Commit graph

  • fa4238838a Update Changelog for compile-option renegotiation Manuel Pégourié-Gonnard 2014-11-04 19:57:55 +0100
  • 037170465a Switch from an enable to a disable flag Manuel Pégourié-Gonnard 2014-11-04 19:52:10 +0100
  • 6186019d5d Save 48 bytes if SSLv3 is not defined Manuel Pégourié-Gonnard 2014-11-04 13:05:42 +0100
  • 615e677c0b Make renegotiation a compile-time option Manuel Pégourié-Gonnard 2014-11-03 08:23:14 +0100
  • 85d915b81d Add tests for renego security enforcement Manuel Pégourié-Gonnard 2014-11-03 20:10:36 +0100
  • d3b90f797d Fix bug in ssl_client2 reconnect option Manuel Pégourié-Gonnard 2014-11-24 11:54:02 +0100
  • f29e5de09d Cosmetics in ssl_server2 Manuel Pégourié-Gonnard 2014-11-21 11:54:41 +0100
  • 60346be2a3 Improve debugging message. Manuel Pégourié-Gonnard 2014-11-21 11:38:37 +0100
  • e423246e7f Fix net_usleep for durations greater than 1 second Manuel Pégourié-Gonnard 2014-11-21 09:52:23 +0100
  • 9439f93ea4 Use pk_load_file() in X509 Manuel Pégourié-Gonnard 2014-11-21 09:49:43 +0100
  • 2457fa0915 Create ticket keys only if enabled Manuel Pégourié-Gonnard 2014-11-21 09:23:11 +0100
  • cb7da352fd Fix typo in #ifdef Manuel Pégourié-Gonnard 2014-11-21 09:16:00 +0100
  • 150c4f62f1 Clarify documentation a bit Manuel Pégourié-Gonnard 2014-11-21 09:14:52 +0100
  • 3e9449350c Fix comment on resumption Manuel Pégourié-Gonnard 2014-11-20 18:29:41 +0100
  • 6b298e6cc1 Update comment from draft to RFC Manuel Pégourié-Gonnard 2014-11-20 18:28:50 +0100
  • d16d1cb96a Use more #ifdef's on CLI_C and SRV_C in ssl_tls.c Manuel Pégourié-Gonnard 2014-11-20 18:15:05 +0100
  • 258bab0b1b Fix missing bound check Manuel Pégourié-Gonnard 2014-11-25 17:41:50 +0100
  • ea29d152c7 Add recursion.pl to all.sh Manuel Pégourié-Gonnard 2014-11-20 17:32:33 +0100
  • 10c44d767d Allow x509_crt_verify_child() in recursion.pl Manuel Pégourié-Gonnard 2014-11-20 17:30:37 +0100
  • aa02dc1ed8 Add support for cleanly exiting ssl_server2 Manuel Pégourié-Gonnard 2014-11-20 17:28:18 +0100
  • 4cdb3babad Add POLARSSL_X509_MAX_INTERMEDIATE_CA Manuel Pégourié-Gonnard 2014-11-20 17:12:15 +0100
  • 6a095d2383 Make x509parse_crt() iterative Manuel Pégourié-Gonnard 2014-11-20 17:03:09 +0100
  • fd6c85c3eb Set a compile-time limit to X.509 chain length Manuel Pégourié-Gonnard 2014-11-20 16:34:20 +0100
  • 89d69b398c Fix 3DES -> DES in all.sh (+ time estimates) Manuel Pégourié-Gonnard 2014-11-20 13:48:53 +0100
  • 246978d97d Add curves.pl to all.sh Manuel Pégourié-Gonnard 2014-11-20 13:29:53 +0100
  • 9bda9b3b92 Rework all.sh to use MSan instead of valgrind Manuel Pégourié-Gonnard 2014-11-20 13:10:22 +0100
  • cf4de32f58 Fix depends on individual curves in tests Manuel Pégourié-Gonnard 2014-11-19 20:03:55 +0100
  • 2727dc1e09 Add script to test depends on individual curves Manuel Pégourié-Gonnard 2014-11-19 20:02:46 +0100
  • 5c2aa10c15 Fix curve dependency issues in X.509 test suite Manuel Pégourié-Gonnard 2014-11-19 19:15:22 +0100
  • 6ed2d92629 Make x509_crl_parse() iterative Manuel Pégourié-Gonnard 2014-11-19 19:05:03 +0100
  • 426d4ae7ff Split x509_crl_parse_der() out of x509_crl_parse() Manuel Pégourié-Gonnard 2014-11-19 16:58:28 +0100
  • 57a5d60abb Add tests for concatenated CRLs Manuel Pégourié-Gonnard 2014-11-19 14:04:09 +0100
  • 4be3449dbc Add Readme about X.509 test files Manuel Pégourié-Gonnard 2014-11-19 12:52:43 +0100
  • 8c9223df84 Add text view to debug_print_buf() Manuel Pégourié-Gonnard 2014-11-19 10:17:21 +0100
  • 0975ad928d Merge branch 'etm' into dtls Manuel Pégourié-Gonnard 2014-11-17 15:07:17 +0100
  • 8e4b3374d7 Fix some more warnings in reduced configs Manuel Pégourié-Gonnard 2014-11-17 15:06:13 +0100
  • be6ce835a2 Fix typo causing MSVC errors Manuel Pégourié-Gonnard 2014-11-17 14:29:36 +0100
  • 3a3066c3ee ssl_server2 now exits on signal during a read too Manuel Pégourié-Gonnard 2014-09-20 12:03:00 +0200
  • 403a86f73d ssl_server2: exit cleanly on SIGINT too Manuel Pégourié-Gonnard 2014-11-17 12:46:49 +0100
  • 1c022a6983 Fix memory leaks in PKCS#5 and PKCS#12 Manuel Pégourié-Gonnard 2014-11-17 12:24:41 +0100
  • d8a1ea72b1 Fix potential buffer overread of size 1 Manuel Pégourié-Gonnard 2014-11-17 12:04:51 +0100
  • 309c798b2b Fix memory leak in PKCS#5 test suite Manuel Pégourié-Gonnard 2014-11-17 11:56:08 +0100
  • 3c17460a1f Fix warning in RSA test suite Manuel Pégourié-Gonnard 2014-11-17 11:52:51 +0100
  • ffbeedb838 Fix potential undefined behaviour in Camellia Manuel Pégourié-Gonnard 2014-11-10 13:05:43 +0100
  • 7bf9f7e308 Fix documentation issues found by Clang Manuel Pégourié-Gonnard 2014-11-17 11:20:21 +0100
  • 6c28491a15 Backport build modes from 1.3 Manuel Pégourié-Gonnard 2014-11-17 11:15:13 +0100
  • aec1385551 compat.sh exits non-zero on failure Manuel Pégourié-Gonnard 2014-11-17 11:12:33 +0100
  • 017bf57daa Forbid repeated X.509 extensions Manuel Pégourié-Gonnard 2014-11-17 11:00:23 +0100
  • 360eb91d02 Fix potential stack overflow Manuel Pégourié-Gonnard 2014-11-12 16:52:34 +0100
  • fdec957e55 Fix memory leak with crafted X.509 certs Manuel Pégourié-Gonnard 2014-11-11 23:11:16 +0100
  • d3ae430241 Fix uninitialised pointer dereference Manuel Pégourié-Gonnard 2014-11-11 22:17:26 +0100
  • 98aa19148c Adjust warnings in different modes Manuel Pégourié-Gonnard 2014-11-14 16:34:36 +0100
  • e80083cafa Add precision about cmake cache Manuel Pégourié-Gonnard 2014-11-14 13:52:32 +0100
  • 052ae25e56 Avoid advertising private option Manuel Pégourié-Gonnard 2014-11-14 13:09:41 +0100
  • 6cf11642a4 Update README to mention config.pl Manuel Pégourié-Gonnard 2014-11-14 12:29:59 +0100
  • ca89d89a10 Document build modes better Manuel Pégourié-Gonnard 2014-11-13 13:56:05 +0100
  • 705b70f122 Add new build modes for sanitizers Manuel Pégourié-Gonnard 2014-11-13 13:35:50 +0100
  • fd60a5c621 Add script finding recursive functions Manuel Pégourié-Gonnard 2014-11-12 22:54:24 +0100
  • e5b0fc1847 Make malloc-init script a bit happier Manuel Pégourié-Gonnard 2014-11-12 22:27:42 +0100
  • 5924f9f810 Add script to find malloc() not followed by init Manuel Pégourié-Gonnard 2014-11-12 22:27:18 +0100
  • f631bbc1da Make x509_string_cmp() iterative Manuel Pégourié-Gonnard 2014-11-12 18:35:31 +0100
  • 8a5e3d4a40 Forbid repeated X.509 extensions Manuel Pégourié-Gonnard 2014-11-12 17:47:28 +0100
  • d730aa517a Use blinding for RSA even without CRT Manuel Pégourié-Gonnard 2014-11-12 16:21:24 +0100
  • d681443f69 Fix potential stack overflow Manuel Pégourié-Gonnard 2014-11-12 01:25:31 +0100
  • b134060f90 Fix memory leak with crafted X.509 certs Manuel Pégourié-Gonnard 2014-11-11 23:11:16 +0100
  • 0369a5291b Fix uninitialised pointer dereference Manuel Pégourié-Gonnard 2014-11-11 22:17:26 +0100
  • e9271e6835 Add a MemSan Cmake build type Manuel Pégourié-Gonnard 2014-11-11 22:21:27 +0100
  • 49aa99e653 Fix exit codes in cert_app Manuel Pégourié-Gonnard 2014-11-10 16:40:16 +0100
  • e959979621 Fix ECDSA sign buffer size Manuel Pégourié-Gonnard 2014-11-10 13:43:55 +0100
  • b31b61b9e8 Fix potential undefined behaviour in Camellia Manuel Pégourié-Gonnard 2014-11-10 13:05:43 +0100
  • d6197a37e0 Detect undefined behaviours too in ASan builds Manuel Pégourié-Gonnard 2014-11-10 13:02:22 +0100
  • 54f6e562e6 Fix CFLAGS with cmake and gcc Manuel Pégourié-Gonnard 2014-11-10 12:15:39 +0100
  • de17125875 Update ChangeLog for pk_check_pair() & Co Manuel Pégourié-Gonnard 2014-11-08 17:58:24 +0100
  • 7c13d69cb5 Fix dependency issues Manuel Pégourié-Gonnard 2014-11-12 00:01:34 +0100
  • a1efcb084f Implement pk_check_pair() for RSA-alt Manuel Pégourié-Gonnard 2014-11-08 17:08:08 +0100
  • 27e3edbe2c Check key/cert pair in ssl_set_own_cert() Manuel Pégourié-Gonnard 2014-11-06 17:32:48 +0100
  • 70bdadf54b Add pk_check_pair() Manuel Pégourié-Gonnard 2014-11-06 16:51:20 +0100
  • 30668d688d Add ecp_check_pub_priv() Manuel Pégourié-Gonnard 2014-11-06 15:25:32 +0100
  • 2f8d1f9fc3 Add rsa_check_pub_priv() Manuel Pégourié-Gonnard 2014-11-06 14:02:51 +0100
  • e10e06d863 Blind RSA operations even without CRT Manuel Pégourié-Gonnard 2014-11-06 18:15:12 +0100
  • d056ce0e3e Use seq_num as AEAD nonce by default Manuel Pégourié-Gonnard 2014-10-29 22:29:20 +0100
  • f9d778d635 Merge branch 'etm' into dtls Manuel Pégourié-Gonnard 2014-11-06 01:36:32 +0100
  • 56d985d0a6 Merge branch 'session-hash' into dtls Manuel Pégourié-Gonnard 2014-11-06 01:25:09 +0100
  • 9d7821d774 Fix warning in reduced config Manuel Pégourié-Gonnard 2014-11-06 01:19:52 +0100
  • fedba98ede Merge branch 'fb-scsv' into dtls Manuel Pégourié-Gonnard 2014-11-05 16:12:09 +0100
  • c7647079fa Merge branch 'development' into dtls Manuel Pégourié-Gonnard 2014-11-05 16:02:57 +0100
  • c122ae7612 Update Changelog for EtM Manuel Pégourié-Gonnard 2014-11-04 18:27:16 +0100
  • 1a03473576 Keep EtM state across renegotiations Manuel Pégourié-Gonnard 2014-11-04 17:36:18 +0100
  • 169dd6a514 Adjust minimum length for EtM Manuel Pégourié-Gonnard 2014-11-04 16:15:39 +0100
  • 78e745fc0a Don't send back EtM extension if not using CBC Manuel Pégourié-Gonnard 2014-11-04 15:44:06 +0100
  • 08558e5b46 Fix for the RFC erratum Manuel Pégourié-Gonnard 2014-11-04 14:40:21 +0100
  • 313d796e80 Implement EtM Manuel Pégourié-Gonnard 2014-10-29 12:07:57 +0100
  • 0098e7dc70 Preparation for EtM Manuel Pégourié-Gonnard 2014-10-28 13:08:59 +0100
  • 699cafaea2 Implement initial negotiation of EtM Manuel Pégourié-Gonnard 2014-10-27 13:57:03 +0100
  • b3c6a97b31 Update Changelog for session-hash Manuel Pégourié-Gonnard 2014-11-04 18:24:04 +0100
  • 769c6b6351 Make session-hash depend on TLS versions Manuel Pégourié-Gonnard 2014-10-28 14:13:55 +0100
  • b575b54cb9 Forbid extended master secret with SSLv3 Manuel Pégourié-Gonnard 2014-10-24 15:12:31 +0200
  • dd4592774b compat.sh: allow git version of gnutls Manuel Pégourié-Gonnard 2014-10-24 12:57:37 +0200
  • 85a4178f82 compat.sh: make options a bit more robust Manuel Pégourié-Gonnard 2014-10-24 12:47:26 +0200
  • ada3030485 Implement extended master secret Manuel Pégourié-Gonnard 2014-10-20 20:33:10 +0200