Commit Graph

  • b076314ff8 Makefile now produces a .so.X with SOVERSION in it Paul Bakker 2013-11-05 11:27:12 +01:00
  • f4dc186818 Prep for PolarSSL 1.3.2 Paul Bakker 2013-11-04 17:29:42 +01:00
  • 0333b978fa Handshake key_cert should be set on first addition to the key_cert chain Paul Bakker 2013-11-04 17:08:28 +01:00
  • e1121b6217 Update ChangeLog for renegotiation changes Paul Bakker 2013-10-31 14:37:37 +01:00
  • d46a9f1a82 Added missing endif in compat-1.2.h Paul Bakker 2013-10-31 14:34:19 +01:00
  • 993e386a73 Merged renegotiation refactoring Paul Bakker 2013-10-31 14:32:38 +01:00
  • 37ce0ff185 Added defines around renegotiation code for SSL_SRV and SSL_CLI Paul Bakker 2013-10-31 14:32:04 +01:00
  • 31ff1d2e4f Safer buffer comparisons in the SSL modules Manuel Pégourié-Gonnard 2013-10-28 13:46:11 +01:00
  • 291f9af935 Make all hash checking in programs constant-time Manuel Pégourié-Gonnard 2013-10-28 12:51:32 +01:00
  • 424cd6943c Check HMAC in constant-time in crypt_and_hash Paul Bakker 2013-10-31 14:22:08 +01:00
  • 6d8404d6ba Server: enforce renegotiation Manuel Pégourié-Gonnard 2013-10-30 16:41:45 +01:00
  • 9c1e1898b6 Move some code around, improve documentation Manuel Pégourié-Gonnard 2013-10-30 16:41:21 +01:00
  • 214eed38c7 Make ssl_renegotiate the only interface Manuel Pégourié-Gonnard 2013-10-30 13:06:54 +01:00
  • caed0541a0 Allow ssl_renegotiate() to be called in a loop Manuel Pégourié-Gonnard 2013-10-30 12:47:35 +01:00
  • e5e1bb972c Fix misplaced initialisation Manuel Pégourié-Gonnard 2013-10-30 11:25:30 +01:00
  • f3dc2f6a1d Add code for testing server-initiated renegotiation Manuel Pégourié-Gonnard 2013-10-29 18:17:41 +01:00
  • 53b3e0603b Add code for testing client-initiated renegotiation Manuel Pégourié-Gonnard 2013-10-29 18:16:38 +01:00
  • 0d7702c3ee Minor change that makes life easier for static analyzers / compilers Paul Bakker 2013-10-29 16:18:35 +01:00
  • 6edcd41c0a Addition conditions for UEFI environment under MSVC Paul Bakker 2013-10-29 15:22:54 +01:00
  • 7b0be68977 Support for serialNumber, postalAddress and postalCode in X509 names Paul Bakker 2013-10-29 14:24:37 +01:00
  • fa6a620b75 Defines for UEFI environment under MSVC added Paul Bakker 2013-10-28 18:48:30 +01:00
  • 178d9bac3c Fix ECDSA corner case: missing reduction mod N Manuel Pégourié-Gonnard 2013-10-29 10:45:28 +01:00
  • 60b1d10131 Fixed spelling / typos (from PowerDNS:codespell) Paul Bakker 2013-10-29 10:02:51 +01:00
  • 93c6aa4014 Fixed that selfsign copies issuer_name to subject_name Paul Bakker 2013-10-28 22:28:09 +01:00
  • 50dc850c52 Const correctness Paul Bakker 2013-10-28 21:19:10 +01:00
  • 6a6087e71d Added missing inline definition for MSCV and ARM environments Paul Bakker 2013-10-28 18:53:08 +01:00
  • 3292562a33 Fixed Makefile for test_suite_pk Paul Bakker 2013-10-28 17:32:48 +01:00
  • 7bc745b6a1 Merged constant-time padding checks Paul Bakker 2013-10-28 14:39:49 +01:00
  • 1642122f8b Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer Paul Bakker 2013-10-28 14:37:09 +01:00
  • 3f917e230d Merged optimizations for MODP NIST curves Paul Bakker 2013-10-28 14:16:59 +01:00
  • 08bb187bb6 Merged Public Key framwork tests Paul Bakker 2013-10-28 14:03:26 +01:00
  • 68037da3cd Update Changelog for minor fixes Paul Bakker 2013-10-28 14:02:40 +01:00
  • 1001e32d6f Fix return value of ecdsa_from_keypair() Manuel Pégourié-Gonnard 2013-10-27 14:53:48 +01:00
  • 21ef42f257 Don't select a PSK ciphersuite if no key available Manuel Pégourié-Gonnard 2013-10-27 14:47:25 +01:00
  • 18dc0e2746 CERTS_C depends on PEM_PARSE_C Manuel Pégourié-Gonnard 2013-10-27 14:35:02 +01:00
  • 7c3291ea87 Check dependencies of protocol versions on hashes Manuel Pégourié-Gonnard 2013-10-27 14:29:51 +01:00
  • 3daaf3d21d X509 key identifiers depend on SHA1 Manuel Pégourié-Gonnard 2013-10-27 14:22:02 +01:00
  • f8669dabf2 Fix error.c test suite relying on old name Manuel Pégourié-Gonnard 2013-10-27 14:11:32 +01:00
  • c59c9c1453 Fix typo in b8012fca (ECP needs at least one curve) Manuel Pégourié-Gonnard 2013-10-27 14:04:59 +01:00
  • 7446833626 Fix endianness issue in test helper function Manuel Pégourié-Gonnard 2013-10-21 13:56:40 +02:00
  • 45a2c8d99a Prevent possible alignment warnings on casting from char * to 'aligned *' Paul Bakker 2013-10-28 12:57:08 +01:00
  • 677377f472 Server does not send out extensions not advertised by client Paul Bakker 2013-10-28 12:54:26 +01:00
  • e68bf171eb Make get_zeros_padding() constant-time Manuel Pégourié-Gonnard 2013-10-27 18:26:39 +01:00
  • 6c32990114 Make get_one_and_zeros_padding() constant-time Manuel Pégourié-Gonnard 2013-10-27 18:25:03 +01:00
  • d17df51277 Make get_zeros_and_len_padding() constant-time Manuel Pégourié-Gonnard 2013-10-27 17:32:43 +01:00
  • f8ab069d6a Make get_pkcs_padding() constant-time Manuel Pégourié-Gonnard 2013-10-27 17:21:14 +01:00
  • a8a25ae1b9 Fix bad error codes Manuel Pégourié-Gonnard 2013-10-27 13:48:15 +01:00
  • 7109624aef Skip MAC computation/check when GCM is used Manuel Pégourié-Gonnard 2013-10-25 19:31:25 +02:00
  • 65ea372f9b Rm unsupported suites (export) from compat.sh Manuel Pégourié-Gonnard 2013-10-25 18:44:07 +02:00
  • 8866591cc5 Don't special-case NULL cipher in ssl_tls.c Manuel Pégourié-Gonnard 2013-10-25 18:42:44 +02:00
  • 126a66f668 Simplify switching on mode in ssl_tls.c Manuel Pégourié-Gonnard 2013-10-25 18:33:32 +02:00
  • 98d9a2c061 Fix missing or wrong ciphersuite definitions Manuel Pégourié-Gonnard 2013-10-25 18:03:18 +02:00
  • 9d70373449 Update ciphersuite lists in config.h Manuel Pégourié-Gonnard 2013-10-25 18:01:50 +02:00
  • 6fb0f745be Rank GCM before CBC in ciphersuite_preference Manuel Pégourié-Gonnard 2013-10-25 17:08:15 +02:00
  • 8d01eea7af Add Camellia-GCM ciphersuites Manuel Pégourié-Gonnard 2013-10-24 19:49:07 +02:00
  • 0b58c150d6 cipher layer: IV length is not always block size Manuel Pégourié-Gonnard 2013-10-24 17:17:54 +02:00
  • e0dca4ad78 Cipher layer: check iv_len more carefully Manuel Pégourié-Gonnard 2013-10-24 16:54:25 +02:00
  • c2bd7a2f2f Add test vectors for Camellia-GCM via cipher layer Manuel Pégourié-Gonnard 2013-10-24 16:49:51 +02:00
  • 0684f74023 Add failing test vectors for Camellia-GCM auth Manuel Pégourié-Gonnard 2013-10-24 16:19:30 +02:00
  • 2009718fbe Add tests for AES-{192,256}-GCM in cipher layer Manuel Pégourié-Gonnard 2013-10-24 16:02:02 +02:00
  • dae7093875 gcm_selftest depends on AES Manuel Pégourié-Gonnard 2013-10-24 15:06:33 +02:00
  • 87181d1deb Add Camellia-GCM to th cipher layer Manuel Pégourié-Gonnard 2013-10-24 14:02:40 +02:00
  • 7bd8a99e11 Fix GCM dependencies Manuel Pégourié-Gonnard 2013-10-24 13:39:39 +02:00
  • 13e0d449f7 Add Camellia-GCM test vectors Manuel Pégourié-Gonnard 2013-10-24 12:59:00 +02:00
  • 083d66821e Make GCM tests accept any cipher, not just AES Manuel Pégourié-Gonnard 2013-10-24 12:06:54 +02:00
  • 94dd5b4dd4 Rename GCM test suites to AES-GCM Manuel Pégourié-Gonnard 2013-10-24 11:57:47 +02:00
  • 9fcceac943 Add a comment about modules coupling Manuel Pégourié-Gonnard 2013-10-23 20:56:12 +02:00
  • b21c81fb41 Use less memory in fix_negative() Manuel Pégourié-Gonnard 2013-10-23 20:45:04 +02:00
  • cae6f3ed45 Reorganize code in ecp.c Manuel Pégourié-Gonnard 2013-10-23 20:19:57 +02:00
  • 5779cbe582 Make mod_p{224,256,384] a bit faster Manuel Pégourié-Gonnard 2013-10-23 20:17:00 +02:00
  • c04c530a98 Make NIST curves optimisation an option Manuel Pégourié-Gonnard 2013-10-23 16:11:52 +02:00
  • 0f9149cb0a Add mod_p384 Manuel Pégourié-Gonnard 2013-10-23 15:06:37 +02:00
  • ec655c908c Add mod_p256 Manuel Pégourié-Gonnard 2013-10-23 14:50:39 +02:00
  • 210b458ddc Document and slightly reorganize mod_pXXX Manuel Pégourié-Gonnard 2013-10-23 14:03:00 +02:00
  • 2a08c0debc mod_p224 now working with 8-bit and 16-bit ints Manuel Pégourié-Gonnard 2013-10-22 21:07:14 +02:00
  • a47e7058ea mod_p224 now endian-neutral Manuel Pégourié-Gonnard 2013-10-21 17:51:45 +02:00
  • e783f06f73 Start working on mod_p224 Manuel Pégourié-Gonnard 2013-10-21 14:52:21 +02:00
  • cc67aee9c8 Make ecp_mod_p521 a bit faster Manuel Pégourié-Gonnard 2013-10-18 10:55:45 +02:00
  • c9e387ca9e Optimize ecp_modp() Manuel Pégourié-Gonnard 2013-10-17 17:15:35 +02:00
  • d1e7a45fdd Rework ecp_mod_p192() Manuel Pégourié-Gonnard 2013-10-22 21:03:16 +02:00
  • 18c443d3a8 Fix dependency issues in the test framework Manuel Pégourié-Gonnard 2013-10-17 14:58:24 +02:00
  • 748190d319 Fix some dependency issues Manuel Pégourié-Gonnard 2013-10-17 13:13:07 +02:00
  • 75c7882de3 Add PK test for forbidden operations Manuel Pégourié-Gonnard 2013-10-17 12:46:39 +02:00
  • 67d4583835 Add PK tests for rsa encrypt/decrypt Manuel Pégourié-Gonnard 2013-10-17 12:34:16 +02:00
  • b0a467fdbe Start adding a PK test suite Manuel Pégourié-Gonnard 2013-09-21 12:31:05 +02:00
  • 6888167e73 Forced cast to prevent MSVC compiler warning polarssl-1.3.1 Paul Bakker 2013-10-15 13:24:01 +02:00
  • 5c17ccdf2a Bumped version to 1.3.1 Paul Bakker 2013-10-15 13:12:41 +02:00
  • f34673e37b Merged RSA-PSK key-exchange and ciphersuites Paul Bakker 2013-10-15 12:46:17 +02:00
  • 376e8153a0 Merged ECDHE-PSK ciphersuites Paul Bakker 2013-10-15 12:44:23 +02:00
  • eebb5ad6cc Add RSA-PSK and ECDHE-PSK suites to compat.sh Manuel Pégourié-Gonnard 2013-10-15 12:26:10 +02:00
  • bbc1007c50 Convert SOCKET to int to prevent compiler warnings under MSVC. Paul Bakker 2013-10-14 16:33:24 +02:00
  • 59b9fe28f0 Fix bug in psk_identity_hint parsing Manuel Pégourié-Gonnard 2013-10-15 11:55:33 +02:00
  • a7ea6a5a18 config.h is more script-friendly Paul Bakker 2013-10-15 11:55:10 +02:00
  • bac0e3b7d2 Dependency fixes Manuel Pégourié-Gonnard 2013-10-15 11:54:47 +02:00
  • 09258b9537 Refactor parse_server_key_exchange a bit Manuel Pégourié-Gonnard 2013-10-15 10:43:36 +02:00
  • 8a3c64d73f Fix and simplify *-PSK ifdef's Manuel Pégourié-Gonnard 2013-10-14 19:54:10 +02:00
  • ef0eb1ebd8 Add two missing RSA-PSK ciphersuites Manuel Pégourié-Gonnard 2013-10-14 19:29:19 +02:00
  • 0fae60bb71 Implement RSA-PSK key exchange Manuel Pégourié-Gonnard 2013-10-14 17:39:48 +02:00
  • be089b0483 Introduced POLARSSL_HAVE_READDIR_R for systems without it Paul Bakker 2013-10-14 15:51:50 +02:00
  • b9cfaa0c7f Explicit conversions and minor changes to prevent MSVC compiler warnings Paul Bakker 2013-10-11 18:58:55 +02:00