes: Don't initialize hashes in parsing
ClientHello as need to keep hash state from previous ClientHello and
HelloRetryRequest
2019-09-02 08:58:14 +10:00
9fd38dc340
build fix for aesccm + devcrypto=cbc + wpas and afalg
2019-08-30 16:15:48 -06:00
2a750cd18d
strncpy gcc warning fixes
2019-08-30 13:34:51 -06:00
ef20276ab5
Merge pull request #2424 from SparkiDev/enc_then_mac
...
Add support for Encrypt-Then-MAC to TLS 1.2 and below
2019-08-30 11:09:04 -07:00
adc548fc61
Merge pull request #2428 from ejohnstown/ecckey-test-fix
...
Fix ECC key decode test
2019-08-30 11:07:00 -07:00
347a859ffc
Merge pull request #2435 from JacobBarthelmeh/SanityChecks
...
sanity check on ticket encrypt callback
2019-08-30 10:18:58 -07:00
09f80c7f5f
Merge pull request #2439 from miyazakh/fix_espidf_issues
...
Fix build warnings while compiling wolfssl under esp-idf
2019-08-29 16:24:42 -06:00
db2468154f
Merge pull request #2434 from tmael/phase2_compatibility_APIs
...
Adding phase 2 compatibility APIs
2019-08-29 12:26:27 -07:00
b8d2ccee83
Merge branch 'master' into phase2_compatibility_APIs
2019-08-29 09:16:41 -07:00
9034e3a0fe
Merge pull request #2432 from embhorn/api_p2
...
Adding compatibility API phase 2
2019-08-29 09:05:01 -07:00
5f77627857
Fix SetASNIntRSA
2019-08-29 16:24:09 +02:00
d6bac37def
Fix build warnings while compiling wolfssl under esp-idf
2019-08-29 17:44:44 +09:00
24e98dd05e
Add support for Encrypt-Then-MAC to TLS 1.2 and below
...
An extension is used to indicate that ETM is to be used.
Only used when doing block ciphers - HMAC performed on encrypted data.
2019-08-29 09:00:30 +10:00
87e876d8c6
Match padding macro values and restore EVP non-AES-GCM
2019-08-28 15:45:07 -07:00
46b4654564
Fix failing IAR builds, thanks to Joseph C. for the report
2019-08-28 12:44:05 -06:00
a76f719aac
Fix review comment
2019-08-28 10:42:57 -07:00
411f15bec3
Merge pull request #2429 from cconlon/cmssig
...
Add internal PKCS7 content digest check
2019-08-28 09:41:10 -06:00
0c9ba1b361
Adding compatibility API phase 2
2019-08-28 09:29:49 -05:00
625c3074b9
Review comments, sanity check
2019-08-27 17:06:36 -07:00
59dddda3a9
Updated with review comments
2019-08-27 15:37:00 -07:00
dc5d11fef4
Updated with review comments
2019-08-27 15:14:58 -07:00
7fcb85b743
ECC-FP Cache Memory Leak
...
Each test case for ECC should be cleaning up the FP cache if it uses
the cache. Only a couple cases were getting freed.
2019-08-27 14:43:25 -07:00
4ec90be4d6
Added --enable-hashflags
option.
2019-08-27 13:28:33 -07:00
a49f447e47
Merge pull request #2413 from dgarske/load_ca_nodate
...
Refactor of the verify option for processing X.509 files
2019-08-27 13:20:30 -07:00
e6252a94ce
check attrib->value and attrib->valueSz before use
2019-08-27 14:18:23 -06:00
f9e364f893
Updated wolfSSL_EVP_Cipher() for AES GCM
2019-08-27 11:36:39 -07:00
10431738c7
sanity check on ticket encrypt callback
2019-08-27 11:41:27 -06:00
208e9f3fcf
Fix Windows build
2019-08-27 08:49:27 -07:00
e9d1f32441
Fix Windows build
2019-08-27 08:11:31 -07:00
e8f468e2cf
correct ifdef directive
2019-08-26 19:17:41 -07:00
00dadafddb
Add HAVE_FAST_RSA around RSA_print()
2019-08-26 16:54:10 -07:00
6f9210d6af
Peer review feedback changes
...
Case ```__GNUC__``` already covered, just check for MINGW or CYGWIN cases now.
2019-08-26 16:53:52 -06:00
b2555d38bc
Jenkins PRB enable options test
2019-08-26 15:43:58 -07:00
9b3fee223f
Typecast to correct type
2019-08-26 14:17:13 -07:00
6311ae425c
RSA_generate_key() needs WOLFSSL_KEY_GEN
2019-08-26 13:47:54 -07:00
0f60ee8a85
Merge pull request #2402 from schlatterbeck/master
...
Fixes for 16-bit systems
2019-08-26 12:41:47 -07:00
5e28dd94a2
OpenSSL compatible APIs:
...
ASN1_STRING_type
EVP_aes_128_gcm
EVP_CIPHER_CTX_ctrl
EVP_PKEY_sign
EVP_PKEY_sign_init
RSA_print
RSA_NO_PADDING
RSA_PKCS1_PSS_PADDING
2019-08-26 12:20:18 -07:00
ea4e7b2669
Resolve XSNPRINTF unconditional use in asn.c breaking mingw32 builds
2019-08-26 13:19:53 -06:00
256ac4a515
Merge pull request #2427 from miyazakh/fix_espbuild_failure
...
fix uninitialized var for esp idf build failure fix
2019-08-26 10:11:44 -06:00
61d01ab7f3
add unit test for PKCS7 invalid detached content
2019-08-26 09:43:20 -06:00
76b9476b9a
Remove debug printf.
2019-08-23 16:24:45 -07:00
99329b0fc4
Improvements to the CRL verify handling.
2019-08-23 16:09:39 -07:00
12687e5a2a
internally check PKCS7 content digest against messageDigest attribute
2019-08-23 16:40:12 -06:00
2c97b040ff
Merge pull request #2419 from dgarske/ctx_sec_reneg
...
Adds use secure renegotiation at CTX level
2019-08-23 12:55:30 -07:00
1bad2bed3c
Merge pull request #2404 from dgarske/strict_cipher
...
Added strict cipher suite check on client server_hello processing
2019-08-23 12:42:57 -07:00
681de3e41a
Merge pull request #2375 from dgarske/stm32_cubemx_halv2
...
Fixes for STM32F7 and latest CubeMX HAL
2019-08-23 12:28:51 -07:00
6209e8ff24
Merge pull request #2412 from JacobBarthelmeh/PKCS12
...
adjust wc_i2d_PKCS12 API
2019-08-23 10:30:04 -07:00
63538fedde
Required additions for building fips-ready with speedups
2019-08-23 10:22:31 -07:00
54fb08d6df
Merge pull request #2426 from JacobBarthelmeh/Fuzzer
...
sanity check on buffer size before reading short
2019-08-23 10:17:31 -07:00
2ba6c66d44
Fix ECC key load test
...
When using the configure options '--enable-certgen --enable-certext CPPFLAGS=-DWOLFSSL_VALIDATE_ECC_IMPORT', the ecc_decode_test() will fail the "good" test case. It is using the point (1, 1) in the test, and that fails the key validation. Changed the good key to one of the keys we have in the certs directory. The additional validation checks that the point is on the curve, and is validated in FIPS mode.
2019-08-22 14:18:59 -07:00
8b2a1f13c4
fix uninitialized ver for esp idf build failure fix
2019-08-23 06:08:11 +09:00
0e6bb4717e
Merge pull request #2425 from JacobBarthelmeh/SanityChecks
...
sanity check on buffer size
2019-08-22 12:30:06 -07:00
b83aebafb1
help out static analysis tool
2019-08-22 11:49:10 -06:00
65aeb71d6c
sanity check on buffer size before reading short
2019-08-22 11:36:35 -06:00
c6e4aebcdf
sanity check on buffer size
2019-08-22 09:23:02 -06:00
cf83561b64
Merge pull request #2417 from SparkiDev/sp_mod_exp_cast_fix
...
SP Mod exp cast fix
2019-08-22 05:55:27 -07:00
6544b5df88
Merge pull request #2423 from SparkiDev/fe_math_mac
...
Curve25519/Ed25519 x86_64 assembly working on Mac again
2019-08-22 05:54:49 -07:00
132f60e77f
Curve25519/Ed25519 x86_64 assembly working on Mac again
2019-08-22 09:27:39 +10:00
37f1522825
Changes to update stunnel support
2019-08-21 16:18:04 -07:00
05d86ade20
Merge remote-tracking branch 'wolfSSL/master'
2019-08-21 16:17:55 -07:00
e298b3290d
Fix to initialize hash flag.
2019-08-21 06:36:37 -07:00
7deab4c54f
add KDS sample project
2019-08-21 11:12:09 +09:00
67c3751836
Adds new wolfSSL_CTX_UseSecureRenegotiation
API for setting secure renegotiation at the WOLFSSL_CTX level.
2019-08-20 16:43:28 -07:00
a5d222a20e
Make public the hash set/get flags functions.
2019-08-20 16:25:48 -07:00
154930d128
Added support for older KECCAK256 used by Ethereum. Uses existing hash flag API's.
...
To use add build flag `CFLAGS="-DWOLFSSL_HASH_FLAGS"`.
Example:
```c
wc_Sha3_SetFlags(&sha, WC_HASH_SHA3_KECCAK256);
```
2019-08-20 16:14:37 -07:00
24bfea1ad2
Fixes for various build options (!NO_RSA, HAVE_ECC, NO_PKCS8, NO_PKCS12). Added new NO_CHECK_PRIVATE_KEY
to allow reduce code size when not required.
2019-08-20 10:38:08 -07:00
644e7a8f45
Fixes for PKCS8 w/wo encryption as DER/ASN.1. Fixes for building with --disable-oldnames
. Fix to enable the PKCS8 enc test without openssl comat. Added additional PKCS8 tests.
2019-08-19 16:27:46 -07:00
5530336617
SP Mod exp cast fix
2019-08-20 08:50:57 +10:00
fd0390430d
Give error code resolution to wolfSSL_CertManagerCheckOCSPResponse
2019-08-20 07:22:54 +09:00
01a3b59e28
fix cast and initialization of variable
2019-08-19 14:54:53 -06:00
3e1c103c78
Added support for loading a PKCS8 ASN.1 formatted private key (not encrypted).
2019-08-16 16:09:00 -07:00
586b74b05f
Refactor of the verify option for processing X.509 files. Adds support for ignoring date checks when loading a CA using the WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY
flag on wolfSSL_CTX_load_verify_buffer_ex
and wolfSSL_CTX_load_verify_locations_ex
.
2019-08-16 15:19:55 -07:00
7d4023f6a1
Merge pull request #2408 from dgarske/coverity
...
Minor fixes to resolve Coverity static analysis checks
2019-08-16 14:45:13 -07:00
487e66394e
adjust wc_i2d_PKCS12 API
2019-08-16 15:19:33 -06:00
3f992ce39d
Additional STM32F7 fixes with HALv2.
2019-08-16 12:31:28 -07:00
eb68ad162b
Enable strict cipher suite checking by default. Changed to enable by default and can be disabled using WOLFSSL_NO_STRICT_CIPHER_SUITE
.
2019-08-16 10:20:25 -07:00
e8986f389f
wolfRand
...
1. Updated fips-check.sh to make an archive for wolfRand.
2. Updated configure.ac to provide a wolfRand build.
2019-08-16 09:33:41 -07:00
dea4f2fb1a
Merge pull request #2410 from SparkiDev/poly1305_x64_fix
...
Fix Poly1305 on Intel AVX2
2019-08-16 09:08:27 -07:00
8454bd1077
Fix Poly1305 on Intel AVX2
...
Fix define checks for other x86_64 assembly code files
2019-08-16 17:42:19 +10:00
0d13b385ab
Fixes for possible cases where DerBuffer is not free'd in AddCA
error cases.
2019-08-15 17:01:30 -07:00
aee766e11b
Minor fixes for AES GCM with GMAC and STM32 HALv2.
2019-08-15 16:57:38 -07:00
e7f0ed4b98
wolfRand
...
1. Excluded wc_encrypt.c from the wolfRand build.
2019-08-15 16:22:16 -07:00
9d53e9b6d5
wolfRand
...
1. Add fips.h to the install if doing a wolfRand build.
2019-08-15 16:22:16 -07:00
63fe2a219e
wolfRand
...
In configure.ac,
1. Change some whitespace in the FIPS enable section.
2. Reorganize the FIPS section a little bit.
3. When enabling wolfRand, also force cryptonly.
4. Treat wolfRand like FIPSv2 at build time.
In the source include.am,
5. Add checks against BUILD_FIPS_RAND as appropriate.
6. Add the SHA-256 assembly to the wolfRand source list.
2019-08-15 16:22:16 -07:00
a229e1e8e4
wolfRand
...
1. Rearrange some of the macros in the FIPS section to separate out the
different flavors of FIPS with their own flags to set them apart.
2. Add automake flags for FIPSv1 and wolfRand.
2019-08-15 16:22:16 -07:00
0931b574a7
wolfRand
...
1. Refactored src/include.am to use the new changes in configure for
multiple FIPS versions.
2. Added conditions for wolfRand.
2019-08-15 16:22:16 -07:00
14316f8e24
wolfRand
...
Refactor the configure.ac script to make adding additional FIPS options
easier.
2019-08-15 16:22:16 -07:00
489af0cd2b
Merge pull request #2386 from SparkiDev/tls13_integ_only
...
TLS 1.3 and Integrity-only ciphersuites
2019-08-15 16:02:12 -07:00
51c31695bd
Merge pull request #2391 from SparkiDev/tfm_dh_2
...
Specialized mod exponentiation for base 2 in tfm.c and integer.c
2019-08-15 15:59:20 -07:00
b06dbf16c2
Merge pull request #2397 from JacobBarthelmeh/PKCS7
...
updates to CMS and callback functions
2019-08-15 15:56:41 -07:00
089ca6d6e8
Merge pull request #2403 from JacobBarthelmeh/HardwareAcc
...
build with devcrypto and aesccm
2019-08-15 15:54:41 -07:00
0a1a81ab42
Merge pull request #2407 from embhorn/api_p1_2
...
Adding phase 1 API from other projects
2019-08-15 14:13:10 -07:00
1b841363cc
Adding tests
2019-08-15 12:27:23 -05:00
ed7ac6fb26
Coverity fixes to make static analysis happy.
2019-08-14 15:42:47 -07:00
b2b24a06f3
Adding API
2019-08-14 15:09:17 -05:00
cb33ada380
Merge pull request #2395 from embhorn/api_p1
...
Adding compatibility API phase 1
2019-08-13 17:19:22 -07:00
e75417fde1
Added build option to enforce check for cipher suite in server_hello
from server. Enabled using WOLFSSL_STRICT_CIPHER_SUITE
. Some cipher suites could be allowed if they were supported a build-time even though not sent in the cipher suite list in client_hello
.
...
Example log output for test case where `client_hello` sent a cipher suite list and server choose a cipher suite not in the list:
```
wolfSSL Entering DoServerHello
ServerHello did not use cipher suite from ClientHello
wolfSSL Leaving DoHandShakeMsgType(), return -501
wolfSSL Leaving DoHandShakeMsg(), return -501
```
RFC 5246: 7.4.1.3: Server Hello: `cipher_suite: The single cipher suite selected by the server from the list in ClientHello.cipher_suites.`
2019-08-13 15:56:19 -07:00
48fa6a458c
Adding compatibility API phase 1
2019-08-13 17:09:56 -05:00
fa79ef0940
Merge pull request #2396 from tmael/expanding_OpenSSL_compatibility
...
Phase 1 of the OpenSSL Compatibility APIs
2019-08-13 14:56:09 -07:00
e8e1d35744
build with devcrypto and aesccm
2019-08-13 14:12:45 -06:00
9301cce9ac
Check a null pointer dereference
2019-08-13 11:48:20 -07:00
b1ad0525ea
cast to correct static analysis issue
2019-08-13 10:45:24 -07:00
b7bd710bc8
Add small stack option
2019-08-13 10:29:37 -07:00
1acd24deb8
Review comment to reduce stack usage
2019-08-13 10:15:57 -07:00
b9ddbb974a
perform domain name check on the peer certificate
2019-08-13 09:55:28 -07:00
20d9d5b0da
account for KARI bundle without CERT when callback is set
2019-08-12 17:37:09 -06:00
883d5778a3
handle optional parameters with KARI ECC key
2019-08-12 16:41:35 -06:00
f4d9991e3a
remove restriction on key wrap type with callback
2019-08-12 15:34:20 -06:00
63c6c47165
Fixes for 16-bit systems
...
Systems with sizof(int) == 2 default to expressions with that size.
So we have to do some explicit casts or use unigned long constants in
some cases.
In ssl.h the prototype of a function was not matching the definition.
This resulted in a type incompatibility on a 16-bit system.
2019-08-10 18:27:29 +02:00
6054a851ce
move decrypt content callback function to more generic spot
2019-08-09 17:38:30 -06:00
e7c6fc221d
Fixes to handle byte swapping on Key and IV for STM32F7 with latest CubeMX.
2019-08-09 15:40:26 -07:00
0a4ac0e380
Merge pull request #2401 from SparkiDev/aesni_null_iv
...
Set the IV to zero when NULL IV and using AESNI
2019-08-09 12:57:48 -07:00
d4cf6e37e8
DH base 2 impl - better error handling
2019-08-09 12:12:59 -06:00
dd48c825ed
Constant compare the HMAC result when using NULL cipher and TLS 1.3
2019-08-09 11:50:07 -06:00
34fe643938
Set the IV to zero when NULL IV and using AESNI
2019-08-09 11:23:14 -06:00
1396ca085b
Merge pull request #2400 from dgarske/pkcs7_typo
...
Fix for dynamic type typo in PKCS7
2019-08-09 10:34:41 -06:00
8e4fa1c786
Fix for dynamic type typo in PKCS7.
2019-08-08 20:14:39 -07:00
4bff2b6bef
Fixed valgrind issue
2019-08-06 15:49:36 -07:00
1371fc8327
Review comments
2019-08-06 13:23:18 -07:00
c1938969aa
Convert to pointer to pass static memory
2019-08-06 10:47:30 -07:00
000c38ae1f
Use wolfSSL_PKCS7_free, not wc_PKCS7_Free
2019-08-06 07:46:57 -07:00
eccc85b9fa
Add NO_RSA conditional
2019-08-05 17:51:31 -07:00
f5f5947616
New OpenSSL compatible APIs:
...
wolfSSL_PEM_write_bio_PKCS7
wolfSSL_PKCS7_SIGNED_new
wolfSSL_X509_subject_name_hash
wolfSSL_CTX_use_PrivateKey_ASN1
wolfSSL_get0_param
wolfSSL_X509_VERIFY_PARAM_set1_host
2019-08-05 17:35:37 -07:00
8e83fb2e67
Fix to resolve AES GCM auth calucation for GMAC where no in/out data is used.
2019-08-05 14:03:02 -07:00
99ddf65a96
add decrypt callback to wc_PKCS7_DecodeEnvelopedData
2019-08-05 10:49:15 -06:00
ab4924b86b
Merge pull request #2388 from SparkiDev/sp_ccc_table_size
...
Fix precomputation tables to not include infinity field.
2019-08-05 08:39:58 -07:00
4f714b9788
Add a timing resistant version
...
Make mod operations work on the same bit size as closely as possible.
Check fp_mod return in first use.
2019-08-05 10:57:40 +10:00
c34657b20f
Merge pull request #2390 from dgarske/altname
...
Fix for scan-build warning with altName->name possible use of NULL
2019-08-02 15:49:13 -07:00
6f54a2ec6b
Merge pull request #2389 from dgarske/crypt_init_count
...
Fixes for wolfCrypt init/cleanup reference count
2019-08-02 15:48:36 -07:00
9acd952ea1
Merge pull request #2374 from dgarske/ecc_params
...
ECC improvement to get curve param and example curve macro check fix
2019-08-02 15:44:20 -07:00
31461dbfb5
Merge pull request #2373 from dgarske/mpint
...
Improvements to atoi, mp_int allocations and STSAFE-A100 error handling
2019-08-02 15:43:20 -07:00
da6fa384d4
Merge pull request #2273 from danielinux/Riot-OS-GNRC
...
RIOT-OS support with GNRC TCP/IP sockets
2019-08-02 15:42:11 -07:00
f5c1c33dba
Fixes for newer STM CubeMX HAL for STM32F7.
2019-08-02 15:12:09 -07:00
e83116fc0b
Resolution for FIPS/CAVP build errors where wc_ecc_get_curve_params
is not present in older wolfSSL versions.
2019-08-02 13:25:11 -07:00
18002d4545
Merge pull request #2387 from JacobBarthelmeh/Benchmark
...
fix help print out of benchmark
2019-08-02 08:24:47 -07:00
d1fbdb3ddf
Added API unit test for wc_ecc_get_curve_params
.
2019-08-02 06:20:14 -07:00
0e1d81e63f
Added ability to define your own XATOI
2019-08-02 06:16:41 -07:00
b4673344c0
Adds new wc_ecc_get_curve_params
API for getting the ecc_set_type
params for a curve index. Fix for example client and server using wrong macro for detecting ECC 256-bit enabled.
2019-08-02 05:50:00 -07:00
2a22179068
Specialized mod exponentiation for base 2 in tfm.c and integer.c
2019-08-02 15:50:08 +10:00
51dfc35aac
TLS 1.3 and Integrity-only ciphersuites
2019-08-02 11:00:18 +10:00
3cf30f1e96
Fix to allow proper calling with counts for wolfCrypt_Init
and wolfCrypt_Cleanup
. Old code was not tracking case such as wolfCrypt_Init
-> wolfCrypt_Init
-> wolfCrypt_Cleanup
and was causing cleanup to be performed, when it shouldn't.
2019-08-01 12:44:03 -07:00
fb8fc4d800
Fix for scan-build warning with altName->name possible use of NULL pointer.
2019-08-01 11:54:28 -07:00
4f0fd2c2f9
Merge pull request #2302 from SparkiDev/ecc_pubkey_check
...
Add checks of public key for ECC and curve25519
2019-08-01 11:50:02 -07:00
7098fdff29
Merge pull request #2382 from SparkiDev/dsa_ct
...
Use a fixed number of bits with DSA gen and sign
2019-08-01 11:48:53 -07:00
a8d2b6b3c8
Removed exception for EXIT_TEST in RIOT
2019-08-01 15:50:16 +02:00
34b2d257cd
[RIOT-OS/GNRC] Renamed GNRC callback functions
2019-08-01 15:50:16 +02:00
e77161ae9a
Riot-OS/GNRC support: reworked after reviewers' comments
2019-08-01 15:50:16 +02:00
1db036eb75
RIOT-OS support with GNRC UDP/IP sockets
2019-08-01 15:50:16 +02:00
1792fe34b9
Fix precomputation tables to not include infinity field.
...
Fixes to ARM code
- put in it instruction before conditional for old compilers.
- fix small code size version of compare
- handle not being able to shift by the full size - want result to be
zero
Casts as required by compiler to reduce bit size explicitly.
2019-08-01 20:53:41 +10:00
6a52e0a138
fix help print out of benchmark
2019-07-31 11:47:26 -06:00
c400c38588
Merge pull request #2381 from SparkiDev/tls13_sv
...
Check suite size length is valid as well as space for compression
2019-07-30 16:04:00 -07:00
d4ab1c7e86
Merge pull request #2383 from SparkiDev/sp_dh_2
...
Special implementation of mod exp when base is 2 in SP
2019-07-30 16:02:38 -07:00
dcab47efd8
Improve wc_curve25519_check_public function doc
2019-07-31 08:44:43 +10:00
81a9779fc4
Merge pull request #2385 from dgarske/minor_items
...
Minor cleanups for spelling and cast warnings
2019-07-30 15:22:29 -07:00
8b8cc41a1a
Merge pull request #2384 from JacobBarthelmeh/PKCS7
...
add aditional sanity checks on buffer
2019-07-30 15:21:09 -07:00
0a60c2bb2c
Merge pull request #2379 from JacobBarthelmeh/sessionExport
...
reduce size of state only save and add option to remove peer info
2019-07-30 15:09:39 -07:00
21c8ad03d3
Merge pull request #2378 from SparkiDev/tls13_nopskdheke_ks_fix
...
Fix for TLS 1.3 to always send Key Share
2019-07-30 15:08:38 -07:00
f314613fa1
Merge pull request #2376 from SparkiDev/dsa_sign
...
Generate k for DSA signature as per FIPS 186-4 B.2.2
2019-07-30 15:06:26 -07:00
91251eb319
Fixes for minor compiler cast warnings.
2019-07-29 08:14:27 -07:00
e3653a7a07
Various spelling corrections.
2019-07-29 08:14:07 -07:00
23af4e92f3
Special implementation of mod exp when base is 2 in SP
2019-07-29 12:58:07 +10:00
ec18ae0fbc
add aditional sanity checks on buffer
2019-07-28 19:21:09 -06:00
4778dac49f
Add checks of public key for ECC and curve25519
2019-07-29 10:42:44 +10:00
d7b893f250
Use a fixed number of bits with DSA gen and sign
2019-07-29 09:33:11 +10:00
741d7bdb67
Check suite size length is valid as well as space for compression
2019-07-29 08:47:45 +10:00
ca87861915
reduce size of state only save and add option to remove peer info
2019-07-26 14:54:44 -06:00
9e26bc40bb
Generate k for DSA signature as per FIPS 186-4 B.2.2
2019-07-26 09:08:23 +10:00
8ce2dd4bf7
Additional STSAFE return code cleanups.
2019-07-25 08:22:31 -07:00
fe598fc6fc
Improvements to the STSAFE-A100 error code handling.
2019-07-24 09:01:44 -07:00
2cd64c748a
Only require XATOI for build-cases that need it.
2019-07-23 15:36:59 -07:00
b658f2e7c3
Refactor for all fp_int
and mp_int
allocations to use DYNAMIC_TYPE_BIGINT
. This allows customers to setup a static pool for these allocations if desired.
2019-07-23 15:36:59 -07:00
b0444bcfa1
Refactor to add XATOI
for standard library function.
2019-07-23 15:36:59 -07:00
50fbdb961f
Merge pull request #2366 from JacobBarthelmeh/Release
...
updating readme and prepare for release
2019-07-23 11:03:29 -07:00
77fda069a8
prepare for release version 4.1.0
2019-07-23 09:27:39 -06:00
2befc9d68f
fix for build with WOLFSSL_EXTRA
2019-07-23 09:27:39 -06:00
13957e7762
update server-ecc-self.pem before/after dates
2019-07-23 09:27:39 -06:00
589b056ecb
update gitignore and location of test cleanup
2019-07-23 09:27:39 -06:00
8f5a0dc66a
Merge pull request #2370 from SparkiDev/arm64_fixes
...
Fix for AARCH64 on Linaro
2019-07-23 09:26:56 -06:00
f8e2285ab8
Fix for AARCH64 on Linaro
...
Poly1305 using [wx]29 corrupts data - use [wx]30.
WOLFSSL_ARMASM is an ASM flag as well.
2019-07-23 09:56:18 +10:00
7ca9b23b76
Merge pull request #2361 from dgarske/bench_vs
...
Fixes for wolfCrypt benchmark and test Visual Studio projects
2019-07-22 11:29:33 -07:00
c443116189
Merge pull request #2364 from dgarske/stm32_cube_small_block
...
Fix for STM32 AES GCM crypto hardware with less than block size
2019-07-22 11:27:04 -07:00
fc918f9052
Merge pull request #2367 from JacobBarthelmeh/PKCS7
...
fix for initialize PKCS7 structure with signer
2019-07-22 09:41:17 -07:00
db9a17c8a7
fix for inject clear alert from client test case
2019-07-22 10:34:20 -06:00
aec980b803
fix for initialize PKCS7 structure with signer
2019-07-19 16:23:14 -06:00
aed1e433b2
Updates to benchmark/test Visual Studio projects to properly reference x64. Added missing files to VS projects. Example settings for enabling SP and AESNI in Visual Studio in IDE/WIN/user_settings.h.
2019-07-19 13:08:13 -07:00
ab01cd9be1
Merge pull request #2354 from ejohnstown/fixes
...
Fixes for FIPS
2019-07-19 09:59:21 -07:00
2abcffd4a7
Revert changes to fe_x25519_asm.S
.
2019-07-18 12:15:55 -07:00
0bcae86038
Fixes for wolfCrypt benchmark and test Visual Studio projects. Fixes for benchmark.c compile errors in bench_hmac with Visual Studio. Added README.md files for benchmark and test.
2019-07-18 11:39:59 -07:00
45abd67bd1
Merge pull request #2362 from SparkiDev/chacha20_asm_fix
...
Fix chacha20 AVX1 assembly to not use register RBX
2019-07-18 08:43:44 -07:00
b73c53471c
Merge pull request #2363 from JacobBarthelmeh/Testing
...
Fixes for builds
2019-07-18 08:38:50 -07:00
6fd623248e
Add macro checks around new .c/.S files to allow wildcard include of source files (such as in Eclipse).
2019-07-18 06:49:36 -07:00
7db3f8e2c6
Fixes for STM32 CubeMX AES GCM crypto hardware where less than a block size (16) is used.
2019-07-18 06:09:07 -07:00
b399b08df7
Fix for TLS 1.3 to always send Key Share
...
Even if resuming or using PSK and not performing DHE key exchange, send
key share extension in case full handshake is required.
2019-07-18 11:01:43 +10:00
d1700d3739
Merge pull request #2358 from ejohnstown/rsa-keygen-speedup
...
RSA Key Generation Speedup
2019-07-17 18:01:38 -07:00
7fe4521083
Fix chacha20 AVX1 assembly to not use register RBX
2019-07-18 09:42:52 +10:00
0555668f2c
Merge pull request #2356 from JacobBarthelmeh/OCSP
...
revert early free of OCSP buffer after finding it is revoked
2019-07-18 08:38:10 +10:00
3aad9a2673
FIPS Macro Fix
...
In a couple places the label WOLFSSL_FIPS was getting checked. Changed
to the correct HAVE_FIPS instead.
2019-07-17 15:35:12 -07:00
9c245b7fc5
Fixes
...
When building with GCC-8 and enable-intelasm set, GCC reported a memcpy
from and two the same pointer being possible. Added a check for the same
pointer and skipped the copy if the same.
2019-07-17 15:35:12 -07:00
c3c705f82b
FIPS, HMAC, and PKCS8
...
One of the tests for PKCS8 depended on keys encrypted with a password
that has only 8 letters. HMAC in FIPS mode requires a minimum of 12
bytes. Disabled that test case when FIPS is enabled. All components do
get tested just not all together in that case.
2019-07-17 15:35:12 -07:00
7e79e3a6bf
fix for build with disable filesystem
2019-07-17 16:28:58 -06:00
f63656f18b
macro guard on test case with disable AES
2019-07-17 15:22:29 -06:00
dc71f957f3
RSA-Key Gen Speedup
...
1. When doing the test divides on the first few primes, short circuit
out of the loop if the prospective possible prime divides evenly.
2019-07-17 13:43:15 -07:00
8b6e66f095
Merge pull request #2353 from SparkiDev/ecc_nonce
...
Improve nonce use in ECC mulmod
2019-07-17 11:23:12 -07:00
9a2f4bb8f8
Merge pull request #2333 from kaleb-himes/WCv4.0.1-stable-master
...
WCv4.0.1-stable changes
2019-07-17 10:14:40 -07:00
af8395b17b
revert early free of OCSP buffer after finding it is revoked
2019-07-17 11:08:28 -06:00
8bf8fcca60
Merge pull request #2352 from dgarske/async_v4.1
...
Fixes for Asynchronous support in v4.1
2019-07-16 17:32:18 -06:00
483f6a5acd
Improve nonce use in ECC mulmod
2019-07-17 09:27:29 +10:00
5f3fd3ae86
Merge pull request #2348 from cconlon/scepchanges
...
Changes to support SCEP Expansion
2019-07-16 15:26:15 -07:00
fdeb65dec8
WCv4.0.1-stable changes
...
CHAR_BIT to 8, simplify logic from peer review
Update build script
2019-07-16 15:58:56 -06:00
cb2ed60305
Merge pull request #2351 from ejohnstown/watch-chain-deux
...
Sniffer Watch Cert Chain Part 2
2019-07-16 15:04:32 -06:00
7b021d68c3
Fixes for asynchronous support in v4.1:
...
* Fixes PK callback null dereference.
* Fixes `DoCertificateVerify` verify handling.
* Fixes build issue with API tests.
2019-07-16 11:56:02 -07:00
5067d1fc10
Merge pull request #2328 from kaleb-himes/ZD-5373-TIRTOS
...
Updating for TI hardware offload with latest version of wolfSSL
2019-07-16 11:43:56 -07:00
8b8ff2ac34
Merge pull request #2336 from kaleb-himes/ZD-5388-OCSP-STATUS-UNHONORED
...
Honor the status from peer and do not do internal OCSP lookup regardless
2019-07-16 11:32:34 -07:00
99d3ea9e56
Merge pull request #2350 from SparkiDev/rsa_pss_fix
...
Don't pick RSA PSS if not compiled in
2019-07-16 11:28:50 -07:00
4b0bb75909
Sniffer Watch Cert Chain Part 2
...
1. Check the sizes picked up out of the message against the expected
size of the record when looking at the certificate messages.
2. Renamed the cert and certSz in the watch callback with it being a
certChain.
2019-07-16 09:54:45 -07:00
2e308ea82c
Merge pull request #2260 from JacobBarthelmeh/PKCS7
...
PKSC7 firmware revision + callback / get SID
2019-07-16 10:51:38 -06:00
9f1aa1a27c
Merge pull request #2349 from ejohnstown/watch-chain
...
Sniffer Watch Cert Chain
2019-07-16 10:43:37 -06:00
d51b958334
use ForceZero instead of MEMSET in PKCS7 signed attribute handling
2019-07-16 08:13:47 -07:00
8112c1236d
Don't pick RSA PSS if not compiled in
2019-07-16 14:59:01 +10:00
9af9941b90
Fixes for TLS 1.3 and OCSP Stapling
...
Create the OCSP Response for Stapling and TLS 1.3 when parsing.
When parsing OCSP stapling extension with TLS 1.3, use a new extension
object if it was created.
Set the extension size to 0 before writing extensions when sending a TLS
1.3 Certificate message.
2019-07-16 13:52:36 +10:00
d620433d1d
Merge pull request #2209 from tmael/maintenanceDefects
...
Increased ciphers buffer size for testsuite and ECC API for getting curve from dp
2019-07-15 16:49:13 -07:00
4e648dd35f
Merge pull request #2347 from JacobBarthelmeh/HardwareAcc
...
adjust time.h for port due to tm struct change
2019-07-15 15:27:58 -07:00
3cdb4f8bf0
Sniffer Watch Cert Chain
...
Modifed the sniffer watch callback so it provides a SHA-256 hash of the
peer certificate, as before, and the entire certificate chain sent by
the server in the Certificate handshake message. The chain is taken
directly from the message payload, unprocessed. It'll be a list of pairs
of 24-bit certificate length and a DER encoded certificate, all in
network byte order.
2019-07-15 14:07:22 -07:00
7367da3fb6
sort PKCS7 signed attributes when generating bundle
2019-07-15 13:27:49 -07:00
6e6c93624a
free test RSA key after use
2019-07-15 12:32:19 -06:00
cba8a7f155
free buffer when using small stack
2019-07-15 12:32:19 -06:00
4362ce5f6b
fix expected size and add sanity checks
2019-07-15 12:32:19 -06:00
a25d04044a
save rid for kari callback
2019-07-15 12:32:19 -06:00
60fc9b3a1d
add test for manual verify
2019-07-15 12:32:19 -06:00
d33a95352a
fix check on ret value and add test case
2019-07-15 12:32:19 -06:00
f79a119c82
add storing sig/digest if no certs in bundle
2019-07-15 12:32:19 -06:00
d7a86de969
add wrap CEK callback, test, and adjustment for fwWrappedFirmwareKey
2019-07-15 12:32:19 -06:00
84653a7fb5
improvements on test code
2019-07-15 12:32:19 -06:00
a7a51d8f33
scan-build warnings / fixes
2019-07-15 12:32:19 -06:00
ab0029f9ac
add setter function for ctx and pkcs7 callback, add test cases
2019-07-15 12:32:19 -06:00
2972b1c467
getter for signerinfo SID and decrypt callback
2019-07-15 12:26:11 -06:00
5743a1c80f
Merge pull request #2341 from miyazakh/fix_ricoh_buildfailure
...
fix build failure when enabling MYSQL_COMPATIBLE
2019-07-15 10:10:34 -06:00
9d9495f8b6
allow CSR challenge pass to be encoded as PrintableString
2019-07-12 16:23:48 -07:00
051112a101
adjust time.h for port due to tm struct change
2019-07-12 13:55:04 -06:00
b4765a5c9e
Merge pull request #2340 from JacobBarthelmeh/Testing
...
fsanitize report fixes
2019-07-11 11:18:09 -07:00
88f923a2a1
Merge pull request #2338 from ejohnstown/md5-null-suite
...
RSA-NULL-MD5 cipher suite
2019-07-11 11:15:48 -07:00
3756a2c8c7
fix build failure when enabling MYSQL_COMPATIBLE
2019-07-11 09:00:03 +09:00
a6cc9af1fc
free old peer RSA key in secure renegotiation when getting new one
2019-07-10 17:07:16 -06:00
6c9fac2a71
add wolfSSL_RAND_Cleanup to match wolfSSL_RAND_seed call on init
2019-07-10 16:43:44 -06:00
85ce959031
free peer cert overwritten by secure renegotiation
2019-07-10 16:04:42 -06:00
45b280a53e
RSA Null MD5 cipher suite
...
1. Add the cipher suite TLS_RSA_WITH_NULL_MD5 for use with the sniffer.
2. Added TLS_RSA_WITH_NULL_MD5 to the suite test.
2019-07-10 14:32:14 -05:00
d7b50874f6
Fix leak in dh_test
2019-07-10 13:28:00 -06:00
92bd585f25
Merge pull request #2329 from JacobBarthelmeh/SanityChecks
...
scan-build fixes
2019-07-10 10:23:39 -07:00
9cd6a992c5
Merge pull request #2295 from kojo1/RSA4096
...
Static RSA4096
2019-07-10 09:40:41 -06:00
d88458a447
Merge pull request #2322 from SparkiDev/int_is_prime_fix
...
Fix prime testing to do t iterations of random values in range
2019-07-09 08:03:30 -07:00
9daccb3300
Merge pull request #2320 from SparkiDev/tls_alerts
...
Send more alerts as per TLS specification
2019-07-09 08:02:32 -07:00
964fd95a43
Merge pull request #2335 from SparkiDev/tls_pss_fix
...
Fix duplicate definitions in internal.h (new PSS defines)
2019-07-09 08:01:10 -07:00
3e6246af59
Honor the status from peer and do not do internal OCSP lookup regardless
...
Item 2) Suggestion from Sean implemented: "Limit the message types"
Item 3) Removed a hard tab
2019-07-09 07:09:09 -06:00
e01f9961ac
Fix duplicate definitions in internal.h (new PSS defines)
2019-07-09 08:49:04 +10:00
b8c6bc0d7f
Changes following peer review, add defines to disable for any HW port
2019-07-08 16:28:35 -06:00
b7986ccb17
Merge pull request #2332 from SparkiDev/poly1305_arm64
...
Improve perfomance of Poly1305 on ARM64
2019-07-08 15:08:25 -07:00
4d13121de1
Merge pull request #2331 from SparkiDev/sp_c32_fix
...
Fix for C32 implementation in div
2019-07-08 15:06:16 -07:00
0bb6b388c0
Merge pull request #2312 from kojo1/RAND_bytes_2
...
RAND_bytes
2019-07-08 15:30:06 -06:00
97a6dc9e7e
Merge pull request #2316 from SparkiDev/tls13_ext_fixes
...
TLS 1.3 extension fixes
2019-07-08 14:13:55 -07:00
1bcec1b9ab
Merge pull request #2319 from SparkiDev/tls13_alerts
...
Improve alert sending in TLS 1.3 code from fuzz testing
2019-07-08 14:11:35 -07:00
efe276414b
set internal x509 elements to NULL after free
2019-07-08 15:11:03 -06:00
79165ce8cb
Merge pull request #2315 from SparkiDev/tlsx_ext_debug
...
Print out extension data being parsed when WOLFSSL_DEBUG_TLS defined.
2019-07-08 13:59:11 -07:00
44b8106da6
Merge pull request #2317 from SparkiDev/asn_nofs_fix
...
Fix for NO_FILESYSTEM builds
2019-07-08 13:32:27 -07:00
bd40a59f3e
Merge pull request #2318 from SparkiDev/server_fuzz
...
Changes to server example for fuzz testing
2019-07-08 13:16:17 -07:00
36920b1469
Merge pull request #2314 from SparkiDev/tls13_fixes
...
TLS 1.3 ClientHello rework and other fixes
2019-07-08 13:14:37 -07:00
d824b78af0
Merge pull request #2323 from dgarske/various_fixes
...
Various fixes, improvements to build options for reduced code size and static benchmarks
2019-07-08 13:02:22 -07:00
baf65f4f43
Merge pull request #2327 from JacobBarthelmeh/Compatibility-Layer
...
add wolfSSL_PEM_write_DHparams implementation
2019-07-08 12:58:10 -07:00
e6ab7d165c
Merge pull request #2325 from JacobBarthelmeh/Testing
...
remove HAVE_CRL macro guard from X509 PEM write function
2019-07-08 12:57:15 -07:00
66db74d827
Merge pull request #2313 from SparkiDev/tls13_reneg
...
Fix for TLS 1.3 and secure renegotiation
2019-07-08 12:56:02 -07:00
406ff31fc8
Merge pull request #2311 from SparkiDev/tls12_ffdhe_fix
...
Better support for TLS 1.2 and FFDHE
2019-07-08 12:55:03 -07:00
1070aba5e2
Merge pull request #2308 from SparkiDev/resumption_fix
...
Don't resume if stored session's ciphersuite isn't in client list
2019-07-08 12:52:59 -07:00
2610d9ce94
Merge pull request #2307 from SparkiDev/pick_hash_sig
...
Improve hash and signature algorithm selection
2019-07-08 12:51:36 -07:00
74324bb1b5
Merge pull request #2305 from SparkiDev/doalert_fix
...
Better handling of alerts
2019-07-08 12:50:26 -07:00
60d6d71636
Merge pull request #2304 from SparkiDev/tls_sha224
...
Support to TLS for RSA SHA-224 signatures
2019-07-08 12:47:56 -07:00
2a4b935e07
Merge pull request #2299 from JacobBarthelmeh/DTLS-MultiCore
...
DTLS export/import state only
2019-07-08 12:47:13 -07:00
cc453c6c12
Merge pull request #2262 from ejohnstown/sniffer-watch
...
Sniffer watch
2019-07-08 12:45:35 -07:00
b5a5100068
move location of X509 free
2019-07-05 14:33:35 -06:00
964dac96a7
Merge pull request #2321 from kaleb-himes/ARDUINO-UPDATE
...
Remove redundent setting WOLFSSL_ARDUINO and add guards
2019-07-05 11:35:30 -07:00
011fa6bafd
Added PBKDF2 benchmark. Benchmark improvements to capture results in static buffer (helps benchmarking on systems without printf support). Added benchmark "-print" option to show summary. Added wolfCrypt test version header.
2019-07-05 11:29:14 -07:00
c9f18bfe3b
Merge pull request #2326 from SparkiDev/sp_update_1
...
Changes to other SP implementations based on recent changes
2019-07-05 11:19:01 -07:00
4cf8923838
make wc_DhParamsToDer a static function to avoid DhKey redefenition
2019-07-05 11:58:40 -06:00
8dccecc531
Improve perfomance of Poly1305 on ARM64
2019-07-05 14:41:46 +10:00
61e1491407
Fix for C32 implementation in div
...
Changes to allow C32 to build on x86_64 when not using fast math.
2019-07-05 10:39:30 +10:00
9b654d25d1
wolfSSL_RAND_seed(NULL, 0);
2019-07-04 18:31:57 +09:00
5dcd421580
scan-build fixes
2019-07-03 17:08:02 -06:00
ab9d89cb31
cast on return and move location of function declaration
2019-07-03 15:20:08 -06:00
02871d5ed4
add test case for wolfSSL_PEM_write_DHparams
2019-07-03 13:32:21 -06:00
0b5ee1b633
Merge pull request #2324 from dgarske/cryptocb_3des
...
Crypto callback DES3 support
2019-07-03 10:17:23 -07:00
8327984523
fix for leading bit check
2019-07-03 10:35:08 -06:00
f2bb5e8944
implementation of wolfSSL_PEM_write_DHparams
2019-07-02 17:42:33 -06:00
7c393edf49
Changes to other SP implementations based on recent changes
2019-07-03 09:37:31 +10:00
58fe2781f1
Fix for wc_CryptoCb_AesCbcEncrypt
with improper find device logic. Fix for HMAC scan-build with ret
. Cleanup of HMAC formatting.
2019-07-02 14:08:59 -07:00
a7acacff41
remove HAVE_CRL macro guard from X509 PEM write function
2019-07-02 14:37:33 -06:00
d5f3fa2ff8
Added DES3 Crypto callback support.
2019-07-02 10:15:53 -07:00
01c9fa1830
Added NO_TFM_64BIT
option to disable 64-bit for TFM only (also enabled with NO_64BIT
. This allows other areas like SHA512/ChaCha20 to still have the 64-bit type, but not use it for TFM.
2019-07-02 09:36:08 -07:00
eba78cd87a
Improvements for disabled sections in pwdbased.c, asn.c, rsa.c, pkcs12.c and wc_encrypt.c. Adds --enable-pkcs12
, HAVE_PKCS12
/NO_PKCS12
, HAVE_PKCS8
/ NO_PKCS8
and HAVE_PBKDF1
/ NO_PBKDF1
.
2019-07-02 09:35:46 -07:00
40864da533
Fix prime testing to do t iterations of random values in range
2019-07-02 14:42:03 +10:00
0e33e2d9ee
Check PickHashSigAlgo return when doing CerticateRequest
...
Only check picking the hash and signature algorithm functions return
when a certificate is available to send to peer.
Include the ECC signature and hash algorithms in available list even
when using ECDSA certificates signed with RSA.
List is of capabilities not what is in certificate.
Certificate request sent to peer doesn't have to be an ECDSA certificate
signed with RSA.
Same treatment for RSA.
2019-07-02 11:53:04 +10:00
28aa99c3e3
Always have support for SHA-224 signatures when SHA-224 built-in
2019-07-02 08:27:04 +10:00
21afcf17a8
Sniffer Watch Mode
...
1. Split the function ssl_SetWatchKey() into ssl_SetWatchKey_file()
which loads the key from a named file and ssl_SetWatchKey_buffer()
which loads the key from a provided buffer. file() uses buffer().
2019-07-01 13:50:28 -07:00
b02e1e8d59
Sniffer Watch Mode
...
Added some statistics tracking to the watch mode.
2019-07-01 13:50:28 -07:00
8be6c0c08c
Sniffer Watch Mode
...
Add some tests for the Watch mode that will also work with static ECDH.
2019-07-01 13:50:28 -07:00
b61803f165
Sniffer Watch Mode
...
Added the build option for the Watch mode for the sniffer. Instead of
setting a set of IP addresses and keys, you set a callback function.
When any TLS connection is started, the hook is called and a hash of the
peer certificate is given to the callback function. It has a chance to
load a private key into the sniffer session. Enable this option with the
build flag "WOLFSSL_SNIFFER_WATCH".
2019-07-01 13:50:28 -07:00
fd71618f10
Added warning message if user IO read callback returns negative that is not supported.
2019-07-01 13:41:17 -07:00
b2f919ec13
Fix to include errno.h in tls_bench.c
2019-07-01 13:41:17 -07:00
354ec9cd9d
Add useful log message when SP math key size is invalid.
2019-07-01 13:41:17 -07:00
f8e3e63938
Fix for building with USE_STSAFE_VERBOSE
to avoid printf use.
2019-07-01 13:41:17 -07:00
3652929573
Merge pull request #2310 from SparkiDev/alpn_sni_parse
...
ALPN and SNI Extension parsing improvements
2019-07-01 08:57:39 -07:00
4500f2d773
Merge pull request #2309 from SparkiDev/fallback_scsv
...
Fallback SCSV (Signaling Cipher Suite Value) support on Server only
2019-07-01 08:55:02 -07:00
08bd5000f1
Merge pull request #2306 from SparkiDev/tls_long_msg
...
Add detection of oversized encrypted data and plaintext
2019-07-01 08:51:20 -07:00
db17fce49a
Remove redundent setting WOLFSSL_ARDUINO and add guards
2019-07-01 09:02:21 -06:00
b7e00eea1a
Send more alerts as per TLS specification
...
Requires WOLFSSL_EXTRA_ALERTS or OPENSSL_EXTRA to enable
2019-07-01 17:01:06 +10:00
1fe69992e2
Improve alert sending in TLS 1.3 code from fuzz testing
2019-07-01 14:20:36 +10:00
373bbf6660
Changes to server example for fuzz testing
2019-07-01 13:35:33 +10:00
707156f53b
Fix for NO_FILESYSTEM builds
2019-07-01 13:26:28 +10:00
4ff9d951f6
TLS 1.3 ClientHello rework and other fixes
...
Do version negotiation first. Look for, parse and negotiate with
SupportedVersions extension upfront. Only need to handle TLS 1.3
ClientHello after this.
Any version greater than TLS 1.2 in Legacy Version field is translated
to TLS 1.2.
Fix preMasterSz to when not using PreSharedKey.
Not finsing KeyShare in ClientHello sends a missing_extension alert.
Decoding signature algorithms in new TLS 1.3 range now returns error
when not recognized.
Don't allow RSA PKCS #1.5 signatures to be verified.
Fix accept when downgraded from TLS 1.3 to go to wolfSSL_accept.
Fix server state when sending ChangeCipherSpec for MiddleBox
compatability.
Send a new session ticket even when resuming.
2019-07-01 13:22:21 +10:00
1d05503d20
TLS 1.3 extension fixes
...
When major version is TLS Draft then this is now ignored.
If version negotitation occurs but none matched then send an alert and
return an error.
Store the rsa_pss_pss_* signature algorithms in the bit mask.
KeyShare Entry parsing returns INVALID_PARAMETER when length is 0 and
results in a different alert being sent.
Check negotiated protocol version is not TLS 1.3 when determing whether
to parse point formats.
2019-07-01 12:20:37 +10:00
4eaabd9be5
Print out extension data being parsed when WOLFSSL_DEBUG_TLS defined.
2019-07-01 11:58:43 +10:00
60af8bdb7c
Fix for TLS 1.3 and secure renegotiation
2019-07-01 09:26:05 +10:00
43ce956d9c
minor fix
2019-06-29 16:47:39 +09:00
1634d9571c
RAND_seed in init, GlobalRNG before tmp.
2019-06-29 09:21:30 +09:00
e96ede65ce
Don't resume if stored session's ciphersuite isn't in client list
...
Turn this check off with NO_RESUME_SUITE_CHECK.
2019-06-28 16:23:41 +10:00
46a2a437d4
Better support for TLS 1.2 and FFDHE
...
If not FFDHE parameters in list then use existing.
If FFDHE parameters present but none matching then let the ciphersuite
match process fail when DHE must be used.
2019-06-28 16:12:23 +10:00
1592d6f856
ALPN and SNI Extension parsing improvements
...
SNI will not have more than one type, only one entry in the list per
type and therefore no need to loop.
ALPN error checks improved.
2019-06-28 15:52:51 +10:00
a3e4a2fd6e
Fallback SCSV (Signaling Cipher Suite Value) support on Server only
2019-06-28 15:35:56 +10:00
8312ceb14c
Improve hash and signature algorithm selection
...
Return error when no hash-signature algorithm is possible.
2019-06-28 14:31:40 +10:00
5f9a851adb
Add detection of oversized encrypted data and plaintext
2019-06-28 12:01:35 +10:00
7d2ac604f5
Better handling of alerts
...
Better checking of encrypted alerts - check unencrypted data size
correctly before using data.
Send an alert if the alert isn't the right size.
Send an alert if the maximum alert count has been reached - but don't
send it if seeing close_notify alert.
2019-06-28 11:53:33 +10:00
8a0c058782
Support to TLS for RSA SHA-224 signatures
2019-06-28 10:26:48 +10:00
f51a8fffde
Merge pull request #2265 from JacobBarthelmeh/Testing
...
fix check on ret value and add test case
2019-06-27 14:02:01 -06:00
8bea016d69
Merge pull request #2277 from julek-wolfssl/arm-poly1305
...
ARM Poly1305
2019-06-27 09:21:09 +10:00
c7d1424adf
word16 for consistency
2019-06-27 06:38:14 +09:00
e7fd45537d
update comments for DEGENERATE_SID use
2019-06-26 11:58:53 -06:00
7520137601
Merge pull request #2297 from miyazakh/esp_random
...
fix ed25519 sign msg test failure in ESP32
2019-06-26 11:54:34 -06:00
da5357cadd
Merge pull request #2301 from SparkiDev/dh_pubval_check
...
Simple checks of DH public value from peer.
2019-06-26 09:20:49 -07:00
0dbba5f056
Merge pull request #2300 from ejohnstown/fips-hash
...
FIPS Hash
2019-06-26 09:18:48 -07:00
6478f92e04
Merge pull request #2294 from dgarske/read_fixes
...
Fixes to improve read error handling
2019-06-26 09:17:20 -07:00
cb4f9afd6d
free memory in test case
2019-06-25 15:24:39 -06:00
3a378520c0
FIPS Hash
...
Add the fips-hash.sh script to the Automake distribution.
2019-06-25 11:38:09 -07:00
53c1a6c264
Merge pull request #2283 from dgarske/extern_c
...
Fixes for cpp extern c
2019-06-25 11:25:39 -07:00
eceb460cff
Merge pull request #2287 from ejohnstown/sniffer-stats
...
Sniffer Statistics
2019-06-25 11:22:24 -07:00
ef64cd300c
Fixes to improve read error handling.
...
* Improved `GetInputData` handling of non -1 return codes.
* Adds support for handling `WOLFSSL_CBIO_ERR_TIMEOUT` return code in non-DTLS case.
2019-06-25 07:11:14 -07:00
dcdd6d6d6f
Cleanup around include of wolfmath.h and shared math macros. Fix for SP math case with WOLFSSL_BIGNUM
.
2019-06-25 07:06:33 -07:00
a9fff57063
Add extern "C" to headers. Some files are missing this, which can cause issues with some compilers when using the C++ mode.
2019-06-25 07:05:46 -07:00
ee023c6bf4
Simple checks of DH public value from peer.
...
Add test for wc_DhCheckPubValue
2019-06-25 11:12:33 +10:00
da6ed416be
use len for copy-length instead of sz
2019-06-25 08:39:46 +09:00
26384d4936
Sniffer Stats
...
Upgrade the sniffer stats to unsigned long ints.
2019-06-24 16:16:05 -07:00
b957415609
Merge pull request #2245 from MKinclRA/coverity-issues
...
Coverity issues
2019-06-24 16:12:52 -07:00
851a547fd5
FIPS Hash
...
Add a script that updates the verifyCore value automatically. It isn't
included in the dist like fips-check.sh.
2019-06-24 16:01:05 -07:00
15552be934
Merge pull request #2280 from cconlon/selftestccm
...
CAVP self test build fixes for AES-CCM and PKCS7
2019-06-24 15:55:18 -07:00
036f6a1177
Merge pull request #2281 from ejohnstown/evp-legacy
...
Legacy EVP_CipherFinal addition
2019-06-24 15:54:43 -07:00
785d984a3c
Merge pull request #2282 from SparkiDev/certvfy_tls13
...
Free RSA key later in TLS v1.3 CertificateVerify
2019-06-24 15:54:04 -07:00
56d7da3130
Merge pull request #2284 from dgarske/api_test
...
Fixes for track memory and API unit test cleanup
2019-06-24 15:53:32 -07:00
587e962331
Merge pull request #2288 from SparkiDev/ed25519_string_fix
...
Fix length of buffer to match string length for g++
2019-06-24 15:39:52 -07:00
2ba89cb7a9
Merge pull request #2289 from SparkiDev/sp_prime_fix
...
When checking primes call only available SP ModExp functions
2019-06-24 15:39:03 -07:00
c7964b62c0
Merge pull request #2290 from kaleb-himes/ZD-5253-X25519
...
Support CURVE25519 in `get_curve_name` when HAVE_ECC not defined
2019-06-24 15:37:34 -07:00
358757cd2e
Merge pull request #2291 from ejohnstown/random-clean
...
Random Cleanup
2019-06-24 15:36:00 -07:00
0100159079
Merge pull request #2293 from ejohnstown/aesni-fix
...
AES-NI Fix
2019-06-24 15:34:12 -07:00
78956534f0
Merge pull request #2298 from SparkiDev/static_rsa
...
Improve handling of static RSA's decrypted pre-master secret
2019-06-24 15:24:18 -07:00
0e3881d418
add test case for state only export on DTLS session
2019-06-24 16:08:12 -06:00
8439beb525
Sniffer Statistics
...
1. Moved sslKeyFails.
2. Added sslEphemeralMisses, sslEncryptedConns, sslDecodeFails.
3. Removed the Rehandshake stats as the sniffer does not support rehandshaking.
4. Removed two of the per second stats as they seemed redundant.
5. Added a function to atomically read and reset the sniffer statistics.
2019-06-24 09:54:42 -07:00
0eaccb7259
Removed some redundant comments from the sniffer header.
2019-06-24 09:54:42 -07:00
0203a25b60
Sniffer Statistics
...
Added stats for encrypted and decrypted bytes and packet counts.
2019-06-24 09:54:42 -07:00
9715431921
Sniffer Statistics
...
1. Wrapped the added code for statistics in a preprocessor guard.
2. Added a check for the current cipher suite and if it is on the list
of allowed suites. Guarded by the statistics option.
3. Added more statistics from the list.
2019-06-24 09:54:42 -07:00
c600f7659a
Sniffer Statistics
...
Added more of the statistics.
2019-06-24 09:54:42 -07:00
2ee7d05dcc
Sniffer Statistics
...
1. Added a structure for all the statistics to be kept.
2. Added a global to track the statistics.
3. Added a copy function to get a copy of the statistics.
4. Added a reset function for the statistics.
5. Handle the alert messages in statistics.
2019-06-24 09:54:42 -07:00
71fe3313d3
Cleanup poly1305 struct
2019-06-24 09:43:55 +02:00
c826c605a3
Fix problems when building with Make
2019-06-24 09:42:07 +02:00
f42c94e3bc
Cleanup code and align labels
2019-06-24 09:42:07 +02:00
0fed159abd
Poly1305 ARM64 optimization
2019-06-24 09:42:07 +02:00
f1f6ac9308
Improve handling of static RSA's decrypted pre-master secret
2019-06-24 17:09:22 +10:00
1d9d9e2955
fix ed25519 sing msg test failure
...
better random number handling
2019-06-24 15:27:29 +09:00
6d04d784c4
pkcsBlockLen in RsaUnPad may be > 256
2019-06-24 07:53:23 +09:00
b236a1c32f
add export/import window state only
2019-06-21 15:52:48 -06:00
c114bcaead
Addressed peer feedback, avoid double check when HAVE_CURVE25519 not set
2019-06-21 09:40:17 -06:00
49a631996c
Check other names when FFDHE returns NULL
2019-06-21 09:27:15 -06:00
fba89ae034
Random Cleanup
...
1. Remove redundant calls to the generate function when instantiating
and reseeding the DRBG.
2. Added note to the apparently redundant extra call to the generate
function when running the self test. This extra call is there to make
sure the internal state is updating correctly as a part of the KAT.
3. Removed duplicate enable argument clause for rng from configure.ac.
2019-06-20 16:02:35 -07:00
f4548945f7
Merge pull request #2292 from ejohnstown/config-tweak
...
Autoconf Update
2019-06-21 00:53:02 +02:00
e4e6ed3701
AES-NI Fix
...
Replace some removed constants for AES-NI. They were removed when the
inline assembly that used that was exported to its own file.
For Windows, we're using the C intrinsic AES-NI functions, and those
still needed those constants.
2019-06-20 15:33:30 -07:00
a28e075290
Autoconf Update
...
Consolidate all the AM_CONDITIONAL statements in one place in the
configure process. This replaces the set of repeat checks of enable
flags to conditionally check the AM_CONDITIONAL.
2019-06-20 13:37:53 -07:00
7225823f90
Merge pull request #2278 from SparkiDev/cert_asn1
...
Better length checks when parsing ASN.1 certificates
2019-06-20 11:18:02 -07:00
2460effb0b
Merge pull request #2285 from SparkiDev/tlsx_len
...
Better checking of return values in TLSX for error codes.
2019-06-20 10:10:31 -07:00
ce251417f5
curve25519 in get_curve_name when HAVE_ECC not defined. Thanks to C.B. for the report.
2019-06-20 10:57:07 -06:00
b631670cca
Fix for SP math build in OpenSSL bn.h
2019-06-20 21:40:58 +10:00
c82c9b481b
When checking primes call only available SP ModExp functions
2019-06-20 18:05:25 +10:00
e1b03aa056
Fix length of buffer to match string length for g++
2019-06-20 17:01:16 +10:00
e7b3b31d9f
Change TLSX functions that return error with length to do so separately
2019-06-20 16:37:34 +10:00
7bde02b3e7
Fix for track memory case where the "prev" wasn't getting initialized for the first malloc. Caused issue on last free with fsantize because pointers are not zero'd by default.
2019-06-19 11:23:37 -07:00
19cb31d429
Merge pull request #2286 from miyazakh/fix_make_dist
...
fix make dist
2019-06-19 09:38:07 -06:00
4581342fb0
fix make dist
2019-06-19 09:32:56 +09:00
71cb117dda
Better length checks when parsing ASN.1 certificates
2019-06-19 10:05:21 +10:00
d378d3c009
Better checking of return values in TLSX for error codes.
2019-06-19 10:02:55 +10:00
dd9dd6306e
API unit test fix to remove improperly placed wolfSSL_Cleanup()
call in test_for_double_Free
. This caused erronous report with fsanitize=address
.
2019-06-18 16:22:19 -07:00
c500fd5a86
Free RSA key later in TLS v1.3 CertificateVerify
2019-06-19 08:47:40 +10:00
c2032c64d2
CAVP self test build fixes for AES-CCM and PKCS7
2019-06-18 08:29:49 -07:00
2cf4a74b47
Merge pull request #2279 from SparkiDev/test_fix
...
Fix for small stack in test.c
2019-06-17 13:36:03 -07:00
36fb4e2f2d
Add a legacy version of the wolfSSL_EVP_CipherFinal() function that
...
performs the decrypt in the old manner before a particular bug was
fixed. The old method didn't add padding when the data to encrypt was
multiple of the block_size in length. The decrypt happened to ignore the
error returned by checkPad.
2019-06-14 14:43:45 -07:00
18ac566f48
Fix AVX2 ChaCha20 assembly
2019-06-14 10:22:27 +10:00
a4bdfbf953
Fix for small stack in test.c
2019-06-14 08:43:36 +10:00
2435ec2d6b
Merge pull request #2275 from SparkiDev/sha512_arm32
...
Add ARM32 NEON code for SHA-512/384
2019-06-12 16:19:20 -07:00
53cac0499f
Merge remote-tracking branch 'wolfSSL/master'
2019-06-12 14:42:02 +02:00
102ecac70c
Merge pull request #2237 from julek-wolfssl/proper-arm-chacha-poly1305
...
ARM Chacha20 assembly code
2019-06-12 22:21:47 +10:00
911c8df185
Fix 256 byte assembly slowdown
2019-06-12 00:52:42 +02:00
1f3d9c04c0
Merge pull request #2274 from miyazakh/fix_printstat_tlsbench
...
minor fix order for printing stats in tls_bench
2019-06-11 16:23:38 -06:00
01ad44feef
Merge pull request #2276 from kaleb-himes/BOTH_FIPS_VERSION_TESTING
...
Adjustment to test.c for merge of WCv4.0.1 changes
2019-06-11 13:21:42 -07:00
24042c973a
Merge pull request #2259 from tmael/port_SiFive_RISCV
...
Added support for RISC-V SiFive HiFive Freedom platforms
2019-06-10 20:38:43 -07:00
48d4ed38ac
Include SIFIVE files for distribution
2019-06-10 14:06:42 -07:00
de5ff0acea
Merge pull request #2254 from SparkiDev/curve25519_x64_2
...
Fix and improvements for X25519 x86_64 ASM code
2019-06-10 13:35:43 -07:00
1f0a46331b
Merge pull request #2270 from dgarske/stsafe_tls
...
STSAFE Improvements to support Crypto Callbacks
2019-06-10 13:34:20 -07:00
540c5cdd2f
Updated benchmarks with SPI "dual mode" I/O enabled.
2019-06-10 20:33:28 +02:00
a48981c3c6
Chacha20 ARM optimization
2019-06-10 19:21:46 +02:00
cdf0241ed0
Updated benchmark with SHA512 "slow" version, which performs faster with the RISC-V compiler optimizations.
2019-06-09 19:43:55 +02:00
c5aa13021a
Adjustment to test.c for merge of WCv4.0.1 changes
2019-06-07 16:09:35 -06:00
d7ab3a6dec
Further user_settings.h
cleanup / additions. Additional README.md comments.
2019-06-07 13:58:17 -07:00
02c2782e39
Merge pull request #2272 from JacobBarthelmeh/SanityChecks
...
remove store of last block w/o padding and adjust padding last block case
2019-06-07 10:29:29 -07:00
b4ca2824cb
Merge remote-tracking branch 'wolfSSL/master'
2019-06-07 14:55:21 +02:00
efcf06ef7c
use tlsv1_2 client method when tls13 is enabled
2019-06-07 19:13:46 +09:00
6a594218bc
Add ARM32 NEON code for SHA-512/384
...
Fix up ARM32 Curve25519 assembly code to use right directives.
Slight improvement to ARM64 SHA-512 assembly code.
Don't return error code from Transform functions - can't fail.
2019-06-07 15:02:48 +10:00
292aa196fb
minor fix to print stats in tls_bench
2019-06-07 12:05:19 +09:00
a2f943984f
Merge pull request #2268 from kaleb-himes/GH-2263
...
debug fix + remove outl value check - outl is only written not read
2019-06-06 11:22:19 -07:00
f114932a03
Merge pull request #2271 from miyazakh/fix_nomutexlock_after_free
...
avoid mutex lock test after freeing it on NetBSD
2019-06-06 09:27:18 -06:00
90228e1275
Merge pull request #2269 from SparkiDev/sp_cast
...
Fix casting of memory allocation to correct type
2019-06-06 06:14:59 -07:00
87d24f4488
add additional test case for evp
2019-06-06 16:14:00 +07:00
090899e74e
remove store of last block w/o padding and adjust padding last block case
2019-06-06 14:43:07 +07:00
fdd01c8c8c
Added support for SHA512, ED25519/CURVE25519 and ChaCha20/Poly1305. Enabled ECC Single Precision (SP) support. Updated README.md wolfCrypt test/benchmarks. Pulled in fix "Fix casting of memory allocation to correct type" from Sean.
2019-06-05 20:21:48 -07:00
64b8af728b
skip mutex lock after free
2019-06-06 11:06:29 +09:00
4e3004639d
Fix casting of memory allocation to correct type
2019-06-06 09:11:19 +10:00
97780149a5
debug fix + remove outl value check - outl is only written not read
2019-06-05 13:38:13 -06:00
25aeb8238e
Addressed review comment about id being undefined
2019-06-04 16:05:57 -07:00
9f9155b6f2
Added STSAFE Crypto Callback support.
2019-06-04 15:57:31 -07:00
074e770c98
* Fix to ensure user_settings.h can be included for bio.c and evp.c when IDE or compiler tries to build it directly. Allows for wildcard .c include along with WOLFSSL_IGNORE_FILE_WARN
.
...
* Fix for building SP cortex M without RSA.
* Fix for type-cast warning with STSAFE-A100.
* Improved the RNG seed test to prevent type-case warning.
2019-06-04 15:57:31 -07:00
fee81ce49e
Merge pull request #2257 from dgarske/sha256_regs
...
Added faster SHA256 build options
2019-06-04 14:05:54 -07:00
77248e4e2a
Merge pull request #2255 from SparkiDev/sha512_arm
...
SHA-512 optimised for ARM64
2019-06-04 14:04:33 -07:00
4f80c7c94e
Allow main to build when local debug flag is on
2019-06-04 13:12:27 -07:00
19372c8199
Merge pull request #2266 from kaleb-himes/ZD-5154
...
Check correct allocation assignment. Thanks to R.A. for the report on…
2019-06-04 10:22:09 -04:00
b4571f1f5a
Updates to documentation for SHA256 build options. Changed to enable Ch/Maj math based of specification by default.
...
The `WOLFSSL_SHA256_ALT_CH_MAJ` alternate Ch/Maj performance is the same.
The `SHA256_MANY_REGISTERS` is about 13% slower on 64-bit. On some platforms is slightly faster.
2019-06-03 14:17:47 -07:00
290663f8b2
Feedback changes implemented
2019-06-03 15:13:02 -06:00
7601276411
Merge pull request #2267 from ejohnstown/aesgcm-selftest
...
NetBSD Selftest, TLSv1.3, and wolfCrypt v4
2019-06-03 14:31:33 -06:00
4367761367
Merge pull request #2261 from kaleb-himes/ZD-5172
...
PKCS7 w/ FIPS cert 3389 support
2019-06-03 11:28:27 -06:00
978928be83
NetBSD Selftest, TLSv1.3, and wolfCrypt v4
...
When building for TLSv1.3 and the NetBSD Selftest, need to use the old
pre-wolfCrypt v4 APIs for AES-GCM and AES-CCM.
2019-06-03 09:40:00 -07:00
80dd6cc143
Check correct allocation assignment. Thanks to R.A. for the report on ZD-5154
2019-06-03 08:34:51 -06:00
9fbe471156
fix check on ret value and add test case
2019-06-03 07:52:50 +07:00
e429185535
Make Transform_SHA512_Len API local scope
2019-06-03 08:35:36 +10:00
7624d90590
Merge pull request #2258 from dgarske/no_stdlib
...
Improvements for no standard lib and no malloc/free builds
2019-05-31 14:59:33 -07:00
7726bbbff2
Fix extra distribution files for ARM port dir
2019-05-31 10:47:42 +10:00
e01ae09809
X25519 when not AVX2
2019-05-31 10:12:46 +10:00
a5fabda5c6
Added compile-time check for DRBG size. Added support for all build variations DRBG size.
2019-05-30 15:59:12 -07:00
19c348b5c7
Merge pull request #2256 from dgarske/blake2s
...
Adds Blake2s support
2019-05-30 15:08:59 -07:00
33d27a391a
Improve SHA-512 and Curve25519
2019-05-30 16:07:06 +10:00
173163d1a3
SHA-512 optimised for ARM64
2019-05-30 16:04:15 +10:00
af9d82963e
Add support for increasing CPU clock speed. New benchmarks with HiFive1 RevB hardware at 320MHz.
2019-05-29 12:11:16 -07:00
fea89c52f4
configure with ECC256 only
2019-05-29 10:51:07 -07:00
5601aa4634
PKCS7 w/ FIPS cert 3389 support
2019-05-29 11:12:34 -06:00
f1ecf33d94
Merge pull request #2253 from danielinux/cygwin-build-fix
...
Fix visibility tags for cygwin build
2019-05-29 06:29:47 -07:00
765b075e50
Updated with review comments
2019-05-28 17:48:36 -07:00
87fb9f73e9
Added RISC-V SiFive FE310 support
...
Added freedom-e-sdk based makefile
Updated ecc test code to not allocate more memory than requried
Run wolfcrypt and benchmark tests on the SiFive HiFive1 targets
2019-05-28 17:48:36 -07:00
5ea13a09f6
Adds Blake2s support (--enable-blake2s), which provides 32-bit Blake2 support.
2019-05-28 10:30:19 -07:00
d42bdf9c0b
Removed unused variable keyQ from _DhSetKey.
2019-05-27 12:44:10 +02:00
263769765c
Merge pull request #2246 from ejohnstown/sniffer-logging
...
Sniffer Logging
2019-05-24 15:36:11 -07:00
f26a9589ff
Added support for printf override using XPRINTF for wolfCrypt test/benchmark. Added ability to override snprintf with XSNPRINTF. If STRING_USER
is defined no standard lib <string.h>
or <stdio.h>
will be included.
2019-05-23 22:03:38 -06:00
a89a2839de
Fixes for building with WOLFSSL_NO_MALLOC
. Fixes for static memory in bench embedded case. Added support for elimination of XMALLOC/XFREE when building with NO_WOLFSSL_MEMORY
and WOLFSSL_NO_MALLOC
. If used with WOLFSSL_MALLOC_CHECK
will trap failures with malloc_check
2019-05-23 22:00:41 -06:00
ebbfe769e3
Added faster SHA256_MANY_REGISTERS
support (thanks Sean). The WOLFSSL_SHA256_BY_SPEC
option restore old math, the new case is equivalent math, but easier for compiler to optimize.
2019-05-23 21:53:07 -06:00
6564d03369
Fix and improvements for X25519 x86_64 ASM code
2019-05-24 09:43:08 +10:00
86b558300b
Sniffer Logging
...
1. When collecting the key size to log it, use the constant WOLFSSL_BIT_SIZE for the bytes->bits multiply.
2. When converting the size of the ECC key, break the steps out more explicitly. Also update the comment to be more accurate.
2019-05-23 13:02:52 -07:00
9906a1045b
Merge pull request #2251 from SparkiDev/sp_c_div_word
...
SP - div word in C when __div64 or __div128 not available
2019-05-23 11:51:29 -07:00
ac5a5dfd56
Merge pull request #2247 from SparkiDev/psk_once
...
Use TLS v1.3 PSK callback in extension allow for one call in client
2019-05-23 11:49:40 -07:00
6fe4c3ff34
Merge pull request #2244 from dgarske/psk_pk
...
Fix for static RSA cipher suite with PK callback and no loaded private key
2019-05-23 11:43:20 -07:00
cab4a8c9b1
Merge pull request #2240 from dgarske/x509small_showcerts
...
Added support for `SHOW_CERTS` with `OPENSSL_EXTRA_X509_SMALL`
2019-05-23 11:41:32 -07:00
e7fdb1360a
Merge pull request #2239 from JacobBarthelmeh/Fuzzer
...
add sanity check on length of PSK identity
2019-05-23 11:40:13 -07:00
a742cf9bf8
Merge pull request #2234 from JacobBarthelmeh/Testing
...
add sanity check on buffer index and regression tests
2019-05-23 11:32:38 -07:00
5b5d03d5ac
Merge pull request #2232 from SparkiDev/curve25519_arm_2
...
Add ARM32 asm code for X25519 and Ed25519
2019-05-23 11:30:29 -07:00
6cbe8219a3
Moved opening brace to the same line.
2019-05-23 16:13:34 +02:00
ad8f9c6134
Changed memsetting mp_ints to boolean flag.
2019-05-23 13:22:09 +02:00
38d1e908d6
Fix visibility tags for cygwin build
2019-05-23 08:41:05 +02:00
b53e94b49a
Merge pull request #2252 from kaleb-himes/ZD5137
...
Arduino refactor, default to fastmath and setup user_settings for user
2019-05-22 19:17:26 -04:00
484f7a6c32
Merge pull request #2236 from tmael/sendAlertToTLSServer
...
send handshake failure alert to a server
2019-05-23 08:27:09 +10:00
d8a3768464
Update README.md
2019-05-22 10:43:54 -06:00
827fc67e52
Arduino refactor, default to fastmath and setup user_settings for user
2019-05-22 10:38:26 -06:00
ec4dad76e2
send protocol_version fatal alert message
2019-05-21 16:15:27 -07:00
295dd4ff21
send protocol_version fatal alert message
2019-05-21 16:08:25 -07:00
cb9e0a1973
SP - div word in C when __div64 or __div128 not available
...
Use WOLFSSL_SP_DIV_32 when using 32-bit C code.
Use WOLFSSL_SP_DIV_64 when using 64-bit C code.
2019-05-22 08:39:35 +10:00
c77b99a8a4
Merge pull request #2248 from kaleb-himes/ZD-5141
...
Fix for potential leak on err: Thanks to Chris H. for the report
2019-05-20 16:11:40 -06:00
04f24881cb
Fix for potential leak on err: Thanks to Chris H. for the report
2019-05-17 16:48:58 -06:00
be65e31cdc
Fixed possible buffer overflow in wc_DerToPemEx.
2019-05-17 19:23:55 +02:00
c85eae1322
Fixed resource leak in mp_gcd.
2019-05-17 18:38:19 +02:00
797dae9d74
Fixed use of uninitialized value in wc_ecc_sig_to_rs.
2019-05-17 18:04:39 +02:00
1ce8e227d2
Use TLS v1.3 PSK callback in extension allow for one call in client
...
New compile time option WOLFSSL_PSK_ONE_ID. Indicates one identity
available. No need for client to call callback when generating binder -
already cached.
2019-05-17 08:01:40 +10:00
245db5d5ce
Expand Sniffer Logging
...
1. Moved the CopySessionInfo function to a better location for the additions.
2. Added accessors for a callback and application context data.
3. Added a callback that is called from ProcessClientKeyExchange when everything is known about the start of the current session.
4. Added the private key size and the server name indication to the SSLInfo record.
2019-05-16 14:09:20 -07:00
1781a9fd76
Sniffer Logging
...
1. Capture the SNI in the SSLInfo.
2. Save the private key length and capture it in the SSLInfo.
2019-05-16 10:57:45 -07:00
27a9080ac3
Removed dead code from _DhSetKey.
2019-05-16 16:58:41 +02:00
cae4d400b9
Removed dead code from wolfSSL_d2i_X509_fp_ex.
2019-05-16 16:54:40 +02:00
6ab24a2ca3
Fixed unintentional integer overflow in SetValidity.
2019-05-16 16:45:10 +02:00
3b544b8584
Fixed use of uninitialized value in wc_BufferKeyEncrypt.
2019-05-16 16:41:31 +02:00
7a9d3db514
Fixed use of uninitialized value in wc_BufferKeyDecrypt.
2019-05-16 16:37:31 +02:00
6c713e4b88
Fixed use of uninitialized values in wc_DhGenerateParams.
2019-05-16 16:31:12 +02:00
fd50248139
Fix for static RSA cipher suite (AES128-GCM-SHA256) with PK callbacks and no private key set. ZD 5092
2019-05-15 19:35:30 -07:00
651087ab5a
Merge pull request #2241 from ejohnstown/sniffer
...
Sniffer Update
2019-05-15 18:52:44 -07:00
7a671eb70b
Merge pull request #2243 from JacobBarthelmeh/Windows
...
custom ECC curves on Windows
2019-05-15 18:51:01 -07:00
aca46f42fb
Merge pull request #2242 from ejohnstown/micrium
...
Micrium Updates
2019-05-15 15:43:37 -06:00
b2a5516c63
custom ECC curves on Windows
2019-05-15 11:31:26 -06:00
88bf5d9676
add sanity check on buffer index and regression tests
...
macro guards on use case and adjustment for memory size
gcc-8 warning fix
adjustement to default memory bucket sizes
2019-05-14 15:55:24 -06:00
3b0a7e679a
Add an option for __inline w.r.t. using a GHC compiler.
2019-05-14 13:44:33 -07:00
5b658ebff5
Renamed #sslpro as #error.
2019-05-14 13:44:33 -07:00
0cdaf43a14
Rename the macro "STATIC" as "WC_STATIC" to prevent collisions.
2019-05-14 13:44:33 -07:00
a8b469eb7f
Sniffer
...
1. Refactor `ProcessClientKeyExchange()` so it can be expanded to handle ECC keys for ECDH support.
2. Add support to the sniffer for ECDH based cipher suites.
2019-05-14 13:33:52 -07:00
10dde24363
Added support for SHOW_CERTS
with OPENSSL_EXTRA_X509_SMALL
for embedded debugging of certs. Minor build warning fixes with OPENSSL_EXTRA
and STM32_HASH
on IAR.
2019-05-14 09:24:59 -07:00
5aa5f350ba
add sanity check on length of PSK identity
2019-05-13 17:16:10 -06:00
9d4d877919
Sniffer
...
1. Added the null-cipher to the list of supported bulk ciphers.
2019-05-13 11:29:14 -07:00
f923409f1f
Merge pull request #2235 from kaleb-himes/ZD-5116
...
Check appropriate flag for private vs public - Thanks to: E.M.
2019-05-13 10:29:48 -07:00
dbeb5d702f
Merge pull request #2231 from JacobBarthelmeh/Fuzzer
...
sanity check on buffer size
2019-05-10 16:46:38 -07:00
27e243085d
Merge remote-tracking branch 'wolfSSL/master'
2019-05-10 13:04:18 +02:00
bf9f912b29
send handshake failure alert to a server
2019-05-09 17:01:36 -07:00
79bf578fd3
Check appropriate flag for private vs public - Thanks to: E.M.
2019-05-09 17:05:34 -06:00
e43e03c30a
Merge pull request #2226 from tmael/defectEVP
...
Verify input parameters of EVP_CipherFinal
2019-05-09 14:35:16 -06:00
1605ab86d2
Verify input arguments and handle incorrect length of a final block
2019-05-09 08:32:52 -07:00
34dc41fe75
Merge pull request #2229 from JacobBarthelmeh/Testing
...
free any existing ke before updating
2019-05-09 11:48:59 +10:00
4e2e207e67
Add ARM32 asm code for X25519 and Ed25519
...
Improvements to performance of ARM64 code for X25519 and Ed25519
2019-05-09 09:23:58 +10:00
9205ee70f4
add null check on pointer before passing to XFREE
2019-05-08 16:04:20 -06:00
94d9ce1dfa
sanity check on buffer size
2019-05-08 09:33:35 -06:00
ff5bf7aea1
Merge pull request #2230 from dgarske/bench_threads
...
Added benchmarking `-thread <num>` argument support
2019-05-07 11:21:29 -07:00
dcd6e02de9
Merge pull request #2228 from JacobBarthelmeh/Fuzzer
...
sanity check on buffer size before copy
2019-05-07 11:20:35 -07:00
a36296a959
Merge pull request #2227 from dgarske/eccsigsz
...
Fix issue with ECC signature size leaking memory with normal math
2019-05-07 11:17:12 -07:00
ade8f780a9
simplify to not expect null terminated strings
2019-05-07 11:11:41 -07:00
891a645eaa
Added benchmarking -thread <num>
argument support for asynchronous crypto to allow run-time selection of thread count. ZD 4903.
2019-05-07 07:07:56 -07:00
a130ce2eed
free any existing ke before updating
2019-05-06 15:51:42 -06:00
b1442633dd
sanity check on buffer size before copy
2019-05-06 15:36:58 -06:00
3c1569dff7
Fix for issue with new wc_ecc_get_curve_order_bit_count
function not free'ing memory when used with normal math. Started in https://github.com/wolfSSL/wolfssl/pull/2201
2019-05-06 11:41:50 -07:00
683646e452
Merge pull request #2208 from SparkiDev/curve25519_arm
...
Curve25519 ARM64 assembly
2019-05-03 11:14:35 -07:00
08531a0f31
Merge pull request #2225 from dgarske/unicode
...
Remove leading unicode UTF-8 BOM characters
2019-05-03 11:12:06 -07:00
3e7a6054a9
Use the macro instead of sizeof()
2019-05-02 14:13:48 -07:00
06eba2c1e2
Removed a redundant check
2019-05-02 13:58:55 -07:00
1a76f0cd26
Remove leading unicode UTF-8[a] BOM characters (EF BB BF). Searched through repo and atmel.c was only one.
2019-05-02 13:21:43 -07:00
78c6ad4d84
Merge pull request #2217 from tmael/maintenanceOcspResponse
...
Fix for an OCSP Response signed by issuer
2019-05-02 10:14:01 -07:00
0dd3305f06
Merge pull request #2221 from SparkiDev/rfc8032
...
Support Ed25519ctx and Ed25519ph sign/verify algorithms
2019-05-01 15:45:03 -07:00
5e343b8e7e
Merge pull request #2201 from dgarske/siglen
...
Improvements to the maximum ECC signature calculations
2019-05-01 15:42:12 -07:00
814c5776fd
Merge pull request #2051 from dgarske/build_fixups
...
Fixes for various build issues
2019-05-01 15:41:14 -07:00
b25177ca6c
Include new ARMv8 curve25519 C file in distribution
2019-05-01 13:23:06 +10:00
dc98832757
Add more tests for Ed25519ctx and Ed25519ph
2019-05-01 09:24:08 +10:00
dc313ccf6e
Merge pull request #2222 from dgarske/win_dir
...
Fix for read directory functions with Windows
2019-04-30 15:19:34 -07:00
e00ba1c66a
Merge pull request #2090 from vaintroub/fix_clang_cl
...
Disable MP_64BIT when compiling with clang-cl on Windows.
2019-04-30 13:36:39 -06:00
7cdda4d595
Merge pull request #2218 from abrahamsonn/iar
...
IAR-EWARM warning removal/formatting
2019-04-30 11:55:29 -07:00
86101468fc
Fixes for know wolfSSL build issues in the following cases:
...
* Fixes for building wolfSSL from GitHub sources download, where .git does exist. The autogen.sh still needs to "touch" files for the build to work.
* Fix for FIPS case where `wc_RsaSetRNG` is not available.
* Added new `./configure --enable-usersettings` option to not populate the Makefile with build options and instead define `WOLFSSL_USER_SETTINGS` and expect a user provided `user_settings.h` file.
* Fix for `HAVE___UINT128_T` to match config.h generated value to eliminate warning.
2019-04-30 11:45:48 -07:00
443fef6a6a
Further optimization of the ECC signature size calculation.
2019-04-30 08:50:19 -07:00
9d736898cc
Support Ed25519 sign/verify algorithms ctx and ph
2019-04-30 16:57:20 +10:00
8aacd7b802
Fix for read directory functions with Windows (wc_ReadDirFirst
and wc_ReadDirNext
). Fix to use bit-mask check instead of equality.
2019-04-29 20:47:52 -07:00
b68253c180
Merge branch 'iar' of https://github.com/abrahamsonn/wolfssl into iar
2019-04-26 15:41:27 -06:00
ef29aa94ea
Added build option checks to tls.c and tls13.c
...
Set tls.c and tls13.c to abort if the library is built with TLS 1.3 and not
HAVE_TLS_EXTENSIONS
2019-04-26 15:32:38 -06:00
ea797fd98e
Building with just bare TLS 1.3 settings
...
will produce the error that the wolfSSL struct doesn't have extensions.
2019-04-26 14:08:20 -06:00
bbb72946b7
initialized var.
2019-04-26 11:35:50 -06:00
1830a0a74c
Removed trailing whitespaces
2019-04-25 15:50:02 -06:00
45703a8d72
handle OCSP verified certificate which is already loaded as CA
2019-04-25 10:55:12 -07:00
fdabe614f8
Merge pull request #2215 from miyazakh/Renesas_IDE
...
Clean up user_settings for CS+
2019-04-24 15:55:01 -07:00
dfde631cb2
Free key at the end of the test
2019-04-24 11:49:53 -07:00
12a7c32530
Merge pull request #2170 from tmael/nRF52840CryptoCell
...
Initial CryptoCell-310 support on nRF52840
2019-04-24 11:09:46 -07:00
547c09e1d7
Merge pull request #2210 from JacobBarthelmeh/Compatibility-Layer-Part2
...
JSSE additions
2019-04-24 11:04:05 -07:00
a87552b37f
Merge pull request #2213 from JacobBarthelmeh/HardwareAcc
...
add macro guards
2019-04-24 10:59:02 -07:00
edef75c70f
Wrapped new unit test API with FIPS macros
2019-04-24 10:02:20 -07:00
6b51f2d5b2
Added unit test for wc_ecc_get_curve_id_from_dp_params
2019-04-23 16:45:52 -07:00
2a6ab9549b
add macro guards
2019-04-23 13:51:58 -06:00
3e24212780
add sanity check on buffer size when copying public key
2019-04-23 13:42:49 -06:00
5d2f34aa6d
Addressed review comments
2019-04-23 10:04:41 -07:00
34c1d5cba0
Cleanups and fixes for CryptoCell port:
...
* Protection for .c includes.
* Improved make pub memory issue reporting.
* README.md updates.
* Cleanup of user_settings.h.
2019-04-23 10:04:41 -07:00
6c65550eab
Added CryptoCell-310 support
...
- SHA-256
- AES CBC
- CryptoCell 310 RNG
- RSA sign/verify and RSA key gen
- RSA encrypt/decrypt, decrypt inline
- ECC sign/verify/shared secret
- ECC key import/export and key gen pairs
- Hardware RNG and RTC of nRF52840 for benchmark timing source
- readme doc
2019-04-23 10:04:41 -07:00
90ce5c04dc
Clean up user_settings for CS+
2019-04-23 13:44:05 +09:00
f8c9285b92
Added a WOLFSSL_CIPHER_LIST_MAX_SIZE macro
2019-04-22 16:30:38 -07:00
393ca1b30c
Increased test suite ciphers buffer size (ticket #5000 ))
...
Enhancement to support ECC domain param HEX string or unsigned bin comparison (ticket #5035 )
2019-04-22 10:30:05 -07:00
de299848c1
initialize pubkey size to 0
2019-04-22 10:01:17 -06:00
82796d4b4c
remove pubKeyX509 from WOLFSSL_X509 structure
2019-04-19 15:15:02 -06:00
29101a29c9
free key in test case, initialize variables fix, macro guard on iana use
2019-04-19 09:47:15 -06:00
ec2849b885
macro guard on EncodePolicyOID use
2019-04-18 14:56:24 -06:00
efc96e40d1
add test cases
2019-04-18 10:41:51 -06:00
378f5c0d4b
Merge pull request #2204 from dgarske/server_fixups
...
Improvements to TLS write handling in error cases
2019-04-18 09:21:27 -07:00
b291b51988
adjust get pubkey from X509
2019-04-18 09:31:01 -06:00
e1537b2a56
add case CRL_DIST_OID and fix key usage check
2019-04-18 09:31:01 -06:00
e4555b5bf5
add wolfTLSv1_3_method()
2019-04-18 09:31:01 -06:00
abced6c365
place tls 1.3 suites at beginning of list and alter parse on set cipher list
2019-04-18 09:31:01 -06:00
b787465b42
adjust TLS 1.3 capable check
2019-04-18 09:31:01 -06:00
083183e3b1
add get cipher iana list and parse iana list
2019-04-18 09:31:01 -06:00
db1fabbdd4
add WOLFSSL set IO callbacks
2019-04-18 09:31:01 -06:00
6976219b05
add x509 TBS getter function
2019-04-18 09:31:01 -06:00
7da46501cc
add certgen and certext to jni, add get timeout function
2019-04-18 09:31:01 -06:00
788443d3cf
set initial buffer size
2019-04-18 09:31:01 -06:00
494e469dd2
implement wolfSSL_OBJ_txt2nid for OIDs
2019-04-18 09:31:01 -06:00
72f3329faa
add wolfSSL_X509_verify function
2019-04-18 09:31:01 -06:00
bf3d876e6a
getter function for X509 public key
2019-04-18 09:31:01 -06:00
0d3541594f
Curve25519 ARM64 assembly
...
Also in a C file but use the assembly code file if possible.
2019-04-18 14:41:57 +10:00
2cf264a9d5
Merge pull request #2207 from ejohnstown/evp-init-fix
...
EVP Init Fix
2019-04-17 17:16:42 -07:00
3f8e0a67e6
Merge pull request #2206 from miyazakh/Renesas_IDE_CSPlus
...
Updated Renesas example projects as the latest version of sw use
2019-04-17 17:15:31 -07:00
3bf01072d8
EVP Init Fix
...
When calling wolfSSL_EVP_DigestInit() with an unsupported string, the
macType should be set to NONE, rather than ignored. In a particular
build combination, functions using that EVP could false the type because
of memory garbage. Just set it in the else case.
2019-04-17 14:04:00 -07:00
1ab5a022c6
updated as the latest version of sw use
2019-04-17 16:30:11 +09:00
5bfc49f63f
Changed ECC_MAX_PAD_SZ
to be overridable macro for rare case where user might require additional padding.
2019-04-15 14:56:04 -07:00
4ee4cb2068
Improved readability for ECC signature max size calculations.
2019-04-15 11:08:08 -07:00
013e4429da
Merge pull request #2202 from SparkiDev/curve25519_asm_file
...
Curve25519 converted from inline assembly to asm only
2019-04-12 16:31:08 -07:00
3c63f70cde
Merge pull request #2203 from dgarske/atmel_typo
...
Fix for typo in atmel PK callbacks
2019-04-12 15:00:49 -07:00
bd618970c1
Fixed API unit test for wc_ecc_sig_size
to allow smaller result.
2019-04-12 12:36:20 -07:00
68390b1ba3
Improvement to wolfSSL_write to not allow for VERIFY_MAC_ERROR
or DECRYPT_ERROR
errors. This resolves possible end user application implentation issue where a wolfSSL_read failure isn't handled and a wolfSSL_write is done anyways.
2019-04-12 11:29:28 -07:00
364bf50a94
Fixed example server to not try and write on failure.
2019-04-11 11:30:41 -07:00
02500365bf
Revert additional atmel.h changes for opaque types in PR #2199 .
2019-04-11 06:15:39 -07:00
1d023b344d
Fix for typo in atmel PK callbacks from PR #2199 .
2019-04-11 06:02:37 -07:00
e5bf2ed1d1
Curve25519 converted from inline assembly to asm only
...
Fixed large values (top bit set) in tables to be negative as the type is
signed.
Put C++ protection around function prototypes in fe_operations.h.
2019-04-11 16:17:48 +10:00
ae9ef3998c
Enable the TFM speedups when used with --enable-ecccustcurves=all
and fastmath and x86.
2019-04-10 21:06:17 -07:00
1fffe4a463
Improvements to the maximum ECC signature claculations. The wc_ecc_sig_size
function provides actual max based on curve order. The wc_ecc_sig_size_calc
has also been adjusted to provide a more accurate maximum size.
2019-04-10 21:05:46 -07:00
b6fcbe8436
Merge pull request #2199 from dgarske/contiki_16bit
...
Fixes for PK callbacks on 16-bit and ATECC
2019-04-09 14:56:26 -07:00
35654530ba
Merge pull request #2198 from SparkiDev/sp_cortex4_iar
...
Cortex-M code changed to support IAR compiler
2019-04-09 14:41:00 -07:00
173016ef47
Merge pull request #2196 from dgarske/stm32_aes_gcm
...
Improvement for STM32 GCM performance
2019-04-09 14:31:27 -07:00
13909fc407
Merge pull request #2190 from dgarske/telit
...
Port for Telit IoT AppZone SDK
2019-04-09 14:26:59 -07:00
a90001581e
Fixes for PK callbacks and ATECC. Fixes for PK callbacks on 16-bit system where unsigned int*
is used. Fix for ATECC PK callback functions. Fix for atmel_ecc_create_pms
to free the used slot.
2019-04-09 08:15:01 -07:00
333b666f6b
Fixups updated and IAR defines
2019-04-09 10:59:24 +10:00
9b62141580
Merge pull request #2197 from abrahamsonn/doxygen-update
...
Updated doxygen script
2019-04-08 15:24:02 -07:00
2c5f268f16
Port for Telit IoT AppZone SDK
...
* Added new `WOLFSSL_TELIT_M2MB` build option to enable support for RNG, Time, Mutex, FileSystem and Directory.
* Added `XTIME_MS` macro to simplify the tls13.c layer time requirement.
* Cleanup of the wolfCrypt benchmark and test printf remapping.
* Added wolfCrypt optional memory test enabled with `COMPLEX_MEM_TEST`.
* Added wolfCrypt test / benchmark feature for allowing "sleep" between long operations using `TEST_SLEEP()`.
* Fix for extern with `sp_ModExp_2048` when building with `--cpp` option.
2019-04-08 06:43:25 -07:00
4f75d4eea2
Cortex-M code changed to support IAR compiler
2019-04-08 09:03:50 +10:00
c78b0c3a40
Merge pull request #2194 from dgarske/testcerts
...
Fix for test certs script
2019-04-05 15:13:39 -07:00
bbf8ed408d
Fix for LowResTimer
function ptoto not matching for 16-bit system.
2019-04-05 14:56:02 -07:00
ce43044426
Improvement for STM32 GCM performance. ZD 4712.
2019-04-05 14:06:23 -07:00
5c8cf9ecd2
Merge pull request #2195 from ejohnstown/vswarn
...
Fix VS Warning
2019-04-05 13:40:24 -07:00
460556ff45
Updated doxygen script
...
Changed check_api.sh grep call to be more friendly across machines, prior call
wasn't properly reporting API mismatch on some machines
2019-04-05 13:46:35 -06:00
6a964123a1
Add a pragma to ignore a particular warning when compiling the fast math file for Windows.
2019-04-05 10:08:41 -07:00
f5f1fec840
Merge pull request #2193 from SparkiDev/hash_sha3
...
SHA-3 support in Hash
2019-04-05 09:04:33 -07:00
2ad80df1c7
Fix for ./certs/gen-testcerts.sh
sometimes reporting: "start date is invalid, it should be YYMMDDHHMMSSZ or YYYYMMDDHHMMSSZ".
2019-04-05 09:01:44 -07:00
56d7766ba3
Merge pull request #2192 from SparkiDev/small_server
...
Fixes for small server build without client code
2019-04-05 06:18:57 -07:00
cc5ba81245
SHA-3 support in Hash
2019-04-05 14:52:23 +10:00
ad857c40d1
Fixes for small server build without client code
2019-04-05 09:38:14 +10:00
9c3cb2fbba
Merge pull request #2176 from miyazakh/no_signature_algo
...
Add macro definition to disable signature algorithms extension
2019-04-04 15:35:00 -07:00
db83e6dd31
Merge pull request #2191 from ejohnstown/aesctr-sameio
...
AES-CTR In Place
2019-04-04 11:14:06 -07:00
f81446bf69
Fixed compiling error while enabling opensslextra
2019-04-04 10:04:09 +09:00
a59488b299
AES-CTR In Place
...
Added a temp AES block in case in and out are the same pointer.
2019-04-03 15:02:00 -07:00
b224f6fac9
Merge pull request #2181 from JacobBarthelmeh/Compatibility-Layer
...
update wolfSSL_i2d_RSAPrivateKey function
2019-04-03 09:16:10 -07:00
e13c903ad2
Merge pull request #2189 from dgarske/various_fixes
...
Various minor fixes
2019-04-02 09:21:31 -07:00
51251bc421
Fix for ssl23.h include for openssl compat with cyassl.
2019-04-01 11:10:29 -07:00
e4059a65b9
Merge pull request #2177 from dgarske/async_rel_v4
...
wolfSSL Asynchronous release v4 fixes
2019-04-01 11:07:12 -07:00
c7b5f772aa
Add missing cert to include.am for make dist, which is required for ./gencertbuf.pl
.
2019-04-01 10:09:34 -07:00
e8afb6ea51
Merge pull request #2174 from embhorn/zd4879
...
Fixes for static analysis issues
2019-04-01 08:48:40 -07:00
26cbfcdee0
Fix for AES GCM decrypt test with Async.
2019-04-01 05:58:44 -07:00
9ce32e3808
Merge pull request #2184 from ejohnstown/ecc-fix
...
Fix Clang Static-Analysis Finding
2019-04-01 05:46:22 -07:00
9ad48067f6
Merge pull request #2183 from miyazakh/sess_reuse_unitest
...
Add unit test for session resumption re-using WOLFSSL obj
2019-04-01 05:45:08 -07:00
817eaa6da4
protect compiling while enabling both WOLFSSL_TLS13 and WOLFSSL_NO_SIGALG
2019-03-30 10:41:57 +09:00
6c0989ba4d
no_signature_algo
2019-03-30 10:41:40 +09:00
6d1a11eefb
Clang static analysis found a potential issue when checking an ECC key
...
when the curve cache is enabled. There was a chance it could dereference
NULL. Added some error checks to fix it.
2019-03-29 13:35:27 -07:00
6968797848
fixed jenkins test failure
2019-03-30 01:35:35 +09:00
1c22f14d1c
added unit test for session resumption re-using WOLFSSL obj
2019-03-29 20:13:41 +09:00
1906179a1b
Fix for HAVE_ECC_CDH
wolfCrypt test with async using the wrong size for x and y. With async the sizeof(sharedA) == 8
and it should be ECC_SHARED_SIZE
.
2019-03-28 18:48:32 -07:00
b0d65d2a3e
Remove remnant debug -Map
from --with-intelqa
build option.
2019-03-28 17:52:08 -07:00
7e9e50c03b
Fix for Async TLS v1.3 wolfSSL_write with AES GCM offload. The args->idx
was being incremented on the repeated call with BUILD_MSG_HASH
state.
2019-03-28 17:52:08 -07:00
5b21da4dc5
Fix for SHA-3 runtime detection for not supported in hardware using NOT_COMPILED_IN.
2019-03-28 17:52:08 -07:00
d7c6683d9b
Fix for latest QAT v1.7 detection. The qat library requires usdm_drv.
2019-03-28 17:52:08 -07:00
b599dc2b9d
update wolfSSL_i2d_RSAPrivateKey function
2019-03-28 14:15:57 -06:00
9ea2dbea95
Merge pull request #2172 from dgarske/atecc
...
Fixes for ATECC support
2019-03-28 10:36:54 -07:00
cffe7eccde
Fixes for high impact issues
2019-03-28 12:08:19 -05:00
b1c791dbd9
Merge pull request #2180 from miyazakh/wolfsslclean_fix
...
Initialized sendVerify when calling wolfSSL_clear
2019-03-27 23:32:41 -07:00
8c6316eb9c
Merge pull request #2179 from kojo1/X509_STORE_CTX
...
X509_STORE_CTX_free compatibility
2019-03-27 17:17:26 -06:00
15c7463150
Merge pull request #2166 from SparkiDev/rsa_vfy_only
...
Fixes for RSA verify only builds
2019-03-27 12:01:14 -07:00
ed5feaf7ae
Merge pull request #2173 from dgarske/custcurves
...
Added `--enable-ecccustcurves=all` option.
2019-03-27 10:19:08 -07:00
05987ec717
Initialized sendVerify when reseting WOLFSSL object
2019-03-27 10:18:43 +09:00
b40e0888ad
Fixes for different build configurations
2019-03-26 08:06:19 +10:00
b24e122a0d
Fixes for RSA verify only builds
2019-03-26 08:06:19 +10:00
7aa159ca6d
Merge pull request #2157 from kojo1/ocsp_staple
...
Expose CheckResponse as wolfSSL_CertManagerCheckOCSP_Staple
2019-03-25 13:48:29 -07:00
f493ff859c
Merge pull request #2178 from JacobBarthelmeh/Testing
...
add guard on test case for pkcs7 with no aes
2019-03-25 09:42:54 -07:00
6b325929e5
Merge pull request #2175 from kojo1/BN_init
...
add BN_init
2019-03-25 09:04:36 -06:00
3e42c6edcd
remove sk_X509_free for compatibility
2019-03-24 16:57:08 +09:00
6c9e64129d
move #include "ocsp.h" after #define WOLF_STACK_OF(x)
2019-03-23 08:03:45 +09:00
d9e6b8a62d
Merge pull request #2168 from aaronjense/master
...
Remove NULL check before pub and priv have a chance to be set
2019-03-22 16:34:34 -06:00
3d747f7c87
add guard on test case for pkcs7 with no aes
2019-03-22 15:56:05 -06:00
744c247e92
change CheckOCSP_staple to OCSPResponse, move to ssl.h
2019-03-22 13:56:32 +09:00
441fb60679
fix cr
2019-03-22 09:40:55 +09:00
50a854c4cf
Added --enable-ecccustcurves=all
option.
2019-03-21 13:01:04 -07:00
f7a7a97f8c
Fix to include the atmel.h with make install when using --with-cryptoauthlib
.
2019-03-21 09:13:39 -07:00
f66aa60385
Fix for build warning with x/y always true when not building with ALT_ECC_SIZE. Fix for build error with undefined wc_ecc_sign_hash_ex
when building ATECC and WOLFSSL_PUBLIC_MP
.
2019-03-21 09:13:39 -07:00
e07e41d0aa
Fix for building ATECC without ATCAPRINTF
defined.
2019-03-21 09:13:39 -07:00
21f2beca9f
Merge pull request #2165 from ejohnstown/version-update
...
Version Update v4.0.0
2019-03-21 09:20:36 -06:00
5ab6d58504
Release Fixes
...
1. Pick up a few new files into the distrubution that were missed.
2019-03-20 15:01:54 -07:00
1c237af5b3
Release Fixes
...
1. Update the date in README and ChangeLog to today.
2019-03-20 11:08:10 -07:00
fbfd7a4dea
Release Fixes
...
1. Rearrange the deprecation cryptodev option so it doesn't overwrite the cryptocb option, and so it doesn't break its case in the build-test.
2. Fix the content length in the sample HTTP used by the example server.
3. Disable OCSP stapling in the example server if RSA is disabled.
4. Fix a variable in asn.c that was declared in the middle of its scope.
5. Retag the xmalloc, xrealloc, xfree functions used in the memory test as WOLFSSL_API like all the other allocators, instead of extern.
2019-03-20 11:01:24 -07:00
22b2ae7358
Release Fixes
...
1. Fix for the enable-afalg option from Jacob Barthelmeh.
2. Client fix for enable-sp+enable-sp-math option from David Garske.
3. Added a couple of typecasts to some mallocs.
4. Modified the option guard for the mask member of Options for the webserver build.
5. Added some more padding to the opaque structures used for SHA_CTX and AES_KEY.
6. Added WOLFSSL_API to the stack logging functions.
2019-03-19 13:55:17 -07:00
fb3ca1b53e
Release Fixes
...
1. The RNG internal state could be a memory leak if the seed generate
test fails. If the seed test fails, you have bigger problems.
2019-03-18 14:30:51 -07:00
fed2bc5f72
Remove NULL check before pub and priv have a chance to be set
2019-03-18 13:18:04 -06:00
eebf07b67c
Release Fixes
...
1. Fix two potentially unitialized variables, discovered on a VS build.
2019-03-18 10:14:16 -07:00
384b240ea2
minor fix in test_wolfSSL_BN(), api.c
2019-03-17 13:37:17 +09:00
6a3eccd344
add BN_init, working with tfm, only.
2019-03-17 13:28:04 +09:00
1ac74b0061
Release Fixes
...
1. Added some typecasting for g++ v8 permissive pointer use errors with void*.
2019-03-15 16:26:11 -07:00
ba8b104d7b
Updates for v4.0.0
...
Update the RPM spec.in file.
2019-03-15 14:03:45 -07:00
246c444b93
Updates for v4.0.0
...
Update the copyright dates on all the source files to the current year.
2019-03-15 10:37:36 -07:00
60d3dec246
Updates for v4.0.0
...
Add links to the doc README for the wolfSSL and wolfCrypt API references.
2019-03-15 09:43:29 -07:00
d42f3bbdb6
Updates for v4.0.0
...
Update the DLL version resource.
2019-03-15 09:42:45 -07:00
ce4b54944b
Updates for v4.0.0
...
Updated the README files and ChangeLog.
2019-03-15 09:42:45 -07:00
2817f6ed1a
Updates for v4.0.0
...
Bump the version number in configure.ac and updated the version.h. The
library version wasn't updated between v3.15.7-stable and the snapshot
v3.15.8, so I bumped it for this release.
2019-03-15 09:42:45 -07:00
0ef4b7e933
Merge pull request #2164 from JacobBarthelmeh/PKCS7
...
adjust location of where PKCS7 content is saved
2019-03-15 09:40:17 -07:00
45b6a3b67d
adjust location of where PKCS7 content is saved
2019-03-14 16:48:08 -06:00
6ff2039b1f
Merge pull request #2163 from ejohnstown/config-fixes
...
Configuration Fixes
2019-03-14 15:21:41 -07:00
b1ea7c035f
Merge pull request #2118 from kojo1/ocsp_proxy
...
OCSP, CRL request with "Cache-Control: no-cache" for proxy
2019-03-14 13:26:03 -07:00
172fd6d233
Merge pull request #2148 from cconlon/pkcs7nullparam
...
add NULL param in CMS KARI OriginatorPublicKey parameters
2019-03-14 13:17:34 -07:00
8a1ad3fcff
Merge pull request #2160 from dgarske/fix_async
...
Fixes for asynchronous crypto and TLS
2019-03-14 11:56:46 -07:00
4b56af67a2
Merge pull request #2144 from embhorn/zd4871
...
Use snprintf with Win build
2019-03-14 11:42:09 -07:00
ac47e889f7
Merge pull request #2162 from JacobBarthelmeh/PKCS7
...
handle pkcs7 bundle with signed envelope and no certs list
2019-03-14 10:51:46 -07:00
3e3f746f3b
Configure Fixes
...
When enable-all and disable-rsa is configured, some of the tests needed
for all don't work because they only use RSA keys or certificates.
Disabled those test cases in that build combination.
2019-03-14 10:37:40 -07:00
e08b36ea9c
handle pkcs7 bundle with signed envelope and no certs list
2019-03-14 09:51:58 -06:00
6361ec2f10
Fix for AES GCM and CCM ex to NOT increment counter or update IV if failure or async response code. Resolves TLS v1.3 with async simulator.
2019-03-13 23:32:53 -07:00
397c2a4f8a
Fix for SetNameFromCert
not used when building with --disable-filesystem
.
2019-03-13 23:03:00 -07:00
d19c37de2e
Fix for example client arg -4
not working.
2019-03-13 22:59:50 -07:00
5a2cd5fc90
Fixes to resolve async crash (using stack pointer after return) due to 16-bit fixes in PR #2133 (commit 700eca4566
). Revert to using the "unsigned int" length directly for word32 but cast it.
2019-03-13 22:59:00 -07:00
3feef07c93
Merge pull request #2156 from kaleb-himes/ZD4888-XCODE-UPDATE
...
Add rules to copy wolfio.h, wolfmath.h and mem_track.h as well as fix…
2019-03-13 18:05:04 -07:00
6b89b1f97a
Configure Fixes
...
One of the external sites contacted for the OCSP stapling test
increased the size of one of their intermediate certificates. The test
failed silently as the certificate was ignored. Increased the
FP_MAX_BITS so that the test can pass with the enable-all option. That
option was setting the FP_MAX_BITS for 3072-bit certificates, and the
site in question is using a 4096-bit certificate.
2019-03-13 17:56:45 -07:00
27ea9d9bce
Configure Fixes
...
1. The combination enable-all and disable-rsa breaks some of the
testing. Added the NO_RSA guards as appropriate.
2. Disabled the OCSP stapling and CRL tests when RSA is disabled as they
use test certificates with RSA keys.
2019-03-13 17:54:33 -07:00
bca69488b2
Xcode Project Update
...
1. Disable the tls_bench() test in the Xcode iOS benchmark project. It isn't complete.
2019-03-13 15:11:51 -07:00
a42290dd57
Xcode Project Update
...
1. Removed redundant includes of files.
2. Moved all the files in the viewer into the appropriate directories.
3. Updated the copy rules so the missing include files are copied to the destination for all the three possible targets.
2019-03-13 15:11:38 -07:00
2f4507e4f1
Merge pull request #2159 from JacobBarthelmeh/Testing
...
sanity check on padlen with pkcs7 decode
2019-03-13 12:58:49 -07:00
508cda43a2
Fix for asynchronous build memory macros, which broke due to PR #2026 .
2019-03-13 12:14:43 -07:00
f54a7e50ce
Merge pull request #2153 from ejohnstown/no-fips
...
No-FIPS/FIPS Build
2019-03-13 11:37:07 -07:00
4c42630f2b
Merge pull request #2158 from JacobBarthelmeh/PKCS7
...
PKCS7 BER decode enveloped content
2019-03-13 11:33:52 -07:00
41bc83c5ce
Merge pull request #2074 from kaleb-himes/HARMONYv3-ZD4785
...
Update support for entropy source with HARMONYv3
2019-03-13 09:36:01 -07:00
68c576e0d9
add macro guard around test case
2019-03-13 10:31:32 -06:00
06e5f8c39b
sanity check on padlen with pkcs7 decode
2019-03-13 10:00:43 -06:00
effca6c081
add test case for BER encoded PKCS7 content decoding
2019-03-13 08:53:15 -06:00
e810551aab
Fix to handle BER with PKCS7 enveloped decode
2019-03-13 08:46:15 -06:00
0d48a4a1a7
Merge pull request #2133 from dgarske/fixes_16bit
...
Fixes for data types, cast warnings and shift operations when using 16-bit platform
2019-03-12 16:53:27 -07:00
b4ba3d7ca6
Merge pull request #2136 from dgarske/asncapathlen
...
Fixes issue with CA path length for self signed root CA's
2019-03-12 14:11:15 -07:00
28a1ff5d59
Merge pull request #2146 from dgarske/sigalgo_ecdh
...
ECDSA option to limit sig/algos to key size with `USE_ECDSA_KEYSZ_HASH_ALGO`
2019-03-12 14:08:10 -07:00
696fe47de2
Merge pull request #2125 from embhorn/zd4297
...
Decoded cert cache feature
2019-03-12 14:02:47 -07:00
70490a4db6
Merge pull request #1855 from ejohnstown/trust-ca
...
Trusted CA Key Indication Extension
2019-03-12 13:52:27 -07:00
7ac5f8fde1
Merge pull request #2147 from kaleb-himes/ZD4615-extAuthKeyIdNotSetInCAFix
...
Edge case fix for AKID not set in CA and two CAs with same issuer line
2019-03-12 11:59:10 -07:00
03e0dd6ca3
Add back this path length check for self-signed CA as special case for the supplicant only.
2019-03-12 11:05:07 -07:00
764b783317
Add rules to copy wolfio.h, wolfmath.h and mem_track.h as well as fix up settings for clang and iPhone XR
2019-03-12 10:36:12 -06:00
666e47faaa
Merge pull request #2152 from ejohnstown/readme-fix
...
Fix Readme
2019-03-12 09:18:39 -07:00
4ea1a7e651
Merge pull request #2154 from miyazakh/fix_DhkeySz
...
Fixed compile error under ESP-IDF framework
2019-03-12 09:54:10 -06:00
ad32ace0a1
Fixed build-error due to FFDHE_2048 definition
2019-03-12 18:32:13 +09:00
7d1bb05c0c
Fix return code for GetMacDigestSize
.
2019-03-11 19:37:04 -07:00
700eca4566
Fixes from peer review. Improved compatibility of API's. Clarification on integer.h mp_digit sizes.
2019-03-11 19:34:07 -07:00
f1af32b783
No-FIPS/FIPS Build
...
Update the fips-check script to create an archive with the current revision of the parts.
2019-03-11 17:13:02 -07:00
57cdbffc2c
Merge pull request #2149 from dgarske/cryptocb_ret
...
Refactor of the crypto callback return code and new API version marker
2019-03-11 16:54:53 -07:00
554af3dcfa
Merge pull request #2151 from JacobBarthelmeh/Testing
...
path include adjustment, rename internal OBJ function, and client pri…
2019-03-11 16:48:19 -07:00
3710a0a6c8
Merge pull request #2135 from SparkiDev/ed25519_check_key
...
Implement check for Ed25519 private matching public
2019-03-11 16:18:43 -07:00
2b59aefe80
Update from review
2019-03-11 18:14:37 -05:00
8b6bd306f3
Update from review
2019-03-11 18:03:29 -05:00
436a46a9f4
Merge pull request #2131 from dgarske/qat_v3.15.8
...
Fix for async wolfCrypt test with AES GCM.
2019-03-11 15:50:57 -07:00
ab0beb354b
Merge pull request #2129 from SparkiDev/sp_prime
...
Improve SP code and support prime check using SP in tfm.c
2019-03-11 13:53:57 -07:00
b8035371f4
Merge pull request #2124 from mstaz/ocsp_date_nonce_check_fix
...
Ocsp date and nonce check fix
2019-03-11 13:29:08 -07:00
c0ee01bbf6
Merge pull request #2123 from dgarske/stm32_gcm
...
Fixes for STM32 AES GCM
2019-03-11 12:53:27 -07:00
1eb46c697f
1. In the loop in TCA parse, when checking the list of IDs that the
...
server has keys for, change the polarity of the comparison. If the
current ID is in the list, set the response flag and break out of
the loop.
2019-03-11 12:42:13 -07:00
9bd40353c2
1. Rename the parameters cert and certSz on the function
...
wolfSSL_UseTrustedCA() to certId and certIdSz.
2. Add better parameter checking to wolfSSL_UseTrustedCA() based on the
ID type.
2019-03-11 12:42:13 -07:00
8a4e8067f6
1. In the trusted CA extension code, add guards for NO_SHA around the cases that use SHA-1.
...
2. Check the trusted CA id pointer for NULL before copying.
3. Updated the api test for the NO_SHA change.
4. Remove the TCA options member as redundant.
2019-03-11 12:42:13 -07:00
201c85478e
Move the -5 option text into the localization array and add a Japanese translation.
2019-03-11 12:42:13 -07:00
a1ed8e7a67
Fix a fall-through bug in the server options parsing around a new
...
option.
2019-03-11 12:36:58 -07:00
2342ea15eb
Remove the CTX versions of the UseTrustedCA functions. A session needs
...
to be able to set a flag in the extension and that isn't allowed in the
CTX extensions.
2019-03-11 12:36:58 -07:00
cb57a5f3ed
Added a test case for TrustedCA to the unit test.conf file.
2019-03-11 12:36:58 -07:00
b7663a940e
Trusted CA Key Indication Extension
...
Added an API for enabling the Trusted CA Key Indication extension from
RFC6066 section 6. If the server doesn't have a match for the client,
the client will abandon the session.
2019-03-11 12:35:12 -07:00
6e1b05316d
Merge pull request #2104 from ejohnstown/renegotiation-testing
...
Secure Renegotiation
2019-03-11 12:10:48 -07:00
b3a1d6bff1
Merge pull request #2099 from miyazakh/Espressif_port_Phase2C
...
RSA primitive hw acceleration support on esp32
2019-03-11 12:04:26 -07:00
de21642db1
Update sanity check for set
2019-03-11 11:19:51 -06:00
616b75bfba
Fix Readme
...
Fix typo where DTLS was labeled v1.3, not v1.2.
2019-03-11 09:41:37 -07:00
9c9279817b
path include adjustment, rename internal OBJ function, and client print outs added
2019-03-11 09:57:04 -06:00
3d9c660688
Refactor of the ECC crypto callback return code handling.
2019-03-11 08:28:45 -07:00
68c04a95e0
Refactor of the crypto callback return code for cases when unavailable to use new error code CRYPTOCB_UNAVAILABLE
. Retains support for original NOT_COMPILED_IN
error code. Added new CRYPTO_CB_VER
define for helping applications handle/detect changes to crypto callback interface (currently no way to determine changes at build-time between release cycles).
2019-03-08 16:50:45 -08:00
1dcd6b92a0
Fix leak in wolfcrypt test app detected w/ WC_RSA_NO_PADDING set ( #2145 )
...
Fix leak in wolfCrypt test with `WC_RSA_NO_PADDING`
2019-03-08 14:13:38 -08:00
ea13e0482a
wolfIO_HttpBuildRequest_ex
2019-03-09 06:31:52 +09:00
3be4682cda
Merge pull request #2134 from dgarske/fixes_nightly
...
Fixes for minor nightly build errors
2019-03-08 10:15:46 -08:00
d8bec5e034
add NULL param in CMS KARI OriginatorPublicKey parameters
2019-03-08 09:13:22 -08:00
d26a6b59a3
Wrapper for MSC < VS2015
2019-03-08 10:55:34 -06:00
413e3b36cb
Edge case fix for AKID not set in CA and two CAs with same issuer line
2019-03-07 11:30:13 -07:00
be83a54f22
Handle older MSC versions
2019-03-07 12:07:00 -06:00
619cf89106
Enhancement for ECDSA with USE_ECDSA_KEYSZ_HASH_ALGO
to not send sig/algo hash sizes larger than the ECC key size.
2019-03-07 08:56:35 -08:00
0e962aa6e5
Merge pull request #2130 from jrblixt/feature-WICED6_1-serverChange
...
examples server HTTP update needed for WICED HTTP parser.
2019-03-06 16:46:36 -08:00
934c1b7952
Use snprintf with Win build
2019-03-06 14:55:51 -06:00
d699b65a25
Merge pull request #2026 from kojo1/mdk-CMSISv2
...
MDK CMSIS RTOSv2
2019-03-06 09:36:49 -07:00
d61684f210
Merge pull request #2142 from ejohnstown/typecast-add
...
Add Typecasts
2019-03-06 16:21:20 +10:00
f64c165a8b
Merge pull request #2141 from ejohnstown/win-build
...
windows build update for warnings
2019-03-06 16:15:21 +10:00
b7deab9787
Merge pull request #2140 from JacobBarthelmeh/Testing
...
adjust comments on key type for function
2019-03-06 08:03:34 +10:00
e897661402
Merge pull request #2139 from ejohnstown/ar-flags
...
AR flags configure update
2019-03-05 15:49:16 -06:00
e3ddfc42af
Add Typecasts
...
Add some typecasts to the RSA constant time data copy so it doesn't
misbehave with some embedded compilers that do the integer promotion in
a different order than expected.
2019-03-05 13:36:23 -08:00
5e573b518a
Fix a couple warnings from a windows build regarding uninitialized variables.
2019-03-05 09:55:18 -08:00
dc3b81f633
adjust comments on key type for function
2019-03-05 10:53:10 -07:00
42eacece82
AR flags configure update
...
In at least one environment the check for particular AR options was
failing due to a bash script bug. Deleted an extra pair of parenthesis
triggering an arithmetic statement when redundant grouping was desired.
2019-03-05 09:26:30 -08:00
a364874b48
Implement check for Ed25519 private matching public
...
Add test SSL test that uses the Ed25519 private key only
2019-03-05 08:19:33 +10:00
980970da86
Fixes issue with CA path length basic constraint checking for self signed root CA's. ZD 4863
2019-03-04 11:27:51 -08:00
99b5188ee9
Fix for missing curve specs when using ATECC due to PR ( https://github.com/wolfSSL/wolfssl/pull/2115 ).
2019-03-04 09:48:33 -08:00
da27a4da10
Merge pull request #2119 from jrblixt/feature-WICED-Studio-v6_1-PR02262019
...
Feature wiced studio v6 1 pr02262019
2019-03-04 17:45:42 +01:00
222f9f4f47
Adjust count.
2019-03-01 20:04:20 -07:00
8569d14cb3
Fixes for minor nightly build errors. Missing wc_ecc_fp_free
declaration and "Value stored to 'useSupCurve' is never read".
2019-03-01 16:12:08 -08:00
621e1656b4
Fixes for data types, cast warnings and shift operations when using 16-bit platform. Added new --enable-16bit
build option, which defines WC_16BIT_CPU
. Fix build error when using WOLFSSL_LEANPSK
and NO_WOLFSSL_MEMORY
.
...
Tested using `avr-gcc` version 8.3.0 with: `./configure --host=avr --enable-16bit --disable-filesystem --enable-singlethreaded CFLAGS="-DWOLFSSL_GENSEED_FORTEST -DWOLFSSL_USER_CURRTIME -DWOLFSSL_USER_IO -DWOLFSSL_NO_SOCK -DNO_WRITEV -DUSER_TICKS" --enable-tls13 --enable-compkey --enable-certgen --enable-certext --enable-keygen --enable-session-ticket --enable-maxfragment`. Also with `--enable-fastmath`.
2019-03-01 15:54:08 -08:00
5f332fa29e
review changes.
2019-03-01 14:06:27 -07:00
020b27bab2
wolfSSL_SecureResume() should be client only. Return an error if called
...
form the server.
2019-03-01 11:00:26 -08:00
4f2d4420df
Cleanups for hard coded 12 and 16 in AES GCM code. Allow STM32 GCM IV 12 thru 16.
2019-03-01 10:50:08 -08:00
e87433e2b6
Fix for async wolfCrypt test with AES GCM.
2019-03-01 09:56:38 -08:00
5083330b86
Improve SP code and support prime check using SP in tfm.c
2019-03-01 20:24:08 +10:00
de869080be
Added description for added ASN options.
2019-03-01 09:49:49 +01:00
809c30a5b9
Merge pull request #2128 from SparkiDev/pkcs11_ecc_server_fix
...
PKCS #11 id RSA - TLS don't convert length a la ecc
2019-02-28 19:05:33 -08:00
c45dade903
Merge pull request #2127 from SparkiDev/zephyr_fix_1
...
Fix spelling mistakes in text messages in Zephyr samples
2019-02-28 18:14:00 -08:00
dc144df32a
PKCS #11 id RSA - TLS don't convert length a la ecc
2019-03-01 10:23:45 +10:00
cce06e8c50
Addressed to review comments
2019-03-01 08:59:03 +09:00
ee17bd7470
Re-apply spelling error correction
2019-03-01 08:59:03 +09:00
6372634eda
Addressed to code review comments
2019-03-01 08:59:03 +09:00
330bbb2f8b
RSA primitive hw acceleration support
2019-03-01 08:59:03 +09:00
e8c3e8dd63
Decoded cert cache feature
2019-02-28 16:59:19 -06:00
e78125e8d6
Fix spelling mistakes in text messages in Zephyr samples
2019-03-01 08:43:20 +10:00
b528997d30
Merge pull request #2103 from SparkiDev/pkcs11_hmac
...
PKCS #11 support for HMAC with MD5, SHA, SHA-2
2019-02-28 09:50:59 -08:00
fd089b4b6b
Changed define to configure all date checks in OCSP responses.
2019-02-28 10:49:58 +01:00
1f7f424075
Code review updates..
2019-02-27 17:27:58 -07:00
edf6318985
PKCS#11 casting fix for clang
2019-02-28 09:31:17 +10:00
a382a979cc
Merge pull request #2098 from kaleb-himes/ZD4793
...
Fix for single threaded case with double free on suites
2019-02-28 08:56:57 +10:00
e2e3b835d6
Merge pull request #2100 from SparkiDev/tls13_vers
...
Support FFDHE in TLS 1.2 and below. Better TLS 1.3 version support.
2019-02-27 14:55:29 -08:00
8f3f27065c
Merge pull request #2114 from dgarske/qat_bench
...
Fixes and improvements for async / QuickAssist
2019-02-27 14:49:32 -08:00
469898aeeb
Merge pull request #2115 from dgarske/ecc_sign_hw
...
Fix for ECC sign with hardware to ensure the input is truncated
2019-02-27 14:41:57 -08:00
b830447690
Merge pull request #2113 from JacobBarthelmeh/Testing
...
EVP decrypt with padding fix
2019-02-27 14:35:57 -08:00
9e93bd1000
fix memory leak for multiple status
2019-02-28 07:34:26 +09:00
2e41d25bca
fix wolfIO_HttpBuildRequestCrl
2019-02-28 07:23:35 +09:00
4226fb66f9
Merge pull request #2117 from SparkiDev/pkcs11_id_fix_2
...
PKCS #11 use private key id double free issue fixed
2019-02-27 14:19:43 -08:00
b189fc0ef8
Merge pull request #2120 from dgarske/nightly_fixes
...
Fixes for various nightly build configuration warnings
2019-02-27 14:15:40 -08:00
5c6876e05e
Merge pull request #2121 from JacobBarthelmeh/Compatibility-Layer
...
rename function wolfSSL_sk_ASN1_OBJCET_pop
2019-02-27 14:12:10 -08:00
95b08553a1
Merge pull request #2122 from tmael/portingDeos
...
Deos: Corrected a typo in TLS client connect call
2019-02-27 12:50:54 -08:00
164eb30732
Fixes for STM32 AES GCM. Hardware does not correctly compute authTag if input is not a multiple of block size, so fall-back to software for tag only. Hardware also only supports IV of 12 or 16 bytes, so fall-back to software in those cases. ZD 4712
2019-02-27 11:07:03 -08:00
9b500c6d56
Corrected a typo in TLS client connect call and removed .zip project
2019-02-27 10:00:06 -08:00
6ce28d74ff
rename function wolfSSL_sk_ASN1_OBJCET_pop
2019-02-26 16:55:03 -07:00
77ffeccb0b
Fixes to QAT enables for benchmark for HMAC. Adds new NO_HW_BENCH
to support using multi-threaded software only benchmarks.
2019-02-26 14:34:03 -08:00
b33023df2f
fix setting outlen with wolfSSL_EVP_CipherUpdate decryption
2019-02-26 15:27:25 -07:00
65c72ddfe1
Reverted an earlier change to the renegotiation resumption. Still need
...
to check the cert subject hash.
2019-02-26 14:26:09 -08:00
57d8e070f9
1. Remove the clearing of the sessionID from Rehandshake.
...
2. Put SecureResume in terms of a regular resume, using Get/SetSession
and then calling Rehandshake.
3. Add the startScr after checking secure_renegotiation enabled during a
resume.
2019-02-26 14:10:44 -08:00
1512f4da90
Correct the output for multi-threaded benchmark usign -base10
option.
2019-02-26 13:38:33 -08:00
326ee8c318
Revert change to PKCS12 tailList.
2019-02-26 11:27:08 -08:00
a3af2fc960
Fix for single threaded case with double free on suites.
2019-02-26 11:03:02 -08:00
38303cf27b
More spelling fixes.
2019-02-26 10:47:42 -08:00
eecc823208
Fixes for scan-build warnings with ASN, PKCS12 and PKCS7.
2019-02-26 10:47:22 -08:00
e01723a435
Code review changes.
2019-02-26 10:42:02 -07:00
8a47af0edc
Added benchmark tests to WICED wolfcrypt test app.
...
Updated the user_settings.h loc per David.
TLS13; SNI; MAX_FRAG
Configure for wolfCrypt bench.
Update README.
2019-02-26 10:37:58 -07:00
95658be0ce
WICED wolfCrypt-TLS_cli_srv-Https_cli
2019-02-26 10:37:48 -07:00
9a129e89c1
Fixes for building with no filesystem and --enable-testcert
or WOLFSSL_TEST_CERT
. Fixes nightly expected configurations test.
2019-02-26 09:36:31 -08:00
fe620b5250
Compile error when FP_MAX_BITS doesn't support FFHDE parameters
2019-02-26 16:44:59 +10:00
a2f8747652
Fix DecodePrivateKey to return NOT_COMPILED_IN with PKCS#11
2019-02-26 09:22:03 +10:00
cb830a088f
Fix for configurations without specific algorithms
2019-02-26 09:22:03 +10:00
700e9896d4
PKCS #11 support for HMAC with MD5, SHA, SHA-2
2019-02-26 09:22:03 +10:00
2bb5dd710c
Fix for curve load failure leak.
2019-02-25 15:19:31 -08:00
b45241f6f8
Fix to use QAT for ECC sign and verify when SP is enabled and key was initialized with devId. Fixes issues with wolfCrypt test and QAT not properly calling "again" for the ECC sign, verify and shared secret.
2019-02-25 14:51:15 -08:00
a44751cd39
PKCS #11 use private key id double free issue fixed
2019-02-26 08:27:59 +10:00
efc1ab8c42
Merge pull request #2111 from SparkiDev/ed25519_fixes_1
...
Various improvements for testing
2019-02-25 13:55:28 -08:00
0360b38de4
Merge pull request #2116 from SparkiDev/pkcs11_id_fix_1
...
Fixes for PKCS #11 private key id and ECC
2019-02-25 13:09:15 -08:00
3785bafdf4
Merge pull request #2096 from kaleb-himes/ZD4707
...
Update for newer versions of the TI compiler
2019-02-25 13:05:43 -08:00
603a9b2e59
Merge pull request #2110 from dgarske/spelling
...
Fixes for various spelling errors
2019-02-25 13:04:12 -08:00
72a50b8d46
Merge pull request #2109 from dgarske/pkcs7_buf
...
Fix for proper detection of PKCS7 buffer overflow case
2019-02-25 13:02:09 -08:00
aa70ac0be2
Added defines to force OCSP nonce check and omit OCSP date before check.
2019-02-25 14:40:19 +01:00
0e914d81dc
Fixes for PKCS #11 private key id and ECC
2019-02-25 11:17:56 +10:00
feea036ec9
Fix generation of certs_test.h
...
Fix formatting of certs_test.h:
- remove trailing spaces
- change leading tab stops to spaces
2019-02-25 09:00:26 +10:00
712ecabf36
Fix for ECC sign with hardware to ensure the input is truncated to the key order.
2019-02-22 15:30:52 -08:00
9ff976a6e1
Fixes for wolfCrypt test with asynchronous support enabled and --enable-nginx
.
2019-02-22 13:47:34 -08:00
b037334732
Merge pull request #2106 from dgarske/ecc_pubkey
...
Adds `ECC_PUBLICKEY_TYPE` to the support PEM header types
2019-02-22 12:09:10 -08:00
04e3c4414d
Merge pull request #2102 from SparkiDev/pkcs11_aes_cbc
...
Add support to PKCS #11 for AES-CBC and NO_PKCS11 defines
2019-02-22 12:07:23 -08:00
9b125c5797
Merge pull request #2107 from JacobBarthelmeh/Compatibility-Layer
...
remove null terminators on substrings
2019-02-22 10:26:06 -08:00
8b0bcdaf29
EVP decrypt with padding fix
2019-02-22 10:05:15 -07:00
8bb4e23f8d
Various improvements for testing
...
Fix wc_ecc_fp_free() to be called when using HAVE_STACK_SIZE.
Increase size of replyin client.c so all HTTP reply is displayed.
Fix api.c to support only Ed25519 (not RSA and ECC)
Fix suites.c to detect when CA for client won't work (Ed25519 only)
For Static Memory add debugging and small profile.
Also allow realloc to be called with NULL.
Add more Ed25519 certs and keys.
Fix names of Ed25519 filenames for client and server.
Do NOT turn on ECC_SHAMIR by default with lowresource.
Enable WOLFSSL_STATIC_MEMORY_SMALL if low resource and no RSA.
2019-02-22 17:14:19 +10:00
7b44fbe265
OCSP, CRL request with "Cache-Control: no-cache" for proxy
2019-02-22 09:23:06 +09:00
ee3eb8fb4c
Fix for proper detection of buffer overflow case when calling wc_PKCS7_EncodeSignedData
.
2019-02-21 13:32:28 -08:00
289f51a77d
Fixes for various spelling errors.
2019-02-21 13:29:44 -08:00
5e0a77704b
argument check
2019-02-22 06:17:45 +09:00
801ef2c62c
add wolfSSL_CertManagerCheckOCSP_Staple
2019-02-22 05:39:38 +09:00
28d8730948
exporse OcspEntry in asn.h
2019-02-22 05:20:54 +09:00
5932cdab15
cast on strlen return value
2019-02-21 13:04:38 -07:00
55ca2c2da7
Added build-time override for benchmark thread count WC_ASYNC_BENCH_THREAD_COUNT
.
2019-02-21 10:45:09 -08:00
39626bb349
1. Add a newline to the client's "non-blocking socket and renegotiation" notice.
...
2. Add suite test cases for more renegotiation setting combinations.
2019-02-21 10:06:55 -08:00
5801e7773b
Merge pull request #2108 from miyazakh/server_help_in_jp
...
fixed examples/server to take additional parameter for "-?"
2019-02-21 05:55:32 -08:00
ee4e27afe2
Fix lengths to support large DH params
2019-02-21 17:13:43 +10:00
b68eab6450
fixed to take additioanl option for -?
2019-02-21 13:44:08 +09:00
18d3e04dbf
remove null terminators on substrings
2019-02-20 16:39:18 -07:00
b0957c68fb
ForceZero the devKey field of Aes in PKCS#11
...
Don't memset the key field of AES in PKCS#11.
2019-02-21 08:22:56 +10:00
b4996e35fa
Set MAX_PRF_HALF bigger for large FFDHE parameters
...
Stack size measurement is in a thread - free local fp_cache
2019-02-21 08:09:52 +10:00
7389553bd6
1. For secure renegotiation, remove the check of the peer certificate's
...
subject ID on renegotiation. Both endpoints are already
cryptographically linked on an encrypted channel.
2. The error code list has gaps where deprecated codes were deleted,
remove the redundant gaps where there aren't missing codes.
2019-02-20 11:45:21 -08:00
9c9221432f
Merge pull request #2087 from ejohnstown/aesgcm
...
Update TLS for AES-GCM/CCM changes
2019-02-20 11:43:06 -08:00
a376e17aee
Switch the bound for the XMEMSET of the sessionID when starting a
...
renegotiation to use sizeof the sessionID rather than the constat used
to set the size of the array.
2019-02-20 11:26:33 -08:00
f78ba4649b
Update the help text so the Japanese translations of the new options are printed.
2019-02-20 11:23:00 -08:00
b8dc772ef8
Merge pull request #2105 from dgarske/fix_stm_aesgcm
...
Fix for STM32 AES GCM
2019-02-20 09:23:11 -08:00
3013cdd925
Merge pull request #2095 from SparkiDev/asm_macosx
...
Get Mac OS X working with the x86_64 assembly files
2019-02-20 09:19:29 -08:00
025fba8ec6
Merge pull request #2093 from dgarske/tls13_async_dh
...
Fix for TLSv1.3 with DH key share when using QAT
2019-02-20 09:16:54 -08:00
5d667ed1b8
Merge pull request #2075 from SparkiDev/port_zephyr
...
Zephyr port of crypto
2019-02-20 09:10:04 -08:00
d81fb727a3
Adds ECC_PUBLICKEY_TYPE
to the support PEM header types. Fixes #2097 .
2019-02-20 08:40:57 -08:00
1f6314746c
Secure Renegotiation
...
1. Split the wolfSSL_Rehandshake() function into wolfSSL_Rehadshake()
which performs a full handshake on secure renegotiation and
wolfSSL_SecureResume() which performs a session resumption on a
secure renegotiation.
2. Add option to example client to perform a secure resumption instead
of a full secure handshake.
2019-02-19 15:50:55 -08:00
ba14564c49
Fix for STM32 AES GCM, which was incorrectly using software crypto when authInSz != 16
. The wc_AesGcmEncrypt_STM32
and wc_AesGcmDecrypt_STM32
functions correctly handle all variations of authInSz
.
2019-02-19 15:38:09 -08:00
c2fbef2f7f
Refactor to populate preMasterSz
on XMALLOC. Fix for DoClientKeyExchange
and ecdhe_psk_kea
, which assumes preMasterSz
is zero. Fix for TLS v1.3 resumption not properly setting preMasterSz
. Removed for TLS v1.3 PSK setup test for preMasterSz == 0
, which is not required. Spelling fixes for tls13.c.
2019-02-19 13:01:21 -08:00
dc1f0d7822
Fix for DH with QuickAssist to only use hardware for supported key sizes. Fix in random.c for seed devId when building async without crypto callbacks.
2019-02-19 11:57:55 -08:00
161e815c03
remove hard tab
2019-02-20 04:14:17 +09:00
520ae52ece
Add support to PKCS #11 for AES-CBC and NO_PKCS11 defines
...
Added PKCS #11 specific defines to turn off support for algorithms.
2019-02-19 13:50:12 +10:00
e3997558a9
Fixes from review and added REAMEs and setup.sh
...
Add README.md and setup.sh.
Add READMEs with license information.
2019-02-19 11:47:45 +10:00
5e1eee091a
Add threaded samples using buffers and sockets
2019-02-19 11:47:45 +10:00
4302c02e67
Include zephyr directories in the release
2019-02-19 11:47:44 +10:00
2c447b24cd
Fixes from review and add IDE files
2019-02-19 11:47:44 +10:00
3366acc9ce
Zephyr port of crypto
2019-02-19 11:47:44 +10:00
7aa5cd6f10
Support FFDHE in TLS 1.2 and below. Better TLS 1.3 version support.
...
Add support for the fixed FFDHE curves to TLS 1.2. Same curves in TLS
1.3 already. On by default - no checking of prime required.
Add option to require client to see FFDHE parameters from server as per
'may' requirements in RFC 7919.
Change TLS 1.3 ClientHello and ServerHello parsing to find the
SupportedVersions extension first and process it. Then it can handle
other extensions knowing which protocol we are using.
2019-02-18 14:51:59 +10:00
b842b8583e
add CMSIS RTOSv2 and imporove other default values to user_settings.h template
2019-02-18 06:48:20 +09:00
0ee1e103dd
update project files
2019-02-18 06:46:41 +09:00
239f878bd1
fix indentation
2019-02-18 06:45:26 +09:00
f3c2125259
add Mutex type for CMSIS RTOSv2
2019-02-18 06:45:01 +09:00
1c6911634c
sprit DECLARE_ARRAY_DYNAMIC into declaration and execution
2019-02-18 06:43:26 +09:00
98e53cb4eb
Improved user_settings.h, Abstract.txt
2019-02-18 06:41:53 +09:00
c7f8f9fc90
Declarations have to come before executable statements
...
WOLFSSL_MDK5_COMPLv5: mdk5 compiler ver 5 regards macro with args as executable statement (This seems to be fixed with v6)
2019-02-18 06:39:06 +09:00
6c3ed46542
examples server HTTP update.
2019-02-15 15:45:30 -07:00
c0d1241786
Modify the TLSv1.3 calls to the AES-GCM and AES-CCM encrypt functions to
...
use the FIPS compatible APIs with external nonce.
2019-02-15 13:52:23 -08:00
d806134cbf
Update for newer versions of the TI compiler
2019-02-15 13:05:37 -07:00
25dd5882f8
Merge pull request #2094 from dgarske/ecdsa_der_len
...
Adds strict checking of the ECDSA signature DER encoding length
2019-02-15 10:53:57 -08:00
7275ee5f19
Merge pull request #2089 from SparkiDev/tls13_sup_ver
...
Make SupportedVersions respect SSL_OP_NO_TLSv*
2019-02-15 10:36:32 -08:00
d9a5898e91
Merge pull request #2082 from SparkiDev/parse_kse
...
Fix length passed to key share entry parsing
2019-02-15 10:31:14 -08:00
c04cade97c
Merge pull request #2083 from JacobBarthelmeh/Testing
...
Expected Configurations Test - NIGHTLY BUILD #505
2019-02-15 10:23:55 -08:00
16f31cf8c6
Get Mac OS X working with the x86_64 assembly files
2019-02-15 15:08:47 +10:00
e47797f700
Make SupportedVersions respect SSL_OP_NO_TLSv*
2019-02-15 08:26:03 +10:00
7328fce60d
Disable MP_64BIT when compiling with clang-cl on Windows.
...
__attribute__ ((mode(TI))) does not really work on clang-cl,
linking would fail with "unresolved external symbol __udivti3",
as reported in https://bugs.llvm.org/show_bug.cgi?id=25305
Fix to use default case with 28bit digits on clang-Windows.
2019-02-14 23:18:51 +01:00
a9f29dbb61
Adds strict checking of the ECDSA signature DER encoding length. With this change the total signature size should be (sequence + r int + s int) as ASN.1 encoded. While I could not find any "must" rules for the signature length I do think this is a good change.
...
If the old length checking method is desired `NO_STRICT_ECDSA_LEN` can be used. This would allow extra signature byes at the end (unused and not altering verification result). This is kept for possible backwards compatibility.
Per RFC6979: `How a signature is to be encoded is not covered by the DSA and ECDSA standards themselves; a common way is to use a DER-encoded ASN.1 structure (a SEQUENCE of two INTEGERs, for r and s, in that order).`
ANSI X9.62: ASN.1 Encoding of ECDSA:
```
ECDSA-Sig-Value ::= SEQUENCE {
r INTEGER,
s INTEGER
}
```
Fixes #2088
2019-02-14 12:05:34 -08:00
e2d7b402e7
Update so TLSv1.3 will work. Needed to make the implicit IVs full sized
...
when copying. Added a flag to SetKeys() to skip the IV set (used for
TLSv1.3).
2019-02-14 12:04:32 -08:00
3223920fd9
Add a guard for AES-GCM and AES-CCM for the change in Encrypt for the
...
AES-AEAD type and macros.
2019-02-14 12:04:05 -08:00
cd7f8cc653
Update AES-GCM/CCM use in TLS with a wrapper to select the correct API
...
depending on using old FIPS, or non-FIPS/FIPSv2.
2019-02-14 12:04:05 -08:00
67e70d6cb6
Update TLS to use the new AES-GCM and AES-CCM APIs that output the IV on
...
encrypt rather than take the IV as an input.
2019-02-14 12:04:05 -08:00
64cb07557d
Merge pull request #2091 from SparkiDev/pkcs11_fixes
...
Fix PKCS #11 AES-GCM and handling of unsupported algorithms
2019-02-14 09:49:02 -08:00
5856d6b3dc
Fix PKCS #11 AES-GCM and handling of unsupported algorithms
2019-02-14 17:06:15 +10:00
275667f0e9
remove ocsp attempt with ipv6 enabled
2019-02-13 19:01:09 -07:00
46bb2591c8
Merge pull request #2070 from dgarske/fix_cryptocb
...
Fixes and improvements to Crypto Callbacks and STM32 RNG performance
2019-02-13 12:44:19 -08:00
d98ebc4da2
Reverted the Hmac_UpdateFinal
change to call final as it causing constant timing issues. Improved the wc_HmacFree
to handle the case were final isn't called for Crypto callbacks.
2019-02-13 10:24:53 -08:00
272181bc2e
Merge pull request #2086 from dgarske/atecc_makekey
...
Fix for ATECC make key case when `curve_id == 0`
2019-02-13 09:52:54 -08:00
817b82e453
Merge pull request #2084 from cconlon/cmsFeb19
...
Changes for CMS signedData default signed attributes
2019-02-13 09:49:55 -08:00
1fab970316
Merge pull request #2085 from miyazakh/esp-idf_fix_script
...
modified esp-idf setup script to avoid unnecessary file copy
2019-02-13 08:01:13 -07:00
95db819d45
Fixes for warnings when building with --enable-pkcs11
.
2019-02-12 16:05:48 -08:00
e0b46734d6
Enhnacement to the tls_bench tool to support new -S
command to indicate total size of data to exchange. Previously was just sending one packet back and forth. Imporved the shutdown handling code.
2019-02-12 16:03:10 -08:00
1a8388641d
Change new hash SetFlag/GetFlag API's to private.
2019-02-12 16:03:10 -08:00
c9521b56f2
Fix warning about HAL_RNG_GenerateRandomNumber
type.
2019-02-12 16:03:10 -08:00
eb8a2f3a03
Minor fixes to CryptoCb wolfCrypt test for AES test and hash support for update/final in same callback.
2019-02-12 16:03:10 -08:00
454687f429
Fix for TLS HMAC constant timing to ensure final is called for dummy operations. Added devCtx to AES for CryptoCb.
2019-02-12 16:03:10 -08:00
dcdb1d7094
Added flag to indicate if hash is copied.
2019-02-12 16:03:10 -08:00
e7b23646a5
Updates to HMAC crypto callback support to capture raw KEY and require hmac struct.
2019-02-12 16:03:10 -08:00
838652c03b
Added flags build option to hashing algorithms. This allows indicator to determine if hash will be "copied" as done during a TLS handshake.
2019-02-12 16:03:10 -08:00
40a7bcfc20
Fix for new random seed crypto callback to properly reset error code in NOT_COMPILED_IN case.
2019-02-12 16:03:10 -08:00
88d3abb1e6
Added Crypto callback HMAC support.
2019-02-12 16:03:10 -08:00
18d5b3393c
Correct NULL cryptocb case.
2019-02-12 16:03:10 -08:00
891abe130a
Added Crypto callback support for ASN CalcHashId
. Added arg checking to cryptocb functions.
2019-02-12 16:03:10 -08:00
9fc0610720
Fix to ensure hash devCtx is cleared.
2019-02-12 16:03:10 -08:00
7e3082906e
Fix for ensuring devId is passed into symmetric init.
2019-02-12 16:03:10 -08:00
dad88b4c81
Improvements to the STM32L4 random generation code for improved performance and error handling. Added new WOLFSSL_STM32_RNG_NOLIB
define to support generic STM32 series RNG without external ST library.
2019-02-12 16:03:10 -08:00
08bcef7c0c
adjust wolfSSL_PKCS7_verify API test
2019-02-12 14:48:49 -07:00
f824c8c769
Merge pull request #2077 from ejohnstown/ocsp-ecdsa
...
OCSP and ECDSA Signers
2019-02-12 09:50:37 -07:00
acb983a154
Fix for ATECC make key case when curve_id == 0
(default). ZD 4383
2019-02-12 08:34:34 -08:00
feae776ee3
Merge pull request #2078 from SparkiDev/ssl_priv_id
...
Support in SSL for setting a private key id
2019-02-12 07:56:47 -08:00
e5f94e5884
modified script to avoid unnecessary file copy
2019-02-12 10:37:30 +09:00
66ab6d8c22
Check FindObjectFinal call for error
2019-02-12 09:07:14 +10:00
acc0121e0f
account for WOLF_C99 with ipv6 test cases
2019-02-11 15:07:12 -07:00
fb6aaf2ae2
rearrange order of default CMS SignedData signed attributes for better interop compatibility
2019-02-11 14:48:37 -07:00
56736a3563
always include default signed attributes for CMS SignedData bundles, add function to remove if needed
2019-02-11 14:41:32 -07:00
4e5ea71118
Merge pull request #2081 from dgarske/dh_max_sz
...
Fix to detect maximum DH key size
2019-02-11 13:21:08 -08:00
e86aae00ed
Change to allow setting of devId for private key
2019-02-11 12:37:44 +10:00
47922a4d87
Support in SSL for setting a private key id
...
Works with PKCS #11 to use key on device.
2019-02-11 10:38:38 +10:00
88050de1ff
Fix length passed to key share entry parsing
2019-02-11 08:29:28 +10:00
dd32df5df1
Merge pull request #2080 from kaleb-himes/ZD4795
...
fix typo revcd vs recvd and spell out to avoid confusion: received
2019-02-08 17:38:48 -08:00
aa21a0e6df
Fix to increase maximum DH key size if using fast math and FP_MAX_BITS supports it.
2019-02-08 17:36:40 -08:00
b6d322cd14
fix typo revcd vs recvd and spell out to avoid confusion: received
2019-02-08 14:27:19 -07:00
6298074f93
OCSP and ECDSA Signers
...
OCSP uses an identified hash of the issuer's public key to identify the
certificate's signer. (Typically this is SHA-1, but can be any SHA
hash.) The AKID/SKID for the certificates usually are the SHA-1 hash of
the public key, but may be anything. We cannot depend on the AKID for
OCSP purposes. For OCSP lookups, wolfSSL calculates the hash of the
public key based on the copy saved for use with the handshake signing.
For RSA, that was fine. For ECDSA, we use the whole public key including
the curve ID, but for OCSP the curve ID isn't hashed. Stored the hash of
the public key at the point where we are looking at the key when reading
in the certificate, and saving the hash in the signer record.
2019-02-07 17:34:25 -08:00
e52f4494f0
Merge pull request #2069 from dgarske/fix_8192
...
Fixes for handling 6144 and 8192 bit with TLS v1.3
2019-02-07 15:02:40 -08:00
4f4d16d9e5
Merge pull request #2068 from dgarske/pkcs7_verify_degenerate
...
Fixes to handle degenerate PKCS 7 with BER encoding
2019-02-07 15:00:21 -08:00
9a67d2a869
Update support for entropy source with HARMONYv3
2019-02-06 13:25:05 -07:00
8666b7de9a
add test-ber-exp02-05-2022.p7b file for test
2019-02-06 11:11:27 -07:00
ec28376e7f
add PKCS7 BER verify test and fix for streaming
2019-02-06 11:05:15 -07:00
f61d99526b
Merge pull request #2072 from JacobBarthelmeh/Testing
...
fix macro with pic32 mx build
2019-02-04 17:11:13 -08:00
53bf510740
Merge pull request #2073 from JacobBarthelmeh/Jenkins
...
fix typo with getting cipher suite : Jenkins Nightly Build test 499
2019-02-04 17:10:57 -08:00
be4d6bc204
fix typo with getting cipher suite
2019-02-04 10:53:59 -07:00
390f3f5fca
Merge pull request #4 from SparkiDev/pr_2069
...
Disallow SupportedGroups in ServerHello for TLS 1.3
2019-02-04 09:05:36 +10:00
b7179c2a54
Disallow SupportedGroups in ServerHello for TLS 1.3
...
But allowed when downgrading to TLS 1.2.
2019-02-04 09:04:11 +10:00
f8ff68ca7a
Merge branch 'master' of https://github.com/wolfssl/wolfssl
2019-02-03 16:19:59 +09:00
099d813a8c
Fix headers
2019-02-03 15:44:41 +09:00
73fbf845f2
Merge pull request #2066 from SparkiDev/sec_reneg_scsv
...
Fix empty renegotiation info ciphersuite handling
2019-02-01 10:05:59 -08:00
8fc1780688
Merge pull request #2065 from SparkiDev/ossl_fix1
...
Changes to make symbols available for OpenSSL compat
2019-02-01 10:04:41 -08:00
14a2343118
Merge pull request #2064 from SparkiDev/tls13_dhkeysz
...
Set the DH key size for TLS 1.3 when secret calculated
2019-02-01 10:04:15 -08:00
4a5652f318
Merge pull request #2061 from SparkiDev/x86_asm_not_in_c
...
Pull out x86_64 ASM into separate files
2019-02-01 10:01:34 -08:00
1258467b0a
Merge pull request #2054 from SparkiDev/pkcs11_rng
...
Add support for random and getting entropy (seed) with PKCS#11
2019-02-01 09:59:12 -08:00
4a177a8a30
Merge pull request #1997 from tmael/portingDeos
...
Initial Deos RTOS port
2019-02-01 09:56:55 -08:00
c080050c80
Fix to detect larger key size requirement based on FP_MAX_BITS
. Fix for TLSv1.3 to allow server_hello for TLSX_SUPPORTED_GROUPS
. ZD 4754.
2019-02-01 09:53:30 -08:00
c82d11f47d
Cleanup of the PKCS7 stream long rc
and braces.
2019-01-31 14:37:25 -08:00
3a0afc3506
Fixes to handle degenerate PKCS 7 with BER encoding in PKCS7_VerifySignedData
. Fix for PKCS7 API unit test with SHA512 disabled. ZD 4757.
2019-01-31 14:36:46 -08:00
7822cef1ac
Pull out x86_64 ASM into separate files
2019-01-29 13:08:24 +10:00
e8b46caf75
Fix empty renegotiation info ciphersuite handling
2019-01-29 12:51:49 +10:00
574238dea0
Set the DH key size for TLS 1.3 when secret calculated
2019-01-29 08:59:49 +10:00
0b2bbc33bd
Merge pull request #2059 from miyazakh/openssl_bksize_digest
...
Added EVP_MD_CTX_block_size and exposed EVP_Digest()
2019-01-28 15:17:26 -07:00
1288036dbe
Merge pull request #2047 from kojo1/freeCRL
...
wolfSSL_CertManagerFreeCRL: exposing FreeCRL
2019-01-25 16:08:31 -08:00
5c6b42e60d
cast to a char
2019-01-25 15:30:09 -08:00
66987b4f2a
Merge pull request #2058 from SparkiDev/tls13_earlydata_bench
...
Added EarlyData support to benchmark loop
2019-01-25 14:31:54 -08:00
67f615f42f
Merge pull request #2053 from dgarske/warn_secrets
...
Show warning if secrets debugging options are enabled
2019-01-25 14:26:47 -08:00
0d8ca06928
Merge pull request #2052 from dgarske/atecc_fixes
...
Fixes for ATECC with PMS outlen and `ATECC_MAX_SLOT`
2019-01-25 14:26:09 -08:00
61e8d1ab92
fix macro with pic32 mx build
2019-01-25 14:13:51 -07:00
e4abcc0a15
fixed api unit test
2019-01-25 09:38:19 +09:00
53adb93ae4
Added EVP_MD_CTX_block_size and publicized EVP_Digest()
2019-01-25 09:05:36 +09:00
743f8b576f
Add support for random and getting entropy (seed) with PKCS#11
...
Getting the seed from a device has been added.
If the HASH_DRBG is available, PKCS#11 will be used for generating the
seed.
Otherwise, all generated random data will come from PKCS#11 device.
2019-01-25 08:01:30 +10:00
0fe7591b0f
Added EarlyData support to benchmark loop
2019-01-24 18:10:56 +10:00
4ef6841465
Changes to make symbols available for OpenSSL compat
2019-01-24 08:38:05 +10:00
2fa8e8bb94
realloc improvements
2019-01-22 19:21:51 -08:00
d16c2ca7c6
Merge pull request #1865 from JacobBarthelmeh/Optimizations
...
--enable-afalg=xilinx
2019-01-22 14:19:54 -08:00
7c4fa33937
Improve the error handling for non ECC_SECP256R1 curve in wc_ecc_make_key_ex.
2019-01-22 14:04:18 -08:00
fd429bb656
Show warning if secrets debugging options (SHOW_SECRETS
or WOLFSSL_SSLKEYLOGFILE
) are enabled. The #warning
can be ignored as error using ./configure CFLAGS="-W#warnings"
.
2019-01-22 13:29:25 -08:00
c48786c649
Correct the ATECC slot maximum.
2019-01-22 12:14:05 -08:00
7ce255aa4d
Fixes for ATECC with PMS outlen and ATECC_MAX_SLOT
.
2019-01-21 18:45:42 -08:00
eaf5c3042d
Merge pull request #2050 from toddouska/sub
...
remove outdated submission note
2019-01-21 18:41:38 -08:00
952d0b3b6b
Merge pull request #2044 from dgarske/safertos
...
Fixes to resolve possible build issues with SafeRTOS.
2019-01-21 15:40:48 -08:00
52e8e77390
Merge pull request #2046 from cconlon/addalert
...
add alert number and string for "unknown_ca" (48)
2019-01-21 15:39:47 -08:00
d00dd9d7c9
Merge pull request #2049 from danielinux/ecc-verify-only
...
Allow ECC Verify-only operations with NO_ASN and SP_MATH
2019-01-21 15:37:55 -08:00
e87dac66ac
Merge pull request #2021 from ejohnstown/dtls-resume
...
DTLS Update
2019-01-21 15:35:40 -08:00
f7c0a77c9c
reomved outdated submission note
2019-01-21 09:14:58 -08:00
5ce6a9009e
perform mem copy in realloc
2019-01-20 22:55:51 -08:00
501a3a287b
Allow ECC Verify-only operations with NO_ASN and SP_MATH
2019-01-21 07:11:35 +01:00
5539b0eb38
wolfSSL_CertManagerFreeCRL: exporsing FreeCRL
2019-01-20 10:11:19 +09:00
db5c63bb25
fix for benchmarking specific RSA key size with -rsa-sz
2019-01-18 16:47:10 -07:00
8ecee6a7e9
add unknown_ca alert number (48) and string
2019-01-18 15:36:33 -08:00
253915866d
make build more modular
2019-01-18 16:25:24 -07:00
4fb6e65857
alignment check and authin size check
2019-01-18 16:25:24 -07:00
b8ebd41fbc
key size with AES-CMAC benchmark
2019-01-18 16:25:24 -07:00
f0a3045d62
af_alg sha3 addition
...
hardware acceleration with RSA
add AES-GCM hardware acceleration
refactor setting RSA IV flag
check and set AF_ALG flags
fix for default AF_ALG use
set buffer alignment with Xilinx RSA
macro guard after rebase
use ALIGN64
clean up test cases
2019-01-18 16:25:24 -07:00
5dbd074f33
adding eclipse project
2019-01-18 14:46:40 -08:00
1f26282bf2
update include.am and add function description
2019-01-18 14:46:39 -08:00
58da860cd6
update readme with config info
2019-01-18 14:46:39 -08:00
e51cc4e99d
Removed unneeded \n from WOLFSSL_MSG
2019-01-18 14:46:39 -08:00
534fe6ab39
Updated with PR review comments
2019-01-18 14:46:39 -08:00
739b57c753
Initial Deos RTOS port
...
- Added support for Deos with no file system
- Implemented a custom malloc since reusing and freeing memory is disallowed in avionics and mission critical applications.
- Added TLS client and server example with a TCP setup mailbox transport
- Timer starts at an offset of CURRENT_UNIX_TIMESTAMP specified by the user
- Uses rand_r() as a pseudo random number generator and uses the current time in seconds as a seed
- Uses strnicmp for XSTRNCASECMP instead of strncasecmp
- a readme doc included
2019-01-18 14:46:39 -08:00
f2732a4ecd
Fixes to resolve possible build issues with SafeRTOS.
...
* Support for building `WOLFSSL_SAFERTOS` without heap.
* Allows `XSTRNCASECMP` macro to be customized.
* USER_TIME supports checks for existing `strct tm` and `time_t`.
2019-01-18 10:02:20 -08:00
c282f5b726
DTLS Nonblocking Updates
...
Modify the DtlsMsgPoolSend() function to keep track of the last message
retransmit. If a write would block, it allows the retransmit pick up
where it left off.
2019-01-18 09:15:11 -08:00
cc3c2ef683
DTLS Nonblocking Updates
...
Add command line option to the example server to fake a write block on a
specified DTLS sequence number in epoch 0.
2019-01-18 09:15:11 -08:00
aa4de6e170
DTLS Nonblocking Updates
...
Do not allow the DTLS message flight be retransmit without being
finished. This can happen if a non-blocking transmit times out the
response and the application tries to retransmit.
2019-01-18 09:15:11 -08:00
8356c3d7e2
DTLS Nonblocking Updates
...
1. Add a second select for tx.
2. Revised tcp_select to work for either rx or tx.
3. Updated client and server to use new tcp_select_tx() for checking the
tx socket if the nonblocking connect/accept would block on transmit.
2019-01-18 09:15:11 -08:00
63f6c1d280
DTLS Nonblocking Updates
...
1. Add error code for trying to retransmit a flight when transmitting
the flight hasn't finished.
2. Add function to retransmit the stored flight without updating the
timeout count.
2019-01-18 09:15:11 -08:00
91d81ea691
Add some more debug logging for DTLS retransmission support.
2019-01-18 09:13:28 -08:00
d3e2488552
DTLS Resume Fix
...
1. In DTLS, when transmitting the Change Cipher Spec message increment the
sequence number.
2. In DTLS, when client receives the CCS message, sanity check that the
server hello has been received in the case of resume.
2019-01-18 09:13:28 -08:00
d07cf53bb1
Merge pull request #2034 from miyazakh/Espressif_port_Phase2B
...
Initial support atecc608a on 32se
2019-01-18 09:07:51 -08:00
02ef2ede12
Merge pull request #2041 from dgarske/crypto_cb
...
Refactor and rename of cryptodev to cryptocb
2019-01-18 09:02:44 -08:00
b632c8dcc1
Merge pull request #2043 from SparkiDev/tls13_psk_down
...
Fix PSK support when no PSK extension
2019-01-18 09:00:56 -08:00
33f876bb20
Merge pull request #2029 from SparkiDev/sni_tls13
...
Fix SNI on client when downgrading from TLS 1.3
2019-01-18 08:59:47 -08:00
fe97264ff9
Merge pull request #2028 from dgarske/spcortex
...
Added Cortex-M support for Single Precision (SP) math
2019-01-18 08:59:10 -08:00
d02f7a75b9
Merge pull request #2019 from dgarske/arduino
...
Improvements to Arduino sketch
2019-01-18 08:54:42 -08:00
aba726fcd3
Merge pull request #2004 from embhorn/prf_move
...
Moving PRF to wolfcrypt
2019-01-18 08:53:13 -08:00
c6a0d32979
Merge pull request #2042 from ejohnstown/ocsp-script
...
OCSP Script Update
2019-01-18 08:51:08 -08:00
2bcde06f90
Merge pull request #2001 from kojo1/embed_benchmark
...
Missing project file
2019-01-18 08:44:09 -08:00
357e0c9d15
Fixes for better backwards compatibility.
2019-01-18 06:54:48 -08:00
e18891aed8
Fix PSK support when no PSK extension
2019-01-18 16:13:07 +10:00
9879425c5f
Addressed review comments
2019-01-18 10:53:48 +09:00
4a5c380f32
Addressed review comments
2019-01-18 08:20:20 +09:00
2753d2d548
clean up
2019-01-18 08:20:20 +09:00
e519e1eb2a
Support atecc608a on 32se with example programs
2019-01-18 08:20:20 +09:00
8fb7892013
Merge pull request #2040 from ejohnstown/fix-checks
...
Fix Checks
2019-01-17 12:54:25 -08:00
0459e9842e
OCSP Script Update
...
The check status variable GL_UNREACHABLE is not initialized and there
are times when it is checked and hasn't been set. Initialize it to zero.
2019-01-17 11:36:44 -08:00
ee45cfdbcb
Refactor and rename of cryptodev to cryptocb. Refactor API names from wc_CryptoDev
to use wc_CryptoCb
. Backwards compatibility is retained for anyone using old WOLF_CRYPTO_DEV
name. Added comment about fall-through case when CryptoCb return NOT_COMPILED_IN
.
2019-01-17 11:01:14 -08:00
8edd7d0b17
Fix Checks
...
1. In the tls_bench, check the return code on wolfSSL_CTX_SetMinDhKey_Sz() as it is checked in the examples.
2019-01-17 10:32:34 -08:00
f6240e5558
Fix Checks
...
1. In the client, check the return code on wolfSSL_CTX_SetMinDhKey_Sz() as it is checked in the server. (Resolves issue #2037.)
2. In HashOutput(), check that the hsHashes exists for the session before hashing. (Resolves issue #2038.)
2019-01-17 09:52:00 -08:00
91573735b1
Merge pull request #2036 from ejohnstown/fragsz
...
TLS Record Fragment Size Check Change
2019-01-17 08:56:45 -08:00
5e03ac13f6
TLS Record Fragment Size Check Change
...
Fixed a potential bug with respect to processing fragmented handshake
messages. If a handshake message is fragmented across multiple TLS
records and the last fragment's record has the next handshake message in
it, we would throw a buffer error instead of processing the next
message. Changed this so it will finish the handshake message and return
out to process the next message. Also changed the handling of the
handshake message to follow the calling pattern.
2019-01-16 15:53:57 -08:00
02ff19a6c4
Moving PRF to wolfcrypt
2019-01-16 17:23:49 -06:00
bcc2458be6
add t4_demo/t4_demo.mtpj in am
2019-01-17 06:39:49 +09:00
d5b06f93fd
Merge pull request #2031 from SparkiDev/sec_reneg_chrome
...
Changes to secure renegotiation for TLS 1.3 and Chrome
2019-01-16 12:00:08 -08:00
c26cb53c05
Merge pull request #2035 from miyazakh/fix_cmake_build
...
fixed cmake build on esp-idf
2019-01-16 11:21:11 -08:00
32ed53a991
Merge pull request #2012 from dgarske/cryptocb_sym
...
Added CryptoDev callback support for AES CBC, SHA1/SHA256 and RNG
2019-01-16 10:41:49 -08:00
5d262e9123
Merge pull request #2027 from dgarske/fix_buildopts
...
Fixes for various build options and warnings
2019-01-16 10:32:19 -08:00
d7ecdf110e
Merge pull request #2013 from dgarske/tls_bench
...
Enhancements to the TLS benchmark tool
2019-01-16 10:30:55 -08:00
b683a5a6bb
Merge pull request #1945 from victork1996/bugfix/openssl-evp-bytes-to-key-compatibility
...
Fixed OpenSSL compatibility issues in wolfSSL_EVP_BytesToKey
2019-01-16 10:18:08 -08:00
bb74dca6e7
Added certificate and private key to server example. Enable error strings, server side code and remove slow sha option for Arduino.
2019-01-16 10:07:56 -08:00
b37c94a15c
Merge pull request #2022 from JacobBarthelmeh/OCSP
...
memory management with OCSP requests
2019-01-16 08:52:50 -08:00
1226bc3379
fixed cmake build on esp-idf
2019-01-16 18:01:18 +09:00
b2e4c86028
Changes to secure renegotiation for TLS 1.3 and Chrome
2019-01-15 09:47:23 -08:00
53ad7728bf
Fix SNI on client when downgrading from TLS 1.3
2019-01-14 15:09:52 -08:00
8352365160
Fixes to resolve Cortex-M issue with ECC.
2019-01-14 14:16:56 -08:00
e4132d32a4
add ocsp test for more code coverage
2019-01-14 13:52:13 -07:00
6ac384793f
memory management with OCSP requests
2019-01-14 09:49:50 -07:00
809fed8f05
Fix to resolve unit test error with WOLFSSL_CIPHER_INTERNALNAME
or NO_ERROR_STRINGS
defined.
2019-01-13 11:06:04 -08:00
864df5f9de
Make sure SP ASM is defined for WOLFSSL_SP_ARM_CORTEX_M_ASM
.
2019-01-12 09:52:26 -08:00
cfc66dab47
Fix compiler complaints when using Curve25519.
2019-01-11 21:16:13 -08:00
3c2aa60862
Fix to allow RSA public only to build without verify only.
2019-01-11 21:11:40 -08:00
45cd80b4b7
Fix define check of NO_CERT
to be NO_CERTS
.
2019-01-11 21:10:07 -08:00
bcc177b23d
Fixes for build warnings.
2019-01-11 21:07:23 -08:00
406d2ceb6b
Merge pull request #2023 from miyazakh/fix_no_hash_raw
...
fix no_hash_raw for esp32 hw acceleration
2019-01-11 21:04:04 -08:00
56415928ff
Added Arduino TLS server sketch.
2019-01-11 17:20:35 -08:00
ebd68e6afd
Fix to return the internal cipher suite name instead of NULL if NO_ERROR_STRINGS
is defined. Fix for stray "if" in wolfSSL_SESSION_CIPHER_get_name
.
2019-01-11 17:20:35 -08:00
0ef4856039
Added connect and shutdown calls to Arduino sketch. Improved the get cipher suite. Improved error handling.
2019-01-11 17:20:35 -08:00
141b263546
Merge pull request #2024 from dgarske/nb_timeout_det
...
Nonblocking connect timeout check
2019-01-11 17:12:48 -08:00
8df27ffdcf
Fix for RTOSv2
2019-01-12 09:11:04 +09:00
cb39768e09
SimpleServer: update projectfile
2019-01-12 08:52:59 +09:00
92fd92c208
SimpleServer/main.c for RTOSv2 and RLnet4
2019-01-12 08:51:29 +09:00
034d1dff21
remove unused project file
2019-01-12 08:05:11 +09:00
64a528f318
remove unused code
2019-01-12 08:03:49 +09:00
4821d06dff
fix worning
2019-01-12 07:50:15 +09:00
6a25b42efb
fix worning
2019-01-12 07:49:49 +09:00
50598dcbac
wc_port.c nad header files for ROTSv2
2019-01-12 07:49:20 +09:00
f67b8fa6a3
Experimental SP Cortex M support for Single Precision math.
2019-01-11 14:38:34 -08:00
6f760d796c
update project files: CryptTest, benchmark, SimpleClient
2019-01-12 07:31:25 +09:00
cca27f6724
examples/celient.c, server.c: removing unused headers
2019-01-12 07:29:19 +09:00
13f4086d53
SImpleClient/main.c for CMSIS-RTOSv2 and net4
2019-01-12 07:27:58 +09:00
55fdeacf87
CryptTest, CryptBenchmark/main.c for CMSIS-RTOSv2
2019-01-12 07:26:41 +09:00
a4a6895900
Fix for scan-build "Value stored to 'err' is never read`"
2019-01-11 09:42:41 -08:00
6eea924a5c
Fix for non-blocking read timeout.
2019-01-11 08:45:34 -08:00
3f46250994
Fix to timeout after 10 seconds in non-blocking mode if connect does not complete.
2019-01-10 17:12:37 -08:00
ebc9533bc7
Fixes and improvements to the new Crypto callback code for AES and Hashing.
2019-01-09 17:39:05 -08:00
ba0d488807
Added RNG Crypto callback support.
2019-01-09 14:36:40 -08:00
e1fd7b86f7
Merge pull request #2014 from JacobBarthelmeh/Testing
...
add ocsp stapling test and initialize values
2019-01-09 10:41:56 -08:00
bdc5dd41d1
fix no_hash_raw for esp32 hw acceleration
2019-01-09 16:56:47 +09:00
003360237f
Fixes for building with NO_WOLFSSL_SERVER
. Minor test.h cleanups.
2019-01-07 10:08:16 -08:00
26ae39a217
check if secure renegotiation struct available
2019-01-04 13:22:34 -07:00
a00eaeb877
add ocsp stapling test and initialize values
2019-01-04 13:16:47 -07:00
df2a0f9a4f
Fixes for scan-build warnings.
2019-01-03 12:47:46 -08:00
f3c08ae8b9
Better fixes for ret
unused.
2019-01-03 12:42:31 -08:00
ff0a4eb69a
Fix for float compare warning. Minor cleanups.
2019-01-03 11:40:04 -08:00
a7251e4158
Fixes for minor Jenkins build warnings.
2019-01-03 11:22:01 -08:00
ef916f2c55
Enhancements to the TLS benchmark tool:
...
* Added support for running as only Client (`-c`) or Server (`-s`).
* Added support for using sockets (in addition to in memory mode `-m`).
* Fixed support for 16KB test packet (memory version needed TLS header space). Changed to default to 16KB.
* Fixed so transfer is done on each connection and there is not transfer limit (instead "shutdown" message is used).
* Made pthread support optional and based on HAVE_PTHREAD.
* Tested non-blocking support with sockets or shared memory.
To use with localhost sockets and threading use `./examples/benchmark/tls_bench`
To use with threading and in-memory use `./examples/benchmark/tls_bench -m`
To use as separate server client applications with localhost sockets use: `./examples/benchmark/tls_bench -s` and `./examples/benchmark/tls_bench -c` in separate terminals.
```
./examples/benchmark/tls_bench -?
tls_bench 3.15.7 NOTE: All files relative to wolfSSL home dir
-? Help, print this usage
-c Run as client only, no threading and uses sockets
-s Run as server only, no threading and uses sockets
-h Host (default localhost)
-P Port (default 11112)
-e List Every cipher suite available
-i Show peer info
-l <str> Cipher suite list (: delimited)
-t <num> Time <num> (seconds) to run each test (default 1)
-p <num> The packet size <num> in bytes [1-16kB] (default 16384)
-v Show verbose output
-d Enable debug messages
-T <num> Number of threaded server/client pairs (default 1)
-m Use local memory, not socket
```
2019-01-03 10:57:39 -08:00
1201ffb13f
Added CryptoDev callback support for AES CBC and SHA1/SHA256.
2019-01-02 14:34:26 -08:00
656c7951cd
Merge pull request #2010 from dgarske/mdk_fixes
...
Fixes for MDK5 project
2019-01-02 12:39:35 -08:00
ed80cf4f4d
Merge pull request #2009 from JacobBarthelmeh/Testing
...
fix for some warnings and edge case build
2019-01-02 12:38:51 -08:00
2121607705
Merge pull request #2005 from dgarske/fix_sp_arm32_asm
...
Fix for SP ASM when building sources directly
2019-01-02 12:36:40 -08:00
71bc571a8a
Merge pull request #2000 from kojo1/EVP_CipherInit
...
EVP_CipherInit: allow NULL iv, key for openSSL compatibility
2019-01-02 12:04:38 -08:00
5677e71cba
Merge pull request #1987 from dgarske/32bit
...
Fixes for `--enable-32bit` option
2019-01-02 11:38:31 -08:00
9c75753bd2
Merge pull request #1984 from miyazakh/Espressif_port_Phase2A
...
Support AES and SHA hw acceleration on esp32-wroom-32
2019-01-02 11:37:55 -08:00
d5509a4f37
Merge pull request #2007 from dgarske/fips_build
...
Fixes for a few FIPS build macro checks
2019-01-02 10:10:08 -08:00
332dd75e5f
Fix missing semicolon for HAL_CRYP_AESECB_Decrypt
call. Fix for NO_MULTIBYTE_PRINT
in test.h. These fixes were pulled in from PR #1974 .
2018-12-31 13:53:12 -08:00
47f5282416
fixes for gcc 8 string warnings
2018-12-28 17:16:45 -07:00
a1459f6fec
fix build when QSH is enabled and TLS 1.3 is enabled
2018-12-28 17:16:34 -07:00
fb0eb55f28
Improved FIPS version check logic for error-crypt.h.
2018-12-28 09:36:13 -08:00
b5ff99a017
Fixes for a few minor build errors where HAVE_FIPS and HAVE_FIPS_VERSION are not checked.
2018-12-28 09:22:36 -08:00
9df0fc9509
Added protection to ensure WOLFSSL_SP_ASM
gets defined when required. Updated the SP macro comments in GCC-ARM user_settings.h. ZD 4556.
2018-12-28 08:48:28 -08:00
30612ad3ed
addressed review comments
2018-12-28 11:48:39 +09:00
965c68abdf
Chaged to match filename and standard in file header
2018-12-28 08:39:19 +09:00
913fe6ea2b
addressed review comments
2018-12-28 08:39:19 +09:00
e8bf2bbb02
removed multiple user_settings.h
2018-12-28 08:39:19 +09:00
9d2294b967
Support AES and SHA hw acceleration on esp32-wroom-32
...
Removed unnecessary codes
Added README
Some clean up for maintenancebility
Removed unused methods
Removed unused methods
2018-12-28 08:39:19 +09:00
c54e8e31bd
Merge pull request #2003 from dgarske/async_rel_3.15.7
...
Async release v3.15.7 prep
2018-12-27 13:55:12 -08:00
cc8c6078b6
Fix to adjust WC_ASYNC_DEV_SIZE
. Fix for tests/test-trustpeer.conf
typo in include.am.
2018-12-27 11:08:49 -08:00
2351047409
Fixes for various scan-build reports.
2018-12-27 11:08:30 -08:00
1eccaae25f
Fix for DTLS async shrinking input buffer too soon and causing -308 (INCOMPLETE_DATA).
2018-12-27 11:07:32 -08:00
5cb5b510ab
Added blocking support for PKCS 7 with async. Fix for RSA async key gen in wolfCryp test.
2018-12-27 11:07:07 -08:00
66442c4bd5
add initialization value for af_alg
2018-12-26 16:57:24 -07:00
697c99a9ec
Merge pull request #1934 from dgarske/fix_alt_chain
...
Fixes and cleanups for processing peer certificates
2018-12-26 15:09:42 -08:00
9c88218b62
Merge pull request #1998 from dgarske/async_fix_smallstack
...
Fix double free with async and small stack
2018-12-26 14:35:57 -08:00
a7350b7d2e
Merge pull request #1994 from JacobBarthelmeh/Release
...
prepare for release 3.15.7
2018-12-26 10:49:35 -08:00
f97696a546
AesSetKey_ to AesSetKey_ex
2018-12-26 13:52:41 +09:00
6ff8febf0f
README: set properties of CC-RX
2018-12-25 15:37:30 +09:00
1d5c50cc63
Missing project file
2018-12-25 07:14:56 +09:00
0c828d14a0
Name conficted. filter out with NO_AES
2018-12-24 17:27:41 +09:00
a73bca090b
fix for nginx port
2018-12-23 22:19:03 -07:00
b6d61f2987
prepare for release 3.15.7
2018-12-23 22:18:48 -07:00
ae09fbe8a2
EVP_CipherInit: allow NULL iv for openSSL compatibility
2018-12-24 12:00:21 +09:00
86177d1830
Removes the forced 32-bit instruction (via -m32
) from --enable-32bit
option and replaces with comment. Some compilers do not support the -m32
option, plus to work properly it must be used with configure directly like ./configure CFLAGS="-m32" LDFLAGS="-m32"
. Removes the NO_64BIT
option to allow building corect on x86_64 and aarch64 (math libs detect platform properly). Fixes #1985 .
2018-12-23 15:59:57 -08:00
3eff20904a
Merge pull request #1991 from dgarske/rsa_nb_time
...
Adds RSA non-blocking time support
2018-12-21 15:58:54 -08:00
75321d72f6
Merge pull request #1996 from JacobBarthelmeh/Testing
...
free internal OCSP buffers
2018-12-21 15:57:58 -08:00
61757c83eb
Fix double free with ./configure --enable-asynccrypt --enable-smallstack
.
2018-12-21 15:45:33 -08:00
a358174b4b
Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.
2018-12-21 12:36:47 -08:00
6191cb1927
free internal OCSP buffers
2018-12-21 12:30:49 -07:00
59a3b4a110
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:
...
* Added ECC and RSA intermediate CA's and server/client chain certificates for testing.
* Enhanced suites test to support expected fail arg `-H exitWithRet` in any test .conf file.
* Added new `test-altchains.conf` for testing with `WOLFSSL_ALT_CERT_CHAINS` defined.
* Added new `test-chains` for testing chains.
* Added new `test-dhprime.conf` for DH prime check tests.
* Added new `test-trustedpeer.conf` for testing `WOLFSSL_TRUST_PEER_CERT`.
* Refactor to add `-2` to disable DH prime check by default (except for new test-dhprime.conf).
* Added ability to run a specific test.conf file using syntax like `./tests/unit.test tests/test-altchains.conf`.
2018-12-21 09:54:55 -08:00
00dd222aa5
Fix for example client with -X
external tests to not disable for PSK build unless usePsk
is set. Resolves issue with external tests being skipped if building with PSK enabled.
2018-12-21 08:21:59 -08:00
9733076fe0
Fixes and cleanups for processing peer certificates:
...
* Fix with `WOLFSSL_ALT_CERT_CHAINS` to resolve issue with using a trusted intermediate to validate a partial chain. With the alt cert chain enabled a CA may fail with only `ASN_NO_SIGNER_E` and the connection is allowed if the peer's certificate validates to a trusted CA. Eliminates overly complex 1 deep error alternate chain detection logic. Resolves ZD 4525.
* Refactor and cleanup of ProcessPeerPerts to combine duplicate code and improve code commenting.
* Fix for CA path len check in `ParseCertRelative` to always check for self-signed case (was previously only in NO_SKID case).
* Improvement to include self-signed flag in the DecodedCert struct.
2018-12-21 08:20:04 -08:00
3e31115654
Merge pull request #1993 from JacobBarthelmeh/Testing
...
Release Testing
2018-12-20 16:19:17 -08:00
d3274e28e8
fix for hash types with fips windows opensslextra build
2018-12-20 14:22:35 -07:00
7d11c3f67c
fix for reported nightly Jenkins build tests
2018-12-20 13:35:54 -07:00
a4a4cd6a3c
Merge pull request #1992 from SparkiDev/tls13_group_hrr
...
Fix HelloRetryRequest to be sent immediately and not grouped
2018-12-20 11:14:30 -08:00
5d2d370bd5
fix for scan-build warning
2018-12-20 11:40:20 -07:00
164a762088
fix afalg/cryptodev + opensslextra build
2018-12-20 10:52:17 -07:00
eba11e097a
Fix HelloRetryRequest to be sent immediately and not grouped
2018-12-20 16:41:38 +10:00
48c267dda8
fix warning with secure-renegotiation build and error with ntru build
2018-12-19 15:47:43 -07:00
165a80d02d
fix for build with cryptonly + rsapub
2018-12-19 15:30:22 -07:00
92d59c7df4
fix for cryptonly + rsavfy build
2018-12-19 14:36:32 -07:00
413506f2b5
Adds new wc_RsaSetNonblockTime
API and WC_RSA_NONBLOCK_TIME
build option. This new function configures the maximum amount of blocking time in microseconds. It uses a pre-computed table along with the CPU speed in megahertz to determine if the next operation can be completed within the maximum blocking time provided.
2018-12-19 13:15:41 -08:00
fc926d3c61
fixes from infer testing
2018-12-19 11:56:29 -07:00
986b5d3951
Merge pull request #1988 from JacobBarthelmeh/ARMv8
...
add -mstrict-align flag with armasm
2018-12-18 15:51:32 -08:00
4068975190
Merge pull request #1983 from dgarske/x509small_verifycb
...
Include current cert as X509 in verify callback for small build
2018-12-18 15:40:00 -08:00
58a2f518e8
Merge pull request #1981 from dgarske/qat_features
...
Added RSA Key Gen and SHA-3 support for Intel QuickAssist
2018-12-18 15:39:38 -08:00
0a6732ee67
Merge pull request #1979 from SparkiDev/tls_sh_tlsx_parse
...
Fix TLS 1.2 and below ServerHello TLSX_Parse to pass in message type
2018-12-18 15:39:12 -08:00
4a170c0399
Merge pull request #1971 from SparkiDev/tls13_old_hello
...
Don't expect old ClientHello when version is TLS 1.3
2018-12-18 15:38:44 -08:00
f1c62f191d
Merge pull request #1941 from ejohnstown/rekey
...
Server Side Secure Renegotiation
2018-12-18 15:38:16 -08:00
c41d02e72f
fix for Aarch32 aesgcm sanity checks
2018-12-18 10:35:53 -07:00
412966ed80
add -mstrict-align flag with armasm
2018-12-17 17:36:48 -07:00
443dbf251b
Fix to supply the X509 current_cert
in the verify callback with OPENSSL_EXTRA_X509_SMALL
defined or ./configure --enable-opensslextra=x509small
.
2018-12-17 13:02:14 -08:00
c478a2791a
Fix to disable the raw Hmac_UpdateFinal_CT
HMAC calculation for async crypt. Resolves issue using -v 2 -l ECDHE-RSA-AES128-SHA
with QAT.
2018-12-17 12:54:33 -08:00
cbbe63ec62
Added QAT SHA3 support. Fix for SHA512/SHA384 with QAT and Intel ASM enabled.
2018-12-17 12:54:33 -08:00
c23489e6ed
Added support for QAT RSA Key Generation.
2018-12-17 12:54:33 -08:00
b60918b8cd
Merge pull request #1982 from kaleb-himes/DGE_REPORT_MAINTENANCE
...
Address maintenance item: external test w/ static mem
2018-12-17 13:52:33 -07:00
15b6c39929
Updates based on Jacobs Feedback
2018-12-17 09:42:15 -07:00
502e3c2b6d
Address maintenance item: external test w/ static mem
2018-12-14 09:30:03 -07:00
249306f08c
Merge pull request #1978 from ejohnstown/dot-release
...
touch version for interstitial release
2018-12-13 10:27:41 -08:00
c628562ee7
Fix the Old ClientHello detection with TLS 1.3 with new state
...
Put the clientState into CLIENT_HELLO_RETRY (new state) when waiting for
second ClientHello.
Chrome sends change_cipher_spec message, for reasons of compatability,
which meets the requirements of the Old ClientHello detection when state
of client is NULL.
2018-12-13 17:06:00 +10:00
f90e5601ad
Fix TLS 1.2 and below ServerHello TLSX_Parse to pass in message type
2018-12-13 16:12:53 +10:00
3e326aba15
Merge pull request #1973 from SparkiDev/tls13_max_ticket_nonce_sz
...
Increase maximum ticket nonce size to 8
2018-12-12 15:00:57 -08:00
70cb4dcdb1
Merge pull request #1972 from SparkiDev/tls13_alpn
...
ALPN is returned in ServerHello even in TLS 1.3
2018-12-12 14:59:59 -08:00
fb68b3a450
Merge pull request #1970 from cconlon/yoctoinstall
...
Add Yocto Project / OpenEmbedded build instructions to INSTALL file
2018-12-12 14:53:44 -08:00
122114b840
Merge pull request #1969 from dgarske/atecc508a_fixes
...
Fixes for ATECC508A/ATECC608A and latest CryptoAuthLib
2018-12-12 14:53:12 -08:00
2ef8be2718
Merge pull request #1968 from dgarske/fixes_stm32cube_aes
...
Fixes for STM32 AES GCM crypto hardware acceleration
2018-12-12 14:52:35 -08:00
bdf447cec9
Merge pull request #1966 from cconlon/wctestbench
...
add define to use test/benchmark.h without path prefix
2018-12-12 14:50:32 -08:00
3f7ced3ed5
Merge pull request #1960 from SparkiDev/sp_rsavfy
...
Allow a very small build based on SHA-256 and RSA verify
2018-12-12 14:49:42 -08:00
f715d9179c
Add check for buffer size versus pad size in DoCertificateStatus()
2018-12-12 12:48:30 -08:00
8772b5dc51
Merge pull request #1976 from embhorn/test_fix
...
Fix failing nightly tests
2018-12-12 12:07:01 -08:00
eef48cd8a2
touch version for interstitial release
2018-12-12 11:49:32 -08:00
cbc8f4ce38
Fix failing nightly tests
2018-12-12 09:48:34 -06:00
d8adca91b3
Increase maximum ticket nonce size to 8
...
There is a TLS 1.3 server implementation that uses 8 bytes.
2018-12-12 09:56:05 +10:00
c7b0aac47a
Merge pull request #1964 from embhorn/codecov
...
Code coverage tests and fixes
2018-12-11 15:08:56 -08:00
195b995bc4
Fixes from review
2018-12-11 12:19:45 -06:00
dc104985c3
Fixes from review
2018-12-11 11:41:39 -06:00
59bfead3c8
Fixes from review
2018-12-11 11:30:13 -06:00
1c0fa6fb58
Code coverage tests and fixes - default config
2018-12-11 08:56:21 -06:00
c844b1c253
ALPN is returned in ServerHello when downgrading from TLS 1.3
...
TLS 1.3 Specification has extension returned in EncryptedExtensions.
2018-12-11 19:01:49 +10:00
a484749f4c
Merge pull request #1965 from ejohnstown/vx-mg-updates
...
VxWorks/Mongoose Updates
2018-12-10 15:56:33 -08:00
06d6b06928
add Yocto Project / OpenEmbedded build instructions to INSTALL file
2018-12-10 16:48:14 -07:00
a936c609f3
Fixes for ATECC508A/608A CryptoAuthLib demo.
2018-12-10 11:40:37 -08:00
7e0e512a5c
Minor build fixes for CryptoAuthLib with ATECC508A or ATECC608A.
2018-12-10 11:40:37 -08:00
6552455968
Minor improvements to the STM32 CubeMX AES-GCM logic.
2018-12-10 11:40:06 -08:00
c7ffdc8b0b
VxWorks Update
...
1. Replace the WOLFSSL_PTHREADS option for VxWorks builds, but comment it out.
2. Added a comment about using the pthreads wrappers for mutexes in VxWorks.
2018-12-10 11:28:32 -08:00
dc82beea4e
Mongoose Update
...
1. Add a couple more OpenSSL compatibility layer functions to the the HAVE_WEBSERVER option.
2018-12-10 11:28:32 -08:00
bc4150af2c
Mongoose Update
...
1. HAVE_WEBSERVER option turns on a couple more functions that MG is
using for client side authentication.
2. If using webserver, those functions return and error.
2018-12-10 11:28:32 -08:00
70d345eda0
VxWorks Update
...
1. Remove pthreads enable from VxWorks build.
2. Add mutex wrappers for native VxWorks mutex semaphores.
2018-12-10 11:28:32 -08:00
2208514c98
Merge pull request #1962 from dgarske/fix_fe25519_noavx2
...
Fix for Intel Speedups with no AVX2 (part 2)
2018-12-10 17:17:42 +10:00
fb41510f12
Fixup for compiling verify only inline for PPC using GCC
2018-12-10 11:52:10 +10:00
c122f6082f
Allow a very small build based on SHA-256 and RSA verify
2018-12-10 08:48:01 +10:00
e4f60dc894
Merge pull request #1967 from kojo1/ShadowGlobal
...
Shadowed global: min in misc.c
2018-12-08 09:20:56 -08:00
0a725f4d56
Fixes for AES with STM32 crypto hardware:
...
* Fixes to ensure the "const" input buffer is not modified for AES GCM calls with STM32 hardware crypto.
* Improvements to allow AES GCM hardware acceleration for inputs that are not a multiple of AES block size.
* Switched the wolfCrypt test for STM32_CRYPTO to use the standard AES GCM tests with 12-byte IV and less than 16-byte auth data.
* Fixes for building with the standard peripheral library.
* Fixes for building with `NO_AES_DECRYPT`.
`./configure --enable-debug --disable-shared --enable-cryptonly CFLAGS="-DNO_AES_DECRYPT"`
2018-12-07 17:23:38 -08:00
8f3b05dd33
Shadowed global: min in misc.c
2018-12-08 09:40:31 +09:00
43bc0233cb
Merge pull request #1963 from SparkiDev/ct_signed
...
GCC ARM compiler requires explicit signed declaration
2018-12-07 16:32:09 -08:00
d662291b3d
add define to use test/benchmark.h without path prefix
2018-12-07 10:27:51 -07:00
fe8080ce4a
GCC ARM compiler requires explicit signed declaration
2018-12-07 15:01:18 +10:00
0259178033
Merge pull request #1961 from kaleb-himes/ZD4553-MAINTENANCE
...
Test adjustments for testing with nginx in FIPS mode
2018-12-07 09:29:47 +10:00
14c43959f0
Fixes for Curve25519 FE math build error with Intel Speedups enabled and no AVX2. These changes should have been part of PR #1958 and were missed.
2018-12-06 12:40:06 -08:00
7048efb5fa
Test adjustments for testing with nginx in FIPS mode
2018-12-06 13:02:58 -07:00
6dfc723961
Merge pull request #1959 from SparkiDev/tls13_ems_down
...
Send EMS extension in ClientHello when downgradable from TLSv1.3
2018-12-06 07:42:55 -08:00
d6ebd2d832
Merge pull request #1950 from SparkiDev/rsa_unpad
...
Make RsaUnPad constant time when Block Type 2 message
2018-12-06 06:08:15 -08:00
f468e7f0b6
Merge pull request #1958 from dgarske/fix_fe25519_noavx2
...
Fix for Intel Speedups with no AVX2
2018-12-06 10:44:12 +10:00
1d5b99eecc
Send EMS extension in ClientHello when downgradable from TLSv1.3
2018-12-06 09:41:22 +10:00
8aa54e5453
Merge pull request #1956 from cconlon/selftestfix
...
CAVP selftest fix for wc_RsaPSS_CheckPadding_ex() in test.c
2018-12-06 09:12:59 +10:00
ab03f9291b
Make RsaUnPad constant time when Block Type 2 message
2018-12-06 08:36:49 +10:00
b145aab6b2
Server Side Renegotiation
...
1. Fix testing issue with a client using the SCSV cipher suite to indicate desire for renegotiation.
2. Add indication to both the server and client examples that the renegotiation was successful.
2018-12-05 13:08:24 -08:00
ec76ab7e42
Server Side Renegotiation
...
1. Add an extra guard check around a call to SendHelloRequest() in the case where server renegotiation is disabled.
2. Replaced an accidental deletion of an include of the misc.h header for no inline builds.
2018-12-05 13:08:24 -08:00
69436b6d41
Server Side Secure Renegotiation
...
1. Fix spelling typo in a comment.
2. Correct the server's check of its secure renegotiation extension.
2018-12-05 13:08:24 -08:00
0abf7c4997
Server Side Secure Renegotiation
...
1. Add the server side renegotiation flag to the secure renegotiation option.
2. Changed the AddEmptyNegotiationInfo so it doesn't create an extension, just adds a reply if SCR is enabled.
3. Fix the server's reaction to the client sending the SCR extension.
2018-12-05 13:08:24 -08:00
175c91ab4e
Server Side Secure Renegotiation
...
1. Fix an incorrect function entry log string.
2. Restart the server's accept state assuming the client hello was
received when the client initiates renegotiation.
2018-12-05 13:08:24 -08:00
d168d60ade
Server Side Secure Renegotiation
...
1. Add enables to the example server for turning on secure renegotiation.
2. Add encryption assists to the handhshake message handler functions.
3. Add a hello request message function. Includes handshake timing pre/postambles.
2018-12-05 13:08:24 -08:00
8355dd29cb
Fix for Curve25519 FE math build error with Intel Speedups enabled and no AVX2. Fixes to allow forcing NO_AVX2_SUPPORT
. Reproducible with ./configure --enable-curve25519 --enable-ed25519 --enable-intelasm CFLAGS="-DNO_AVX2_SUPPORT"
.
2018-12-05 13:04:30 -08:00
74eadf556e
Merge pull request #1946 from ejohnstown/dh-speedup
...
DHE Speed Up
2018-12-05 12:22:21 -08:00
dfcfbc885d
Merge pull request #1955 from JacobBarthelmeh/Testing
...
add mynewt_port.c to make dist
2018-12-05 10:39:02 -08:00
ac0f71f4c4
Merge pull request #1954 from JacobBarthelmeh/DH
...
remove restriction on max key size with wolfSSL_DH_generate_key
2018-12-05 10:38:31 -08:00
cc93c43a52
Merge pull request #1953 from dgarske/qat2
...
Fixes for building with the latest QuickAssist v1.7 driver
2018-12-05 10:37:45 -08:00
68e1091627
Merge pull request #1952 from cconlon/cmstestfix
...
Fix for PKCS7 unit test with AES disabled
2018-12-05 10:36:52 -08:00
ecdb27289c
Merge pull request #1951 from ejohnstown/ios-bench-touchup
...
Touch Up iOS Project
2018-12-05 08:08:39 -08:00
f4831b9fbb
add mynewt_port.c to make dist
2018-12-04 16:45:30 -07:00
188a15428d
Touch Up iOS Project
...
1. Remove the file async.c from the iOS Benchmark project.
2. Update the organization name in the Benchmark project to "wolfSSL Inc".
3. In the workspace project, change the path to the wolfSSL test to be a local relative path rather than an absolute path.
4. In the workspace project, remove the benchmark project and re-add it. It becomes a local relative reference with the correct name.
2018-12-04 15:29:41 -08:00
d90e66da80
remove restriction on max key size with wolfSSL_DH_generate_key
2018-12-04 16:20:31 -07:00
60a424d4e9
CAVP selftest fix for wc_RsaPSS_CheckPadding_ex() in test.c
2018-12-04 15:19:08 -08:00
ec1bd3951e
Fixes for building with the latest QuickAssist v1.7 driver:
...
* Updated `--with-intelqa=` to support detection of QAT driver version and use different .so libs.
* Added include and lib reference for new libusdm.
* Added `QAT_ENABLE_RNG` option.
* Fix for dynamic type spelling error (`DYNAMIC_TYPE_SYMETRIC_KEY` -> `DYNAMIC_TYPE_SYMMETRIC_KEY`).
* Fix benchmark output to use "took" not "tooks".
2018-12-04 12:54:11 -08:00
a47e08c49e
DHE Speed Up
...
1. Add missing "-2" flags to the last line of most of the test conf files.
2018-12-04 12:04:12 -08:00
6254062438
Merge pull request #1948 from dgarske/fix_fips
...
Fix missing fips.h error
2018-12-04 11:32:37 -08:00
fa0b4cd2d5
DHE Speed Up
...
1. Modify all the test configuration files to disable the DHE prime test.
2. Add a test configuration that tests three cipher suites with the DHE prime test enabled.
2018-12-03 15:15:30 -08:00
a55f11cdd8
DHE Speed Up
...
1. Also apply the setting to the client side.
2. Updated the server and client command line options to use "-2" for disabling the DHE check.
2018-12-03 13:56:14 -08:00
4995051081
Merge pull request #1947 from miyazakh/fix_uninitialize_vars
...
Fixed uninitialized vars
2018-12-03 11:16:42 -08:00
9bda19fd25
fix for PKCS7 KEKRI array bounds check warning on gcc 8.2.0
2018-12-03 11:15:33 -08:00
28dc1cbb67
fix unit test for PKCS#7 with AES disabled
2018-12-03 12:00:04 -07:00
f74fb84337
Touch Up iOS Project
...
1. Fix iOS Benchmark reference to the async.c file.
2. Fix iOS Benchmark reference to the sp.c file. Changed to spr_c64.c.
3. Removed misc.c from iOS Benchmark as it is using inlined misc.h.
4. Added define of HAVE___UINT128_T to the user_settings.h so the
benchmark would build.
5. Wrapped the benchmark usage strings in NO_MAIN_DRIVER.
2018-12-03 10:38:56 -08:00
ea769bcf38
Fixed uninitialized vars
2018-12-01 10:13:00 +09:00
bdfa0e1745
Reapplying fix from PR #1423 . Fixes issue #1415 (again).
2018-11-30 14:32:55 -08:00
564a1ee499
Make the skip DH test flag build-conditional.
2018-11-30 09:19:11 -08:00
34d8437a2e
Merge pull request #1944 from ejohnstown/ios-touchup
...
Touch Up iOS Project for FIPS
2018-11-30 08:57:54 -08:00
ff1a1dc5d5
DHE Speed Up
...
When loading DH domain parameters into a CTX, test the prime
immediately. When loading them into a session, test the prime right
before using it during the handshake. Sessions that get their prime from
their context do not need to test their prime. Added a function to
disable testing the prime in a session. The goal is to speed up testing
as every single test case loads DH parameters whether they are used or
not.
2018-11-29 17:04:04 -08:00
a8e21d1c09
Changed tabs to spaces to be consistent with the project's convention
2018-11-29 23:29:18 +02:00
938e9ad7be
Fixed some OpenSSL compatibility issues in wolfSSL_EVP_BytesToKey
...
Fixed wrong error checks, changed return value to the size of the derived key, added support for the case where data == NULL and removed the assignment of constant value to info->ivSz (the correct value is assigned to it inside 'wc_EncryptedInfoGet')
2018-11-29 23:19:23 +02:00
2c48553a29
Merge pull request #1936 from kojo1/multi-byte
...
NO_MULTIBYTE option
2018-11-29 13:16:10 -08:00
bea93e9159
Merge pull request #1943 from abrahamsonn/doxygen-update
...
Doxygen update
2018-11-29 13:06:21 -08:00
af0bb278a1
Touch Up iOS Project
...
1. Updated a config item regarding the order of searching headers to the current recommendation from Apple.
2. Added the define flag CYASSL_USER_SETTINGS to the FIPS project so the user settings are loaded into the FIPS files.
2018-11-29 12:46:39 -08:00
48252524dc
Merge branch 'master' of https://github.com/wolfssl/wolfssl into doxygen-update
2018-11-29 10:16:33 -07:00
1b5ac2ea8d
Updated an API's documented return codes
...
Added ASN_BEFORE_DATE_E and ASN_AFTER_DATE_E to
wolfSSL_CTX_load_verify_locations
2018-11-29 10:03:38 -07:00
bbea4aba59
IAR EWARM
2018-11-29 07:21:56 +09:00
a203cd4901
NO_MULTIBYTE to NO_MULTIBYTE_PRINT
2018-11-29 07:04:01 +09:00
95c6c0df28
Updated doxygen with some more API
...
Added new DH API function signatures/some descriptions
2018-11-28 15:03:01 -07:00
0e94ae529c
Rollback stacing
2018-11-29 06:52:43 +09:00
a3d1ea20ff
updated page list to include PKCS#11 page
2018-11-28 14:49:42 -07:00
8c0a55d43b
Merge pull request #1939 from cconlon/selftestfix
...
exclude wolfSSL_EC_POINT_point2hex() in CAVP selftest build
2018-11-28 13:13:25 -08:00
424196cb03
Doxygen format updates
...
Updated the doxygen page list to include PKCS#11, and create the PKCS#11 page
2018-11-28 13:45:19 -07:00
c4919d191b
Added doxygen comment page
...
The new doxygen comment page (pkcs11.h) lets Doxygen know when running that
there are new API and that they will need a page created.
2018-11-28 13:36:00 -07:00
74b8c2795b
Merge branch 'master' of https://github.com/wolfssl/wolfssl into doxygen-update
2018-11-28 11:35:17 -07:00
70305758d4
Merge pull request #1942 from SparkiDev/asn_trad_fix
...
Return ToTraditional API to original signature
2018-11-28 08:08:26 -08:00
33db5babc9
Merge pull request #1940 from SparkiDev/pkcs11_cast
...
Fix for clang - cast down
2018-11-28 08:06:28 -08:00
2827ef6a57
Merge pull request #1938 from SparkiDev/tls13_ext
...
Check for TLS 1.3 version in the method for extenstions.
2018-11-28 08:05:42 -08:00
814e45a12b
Merge pull request #1925 from kaleb-himes/ZD4486-XCODE
...
i386 arch lacks registers to support some tfm assembly without correct CFLAGS
2018-11-28 08:04:09 -08:00
310ffd0045
Check for TLS 1.3 version in the method for extenstions.
...
During parsing of ClientHello, ServerHello and HelloRetryRequest, the
SSL object version may not be set to the negotiated version.
2018-11-28 14:59:43 +10:00
918c769284
Return ToTraditional API to original signature
2018-11-28 12:27:57 +10:00
1a518c6c46
Fix for clang - cast down
2018-11-28 08:49:33 +10:00
6ed462f564
Provide example of appropriate CFLAGS for exposing registers on i386 required for inline assembly in tfm.c
2018-11-27 15:22:42 -07:00
11810160b4
Merge pull request #1937 from tmael/portingMicriumIII
...
Micrium uC/OS-III port (updated readme & user_settings)
2018-11-27 11:08:53 -08:00
a5e3b18252
exclude wolfSSL_EC_POINT_point2hex() in CAVP selftest build
2018-11-27 09:12:55 -08:00
216b2bf3fe
rerun benchmark tests
2018-11-26 18:17:10 -08:00
3cee583f8d
NO_MULTIBYTE option in RTE/wolfssl/user_settings.h
2018-11-27 07:26:19 +09:00
55bbffe3c6
Merge pull request #1932 from dgarske/maxfrag_reconf
...
Post-handshake max fragment size adjustment
2018-11-26 13:27:26 -08:00
3afa9a3886
Merge pull request #1929 from ejohnstown/sniffer
...
Sniffer Updates
2018-11-26 13:24:31 -08:00
4afa0f72fe
Merge pull request #1926 from cconlon/cms2
...
CMS expansion, SignedData detached signature support
2018-11-26 13:22:26 -08:00
c529e011a7
NO_MULTIBYTE for multibyte non-supported IDEs
2018-11-26 08:11:31 +09:00
d51d8d86b5
update readme
2018-11-21 12:08:54 -08:00
96b4ddad82
Sniffer Update
...
1. Collect the SSL Info capture into its own function.
2. Add a Trace function for the SSL Info.
3. When copying the IANA name for the cipher suite, use a strncpy
instead of a memcpy and cap the copy at the length of the destination.
Force a null terminator at the end of the destination, just in case.
4. Modify the snifftest to collect the SSL Info.
2018-11-21 11:29:28 -08:00
7a24d4e46f
Adds new WOLFSSL_ALLOW_MAX_FRAGMENT_ADJUST
macro around non-standard feature. This allows for adjustment of the maximum fragment size post handshake.
2018-11-21 10:30:24 -08:00
4bf61a81e4
Merge pull request #1930 from tmael/portingMicriumIII
...
Micrium uC/OS-III port
2018-11-21 10:29:17 -08:00
f87c327fae
Merge pull request #1933 from SparkiDev/tls13_ems
...
No Extended Master Secret in ServerHello if protocol TLSv1.3
2018-11-21 10:25:59 -08:00
f11809aa62
Merge pull request #1923 from JacobBarthelmeh/Testing
...
cast to resolve warning, check size of time_t, and check for null tes…
2018-11-21 10:17:23 -08:00
73dbd15b2b
Merge pull request #1896 from SparkiDev/openssl_extra2
...
More OpenSSL API support
2018-11-21 10:16:37 -08:00
09141d479e
store CMS detached variable when using streaming API
2018-11-21 10:12:36 -08:00
1244212d41
Merge pull request #1921 from miyazakh/Espressif_port_Phase1
...
Porting wolfssl into ESP-IDF development framework
2018-11-21 08:16:56 -08:00
101966329e
add readme doc
2018-11-20 22:56:04 -08:00
da71d7243e
adding new files for make dist
2018-11-20 18:40:25 -08:00
5156641f2b
No Extended Master Secret in ServerHello if protocol TLSv1.3
2018-11-20 08:38:14 +10:00
95bd340de5
Add support for more OpenSSL APIs
...
Add support for PEM_read and PEM_write
Add OpenSSL PKCS#7 signed data support
Add OpenSSL PKCS#8 Private key APIs
Add X509_REQ OpenSSL APIs
2018-11-20 07:54:24 +10:00
e81436ffe9
Add support for altering the max-fragment size post-handshake using existing API wolfSSL_UseMaxFragment
.
2018-11-19 13:26:48 -08:00
b05782a5c9
use static const
2018-11-19 09:13:09 -08:00
3a033cae8c
Add standard GPLv2 header
2018-11-19 08:59:48 -08:00
7ac8acff09
fix IAR EWARM Error[Pe028]: expression must have a constant value
2018-11-19 00:19:58 -08:00
2ad6ce351b
add micrium current_time and use correct serial function
2018-11-18 23:44:20 -08:00
061757c909
remove WOLFSSL_TYPES, add defines in user settings
2018-11-18 23:44:20 -08:00
11ccce809d
fix formatting, converted tabs to spaces
2018-11-18 23:44:20 -08:00
ac8c4adc06
port to uC/OS-III
...
remove uC/OS-III eclipse project files
Adding wolfSSL client example for uC/TCP-IP with WinPcap running on Win7
Cleaned up user_settings and client example code
wolfSSL server example for uCOS-III/TCP-IP
Fixed typo and formating
Removed comments from user settings
serial (UART) interface isn't available on all targets
Updated to use PEM certs
add XSNPRINTF snprintf
define tx msg and size for clarity
2018-11-18 23:44:20 -08:00
bc09f4bd30
Porting wolfssl into ESP-IDF development framework
2018-11-17 09:36:09 +09:00
3599798aac
Move a variable declaration to the start of a block instead of in the
...
middle.
2018-11-16 15:54:19 -08:00
6ee60bbb49
Sniffer Update
...
1. Adds a new function ssl_DecodePacketWithSessionInfo() that returns a
copy of the TLS session info (version and suite ID) for the packet that
is decoded.
2. Adds a new function DecodePacketInternal() that does the same work as
the old DecodePacket() with the additional Session Info behavior.
3. Both DecodePacket public functions call the internal version.
2018-11-16 15:00:06 -08:00
d2989d9f43
Sniffer Fix
...
Drop a handshake message if it is split across TLS records. The likely
messages dropped are certificate and certificate request, which are
ignored by the sniffer.
2018-11-16 15:00:06 -08:00
e756c5ffc9
use devId variable in test.c for PKCS7 examples
2018-11-16 15:54:32 -07:00
4295db218a
add CMS SignedData support for detached signatures
2018-11-16 15:54:32 -07:00
7f76af0b36
Merge pull request #1927 from JacobBarthelmeh/AES
...
additional macro guards for disabling aescbc with opensslextra
2018-11-16 15:53:04 -07:00
ee30b2b476
better name for time_t size macro guard
2018-11-16 15:51:38 -07:00
ae1b1d777a
compile out aescbc function declarations when off
2018-11-15 14:08:40 -07:00
c307fd7af4
additional macro guards for disabling aescbc with opensslextra
2018-11-15 13:40:04 -07:00
8399a7a517
i386 arch lacks registers to support some tfm assembly, detect and disable
2018-11-15 09:52:20 -07:00
c592a1d6cb
Merge pull request #1924 from dgarske/fix_fipscheck
...
Fix to resolve issue with fips_check.sh
2018-11-14 09:05:20 -07:00
ed79aa1dc5
Fix to resolve issue with fips_check.sh after --depth=1 change in PR #1920 . Fixes Jenkins report error: pathspec 'v3.6.0' did not match any file(s) known to git
.
2018-11-13 06:30:05 -08:00
0f4a06594e
cast to resolve warning, check size of time_t, and check for null test case
2018-11-12 16:02:33 -07:00
8689cc6a04
Merge pull request #1922 from SparkiDev/tls_pad_fix
...
Fix for checking of TLS padding when padding byte value > msg len
2018-11-12 13:20:35 -08:00
2503a4c0de
Merge pull request #1920 from dgarske/check_speedup
...
Various script improvements for git clone calls
2018-11-12 13:17:14 -08:00
0452594cf7
Merge pull request #1905 from SparkiDev/sp_thumb
...
Single Precision: ARM Thumb assembly implementation
2018-11-12 13:16:11 -08:00
254b0f665b
Merge pull request #1918 from dgarske/async_rel_v3.15.5
...
wolfSSL Async Release v3.15.5 Fixes
2018-11-12 11:22:55 -08:00
61c7be669b
Fix for checking of TLS padding when padding byte value > msg len
2018-11-12 17:37:34 +10:00
533f4a5c77
Speedups for the git clone
calls in check scripts to use --depth 1
.
...
```
BEFORE CHANGE:
time ./fips-check.sh windows keep
Receiving objects: 100% (18408/18408), 12.61 MiB | 625.00 KiB/s, done.
Receiving objects: 100% (7045/7045), 110.48 MiB | 488.00 KiB/s, done.
real 5m4.604s
user 1m38.039s
sys 0m25.984s
AFTER CHANGE:
time ./fips-check.sh windows keep
Receiving objects: 100% (642/642), 1.02 MiB | 1.26 MiB/s, done.
Receiving objects: 100% (767/767), 24.15 MiB | 487.00 KiB/s, done.
real 1m43.194s
user 1m34.100s
sys 0m24.046s
```
2018-11-09 09:36:41 -08:00
ba8d1962c7
Fix for test case wc_AesInit
with bad argument. Adds bad arg check for API in FIPS mode.
2018-11-09 09:26:01 -08:00
9f6167872f
Fixes for additional use of unititlized variable with async for AES and DH.
2018-11-08 15:56:51 -08:00
b3d5999be9
Fix for unused variables with --disable-rsa --enable-tls13
case in InitSuites
.
2018-11-08 15:54:06 -08:00
d5dddd2b29
Fix for unused useSupCurve
in example client with --disable-ecc.
2018-11-08 15:43:18 -08:00
e9a10e3614
Scan-build fix for possible case where r and s aren't initalized for wc_ecc_verify_hash.
2018-11-08 15:40:06 -08:00
fcb40570e2
Fixes for warnings with possible use of uninitialized variable in async with DES3 and AES.
2018-11-08 15:39:52 -08:00
da76fb6861
Fixes for warning about possible uninitialized use of asyncDev for wc_Gmac
and wc_GmacVerify
.
2018-11-08 13:43:13 -08:00
39506e61d1
Merge pull request #1916 from JacobBarthelmeh/Release
...
Prepare for release v3.15.5
2018-11-08 12:59:05 -08:00
4a88626500
Merge pull request #1917 from SparkiDev/sp_def
...
Fix define to use letter S instead of 5
2018-11-08 10:39:52 -08:00
078db9e445
fix for nightly cavp test
2018-11-08 09:25:10 -07:00
cd37e3967c
prepare for release 3.15.5
2018-11-07 16:08:29 -07:00
94c75aa3ed
Fix define to use letter S instead of 5
2018-11-08 08:25:29 +10:00
2468a19c82
static analysis fix on non default build and g++ warning
2018-11-07 14:50:07 -07:00
6e4ab91ccf
Merge pull request #1915 from JacobBarthelmeh/Testing
...
fix side init for set connect/accept functions
2018-11-07 09:24:44 -08:00
196791390b
Merge pull request #1911 from kaleb-himes/CRYPT_LOGIC_UPDATES-R2
...
Fix pre-processor checks in wolfCrypt test for unique configuration
2018-11-07 10:22:03 -07:00
5a53048e8f
Merge pull request #1914 from kaleb-himes/FIX_x_OPT_SERVER
...
Fix -x option in server to continue in event of error (R)
2018-11-07 10:11:27 -07:00
f7f6506a54
Merge pull request #1898 from cconlon/cmsupdates
...
wolfCrypt PKCS#7/CMS Expansion
2018-11-07 08:36:02 -08:00
24e2a2b228
Merge pull request #1912 from dgarske/fix_BN_bn2hex
...
Fixes for compatibility function `BN_bn2hex`
2018-11-07 08:35:15 -08:00
100bf76748
sanity check on length befor checking ASN.1 tag
2018-11-06 18:35:13 -08:00
27db083733
make degenerate test structure dynamic to set the uninitialized dynamic flag
2018-11-06 18:35:13 -08:00
820ee0439a
handle degenerate case after rebase
2018-11-06 18:35:13 -08:00
9fa4f754ab
fix PKCS7/CMS conditional build errors
2018-11-06 18:35:13 -08:00
a2b2ce124e
add a check to help out static analysis tool
2018-11-06 18:35:13 -08:00
afbf09b970
fix for building with clang
2018-11-06 18:35:13 -08:00
773a81ef6a
CMS fixes for building with NO_ASN_TIME
2018-11-06 18:35:13 -08:00
448f91b56d
fixes after more fuzz testing
2018-11-06 18:35:13 -08:00
cc32466603
build fix for test.c when disabling CMS EncryptedData content type
2018-11-06 18:35:13 -08:00
9bef9bad8e
PKCS7/CMS build fixes when disabling individual AES sizes
2018-11-06 18:35:13 -08:00
4d9375b862
PKCS7/CMS build fixes when disabling AES
2018-11-06 18:35:13 -08:00
004b0d3793
PKCS7/CMS build fixes when disabling RSA, ECC, or AES-GCM/CCM
2018-11-06 18:35:12 -08:00
867bcb4545
small stack memory management
2018-11-06 18:35:12 -08:00
77a1dafed0
fix for fall through with gcc-7
2018-11-06 18:35:12 -08:00
62a2847d75
make internal stream buffer dynamic
...
formating and build without stream api
2018-11-06 18:35:12 -08:00
048a7f4c57
fix for memory leak after resetting stream state
2018-11-06 18:35:12 -08:00
5a59fdd6fd
scan-build warnings
2018-11-06 18:35:12 -08:00
b3506c836c
remove content type restriction and fix build with compkey
2018-11-06 18:35:12 -08:00
98efc1e9de
testing with verify signed stream function
2018-11-06 18:35:12 -08:00
752259e343
first addition of decode enveloped stream
2018-11-06 18:35:12 -08:00
5525f59852
first addition of verify sign stream data
2018-11-06 18:35:12 -08:00
47303ed445
fix decryption of EnvelopedData PWRI KEK size
2018-11-06 18:35:12 -08:00
b4d02d6d99
fix setting and checking CMS EnvelopedData version
2018-11-06 18:35:12 -08:00
b0e4cb3572
valgrind testing
2018-11-06 18:35:12 -08:00
5d8f59d83b
initial AuthEnvelopedData stream and add debug messages
2018-11-06 18:35:12 -08:00
d69a3c1092
add single-shot API for generating CMS Signed Encrypted Compressed FirmwarePkgData
2018-11-06 18:35:12 -08:00
c9f75fe7b4
add test cases for CMS Signed-Encrypted and Signed-Compressed FirmwarePkgData to test.c
2018-11-06 18:35:12 -08:00
175e32b468
add single-shot API for generating CMS Signed Compressed FirmwarePkgData
2018-11-06 18:35:12 -08:00
ed7cd54a91
add single-shot API for generating CMS Signed Encrypted FirmwarePkgData
2018-11-06 18:35:12 -08:00
cc05c46318
add single-shot API for generating CMS Signed FirmwarePkgData
2018-11-06 18:35:12 -08:00
2cc89936e3
add semicolon after FALL_THROUGH
2018-11-06 18:35:12 -08:00
02df920269
use fall through and update api tests to use wc_PKCS7_New
2018-11-06 18:35:12 -08:00
83a150c4df
stream of PKCS7 decode encrypted
2018-11-06 18:35:12 -08:00
40ef246b1f
add CMS AuthEnvelopedData support for unauthAttrs
2018-11-06 18:35:12 -08:00
4315384051
update test.c error returns for PKCS7
2018-11-06 18:35:12 -08:00
06a6f8400b
add CMS AuthEnvelopedData support for authAttrs
2018-11-06 18:35:12 -08:00
bc94cdc11b
add CMS AuthEnvelopedData content type support
2018-11-06 18:35:12 -08:00
a4da14f4b0
allow CMS CompressedData to be disabled with NO_PKCS7_COMPRESSED_DATA
2018-11-06 18:35:12 -08:00
75349bbba5
add support for SubjectKeyIdentifier to KTRI CMS RecipientInfo types
2018-11-06 18:35:12 -08:00
794137c20c
add CMS EnvelopedData OtherRecipientInfo support
2018-11-06 18:35:12 -08:00
85e0c203ea
ignore pkcs7 test files
2018-11-06 18:35:12 -08:00
0b3930e24f
save and set PKCS7 isDynamic flag in wc_PKCS7_Init
2018-11-06 18:35:12 -08:00
13b30a6a21
add CMS EnvelopedData PasswordRecipientInfo support
2018-11-06 18:35:12 -08:00
dbb5bb7570
add CMS EnvelopedData KEKRecipientInfo support
2018-11-06 18:35:12 -08:00
ec07fe492e
misc CMS fixes from review and valgrind
2018-11-06 18:35:11 -08:00
1f8c4c2613
merge CMS changes with master
2018-11-06 18:35:11 -08:00
7841434744
add support for multiple certificates in CMS SignedData certificates field
2018-11-06 18:35:11 -08:00
897c6b455f
move CMS signed attribute OIDs into BuildSignedAttributes()
2018-11-06 18:35:11 -08:00
a25a637270
add CMS signingTime attribute support for SignedData
2018-11-06 18:35:11 -08:00
56f1b68442
use SetContentType() to set SignedData content type
2018-11-06 18:35:11 -08:00
ce1381dc9a
add contentType check to CMS compressed tests
2018-11-06 18:35:11 -08:00
6a06a3b63b
add CMS CompressedData test using FirmwarePkgData
2018-11-06 18:35:11 -08:00
c51cf4472e
add support for CMS CompressedData content type
2018-11-06 18:35:11 -08:00
32b70dd56c
add support for FirmwarePkgData in CMS SignedData EncapsulatedContentInfo
2018-11-06 18:35:11 -08:00
2a60fbd766
add support for SubjectKeyIdentifier in CMS SignedData SignerInfo
2018-11-06 18:35:11 -08:00
70ca95b357
add support for custom contentType with CMS SignedData type
2018-11-06 18:35:11 -08:00
bdf07e64cf
Merge pull request #1901 from dgarske/rsa_nonblock
...
Added RSA non-blocking support
2018-11-06 16:39:43 -08:00
5d8f4351ff
Merge pull request #1903 from dgarske/dhkeycheck
...
Speed improvements for DH public key prime checking
2018-11-06 16:35:27 -08:00
7a2a66743b
fix side init for set connect/accept functions
2018-11-06 16:48:06 -07:00
bc2bb78010
Fix -x option in server to continue in event of error (R)
2018-11-06 14:09:46 -07:00
144ff68cfb
Merge pull request #1882 from SparkiDev/pkcs11_lib
...
Improvements for PKCS#11 library
2018-11-06 08:53:57 -08:00
2c7ff56a3e
Merge pull request #1907 from JacobBarthelmeh/Testing
...
infer and g++ build fixes
2018-11-06 08:48:28 -08:00
95092696bf
Fix to make sure mp_toradix
and mp_radix_size
are included for OPENSSL_EXTRA
.
2018-11-06 08:38:47 -08:00
efb1efcc0d
Fixes and additional tests for compatibility function BN_bn2hex
. In the DEBUG_WOLFSSL case it was returning a (char*)""
, which was trying to be free'd. We cannot return const char*
here, since its assumed to be an allocated pointer. Fix the dynamic type for XMALLOC/XFREE to match, since OPENSSL_free
is used to free returned value. Fix to add room for null term. Added missing API unit test for BN_print_fp
. Exposed these functions for OPENSSL_EXTRA
.
2018-11-06 05:55:25 -08:00
1a4533f166
Merge pull request #1910 from embhorn/zd4324
...
Handle incomplete shutdown
2018-11-06 05:19:58 -08:00
ee00852509
Merge pull request #1909 from ejohnstown/filedist
...
Added the resource.h and wolfssl.rc to the list of EXTRA_DIST files.
2018-11-05 14:40:04 -07:00
d61ae3a02a
Handle incomplete shutdown
2018-11-05 10:30:48 -06:00
92d6dc36af
Fix pre-processor checks in wolfCrypt test for unique configuration
2018-11-02 15:22:11 -06:00
c1ca1f1b78
Remove DH prime check on selftest/fips builds.
2018-11-02 12:55:07 -07:00
6372c3d6e1
* Added RSA non-blocking support enabled with WC_RSA_NONBLOCK
. Adds new wc_RsaSetNonBlock
function for enabling / non-block context. Added wolfCrypt test function rsa_nb_test
to validate. Result is: RSA non-block sign: 8200 times
and RSA non-block verify: 264 times
...
* Signature wrapper improvements to eliminate mallocs/frees unless small stack is used. If small stack is used only one allocation is done based on actual max (was previously was allocating too much and in the encoding case was reallocating a second buffer).
2018-11-02 12:41:23 -07:00
98291f8465
Update comment in dh.c.
2018-11-02 11:38:52 -07:00
1261247e2a
Added the resource.h and wolfssl.rc to the list of EXTRA_DIST files.
2018-11-02 11:30:29 -07:00
cfafbd9659
Added the prime check to the functions wolfSSL_SetTmpDh() and wolfSSL_CTX_SetTmpDh().
2018-11-02 11:01:39 -07:00
1ffc1108a6
Merge pull request #1906 from cconlon/selftest-fixes
...
fixes for CAVP selftest build errors
2018-11-01 11:31:39 -06:00
a953a3141e
infer and g++ build fixes
2018-11-01 09:59:35 -06:00
81650d6cef
Fix for subtract
...
Added cortex-m support using umull for faster implementation.
2018-11-01 15:21:51 +10:00
2b3b19d1c8
Merge pull request #1904 from JacobBarthelmeh/PKCS7
...
add test for degenerate case and allow degenerate case by default
2018-11-01 08:36:15 +10:00
6dd4fba888
fix for clang warning
2018-10-30 17:41:03 -06:00
cc3ccbaf0c
add test for degenerate case and allow degenerate case by default
2018-10-30 17:04:33 -06:00
f6093e1e0d
Fixes to remove DH prime checks for server side DH parameters.
2018-10-30 15:51:47 -07:00
def7a91e70
fix CAVP selftest build errors
2018-10-30 16:35:45 -06:00
f4b0261ca7
Fix to not do prime test on DH key the server loaded. Now it will only do the prime test on the peer's provided public DH key using 8 miller rabbins. Refactored the fast math miller rabin function to reuse mp_int's, which improved peformance for mp_prime_is_prime_ex
from 100ms to 80ms. Normal math mp_prime_is_prime_ex
is ~40ms (as-is). Added test for wc_DhSetCheckKey
.
2018-10-30 11:20:07 -07:00
2c0edae96f
Merge pull request #1889 from kojo1/t4_demo
...
Renesas RX demo
2018-10-30 10:14:02 -06:00
ab458db504
Review comment changes
...
Add heap as a device initialization parameter.
Allocate slot info pointer wiht device heap pointer.
ForceZero user pin on token finalization.
Add comments to structure definitions.
2018-10-30 15:56:31 +10:00
b64c527138
added files under t4_demo to include.am
2018-10-30 13:18:58 +09:00
ba90674357
Merge pull request #1897 from WolfWalter/fix_sigrs_length
...
ATECC508 reference PK callback fix for signature length
2018-10-29 08:54:46 -07:00
ae07ba93ad
Merge pull request #1894 from dgarske/pk_keysize
...
Fixes for key size detection when using PK callbacks
2018-10-26 09:46:10 -07:00
d18c9cad61
Merge pull request #1895 from dgarske/test_384bit
...
Added ECC P-384 bit test certs and keys
2018-10-26 09:44:41 -07:00
a6adfd434d
Merge pull request #1893 from dgarske/ecdsa_hashalgo
...
New build option to match ECDSA hash algo digest size with ephemeral key size
2018-10-26 09:43:07 -07:00
a47eeec145
fixed sigRs length
...
atmel_ecc_sign and atmel_ecc_verify expect sigRS length to be 64 Byte (32 Byte each).
2018-10-26 16:43:03 +02:00
153c7cc684
Fix for unused variable in new fast-rsa function wc_RsaPublicKeyDecode_ex
.
2018-10-25 11:12:33 -07:00
3be7eacea9
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
d21603334b
Added build option USE_ECDSA_KEYSZ_HASH_ALGO
to alter the hash algorithm selection for ecc_dsa_sa_algo
. With this build option we try and choose a hash algorithm digest size that matches the ephemeral key size, if not found then will match on next highest. We've seen cases with some Windows based TLS client's where they do not properly support hashing a smaller ephemeral key with a larger hash digest size (such as P-256 key and SHA512 hash).
2018-10-25 09:19:35 -07:00
81651c351b
Added optional logging for example PK callbacks in test.h enabled with DEBUG_PK_CB
.
2018-10-25 09:15:34 -07:00
86758f9640
Fixes for key size detection when using PK callbacks (HSM) and no private key has been loaded (affects HAVE_PK_CALLBACKS
on server side only when no dummy private key is loaded). Fix for possible leak during ECC min key size failure with small stack. Added new API wc_RsaPublicKeyDecode_ex
for parsing an RSA public key for the modulus and exponent. Changed wolfSSL_CTX_SetTmpEC_DHE_Sz
to support a size == 0
for using the long-term private key's size. Changed ECDHE_SIZE
so it can be overridden and build-time. Added tests for wolfSSL_CTX_SetTmpEC_DHE_Sz
and wolfSSL_SetTmpEC_DHE_Sz
.
2018-10-25 09:15:23 -07:00
23445546c5
Merge pull request #1892 from dgarske/ecdhe_keysize
...
Fix for ephemeral key size selection
2018-10-25 07:27:20 -07:00
c4d6f886b7
Revert change from PR #1845 commit 24f9f12844
. This ensure the ephemeral key is P-256 or the overridden value determined by wolfSSL_CTX_SetTmpEC_DHE_Sz
and wolfSSL_SetTmpEC_DHE_Sz
. This restores previous behavior from last release.
2018-10-24 09:48:03 -07:00
0eb115e7a1
Merge pull request #1884 from kaleb-himes/ECC_DISABLED_TEST_FIX
...
Fixes to resolve skipped tests with ECC disabled
2018-10-24 09:30:47 -07:00
7586e1df42
Only do early data in initial handshake when using PSK
2018-10-24 09:47:30 +10:00
c173d72423
Merge pull request #1891 from SparkiDev/nginx-1.15.5
...
Add defines for latest nginx
2018-10-23 08:07:52 -07:00
ef8b564d2e
Add defines for latest nginx
2018-10-23 22:08:44 +10:00
22aa01a547
Merge pull request #1881 from SparkiDev/pkcs7_no_si
...
Return error when attempting to verify signed data without signers
2018-10-22 15:00:55 -07:00
878b5925fc
Merge pull request #1877 from dgarske/pkcs8_ec
...
Added support for ECC private key with PKCS8 encoding
2018-10-22 14:59:10 -07:00
42fecee77b
Merge pull request #1859 from SparkiDev/pkcs7-cons
...
Support constructed OCTET_STRING in PKCS#7 signed data
2018-10-22 14:52:50 -07:00
353f9018f5
Merge pull request #1890 from miyazakh/jamsg
...
Added Japanese message into the examples client and server
2018-10-22 13:44:11 -06:00
0b720c4412
Fixes for TLSv1.3 early data.
2018-10-22 11:35:40 -07:00
96abf43238
Merge pull request #1888 from MJSPollard/nidFIX
...
Fixed compilation issues with Asio, Websocket++, and HAProxy
2018-10-22 10:19:05 -06:00
6953677a8f
Keep the max line length to 80
2018-10-20 17:15:17 +09:00
a27b4c2efb
Added Japanese message into the examples client and server
2018-10-20 13:40:01 +09:00
7ce236f3af
Fix for new test_wolfSSL_PKCS8
changes to init/free the ecc_key.
2018-10-19 16:04:02 -07:00
dabeccca27
README_en
2018-10-20 07:59:22 +09:00
f2ef67446d
T4 demo
2018-10-20 07:21:52 +09:00
c268829b68
Fix bug with SendClientKeyExchange and ifdef logic for ecdhe_psk_kea
, which was preventing ECDHE-PSK
from working if HAVE_CURVE25519 was defined. Disabled broken downgrade test in test-tls13-down.conf (@SpariDev will need to investigate). Various spelling fixes.
2018-10-19 13:21:56 -07:00
fac6ce794d
Fix HAProxy redefinition warning
2018-10-19 12:14:57 -06:00
355184bc9b
added fix for failing asio and haproxy tests
2018-10-18 17:32:42 -06:00
4a4ae446aa
Fix for unit.test fails with -H verifyFail
.
2018-10-18 11:58:00 -07:00
84fb23cfab
Merge pull request #1880 from kojo1/NID
...
NID definitions are in asn.h
2018-10-18 09:48:20 -07:00
7551e49fed
Improvements for PKCS#11 library
2018-10-18 17:31:17 +10:00
67bb558025
Return error when attempting to verify signed data without signers
2018-10-18 13:44:13 +10:00
8a872891c5
NID_domainComponent is moved to asn.h
2018-10-18 09:28:15 +09:00
cdd8f6b950
Macro guard on cipher suite added - Thanks Jacob\!
2018-10-17 16:44:47 -06:00
dc519e6a45
When no cert specified using default, do not return failure in suite tests
2018-10-17 15:20:39 -06:00
095337b1cf
Merge pull request #1878 from kaleb-himes/TEST_COVERAGE_3
...
Test coverage 3
2018-10-17 13:47:10 -07:00
dcb105deff
Merge pull request #1876 from dgarske/max_frag_256
...
Added new 256-byte max fragment option `WOLFSSL_MFL_2_8`
2018-10-17 13:21:57 -07:00
8b529d3d57
Add test for ECC private key with PKCS 8 encoding (no crypt) and -----BEGIN EC PRIVATE KEY-----
header.
2018-10-17 10:01:29 -07:00
5ca822b1e9
Peer review changes requested
2018-10-17 10:46:45 -06:00
7391f4db90
Merge pull request #1815 from dgarske/atecc508_fixes
...
Fixes for ATECC508A
2018-10-17 08:35:09 -07:00
969098518f
Merge pull request #1873 from dgarske/fix_async_multi_rec
...
Fixes and improvements for wolfSSL asynchronous mode
2018-10-17 08:23:27 -07:00
2aa6f91144
Reset IV after update via call to encrypt
2018-10-16 18:31:16 -06:00
0d7d8f54e0
Added support for ECC private key with PKCS8 parsing. Fix is to attempt pkcs8 parse for -----BEGIN EC PRIVATE KEY-----
and if parse fails to treat as normal private key. ZD 4379.
2018-10-16 16:56:42 -07:00
d7d102d90a
Added cipher suite unit tests for max fragment options 1-6 for TLS v1.2 and DTLS v1.2. Fix for client usage comment for max fragment.
2018-10-16 16:47:24 -07:00
ab61cefa58
Fix max frag error case tests to use min/max.
2018-10-16 08:58:46 -07:00
4adaeb8585
Added new 256-byte max fragment option WOLFSSL_MFL_2_8
.
2018-10-15 17:06:21 -07:00
e53694b351
Fix for shared secret callback for client side, where it was not using the provided peer's public key. Fix for ATECC508A to put it into idle mode after operations to prevent watchdog fault mode (can be disabled by defining WOLFSSL_ATECC508A_NOIDLE
). Fixes for callbacks to support using software for non P-256 curves (can be disabled by defining WOLFSSL_ATECC508A_NOSOFTECC
).
2018-10-15 16:01:04 -07:00
bd57f5b385
Fix to resolve possible buffer overflow with atmel_get_rev_info
when using byte.
2018-10-15 14:17:43 -07:00
177bf49fa6
Updates to the atmel.c code to allow easier customization of the hardware interface.
2018-10-15 14:17:43 -07:00
bb737ec99d
Fixes for building against latest CryptoAuthLib. Refactor to eliminate the atcatls function calls, since these have been removed from latest CryptoAuthLib. Cleanup of the slot assignment handling.
2018-10-15 14:17:43 -07:00
d67cb9e875
Added new build option for Microchip CryptoAuthLib (--enable-cryptoauthlib). Build fixes with WOLFSSL_ATECC508A enabled.
2018-10-15 14:17:43 -07:00
ba9f21bad6
Improvements to the ATECC508A README.md.
2018-10-15 14:17:42 -07:00
c51c607e96
Fix to use inLen
for raw public key copy. No need to throw an error for other curve types as this function may be used for software only import/export. In the TLS case with only SECP256R1 there are other places where an error will be thrown.
2018-10-15 14:17:42 -07:00
53c2264327
Fix for checking the inLen when setting raw public key len for hardware. Finished the ATECC508A ECC functions to support native TLS with the WOLFSSL_ATECC508A option and SECP256R1. Added slot type for alloc/free. Added helper functions for setting the PK callbacks and custom content. Updated the README.md with build options. Added support for overriding the ATECC_MAX_SLOT. Added overridable define for encryption slot number ATECC_SLOT_I2C_ENC
. Added new build option WOLFSSL_ATECC_PKCB
for using just the reference PK callbacks.
2018-10-15 14:17:42 -07:00
7074625048
Added slot callbacks. Improvements for the Atmel time support. Fix to make sure read encryption key is cleared from stack buffer.
2018-10-15 14:17:42 -07:00
e78ddfce75
Fix for wc_ecc_import_x963_ex
to handle ATECC508A raw public key. Cleanup of the ATECC508A encryption key support. Added new macro ATCA_TLS_GET_ENC_KEY
to allow setting your own function at build-time for getting the encryption key.
2018-10-15 14:17:42 -07:00
be318abbc2
Fixes for building with WOLFSSL_ATECC508A
with latest atca.
2018-10-15 14:17:42 -07:00
7c3313481a
Fix for memory cleanup cases in MakeTlsMasterSecret
.
2018-10-15 13:22:55 -07:00
f7eb8bf080
Merge pull request #1874 from JacobBarthelmeh/HardwareAcc
...
fix for afalg header install and macro set
2018-10-15 11:51:10 -07:00
23ef832dd3
fix for afalg header install and macro set
2018-10-12 15:45:46 -06:00
a0608151cf
Fix for the WOLFSSL_NONBLOCK_OCSP
case to reset the error code as well.
2018-10-12 11:20:13 -07:00
5904a97378
Added comments in aes.c for locating software implementation of algorithm using Software AES
.
2018-10-12 10:48:26 -07:00
23a0f3cfa1
Added new WOLFSSL_SSLKEYLOGFILE
define to output master secret used by Wireshark logging to file. Defaults to sslkeylog.log
, but can be overridden using WOLFSSL_SSLKEYLOGFILE_OUTPUT
.
2018-10-12 10:47:30 -07:00
52210c9d16
Improved error trapping in BuildTlsHandshakeHash
, without altering timing.
2018-10-12 10:45:47 -07:00
fc77ed068c
Fix for verify callback to not report override when there is no error. Cleanup of the myVerify
example callback return code handling.
2018-10-12 10:45:20 -07:00
6fbeae8f11
Fixes for building with WC_ASYNC_NO_SHA256
. Improvements with WC_ASYNC_NO_HASH
or WC_ASYNC_ENABLE_ECC
to avoid unnecessary memory allocations.
2018-10-12 10:44:26 -07:00
fec726f10a
Fix for async issue with receiving multiple TLS records (server_key_exchange
and server_hello_done
) in same packet, which may miss call to DoHandShakeMsgType
-> HashInput
because ssl->error
is still marked pending WC_PENDING_E
.
2018-10-12 10:39:40 -07:00
45eb3ae72d
Merge pull request #1871 from miyazakh/work
...
Added Japanese messages that can be enabled by option switch
2018-10-12 10:54:59 -06:00
0b78b75530
Merge pull request #1860 from dgarske/tls_either_side
...
Methods cleanup and new DTLS "either" side methods
2018-10-12 07:35:17 -07:00
1a34b9da03
Added NO_RSA condition for build failure
2018-10-12 11:02:01 +09:00
19905b7798
Merge pull request #1872 from ejohnstown/ext-skip
...
Skip Server Supported Curve Extension
2018-10-11 17:47:08 -07:00
1fd791da21
Fix to check response code on InitSSL_Side
calls.
2018-10-11 15:50:22 -07:00
b404d4805f
Skip Server Supported Curve Extension
...
Added a build option, WOLFSSL_ALLOW_SERVER_SC_EXT, that skips the
client's parsing of the supported curve extension if sent by the
server for sessions using < TLSv1.3. The server doesn't need to send it
and the RFCs don't specify what should happen if it does in TLSv1.2, but
it is sent in response from one particular Java based TLS server.
2018-10-11 15:21:32 -07:00
63878f32ab
Fixed tests failures on jenkins
2018-10-11 21:43:39 +09:00
b736012214
Fixed disable Option Test on jenkins
2018-10-11 19:40:35 +09:00
e774bfcf60
Tweaked message in Usage
2018-10-11 18:06:02 +09:00
b4b180c1b9
Added Japanese messages that are enabled by option switch
2018-10-11 15:42:50 +09:00
9a0ecd4eb6
Merge pull request #1870 from tmael/AddressingCodeCoverage
...
Addressing code coverage
2018-10-10 14:46:32 -07:00
f9ff151ee7
wolfSSL_AES_cbc_encrypt unit test refactor, TODO: Decrypt
2018-10-10 16:16:57 -04:00
23797ab4cb
wolfSSL_AES_cbc_encrypt unit tests, TODO: Decrypt
2018-10-10 15:59:10 -04:00
5d047cc4d9
Added test_wc_curve25519_size to increase code coverage
2018-10-10 12:46:25 -07:00
8f1ad656c2
Improving code coverage
2018-10-09 16:13:26 -07:00
0293686990
Added example client/server support for loading certificate and private key into WOLFSSL object using -H loadSSL
. Added load_ssl_buffer
function to load buffers into WOLFSSL objects. Changed wolfSSL_get_SSL_CTX
API to always be exposed. Added TEST_LOAD_BUFFER
build option to use the load_buffer
and load_ssl_buffer
calls for example client/server.
2018-10-09 12:54:41 -07:00
7a3a314ece
Merge pull request #1868 from kaleb-himes/TEST_COVERAGE_2
...
Test coverage 2
2018-10-09 11:16:31 -07:00
355048230f
Merge pull request #1866 from dgarske/openssl_leak_fix
...
Fix leaks in compatibility functions `wolfSSL_X509_print` and `wolfSSL_i2d_RSAPublicKey`
2018-10-08 09:38:26 -07:00
7a02832547
Merge pull request #1849 from dgarske/asn_piv
...
Added ASN certificate PIV and GZIP support
2018-10-08 09:32:19 -07:00
c6e3e34ff7
Remove unused macro
2018-10-08 09:35:37 -06:00
1ed50a40e7
Fix for wolfSSL_i2d_RSAPublicKey
leak.
2018-10-05 14:09:12 -07:00
66420db07c
Initializing coverage for CRL APIs
2018-10-05 15:05:03 -06:00
93c85caec4
Merge pull request #1867 from miyazakh/work
...
fixed typo
2018-10-05 16:26:00 +09:00
67cab29d81
fixed typo
2018-10-04 21:02:22 -07:00
cec61ac3c9
Fix for leak in wolfSSL_X509_print
, where the RsaKey is not free'd. Cleanup of formatting.
2018-10-04 16:51:51 -07:00
1d7c4f96fa
Fix windows build warning with side data type mismatch.
2018-10-04 16:10:50 -07:00
319096e7e7
Fix indent for error case.
2018-10-04 16:07:35 -07:00
bbdb17975c
Adds build option WOLFSSL_EITHER_SIDE
for deferring the "side" of the TLS session until first connect or accept. Added the DTLS generic v1.0 and v1.2 methods for "either" side. Added "either" methods unit tests. Added "either" -v e support to example client/server. Fix to expose wolfSSL_use_certificate_file
and wolfSSL_use_PrivateKey_file
without OPENSSL_EXTRA
. Cleanup of the methods for (void)heap and log messages. Spelling fixes.
2018-10-04 15:47:50 -07:00
846ae06ae9
Merge pull request #1863 from tmael/mingw32Fix
...
Fixed MINGW32 build errors
2018-10-04 09:15:01 -07:00
0ec9b28402
Added GZIP compression tests. Added new wc_Compress_ex
API to support GZIP compression option.
2018-10-03 16:29:45 -07:00
08654ce71d
Start hitting up the stubs, more to come
2018-10-03 17:01:12 -06:00
f83ea9a9d5
Fixed MINGW32 build errors
2018-10-03 13:58:51 -07:00
d473fd38ab
Merge pull request #1861 from dgarske/coding_cleanup
...
Cleanup of the base64/base16 start hex values
2018-10-03 09:36:49 -07:00
c619bfebda
Add test for NIST PIV case.
2018-10-02 17:08:27 -07:00
f0350c1efb
Refactor of the wc_ParseCertPIV
to support detection of Identiv format header. Added flag to indicate Identiv type. Added wolfCrypt test for wc_ParseCertPIV
function with Identiv PIV template.
2018-10-02 17:01:56 -07:00
0c72dee315
Fixes for building with ./configure --enable-asn=nocrypt
. Added wolfCrypt test template for certpiv_test
, pending test PIV certs to use.
2018-10-02 15:18:57 -07:00
680a863054
Added support for building with certificate parsing only. ./configure --enable-asn=nocrypt
. Added new API for parsing PIV format certificates wc_ParseCertPIV
with WOLFSSL_CERT_PIV
build option. Added wc_DeCompress_ex
with ability to decompress GZIP. Moved the ZLIB error codes into wolfCrypt.
2018-10-02 15:18:56 -07:00
0829af7a05
Support constructed OCTET_STRING in PKCS#7 signed data
2018-10-03 07:51:37 +10:00
cfba86d3ab
Further cleanup of the Base64 and Base16 encoding start/min value.
2018-10-02 14:38:08 -07:00
be2f68d183
Cleanup of the base64 decode start hex 0x2b.
2018-10-02 08:33:45 -07:00
4ca7460735
Merge pull request #1856 from ejohnstown/version-indication
...
Windows DLL Version Resource
2018-10-01 12:51:38 -07:00
142111da3b
Merge pull request #1857 from kaleb-himes/MORE_TEST_COVERAGE
...
Add more coverage cases to unit tests
2018-10-01 12:19:12 -07:00
8f36a78a71
Exclude the version resource from the static library builds. It triggers a linker warning for Win32 builds and it isn't used in the static builds.
2018-10-01 10:37:45 -07:00
1f643800a6
Add more coverage cases to unit tests
2018-09-28 15:32:16 -06:00
05ca60a266
Add a version resource to the wolfSSL library for Visual Studio builds.
2018-09-28 11:46:22 -07:00
13bf2fc342
Merge pull request #1854 from dgarske/fix_ecdsa_sig_leak
...
Fix for leak with openssl compatibility API and normal math
2018-09-28 09:26:26 -06:00
f19f803098
Fix for possible leak with openssl comatibility API wolfSSL_d2i_ECDSA_SIG
when fast math is disabled.
2018-09-27 11:39:30 -07:00
6d18f58f81
Merge pull request #1848 from JacobBarthelmeh/Benchmark
...
changes to benchmark app
2018-09-26 15:10:20 -07:00
d30c45a79c
Merge pull request #1637 from ghoso/openssl_compat201805
...
OpenSSL Compatibility APIs 2018/06
2018-09-26 14:54:14 -06:00
5cd428eaa8
Merge pull request #1853 from dgarske/mp_add_d
...
Fixes for missing `mp_add_d`
2018-09-26 13:50:14 -06:00
fc81467715
Merge pull request #1851 from dgarske/lighttpd_fix
...
Lighttpd fixes
2018-09-26 13:24:16 -06:00
d0abc10fe9
update RSA keygen benchmark and test with asynccrypt
2018-09-26 13:10:05 -06:00
8ccd715f31
Merge branch 'master' into openssl_compat201805
2018-09-26 11:06:26 -06:00
441c0492f6
Fixes for missing mp_add_d
. Fix for IDE/GCC-ARM user_settings.h to remove redudant USE_FAST_MATH option.
2018-09-26 08:34:08 -07:00
6e629a51f8
Added test case for scenario where error is pushed, cleared then try to get current. Without fix to clear wc_current_node
in wc_ClearErrorNodes
this causes access to invalid/free'd memory.
2018-09-26 08:16:58 -07:00
3c828c0547
Merge pull request #1850 from ejohnstown/const
...
DecodedCert der to const
2018-09-26 07:52:19 -07:00
1bf7cad633
Fix for case where wc_ClearErrorNodes
is called, but then wc_PullErrorNode
is called and wc_current_node
is populated with invalid ->next pointer.
2018-09-25 16:13:13 -07:00
d7249068db
Fix for Lighttpd 1.4.49, which requires HAVE_EX_DATA
.
2018-09-25 15:14:57 -07:00
18a27cfe75
Changed the DecodedCert's der pointer to be a pointer to const. The
...
DecodedCert doesn't own the der value, so it should be const. Had to
make many other changes downstream of this.
2018-09-25 12:55:52 -07:00
52b5fe569b
restore PR#1819 to pass Jenkins tests.
2018-09-25 18:04:27 +09:00
ff5506faf2
define wolfSSL_OPENSSL_add_all_alogrithms_noconf alias for wolfSSL_OpenSSL_add_all_algorithms_noconf and some fixes
2018-09-25 15:39:56 +09:00
71863c462e
(void) for unused in NO_RSA case
2018-09-25 15:39:56 +09:00
dc06bb075d
moving and consoridating NID defines to enum in asn.h
2018-09-25 15:39:56 +09:00
01654dac1a
minor fix
2018-09-25 15:39:56 +09:00
cfa99c567b
merge PR #1820 Porting aid
2018-09-25 15:39:56 +09:00
ca9f62713d
fix test_wolfSSL_CTX_load_verify_locations() build error
2018-09-25 15:39:56 +09:00
cf5377ec5b
Revert "fix api.c error code to fit into"
...
This reverts commit 9eddc2ed3598dbede3c6a3aa1e0b50e111369d63.
2018-09-25 15:39:56 +09:00
921992e689
fix api.c error code to fit into
2018-09-25 15:39:55 +09:00
d9c0e1ddde
increase memory bucket size
2018-09-25 15:39:55 +09:00
c28e981b9b
avoid shadow
2018-09-25 15:39:55 +09:00
c7cfa74577
Fix some flaws caused by rebase
2018-09-25 15:39:55 +09:00
a189d00fc9
Refactor cs+ project
2018-09-25 15:39:55 +09:00
3c93d4e638
KEEP_STORE_CERTS release elimination, limited to FreeX509 in X509_STORE_CTX
2018-09-25 15:39:55 +09:00
226bc54b57
ctx->ourCert keeps duplicated x509
2018-09-25 15:39:55 +09:00
8a046b0bac
WOLFSSL_KEEP_STORE_CERTS for wolfSSL_X509_free
2018-09-25 15:39:55 +09:00
59beba6338
WOLFSSL_CIPHER_INTERNALNAME option
2018-09-25 15:39:55 +09:00
c3abb6c0cd
HAVE_HTTP_CLIENT is disabled if WOLFSSL_USER_IO is defined in wolfsssl/wolfio.h
2018-09-25 15:39:55 +09:00
93e1221894
WOLFSSL_KEEP_STORE_CERTS for X509_STOREmake
2018-09-25 15:39:55 +09:00
9ea88b5181
wc_PKCS12_free, EVP_PKEY_free for PKCS12 in test_wolfSSL_OBJ
2018-09-25 15:39:55 +09:00
89dcbd6693
set dynamic flag when wolfSSL_ASN1_OBJECT_new()
2018-09-25 15:39:55 +09:00
511b59cf73
set dynamic flag in ASN1_OBJECT_new
2018-09-25 15:39:55 +09:00
9ae3ccb3ba
OBJ_sn2nid with OPENSSL_EXTRA_X509_SMALL
2018-09-25 15:39:55 +09:00
094141b4ea
initiallizing asn1Name
2018-09-25 15:39:55 +09:00
7d2a03f8c9
OBJ_obj2nid memory leak
2018-09-25 15:39:55 +09:00
2669b80943
Fix crashed issue if you call X509_free() after X509_STOER_CTX_free()
2018-09-25 15:39:55 +09:00
5de7a34fd4
Add memory free to prevent from leaking
2018-09-25 15:39:55 +09:00
1c627430c7
increase wolfcrypt test program memory size along to WOLFSSL structure modificaiton.
...
rebase with master branch
2018-09-25 15:39:55 +09:00
1d1f4df8cb
Fix XBADFILE typo
2018-09-25 15:39:55 +09:00
7af43b6cf0
test_wolfSSL_OBJ with NO_DES3, NO_RSA
2018-09-25 15:39:55 +09:00
7767d802b7
arg_obj check has done before
2018-09-25 15:39:55 +09:00
c673884cbb
#ifdef HAVE_ECC to OBJ_nid2obj, and its test in api.c
2018-09-25 15:39:55 +09:00
4d03b55fef
XBADFILE in bio.c
2018-09-25 15:39:55 +09:00
fd634141bd
wolfSSL_get_rbio,wolfSSL_get_wbio.
...
fix to check XBADFILE in wolfSSL_BIO_write_file.
2018-09-25 15:39:55 +09:00
fd01659baa
Obj_obj2nid
2018-09-25 15:39:55 +09:00
19c1a3a3f9
Fix i2d_RSAPublicKey() memory leak issue.
2018-09-25 15:39:55 +09:00
3f993c280c
Change buffer variable name for preventing from conflict with debug option.
2018-09-25 15:39:54 +09:00
3f82fb62a0
SSL_get_peer_cert_chain() count value check in api.c
2018-09-25 15:39:54 +09:00
259d3b5720
WOLFSSL_USER_FILESYSTEM option
2018-09-25 15:39:54 +09:00
1e87eae3b7
i2d_RSAPublicKey(rsa, NULL)
2018-09-25 15:39:54 +09:00
52cee17668
use XSEEK_END
2018-09-25 15:39:54 +09:00
e6612b34f7
use XFILE, BADFILE, XFxxxx
2018-09-25 15:39:54 +09:00
787fa5d49a
get name in X509_NAME_get_entry
2018-09-25 15:39:54 +09:00
3bf776baf4
wolfSSL_ASN1_TIME_get_data() changed
2018-09-25 15:39:54 +09:00
29d3303995
Add tests for d2i_PKCS12_fp,i2d_RSAPublicKey,RSA_verify and X509_print
2018-09-25 15:39:54 +09:00
b588e6ab29
ERR_peek_last_error() and SSL_get_SSL_CTX reference error on opensslextra.
...
Implemented wolfSSL_X509_get_version().
2018-09-25 15:39:54 +09:00
e79cdefcde
X509_NAME_ENTRY_get_object
2018-09-25 15:39:54 +09:00
2922a93bf7
PEM_read_X509_CRL
2018-09-25 15:39:54 +09:00
050fa2f8f8
wolfSSL_X509_CA_num()
2018-09-25 15:39:54 +09:00
aaa26f3f41
wolfSSL_ASN1_TIME_get_data()
2018-09-25 15:39:54 +09:00
a002a6715f
wolfSSL_ASN1_TIME_get_length()
2018-09-25 15:39:54 +09:00
98ae3bb7fd
Add define for OpenSSL API.
2018-09-25 15:39:54 +09:00
741301bb2c
Single Precision: ARM Thumb assembly implementation
...
Remove AVX2 code from platform specific code that doesn't support it.
Fix sp_lshd to memmove correct amount.
2018-09-25 09:10:45 +10:00
c4e1cdf335
Merge pull request #1845 from dgarske/tls_curve_order
...
TLS supported curve selection fixes
2018-09-25 08:26:14 +10:00
27aaedf37c
add -rsa-sz which benches any RSA key size
2018-09-24 16:21:13 -06:00
4855246fc6
Merge pull request #1847 from kaleb-himes/ASN_T_LONG
...
Address a potential out of bounds write
2018-09-24 10:51:49 -06:00
3be25441fa
Merge pull request #1843 from dgarske/async_fixes
...
Fixes for wolfCrypt async use with TLS
2018-09-24 09:51:19 -06:00
0efc637d2d
Merge pull request #1834 from SparkiDev/pkcs11
...
Support for PKCS#11
2018-09-24 09:41:45 -06:00
038b5e8a66
Fix comment spelling error.
2018-09-24 07:23:54 -07:00
d273d1dc81
Fixes from review
2018-09-24 08:44:31 +10:00
3a72cf7996
Fixes from review
2018-09-24 08:41:25 +10:00
f7f158cbd9
Fix encode and decoding of EC signature
2018-09-24 08:41:25 +10:00
77a81057be
Casting fixes
2018-09-24 08:41:25 +10:00
5744e4227d
Rewrote the public pkcs11 headers
...
Fixed file name in comment.
2018-09-24 08:41:25 +10:00
8a5a03ea35
Support for PKCS#11
...
Support for RSA, ECDSA and AES-GCM operations.
2018-09-24 08:41:25 +10:00
dfec7f2263
Fix for TLS v1.3 async case with cipher suite TLS_AES_128_GCM_SHA256
and RSA key type. Fix for issue with long cipher suite name test for TLS 1.3.
2018-09-21 16:30:05 -07:00
29d60ec7e9
Changed to MAX over LONG based on peer review
2018-09-21 17:09:37 -06:00
fc77590c4e
Address a potential out of bounds write
2018-09-21 17:02:56 -06:00
b2575b0b60
Fix to only skip early key free if async pending.
2018-09-21 15:13:15 -07:00
e07e8a6a6e
Merge pull request #1846 from cconlon/validity
...
fix daysValid seconds calculation
2018-09-21 12:02:11 -07:00
0591b18339
fix daysValid seconds calculation
2018-09-21 11:04:39 -06:00
a643aeac41
* Fixes for async with TLS where keys are being free'd too soon.
...
* Fix for possible NULL RNG case in mp_rand.
* Fix for memory macros to handle expression for `HEAP`.
* Fix for possible unknown uint32_t type with mem track.
* Fix for double Alloc/Free print when using track and debug memory at same time.
* Fix for building with `./configure CFLAGS="-DECC_USER_CURVES -DNO_ECC256 -DHAVE_ECC160"`
* Performance improvements for cases with `WC_ASYNC_NO_HASH` and `WC_ASYNC_ENABLE_SHA256`.
2018-09-21 09:33:40 -07:00
24f9f12844
Fix for the curve logic to pick the hightest strength, not just the default 256-bit. Added test for setting user curve. ./examples -H useSupCurve
.
2018-09-21 09:27:48 -07:00
39019c2418
Re-order the default supported curve groups by strength. Some TLS servers pick the top choice instead of the strongest.
2018-09-21 08:54:32 -07:00
a5fffdbbb7
Merge pull request #1844 from kaleb-himes/CERT_UPDATE_FIX
...
Cert update fix
2018-09-20 18:06:16 -07:00
dfb9db2b8d
Merge pull request #1832 from JacobBarthelmeh/HardwareAcc
...
Linux /dev/crypto SHA256 and AES
2018-09-20 18:05:35 -07:00
dc942bf9cb
Remove unnecessary duplicate revocation
2018-09-20 16:54:35 -06:00
ea06a3e8cb
Resolve some persistent error report when conf not passed to req
2018-09-20 16:50:02 -06:00
fe2f9d4aa4
minor adjustments and add README
2018-09-20 15:59:29 -06:00
427c62e04a
Merge pull request #1841 from kaleb-himes/CERT_UPDATE_REFACTOR
...
Cert update refactor
2018-09-20 14:24:06 -07:00
54e04dd312
posix compliance enhancements for portability
2018-09-20 10:30:11 -06:00
4177c2f316
Merge pull request #1839 from ejohnstown/rng
...
RNG Update
2018-09-20 08:49:39 -07:00
c225b45364
Merge pull request #1842 from kaleb-himes/NO_SHA_CRL_ON_BUILD_FAILURE
...
Update certs to address nightly failure with disable sha enable crl
2018-09-20 06:09:29 -07:00
17ebb0ea49
Update certs to address nightly failure with disable sha enable crl
2018-09-19 15:22:08 -06:00
afcdfd70fe
Merge pull request #1840 from embhorn/fix_renewcerts
...
Revert addition of OIDs to cnf
2018-09-19 15:11:20 -06:00
f3fd67c54b
White space updates and revert cnf changes in lieu of PR #1734
2018-09-19 14:54:19 -06:00
4f6ee556dc
Refactor the cert renewal scripts with error handling
...
Portability updates
2018-09-19 14:47:21 -06:00
96a7e366bc
testing with valgrind and static analysis tools
2018-09-19 14:29:33 -06:00
2e88151cfd
crypto only sha256 cryptodev
...
formating and refactoring
update configure for devcrypto
add AES algorithms to cyrptodev port
increase structure size for compatibility AES with cryptodev
add wc_devcrypto.h to install path
2018-09-19 10:41:29 -06:00
951bd5a01a
FIPSv2: RNG Update
...
1. Put the SeedTest function in the HASH_DRBG scope.
2018-09-19 07:22:04 -07:00
b1b7093a1d
Revert addition of OIDs to cnf
2018-09-19 08:01:40 -05:00
8972867ada
FIPSv2: RNG Update
...
1. Updated the IDE/WIN10 user settings to enable RDSEED by default.
2. Updated the Windows GenerateSeed() function to take into account the
RDSEED enabled setting.
3. Exclude the TestSeed() function check for the "selftest" build as
well as old FIPS.
2018-09-18 16:08:35 -07:00
582cf3182e
FIPSv2: RNG Update
...
1. Update the SEED_BLOCK_SZ to 4 for non-FIPS builds.
2. Change fips-check.sh to skip copying over the random.{c,h} files for
now. Need the tagged versions of the other files and the new random for
now.
2018-09-18 14:36:43 -07:00
4aa85f956f
FIPSv2: RNG Update
...
1. The wolfcrypt test shouldn't check TestSeed() for old FIPS builds.
2018-09-18 14:36:42 -07:00
b9a850575f
FIPSv2: RNG Update
...
1. For non-FIPS builds, lower the entropy request size to the old value.
2. Added a consistency check to the result of the entropy source. The test
involves requesting an additional 64-bits, then doing a running
comparison of each block of 64-bits. The first block of bits is ignored.
3. Refactored the RNG seeding a bit. Renamed all variables with
"entropy" in the name as "seed". Renamed the constants for entropy sizes
as seed sizes. Changed the security strength to its actual value and
introduced an entropy scaling factor for the number of bits of entropy
per bit and a size for the NDRBG block size.
4. Changed it so the user can change the parameters for the RNG at the
build configuration. If using FIPSv2, triggers an error if the paramters
are changed.
2018-09-18 14:36:42 -07:00
085daa78cd
Merge pull request #1833 from dgarske/norng_fixes
...
Fixes for building without RNG enabled
2018-09-18 14:52:21 -06:00
4981480215
Fix to make sure wc_RNG_GenerateBlock
return code is checked in test.h GetRandomPort
.
2018-09-18 12:55:52 -07:00
9e305a01b4
More fixes for building with ./configure --disable-rng
.
2018-09-18 11:17:39 -07:00
d05423af7e
Merge pull request #1835 from danielinux/fix-fall-through-define-typo
...
Fixed typo in the definition of macro FALL_THROUGH
2018-09-18 07:01:15 -07:00
b832b7bad3
Fixes for building with ./configure --enable-opensslextra --disable-hashdrbg --disable-rng --enable-cryptonly --disable-dh --disable-rsa --disable-ecc
.
2018-09-17 09:38:45 -07:00
14815431e7
Merge pull request #1836 from kaleb-himes/MP_SET_IMPL_DEC_FIX
...
mp_set pre-processor logic in fastmath breaking existing builds, norm…
2018-09-14 16:44:29 -07:00
2e4c07ed93
Fixes and improvements for handling the --disable-rng
case. Valid make check tests requires wolfCrypt only and no asymmetric crypto (./configure --disable-rng --enable-cryptonly --disable-dh --disable-rsa --disable-ecc
).
2018-09-14 14:09:27 -07:00
301e91e4d3
mp_set pre-processor logic in fastmath breaking existing builds, normal math not effected
2018-09-14 14:29:19 -06:00
04c444af35
add wolfSSL version print out to benchmark app
2018-09-14 14:17:49 -06:00
32d3cb6cfb
Fixes for case with Intel rand source and no DRBG (./configure --enable-intelasm --enable-intelrand --disable-hashdrbg
). Fixes to wolfSSL_RAND_egd
to better handle no DRBG case.
2018-09-14 09:48:57 -07:00
a7ab98be69
Removed typo in the definition of macro FALL_THROUGH
2018-09-14 11:02:23 +02:00
fb699acec4
Merge pull request #1831 from MJSPollard/benchmarkCSV
...
added option to print wolfcrypt benchmark tests in CSV format
2018-09-13 16:16:09 -06:00
a4d502e22a
Additional fixes for no RNG cases. Specifically ./configure --disable-hashdrbg --disable-rng --enable-cryptonly
2018-09-13 14:07:08 -07:00
77cd361bca
Fixes for building with WC_NO_RNG
.
2018-09-13 13:23:55 -07:00
e071f1ca7e
Merge pull request #1825 from SparkiDev/compat_apis_1
...
Add more compatability APIs.
2018-09-13 13:13:12 -07:00
8a6a9e7620
Merge pull request #1820 from kojo1/portingAid
...
Porting aid
2018-09-13 11:06:55 -06:00
d4d6346ee5
fixed unused variable error
2018-09-13 08:47:01 -06:00
7457ab3e14
added define to work with certain enabled options
2018-09-12 23:37:31 -06:00
037151eae0
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into benchmarkCSV
2018-09-12 23:32:45 -06:00
1c25fc801e
Changed up some words
2018-09-12 16:58:32 -06:00
4f95ba0f69
Where did a bunch of those links even come from?
2018-09-12 16:51:45 -06:00
0275366fb6
Fixes from code review
...
Document how length of ECDSA signature calculated.
Check parameter not NULL before use.
Formatting fix.
Also, disable RSA test of EVP_DigestSign/Verify* when HAVE_USER_RSA.
2018-09-13 08:47:09 +10:00
e809fc2d5d
Updated some of the links on the Doxygen page
2018-09-12 16:45:18 -06:00
324235f698
Merge pull request #1823 from dgarske/cert_ext_only
...
Fix for build with cert extensions and openssl extra only
2018-09-12 13:03:37 -07:00
581f72adf8
Merge pull request #1822 from dgarske/fixes_async
...
Fix for dh_test to make sure the provided agree size is populated
2018-09-12 13:03:04 -07:00
5b985c7dbd
Merge pull request #1821 from dgarske/nxp-ltc
...
Fixes for NXP LTC support with K82
2018-09-12 13:02:21 -07:00
b330c6e035
Merge pull request #1801 from kaleb-himes/OCSP-GLOBALSIGN-FIXr2
...
Address issues when testing with WOLFSSL_OCSP_TEST set
2018-09-12 11:36:41 -07:00
bd1d36f0aa
Merge pull request #1818 from aaronjense/IAR-EWARM-build-update
...
fixed compile time errors and warnings for IAR-EWARM projects
2018-09-12 11:15:59 -07:00
8aae8ceb2a
Changed mobile viewport scale
2018-09-12 10:16:45 -06:00
df20daa1ae
Support RSA and ECC in wolfSSL_DigestSign/Verify*
2018-09-12 16:31:39 +10:00
7ddc756d15
eliminate double semi-colon
2018-09-12 10:13:30 +09:00
66dc735454
Merge pull request #1830 from dgarske/renesas
...
Fixes for Renesas example projects
2018-09-11 15:40:00 -06:00
4bbbb82a01
Merge pull request #1829 from embhorn/zd3928
...
Make DecodedCert elements available with WOLFSSL_CERT_EXT
2018-09-11 14:38:31 -07:00
d280359548
added option to print wolfcrypt benchmark tests in CSV format
2018-09-11 14:49:54 -06:00
6876b7d98e
Removed comment from HTML header
2018-09-11 13:35:49 -06:00
93e3db3ae2
Merge branch 'master' of https://github.com/wolfssl/wolfssl into doxygen-update
2018-09-11 13:33:47 -06:00
0ad77628f1
Merge pull request #1827 from kaleb-himes/CPP_POLY1305
...
Fix for HAVE_POLY1305 without one time auth
2018-09-11 10:00:39 -07:00
ca83f97508
Merge pull request #1828 from cconlon/nucleusfix
...
Pass arguments through to Nucleus memory functions in 1.2 build
2018-09-11 09:41:01 -07:00
a63da76e07
Fixes for Renesas example projects.
2018-09-11 09:38:24 -07:00
d658701350
Added NO_WOLF_C99 define, replaced sp.c with relevant sp_*.c, removed evp.c and bio.c from compiling seperately from ssl.c
2018-09-11 11:16:04 -05:00
01dc018cda
Make DecodedCert elements available with WOLFSSL_CERT_EXT
2018-09-11 10:41:12 -05:00
8060deb40a
pass arguments through to Nucleus memory functions in 1.2 build
2018-09-11 09:26:12 -06:00
330a7048c7
Add more compatability APIs.
...
d2i_ECDSA_SIG, i2d_ECDSA_SIG, EVP_DigestVerifyInit,
EVP_DigestVerifyUpdate, EVP_DigestVerifyFinal, EVP_PKEY_id,
PEM_read_bio_PUBKEY
2018-09-11 09:28:03 +10:00
f90b7d6c37
Merge pull request #1826 from embhorn/serialnumOID_new
...
`wolfSSL_CTX_load_verify_chain_buffer_format` and device serial number OID
2018-09-10 11:33:37 -07:00
238f45d89d
Fix for build with ./configure --enable-certext --enable-opensslextra
.
2018-09-10 08:22:17 -07:00
f48e2067ae
Added new API wolfSSL_CTX_load_verify_chain_buffer_format
for loading CA cert chain as DER buffer list including API unit test. Support for device serial number OID.
2018-09-10 08:15:17 -07:00
2c5b0d82da
Fix for dh_test to make sure the provided agree size is populated. This resolves issue with async and QuickAssist DH.
2018-09-10 07:13:52 -07:00
a2be7590d1
Fixes for NXP LTC support with K82. Fix for SHA384/512. Fix for AES CBC not storing previous IV. Fix for wc_AesSetKey
arg check. Fix for AES GCM IV != 12 test. Changed LTC default in settings.h to not enable SHA512 and Ed/Curve25519. Tested using Rowley Crossworks v4.2.0 on a FRDM-K82F. There is an initial stack pointer issue with the arm-startup code here for Rowley still outstanding, but these fixes are valid as-is.
2018-09-10 07:13:32 -07:00
8fdb6b79d0
Merge pull request #1824 from SparkiDev/tls_cam_no_aes
...
Camellia is a block cipher in TLS - can't turn on AEAD only define
2018-09-09 17:28:34 -07:00
f8ac5b5f71
Merge pull request #1819 from dgarske/fix_load_loc
...
Fix for load location test to handle multiple failure codes
2018-09-10 08:36:19 +10:00
2d413c5bb8
Camellia is a block cipher in TLS - can't turn on AEAD only define
2018-09-10 08:18:03 +10:00
0d44252608
error pass though build flag WOLFSSL_PASSTHRU_ERR
2018-09-08 10:19:31 +09:00
902008f5ea
refer unit_PassThrough flag at least once
2018-09-08 09:17:52 +09:00
412eecd51a
Add wc_SetIssuerRaw and EncodeCert with raw fields ( #1798 )
...
* Make cert with raw issuer
* Add wc_SetIssuerRaw
* Use issuer raw in EncodeCert
2018-09-07 16:22:23 -07:00
7d1ab5e9d2
Merge pull request #1817 from danielinux/fix-old-style-definitions
...
Remove old-style function definitions
2018-09-07 15:52:45 -07:00
575382e5a9
Fix for load location test to handle multiple failure codes (failure may return ProcessFile error code or WOLFSSL_FAILURE). Moved expired certs and setup load location test for expired certs.
2018-09-07 15:30:30 -07:00
e677c32714
test file access functions
2018-09-08 07:27:33 +09:00
294a22e938
flag to pass throug errors for correcting as many error information as possible.
2018-09-08 06:02:20 +09:00
c98f8842a3
Merge pull request #1816 from ejohnstown/ocsp-no-server
...
OCSP Stapling/No Server Build
2018-09-07 11:48:13 -07:00
27555d6eb7
Fix old-style function definitions
2018-09-07 09:13:20 +02:00
a7fb48e157
Merge pull request #1783 from dgarske/load_loc
...
Enhanced load verify locations to support flags
2018-09-06 17:00:09 -07:00
15be0aceed
OCSP Stapling/No Server Build
...
In the case of OCSP Stapling being enabled and NO_WOLFSSL_SERVER being
set, there was a spot where the ocsp_stapling list was still being
touched even though it is left out of the build. Just needed to add the
right #ifdefs.
2018-09-06 16:56:09 -07:00
ed14b68c38
Merge pull request #1813 from ejohnstown/bitfield
...
Bitfield Fixes
2018-09-06 16:01:59 -07:00
0a7b06857d
Merge branch 'master' of https://github.com/wolfssl/wolfssl into doxygen-update
2018-09-06 14:56:24 -06:00
6981d48a4d
Made some general Doxygen fixes
2018-09-06 14:54:13 -06:00
5360faac9d
Bitfield Fixes
...
A couple flags were being implemented as bitfields from an int type.
GCC-8 is being more strict of type and value checking and is treating
single bit ints as both 1 and -1 and complaining about value changes.
Change the two int bitfields to use word16 bitfields as is the
pattern elsewhere.
2018-09-06 13:46:00 -07:00
d9a6484b75
Fix to improve return code logic in wolfSSL_CTX_load_verify_locations_ex
.
2018-09-06 13:01:44 -07:00
ae3d8d3779
* Fixed wolfSSL_CTX_load_verify_locations
to continue loading if there is an error (ZD 4265).
...
* Added new `wolfSSL_CTX_load_verify_locations_ex` that supports flags `WOLFSSL_LOAD_FLAG_IGNORE_ERR`, `WOLFSSL_LOAD_FLAG_DATE_ERR_OKAY` and `WOLFSSL_LOAD_FLAG_PEM_CA_ONLY`.
* Fix for `PemToDer` to handle PEM which may include a null terminator in length at end of file length causing wrong error code to be returned. Added test case for this. (ZD 4278)
* Added macro to override default flags for `wolfSSL_CTX_load_verify_locations` using `WOLFSSL_LOAD_VERIFY_DEFAULT_FLAGS`.
* Added tests for loading CA PEM's from directory using `wolfSSL_CTX_load_verify_locations` and `wolfSSL_CTX_load_verify_locations_ex` with flags.
* Added tests for `wolfSSL_CertManagerLoadCABuffer`.
* Updated the expired test certs and added them to `./certs/test/gen-testcerts.sh` script.
2018-09-06 12:51:22 -07:00
8719b888eb
Added some files to the .gitignore
...
Specifically, added
doc/doxygen_warnings
doc/html
doc/pdf
2018-09-06 13:02:30 -06:00
d998d10f02
Merge pull request #1805 from dgarske/fix_csr
...
Fix for CSR generation email value
2018-09-05 19:44:41 -07:00
a7821e0d6d
Merge pull request #1810 from quinnmiller1997/fp_mul_comba_7-typo
...
Fixed typo in fp_mul_comba_7
2018-09-05 19:43:47 -07:00
30d968d6b0
Merge pull request #1811 from SparkiDev/tls_sig_ret
...
Fix CheckCertSignature return to be remembered past ParseCertRelative
2018-09-05 19:43:23 -07:00
a3cc2119d7
Fix CheckCertSignature return to be remembered past ParseCertRelative
2018-09-06 10:42:49 +10:00
b8605fa544
Fixed typo in fp_mul_comba_7
2018-09-05 14:51:50 -06:00
0626338be2
Fix for HAVE_POLY1305 without one time auth
2018-09-05 14:41:57 -06:00
5ee09f77a1
Merge pull request #1796 from ghoso/e2studio
...
add project files for Renesas e2studio
2018-09-05 11:41:01 -06:00
d432d346aa
Merge pull request #1809 from cconlon/stm32rngfix
...
enable RNG clock when WOLFSSL_STM32F427_RNG is defined
2018-09-04 17:21:01 -07:00
28ad8e591d
Adding comment for empty case in GetNameType
2018-09-04 18:08:40 -05:00
bac8b78a8c
Merge pull request #1803 from SparkiDev/tfm_stack
...
Small stack for fast math code
2018-09-04 15:57:59 -07:00
d149795648
Merge pull request #1759 from dgarske/verifycbfail
...
Fix to resolve issue with verify callback not causing an error
2018-09-04 15:52:58 -07:00
8e67ef33b2
Merge pull request #1799 from SparkiDev/cert_vfy_small
...
Smaller dynamic memory usage in TLS
2018-09-04 15:40:11 -07:00
8584da60a8
Merge pull request #1802 from SparkiDev/tls13_0rtt_ch
...
Group Early Data message with ClientHello for faster delivery
2018-09-04 15:39:14 -07:00
e1c4d3f5e6
Merge pull request #1808 from ejohnstown/vali-date
...
Validate Date
2018-09-04 15:33:41 -07:00
d3ea903c55
enable RNG clock when WOLFSSL_STM32F427_RNG is defined
2018-09-04 16:13:09 -06:00
e730cda550
Validate Date
...
The ValidateDate() function is wrapped by a macro so it may be replaced
in environments without ASN_TIME built in. In two cases, OCSP and CRL,
ValidateDate() is called directly instead of by the macro. This change
fixes that.
2018-09-04 13:39:26 -07:00
17a70aee1b
Added test and minor fixes for CheckCertSignature
2018-09-03 10:50:47 +10:00
4b208f4fe5
Make grouping EarlyData and ClientHello a configuration option
2018-09-03 08:48:28 +10:00
4d0478a287
Fix fp_div_2d to return remainder correctly
...
If a == c are then a and c don't equal d:
calculate d before c
If a != c then a doesn't change in calculating c:
calculate d after c
2018-09-03 08:32:55 +10:00
d2b9b230a0
Added additional verify callback override test cases.
2018-08-31 16:26:51 -07:00
6171e29fe8
Fix for CSR generation after PR ( https://github.com/wolfSSL/wolfssl/pull/1734 ). This resolves issue with email name in CSR. (Thanks to Forum post https://www.wolfssl.com/forums/post4137.html ).
...
Failed examples:
```
145:d=5 hl=2 l= 16 prim: EOC
0000 - 69 6e 66 6f 40 77 6f 6c-66 73 73 6c 2e 63 6f 6d info@wolfssl.com
```
```
SET {
138 23: SEQUENCE {
140 3: OBJECT IDENTIFIER objectClass (2 5 4 0)
: Error: Spurious EOC in definite-length item.
```
Success Examples:
```
140:d=5 hl=2 l= 9 prim: OBJECT :emailAddress
151:d=5 hl=2 l= 16 prim: IA5STRING :info@wolfssl.com
```
```
SET {
138 29: SEQUENCE {
140 9: OBJECT IDENTIFIER emailAddress (1 2 840 113549 1 9 1)
151 16: IA5String 'info@wolfssl.com '
```
2018-08-31 11:20:04 -07:00
41ab3d91fd
Small stack for fast math code
...
Any large stack usages have been changed to dynamic memory allocations
when WOLFSSL_SMALL_STACK is defined.
Modified functions to return error codes.
2018-08-31 17:55:49 +10:00
697c61af35
correct typo in IDE/include.am
2018-08-31 14:57:16 +09:00
00ff519b23
remove wrong configuration in IDE/include.am
2018-08-31 14:52:12 +09:00
d089a4651a
Group Early Data message with ClientHello for faster delivery
2018-08-31 09:28:38 +10:00
d86fc2dbbe
Smaller dynamic memory usage in TLS
...
Code doesn't require a DecodedCert which saves on dynamic memory usage.
WOLFSSL_SMALL_CERT_VERIFY: Don't have a DecodedCert allocated and verify
certificate signature in ProcessPeerCerts as this is maximum dynamic
memory usage.
WOLFSSL_SMALL_CERT_VERIFY is enabled with 'lowresource' configuration
option.
Fix sp_clear to work with NULL parameter.
Define a new function HashId that maps to the hashing function
available.
Set MAX_CERT_VERIFY_SZ to be the maximum based on what algorithms are
compiled in.
Fix usage of MAX_CERT_VERIFY_SZ in functions sending certificate verify
messages.
2018-08-31 08:29:28 +10:00
ffc0f0fb26
Fix for building with SESSION_CERTS
using pointer after free. Documented store->discardSessionCerts
.
2018-08-30 13:57:21 -07:00
3729b12fae
Address issues when testing with WOLFSSL_OCSP_TEST set
2018-08-30 14:44:49 -06:00
b369e524d4
Fix for the ECDSA verify callback override test case. Switched to AES128-GCM cipher suite (better cipher suite overall).
2018-08-30 11:48:08 -07:00
3d0d10345a
Added test cases for ensuring forced error fails on client and server. Added test cases to ensure bad certificate can be overriden.
2018-08-30 11:17:21 -07:00
944342b386
Fixes for verify callback failure override handling. Fixes the return codes in the failure cases.
2018-08-30 11:17:21 -07:00
53c0003cad
Fix to resolve issue with verify callback not causing an error (if one not already present) when returning 0. Test case to follow shortly.
2018-08-30 11:17:21 -07:00
2551512718
add CS+ and e2studio settings in IDE/include.am
2018-08-30 13:50:50 +09:00
31e37ea5df
Merge pull request #1797 from SparkiDev/stack_size
...
Small stack usage fixes
2018-08-29 16:19:46 -07:00
fc64788092
Merge pull request #1795 from SparkiDev/tls13_no_tls12
...
Fixes to work when compiled with TLS 1.3 only
2018-08-29 16:16:46 -07:00
d084a4bcb8
Merge pull request #1794 from SparkiDev/sp_armasm_modexp
...
Fix for SP ASM arm and no DH
2018-08-29 16:13:34 -07:00
03fbad22a6
Merge pull request #1792 from SparkiDev/gcc_8_fixes
...
GCC 8 new warnings in -Wall fix
2018-08-29 16:12:19 -07:00
818b0a3c9c
Merge pull request #1791 from SparkiDev/keyshare_ecc_free
...
Fix memory leak in KeyShare using ECC and not fast math
2018-08-29 16:11:32 -07:00
ab487e25a0
Merge pull request #1790 from JacobBarthelmeh/SanityChecks
...
change grep message for RSA key size with tests
2018-08-29 16:11:14 -07:00
4fd805ff1e
Merge pull request #1789 from JacobBarthelmeh/Fuzzer
...
sanity check on buffer before clearing it
2018-08-29 16:10:56 -07:00
e4ccb2fe83
Merge pull request #1784 from dgarske/stsafe_server
...
Added ST-Safe PK callback example for Key Generation (TLS server only)
2018-08-29 16:07:14 -07:00
4d79eb121e
add include.am file and comment for related code of Renesas cs+ and e2studio
2018-08-29 11:06:13 +09:00
4dbe86f1fd
Small stack usage fixes
...
Stack pointer logging added.
2018-08-29 10:16:51 +10:00
4d6f43277e
add project files for Renesas e2studio
2018-08-28 17:56:55 +09:00
487c60df78
Fixes to work when compiled with TLS 1.3 only
...
TLS 1.3 Early Data can be used with PSK and not session tickets.
If only TLS 1.3 and no session tickets then no resumption.
External sites don't support TLS 1.3 yet.
2018-08-28 15:37:15 +10:00
57620caac8
Fix for SP ASM arm and no DH
...
Fix mod exp in ARM asm to work for different size exponents.
In ASM code, mont_norm is not used in RSA so protect from no DH.
2018-08-28 11:24:38 +10:00
551201c00c
GCC 8 new warnings in -Wall fix
2018-08-27 12:51:01 +10:00
24694ef7b0
Fix memory leak in KeyShare using ECC and not fast math
2018-08-27 10:50:57 +10:00
46c04cafd3
change grep message for RSA key size with tests
2018-08-24 16:47:37 -06:00
d122b9f8b5
sanity check on buffer before clearing it
2018-08-24 16:29:43 -06:00
205088d1bc
Merge pull request #1787 from ejohnstown/patches
...
Patches for various build errors
2018-08-24 14:46:28 -07:00
459455328f
Merge pull request #1788 from ejohnstown/oid
...
OID handling in DecodeExtKeyUsage
2018-08-24 14:46:19 -07:00
1d9b482711
Merge pull request #1747 from kaleb-himes/XCODE-UPDATES
...
Xcode updates
2018-08-24 14:01:39 -07:00
86ce22c32e
Merge pull request #1785 from embhorn/zd4225
...
Fix for old certs not discarded when server does not resume session
2018-08-24 13:22:06 -07:00
1005ca0703
Merge pull request #1786 from kaleb-himes/USER-HEAP-WITH-CM
...
Unloading from CM, and using custom heap, ensure XFREE has acces…
2018-08-24 11:56:48 -07:00
bd5e507617
OID
...
1. When checking an OID sum against an OID string based on context, skip the unknown OIDs instead of treating them as parse errors.
2. When getting an OID, pass the lower error upstream instead of just PARSE error.
2018-08-24 11:51:25 -07:00
4eb0d32fa8
Patches
...
1. Define Timeval in callbacks.h if the file sys/time.h is missing.
2. When picking the correct strtok() function, take into account MINGW64.
3. In the example server, changed the call to SSL_accept_ex() as it doesn't exist. Using wolfSSL_accept_ex(). Only a problem when setting WOLFSSL_CALLBACKS.
4. PickHashSigAlgo() is missing a ; when WOLFSSL_CALLBACKS is set.
2018-08-24 11:46:02 -07:00
347fdccf1c
Added missing README.md.
2018-08-24 11:11:30 -07:00
c96aeb4550
Added documentation and benchmarks for STM32 and STSAFE-A100 support.
2018-08-24 11:03:14 -07:00
7f324d2c3b
Merge pull request #1781 from JacobBarthelmeh/Compatibility-Layer
...
fix for IV of DES_ncbc function
2018-08-24 10:16:21 -07:00
b7b99a2e92
Unloading from CM, and using custom heap, ensure XFREE has access to custom heap
2018-08-24 10:07:10 -06:00
274b41dea5
Merge pull request #1782 from JacobBarthelmeh/SanityChecks
...
refactor CloseSocket for WOLFSSL_BIO free with USER IO
2018-08-24 09:08:05 -06:00
498d8e6c15
Fix for old certs not discarded when server does not resume session
2018-08-24 07:53:35 -05:00
88e6bd2915
Added ST-Safe server side PK callback example for key gen. Added helper API's for setting up the PK callbacks and custom context.
2018-08-23 15:57:14 -07:00
40551720ab
refactor CloseSocket and add guard
2018-08-23 16:30:53 -06:00
689da22799
Refactor and updates for XCODE projects following peer review
2018-08-23 15:41:35 -06:00
c7dde6c682
Merge pull request #1656 from danielinux/contiki-port
...
Contiki port
2018-08-23 12:31:56 -07:00
cc39f3211a
Merge pull request #1780 from dgarske/pkcs7_ex
...
Added new PKCS7 ex API's to support signing and validation of large data
2018-08-23 08:41:25 -07:00
5d8a2a7702
Merge pull request #1778 from SparkiDev/sp_mem
...
Make ALT_ECC_SIZE with SP work
2018-08-23 08:25:44 -07:00
554d40a62e
Merge pull request #1777 from dgarske/async_fixes
...
Build fixes for async
2018-08-23 08:23:20 -07:00
0d171e591b
Merge pull request #1776 from SparkiDev/inline_cmpl_fix
...
Fix for clang builds with configs not using inline funcs
2018-08-23 08:22:39 -07:00
54a379d8e0
Merge pull request #1775 from SparkiDev/tls_no_cert_vfy
...
Fix for no certificates and calling DoVerifyCallback.
2018-08-23 08:22:07 -07:00
8477d5ba1b
Merge pull request #1773 from ejohnstown/critical-option
...
Certificate Extension Critical Check Optionality
2018-08-23 08:21:19 -07:00
5ce1757e05
Merge pull request #1779 from dgarske/pic32mz_crypt_align
...
Fix for PIC32MZ crypto hardware alignment
2018-08-23 09:05:50 -06:00
f23eb37ade
fix for IV of DES_ncbc function
2018-08-23 09:03:09 -06:00
57d72028f6
Fix for missing return code on wc_Pic32HashFree
.
2018-08-22 16:38:55 -07:00
d0d28c82cd
Added new PKCS7 ex API's for supporting signing and validation of large data blobs. New API's are wc_PKCS7_EncodeSignedData_ex
and wc_PKCS7_VerifySignedData_ex
. Includes header docx and unit tests for new API's. Cleanup for the PKCS7 small stack and const oid's.
2018-08-22 15:46:37 -07:00
53af520911
Fix to resolve issue with PIC32MZ crypto hardware (AES/DES3 only) where an unaligned input/output buffer was not handled correctly. This results in a BUFFER_E. This was seen with DTLS v1.0 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
cipher suite. Fix is to allocate a dynamic buffer from heap if the input/output are not aligned. Tested and verified with a PIC32MZ2048EFM144 and the wolfssl_udp_client
example for Harmony using DTLS v1.0 and the setudppacketoptions 192.168.0.107 11111 hello
-> sendudppacket
commands. Cleanups in older ctoacrypt/settings.h for PIC32MZ.
2018-08-22 13:39:03 -07:00
d7d2fb34af
fixed ifdef WOLFSSL_CONTIKI
2018-08-22 17:37:47 +02:00
bdb5d3c191
Improved support for contiki/uIP.
2018-08-22 09:15:10 +02:00
7bd16a2582
Fixed after second review
2018-08-22 09:15:10 +02:00
b74869a61a
Moved contiki + uIP support in the library
2018-08-22 09:15:10 +02:00
b7385476f0
Removed empty ifdef section
2018-08-22 09:15:09 +02:00
79a7518fdd
Using inline functions for XMALLOC/XFREE/XREALLOC in contiki
...
This is necessary to avoid the "unused variable" warnings
2018-08-22 09:15:09 +02:00
3d27a8dc53
Contiki port
2018-08-22 09:15:09 +02:00
783c4a0c5e
Make ALT_ECC_SIZE with SP work
...
Change to more relevant dynamic types in SP also.
2018-08-22 16:02:51 +10:00
9ae4ef2d5c
Build fixes for --enable-async --enable-all --with-intelqa
. Resolves conflict for stat
variable name. Fix for DH with async. Fix for async devSize.
2018-08-21 19:51:13 -07:00
08c2d94011
return value check of XFSEEK
2018-08-22 10:46:46 +09:00
31bd844d6f
Fix for clang builds with configs not using inline funcs
2018-08-22 11:16:57 +10:00
fff5cff273
Fix for no certificates and calling DoVerifyCallback.
2018-08-22 10:57:19 +10:00
776fd51720
Merge pull request #1768 from SparkiDev/tls13_final
...
Use final TLS 1.3 version value by default.
2018-08-21 12:29:51 -07:00
e635e49635
Merge pull request #1772 from SparkiDev/tls13_point_ext
...
Send EC poiint format extension if downgradable from TLS 1.3
2018-08-21 12:27:10 -07:00
a505f2b063
Merge pull request #1662 from SparkiDev/mem_track
...
Add memory usage tracking and logging
2018-08-21 12:25:49 -07:00
a0f1c9dbe4
Make the check of the certificate extension critical flag optional based on compile option.
2018-08-21 10:57:04 -07:00
1ab17ac827
More changes to minimize dynamic memory usage.
...
Change define to WOLFSSL_MEMORY_LOG.
Fix for ED25519 server certificate - single cert to allow comparison
with ECC dynamic memory usage.
Free memory earlier to reduce maximum memory usage in a connection.
Make MAX_ENCODED_SIG_SZ only as big as necessary.
Change memory allocation type in sha256 from RNG to DIGEST.
If we know the key type use it in decoding private key
2018-08-21 14:41:01 +10:00
d29118ba58
Merge pull request #1771 from dgarske/tls13only
...
Fixes for building with TLS v1.3 only enabled.
2018-08-21 14:25:54 +10:00
103a0d351b
Send EC poiint format extension if downgradable from TLS 1.3
2018-08-21 10:11:12 +10:00
389f56b5c7
Fix for building with TLS 1.3 only when AES CBC is enabled. Algorithm is allowed to be enabled, but the AES CBC cipher suites should not be. Fixed AEAD enable to check AES CBC based on HAVE_AES_CBC
define.
2018-08-20 16:29:48 -07:00
506c858ed6
Add memory usage tracking and logging
...
Add WOLFSSL_MEMORY_TRACKING to report allocations and frees with the
type.
Fix places where memory can be freed earlier.
2018-08-21 08:54:57 +10:00
b12386fbb1
Fixes for building with TLS v1.3 only (./configure --disable-tlsv12 --enable-tls13 --disable-aescbc --enable-ed25519 --enable-curve25519
)
2018-08-20 15:49:03 -07:00
20950ffde8
Remove TODOs around TLS 1.3 draft version.
2018-08-21 08:41:50 +10:00
3d16ed9c02
Merge pull request #1770 from ejohnstown/prime-fix
...
Prime Test Bug Fix
2018-08-20 13:24:05 -07:00
e4757f1283
Prime Test Bug Fix
...
Using the wrong size for the MR test check value. Converting from size
of FP_MAX_BITS to the DH prime size, dividing too much. Switched it to
its own constant.
2018-08-20 11:43:06 -07:00
f3c4d5442e
Merge pull request #1757 from dgarske/pkcs8_pad
...
Fix to resolve padding issue with PKCS 8 encryption.
2018-08-20 09:32:34 -07:00
0e1b8b7bd8
Merge pull request #1760 from dgarske/atmel_asf
...
Fixes for building with Atmel ASF (`WOLFSSL_ATMEL`)
2018-08-20 09:20:01 -07:00
0f539616be
Merge pull request #1766 from JacobBarthelmeh/UnitTests
...
cleanup with test cases and access to FP_MAX_BITS
2018-08-20 09:19:14 -07:00
683182f494
Merge pull request #1765 from SparkiDev/sp_fixes_1
...
Fixes for SP
2018-08-20 09:18:31 -07:00
555714afa3
Merge pull request #1764 from SparkiDev/tls13_psk_cb
...
Separate PSK callback for TLS 1.3
2018-08-20 09:17:01 -07:00
c8814a7ee1
Merge pull request #1769 from SparkiDev/tls13_dh
...
TLS 1.3: Always left-pad DH secret to length of prime
2018-08-20 09:13:50 -07:00
3e08c27512
Merge pull request #1715 from SparkiDev/disable_aescbc
...
Config option to disable AES-CBC
2018-08-20 09:08:19 -07:00
d104ae39e3
TLS 1.3: Always left-pad DH secret to length of prime
2018-08-20 14:20:50 +10:00
3cdeccc36e
Use final TLS 1.3 version value by default.
2018-08-20 14:17:38 +10:00
a7b5ed1c27
Merge pull request #1767 from aaronjense/dsa-unreachable-statement
...
silence warning for unreachable statement from some compilers.
2018-08-18 17:50:45 -07:00
79590f3310
silence warning for unreachable statement from some compilers.
2018-08-17 15:13:06 -06:00
ed9aaa93f4
include tfm in example client for veiwing FP_MAX_BITS
2018-08-17 11:06:40 -06:00
cc10c971cd
make sure that even if wolfSSL_Init has been called multiple times that wolfSSL_Cleanup gets called in tests
2018-08-17 11:04:21 -06:00
ff635d5b2b
Merge pull request #1763 from aaronjense/ecc-check-key-type
...
Fix error with wolfCrypt-JNI having ECC_PRIVATEKEY_ONLY and d != NULL
2018-08-16 18:16:43 -07:00
f1222c3f9f
Separate PSK callback for TLS 1.3
...
It is highly recommended that the PSK be different for each protocol.
Example callback already returns a different key for TLS 1.3.
New callback includes the ciphersuite, as a string, to use with the key.
2018-08-17 10:18:28 +10:00
2ac2c24f22
Fixes for SP
...
More places to mask shifted n.
Fix conditional check on NO_3072 in sp_int.h
Disable prime checking when using SP maths.
Add support for mp_tohex to SP maths.
Fix wolfmath.c to support including SP maths.
2018-08-17 10:13:29 +10:00
93546694ca
modify for readability
2018-08-16 17:04:32 -06:00
aeb9ab8aea
Combine if statements
2018-08-16 16:25:53 -06:00
eb08c6f6fc
Fix error with wolfCrypt-JNI having ECC_PRIVATEKEY_ONLY and d != NULL
2018-08-16 15:29:46 -06:00
f487b0d96a
Config option to disable AES-CBC
...
AEAD only detection and removeal of code.
Also in single threaded builds, reference the ctx suites in ssl object
if it exists.
2018-08-16 08:25:13 +10:00
9db7ba2f0d
Fix for cast mismatch and spelling of state.
2018-08-15 12:00:44 -07:00
c6e075f077
Fixes for building with Atmel ASF and no ECC508A.
2018-08-15 12:00:44 -07:00
739bbd1355
Merge pull request #1750 from JacobBarthelmeh/SanityChecks
...
update condition for include of sys/time.h
2018-08-15 11:28:05 -06:00
baab6755b2
Merge pull request #1756 from dgarske/norng
...
Fixes for building with `WC_NO_RNG`
2018-08-15 10:18:44 -07:00
be0523b7cd
Merge pull request #1749 from JacobBarthelmeh/UnitTests
...
check max key size with ocsp stapling test
2018-08-15 10:18:12 -07:00
373258a0c2
account for NO_RSA and SP math when printing max RSA key size
2018-08-15 09:52:43 -06:00
c3ab52ed44
key size check on ocsp-stapling2 test
2018-08-15 09:52:43 -06:00
f74406d2c9
check max key size with ocsp stapling test
2018-08-15 09:52:43 -06:00
3d16f891d4
Fix to check for buffer overrrun with the additional padding in PKCS12 EncryptContent
function.
2018-08-14 19:20:24 -06:00
cdff2869c2
Fixes for building with WC_NO_RNG
(applies to wolfCrypt only builds). Tested with ./configure --enable-cryptonly CFLAGS="-DWC_NO_RNG" && make
.
2018-08-14 18:53:25 -06:00
2420af3cf2
Merge pull request #1758 from dgarske/certext
...
Fix for building certext without certgen
2018-08-14 17:00:51 -05:00
9ad059542a
Merge pull request #1745 from dgarske/ecc_export_hex
...
Added new ECC export API's to support export as hex string
2018-08-14 14:19:23 -07:00
e2de988f98
Merge pull request #1739 from dgarske/asio
...
Fixes to openssl compatibility for Boost.Asio with SSF
2018-08-14 14:18:08 -07:00
d1e13a973c
Fix for building WOLFSSL_CERT_EXT
without WOLFSSL_CERT_GEN
due to missing CTC_MAX_EKU_OID_SZ
. Change to allow --enable-certext without certgen.
2018-08-14 15:00:56 -06:00
1c297b3ac4
Cleanup of some macro logic for enabling the mp_toradix.
2018-08-14 12:58:00 -06:00
f23915baa1
Fix for BIO ssl case, which is not supported (for the Boost.Asio project this isn't required either).
2018-08-14 12:44:31 -06:00
6ca56ee98c
Fix to handle carriage return case in PEM end of line character handling (for Windows). Cleanup to consolidate duplicate end of line character handling code.
2018-08-14 12:22:18 -06:00
ff7d2fefdc
Fix for DH max size calc not including DH_Pub.
2018-08-14 12:22:18 -06:00
7b83db0f65
Fix for PemToDer which was not properly handling extra new lines at end of file.
2018-08-14 12:22:18 -06:00
eca64717be
Fix for BIO_wpending
to work correctly.
2018-08-14 12:22:18 -06:00
17e102d914
Fixes for asio build options (so includes OPENSSL_EXTRA). Fix for bad named variable shutdown
. Fix for the side size in Options struct to support WOLFSSL_SIDE_NEITHER
(3). Fix to set the side on wolfSS_connect() or wolfSS_accept().
2018-08-14 12:22:18 -06:00
be33e69b22
Refactor to rename wc_ecc_export_int
to wc_export_int
for generic API for exporting an mp_int
as hex string or unsigned bin.
2018-08-14 12:17:20 -06:00
368227be2c
Fix to make sure fp_div_d
is available.
2018-08-14 12:05:22 -06:00
c073aee87c
Added new ECC export API's to support export as hex string. New API's are wc_ecc_export_ex
and wc_ecc_export_int
. For hex string use ECC_TYPE_HEX_STR
as encType
arg. Refactor to reduce duplicate code. Build fixes for NO_ECC_KEY_EXPORT
.
2018-08-14 12:05:22 -06:00
04c2b51b4d
Fix for padding size calculation and cast warning.
2018-08-14 11:49:21 -06:00
278fd9c054
update condition for include of sys/time.h
2018-08-14 10:51:05 -06:00
d823d6f7b6
Fix to resolve padding issue with PKCS 8 encryption.
2018-08-14 10:51:04 -06:00
64f553d944
Merge pull request #1755 from ejohnstown/scan-build-fix
...
Scan-Build Fix
2018-08-14 10:11:02 -06:00
aee4aea64d
Merge pull request #1748 from JacobBarthelmeh/Testing
...
call hamc init with blake2 software test
2018-08-14 10:07:01 -06:00
d4f908c372
Merge pull request #1728 from JacobBarthelmeh/HardwareAcc
...
Add build for AF_ALG
2018-08-13 16:27:51 -07:00
a3627106ea
Merge pull request #1753 from dgarske/gcc_arm_fips
...
Enhancements to the GCC-ARM example
2018-08-13 16:20:13 -07:00
91d2b17139
Scan-Build Fix
...
1. Initialize the sz variable in wc_BerToDer().
2018-08-13 14:37:04 -07:00
f44d42b1c8
Enhancements to the GCC-ARM example to support FIPS and additional build options. Added examples for memory overrides and standard library overrides. Fixes for building without test, benchmark or TLS. Changed the ARM startup code to only work for the Cortex M0 example using the define USE_WOLF_ARM_STARTUP
.
2018-08-13 12:22:14 -06:00
5caaa94868
Merge pull request #1754 from dgarske/fix_fipsv2
...
Fix for FIPS PRB error with CAVP test
2018-08-13 11:18:33 -07:00
b71c2ddf38
call hamc init with blake2 software test
2018-08-13 08:58:01 -06:00
93a7b76da5
Fix missing RSA_MIN_SIZE
and RSA_MAX_SIZE
and case where HAVE_FIPS_VERSION
is not defined.
2018-08-13 08:18:51 -06:00
80e46253d9
Fix for FIPS v1 CAVP case so the wc_RsaExportKey
and wc_CheckProbablePrime
functions are available. Cleanup to remove unused ERROR_OUT.
2018-08-13 06:25:55 -06:00
bb574d28b2
Support for more cert subject OIDs and raw subject access ( #1734 )
...
* Add businessCategory OID
* Raw subject support methods
* Support for jurisdiction OIDs
* Wrap in WOLFSSL_CERT_EXT
* Adding tests
2018-08-12 12:53:29 -07:00
6d10efe79c
Merge pull request #1752 from kaleb-himes/ocsp-stapling-pzero-take2
...
Use port 0 (dynamic) solution on servers and clients in addition to ocsp responders. Fix for OCSP tests when running concurrently.
2018-08-10 15:15:43 -07:00
280de47d06
Use pzero solutions on servers and clients in addition to ocsp responders
2018-08-10 14:17:17 -06:00
c288a214b1
give servers time to shut-down after client connection
2018-08-10 11:57:35 -06:00
ba3bc59771
further test control over ocsp-stapling tests
2018-08-10 11:44:16 -06:00
735e4a0986
ocsp stapling tests to wait until unit tests are complete
2018-08-10 11:18:04 -06:00
6113f68c21
make renewcerts-for-test use portable function declaration
2018-08-10 10:40:16 -06:00
35dbf9a6fe
address file restoration issue present when git not available
2018-08-10 10:24:42 -06:00
a9a9dd257e
Merge pull request #1743 from kaleb-himes/ocsp-logic-update
...
update ocsp test case for portability and informative updates on use …
2018-08-08 10:45:26 -06:00
c7f1d810c3
update ocsp test case for portability and informative updates on use of environment variable
2018-08-07 10:42:18 -06:00
cc1680dc98
Merge pull request #1741 from dgarske/verify_cb
...
Refactor of the verify callback
2018-08-06 13:12:54 -07:00
56974c099e
Improved the logic for WOLFSSL_ALWAYS_VERIFY_CB
to be more explicit and updated comments.
2018-08-06 11:40:35 -07:00
c4ea50b956
Fix for issue with using CopyDecodedToX509
again for existing X509 and freeing the altNames in original. Fix was to use the ssl->peerCert
directly for the index 0 cert. Improvement to make sure ex_data is always populated. Added NULL arg check on wolfSSL_get_peer_certificate
.
2018-08-06 11:40:35 -07:00
7d39a897dc
Refactor of the verify callback to eliminate duplicate code and provide consistency with various build options. Documented build options and added code comments in new DoVerifyCallback function. Added documentation in test.h myVerify
function for arguments and return code. Fix from commit da1ac36
which added current_cert
to WOLFSSL_X509_STORE_CTX
, but is only required for ASIO compatibility and is not used.
2018-08-06 11:40:35 -07:00
30d6c0c1fc
Merge pull request #1737 from ejohnstown/ocsp-free
...
OCSP Free
2018-08-06 09:08:01 -07:00
30e787b10c
create buffer with structure copy and set fd after close
2018-08-03 16:46:15 -06:00
7726786998
fix comment and remove duplicate free
2018-08-03 15:04:37 -06:00
738a121d61
Merge pull request #1740 from ejohnstown/null-check
...
NULL Check
2018-08-03 13:53:53 -07:00
b88d60ecbb
Merge pull request #1665 from ejohnstown/mr
...
Prime Number Testing
2018-08-03 12:50:27 -07:00
f6a8a2f5bd
NULL Check
...
When using the async option, the RSA key is checked on the first call to
DoTls13CertificateVerify() when the async state machine is set up. On
the subsequent call, the pointer to the key isn't checked again. Added a
check. (This was from a static analysis report.)
2018-08-03 11:09:43 -07:00
368b5b1072
Merge pull request #1729 from kaleb-himes/init-array
...
Initialize array to zero(s)
2018-08-02 16:33:37 -07:00
f45dbed8f9
OCSP
...
1. Modify the other OCSP Stapling scripts to better manage the OCSP responder.
2. Modify the client's W option to take:
- 1 for Stapling v1
- 2 for Stapling v2
- 3 for Stapling v2 MULTI
3. Modify the client to disallow stapling v2 with TLSv1.3.
2018-08-02 16:25:38 -07:00
a43d4d16ba
Merge pull request #1719 from MJSPollard/OpenSSLAllFix
...
Added boost define and openssl bug fix with WOLFSSL_KEY_GEN
2018-08-02 15:20:27 -07:00
a915c3a381
Merge pull request #1738 from ejohnstown/DH
...
DH SP Fix
2018-08-02 15:04:33 -07:00
660c3300e1
Merge pull request #1730 from dgarske/dertoc
...
Added handy script for converting DER file to C array
2018-08-02 15:54:15 -06:00
5ae45436f4
OSCP
...
1. Added a missed attr files for the OSCP status files. Bare minimum attr.
2. Added the attr files to the automake include.
3. Fix out of bounds read with the OCSP URL.
2018-08-02 14:50:59 -07:00
782ea74fbf
Merge pull request #1732 from kojo1/Ticket-4169-2
...
Ticket 4169: eliminate ssl->CBIORecv/Send overwritten in SSL_set_bio
2018-08-02 14:58:25 -06:00
99b556c07d
Merge pull request #1735 from embhorn/zd4179
...
Fix for resource leak
2018-08-02 14:27:04 -06:00
c71f730d67
OSCP
...
1. Made killing the OCSP server process more reliable.
2. Added attr files for the OSCP status files. Bare minimum attr.
3. Added a NL to the error string from the client regarding external tests.
2018-08-02 11:32:36 -07:00
ddec878152
Disable external tests for OCSP scripts
2018-08-02 10:03:47 -06:00
b248af6f84
Update from review
2018-08-02 10:59:07 -05:00
a178764a8b
Portability and self-cleanup changes to ocsp test scripts
2018-08-02 09:47:13 -06:00
93c2f3b170
Initialize array to zero(s)
2018-08-02 09:21:09 -06:00
fd75f35801
fix cbioFlag check
2018-08-02 10:18:09 +09:00
6527c2a724
DH SP Fix
...
When doing the sp_2048_mod_exp_*() is processed, one of the index
variables is masked with 0x1f when it was updated. Added the masking to
the initial set of the index.
2018-08-01 16:32:22 -07:00
c87d6b27e2
OCSP Free
...
Free the OCSP request when creating the response only if there is an error making the request.
2018-08-01 15:34:43 -07:00
0ccdefb8d0
Merge pull request #1733 from ejohnstown/des-iv
...
Fix DES IV value
2018-08-01 14:57:26 -07:00
7647d52d77
Prime Number Testing
...
1. Remove a copy-paste error when clearing up the RNG used to test a prime.
2. Tag a some const test values as static in the wolfCrypt test.
2018-08-01 14:49:06 -07:00
244d931e75
Merge pull request #1721 from kaleb-himes/cleanup-debug
...
Cleanup debug errors
2018-08-01 15:01:25 -06:00
ba2f0fd8fc
Fix for zd4179, 4181, 4182
2018-08-01 15:56:15 -05:00
5ca2ff187b
DES IV
...
Change the DES_IV_SIZE back to 8 bytes, rather than 16.
DES/DES3 was passing the wolfCrypt test becuase the main DES code uses
the DES_BLOCK_SIZE when handling the IV. The TLS/SSL code uses the
DES_IV_SIZE when generating the session keys.
2018-08-01 13:08:52 -07:00
98f6ae16ca
copy cbioFlag from ctx to ssl
2018-08-02 04:48:39 +09:00
8bc5bc227d
Merge pull request #1634 from ejohnstown/gcc-8-fixes
...
GCC-8 String Fixes
2018-08-01 12:13:10 -07:00
da096497e0
Merge pull request #1727 from dgarske/memdocs
...
Documented memory build options
2018-08-01 12:12:34 -07:00
ce5e787afc
formating and sanity check on pointer with test case
2018-08-01 11:57:36 -06:00
dba8131b19
Merge pull request #1731 from ejohnstown/redundant-cert
...
redundant certificate fix
2018-08-01 10:42:30 -07:00
a72cbcf8eb
Merge pull request #1726 from ejohnstown/memcb-test
...
memory callback test fix
2018-08-01 10:05:14 -07:00
cb756397b3
inital AES-CBC with af_alg
...
progress on AES-GCM with AF_ALG and add SHA256
add aes-gcm test cases and finish logic of aes-gcm with AF_ALG
formating of tabs and white space
add files to dist
adding ecb and ctr mode with af_alg
make length of buffers for ctr be AES_BLOCK_SIZE
formating and add support for sha256 copy/gethash
sanity checks on arguments
cast return values and valgrind tests
make it easier to use sha256 with af_alg
remove hard tabs
add endif for after rebase
2018-08-01 08:54:20 -06:00
96c1a567f0
#4169 : CBIO set flag to escape from overwritten in SSL_set_bio
2018-08-01 19:16:42 +09:00
61ac7315e2
a certificate was named in an automake include that isn't actually in the tree, a similar named certificate is actually used
2018-07-31 17:25:35 -07:00
72aef0ab11
Added handy script for converting DER file to C array. Example: ./scripts/dertoc.pl ./certs/server-cert.der server_cert_der_2048 server-cert.c
.
2018-07-31 15:57:02 -07:00
f5b3de6b54
GCC-8 string fixes
...
1. Found one more case where a string is copied, potentially without the null. In wc_ports w.r.t. directory and file names.
2018-07-31 14:02:44 -07:00
7053830628
GCC-8 string fixes
...
Fix for the Windows directory search code.
2018-07-31 14:02:44 -07:00
af89458af0
GCC-8 string fixes
...
1. strncpy needs to include the source string's NULL.
2. Deleted a few redundant string modifications.
2018-07-31 14:02:44 -07:00
ed208efc4d
GCC-8 string fixes
...
1. Modify wolfSSL_get_ciphers() to limit the XSTRNCPY based on the dst buf length, not the src string.
2018-07-31 14:02:44 -07:00
2e1a1681ec
GCC-8 string fixes
...
1. strncat() does not like to copy single byte strings with "n = 1", as it won't null-terminate.
2. strncpy()'s len parameter is the size of the dst not the src.
3. Replaced the echoserver HTTP response composition of const strings with a copy of a single string.
2018-07-31 14:02:44 -07:00
50372b7033
Memory Callback
...
1. Allow SetAllocators to use NULL as a callback. Memory wrappers will use default with NULL.
2. Remove the ResetAllocators function. Use SetAllocators with NULL.
3. Modify memory tracker to save the old allocators on init and restore them on cleanup.
2018-07-31 09:30:03 -07:00
0e1588f4ad
Documented memory build options. Added logging for normal wolf malloc/free opterations when using WOLFSSL_DEBUG_MEMORY
and WOLFSSL_DEBUG_MEMORY_PRINT
(previously only worked with WOLFSSL_STATIC_MEMORY
and WOLFSSL_TRACK_MEMORY
). Changed WOLFSSL_MALLOC_CHECK
option to use WOLFSSL_MSG
.
2018-07-31 09:03:40 -07:00
fe08b98117
Adjust guards following peer review
2018-07-31 09:50:44 -06:00
2b3f94944d
Merge pull request #1723 from kaleb-himes/overhead-avoidance
...
avoid overhead call to alloc and free when sigSz invalid
2018-07-31 08:14:49 -07:00
f18351fef5
Merge pull request #1718 from dgarske/memtest
...
New memory testing feature and fixes for null checks
2018-07-31 07:56:29 -07:00
f5bd376450
Merge pull request #1720 from dgarske/stsafe_wolf
...
Added STM32L4/ST-Safe support. Fixes for AES CBC Decrypt w/CubeMX
2018-07-31 07:41:49 -07:00
0f86494161
* Added support for STM32L4 AES hardware crypto.
...
* Added reference PK callbacks functions for ECC sign, verify and shared secret used by TLS in `wolfcrypt/src/port/st/stsafe.c`.
* Fix for wolfcrypt_test to not require args to be provided.
* Fix for wolfCrypt `ecc_test_buffers` to poperly init ecc_key (resolves devId issue).
* Fix for STM32 AES CBC Decrypt with CubeMX, which was not capturing the first input block for next IV.
* Refactor to combine STM32 hardware init code.
2018-07-30 13:58:19 -07:00
656c0453a2
Fix for unit test abort().
2018-07-30 13:53:54 -07:00
6a91fbcfdd
Fixes for warnings from Jenkins reports.
2018-07-30 13:53:54 -07:00
4eff7b641b
First pass at bugs found with ./scripts/memtest.sh
. Fixes for NULL pointer checks, making sure free'd pointers are reset, making sure pointers are initialized and making sure memory is always free'd. Fix for TicketInit() which was using non-thread safe RNG and key_ctx. Fix for possible double free case in wolfSSL_PEM_read_X509_CRL
.
2018-07-30 13:53:54 -07:00
6ed6876b1f
Enhanced the --enable-memtrack
option to keep list of pointers allocated and reports leaked memory at end. Cleanup of the wolfCrypt_Init and wolfCrypt_Cleanup calls in unit.test and SrpTest memory tracking feature.
2018-07-30 13:53:54 -07:00
2c3475c1d6
Added new build option --enable-memtest
or WOLFSSL_FORCE_MALLOC_FAIL_TEST
which enables random malloc failures for testing. This test supresses the abort()
calls to detect seg faults. A new script ./scripts/memtest.sh
starts the test. If an issue is found it can be reviewed with the ./scripts/memtest.txt
log and reproduced using the seed printed at top of unit test as --- RNG MALLOC FAIL AT 295---
and rerun using ./tests/unit.test 295
.
2018-07-30 13:53:35 -07:00
62cb69ded6
Merge pull request #1724 from dgarske/pemtoder
...
Added API's to expose alloc/free of DerBuffer and new unit tests
2018-07-30 13:50:19 -07:00
335f467b8c
Merge pull request #1714 from dgarske/pic32hashleak
...
Fixes for PIC32MZ hash memory leak
2018-07-30 13:48:59 -07:00
50115e55b3
Merge pull request #1725 from kaleb-himes/USER_CONF_SIZES
...
Allow users to adjust upper bounds
2018-07-30 13:44:58 -07:00
ec238c0553
Allow users to adjust upper bounds
2018-07-30 13:44:40 -06:00
c71d8eb6ba
Merge pull request #1653 from Naruto/feature/mynewt
...
port apache mynewt
2018-07-30 13:33:25 -06:00
1079b0e3b3
Merge pull request #1716 from cariepointer/osp/haproxy
...
Define functions required by HAProxy and enable SSLV3 dependency
2018-07-30 13:26:38 -06:00
0ef63048a0
Fix for new report in wc_BerToDer
with uninitialized derSz
.
2018-07-30 11:51:26 -07:00
309d7a9d0d
Added API's to expose alloc/free of DerBuffer using wc_AllocDer
and wc_FreeDer
. Added unit tests for new API's and missing ones for wc_PemToDer
and wc_CertPemToDer
. ZD 4185.
2018-07-30 11:19:59 -07:00
d19b78d81a
Fix typo in comment
2018-07-30 12:17:55 -06:00
166330030c
Handle case where external unassigned
2018-07-29 06:46:07 -06:00
861fec1dc6
porting mynewt
2018-07-28 18:03:20 +09:00
0ee4b88e74
avoid overhead call to alloc and free when sigSz invalid
2018-07-27 16:25:10 -06:00
4b8507813e
Prime Number Testing
...
1. Also disable the new prime test from TLS while using SELFTEST.
2018-07-27 13:34:38 -07:00
afb2180e80
Cleanup debug errors
2018-07-27 14:00:19 -06:00
04e16b8df8
Merge pull request #1717 from JacobBarthelmeh/Testing
...
sanity check on pkcs8 variable
2018-07-27 13:33:55 -06:00
543cac65d8
Added boost define and openssl bug fix with WOLFSSL_KEY_GEN
2018-07-27 12:42:09 -06:00
74c4d31c07
sanity check on pkcs8 variable
2018-07-27 11:16:41 -06:00
31f1692cbf
Prime Number Testing
...
1. Disable the new prime test from TLS while using FIPS or setting the flag WOLFSSL_OLD_PRIME_CHECK.
2018-07-26 16:01:08 -07:00
4b2a591a93
Prime Number Testing
...
1. Added calls to wc_DhSetCheckKey() on the client side of TLS.
2. Added an API test to the wolfCrypt test.
3. Fixed a bug in the prime test found with the API test. Misuse of tertiary operator.
2018-07-26 14:43:04 -07:00
efbabbfb29
Further improvements to hashing code to make sure wc_*Free is always called including wc_HashFree. Added new defines to disable PIC32MZ hardware features using NO_PIC32MZ_HASH
, NO_PIC32MZ_RNG
and NO_PIC32MZ_CRYPT
.
2018-07-26 14:41:30 -07:00
a1f69f0d64
Define functions required by HAProxy and enable SSLV3 dependency
2018-07-26 12:53:21 -07:00
90367df13c
Merge pull request #1710 from SparkiDev/ed25519_only
...
Changes to build with X25519 and Ed25519 only
2018-07-25 14:24:03 -07:00
84c1b633fb
Merge pull request #1713 from JacobBarthelmeh/UnitTests
...
fix buffer types for ARC4 test
2018-07-25 14:17:10 -07:00
92cb8f06ea
Fixes to make sure hash free is always called (resolves memory leaks with PIC32MZ hashing hardware). Only print Alloc/Free messages with track memory when WOLFSSL_DEBUG_MEMORY_PRINT
is defined. Added test for ForceZero with 0 length.
2018-07-25 11:22:03 -07:00
beceab2734
Fix for leak with WOLFSSL_PIC32MZ_HASH
and TLS. The PIC32 update cache buffer was not always being free'd.
2018-07-25 11:22:03 -07:00
74fbd06817
Merge pull request #1686 from cconlon/nucleus-update
...
Nucleus port and PB changes
2018-07-25 09:17:40 -06:00
003b7b28f4
fix buffer types for ARC4 test
2018-07-24 17:37:39 -06:00
fe2aee11d8
Merge pull request #1712 from JacobBarthelmeh/Testing
...
check if internal of WOLFSSL_RSA struct is already set
2018-07-24 11:55:15 -07:00
17c7ecb2bc
Merge pull request #1711 from dgarske/memtrack
...
Fix for memory tracking cleanup
2018-07-24 11:53:08 -07:00
169cca355f
Merge pull request #1705 from cconlon/truestudio-project
...
Add wolfSSL library project for Atollic TrueSTUDIO
2018-07-24 11:52:11 -07:00
018573bcf3
Merge pull request #1695 from JacobBarthelmeh/Optimizations
...
add some macro guards for CipherRequires function
2018-07-24 11:51:03 -07:00
0175447eb3
tie TRUESTUDIO files into include.am
2018-07-24 09:36:49 -06:00
f69c6e382c
check if internal of WOLFSSL_RSA struct is already set
2018-07-23 17:17:27 -06:00
92bc891713
Merge pull request #1709 from SparkiDev/rsa_low_mem_fix
...
Fix for RSA_LOW_MEM and other configurations
2018-07-23 16:15:28 -07:00
e618f34c2f
Merge pull request #1707 from kaleb-himes/ARM_GCC_EX_FIXES
...
Fixes for building without DRBG and ForceZero test
2018-07-23 16:14:43 -07:00
ef076a68d3
Added new API wolfSSL_ResetAllocators
to allow reset of memory callbacks to defaults. Added new CleanupMemoryTracker
which restores memory callback functions. This resolves issue with trying to free memory allocated prior to InitMemoryTracker.
2018-07-23 16:03:08 -07:00
ab3ffaa26a
Merge pull request #1706 from SparkiDev/sha384_not_sha512
...
Allow SHA384 to be compiled in without SHA512
2018-07-23 09:47:49 -07:00
69aa74d220
Merge pull request #1708 from ejohnstown/config-fix
...
Configure Fix
2018-07-23 10:43:12 -06:00
6d3e145571
Changes to build with X25519 and Ed25519 only
...
Allows configurations without RSA, DH and ECC but with Curve25519
algorithms to work with SSL/TLS using X25519 key exchange and Ed25519
certificates.
Fix Ed25519 code to call wc_Sha512Free().
Add certificates to test.h and fix examples to use them.
2018-07-23 10:20:18 +10:00
06b888a997
Fix for RSA_LOW_MEM and other configurations
...
Also cast return of XMALLOCs.
2018-07-23 08:47:11 +10:00
3957bb4ebe
Configure Fix
...
1. The check for options that start with an underscore to wrap them with another check was broken. Replaced with a use of grep. The old original version breaks on some shells.
2018-07-20 15:14:03 -07:00
c432bb5e82
Revert back to no tests for test.h consideration
2018-07-20 14:41:46 -06:00
887e3deee8
Move ForceZero test to api.c and turn on tests when inline disabled
2018-07-20 13:30:06 -06:00
027f18919a
Resolving some unwanted dependencies
2018-07-20 11:54:36 -06:00
7f19f914c0
create WOLFSSL_NUCLEUS_1_2 for older 1.2 version
2018-07-20 10:51:15 -06:00
d54c7a7df8
Merge pull request #1704 from quinnmiller1997/crossworks
...
Added support for Jenkins testing in Rowley Crossworks
2018-07-20 08:15:16 -07:00
9433fcb820
Allow SHA384 to be compiled in without SHA512
2018-07-20 09:42:01 +10:00
c5a44c083a
Merge pull request #1703 from cconlon/truestudio
...
Fix Atollic TrueSTUDIO warning, add WOLFSSL_STM32F427_RNG
2018-07-19 15:59:11 -07:00
b6ac3379f0
add wolfSSL library project for Atollic TrueSTUDIO
2018-07-19 16:06:42 -06:00
6d0c49a425
Added support for Jenkins testing in Rowley Crossworks
2018-07-19 15:34:28 -06:00
59f241e510
Merge pull request #1702 from ejohnstown/fips-ecc
...
FIPS build and ECC fixes
2018-07-19 13:56:03 -07:00
a58d1cf030
Merge pull request #1655 from MJSPollard/wolfASIO
...
Added wolfSSL compatability for Asio C++ library
2018-07-19 13:44:07 -06:00
19dd08e191
requested style changes
2018-07-19 11:05:56 -06:00
c9434c5ad8
FIPS build and ECC fixes
...
1. The fips-check script was missing the ecc file when building the FIPSv2 test directory. The correct file was sent in for testing.
2. When building with ECC import validation enabled, one usage of the ALLOC_CURVE_SPECS macro had an extra parameter. (copy-and-paste error)
2018-07-19 10:02:14 -07:00
213f79f06f
only require Nucleus XTIME when NO_ASN_TIME is not defined
2018-07-19 10:47:37 -06:00
42985d8250
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into wolfASIO
2018-07-19 10:26:54 -06:00
5c940351b7
add include for task.h for FREERTOS in benchmark.c
2018-07-18 16:52:16 -06:00
5b9fbb5d42
add WOLFSSL_STM32F427_RNG support
2018-07-18 16:44:30 -06:00
27b7791f5e
fix TrueSTUDIO warning in PKCS12_create_key_bag()
2018-07-18 16:15:33 -06:00
da1ac3643f
added current_issuer member in X509_STORE_CTX struct for SSF use
2018-07-18 16:01:16 -06:00
70dfb9af72
Merge pull request #1700 from embhorn/zd4110
...
Move #if blocking wc_PubKeyPemToDer
2018-07-18 12:33:01 -07:00
0dbd35ae01
websocketpp compat. addition, add new define for asio
2018-07-18 12:09:12 -06:00
db8939c578
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into wolfASIO
2018-07-18 11:10:35 -06:00
227e7cc8c7
Merge pull request #1690 from SparkiDev/tls_sha384_copy
...
Remove special case SHA-384 copy code
2018-07-18 09:37:50 -07:00
aa2d6f8060
Merge pull request #1699 from dgarske/ecc508a_pkcb
...
Added reference PK callbacks for ATECC508A to support TLS
2018-07-18 09:35:58 -07:00
436e774729
Merge pull request #1685 from SparkiDev/dh_max
...
Add support for maximum DH key size
2018-07-18 09:33:43 -07:00
52aac6e641
Merge pull request #1697 from embhorn/zd4060
...
Dead code in wolfSSL_BIO_gets()
2018-07-18 09:22:35 -07:00
0c59aa8e31
Move #if blocking wc_PubKeyPemToDer
2018-07-18 11:15:06 -05:00
17d5b6a42b
Merge pull request #1694 from SparkiDev/stack_ecc
...
Small stack support in ECC
2018-07-18 08:57:35 -07:00
ebdfe9715e
Merge pull request #1698 from SparkiDev/ed25519_def
...
Fix define protection to be ED25519 not ECC
2018-07-17 20:05:47 -07:00
74c391d138
Added reference PK callbacks (HAVE_PK_CALLBACKS
) for ATECC508A device for wolfSSL TLS.
2018-07-17 19:02:56 -07:00
0236a293e4
Fix define protection to be ED25519 not ECC
2018-07-18 10:12:57 +10:00
ce092a96a2
Change default maximum to 4096 bits.
2018-07-18 08:40:43 +10:00
a862ef860b
Merge pull request #1696 from quinnmiller1997/crossworks
...
Updated Rowley-Crossworks settings for CMSIS 4, added support for Jenkins testing
2018-07-17 13:32:34 -07:00
1840ae7013
Merge pull request #1693 from SparkiDev/stack_rsa
...
Small stack fixes and ignore RSA fields in RSA_LOW_MEM
2018-07-17 12:24:00 -07:00
6a6f5d01b4
Fix for zd4060
2018-07-17 14:20:14 -05:00
f693c9cc8b
Merge pull request #1692 from SparkiDev/stack_hashalgs
...
Stack hashalgs
2018-07-17 12:20:02 -07:00
96567112cd
Merge pull request #1691 from SparkiDev/stack_dh_tls
...
Small stack fixes
2018-07-17 12:15:26 -07:00
8fed6dfb27
Merge pull request #1687 from cariepointer/openssh-des3
...
Update configure to enable des3 when building OpenSSH
2018-07-17 12:03:18 -06:00
1766b69de2
Added suppport for Jenkins testing on FRDM-K64F and updated README
2018-07-17 11:30:33 -06:00
d6c9d30aee
Merge pull request #1689 from ejohnstown/atomic-dtls
...
DTLS and Atomic Encrypt Callback
2018-07-17 09:37:50 -07:00
eebbe0239a
Merge pull request #1683 from kaleb-himes/SGX_STATIC_LIB_FIX
...
Update SGX Static lib solution, solve through settings.h
2018-07-17 10:22:14 -06:00
7e5bf9b8a9
add some macro guards for CipherRequires function
2018-07-17 09:04:06 -06:00
e6c22fbd85
Small stack support in ECC
...
Small stack builds now dynamically allocate large stack variables.
Cache option added to avoid repeated allocation of temporaries in add
points, double point and map.
Cached memory allocated in mulmod and mul2add.
2018-07-17 16:39:53 +10:00
c01c79349e
Small stack fixes and ignore RSA fields in RSA_LOW_MEM
...
Fix asn.c and rsa.c small stack to not have large stack variables.
In RSA code don't load or store dP, dQ or u when using RSA_LOW_MEM as
they are not used.
Fix SP to recognize RSA_LOW_MEM means to use d, private exponent.
Fix wc_CheckRsaKey to work with SP.
Fix sp_int to support mp_set_int for wc_CheckRsaKey().
2018-07-17 11:05:38 +10:00
befe15ddb9
Add configure option to cache when using small stack
2018-07-17 09:36:49 +10:00
6ef800e5f7
Cache Sha256 for small stack when asked in random
...
Small stack builds see SHA-256 allocating W a lot.
Cache the SHA-256 object in DRBG when WOLFSSL_SMALL_STACK_CACHE is
defined.
Call free function on SHA-256 object now that it is required.
2018-07-17 09:33:24 +10:00
88a2531652
Cache the data allocated in SHA-2 Transform functions
...
SHA-2 algorithms allocate W each call to transform when using
WOLFSSL_SMALL_STACK.
Put a pointer into the SHA-2 object to cache W.
Change code to call the SHA-2 Free functions now that they are required.
Only cache when WOLFSSL_SMALL_STACK_CACHE is defined.
2018-07-17 09:17:39 +10:00
514a949557
Small stack fixes
...
Changes to DH and SSL/TLS code to dynamically allocate large stack
variables when compiled with WOLFSSL_SMALL_STACK.
2018-07-17 09:04:00 +10:00
87f378efb5
Remove special case SHA-384 copy code
...
SHA-384 implementation has a GetHash API and TLS code uses it.
2018-07-17 08:16:46 +10:00
49fefe176e
DTLS and Atomic Encrypt Callback
...
When using the encrypt callback, the DTLS sequence number isn't incremented. Moved the increment to later in the BuildMessage() function.
2018-07-16 13:33:03 -07:00
ea769b831c
Fix tab indentation
2018-07-16 13:09:45 -07:00
dbe0ac6fec
Update configure to enable des3 when building OpenSSH
2018-07-16 09:49:23 -07:00
00fd7ff8de
Prime Number Testing
...
1. Added some new ifdef clauses to tfc and integer so that
the prime checking is available when using RSA, DSA, or DH.
A couple functions used were dependent on ECC being enabled.
2018-07-13 17:42:35 -07:00
f0422bec41
Merge pull request #1681 from dgarske/pk_keygen
...
Added ECC and Curve25519 Key Generation PK callback support
2018-07-13 14:03:13 -07:00
f59fb0df8e
add custom print to test.c for PB
2018-07-13 14:58:48 -06:00
eeb50099d9
initial Nucleus port with PB changes
2018-07-13 14:58:37 -06:00
1337f7ddec
Merge pull request #1674 from dgarske/derchainsz
...
Fix for max cert chain size calculation
2018-07-13 13:53:35 -07:00
ddd6563442
Dependencies for SGX project updated
2018-07-13 13:18:15 -06:00
6c1778d373
Merge pull request #1669 from cconlon/mqxfixes
...
fixes for MQX classic 4.0 with IAR-EWARM
2018-07-13 11:59:28 -07:00
223c71b96c
Merge pull request #1673 from ejohnstown/configure-update
...
Yet Another Configure Update
2018-07-13 11:55:08 -07:00
0a19dc0940
Don't run new cert chain test if RSA is disabled (test chain contains RSA certs).
2018-07-13 11:41:06 -07:00
2f00c0b465
Added test case for new server ECDHE PK callback.
2018-07-13 10:45:36 -07:00
71d8946ee6
Merge pull request #1678 from cariepointer/osp/openssh
...
Move function prototypes from wolfss/ssl.h and openssl/ssl.h to appropriate header files for OpenSSH compatibility
2018-07-13 10:05:18 -06:00
9bc0e0c4fc
Static analysis fixes ( #1658 )
...
* Static analysis fixes
* Fixes for zd4071, zd4074, zd4093-zd4094, zd4096, zd4097-zd4104.
* Add test cases.
2018-07-13 09:02:09 -07:00
f22f33606a
Merge pull request #1684 from ejohnstown/distcheckfix
...
add missing certificates to the automake include
2018-07-13 09:41:10 -06:00
ffc6cf4eb8
Add support for maximum DH key size
2018-07-13 17:36:42 +10:00
771e349925
Prime Number Testing
...
1. Moved a few functions around in tfm.c and integer.c.
2. Added some new ifdef clauses to tfc and integer so that the prime checking is available when using RSA, DSA, or DH.
3. Added an internal version of function wc_DhSetKey and wc_DsaImportParamsRaw that always checks to see if the prime value is prime. Modified the original function to be a wrapper.
2018-07-12 17:22:44 -07:00
0240cc7795
add missing certificates to the automake include
2018-07-12 17:06:02 -07:00
997a377310
Prime Number Testing
...
1. In wc_DhGenerateParams(), changed the call to mp_prime_is_prime() to
mp_prime_is_prime_ex().
2. In wc_MakeDsaParameters(), changed the call to mp_prime_is_prime() to
mp_prime_is_prime_ex().
3. Added wc_CheckProbablePrime_ex in RSA that also takes an RNG to call
mp_prime_is_prime_ex(). If RNG is NULL, call mp_prime_is_prime().
4. Rewrite wc_CheckProbablePrime() in terms of
wc_CheckProbablePrime_ex().
2018-07-12 15:00:13 -07:00
7d5da4d122
Fix typo in function name
2018-07-12 14:40:46 -07:00
0ce6cbd4c4
Added API unit test for wolfSSL_CTX_use_certificate_chain_file_format
.
2018-07-12 13:22:21 -07:00
1b965491d9
Solve through settings.h instead
2018-07-12 14:09:57 -06:00
f7c5b27bfc
Merge pull request #1675 from toddouska/zero-error
...
make SOCKET_PEER_CLOSED_E consistent between read and 2 write cases
2018-07-12 12:53:48 -07:00
cadd556b3a
cast result of bitwise not back to original type to prevent compiler warnings
2018-07-12 13:46:55 -06:00
eeece1df1e
Fix for duplicate declaration of EccMakeKey
.
2018-07-12 12:13:10 -07:00
81d13e15d5
Added ECC and Curve25519 Key generation callback support for HAVE_PK_CALLBACKS
. The TLS server side ECDHE could not correctly handle PK callback based shared secret calculation using a hardware based generated key. Refactor internal functions to use the callback ctx getter API.
2018-07-12 11:52:54 -07:00
d486df50aa
fix an error where mp_copy was used instead of mp_sub_d
2018-07-12 11:03:41 -07:00
93d7891701
Added different tls version support for asio
2018-07-12 11:59:58 -06:00
d8dff3e4de
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into wolfASIO
2018-07-12 11:57:34 -06:00
40d0e7f711
Merge pull request #1677 from ejohnstown/gcc-arm-update
...
GCC-ARM README Update
2018-07-12 10:27:07 -07:00
c1af8d2190
Move function prototypes from wolfss/ssl.h and openssl/ssl.h to appropriate header files for OpenSSH compatibility
2018-07-12 08:13:51 -07:00
5908230d20
Prime Number Testing
...
1. Fixed variable name typo in DH for the FFDHE 8192-bit q value.
2. Updated some error strings in wolfSSL_BN_is_prime_ex().
3. Changed the calls to mp_prime_is_prime_ex() in fp_randprime() and
mp_randprime() so they go back to the 8 rounds of MR, which is more than
adequate in this situation.
2018-07-11 16:24:41 -07:00
2f638a0ae1
GCC-ARM README Update
...
Added directions for building wolfSSL using the gcc-arm-none-eabi tools.
2018-07-11 16:05:02 -07:00
23687f44bc
Merge pull request #1643 from ejohnstown/altnames
...
Subject Alt Name Matching
2018-07-11 13:20:58 -07:00
d639939a07
make SOCKET_PEER_CLOSED_E consistent between read and 2 write cases
2018-07-11 13:00:29 -07:00
05cfeae3ce
Fix for handling max cert chain size. It was not accounting for the 3 byte header in max size calculation.
2018-07-11 12:32:49 -07:00
eb32935081
Configure Update
...
1. Fix typo.
2. Change the parsing of the -D options to be more POSIX friendly.
Removed the "==" and replaced the multi escaped [] with a test command.
2018-07-11 12:01:05 -07:00
0f2b5ca181
fixes for MQX classic 4.0 with IAR-EWARM
2018-07-11 10:54:24 -06:00
df6c496c4e
Merge pull request #1671 from SparkiDev/x25519_asm_fix
...
Fix for Curve25519 ASM
2018-07-11 09:50:57 -07:00
c1a9945656
Merge pull request #1670 from JacobBarthelmeh/UnitTests
...
check that fp max bits is large enough before test
2018-07-11 09:49:22 -07:00
9281f30deb
Fix for Curve25519 ASM
...
On rare occasions, multiplication and/or squaring result had top bit set
after overflow add - must to be reduced in that case.
2018-07-11 11:53:53 +10:00
239880a9de
Subject Alt Name Matching
...
1. Removed an external test tag from a failure test case. Ends up leaving a thread still running on exit.
2018-07-10 17:07:48 -07:00
e2dec618d8
Merge pull request #1667 from ejohnstown/certgentime
...
Cert Gen Time
2018-07-10 14:40:37 -07:00
0e06f6413d
Prime Number Testing
...
1. Update the function wolfSSL_BN_is_prime_ex to use mp_prime_is_prime_ex.
2. Modified fast and normal mp_prime_is_prime_ex() to use random numbers
that are in the range 2 < a < n-2.
2018-07-10 14:30:53 -07:00
9ca5c65f33
Merge pull request #1645 from abrahamsonn/doxygen-appearance-fix
...
Doxygen appearance fix
2018-07-10 15:27:07 -06:00
58478c50af
check that fp max bits is large enough before test
2018-07-10 15:09:47 -06:00
4cbae0bca3
changes to make jenkins tests work
2018-07-10 13:34:16 -06:00
3fc7424e03
implemented requested changes
2018-07-10 11:52:41 -06:00
d361a1aebd
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into wolfASIO
2018-07-10 11:04:53 -06:00
f1c3098bdc
Prime Number Testing
...
Made modifications to the primality testing so that the Miller-Rabin tests check against up to 40 random numbers rather than a fixed list of small primes.
2018-07-09 16:33:26 -07:00
87499aa7bd
Merge pull request #1668 from ejohnstown/ignore-file
...
Ignore File
2018-07-09 11:18:44 -07:00
376a4d3ca8
Merge pull request #1666 from dgarske/fix_always_verify
...
Fix for building with `WOLFSSL_ALWAYS_VERIFY_CB`
2018-07-09 11:13:28 -07:00
90cf4ad7ad
Merge pull request #1648 from embhorn/pkcb
...
Add PK_CALLBACK support for RSA/ECC verify to ConfirmSignature
2018-07-09 11:05:48 -07:00
9c2a5d2906
Further simplification of the PK verify wrapping to avoid malloc/free. Thanks Todd!
2018-07-06 16:21:43 -07:00
ed17963f21
Add fipsv2.c to the gitignore file.
2018-07-06 16:08:16 -07:00
2e2a502683
Merge pull request #1659 from ejohnstown/configure-update
...
Configure Update
2018-07-06 16:08:11 -07:00
85d58cbf8c
Fix for building with WOLFSSL_ALWAYS_VERIFY_CB
.
2018-07-06 15:31:52 -07:00
5cc8771b43
Cert Gen Time
...
When generating the times for a generated certificate, calculate the
time differences based on the seconds from epoch rather then converting
back and forth between tm structures. One particular RTOS calculates the
date change when generating a certificate on the first of the month. It
leaves the certificate valid on the zeroth of the month.
2018-07-06 15:31:34 -07:00
595beb3fec
Fixup for the removal of const
.
2018-07-06 09:35:00 -07:00
32f1b0a9c2
Added separate context for each SignatureCtx
verify callback. Added missing ssl
info to callback context.
2018-07-06 09:28:46 -07:00
9bf8122af7
Merge pull request #1660 from JacobBarthelmeh/ARMv8
...
adjust macro guards for additional functions
2018-07-06 09:02:35 -07:00
8ba4dda8a8
Merge pull request #1663 from dgarske/lib_isolate
...
Cleanup old `WOLFSSL` and `WOLFSSL_CTX` references in wolfCrypt
2018-07-05 16:09:56 -07:00
80f98f7ab7
Merge pull request #1664 from JacobBarthelmeh/Testing
...
keep length value after call to wc_BerToDer
2018-07-05 18:05:28 -05:00
3cbcc872c1
Improved PK callback support for ConfirmSignature so certificate verification uses the callbacks. Retained wolfSSL/wolfCrypt isolation (I.E. no wolfSSL references from wolfCrypt).
2018-07-05 14:04:06 -07:00
e44cb91a3b
keep length value after call to wc_BerToDer
2018-07-05 14:35:35 -06:00
0e8e3b7441
Cleanup old WOLFSSL
and WOLFSSL_CTX
references in wolfCrypt that are no longer required.
2018-07-05 09:58:47 -07:00
c8e118cd12
adjust macro guards for additional functions
2018-07-03 16:52:29 -06:00
af65a9520a
Configure Update
...
Change the increment of the number of jobservers to be more posixish.
More compatible with HPUX's ksh.
2018-07-03 14:42:51 -07:00
ae54bae2fa
Merge pull request #1654 from SparkiDev/tls13_stapling
...
TLS 1.3 OCSP Stapling
2018-07-03 12:56:28 -07:00
ad0f775911
Merge branch 'master' into wolfASIO
2018-07-03 11:14:16 -06:00
ac0b31dee8
refactored and added defines for wolfSSL/Asio Compat
2018-07-03 11:07:15 -06:00
f809a6a17b
Merge pull request #1651 from dgarske/pkcs7_dynamic
...
Added PKCS7 dynamic allocation support
2018-07-02 16:26:03 -07:00
fbd5a4f67f
Merge pull request #1650 from dgarske/fix_armv8_aes
...
Fix ARMv8 AES code build error
2018-07-02 16:23:32 -07:00
77f11a6be9
Merge pull request #1649 from embhorn/zd4043
...
Fix for memory leak in wolfSSL_BN_hex2bn
2018-07-02 16:22:57 -07:00
9f35d211e0
Merge pull request #1644 from JacobBarthelmeh/Compatibility-Layer
...
add ca when getting chain from x509 store
2018-07-02 16:22:11 -07:00
e17a16a45a
Merge pull request #1600 from dgarske/lighttpd
...
Changes to support Lighttpd 1.4.49
2018-07-02 16:18:41 -07:00
df9ed87c5f
Merge pull request #1652 from ejohnstown/dhtestleak
...
Fixed a memory leak in the wolfCrypt test for DH key generation.
2018-07-02 17:05:22 -06:00
52d9803d72
Merge pull request #1657 from JacobBarthelmeh/Testing
...
casts for tls 1.3 windows warnings
2018-07-03 08:25:01 +10:00
adb3cc5a5a
Subject Alt Name Matching
...
1. Added certificates for localhost where the CN and SAN match and differ.
2. Change subject name matching so the CN is checked if the SAN list doesn't exit, and only check the SAN list if present.
3. Added a test case for the CN/SAN mismatch.
4. Old matching behavior restored with build option WOLFSSL_ALLOW_NO_CN_IN_SAN.
5. Add test case for a correct certificate.
Note: The test for the garbage certificate should fail. If you enable the old behavior, that test case will start succeeding, causing the test to fail.
2018-07-02 13:39:11 -07:00
cf191a4d96
Fixed a memory leak in the wolfCrypt test for DH key generation.
2018-07-02 13:31:13 -07:00
201217bd97
casts for tls 1.3 windows warnings
2018-07-02 13:55:38 -06:00
2bd4fb110c
Fix additional cases for use of unititlized PKCS isDynmaic in unit test.
2018-07-02 10:24:41 -07:00
e319987579
Added wolfSSl compatability for Asio C++ library
2018-07-02 10:48:02 -06:00
fb3d3dce0e
Fix for use of unititlized PKCS7.isDynamic
case in unit test. Added return code checks for wc_PKCS7_Init
.
2018-07-02 09:38:14 -07:00
a9ff79e321
check return value
2018-07-02 10:10:30 -06:00
0bf3a89992
TLS 1.3 OCSP Stapling
...
Introduce support for OCSP stapling in TLS 1.3.
Note: OCSP Stapling v2 is not used in TLS 1.3.
Added tests.
Allow extensions to be sent with first certificate.
Fix writing out of certificate chains in TLS 1.3.
Tidy up the OCSP stapling code to remove duplication as much as
possible.
2018-07-02 16:59:23 +10:00
3adbb07abe
Comment correction.
2018-06-29 15:07:56 -07:00
733cb74ea8
Updated all PKCS7 XMALLOC/XFREE to use heap pointer (even small stack).
2018-06-29 15:05:37 -07:00
07401d909c
Added support for dynamic allocation of PKCS7 structure using wc_PKCS7_New
and wc_PKCS7_Free
. Updated the test examples to use the dynamic method. Add API unit test for wc_PKCS7_New
.
2018-06-29 15:04:28 -07:00
33b72a3dfe
Merge pull request #1647 from ejohnstown/akid-not-crit
...
Add error case for critical Auth Key ID extension
2018-06-29 10:41:04 -07:00
44c4e33290
Fix ARMv8 AES code to use the shared aes.h CTR_SZ
and GCM_NONCE_MID_SZ
.
2018-06-29 10:22:25 -07:00
ebb3eb87d1
Update from review
2018-06-29 11:02:10 -05:00
42ece70ff2
Merge pull request #1635 from ejohnstown/rpm-fixes
...
RPM Fixes
2018-06-29 09:44:11 -06:00
c6890d518e
Fix resource leak in wolfSSL_BN_hex2bn
2018-06-29 09:44:01 -05:00
54f2c3fe18
Merge pull request #1646 from dgarske/stm32l4_iar
...
Added support for the STM32L4 and fixed mixed enum warnings
2018-06-28 15:34:33 -07:00
b4da4340a1
Merge pull request #1640 from SparkiDev/tls13_nb
...
Fix non-blocking and buffered I/O
2018-06-28 15:32:42 -07:00
ea32f2dbef
Merge pull request #1638 from SparkiDev/nginx-ocsp
...
Fix support for OCSP and Nginx
2018-06-28 15:31:18 -07:00
e204b19923
add statusCb variable to OPENSSL_EXTRA build
2018-06-28 14:36:15 -06:00
6fa92fdd71
Add error case for critical Auth Key ID extension
2018-06-28 13:03:16 -07:00
cd2971fb93
Abstracted code for setting options mask to improve wolfSSL_CTX_set_options
, so it doesn't require allocating a WOLFSSL object.
2018-06-27 21:30:25 -07:00
6dbca2b718
Fix to resolve the increased stack by allocating the temp ssl
from the heap.
2018-06-27 19:44:34 -07:00
66c2c65444
Changes to support Lighttpd 1.4.49:
...
* Fix for `wolfSSL_CTX_set_options` to work correctly when no certificate has been set for WOLFSSL_CTX, otherwise this operation fails with `Server missing certificate`.
* Fix for bad argument name `time`.
* Fix for `warning: type of bit-field`: Allowed types for bit-fields are int and unsigned int only.
* Exposed `ERR_remove_thread_state` and `SSL_CTX_set_tmp_ecdh` for lighttpd
* Renamed `WOLFSSL_ERR_remove_thread_state` to `wolfSSL_ERR_remove_thread_state` and setup old name macro.
* Add missing newline on asn1.h.
* Whitespace cleanup in ssl.c.
2018-06-27 19:44:34 -07:00
7ae9e4359d
Added support for the STM32L4 with AES/SHA hardware acceleration. Fixed a few minor compiler warnings with mis-matched enum types.
2018-06-27 19:40:03 -07:00
abaa5daf43
Fix non-blocking and buffered I/O
...
Fix states in TLS 1.3 connect and accept to be monotonically increasing
by 1.
Always have a new state after a buffer is constructed to be sent.
Add non-blocking support into TLS benchmark and support TLS 1.3.
2018-06-28 08:49:32 +10:00
7fbe1d3049
Fix support for OCSP and Nginx
...
Store DER copy of CA certificate with signer when
WOLFSSL_SIGNER_DER_CERT is defined.
Keep the bad issuer error for later when compiling for OpenSSL
compatability.
Authority Info string needs to be passed back with a nul terminator.
2018-06-28 08:48:06 +10:00
f32bd77a1d
Updating appearance
...
In the past, Doxygen just listed API for wolfSSL and wolfCrypt in one long list.
Now there are two separate pages for the wolfSSL and wolfCrypt API references.
2018-06-27 16:29:37 -06:00
765d97ae01
1. Trailing whitespace removal
2018-06-27 16:22:12 -06:00
af75145602
adjust macro guards
2018-06-27 16:13:46 -06:00
ac3eb470f9
Merge pull request #1642 from ejohnstown/conner-doc-update
...
Doxy Update
2018-06-27 14:37:52 -06:00
c2c209fb89
add ca when getting chain from x509 store
2018-06-27 14:09:32 -06:00
47497f5aaa
Removed stray merge failure marker debris.
2018-06-27 10:40:03 -07:00
554275ba71
documentation fix, changes made to x509_print for wolfCLU
2018-06-27 10:29:18 -07:00
13b7dad0fa
documentation clean up, added check for asn generalized time
2018-06-27 10:22:47 -07:00
5d767aa004
Merge pull request #1641 from ejohnstown/rename-inline
...
Rename INLINE
2018-06-27 09:34:41 -07:00
0c74e778dc
Merge pull request #1633 from dgarske/bench_3072
...
Benchmark support for 3072-bit RSA and DH
2018-06-27 07:17:53 -07:00
3572b26bd9
Merge pull request #1636 from JacobBarthelmeh/Testing
...
add options for OCSP test and combine certs
2018-06-26 22:46:11 -07:00
1b2876679b
Merge pull request #1631 from ejohnstown/wolfio-select
...
wolfIO Select Update
2018-06-26 19:27:20 -07:00
f031a6fc67
check on variable for printout
2018-06-26 17:03:04 -06:00
586874b997
Rename INLINE
...
1. Renamed the macro INLINE as WC_INLINE.
2. For FIPS and the "selftest" build, define INLINE as WC_INLINE. Allows the FIPS code to work unchanged.
2018-06-26 15:17:46 -07:00
d8086ded6a
Merge pull request #1639 from ejohnstown/selftest-fixes
...
netbsd-selftest fix
2018-06-26 15:38:03 -06:00
d9b5948947
Merge pull request #1605 from dgarske/asyncfsanitize
...
Fixes for async to resolve runtime fsanitize issues
2018-06-26 14:27:07 -07:00
4151af4b4a
A few new functions in AES-GCM and DH don't exist in the netbsd-selftest build of wolfSSL. Option them out of the wolfCrypt self-test.
2018-06-25 17:49:11 -07:00
a7d761c336
Merge pull request #1424 from ejohnstown/fipsv2
...
FIPSv2
2018-06-25 09:58:48 -07:00
8c9e0cd427
add options for OCSP test and combine certs
2018-06-22 15:58:27 -06:00
d13dfa309e
RPM Fixes
...
1. Fixed a few parsing checks in the dates in the RPM changelog.
2. Moved some file names between sections in the include.am and spec.in files.
3. Added the match-start-of-line to the regex for finding the -D items for the options file.
2018-06-22 11:55:09 -07:00
9d7bcf8ec7
wolfIO Select Update
...
1. In wolfIO_Select(), separate out the fd lists into separate read and write lists.
2. Check the read and write fds lists to see if the connect() succeeded or failed.
3. Windows doesn't use the nfds parameter to Select. Initialize it to zero and reset it to the right value when building for not-Windows.
4. Remove the warning disable for Windows.
GCC 8.1 checks that "restrict" pointer parameters don't point to the same thing and will error if they do.
2018-06-22 10:49:57 -07:00
e6c7952f50
Merge master into fipsv2. Resolved a conflict in api.c.
2018-06-22 09:52:26 -07:00
ed1c56a4fc
Benchmark support for 3072-bit RSA and DH when USE_CERT_BUFFERS_3072
is defined.
2018-06-22 09:30:33 -07:00
522f365279
Fix one more issue with PKCS7 and async, which is not supported.
2018-06-22 09:30:25 -07:00
1cb5bbf8ea
Fixes for some async issues. Fixes an async issue with BuildMessage. Fixes for PKCS7 tests to not use async since it is not supported.
2018-06-22 09:30:25 -07:00
71606dde45
Fixes for a few wolfCrypt test memory leaks. Fix for HMAC with empty input not supported on QuickAssist.
2018-06-22 09:30:25 -07:00
ec132cd3f4
Fix fsanitize issue for mp_rand
.
2018-06-22 09:30:25 -07:00
623f1b58ac
Fix for min IV size check. Cleanup of the max IV to use new enum MAX_IV_SZ
.
2018-06-22 09:30:25 -07:00
64ba151c35
Experimental fixes for async to resolve runtime fsanitize issues with invalid memory access due to attempting realloc on non NUMA type. Tested with ./configure --with-intelqa=../QAT1.6 --enable-asynccrypt CC="clang -fsanitize=address" --enable-debug --disable-shared --enable-trackmemory CFLAGS="-DWOLFSSL_DEBUG_MEMORY -DWOLFSSL_DEBUG_MEMORY_PRINT" && make
and sudo ./tests/unit.test
.
2018-06-22 09:30:25 -07:00
1179969dcf
Merge pull request #1630 from embhorn/zd3963
...
Add support for C99 tools without strings.h and add option to disable C99
2018-06-21 18:00:23 -07:00
8e78623123
Merge pull request #1632 from JacobBarthelmeh/Release
...
prepare for release v3.15.3
2018-06-21 15:37:32 -07:00
8fd18e06f7
prepare for release v3.15.3
2018-06-21 12:22:27 -06:00
518c987c61
update CA for ocsp test
2018-06-21 12:13:33 -06:00
9d86d323ef
Merge pull request #1628 from JacobBarthelmeh/Fuzzer
...
sanity check on hashing size
2018-06-20 17:46:38 -07:00
bf63003237
sanity check before reading word16 from buffer
2018-06-20 16:48:40 -06:00
2f43d5eece
update size to be used with fuzzing
2018-06-20 15:29:05 -06:00
0dc9a19835
Remove check to include strings.h
2018-06-20 10:40:03 -05:00
777c89a257
sanity check on pointer
2018-06-20 09:37:36 -06:00
61655ef56d
comment on sz value and sanity check before fuzzing
2018-06-20 09:21:56 -06:00
83324f39d7
update IO callback function names with CSharp wrapper
2018-06-20 09:10:19 -06:00
07810eb21e
Merge branch 'master' into zd3963
2018-06-20 10:05:20 -05:00
6d3237a0b4
Add support for C99 tools withoutstrings.h and add option to disable C99 checking.
2018-06-20 09:49:33 -05:00
c1362cca60
Merge pull request #1629 from JacobBarthelmeh/Certs
...
disable CRL with additional cn/alt test certs
2018-06-19 14:42:21 -07:00
d481a3fb92
Merge pull request #1625 from JacobBarthelmeh/Testing
...
memory management with test cases
2018-06-19 14:41:18 -07:00
d8e278b6b3
revert free on sig and add comment
2018-06-18 18:15:26 -06:00
e348522353
Merge pull request #1627 from ejohnstown/pkcs7-verify
...
Fix PKCS7 Sign Verify
2018-06-18 15:32:18 -07:00
4e6a88caf9
Merge pull request #1626 from JacobBarthelmeh/UnitTests
...
fix for implicit declaration error
2018-06-18 15:30:06 -07:00
d3cd0b6b2e
disable CRL with additional cn/alt test certs
2018-06-18 16:10:45 -06:00
38f916a798
sanity check on hashing size
2018-06-18 15:50:44 -06:00
2fd000532a
A length value was set to zero in a situation where the existing value was needed.
2018-06-18 11:48:45 -07:00
c98aca32c4
static analysis report fixes
2018-06-15 17:00:45 -06:00
bade35bd76
update return value
2018-06-15 16:25:09 -06:00
0f9063d2a9
fix for implicit declaration error
2018-06-15 16:14:22 -06:00
a1295b3148
memory management with test cases
2018-06-15 15:43:42 -06:00
c78a552eb3
Merge pull request #1598 from JacobBarthelmeh/Nucleus
...
wolfCrypt only Nucleus
2018-06-15 14:23:54 -07:00
0d0aa74444
Merge pull request #1623 from dgarske/fix_atecc508a
...
Fixes for build with `WOLFSSL_ATECC508A` defined
2018-06-15 11:06:33 -07:00
55945acd55
Merge pull request #1622 from cconlon/cavp-selftest-fix
...
fix CAVP self test build with newer raw hash functions
2018-06-15 11:02:15 -07:00
b90fa909ef
add warning for source of entropy
2018-06-15 11:40:05 -06:00
495e3552d2
Merge pull request #1624 from JacobBarthelmeh/Testing
...
move location of wolfSSL_d2i_RSA_PublicKey to fix x509 small build
2018-06-15 10:39:08 -07:00
c03c10e1d4
move location of wolfSSL_d2i_RSA_PublicKey to fix x509 small build
2018-06-14 14:38:15 -06:00
139a08a98e
Merge pull request #1621 from SparkiDev/tls13_no_cs
...
Allow NO_WOLFSSL_CLIENT/SERVER to compile and pass tests
2018-06-14 09:08:13 -07:00
5b2bb44bc8
Fixes for build with WOLFSSL_ATECC508A
defined.
2018-06-13 20:10:01 -07:00
aa01fd8adf
Merge pull request #1619 from JacobBarthelmeh/HardwareAcc
...
RAW hash function APIs not supported with ARMv8 build
2018-06-13 16:07:53 -07:00
15348d4936
Merge pull request #1612 from dgarske/fixmatchdomainname
...
Fixes for `MatchDomainName` to properly detect failures
2018-06-13 13:13:52 -07:00
534114d979
For the FIPSv2 build, remove the define for FP_MAX_BITS from the CFLAGS. Default value was appropriate.
2018-06-13 09:35:42 -07:00
61056829c5
Added success test cases for domain name match (SNI) in common name and alternate name.
2018-06-13 09:26:54 -07:00
1db5d6ebd6
fix CAVP self test build with newer raw hash functions
2018-06-13 09:55:16 -06:00
a03c15e598
Allow NO_WOLFSSL_CLIENT/SERVER to compile and pass tests
2018-06-13 11:42:16 +10:00
e60262cbf1
Merge pull request #1604 from TimParrish/addAMDFunk
...
Update cpuid.c to optimize intelasm for performance on AMD processors
2018-06-12 16:19:33 -07:00
8fa1592542
Fix to use SHA256 for the self-signed test certificates.
2018-06-12 16:12:29 -07:00
9dc560dd01
RAW hash function APIs not supported with ARMv8 build
2018-06-12 16:45:38 -06:00
1f16b36402
Fixes for MatchDomainName
to properly detect failures:
...
* Fix `MatchDomainName` to also check for remaining len on success check.
* Enhanced `DNS_entry` to include actual ASN.1 length and use it thoughout (was using XSTRLEN).
Added additional tests for matching on domain name:
* Check for bad common name with embedded null (CN=localhost\0h, Alt=None) - Note: Trouble creating cert with this criteria
* Check for bad alternate name with embedded null (CN=www.nomatch.com, Alt=localhost\0h)
* Check for bad common name (CN=www.nomatch.com, Alt=None)
* Check for bad alternate name (CN=www.nomatch.com, Alt=www.nomatch.com)
* Check for good wildcard common name (CN=*localhost, Alt=None)
* Check for good wildcard alternate name (CN=www.nomatch.com, Alt=*localhost)
2018-06-12 14:15:34 -07:00
9448b96afd
updated change log
2018-06-12 14:15:57 -06:00
26835bef79
Updated README.md
2018-06-12 13:54:50 -06:00
1dd7f83752
Merge branch 'addAMDFunk' of https://github.com/TimParrish/wolfssl into addAMDFunk
2018-06-12 13:50:07 -06:00
af7b676405
Merge pull request #1602 from dgarske/compat_withnotls
...
Fixes for building with openssl compatibility enabled and no SSL/TLS
2018-06-12 12:25:32 -07:00
d043b2c559
Merge branch 'addAMDFunk' of github.com:TimParrish/wolfssl into addAMDFunk
2018-06-12 13:17:53 -06:00
d518e0b7f6
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into addAMDFunk
2018-06-12 13:16:01 -06:00
5e516cc2e0
Merge branch 'master' into fipsv2
2018-06-12 10:10:50 -07:00
53b0d2cba3
updated readme to show that AMD processors are supported
2018-06-12 10:59:42 -06:00
dac5f84f61
Fix build error with missing bio
. Fix for pkey
not being reset to NULL for d2i_PrivateKey
failure case test.
2018-06-12 09:38:18 -07:00
292e9535ae
Fix for wolfSSL_ERR_clear_error
to call wc_ClearErrorNodes
when its available (mismatched macros), which was incorrectly causing test_wolfSSL_ERR_put_error
to fail. Added test_wolfSSL_PEM_PrivateKey
test for ECC based key. Refactored the RNG test to only run the reseed test if TEST_RESEED_INTERVAL
is defined. This is the test that was causing the tests/api.c to take so long to complete. Will add this macro to the enable options test.
2018-06-12 09:38:18 -07:00
9cbd2b00d4
Added test for PEM_read_bio_PrivateKey
using BIO loaded using BIO_new_mem_buf
.
2018-06-12 09:38:18 -07:00
e1890a4b0e
Added some bad argument checks on compatibility functions BIO_new_mem_buf
and PEM_read_bio_PrivateKey
.
2018-06-12 09:38:18 -07:00
ad0a10441d
Fixes for building with openssl compatibility enabled and no TLS client/server.
...
Resolves issues building with:
`./configure --enable-opensslextra --disable-rsa --disable-supportedcurves CFLAGS="-DNO_WOLFSSL_CLIENT -DNO_WOLFSSL_SERVER" --disable-examples`
`./configure --enable-opensslextra --disable-ecc --disable-supportedcurves CFLAGS="-DNO_WOLFSSL_CLIENT -DNO_WOLFSSL_SERVER" --disable-examples`
Ticket 3872
2018-06-12 09:38:18 -07:00
39f3df0778
Merge pull request #1610 from SparkiDev/ed25519_priv
...
Fix private-only keys and make them script generated
2018-06-12 08:34:38 -07:00
8ecb9aacd3
Merge pull request #1592 from SparkiDev/psk_test_fix
...
Fix test to work with configurations not including AES-GCM
2018-06-12 08:33:44 -07:00
82550b2f8c
Merge pull request #1617 from dgarske/fix_arduino
...
Fixes for Arduino
2018-06-12 08:31:51 -07:00
cb8351c027
Merge pull request #1607 from SparkiDev/tls13_interop_ver
...
Return TLS 1.3 draft version in ServerHello
2018-06-12 08:30:48 -07:00
766323e90f
Merge pull request #1613 from SparkiDev/tls13_post_auth
...
Fix post authentication for TLS 1.3
2018-06-12 08:29:38 -07:00
83ffb64cda
Merge pull request #1599 from dgarske/pkcs7free
...
Fixes for PKCS7 error case that might leak memory
2018-06-12 08:28:19 -07:00
3b74dbf86a
Merge pull request #1609 from SparkiDev/tls13_time
...
Don't include sys/time.h explicitly in tls13.c
2018-06-12 08:27:43 -07:00
2c8f89ae33
Merge pull request #1611 from kaleb-himes/AN_UP2
...
Allow for wc_SetAltNamesBuffer call with larger than 16384 bytes
2018-06-12 08:26:58 -07:00
49b82456eb
Merge pull request #1618 from cconlon/opensslcompat
...
Align return values for EVP_DigestUpdate/Final for OpenSSL Compatibility
2018-06-12 08:25:18 -07:00
29410ada1e
Merge pull request #1595 from SparkiDev/tls13_cipher_down
...
Fix for downgrading from TLS 1.3 due to old cipher suite
2018-06-12 08:24:26 -07:00
f2a20c4232
Merge pull request #1573 from SparkiDev/tls_pad_vfy
...
Constant time padding and HMAC verification in TLS
2018-06-12 08:22:32 -07:00
22ddd41b61
Merge pull request #1581 from ejohnstown/update-configure
...
Update configure.ac
2018-06-12 08:17:35 -07:00
b7caab938e
Fix post authentication for TLS 1.3
2018-06-12 09:49:23 +10:00
7827712fcc
FIPS Revalidation (acceptance fixes)
...
1. The Windows 10 wolfcrypt test project was missing the flag for USE_CERT_BUFFERS_256.
2. Add note to fips-check about using linuxv2 with Win10.
2018-06-11 15:27:52 -07:00
35c8ba3188
Merge pull request #1601 from SparkiDev/ecdsa_sign
...
Change ECDSA signing to use blinding.
2018-06-11 14:13:24 -07:00
637eaa08ba
Merge pull request #1614 from SparkiDev/tls13_log_file
...
Remove log file and change location to local
2018-06-11 13:51:51 -07:00
a472325f89
return WOLFSSL_FAILURE on error from EVP_DigestUpdate() and EVP_DigestFinal()
2018-06-11 14:27:08 -06:00
7e5c41ca35
Fixes for some async issues in FIPSv2.
2018-06-11 12:41:15 -07:00
10070bb5fd
FIPS Revalidation (acceptance fixes)
...
1. Backed out some changes to AES-GCM with respect PIC32 only code. (This change will not be in the FIPS boundary.)
2018-06-11 10:21:19 -07:00
74d4a02542
Remove log file and change location to local
2018-06-11 15:00:17 +10:00
cf9c352d91
Fixes for Arduino. Don't use C99 for Arduino. Enhanced the script to create as new folder in IDE/ARDUINO/wolfSSL
. Updated README.md.
2018-06-08 14:27:54 -07:00
ce2f393bc7
Autoconf Update
...
1. Remove many redundant macros.
2. Reorder several macros to more appropriate locations.
3. Several macros take lists of items to process, not just individual items. Combined duplicated macros' parameters into lists.
4. Some macros had unnecessary parameters.
5. Added some AX_REQUIRE_DEFINED() checks for the macros used.
6. Add cyassl/options.h to the AC_CONFIG_FILES list. It will be recreated from the template when running config.status the same as wolfssl/options.h
7. Remove the dist-dir rule from Makefile.am. This is prefering the process rather than automating that one step. Make dist will not run config.status.
* AC_PROG_CC must be before any macros that will try to compile for tests.
* AC_CHECK_SIZEOF takes a single type, no size values.
* Only one of the AC_CANONICAL_X macros are expanded. Removed AC_CANONICAL_BUILD since it is never actually used.
* Removed the AC_PROG_CXX and anything C++ related.
* Removed LT_LANG([C]) as it is the default and the C doesn't do anything.
2018-06-08 10:47:14 -07:00
df6fe0b07c
FIPS Revalidation (acceptance fixes)
...
1. Update the fips-check script to pull the FIPSv2 code from the main repositories.
2. Script cleanup.
3. Disable the api.test check of wc_ecc_mulmod() when WOLFSSL_VALIDATE_ECC_IMPORT is enabled.
2018-06-08 10:36:28 -07:00
e99fc3026d
Fixed issue with MatchDomainName
. Fixes issue #1606 . This is a valid and confirmed bug report in v3.15.0. Applies to ./configure --enable-sni
case with wolfSSL_CTX_UseSNI
where common name has wildcards. Pushing fix for visibility now and will add test case.
2018-06-08 10:09:53 -07:00
1123beb2d2
Allow for wc_SetAltNamesBuffer call with larger than 16384 buffers at user discretion
2018-06-08 10:16:40 -06:00
bea0e6142a
Merge pull request #1608 from dgarske/maxcerfix
...
Resolves issue with reassembling large certificates
2018-06-08 08:25:14 -07:00
5547a7b4bd
Fix private-only keys and make them script generated
2018-06-08 17:38:11 +10:00
587f4ae79e
Don't include sys/time.h explicitly in tls13.c
2018-06-08 09:00:12 +10:00
00ddeb07d8
Resolves issue with reassembling large certificates. The ProcessPeerCerts
function was using the wrong max size check for certs. Built and test with ./configure CFLAGS="-DMAX_CERTIFICATE_SZ=20000"
.
2018-06-07 15:56:37 -07:00
391d1953fa
FIPS Revalidation (acceptance fixes)
...
1. Add a couple of missing options to user_settings.h for Win10 and configure.ac.
2. Clear the execute flag from the ecc.h.
2018-06-07 10:57:46 -07:00
c6e2585fbc
added check for AMD processor to asm.c
2018-06-07 10:35:54 -06:00
020b69aba0
Return TLS 1.3 draft version in ServerHello
2018-06-07 22:01:42 +10:00
234228e5af
FIPS Revalidation (acceptance fixes)
...
1. Fixed some whitespace in api.c.
2018-06-06 17:50:55 -07:00
e673cdf2d2
Merge pull request #1594 from kojo1/openSSL-Compat-CRL-STORE
...
FILE* to XFILE
2018-06-06 16:34:59 -07:00
596cedc226
Merge pull request #1603 from ejohnstown/add-changelog
...
Add ChangeLog
2018-06-06 16:32:18 -07:00
59067825fc
Update cpuid.c to optimize intelasm for performance
2018-06-06 16:44:46 -06:00
a6dd93aa2e
Removed replaced the last two references to "CYASSL" macros with "WOLFSSL" in the example server.
2018-06-06 13:14:06 -07:00
7e9a32fffd
FIPS Revalidation
...
Merge branch 'master' into fipsv2. Using a merge instead of a rebase to retain commit IDs and tags.
2018-06-06 12:43:15 -07:00
e9d9e7c37c
replaced NEWS.md in Makefile.am with ChangeLog.md
2018-06-06 10:56:24 -07:00
9b9568d500
Change ECDSA signing to use blinding.
2018-06-06 11:52:04 +10:00
1c17f55ee4
updated the readme/changelog with the correct release date
2018-06-05 16:10:08 -07:00
0c966d7700
Update ChangeLog and NEWS
...
While the GNU coding standard states that the NEWS file should be a list of the high level changes and the ChangeLog should be every change in detail, our public source repository contains the detailed log of all changes and the name "ChangeLog" makes more sense to me than "NEWS". Instead of keeping two copies of the README, one in plain text and one in MarkDown, only keeping the MarkDown copy. It displays better in the source repository, it is still plain text, and we aren't keeping two separate copies of the files.
2018-06-05 16:07:53 -07:00
ab319ae599
Fixed a couple of places in PKCS7 error cases where key free (wc_FreeRsaKey
or wc_ecc_free
) might not be called.
2018-06-05 14:32:17 -07:00
b63d3173a1
update change log ( #1597 )
2018-06-05 12:42:43 -07:00
4ac34b74bd
Fix test to work with configurations not including AES-GCM
2018-06-05 10:30:15 +10:00
ab5eeb9f79
Merge pull request #1596 from dgarske/leakfixes
...
Fix for possible leak with normal math and ECC verify fail for R and S
2018-06-04 13:30:09 -07:00
5eca844e01
Fix for possible leak with normal math and verify fail for R and S in ECC verify.
2018-06-04 11:05:14 -07:00
fcd2234841
Fix for downgrading from TLS 1.3 due to old cipher suite
...
TLS 1.3 specification doesn't allow downgrading based on cipher suite.
2018-06-04 12:42:41 +10:00
caf88c81c2
Merge pull request #1593 from ejohnstown/fix-cert-includes
...
Fix Cert Includes
2018-06-01 11:32:18 -07:00
f1588e0ad9
Fix Cert Includes
...
1. Added files that were missing from the certs directory include.am files.
2. Fixed the duplicate items in the certs directory's include.am files.
3. Reorganized the certs directory include.am files to be a tree.
2018-05-31 17:38:47 -07:00
3ff8c45aa8
FILE to XFILE
2018-06-01 09:30:20 +09:00
1cc6042f01
exlude unneeded files with Nucleus build
2018-05-31 15:27:37 -06:00
0c2199084e
single threaded wolfcrypt only Nucleus port
2018-05-31 15:04:44 -06:00
70b3ba1c04
Merge pull request #1591 from ejohnstown/release-3.15.0
...
Release v3.15.0 Preparation
2018-05-31 12:07:43 -07:00
c43a84547a
Merge pull request #1572 from dgarske/cryptodev
...
Added crypto device framework
2018-05-31 10:28:58 -07:00
dfca1beff0
Touch the version number on the library filename in the rpm spec.
2018-05-31 10:20:18 -07:00
8a61b7303a
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
a4e6cfd3ac
Added new file NEWS.md to Makefile for dist builds.
2018-05-31 10:12:34 -07:00
6a2c30e593
Release v3.15.0
...
1. Update configure.ac for new version.
2. Update the version header.
3. Update the README files with the new changelog.
4. Moved all previous change logs from README files to NEWS files.
2018-05-30 20:00:09 -07:00
bca29395a3
Merge pull request #1590 from JacobBarthelmeh/Compatibility-Layer
...
add NO_OLD_SHA_NAMES macro and add back SHA512, SHA384
2018-05-30 19:56:17 -07:00
5849e9f1a1
update macro name in test case
2018-05-30 17:42:07 -06:00
e358fc03c7
Merge pull request #1589 from quinnmiller1997/pkcs7_fix
...
Fixed a filename in the pkcs7.h comments
2018-05-30 16:19:50 -07:00
587484a1ef
add NO_OLD_SHA_NAMES macro and add back SHA512, SHA384
2018-05-30 16:10:34 -06:00
4ecff14bd2
Fixed a filename in the pkcs7.h comments
2018-05-30 14:53:03 -06:00
33d416a060
Fix two more scan-build issues with set but not used.
2018-05-30 13:23:08 -07:00
6d84755106
Merge pull request #1587 from cconlon/cavp-selftest-fix
...
Fix CAVP selftest build
2018-05-30 12:57:35 -07:00
d7b560f2ab
Fix for scan-build warning about value being stored and not used. Changed the wc_RsaFunction
API to public. Added ability to expose wc_RsaDirect
with new define WC_RSA_DIRECT
.
2018-05-30 12:44:55 -07:00
999663fae1
Merge pull request #1498 from JacobBarthelmeh/Certs
...
update before/after dates with certificates
2018-05-30 10:09:49 -07:00
5d99079603
fix HAVE_SELFTEST build for CAVP selftest
2018-05-30 11:08:18 -06:00
fc482235b0
Improved the CryptoDev test to include example callback with context.
2018-05-30 09:11:44 -07:00
a2fdc6262d
Merge pull request #1586 from ejohnstown/suite-info
...
Rerefactor Cipher Suite List
2018-05-30 07:54:13 -07:00
5e4c6e35cc
Merge pull request #1542 from ghoso/openssl_compat201805
...
OpenSSL Compatibility APIs
2018-05-30 08:50:29 -06:00
b84f111d51
rebase with master branch and fix some code.
2018-05-30 17:15:07 +09:00
8cd357aa3a
d2i_PKCS12_fp
2018-05-30 12:10:41 +09:00
c715bb5ade
X509_check_ca
2018-05-30 12:08:27 +09:00
3f6b7c8833
Merge with openSSL-Compat-CRL-STORE on kojo1/wolfssl
2018-05-30 12:08:27 +09:00
0fb446ad36
i2c_ASN1_INTEGER
2018-05-30 12:03:58 +09:00
d7e4bbf1cf
ASN1_STRING_print_ex
2018-05-30 11:56:43 +09:00
5c11e1440f
ASN1_TIME_to_generalizedtime
2018-05-30 11:56:43 +09:00
b1ef0c808e
Add all stubs.
2018-05-30 11:56:42 +09:00
36ced360cb
Add Renesas CS+ project files.
2018-05-30 11:53:18 +09:00
5ff460bb7f
OPENSSL_add_all_algorightms_noconf
2018-05-30 11:53:18 +09:00
005284a127
ASN1_GENERALIZEDTIME_free
2018-05-30 11:53:17 +09:00
24ff55b085
RAND_poll
2018-05-30 11:53:17 +09:00
fb7d74c197
FinalRaw parameter hash may not be aligned.
2018-05-30 09:10:46 +10:00
e684156a1e
Constant time padding and HMAC verification in TLS
2018-05-30 09:10:46 +10:00
1a7d208a60
add crl2.pem to renew certs script
2018-05-29 16:57:30 -06:00
b2225a0bc0
Rerefactor Cipher Suite List
...
1. Do not add iana_name to the struct if disabling error strings.
2. Change the IANA_NAME macro to SUITE_INFO, and build the suite info records as appropriate for the error string enablement.
2018-05-29 14:34:57 -07:00
cc58d3160f
Merge pull request #1579 from C-Treff/Tenasys_Review
...
time 64bit, test update
2018-05-29 14:06:44 -07:00
0a35c37211
Merge pull request #1584 from SparkiDev/tls_many_nst
...
Allow multiple NewSessionTicket messages
2018-05-29 13:43:59 -07:00
52179eba16
Merge pull request #1583 from dgarske/nomatch
...
Added test for common name failure with check domain name
2018-05-29 13:30:42 -07:00
2cf853d1f1
Merge pull request #1582 from SparkiDev/tls13_only
...
Allow TLS 1.2 to be compiled out.
2018-05-29 13:26:54 -07:00
92dd231c27
Merge pull request #1585 from SparkiDev/new_compiler
...
New compilers
2018-05-29 12:25:56 -07:00
16738f1449
Merge pull request #1569 from kojo1/openSSL-Compat-CRL-STORE
...
openSSL compatibility APIs: X509_CRL, STORE
2018-05-29 09:47:22 -06:00
f871bafe3a
Fix uninitialized
2018-05-29 11:06:26 +10:00
68666101b7
Fix for g++ 7.3 - macro strings in asm
2018-05-29 09:25:38 +10:00
1d8fb7be82
Allow multiple NewSessionTicket messages
...
Interopability testing with OpenSSL
2018-05-28 09:18:26 +10:00
c60b60c50c
#if condition to refer wc_PKCS12_new, wc_d2i_PKCS12
2018-05-26 16:02:51 +09:00
ba03f6e08b
wolfSSL_d2i_PKCS12_fp
2018-05-26 13:04:06 +09:00
3939eadf9c
get derLen by RsaPublicKeyDerSize
2018-05-26 10:55:17 +09:00
af471a360d
Merge pull request #1574 from cariepointer/test/wolfcrypt
...
Add unit test for wc_SignatureGetSize
2018-05-25 11:29:58 -06:00
12dc346058
Change return value to 0 for null key when HAVE_USER_RSA is defined
2018-05-25 09:25:25 -06:00
ba8e441e53
Allow TLS 1.2 to be compiled out.
2018-05-25 11:00:00 +10:00
65014248f9
Fix typos, update ret for if HAVE_USER_RSA defined
2018-05-24 16:32:27 -06:00
a5c2e8b912
Added test for common name with invalid domain fails as expected when set with wolfSSL_check_domain_name
.
2018-05-24 14:39:35 -07:00
453daee965
Merge pull request #1523 from SparkiDev/ed25519_key
...
Allow Ed25519 private-only keys to work in TLS
2018-05-24 09:56:17 -07:00
87f9d0f141
Merge pull request #1566 from ejohnstown/tcp-timeout
...
Fix TCP with Timeout
2018-05-24 09:07:50 -07:00
5d693b263d
removed more tabs
2018-05-24 09:56:54 +02:00
06e9354629
removed tabs
2018-05-24 09:48:18 +02:00
1d281ce515
replace memset by XMEMSET
...
replaced memset with XMEMSET as requested by @dgarske
INtime project files cleanup
2018-05-24 09:35:46 +02:00
005a0d4dff
Define devId if RSA is enabled
2018-05-23 20:17:11 -06:00
d38a0039ed
Merge pull request #1549 from JacobBarthelmeh/Cert-Report1
...
fix for relative URI detection
2018-05-23 17:05:35 -07:00
e4e0dfe9d3
Merge pull request #1564 from JacobBarthelmeh/PKCS12
...
Pkcs12
2018-05-23 16:59:13 -07:00
6f221ff75c
Fix possible leak in PKCS for failure case with small stack enabled.
2018-05-23 16:21:49 -07:00
0315b378f5
Fix TCP with Timeout
...
Updated example client and server to use the new wolfSSL_dtls_set_using_nonblock() function.
2018-05-23 16:07:45 -07:00
6a00bfc9f7
Merge pull request #1580 from JacobBarthelmeh/Testing
...
check on cipher suites for AEAD
2018-05-23 17:02:01 -06:00
450741f8ef
Change checks for message chaching to happen once
...
Add compile option to remove Ed25119 client auth in TLS 1.2.
Cipher suite choice does not affect client auth.
2018-05-24 08:43:28 +10:00
982119b495
Only cache messages when required.
2018-05-24 08:43:28 +10:00
9358edf5dd
Fixes from code review
...
Include new private key files in release.
Set messages field to NULL after free.
2018-05-24 08:43:28 +10:00
58f523beba
Allow Ed25519 private-only keys to work in TLS
...
Change Ed25519 in TLS 1.2 to keep a copy of all the messages for
certificate verification - interop with OpenSSL.
2018-05-24 08:43:28 +10:00
4eeb9c8c56
Merge branch 'master' into test/wolfcrypt
2018-05-23 16:35:10 -06:00
72d168028e
Fixes to better handle PKCS7 error cases.
2018-05-23 15:29:33 -07:00
9a75e5cf68
Fixes in PKCS7 for handling hardware based devId and no private key. Fix to handle scenario where kari->decoded
is allocated, but not initalized (was causing use of unitliaized in FreeDecodedCert
). Fix to handle hardware base RSA key size.
2018-05-23 14:48:10 -07:00
555efe0345
Merge pull request #1577 from TimParrish/firstUnitTest
...
First unit test
2018-05-23 15:24:56 -06:00
a18f220a5a
Remove trailing whitespaces
2018-05-23 14:39:36 -06:00
8bd41629ae
Split wc_SignatureGetSize test into wc_SignatureGetSize_ecc and wc_SignatureGetSize_rsa tests
2018-05-23 14:26:35 -06:00
9021091896
update comments
2018-05-23 14:04:41 -06:00
690f98fb0f
Merge pull request #1578 from SparkiDev/test_cov
...
Improve coverage
2018-05-23 12:51:37 -06:00
b1ed852f36
Fix TCP with Timeout
...
wolfSSL remains agnostic to network socket behavior be it blocking or non-blocking. The non-blocking flag was meant for the default EmbedRecvFrom() callback for use with UDP to assist the timing of the handshake.
1. Deprecate wolfSSL_set_using_nonblock() and wolfSSL_get_using_nonblock() for use with TLS sockets. They become don't-cares when used with TLS sessions.
2. Added functions wolfSSL_dtls_set_using_nonblock() and wolfSSL_dtls_get_using_nonblock().
3. Removed a test case from EmbedReceive() that only applied to UDP.
4. Removed the checks for non-blocking sockets from EmbedReceive().
5. Socket timeouts only apply to DTLS sessions.
2018-05-23 11:29:16 -07:00
89fbb1b40d
only compile SEQ increment function in case of DTLS or HAVE_AEAD
2018-05-23 12:07:35 -06:00
4fd85853c5
I think I now understand the trailing white space...
2018-05-23 11:57:12 -06:00
29d9759aa0
check on cipher suites for AEAD
2018-05-23 11:53:33 -06:00
cd9f86d921
time 64bit, test update
...
64bit settings for time is mandatory for INtime. Changed the project file.
Test for ecc_test_buffers was unreliable, as the structs were not initialized befor usage.
2018-05-23 10:33:56 +02:00
3bb4949e02
Improve coverage
...
Renumber errors in test.c to be unique.
Fix stack usage to work in --enable-distro --enable-stacksize builds.
2018-05-23 16:24:23 +10:00
124f45d449
re-upload
2018-05-22 17:45:04 -06:00
83e67a4197
additional changes made
2018-05-22 17:25:22 -06:00
438f8da11f
Merge pull request #1559 from ejohnstown/update-ar
...
Hush ar warning
2018-05-22 17:22:48 -06:00
58ac951471
Changes made- Thank you
2018-05-22 16:00:40 -06:00
abf93c9c2c
Merge pull request #1575 from quinnmiller1997/Unit_Test
...
Added unit test for Blake2
2018-05-22 14:22:05 -06:00
b308fa9a39
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into firstUnitTest
2018-05-22 13:26:45 -06:00
6321008ef4
Modify wc_SignatureGetSize test for ECC and RSA specific API
2018-05-22 13:24:36 -06:00
d6809c029d
First unit test
2018-05-22 13:21:37 -06:00
f2ce8dcbca
Added unit test for Blake2
2018-05-22 10:47:44 -06:00
df24bc6096
Update unit test
2018-05-22 09:22:01 -06:00
6cc84d2301
Add initial test_wc_SignatureGetSize() method
2018-05-21 17:11:21 -06:00
be9ae9a3c4
Merge pull request #1570 from MJSPollard/MikePollardBranch
...
added Poly1305SetKey Unit Test
2018-05-21 16:35:15 -06:00
85511067e4
Added crypto device framework to handle PK RSA/ECC operations using callbacks. Adds new build option ./configure --enable-cryptodev
or #define WOLF_CRYPTO_DEV
. Added devId support to PKCS7.
2018-05-21 14:31:08 -07:00
1b9cff1c5d
Hush ar warning
...
At some point, ar on Ubuntu started throwing the following warning:
ar: `u' modifier ignored since `D' is the default (see `U')
Add the "U" option to the ar flags if the version of ar supports it.
(The version used by macOS does not support the flag, for example.) The
AR_FLAGS set in configure will later be used by libtool.
2018-05-21 13:49:20 -07:00
2021bcb188
Merge pull request #1560 from dgarske/ciphernamecleanup
...
Refactor of the cipher suite names to use single array
2018-05-21 14:24:53 -06:00
e7de654b61
Merge pull request #1558 from dgarske/fsanitize
...
Fixes for fsanitize reports
2018-05-21 14:18:07 -06:00
2d88e2efe7
Merge pull request #1567 from SparkiDev/intel_64_align
...
ForceZero - align 64-bit access on Intel 64-bit
2018-05-21 14:16:36 -06:00
fb247a5d8d
added null check for key
2018-05-21 13:59:15 -06:00
6e13bfcfce
Merge pull request #1571 from aaronjense/unit-test-curve25519
...
Added unit-test for wc_curve25519_init and wc_curve25519_free
2018-05-21 13:42:11 -06:00
2b49f69f1b
updated unit test
2018-05-21 12:44:59 -06:00
f214dbc3dd
Removed unneeded call on test_wc_curve25519_init
2018-05-21 11:50:52 -06:00
8197d9ec36
Added unit-test for wc_curve25519_init and wc_curve25519_free in tests/api.c
2018-05-21 10:59:02 -06:00
f447fe22b0
added Poly1305SetKey Unit Test
2018-05-21 10:55:56 -06:00
3a27d85c4e
Use sizeof instead of constant value
2018-05-21 21:26:25 +10:00
22078d6811
wc_Sha512 type
2018-05-20 15:50:16 +09:00
da8452ab29
Removed redundant #defines
2018-05-20 14:29:40 +09:00
d347f5ca77
#define SHA384/512 WC_SHA384/512 -> wolfSSL_SHA384/512
2018-05-20 13:55:47 +09:00
d10f0911a4
sHA384, SHA512 conflict with openSSL
2018-05-20 13:55:47 +09:00
874022d938
fix #if conditions and others
2018-05-20 13:55:47 +09:00
153bcb5297
d2i_X509_fp
2018-05-20 13:55:47 +09:00
460becf739
SHA256, SHA384, SHA512
2018-05-20 13:55:47 +09:00
c275dfc5ab
X509_STORE_add_crl
2018-05-20 13:55:46 +09:00
4efe8740ad
Eliminate d2i_RSAPublicKey test when HAVE_FAST_RSA is enabled
2018-05-20 13:55:46 +09:00
98ef7f43e1
use wolfSSL_X509_CRL_free instead of XFREE
2018-05-20 13:55:46 +09:00
c26bcdd199
Enable RSA_LoadDer with HAVE_FAST_RSA
2018-05-20 13:55:45 +09:00
03d68812a9
Fix #if condition for test
2018-05-20 13:55:45 +09:00
ad71f44f3c
suppress i2d_RSAPublicKey with HAVE_FAST_RSA
2018-05-20 13:55:45 +09:00
6cef2e5d31
memory leak in d2i_X509_CRL
2018-05-20 13:55:45 +09:00
76686c9e20
fix error return, i2d_RSAPublicKey
2018-05-20 13:55:44 +09:00
6580a1fefa
enable SetBitString, SetASNInt, SetASNIntMP with OPENSSL_EXTRA
2018-05-20 13:55:44 +09:00
5d4c0c582e
skip d2i_X509_CRL_fp test. Done locally.
2018-05-20 13:55:44 +09:00
2e4884b6f9
PEM_read_X509_CRL only with HAVE_CRL
2018-05-20 13:55:44 +09:00
f56fd5db00
eliminate dupricated func prototypes
2018-05-20 13:55:44 +09:00
138f9f8f66
add wc_RsaKeyToPublicDer in asn.c when OPENSSL_EXTRA, fix wolfSSL_i2d_RSAPublicKey
2018-05-20 13:55:43 +09:00
03846b2d2d
d2i_RSAPublicKey, d2i_X509_CRL, d2i_X509_CRL_fp, X509_CRL_free, PEM_read_X509_CRL
2018-05-20 13:55:43 +09:00
6e697c21d9
Fix the include.am to include aes_asm.S with the correct filename.
2018-05-18 15:02:43 -07:00
cf70b1a013
Revert ForceZero changes in favor of PR #1567 .
2018-05-18 05:29:09 -07:00
dd0489db8c
1. Added the pair-wise consistency test to the RSA Key Gen.
...
2. Modified an RSA key size test case so it didn't try to make a key that was too big.
2018-05-17 17:41:34 -07:00
d63da10c96
ForceZero - align 64-bit access on Intel 64-bit
...
Test added to ensure ForceZero works.
2018-05-18 10:38:21 +10:00
f67046f485
better bounds checking
2018-05-17 16:55:59 -06:00
d8c33c5551
Fix TCP with Timeout
...
1. Take out DTLS support from EmbedReceive(). DTLS uses EmbedReceiveFrom().
2. Modify EmbedReceive() to return TIMEOUT if the session is set to blocking mode.
2018-05-17 15:53:38 -07:00
096456f466
Merge pull request #1565 from embhorn/zd3883
...
wolfSSL_HMAC_Final parameter len should be optional
2018-05-17 13:19:19 -07:00
b973d6e8b1
Fix to handle NO_ERROR_STRINGS
case in unit test. The IANA names are disabled when NO_ERROR_STRINGS
is defined.
2018-05-17 10:24:02 -07:00
b6a92a97ce
convert to byte to fix warning
2018-05-17 08:55:07 -06:00
5cbb9e8341
wolfSSL_HMAC_Final parameter len should be optional
2018-05-17 08:53:21 -05:00
e1745428ac
add set short int helper function
2018-05-16 20:16:40 -06:00
8163225180
Refactor of the cipher suite names to use single array, which contains internal name, IANA name and cipher suite bytes.
2018-05-16 15:29:27 -07:00
dad574edb8
Fix to use proper type (size_t
) for alignment check.
2018-05-16 14:34:16 -07:00
52b66edf72
Fixes for a few more fsanitize issues. Added alignment for ForceZero. Added word32 aligned acceleration for ForceZeero. Added 'NO_ALIGNED_FORCEZERO' define to allow disabling aligned ForceZero acceleration. We cast the 24 left-shifts to word32 because compiler assumes signed int type, and a runtime value with MSB set results into runtime fsanitize error.
2018-05-16 13:27:13 -07:00
4dacd31ea4
Force to zero the buffer used to generate the DH private key.
2018-05-16 15:47:13 -04:00
6a31f103aa
Test Fixes
...
1. When building on VS, it didn't like using a variable for an array size. Fixed it so it was a constant.
2. In dh.c, there were a few #if that should have been #ifdef.
3. Tweaked a return value in the wolfCrypt test so it was read after being set.
2018-05-16 15:47:13 -04:00
12edf80e2b
FIPS Revalidation
...
1. ForceZero the odd block when using RDSEED to seed the DRBG.
2. When using FIPSv2 and Intel_ASM speedups, force RDSEED failure flag.
3. Annotate the ecc key pair checking code with NIST process references.
4. Add function to pair-wise check the DH key.
5. Add optional "Q" values for the FFDHE canned parameters from RFC 7919.
6. Enabled the ECC key checks by default for FIPS.
7. Added DH private key check function.
8. Enabled the DH key checks by default for FIPS.
2018-05-16 15:47:13 -04:00
ceed6e08fd
FIPS Revalidation
...
1. Add second RNG initialization API to let caller pass in a nonce.
2018-05-16 15:47:13 -04:00
20d8a4a376
FIPS Revalidation
...
1. Added missing pair-wise consistency test for RSA keys.
Note: This function is not available to old FIPS and user RSA.
2018-05-16 15:47:13 -04:00
1ff4ea1ec9
Test Fixes
...
1. Changed the ecc_sets table for Windows builds to use arrays instead of pointers to strings.
2. Updated the initializer to play nice with the Windows and not-Windows versions of the ecc_sets table.
This is a change for FIPS mode on Windows. The ecc_sets table has pointers to constants. When the FIPS POST runs, the pointers stored in the table are relocated pointers so the verify fails.
2018-05-16 15:47:13 -04:00
6b6ed2c42f
FIPS Revalidation
...
1. Created a new IDE project directory for WIN10.
2. Reverted the Windows IDE project files.
2018-05-16 15:47:13 -04:00
a8dbdd6c28
Test Fixes
...
1. Windows IDE project, clean up the preprocessor flags.
2. Add command line define to the MASM steps to set HAVE_FIPS and HAVE_FIPS_VERSION=2.
3. Disable the whole program optimization for the non-DLL builds for the file fips.c.
4. Tweaked the aes_asm.asm's code segment line to be dependant on the FIPS setting. Only place it specially for FIPSv2.
5. Reverted the Windows IDE project and copied the new setting to a WIN10 directory.
2018-05-16 15:47:13 -04:00
4d0a061acb
FIPS Revalidation
...
1. Updated the segment tags in the aes_asm.asm file so that it is linked in order between aes.obj and des3.obj.
2018-05-16 15:47:13 -04:00
3be824ad68
Test Fixes
...
1. Changed the _InitHmac() function in ssl.c to have a different name.
2. Added switch in ssl.c to use _InitHmac or _HMAC_Init depending on FIPS option.
2018-05-16 15:47:13 -04:00
f7fa648f77
Test Fixes
...
1. Found a problem in AES-GCM encrypt where it could step on the ciphertext with the correct sized IV.
2018-05-16 15:47:13 -04:00
1538ceef47
FIPS Revalidation
...
1. Update the Windows project settings.
2018-05-16 15:47:13 -04:00
dde1f87de9
Test Fixes
...
1. The intrinsic versions of AES_GCM_encrypt and AES_GCM_decrypt needed updates for variable length tags.
2018-05-16 15:47:13 -04:00
6d4777f3ca
Test Fixes
...
1. MSC doesn't allow for inline assembly. Restore the intrinsic version of AES_GCM_encrypt and AES_GCM_decrypt for MSC AES-NI builds. This is lacking AVX.
2018-05-16 15:47:13 -04:00
418cca5efd
Test Fixes
...
1. Something changed in the wolfSSL layer with respect to setting some constants for old FIPS mode, didn't take into account new FIPS mode.
2018-05-16 15:47:13 -04:00
b120a27c3e
FIPS Revalidation
...
1. Update the GenerateSeed() function for RDSEED on Windows to use the intrinsic function instead of inline assembly.
2018-05-16 15:47:13 -04:00
4f1dd3b9a7
Test Fixes
...
1. Update gitignore with some more VS outputs.
2. Update the Windows IDE user settings with FIPSv2 settings.
3. Remove redundant _InitHmac() function from ssl.c.
4. In wc_DhGenerateParams(), initialize the groupSz and bufSz to 0.
5. In wc_DhExportParamsRaw(), initialize pLen, qLen, and gLen to 0.
6. In wc_MakeRsaKey(), initialize isPrime to 0.
7. In ecc_test_make_pub(), initialize exportBuf and tmp to NULL and initialize the ECC key before any chance of trying to free it.
8. In fips_test.h header, update types.h include to use the wolfCrypt types rather than ctaocrypt types.
9. In fips_test.h header, change the visibility tags on all the function prototypes to use the WOLFSSL tags rather than CYASSL.
10. Change the wolfCrypt visibility tags to use CyaSSL's tags for old FIPS and the regular tags for new FIPS and non-FIPS builds.
2018-05-16 15:47:13 -04:00
eea4d6da50
Test Fixes
...
1. Modify RSA-PSS to be able to sign and verify SHA-384 and SHA-512 hashes with 1024-bit RSA keys.
2018-05-16 15:47:12 -04:00
dc31dbaeaf
FIPS Revalidation/Test Fixes
...
1. Added APIs to perform RSA-PSS verify and padding operation in the same call.
2. Change to RsaPSS sign and verify to pick the proper salt length if the key is 1024-bits and the hash is SHA-512.
2018-05-16 15:47:12 -04:00
27470aa704
FIPS Revalidation/Test Fixes
...
1. For FIPSv2 builds, changed the FP_MAX_BITS to 6144.
2. Fixed bug in HMAC-SHA-3 where the digest size was being used instead of the block size for processing the key.
2018-05-16 15:47:12 -04:00
8fb3a0c078
FIPS Revalidation
...
1. Add a copy of the DSA parameter generation function to DH for use without DSA.
2018-05-16 15:47:12 -04:00
6796ab5f8c
FIPS Revalidation
...
1. Bug fixes to AES-GCM. Separated out the internal and external IV set functions.
2018-05-16 15:47:12 -04:00
c2f964039e
FIPS Revalidation
...
1. Updated the configure.ac to add in the RSA direct function to FIPS builds
2018-05-16 15:47:12 -04:00
6d7599cf47
FIPS Revalidation
...
1. Add new APIs for AES-GCM so it can manage the IV per SP 800-38D.
2. Add new APIs for AES-CCM so it can manage the IV, similar to the behavior in AES-GCM.
3. Add new APIs for GMAC that use the new AES-GCM APIs.
2018-05-16 15:47:12 -04:00
4ba026c0bf
Test Fixes
...
1. Added error code for ECDHE FIPS KAT failure.
2018-05-16 15:47:12 -04:00
19da916102
Test Fixes
...
1. Removed redundant forward declaration of RsaKey from hmac.h.
2. Updated gitignore with the first and last files.
3. Updated autogen with touching the first and last files.
2018-05-16 15:47:12 -04:00
3685b7b176
Test Fixes
...
1. AesGcmEncrypt_ex requires the RNG, remove function if RNG disabled.
2. Fix a couple function name changes in the example server.
3. Removed the old FIPS wrapping added to dh.h, was redundant.
4. Move include of random.h in the aes.h file.
5. Fix where ecc.c was being left out of old FIPS builds.
6. Exclude the AES-GCM internal IV test case when building without the RNG.
7. Fix api test where AES-GCM Encrypt was called with a too-long IV in old FIPS mode. Non-FIPS and new FIPS are allowed longer IVs.
2018-05-16 15:47:12 -04:00
13ff245166
FIPS Revalidation
...
1. AES-GCM encrypt IV length allowed to be 8-bits.
2018-05-16 15:47:12 -04:00
90a5bde0f2
FIPS Revalidation
...
1. Update the const data and code segment tags for the Windown builds.
2018-05-16 15:47:12 -04:00
4b3933aa1b
FIPS Revalidation
...
1. Enabled ECC Cofactor DH for the FIPSv2 build.
2. Updated the wolfCrypt HMAC-SHA-3 test to leave out the set of test cases that use the four-byte key in FIPS mode.
2018-05-16 15:47:12 -04:00
33040a25d8
FIPS Revalidation
...
1. Change to configure.ac to automatically enable HKDF in FIPSv2 builds.
2018-05-16 15:47:12 -04:00
d0d2527950
FIPS Revalidation
...
1. Change to configure.ac to automatically enable AES-CTR in FIPSv2 builds.
2. Move the aes-ni asm file into the boundary if enabled.
3. Enable AES-ECB by default.
2018-05-16 15:47:12 -04:00
4bcd7b7986
AES-GCM
...
1. Updated the wolfCrypt GMAC test to leave out the test case with the 15-byte tag when building for FIPS.
2. Replace tabs with spaces.
2018-05-16 15:47:12 -04:00
eb1a76bf2a
FIPS Revalidation
...
1. Updated CMAC to allow tag length from 4 to 16 bytes, inclusive.
2018-05-16 15:47:12 -04:00
aa968eac98
FIPS Revalidation
...
1. Enable SHA-224 by default if building for FIPSv2.
2018-05-16 15:47:12 -04:00
fe8d46da95
FIPS Revalidation
...
1. Added new AES-GCM Encrypt API for FIPS where the IV is generated internally.
2. Fix the AES-NI guard flags so it can be used when FIPS enabled.
2018-05-16 15:47:12 -04:00
be61204fd7
FIPS Revalidation
...
1. Added CMAC to the boundary.
2. Added DHE to the boundary.
2018-05-16 15:47:12 -04:00
f6fe3744a7
FIPS Update
...
1. Moved the rest of the FIPS algorithms to FIPSv2.
2. Updated the fips-check and autogen scripts.
3. Updated the automake include for the crypto files.
4. Updated the example server to use the wolfSSL API and wolfSSL-based OpenSSL compatibility layer.
5. Added error code for the SHA-3 KAT.
6. Updated an test case in the API test for AES-GCM encrypt that is now considered a success case, but the FIPS mode was still treating as a failure.
2018-05-16 15:47:12 -04:00
df4d748f59
FIPS Update
...
1. Move SHA-224 and SHA-256 into FIPSv2.
2. Move HMAC into FIPSv2.
3. Move Hash_DRBG into FIPSv2.
2018-05-16 15:47:12 -04:00
6352208e04
FIPS Update
...
1. Add SHA-3 to the src/include.am so that it is always included in FIPSv2.
2. Tweak the SHA-3 header to follow the new FIPS pattern.
2018-05-16 15:47:12 -04:00
0c5d704c7f
AES-CCM FIPS
...
1. Add new error code for the AES-CCM FIPS KAT failure.
2. When enabling FIPSv2, force enable AES-CCM.
2018-05-16 15:47:12 -04:00
d373844a18
fix sequence with pkcs12 shrouded keybag creation
2018-05-16 10:16:15 -06:00
8ff328cb39
Merge pull request #1551 from dgarske/asynccheck
...
Added new `async-check.sh` script
2018-05-16 08:02:11 -07:00
b5e0499022
Merge pull request #1550 from dgarske/rsaverify
...
Check returned size matches signature size for RSA verify in openssl compatibility
2018-05-16 08:00:31 -07:00
bbc178a704
Merge pull request #1548 from JacobBarthelmeh/Testing
...
fix ecc public key print with X509 print function
2018-05-16 07:59:19 -07:00
8619062ae7
Merge pull request #1522 from dgarske/mbedtls_compat
...
Port for using AWS FreeRTOS
2018-05-16 07:57:55 -07:00
1be8a6e4ef
Merge pull request #1502 from ejohnstown/update-m4
...
Update M4 Autoconf Files
2018-05-16 07:57:13 -07:00
566bb4cefe
version for PBE SHA1 DES oid
2018-05-16 08:38:50 -06:00
1ca62ee0a1
add error return for unsuported version
2018-05-15 22:51:11 -06:00
f021375c4b
Fixes for fsanitize reports.
2018-05-15 17:23:35 -07:00
a6ad6b94d1
account for IGNORE_NAME_CONSTRAINTS when testing the parsing of a relative URI
2018-05-14 16:03:51 -06:00
63a0e872c5
add test for fail case when parsing relative URI path
2018-05-14 14:27:02 -06:00
9c33244158
Update ax_pthread.m4
...
The AX_PTHREAD macro has a check for side-effects of the pthread flag beyond the functions being available. It also checks for a particular macro being set when compiling the test file. When running the build through the scan-build static analysis, for some reason, the check value isn't set. The build fails. I commented the check out for now.
2018-05-11 17:39:51 -07:00
2a4d386a50
Update ax_pthread.m4
...
1. Updated to the most recent copy of ax_pthread.m4.
2. Removed the darwin-clang check m4.
3. Added a check to see if AX_PTHREAD added the flag `-Qunused-arguments` for clang and if so prepend `-Xcompiler` so libtool will use it. Otherwise when building on Sierra's clang you get "soft" warnings on the build of the dylib.
2018-05-11 10:21:47 -07:00
83257d662a
Also check returned size matches for RSA verfiy in openssl compatability layer.
2018-05-11 17:09:07 +02:00
af9507391a
Fixes and improvements for FreeRTOS AWS. Fixes for building openssl compatibility with FreeRTOS. Fixes for TLS 1.3 possibly uninitialized vars.
2018-05-11 16:40:32 +02:00
cb2f1d6d7d
Added new async-check.sh
script for setting up the async simulator for internal testing.
2018-05-11 16:38:24 +02:00
7a4da340d4
Merge pull request #1547 from JacobBarthelmeh/Docs
...
add aes init function to docs
2018-05-09 16:40:36 -07:00
110c41613f
cast on return of malloc
2018-05-09 14:50:26 -06:00
d1192021a5
alter search behavior for testing if URI is a absolute path
2018-05-09 14:43:52 -06:00
c910d84507
Merge pull request #1527 from kojo1/RenesasCSPlus
...
Renesas CS+ projects
2018-05-09 10:07:16 -06:00
66e59e4a6a
Rollback #if condition
2018-05-09 10:58:10 +09:00
bb979980ca
add test case for parsing URI from certificate
2018-05-08 16:24:41 -06:00
4ee957afa3
fix for relative URI detection
2018-05-08 10:19:51 -06:00
4f0893bda5
fix ecc public key print with X509 print function
2018-05-07 14:16:27 -06:00
fd691a5795
add aes init function to docs
2018-05-07 10:24:44 -06:00
08165d5a16
Merge pull request #1540 from SparkiDev/tls13_ticket_fix
...
NewSessionTicket parsing error fix
2018-05-04 10:54:23 -07:00
0fec651338
Merge pull request #1539 from cconlon/toradix
...
expose mp_toradix() when WOLFSSL_PUBLIC_MP is defined
2018-05-04 10:49:21 -07:00
6e5258b56e
Merge pull request #1538 from dgarske/fixmatchdomainnull
...
Fix for handling match on domain name that may have a null terminator inside
2018-05-04 10:25:28 -07:00
ecd2e75564
#ifndef FREESCALE_LTC_ECC with fe_init
2018-05-04 07:34:47 +09:00
69ce10f292
NewSessionTicket parsing error fix
2018-05-04 08:18:54 +10:00
3fd47bdff3
Fix for example client/server with -H exitWithRet
option to make sure all cleanup is performed. Resolves valgrind report due to TicketCleanup()
not being called.
2018-05-03 13:39:37 -07:00
bb7bcfd877
expose mp_toradix() when WOLFSSL_PUBLIC_MP is defined
2018-05-03 13:41:23 -06:00
a2fa61cd3d
Merge pull request #1534 from SparkiDev/tls13_static_rsa
...
Fix TLS 1.3, change Client Hello version to work with static RSA (TLS 1.0 - TLS 1.2)
2018-05-03 12:38:55 -07:00
1c09c06349
Merge pull request #1533 from SparkiDev/tls13_draft26
...
Allow building TLS 1.3 at draft 26
2018-05-03 12:37:39 -07:00
74618d0e3c
Merge pull request #1532 from SparkiDev/test_fix
...
Fixes for tests
2018-05-03 11:44:01 -07:00
73d85774df
Merge pull request #1525 from dgarske/sockclose
...
Cleanup of the socket close code
2018-05-03 11:42:30 -07:00
325402cf5a
Minor fix for the expected failure case use of ssl
after free. Renamed skipExit
to exitWithRet
.
2018-05-03 10:02:59 -07:00
89a4c98670
* Added support for expected fail test cases with example client/server and suites unit test.
...
* Added test for certificate with bad alt name containing a null character mid byte stream.
* Fix for issue with suites unit test where last arg in file doesn't conain data for a param, causing it to skip test.
* Fix for last test in tests/test.conf not being run for `TLSv1.2 RSA 3072-bit DH 3072-bit`.
* Moved the `tls-cert-fail.test` tests into the new expected failure suite test (`./tests/test-fails.conf`). Now it explicilty checks RSA and ECC for the no signer and no sig tests.
2018-05-03 09:40:51 -07:00
d43aa37041
Fix for handling match on domain name that may have a null terminator inside. The check should match on len from ASN.1 reguardless of a null character.
2018-05-03 09:33:05 -07:00
996ee78d50
Fix Client Hello version to work with static RSA
2018-05-02 10:20:55 +10:00
d60b16c5b8
Merge pull request #1531 from kaleb-himes/FIPS-CHECK-SCRIPT
...
revert to default but exclude for sgx/netos
2018-05-01 15:14:00 -06:00
27c3a70e13
Allow building TLS 1.3 at draft 26
2018-05-01 15:19:18 +10:00
5845482fc0
Fixes for tests
...
Fix the benchmark client to set all groups supported.
Fix TLS 1.3 test script to work on PPC - check counter in separate test.
2018-05-01 14:27:38 +10:00
c5a39b9048
rever to default but exclude for sgx/netos projects
2018-04-30 15:17:58 -06:00
65eb79e5cd
Merge pull request #1519 from dgarske/buildfixes
...
Build fixes for a few configurations
2018-04-30 11:49:16 -07:00
d53716496a
Merge pull request #1521 from dgarske/tlsx_returncodes
...
Refactor of the TLSX code to support returning error codes
2018-04-30 11:46:41 -07:00
3ad708fb20
Merge pull request #1514 from dgarske/certdates
...
Enhancements and cleanup to ASN date/time
2018-04-30 11:14:38 -07:00
8311628f93
Merge pull request #1508 from kaleb-himes/FIPS-CHECK-SCRIPT
...
Fips check script
2018-04-30 10:50:03 -07:00
4c5982949e
minor fix
2018-04-28 13:25:41 +09:00
7de23d65ce
Merge pull request #1517 from dgarske/sighash
...
Added new signature wrapper functions to allow use of hash directly
2018-04-27 16:07:56 -07:00
6e96318785
Readme.txt
2018-04-28 06:36:56 +09:00
8ef777315a
Merge pull request #1516 from dgarske/gccarm
...
GCC-ARM IDE example improvements
2018-04-27 14:13:45 -07:00
e69af98a7e
fix warnings
2018-04-28 06:06:45 +09:00
3e9028387f
test project
2018-04-28 05:46:42 +09:00
c5df9d56ad
wolfssl_lib project
2018-04-28 05:39:42 +09:00
ac791610dd
USE_WOLF_TIMEVAL_T
2018-04-28 05:28:49 +09:00
22a2b45108
duplicated fe_init for non-configure based IDE
2018-04-28 05:07:00 +09:00
a91ac55e24
define valiable before exec statements
2018-04-28 05:05:45 +09:00
2cc2f224f8
XTIME in LowResTimer
2018-04-28 05:03:51 +09:00
e9dd44a667
Merge pull request #1524 from abrahamsonn/master
...
Doxygen landing page update
2018-04-27 11:44:00 -07:00
3200040d1a
Cleanup of the socket close code used for examples, CRL/OCSP and BIO. Now only a single macro is responsible for closing a socket CloseSocket
and all duplicate code is eliminated.
2018-04-27 10:29:19 -07:00
9424a96289
Doxygen landing page update
2018-04-27 10:56:13 -06:00
e45f0efc3f
Documentation Fixes ( #1520 )
...
* Fixed documentation errors found by check_api script
* Formatting changes so that comments/API pairs are more obvious
2018-04-27 09:50:34 -07:00
5c97374156
Fix for RSA RSS check to make sure RSA is enabled. Added TLS 1.3 DH check for key sizes.
2018-04-26 14:04:54 -07:00
ef7b40dcab
Refactor of the TLSX code to support returning error codes.
...
* The `SANITY_MSG_E` responses in `TLSX_SupportedVersions_GetSize`, `TLSX_SupportedVersions_Write`, `TLSX_Cookie_GetSize` and `TLSX_Cookie_Write` would incorrectly be handled.
* Added build-time checks in `tls13.c` for dependencies on `HAVE_HKDF` and `WC_RSA_PSS`.
2018-04-26 11:30:57 -07:00
fe4cbb2a03
Fix for Jenkins report Expected Configurations Test - NIGHTLY BUILD #267
, building ./configure --disable-asn --disable-ecc --disable-rsa --enable-psk --enable-sni
. Reported unused variables, parameters and function.
2018-04-26 05:47:48 -07:00
04626c6a1f
Fixes build issue using wrong DES define for WC_MAX_SYM_KEY_SIZE
macro. Reproduced using ./configure --enable-leanpsk --enable-des3
. Fixes issue #1518 .
2018-04-26 05:35:04 -07:00
fc02003f76
Added new signature wrapper functions to allow direct use of hash wc_SignatureVerifyHash
and wc_SignatureGenerateHash
. These new function abstract existing signature wrapper code, so minimal code size increase. Added test cases for new functions for RSA (with and without DER encoding) and ECC.
2018-04-25 13:10:53 -07:00
c1d4f659ad
Merge pull request #1511 from ejohnstown/dist-tweak
...
Make Dist Automation Tweak
2018-04-25 10:56:40 -07:00
107290b552
Merge pull request #1515 from dgarske/buildfixes
...
Fixes for various build configurations
2018-04-25 10:23:27 -07:00
5c61810d4d
Merge pull request #1497 from SparkiDev/tls13_draft28
...
Tls13 draft28
2018-04-25 10:17:37 -07:00
a9f32c30da
Fix for SGX build after C99 changes strings.h: No such file or directory
.
2018-04-25 07:56:54 -07:00
3c684886ad
Fixes to resolve building --enable-tls13 --disable-ecc --enable-curve25519 --enable-ed25519
.
2018-04-25 07:54:53 -07:00
089e1b6b9b
Fix for expected Configurations Test - NIGHTLY BUILD #265 and ifdef cleanup.
2018-04-25 07:54:53 -07:00
2e6c195b43
GCC-ARM IDE improvements:
...
* Added documentation for `ECC_USER_CURVES`.
* Added option for RSA PSS padding support.
2018-04-24 15:26:53 -07:00
65c9277213
More fixes from Jenkins testing.
2018-04-24 14:01:33 -07:00
ff1559275d
Merge pull request #1512 from dgarske/c99
...
Fixes to resolve issues with c99 compliance
2018-04-24 13:36:41 -07:00
1ddccf63dc
Merge pull request #1496 from JacobBarthelmeh/Compatibility-Layer
...
Compatibility layer
2018-04-24 13:33:33 -07:00
e63afa08bd
Fix a couple of minor Jenkins issues.
2018-04-24 13:25:28 -07:00
56025f38b9
Enhancements and cleanup to ASN date/time:
...
* Refactor the ASN get date logic to combine shared code.
* Added new API `wc_GetDateInfo` to get raw date, format and length.
* Added new API `wc_GetCertDates` to extract certificate before/after dates as `struct tm` type.
* Added new API `wc_GetDateAsCalendarTime` which parses the raw date string and convers to `struct tm`.
* Added tests for new API's.
* Added missing tests for `wc_SetAltNames`, `wc_SetAltNamesBuffer` and `wc_SetDatesBuffer`.
* Fixed build for older `NO_TIME_H` macro.
2018-04-24 13:04:36 -07:00
b48a9ded15
Fix to allow user to force build using WOLF_C99
option.
2018-04-23 13:52:58 -07:00
289a282183
Fixes to resolve issues with c99 compliance (building with ./configure CFLAGS="-std=c99"
).
...
* Fix for ReadDir checking for file flag to use `S_ISREG(ctx->s.st_mode)` syntax.
* Added macro for strsep `XSTRSEP`. Added wolf implementation as `wc_strsep` enabled as C99 or `USE_WOLF_STRSEP`.
* Fix to use `gethostbyname` for c99 instead of `getaddrinfo`.
* For c99 use wolf strtok `wc_strtok`.
* Exposed API's for `wc_strtok` and `wc_strsep` when available.
* Include `sys/time.h` when available from autocon `HAVE_SYS_TIME_H` or c99.
* include `<strings.h>` when `HAVE_STRINGS_H` or c99.
2018-04-23 13:47:22 -07:00
568d24c63c
Coverity fixes ( #1509 )
...
* Coverity fixes 3
2018-04-23 09:20:28 -07:00
9831a8ac94
Added a dist-hook target to the Makefile to copy the default options.h.in over options.h.
2018-04-20 11:07:57 -07:00
7d425a5ce6
Added support for an anonymous cipher suite ( #1267 )
...
* Added support for cipher suite TLS_DH_anon_WITH_AES256_GCM_SHA384
* Added test cases for verification of anonymous cipher suite
2018-04-20 10:35:37 -07:00
853756a73c
Added a TLS alert message 115 ( #1391 )
...
Added a new TLS alert message `unknown_psk_identity` (115) from RFC 4279, section 2.
2018-04-20 10:23:57 -07:00
94157634e1
TLS 1.3 fixes/improvements
...
Support Draft 28: able to compile code to return BAD_BINDER if no PSKs
match and certificates not to be used.
Change key share implementation to use server preference - server now
checks each client key share's group is in supported_groups extension.
Client and server examples modified to support server preference.
Application can set client's and server's supported groups by rank.
Server's supported groups is sent back in encrypted_extensions if
preferred group is not in client's list - able to be turned off at
compile time.
Application can query server's preferred group from client.
Able to compile using 0x0304 as version instead of draft version.
Fix state machine in TLS 1.3 to support unexpected hello_retry_request.
Also fixes non-blocking.
Fix resumption to use the named group from session.
Fix named group in session structure to be a 2-byte field.
Better detection of errors in message flow.
Fix DoTls13ClientHello when downgrading - don't do TLS 1.3 things.
Not downgrading on client fixed.
Downgrade protocol version from TLS 1.3 when not TLS 1.3 ciphersuite.
Get downgrading from TLS 1.3 and resumption working.
Change earlyData value to an enum.
Support no extensions data (as opposed to zero length extension data) in
TLS 1.3 ClientHello.
Check PSK cipher suite is available to both client and server before
using.
Check first PSK identity chosen when server says it is using early data
at client.
Check PSK extension is last in client_hello on server.
Check the PSK cipher suite to use is supported on client.
Check the returned cipher suite for pre-shared keys is the same as
client expects.
Send alert decrypt_error when verification fails in certificate_verify
or finished message doesn't match calculated value.
Fail when certificate messages recieved in handshake when using PSK.
Validate on the server that EndOfEarlyData message has been recieved
before finished message when server sent EarlyData extension.
2018-04-20 09:44:02 +10:00
3476a9b55a
versions for Baxter updated, new tag in fips v3.12.6
2018-04-19 15:24:22 -06:00
9e4bb3fee1
Merge pull request #1504 from SparkiDev/nginx-pemenc
...
Key derivation for encrypted PEM uses salt length of 8 in OpenSSL
2018-04-19 11:23:39 -07:00
f7cb5c5c15
Merge pull request #1507 from kaleb-himes/README-update
...
Bring special notes inline with commit 8edbca1b21b6fcd6d09910c66bbf35…
2018-04-19 11:17:25 -07:00
b7c61a72c8
Merge pull request #1503 from kojo1/Ticket3793
...
HMAC with SHA2
2018-04-19 09:38:55 -06:00
23615dd15f
Bring special notes inline with commit 8edbca1b21
2018-04-18 09:58:03 -06:00
bf950198f2
api.c: option conditions
2018-04-18 13:02:40 +09:00
6689ee965a
Key derivation for encrypted PEM uses salt length of 8 in OpenSSL
2018-04-18 12:37:06 +10:00
7c7913264b
remove printf
2018-04-18 09:25:24 +09:00
56af3a5b36
add HMAC SHA2
2018-04-18 08:47:39 +09:00
57d40bc6d1
remove internal data types in ssl.h
2018-04-17 15:57:23 -06:00
11065f9222
added the missing macro file ax_require_defined.m4.
2018-04-17 13:23:17 -07:00
48b3aa90d3
Update autoconf m4 files, except pthreads which should be its own commit
2018-04-17 13:20:33 -07:00
a116b5ba83
Merge pull request #1500 from BrianAker/patch-1
...
Adding Copyright notice to autoconf files.
2018-04-17 11:15:36 -07:00
09706a4ed2
Merge pull request #1488 from SparkiDev/tls13_perf
...
Changes for interop and performance
2018-04-16 09:16:13 -07:00
3179d6ce2b
Adding Copyright notice to autoconf files.
2018-04-14 22:30:02 -10:00
942c720dc4
Merge pull request #1499 from ejohnstown/aes-asm
...
AES assembly file name change
2018-04-13 11:23:03 -07:00
e895bacbba
update before/after dates with certificates
2018-04-13 09:31:32 -06:00
f9eda5d790
free test certificate after use
2018-04-13 09:16:22 -06:00
a0d8327320
Coverity fixes 2 ( #1493 )
...
* Coverity fixes for wolfcrypt folder
* Fixes for remaining issues
* Fixes for test files
2018-04-13 05:35:18 -07:00
9600266483
WOLFSSL_FUNC_TIME changes
...
Warning in code about using this define.
Remove usage of WOLFSSL_FUNC_TIME from server.c.
2018-04-13 12:13:31 +10:00
0b47811c46
Changes for interop and performance
...
Changes made to test.h to allow interop of PSK with OpenSSL.
Changes to allow server to pre-generate key share and perform other
operations at later time.
Fix ChaCha20 code header to have bigger state to support assembly code
for AVX1.
Fix Curve25519 code to use define instead.
Change Curve25519 to memset all object data on init.
Change Poly1305 to put both sizes into one buffer to avoid a second call
to wc_Poly1305Update().
Added WOLFSSL_START and WOLFSSL_END API and calls to show time of
protocol message function enter and leave to analyse performance
differences.
Moved Curve25519 code in KeyShare extension out of general ECC code.
2018-04-13 12:01:20 +10:00
425cee64a7
AES assembly file name change
...
Some versions of GCC on the Mac will not run the file aes_asm.s through the preprocessor. There are some ifdefs in the file that are included when they shouldn't be. This is not a problem on Linux. Renaming the file to have a capital S extension forces the assembler to run with the preprocessor.
2018-04-12 16:47:58 -07:00
84f7bd8cde
Merge pull request #1494 from dgarske/wpas
...
Fix for building wpa_supplicant
2018-04-12 13:49:31 -07:00
eacd98fe4e
Merge pull request #1491 from dgarske/config
...
Configure improvements and new options
2018-04-12 13:48:20 -07:00
8f1e8be2d0
Merge pull request #1490 from dgarske/hashoid_cleanup
...
Hash OID cleanup
2018-04-12 13:46:47 -07:00
cfaed48f90
adjust GetInt call with ASN1 integer to big number
2018-04-12 14:40:20 -06:00
df06707496
Handle larger values with ASN1 INTEGER structure
2018-04-12 14:07:29 -06:00
cf1230d232
Fix for building wpa_supplicant (./configure --enable-wpas
) after PemToDer refactor in PR #1467 .
2018-04-12 06:53:44 -07:00
1f7b954d47
Fix for wc_GetCTC_HashOID
in FIPS mode. Uses the new wc_HashTypeConvert
to handle conversion from unique WC_ALGO (int
) to WC_HASH_TYPE_ALGO (enum wc_HashType
).
2018-04-12 06:51:23 -07:00
ce6728951f
Added a new --enable-opensslall
option, which ensures all openssl features are enabled. Documented and tested building the various open source defines we support in our build.
2018-04-11 13:54:07 -07:00
689203d310
Added some more features to the --enable-all
. Added new --enable-webclient
option.
2018-04-11 13:54:07 -07:00
ee5d78f84f
Added new wc_OidGetHash
API for getting the hash type from a hash OID. Refactor PKCS7 and PKCS12 to use new API and reduce duplicate ocde. Updated wc_GetCTC_HashOID
to use wc_HashGetOID
and maintain back compat.
2018-04-11 13:53:30 -07:00
d85580691b
Merge pull request #1492 from dgarske/fix_noasn_pwdbased
...
Fixes for ASN disabled and PWDBASED enabled / Win FIPS
2018-04-11 12:09:30 -07:00
83bfdb1594
Fix for issue with unique hash types on ctoacrypt FIPS using different values than WC_HASH_TYPE_*. Add new API wc_HashTypeConvert
to handle the conversion between enum wc_HashType
and int
. For FIPS it uses a switch() to convert and for non-FIPS it uses a simple cast. Changed the pwdbased_test to return actual ret instead of adding values (made it difficult to track down error location).
2018-04-11 09:30:30 -07:00
3f3e332a3a
Fix for evp.c statement will never be executed
in wolfSSL_EVP_CIPHER_CTX_block_size
.
2018-04-11 08:18:39 -07:00
38aa56cc40
Fix for Windows FIPS build in current master. Resolves issue with missing DES/AES key size enums.
2018-04-10 20:07:14 -07:00
565f394972
Fix for building without ASN and PWDBASED enabled (./configure --disable-asn --enable-pwdbased
).
2018-04-10 16:36:11 -07:00
e25da80766
Merge pull request #1467 from dgarske/asnpemtoder
...
PEM Encrypted Keys cleanup and PemToDer move to wolfCrypt asn.c
2018-04-09 16:33:30 -07:00
a38576146e
* Added support for disabling PEM to DER functionality using WOLFSSL_PEM_TO_DER
. This allows way to use with DER (ASN.1) certificates only in an embedded environment. This option builds, but internal make check requires PEM support for tests.
...
* More cleanup to move PEM functions from ssl.c to asn.c (`wolfSSL_CertPemToDer`, `wolfSSL_KeyPemToDer`, `wolfSSL_PubKeyPemToDer`). Renamed these API's to `wc_` and added backwards compatability macro for old function names.
2018-04-09 13:28:15 -07:00
5a46bdf6f6
Added unit test for using encrypted keys with TLS. Only works with --enable-des3
, since the keys are all encrypted with DES3 (also requires either --enable-opensslextra or --enable-enckeys
).
2018-04-09 13:28:15 -07:00
d68a6fb4c7
Make sure wc_encrypt.h includes the ciphers.
2018-04-09 13:28:15 -07:00
98c186017a
Fixes for build failures. Added new WC_MAX_SYM_KEY_SIZE
macro for helping determine max key size. Added enum for unique cipher types. Added CHACHA_MAX_KEY_SZ
for ChaCha.
2018-04-09 13:28:15 -07:00
2c72f72752
Fixes for FIPS, sniffer (w/o enc keys), scan-build issues and backwards compatability.
2018-04-09 13:28:15 -07:00
9be11bf62c
Fix to correct missing wolfSSL_EVP_BytesToKey
header int he NO_MD5 case.
2018-04-09 13:28:15 -07:00
1f00ea2115
Fixes for various build issues with type casting and unused functions. Moved mystrnstr
to wc_port.c. Added some additional argument checks on pwdbased.
2018-04-09 13:28:15 -07:00
e60032b961
Fix for duplicate API defs.
2018-04-09 13:28:15 -07:00
b01535b483
Fix for stray character.
2018-04-09 13:28:15 -07:00
8a31f13cb6
Remove obsolete WOLFSSL_PEMPUBKEY_TODER_DEFINED
header logic.
2018-04-09 13:28:15 -07:00
6de8348918
Fixes for various build configurations. Added --enable-enckeys
option to enable support for encrypted PEM private keys using password callback without having to use opensslextra. Moved ASN CryptKey
function to wc_encrypt.c as wc_CryptKey
. Fixup some missing heap args on XMALLOC/XFREE in asn.c.
2018-04-09 13:28:15 -07:00
1315fad7dc
Added ForceZero on the password buffer after done using it.
2018-04-09 13:28:15 -07:00
3a8b08cdbf
Fix to move the hashType out of EncryptedInfo. Fix for parsing "DEC-Info: ". Fix for determining when to set and get ivSz.
2018-04-09 13:28:15 -07:00
c83e63853d
Refactor unqiue hash types to use same internal values (ex WC_MD5 == WC_HASH_TYPE_MD5). Refactor the Sha3 types to use wc_ naming.
2018-04-09 13:28:15 -07:00
264496567a
Improvements to EncryptedInfo. Added build option WOLFSSL_ENCRYPTED_KEYS
to indicate support for EncryptedInfo. Improvements to wc_PBKDF1
to support more hash types and the non-standard extra data option.
2018-04-09 13:28:15 -07:00
f9e830bce7
First pass at changes to move PemToDer into asn.c.
2018-04-09 13:28:14 -07:00
2ded38ec2b
Merge pull request #1485 from dgarske/tlskeygeneccorcurve
...
Fix TLS 1.3 with ED25519/CURVE25519 enabled and ECC disabled
2018-04-09 12:12:31 -07:00
21833e245f
Fix TLS 1.3 with ECC disabled and CURVE25519 enabled. Resolves issue with using ./configure --disable-ecc --enable-curve25519 --enable-ed25519 --enable-tls13
. Refactor TLSX_KeyShare_GenEccKey
to support either ECC or CURVE25519. Fix for PemToDer
to handle ED25519 without ECC enabled.
2018-04-09 10:10:08 -07:00
2a460d3d05
Merge pull request #1484 from embhorn/coverity
...
Coverity fixes
2018-04-06 18:18:38 -07:00
36b9b0b558
Updates from code review
2018-04-06 17:29:27 -05:00
86767e727c
Fixes for CID 185033 185028 185142 185064 185068 185079 185147
2018-04-06 13:15:16 -05:00
d2c1a1906d
Fixes for CID 184980 185017 185047 185167
2018-04-06 11:10:37 -05:00
6090fb9020
Merge pull request #1483 from dgarske/winvs
...
Fixes for unused `heap` warnings
2018-04-06 09:01:49 -07:00
e56209cee4
Merge pull request #1482 from dgarske/nourand
...
Added new define `NO_DEV_URANDOM` to disable the use of `/dev/urandom`
2018-04-06 09:00:37 -07:00
920e6ed911
Fix warning in ssl.c
2018-04-06 09:30:54 -05:00
c6ad885459
Coverity fixes for tls.c/n CID 184996 185112 185122
2018-04-06 09:08:00 -05:00
ec429e50b1
Fixes for ssl.c
2018-04-06 07:45:12 -05:00
426335b68f
Found additional VS unused heap
warnings. Replace tabs with 4-spaces.
2018-04-05 12:28:32 -07:00
2b48a074eb
Merge pull request #1480 from dgarske/extcache
...
Fix for HAVE_EXT_CACHE callbacks not being available without OPENSSL_EXTRA
2018-04-05 10:52:44 -07:00
bab62cc435
Added new define NO_DEV_URANDOM
to disable the use of /dev/urandom
. Added better named define WC_RNG_BLOCKING
to indicate block w/sleep(0) is okay.
2018-04-05 09:34:43 -07:00
ede006b3e1
Merge pull request #1479 from JacobBarthelmeh/HardwareAcc
...
Fix PIC32 AES-CBC and add test case
2018-04-05 09:15:08 -07:00
5439402c1d
Refactor for max record size ( #1475 )
...
* Added new internal function `wolfSSL_GetMaxRecordSize`.
* Modified tls_bench to use dynamic buffer based on max record size.
* Added comment for DTLS maxFragment calculation.
2018-04-05 09:11:58 -07:00
412d4d76ee
Fix for HAVE_EXT_CACHE
callbacks not being available without OPENSSL_EXTRA
defined. Added tests for external cache callbacks.
2018-04-05 07:10:04 -07:00
a1d6bc68de
Merge pull request #1478 from dgarske/fixeccmaxsize
...
Fix for ECC max bits
2018-04-04 16:27:15 -07:00
815219b589
fix pic32 AES-CBC and add test case
2018-04-04 16:09:11 -06:00
bc76f57959
Fix for ECC max bits ( MAX_ECC_BITS
).
2018-04-04 13:39:14 -07:00
a78c6ba4ea
Fix for unused heap
warnings.
2018-04-04 12:51:45 -07:00
aa660bc9b8
Merge pull request #1477 from dgarske/fix_strtok
...
Fix for issue with `wc_strtok` function declaration
2018-04-04 12:35:38 -07:00
2189827287
Fix for issue with wc_strtok
function declaration not being available because of include order. Fixes issue #1469 .
2018-04-04 10:41:14 -07:00
0da4a8f1fe
Merge pull request #1476 from dgarske/fix_haveextcache
...
Fix building with `HAVE_EXT_CACHE` when `OPENSSL_EXTRA` is not defined
2018-04-04 10:34:07 -07:00
2deb977ecf
Merge pull request #1473 from dgarske/pkcs7_norsa
...
Enabled PKCS7 support without RSA
2018-04-04 10:33:11 -07:00
960d2ec031
Merge pull request #1471 from JacobBarthelmeh/Fuzzer
...
sanity check on buffer read
2018-04-04 10:31:55 -07:00
1196a3b64d
Merge pull request #1455 from dgarske/nitroxv
...
Nitrox V fixes and additions
2018-04-04 10:27:53 -07:00
5702e8ee48
Fix building with HAVE_EXT_CACHE
when OPENSSL_EXTRA
is not defined. Fixes issue #1474 .
2018-04-04 09:02:52 -07:00
c288d0815d
Added support for building and using PKCS7 without RSA (assuming ECC is enabled).
2018-04-03 09:26:57 -07:00
0c898f513d
Nitrox V fixes and additions:
...
* Added support for ECC, AES-GCM and HMAC (SHA-224 and SHA3).
* Fixes for Nitrox V with TLS.
* ECC refactor for so key based `r` and `s` apply only when building with `WOLFSSL_ASYNC_CRYPT`.
* ECC refactor for `e` and `signK` to use key based pointer for Nitrox V.
* Improved the Nitrox V HMAC to use start, update and final API's instead of caching updates.
* Fix for Intel QuickAssist with unsupported HMAC hash algos using `IntelQaHmacGetType` (such as SHA3).
* Added new API `wc_mp_to_bigint_sz` to zero pad unsigned bin.
* Fix for AES GCM to gate HW use based on IV len in aes.c and remove the gate in test.c.
* Implemented workaround to use software for AES GCM Nitrox V hardware and 13 byte AAD length for TLS.
* New debug option `WOLFSSL_NITROX_DEBUG` to add pending count.
2018-04-03 09:14:20 -07:00
adb817e8d2
Feature update for tls_bench test that will allow passing in arguments ( #1466 )
...
* Feature update for tls_bench test that will allow passing in command line arguments that enable test features.
* Fix type conversion errors.
* Fixed use of uninitialized data. Declare DH arrays as const.
2018-04-02 14:00:34 -07:00
6a1013888f
sanity check on buffer read
2018-04-02 14:30:58 -06:00
b33feb9dbf
Merge pull request #1470 from kojo1/EVP
...
EVP_CipherUpdate return value for inlen == 0
2018-04-02 14:03:48 -06:00
c60d9ff983
if(ret != 1) error
2018-04-01 13:27:08 +09:00
1c0b84d47d
openSSL compatibility, EVP_CipherUpdate, if(inlen == 0)return 1;
2018-04-01 12:13:18 +09:00
effaa18b32
Fixing some kinks
2018-03-30 12:46:59 -06:00
87c1658ab8
Merge pull request #1464 from jrblixt/unitTest_api_addPkcs7-nightlyBuildFix2
...
Nightly build fix for PKCS#7 errors.
2018-03-29 15:26:11 -06:00
86a5330b31
Merge pull request #1462 from ejohnstown/cxxflags
...
Configure Update
2018-03-28 16:41:15 -07:00
e59bb43878
Configure Update
...
Revise default compiler optimization flags enable name to something more descriptive.
2018-03-28 13:19:46 -07:00
3a8a7b8a55
Merge pull request #1458 from dgarske/cleanupthreaded
...
wolfCrypt ECC FP cleanup for thread local storage cases
2018-03-28 12:25:20 -07:00
e6a19bb1e8
Configure Update
...
Add a disable option to turn off the default optimization options so the user may set their own in a CFLAGS.
2018-03-27 16:41:39 -07:00
1cd6075b9d
Nightly build fix.
2018-03-27 16:54:14 -06:00
c9d840ed8d
Fix for the HAVE_THEAD_LS
case with FP_ECC
where starting a new thead and doing ECC operations and not calling wc_ecc_fp_free
. Added missing wolfCrypt_Init
to API docs.
2018-03-27 14:29:39 -07:00
f62d372bbe
Merge pull request #1461 from cconlon/netbsd-update
...
update NetBSD fips-check version to include selftest ECDSA fix
2018-03-27 13:28:49 -07:00
9de2bdce24
Merge pull request #1460 from dgarske/winecc
...
Enable ECC, AES-GCM and SHA-512/384 by default in VS
2018-03-27 13:28:23 -07:00
504b13530e
Merge pull request #1459 from cconlon/selftest_fixes
...
Fix for wolfCrypt test and CAVP selftest build
2018-03-27 13:27:28 -07:00
477d2413cd
Configure Update
...
1. Initialize CXXFLAGS (C++ compiler flags) the same way we do CFLAGS.
2. Add CPPFLAGS (C preprocessor flags) to the options.h file with the other CFLAGS.
2018-03-27 10:23:44 -07:00
9f231e0020
Merge pull request #1453 from dgarske/ecc508a_linux
...
Support for building with `WOLFSSL_ATECC508A` on other targets
2018-03-27 09:57:39 -07:00
42e6ea8685
Added ECC_TIMING_RESISTANT
to eliminate harden warnings.
2018-03-26 15:54:29 -07:00
8fbc765dba
Enable ECC, AES-GCM and SHA-512/384 by default in Windows Visual Studio projects.
2018-03-26 15:09:51 -07:00
9edaac8e1c
update NetBSD fips-check version to include selftest ECDSA fix
2018-03-26 14:37:39 -06:00
021560035b
fix unused var warning for extNameConsOid with IGNORE_NAME_CONSTRAINTS
2018-03-26 09:43:37 -06:00
d2aa7d0a37
exclude ecc_import_unsigned test when building for CAVP selftest
2018-03-23 16:31:17 -06:00
c08f5b86cf
Merge pull request #1444 from jrblixt/unitTest_api_addPkcs-PR03162018
...
Unit test functions for PKCS#7.
2018-03-23 10:00:33 -06:00
aee6f4d0ca
Merge pull request #1457 from dgarske/base16
...
Base16/64 improvements
2018-03-22 15:14:57 -07:00
316a2b9fb4
Review changes: Chris.
2018-03-22 15:35:25 -06:00
a92696edec
Merge pull request #1454 from dgarske/noprivkey
...
Support for not loading a private key when using `HAVE_PK_CALLBACKS`
2018-03-22 12:47:22 -07:00
040e0ab752
Merge pull request #1456 from dgarske/iocbname
...
Refactor IO callback function names to use `_CTX_`
2018-03-22 12:40:48 -07:00
43f4faa7be
Merge pull request #1452 from cconlon/mcapifix
...
fix unused param warning with NO_ERROR_STRINGS
2018-03-22 12:39:19 -07:00
3bf325290d
Base16/64 improvements:
...
* Add define `WOLFSSL_BASE16` to explicitly expose base16 support.
* Add `./configure --enable-base16` option (disabled by default in configure, but enabled in coding.h when required internally).
* Added base16 tests in test.c `base16_test`.
* Enabled base64 decode tests when `WOLFSSL_BASE64_ENCODE` is not defined.
2018-03-22 10:36:56 -07:00
0cff2f8b10
Replace use of PUB_KEY_SIZE
(from CryptoAuthLib) with new ECC_MAX_CRYPTO_HW_PUBKEY_SIZE
.
2018-03-22 09:45:27 -07:00
8c4bfd825a
Support for building the ATECC508A without WOLFSSL_ATMEL
defined, which enables features specific to Atmel Studio Framework (ASF) and an embedded target. This allows for building with WOLFSSL_ATECC508A
defined on other targets such as Linux.
2018-03-22 09:39:21 -07:00
2989c73411
Merge pull request #1447 from JacobBarthelmeh/PKCS7
...
remove pkcs7 requirement of x963kdf when ecc is disabled
2018-03-22 10:01:55 -06:00
e564c973b6
Refactor IO callback function names to use _CTX_
to eliminate confusion about the first parameter.
2018-03-21 16:08:55 -07:00
4b51431546
Fix for possible unused ctx
in wolfSSL_CTX_IsPrivatePkSet
when no ECC, RSA or ED25519.
2018-03-21 15:46:08 -07:00
104f7a0170
Merge pull request #1451 from JacobBarthelmeh/Optimizations
...
Adjust X509 small build and add more macro guards
2018-03-21 15:15:27 -07:00
f3d0879ed7
Merge pull request #1449 from dgarske/asn_nullterm
...
ASN improvements for building header/footer in `wc_DerToPemEx`
2018-03-21 15:13:46 -07:00
2a356228be
Merge pull request #1445 from SparkiDev/wpas_fix
...
Fixes for wpa_supplicant
2018-03-21 15:11:43 -07:00
dbb34126f6
* Added support for not loading a private key for server or client when HAVE_PK_CALLBACK
is defined and the private PK callback is set. Tested with all cipher suites, TLS 1.2/1.3, client/server certs, RSA/ECC/ED25519.
...
* Added PK callback context tests for client/server examples (`SetupPkCallbackContexts`).
* Added new test define for `TEST_PK_PRIVKEY` to allows simulating hardware based private key.
* Added new test.h function for loading PEM key file and converting to DER (`load_key_file`).
* Added way to get private key signature size (`GetPrivateKeySigSize`).
* Added new ECC API `wc_ecc_sig_size_calc` to return max signature size for a key size.
* Added inline comments to help track down handshake message types.
* Cleanup of RSS PSS terminating byte (0xbc) to use enum value.
* Fixed bug with PK callback for `myEccVerify` public key format.
* Fixed bug with PK callback for ED25519 verify key buffer in DoServerKeyExchange.
2018-03-21 11:27:08 -07:00
26bb86690a
fix for unused parameter warning
2018-03-21 10:06:06 -06:00
14bb14c6ab
fix unused param warning with NO_ERROR_STRINGS
2018-03-21 09:56:08 -06:00
90f97f4a5a
fix for unused variable
2018-03-21 09:16:43 -06:00
0aa3b5fa0e
macros for conditionally compiling code
2018-03-21 00:09:29 -06:00
d9917049c4
use bit fields with WOLFSSL_CTX structure
2018-03-20 22:07:42 -06:00
087df8f1cd
more macro guards to reduce size
2018-03-20 17:15:16 -06:00
c9c2e1a8a7
Don't base signature algorithm support on certificate
...
The signature algorithm support is what you can do with another key, not
what you can do with your key.
2018-03-21 08:33:54 +10:00
4d65e4cc1e
add WOLFSSL_NO_DH186 macro to optionally compile out DH186 function
2018-03-20 15:31:20 -06:00
df6ea54cd5
add support for PKCS8 decryption to OPENSSL_EXTRA_X509_SMALL build
2018-03-20 15:06:35 -06:00
2788183e79
Known config. tests fix.
2018-03-20 14:35:26 -06:00
bba0a3e88c
Merge pull request #1448 from dgarske/ecc_cleanup
...
ECC import/export cleanups and additions
2018-03-20 11:05:15 -07:00
38d1eea8cd
Merge pull request #1446 from SparkiDev/tls13_draft27
...
TLS v1.3 support for Draft 23 and Draft 27
2018-03-20 09:13:03 -07:00
18879ce271
Merge pull request #1440 from dgarske/VerifyRsaSign_PKCallback
...
Added VerifyRsaSign PK callback
2018-03-20 09:02:18 -07:00
764aec071c
Further improvement to the null termination and newline logic in wc_DerToPemEx
.
2018-03-19 22:58:18 -07:00
59aa893260
Cleanup ECC point import/export code. Added new API wc_ecc_import_unsigned
to allow importing public x/y and optional private as unsigned char. Cleanup wc_ecc_sign_hash
to move the hardware crypto code into a separate function. Added missing tests for wc_ecc_export_public_raw
, wc_ecc_export_private_raw
and new test for wc_ecc_import_unsigned
.
2018-03-19 13:28:57 -07:00
87c70e76a9
Merge pull request #1441 from dgarske/ocsp_nb
...
Fix for handling OCSP with non-blocking
2018-03-19 12:05:59 -07:00
2cc1a1c5bf
Renamed callbacks for VerifySign to SignCheck. Switched the new callback context to use the one for the sign. Fix for callback pointer check on VerifyRsaSign. Added inline comments about the new RsaSignCheckCb
and RsaPssSignCheckCb
.
2018-03-19 10:19:24 -07:00
cb8f8a953b
Merge pull request #1438 from SparkiDev/nginx_pem_write
...
Fix PEM_write_bio_X509 to work with new BIO code
2018-03-19 09:13:51 -07:00
1040cf9caa
Merge pull request #1437 from dgarske/eccrsrawtosig
...
Added new ECC API `wc_ecc_rs_raw_to_sig`
2018-03-19 09:12:39 -07:00
467608b6c9
remove pkcs7 requirement of x963kdf when ecc is disabled
2018-03-19 10:08:46 -06:00
7ce2efd572
Merge pull request #1431 from JacobBarthelmeh/Optimizations
...
more aes macro key size guards
2018-03-19 09:07:05 -07:00
b28c6a394f
Merge pull request #1428 from JacobBarthelmeh/Certs
...
Update to certificate renew scripts
2018-03-19 09:05:15 -07:00
bd53d7ba59
TLS v1.3 support for Draft 23 and Draft 27
...
Draft 24: Second ClientHello usees version 0x0303 - no change.
Draft 25: The record layer header is now additional authentication data to
encryption.
Draft 26: Disallow SupportedVersion being used in ServerHello for
negotiating below TLS v1.3.
Draft 27: Older versions can be negotiated (by exclusion of 0x0304) in
SupportedVersion - no change.
2018-03-19 16:15:02 +10:00
b325e0ff91
Fixes for wpa_supplicant
2018-03-19 11:46:38 +10:00
465f1d491f
Merge pull request #1443 from cconlon/dhagree
...
check z against 1 in wc_DhAgree()
2018-03-17 20:15:31 -07:00
250cd3b7eb
Merge pull request #1433 from SparkiDev/sp_size
...
Fix size on Intel and improve 32-bit C code performance
2018-03-16 17:05:46 -07:00
1aba6e9b44
Prepare for PR.
2018-03-16 17:07:28 -06:00
3118c8826b
check z against 1 in wc_DhAgree()
2018-03-16 15:59:48 -06:00
323abafc1c
backup updates for SGX and DB jobs
2018-03-16 15:34:30 -06:00
fa73f7bc55
Fix for handling OCSP with non-blocking. The HashInput function was being called on the re-entry, which produced a bad mac response from server. Also cleanup for some of the WC_PENDING_E logic for the non-async cases to reduce code size.
2018-03-16 12:05:07 -07:00
e858ec11ac
Fix unused arg when building with pk callbacks disabled.
2018-03-16 09:37:07 -07:00
ed7774e94a
Added new callbacks for the VerifyRsaSign, which uses a private key to verify a created signature. The new callbacks API's are wolfSSL_CTX_SetRsaVerifySignCb
and wolfSSL_CTX_SetRsaPssVerifySignCb
. These use the same callback prototype as the CallbackRsaVerify and use the same context.
2018-03-15 14:43:41 -07:00
f70351242b
Merge pull request #1432 from kojo1/mdk5
...
3.14.0 update on mdk5 pack
2018-03-15 14:47:14 -06:00
3f99a2a391
Fix PEM_write_bio_X509 to work with new BIO code
2018-03-15 10:45:49 +10:00
a207cae0f4
add some more macro guards to reduce size
2018-03-14 17:24:23 -06:00
607bd96317
add ocsp cert renew and test-pathlen to script
2018-03-14 16:35:16 -06:00
4d1986fc21
Improve speed of 32-bit C code
2018-03-15 08:33:04 +10:00
9ccf876a21
Added new ECC API wc_ecc_rs_raw_to_sig
to take raw unsigned R and S and encodes them into ECDSA signature format.
2018-03-14 10:59:25 -07:00
d8fe341998
First pass at added PK_CALLBACK support for VerifyRsaSign
.
2018-03-14 09:54:18 -07:00
717ba83deb
Merge pull request #1434 from SparkiDev/tls13_multi_recs
...
Fix multiple handshake messages in last record of certs
2018-03-14 09:46:32 -07:00
262aa7c9a4
Merge pull request #1429 from JacobBarthelmeh/Testing
...
fix for build with NTRU and certgen
2018-03-14 09:42:39 -07:00
afe300acc0
Fix multiple handshake messages in last record of certs
2018-03-14 16:37:58 +10:00
8d750a22b1
Update project files
2018-03-14 08:15:18 +09:00
1de291be8d
macro INLINE
2018-03-14 07:14:07 +09:00
c4dfa41088
SP improvements
...
Tag functions to not be inlined so llvm doesn't make huge builds.
Add sp_mod to support new DH key generation function.
2018-03-13 14:16:48 +10:00
8fb3ccacb7
opensslextra fixs and warning for unused variable
2018-03-12 18:05:24 -06:00
c41bc8205c
account for build with no aes and no des3
2018-03-12 16:41:26 -06:00
6b04ebe3a4
fix for compiling with different build settings
2018-03-12 16:12:10 -06:00
fa21fb4a27
more aes macro key size guards
2018-03-12 15:44:48 -06:00
15805d626d
Merge pull request #1430 from SparkiDev/srp_test_fix
...
Fix SRP test to have 2048 bit test data
2018-03-12 11:33:50 -07:00
b297d9dce0
Merge pull request #1427 from JacobBarthelmeh/Compatibility-Layer
...
return value on bad mutex with error nodes and add x509 host check to OPENSSL_EXTRA
2018-03-12 11:33:20 -07:00
00203d66d5
Fix SRP test to have 2048 bit test data
2018-03-12 17:32:27 +10:00
8fdb99443a
fix for build with NTRU and certgen
2018-03-09 14:21:43 -07:00
72f390a102
Merge pull request #1361 from connerWolfSSL/doxygen_project
...
wolfSSL with Doxygen Documentation
2018-03-09 13:17:54 -08:00
e41f5de556
default generate ed25519 cert with renew and add ecc crls to script
2018-03-09 14:09:34 -07:00
d9738563af
add ed25519 certificate generation to renewcerts.sh
2018-03-09 10:43:36 -07:00
f6b5427f2b
bad sig certificate renew script
2018-03-09 09:50:52 -07:00
849e1eb10d
updating renewcerts script
2018-03-09 00:35:14 -07:00
3b4d1bc796
Merge pull request #1425 from dgarske/config_defaults
...
Enable ECC by default and for aarch64 more algos
2018-03-08 14:05:03 -08:00
0ab4166a80
Merge pull request #1421 from JacobBarthelmeh/Optimizations
...
trim out more strings and fix DN tag
2018-03-08 14:03:10 -08:00
1f9583c59c
Merge pull request #1409 from SparkiDev/tls13_old_ver_fix
...
Fix downgrading when WOLFSSL_TLS13 is defined (despite NO_OLD_TLS being defined)
2018-03-08 13:59:59 -08:00
200077c62c
Merge pull request #1426 from cconlon/dh186
...
DH - Use q parameter when available, add wc_DhSetKey_ex()
2018-03-08 13:57:54 -08:00
e0afec0600
fix RSA macro, tickets without server, and add test case
2018-03-08 14:36:43 -07:00
e960e0544a
try to clear out error queue with failing mutex
2018-03-08 11:49:16 -07:00
2a0ef55a66
fix for check on return value with mutex error case
2018-03-08 11:26:22 -07:00
74475a26ba
compile more functions in with OPENSSL_EXTRA
2018-03-08 11:06:40 -07:00
0535a8a68a
Added isntall flag, improved pathing for using doxygen to generate documentation
2018-03-08 10:53:44 -07:00
0ac833790d
check q in wc_CheckPubKey_ex() if available in DhKey
2018-03-08 10:17:52 -07:00
6f95677bb8
add wc_DhSetKey_ex() with support for q and SP 800-56A
2018-03-08 09:36:44 -07:00
9e6b9a3793
Merge https://github.com/wolfssl/wolfssl into doxygen_project
2018-03-08 08:10:10 -07:00
d6ffa0dd8e
Fix downgrade when doing TLS v1.3
2018-03-08 15:05:36 +10:00
d35a3f1e69
Fixes from code review
...
If doing TLS v1.3 and version on ServerHello is below TLS v1.2 then
handle message with old code.
If doing TLS v1.3, downgrading and version ClientHello is less than
minimum downgrade then this is a version error.
2018-03-08 09:00:36 +10:00
8edbca1b21
Enable ECC for all platforms by default. For aarch64 enable SHA512, SHA224, SHA3 and FastMath by default.
2018-03-07 09:41:07 -08:00
612a80609a
warning about extra set of parentheses
2018-03-07 10:35:31 -07:00
799a6b6d2d
fix warning of unused variable and add guard for disable ecc build
2018-03-07 10:35:31 -07:00
a9c6385fd1
trim out more strings and fix DN tag
2018-03-07 10:35:31 -07:00
a4000ba196
Merge pull request #1418 from SparkiDev/sp_armasm
...
Add assembly code for ARM and 64-bit ARM
2018-03-07 09:18:16 -08:00
91a59eb625
Merge pull request #1422 from JacobBarthelmeh/Compatibility-Layer
...
add stub code for flag with x509 check host
2018-03-07 08:55:21 -08:00
35f8460e8a
Merge pull request #1419 from dgarske/stm32f1
...
Added support for `WOLFSSL_STM32F1`
2018-03-07 08:51:22 -08:00
cd940ccb5c
Merge pull request #1417 from dgarske/asn_x509_header
...
Cleanup of the ASN X509 header logic
2018-03-07 08:50:00 -08:00
71ba87bb4d
Merge pull request #1416 from dgarske/fix_pluton_ecc_sign
...
Fix for Pluton ECC sign (2nd try)
2018-03-07 08:47:46 -08:00
89182f5ca9
Add assembly code for ARM and 64-bit ARM
...
Split out different implementations into separate file.
Turn on SP asm by configuring with: --enable-sp-asm
Changed small ASM code for ECC on x86_64 to be smaller and slower.
2018-03-07 11:57:09 +10:00
602874cff4
Merge pull request #1423 from ejohnstown/touch-file
...
Fix issue with the creation of dummy fips.h header.
2018-03-06 16:29:05 -08:00
a7fe5e3502
Fix issue with the creation of dummy fips.h header.
2018-03-06 13:15:35 -08:00
3f80006b25
add stub code for flag with x509 check host
2018-03-06 11:55:20 -07:00
fcae6d46be
Merge https://github.com/wolfssl/wolfssl into doxygen_project
2018-03-06 10:16:21 -07:00
5a1bdff0bd
Added wolfssl vs doxygen api checking, removed storing warnings and errors in files
2018-03-06 10:13:13 -07:00
5699afe63d
Fix for minor typos in OPENSTM32 README.md.
2018-03-06 09:09:44 -08:00
5174ad77f2
Added support for WOLFSSL_STM32F1
.
2018-03-06 09:07:43 -08:00
b879d138af
Fix for using non-const as array sizer (resolves build error with VS).
2018-03-06 09:04:12 -08:00
57e9b3c994
Cleanup of the ASN X509 header and XSTRNCPY logic.
2018-03-05 16:11:12 -08:00
d75b3f99ac
Proper fix for Pluton ECC sign.
2018-03-05 15:29:34 -08:00
317c890961
Fix minimum downgrade when NO_OLD_TLS is defined
2018-03-05 10:12:04 +10:00
dee74e98dd
Fix downgrading when WOLFSSL_TLS13 is defined (despite NO_OLD_TLS being defined)
2018-03-05 10:11:51 +10:00
e95fa69a9b
Merge pull request #1414 from JacobBarthelmeh/Certs
...
update certificate after dates
2018-03-02 15:17:25 -08:00
f223f8fdfd
update certificate after dates
2018-03-02 14:31:08 -07:00
a82dc1ad22
Merge pull request #1413 from JacobBarthelmeh/Release
...
bump version to 3.14.0
2018-03-02 12:58:31 -08:00
48cd2806af
Merge pull request #1412 from JacobBarthelmeh/PKCS12
...
clean up memory in error case with PKCS12 create
2018-03-02 12:37:12 -08:00
2c12b0d678
Merge pull request #1411 from ejohnstown/dtls-null-fix
...
DTLS Import/Export with Null Cipher
2018-03-02 11:41:04 -08:00
922d65d97c
bump version to 3.14.0
2018-03-02 12:31:41 -07:00
ae23f777d6
clean up memory in error case with PKCS12 create
2018-03-02 11:35:16 -07:00
53c0bf6a20
Merge pull request #1408 from JacobBarthelmeh/Release
...
Testing in preparation for release
2018-03-02 10:12:27 -08:00
e698084eac
Merge pull request #1406 from dgarske/mmcau_sha256_cast
...
Fix for cast warning with NXP CAU and SHA256.
2018-03-02 10:10:14 -08:00
edfe16ef8c
Merge pull request #1410 from dgarske/fix_pluton_ecc_sign
...
Fix for pluton ECC sign
2018-03-02 11:07:01 -07:00
da76ee0877
allow import of DTLS sessions with null cipher as the null cipher is allowed with dtls when enabled
2018-03-02 09:57:07 -08:00
223903717a
add sanity check for short read
2018-03-02 09:38:11 -07:00
f6869dfe09
AES ECB build with ARMv8 instructions enabled
2018-03-02 09:30:43 -07:00
f6d770b5bd
Fix for pluton ECC sign.
2018-03-02 07:57:22 +01:00
223facc46a
sanity check on index before reading from input
2018-03-01 18:03:21 -07:00
ae21c03d69
check on certificate index when getting Name
2018-03-01 18:00:52 -07:00
e80e82a89b
sanity check on reading newline character
2018-03-01 18:00:52 -07:00
e7b0fefd7a
add sanity check on read index
2018-03-01 18:00:52 -07:00
d46a2b449d
fix for smallstack buffer size
2018-03-01 18:00:52 -07:00
df1c73c8e5
check for case that BER to DER API is available
2018-03-01 18:00:52 -07:00
db18e49920
gcc-7 warning about misleading indentation
2018-03-01 18:00:52 -07:00
2a368abd20
fix build for haproxy
2018-03-01 18:00:52 -07:00
b25ebf64b9
Merge pull request #1407 from ejohnstown/new-ca-cert
...
added another CA to the wolfssl website ca file
2018-03-01 17:58:19 -07:00
ecb2463bbe
modify the client external test list to skip the test case when aes and aes-gcm are disabled
2018-03-01 15:22:38 -08:00
7b1f6967c8
added another CA to the wolfssl website ca file
2018-03-01 11:57:12 -08:00
ba40a71a3c
added script so ensure doxygen api documentation matches wolfssl api
2018-03-01 10:27:30 -07:00
59c8d3cdf7
Fix for cast warning with NXP CAU and SHA256.
2018-03-01 08:06:29 +01:00
1b2e43478d
Merge pull request #1405 from ejohnstown/selftest-errors
...
added error codes for the FIPS pairwise agreement tests in the POST
2018-02-28 14:16:59 -07:00
d035c1dd81
added error code for the FIPS DH agreement KAT test in the POST
2018-02-28 10:54:53 -08:00
b6aae0c2d1
Merge pull request #1402 from JacobBarthelmeh/Testing
...
Improve bounds and sanity checks
2018-02-28 09:45:19 -08:00
25e7dbd17a
add comment on sanity check
2018-02-27 23:30:50 -07:00
5cc046eb6d
added error codes for the FIPS pairwise agreement tests in the POST
2018-02-27 12:42:25 -08:00
00b6419964
use XSTRLEN and revert adding outLen parameter
2018-02-26 16:52:09 -07:00
e6c95a0854
sanity check on input size
2018-02-26 14:41:00 -07:00
5ef4296b3d
sanity check on buffer length with ASNToHexString
2018-02-26 14:25:39 -07:00
e4f40fb6c0
add sanity checks and change index increment
2018-02-26 13:55:56 -07:00
fab99f9f44
Merge https://github.com/wolfssl/wolfssl into doxygen_project
2018-02-08 10:13:43 -07:00
17e88b47f6
Migrated documentation directory to doc. README updated. Error fixes. Moved make options to doc/include.am
2018-02-08 10:05:30 -07:00
f5c33a9362
added force flag to not through warning if no file present to remove
2018-02-01 10:23:10 -07:00
841e75afcf
Merge branch 'master' of https://github.com/wolfssl/wolfssl
2018-02-01 09:47:13 -07:00
a6bab49f8a
fixed bn.h header
2018-02-01 09:43:11 -07:00
fc754ba88e
Merge https://github.com/wolfssl/wolfssl
2018-01-09 14:15:39 -07:00
e6cef73658
html and pdf documentation for wolfssl, generated by doxygen
2018-01-09 14:12:06 -07:00
ad4cf69993
Moved doxygen API comments in to a seperate directory
2017-12-29 10:57:14 -07:00