Commit Graph

  • c1d54b74ec Add tests with non-blocking I/O Manuel Pégourié-Gonnard 2018-08-22 10:02:59 +02:00
  • 3d183cefb5 Allow client-side resend in proxy MTU tests Manuel Pégourié-Gonnard 2018-08-22 09:56:22 +02:00
  • a658d7dd9d Fix style for mbedtls_platform_gmtime() Andres Amaya Garcia 2018-08-21 19:33:02 +01:00
  • c99b12b158 Fix documentation for MBEDTLS_HAVE_DATE_TIME Andres Amaya Garcia 2018-08-21 19:32:44 +01:00
  • 5e863e02ac Adapt ChangeLog Hanno Becker 2018-08-21 17:51:53 +01:00
  • aa71500173 Fix bug in SSL ticket implementation removing keys of age < 1s Hanno Becker 2018-08-21 13:55:31 +01:00
  • 1d7399351e ssl-opt.sh: Add DTLS session resumption tests Hanno Becker 2018-08-21 13:55:22 +01:00
  • 903ee3d363 Merge branch 'datagram_packing' into message_reordering Hanno Becker 2018-08-21 17:24:17 +01:00
  • 01315ea03a Account for future epoch records in the total buffering size Hanno Becker 2018-08-21 17:22:17 +01:00
  • a02b0b462d Add function making space for current message reassembly Hanno Becker 2018-08-21 17:20:27 +01:00
  • 175cb8fc69 ssl-opt.sh: Allow resend in DTLS session resumption tests, cont'd Hanno Becker 2018-08-21 17:00:10 +01:00
  • e1801399a9 Add another debug message to ssl_buffer_message() Hanno Becker 2018-08-21 16:51:05 +01:00
  • e35670528b ssl-opt.sh: Add test for reassembly after reordering Hanno Becker 2018-08-21 16:50:43 +01:00
  • 101bcba26f UDP proxy: Allow more than one message to be delayed Hanno Becker 2018-08-21 16:39:51 +01:00
  • 55e9e2aa6b Free future buffers if next handshake messages can't be reassembled Hanno Becker 2018-08-21 16:07:55 +01:00
  • e605b19631 Add function to free a particular buffering slot Hanno Becker 2018-08-21 15:59:07 +01:00
  • 96a6c69d0c Correct bounds check in ssl_buffer_message() Hanno Becker 2018-08-21 15:56:03 +01:00
  • e0b150f96b Allow limiting the total amount of heap allocations for buffering Hanno Becker 2018-08-21 15:51:03 +01:00
  • aecf8c941a adding more ctr_drbg test vectors (CAVP 14.3) Nir Sonnenschein 2018-08-05 23:49:18 +03:00
  • e4b77b9639 ctr_drbg: add a few test vectors from CAVP 14.3 Gilles Peskine 2018-08-03 20:32:38 +02:00
  • cfc1de766b ctr_drbg: sample vectors from NIST Gilles Peskine 2018-08-03 20:31:41 +02:00
  • 5ef5a9aeb4 ctr_drbg tests: unify validate functions Gilles Peskine 2018-08-03 20:27:50 +02:00
  • 4c78665ccd ctr_drbg tests: new validation function that doesn't reseed Gilles Peskine 2018-08-03 20:24:54 +02:00
  • ef0624f791 ctr_drbg tests: make input sizes flexible Gilles Peskine 2018-08-03 20:23:09 +02:00
  • ed7da59798 ctr_drbg: add comments relating the code with the NIST specification Gilles Peskine 2018-08-03 20:16:52 +02:00
  • 954f9879e9 change warning about 128bit keys to print Nir Sonnenschein 2018-08-02 18:08:26 +03:00
  • eb73f7ab6f fix trailing white spaces Nir Sonnenschein 2018-07-30 17:46:49 +03:00
  • 04354b0796 add ChangeLog entry Nir Sonnenschein 2018-07-30 17:22:13 +03:00
  • c9547cc23b add NIST test vector for 128 bit keys (not passing yet). Nir Sonnenschein 2018-07-30 17:03:40 +03:00
  • 2a97b0e7a3 Introduce function to return size of buffer needed for reassembly Hanno Becker 2018-08-21 15:47:49 +01:00
  • 604e60d915 add default value for CTR DRBG key size Nir Sonnenschein 2018-07-30 17:01:10 +03:00
  • a4588d4927 enable the use of variable size keys in ctr_drbg (was hard-coded 256bit before) Nir Sonnenschein 2018-07-30 16:59:36 +03:00
  • 5bcf2b081f ssl-opt.sh: Allow spurious resend in DTLS session resumption test Hanno Becker 2018-08-21 14:25:40 +01:00
  • e678eaa93e Reject invalid CCS records early Hanno Becker 2018-08-21 14:57:46 +01:00
  • 546d7bf7e8 ssl-opt.sh: Allow resend during session resumption archive/datagram_packing_1919_CI_failure_debug Hanno Becker 2018-08-21 14:25:40 +01:00
  • 6b13afe1a5 Fix indentation Ron Eldor 2018-08-21 16:11:13 +03:00
  • 47db877039 ssl_write_record: Consider setting flush variable only if unset Hanno Becker 2018-08-21 13:32:13 +01:00
  • 1f5a15d86d Check retval of remaining_payload_in_datagram in ssl_write_record() Hanno Becker 2018-08-21 13:31:31 +01:00
  • ecff205548 Remove stray bracket if MBEDTLS_ZLIB_SUPPORT is defined Hanno Becker 2018-08-21 13:20:00 +01:00
  • f61ff4e1d6 ssl_server2: Remove redundant new line Hanno Becker 2018-08-21 13:17:47 +01:00
  • d22c1b2445 Merge remote-tracking branch 'upstream-public/pr/1932' into development Jaeden Amero 2018-08-17 15:21:55 +01:00
  • 2f2d9020cd Add delay in test to avoid race condition Manuel Pégourié-Gonnard 2018-08-21 12:17:54 +02:00
  • 661103595e Try to further clarify documentation Manuel Pégourié-Gonnard 2018-08-21 11:55:40 +02:00
  • 000281e07d Fix "unused parameter" warning in small configs Manuel Pégourié-Gonnard 2018-08-21 11:20:58 +02:00
  • f2f1d40d6d Improve wording in ChangeLog and documentation Manuel Pégourié-Gonnard 2018-08-21 09:53:22 +02:00
  • 6151298395 Add missing requires_gnutls guards Manuel Pégourié-Gonnard 2018-08-21 09:40:07 +02:00
  • 9434713368 Move the assertion Ron Eldor 2018-08-20 14:59:33 +03:00
  • 6aeaa05a95 Merge branch 'iotssl-165-dtls-hs-fragmentation-new' into datagram_packing Hanno Becker 2018-08-20 12:53:37 +01:00
  • f362c297fa ssl-opt.sh Add dependency on gnutls in two fragmentation tests Hanno Becker 2018-08-20 12:40:23 +01:00
  • 7be2e5bb16 ssl-opt.sh: Preserve proxy log, too, if --preserve-logs is specified Hanno Becker 2018-08-20 12:21:35 +01:00
  • 4e1a9c17f2 ssl-opt.sh: Preserve proxy log, too, if --preserve-logs is specified Hanno Becker 2018-08-20 12:21:35 +01:00
  • 513815a38d Fix typo in debugging output Hanno Becker 2018-08-20 11:56:09 +01:00
  • 4cb782d2f6 Return from ssl_load_buffered_record early if no record is buffered Hanno Becker 2018-08-20 11:19:05 +01:00
  • a1071a58a3 Compute record expansion at the right time Manuel Pégourié-Gonnard 2018-08-20 11:56:14 +02:00
  • 4532329397 Add proxy-enforcement to a MTU test Manuel Pégourié-Gonnard 2018-08-20 11:52:24 +02:00
  • 9829315235 Add missing dependency in ssl-opt.sh Hanno Becker 2018-08-17 16:10:47 +01:00
  • 58e9dc3d4b Allow GNUTLS_NEXT_CLI / GNUTLS_NEXT_SERV to be unset in ssl-opt.sh Hanno Becker 2018-08-17 15:53:21 +01:00
  • 050dd6ad35 Improve documentation of ssl_set_mtu(). Manuel Pégourié-Gonnard 2018-08-20 11:16:40 +02:00
  • 065a2a3472 Fix some typos and links in comments and doc Manuel Pégourié-Gonnard 2018-08-20 11:09:26 +02:00
  • 02f3a8a921 Adjust timeout values for 3d test Manuel Pégourié-Gonnard 2018-08-20 10:49:28 +02:00
  • caf8741891 Fix typo in documentation of UDP proxy argument 'delay_cli' Hanno Becker 2018-08-20 09:45:51 +01:00
  • 3a0aad1c9d Rename update_digest to update_hs_digest Hanno Becker 2018-08-20 09:44:02 +01:00
  • 4422bbb096 Whitespace fixes Hanno Becker 2018-08-20 09:40:19 +01:00
  • e00ae375d3 Omit debug output in ssl_load_buffered_message outside a handshake Hanno Becker 2018-08-20 09:39:42 +01:00
  • 6e7aaca146 Move MTU setting to SSL context, not config Manuel Pégourié-Gonnard 2018-08-20 10:37:23 +02:00
  • 0d4b376ddf Return through cleanup section in ssl_load_buffered_message() Hanno Becker 2018-08-20 09:36:59 +01:00
  • 34b03ef78f Remove redundant else statement Ron Eldor 2018-08-20 10:38:35 +03:00
  • 56cdfd1e29 Refine reordering tests Hanno Becker 2018-08-17 13:42:15 +01:00
  • 01ea778363 UDP proxy: Add option to delay specific handshake messages Hanno Becker 2018-08-17 13:33:41 +01:00
  • 56d5eaa96c Mark SSL ctx unused in ssl_prepare_reassembly_buffer() if !DEBUG Hanno Becker 2018-08-17 09:06:31 +01:00
  • 872730481d Disable datagram packing in reordering tests Hanno Becker 2018-08-16 16:53:13 +01:00
  • d488b9e490 Increase maximum number of buffered handshake messages Hanno Becker 2018-08-16 16:35:37 +01:00
  • f103542c3d Adapt ChangeLog Hanno Becker 2018-08-16 16:07:27 +01:00
  • b063a5ffad Update error codes Hanno Becker 2018-08-16 16:06:44 +01:00
  • b34149c00f Add test for buffering of record from next epoch Hanno Becker 2018-08-16 15:29:06 +01:00
  • 5f066e7aac Implement future record buffering Hanno Becker 2018-08-16 14:56:31 +01:00
  • e38422107e Add test for reordering of handshake messages Hanno Becker 2018-08-16 15:28:59 +01:00
  • 37f9532081 Implement future message buffering and loading Hanno Becker 2018-08-16 13:55:32 +01:00
  • 6d97ef5a03 Use uniform treatment for future messages and proper HS fragments Hanno Becker 2018-08-16 13:09:04 +01:00
  • 44650b7a74 Introduce function checking sanity of the DTLS HS header Hanno Becker 2018-08-16 12:51:11 +01:00
  • 12555c61d3 Introduce function to parse total handshake length Hanno Becker 2018-08-16 12:47:53 +01:00
  • 0271f967d6 Introduce buffering structure for handshake messages Hanno Becker 2018-08-16 13:23:47 +01:00
  • d7f8ae2508 Introduce sub-structure of ssl_handshake_params for buffering Hanno Becker 2018-08-16 09:45:56 +01:00
  • e25e3b7d96 Add function to check is HS msg is a proper fragment Hanno Becker 2018-08-16 09:30:53 +01:00
  • d07df86871 Make allocation of reassembly bitmap optional Hanno Becker 2018-08-16 09:14:58 +01:00
  • 56e205e2c9 Prepare handshake reassembly in separate function Hanno Becker 2018-08-16 09:06:12 +01:00
  • 9e1ec22c36 Return MBEDTLS_ERR_SSL_EARLY_MESSAGE for future HS messages Hanno Becker 2018-08-15 15:54:43 +01:00
  • aa5d0c4493 Add test for buffering out-of-order CCS Hanno Becker 2018-08-16 13:15:19 +01:00
  • 2ed6bcc793 Implement support for remembering CCS messages Hanno Becker 2018-08-15 15:11:57 +01:00
  • 40f50848fa Add frame for loading and storing buffered messages Hanno Becker 2018-08-15 14:48:01 +01:00
  • e74d556b43 Introduce function to indicate if record is fully processed Hanno Becker 2018-08-15 14:26:08 +01:00
  • 2699459529 Move call to ssl_consume_current_message() Hanno Becker 2018-08-15 14:14:59 +01:00
  • 1097b34022 Extract message-consuming code-path to separate function Hanno Becker 2018-08-15 14:09:41 +01:00
  • 4162b11eb4 Make mbedtls_ssl_read_record_layer() static Hanno Becker 2018-08-15 14:05:04 +01:00
  • a4b143a57c Remove nested loop in mbedtls_ssl_read_record() Hanno Becker 2018-08-15 14:01:34 +01:00
  • 02f5907499 Correct misleading debugging output Hanno Becker 2018-08-15 14:00:24 +01:00
  • 327c93b182 Add parameter to ssl_read_record() controlling checksum update Hanno Becker 2018-08-15 13:56:18 +01:00
  • e1dcb03557 Don't send empty fragments of nonempty handshake messages Hanno Becker 2018-08-17 16:47:58 +01:00
  • 4a9d006f5f Add missing dependency in ssl-opt.sh Hanno Becker 2018-08-17 16:10:47 +01:00
  • bc73e4a822 Allow GNUTLS_NEXT_CLI / GNUTLS_NEXT_SERV to be unset in ssl-opt.sh Hanno Becker 2018-08-17 15:53:21 +01:00