Commit Graph

  • 057e0cf263 Fix ciphersuites dependencies on MD5 and SHA1 Manuel Pégourié-Gonnard 2013-10-14 14:19:31 +02:00
  • 1b62c7f93d Fix dependencies and related issues Manuel Pégourié-Gonnard 2013-10-14 14:02:19 +02:00
  • 72fb62daa2 More *-PSK refactoring Manuel Pégourié-Gonnard 2013-10-14 14:01:58 +02:00
  • bd1ae24449 Factor PSK pms computation to ssl_tls.c Manuel Pégourié-Gonnard 2013-10-14 13:09:25 +02:00
  • b59d699a65 Fix bugs in ECDHE_PSK key exchange Manuel Pégourié-Gonnard 2013-10-14 12:00:45 +02:00
  • 225d6aa786 Add ECDHE_PSK ciphersuites Manuel Pégourié-Gonnard 2013-10-11 19:07:56 +02:00
  • 3ce3bbdc00 Add support for ECDHE_PSK key exchange Manuel Pégourié-Gonnard 2013-10-11 16:53:50 +02:00
  • b887f1119e Removed return from error_strerror() Paul Bakker 2013-10-11 15:09:40 +02:00
  • beccd9f226 Explicit void pointer cast for buggy MS compiler Paul Bakker 2013-10-11 15:20:27 +02:00
  • 5191e92ecc Added missing x509write_crt_set_version() Paul Bakker 2013-10-11 10:54:28 +02:00
  • b7c13123de threading_set_own() renamed to threading_set_alt() Paul Bakker 2013-10-11 10:51:32 +02:00
  • 4aa40d4f51 Better support for MSVC Paul Bakker 2013-10-11 10:49:24 +02:00
  • b799dec4c0 Merged support for Brainpool curves and ciphersuites Paul Bakker 2013-10-11 10:03:27 +02:00
  • 1677033bc8 TLS compression only allocates working buffer once Paul Bakker 2013-10-11 09:59:44 +02:00
  • d61cc3b246 Possible naming collision in dhm_context Paul Bakker 2013-10-11 09:38:49 +02:00
  • fcc172138c Fixed const-correctness issues Paul Bakker 2013-10-11 09:36:52 +02:00
  • ddba8822d0 Added bugfixes to ChangeLog Paul Bakker 2013-10-11 09:21:56 +02:00
  • ae102995a7 RSA blinding: lock for a smaller amount of time Manuel Pégourié-Gonnard 2013-10-04 17:07:12 +02:00
  • 4d89c7e184 RSA blinding: check highly unlikely cases Manuel Pégourié-Gonnard 2013-10-04 15:18:38 +02:00
  • 971f8b84bb Fix compile errors with RSA_NO_CRT Manuel Pégourié-Gonnard 2013-10-04 14:10:43 +02:00
  • 2f77ce3658 Fix forgotten snprintf define for MSVC Manuel Pégourié-Gonnard 2013-10-03 11:59:57 +02:00
  • 9654fb156f Fix missing MSVC define Manuel Pégourié-Gonnard 2013-10-03 11:53:05 +02:00
  • bdc96765d6 Remove polarssl/ from header includes Manuel Pégourié-Gonnard 2013-10-03 11:50:39 +02:00
  • 0cd6f98c0f Don't special-case a = -3, not worth it Manuel Pégourié-Gonnard 2013-10-10 15:55:39 +02:00
  • b8012fca5f Adjust dependencies Manuel Pégourié-Gonnard 2013-10-10 15:40:49 +02:00
  • 48ac3db551 Add OIDs for brainpool curves Manuel Pégourié-Gonnard 2013-10-10 15:11:33 +02:00
  • 22f64c8a9a Cosmetics in benchmark Manuel Pégourié-Gonnard 2013-10-10 13:11:20 +02:00
  • 201401646e Fix a few selftest typos Manuel Pégourié-Gonnard 2013-10-10 12:48:03 +02:00
  • 0ace4b3154 Use much less variables in ecp_double_jac_gen() Manuel Pégourié-Gonnard 2013-10-10 12:44:27 +02:00
  • 1c4aa24df1 Add brainpool support for ecp_mul() Manuel Pégourié-Gonnard 2013-10-09 16:09:46 +02:00
  • cd7458aafd Support brainpool curves in ecp_check_pubkey() Manuel Pégourié-Gonnard 2013-10-08 13:11:30 +02:00
  • 43545c8b4f Add test vectors for brainpool curves Manuel Pégourié-Gonnard 2013-10-08 12:44:27 +02:00
  • a070ada6d4 Add brainpool curves to ecp_use_kown_dp() Manuel Pégourié-Gonnard 2013-10-08 12:04:56 +02:00
  • cec4a53c98 Add domain parameters for Brainpool curves Manuel Pégourié-Gonnard 2013-10-07 19:52:27 +02:00
  • 8195c1a567 Add identifiers for Brainpool curves Manuel Pégourié-Gonnard 2013-10-07 19:40:41 +02:00
  • 9eb883104e Update some comments on ecp_group Manuel Pégourié-Gonnard 2013-10-07 19:35:48 +02:00
  • 3a2c0563c9 Added 1.2.10 to ChangeLog Paul Bakker 2013-10-07 16:22:05 +02:00
  • 6b06502c4b Changed RSA blinding to a slower but thread-safe version polarssl-1.2.10 Paul Bakker 2013-10-07 12:03:59 +02:00
  • adace27ec9 Prepped for 1.2.10 release Paul Bakker 2013-10-04 17:07:26 +02:00
  • 2f1481ec73 Additional fixed to rsa.c with regards to blinding Paul Bakker 2013-10-04 13:54:01 +02:00
  • 178e74454f Fixed MS VC project files Paul Bakker 2013-10-04 13:20:40 +02:00
  • 495830dd1f Fixed ssl_pkcs11_decrypt() prototype Paul Bakker 2013-10-04 11:01:27 +02:00
  • 62087eed22 Fixed memory leak in rsa.c introduced in 43f9799 Paul Bakker 2013-10-04 10:56:03 +02:00
  • d93d28e370 Fixed release date for 1.3.0 polarssl-1.3.0 Paul Bakker 2013-10-01 10:12:42 +02:00
  • 9345ad1f7a Fixed release date for 1.1.8 polarssl-1.1.8 archive/polarssl-1.1 Paul Bakker 2013-10-01 10:14:28 +02:00
  • 60ad84f43f Fixed release date for 1.2.9 polarssl-1.2.9 Paul Bakker 2013-10-01 10:13:52 +02:00
  • 356b0ad8bb Added threading modlue to VS project files Paul Bakker 2013-10-01 10:11:38 +02:00
  • 30b95fa921 Fixed cplusplus extern defines in header files Paul Bakker 2013-10-01 10:09:06 +02:00
  • ed3cce46e9 Merged threading-layer into development Paul Bakker 2013-09-30 15:26:19 +02:00
  • 6838bd1d73 Clarified threading issues Paul Bakker 2013-09-30 13:56:38 +02:00
  • c9965dca27 RSA blinding threading support Paul Bakker 2013-09-29 14:58:17 +02:00
  • 1337affc91 Buffer allocator threading support Paul Bakker 2013-09-29 14:45:34 +02:00
  • f4e7dc50ea entropy_func() threading support Paul Bakker 2013-09-28 15:23:57 +02:00
  • 1ffefaca1e Introduced entropy_free() Paul Bakker 2013-09-28 15:23:03 +02:00
  • c55988406f SSL Cache threading support Paul Bakker 2013-09-28 15:01:27 +02:00
  • 2466d93546 Threading abstraction layer added Paul Bakker 2013-09-28 14:40:38 +02:00
  • bf796acf07 Added implementation for memory_buffer_set_verify() Paul Bakker 2013-09-28 11:06:38 +02:00
  • caa3af47c0 Handle missing curve extension correctly in ssl_parse_client_hello() Paul Bakker 2013-09-26 13:32:43 +02:00
  • 396333e0a3 Updated ssl_test to handle EOF return value Paul Bakker 2013-09-26 13:32:19 +02:00
  • c13aab18dc Added 1.1.8 and 1.2.9 release Paul Bakker 2013-09-26 10:12:19 +02:00
  • f18084a201 Ready for 1.3.0 release Paul Bakker 2013-09-26 10:07:09 +02:00
  • ca9c87ed2b Removed possible cache-timing difference for pad check Paul Bakker 2013-09-25 18:52:37 +02:00
  • e45574e7de Prepped for 1.2.9 release Paul Bakker 2013-09-25 11:36:51 +02:00
  • 62dfcf0a55 Prepped for 1.1.8 release Paul Bakker 2013-09-25 18:17:36 +02:00
  • 8b817dc47e Merged support for multiple certificate/key pairs in SSL into development Paul Bakker 2013-09-25 18:03:58 +02:00
  • a0fdf8b0a0 Simplify the way default certs are used Manuel Pégourié-Gonnard 2013-09-25 14:05:49 +02:00
  • cb99bdb27e Client: if no cert, send empty cert list Manuel Pégourié-Gonnard 2013-09-25 13:30:56 +02:00
  • 641de714b6 Use both RSA and ECDSA CA if available Manuel Pégourié-Gonnard 2013-09-25 13:23:33 +02:00
  • 420edcaf1d Clean up config-suite-b.h thanks to new certs Manuel Pégourié-Gonnard 2013-09-25 11:52:38 +02:00
  • ac8474fb1c Changed default cert loading in ssl_server2 Manuel Pégourié-Gonnard 2013-09-25 11:35:15 +02:00
  • 8372454615 Rework SNI to fix memory issues Manuel Pégourié-Gonnard 2013-09-24 22:30:56 +02:00
  • b095a7bf29 Offer both RSA and ECDSA by default in ssl_server2 Manuel Pégourié-Gonnard 2013-09-24 21:14:51 +02:00
  • 482a2828e4 Offer both EC and RSA in certs.c, RSA first Manuel Pégourié-Gonnard 2013-09-24 19:33:17 +02:00
  • 4618459fa1 Update EC certificates in certs.c Manuel Pégourié-Gonnard 2013-09-24 19:20:57 +02:00
  • cc648d19dc Adapt test cases to new certs and file names Manuel Pégourié-Gonnard 2013-09-24 18:57:09 +02:00
  • 6a987f4a90 Update EC certs to use NIST-256 and NIST-384 Manuel Pégourié-Gonnard 2013-09-24 18:38:12 +02:00
  • 705fcca409 Adapt support for SNI to recent changes Manuel Pégourié-Gonnard 2013-09-23 20:04:20 +02:00
  • d09453c88c Check our ECDSA cert(s) against supported curves Manuel Pégourié-Gonnard 2013-09-23 19:11:32 +02:00
  • f24b4a7316 Interface change in ECP info functions Manuel Pégourié-Gonnard 2013-09-23 18:14:50 +02:00
  • f71e587c5e Fix memory leak in ssl cipher usage Manuel Pégourié-Gonnard 2013-09-23 17:12:43 +02:00
  • 3ebb2cdb52 Add support for multiple server certificates Manuel Pégourié-Gonnard 2013-09-23 17:00:18 +02:00
  • 834ea8587f Change internal structs for multi-cert support Manuel Pégourié-Gonnard 2013-09-23 14:46:13 +02:00
  • cbf3ef3861 RSA and ECDSA key exchanges don't depend on CRL Manuel Pégourié-Gonnard 2013-09-23 12:20:02 +02:00
  • dfe0ea9f02 Add missing VS files for programs Manuel Pégourié-Gonnard 2013-09-23 23:01:39 +02:00
  • 164d894b9a Fix: session start time wasn't set server side Manuel Pégourié-Gonnard 2013-09-23 22:01:39 +02:00
  • 915ee19887 Do not allow SHA256/SHA384 ciphersuites in < TLS 1.2 Paul Bakker 2013-09-23 17:30:26 +02:00
  • ee0844adb9 Updated VS project files for X509 changes Paul Bakker 2013-09-23 15:20:01 +02:00
  • c2148753df Added missing uint32_t def for Windows in gcm.h Paul Bakker 2013-09-23 15:11:46 +02:00
  • 3cf63edc44 Typo in Windows error code in x509_crt.c Paul Bakker 2013-09-23 15:10:16 +02:00
  • c27c4e2efb Support faulty X509 v1 certificates with extensions (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3) Paul Bakker 2013-09-23 15:01:36 +02:00
  • 15b9b3a7e0 Key generation tool Paul Bakker 2013-09-23 12:05:44 +02:00
  • 43f9799ce6 RSA blinding on CRT operations to counter timing attacks Paul Bakker 2013-09-23 11:23:31 +02:00
  • 649854004b New script for testing standard configurations Manuel Pégourié-Gonnard 2013-09-20 16:22:42 +02:00
  • 684e9dc52e Add custom configurations with activation script Manuel Pégourié-Gonnard 2013-09-20 15:11:44 +02:00
  • fe28646f72 Fix references to x509parse in config.h Manuel Pégourié-Gonnard 2013-09-20 14:10:14 +02:00
  • 09fff7ee25 Cosmetics in config.h Manuel Pégourié-Gonnard 2013-09-20 13:45:36 +02:00
  • abd6e02b7b Rm _CRT_SECURE_NO_DEPRECATE for programs Manuel Pégourié-Gonnard 2013-09-20 13:30:43 +02:00
  • 3bd2aae5a5 Add forgotten initializations Manuel Pégourié-Gonnard 2013-09-20 13:10:13 +02:00
  • eb1714e9c8 Fix certs/psk arguments in compat.sh Manuel Pégourié-Gonnard 2013-09-20 12:44:08 +02:00
  • 7831b0cb3c A few more issues with small configurations Manuel Pégourié-Gonnard 2013-09-20 12:29:56 +02:00