Commit Graph

  • 57c2852807 Added truncated hmac negociation (without effect) Manuel Pégourié-Gonnard 2013-07-19 11:41:43 +02:00
  • e980a994f0 Add interface for truncated hmac Manuel Pégourié-Gonnard 2013-07-19 11:08:52 +02:00
  • 5b55b79021 Better handling of ciphersuite version range and forced version in ssl_server2 Paul Bakker 2013-07-19 13:43:43 +02:00
  • bd5fd4d1da RFC6229 ARC4 test vectors added to testsuite Paul Bakker 2013-07-19 13:43:15 +02:00
  • accd4eb665 compat.sh now has -f command-line option to filter used ciphersuites Paul Bakker 2013-07-19 13:41:51 +02:00
  • a7eaba5ef9 Merge branch 'maximum-fragment-length' into development Paul Bakker 2013-07-19 14:00:29 +02:00
  • e048b67d0a Misc minor fixes Manuel Pégourié-Gonnard 2013-07-19 12:47:00 +02:00
  • 0c017a55e0 Add max_frag_len option in ssl_server2 Manuel Pégourié-Gonnard 2013-07-18 14:07:36 +02:00
  • ed4af8b57c Move negotiated max fragment length to session Manuel Pégourié-Gonnard 2013-07-18 14:07:09 +02:00
  • 581e6b6d6c Prepare migrating max fragment length to session Manuel Pégourié-Gonnard 2013-07-18 12:32:27 +02:00
  • 8e714d7aca Modified LONG_RESPONSE and comments in ssl_server2 Paul Bakker 2013-07-18 11:05:13 +02:00
  • bd7ce63115 Adapt ssl_server2 to test sending long messages Manuel Pégourié-Gonnard 2013-07-17 15:34:17 +02:00
  • 6b4f237f6a Forbid setting max_frag_len > MAX_CONTENT_LEN Manuel Pégourié-Gonnard 2013-07-17 14:33:38 +02:00
  • 30dc7ef3ad Reset max_fragment_length in ssl_session_reset() Manuel Pégourié-Gonnard 2013-07-17 14:03:42 +02:00
  • 7bb7899121 Send max_fragment_length extension (server) Manuel Pégourié-Gonnard 2013-07-17 13:50:08 +02:00
  • f11a6d78c7 Rework server extensions writing Manuel Pégourié-Gonnard 2013-07-17 11:17:14 +02:00
  • de600e571a Read max_fragment_length extension (client) Manuel Pégourié-Gonnard 2013-07-17 10:14:38 +02:00
  • a052849640 Send max_fragment_length extension (client) Manuel Pégourié-Gonnard 2013-07-16 17:26:28 +02:00
  • 48f8d0dbbd Read max_fragment_length extension (server) Manuel Pégourié-Gonnard 2013-07-17 10:25:37 +02:00
  • 787b658bb3 Implement max_frag_len write restriction Manuel Pégourié-Gonnard 2013-07-16 15:43:17 +02:00
  • 0df6b1f068 ssl_client2: add max_frag_len option Manuel Pégourié-Gonnard 2013-07-16 13:39:57 +02:00
  • 8b46459ae5 Add ssl_set_max_frag_len() Manuel Pégourié-Gonnard 2013-07-16 12:45:26 +02:00
  • de9f9efc2e Merge branch 'parse-ec-crt' into development Paul Bakker 2013-07-17 16:00:33 +02:00
  • c2c90031ec Fix pk_set_type() behaviour for unkown type Manuel Pégourié-Gonnard 2013-07-15 11:04:58 +02:00
  • 14d8564402 Fix overflow check in oid_get_numeric_string() Manuel Pégourié-Gonnard 2013-07-15 11:01:14 +02:00
  • 4f47538ad8 Fix some 'depends' in tests Manuel Pégourié-Gonnard 2013-07-11 16:47:11 +02:00
  • fd5164e283 Fix some more ifdef's RSA/EC, in pk and debug Manuel Pégourié-Gonnard 2013-07-11 16:39:05 +02:00
  • ab2d9836b4 Fix some ifdef's in x509parse Manuel Pégourié-Gonnard 2013-07-11 16:17:23 +02:00
  • 96f3a4e1b3 Rm ecp_keypair.alg Manuel Pégourié-Gonnard 2013-07-11 15:55:14 +02:00
  • 8b863cd641 Merge EC & RSA versions of x509_parse_key() Manuel Pégourié-Gonnard 2013-07-11 15:32:03 +02:00
  • 6e88202a95 Merge EC & RSA versions of parse_pkcs8_unencrypted Manuel Pégourié-Gonnard 2013-07-11 14:55:43 +02:00
  • a2d4e644ac Some more EC pubkey parsing refactoring Manuel Pégourié-Gonnard 2013-07-11 13:59:02 +02:00
  • 1c808a011c Refactor some EC key parsing code Manuel Pégourié-Gonnard 2013-07-11 13:17:43 +02:00
  • be50680a8c Fix use of x509_cert.rsa in programs Manuel Pégourié-Gonnard 2013-07-11 13:17:21 +02:00
  • 991d0f5aca Remove rsa member from x509_cert structure Manuel Pégourié-Gonnard 2013-07-11 11:14:55 +02:00
  • ff56da3a26 Fix direct uses of x509_cert.rsa, now use pk_rsa() Manuel Pégourié-Gonnard 2013-07-11 10:46:21 +02:00
  • 893879adbd Adapt debug_print_crt() for EC keys Manuel Pégourié-Gonnard 2013-07-11 10:31:57 +02:00
  • a3c86c334c Certificates with EC key and/or sig parsed Manuel Pégourié-Gonnard 2013-07-10 16:54:29 +02:00
  • 5b18fb04ca Fix bug in x509_get_{ecpubkey,subpubkey}() Manuel Pégourié-Gonnard 2013-07-10 16:07:25 +02:00
  • 360a583029 Adapt x509parse_cert_info() for EC Manuel Pégourié-Gonnard 2013-07-10 14:56:36 +02:00
  • 674b2243eb Prepare transition from x509_cert.rsa to pk Manuel Pégourié-Gonnard 2013-07-10 14:32:58 +02:00
  • a155513e7b Rationalize use of x509_get_alg variants Manuel Pégourié-Gonnard 2013-07-10 13:18:41 +02:00
  • 7a287c409e Rename x509_get_algid() to x509_get_pk_alg() Manuel Pégourié-Gonnard 2013-07-10 12:55:08 +02:00
  • 7c5819eb1e Fix warnings (enum value missing from switch/case) Manuel Pégourié-Gonnard 2013-07-10 12:29:57 +02:00
  • 72ef0b775d Add test certificate signed with ECDSA Manuel Pégourié-Gonnard 2013-07-10 12:20:54 +02:00
  • 2692a30c1b Relax ifdef's in pk.h by analogy with md.h Manuel Pégourié-Gonnard 2013-07-10 10:30:15 +02:00
  • 1e60cd09b0 Expand oid_get_sig_alg() for ECDSA-based algs Manuel Pégourié-Gonnard 2013-07-10 10:28:53 +02:00
  • 244569f4b1 Use generic x509_get_pubkey() for RSA functions Manuel Pégourié-Gonnard 2013-07-10 09:46:30 +02:00
  • 4fa0476675 Use new x509_get_pubkey() in x509parse_public_key() Manuel Pégourié-Gonnard 2013-07-09 13:10:49 +02:00
  • c296c5925e Introduce generic x509_get_pubkey() Manuel Pégourié-Gonnard 2013-07-09 12:54:04 +02:00
  • 094ad9e512 Rename x509_get_pubkey to _rsa and split it up Manuel Pégourié-Gonnard 2013-07-09 12:32:51 +02:00
  • f16ac763f6 Simplify length mismatch check in x509_get_pubkey Manuel Pégourié-Gonnard 2013-07-09 12:26:00 +02:00
  • 20c12f6b5f Factor more code into x509_get_pubkey() Manuel Pégourié-Gonnard 2013-07-09 12:13:24 +02:00
  • 788db112a5 Get rid of x509_cert.pkoid Manuel Pégourié-Gonnard 2013-07-09 11:26:17 +02:00
  • 374e4b87d4 pk_set_type() cannot be used to reset key type Manuel Pégourié-Gonnard 2013-07-09 10:21:34 +02:00
  • 0a64e8f1fd Rework algorithmIdentifier parsing Manuel Pégourié-Gonnard 2013-07-08 18:26:18 +02:00
  • f4a1427ae7 base64_decode() also forcefully returns on dst == NULL Paul Bakker 2013-07-05 10:29:12 +02:00
  • 82024bf7b9 ssl_server2 now uses alloc_buffer if present and can be 'SERVERQUIT' Paul Bakker 2013-07-04 11:52:32 +02:00
  • 61d113bb7b Init and free new contexts in the right place for SSL to prevent memory leaks Paul Bakker 2013-07-04 11:51:43 +02:00
  • 8647eecf90 Merge branch 'parse-ec-key' into development Paul Bakker 2013-07-16 17:48:18 +02:00
  • 8ea6c61477 Rename of prvkey -> privkey fix in test suite files Paul Bakker 2013-07-16 17:15:03 +02:00
  • 7d4e5b739e Simplify password check in pem_read_buffer() Manuel Pégourié-Gonnard 2013-07-09 16:35:23 +02:00
  • 791eed3f33 Fix portability issue in oid_get_numeric_string() Manuel Pégourié-Gonnard 2013-07-09 16:26:08 +02:00
  • de44a4aecf Rename ecp_check_prvkey with a 'i' for consistency Manuel Pégourié-Gonnard 2013-07-09 16:05:52 +02:00
  • 81c313ccc6 Add #ifdef's on RSA and EC in PK Manuel Pégourié-Gonnard 2013-07-09 10:35:54 +02:00
  • 1f73a65c06 Fix ommission in pk_free(). Manuel Pégourié-Gonnard 2013-07-09 10:26:41 +02:00
  • 7a6c946446 Fix error code in pk.h Manuel Pégourié-Gonnard 2013-07-09 10:04:07 +02:00
  • 8838099330 Add x509parse_{,public}_key{,file}() Manuel Pégourié-Gonnard 2013-07-04 14:09:57 +02:00
  • 12e0ed9115 Add pk_context and associated functions Manuel Pégourié-Gonnard 2013-07-04 13:31:32 +02:00
  • d4ec21dd47 Add a check for multiple curve specification Manuel Pégourié-Gonnard 2013-07-04 12:04:57 +02:00
  • 80300ad0d9 Add checks for pk_alg. Manuel Pégourié-Gonnard 2013-07-04 11:57:13 +02:00
  • a9e54129b5 Adapt test files to supported PKCS#8 modes Manuel Pégourié-Gonnard 2013-07-04 11:41:39 +02:00
  • 9c1cf459dd Implement x509parse_key_pkcs8_encrypted_der_ec() Manuel Pégourié-Gonnard 2013-07-04 11:20:24 +02:00
  • a5d9974423 Split up x509_parse_pkcs8_encrypted_der() Manuel Pégourié-Gonnard 2013-07-04 11:08:31 +02:00
  • 416fa8fde5 Implement x509parse_key_pkcs8_unencrypted_der_ec() Manuel Pégourié-Gonnard 2013-07-04 10:46:23 +02:00
  • f8648d51b1 Fix undocumented feature of pem_read_buffer() Manuel Pégourié-Gonnard 2013-07-03 21:01:35 +02:00
  • e366342233 Implement x509parse_key_sec1_der() Manuel Pégourié-Gonnard 2013-07-03 18:56:37 +02:00
  • 2b9252cd8f Add tests for x509parse_key_ec() Manuel Pégourié-Gonnard 2013-07-03 12:13:56 +02:00
  • 15e8b82724 Fill in x509parse_key_ec using stub function Manuel Pégourié-Gonnard 2013-07-03 11:56:37 +02:00
  • 73c0cda346 Complete x509parse_public_key_ec() Manuel Pégourié-Gonnard 2013-07-01 19:45:45 +02:00
  • f838eeda09 Add x509_get_ecparams() Manuel Pégourié-Gonnard 2013-07-02 14:56:43 +02:00
  • f0b30d0542 Add oid_get_ec_grp() and associated data Manuel Pégourié-Gonnard 2013-07-01 17:34:57 +02:00
  • 5a9b82e234 Make oid_get_pk_alg handle EC algorithms Manuel Pégourié-Gonnard 2013-07-01 16:57:44 +02:00
  • dffba8f63e Fix bug in oid_get_numeric_string() Manuel Pégourié-Gonnard 2013-07-01 17:33:31 +02:00
  • 444b42710a Optionally allow parameters in x509_get_tag() Manuel Pégourié-Gonnard 2013-07-01 15:27:48 +02:00
  • 1bc6931f8c Add test for x509parse_public_keyfile_ec Manuel Pégourié-Gonnard 2013-06-27 15:33:04 +02:00
  • 26833c2fc6 Add stubs for x509parse_key_ec and co. Manuel Pégourié-Gonnard 2013-06-27 11:27:58 +02:00
  • 4250a1f818 Fix a comment and some whitespace Manuel Pégourié-Gonnard 2013-06-27 13:00:00 +02:00
  • ba4878aa64 Rename x509parse_key & co with _rsa suffix Manuel Pégourié-Gonnard 2013-06-27 10:51:01 +02:00
  • c8dc295e83 Add ecp_check_prvkey, with test Manuel Pégourié-Gonnard 2013-07-01 14:06:13 +02:00
  • b8c6e0e3e9 Add ecp_keypair struct, init/free and constants Manuel Pégourié-Gonnard 2013-07-01 13:40:52 +02:00
  • 7c8934ea0e Add ecdsa_init and ecdsa_free Manuel Pégourié-Gonnard 2013-06-27 12:54:02 +02:00
  • bec2f45cfc Add ecdsa_context structure Manuel Pégourié-Gonnard 2013-06-27 10:17:07 +02:00
  • 44618dd798 SSL Test and Benchmark now handle missing POLARSSL_TIMING_C Paul Bakker 2013-07-04 10:34:10 +02:00
  • 1ef120f5fd Updated buffer-allocator with free-block-list to speed up searches Paul Bakker 2013-07-03 17:20:39 +02:00
  • 41350a9a7e Fixed spaces in memory_buffer_alloc.c Paul Bakker 2013-07-03 15:33:47 +02:00
  • fa9b10050b Also compiles / runs without time-based functions in OS Paul Bakker 2013-07-03 15:31:03 +02:00
  • ecd54fb897 Disable POLARSSL_TIMING_C by default (only required for HAVEGE) Paul Bakker 2013-07-03 14:48:29 +02:00
  • 92b8dc0535 Fixed memory leaks in tests Paul Bakker 2013-07-03 14:45:46 +02:00
  • 891998e0c3 Added extra debug information to memory_buffer_alloc_status() Paul Bakker 2013-07-03 14:45:05 +02:00