Paul Bakker
|
93c32b21b3
|
Allow ssl_client to pad request to SSL_MAX_CONTENT_LEN
|
2014-04-25 16:58:12 +02:00 |
|
Paul Bakker
|
61885c7f7f
|
Fix false reject in padding check in ssl_decrypt_buf() for CBC ciphersuites
In case full SSL frames arrived, they were rejected because an overly
strict padding check.
|
2014-04-25 12:59:51 +02:00 |
|
Paul Bakker
|
fdba46885b
|
cert_write app should use subject of issuer certificate as issuer of cert
|
2014-04-25 11:48:35 +02:00 |
|
Paul Bakker
|
4ffcd2f9c3
|
Typo in PKCS#11 module
|
2014-04-25 11:44:12 +02:00 |
|
Paul Bakker
|
10a9dd35ea
|
Typo in POLARSSL_PLATFORM_STD_FPRINTF in platform.c
|
2014-04-25 11:27:16 +02:00 |
|
Paul Bakker
|
088c5c5f18
|
POLARSSL_CONFIG_OPTIONS has been removed. Values are set individually
For the Platform module this requires the introduction of
POLARSSL_PLATFORM_NO_STD_FUNCTIONS to allow not performing the default
assignments.
|
2014-04-25 11:11:10 +02:00 |
|
Paul Bakker
|
1f69a93ab1
|
Move configs to 'configs/' and activate-config.pl should be called from root
|
2014-04-25 10:04:49 +02:00 |
|
Paul Bakker
|
0767e67d17
|
Add support for 'emailAddress' to x509_string_to_names()
|
2014-04-18 14:11:37 +02:00 |
|
Paul Bakker
|
e92f73d73b
|
Updated ChangeLog
|
2014-04-18 14:08:26 +02:00 |
|
Paul Bakker
|
c70e425a73
|
Only iterate over actual certificates in ssl_write_certificate_request()
|
2014-04-18 13:50:19 +02:00 |
|
Paul Bakker
|
f4cf80b86f
|
Restructured pk_parse_key_pkcs8_encrypted_der() to prevent unreachable code
|
2014-04-17 17:24:29 +02:00 |
|
Paul Bakker
|
03b6a46353
|
Properly comment two defines in config.h
|
2014-04-17 17:24:28 +02:00 |
|
Paul Bakker
|
3ad3aa3bc0
|
Travis configuration file
|
2014-04-17 17:24:27 +02:00 |
|
Paul Bakker
|
8a0c0a9ed9
|
Check additional return values in some test cases
|
2014-04-17 17:24:23 +02:00 |
|
Paul Bakker
|
94b916c7b5
|
Split assignment and assert check into seperate lines in tests
|
2014-04-17 16:07:20 +02:00 |
|
Paul Bakker
|
dd0aae92e0
|
Replaced strcpy() with strncpy() in tests suites
|
2014-04-17 16:06:37 +02:00 |
|
Paul Bakker
|
b6487dade9
|
Fixed result for test case in test_suite_x509parse
|
2014-04-17 16:04:33 +02:00 |
|
Paul Bakker
|
df71dd1618
|
Cleaner initialization (values did not matter, but were uninitialized)
|
2014-04-17 16:03:48 +02:00 |
|
Paul Bakker
|
030decdb4e
|
Actually increment the loop counter to quit in ssl_fork_server
|
2014-04-17 16:03:23 +02:00 |
|
Paul Bakker
|
0c22610693
|
Cleaned up location of init and free for some programs to prevent memory
leaks on incorrect arguments
|
2014-04-17 16:02:36 +02:00 |
|
Paul Bakker
|
cbe3d0d5cc
|
Added return value checking for correctness in programs
|
2014-04-17 16:00:59 +02:00 |
|
Paul Bakker
|
4f42c11846
|
Remove arbitrary maximum length for cipher_list and content length
|
2014-04-17 15:37:39 +02:00 |
|
Paul Bakker
|
d893aef867
|
Force default value to curve parameter
|
2014-04-17 14:45:34 +02:00 |
|
Paul Bakker
|
93389cc620
|
Remove const indicator
|
2014-04-17 14:44:38 +02:00 |
|
Paul Bakker
|
874bd64b28
|
Check setsockopt() return value in net_bind()
|
2014-04-17 12:43:05 +02:00 |
|
Paul Bakker
|
3d8fb63e11
|
Added missing MPI_CHK around mpi functions
|
2014-04-17 12:42:41 +02:00 |
|
Paul Bakker
|
a9c16d2825
|
Removed unused cur variable in x509_string_to_names()
|
2014-04-17 12:42:18 +02:00 |
|
Paul Bakker
|
0e4f9115dc
|
Fix iteration counter
|
2014-04-17 12:39:05 +02:00 |
|
Paul Bakker
|
784b04ff9a
|
Prepared for version 1.3.6
|
2014-04-11 15:33:59 +02:00 |
|
Paul Bakker
|
d8b0c5ef01
|
Fixed typo
|
2014-04-11 15:31:33 +02:00 |
|
Paul Bakker
|
d2c2c1c46b
|
Doxygen typo in ripemd160.h
|
2014-04-11 15:28:52 +02:00 |
|
Manuel Pégourié-Gonnard
|
9655e4597a
|
Reject certificates with times not in UTC
|
2014-04-11 13:59:36 +02:00 |
|
Manuel Pégourié-Gonnard
|
0776a43788
|
Use UTC to heck certificate validity
|
2014-04-11 13:59:31 +02:00 |
|
Paul Bakker
|
52c5af7d2d
|
Merge support for verifying the extendedKeyUsage extension in X.509
|
2014-04-11 13:58:57 +02:00 |
|
Manuel Pégourié-Gonnard
|
78848375c0
|
Declare EC constants as 'const'
|
2014-04-11 13:58:41 +02:00 |
|
Paul Bakker
|
1630058dde
|
Potential buffer overwrite in pem_write_buffer() fixed
Length indication when given a too small buffer was off.
Added regression test in test_suite_pem to detect this.
|
2014-04-11 13:58:05 +02:00 |
|
Manuel Pégourié-Gonnard
|
b7fff0f9c6
|
Update Changelog for extendedKeyUsage
|
2014-04-11 11:32:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
add05d7125
|
Fix some dependency declarations in X.509 tests
|
2014-04-11 11:12:40 +02:00 |
|
Manuel Pégourié-Gonnard
|
0408fd1fbb
|
Add extendedKeyUsage checking in SSL modules
|
2014-04-11 11:09:09 +02:00 |
|
Manuel Pégourié-Gonnard
|
7afb8a0dca
|
Add x509_crt_check_extended_key_usage()
|
2014-04-11 11:09:00 +02:00 |
|
Paul Bakker
|
d6ad8e949b
|
Make ssl_check_cert_usage() dependent on POLARSSL_X509_CRT_PARSE_C
|
2014-04-09 17:24:14 +02:00 |
|
Paul Bakker
|
5c986f5244
|
Make test suite checks dependent on POLARSSL_X509_CHECK_KEY_USAGE
|
2014-04-09 16:58:51 +02:00 |
|
Paul Bakker
|
a77de8c841
|
Prevent warnings in ssl_check_cert_usage() if keyUsage checks are off
|
2014-04-09 16:39:35 +02:00 |
|
Paul Bakker
|
59366213cb
|
Updated ChangeLog for keyUsage merge
|
2014-04-09 15:55:20 +02:00 |
|
Paul Bakker
|
043a2e26d0
|
Merge verification of the keyUsage extension in X.509 certificates
|
2014-04-09 15:55:08 +02:00 |
|
Paul Bakker
|
02ff5ce594
|
Fixed typo
|
2014-04-09 15:53:09 +02:00 |
|
Manuel Pégourié-Gonnard
|
a9db85df73
|
Add tests for keyUsage with client auth
|
2014-04-09 15:50:58 +02:00 |
|
Manuel Pégourié-Gonnard
|
490047cc44
|
Code cosmetics
|
2014-04-09 15:50:58 +02:00 |
|
Manuel Pégourié-Gonnard
|
312010e6e9
|
Factor common parent checking code
|
2014-04-09 15:50:58 +02:00 |
|
Manuel Pégourié-Gonnard
|
f93a3c4335
|
Check the CA bit on trusted CAs too
|
2014-04-09 15:50:58 +02:00 |
|