Commit Graph

  • 6adff7497a - Fixed typo Paul Bakker 2012-10-01 11:03:14 +00:00
  • 0e19e9ff1c - Minor define change to prevent warning Paul Bakker 2012-10-01 11:02:48 +00:00
  • 993d11dd05 - Send ClientHello with 'minimal version' Paul Bakker 2012-09-28 15:00:12 +00:00
  • 23f3680898 - Added proper support for TLS 1.2 signature_algorithm extension on server side - Minor const changes to other extension parsing functions Paul Bakker 2012-09-28 14:15:14 +00:00
  • 1d29fb5e33 - Added option to add minimum accepted SSL/TLS protocol version Paul Bakker 2012-09-28 13:28:45 +00:00
  • 5d19f86fdd - Added comment Paul Bakker 2012-09-28 07:33:00 +00:00
  • cbbd9998da - SSL/TLS now has default group Paul Bakker 2012-09-28 07:32:06 +00:00
  • 62f2deef8b - Set POLARSSL_DHM_RFC5114_MODP_1024_[PG] as default DHM MODP group for SSL/TLS Paul Bakker 2012-09-28 07:31:51 +00:00
  • da7e3f225a - Added RFC 3526 2048-bit and 3072-bit MODP groups Paul Bakker 2012-09-28 07:18:17 +00:00
  • 915275ba78 - Revamped x509_verify() and the SSL f_vrfy callback implementations Paul Bakker 2012-09-28 07:10:55 +00:00
  • 819370c7b7 - Removed lowercasing of parameters Paul Bakker 2012-09-28 07:04:41 +00:00
  • 5701cdcd02 - Added ServerName extension parsing (SNI) at server side Paul Bakker 2012-09-27 21:49:42 +00:00
  • f918310193 - Autosize POLARSSL_MPI_RW_BUFFER_SIZE at compile time Paul Bakker 2012-09-27 20:42:35 +00:00
  • 31417a71f8 - Fixed tests for enhanced rsa_check_privkey() Paul Bakker 2012-09-27 20:41:37 +00:00
  • eb2c658163 - Generalized external private key implementation handling (like PKCS#11) in SSL/TLS Paul Bakker 2012-09-27 19:15:01 +00:00
  • 321df6fb80 - Expanded rsa_check_privkey() to check DP, DQ and QP as well Paul Bakker 2012-09-27 13:21:34 +00:00
  • 5ef9db2ae3 - Added rsa_check_privkey() check to rsa_sign Paul Bakker 2012-09-27 13:19:22 +00:00
  • db2509c9cd - Added password and password_file options for reading private keys Paul Bakker 2012-09-27 12:44:31 +00:00
  • 5531c6d92c - Change buffer size on mpi_write_file() to cover larger size MPIs Paul Bakker 2012-09-26 19:20:46 +00:00
  • 49d75678a5 - Support INTEGRITY OS Paul Bakker 2012-09-26 15:22:07 +00:00
  • d14277d7de - Added PBKDF2 error code Paul Bakker 2012-09-26 15:19:05 +00:00
  • d43241060b - Removed clutter from my_dhm values Paul Bakker 2012-09-26 08:29:38 +00:00
  • a864f2ee51 - Removed trailing semicolon Paul Bakker 2012-09-26 08:29:20 +00:00
  • 0a59707523 - Added simple SSL session cache implementation - Revamped session resumption handling Paul Bakker 2012-09-25 21:55:46 +00:00
  • 1a0f552030 - Fixed test for 'trust extension' change Paul Bakker 2012-09-25 21:53:55 +00:00
  • b00ca42f2a - Handle existence of OpenSSL Trust Extensions at end of X.509 DER blob Paul Bakker 2012-09-25 12:10:00 +00:00
  • 4811b56524 - Added util/CMakelists.txt Paul Bakker 2012-09-25 11:45:38 +00:00
  • 29b64761fd - Added predefined DHM groups from RFC 5114 Paul Bakker 2012-09-25 09:36:44 +00:00
  • b60b95fd7f - Added first version of ssl_server2 example application Paul Bakker 2012-09-25 09:05:17 +00:00
  • 995a215eac - Added credits Paul Bakker 2012-09-25 08:19:56 +00:00
  • 0f409a1911 - Added missing subdirectory line for util Paul Bakker 2012-09-25 08:19:18 +00:00
  • d0f6fa7bdc - Sending of handshake_failures during renegotiation added - Handle two legacy modes differently: SSL_LEGACY_BREAK_HANDSHAKE and SSL_LEGACY_NO_RENEGOTIATION Paul Bakker 2012-09-17 09:18:12 +00:00
  • 17a9790918 - Added regression check for latest mpi_add_abs() issue Paul Bakker 2012-09-17 08:44:35 +00:00
  • d4c2bd79fe - Added bug Paul Bakker 2012-09-16 21:35:30 +00:00
  • 2d319fdfcb - Fixed bug in mpi_add_abs with adding a small number to a large mpi with carry rollover. Paul Bakker 2012-09-16 21:34:26 +00:00
  • 48916f9b67 - Added Secure Renegotiation (RFC 5746) Paul Bakker 2012-09-16 19:57:18 +00:00
  • b5b20f19e7 - Extra sanity check for input added Paul Bakker 2012-09-16 15:07:49 +00:00
  • 0c93d126bc - Ability to define openssl at top - Also add SHA256 ciphersuites in non-tls 1.2 modes Paul Bakker 2012-09-13 14:26:09 +00:00
  • 5f70b25c9b - Correctly handle SHA256 ciphersuites in SSLv3 - Moved ssl3_prf to separate function (no exceptions) Paul Bakker 2012-09-13 14:23:06 +00:00
  • ec636f3bdd - Removed handling for SSLv2 Client Hello (as per RFC 5246 recommendation) Paul Bakker 2012-09-09 19:17:02 +00:00
  • 68b6d88f5e - Clear all memory Paul Bakker 2012-09-08 14:04:13 +00:00
  • 94a6796179 - Correctly handle MS certificate's key usage bits Paul Bakker 2012-08-23 13:03:52 +00:00
  • f518b16f97 - Added PKCS#5 PBKDF2 key derivation function Paul Bakker 2012-08-23 13:03:18 +00:00
  • 535e97dbab - Better checking for reading over buffer boundaries - Zeroize altSubjectName chain memory before use Paul Bakker 2012-08-23 10:49:55 +00:00
  • 9195662a4c - Added test for no-subject certificates with altSubjectNames Paul Bakker 2012-08-23 10:46:54 +00:00
  • 894dece46c - Cleaner return value (for C++) Paul Bakker 2012-08-23 08:34:32 +00:00
  • b68cad6cc7 - Made cipersuites in ssl context const (no intention to modify) - Adjusted ssl_set_ciphersuites() to match Paul Bakker 2012-08-23 08:34:18 +00:00
  • 835b29e7c3 - Should not be debug_level 5 in repo (reset to 0) Paul Bakker 2012-08-23 08:31:59 +00:00
  • bb51f0cb3d - Only include md.h if needed by POLARSSL_PKCS1_V21 Paul Bakker 2012-08-23 07:46:58 +00:00
  • 6a2f857b08 - Added DragonflyBSD support Paul Bakker 2012-08-23 07:45:37 +00:00
  • 3c16db9a10 - Fixed potential memory zeroization on miscrafted RSA key Paul Bakker 2012-07-05 13:58:08 +00:00
  • 5552c8c0b3 - Updated documentation Paul Bakker 2012-07-05 13:31:54 +00:00
  • 3d58fe8af6 - Added Blowfish to benchmarks Paul Bakker 2012-07-04 17:15:31 +00:00
  • 6132d0aa93 - Added Blowfish to generic cipher layer - Renamed POLARSSL_MODE_CFB128 to POLARSSL_MODE_CFB Paul Bakker 2012-07-04 17:10:40 +00:00
  • 26c4e3cb0b - Made crypt_and_cipher more robust with other ciphers / hashes Paul Bakker 2012-07-04 17:08:33 +00:00
  • 83f00bba9c - Updated strerror codes for SSL Compression and Blowfish Paul Bakker 2012-07-04 11:08:50 +00:00
  • a9379c0ed1 - Added base blowfish algorithm Paul Bakker 2012-07-04 11:02:11 +00:00
  • 92eeea4627 - Modified CMakeLists to support zlib Paul Bakker 2012-07-03 15:10:33 +00:00
  • 2770fbd651 - Added DEFLATE compression support as per RFC3749 (requires zlib) Paul Bakker 2012-07-03 13:30:23 +00:00
  • 4f9a7bb7fd - Added Thumb assembly optimizations Paul Bakker 2012-07-02 08:36:36 +00:00
  • cefb396a77 - Handle empty certificate subject names Paul Bakker 2012-06-27 11:51:09 +00:00
  • e4791f3936 - Bugfix for Windows in cert path handling Paul Bakker 2012-06-04 21:29:15 +00:00
  • 67820bd38e - Only include padlock header when POLARSSL_PADLOCK_C is defined Paul Bakker 2012-06-04 12:47:23 +00:00
  • 8d914583f3 - Added X509 CA Path support Paul Bakker 2012-06-04 12:46:42 +00:00
  • d36da11125 Version 1.1.4 polarssl-1.1.4 Paul Bakker 2012-05-31 10:46:28 +00:00
  • 8639578f58 - Correctly handle empty packets (Found by James Yonan) Paul Bakker 2012-05-30 07:39:36 +00:00
  • ce30bdf624 - Fixed single RSA test that failed on Big Endian systems (Closes ticket #54) Paul Bakker 2012-05-30 07:36:21 +00:00
  • 7f113205bf - Merged 'Fixed potential heap corruption in x509_name allocation' into 1.1 branch Paul Bakker 2012-05-30 07:33:49 +00:00
  • 0715668eea Paul Bakker 2012-05-30 07:33:30 +00:00
  • e6ee41f932 - Added OpenSSL / PolarSSL compatibility script (tests/compat.sh) and example application (programs/ssl/o_p_test) (Requires OpenSSL) - Handle encryption with private key and decryption with public key as per RFC 2313 Paul Bakker 2012-05-19 08:43:48 +00:00
  • 50546921ac - Moved to prevent uninitialized exit var Paul Bakker 2012-05-19 08:40:49 +00:00
  • 4248823f43 - Updated to handle x509parse_crtfile() positive return values Paul Bakker 2012-05-16 08:21:05 +00:00
  • f6198c1513 - mpi_exp_mod() now correctly handles negative base numbers (Closes ticket #52) Paul Bakker 2012-05-16 08:02:29 +00:00
  • 5b37784f6d - Updated with tickets Paul Bakker 2012-05-16 07:57:36 +00:00
  • 40dd5303c2 - Fixed test on Big Endian systems (Fixed Ticket #54) Paul Bakker 2012-05-15 15:02:38 +00:00
  • 2a5c7a87af - Add Windows required library Paul Bakker 2012-05-10 21:54:28 +00:00
  • 62f88dc473 Makefile more compatible with WINDOWS environment Paul Bakker 2012-05-10 21:26:28 +00:00
  • cd5b529d6d - Added automatic WINDOWS define in Makefile Paul Bakker 2012-05-10 20:49:10 +00:00
  • 4d2c1243b1 - Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present. Paul Bakker 2012-05-10 14:12:46 +00:00
  • d14cd35ece - Adapted Makefile for buildbot Paul Bakker 2012-05-08 15:39:50 +00:00
  • 02adedb0b1 - Added casting to prevent warnings on some compilers Paul Bakker 2012-05-08 13:35:48 +00:00
  • 7e2c728178 - Updated to support NetBSD Paul Bakker 2012-05-08 13:23:16 +00:00
  • 186751d9dd - Moved out_msg to out_hdr + 32 to support hardware acceleration Paul Bakker 2012-05-08 13:16:14 +00:00
  • 3aac1daf1d - Added exception error parsing when FATAL ssl message is received Paul Bakker 2012-05-08 13:12:27 +00:00
  • 6b906e5095 - Const correctness mpi_get_bit() - Documentation mpi_lsb(), mpi_msb() Paul Bakker 2012-05-08 12:01:43 +00:00
  • 05ef835b6a - Added support for Hardware Acceleration hooking in SSL/TLS Paul Bakker 2012-05-08 09:17:57 +00:00
  • 8308e68d53 - Added strerror to svn:ignore Paul Bakker 2012-05-08 09:04:42 +00:00
  • fad3893ead - Added release notes for 1.1.2 and 1.1.3 to trunk Paul Bakker 2012-05-08 09:04:04 +00:00
  • 384b75ac9c - Added missing files to Visual C projects Paul Bakker 2012-05-08 08:40:00 +00:00
  • 01cc394848 - Added commandline error code convertor (util/strerror) Paul Bakker 2012-05-08 08:36:15 +00:00
  • 430ffbe564 - Fixed potential heap corruption in x509_name allocation Paul Bakker 2012-05-01 08:14:20 +00:00
  • a63c9e9fba - Added 1.1.3 changes to 1.1 branch polarssl-1.1.3 Paul Bakker 2012-04-29 20:29:53 +00:00
  • 662d1686d9 - Fixed random MPI generation to not generate more size than requested. Paul Bakker 2012-04-29 20:15:55 +00:00
  • e893b669de - Updated polarssl-1.1 branch with merged trunk patches polarssl-1.1.2 Paul Bakker 2012-04-26 19:30:20 +00:00
  • aec37cb653 - Added extra sanity check to DHM values Paul Bakker 2012-04-26 18:59:59 +00:00
  • c9b3e1e783 - Fixed typo Paul Bakker 2012-04-26 18:59:23 +00:00
  • 88f17b8549 - Fixed for new DHM handling (TLS 1.2) Paul Bakker 2012-04-26 18:52:13 +00:00
  • 279432a7c0 - Fixed size of clean Paul Bakker 2012-04-26 10:09:35 +00:00
  • 4cf2b7f8bf - Added name Paul Bakker 2012-04-20 13:59:39 +00:00
  • 145e68119b - Ready for release 1.1.2 Paul Bakker 2012-04-20 13:58:28 +00:00