Commit Graph

  • 6009c3ae5e Add tests for EC cert and crl validation Manuel Pégourié-Gonnard 2013-08-09 11:27:14 +02:00
  • e7f64a8e71 Add missing depends to some x509parse tests Manuel Pégourié-Gonnard 2013-08-09 10:59:25 +02:00
  • 20e9fad4c1 Add test files for EC cert & crl validation Manuel Pégourié-Gonnard 2013-08-08 18:35:29 +02:00
  • bf3109fd41 Add forgotten ecdsa_free() in ecdsa example Manuel Pégourié-Gonnard 2013-08-14 21:36:01 +02:00
  • e09631b7c4 Create ecp_group_copy() and use it Manuel Pégourié-Gonnard 2013-08-12 15:44:31 +02:00
  • aa431613b3 Add ecdsa example program Manuel Pégourié-Gonnard 2013-08-09 17:10:27 +02:00
  • 8eebd012b9 Add an ecdsa_genkey() function Manuel Pégourié-Gonnard 2013-08-09 16:21:34 +02:00
  • 4846f5ecbc ecdsa now depends on ASN.1 parse & write Manuel Pégourié-Gonnard 2013-08-08 14:36:15 +02:00
  • b694b4896c Add ecdsa_{read,write}_signature() Manuel Pégourié-Gonnard 2013-08-08 13:30:57 +02:00
  • 5a8a62ce1c Fixed some x509parse tests after merge of new test framework Paul Bakker 2013-08-20 14:27:21 +02:00
  • 898edb7744 Merged the revamped test framework into development Paul Bakker 2013-08-20 14:23:02 +02:00
  • 3a074a7996 Actually skip certificate if we do not understand hash type Paul Bakker 2013-08-20 12:45:03 +02:00
  • dc4baf11ab Removed errant printf in x509parse_self_test() Paul Bakker 2013-08-20 12:44:33 +02:00
  • 68a4fce8aa Added missing dependencies on functions and tests Paul Bakker 2013-08-20 12:42:31 +02:00
  • bb20f4b720 Failing TEST_ASSERT now breaks off test Paul Bakker 2013-08-20 12:41:33 +02:00
  • b34fef2f3c Suite dependencies handled correctly now Paul Bakker 2013-08-20 12:06:33 +02:00
  • 33b43f1ec3 Converted .function file to c-like format and adapted generator code Paul Bakker 2013-08-20 11:48:36 +02:00
  • 42c3ccf36e Fixed potential negative value misinterpretation in load_file() Paul Bakker 2013-08-19 14:29:31 +02:00
  • 75c1a6f97c Fixed potential heap buffer overflow on large hostname setting Paul Bakker 2013-08-19 14:25:29 +02:00
  • 694d3aeb47 Fixed potential heap buffer overflow on large file reading Paul Bakker 2013-08-19 14:23:38 +02:00
  • 55a7e908f2 Enhanced test output presentation Paul Bakker 2013-08-19 14:02:10 +02:00
  • 04784f57e4 Added config check for SSL/TLS module that depends on cipher layer Paul Bakker 2013-08-19 13:30:57 +02:00
  • 5fd4917d97 Add missing ifdefs in ssl modules Paul Bakker 2013-08-19 13:29:26 +02:00
  • 59da0a46a4 Added config check for POLARSSL_SSL_SESSION_TICKETS Paul Bakker 2013-08-19 13:27:17 +02:00
  • 04376b1419 Fixed memory leak in ssl_parse_server_key_exchange from missing md_free_ctx() Paul Bakker 2013-08-16 14:45:26 +02:00
  • b03de8bcbe Add test for EC keys with all curves. Manuel Pégourié-Gonnard 2013-08-15 14:39:16 +02:00
  • 298aae4524 Adapt core OID functions to embeded null bytes Manuel Pégourié-Gonnard 2013-08-15 14:22:17 +02:00
  • c13c0d4524 Add a length check in rsa_get_pubkey() Manuel Pégourié-Gonnard 2013-08-15 13:58:01 +02:00
  • 56a487a17f Minor ecdsa cleanups Manuel Pégourié-Gonnard 2013-08-15 13:45:38 +02:00
  • 686bfae244 Fix memory error in x509_get_attr_type_value Manuel Pégourié-Gonnard 2013-08-15 13:40:10 +02:00
  • ba77bbf840 Fix memory error in asn1_get_alg() Manuel Pégourié-Gonnard 2013-08-15 13:38:13 +02:00
  • 06dab806ce Fix memory error in asn1_get_bitstring_null() Manuel Pégourié-Gonnard 2013-08-15 12:24:43 +02:00
  • 0b2726732e Fix ifdef conditions for EC-related extensions. Manuel Pégourié-Gonnard 2013-08-15 19:38:07 +02:00
  • 5734b2d358 Actually use the point format selected for ECDH Manuel Pégourié-Gonnard 2013-08-15 19:04:02 +02:00
  • 7b19c16b74 Handle suported_point_formats in ServerHello Manuel Pégourié-Gonnard 2013-08-15 18:01:11 +02:00
  • 6b8846d929 Stop advertising support for compressed points Manuel Pégourié-Gonnard 2013-08-15 17:42:02 +02:00
  • dbd443dca6 Adapted .function files and .data files to new test framework Paul Bakker 2013-08-16 13:38:47 +02:00
  • 1934318dce Introduced own scripted test framework to replace fct.h and reduce compile time Paul Bakker 2013-08-16 13:31:10 +02:00
  • 1f2bc6238b Made support for the truncated_hmac extension configurable Paul Bakker 2013-08-15 13:45:55 +02:00
  • 05decb24c3 Made support for the max_fragment_length extension configurable Paul Bakker 2013-08-15 13:33:48 +02:00
  • 9f3478a37d Merge branch 'session_tickets' into development Paul Bakker 2013-08-15 11:44:40 +02:00
  • 5d5d041fb5 Merge branch 'padding' into development Paul Bakker 2013-08-15 11:44:28 +02:00
  • 606b4ba20f Session ticket expiration checked on server Paul Bakker 2013-08-14 16:52:14 +02:00
  • 51e73135ec Fixed expected test result case for unknown padding modes Paul Bakker 2013-08-15 11:41:39 +02:00
  • f0e39acb58 Fixed unitialized n when resuming a session Paul Bakker 2013-08-15 11:40:48 +02:00
  • 5994adc749 Merge branch 'session_tickets' into development Paul Bakker 2013-08-14 14:27:12 +02:00
  • 936539ad4b Updated Changelog to reflect addition of session tickets Paul Bakker 2013-08-14 13:49:20 +02:00
  • a503a63b85 Made session tickets support configurable from config.h Paul Bakker 2013-08-14 13:48:06 +02:00
  • 56dc9e8bba Authenticate session tickets. Manuel Pégourié-Gonnard 2013-08-03 17:16:31 +02:00
  • 990c51a557 Encrypt session tickets Manuel Pégourié-Gonnard 2013-08-03 15:37:58 +02:00
  • 779e42982c Start adding ticket keys (only key_name for now) Manuel Pégourié-Gonnard 2013-08-03 13:50:48 +02:00
  • aa0d4d1aff Add ssl_set_session_tickets() Manuel Pégourié-Gonnard 2013-08-03 13:02:31 +02:00
  • 306827e3bc Prepare ticket structure for securing Manuel Pégourié-Gonnard 2013-08-02 18:05:14 +02:00
  • 06650f6a37 Fix reusing session more than once Manuel Pégourié-Gonnard 2013-08-02 15:34:52 +02:00
  • cf2e97eae2 ssl_client2: allow reconnecting twice Manuel Pégourié-Gonnard 2013-08-02 15:04:36 +02:00
  • 593058e35e Don't renew ticket when the current one is OK Manuel Pégourié-Gonnard 2013-08-02 14:55:46 +02:00
  • c086cce3d3 Don't cache empty session ID nor resumed session Manuel Pégourié-Gonnard 2013-08-02 14:13:02 +02:00
  • 7cd5924cec Rework NewSessionTicket handling in state machine Manuel Pégourié-Gonnard 2013-08-02 13:24:41 +02:00
  • 3ffa3db80b Fix server session ID handling with ticket Manuel Pégourié-Gonnard 2013-08-02 11:59:05 +02:00
  • 72882b2079 Relax limit on ClientHello size Manuel Pégourié-Gonnard 2013-08-02 13:36:00 +02:00
  • 609bc81a76 ssl_srv: read & write ticket, unsecure for now Manuel Pégourié-Gonnard 2013-08-01 15:08:40 +02:00
  • 94f6a79cde Auxiliary functions to (de)serialize ssl_session Manuel Pégourié-Gonnard 2013-08-01 14:33:49 +02:00
  • 7a358b8580 ssl_srv: write & parse session ticket ext & msg Manuel Pégourié-Gonnard 2013-08-01 11:47:56 +02:00
  • 6377e41ef5 Complete client support for session tickets Manuel Pégourié-Gonnard 2013-07-31 16:31:33 +02:00
  • a5cc6025e7 Parse NewSessionTicket message Manuel Pégourié-Gonnard 2013-07-31 12:58:16 +02:00
  • 60182ef989 ssl_cli: write & parse session ticket extension Manuel Pégourié-Gonnard 2013-08-02 14:44:54 +02:00
  • 75d440192c Introduce ticket field in session structure Manuel Pégourié-Gonnard 2013-08-02 14:44:04 +02:00
  • 5f280cc6cf Implement saving peer cert as part of session. Manuel Pégourié-Gonnard 2013-07-30 16:58:14 +02:00
  • aaa1eab55a Add an option to reconnect in ssl_client2 Manuel Pégourié-Gonnard 2013-07-30 13:43:43 +02:00
  • 747180391d Add ssl_get_session() to save session on client Manuel Pégourié-Gonnard 2013-07-30 12:41:56 +02:00
  • a8342398c8 Merge branch 'padding' into development Paul Bakker 2013-08-14 14:03:59 +02:00
  • da4d1c35d1 Updated Changelog to reflect feature addition Paul Bakker 2013-08-14 12:24:34 +02:00
  • 48e93c84b7 Made padding modes configurable from config.h Paul Bakker 2013-08-14 12:21:18 +02:00
  • 1a45d91cf2 Restructured cipher_set_padding_mode() to use switch statement Paul Bakker 2013-08-14 12:04:26 +02:00
  • ebdc413f44 Add 'no padding' mode Manuel Pégourié-Gonnard 2013-07-26 16:50:44 +02:00
  • 0e7d2c0f95 Add zero padding Manuel Pégourié-Gonnard 2013-07-26 16:05:14 +02:00
  • 8d4291b52a Add zeros-and-length (ANSI X.923) padding Manuel Pégourié-Gonnard 2013-07-26 14:55:18 +02:00
  • 679f9e90ad Add one-and-zeros (ISO/IEC 7816-4) padding Manuel Pégourié-Gonnard 2013-07-26 12:46:02 +02:00
  • 6c9789932e Adapt cipher tests to configurable padding Manuel Pégourié-Gonnard 2013-07-26 13:20:42 +02:00
  • b7d24bc7ca Fix bug in get_pkcs_padding(): cannot be 0-length Manuel Pégourié-Gonnard 2013-07-26 10:58:48 +02:00
  • a640849b55 Add tests for get_padding() (PKCS#7) Manuel Pégourié-Gonnard 2013-07-26 10:55:02 +02:00
  • 725680ffd2 Make cipher tests less dependant on padding size Manuel Pégourié-Gonnard 2013-07-25 15:26:54 +02:00
  • ac56a1aec4 Make cipher_set_padding() actually work Manuel Pégourié-Gonnard 2013-07-25 12:31:10 +02:00
  • d5fdcaf9e5 Add cipher_set_padding() (no effect yet) Manuel Pégourié-Gonnard 2013-07-24 18:05:00 +02:00
  • 0f2f0bfc87 CAMELLIA-based PSK and DHE-PSK ciphersuites added Paul Bakker 2013-07-26 15:03:31 +02:00
  • b548d773b3 Fixed memory leak in ecdh_compute_shared() in case of error Paul Bakker 2013-07-26 14:21:34 +02:00
  • cca998a4c5 Fixed memory leak in ecdsa_sign() / ecdsa_verify() in case of error Paul Bakker 2013-07-26 14:20:53 +02:00
  • 1e6a175362 Support for AIX header locations in net.c module Paul Bakker 2013-07-26 14:10:22 +02:00
  • 66c4810ffe Better handling of ciphersuite version range and forced version in ssl_client2 Paul Bakker 2013-07-26 14:05:32 +02:00
  • 6c85279719 Newline fixes in help text for ssl_client2 / ssl_server2 Paul Bakker 2013-07-26 14:02:13 +02:00
  • 52cf16caeb Fixed multiple use of GCM-context bug due to split-up of GCM functions Paul Bakker 2013-07-26 13:55:38 +02:00
  • d6f41c5bcd Fixed size of ctx_enc / ctx_dec in ssl for gcm_context size Paul Bakker 2013-07-25 17:01:54 +02:00
  • 524691c0a0 Added --modes option to tests/compat.sh Paul Bakker 2013-07-25 17:01:20 +02:00
  • f16db18c55 Fixed header file comments on ciphersuites Paul Bakker 2013-07-25 11:30:31 +02:00
  • d9ca94a677 Updated merged pk.c and x509parse.c changes with new memory allocation functions Paul Bakker 2013-07-25 11:25:09 +02:00
  • dbd79ca617 ssl_client2 and ssl_server2 now exit with 1 on errors (shell limitations) Paul Bakker 2013-07-24 16:28:35 +02:00
  • f85778efb0 Updated Changelog for EC Key / Cert and RFC 6066 extensions Paul Bakker 2013-07-19 14:55:25 +02:00
  • 872c29b705 Merge branch 'truncated-hmac' into development Paul Bakker 2013-07-19 14:52:07 +02:00
  • 8c1ede655f Changed prototype for ssl_set_truncated_hmac() to allow disabling Paul Bakker 2013-07-19 14:14:37 +02:00
  • 277f7f23e2 Implement hmac truncation Manuel Pégourié-Gonnard 2013-07-19 12:19:21 +02:00