Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								c47840efd5 
								
							 
						 
						
							
							
								
								- Updated sanity checks  
							
							 
							
							
							
						 
						
							2011-02-20 16:37:30 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								c43481aa82 
								
							 
						 
						
							
							
								
								- Release memory used  
							
							 
							
							
							
						 
						
							2011-02-20 16:34:26 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								5193688682 
								
							 
						 
						
							
							
								
								- Added force_ciphersuite option to ssl_client2 application  
							
							 
							
							
							
						 
						
							2011-02-20 16:05:58 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								2544a04918 
								
							 
						 
						
							
							
								
								- Replaced with current value of the certificate after certificate replacement  
							
							 
							
							
							
						 
						
							2011-02-20 13:52:44 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								e2a39cc0fa 
								
							 
						 
						
							
							
								
								-  Do not bail out if no client certificate specified. Try to negotiate anonymous connection (Fixes ticket  #12 )  
							
							 
							
							
							
						 
						
							2011-02-20 13:49:27 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								9e7606fcd8 
								
							 
						 
						
							
							
								
								- Updated certificates for new test versions  
							
							 
							
							
							
						 
						
							2011-02-20 13:34:20 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								400ff6f0fd 
								
							 
						 
						
							
							
								
								- Corrected parsing of UTCTime dates before 1990 and after 1950  
							
							 
							
							... 
							
							
							
							- Support more exotic OID's when parsing certificates
 - Support more exotic name representations when parsing certificates
 - Replaced the expired test certificates 
							
						 
						
							2011-02-20 10:40:16 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								a9507c063b 
								
							 
						 
						
							
							
								
								- Added crl_app program to allow easy reading and printing of X509 CRLs from file  
							
							 
							
							
							
						 
						
							2011-02-12 15:27:28 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								96743fc5f5 
								
							 
						 
						
							
							
								
								- Parsing of PEM files moved to separate module (Fixes ticket  #13 ). Also possible to remove PEM support for systems only using DER encoding  
							
							 
							
							... 
							
							
							
							- Parsing PEM private keys encrypted with DES and AES are now supported (Fixes ticket #5 )
 - Added tests for encrypted keyfiles 
							
						 
						
							2011-02-12 14:30:57 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								f17ed288ad 
								
							 
						 
						
							
							
								
								- Fixed reference to generic digest key  
							
							 
							
							
							
						 
						
							2011-02-09 17:10:48 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								1a207ec8af 
								
							 
						 
						
							
							
								
								- Set sane start values for structures that are closed or freed.  
							
							 
							
							
							
						 
						
							2011-02-06 13:22:40 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								896b3be1d1 
								
							 
						 
						
							
							
								
								- Added proper dependencies  
							
							 
							
							
							
						 
						
							2011-02-06 13:12:25 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								6d44032cba 
								
							 
						 
						
							
							
								
								- Do not close NULL stream  
							
							 
							
							
							
						 
						
							2011-02-06 12:49:19 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								46eb13828e 
								
							 
						 
						
							
							
								
								- Makefiles now respect external CFLAGS and LDFLAGS. Closes ticket  #2  
							
							 
							
							
							
						 
						
							2011-01-30 17:10:13 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								cdf07e9979 
								
							 
						 
						
							
							
								
								- Information about missing or non-verified client certificate is not provided as well.  
							
							 
							
							
							
						 
						
							2011-01-30 17:05:13 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								9fc4659b30 
								
							 
						 
						
							
							
								
								- Preparing for Release of 0.99 prerelease 1  
							
							 
							
							
							
						 
						
							2011-01-30 16:59:02 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								e3166ce040 
								
							 
						 
						
							
							
								
								- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether  
							
							 
							
							... 
							
							
							
							- Adapted in the rest of using code as well 
							
						 
						
							2011-01-27 17:40:50 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								fc36d16e84 
								
							 
						 
						
							
							
								
								- Added random generation example application  
							
							 
							
							
							
						 
						
							2011-01-27 16:50:02 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								dbee2cad7d 
								
							 
						 
						
							
							
								
								- Removed application code from library source file  
							
							 
							
							
							
						 
						
							2011-01-27 16:38:52 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								f3b86c1e62 
								
							 
						 
						
							
							
								
								- Updated Doxygen documentation generation and documentation on small parts  
							
							 
							
							
							
						 
						
							2011-01-27 15:24:17 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								0a62cd1a18 
								
							 
						 
						
							
							
								
								- Extra clarification in config header  
							
							 
							
							
							
						 
						
							2011-01-21 11:00:08 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								bbf2f63e92 
								
							 
						 
						
							
							
								
								- Added missing dependency on POLARSSL_DEBUG_C  
							
							 
							
							
							
						 
						
							2011-01-21 10:51:24 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								fb6c7e2688 
								
							 
						 
						
							
							
								
								- Added generic_sum example application to show use of generic message digest layer.  
							
							 
							
							
							
						 
						
							2011-01-21 10:21:11 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								20a7808d13 
								
							 
						 
						
							
							
								
								- Addec crypt_and_hash example program of the generic hash and cipher layers  
							
							 
							
							
							
						 
						
							2011-01-21 09:32:12 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								562535d11b 
								
							 
						 
						
							
							
								
								- Split current md_starts() and md_hmac_starts() functionality into separate md_init_ctx() for allocating the context and the existing starts() functions to initialize the message digest for use.  
							
							 
							
							
							
						 
						
							2011-01-20 16:42:01 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								a885d6835f 
								
							 
						 
						
							
							
								
								- Require different input and output buffer in cipher_update()  
							
							 
							
							... 
							
							
							
							- Fixed style typos 
							
						 
						
							2011-01-20 16:35:05 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								1f14d08cf9 
								
							 
						 
						
							
							
								
								- Fixed typo  
							
							 
							
							... 
							
							
							
							- Clarified necessity of different input and output buffer on cipher_update()
 - Fixed value of enumeration of cipher ids 
							
						 
						
							2011-01-20 16:33:24 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								716c176597 
								
							 
						 
						
							
							
								
								- Added generated CMake files to svn:ignore  
							
							 
							
							
							
						 
						
							2011-01-18 16:34:03 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								5a62408629 
								
							 
						 
						
							
							
								
								- Fixed compiler warnings  
							
							 
							
							
							
						 
						
							2011-01-18 16:31:52 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								e9426948fa 
								
							 
						 
						
							
							
								
								- Added extra compiler warnings by default  
							
							 
							
							
							
						 
						
							2011-01-18 16:28:42 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								b06819bb5d 
								
							 
						 
						
							
							
								
								- Adapted CMake files for the PKCS#11 support  
							
							 
							
							
							
						 
						
							2011-01-18 16:18:38 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								d61e7d98cb 
								
							 
						 
						
							
							
								
								- Cleaned up warning-generating code  
							
							 
							
							
							
						 
						
							2011-01-18 16:17:47 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								f917e42c9b 
								
							 
						 
						
							
							
								
								- Disables PKCS#11 support by default  
							
							 
							
							
							
						 
						
							2011-01-18 16:15:25 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								43b7e35b25 
								
							 
						 
						
							
							
								
								- Support for PKCS#11 through the use of the pkcs11-helper library  
							
							 
							
							
							
						 
						
							2011-01-18 15:27:19 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								0f5f72e949 
								
							 
						 
						
							
							
								
								- Fixed doxygen syntax to standard '\' instead of '@'  
							
							 
							
							
							
						 
						
							2011-01-18 14:58:55 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								3cccddb238 
								
							 
						 
						
							
							
								
								- Fixed identification of non-critical CA certificates  
							
							 
							
							
							
						 
						
							2011-01-16 21:46:31 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								b619499eb3 
								
							 
						 
						
							
							
								
								- x509parse_time_expired() checks time now in addition to the existing date check  
							
							 
							
							
							
						 
						
							2011-01-16 21:40:22 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								a056efc8f9 
								
							 
						 
						
							
							
								
								- Fixed serial length check  
							
							 
							
							
							
						 
						
							2011-01-16 21:38:35 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								dd47699ba5 
								
							 
						 
						
							
							
								
								- Moved storing of a printable serial into a separate function  
							
							 
							
							
							
						 
						
							2011-01-16 21:34:59 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								72f6266f02 
								
							 
						 
						
							
							
								
								- Improved information provided about current Hashing, Cipher and Suite capabilities  
							
							 
							
							
							
						 
						
							2011-01-16 21:27:44 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								76fd75a3de 
								
							 
						 
						
							
							
								
								- Improved certificate validation and validation against the available CRLs  
							
							 
							
							
							
						 
						
							2011-01-16 21:12:10 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								43ca69c38a 
								
							 
						 
						
							
							
								
								- Added function for stringified SSL/TLS version  
							
							 
							
							
							
						 
						
							2011-01-15 17:35:19 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								1f87fb6896 
								
							 
						 
						
							
							
								
								- Support for DES weak keys and parity bits added  
							
							 
							
							
							
						 
						
							2011-01-15 17:32:24 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								f92d7a8c81 
								
							 
						 
						
							
							
								
								- Fixed faulty dependency in test  
							
							 
							
							
							
						 
						
							2011-01-15 17:05:17 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								74111d30b7 
								
							 
						 
						
							
							
								
								- Improved X509 certificate parsing to include extended certificate fields, such as Key Usage  
							
							 
							
							
							
						 
						
							2011-01-15 16:57:55 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								b63b0afc05 
								
							 
						 
						
							
							
								
								- Added verification callback in certificate verification chain in order to allow external blacklisting  
							
							 
							
							
							
						 
						
							2011-01-13 17:54:59 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								1b57b06751 
								
							 
						 
						
							
							
								
								- Added reading of DHM context from memory and file  
							
							 
							
							
							
						 
						
							2011-01-06 15:48:19 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								8123e9d8f1 
								
							 
						 
						
							
							
								
								- Added generic cipher wrapper for integration with OpenVPN (donated by Fox-IT)  
							
							 
							
							
							
						 
						
							2011-01-06 15:37:30 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								6d46812123 
								
							 
						 
						
							
							
								
								- Fixed typo  
							
							 
							
							
							
						 
						
							2011-01-06 15:35:45 +00:00  
						
						
							 
							
							
								 
							 
							
						 
					 
				
					
						
							
							
								 
								Paul Bakker 
							
						 
						
							
							
							
							
								
							
							
								1737385e04 
								
							 
						 
						
							
							
								
								- Added generic message digest wrapper for integration with OpenVPN (donated by Fox-IT)  
							
							 
							
							
							
						 
						
							2011-01-06 14:20:01 +00:00