Commit Graph

Select branches

Hide Pull Requests

master

mbedtls-2.16

Mono Color

• f1f21fe825 Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis Paul Bakker 2013-06-24 19:17:19 +02:00
• e2f5040876 Internally split up x509parse_key() Paul Bakker 2013-06-24 19:00:59 +02:00
• 89ecb2d074 ssl_parse_certificate() now calls x509parse_crt_der() directly (cherry picked from commit 1922a4e6aade7b1d685af19d4d9339ddb5c02859) Paul Bakker 2013-06-24 19:06:15 +02:00
• 5ed3b34e22 x509parse_crt() now better handles PEM error situations Paul Bakker 2013-06-24 19:05:46 +02:00
• 00b2860e8d pem_read_buffer() already update use_len after header and footer are read Paul Bakker 2013-06-24 13:02:41 +02:00
• b2a1140469 Added error.h inclusion in error.c template (cherry picked from commit ac6168b95e7abf22dcab50c8487db231e986d2ec) Paul Bakker 2013-06-24 13:02:12 +02:00
• 2a84424a35 Disabled the HAVEGE random generator by default Paul Bakker 2013-06-24 13:01:53 +02:00
• ef3f8c747e Fixed const correctness issues in programs and tests (cherry picked from commit e0225e4d7f18f4565224f4997af537533d06a80d) Paul Bakker 2013-06-24 13:01:08 +02:00
• 3c2122ff9d Fixed const correctness issues that have no impact on the ABI (cherry picked from commit eae09db9e57b7a342ea15bf57c5c1439c59a2e50) Paul Bakker 2013-06-24 19:03:14 +02:00
• 2013950545 Secure renegotiation extension should only be sent in case client supports secure renegotiation (cherry picked from commit 7c3c3899cf528f00b346f465e69d5a59f9e8410e) Paul Bakker 2013-06-24 12:05:39 +02:00
• de65623f3e PolarSSL 1.2.6 and PolarSSL 1.2.7 changes added to ChangeLog Paul Bakker 2013-06-24 19:07:34 +02:00
• 248fff5369 PolarSSL 1.1.6 and PolarSSL 1.1.7 changed added to ChangeLog Paul Bakker 2013-06-24 19:08:50 +02:00
• 73d4431ccd Fixed parse error in ssl_parse_certificate_request() Paul Bakker 2013-05-22 13:56:26 +02:00
• 777a5757d6 ca_path and ca_file arguments added to support chain validation in cert_app Paul Bakker 2013-05-21 16:20:04 +02:00
• f6a19bd728 Possible resource leak on FILE* removed in X509 parse Paul Bakker 2013-05-14 13:26:51 +02:00
• c72d3f7d85 Possible resource leak on FILE* removed in CTR_DRBG Paul Bakker 2013-05-14 13:22:41 +02:00
• 45bda90caa Comments for extra PSK ciphersuites added to config.h Paul Bakker 2013-04-19 22:28:21 +02:00
• 40afb4ba13 Added PSK GCM, SHA256 and SHA384 ciphers from RFC5487 Paul Bakker 2013-04-19 22:03:30 +02:00
• 0c5fac2931 Reordered ID's to numerical order Paul Bakker 2013-04-19 21:10:51 +02:00
• a1bf92ddb4 Added PSK NULL ciphers from RFC4785 Paul Bakker 2013-04-19 19:48:45 +02:00
• b91c2b5782 PSK and DHE-PSK addition to ChangeLog Paul Bakker 2013-04-19 16:05:16 +02:00
• bc956d900e Added missing config.h include Paul Bakker 2013-04-19 14:51:29 +02:00
• 48f7a5d724 DHE-PSK based ciphersuite support added and cleaner key exchange based code selection Paul Bakker 2013-04-19 14:30:58 +02:00
• 188c8de430 Only allow missing SereverKeyExchange message in bare PSK mode Paul Bakker 2013-04-19 09:13:37 +02:00
• bcbe2d8d81 Prettier printing of the lists for longer ciphersuite names Paul Bakker 2013-04-19 09:10:20 +02:00
• e07f41d4be Introduced defines to control availability of specific SSL Key Exchange methods. Paul Bakker 2013-04-19 09:08:57 +02:00
• 7ad00f9808 Sanity checks added to config.h Paul Bakker 2013-04-18 23:05:25 +02:00
• ed27a041e4 More granular define selections within code to allow for smaller code sizes Paul Bakker 2013-04-18 22:46:23 +02:00
• 7e5e7ca205 Added PSK ciphersuite tests to compat.sh Paul Bakker 2013-04-17 19:27:58 +02:00
• 73a899a9eb Changed error code message to also cover missing pre-shared key Paul Bakker 2013-04-17 19:11:36 +02:00
• fbb17804d8 Added pre-shared key handling for the server side of SSL / TLS Paul Bakker 2013-04-17 19:10:21 +02:00
• 70df2fbaa5 Split parts of ssl_parse_client_key_exchange() into separate functions Paul Bakker 2013-04-17 17:19:09 +02:00
• d4a56ec6bf Added pre-shared key handling for the client side of SSL / TLS Paul Bakker 2013-04-16 18:05:29 +02:00
• f7abd422dc Removed extra spaces on end of lines Paul Bakker 2013-04-16 13:15:56 +02:00
• 29e1f12f6b split parts of ssl_parse_server_key_exchange() into separate functions Paul Bakker 2013-04-16 13:07:56 +02:00
• 8f4ddaeea9 Ability to specify allowed ciphersuites based on the protocol version. Paul Bakker 2013-04-15 15:09:54 +02:00
• eff2e6d414 Fixed MPI assembly for ARM when -O2 is used Paul Bakker 2013-04-11 17:13:22 +02:00
• 0ecdb23eed Cleanup of the GCM code Paul Bakker 2013-04-09 11:36:42 +02:00
• 286bf3c501 Split up largest test suite data files into smaller chunks Paul Bakker 2013-04-08 18:09:51 +02:00
• 370e90c2f0 Enable PBKDF2 by default Paul Bakker 2013-04-08 15:19:43 +02:00
• abfdfbfd46 Removed duplicate value from compat.sh ciphersuite list Paul Bakker 2013-04-08 14:07:43 +02:00
• a280d0f2b9 Fixed compiler warning for possible uninitialized ret Paul Bakker 2013-04-08 13:40:17 +02:00
• 27714b1aa1 Added Camellia ECDHE-based CBC ciphersuites Paul Bakker 2013-04-07 23:07:12 +02:00
• bfe671f2d5 Blowfish has default of 128-bit keysize in cipher layer Paul Bakker 2013-04-07 22:35:44 +02:00
• d5c2b542cc Indication of x509_get_numeric_string() deprecation Paul Bakker 2013-04-07 22:34:26 +02:00
• c70b982056 OID functionality moved to a separate module. Paul Bakker 2013-04-07 22:00:46 +02:00
• 37de6bec16 Const correctness added for asn1write functions Paul Bakker 2013-04-07 13:11:31 +02:00
• c295b834a2 Minor checks to prevent NULL-pointer exceptions Paul Bakker 2013-04-02 11:13:39 +02:00
• 3b6a07b745 Prevented compiler warning on uninitialized end Paul Bakker 2013-03-21 11:56:50 +01:00
• d3edc86720 Moved writing of client extensions to separate functions in ssl_cli.c Paul Bakker 2013-03-20 16:07:17 +01:00
• a54e493bc0 Added ECDHE-based SHA256 and SHA384 ciphersuites Paul Bakker 2013-03-20 15:31:54 +01:00
• b7149bcc90 Corrected behaviour for CBC-based suites using the SHA384 MAC and PRF Paul Bakker 2013-03-20 15:30:09 +01:00
• a0234377fc Made change to error.c for dummy error_strerror() permanent Paul Bakker 2013-03-20 14:42:21 +01:00
• 41c83d3f67 Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS Paul Bakker 2013-03-20 14:39:14 +01:00
• 00c1f43743 Merge branch 'ecc-devel-mpg' into development Paul Bakker 2013-03-13 16:31:01 +01:00
• d589a0ddb6 Modified Makefiles to include new files and and config.h to PolarSSL standard Paul Bakker 2013-03-13 16:30:17 +01:00
• 68884e3c09 Moved to advanced ciphersuite representation and more dynamic SSL code Paul Bakker 2013-01-07 18:20:04 +01:00
• 9b5798dc75 Modified ChangeLog to include explanations of last SSL module changes Paul Bakker 2013-03-13 13:53:00 +01:00
• c9118b433b Renamed hash structures to ctx Paul Bakker 2013-03-13 11:48:39 +01:00
• 09d67258a2 Modified to work in-place Paul Bakker 2013-01-04 16:38:25 +01:00
• 92be97b8e6 Align data with future location based on IV size Paul Bakker 2013-01-02 17:30:03 +01:00
• 07eb38ba31 Update ssl_hw_record_init() to receive keylen, ivlen and maclen as well Added ssl_hw_record_activate() Paul Bakker 2012-12-19 14:42:06 +01:00
• c7878113cb Do not set done in case of a fall-through Paul Bakker 2012-12-19 14:41:14 +01:00
• 5bd422937a Reverted commit 186751d9dd and made out_hdr and out_msg back-to-back again Paul Bakker 2012-12-19 14:40:42 +01:00
• fae35f0601 Functions in cipher_wrap.c marked static Paul Bakker 2013-03-13 10:33:51 +01:00
• d1df02a8a3 Functions inside md_wrap.c now marked static Paul Bakker 2013-03-13 10:31:31 +01:00
• ac0fba5389 Added missing header for MD2 and made code compile with missing header files Paul Bakker 2013-03-13 10:28:40 +01:00
• 1bd3ae826c Added md_process() to MD layer for generic internal access to hash process functions Paul Bakker 2013-03-13 10:26:44 +01:00
• 90f042d4cb Prepared for PolarSSL 1.2.6 release Paul Bakker 2013-03-11 11:38:44 +01:00
• fb1cbd3cea Fixed assembly code for ARM (Thumb and regular) for some compilers Paul Bakker 2013-03-06 18:14:52 +01:00
• e81beda60f The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) Paul Bakker 2013-03-06 17:40:46 +01:00
• a35aa54967 Fixed whitespaces in ChangeLog Paul Bakker 2013-03-06 17:06:21 +01:00
• 78a8c71993 Re-added support for parsing and handling SSLv2 Client Hello messages Paul Bakker 2013-03-06 17:01:52 +01:00
• 37286a573b Fixed net_bind() for specified IP addresses on little endian systems Paul Bakker 2013-03-06 16:55:11 +01:00
• 926c8e49fe Fixed possible NULL pointer exception in ssl_get_ciphersuite() Paul Bakker 2013-03-06 10:23:34 +01:00
• 8804f69d46 Removed timing differences due to bad padding from RSA decrypt for PKCS#1 v1.5 operations Paul Bakker 2013-02-28 18:06:26 +01:00
• a43231c5a5 Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt() Paul Bakker 2013-02-28 17:33:49 +01:00
• b386913f8b Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions Paul Bakker 2013-02-28 17:21:01 +01:00
• e3e4a59622 Added bugfix line for previous fixes for MS Visual Studio Paul Bakker 2013-02-28 10:20:53 +01:00
• 8ea31ff3b5 Added missing typedef for INT64 Paul Bakker 2013-02-27 15:02:50 +01:00
• 9f2018ea28 Fixed typo in _MSC_VER (double underscore at the start) Paul Bakker 2013-02-27 15:01:34 +01:00
• 8ddb645ad3 Added conversion to int for a t_uint value to prevent compiler warnings Paul Bakker 2013-02-27 14:56:33 +01:00
• 3d2dc0f8e5 Corrected GCM counter incrementation to use only 32-bits instead of 128-bits Paul Bakker 2013-02-27 14:52:37 +01:00
• e47b34bdc8 Removed further timing differences during SSL message decryption in ssl_decrypt_buf() Paul Bakker 2013-02-27 14:48:00 +01:00
• 2ca8ad10a1 Made x509parse.c also work with missing hash header files Paul Bakker 2013-02-19 13:17:38 +01:00
• 6deb37e03e Added comments to indicate dependency from PEM on AES, DES and MD5 Paul Bakker 2013-02-19 13:17:08 +01:00
• fbb5cf9f59 Fixed typo in base64.h Paul Bakker 2013-02-14 11:56:58 +01:00
• 86f04f400b Fixed comment Paul Bakker 2013-02-14 11:20:09 +01:00
• c0463502ff Fixed memory leak in ssl_free() and ssl_reset() for active session Paul Bakker 2013-02-14 11:19:38 +01:00
• f35b739dff Add a few check for context validity. Manuel Pégourié-Gonnard 2013-02-11 22:12:39 +01:00
• 424fda5d7b Add ecdh_calc_secret() Manuel Pégourié-Gonnard 2013-02-11 22:05:42 +01:00
• 5cceb41d2c Add ecdh_{make,read}_public() Manuel Pégourié-Gonnard 2013-02-11 21:51:45 +01:00
• 854fbd7ba2 Add ecdh_read_params(). Manuel Pégourié-Gonnard 2013-02-11 20:28:55 +01:00
• 13724765b2 Add ecdh_make_server_params (untested yet) Manuel Pégourié-Gonnard 2013-02-10 15:01:54 +01:00
• 63533e44c2 Create ecdh_context structure Manuel Pégourié-Gonnard 2013-02-10 14:21:04 +01:00
• 98f51815d6 Fix ecp_tls_read_point's signature Manuel Pégourié-Gonnard 2013-02-10 13:38:29 +01:00
• 7c145c6418 Fix ecp_tls_read_group's signature Manuel Pégourié-Gonnard 2013-02-10 13:20:52 +01:00
• 8c16f96259 Add a few tests for ecp_tls_read_point Manuel Pégourié-Gonnard 2013-02-10 13:00:20 +01:00
• 46106a9d75 Add tests for (and fix bug in) ecp_tls_write_group Manuel Pégourié-Gonnard 2013-02-10 12:51:17 +01:00
• 420f1eb675 Fix ecp_tls_write_point's signature Manuel Pégourié-Gonnard 2013-02-10 12:22:46 +01:00