mbedtls

Author	SHA1	Message	Date
Janos Follath	5a1c0e7162	Improve Changelog	2017-06-16 12:27:47 +01:00
Hanno Becker	371f31c281	Adapt ChangeLog	2017-06-09 16:57:47 +01:00
Manuel Pégourié-Gonnard	4a42f3c405	Merge remote-tracking branch 'restricted/iotssl-1398' into development-restricted * restricted/iotssl-1398: Add ChangeLog entry Ensure application data records are not kept when fully processed Add hard assertion to mbedtls_ssl_read_record_layer Fix mbedtls_ssl_read Simplify retaining of messages for future processing	2017-06-09 15:02:40 +02:00
Manuel Pégourié-Gonnard	a8e5a4730d	Merge near-duplicate ChangeLog entries As agreed with Gilles on the PR discussion page	2017-06-09 14:46:50 +02:00
Hanno Becker	b624b85b04	Adapt ChangeLog	2017-06-09 13:29:53 +01:00
Hanno Becker	bf4c2e3f79	Add ChangeLog entry	2017-06-09 11:28:45 +01:00
Manuel Pégourié-Gonnard	740665e43b	ChangeLog cosmetics	2017-06-08 20:37:30 +02:00
Manuel Pégourié-Gonnard	b86b143030	Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-restricted' into development-restricted * restricted/iotssl-1138-rsa-padding-check-restricted: RSA PKCS1v1.5 verification: check padding length	2017-06-08 20:31:06 +02:00
Manuel Pégourié-Gonnard	a0bf6ecfc3	Merge remote-tracking branch 'restricted/IOTSSL-1366/development-restricted' into development-restricted * restricted/IOTSSL-1366/development-restricted: More length checks in RSA PKCS1v15 verify More length checks in RSA PKCS1v15 verify	2017-06-08 20:24:29 +02:00
Manuel Pégourié-Gonnard	db108ac944	Merge remote-tracking branch 'hanno/mpi_read_file_underflow' into development * hanno/mpi_read_file_underflow: Fix potential stack underflow in mpi_read_file.	2017-06-08 19:48:03 +02:00
Manuel Pégourié-Gonnard	1178ac5e77	Merge remote-tracking branch 'hanno/sliding_exponentiation' into development * hanno/sliding_exponentiation: Adapt ChangeLog Abort modular inversion when modulus is one. Correct sign in modular exponentiation algorithm.	2017-06-08 19:46:30 +02:00
Manuel Pégourié-Gonnard	c44c3c288d	Merge remote-tracking branch 'janos/iotssl-1156-ecdsa-sample-and-doc-clarification' into development * janos/iotssl-1156-ecdsa-sample-and-doc-clarification: Clarify the use of ECDSA API	2017-06-08 10:16:54 +02:00
Hanno Becker	39ae8cd207	Fix implementation of VERIFY_OPTIONAL verification mode This commit changes the behaviour of mbedtls_ssl_parse_certificate to make the two authentication modes MBEDTLS_SSL_VERIFY_REQUIRED and MBEDTLS_SSL_VERIFY_OPTIONAL be in the following relationship: Mode == MBEDTLS_SSL_VERIFY_REQUIRED <=> Mode == MBEDTLS_SSL_VERIFY_OPTIONAL + check verify result Also, it changes the behaviour to perform the certificate chain verification even if the trusted CA chain is empty. Previously, the function failed in this case, even when using optional verification, which was brought up in #864.	2017-06-07 11:13:19 +01:00
Manuel Pégourié-Gonnard	ddc6e52cc1	Merge remote-tracking branch 'gilles/iotssl-1223/development' into development * gilles/iotssl-1223/development: Fix FALLBACK_SCSV parsing	2017-06-06 20:11:36 +02:00
Manuel Pégourié-Gonnard	383a118338	Merge remote-tracking branch 'gilles/IOTSSL-1330/development' into development * gilles/IOTSSL-1330/development: Changelog entry for the bug fixes SSLv3: when refusing renegotiation, stop processing Ignore failures when sending fatal alerts Cleaned up double variable declaration Code portability fix Added changelog entry Send TLS alerts in many more cases Skip all non-executables in run-test-suites.pl SSL tests: server requires auth, client has no certificate Balanced braces across preprocessor conditionals Support setting the ports on the command line	2017-06-06 19:22:41 +02:00
Gilles Peskine	5d2511c4d4	SHA-1 deprecation: allow it in key exchange By default, keep allowing SHA-1 in key exchange signatures. Disabling it causes compatibility issues, especially with clients that use TLS1.2 but don't send the signature_algorithms extension. SHA-1 is forbidden in certificates by default, since it's vulnerable to offline collision-based attacks.	2017-06-06 18:44:14 +02:00
Gilles Peskine	5e79cb3662	Remove SHA-1 in TLS by default Default to forbidding the use of SHA-1 in TLS where it is unsafe: for certificate signing, and as the signature hash algorithm for the TLS 1.2 handshake signature. SHA-1 remains allowed in HMAC-SHA-1 in the XXX_SHA ciphersuites and in the PRF for TLS <= 1.1. For easy backward compatibility for use in controlled environments, turn on the MBEDTLS_TLS_DEFAULT_ALLOW_SHA1 compiled-time option.	2017-06-06 18:44:13 +02:00
Manuel Pégourié-Gonnard	23b33f8663	Merge remote-tracking branch 'hanno/sig_hash_compatibility' into development * hanno/sig_hash_compatibility: Improve documentation Split long lines Remember suitable hash function for any signature algorithm. Introduce macros and functions to characterize certain ciphersuites.	2017-06-06 18:14:57 +02:00
Hanno Becker	eccf60caab	Adapt ChangeLog	2017-06-05 15:19:01 +01:00
Andres AG	51a7ae1353	Add missing ret code checks in PEM module Add missing return code checks in the functions pem_des_decrypt(), pem_3des_decrypt() and pem_aes_decrypt() so that the calling function mbedtls_pem_read_buffer() is notified of errors reported by the crypto primitives AES, DES and 3DES.	2017-05-30 16:40:36 +01:00
Gilles Peskine	d50177fdf3	Fix FALLBACK_SCSV parsing Fixed a bug in ssl_srv.c when parsing TLS_FALLBACK_SCSV in the ciphersuite list that caused it to miss it sometimes. Reported by Hugo Leisink as issue #810. Fix initially by @andreasag01; this commit isolates the bug fix and adds a non-regression test.	2017-05-16 17:53:03 +02:00
Simon Butcher	9f77017a8d	Updated version number to 2.5.0	2017-05-16 10:22:37 +01:00
Andres AG	f5bf7189d3	Change return type of AES decrypt and encrypt This patch modifies the following 2 functions in the AES module to change the return type from void to int: * mbedtls_aes_encrypt() -> mbedtls_internal_aes_encrypt() * mbedtls_aes_decrypt() -> mbedtls_internal_aes_decrypt() This change is necessary to allow users of MBEDTLS_AES_ALT, MBEDTLS_AES_DECRYPT_ALT and MBEDTLS_AES_ENCRYPT_ALT to return an error code when replacing the default with their own implementation, e.g. a hardware crypto accelerator.	2017-05-16 10:22:37 +01:00
Janos Follath	2850cdaed9	Add Changelog entry for RSA exponent blinding	2017-05-16 10:22:37 +01:00
Janos Follath	c66e5596ba	Add Changelog entry for CA list suppression	2017-05-16 10:22:37 +01:00
Andres Amaya Garcia	46fe17ecf2	Remove obsolete macros from compat-1.3.h	2017-05-16 10:22:37 +01:00
Gilles Peskine	4a7f6a0ddb	RSA: wipe stack buffers The RSA private key functions rsa_rsaes_pkcs1_v15_decrypt and rsa_rsaes_oaep_decrypt put sensitive data (decryption results) on the stack. Wipe it before returning. Thanks to Laurent Simon for reporting this issue.	2017-05-16 10:22:37 +01:00
Simon Butcher	77da95357f	Add fix for #667 to ChangeLog	2017-05-16 10:22:37 +01:00
Simon Butcher	4775e83337	Fix ChangeLog Fixes the ChangeLog following the merge of the ECP HW acceleration interfaces in `aab9efb`.	2017-05-16 10:22:37 +01:00
Janos Follath	45182a0065	Add Changelog entry for RSA exponent blinding	2017-05-16 10:22:37 +01:00
Janos Follath	7a8a090f55	Add Changelog entry for CA list suppression	2017-05-16 10:22:37 +01:00
Andres Amaya Garcia	75fdf631fd	Remove obsolete macros from compat-1.3.h	2017-05-16 10:22:37 +01:00
Hanno Becker	7e5437a972	Remember suitable hash function for any signature algorithm. This commit changes `ssl_parse_signature_algorithms_ext` to remember one suitable ( := supported by client and by our config ) hash algorithm per signature algorithm. It also modifies the ciphersuite checking function `ssl_ciphersuite_match` to refuse a suite if there is no suitable hash algorithm. Finally, it adds the corresponding entry to the ChangeLog.	2017-05-15 11:50:11 +01:00
Janos Follath	7e2406f6f0	Add Changelog entry	2017-05-11 22:42:14 +01:00
Manuel Pégourié-Gonnard	c1380de887	RSA PKCS1v1.5 verification: check padding length The test case was generated by modifying our signature code so that it produces a 7-byte long padding (which also means garbage at the end, so it is essential in to check that the error that is detected first is indeed the padding rather than the final length check).	2017-05-11 13:10:13 +02:00
Gilles Peskine	3df98f50a9	Changelog entry for the bug fixes	2017-05-10 17:47:40 +02:00
Hanno Becker	072e806a07	Adapt ChangeLog	2017-05-09 10:47:49 +01:00
Hanno Becker	b2034b7785	Fix potential stack underflow in mpi_read_file. When provided with an empty line, mpi_read_file causes a numeric underflow resulting in a stack underflow. This commit fixes this and adds some documentation to mpi_read_file.	2017-05-09 10:29:06 +01:00
Hanno Becker	a6ed9c5429	Backup errno in net_would_block Safe and restore the value of errno in net_would_block to be sure it's not affected by the guarding call to fcntl. Fixes #845.	2017-05-04 13:53:26 +01:00
Gilles Peskine	0e17eb05f8	More length checks in RSA PKCS1v15 verify Tighten ASN.1 parsing of RSA PKCS#1 v1.5 signatures, to avoid a potential Bleichenbacher-style attack.	2017-05-03 18:56:10 +02:00
Gilles Peskine	36091fe3ef	Added changelog entry	2017-05-03 16:55:03 +02:00
Simon Butcher	b65c2be5f1	Updated version number to 2.4.2 for release	2017-03-10 18:50:44 +00:00
Janos Follath	0a5154b8a1	Clarify the use of ECDSA API In the ecdsa.c sample application we don't use hashing, we use ecdsa directly on a buffer containing plain text. Although the text explains that it should be the message hash it still can be confusing. Any misunderstandings here are potentially very dangerous, because ECDSA truncates the message hash if necessary and this can lead to trivial signature forgeries if the API is misused and the message is passed directly to the function without hashing. This commit adds a hash computation step to the ecdsa.c sample application and clarification to the doxygen documentation of the ECDSA functions involved.	2017-03-10 11:31:41 +00:00
Simon Butcher	81cf88f6d7	Added missing credit to ChangeLog for #555	2017-03-07 19:35:49 +00:00
Simon Butcher	8b987500f2	Corrected attibution in Changelog	2017-03-07 12:37:14 +00:00
Andres AG	d1cc7f6f34	Fix buffer overflow in mbedtls_mpi_write_string() Fix a buffer overflow when writting a string representation of an MPI number to a buffer in hexadecimal. The problem occurs because hex digits are written in pairs and this is not accounted for in the calculation of the required buffer size when the number of digits is odd.	2017-03-02 21:34:21 +00:00
Ron Eldor	12e0b800da	Fix resource leak when using mutex and ssl_cookie When using ssl_cookie with MBEDTLS_THREADING_C, fix a resource leak caused by initiating a mutex in mbedtls_ssl_cookie_free instead of freeing it. Raised and fix suggested by lan Gillingham in the mbed TLS forum Tracked in #771	2017-03-02 12:26:11 +00:00
Simon Butcher	28d9fe031d	Fix mistake in ChangeLog from file merge	2017-03-02 12:05:54 +00:00
Ron Eldor	04965edaa8	Fix resource leak when using mutex and ssl_cookie When using ssl_cookie with MBEDTLS_THREADING_C, fix a resource leak caused by initiating a mutex in mbedtls_ssl_cookie_free instead of freeing it. Raised and fix suggested by lan Gillingham in the mbed TLS forum Tracked in #771	2017-03-02 11:58:15 +00:00
Simon Butcher	956c58ffa9	Add fix and credit for #742 to the ChangeLog	2017-03-02 09:20:53 +00:00
Simon Butcher	065cede476	Add fix and credit for #742 to the ChangeLog	2017-03-02 09:18:09 +00:00
Simon Butcher	71e9d58dc2	Clarify ChangeLog for #569	2017-02-28 18:47:27 +00:00
Janos Follath	7dadc2f259	ECP: Prevent freeing a buffer on stack The function ecp_mod_koblitz computed the space for the result of a multiplication optimally for that specific case, but unfortunately the function mbedtls_mpi_mul_mpi performs a generic, suboptimal calculation and needs one more limb for the result. Since the result's buffer is on the stack, the best case scenario is that the program stops. This only happened on 64 bit platforms. Fixes #569	2017-02-28 18:41:39 +00:00
Simon Butcher	d02dc14c94	Fix credit in ChangeLog for #722	2017-02-28 16:36:22 +00:00
Andres AG	5708dcb368	Fix memory leak in mbedtls_x509_crl_parse() The memory leak call was caused by missing calls to mbedtls_pem_free() when a MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT error was encountered.	2017-02-28 14:51:31 +00:00
Janos Follath	87c980749d	Fix buffer overread in mbedtls_x509_get_time() A heap overread might happen when parsing malformed certificates. Reported by Peng Li and Yueh-Hsun Lin. Refactoring the parsing fixes the problem. This commit applies the relevant part of the OpenVPN contribution applied to mbed TLS 1.3 in commit 17da9dd82931abdf054a01c466bce45e7d12b742.	2017-02-28 14:23:12 +00:00
Simon Butcher	fc794ff2b7	Merge branch 'iotssl-1071-ca-flags' Fixes a regression introduced by an earlier commit that modified x509_crt_verify_top() to ensure that valid certificates that are after past or future valid in the chain are processed. However the change introduced a change in behaviour that caused the verification flags MBEDTLS_X509_BADCERT_EXPIRED and MBEDTLS_BADCERT_FUTURE to always be set whenever there is a failure in the verification regardless of the cause. The fix maintains both behaviours: * Ensure that valid certificates after future and past are verified * Ensure that the correct verification flags are set.	2017-02-27 19:06:05 +00:00
Simon Butcher	0278a38f10	Merge branch 'iotssl-1077-dos-crl' Modifies the function mbedtls_x509_crl_parse() to ensure that a CRL in PEM format with trailing characters after the footer does not result in the execution of an infinite loop.	2017-02-26 01:16:02 +00:00
Simon Butcher	0621b1fbb0	Add detail to ChangeLog for SLOTH fix	2017-02-15 23:31:07 +02:00
Andres AG	4623d83c6f	Fix integer overflow mbedtls_base64_decode() Fix potential integer overflows in the function mbedtls_base64_decode(). This overflow would mainly be exploitable in 32-bit systems and could cause buffer bound checks to be bypassed.	2017-02-15 23:31:07 +02:00
Andres Amaya Garcia	6a54336897	Fix integer overflows in buffer bound checks Fix potential integer overflows in the following functions: * mbedtls_md2_update() to be bypassed and cause * mbedtls_cipher_update() * mbedtls_ctr_drbg_reseed() This overflows would mainly be exploitable in 32-bit systems and could cause buffer bound checks to be bypassed.	2017-02-15 23:31:07 +02:00
Janos Follath	182013faf4	Prevent SLOTH attacks	2017-02-15 23:29:32 +02:00
Simon Butcher	a333b3c194	Add credit to Changelog for #562	2017-02-15 23:28:48 +02:00
Simon Butcher	d57c8f0048	Clarify fix for #673 in Changelog Clarified fix, and added credit.	2017-02-15 23:27:58 +02:00
Andres AG	2196c7f81c	Fix renegotiation at incorrect times in DTLS Fix an incorrect condition in ssl_check_ctr_renegotiate() that compared 64 bits of record counter instead of 48 bits as described in RFC 6347 Section 4.3.1. This would cause the function's return value to be occasionally incorrect and the renegotiation routines to be triggered at unexpected times.	2017-02-15 23:26:35 +02:00
Janos Follath	4c006cdb1c	Update library version number to 2.4.1	2017-02-15 22:55:55 +02:00
Janos Follath	5da3a6f92f	Update CMAC test vectors.	2017-02-15 22:55:30 +02:00
Andres AG	c0db511820	Fix unused variable/function compilation warnings This PR fixes a number of unused variable/function compilation warnings that arise when using a config.h that does not define the macro MBEDTLS_PEM_PARSE_C.	2017-02-15 22:54:42 +02:00
Andres AG	d15423446b	Fix redefinition of macro ssl_set_bio Fix redefinition of macro ssl_set_bio to undefined symbol mbedtls_ssl_set_bio_timeout in compat-1.3.h.	2017-02-15 22:51:24 +02:00
Simon Butcher	1d4db5b7b5	Merge 'iotssl-1099-incorrect-renego-dtls' Fix an incorrect condition in ssl_check_ctr_renegotiate() that compared 64 bits of record counter instead of 48 bits as described in RFC 6347 Section 4.3.1. This would cause the function's return value to be occasionally incorrect and the renegotiation routines to be triggered at unexpected times.	2017-02-02 23:47:08 +00:00
Simon Butcher	d9440b15e6	Add credit to Changelog for #562	2017-02-02 16:17:37 +00:00
Simon Butcher	d934b5371a	Merge 'iotssl-952-tfirmware-warnings' This PR fixes a number of unused variable/function compilation warnings that arise when using a config.h that does not define the macro MBEDTLS_PEM_PARSE_C.	2017-02-02 16:08:29 +00:00
Simon Butcher	1bef2266e5	Clarify fix for #673 in Changelog Clarified fix, and added credit.	2017-02-02 13:08:37 +00:00
Simon Butcher	4d1e104bc1	Merge iotssl-1079-macro-redefinition-warning Fix redefinition of macro ssl_set_bio to undefined symbol mbedtls_ssl_set_bio_timeout in compat-1.3.h.	2017-02-02 12:19:04 +00:00
Andres AG	d16506624a	Fix verify out flags from x509_crt_verify_top() This change fixes a regression introduced by an earlier commit that modified x509_crt_verify_top() to ensure that valid certificates that are after past or future valid in the chain are processed. However the change introduced a change in behaviour that caused the verification flags MBEDTLS_X509_BADCERT_EXPIRED and MBEDTLS_BADCERT_FUTURE to always be set whenever there is a failure in the verification regardless of the cause. The fix maintains both behaviours: * Ensure that valid certificates after future and past are verified * Ensure that the correct verification flags are set. To do so, a temporary pointer to the first future or past valid certificate is maintained while traversing the chain. If a truly valid certificate is found then that one is used, otherwise if no valid certificate is found and the end of the chain is reached, the program reverts back to using the future or past valid certificate.	2017-01-20 13:52:01 +00:00
Andres AG	939954c0b0	Fix CRL parsing to avoid infinite loop This patch modifies the function mbedtls_x509_crl_parse() to ensure that a CRL in PEM format with trailing characters after the footer does not result in the execution of an infinite loop.	2017-01-19 16:43:48 +00:00
Andres AG	18c5c59b5b	Fix renegotiation at incorrect times in DTLS Fix an incorrect condition in ssl_check_ctr_renegotiate() that compared 64 bits of record counter instead of 48 bits as described in RFC 6347 Section 4.3.1. This would cause the function's return value to be occasionally incorrect and the renegotiation routines to be triggered at unexpected times.	2017-01-19 16:30:15 +00:00
Janos Follath	1808dc01bd	Update library version number to 2.4.1	2016-12-13 16:00:52 +00:00
Janos Follath	cd13bd2819	Update CMAC test vectors.	2016-12-13 16:00:52 +00:00
Andres AG	0368cb7f1c	Fix unused variable/function compilation warnings This PR fixes a number of unused variable/function compilation warnings that arise when using a config.h that does not define the macro MBEDTLS_PEM_PARSE_C.	2016-12-07 16:15:32 +00:00
Andres AG	ee7157e735	Fix redefinition of macro ssl_set_bio Fix redefinition of macro ssl_set_bio to undefined symbol mbedtls_ssl_set_bio_timeout in compat-1.3.h.	2016-12-07 10:27:00 +00:00
Andres AG	9c94b6951c	Add tests for overreads in pem_read_buffer()	2016-11-21 11:03:40 +00:00
Andres AG	703990b839	Fix buffer overreads in mbedtls_pem_read_buffer()	2016-10-24 13:00:37 +01:00
Simon Butcher	19dbd41c5b	Update Changelog version number to 2.4.0	2016-10-16 19:35:49 +01:00
Simon Butcher	ef8fa012ea	Tidied up style and phrasing of ChangeLog	2016-10-16 00:44:08 +01:00
Janos Follath	240f185b79	Update ChangeLog for MBEDTLS_SELF_TEST fix	2016-10-14 15:23:21 +01:00
Simon Butcher	8e00410402	Merge fix for AEAD Random IVs	2016-10-14 00:48:33 +01:00
Simon Butcher	9800a058ae	Merge branch 'development'	2016-10-13 17:25:56 +01:00
Simon Butcher	99000142cb	Merge fix for IE Certificate Compatibility	2016-10-13 17:21:01 +01:00
Simon Butcher	2bd0fbaad0	Update to Changelog for #626	2016-10-13 16:29:56 +01:00
Simon Butcher	488c08c00b	Merge branch fixing date validity in X.509	2016-10-13 16:13:09 +01:00
Simon Butcher	59bffa2df0	Update Changelog for X.509 unrecognised field fix	2016-10-13 15:55:56 +01:00
Simon Butcher	511526720c	Merge fix for branch SSL client overread	2016-10-13 15:39:09 +01:00
Simon Butcher	b81496b9b5	Update and clean up Changelog for #622	2016-10-13 14:03:37 +01:00
Simon Butcher	d05192501b	Added credit to Changelog for fix #558	2016-10-13 13:54:48 +01:00
Janos Follath	e5dc202469	Restore P>Q in RSA key generation (#558 ) The PKCS#1 standard says nothing about the relation between P and Q but many libraries guarantee P>Q and mbed TLS did so too in earlier versions. This commit restores this behaviour.	2016-10-13 13:54:48 +01:00
Simon Butcher	468a84c7df	Clarified Changelog for fix #602	2016-10-13 13:54:48 +01:00
Andres AG	314d8a8400	Fix documentation for mbedtls_gcm_finish() Fix implementation and documentation missmatch for the function arguments to mbedtls_gcm_finish(). Also, removed redundant if condition that always evaluates to true.	2016-10-13 13:54:47 +01:00
Simon Butcher	9af0280aa5	Updated Changelog for fix #599	2016-10-13 13:54:14 +01:00
Andres AG	410d3dd3c7	Fix 1 byte overread in mbedtls_asn1_get_int()	2016-10-13 13:54:14 +01:00
Simon Butcher	4f85907b5a	Revise Changelog to clarify and add credit	2016-10-13 13:53:33 +01:00
Simon Butcher	b93fdddf67	Revise Changelog to clarify and add credit	2016-10-13 13:53:12 +01:00
Simon Butcher	dcb9892939	Update Changelog for fixes to X.509 sample apps	2016-10-13 13:52:39 +01:00
Simon Butcher	eb02fb5ad4	Update Changelog for fix #559	2016-10-13 13:52:00 +01:00
Simon Butcher	e5796c1fbc	Add CMAC to ChangeLog	2016-10-13 13:51:12 +01:00
Janos Follath	0be2b01a6b	Add safety check to sample mutex implementation Due to inconsistent freeing strategy in pkparse.c the sample mutex implementation in threading.c could lead to undefined behaviour by destroying the same mutex several times. This fix prevents mutexes from being destroyed several times in the sample threading implementation.	2016-10-13 13:51:07 +01:00
Andres AG	94d73b0b0a	Add config macro for min bytes hw entropy	2016-10-13 13:48:48 +01:00
Andres AG	ba66e8958d	Add new config.h that does not need entropy source	2016-10-13 13:48:48 +01:00
Andres AG	3616f6f261	Rename net.{c,h} to net_sockets.{c,h} The library/net.c and its corresponding include/mbedtls/net.h file are renamed to library/net_sockets.c and include/mbedtls/net_sockets.h respectively. This is to avoid naming collisions in projects which also have files with the common name 'net'.	2016-10-13 13:48:48 +01:00
Simon Butcher	77d779e8bb	Update for ChangeLog for fixes for cert_app	2016-10-13 13:48:48 +01:00
Simon Butcher	1c8b33ad19	Merge branch 'development'	2016-10-13 13:40:41 +01:00
Simon Butcher	4d69ecd9cb	Added credit to Changelog for fix #558	2016-10-13 00:32:28 +01:00
Janos Follath	ef44178474	Restore P>Q in RSA key generation (#558 ) The PKCS#1 standard says nothing about the relation between P and Q but many libraries guarantee P>Q and mbed TLS did so too in earlier versions. This commit restores this behaviour.	2016-10-13 00:25:07 +01:00
Simon Butcher	f6e3b9e8b2	Clarified Changelog for fix #602	2016-10-12 19:52:38 +01:00
Andres AG	821da84ff9	Fix documentation for mbedtls_gcm_finish() Fix implementation and documentation missmatch for the function arguments to mbedtls_gcm_finish(). Also, removed redundant if condition that always evaluates to true.	2016-10-12 19:49:41 +01:00
Simon Butcher	3a5e070982	Updated Changelog for fix #599	2016-10-12 16:46:48 +01:00
Andres AG	776a6fcd1a	Fix 1 byte overread in mbedtls_asn1_get_int()	2016-10-12 16:43:37 +01:00
Janos Follath	b48c8ac45d	Add safety check to sample mutex implementation Due to inconsistent freeing strategy in pkparse.c the sample mutex implementation in threading.c could lead to undefined behaviour by destroying the same mutex several times. This fix prevents mutexes from being destroyed several times in the sample threading implementation.	2016-10-12 00:36:31 +01:00
Janos Follath	1aae658d76	Add safety check to sample mutex implementation Due to inconsistent freeing strategy in pkparse.c the sample mutex implementation in threading.c could lead to undefined behaviour by destroying the same mutex several times. This fix prevents mutexes from being destroyed several times in the sample threading implementation.	2016-10-12 00:32:17 +01:00
Simon Butcher	5a74d26006	Added credit to Changelog for X.509 DER bounds fix	2016-10-11 14:09:10 +01:00
Andres AG	e0af995f12	Add test for bounds in X509 DER write funcs	2016-10-11 14:07:48 +01:00
Andres AG	60dbc93831	Add missing bounds check in X509 DER write funcs This patch adds checks in both mbedtls_x509write_crt_der and mbedtls_x509write_csr_der before the signature is written to buf using memcpy().	2016-10-11 14:07:48 +01:00
Simon Butcher	851ae29a5d	Revise Changelog to clarify and add credit	2016-10-11 12:28:04 +01:00
Simon Butcher	b98eaff408	Revise Changelog to clarify and add credit	2016-10-11 10:13:52 +01:00
Simon Butcher	df6c3e8e48	Merge branch 'iotssl-825-double-free-quickfix' Conflicts: ChangeLog	2016-10-11 00:07:14 +01:00
Simon Butcher	f77309cb35	Update Changelog for fixes to X.509 sample apps	2016-10-10 09:05:26 +01:00
Simon Butcher	f73fd701c0	Update Changelog for fix #559	2016-10-07 11:17:44 +01:00
Simon Butcher	21c54816f5	Add CMAC to ChangeLog	2016-10-05 14:19:18 +01:00
Janos Follath	5437a75b15	Add safety check to sample mutex implementation Due to inconsistent freeing strategy in pkparse.c the sample mutex implementation in threading.c could lead to undefined behaviour by destroying the same mutex several times. This fix prevents mutexes from being destroyed several times in the sample threading implementation.	2016-09-30 09:29:55 +01:00
Andres AG	4b76aecaf3	Add check for validity of date in x509_get_time()	2016-09-28 14:32:54 +01:00
Andres AG	5a87c9375d	Fix overread when verifying SERVER_HELLO in DTLS	2016-09-28 14:26:57 +01:00
Andres AG	7abc974ec4	Add config macro for min bytes hw entropy	2016-09-27 14:25:31 +01:00
Andres AG	f84f8926a7	Add new config.h that does not need entropy source	2016-09-27 14:25:31 +01:00
Andres AG	788aa4a812	Rename net.{c,h} to net_sockets.{c,h} The library/net.c and its corresponding include/mbedtls/net.h file are renamed to library/net_sockets.c and include/mbedtls/net_sockets.h respectively. This is to avoid naming collisions in projects which also have files with the common name 'net'.	2016-09-26 23:23:52 +01:00
Simon Butcher	d43fb9598a	Update for ChangeLog for fixes for cert_app	2016-09-26 20:48:56 +01:00
Andres AG	4bdbe09f90	Fix sig->tag update in mbedtls_x509_get_sig()	2016-09-19 17:09:45 +01:00
Andres AG	f9113194af	Allow the entry_name size to be set in config.h Allow the size of the entry_name character array in x509_crt.c to be configurable through a macro in config.h. entry_name holds a path/filename string. The macro introduced in MBEDTLS_X509_MAX_FILE_PATH_LEN.	2016-09-16 11:42:35 +01:00
Simon Butcher	c0d76b8255	Update ChangeLog for fix for #541 - out-of-tree CMake builds	2016-09-07 17:25:16 +03:00
Simon Butcher	cad6e93e19	Update to ChangeLog for bug #428	2016-09-05 01:48:31 +03:00
Simon Butcher	5908bccfc0	Updated ChangeLog for PR#565 Updated ChangeLog for pull request #565 - Remove unused consts from oid lists	2016-09-04 15:14:38 +01:00
Simon Butcher	327d66520e	Update ChangeLog for fix to crypt_and_hash #441	2016-09-02 21:53:50 +01:00
Simon Butcher	cf8c1f4ddb	Update ChangeLog to include the most recent fixes	2016-09-02 21:29:39 +03:00
Simon Butcher	46125fbb73	Updates ChangeLog with final changes for release	2016-06-27 19:43:55 +01:00
Simon Butcher	9c22e7311c	Merge branch 'development'	2016-05-24 13:25:46 +01:00
Paul Bakker	dc08545395	Update ChangeLog to reflect	2016-05-23 14:29:32 +01:00
Paul Bakker	456fea0000	Amended ChangeLog	2016-05-23 14:29:31 +01:00
Janos Follath	c6dab2b029	Fix non compliance SSLv3 in server extension handling. The server code parses the client hello extensions even when the protocol is SSLv3 and this behaviour is non compliant with rfc6101. Also the server sends extensions in the server hello and omitting them may prevent interoperability problems.	2016-05-23 14:27:02 +01:00
Simon Butcher	94bafdf834	Merge branch 'development'	2016-05-18 18:40:46 +01:00
Paul Bakker	f8e3794792	Update ChangeLog to reflect	2016-05-13 10:50:41 +01:00
Paul Bakker	8f0e4c263a	Amended ChangeLog	2016-05-12 16:38:27 +01:00
Simon Butcher	f8935075dc	Update ChangeLog for bug #429 in ssl_fork_server	2016-05-03 15:43:52 +01:00
Simon Butcher	45732c7cac	Update ChangeLog for bug #429 in ssl_fork_server	2016-04-29 00:12:53 +01:00
Simon Butcher	e4a46f696f	Merge branch 'development'	2016-04-27 18:44:37 +01:00
Simon Butcher	3fe6cd3a2d	Fixes time() abstraction for custom configs Added platform abstraction of time() to ChangeLog, version features, and fixed the build for dynamic configuration.	2016-04-26 19:51:29 +01:00
Simon Butcher	a543d11d3a	Fixes mbedtls_mpi_zeroize() function name in ChangeLog	2016-04-26 12:51:37 +01:00
Simon Butcher	d7e9ad7d83	Updates ChangeLog with faster MPI zeroize fix Added optimised mbedtls_mpi_zeroise() credit to ChangeLog.	2016-04-25 16:07:12 +01:00
Janos Follath	8a3170571e	Fix bug in ssl_write_supported_elliptic_curves_ext Passing invalid curves to mbedtls_ssl_conf_curves potentially could caused a crash later in ssl_write_supported_elliptic_curves_ext. #373	2016-04-22 00:41:54 +01:00
Simon Butcher	2300776816	Merge branch 'development'	2016-04-19 10:39:36 +01:00
Janos Follath	1ed9f99ef3	Fix null pointer dereference in the RSA module. Introduced null pointer checks in mbedtls_rsa_rsaes_pkcs1_v15_encrypt	2016-04-19 10:16:31 +01:00
Simon Butcher	3f5c875654	Adds test for odd bit length RSA key size Also tidy up ChangeLog following review.	2016-04-15 19:06:59 +01:00
Janos Follath	10c575be3e	Fix odd bitlength RSA key generation Fix issue that caused a hang up when generating RSA keys of odd bitlength.	2016-04-15 18:49:13 +01:00
Simon Butcher	cd0ee5e499	Fixes following review of 'iotssl-682-selftest-ci-break'	2016-03-21 22:54:37 +00:00
Janos Follath	9194744595	Add exit value macros to platform abstraction layer.	2016-03-18 14:05:28 +00:00
Simon Butcher	de69b1664b	Fix ChangeLog after merge of IOTSSL-628	2016-03-17 11:13:48 +00:00
Simon Butcher	078bcdd6f6	Merge branch 'IOTSSL-628-BufferOverread'	2016-03-16 22:53:11 +00:00
Simon Butcher	184990c1d4	Merge development into development-restricted	2016-03-16 13:56:00 +00:00
Simon Butcher	4b852db299	Merge branch 'iotssl-629-der-trailing-bytes' Fixes bug in mbedtls_x509_crt_parse that caused trailing extra data in the buffer following DER certificates to be included in the raw representation.	2016-03-12 23:28:26 +00:00
Manuel Pégourié-Gonnard	8ddc93f07a	Add precision about exploitability in ChangeLog Also fix some whitespace while at it.	2016-03-09 21:06:20 +00:00
Janos Follath	e43b81ae68	Add Changelog entry for current branch	2016-03-09 21:06:20 +00:00
Janos Follath	3218b21b68	Add Changelog entry for current branch	2016-03-09 21:06:19 +00:00
Manuel Pégourié-Gonnard	370717b571	Add precision about exploitability in ChangeLog Also fix some whitespace while at it.	2016-03-09 21:06:19 +00:00
Janos Follath	cc4eba73fb	Add Changelog entry for current branch	2016-03-09 21:06:19 +00:00
Simon Butcher	00157ce510	Update the ChangeLog	2016-03-09 19:32:11 +00:00
Simon Butcher	f59e66ba24	Remove redundant test certificates and clarify ChangeLog	2016-03-09 19:32:10 +00:00
Janos Follath	b437b4b125	X509: Fix bug triggered by future CA among trusted Fix an issue that caused valid certificates being rejected whenever an expired or not yet valid version of the trusted certificate was before the valid version in the trusted certificate list.	2016-03-09 19:32:10 +00:00
Janos Follath	cc0e49ddde	x509: trailing bytes in DER: fix bug Fix bug in mbedtls_x509_crt_parse that caused trailing extra data in the buffer after DER certificates to be included in the raw representation. #377	2016-02-17 14:41:36 +00:00
Janos Follath	bc247c9946	Extended ChangeLog entry	2016-02-11 11:15:44 +00:00
Janos Follath	eae41bf340	Add Changelog entry for current branch	2016-02-10 16:40:16 +00:00
Janos Follath	4ae5c294a4	Add Changelog entry and improve coding style	2016-02-10 11:27:43 +00:00
Simon Butcher	9a3ee57c84	Merge branch 'fixes' into development	2016-01-13 02:08:02 +00:00
Manuel Pégourié-Gonnard	c990189e14	Revert changes done to 'make apidoc' target This partially reverts `1989caf71c` (only the changes to Makefile and CMakeLists, the addition to scripts/config.pl is kept). Modifying config.h in the apidoc target creates a race condition with make -j4 all apidoc where some parts of the library, tests or programs could be built with the wrong config.h, resulting in all kinds of (semi-random) errors. Recent versions of CMake mitigate this by adding a .NOTPARALLEL target to the generated Makefile, but people would still get errors with older CMake versions that are still in use (eg in RHEL 5), and with plain make. An additional issue is that, by failing to use cp -p, the apidoc target was updating the timestamp on config.h, which seems to cause further build issues. Let's get back to the previous, safe, situation. The improved apidoc building will be resurrected in a script in the next commit. fixes #390 fixes #391	2016-01-12 14:48:03 +00:00
Manuel Pégourié-Gonnard	25caaf36a6	Avoid build errors with -O0 due to assembly	2016-01-08 14:29:11 +01:00
Manuel Pégourié-Gonnard	3551901cd1	Make ar invocation more portable armar doesn't understand the syntax without dash. OTOH, the syntax with dash is the only one specified by POSIX, and it's accepted by GNU ar, BSD ar (as bundled with OS X) and armar, so it looks like the most portable syntax. fixes #386	2016-01-07 13:55:05 +01:00
Manuel Pégourié-Gonnard	afbb3101ce	Update ChangeLog for latest PR merged fixes #309	2016-01-07 13:26:11 +01:00
Manuel Pégourié-Gonnard	f92c86e44d	Update reference to attack in ChangeLog We couldn't do that before the attack was public	2016-01-07 13:18:01 +01:00
Simon Butcher	bfafadb45d	Change version number to 2.2.1 Changed version for library files and yotta module	2016-01-04 22:26:36 +00:00
Manuel Pégourié-Gonnard	7f88b8ec86	Tune description of a change/bugfix in ChangeLog	2016-01-04 17:36:44 +01:00
Simon Butcher	1285ab5dc2	Fix for memory leak in RSA-SSA signing Fix in mbedtls_rsa_rsassa_pkcs1_v15_sign() in rsa.c	2016-01-01 21:42:47 +00:00
Simon Butcher	c4a6ce6a4c	Merge branch 'origin/iotssl-541-pathlen-bugfix'	2015-12-30 07:52:54 +00:00
Simon Butcher	c42350125e	Clarification in ChangeLog	2015-12-23 18:36:16 +00:00
Simon Butcher	4c2bfdbff6	Merge 'iotssl-558-md5-tls-sigs-restricted'	2015-12-23 18:33:54 +00:00
Simon Butcher	9c2626c641	Merge 'iotssl-566-double-free-restricted'	2015-12-23 16:42:03 +00:00
Simon Butcher	00923c1897	Fix typo in Changelog	2015-12-22 19:04:24 +00:00
Simon Butcher	fabce5e137	Merge branch 'misc' into development Fixes github #358, #362 and IOTSSL-536	2015-12-22 18:56:56 +00:00
Simon Butcher	207990dcf5	Added description of change to the Changelog Also clarified some comments following review.	2015-12-16 01:51:30 +00:00
Manuel Pégourié-Gonnard	1e07562da4	Fix wrong length limit in GCM See for example page 8 of http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf The previous constant probably came from a typo as it was 2^26 - 2^5 instead of 2^36 - 2^5. Clearly the intention was to allow for a constant bigger than 2^32 as the ull suffix and cast to uint64_t show. fixes #362	2015-12-10 14:54:21 +01:00
Manuel Pégourié-Gonnard	97b5209bc0	Fix potential double free in cert writing code In case an entry with the given OID already exists in the list passed to mbedtls_asn1_store_named_data() and there is not enough memory to allocate room for the new value, the existing entry will be freed but the preceding entry in the list will sill hold a pointer to it. (And the following entries in the list are no longer reachable.) This results in memory leak or a double free. The issue is we want to leave the list in a consistent state on allocation failure. (We could add a warning that the list is left in inconsistent state when the function returns NULL, but behaviour changes that require more care from the user are undesirable, especially in a stable branch.) The chosen solution is a bit inefficient in that there is a time where both blocks are allocated, but at least it's safe and this should trump efficiency here: this code is only used for generating certificates, which is unlikely to be done on very constrained devices, or to be in the critical loop of anything. Also, the sizes involved should be fairly small anyway. fixes #367	2015-12-10 11:23:55 +01:00
Manuel Pégourié-Gonnard	c5892ca50c	Add credits to ChangeLog	2015-12-08 16:14:58 +01:00
Manuel Pégourié-Gonnard	47229c7cbb	Disable MD5 in handshake signatures by default	2015-12-04 15:02:56 +01:00
Manuel Pégourié-Gonnard	f4569b14c4	Fix bug checking pathlen on first intermediate Remove check on the pathLenConstraint value when looking for a parent to the EE cert, as the constraint is on the number of intermediate certs below the parent, and that number is always 0 at that point, so the constraint is always satisfied. The check was actually off-by-one, which caused valid chains to be rejected under the following conditions: - the parent certificate is not a trusted root, and - it has pathLenConstraint == 0 (max_pathlen == 1 in our representation) fixes #280	2015-11-19 11:10:38 +01:00
Simon Butcher	8254ed2a9f	Change version number to 2.2.0 Changed for library and yotta module	2015-11-04 19:55:40 +00:00
Simon Butcher	59a8fa7e2e	Corrected typo in ChangeLog	2015-11-03 23:09:28 +00:00
Manuel Pégourié-Gonnard	bd3639852c	Merge branch 'iotssl-519-asn1write-overflows-restricted' into development-restricted * iotssl-519-asn1write-overflows-restricted: Fix other int casts in bounds checking Fix other occurrences of same bounds check issue Fix potential buffer overflow in asn1write	2015-11-02 11:07:30 +09:00
Manuel Pégourié-Gonnard	537e2a9b58	Merge branch 'iotssl-518-winpathlen-restricted' into development-restricted * iotssl-518-winpathlen-restricted: Fix potential heap corruption on Windows	2015-11-02 11:04:59 +09:00
Manuel Pégourié-Gonnard	f8b2442e2f	Merge branch 'iotssl-517-double-free-restricted' into development-restricted * iotssl-517-double-free-restricted: Fix potential double-free in ssl_conf_psk()	2015-11-02 11:03:32 +09:00
Manuel Pégourié-Gonnard	c99dffad36	Add ChangeLog entry for ASN.1 DER boolean fix	2015-11-02 06:00:02 +09:00
Manuel Pégourié-Gonnard	ba1d897987	Merge branch 'bugfixes' into development * bugfixes: Fix typo in an OID name Disable reportedly broken assembly of Sparc(64)	2015-11-02 05:50:41 +09:00
Manuel Pégourié-Gonnard	568f1e7cb3	Merge branch 'iotssl-515-max-pathlen' into development * iotssl-515-max-pathlen: Add Changelog entries for this branch Fix a style issue Fix whitespace at EOL issues Use symbolic constants in test data Fixed pathlen contraint enforcement. Additional corner cases for testing pathlen constrains. Just in case. Added test case for pathlen constrains in intermediate certificates	2015-11-02 05:49:08 +09:00
Manuel Pégourié-Gonnard	2b624e9b39	Add Changelog entries for this branch	2015-10-30 09:45:34 +01:00
Simon Butcher	204606238c	Merge branch 'development' into misc	2015-10-27 16:57:34 +00:00
Simon Butcher	62aab15085	Merge branch 'development' into iotssl-513-alerts	2015-10-27 16:05:34 +00:00
Simon Butcher	5f7c34b8b0	Merge branch iotssl-521-keylen-check	2015-10-27 15:14:55 +00:00
Manuel Pégourié-Gonnard	e0b2feae34	Mention performance fix in ChangeLog	2015-10-27 10:24:54 +01:00
Manuel Pégourié-Gonnard	65eefc8707	Fix missing check for RSA key length on EE certs - also adapt tests to use lesser requirement for compatibility with old testing material	2015-10-23 16:19:53 +02:00
Manuel Pégourié-Gonnard	d21eb2ae81	Fix attribution in ChangeLog	2015-10-23 15:35:02 +02:00
Manuel Pégourié-Gonnard	fbdf06c1a4	Fix handling of non-fatal alerts fixes #308	2015-10-23 13:11:31 +02:00
Manuel Pégourié-Gonnard	e5f3072aed	Fix #ifdef inconsistency fixes #310 Actually all key exchanges that use a certificate use signatures too, and there is no key exchange that uses signatures but no cert, so merge those two flags.	2015-10-23 08:40:23 +02:00
Manuel Pégourié-Gonnard	66fc07362e	Fix typo in an OID name fixes #314	2015-10-21 16:40:29 +02:00
Manuel Pégourié-Gonnard	7c5fcdc17a	Disable reportedly broken assembly of Sparc(64) fixes #292	2015-10-21 14:52:24 +02:00
Manuel Pégourié-Gonnard	22c3b7b9da	Fix potential buffer overflow in asn1write	2015-10-21 12:13:05 +02:00
Manuel Pégourié-Gonnard	261faed725	Fix potential heap corruption on Windows If len is large enough, when cast to an int it will be negative and then the test if( len > MAX_PATH - 3 ) will not behave as expected.	2015-10-21 10:25:22 +02:00
Manuel Pégourié-Gonnard	173c790722	Fix potential double-free in ssl_conf_psk()	2015-10-20 19:56:45 +02:00
Manuel Pégourié-Gonnard	1ef96c2231	Update ChangeLog for the EC J-PAKE branch	2015-10-20 15:04:57 +02:00
Manuel Pégourié-Gonnard	4104864e54	ECHDE-PSK does not use a certificate fixes #270	2015-10-09 14:50:43 +01:00
Manuel Pégourié-Gonnard	c4e7d8a381	Bump version to 2.1.2 Yotta version bumped to 2.1.3, as we had to do one more patch release to the yotta registry to accommodate for dependencies updates.	2015-10-05 19:13:36 +01:00
Manuel Pégourié-Gonnard	ca056c7748	Fix CVE number in ChangeLog	2015-10-05 18:21:34 +01:00
Manuel Pégourié-Gonnard	a97ab2c8a6	Merge branch 'development' into development-restricted * development: Remove inline workaround when not useful Fix macroization of inline in C++	2015-10-05 15:48:09 +01:00
Simon Butcher	7776fc36d3	Fix for #279 macroisation of 'inline' keyword	2015-10-05 15:44:18 +01:00
Manuel Pégourié-Gonnard	899ac849d0	Merge branch 'development' into development-restricted * development: Upgrade yotta dependency versions Fix compile error in net.c with musl libc Add missing warning in doc	2015-10-05 14:47:43 +01:00
Manuel Pégourié-Gonnard	0431735299	Fix compile error in net.c with musl libc fixes #278	2015-10-05 12:17:49 +01:00
Simon Butcher	475cf0a98a	Merge fix of IOTSSL-496 - Potential heap overflow Fix for potential overflow in ssl_write_certificate_request()	2015-10-05 11:57:54 +01:00
Manuel Pégourié-Gonnard	0223ab9d38	Fix macroization of inline in C++ When compiling as C++, MSVC complains about our macroization of a keyword. Stop doing that as we know inline is always available in C++	2015-10-05 11:41:36 +01:00
Simon Butcher	fec73a8eec	Merge of fix for IOTSSL-481 - Double free Potential double free in mbedtls_ssl_conf_psk()	2015-10-05 10:40:31 +01:00
Simon Butcher	c48b66bfb6	Changed attribution for Guido Vranken	2015-10-05 10:18:17 +01:00
Simon Butcher	6418ffaadb	Merge fix for IOTSSL-480 - base64 overflow issue	2015-10-05 09:54:11 +01:00
Simon Butcher	a45aa1399b	Merge of IOTSSL-476 - Random malloc in pem_read()	2015-10-05 00:26:36 +01:00
Simon Butcher	e7f96f22ee	Merge fix IOTSSL-475 Potential buffer overflow Two possible integer overflows (during << 2 or addition in BITS_TO_LIMB()) could result in far too few memory to be allocated, then overflowing the buffer in the subsequent for loop. Both integer overflows happen when slen is close to or greater than SIZE_T_MAX >> 2 (ie 2^30 on a 32 bit system). Note: one could also avoid those overflows by changing BITS_TO_LIMB(s << 2) to CHARS_TO_LIMB(s >> 1) but the solution implemented looks more robust with respect to future code changes.	2015-10-04 23:43:05 +01:00
Simon Butcher	d5ba4672b2	Merge fix for IOTSSL-474 PKCS12 Overflow Fix stack buffer overflow in PKCS12	2015-10-04 22:47:59 +01:00
Simon Butcher	5b8d1d65f7	Fix for IOTSSL-473 Double free error Fix potential double-free in mbedtls_ssl_set_hs_psk(.)	2015-10-04 22:06:51 +01:00
Manuel Pégourié-Gonnard	ef388f168d	Merge branch 'development' into development-restricted * development: Updated ChangeLog with credit Fix a fairly common typo in comments Make config check include for configs examples more consistent	2015-10-02 12:44:39 +02:00
Manuel Pégourié-Gonnard	bc1babb387	Fix potential overflow in CertificateRequest	2015-10-02 11:20:28 +02:00
Simon Butcher	54eec9d1dd	Merge pull request #301 from Tilka/typo Fix a fairly common typo in comments	2015-10-01 02:07:24 +01:00
Simon Butcher	a12e3c00bf	Updated ChangeLog with credit	2015-10-01 01:59:33 +01:00
Manuel Pégourié-Gonnard	0aa45c209a	Fix potential overflow in base64_encode	2015-09-30 16:37:49 +02:00
Simon Butcher	5624ec824e	Reordered TLS extension fields in client Session ticket placed at end	2015-09-29 01:06:06 +01:00
Simon Butcher	04799a4274	Fixed copy and paste error Accidental additional assignment in ssl_write_alpn_ext()	2015-09-29 00:31:09 +01:00
Manuel Pégourié-Gonnard	d02a1daca7	Fix stack buffer overflow in pkcs12	2015-09-28 19:47:50 +02:00
Manuel Pégourié-Gonnard	24417f06fe	Fix potential double-free in mbedtls_ssl_conf_psk()	2015-09-28 18:09:45 +02:00
Manuel Pégourié-Gonnard	58fb49531d	Fix potential buffer overflow in mpi_read_string() Found by Guido Vranken. Two possible integer overflows (during << 2 or addition in BITS_TO_LIMB()) could result in far too few memory to be allocated, then overflowing the buffer in the subsequent for loop. Both integer overflows happen when slen is close to or greater than SIZE_T_MAX >> 2 (ie 2^30 on a 32 bit system). Note: one could also avoid those overflows by changing BITS_TO_LIMB(s << 2) to CHARS_TO_LIMB(s >> 1) but the solution implemented looks more robust with respect to future code changes.	2015-09-28 15:59:54 +02:00
Tillmann Karras	588ad50c5a	Fix a fairly common typo in comments	2015-09-25 04:27:22 +02:00
Simon Butcher	8f98842e38	Refined credits in ChangeLog for fuzzing issue Changed GDS to Gotham Digital Science	2015-09-22 10:10:36 +01:00
Manuel Pégourié-Gonnard	8cea8ad8b8	Bump version to 2.1.1	2015-09-17 11:58:45 +02:00
Simon Butcher	ac58c53ab1	Merge remote-tracking branch 'origin/development'	2015-09-16 23:25:25 +01:00
Simon Butcher	7dd82f8fd5	Merge branch 'development' with bugfix branch Conflicts: ChangeLog	2015-09-16 16:21:38 +01:00
Simon Butcher	5793e7ef01	Merge 'development' into iotssl-411-port-reuse Conflicts: ChangeLog	2015-09-16 15:25:53 +01:00
Manuel Pégourié-Gonnard	f7022d1131	Fix bug in server parsing point formats extension There is only one length byte but for some reason we skipped two, resulting in reading one byte past the end of the extension. Fortunately, even if that extension is at the very end of the ClientHello, it can't be at the end of the buffer since the ClientHello length is at most SSL_MAX_CONTENT_LEN and the buffer has some more room after that for MAC and so on. So there is no buffer overread. Possible consequences are: - nothing, if the next byte is 0x00, which is a comment first byte for other extensions, which is why the bug remained unnoticed - using a point format that was not offered by the peer if next byte is 0x01. In that case the peer will reject our ServerKeyExchange message and the handshake will fail. - thinking that we don't have a common point format even if we do, which will cause us to immediately abort the handshake. None of these are a security issue. The same bug was fixed client-side in `fd35af15`	2015-09-16 11:32:18 +02:00
Simon Butcher	a1a1128f7d	Updated ChangeLog for fix #275	2015-09-14 21:30:40 +01:00
Simon Butcher	d69f14bed8	Updated Changelog for new version	2015-09-11 20:00:20 +01:00
Simon Butcher	8a52a7468d	Added PR to Changelog for NWilson	2015-09-11 19:44:34 +01:00
Manuel Pégourié-Gonnard	c2ed8029ff	Fix ChangeLog - misplaced entries	2015-09-09 12:15:13 +02:00
Manuel Pégourié-Gonnard	14c2574a9d	Update Changelog	2015-09-08 15:12:45 +02:00
Simon Butcher	e5a21b4493	Merge pull request #282 from ARMmbed/iotssl-469-rsa-crt-restricted Add counter-measure against RSA-CRT attack	2015-09-08 13:05:51 +01:00
Manuel Pégourié-Gonnard	5f50104c52	Add counter-measure against RSA-CRT attack https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/	2015-09-08 13:39:29 +02:00
Manuel Pégourié-Gonnard	7f2f062a5d	Fix possible client crash on API misuse	2015-09-07 12:27:24 +02:00
Manuel Pégourié-Gonnard	0a0c22e0ef	Add ChangeLog entry about license change	2015-09-04 14:38:26 +02:00
Manuel Pégourié-Gonnard	aac5502553	Bump version to 2.1.0	2015-09-04 14:33:31 +02:00
Simon Butcher	52754594b6	Merging iotssl-457-badtail with development branch	2015-09-03 13:06:01 +01:00
Manuel Pégourié-Gonnard	b2beb84be6	Changelog entry fro the previous commit	2015-09-01 19:37:32 +02:00
Manuel Pégourié-Gonnard	1385a289f4	Fix possible mutex lock/unlock mismatch fixes #257	2015-08-27 11:30:58 +02:00
Manuel Pégourié-Gonnard	c98204e68f	Fix missing break in switch for SSL presets closes #235	2015-08-11 04:21:01 +02:00
Manuel Pégourié-Gonnard	ed46c436c0	Fix error when loading libmbedtls.so	2015-08-10 10:17:32 +02:00
Manuel Pégourié-Gonnard	e33316c607	Add test build of shared libs for windows	2015-08-07 13:22:37 +02:00
Manuel Pégourié-Gonnard	32da9f66a8	Add support for MBEDTLS_USER_CONFIG_FILE	2015-08-06 09:57:54 +02:00
Manuel Pégourié-Gonnard	9983993e27	Fix bug with make install without tests closes #232	2015-08-03 10:42:10 +02:00
Manuel Pégourié-Gonnard	2006408545	Fix Make bug when installing programs	2015-08-03 10:40:38 +02:00
Manuel Pégourié-Gonnard	052d10c9d5	Accept a trailing space at end of PEM lines With certs being copy-pasted from webmails and all, this will probably become more and more common. closes #226	2015-07-31 11:11:26 +02:00
Manuel Pégourié-Gonnard	e96ce08a21	Fix compile error with armcc5 --gnu	2015-07-31 10:58:06 +02:00
Simon Butcher	10a6f02f83	Merge branch 'development' into IOTSSL-442-hello-noext Conflicts: ChangeLog	2015-07-27 13:45:40 +01:00
Manuel Pégourié-Gonnard	52a5079cf2	Fix bug with install target in make closes #223	2015-07-27 10:36:12 +02:00
Manuel Pégourié-Gonnard	6f42417ba8	Fix typo in that broke installation in cmake closes #221	2015-07-24 16:55:22 +02:00
Manuel Pégourié-Gonnard	a6e5bd5654	Fix bug with extension-less ServerHello https://tls.mbed.org/discussions/bug-report-issues/server-hello-parsing-bug in_hslen include the length of the handshake header. (We might want to change that in the future, as it is a bit annoying.)	2015-07-23 12:23:19 +02:00
Manuel Pégourié-Gonnard	bcb0460224	Fix bug with cmake and old version of GCC	2015-07-19 16:00:04 +02:00
Manuel Pégourié-Gonnard	4f3368e31e	Fix bug in benchmark.c with DHM params	2015-07-19 15:01:28 +02:00
Paul Bakker	4cb87f409d	Prepare for 2.0.0 release	2015-07-10 14:09:43 +01:00
Manuel Pégourié-Gonnard	abc729e664	Simplify net_accept() with UDP sockets This is made possible by the new API where net_accept() gets a pointer to bind_ctx, so it can update it.	2015-07-01 01:28:24 +02:00
Manuel Pégourié-Gonnard	91895853ac	Move from naked int to a structure in net.c Provides more flexibility for future changes/extensions.	2015-06-30 15:56:25 +02:00
Manuel Pégourié-Gonnard	a25ffc3b0f	Update Changelog for target split	2015-06-25 12:01:16 +02:00
Manuel Pégourié-Gonnard	53585eeb17	Remove test DHM params from certs.c certs.c belongs to the X.509 library, while DHM belongs to the crypto lib.	2015-06-25 10:59:57 +02:00
Manuel Pégourié-Gonnard	fd474233c8	Change SSL debug API in the library	2015-06-23 18:44:11 +02:00
Manuel Pégourié-Gonnard	c0d749418b	Make 'port' a string in NET module - avoids dependency on snprintf - allows using "smtps" instead of "456" if desired	2015-06-23 13:09:11 +02:00
Manuel Pégourié-Gonnard	1cd10adc7c	Update prototype of x509write_set_key_usage() Allow for future support of decipherOnly and encipherOnly. Some work will be required to ensure we still write only one byte when only one is needed.	2015-06-23 13:09:10 +02:00
Manuel Pégourié-Gonnard	60c793bdc9	Split HAVE_TIME into HAVE_TIME + HAVE_TIME_DATE First one means we have time() but it may not return the actual wall clock time, second means it does.	2015-06-22 14:40:56 +02:00
Manuel Pégourié-Gonnard	797f48ace6	Rename ecp_curve_info.size to bit_size	2015-06-18 15:45:05 +02:00
Manuel Pégourié-Gonnard	898e0aa210	Rename key_length in cipher_info	2015-06-18 15:31:10 +02:00
Manuel Pégourié-Gonnard	88d37859b6	Update Changelog for the profiles branch	2015-06-17 14:59:27 +02:00
Manuel Pégourié-Gonnard	7ee5ddd798	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Fix compile errors with NO_STD_FUNCTIONS Expand config.pl's notion of "full" Ack external bugfix in Changelog FIx misplaced Changelog entry (oops) Fix compile bug: incompatible declaration of polarssl_exit in platform.c Fix contributor's name in Changelog	2015-06-03 10:33:55 +01:00
Manuel Pégourié-Gonnard	dccb80b7e5	Fix compile errors with NO_STD_FUNCTIONS	2015-06-03 10:20:33 +01:00
Manuel Pégourié-Gonnard	f2ec505c34	Ack external bugfix in Changelog	2015-06-03 09:50:07 +01:00
Manuel Pégourié-Gonnard	3e87a9f57f	FIx misplaced Changelog entry (oops)	2015-06-03 09:48:26 +01:00
Manuel Pégourié-Gonnard	bc6ff23dc6	Update changelog for i/o lengths	2015-06-02 16:33:08 +01:00
Manuel Pégourié-Gonnard	9693668c23	Tune Changelog (typos, ordering)	2015-06-02 15:14:15 +01:00
Manuel Pégourié-Gonnard	d22514e8f6	Fix contributor's name in Changelog	2015-06-02 12:59:59 +01:00
Manuel Pégourié-Gonnard	0574bb0bdb	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Mark unused constant as such Update ChangeLog for recent external bugfix Serious bug fix in entropy.c Fix memleak with repeated [gc]cm_setkey() fix minor bug in path_cnt checks Conflicts: include/mbedtls/cipher.h library/ccm.c library/entropy.c library/gcm.c library/x509_crt.c	2015-06-02 09:59:29 +01:00
Manuel Pégourié-Gonnard	5866848092	Update ChangeLog for recent external bugfix	2015-06-02 09:08:35 +01:00
Manuel Pégourié-Gonnard	cb46fd8216	Avoid non-standard strcasecmp()	2015-05-29 10:18:09 +02:00
Manuel Pégourié-Gonnard	41b9c2b418	Remove individual mdX_file() and shaX_file()	2015-05-28 17:28:38 +02:00
Manuel Pégourié-Gonnard	eb0d8706ce	Add option for even smaller SHA-256	2015-05-28 16:45:23 +02:00
Manuel Pégourié-Gonnard	2a1524ccb5	Manually merge 1.3 changelog	2015-05-27 17:59:46 +02:00
Manuel Pégourié-Gonnard	61977614d8	Fix memleak with repeated [gc]cm_setkey()	2015-05-27 17:40:16 +02:00
Manuel Pégourié-Gonnard	1b8de57827	Remove a few redundant memset after calloc. Using the following semantic patch provided by Mansour Moufid: @@ expression x; @@ x = mbedtls_calloc(...) ... - memset(x, 0, ...);	2015-05-27 16:58:55 +02:00
Manuel Pégourié-Gonnard	5b9e5b19a1	Update ChangeLog for s/malloc/calloc	2015-05-27 16:58:55 +02:00
Manuel Pégourié-Gonnard	50518f4195	Rename _wrap headers to _internal Makes it clearer that the user is not supposed to include them	2015-05-26 11:06:12 +02:00
Manuel Pégourié-Gonnard	866eb471da	Update Changelog for session ticket changes	2015-05-25 19:42:14 +02:00
Manuel Pégourié-Gonnard	0b104b056b	Adapt prototype of net_accept() for explicit size	2015-05-14 21:58:34 +02:00
Manuel Pégourié-Gonnard	d4f04dba42	net.c now depends on select() unconditionally	2015-05-14 21:58:34 +02:00
Manuel Pégourié-Gonnard	a63bc94a2d	Remove timing_m_sleep() -> net_usleep()	2015-05-14 21:58:34 +02:00
Manuel Pégourié-Gonnard	0c89035d4d	Update Changelog for recent timer changes	2015-05-13 10:28:41 +02:00
Manuel Pégourié-Gonnard	31993f271d	Add per-function override for AES	2015-05-12 15:41:08 +02:00
Manuel Pégourié-Gonnard	e45dba47b5	Remove unused member in des_context	2015-05-12 14:54:15 +02:00
Manuel Pégourié-Gonnard	43b37cbc92	Fix use of pem_read_buffer() in PK, DHM and X509	2015-05-12 11:26:43 +02:00
Manuel Pégourié-Gonnard	2088ba6d30	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Update Changelog for recent contribution Perf: rewrite of ecp_double_jac Conflicts: library/ecp.c	2015-05-12 10:36:26 +02:00
Manuel Pégourié-Gonnard	154b00b07b	Update Changelog for recent contribution	2015-05-11 21:05:36 +02:00
Manuel Pégourié-Gonnard	e6ef16f98c	Change X.509 verify flags to uint32_t	2015-05-11 19:54:43 +02:00
Manuel Pégourié-Gonnard	56cc88a796	Rm ecp_add() and add ecp_muladd()	2015-05-11 18:40:45 +02:00
Manuel Pégourié-Gonnard	6dde596a03	Remove ecp_sub()	2015-05-11 18:18:32 +02:00
Manuel Pégourié-Gonnard	aff37e5aa1	Remove ecp_group_read_string()	2015-05-11 18:11:57 +02:00
Manuel Pégourié-Gonnard	06939cebef	Fix order of ssl_conf vs ssl_setup in programs Except ssl_phtread_server that will be done later	2015-05-11 14:35:42 +02:00
Manuel Pégourié-Gonnard	9a1a4d6903	Update Changelog with forgotten change	2015-05-11 14:35:42 +02:00
Manuel Pégourié-Gonnard	01e5e8c1f8	Change a few ssl_conf return types to void	2015-05-11 14:35:41 +02:00
Manuel Pégourié-Gonnard	caace65711	Update Changelog for recent config split	2015-05-11 14:35:41 +02:00
Manuel Pégourié-Gonnard	2f84e97929	Fix typos in the Changelog	2015-05-11 14:35:41 +02:00
Manuel Pégourié-Gonnard	0a4fb09534	Make xxx_drbg_random() thread-safe	2015-05-11 14:35:41 +02:00
Manuel Pégourié-Gonnard	5cb3308e5f	Merge contexts for session cache	2015-05-11 12:33:27 +02:00
Manuel Pégourié-Gonnard	6e088f9a0f	Group all renamings together in Changelog	2015-05-11 12:33:27 +02:00
Manuel Pégourié-Gonnard	662c6e8cdd	Disable truncated HMAC by default	2015-05-11 12:33:27 +02:00
Manuel Pégourié-Gonnard	1028b74cff	Upgrade default DHM params size	2015-05-11 12:33:27 +02:00
Manuel Pégourié-Gonnard	8836994f6b	Move WANT_READ/WANT_WRITE codes to SSL	2015-05-11 12:33:26 +02:00
Manuel Pégourié-Gonnard	1b511f93c6	Rename ssl_set_bio_timeout() to set_bio() Initially thought it was best to keep the old function around and add a new one, but this so many ssl_set_xxx() functions are changing anyway...	2015-05-11 12:33:26 +02:00
Manuel Pégourié-Gonnard	bc2b771af4	Move ssl_set_ca_chain() to work on config	2015-05-11 12:33:26 +02:00
Manuel Pégourié-Gonnard	5a74e8bf19	Make struct cipher_base_t opaque	2015-05-06 17:10:55 +01:00
Manuel Pégourié-Gonnard	3a3ae3d47e	Update changelog	2015-05-06 17:08:54 +01:00
Manuel Pégourié-Gonnard	e36d56419e	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: fix bug in ssl_mail_client Adapt compat.sh to GnuTLS 3.4 Fix undefined behaviour in x509 Conflicts: programs/ssl/ssl_mail_client.c tests/compat.sh	2015-04-30 13:52:25 +02:00
Manuel Pégourié-Gonnard	fa950c9480	fix bug in ssl_mail_client	2015-04-30 12:50:22 +02:00
Manuel Pégourié-Gonnard	159c524df8	Fix undefined behaviour in x509	2015-04-30 11:21:18 +02:00
Manuel Pégourié-Gonnard	da61ed3346	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Include changes from the 1.2 branch Remove unused headers in o_p_test Add countermeasure against cache-based lucky 13 Make results of (ext)KeyUsage accessible Fix missing NULL check in MPI Fix detection of getrandom() Fix "make install" handling of symlinks Fix bugs in programs displaying verify flags Conflicts: Makefile include/polarssl/ssl.h library/entropy_poll.c library/ssl_srv.c library/ssl_tls.c programs/test/o_p_test.c programs/test/ssl_cert_test.c programs/x509/cert_app.c	2015-04-30 10:38:44 +02:00
Manuel Pégourié-Gonnard	7b12492c77	Include changes from the 1.2 branch	2015-04-30 10:16:19 +02:00
Manuel Pégourié-Gonnard	7d1e95c991	Add countermeasure against cache-based lucky 13	2015-04-29 17:07:31 +02:00
Manuel Pégourié-Gonnard	e16b62c3a9	Make results of (ext)KeyUsage accessible	2015-04-29 17:07:31 +02:00
Manuel Pégourié-Gonnard	770b5e1e9e	Fix missing NULL check in MPI	2015-04-29 17:02:01 +02:00
Manuel Pégourié-Gonnard	d97828e7af	Fix detection of getrandom()	2015-04-29 14:28:48 +02:00
Manuel Pégourié-Gonnard	f5203e0bb5	Fix "make install" handling of symlinks	2015-04-29 14:28:48 +02:00
Manuel Pégourié-Gonnard	8a81e84638	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Add countermeasure against cache-based lucky 13 Conflicts: library/ssl_tls.c	2015-04-29 02:13:42 +02:00
Manuel Pégourié-Gonnard	eab147c4d0	Rename pkcs11_xxx_init() to bind()	2015-04-29 02:08:34 +02:00
Manuel Pégourié-Gonnard	69a69cc5ae	memory_buffer_alloc_init() now returns void	2015-04-29 02:08:34 +02:00
Manuel Pégourié-Gonnard	41d479e7df	Split ssl_init() -> ssl_setup()	2015-04-29 02:08:34 +02:00
Manuel Pégourié-Gonnard	47fede0d6d	Add countermeasure against cache-based lucky 13	2015-04-29 01:35:48 +02:00
Manuel Pégourié-Gonnard	8d128efd48	Split mbedtls_ctr_drbg_init() -> seed()	2015-04-28 22:38:08 +02:00
Manuel Pégourié-Gonnard	f9e9481bc5	Split mbedtls_hmac_drbg_init() -> seed{,_buf}()	2015-04-28 22:07:14 +02:00
Manuel Pégourié-Gonnard	c34e8dd265	Split mbedtls_gcm_init() -> gcm_setkey()	2015-04-28 21:42:17 +02:00
Manuel Pégourié-Gonnard	6963ff0969	Split mbedtls_ccm_init() -> setkey()	2015-04-28 18:02:54 +02:00
Manuel Pégourié-Gonnard	d54e617ea6	Restructure Changelog	2015-04-28 17:56:12 +02:00
Manuel Pégourié-Gonnard	8f5fd31212	Change mutex_init/free to return void	2015-04-24 14:42:34 +02:00
Manuel Pégourié-Gonnard	e75fa70b36	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Make results of (ext)KeyUsage accessible Use x509_crt_verify_info() in programs Add x509_crt_verify_info() Conflicts: ChangeLog include/mbedtls/x509_crt.h include/polarssl/ssl.h include/polarssl/x509.h library/ssl_srv.c library/ssl_tls.c library/x509_crt.c programs/ssl/ssl_client1.c programs/ssl/ssl_client2.c programs/ssl/ssl_mail_client.c programs/ssl/ssl_server2.c programs/test/ssl_cert_test.c programs/x509/cert_app.c tests/ssl-opt.sh tests/suites/test_suite_x509parse.function	2015-04-20 11:51:34 +01:00
Manuel Pégourié-Gonnard	e6efa6f54e	manually merge `9f98251` make extKeyUsage accessible	2015-04-20 11:23:24 +01:00
Manuel Pégourié-Gonnard	b5f48ad82f	manually merge `39a183a` add x509_crt_verify_info()	2015-04-20 11:22:57 +01:00
Manuel Pégourié-Gonnard	e2650c8238	Merge branch 'mbedtls-1.3' into development * commit '23c0608': Fix bug in generate_code.pl Fix typo in contributor name (oops!)	2015-04-17 20:39:50 +02:00
Manuel Pégourié-Gonnard	144bc224e9	Merge branch 'mbedtls-1.3' into development * commit 'a2fce21': Fix potential NULL dereference on bad usage Conflicts: library/ssl_tls.c	2015-04-17 20:39:07 +02:00
Manuel Pégourié-Gonnard	53c76c07de	Merge branch 'mbedtls-1.3' into development * commit 'ce60fbe': Fix potential timing difference with RSA PMS Update Changelog for recent merge Added more constant-time code and removed biases in the prime number generation routines. Conflicts: library/bignum.c library/ssl_srv.c	2015-04-17 20:19:32 +02:00
Manuel Pégourié-Gonnard	de9b363fbd	Merge branch mbedtls-1.3 into development * commit '95f0089': Update Changelog for DH params Add test case for dh params with privateValueLength accept PKCS#3 DH parameters with privateValueLength included Conflicts: library/dhm.c	2015-04-17 20:07:22 +02:00
Manuel Pégourié-Gonnard	9f98251e72	Make results of (ext)KeyUsage accessible	2015-04-17 19:57:21 +02:00
Manuel Pégourié-Gonnard	39a183a629	Add x509_crt_verify_info()	2015-04-17 17:24:25 +02:00
Manuel Pégourié-Gonnard	ba334201a9	Fix typo in contributor name (oops!)	2015-04-17 17:24:20 +02:00
Manuel Pégourié-Gonnard	a2fce21ae5	Fix potential NULL dereference on bad usage	2015-04-15 21:04:19 +02:00
Manuel Pégourié-Gonnard	12a8b66961	Update Changelog for recent merge	2015-04-15 14:20:14 +02:00
Manuel Pégourié-Gonnard	95f00892d2	Update Changelog for DH params	2015-04-15 14:12:05 +02:00
Manuel Pégourié-Gonnard	ab22910191	Just use stdint.h even with MSVC	2015-04-15 11:58:31 +02:00
Manuel Pégourié-Gonnard	862d503c01	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Fix typos in Changelog Fix macro name from wrong branch Fix bug in pk_parse_key() Fixed typos Updated Travis CI config for mbedtls project Conflicts: include/mbedtls/ecp.h include/polarssl/compat-1.2.h include/polarssl/openssl.h include/polarssl/platform.h library/pkparse.c programs/pkey/mpi_demo.c	2015-04-15 11:30:46 +02:00
Manuel Pégourié-Gonnard	0645bfa74e	Fix typos in Changelog	2015-04-15 11:21:24 +02:00
Manuel Pégourié-Gonnard	e6c8366b46	Fix bug in pk_parse_key()	2015-04-15 11:21:24 +02:00
Manuel Pégourié-Gonnard	e1e5871a55	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Fix bug in pk_parse_key() Update generated file Conflicts: library/pkparse.c library/version_features.c	2015-04-15 10:50:34 +02:00
Paul Bakker	6152b0267c	Fixed typos	2015-04-14 15:00:09 +02:00
Manuel Pégourié-Gonnard	924cd100a6	Fix bug in pk_parse_key()	2015-04-14 11:18:04 +02:00
Manuel Pégourié-Gonnard	975d5fa206	Remove option HAVE_LONGLONG	2015-04-10 11:34:22 +02:00
Manuel Pégourié-Gonnard	7b53889f05	Remove support for HAVE_INT8 and HAVE_INT16	2015-04-10 11:34:22 +02:00
Manuel Pégourié-Gonnard	b31424c86a	Make HAVE_IPV6 non-optional	2015-04-09 16:42:38 +02:00
Manuel Pégourié-Gonnard	43b997fee9	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Deprecate HAVE_INT8 and HAVE_INT16 Deprecate using NET_C without HAVE_IPV6 Officially deprecate compat-1.2.h and openssl.h Document POLARSSL_CAMELLIA_SMALL_MEMORY Fix bug with ssl_set_curves() check on client Fix bug in POLARSSL_PLATFORM_STD_EXIT support	2015-04-09 15:34:42 +02:00
Manuel Pégourié-Gonnard	23ce09b18f	Deprecate HAVE_INT8 and HAVE_INT16	2015-04-09 14:51:51 +02:00
Manuel Pégourié-Gonnard	a98af5e2b2	Deprecate using NET_C without HAVE_IPV6	2015-04-09 14:40:46 +02:00
Manuel Pégourié-Gonnard	8c3f0f4c16	Official deprecate compat-1.2.h and openssl.h	2015-04-09 14:10:26 +02:00
Manuel Pégourié-Gonnard	d759d7d720	Update ChangeLog for Great Renaming	2015-04-08 20:13:33 +02:00
Manuel Pégourié-Gonnard	07ec1ddd10	Fix bug with ssl_set_curves() check on client	2015-04-03 18:17:37 +02:00
Manuel Pégourié-Gonnard	29f777ef54	Fix bug with ssl_set_curves() check on client	2015-04-03 17:57:59 +02:00
Manuel Pégourié-Gonnard	f1d2f7c456	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Fix bug in Via Padlock support Fix portability issue in Makefile	2015-04-02 12:44:00 +01:00
Manuel Pégourié-Gonnard	cf201201e6	Fix bug in Via Padlock support	2015-04-02 10:53:59 +01:00
Manuel Pégourié-Gonnard	427b672551	Add XXX_PROCESS_ALT mecchanism	2015-03-31 18:32:50 +02:00
Manuel Pégourié-Gonnard	26c9f90cae	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Add missing depends in x509 programs Simplify ifdef checks in programs/x509 Fix thread safety issue in RSA operations Add test certificate for bitstring in DN Add support for X.520 uniqueIdentifier Accept bitstrings in X.509 names	2015-03-31 17:56:15 +02:00
Manuel Pégourié-Gonnard	0878a0d884	Add missing depends in x509 programs	2015-03-31 15:14:37 +02:00
Manuel Pégourié-Gonnard	c89d6cf77c	Make pk_info_t opaque	2015-03-31 14:43:19 +02:00
Manuel Pégourié-Gonnard	8c8be1ebbb	Change default min TLS version to TLS 1.0	2015-03-31 14:22:30 +02:00
Manuel Pégourié-Gonnard	348bcb3694	Make RSA_ALT support optionnal	2015-03-31 14:01:33 +02:00
Manuel Pégourié-Gonnard	8fce937a1a	Simplify ecdsa_context	2015-03-31 13:06:41 +02:00
Manuel Pégourié-Gonnard	dfdcac9d51	Merge ecdsa_write_signature{,_det}() together	2015-03-31 11:41:42 +02:00
Manuel Pégourié-Gonnard	b8cfe3f0d9	pk_sign() now requires non-NONE md_alg for ECDSA	2015-03-31 11:14:41 +02:00
Manuel Pégourié-Gonnard	fa44f20b9f	Change authmode default to Required on client	2015-03-27 17:52:25 +01:00
Manuel Pégourié-Gonnard	606df8c199	Re-section ChangeLog	2015-03-27 17:13:17 +01:00
Manuel Pégourié-Gonnard	1d0ca1a336	Move key_usage to more that 8 bits	2015-03-27 16:50:00 +01:00
Manuel Pégourié-Gonnard	1022fed36e	Remove redundant sig_oid2 in x509 structures	2015-03-27 16:34:42 +01:00
Manuel Pégourié-Gonnard	88fca3ef0e	Fix thread safety issue in RSA operations The race was due to mpi_exp_mod storing a Montgomery coefficient in the context (RM, RP, RQ). The fix was verified with -fsanitize-thread using ssl_pthread_server and two concurrent clients. A more fine-grained fix should be possible, locking just enough time to check if those values are OK and set them if not, rather than locking for the whole mpi_exp_mod() operation, but it will be for later.	2015-03-27 15:12:05 +01:00
Manuel Pégourié-Gonnard	39ead3ef2f	Add test certificate for bitstring in DN	2015-03-27 13:11:33 +01:00
Manuel Pégourié-Gonnard	a958d69a70	Rename test_ca_list to test_cas_pem	2015-03-27 10:29:25 +01:00
Manuel Pégourié-Gonnard	75f901006b	Add len constants to certs.c	2015-03-27 09:56:18 +01:00
Manuel Pégourié-Gonnard	147fa097e2	Reintroduce md_init_ctx compatibility wrapper	2015-03-25 21:55:56 +01:00
Manuel Pégourié-Gonnard	4063ceb281	Make hmac_ctx optional Note from future self: actually md_init_ctx will be re-introduced with the same signature later, and a new function with the additional argument will be added.	2015-03-25 21:55:56 +01:00
Manuel Pégourié-Gonnard	4da88c50c1	Remove specific xxx_hmac functions	2015-03-25 21:55:56 +01:00
Manuel Pégourié-Gonnard	ca878dbaa5	Make md_info_t an opaque structure - more freedom for us to change it in the future - enforces hygiene - performance impact of making accessors no longer inline should really be negligible	2015-03-25 21:37:15 +01:00
Manuel Pégourié-Gonnard	d81562ffc0	Remove RC4 ciphersuites by default	2015-03-23 14:51:08 +01:00
Manuel Pégourié-Gonnard	8a80318df2	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Update generated file Update Changelog for deprecation config flags Fix tests to work with DEPRECATED_REMOVED Add POLARSSL_DEPRECATED_{WARNING,REMOVED} Suppress clang warning we don't want	2015-03-23 14:31:25 +01:00
Manuel Pégourié-Gonnard	f7dbedb7db	Update Changelog for deprecation config flags	2015-03-23 14:20:04 +01:00
Manuel Pégourié-Gonnard	849b174e57	Disable RC4 by default in the library	2015-03-20 19:14:19 +00:00
Manuel Pégourié-Gonnard	4b378c9423	Remove old script	2015-03-20 18:30:40 +00:00
Manuel Pégourié-Gonnard	c4dfaccfa0	Update ChankeLog for removed programs	2015-03-20 17:46:40 +00:00
Manuel Pégourié-Gonnard	fa8aebcbcc	Fix a constness issue	2015-03-19 13:38:17 +00:00
Manuel Pégourié-Gonnard	35f1d7f0aa	Update signature of mpi_mul_mpi()	2015-03-19 12:42:40 +00:00
Manuel Pégourié-Gonnard	cc0d084820	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Actually use armcc for the armcc test ^^' Add more -O level variety in all.sh Document recent make changes build: Makefile: cleanup CFLAGS build: Makefile: cleanup LDFLAGS build: Makefile: simplify root Makefile build: Makefile: remove bashism Conflicts: programs/Makefile	2015-03-13 16:32:40 +00:00
Manuel Pégourié-Gonnard	40f315ac16	Document recent make changes	2015-03-13 13:50:30 +00:00
Manuel Pégourié-Gonnard	b6b16bddc3	Drop pbkdf2 module (superseded by pkcs5)	2015-03-11 11:31:51 +00:00
Manuel Pégourié-Gonnard	f9c1387b9d	Drop POLARSSL_ERROR_STRERROR_BC	2015-03-11 10:59:38 +00:00
Manuel Pégourié-Gonnard	57a26da593	Merge branch 'mbedtls-1.3' into development * mbedtls-1.3: Use link-time garbage collection in memory.sh scripts/memory.sh only work on Linux Add missing 'const' on selftest data Use only headers for doxygen (no doc in C files) Add missing extern "C" guard in aesni.h Fix compile error with renego disabled Remove slow PKCS5 test Stop checking key-cert match systematically Make tests/*.sh runnable from anywhere Update visual C files	2015-03-11 10:30:21 +00:00
Manuel Pégourié-Gonnard	1a90147dc5	Add missing extern "C" guard in aesni.h	2015-03-10 16:12:29 +00:00
Manuel Pégourié-Gonnard	51bccd3889	Fix compile error with renego disabled	2015-03-10 16:09:08 +00:00
Manuel Pégourié-Gonnard	f427f8854a	Stop checking key-cert match systematically	2015-03-10 15:35:29 +00:00
Manuel Pégourié-Gonnard	88bdb0bb51	Update Changelog with recent changes	2015-03-10 14:02:33 +00:00
Manuel Pégourié-Gonnard	cd4cd1dd26	Merge branch 'development' into dtls * development: Fix the fix to ssl_set_psk() Update Changelog Finish fixing memleak in ssl_server2 arg parsing Fix another potential memory leak found by find-mem-leak.cocci. Add a rule for another type of memory leak to find-mem-leak.cocci. Fix a potential memory leak found by find-mem-leak.cocci. Add a semantic patch to find potential memory leaks. Fix whitespace of `369e6c20`. Apply the semantic patch rm-malloc-cast.cocci. Add a semantic patch to remove casts of malloc.	2015-02-18 10:25:16 +00:00
Manuel Pégourié-Gonnard	df4e44025d	Update Changelog	2015-02-18 10:11:06 +00:00
Manuel Pégourié-Gonnard	cc8980872c	Merge branch 'mbedtls-1.4' into dtls * mbedtls-1.4: Add missing require_gnutls guards in ssl-opt.sh Remove gnutls from the travis build Update release date and added note	2015-02-17 16:50:45 +00:00
Manuel Pégourié-Gonnard	d901d17817	Merge branch 'development' into dtls * development: (100 commits) Update Changelog for the mem-measure branch Fix issues introduced when rebasing Fix compile error in memory_buffer_alloc_selftest Code cosmetics Add curve25519 to ecc-heap.sh Add curve25519 to the benchmark program Fix compile issue when buffer_alloc not available New script ecc-heap.sh Fix unused variable issue in some configs Rm usunused member in private struct Add heap usage for PK in benchmark Use memory_buffer_alloc() in benchmark if available Only define mode_func if mode is enabled (CBC etc) PKCS8 encrypted key depend on PKCS5 or PKCS12 Disable SRV_C for client measurement Output stack+heap usage with massif Enable NIST_OPTIM by default for config-suite-b Refactor memory.sh Adapt memory.sh to config-suite-b Adapt mini-client for config-suite-b.h ... Conflicts: ChangeLog include/polarssl/net.h library/Makefile library/error.c library/ssl_tls.c programs/Makefile programs/ssl/ssl_client2.c programs/ssl/ssl_server2.c tests/Makefile	2015-02-16 18:44:39 +00:00
Manuel Pégourié-Gonnard	ad350ed759	Update Changelog for the mem-measure branch	2015-02-16 17:45:35 +00:00
Manuel Pégourié-Gonnard	ea0184bbeb	Document changes to make for windows	2015-02-16 15:42:16 +00:00
Manuel Pégourié-Gonnard	09eb14c01e	Revert "Require unix-utils in path for windows make" This reverts commit `5d46cca09a`. In preparation of merging an external contribution that superseedes this Conflicts: ChangeLog	2015-02-16 15:25:31 +00:00
Paul Bakker	9c5898f033	Update release date and added note	2015-02-16 16:22:05 +01:00
Manuel Pégourié-Gonnard	6fdc4cae53	Fix potential signedness issue	2015-02-16 09:13:40 +00:00
Manuel Pégourié-Gonnard	00c220123d	Update Changelog for portability improvements	2015-02-13 15:15:51 +00:00
Manuel Pégourié-Gonnard	5d46cca09a	Require unix-utils in path for windows make	2015-02-13 12:02:45 +00:00
Manuel Pégourié-Gonnard	dda5213982	Fix harmless warnings with mingw in timing.c	2015-02-11 12:33:40 +00:00
Manuel Pégourié-Gonnard	38433535e3	Fix hardclock() with mingw64	2015-02-11 12:33:40 +00:00
Manuel Pégourié-Gonnard	677af93baa	Update Changelog for the cleanup branch	2015-02-10 11:41:57 +00:00
Manuel Pégourié-Gonnard	6f60cd848b	Move from SHA-1 to SHA-256 as default in programs	2015-02-10 11:31:58 +00:00
Manuel Pégourié-Gonnard	7bf1976034	Prepare Changelog for 1.3 branch development This is meant to minimize/simplify merge conflict between topic branches.	2015-02-10 10:09:37 +00:00
Manuel Pégourié-Gonnard	f7d2bbaa62	Merge branch 'development' into dtls * development: Add missing guards for gnuTLS Prepare for mbed TLS 1.3.10 release Fix potential timing issue in RSA pms handling Conflicts: ChangeLog doxygen/input/doc_mainpage.h doxygen/mbedtls.doxyfile include/polarssl/version.h library/CMakeLists.txt library/ssl_srv.c tests/suites/test_suite_version.data visualc/VS2010/mbedTLS.vcxproj visualc/VS6/mbedtls.dsp visualc/VS6/mbedtls.dsw	2015-02-09 11:42:40 +00:00
Paul Bakker	daae3b749b	Prepare for mbed TLS 1.3.10 release	2015-02-08 15:49:54 +01:00
Manuel Pégourié-Gonnard	6674cce892	Fix potential timing issue in RSA pms handling	2015-02-06 11:36:56 +00:00
Manuel Pégourié-Gonnard	20343cfec9	Merge branch 'development' into dtls * development: Add attribution Fix ignore patterns for windows cmake again	2015-02-03 11:31:06 +00:00
Manuel Pégourié-Gonnard	aa422b2f1a	Add attribution	2015-02-02 09:30:45 +00:00
Manuel Pégourié-Gonnard	2a0718d947	Merge branch 'development' into dtls * development: (46 commits) Fix url again Fix small bug in base64_encode() Fix depend that was checked but not documented Fix dependency that was not checked Minor gitginore fixes Move some ignore patterns to subdirectories Ignore CMake/MSVC-related build files. Re-categorize changelog entry Fix misattribution Minor nits with stdout/stderr. Add cmake compatibility targets Add script for polarssl symlink creation Fix more stdio inclusion issues Add debug info for cert/suite selection Fix possible portability issue Fix bug in ssl_get_verify_result() aescrypt2.c local char array not initial Update Changelog Fix mips64 bignum implementation Fix usage string of ssl_client2 ... Conflicts: include/polarssl/ssl.h library/CMakeLists.txt library/Makefile programs/Makefile programs/ssl/ssl_client2.c programs/ssl/ssl_server2.c visualc/VS2010/PolarSSL.sln visualc/VS2010/mbedTLS.vcxproj visualc/VS6/mbedtls.dsp visualc/VS6/mbedtls.dsw	2015-01-29 11:29:12 +00:00
Manuel Pégourié-Gonnard	65fc6a886a	Fix small bug in base64_encode()	2015-01-28 16:49:26 +00:00
Manuel Pégourié-Gonnard	f3046efb24	Re-categorize changelog entry	2015-01-28 15:21:42 +00:00
Manuel Pégourié-Gonnard	ee7d599904	Fix misattribution	2015-01-28 15:21:42 +00:00
Manuel Pégourié-Gonnard	607d663b41	Add debug info for cert/suite selection	2015-01-28 15:28:30 +01:00
Manuel Pégourié-Gonnard	e89163c0a8	Fix bug in ssl_get_verify_result()	2015-01-28 15:28:30 +01:00
Manuel Pégourié-Gonnard	9d7fc16dbf	Update Changelog	2015-01-28 15:28:29 +01:00
Manuel Pégourié-Gonnard	c9e0483b42	Update Changelog	2015-01-28 15:28:29 +01:00
Manuel Pégourié-Gonnard	acdb9b9525	Fix unchecked error code on Windows	2015-01-23 17:50:34 +00:00
Manuel Pégourié-Gonnard	67505bf9e8	Merge branch 'development' into dtls * development: Adapt tests to new defaults/errors. Fix typos/cosmetics in Changelog Disable RC4 by default in example programs. Add ssl_set_arc4_support() Set min version to TLS 1.0 in programs Conflicts: include/polarssl/ssl.h library/ssl_cli.c library/ssl_srv.c tests/compat.sh	2015-01-21 13:57:33 +00:00
Manuel Pégourié-Gonnard	bfccdd3c92	Merge commit '36adc36' into dtls * commit '36adc36': Add support for getrandom() Use library default for trunc-hmac in ssl_client2 Make truncated hmac a runtime option server-side Fix portability issue in script Specific error for suites in common but none good Prefer SHA-1 certificates for pre-1.2 clients Some more refactoring/tuning. Minor refactoring Conflicts: include/polarssl/error.h include/polarssl/ssl.h library/error.c	2015-01-21 13:48:45 +00:00
Manuel Pégourié-Gonnard	8fbb01ec84	Merge commit 'b2eaac1' into dtls * commit 'b2eaac1': Stop assuming chars are signed Add tests for CBC record splitting Fix tests that were failing with record splitting Allow disabling record splitting at runtime Add 1/n-1 record splitting Enhance doc on ssl_write() Conflicts: include/polarssl/ssl.h programs/ssl/ssl_client2.c programs/ssl/ssl_server2.c	2015-01-21 13:37:08 +00:00
Manuel Pégourié-Gonnard	0af1ba3521	Merge commit 'f6080b8' into dtls * commit 'f6080b8': Fix warning in reduced configs Adapt to "negative" switch for renego Add tests for periodic renegotiation Make renego period configurable Auto-renegotiate before sequence number wrapping Update Changelog for compile-option renegotiation Switch from an enable to a disable flag Save 48 bytes if SSLv3 is not defined Make renegotiation a compile-time option Add tests for renego security enforcement Conflicts: include/polarssl/ssl.h library/ssl_cli.c library/ssl_srv.c library/ssl_tls.c programs/ssl/ssl_server2.c tests/ssl-opt.sh	2015-01-21 11:54:33 +00:00
Manuel Pégourié-Gonnard	edb7ed3a43	Merge commit 'd7e2483' into dtls * commit 'd7e2483': (57 commits) Skip signature_algorithms ext if PSK only Fix bug in ssl_client2 reconnect option Cosmetics in ssl_server2 Improve debugging message. Fix net_usleep for durations greater than 1 second Use pk_load_file() in X509 Create ticket keys only if enabled Fix typo in #ifdef Clarify documentation a bit Fix comment on resumption Update comment from draft to RFC Use more #ifdef's on CLI_C and SRV_C in ssl_tls.c Add recursion.pl to all.sh Allow x509_crt_verify_child() in recursion.pl Set a compile-time limit to X.509 chain length Fix 3DES -> DES in all.sh (+ time estimates) Add curves.pl to all.sh Rework all.sh to use MSan instead of valgrind Fix depends on individual curves in tests Add script to test depends on individual curves ... Conflicts: CMakeLists.txt programs/ssl/ssl_client2.c	2015-01-20 16:52:28 +00:00
Manuel Pégourié-Gonnard	f9c8a606b5	Merge commit '8b9bcec' into dtls * commit '8b9bcec': Stop assuming chars are signed Fix len miscalculation in buffer-based allocator Fix NULL dereference in buffer-based allocator Add test_suite_memory_buffer_alloc Add memory_buffer_alloc_self_test() Fix missing bound check Add test for ctr_drbg_update() input sanitizing Refactor for clearer correctness/security Stop assuming chars are signed Conflicts: library/ssl_tls.c	2015-01-20 16:38:39 +00:00
Manuel Pégourié-Gonnard	d1a878c68f	Fix typos/cosmetics in Changelog	2015-01-14 16:59:23 +01:00
Paul Bakker	5b8f7eaa3e	Merge new security defaults for programs (RC4 disabled, SSL3 disabled)	2015-01-14 16:26:54 +01:00
Paul Bakker	36adc3631c	Merge support for getrandom() call	2015-01-14 16:19:59 +01:00
Paul Bakker	c82b7e2003	Merge option to disable truncated hmac on the server-side	2015-01-14 16:16:55 +01:00
Paul Bakker	e522d0fa57	Merge smarter certificate selection for pre-TLS-1.2 clients	2015-01-14 16:12:48 +01:00
Paul Bakker	f3561154ff	Merge support for 1/n-1 record splitting	2015-01-13 16:31:34 +01:00
Paul Bakker	f6080b8557	Merge support for enabling / disabling renegotiation support at compile-time	2015-01-13 16:18:23 +01:00
Paul Bakker	d7e2483bfc	Merge miscellaneous fixes into development	2015-01-13 16:04:38 +01:00
Manuel Pégourié-Gonnard	5dd28ea432	Fix len miscalculation in buffer-based allocator	2015-01-13 14:58:01 +01:00
Manuel Pégourié-Gonnard	547ff6618f	Fix NULL dereference in buffer-based allocator	2015-01-13 14:58:01 +01:00
Manuel Pégourié-Gonnard	5cb4b31057	Fix missing bound check	2015-01-13 14:58:00 +01:00
Manuel Pégourié-Gonnard	fa06581c73	Disable RC4 by default in example programs.	2015-01-13 13:03:06 +01:00
Manuel Pégourié-Gonnard	bd47a58221	Add ssl_set_arc4_support() Rationale: if people want to disable RC4 but otherwise keep the default suite list, it was cumbersome. Also, since it uses a global array, ssl_list_ciphersuite() is not a convenient place. So the SSL modules look like the best place, even if it means temporarily adding one SSL setting.	2015-01-13 13:03:06 +01:00
Manuel Pégourié-Gonnard	448ea506bf	Set min version to TLS 1.0 in programs	2015-01-12 12:32:04 +01:00
Manuel Pégourié-Gonnard	18292456c5	Add support for getrandom()	2015-01-09 14:34:13 +01:00
Manuel Pégourié-Gonnard	e117a8fc0d	Make truncated hmac a runtime option server-side Reading the documentation of ssl_set_truncated_hmac() may give the impression I changed the default for clients but I didn't, the old documentation was wrong.	2015-01-09 12:52:20 +01:00
Manuel Pégourié-Gonnard	f01768c55e	Specific error for suites in common but none good	2015-01-08 17:06:16 +01:00
Manuel Pégourié-Gonnard	df331a55d2	Prefer SHA-1 certificates for pre-1.2 clients	2015-01-08 16:43:07 +01:00
Manuel Pégourié-Gonnard	3ff78239fe	Add tests for CBC record splitting	2015-01-08 11:15:09 +01:00
Manuel Pégourié-Gonnard	d94232389e	Skip signature_algorithms ext if PSK only	2014-12-02 11:57:29 +01:00
Manuel Pégourié-Gonnard	fa4238838a	Update Changelog for compile-option renegotiation	2014-12-02 10:40:54 +01:00
Manuel Pégourié-Gonnard	fd6c85c3eb	Set a compile-time limit to X.509 chain length	2014-11-20 16:37:41 +01:00
Manuel Pégourié-Gonnard	426d4ae7ff	Split x509_crl_parse_der() out of x509_crl_parse()	2014-11-20 16:36:07 +01:00
Manuel Pégourié-Gonnard	8c9223df84	Add text view to debug_print_buf()	2014-11-19 13:21:38 +01:00
Manuel Pégourié-Gonnard	8a5e3d4a40	Forbid repeated X.509 extensions	2014-11-12 18:13:58 +01:00
Manuel Pégourié-Gonnard	d681443f69	Fix potential stack overflow	2014-11-12 01:25:31 +01:00
Manuel Pégourié-Gonnard	b134060f90	Fix memory leak with crafted X.509 certs	2014-11-12 00:01:52 +01:00
Manuel Pégourié-Gonnard	0369a5291b	Fix uninitialised pointer dereference	2014-11-12 00:01:52 +01:00
Manuel Pégourié-Gonnard	e959979621	Fix ECDSA sign buffer size	2014-11-12 00:01:52 +01:00
Manuel Pégourié-Gonnard	b31b61b9e8	Fix potential undefined behaviour in Camellia	2014-11-12 00:01:51 +01:00
Manuel Pégourié-Gonnard	54f6e562e6	Fix CFLAGS with cmake and gcc	2014-11-12 00:01:51 +01:00
Manuel Pégourié-Gonnard	de17125875	Update ChangeLog for pk_check_pair() & Co	2014-11-12 00:01:51 +01:00
Manuel Pégourié-Gonnard	e10e06d863	Blind RSA operations even without CRT	2014-11-06 18:25:44 +01:00
Manuel Pégourié-Gonnard	d056ce0e3e	Use seq_num as AEAD nonce by default	2014-11-06 18:23:49 +01:00
Manuel Pégourié-Gonnard	f9d778d635	Merge branch 'etm' into dtls * etm: Fix warning in reduced config Update Changelog for EtM Keep EtM state across renegotiations Adjust minimum length for EtM Don't send back EtM extension if not using CBC Fix for the RFC erratum Implement EtM Preparation for EtM Implement initial negotiation of EtM Conflicts: include/polarssl/check_config.h	2014-11-06 01:36:32 +01:00
Manuel Pégourié-Gonnard	56d985d0a6	Merge branch 'session-hash' into dtls * session-hash: Update Changelog for session-hash Make session-hash depend on TLS versions Forbid extended master secret with SSLv3 compat.sh: allow git version of gnutls compat.sh: make options a bit more robust Implement extended master secret Add negotiation of Extended Master Secret Conflicts: include/polarssl/check_config.h programs/ssl/ssl_server2.c	2014-11-06 01:25:09 +01:00
Manuel Pégourié-Gonnard	fedba98ede	Merge branch 'fb-scsv' into dtls * fb-scsv: Update Changelog for FALLBACK_SCSV Implement FALLBACK_SCSV server-side Implement FALLBACK_SCSV client-side	2014-11-05 16:12:09 +01:00
Manuel Pégourié-Gonnard	c7647079fa	Merge branch 'development' into dtls * development: Include 1.2.12 release information in ChangeLog	2014-11-05 16:02:57 +01:00
Manuel Pégourié-Gonnard	b3c6a97b31	Update Changelog for session-hash	2014-11-05 16:00:50 +01:00
Manuel Pégourié-Gonnard	c122ae7612	Update Changelog for EtM	2014-11-05 16:00:50 +01:00
Manuel Pégourié-Gonnard	178f9d6e19	Update Changelog for FALLBACK_SCSV	2014-11-05 16:00:49 +01:00
Paul Bakker	a6c5ea2c43	Include 1.2.12 release information in ChangeLog	2014-10-24 16:26:29 +02:00
Paul Bakker	1de7ddc333	Remove duplicate ChangeLog lines	2014-10-21 16:33:30 +02:00
Manuel Pégourié-Gonnard	4d7fbbf8fd	Update Changelog	2014-10-21 16:32:59 +02:00
Manuel Pégourié-Gonnard	ef88e68188	Deprecate ssl_set_bio()	2014-10-21 16:32:58 +02:00
Manuel Pégourié-Gonnard	e6bdc4497c	Merge I/O contexts into one	2014-10-21 16:32:25 +02:00
Manuel Pégourié-Gonnard	f4acfe1808	Document previous API changes in this branch	2014-10-21 16:32:23 +02:00
Paul Bakker	9eac4f7c4e	Prepare for release 1.3.9	2014-10-20 13:56:15 +02:00
Paul Bakker	b082bb50de	Fix typos in ChangeLog	2014-10-20 13:37:51 +02:00
Manuel Pégourié-Gonnard	f7cdbc0e87	Fix potential bad read of length	2014-10-17 17:02:10 +02:00
Manuel Pégourié-Gonnard	43c3b28ca6	Fix memory leak with crafted ClientHello	2014-10-17 12:42:11 +02:00
Manuel Pégourié-Gonnard	5d8618539f	Fix memory leak while parsing some X.509 certs	2014-10-17 12:41:41 +02:00
Manuel Pégourié-Gonnard	64938c63f0	Accept spaces at end of line/buffer in base64	2014-10-15 23:53:33 +02:00
Manuel Pégourié-Gonnard	7f4ed67a97	Fix compile error with armcc in mpi_is_prime()	2014-10-15 22:06:46 +02:00
Manuel Pégourié-Gonnard	da1b4de0e4	Increase MPI_MAX_BYTES to allow RSA 8192	2014-10-15 22:06:46 +02:00
Paul Bakker	5a5fa92bfe	x509_crt_parse() did not increase total_failed on PEM error Result was that PEM errors in files with multiple certificates were not detectable by the user.	2014-10-03 15:47:13 +02:00
Manuel Pégourié-Gonnard	480905d563	Fix selection of hash from sig_alg ClientHello ext.	2014-08-30 14:19:59 +02:00
Sander Niemeijer	ef5087d150	Added explicit casts to prevent compiler warnings when trying to build for iOS	2014-08-21 23:48:14 +02:00
Manuel Pégourié-Gonnard	a13500fdf7	Fix bug with ssl_close_notify and non-blocking I/O	2014-08-19 16:14:04 +02:00
Manuel Pégourié-Gonnard	f07f421759	Fix server-initiated renego with non-blocking I/O	2014-08-19 13:32:15 +02:00
Manuel Pégourié-Gonnard	f26a1e8602	ssl_read() stops returning non-application data	2014-08-19 12:28:50 +02:00
Manuel Pégourié-Gonnard	dca108e5a2	Rm reference to non-existent file in VS projects	2014-08-14 11:34:35 +02:00
Manuel Pégourié-Gonnard	462906f955	Do no test net_usleep() when not defined	2014-08-14 11:34:35 +02:00
Manuel Pégourié-Gonnard	192253aaa9	Fix buffer size in pk_write_*_pem()	2014-08-14 11:34:35 +02:00
Manuel Pégourié-Gonnard	868c0eea08	Update Changelog for the last few commits	2014-08-14 11:34:35 +02:00
Manuel Pégourié-Gonnard	42cc641159	Don't print uninitialized buffer in ssl_mail_client	2014-08-14 11:34:34 +02:00
Manuel Pégourié-Gonnard	9a6b442cee	Fix non-blocking sockets in net_accept()	2014-08-14 11:34:34 +02:00
Manuel Pégourié-Gonnard	a04fa4fa04	RSA-PSK key exchange requires TLS 1.x It's not clear if, with SSL3, one should include send the two length bytes for EncryptedPreMasterSecret or not, so require TLS to avoid interop issues.	2014-08-14 11:34:34 +02:00
Manuel Pégourié-Gonnard	8d4ad07706	SHA-2 ciphersuites now require TLS 1.x	2014-08-14 11:34:34 +02:00
Manuel Pégourié-Gonnard	955028f858	Fix compile error in ssl_pthread_server	2014-08-14 11:34:33 +02:00
Paul Bakker	8dcb2d7d7e	Support escaping of commas in x509_string_to_names()	2014-08-11 11:59:52 +02:00
Paul Bakker	1910aa78a3	Fix release date for 1.3.8	2014-07-11 11:28:56 +02:00
Paul Bakker	0ae5a3d336	Include 1.2.11 ChangeLog	2014-07-11 11:28:30 +02:00
Paul Bakker	6c343d7d9a	Fix mpi_write_string() to write "00" as hex output for empty MPI	2014-07-10 15:27:10 +02:00
Paul Bakker	ec3a617d40	Make ready for release of 1.3.8 and soversion 7	2014-07-09 10:21:28 +02:00
Paul Bakker	28476e2789	Updated ChangeLog	2014-07-09 10:19:52 +02:00
Manuel Pégourié-Gonnard	08e81e0c8f	Change selection of hash algorithm for TLS 1.2	2014-07-08 14:20:26 +02:00
Manuel Pégourié-Gonnard	bd77254b18	md_list() starting with strongest hash	2014-07-08 13:03:02 +02:00
Paul Bakker	8fb99abaac	Merge changes for leaner memory footprint	2014-07-04 15:02:19 +02:00
Paul Bakker	b9e08b086b	Merge server-side enforced renegotiation requests	2014-07-04 15:01:37 +02:00
Paul Bakker	d598318661	Fix base64_decode() to return and check length correctly	2014-07-04 15:01:00 +02:00
Paul Bakker	23647b4df5	Update ChangeLog	2014-07-04 15:00:12 +02:00
Manuel Pégourié-Gonnard	dfc7df0bec	Add SSL_CIPHERSUITES config option	2014-07-04 14:59:02 +02:00
Manuel Pégourié-Gonnard	01edb1044c	Add POLARSSL_REMOVE_RC4_CIPHERSUITES	2014-06-25 11:27:59 +02:00
Paul Bakker	2a45d1c8bb	Merge changes to config examples and configuration issues	2014-06-25 11:27:00 +02:00
Manuel Pégourié-Gonnard	3135725670	Disable broken Sparc64 bn_mul assembly	2014-06-25 11:26:15 +02:00
Manuel Pégourié-Gonnard	8df68632e8	Fix bug in DHE-PSK PMS computation	2014-06-25 11:26:14 +02:00
Manuel Pégourié-Gonnard	fd35af1579	Fix off-by-one error in point format parsing	2014-06-25 11:26:14 +02:00
Manuel Pégourié-Gonnard	acbcbba860	Fix asm format of bn_mul.h for more portability Found by Barry K. Nathan. Quoting from http://gcc.gnu.org/onlinedocs/gcc/Extended-Asm.html: "You can put multiple assembler instructions together in a single asm template, separated by the characters normally used in assembly code for the system. A combination that works in most places is a newline to break the line, plus a tab character to move to the instruction field (written as ‘\n\t’). Sometimes semicolons can be used, if the assembler allows semicolons as a line-breaking character. Note that some assembler dialects use semicolons to start a comment."	2014-06-25 11:26:13 +02:00
Barry K. Nathan	35e7cb9aa6	Fix preprocessor checks for bn_mul PPC asm On OS X, neither __powerpc__ nor __ppc__ is defined on PPC64, so the asm code was only being used on PPC32.	2014-06-25 11:26:13 +02:00
Manuel Pégourié-Gonnard	d249b7ab9a	Restore ability to trust non-CA selfsigned EE cert	2014-06-25 11:26:13 +02:00
Manuel Pégourié-Gonnard	c4eff16516	Restore ability to use v1 CA if trusted locally	2014-06-25 11:26:12 +02:00
Manuel Pégourié-Gonnard	08485cca81	Fix SSL_BUFFER_LEN	2014-06-25 11:26:12 +02:00
Manuel Pégourié-Gonnard	eaa76f7e20	Fix computation of minlen for encrypted packets	2014-06-25 11:26:12 +02:00
Manuel Pégourié-Gonnard	0bcc4e1df7	Fix length checking for AEAD ciphersuites	2014-06-25 11:26:10 +02:00
Manuel Pégourié-Gonnard	3579522d31	Update Changelog for example configs changes	2014-06-24 17:33:54 +02:00
Manuel Pégourié-Gonnard	398c57b0b3	Blowfish accepts variable key len in cipher layer	2014-06-24 11:01:33 +02:00
Paul Bakker	3c38f29a61	Fix DER output of gen_key app (found by Gergely Budai)	2014-06-14 16:46:43 +02:00
Paul Bakker	3461772559	Introduce polarssl_zeroize() instead of memset() for zeroization	2014-06-14 16:46:03 +02:00
Paul Bakker	c2ff2083ee	Merge parsing and verification of RSASSA-PSS in X.509 modules	2014-06-12 22:02:47 +02:00
Paul Bakker	f51183a262	Revert deleted PolarSSL 1.3.4 release line in ChangeLog	2014-06-12 21:53:40 +02:00
Paul Bakker	863989bc81	Add LINK_WITH_PTHREAD to ChangeLog	2014-06-12 21:49:01 +02:00
Paul Bakker	49033ba0ac	Update ChangeLog for external fixes	2014-06-12 21:46:13 +02:00
Manuel Pégourié-Gonnard	b479871956	Update Changelog for RSASSA-PSS in X.509	2014-06-07 11:21:52 +02:00
Manuel Pégourié-Gonnard	bf696d030b	Make sig_opts non-optional in X509 structures This simplifies the code.	2014-06-05 17:08:46 +02:00
Manuel Pégourié-Gonnard	cf975a3857	Factor out some common code	2014-06-02 16:12:46 +02:00
Paul Bakker	1ebc0c592c	Fix typos	2014-05-22 15:47:58 +02:00
Paul Bakker	c6ece49890	Updated ChangeLog for CCM	2014-05-22 15:45:03 +02:00
Paul Bakker	0f651c7422	Stricter check on SSL ClientHello internal sizes compared to actual packet size	2014-05-22 15:12:19 +02:00
Paul Bakker	dff3139cc8	Updated ChangeLog	2014-05-22 15:06:41 +02:00
Paul Bakker	5593f7caae	Fix typo in debug_print_msg()	2014-05-06 10:29:28 +02:00
Paul Bakker	47431b6d31	Updated ChangeLog for 1.3.7 to 2014-05-02	2014-05-02 13:27:13 +02:00
Paul Bakker	da13016d84	Prepped for 1.3.7 release	2014-05-01 14:27:19 +02:00
Barry K. Nathan	cf975f5988	Fix build with cc from Apple LLVM On Xcode 4.x and above (I tested Xcode 4.6.3 on 10.7.5 and Xcode 5.5.1 on 10.9.2), cmake (2.8.12.2, whether from MacPorts or from clang.org, FWIW) is detecting /usr/bin/cc as Clang, but CMAKE_COMPILER_IS_CLANG is not getting set, so the tests aren't being built. (There may have been other build problems as well, but the fact that the tests weren't being built was by far the most obvious problem.) Checking the compiler ID detected by cmake, rather than the name of the command used to invoke the compiler, fixes this.	2014-04-30 16:53:34 +02:00
Markus Pfeiffer	a26a005acf	Make compilation on DragonFly work	2014-04-30 16:52:28 +02:00
Paul Bakker	2a024ac86a	Merge dependency fixes	2014-04-30 16:50:59 +02:00
Manuel Pégourié-Gonnard	c16f4e1f78	Move RC4 ciphersuites down the list	2014-04-30 16:27:06 +02:00
Paul Bakker	8eab8d368b	Merge more portable AES-NI	2014-04-30 16:21:08 +02:00
Paul Bakker	33dc46b080	Fix bug with mpi_fill_random() on big-endian	2014-04-30 16:20:39 +02:00
Paul Bakker	f96f7b607a	On OpenBSD, use arc4random_buf() instead of rand() to prevent warnings	2014-04-30 16:02:38 +02:00
Paul Bakker	6384440b13	Better support for the different Attribute Types from IETF PKIX (RFC 5280)	2014-04-30 15:34:12 +02:00
Paul Bakker	24f37ccaed	rsa_check_pubkey() now allows an E up to N	2014-04-30 13:43:51 +02:00
Paul Bakker	0f90d7d2b5	version_check_feature() added to check for compile-time options at run-time	2014-04-30 11:49:44 +02:00
Paul Bakker	a70366317d	Improve interop by not writing ext_len in ClientHello / ServerHello when 0 The RFC also indicates that without any extensions, we should write a struct {} (empty) not an array of length zero.	2014-04-30 10:16:16 +02:00
Manuel Pégourié-Gonnard	3a306b9067	Fix misplaced #endif in ssl_tls.c	2014-04-29 15:11:17 +02:00
Manuel Pégourié-Gonnard	edc81ff8c2	Fix some more curve depends in X.509 tests	2014-04-29 15:10:40 +02:00
Manuel Pégourié-Gonnard	63a5bfe903	Update Changelog for AES-NI	2014-04-26 17:21:07 +02:00
Paul Bakker	c73079a78c	Add debug_set_threshold() and thresholding of messages	2014-04-25 16:58:16 +02:00
Paul Bakker	92478c37a6	Debug module only outputs full lines instead of parts	2014-04-25 16:58:15 +02:00
Paul Bakker	eaebbd5eaa	debug_set_log_mode() added to determine raw or full logging	2014-04-25 16:58:14 +02:00
Paul Bakker	61885c7f7f	Fix false reject in padding check in ssl_decrypt_buf() for CBC ciphersuites In case full SSL frames arrived, they were rejected because an overly strict padding check.	2014-04-25 12:59:51 +02:00
Paul Bakker	fdba46885b	cert_write app should use subject of issuer certificate as issuer of cert	2014-04-25 11:48:35 +02:00
Paul Bakker	4ffcd2f9c3	Typo in PKCS#11 module	2014-04-25 11:44:12 +02:00
Paul Bakker	10a9dd35ea	Typo in POLARSSL_PLATFORM_STD_FPRINTF in platform.c	2014-04-25 11:27:16 +02:00
Paul Bakker	088c5c5f18	POLARSSL_CONFIG_OPTIONS has been removed. Values are set individually For the Platform module this requires the introduction of POLARSSL_PLATFORM_NO_STD_FUNCTIONS to allow not performing the default assignments.	2014-04-25 11:11:10 +02:00
Paul Bakker	e92f73d73b	Updated ChangeLog	2014-04-18 14:08:26 +02:00
Paul Bakker	784b04ff9a	Prepared for version 1.3.6	2014-04-11 15:33:59 +02:00
Manuel Pégourié-Gonnard	9655e4597a	Reject certificates with times not in UTC	2014-04-11 13:59:36 +02:00
Manuel Pégourié-Gonnard	0776a43788	Use UTC to heck certificate validity	2014-04-11 13:59:31 +02:00
Paul Bakker	52c5af7d2d	Merge support for verifying the extendedKeyUsage extension in X.509	2014-04-11 13:58:57 +02:00
Manuel Pégourié-Gonnard	78848375c0	Declare EC constants as 'const'	2014-04-11 13:58:41 +02:00
Paul Bakker	1630058dde	Potential buffer overwrite in pem_write_buffer() fixed Length indication when given a too small buffer was off. Added regression test in test_suite_pem to detect this.	2014-04-11 13:58:05 +02:00
Manuel Pégourié-Gonnard	b7fff0f9c6	Update Changelog for extendedKeyUsage	2014-04-11 11:32:39 +02:00
Paul Bakker	59366213cb	Updated ChangeLog for keyUsage merge	2014-04-09 15:55:20 +02:00
Manuel Pégourié-Gonnard	2abed84225	Specific return code for PK sig length mismatch	2014-04-09 15:50:00 +02:00
Paul Bakker	1cfc45835f	Add option 'use_dev_random' to gen_key application	2014-04-09 15:49:58 +02:00
Paul Bakker	17b85cbd69	Merged additional tests and improved code coverage Conflicts: ChangeLog	2014-04-08 14:38:48 +02:00
Paul Bakker	0763a401a7	Merged support for the ALPN extension	2014-04-08 14:37:12 +02:00
Paul Bakker	4224bc0a4f	Prevent potential NULL pointer dereference in ssl_read_record()	2014-04-08 14:36:50 +02:00
Paul Bakker	27e36d342c	Support for the ALPN SSL extension (re-enabled in config.h)	2014-04-08 12:33:37 +02:00
Manuel Pégourié-Gonnard	8c045ef8e4	Fix embarrassing X.509 bug introduced in `9533765`	2014-04-08 11:55:03 +02:00
Shuo Chen	95a0d118a9	Fix compile error when POLARSSL_ERROR_STRERROR_BC is undefined.	2014-04-08 10:53:51 +02:00
Manuel Pégourié-Gonnard	0148875cfc	Add tests and fix bugs for RSA-alt contexts	2014-04-04 17:46:46 +02:00
Manuel Pégourié-Gonnard	3fec220a33	Add test for dhm_parse_dhmfile	2014-04-04 16:42:44 +02:00
Manuel Pégourié-Gonnard	7afdb88216	Test and fix x509_oid functions	2014-04-04 16:34:30 +02:00
Paul Bakker	4984d3c0b8	Updated ChangeLog for x509_crt_info() change	2014-04-04 15:39:37 +02:00
Manuel Pégourié-Gonnard	887aa5b381	Fix include path in ecdsa.h	2014-04-04 13:57:20 +02:00
Manuel Pégourié-Gonnard	e442111e29	Fix typo which broke ENTROPY_FORCE_SHA256	2014-04-02 13:50:05 +02:00
Manuel Pégourié-Gonnard	74bc68ac62	Fix default #define for malloc/free	2014-04-02 13:20:00 +02:00
Paul Bakker	75a2860f26	Potential memory leak in mpi_exp_mod() when error occurs during calculation of RR.	2014-03-31 12:08:17 +02:00
Manuel Pégourié-Gonnard	dd75c3183b	Remove potential timing leak in ecdsa_sign()	2014-03-31 11:55:42 +02:00
Manuel Pégourié-Gonnard	6b0d268bc9	Add ssl_close_notify() to servers that missed it	2014-03-31 11:28:11 +02:00
Manuel Pégourié-Gonnard	969ccc6289	Fix length checking of various ClientKeyExchange's	2014-03-27 21:10:56 +01:00
Paul Bakker	96d5265315	Made ready for release 1.3.5	2014-03-26 16:55:50 +01:00
Paul Bakker	5fff23b92a	x509_get_current_time() uses localtime_r() to prevent thread issues	2014-03-26 15:34:54 +01:00
Paul Bakker	77f4f39ea6	Make sure no random pointer occur during failed malloc()'s	2014-03-26 15:30:20 +01:00
Paul Bakker	91c61bc4fd	Further tightened the padlen check to prevent underflow / overflow	2014-03-26 15:14:20 +01:00
Paul Bakker	674e0b015a	Improvements to tests/Makefile when using shared library	2014-03-26 13:26:52 +01:00
Manuel Pégourié-Gonnard	7a2aba8d81	Deprecate some non-PK compatibility functions (Should have been deprecated in 1.3.0 already.)	2014-03-26 12:58:52 +01:00
Manuel Pégourié-Gonnard	b2bf5a1bbb	Fix possible buffer overflow with PSK	2014-03-26 12:58:50 +01:00
Manuel Pégourié-Gonnard	fdddac90a6	Fix stupid bug in rsa_copy()	2014-03-26 12:58:49 +01:00
Paul Bakker	66ff70dd48	Support for seed file writing and reading in Entropy	2014-03-26 11:58:07 +01:00
Manuel Pégourié-Gonnard	86b400f0e0	Update Changelog	2014-03-19 16:55:29 +01:00
Paul Bakker	6a8e7f82b3	Added ChangeLog lines for new SSL tests	2014-03-17 13:45:06 +01:00
Paul Bakker	b0695ced31	Fixed spaces in ChangeLog	2014-03-17 13:42:23 +01:00
Paul Bakker	3d6504a935	ssl_init() left a dirty in_ctr pointer on failed allocation of out_ctr	2014-03-17 13:41:51 +01:00
Paul Bakker	a4b0343edf	Merged massive SSL Testing improvements	2014-03-14 16:30:36 +01:00
Manuel Pégourié-Gonnard	bb8661e006	Work around a compiler bug on OS X.	2014-03-14 09:21:20 +01:00
Manuel Pégourié-Gonnard	d701c9aec9	Fix memory leak in server with expired tickets	2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard	84c30c7e83	Fix memory leak in ssl_cache	2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard	145dfcbfc2	Fix bug with NewSessionTicket and non-blocking I/O	2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard	dfbf9c711d	Fix bug in m_sleep()	2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard	274a12e17c	Fix bug with ssl_cache and max_entries=0	2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard	14ed1a2934	Update changelog for cmake changes	2014-03-13 19:25:06 +01:00
Alex Wilson	7349142ce7	Don't try to use MIPS32 asm macros on MIPS64 The MIPS32 bn_mul asm code causes segfaults on MIPS64 and failing tests. Until someone has time to fix this up, MIPS64 platforms should fall back to the C implementation (which works fine).	2014-03-13 19:25:06 +01:00
Manuel Pégourié-Gonnard	844a4c0aef	Fix RSASSA-PSS example programs	2014-03-13 19:25:06 +01:00
Manuel Pégourié-Gonnard	83cdffc437	Forbid sequence number wrapping	2014-03-13 19:25:06 +01:00
Manuel Pégourié-Gonnard	9533765b25	Reject certs and CRLs from the future	2014-03-13 19:25:06 +01:00
Manuel Pégourié-Gonnard	29dcc0b93c	Fix depend issues in test suites for cipher modes	2014-03-13 19:25:06 +01:00
Manuel Pégourié-Gonnard	796c6f3aff	Countermeasure against "triple handshake" attack	2014-03-13 19:25:06 +01:00
Paul Bakker	3d52ab76f6	Fixed CMake symlinking on out-of-source builds	2014-03-07 10:33:55 +01:00
Manuel Pégourié-Gonnard	47fc5ae400	Fxi typo	2014-02-20 15:56:43 +01:00
Manuel Pégourié-Gonnard	6b1e207081	Fix verion-major intolerance	2014-02-12 10:14:54 +01:00
Manuel Pégourié-Gonnard	c9093085ed	Revert "Merged RSA-PSS support in Certificate, CSR and CRL" This reverts commit `ab50d8d30c`, reversing changes made to `e31b1d992a`.	2014-02-12 09:39:59 +01:00
Manuel Pégourié-Gonnard	6df09578bb	Revert "Mutex call in x509_crt.c depended on PTHREAD specific instead of generic" This reverts commit `9eae7aae80`.	2014-02-12 09:29:05 +01:00
Paul Bakker	2ceda57989	Ability to force the Entropy module to use SHA-256 as its basis By default the SHA-512 module is used if both are available. On some systems, SHA-256 is the better choice. Contributed by: Gergely Budai	2014-02-06 15:55:25 +01:00
Paul Bakker	cd6d69a414	Fixed testing with out-of-source builds using cmake	2014-02-06 15:44:11 +01:00
Paul Bakker	f2561b3f69	Ability to provide alternate timing implementation	2014-02-06 15:32:26 +01:00
Paul Bakker	47703a0a80	More entropy functions made thread-safe (add_source, update_manual, gather)	2014-02-06 15:01:20 +01:00
Paul Bakker	9eae7aae80	Mutex call in x509_crt.c depended on PTHREAD specific instead of generic threading	2014-02-06 14:51:53 +01:00
Paul Bakker	6a28e722c9	Merged platform compatibility layer	2014-02-06 13:44:19 +01:00
Paul Bakker	ab50d8d30c	Merged RSA-PSS support in Certificate, CSR and CRL	2014-02-06 13:14:56 +01:00
Paul Bakker	e31b1d992a	Added Curve preference order to ChangeLog	2014-02-06 13:08:02 +01:00
Manuel Pégourié-Gonnard	fbf0915404	Fix bug in RSA PKCS#1 v1.5 "reversed" operations	2014-02-05 17:01:24 +01:00
Paul Bakker	5fb8efe71e	Merged HMAC-DRBG code	2014-02-05 15:55:18 +01:00
Manuel Pégourié-Gonnard	6e8e34d61e	Fix ecp_gen_keypair() Too few tries caused failures for some curves (esp. secp224k1)	2014-02-05 15:53:45 +01:00
Paul Bakker	2cb1a0c400	Fixed indication for TrustInSoft fix	2014-01-27 13:36:23 +01:00
Paul Bakker	b84582b7a6	Fixed up ChangeLog with missing bug fixes	2014-01-27 12:23:43 +01:00
Paul Bakker	2aca241425	Ready for release 1.3.4	2014-01-27 11:59:30 +01:00
Paul Bakker	e6c2ddb0b8	Updated ChangeLog with deterministic ECDSA	2014-01-27 11:59:29 +01:00
Paul Bakker	42099c3155	Revert "Add pk_rsa_set_padding() and rsa_set_padding()" This reverts commit `b4fae579e8`. Conflicts: library/pk.c tests/suites/test_suite_pk.data tests/suites/test_suite_pk.function	2014-01-27 11:59:29 +01:00
Manuel Pégourié-Gonnard	5cac583482	Factor out some common code	2014-01-25 12:48:58 +01:00
Paul Bakker	d75ba40cc3	SMTP lines are officially terminated with CRLF, ssl_mail_client fixed	2014-01-24 16:12:18 +01:00
Paul Bakker	556efba51c	Added AES CFB8 mode	2014-01-24 15:38:12 +01:00
Paul Bakker	5862eee4ca	Merged RIPEMD-160 support	2014-01-22 14:18:34 +01:00
Paul Bakker	0ac99ca7bc	Merged support for secp224k1, secp192k1 and secp25k1	2014-01-22 13:10:48 +01:00
Paul Bakker	3eb9673e19	Updated ChangeLog with recent changes	2014-01-22 13:08:19 +01:00
Paul Bakker	a8fd3e31ed	Removed POLARSSL_THREADING_DUMMY option	2013-12-31 11:54:08 +01:00
Paul Bakker	6992eb762c	Fixed potential overflow in certificate size in ssl_write_certificate()	2013-12-31 11:38:33 +01:00
Paul Bakker	6ea1a95ce8	Added missing MPI_CHK() around some statements	2013-12-31 11:17:14 +01:00
Paul Bakker	5bc07a3d30	Prepped for 1.3.3	2013-12-31 10:57:44 +01:00
Paul Bakker	c73879139e	Merged ECP memory usage optimizations	2013-12-31 10:33:47 +01:00
Paul Bakker	956c9e063d	Reduced the input / output overhead with 200+ bytes and covered corner case The actual input / output buffer overhead is only 301 instead of 512. This requires a proper check on the padding_idx to prevent out of bounds reads. Previously a remote party could potentially trigger an access error and thus stop the application when sending a malicious packet having MAX_CONTENT_LEN of data, 32 bytes of MAC and a decrypted padlen of . This would result in reading from in_ctr + 13 + 32 + MAX_CONTENT_LEN - 1 - 1 for 256 bytes (including fake padding check). Or 13 + 32 bytes over the buffer length. We now reset padding_idx to 0, if it's clear that it will never be a valid padding (padlen > msg_len \|\| msg_len + padlen + 256 > buffer_len)	2013-12-30 15:00:51 +01:00
Paul Bakker	f9c4953e39	Added version of the SSL pthread server example	2013-12-30 14:55:54 +01:00
Paul Bakker	23116fdb53	Merged AES-NI support for AES, AES-GCM and AES key scheduling	2013-12-30 14:10:35 +01:00
Paul Bakker	1a56fc96a3	Fixed x509_crt_parse_path() bug on Windows platforms	2013-12-19 13:52:33 +01:00
Paul Bakker	5a607d26b7	Merged IPv6 support in the NET module	2013-12-17 14:34:19 +01:00
Paul Bakker	5ab68ba679	Merged storing curves fully in ROM	2013-12-17 13:11:18 +01:00
Paul Bakker	fdf946928d	Merged support for ECDH-RSA / ECDH-ECDSA key exchanges and ciphersuites	2013-12-17 13:10:27 +01:00
Paul Bakker	f70fe81a6e	Fixed memory leak in benchmark application	2013-12-17 13:09:12 +01:00
Paul Bakker	6f0636a09f	Potential memory leak in ssl_ticket_keys_init()	2013-12-17 13:09:12 +01:00
Paul Bakker	48d78a5e60	Merged support for Curve25519	2013-12-05 16:12:40 +01:00
Manuel Pégourié-Gonnard	9a4a5ac4de	Fix bug in mpi_set_bit	2013-12-05 15:58:38 +01:00
Paul Bakker	b14817d10a	Updated ChangeLog for splitting off curves from ecp.c	2013-12-02 22:03:23 +01:00
Paul Bakker	9dc53a9967	Merged client ciphersuite order preference option	2013-12-02 14:56:27 +01:00
Paul Bakker	014f143c2a	Merged EC key generation support	2013-12-02 14:55:09 +01:00
Paul Bakker	4040d7e95c	Merged more constant-time checking in RSA	2013-12-02 14:53:23 +01:00
Paul Bakker	c3d0d07a7a	Merged change from readdir_r() to readdir() + threading	2013-12-02 14:52:50 +01:00
Paul Bakker	7aa0375b78	Updated ChangeLog to reflect recent changes	2013-11-26 17:37:31 +01:00
Paul Bakker	a9a028ebd0	SSL now gracefully handles missing RNG	2013-11-21 17:31:06 +01:00
Paul Bakker	f2b4d86452	Fixed X.509 hostname comparison (with non-regular characters) In situations with 'weird' certificate names or hostnames (containing non-western allowed names) the check would falsely report a name or wildcard match.	2013-11-21 17:30:23 +01:00
Paul Bakker	f4dc186818	Prep for PolarSSL 1.3.2	2013-11-04 17:29:42 +01:00
Paul Bakker	e1121b6217	Update ChangeLog for renegotiation changes	2013-10-31 15:57:22 +01:00
Paul Bakker	7b0be68977	Support for serialNumber, postalAddress and postalCode in X509 names	2013-10-29 14:24:37 +01:00
Paul Bakker	fa6a620b75	Defines for UEFI environment under MSVC added	2013-10-29 14:05:38 +01:00
Manuel Pégourié-Gonnard	178d9bac3c	Fix ECDSA corner case: missing reduction mod N No security issue, can cause valid signatures to be rejected. Reported by DualTachyon on github.	2013-10-29 13:40:17 +01:00
Paul Bakker	60b1d10131	Fixed spelling / typos (from PowerDNS:codespell)	2013-10-29 10:02:51 +01:00
Paul Bakker	93c6aa4014	Fixed that selfsign copies issuer_name to subject_name	2013-10-28 22:29:11 +01:00
Paul Bakker	50dc850c52	Const correctness	2013-10-28 21:19:10 +01:00
Paul Bakker	7bc745b6a1	Merged constant-time padding checks	2013-10-28 14:40:26 +01:00
Paul Bakker	1642122f8b	Merged support for Camellia-GCM + ciphersuite and fixes to cipher layer	2013-10-28 14:38:35 +01:00
Paul Bakker	3f917e230d	Merged optimizations for MODP NIST curves	2013-10-28 14:18:26 +01:00
Paul Bakker	08bb187bb6	Merged Public Key framwork tests	2013-10-28 14:11:09 +01:00
Paul Bakker	68037da3cd	Update Changelog for minor fixes	2013-10-28 14:02:40 +01:00
Paul Bakker	45a2c8d99a	Prevent possible alignment warnings on casting from char * to 'aligned *'	2013-10-28 12:57:08 +01:00
Paul Bakker	677377f472	Server does not send out extensions not advertised by client	2013-10-28 12:54:26 +01:00
Paul Bakker	5c17ccdf2a	Bumped version to 1.3.1	2013-10-15 13:12:41 +02:00
Paul Bakker	f34673e37b	Merged RSA-PSK key-exchange and ciphersuites	2013-10-15 12:46:41 +02:00
Paul Bakker	376e8153a0	Merged ECDHE-PSK ciphersuites	2013-10-15 12:45:36 +02:00
Paul Bakker	a7ea6a5a18	config.h is more script-friendly	2013-10-15 11:55:10 +02:00
Paul Bakker	be089b0483	Introduced POLARSSL_HAVE_READDIR_R for systems without it	2013-10-14 15:51:50 +02:00
Paul Bakker	5191e92ecc	Added missing x509write_crt_set_version()	2013-10-11 10:54:28 +02:00
Paul Bakker	b7c13123de	threading_set_own() renamed to threading_set_alt()	2013-10-11 10:51:32 +02:00
Paul Bakker	4aa40d4f51	Better support for MSVC	2013-10-11 10:49:24 +02:00
Paul Bakker	b799dec4c0	Merged support for Brainpool curves and ciphersuites	2013-10-11 10:05:43 +02:00
Paul Bakker	1677033bc8	TLS compression only allocates working buffer once	2013-10-11 09:59:44 +02:00
Paul Bakker	d61cc3b246	Possible naming collision in dhm_context	2013-10-11 09:38:49 +02:00
Paul Bakker	fcc172138c	Fixed const-correctness issues	2013-10-11 09:38:06 +02:00
Paul Bakker	ddba8822d0	Added bugfixes to ChangeLog	2013-10-11 09:22:12 +02:00
Paul Bakker	3a2c0563c9	Added 1.2.10 to ChangeLog	2013-10-07 16:22:05 +02:00
Paul Bakker	d93d28e370	Fixed release date for 1.3.0	2013-10-01 10:15:23 +02:00
Paul Bakker	2466d93546	Threading abstraction layer added	2013-09-28 15:00:02 +02:00
Paul Bakker	c13aab18dc	Added 1.1.8 and 1.2.9 release	2013-09-26 10:12:19 +02:00
Paul Bakker	f18084a201	Ready for 1.3.0 release	2013-09-26 10:07:09 +02:00
Paul Bakker	8b817dc47e	Merged support for multiple certificate/key pairs in SSL into development	2013-09-25 18:05:16 +02:00
Paul Bakker	c27c4e2efb	Support faulty X509 v1 certificates with extensions (POLARSSL_X509_ALLOW_EXTENSIONS_NON_V3)	2013-09-23 15:01:36 +02:00
Paul Bakker	5ad403f5b5	Prepared for 1.3.0 RC0	2013-09-18 21:21:30 +02:00
Paul Bakker	45f21c7ad1	PK layer and X509 core refactoring in ChangeLog	2013-09-18 15:34:45 +02:00
Paul Bakker	7fb4a79f50	Added merged functionality to ChangeLog	2013-09-14 08:15:55 +02:00
Paul Bakker	6ec34fb53d	Added ChangeLog for blinding	2013-09-10 14:53:46 +02:00
Paul Bakker	003dbad250	Fixed file descriptor leak in x509parse_crtpath()	2013-09-09 17:26:14 +02:00
Paul Bakker	a5943858d8	x509_verify() now case insensitive for cn (RFC 6125 6.4)	2013-09-09 17:21:45 +02:00
Paul Bakker	aab30c130c	RSA blinding added for CRT operations	2013-08-30 11:03:09 +02:00
Paul Bakker	548957dd49	Refactored RSA to have random generator in every RSA operation Primarily so that rsa_private() receives an RNG for blinding purposes.	2013-08-30 10:30:02 +02:00
Paul Bakker	ca174fef80	Merged refactored x509write module into development	2013-08-28 16:32:51 +02:00
Paul Bakker	c8676784ff	Amended ChangeLog for ECDSA-ciphersuites	2013-08-28 12:15:11 +02:00
Paul Bakker	0be444a8b1	Ability to disable server_name extension (RFC 6066)	2013-08-27 21:55:01 +02:00
Paul Bakker	d2f068e071	Ability to enable / disable SSL v3 / TLS 1.0 / TLS 1.1 / TLS 1.2 individually	2013-08-27 21:19:20 +02:00
Paul Bakker	936539ad4b	Updated Changelog to reflect addition of session tickets	2013-08-14 14:26:03 +02:00
Paul Bakker	da4d1c35d1	Updated Changelog to reflect feature addition	2013-08-14 14:02:48 +02:00
Paul Bakker	1e6a175362	Support for AIX header locations in net.c module	2013-07-26 14:10:22 +02:00
Paul Bakker	f85778efb0	Updated Changelog for EC Key / Cert and RFC 6066 extensions	2013-07-19 14:55:25 +02:00
Paul Bakker	fa9b10050b	Also compiles / runs without time-based functions in OS Can now run without need of time() / localtime() and gettimeofday()	2013-07-03 17:22:32 +02:00
Paul Bakker	6e339b52e8	Memory-allocation abstraction layer and buffer-based allocator added	2013-07-03 17:22:31 +02:00
Paul Bakker	abf2f8fcf9	zlib compression/decompression skipped on empty blocks	2013-06-30 14:57:46 +02:00
Paul Bakker	9e36f0475f	SHA2 renamed to SHA256, SHA4 renamed to SHA512 and functions accordingly The SHA4 name was not clear with regards to the new SHA-3 standard. So SHA2 and SHA4 have been renamed to better represent what they are: SHA256 and SHA512 modules.	2013-06-30 14:34:05 +02:00
Paul Bakker	63899feca8	Removed redundant bugfix from ChangeLog (Already done in 1.2.8)	2013-06-30 12:20:03 +02:00
Paul Bakker	e2ab84f4a1	Renamed error_strerror() to the less conflicting polarssl_strerror() Ability to keep old function error_strerror() as well with POLARSSL_ERROR_STRERROR_BC. Also works with POLARSSL_ERROR_STRERROR_DUMMY.	2013-06-29 18:35:41 +02:00
Paul Bakker	2fbefde1d8	Client and server now filter sent and accepted ciphersuites on minimum and maximum protocol version	2013-06-29 18:35:40 +02:00
Paul Bakker	b9d3cfa114	Split up GCM into a start/update/finish cycle	2013-06-26 15:08:29 +02:00
Paul Bakker	de65623f3e	PolarSSL 1.2.6 and PolarSSL 1.2.7 changes added to ChangeLog	2013-06-24 19:09:24 +02:00
Paul Bakker	248fff5369	PolarSSL 1.1.6 and PolarSSL 1.1.7 changed added to ChangeLog	2013-06-24 19:09:24 +02:00
Paul Bakker	73d4431ccd	Fixed parse error in ssl_parse_certificate_request()	2013-05-22 13:56:26 +02:00
Paul Bakker	b91c2b5782	PSK and DHE-PSK addition to ChangeLog	2013-04-19 20:47:26 +02:00
Paul Bakker	8f4ddaeea9	Ability to specify allowed ciphersuites based on the protocol version. The ciphersuites parameter in the ssl_session structure changed from 'int ' to 'int [4]'. The new function ssl_set_ciphersuite_for_version() sets specific entries inside this array. ssl_set_ciphersuite() sets all entries to the same value. (cherry picked from commit a62729888b9d8eafbfa952fca63a04100ed90f69) Conflicts: ChangeLog library/ssl_srv.c library/ssl_tls.c	2013-04-16 18:09:45 +02:00
Paul Bakker	eff2e6d414	Fixed MPI assembly for ARM when -O2 is used GCC with -O2 or higher also needs to now about 'cc' in the clobber list.	2013-04-11 17:13:22 +02:00
Paul Bakker	c70b982056	OID functionality moved to a separate module. A new OID module has been created that contains the main OID searching functionality based on type-dependent arrays. A base type is used to contain the basic values (oid_descriptor_t) and that type is extended to contain type specific information (like a pk_alg_t). As a result the rsa sign and verify function prototypes have changed. They now expect a md_type_t identifier instead of the removed RSA_SIG_XXX defines. All OID definitions have been moved to oid.h All OID matching code is in the OID module. The RSA PKCS#1 functions cleaned up as a result and adapted to use the MD layer. The SSL layer cleanup up as a result and adapted to use the MD layer. The X509 parser cleaned up and matches OIDs in certificates with new module and adapted to use the MD layer. The X509 writer cleaned up and adapted to use the MD layer. Apps and tests modified accordingly	2013-04-07 22:00:46 +02:00
Paul Bakker	41c83d3f67	Added Ephemeral Elliptic Curve Diffie Hellman ciphersuites to SSL/TLS Made all modifications to include Ephemeral Elliptic Curve Diffie Hellman ciphersuites into the existing SSL/TLS modules. All basic handling of the ECDHE-ciphersuites (TLS_ECDHE_RSA_WITH_NULL_SHA, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA) has been included.	2013-03-20 14:39:14 +01:00
Paul Bakker	68884e3c09	Moved to advanced ciphersuite representation and more dynamic SSL code	2013-03-13 14:48:32 +01:00
Paul Bakker	9b5798dc75	Modified ChangeLog to include explanations of last SSL module changes	2013-03-13 13:53:00 +01:00
Paul Bakker	90f042d4cb	Prepared for PolarSSL 1.2.6 release	2013-03-11 11:38:44 +01:00
Paul Bakker	fb1cbd3cea	Fixed assembly code for ARM (Thumb and regular) for some compilers	2013-03-06 18:14:52 +01:00
Paul Bakker	e81beda60f	The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) The real peer certificate is copied into a x509_buf in the ssl_cache_entry and reinstated upon cache retrieval. The information about the rest of the certificate chain is lost in the process. As the handshake (and certificate verification) has already been performed, no issue is foreseen.	2013-03-06 18:01:03 +01:00
Paul Bakker	a35aa54967	Fixed whitespaces in ChangeLog	2013-03-06 18:01:03 +01:00
Paul Bakker	78a8c71993	Re-added support for parsing and handling SSLv2 Client Hello messages If the define POLARSSL_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO is enabled, the SSL Server module can handle the old SSLv2 Client Hello messages. It has been updated to deny SSLv2 Client Hello messages during renegotiation.	2013-03-06 18:01:03 +01:00
Paul Bakker	37286a573b	Fixed net_bind() for specified IP addresses on little endian systems	2013-03-06 18:01:03 +01:00
Paul Bakker	8804f69d46	Removed timing differences due to bad padding from RSA decrypt for PKCS#1 v1.5 operations	2013-03-06 18:01:03 +01:00
Paul Bakker	a43231c5a5	Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt()	2013-03-06 18:01:02 +01:00
Paul Bakker	b386913f8b	Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions Split rsa_pkcs1_encrypt() into rsa_rsaes_oaep_encrypt() and rsa_rsaes_pkcs1_v15_encrypt() Split rsa_pkcs1_decrypt() into rsa_rsaes_oaep_decrypt() and rsa_rsaes_pkcs1_v15_decrypt() Split rsa_pkcs1_sign() into rsa_rsassa_pss_sign() and rsa_rsassa_pkcs1_v15_sign() Split rsa_pkcs1_verify() into rsa_rsassa_pss_verify() and rsa_rsassa_pkcs1_v15_verify() The original functions exist as generic wrappers to these functions.	2013-03-06 18:01:02 +01:00
Paul Bakker	e3e4a59622	Added bugfix line for previous fixes for MS Visual Studio	2013-03-06 18:01:02 +01:00
Paul Bakker	3d2dc0f8e5	Corrected GCM counter incrementation to use only 32-bits instead of 128-bits Using 32-bits has the possibility to overwrite the IV in the first 12 bytes of the Y variable. Found by Yawning Angel	2013-02-28 10:55:39 +01:00
Paul Bakker	e47b34bdc8	Removed further timing differences during SSL message decryption in ssl_decrypt_buf() New padding checking is unbiased on correct or incorrect padding and has no branch prediction timing differences. The additional MAC checks further straighten out the timing differences.	2013-02-27 14:48:00 +01:00
Paul Bakker	c0463502ff	Fixed memory leak in ssl_free() and ssl_reset() for active session	2013-02-14 11:19:38 +01:00
Paul Bakker	c7a2da437e	Updated for PolarSSL 1.2.5	2013-02-02 19:23:57 +01:00
Paul Bakker	40865c8e5d	Added sending of alert messages in case of decryption failures as per RFC The flag POLARSSL_SSL_ALERT_MESSAGES switched between enabling and disabling the sending of alert messages that give adversaries intel about the result of their action. PolarSSL can still communicate with other parties if they are disabled, but debugging of issues might be harder.	2013-02-02 19:04:13 +01:00
Paul Bakker	d66f070d49	Disable debug messages that can introduce a timing side channel. Introduced the POLARSSL_SSL_DEBUG_ALL flag to enable all these debug messages in case somebody does want to see the reason checks fail.	2013-02-02 19:04:13 +01:00
Paul Bakker	4582999be6	Fixed timing difference resulting from badly formatted padding.	2013-02-02 19:04:13 +01:00
Paul Bakker	8fe40dcd7d	Allow enabling of dummy error_strerror() to support some use-cases Enable a dummy error function to make use of error_strerror() in third party libraries easier. Disable if you run into name conflicts and want to really remove the error_strerror()	2013-02-02 12:43:08 +01:00
Paul Bakker	14c56a3378	Updated for PolarSSL 1.2.4	2013-01-25 17:11:37 +01:00
Paul Bakker	9d2bb658fc	Added PolarSSL 1.1.5 ChangeLog from 1.1 branch	2013-01-25 16:07:49 +01:00
Paul Bakker	1961b709d8	Added ssl_handshake_step() to allow single stepping the handshake process Single stepping the handshake process allows for better support of non-blocking network stacks and for getting information from specific handshake messages if wanted.	2013-01-25 14:49:24 +01:00
Paul Bakker	9c94cddeae	Correctly handle CertificateRequest with empty DN list in <= TLS 1.1	2013-01-22 14:21:49 +01:00
Paul Bakker	21dca69ef0	Handle future version properly in ssl_write_certificate_request()	2013-01-03 11:41:08 +01:00
Paul Bakker	40628bad98	Memory leak when using RSA_PKCS_V21 operations fixed	2013-01-03 10:50:31 +01:00
Paul Bakker	fb1ba781b3	Updated for release 1.2.3	2012-11-26 16:28:25 +01:00
Paul Bakker	df5069cb97	Updated for 1.2.2 release	2012-11-24 12:20:19 +01:00
Paul Bakker	7c90da9e75	Amended ChangeLog for client authentication fix	2012-11-23 14:02:40 +01:00
Paul Bakker	e667c98fb1	Added p_hw_data to ssl_context for context specific hardware acceleration data	2012-11-20 13:50:22 +01:00
Paul Bakker	1492633e54	Updated date for release	2012-11-20 10:58:09 +01:00
Manuel Pégourié-Gonnard	e44ec108be	Fixed segfault in mpi_shift_r() Fixed memory leak in test_suite_mpi Amended ChangeLog	2012-11-18 23:15:02 +01:00
Paul Bakker	34d8dbcc6d	- Depth that the certificate verify callback receives is now numbered bottom-up (Peer cert depth is 0)	2012-11-14 12:11:38 +00:00
Paul Bakker	b815682a48	- Updated Changelog for 1.2.1	2012-11-13 12:52:17 +00:00
Paul Bakker	9daf0d0651	- Added max length check for rsa_pkcs1_sign with PKCS#1 v2.1	2012-11-13 12:13:27 +00:00
Paul Bakker	f02c5642d0	- Allow R and A to point to same mpi in mpi_div_mpi	2012-11-13 10:25:21 +00:00
Paul Bakker	d9374b05d6	- Moved mpi_inv_mod() outside POLARSSL_GENPRIME	2012-11-02 11:02:58 +00:00
Paul Bakker	7a2538ee38	- Fixes for MSVC6	2012-11-02 10:59:36 +00:00
Paul Bakker	c9c5df98de	- Updated for PolarSSL 1.2.0	2012-10-31 13:55:27 +00:00
Paul Bakker	645ce3a2b4	- Moved ciphersuite naming scheme to IANA reserved names	2012-10-31 12:32:41 +00:00
Paul Bakker	4f024b7ba9	- Fixed for SPARC64	2012-10-30 07:29:57 +00:00
Paul Bakker	d5834bb394	- Added release text for 1.1.4 to ChangeLog	2012-10-02 14:38:56 +00:00
Paul Bakker	5c2364c2ba	- Moved from unsigned long to uint32_t throughout code	2012-10-01 14:41:15 +00:00
Paul Bakker	1d29fb5e33	- Added option to add minimum accepted SSL/TLS protocol version	2012-09-28 13:28:45 +00:00
Paul Bakker	915275ba78	- Revamped x509_verify() and the SSL f_vrfy callback implementations	2012-09-28 07:10:55 +00:00
Paul Bakker	5701cdcd02	- Added ServerName extension parsing (SNI) at server side	2012-09-27 21:49:42 +00:00
Paul Bakker	eb2c658163	- Generalized external private key implementation handling (like PKCS#11) in SSL/TLS	2012-09-27 19:15:01 +00:00
Paul Bakker	0a59707523	- Added simple SSL session cache implementation - Revamped session resumption handling	2012-09-25 21:55:46 +00:00
Paul Bakker	b00ca42f2a	- Handle existence of OpenSSL Trust Extensions at end of X.509 DER blob	2012-09-25 12:10:00 +00:00
Paul Bakker	29b64761fd	- Added predefined DHM groups from RFC 5114	2012-09-25 09:36:44 +00:00
Paul Bakker	995a215eac	- Added credits	2012-09-25 08:19:56 +00:00
Paul Bakker	d4c2bd79fe	- Added bug	2012-09-16 21:35:30 +00:00
Paul Bakker	48916f9b67	- Added Secure Renegotiation (RFC 5746)	2012-09-16 19:57:18 +00:00
Paul Bakker	ec636f3bdd	- Removed handling for SSLv2 Client Hello (as per RFC 5246 recommendation)	2012-09-09 19:17:02 +00:00
Paul Bakker	f518b16f97	- Added PKCS#5 PBKDF2 key derivation function	2012-08-23 13:03:18 +00:00
Paul Bakker	535e97dbab	- Better checking for reading over buffer boundaries - Zeroize altSubjectName chain memory before use	2012-08-23 10:49:55 +00:00
Paul Bakker	3c16db9a10	- Fixed potential memory zeroization on miscrafted RSA key	2012-07-05 13:58:08 +00:00
Paul Bakker	6132d0aa93	- Added Blowfish to generic cipher layer - Renamed POLARSSL_MODE_CFB128 to POLARSSL_MODE_CFB	2012-07-04 17:10:40 +00:00
Paul Bakker	a9379c0ed1	- Added base blowfish algorithm	2012-07-04 11:02:11 +00:00
Paul Bakker	2770fbd651	- Added DEFLATE compression support as per RFC3749 (requires zlib)	2012-07-03 13:30:23 +00:00
Paul Bakker	4f9a7bb7fd	- Added Thumb assembly optimizations	2012-07-02 08:36:36 +00:00
Paul Bakker	cefb396a77	- Handle empty certificate subject names	2012-06-27 11:51:09 +00:00
Paul Bakker	8d914583f3	- Added X509 CA Path support	2012-06-04 12:46:42 +00:00
Paul Bakker	e6ee41f932	- Added OpenSSL / PolarSSL compatibility script (tests/compat.sh) and example application (programs/ssl/o_p_test) (Requires OpenSSL) - Handle encryption with private key and decryption with public key as per RFC 2313	2012-05-19 08:43:48 +00:00
Paul Bakker	f6198c1513	- mpi_exp_mod() now correctly handles negative base numbers (Closes ticket #52 )	2012-05-16 08:02:29 +00:00
Paul Bakker	5b37784f6d	- Updated with tickets	2012-05-16 07:57:36 +00:00
Paul Bakker	4d2c1243b1	- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.	2012-05-10 14:12:46 +00:00
Paul Bakker	186751d9dd	- Moved out_msg to out_hdr + 32 to support hardware acceleration	2012-05-08 13:16:14 +00:00
Paul Bakker	6b906e5095	- Const correctness mpi_get_bit() - Documentation mpi_lsb(), mpi_msb()	2012-05-08 12:01:43 +00:00
Paul Bakker	05ef835b6a	- Added support for Hardware Acceleration hooking in SSL/TLS	2012-05-08 09:17:57 +00:00
Paul Bakker	fad3893ead	- Added release notes for 1.1.2 and 1.1.3 to trunk	2012-05-08 09:04:04 +00:00
Paul Bakker	01cc394848	- Added commandline error code convertor (util/strerror)	2012-05-08 08:36:15 +00:00
Paul Bakker	430ffbe564	- Fixed potential heap corruption in x509_name allocation	2012-05-01 08:14:20 +00:00
Paul Bakker	4cf2b7f8bf	- Added name	2012-04-20 13:59:39 +00:00
Paul Bakker	84bef1db2c	- Fixed DHM length to correct one	2012-04-20 13:42:02 +00:00
Paul Bakker	ca4ab49158	- Added GCM ciphersuites to TLS implementation	2012-04-18 14:23:57 +00:00
Paul Bakker	915940ef80	- Added TLS1.2	2012-04-18 14:21:32 +00:00
Paul Bakker	452d532955	- Fixed potential memory corruption on miscrafted client messages (found by Frama-C team at CEA LIST)	2012-04-05 12:07:34 +00:00
Paul Bakker	7beceb2e2b		2012-03-22 14:19:49 +00:00
Paul Bakker	37824581b7	- Added Changelog for bugfix in mpi_cmp_mpi()	2012-03-22 14:10:22 +00:00
Paul Bakker	89e80c9a43	- Added base Galois/Counter mode (GCM) for AES	2012-03-20 13:50:09 +00:00
Paul Bakker	bdb912db69	- Added preliminary ASN.1 buffer writing support - Added preliminary X509 Certificate Request writing support - Added key_app_writer example application - Added cert_req example application	2012-02-13 23:11:30 +00:00
Paul Bakker	048d04ef4b	- AES code only check for Padlock once	2012-02-12 17:31:04 +00:00
Paul Bakker	1504af585c	- Removed redundant POLARSSL_DEBUG_MSG define	2012-02-11 16:17:43 +00:00
Paul Bakker	a8cd239d6b	- Added support for wildcard certificates - Added support for multi-domain certificates through the X509 Subject Alternative Name extension	2012-02-11 16:09:32 +00:00
Paul Bakker	fab5c829e7	- Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default!	2012-02-06 16:45:10 +00:00
Paul Bakker	99955bf86a	- Final changes for 1.1.1 release	2012-01-23 09:31:41 +00:00
Paul Bakker	2ec0a56649	- Fixed issue with Intel compiler on 64-bit platforms	2012-01-21 05:41:23 +00:00
Paul Bakker	b15b851d6d	- Check for failed malloc() in ssl_set_hostname() and x509_get_entries() (Closes ticket #47 , found by Hugo Leisink)	2012-01-13 13:44:06 +00:00
Paul Bakker	08a508838c	- Updated release date	2011-12-22 09:43:57 +00:00
Paul Bakker	a42b3e916d	- Fixed top line for version	2011-12-11 11:48:51 +00:00
Paul Bakker	69e095cc15	- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it. - As a consequence all error code that were positive were changed. A lot of MALLOC_FAILED and FILE_IO_ERROR error codes added for different modules. - Programs and tests were adapted accordingly	2011-12-10 21:55:01 +00:00
Paul Bakker	c50132d4fa	- Updated version of PolarSSL to 1.1.0	2011-12-05 14:38:36 +00:00
Paul Bakker	c8ffbe7706	- Corrected removal of leading '00:' in printing serial numbers in certificates and CRLs	2011-12-05 14:22:49 +00:00
Paul Bakker	4f5ae803fa	- Fixed MS Visual C++ name clash with int64 in sha4.h	2011-12-04 22:10:28 +00:00
Paul Bakker	508ad5ab6d	- Moved all examples programs to use the new entropy and CTR_DRBG	2011-12-04 17:09:26 +00:00
Paul Bakker	6c0ceb3f9a	- Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error	2011-12-04 12:24:18 +00:00
Paul Bakker	6083fd252d	- Added a generic entropy accumulator that provides support for adding custom entropy sources and added some generic and platform dependent entropy sources	2011-12-03 21:45:14 +00:00
Paul Bakker	a3d195c41f	- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs	2011-11-27 21:07:34 +00:00
Paul Bakker	0e04d0e9a3	- Added CTR_DRBG based on AES-256-CTR (NIST SP 800-90) random generator	2011-11-27 14:46:59 +00:00
Paul Bakker	4463740fe4	- Improved build support for s390x and sparc64 in bignum.h	2011-11-26 09:23:07 +00:00
Paul Bakker	03c7c25243	- * If certificate serial is longer than 32 octets, serial number is now appended with '....' after first 28 octets	2011-11-25 12:37:37 +00:00
Paul Bakker	fe3256e54b	- Introduced POLARSSL_MPI_MAX_SIZE and POLARSSL_MPI_MAX_BITS for MPI size management (Closes ticket #44 )	2011-11-25 12:11:43 +00:00
Paul Bakker	b6d5f08051	- Added POLARSSL_MPI_WINDOW_SIZE definition to allow easier time to memory trade-off	2011-11-25 11:52:11 +00:00
Paul Bakker	2e6d5328d5	- Added credits!	2011-11-18 14:34:17 +00:00
Paul Bakker	cce9d77745	- Lots of minimal changes to better support WINCE as a build target	2011-11-18 14:26:47 +00:00
Paul Bakker	5e18aed436	- Changed the defined key-length of DES ciphers in cipher.h to include the parity bits, to prevent mistakes in copying data. (Closes ticket #33 )	2011-11-15 15:38:45 +00:00
Paul Bakker	1fe7d9baf9	- Fixed incorrect behaviour in case of RSASSA-PSS with a salt length smaller than the hash length. (Closes ticket #41 )	2011-11-15 15:26:03 +00:00
Paul Bakker	cebdf17159	- Allowed X509 key usage parsing to accept 4 byte values instead of the standard 1 byte version sometimes used by Microsoft. (Closes ticket #38 )	2011-11-11 15:01:31 +00:00
Paul Bakker	03a30d34dc	- Added latest fix to ChangeLog	2011-11-11 10:55:02 +00:00
Paul Bakker	efc302964c	- Extracted ASN.1 parsing code from the X.509 parsing code. Added new module.	2011-11-10 14:43:23 +00:00
Paul Bakker	b5a11ab80b	- Added a separate CRL entry extension parsing function	2011-10-12 09:58:41 +00:00
Paul Bakker	fbc09f3cb6	- Added an EXPLICIT tag number parameter to x509_get_ext()	2011-10-12 09:56:41 +00:00
Paul Bakker	3329d1f805	- Fixed a bug where the CRL parser expected an EXPLICIT ASN.1 tag before version numbers	2011-10-12 09:55:01 +00:00
Paul Bakker	c4909d95f1	- Inceased maximum size of ASN1 length reads to 32-bits	2011-10-12 09:52:22 +00:00
Paul Bakker	fa1c592860	- Fixed faulty HMAC-MD2 implementation (Fixes ticket #37 )	2011-10-06 14:18:49 +00:00
Paul Bakker	d246ed30bd	- Fixed rsa_encrypt and rsa_decrypt example programs to use public key for encryption and private key for decryption (Fixes ticket #34 )	2011-10-06 13:18:27 +00:00
Paul Bakker	ca6f3e24a4	- Clarified use of AES and Camellia in CFB and CTR modes	2011-10-06 13:11:08 +00:00
Paul Bakker	490ecc8c3e	- Added ssl_set_max_version() to set the client's maximum sent version number	2011-10-06 13:04:09 +00:00
Paul Bakker	7eb013face	- Added ssl_session_reset() to allow re-use of already set non-connection specific context information	2011-10-06 12:37:39 +00:00
Paul Bakker	7bc05ff4a6	- Added rsa_encrypt and rsa_decrypt example programs	2011-08-09 10:30:36 +00:00
Paul Bakker	968bc9831b	- Preparations for v1.0.0 release of PolarSSL	2011-07-27 17:03:00 +00:00
Paul Bakker	42e5981c26	- Updated to reflect changes in error codes in the generic cipher and message digest layers	2011-06-09 15:55:41 +00:00
Paul Bakker	343a870daa	- Expanded generic cipher layer with support for CTR and CFB128 modes of operation.	2011-06-09 14:27:58 +00:00
Paul Bakker	887bd502d2	- Undid fix for ssl_write that introduced a true bug when buffers are running full.	2011-06-08 13:10:54 +00:00
Paul Bakker	828acb2234	- Updated for release 0.99-pre5	2011-05-27 09:25:42 +00:00
Paul Bakker	1496d38028	- Added the ssl_mail_client example application	2011-05-23 12:07:29 +00:00
Paul Bakker	2f5947e1f6	- Added mpi_get_bit() and mpi_set_bit() individual bit setter/getter functions.	2011-05-18 15:47:11 +00:00
Paul Bakker	831a755d9e	- Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake. - Network functions now return POLARSSL_ERR_NET_WANT_READ or POLARSSL_ERR_NET_WANT_WRITE instead of the ambiguous POLARSSL_ERR_NET_TRY_AGAIN	2011-05-18 13:32:51 +00:00
Paul Bakker	9d781407bc	- A error_strerror function() has been added to translate between error codes and their description. - The error codes have been remapped and combining error codes is now done with a PLUS instead of an OR as error codes used are negative. - Descriptions to all error codes have been added. - Generation script for error.c has been created to automatically generate error.c from the available error definitions in the headers.	2011-05-09 16:17:09 +00:00
Paul Bakker	6c591fab72	- mpi_init() and mpi_free() only accept a single argument and do not accept variable arguments anymore. This prevents unexpected memory corruption in a number of use cases.	2011-05-05 11:49:20 +00:00
Paul Bakker	335db3f121	- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO	2011-04-25 15:28:35 +00:00
Paul Bakker	a755ca1bbe	- Renamed t_s_int, t_int and t_dbl to respectively t_sint, t_uint and t_udbl for clarity	2011-04-24 09:11:17 +00:00
Paul Bakker	23986e5d5d	- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops	2011-04-24 08:57:21 +00:00
Paul Bakker	b6ecaf5276	- Added additional (configurable) cipher block modes. AES-CTR, Camellia-CTR, XTEA-CBC	2011-04-19 14:29:23 +00:00
Paul Bakker	3efa575ff2	- Ready for release 0.99-pre4	2011-04-01 12:23:26 +00:00
Paul Bakker	287781a965	- Added mpi_fill_random() for centralized filling of big numbers with random data (Fixed ticket #10 )	2011-03-26 13:18:49 +00:00
Paul Bakker	98675496e1	- Added information about changed behaviour of x509parse_key()	2011-03-26 13:17:12 +00:00
Paul Bakker	e77db2e119	- Added bugfix info for previous checkin	2011-03-25 14:01:32 +00:00
Paul Bakker	1fd00bfe82	- Fixed bug in ssl_write() when flushing old data (Fixes ticket #18 )	2011-03-14 20:50:15 +00:00
Paul Bakker	be4e7dca08	- Debug print of MPI now removes leading zero octets and displays actual bit size of the value	2011-03-14 20:41:31 +00:00
Paul Bakker	9dcc32236b	- Added support for PKCS#1 v2.1 encoding and thus support for the RSAES-OAEP and RSASSA-PSS operations (enabled by POLARSSL_PKCS1_V21)	2011-03-08 14:16:06 +00:00
Paul Bakker	345a6fee91	- Replaced function that fixes man-in-the-middle attack - Added message to indicate inclusion of man-in-the-middle attack (Reported by Larry Highsmith, Subreption LLC) - Released version 0.99-pre3	2011-02-28 21:20:02 +00:00
Paul Bakker	1946e42dd4	- Made ready for 0.99-pre2 release	2011-02-25 09:39:39 +00:00
Paul Bakker	e2a39cc0fa	- Do not bail out if no client certificate specified. Try to negotiate anonymous connection (Fixes ticket #12 )	2011-02-20 13:49:27 +00:00
Paul Bakker	400ff6f0fd	- Corrected parsing of UTCTime dates before 1990 and after 1950 - Support more exotic OID's when parsing certificates - Support more exotic name representations when parsing certificates - Replaced the expired test certificates	2011-02-20 10:40:16 +00:00
Paul Bakker	a9507c063b	- Added crl_app program to allow easy reading and printing of X509 CRLs from file	2011-02-12 15:27:28 +00:00
Paul Bakker	96743fc5f5	- Parsing of PEM files moved to separate module (Fixes ticket #13 ). Also possible to remove PEM support for systems only using DER encoding - Parsing PEM private keys encrypted with DES and AES are now supported (Fixes ticket #5) - Added tests for encrypted keyfiles	2011-02-12 14:30:57 +00:00
Paul Bakker	9fc4659b30	- Preparing for Release of 0.99 prerelease 1	2011-01-30 16:59:02 +00:00
Paul Bakker	e3166ce040	- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether - Adapted in the rest of using code as well	2011-01-27 17:40:50 +00:00
Paul Bakker	20a7808d13	- Addec crypt_and_hash example program of the generic hash and cipher layers	2011-01-21 09:32:12 +00:00
Paul Bakker	43b7e35b25	- Support for PKCS#11 through the use of the pkcs11-helper library	2011-01-18 15:27:19 +00:00
Paul Bakker	b619499eb3	- x509parse_time_expired() checks time now in addition to the existing date check	2011-01-16 21:40:22 +00:00
Paul Bakker	72f6266f02	- Improved information provided about current Hashing, Cipher and Suite capabilities	2011-01-16 21:27:44 +00:00
Paul Bakker	76fd75a3de	- Improved certificate validation and validation against the available CRLs	2011-01-16 21:12:10 +00:00
Paul Bakker	43ca69c38a	- Added function for stringified SSL/TLS version	2011-01-15 17:35:19 +00:00
Paul Bakker	1f87fb6896	- Support for DES weak keys and parity bits added	2011-01-15 17:32:24 +00:00
Paul Bakker	74111d30b7	- Improved X509 certificate parsing to include extended certificate fields, such as Key Usage	2011-01-15 16:57:55 +00:00
Paul Bakker	b63b0afc05	- Added verification callback in certificate verification chain in order to allow external blacklisting	2011-01-13 17:54:59 +00:00
Paul Bakker	1b57b06751	- Added reading of DHM context from memory and file	2011-01-06 15:48:19 +00:00
Paul Bakker	8123e9d8f1	- Added generic cipher wrapper for integration with OpenVPN (donated by Fox-IT)	2011-01-06 15:37:30 +00:00
Paul Bakker	1737385e04	- Added generic message digest wrapper for integration with OpenVPN (donated by Fox-IT)	2011-01-06 14:20:01 +00:00
Paul Bakker	37ca75d6f2	- Added Doxygen source code documentation parts (donated by Fox-IT)	2011-01-06 12:28:03 +00:00
Paul Bakker	99ed6788b2	- Changed line endings and encodings to unix and utf-8	2011-01-05 14:48:42 +00:00
Paul Bakker	5c10b54fb2	- Added release date for 0.14.0	2010-08-16 12:01:43 +00:00
Paul Bakker	21eb2802fe	- Changed origins of random function and pointer in rsa_pkcs1_encrypt, rsa_init, rsa_gen_key. Moved to parameters of function instead of context pointers as within ssl_cli, context pointer cannot be set easily.	2010-08-16 11:10:02 +00:00
Paul Bakker	2e11f7d966	- Added support for TLS v1.1 - Renamed some SSL defines to prevent future naming confusion	2010-07-25 14:24:53 +00:00
Paul Bakker	a0f082c574	- Rewrite ChangeLog	2010-07-18 10:14:07 +00:00
Paul Bakker	b572adf5e6	- Removed dependency on rand() in rsa_pkcs1_encrypt(). Now using random fuction provided to context - Expanded ssl_client2 arguments for more flexibility - rsa_check_private() now supports PKCS1v2 keys as well - Fixed deadlock in rsa_pkcs1_encrypt() on failing random generator	2010-07-18 08:29:32 +00:00
Paul Bakker	4c14a258fe	- Fixed out of source build for tests with CMake	2010-06-18 22:54:05 +00:00
Paul Bakker	690b93d91a	- Made Makefile cleaner	2010-06-18 16:42:26 +00:00
Paul Bakker	77a43580da	- Added support for the SSL_EDH_RSA_AES_128_SHA and SSL_EDH_RSA_CAMELLIA_128_SHA ciphersuites	2010-06-15 21:32:46 +00:00
Paul Bakker	699fbbcf29	- Added missing const fixes	2010-03-24 07:15:41 +00:00
Paul Bakker	aed271ed03	- Fixed ChangeLog	2010-03-24 06:55:38 +00:00
Paul Bakker	09d87fcd99	- Added release date for 0.13.0	2010-03-21 16:23:50 +00:00
Paul Bakker	7d3b661bfe	- Added reset functionality for HMAC context. Speed-up for some use-cases.	2010-03-21 16:23:13 +00:00
Paul Bakker	baad6504d4	- Changed ARC4 to use seperate input/output buffer	2010-03-21 15:42:15 +00:00
Paul Bakker	f3ccc68100	- Fixed cipher interface for encrypt/decrypt functions	2010-03-18 21:21:02 +00:00
Paul Bakker	4fc45522f1	- Added cert_app application	2010-03-18 20:11:58 +00:00
Paul Bakker	9f335d5bc1	- Added attribution for fix from FrankDeB	2010-03-17 18:19:37 +00:00
Paul Bakker	27d661657b	- Added x509_get_sig_alg() to allow easy future X509 signature algorithm determination expansion	2010-03-17 06:56:01 +00:00
Paul Bakker	41d13f4af8	- Found algorithmic bug in mpi_is_prime()	2010-03-16 21:26:36 +00:00
Paul Bakker	4ed999c4b2	- Added fixes for compiler warnings on a Mac	2010-03-16 21:16:16 +00:00
Paul Bakker	ff60ee6c2a	- Added const-correctness to main codebase	2010-03-16 21:09:09 +00:00
Paul Bakker	9120018f3d	- Added support for GeneralizedTime in X509 certificates	2010-02-18 21:26:15 +00:00
Paul Bakker	9caf2d2d38	- Added option parsing for ssl_client2 to select host and port	2010-02-18 19:37:19 +00:00
Paul Bakker	1f76115340	- Fixed bug resulting in failure to send the last certificate in the chain in ssl_write_certificate() and ssl_write_certificate_request()	2010-02-18 18:16:31 +00:00
Paul Bakker	5d8d64e1a6	- Fixed texts	2009-10-04 15:15:34 +00:00
Paul Bakker	fe1aea7877	- Fixed typo in MD4 define	2009-10-03 20:09:14 +00:00
Paul Bakker	1271d9df55	- Updated to reflect changes of 'depends_on' in testing	2009-10-03 20:05:57 +00:00
Paul Bakker	972f8e77cf	- Updated ChangeLog for release 0.12.0	2009-07-28 20:27:03 +00:00
Paul Bakker	3391b12ce3	- Fixed error codes. Negative when needed (SSL error codes). Non-negative if error-codes are OR'ed to other error codes (ASN1, Base64, MPI, DHM). The rest is negative by default.	2009-07-28 20:11:54 +00:00
Paul Bakker	b3bb6c0c66	- Fixed include location of endian.h and name clash on Apples (found by Martin van Hensbergen)	2009-07-27 21:09:47 +00:00
Paul Bakker	2b222c830b	- Changed interface for AES and Camellia setkey functions to indicate invalid key lengths.	2009-07-27 21:03:45 +00:00
Paul Bakker	854963cee3	- Fixed include location of endian.h on FreeBSD (found by Gabriel)	2009-07-19 20:50:11 +00:00
Paul Bakker	38e2b482ff	- Fixed typo in name of POLARSSL_ERR_RSA_OUTPUT_TOO_LARGE.	2009-07-19 20:41:06 +00:00
Paul Bakker	fc22c441bc	- Renamed RSA_RAW to SIG_RSA_RAW for consistency in the code.	2009-07-19 20:36:27 +00:00
Paul Bakker	f1fec19797	- Updated ChangeLog to reflect change in error codes	2009-07-19 20:29:42 +00:00
Paul Bakker	596d504da2	- Updated ChangeLog for old fix of Camellia and XTEA for 64-bit Windows systems	2009-07-11 21:06:01 +00:00
Paul Bakker	6e61ea1320	- Updated ChangeLog	2009-07-11 20:44:12 +00:00
Paul Bakker	2fd71f0757	- Fixed HMAC-MD2 by modifying md2_starts(), so that the required HMAC ipad and opad variables are not cleared!	2009-07-11 20:40:58 +00:00
Paul Bakker	765687985a	- Fixed formatting of ChangeLog	2009-07-11 18:39:36 +00:00
Paul Bakker	1a9382ea80	- Prevented use of long long in bignum if POLARSSL_HAVE_LONGLONG not defined (found by Giles Bathgate).	2009-07-11 16:35:32 +00:00
Paul Bakker	37940d9ff6	- Added test coverage for X509parse - Fixed segfault in rsa_check_privkey() and rsa_check_pubkey() and added test	2009-07-10 22:38:58 +00:00
Paul Bakker	367dae44b2	- Added CMake makefiles as alternative to regular Makefiles. - Added preliminary Code Coverage tests for AES, ARC4, Base64, MPI, SHA-family, MD-family and HMAC-SHA-family.	2009-06-28 21:50:27 +00:00
Paul Bakker	48eab260e9	- Corrected is_prime() results for 0, 1 and 2 (found by code coverage tests)	2009-06-25 21:25:49 +00:00
Paul Bakker	ce40a6d21d	- Fixed incorrect handling of negative first input value in mpi_mod_mpi() and mpi_mod_int(). Resulting change also affects mpi_write_string() (found by code coverage tests).	2009-06-23 19:46:08 +00:00
Paul Bakker	1ef7a53fa2	- Fixed incorrect handling of negative first input value in mpi_sub_abs() (found by code coverage tests).	2009-06-20 10:50:55 +00:00
Paul Bakker	f7ca7b99dd	- Fixed incorrect handling of one single negative input value in mpi_add_abs() (found by code coverage tests).	2009-06-20 10:31:06 +00:00
Paul Bakker	05feca6f7c	- Fixed incorrect handling of negative strings in mpi_read_string() (found by code coverage tests).	2009-06-20 08:22:43 +00:00
Paul Bakker	a86cd2dfcd	- Updated ChangeLog for rsa.c change	2009-05-17 10:27:03 +00:00
Paul Bakker	fdca45fded	- Fixed ChangeLog	2009-05-03 16:06:43 +00:00
Paul Bakker	b44f3be436	- Updated ChangeLog to include XTEA and Camellia support on 64-bit platforms.	2009-05-03 13:12:27 +00:00
Paul Bakker	40ea7de46d	- Added CRL revocation support to x509parse_verify() - Fixed an off-by-one allocation in ssl_set_hostname() - Added CRL support to SSL/TLS code	2009-05-03 10:18:48 +00:00
Paul Bakker	34a9056f39	- POLARSSL_HAVE_ASM also used in padlock and timing code.	2009-04-19 21:17:09 +00:00
Paul Bakker	1d4f30ca4d	- Made net_htons() endian-clean for big endian.	2009-04-19 18:55:16 +00:00
Paul Bakker	2b245ebd9f	- Moved file loading to load_file	2009-04-19 18:44:26 +00:00
Paul Bakker	6335fafd74	- Added x509parse_crt() fix	2009-03-28 18:54:06 +00:00
Paul Bakker	ebb2bebbe2	- Added genprime fix	2009-03-28 17:52:44 +00:00
Paul Bakker	4593aeadaf	- Added support for RFC4055 SHA2 and SHA4 signature algorithms for use with PKCS#1 v1.5 signing and verification. - Added extra certificates to test-ca and test code to further test functionality of SHA2 and SHA4 signing and verification. - Updated other program files accordingly	2009-02-09 22:32:35 +00:00
Paul Bakker	4e0d7ca233	- Fixed a bug in mpi_gcd() that prevented correct funtioning when both input numbers are even.	2009-01-29 22:24:33 +00:00
Paul Bakker	71cd2c6fbd	- Updated version from 0.10 to 0.10.0	2009-01-15 19:45:54 +00:00
Paul Bakker	f1306186d0	- Updated Changelog	2009-01-12 21:50:17 +00:00
Paul Bakker	72989ffcaf	- Updated ChangeLog	2009-01-11 20:26:11 +00:00

... 18 19 20 21 22 ...

1954 commits