Commit Graph

  • 8956362466 Add suppport for MD2 to CSR and CRT writing example programs Hanno Becker 2019-06-03 14:10:44 +01:00
  • fb63a7c532 Convert further x509parse tests to use lower-case hex data Hanno Becker 2019-06-03 16:21:32 +01:00
  • d0f2d8100c Document support for MD2 and MD4 in programs/x509/cert_write Hanno Becker 2019-06-03 14:36:59 +01:00
  • bdf2035710 Correct name of X.509 parsing test for well-formed, ill-signed CRT Hanno Becker 2019-06-03 14:28:43 +01:00
  • cfa341844f Add test cases exercising successful verification of MD2/MD4/MD5 CRT Hanno Becker 2019-06-03 14:27:03 +01:00
  • 4d7210c23c Add test case exercising verification of valid MD2 CRT Hanno Becker 2019-06-03 14:25:18 +01:00
  • 8d59f250bc Add MD[245] test CRTs to tree Hanno Becker 2019-06-03 14:14:38 +01:00
  • 928f617747 Add instructions for MD[245] test CRTs to tests/data_files/Makefile Hanno Becker 2019-06-03 14:14:04 +01:00
  • 8a0193e619 Add suppport for MD2 to CSR and CRT writing example programs Hanno Becker 2019-06-03 14:10:44 +01:00
  • 8b3bcbab79 Convert further x509parse tests to use lower-case hex data Hanno Becker 2019-06-03 16:17:58 +01:00
  • b9355b77d2 Add description of CID feature to ChangeLog Hanno Becker 2019-05-24 10:23:43 +01:00
  • d0ac5faa72 Insert records with unexpected CID in CID tests in ssl-opt.sh Hanno Becker 2019-05-24 10:11:23 +01:00
  • e8d6afd627 Add debug line witnessing receipt of unexpected CID Hanno Becker 2019-05-24 10:11:06 +01:00
  • 98aaf25686 Add bad_cid option UDP proxy to insert unexpected CID records Hanno Becker 2019-05-24 10:07:42 +01:00
  • 92d30f5bcf Fix indentation in debug message in ssl_tls.c Hanno Becker 2019-05-23 17:03:44 +01:00
  • 8e55b0f852 Improve comment in ssl_parse_record_header() Hanno Becker 2019-05-23 17:03:19 +01:00
  • 3739e203cf Disable Connection ID feature by default Hanno Becker 2019-05-23 17:02:06 +01:00
  • 3978d10e9e Remove superfluous new line in ssl_server2 Hanno Becker 2019-05-23 17:01:43 +01:00
  • 3279822e24 Improve readability of ssl_client2/ssl_server2 usage instructions Hanno Becker 2019-05-23 17:01:06 +01:00
  • 1d433a3294 Remove superfluous newline in ssl_client2 Hanno Becker 2019-05-23 17:00:23 +01:00
  • d5eed4258a Use negative-hex format for error codes in ssl_client2/ssl_server2 Hanno Becker 2019-05-23 16:58:22 +01:00
  • 1125952107 Expand CID to Connection ID in documentation of mbedtls_ssl_conf_cid Hanno Becker 2019-05-23 16:55:50 +01:00
  • 6ae14c086d Exemplify ways of calling mbedtls_ssl_get_peer_cid() in ssl_client2 Hanno Becker 2019-05-22 16:59:25 +01:00
  • 615ef17b67 Allow passing NULL pointers to mbedtls_ssl_get_peer_cid() Hanno Becker 2019-05-22 16:50:35 +01:00
  • 8c07beeb84 Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite Hanno Becker 2019-05-20 15:40:23 +01:00
  • 62e5afabcb Fix typo in Doxygen documentation of mbedtls_ssl_conf_cid() Hanno Becker 2019-05-20 10:19:56 +01:00
  • a0e20d04b2 Rename MBEDTLS_SSL_CID to MBEDTLS_SSL_DTLS_CONNECTION_ID Hanno Becker 2019-05-15 14:03:01 +01:00
  • ebcc9137ca Consistently reference CID draft through name + URL Hanno Becker 2019-05-15 10:26:32 +01:00
  • d1f203557f Slightly reorder CID debug messages during creation of transforms Hanno Becker 2019-05-15 10:21:55 +01:00
  • f1a2808b8f Fix typo in documentation of mbedtls_ssl_context::cid_in_use Hanno Becker 2019-05-15 10:17:48 +01:00
  • fb034e852e Improve wording of documentation of mbedtls_ssl_get_peer_cid() Hanno Becker 2019-05-15 10:14:16 +01:00
  • 5cc145d4db Slightly reword documentation of mbedtls_ssl_set_cid() Hanno Becker 2019-05-15 10:12:11 +01:00
  • 08cd9db836 Use full sentences in Doxygen documentation of mbedtls_ssl_set_cid() Hanno Becker 2019-05-15 10:10:36 +01:00
  • 08cbc0c19e Use uniform spacing in def's of MBEDTLS_SSL_CID_{IN|OUT}_LEN_MAX Hanno Becker 2019-05-15 10:09:15 +01:00
  • d9d4adbeae Improve wording in documentation of mbedtls_ssl_set_cid() Hanno Becker 2019-05-15 10:08:35 +01:00
  • 4cac442211 Update references to CID draft to version 5 Hanno Becker 2019-05-15 10:07:44 +01:00
  • 56f81c7178 Improve wording in documentation of MBEDTLS_SSL_CID Hanno Becker 2019-05-15 09:44:59 +01:00
  • 611ac77127 Fix mbedtls_ssl_conf_cid() to not depend on macro constant values Hanno Becker 2019-05-14 11:45:26 +01:00
  • 7fefd83b34 Modify MBEDTLS_SSL_UNEXPECTED_CID_{FAIL|IGNORE} to ignore by default Hanno Becker 2019-05-14 11:44:35 +01:00
  • 5d12467fad Remove warnings about unfinished CID implementation Hanno Becker 2019-05-14 11:35:59 +01:00
  • 8367ccc03b Allow to configure the stack's behaviour on unexpected CIDs Hanno Becker 2019-05-14 11:30:10 +01:00
  • c37c96a3c5 Add specific SSL error code for unexpected CIDs Hanno Becker 2019-05-14 11:02:36 +01:00
  • b9ec44fcf6 Remove restriction on value of MBEDTLS_SSL_CID_PADDING_GRANULARITY Hanno Becker 2019-05-13 15:31:17 +01:00
  • ddf775a97f Reword CID documentation Hanno Becker 2019-05-13 15:26:11 +01:00
  • 3a96828ead Add missing compile-time guard around CID API in ssl_server2 Hanno Becker 2019-05-09 15:56:01 +01:00
  • 2cdc5c3cf9 Make signed to unsigned integer truncation cast explicit Hanno Becker 2019-05-09 15:54:28 +01:00
  • b1aa1b3616 Allow the configuration of padding when using CID extension Hanno Becker 2019-05-08 17:37:58 +01:00
  • 4c3eb7c919 Set CID pointer to default value even for TLS Hanno Becker 2019-05-08 16:43:21 +01:00
  • 4a4af9fcbe Fix typo in comment Hanno Becker 2019-05-08 16:26:21 +01:00
  • c2045b0764 Add CID test not using datagram packing to ssl-opt.sh Hanno Becker 2019-05-08 16:20:46 +01:00
  • 31f6e372e6 UDP Proxy: Don't drop CID records Hanno Becker 2019-05-08 15:36:31 +01:00
  • 78c9137b0c Add Proxy tests for Connection ID to ssl-opt.sh Hanno Becker 2019-05-08 13:31:15 +01:00
  • 22a59fdca8 Remove indicators and warnings about unfinished CID implementation Hanno Becker 2019-05-08 13:24:25 +01:00
  • b3e9dd53ba Fix mismatching debug grep in ssl-opt.sh CID tests Hanno Becker 2019-05-08 13:19:53 +01:00
  • b42ec0df02 Add support for change of CID to ssl_client2 / ssl_server2 Hanno Becker 2019-05-03 17:30:59 +01:00
  • 2749a67d1f Reintroduce grepping for debug messages in CID tests in ssl-opt.sh Hanno Becker 2019-05-03 17:04:23 +01:00
  • 05154c3897 Re-enable passing CIDs to record transforms Hanno Becker 2019-05-03 15:23:51 +01:00
  • 16ded98bef Don't fail on record with unexpected CID Hanno Becker 2019-05-08 13:02:55 +01:00
  • 938489a1bc Re-enable CID comparison when decrypting CID-based records Hanno Becker 2019-05-08 13:02:22 +01:00
  • ca59c2b486 Implement parsing of CID-based records Hanno Becker 2019-05-08 12:03:28 +01:00
  • 6430faf098 Adapt record encryption/decryption routines to change of record type Hanno Becker 2019-05-08 11:57:13 +01:00
  • f9c6a4bea1 Add pointers to in/out CID fields to mbedtls_ssl_context Hanno Becker 2019-05-03 14:34:53 +01:00
  • 6cbad5560d Account for additional record expansion when using CIDs Hanno Becker 2019-05-08 15:40:11 +01:00
  • ad4a137965 Add CID configuration API Hanno Becker 2019-05-03 13:06:44 +01:00
  • 3b154c129e Re-implement mbedtls_ssl_{in/out}_hdr_len() via in/out pointers Hanno Becker 2019-05-03 15:05:27 +01:00
  • 5903de45b6 Split mbedtls_ssl_hdr_len() in separate functions for in/out records Hanno Becker 2019-05-03 14:46:38 +01:00
  • f661c9c39c Add helper function to check validity of record content type Hanno Becker 2019-05-03 13:25:54 +01:00
  • 37ae952923 Move dropping of unexpected AD records to after record decryption Hanno Becker 2019-05-03 16:54:26 +01:00
  • 79594fd0d4 Set pointer to start of plaintext at record decryption time Hanno Becker 2019-05-08 09:38:41 +01:00
  • 82e2a3961c Treat an invalid record after decryption as fatal Hanno Becker 2019-05-03 16:36:59 +01:00
  • 6e7700df17 Expain rationale for handling of consecutive empty AD records Hanno Becker 2019-05-08 10:38:32 +01:00
  • 76a79ab4a2 Don't allow calling CID API outside of DTLS Hanno Becker 2019-05-03 14:38:32 +01:00
  • e2c2314ab4 Add missing dependencies in unit tests for CID-based record enc/dec Hanno Becker 2019-05-20 15:23:11 +01:00
  • 95e4bbcf6c Fix additional data calculation if CID is disabled Hanno Becker 2019-05-09 11:38:24 +01:00
  • af05ac067b Remove unnecessary empty line in ssl_tls.c Hanno Becker 2019-05-20 15:10:50 +01:00
  • 07dc97db8c Don't quote DTLSInnerPlaintext structure multiple times Hanno Becker 2019-05-20 15:08:01 +01:00
  • d3f8c79ea0 Improve wording in ssl_build_inner_plaintext() Hanno Becker 2019-05-20 15:06:12 +01:00
  • edb24f8eec Remove unnecessary whitespace in ssl_extract_add_data_from_record() Hanno Becker 2019-05-20 15:01:46 +01:00
  • 92fb4fa802 Reduce stack usage for additional data buffers in record dec/enc Hanno Becker 2019-05-20 14:54:26 +01:00
  • c4a190bb0f Add length of CID to additional data used for record protection Hanno Becker 2019-05-08 18:15:21 +01:00
  • d5aeab1e8a Improve documentation of ssl_extract_add_data_from_record() Hanno Becker 2019-05-20 14:50:53 +01:00
  • fe6bb8ccc2 Unify documentation of internal SSL record structure Hanno Becker 2019-05-20 14:49:02 +01:00
  • 43c24b8da9 Fix missing compile-time guards around CID-only constants Hanno Becker 2019-05-01 09:45:57 +01:00
  • f44e55de5e Remove TODO Hanno Becker 2019-04-30 16:56:40 +01:00
  • 75f080f4b6 Use MBEDTLS_ namespace for internal CID length constant Hanno Becker 2019-04-30 15:01:51 +01:00
  • 8a7f972202 Skip copying CIDs to SSL transforms until CID feature is complete Hanno Becker 2019-04-30 13:52:29 +01:00
  • 8b3eb5ab82 Implement inner plaintext parsing/writing for CID-based connections Hanno Becker 2019-04-29 17:31:37 +01:00
  • d856c82993 Add unit tests for record protection using CID Hanno Becker 2019-04-29 17:30:59 +01:00
  • 6c87b3f9df Record enc/dec tests: Don't take turns in sending / receiving roles Hanno Becker 2019-04-29 17:24:44 +01:00
  • cab87e68b6 Incorporate CID into MAC computations during record protection Hanno Becker 2019-04-29 13:52:53 +01:00
  • f2ed4482d7 Add CID field to internal structure representing TLS records Hanno Becker 2019-04-29 13:45:54 +01:00
  • 024b53a856 Document support for MD2 and MD4 in programs/x509/cert_write Hanno Becker 2019-06-03 14:36:59 +01:00
  • 4a9b028c08 Correct name of X.509 parsing test for well-formed, ill-signed CRT Hanno Becker 2019-06-03 14:28:43 +01:00
  • 20a4ade3f5 Add test cases exercising successful verification of MD2/MD4/MD5 CRT Hanno Becker 2019-06-03 14:27:03 +01:00
  • 7b8abee4f5 Add test case exercising verification of valid MD2 CRT Hanno Becker 2019-06-03 14:25:18 +01:00
  • 1c1f046804 Replace 'ingoing' -> 'incoming' in CID debug messages Hanno Becker 2019-05-03 12:55:51 +01:00
  • c5f2422116 Document behaviour of mbedtls_ssl_get_peer_cid() for empty CIDs Hanno Becker 2019-05-03 12:54:52 +01:00
  • 5a29990367 Improve structure of client-side CID extension parsing Hanno Becker 2019-05-03 12:47:49 +01:00
  • 2262648b69 Improve debugging output of client-side CID extension parsing Hanno Becker 2019-05-03 12:46:59 +01:00
  • 08556bf8fb Improve structure of ssl_parse_cid_ext() Hanno Becker 2019-05-03 12:43:44 +01:00