Commit Graph

  • 84bef1db2c - Fixed DHM length to correct one Paul Bakker 2012-04-20 13:42:02 +00:00
  • 79e9477d08 Paul Bakker 2012-04-20 13:41:32 +00:00
  • 32356acc4f - Fixed handling error in mpi_cmp_mpi() on longer B values (found by Hui Dong) Paul Bakker 2012-04-20 13:34:52 +00:00
  • e2f8ff6797 - Merged security fixes to 1.1 branch Paul Bakker 2012-04-20 13:33:14 +00:00
  • 901c65620e - Fill full buffer (Wrong parameter usage) Paul Bakker 2012-04-20 13:25:38 +00:00
  • 380da53c48 - Abstracted checksum updating during handshake Paul Bakker 2012-04-18 16:10:25 +00:00
  • ca4ab49158 - Added GCM ciphersuites to TLS implementation Paul Bakker 2012-04-18 14:23:57 +00:00
  • 0b22e3e989 - Print return codes properly Paul Bakker 2012-04-18 14:23:29 +00:00
  • 915940ef80 - Added TLS1.2 Paul Bakker 2012-04-18 14:21:32 +00:00
  • d8ef167833 - Updated for latest GCM error Paul Bakker 2012-04-18 14:17:32 +00:00
  • fc5183cf5d - Added input checking and more efficient buffer overlap use Paul Bakker 2012-04-18 14:17:01 +00:00
  • 369e14bbf1 - Small code rewrite Paul Bakker 2012-04-18 14:16:09 +00:00
  • 7890405856 - Added GCM as known module Paul Bakker 2012-04-18 14:11:33 +00:00
  • 030277ab1e - Updated error.c to include GCM errors Paul Bakker 2012-04-17 12:24:26 +00:00
  • 13ed9ab921 - Removed unused variable Paul Bakker 2012-04-16 09:43:49 +00:00
  • 0a9251870a - Report unexpected_message if unknown record type is received Paul Bakker 2012-04-16 06:46:41 +00:00
  • 6f3578cfc8 - Report proper error number Paul Bakker 2012-04-16 06:46:01 +00:00
  • 10cd225962 - Added support for the SHA256 ciphersuites of AES and Camellia Paul Bakker 2012-04-12 21:26:34 +00:00
  • bf63b36127 - Updated comments Paul Bakker 2012-04-12 20:44:34 +00:00
  • c3f177a77b - Added client side support for signature_algorithm extension and affiliated handling Paul Bakker 2012-04-11 16:11:49 +00:00
  • 1ef83d66dd - Initial bare version of TLS 1.2 Paul Bakker 2012-04-11 12:09:53 +00:00
  • 570267f01a - print error string in useful format Paul Bakker 2012-04-10 08:22:46 +00:00
  • 398cb514e2 - Allow to test for multiple modes Paul Bakker 2012-04-10 08:22:31 +00:00
  • e93dfa72a5 - Added hex documentation for alerts Paul Bakker 2012-04-10 08:03:03 +00:00
  • f34cf85534 - Fixed too restrictive test Paul Bakker 2012-04-10 07:48:40 +00:00
  • 96d42da8fe - Removed debug value Paul Bakker 2012-04-05 13:22:07 +00:00
  • c7ffd36a97 - Added automatic debug flags to CFLAGS if DEBUG is set in shell Paul Bakker 2012-04-05 12:08:29 +00:00
  • f9964abe7c - Added extra build options Paul Bakker 2012-04-05 12:07:50 +00:00
  • 452d532955 - Fixed potential memory corruption on miscrafted client messages (found by Frama-C team at CEA LIST) Paul Bakker 2012-04-05 12:07:34 +00:00
  • 6126481796 - Added compat for sun in net.c Paul Bakker 2012-04-03 07:54:30 +00:00
  • 56a7684023 - Added alternative for SHA1 signature structure to check for (without NULL) Paul Bakker 2012-03-22 15:31:27 +00:00
  • 7beceb2e2b Paul Bakker 2012-03-22 14:19:49 +00:00
  • 37824581b7 - Added Changelog for bugfix in mpi_cmp_mpi() Paul Bakker 2012-03-22 14:10:22 +00:00
  • 0c8f73ba8b - Fixed a mistake in mpi_cmp_mpi() where longer B values are handled wrong Paul Bakker 2012-03-22 14:08:57 +00:00
  • b78c74551f - Use standard IV of 12 Paul Bakker 2012-03-20 15:05:59 +00:00
  • f9169629c9 - Removed unused variables Paul Bakker 2012-03-20 15:05:51 +00:00
  • 89e80c9a43 - Added base Galois/Counter mode (GCM) for AES Paul Bakker 2012-03-20 13:50:09 +00:00
  • b6ad62dd21 - Added missing x509write.c Paul Bakker 2012-03-20 13:41:33 +00:00
  • 02f61692ef - Removed trailing char Paul Bakker 2012-03-15 10:54:25 +00:00
  • f654371b2b - Only include dependencies when required Paul Bakker 2012-03-05 14:01:29 +00:00
  • 12f5dbb8b4 - Fixed MD type to SHA1 Paul Bakker 2012-03-05 13:37:13 +00:00
  • ad8d354a1a - Updated RFC ref Paul Bakker 2012-02-16 15:28:14 +00:00
  • 92101f2d02 - Keep requests for future use Paul Bakker 2012-02-16 14:09:31 +00:00
  • 6d6205091b - First tests for x509_write_cert_req() compat with OpenSSL output Paul Bakker 2012-02-16 14:09:13 +00:00
  • 3cac5e012b - x509_write_cert_req() now supports all available hash functions Paul Bakker 2012-02-16 14:08:06 +00:00
  • 89f3fc5bf1 - Removed superfluous debugging info Paul Bakker 2012-02-16 13:36:38 +00:00
  • 058881547f - Certificate Requests written now have the Email address written in IA5String Paul Bakker 2012-02-16 10:26:57 +00:00
  • bdb912db69 - Added preliminary ASN.1 buffer writing support - Added preliminary X509 Certificate Request writing support - Added key_app_writer example application - Added cert_req example application Paul Bakker 2012-02-13 23:11:30 +00:00
  • 048d04ef4b - AES code only check for Padlock once Paul Bakker 2012-02-12 17:31:04 +00:00
  • 39dfdaca8f - Fixed mpi_fill_random() to fill and create right size MPI Paul Bakker 2012-02-12 17:17:27 +00:00
  • b08e6843c2 - Removed test memory leaks Paul Bakker 2012-02-11 18:43:20 +00:00
  • 8afa70dcd5 - Clean Subject Alternative Name data Paul Bakker 2012-02-11 18:42:45 +00:00
  • 57b12982b3 - Multi-domain certificates support wildcards as well Paul Bakker 2012-02-11 17:38:38 +00:00
  • 1504af585c - Removed redundant POLARSSL_DEBUG_MSG define Paul Bakker 2012-02-11 16:17:43 +00:00
  • a8cd239d6b - Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension Paul Bakker 2012-02-11 16:09:32 +00:00
  • fab5c829e7 - Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default! Paul Bakker 2012-02-06 16:45:10 +00:00
  • 13eb9f01cf - Added error exit code Paul Bakker 2012-02-06 15:35:10 +00:00
  • e708e5c901 - Always return 0 fixed in doc for havege_random() Paul Bakker 2012-02-03 08:13:57 +00:00
  • e2e36d31bd - Merged changes from trunk to PolarSSL 1.1 branch polarssl-1.1.1 Paul Bakker 2012-01-23 09:56:51 +00:00
  • 3c18a830b3 - Made changes for 1.1.1 release Paul Bakker 2012-01-23 09:44:43 +00:00
  • 99955bf86a - Final changes for 1.1.1 release Paul Bakker 2012-01-23 09:31:41 +00:00
  • 6621987e1c - Made better fix to issue of defined long long type for bignum code Paul Bakker 2012-01-22 20:38:13 +00:00
  • 17caec12af - Changed back statement Paul Bakker 2012-01-22 20:37:32 +00:00
  • e88186d2ff - Fixed selftest for CTR_DRBG Paul Bakker 2012-01-22 20:29:47 +00:00
  • 2ec0a56649 - Fixed issue with Intel compiler on 64-bit platforms Paul Bakker 2012-01-21 05:41:23 +00:00
  • cf0360a14e - Fixed compiler error on 64-bit systems not using GCC - t_udbl optimization now also works on platforms that did not define POLARSSL_HAVE_LONGLONG Paul Bakker 2012-01-20 10:08:14 +00:00
  • ec1b9842c4 - Fixed type of length in get_pkcs_padding() Paul Bakker 2012-01-14 18:24:43 +00:00
  • 87e5cdad5b - Fixed warning for t if no debugging defined Paul Bakker 2012-01-14 18:14:15 +00:00
  • ed375caa3b - Fixed signed status of ret Paul Bakker 2012-01-14 18:10:38 +00:00
  • 8913f82c26 - Fixed compiler warning for unreferenced ret in md_file() when POLARSSL_FS_IO not declared Paul Bakker 2012-01-14 18:07:41 +00:00
  • 1052784054 - Fixed typo Paul Bakker 2012-01-14 18:00:00 +00:00
  • b15b851d6d - Check for failed malloc() in ssl_set_hostname() and x509_get_entries() (Closes ticket #47, found by Hugo Leisink) Paul Bakker 2012-01-13 13:44:06 +00:00
  • 8b21f7a55d - Fixed variable doc for 'tag' Paul Bakker 2012-01-13 13:29:05 +00:00
  • d567aa2b6e - Merged Trunk changes for 1.1 into branch polarssl-1.1.0 Paul Bakker 2011-12-22 10:06:27 +00:00
  • 08a508838c - Updated release date Paul Bakker 2011-12-22 09:43:57 +00:00
  • 394c56f854 - Support for FreeBSD _SOCKLEN_T_DECLARED Paul Bakker 2011-12-20 12:19:03 +00:00
  • 43655f46b0 - Added option to prevent default entropy sources from loading (POLARSSL_NO_DEFAULT_ENTROPY_SOURCES) Paul Bakker 2011-12-15 20:11:16 +00:00
  • fb3a83f9e3 - Added appropriate error handling to ctr_drbg_init() Paul Bakker 2011-12-15 20:05:53 +00:00
  • 3f9b650b4b - Fixed renumber error code for POLARSSL_ERR_CTR_DRBG_FILE_IO_ERROR Paul Bakker 2011-12-15 19:50:22 +00:00
  • ccdb028629 - Fixed include with relative directory Paul Bakker 2011-12-15 19:49:51 +00:00
  • 28c7e7f6fa - Added HAVEGE as a default entropy source Paul Bakker 2011-12-15 19:49:30 +00:00
  • 543c8e46b6 - Released 1.1.0 RC1 Paul Bakker 2011-12-11 16:36:02 +00:00
  • 732e1a893c - Merged trunk into 1.1 branch polarssl-1.1.0-rc1 Paul Bakker 2011-12-11 16:35:09 +00:00
  • a42b3e916d - Fixed top line for version Paul Bakker 2011-12-11 11:48:51 +00:00
  • b1dee1cfd2 - Changed commands to lowercase where it was not the case Paul Bakker 2011-12-11 11:29:51 +00:00
  • b3b4901295 - Fixed duplicate prefix inclusion Paul Bakker 2011-12-11 11:28:52 +00:00
  • 9bc2f320b8 - Added option to prevent installation of header files Paul Bakker 2011-12-11 11:25:30 +00:00
  • 55d3fd9aff - Enlarged maximum size of DHM a client accepts to 512 bytes Paul Bakker 2011-12-11 11:13:05 +00:00
  • 69e095cc15 - Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it. - As a consequence all error code that were positive were changed. A lot of MALLOC_FAILED and FILE_IO_ERROR error codes added for different modules. - Programs and tests were adapted accordingly Paul Bakker 2011-12-10 21:55:01 +00:00
  • 18d32911c0 - Added internal ctr_drbg_init_entropy_len() to allow NIST determined entropy tests to work Paul Bakker 2011-12-10 21:42:49 +00:00
  • bd4a9d0cda - Changed entropy accumulator to have per-source thresholds Paul Bakker 2011-12-10 17:02:19 +00:00
  • 5cb9db4c5b - Seed-size now matches required entropy for key + IV Paul Bakker 2011-12-10 17:01:41 +00:00
  • b209de59b7 - Created 1.1 branch and 1.1.0-rc0 release polarssl-1.1.0-rc0 Paul Bakker 2011-12-05 14:48:05 +00:00
  • c50132d4fa - Updated version of PolarSSL to 1.1.0 Paul Bakker 2011-12-05 14:38:36 +00:00
  • 9304880e8a - Fixed correct printing of serial number '00' Paul Bakker 2011-12-05 14:38:06 +00:00
  • b8ba90b316 - Enlarged default CRL size buffer Paul Bakker 2011-12-05 14:34:12 +00:00
  • c8ffbe7706 - Corrected removal of leading '00:' in printing serial numbers in certificates and CRLs Paul Bakker 2011-12-05 14:22:49 +00:00
  • 6bcfc67cd2 - Prevented warning from unused parameter data Paul Bakker 2011-12-05 13:54:00 +00:00
  • fc754a9178 - Addedd writing and updating of seedfiles as functions to CTR_DRBG Paul Bakker 2011-12-05 13:23:51 +00:00
  • 1c70d409ad - Added better handling of missing session struct Paul Bakker 2011-12-04 22:30:17 +00:00