Paul Bakker
|
d7e2483bfc
|
Merge miscellaneous fixes into development
|
2015-01-13 16:04:38 +01:00 |
|
Paul Bakker
|
8b9bcecaae
|
Stop assuming chars are signed
|
2015-01-13 15:59:55 +01:00 |
|
Manuel Pégourié-Gonnard
|
5dd28ea432
|
Fix len miscalculation in buffer-based allocator
|
2015-01-13 14:58:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
547ff6618f
|
Fix NULL dereference in buffer-based allocator
|
2015-01-13 14:58:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
765bb31d24
|
Add test_suite_memory_buffer_alloc
|
2015-01-13 14:58:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
5ba1d52f96
|
Add memory_buffer_alloc_self_test()
|
2015-01-13 14:58:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
5cb4b31057
|
Fix missing bound check
|
2015-01-13 14:58:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
f5f25b3a0d
|
Add test for ctr_drbg_update() input sanitizing
|
2015-01-13 14:56:59 +01:00 |
|
Paul Bakker
|
d9e2dd2bb0
|
Merge support for Encrypt-then-MAC
|
2015-01-13 14:23:56 +01:00 |
|
Manuel Pégourié-Gonnard
|
352143fa1e
|
Refactor for clearer correctness/security
|
2015-01-13 12:02:55 +01:00 |
|
Manuel Pégourié-Gonnard
|
982865618a
|
Stop assuming chars are signed
(They aren't on ARM by default.)
|
2015-01-12 19:17:05 +01:00 |
|
Paul Bakker
|
54b1a8fa4d
|
Merge support for Extended Master Secret (session-hash)
|
2015-01-12 14:14:07 +01:00 |
|
Paul Bakker
|
b52b015c0b
|
Merge support for FALLBACK_SCSV
|
2015-01-12 14:07:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
d68b65199f
|
Fix previous commit
(worked with BSD sed but no GNU sed...)
|
2015-01-07 14:55:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
3da751ea55
|
Allow flexible location of valgrind
|
2014-12-15 10:47:31 +01:00 |
|
Manuel Pégourié-Gonnard
|
f46f128f4a
|
Fix test scripts portability issues
|
2014-12-11 17:26:09 +01:00 |
|
Manuel Pégourié-Gonnard
|
76c99a01a1
|
Fix Gnu-ism in script
|
2014-12-11 10:33:43 +01:00 |
|
Manuel Pégourié-Gonnard
|
d94232389e
|
Skip signature_algorithms ext if PSK only
|
2014-12-02 11:57:29 +01:00 |
|
Manuel Pégourié-Gonnard
|
d3b90f797d
|
Fix bug in ssl_client2 reconnect option
|
2014-11-27 17:44:46 +01:00 |
|
Manuel Pégourié-Gonnard
|
f29e5de09d
|
Cosmetics in ssl_server2
|
2014-11-27 17:44:46 +01:00 |
|
Manuel Pégourié-Gonnard
|
60346be2a3
|
Improve debugging message.
This actually prints only the payload, not the potential IV and/or MAC,
so (to me at least) it's much less confusing
|
2014-11-27 17:44:46 +01:00 |
|
Manuel Pégourié-Gonnard
|
e423246e7f
|
Fix net_usleep for durations greater than 1 second
|
2014-11-27 17:44:46 +01:00 |
|
Manuel Pégourié-Gonnard
|
9439f93ea4
|
Use pk_load_file() in X509
Saves a bit of ROM. X509 depends on PK anyway.
|
2014-11-27 17:44:46 +01:00 |
|
Manuel Pégourié-Gonnard
|
2457fa0915
|
Create ticket keys only if enabled
|
2014-11-27 17:44:45 +01:00 |
|
Manuel Pégourié-Gonnard
|
cb7da352fd
|
Fix typo in #ifdef
Since length is checked afterwards anyway, no security risk here
|
2014-11-27 17:44:45 +01:00 |
|
Manuel Pégourié-Gonnard
|
150c4f62f1
|
Clarify documentation a bit
|
2014-11-27 17:44:45 +01:00 |
|
Manuel Pégourié-Gonnard
|
3e9449350c
|
Fix comment on resumption
|
2014-11-27 17:44:45 +01:00 |
|
Manuel Pégourié-Gonnard
|
6b298e6cc1
|
Update comment from draft to RFC
|
2014-11-27 17:44:45 +01:00 |
|
Manuel Pégourié-Gonnard
|
d16d1cb96a
|
Use more #ifdef's on CLI_C and SRV_C in ssl_tls.c
|
2014-11-27 17:44:45 +01:00 |
|
Manuel Pégourié-Gonnard
|
ea29d152c7
|
Add recursion.pl to all.sh
|
2014-11-20 17:32:33 +01:00 |
|
Manuel Pégourié-Gonnard
|
10c44d767d
|
Allow x509_crt_verify_child() in recursion.pl
|
2014-11-20 17:30:37 +01:00 |
|
Manuel Pégourié-Gonnard
|
fd6c85c3eb
|
Set a compile-time limit to X.509 chain length
|
2014-11-20 16:37:41 +01:00 |
|
Manuel Pégourié-Gonnard
|
89d69b398c
|
Fix 3DES -> DES in all.sh (+ time estimates)
|
2014-11-20 16:36:08 +01:00 |
|
Manuel Pégourié-Gonnard
|
246978d97d
|
Add curves.pl to all.sh
|
2014-11-20 16:36:08 +01:00 |
|
Manuel Pégourié-Gonnard
|
9bda9b3b92
|
Rework all.sh to use MSan instead of valgrind
|
2014-11-20 16:36:08 +01:00 |
|
Manuel Pégourié-Gonnard
|
cf4de32f58
|
Fix depends on individual curves in tests
|
2014-11-20 16:36:08 +01:00 |
|
Manuel Pégourié-Gonnard
|
2727dc1e09
|
Add script to test depends on individual curves
|
2014-11-20 16:36:08 +01:00 |
|
Manuel Pégourié-Gonnard
|
5c2aa10c15
|
Fix curve dependency issues in X.509 test suite
|
2014-11-20 16:36:07 +01:00 |
|
Manuel Pégourié-Gonnard
|
6ed2d92629
|
Make x509_crl_parse() iterative
|
2014-11-20 16:36:07 +01:00 |
|
Manuel Pégourié-Gonnard
|
426d4ae7ff
|
Split x509_crl_parse_der() out of x509_crl_parse()
|
2014-11-20 16:36:07 +01:00 |
|
Manuel Pégourié-Gonnard
|
57a5d60abb
|
Add tests for concatenated CRLs
|
2014-11-19 16:08:34 +01:00 |
|
Manuel Pégourié-Gonnard
|
4be3449dbc
|
Add Readme about X.509 test files
|
2014-11-19 14:03:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
8c9223df84
|
Add text view to debug_print_buf()
|
2014-11-19 13:21:38 +01:00 |
|
Manuel Pégourié-Gonnard
|
8e4b3374d7
|
Fix some more warnings in reduced configs
|
2014-11-17 15:06:13 +01:00 |
|
Manuel Pégourié-Gonnard
|
be6ce835a2
|
Fix typo causing MSVC errors
|
2014-11-17 14:29:36 +01:00 |
|
Manuel Pégourié-Gonnard
|
3a3066c3ee
|
ssl_server2 now exits on signal during a read too
|
2014-11-17 12:50:34 +01:00 |
|
Manuel Pégourié-Gonnard
|
403a86f73d
|
ssl_server2: exit cleanly on SIGINT too
|
2014-11-17 12:46:49 +01:00 |
|
Manuel Pégourié-Gonnard
|
98aa19148c
|
Adjust warnings in different modes
|
2014-11-14 16:45:48 +01:00 |
|
Manuel Pégourié-Gonnard
|
e80083cafa
|
Add precision about cmake cache
|
2014-11-14 14:18:24 +01:00 |
|
Manuel Pégourié-Gonnard
|
052ae25e56
|
Avoid advertising private option
|
2014-11-14 13:09:41 +01:00 |
|