Commit Graph

  • bd5524471a Removed memory leak in PKCS#12 code Paul Bakker 2013-07-03 14:44:40 +02:00
  • 4632083c78 Removed memory leaks in PKCS#5 functions Paul Bakker 2013-07-03 14:01:52 +02:00
  • e07c431eb3 Test suite automatically uses buffer-based memory allocator if present Paul Bakker 2013-07-03 14:00:49 +02:00
  • 6e339b52e8 Memory-allocation abstraction layer and buffer-based allocator added Paul Bakker 2013-07-03 13:37:05 +02:00
  • f863485fea Remove memory leak in PKCS#5 self test Paul Bakker 2013-07-03 13:31:52 +02:00
  • abf2f8fcf9 zlib compression/decompression skipped on empty blocks Paul Bakker 2013-06-30 14:57:46 +02:00
  • e5bffc319d Removed redundant includes Paul Bakker 2013-06-30 14:51:34 +02:00
  • d2681d82e2 Renamed sha2.{c,h} to sha256.{c,h} and sha4.{c,h} to sha512.{c,h} Paul Bakker 2013-06-30 14:49:12 +02:00
  • 9e36f0475f SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly Paul Bakker 2013-06-30 14:34:05 +02:00
  • 3866b9f4b5 Removed redundant inclusion Paul Bakker 2013-06-30 12:53:14 +02:00
  • 62534dd1d8 programs/util/strerror now handles decimal and hexidecimal input Paul Bakker 2013-06-30 12:45:07 +02:00
  • 63899feca8 Removed redundant bugfix from ChangeLog (Already done in 1.2.8) Paul Bakker 2013-06-30 12:20:03 +02:00
  • 03a8a79516 Programs adapted to use polarssl_strerror() instead of error_strerror() Paul Bakker 2013-06-30 12:18:08 +02:00
  • fd3eac5786 Cleaned up ECP error codes Paul Bakker 2013-06-29 23:31:33 +02:00
  • 5dc6b5fb05 Made supported curves configurable Paul Bakker 2013-06-29 23:26:34 +02:00
  • e2ab84f4a1 Renamed error_strerror() to the less conflicting polarssl_strerror() Paul Bakker 2013-06-29 18:24:32 +02:00
  • 89fe7f4388 compat.sh modified to support new ssl_server2 and ssl_client2 capabilities Paul Bakker 2013-06-29 16:18:10 +02:00
  • c1516be99d ssl_server2 and ssl_client2 adapted to support maximum protocol version Paul Bakker 2013-06-29 16:01:32 +02:00
  • 2fbefde1d8 Client and server now filter sent and accepted ciphersuites on minimum and maximum protocol version Paul Bakker 2013-06-29 16:01:15 +02:00
  • 59c28a2723 SSL v2 handshake should also handle dynamic ciphersuites Paul Bakker 2013-06-29 15:33:42 +02:00
  • f8d018a274 Made asn1_get_alg() and asn1_get_alg_null() as generic functions Paul Bakker 2013-06-29 12:16:17 +02:00
  • ce6ae233cb Macro-ized the final internal OID functions Paul Bakker 2013-06-28 18:05:35 +02:00
  • 47fce02bd8 Defines around module-dependent OIDs Paul Bakker 2013-06-28 17:34:34 +02:00
  • 7749a22974 Moved PKCS#12 cipher layer based PBE detection to use OID database Paul Bakker 2013-06-28 17:28:20 +02:00
  • dd1150e846 Macro-ized single and double attribute functions in OID database Paul Bakker 2013-06-28 17:20:22 +02:00
  • bd51ad538d Re-ordered OID internals. Made macro for oid_XXX_from_asn1() functions Paul Bakker 2013-06-28 16:51:52 +02:00
  • 9b5e885611 PKCS#5 PBES2 now uses OID database for algorithm detection Paul Bakker 2013-06-28 16:12:50 +02:00
  • 6d72f33441 Updated README with simple formatting Paul Bakker 2013-06-28 10:25:03 +02:00
  • 407a0da160 Moved __cplusplus extern statement to include struct definitions as well. Paul Bakker 2013-06-27 14:29:21 +02:00
  • c5a79cca53 Fixed compiler warnings for unused parameter ssl Paul Bakker 2013-06-26 15:08:35 +02:00
  • b9d3cfa114 Split up GCM into a start/update/finish cycle Paul Bakker 2013-06-26 15:07:16 +02:00
  • 534f82c77a Made ctr_drbg_init_entropy_len() non-static and defined Paul Bakker 2013-06-25 16:47:55 +02:00
  • 3c5ef71322 Cleanup up non-prototyped functions (static) and const-correctness in programs Paul Bakker 2013-06-25 16:37:45 +02:00
  • b6c5d2e1a6 Cleanup up non-prototyped functions (static) and const-correctness Paul Bakker 2013-06-25 16:25:17 +02:00
  • 169b7f4a13 Fixed gcm.c formatting (removed redundant spaces) Paul Bakker 2013-06-25 14:58:00 +02:00
  • bda7cb76fa Fixed minor comment typo (cherry picked from commit da7fdbd534) Paul Bakker 2013-06-24 19:34:25 +02:00
  • b0713c7e1f Updated PKCS#12 define dependencies (cherry picked from commit 602c31be23) Paul Bakker 2013-06-24 19:34:08 +02:00
  • f67edd9db8 Made x509parse PKCS#12 and PKCS#5 tests dependent on defines (cherry picked from commit db7ea6f162) Paul Bakker 2013-06-24 19:33:44 +02:00
  • 38b50d73a1 Moved PKCS#12 PBE functions to cipher / md layer where possible Paul Bakker 2013-06-24 19:33:27 +02:00
  • 0e34235644 Fixed values for 2-key Triple DES in cipher layer (cherry picked from commit 2be71faae4) Paul Bakker 2013-06-24 19:33:02 +02:00
  • a4232a7ccb x509parse_crt() and x509parse_crt_der() return X509 password related codes Paul Bakker 2013-06-24 19:32:25 +02:00
  • 72823091c2 Removed redundant free()s (cherry picked from commit 1fc7dfe2e2) Paul Bakker 2013-06-24 19:32:04 +02:00
  • cf445ffc4e Added missing free() (cherry picked from commit ff3a4b010b) Paul Bakker 2013-06-24 19:31:41 +02:00
  • 9bcf16c55d Centralized module option values in config.h Paul Bakker 2013-06-24 19:31:17 +02:00
  • 28144decef PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates Paul Bakker 2013-06-24 19:28:55 +02:00
  • b0c19a4b3d PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated old PBKDF2 module. (cherry picked from commit 19bd297dc8) Paul Bakker 2013-06-24 19:26:38 +02:00
  • fc4f46fa9a Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler (cherry picked from commit 52b845be34) Paul Bakker 2013-06-24 19:23:56 +02:00
  • 531e294313 Fixed location of brackets in pkcs12.c (cherry picked from commit 67812d396c) Paul Bakker 2013-06-24 19:23:12 +02:00
  • 2c8cdd201f x509parse_crtpath() is now reentrant and uses more portable stat() Paul Bakker 2013-06-24 19:22:42 +02:00
  • 42c6581110 Changed x509parse_crt_der() to support adding to chain. Paul Bakker 2013-06-24 19:21:59 +02:00
  • 90995b5ce3 Added mechanism to provide alternative cipher / hash implementations Paul Bakker 2013-06-24 19:20:35 +02:00
  • 28837ff2f4 Make sure polarssl/config.h is included at the start (cherry picked from commit 9691bbe9b3) Paul Bakker 2013-06-24 19:17:50 +02:00
  • f1f21fe825 Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis Paul Bakker 2013-06-24 19:17:19 +02:00
  • e2f5040876 Internally split up x509parse_key() Paul Bakker 2013-06-24 19:00:59 +02:00
  • 89ecb2d074 ssl_parse_certificate() now calls x509parse_crt_der() directly (cherry picked from commit 1922a4e6aa) Paul Bakker 2013-06-24 19:06:15 +02:00
  • 5ed3b34e22 x509parse_crt() now better handles PEM error situations Paul Bakker 2013-06-24 19:05:46 +02:00
  • 00b2860e8d pem_read_buffer() already update use_len after header and footer are read Paul Bakker 2013-06-24 13:02:41 +02:00
  • b2a1140469 Added error.h inclusion in error.c template (cherry picked from commit ac6168b95e) Paul Bakker 2013-06-24 13:02:12 +02:00
  • 2a84424a35 Disabled the HAVEGE random generator by default Paul Bakker 2013-06-24 13:01:53 +02:00
  • ef3f8c747e Fixed const correctness issues in programs and tests (cherry picked from commit e0225e4d7f) Paul Bakker 2013-06-24 13:01:08 +02:00
  • 3c2122ff9d Fixed const correctness issues that have no impact on the ABI (cherry picked from commit eae09db9e5) Paul Bakker 2013-06-24 19:03:14 +02:00
  • 2013950545 Secure renegotiation extension should only be sent in case client supports secure renegotiation (cherry picked from commit 7c3c3899cf) Paul Bakker 2013-06-24 12:05:39 +02:00
  • de65623f3e PolarSSL 1.2.6 and PolarSSL 1.2.7 changes added to ChangeLog Paul Bakker 2013-06-24 19:07:34 +02:00
  • 248fff5369 PolarSSL 1.1.6 and PolarSSL 1.1.7 changed added to ChangeLog Paul Bakker 2013-06-24 19:08:50 +02:00
  • 3f5b753654 ssl_write_certificate_request() can handle empty ca_chain (cherry picked from commit 21360ca4d4) polarssl-1.1.7 Paul Bakker 2013-06-21 15:13:59 +02:00
  • 21360ca4d4 ssl_write_certificate_request() can handle empty ca_chain polarssl-1.2.8 Paul Bakker 2013-06-21 15:11:10 +02:00
  • 8199a3375f Added Security note (Advisory 2013-03) in ChangeLog (cherry picked from commit 016ea076e7) Paul Bakker 2013-06-19 12:16:23 +02:00
  • 68514b09a1 Prepared for PolarSSL release 1.1.7 Paul Bakker 2013-06-19 12:15:10 +02:00
  • 90f242bf2e Fixed values for 2-key Triple DES in cipher layer (cherry picked from commit 2be71faae4) Paul Bakker 2013-06-19 12:13:56 +02:00
  • a465d758aa Added missing free() (cherry picked from commit ff3a4b010b) Paul Bakker 2013-06-19 12:11:20 +02:00
  • 03437fc198 Changed x509parse_crt_der() to support adding to chain. Paul Bakker 2013-06-19 12:10:31 +02:00
  • b5df3bf1b4 ssl_parse_certificate() now calls x509parse_crt_der() directly (cherry picked from commit 1922a4e6aa) Paul Bakker 2013-06-19 12:08:47 +02:00
  • 721f06d49d x509parse_crt() now better handles PEM error situations Paul Bakker 2013-06-19 12:07:42 +02:00
  • 03a85bca4c pem_read_buffer() already update use_len after header and footer are read Paul Bakker 2013-06-19 12:06:00 +02:00
  • 1fd0e055be Disabled the HAVEGE random generator by default Paul Bakker 2013-06-19 12:05:04 +02:00
  • 016ea076e7 Added Security note (Advisory 2013-03) in ChangeLog Paul Bakker 2013-06-19 11:50:30 +02:00
  • 1d419500b0 Prepared for PolarSSL release 1.2.8 Paul Bakker 2013-06-19 11:48:04 +02:00
  • da7fdbd534 Fixed minor comment typo Paul Bakker 2013-06-19 11:15:43 +02:00
  • 602c31be23 Updated PKCS#12 define dependencies Paul Bakker 2013-06-18 16:49:18 +02:00
  • db7ea6f162 Made x509parse PKCS#12 and PKCS#5 tests dependent on defines Paul Bakker 2013-06-18 16:47:59 +02:00
  • 14a222cef2 Moved PKCS#12 PBE functions to cipher / md layer where possible Paul Bakker 2013-06-18 16:35:48 +02:00
  • 2be71faae4 Fixed values for 2-key Triple DES in cipher layer Paul Bakker 2013-06-18 16:33:27 +02:00
  • b495d3a2c7 x509parse_crt() and x509parse_crt_der() return X509 password related codes Paul Bakker 2013-06-17 15:58:04 +02:00
  • 1fc7dfe2e2 Removed redundant free()s Paul Bakker 2013-06-17 15:57:02 +02:00
  • ff3a4b010b Added missing free() Paul Bakker 2013-06-17 15:56:12 +02:00
  • 6fa5488779 Centralized module option values in config.h Paul Bakker 2013-06-17 15:44:03 +02:00
  • 1fd4321ba2 PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates Paul Bakker 2013-06-17 15:14:42 +02:00
  • 19bd297dc8 PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated old PBKDF2 module. Paul Bakker 2013-06-14 12:06:45 +02:00
  • 52b845be34 Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler Paul Bakker 2013-06-14 11:36:56 +02:00
  • 67812d396c Fixed location of brackets in pkcs12.c Paul Bakker 2013-06-14 11:35:09 +02:00
  • cbfcaa9206 x509parse_crtpath() is now reentrant and uses more portable stat() Paul Bakker 2013-06-13 09:20:25 +02:00
  • d6d4109adc Changed x509parse_crt_der() to support adding to chain. Paul Bakker 2013-06-13 09:00:25 +02:00
  • 4087c47043 Added mechanism to provide alternative cipher / hash implementations Paul Bakker 2013-06-12 16:49:10 +02:00
  • 9691bbe9b3 Make sure polarssl/config.h is included at the start Paul Bakker 2013-06-12 16:33:17 +02:00
  • cf6e95d9a8 Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis Paul Bakker 2013-06-12 13:18:15 +02:00
  • 65a1909dc6 Internally split up x509parse_key() Paul Bakker 2013-06-06 21:14:58 +02:00
  • 1922a4e6aa ssl_parse_certificate() now calls x509parse_crt_der() directly Paul Bakker 2013-06-06 15:11:16 +02:00
  • 6417186365 x509parse_crt() now better handles PEM error situations Paul Bakker 2013-06-06 15:01:18 +02:00
  • 9255e8300e pem_read_buffer() already update use_len after header and footer are read Paul Bakker 2013-06-06 14:58:28 +02:00
  • ac6168b95e Added error.h inclusion in error.c template Paul Bakker 2013-06-06 14:52:23 +02:00