Commit graph

  • 367381fddd Add negotiation of Extended Master Secret Manuel Pégourié-Gonnard 2014-10-20 18:40:56 +0200
  • 178f9d6e19 Update Changelog for FALLBACK_SCSV Manuel Pégourié-Gonnard 2014-10-20 14:56:56 +0200
  • 01b2699198 Implement FALLBACK_SCSV server-side Manuel Pégourié-Gonnard 2014-10-20 14:05:28 +0200
  • 1cbd39dbeb Implement FALLBACK_SCSV client-side Manuel Pégourié-Gonnard 2014-10-20 13:34:59 +0200
  • a6c5ea2c43 Include 1.2.12 release information in ChangeLog Paul Bakker 2014-10-24 16:26:29 +0200
  • fc3697ce2b Prepared for PolarSSL-1.2.12 polarssl-1.2.12 Paul Bakker 2014-10-24 10:42:25 +0200
  • 0b12d5e332 Accept spaces at EOL/buffer in base64_decode() Manuel Pégourié-Gonnard 2014-10-23 17:00:26 +0200
  • a6118741a7 Update changelog for the last few commits Manuel Pégourié-Gonnard 2014-10-23 15:37:34 +0200
  • d6d5ef2f0d timing.c: avoid referencing garbage value Alfred Klomp 2014-07-14 22:32:21 +0200
  • 9afec5f8ec ssl_mail_client.c: silence warning, check base64_encode() status Alfred Klomp 2014-07-14 22:11:13 +0200
  • 185962114a ssl_test.c: remove dead store, assign at declaration Alfred Klomp 2014-07-14 22:10:14 +0200
  • ec99373df6 pkcs5.c: fix dead store: return proper exit status Alfred Klomp 2014-07-14 22:07:34 +0200
  • 9711920304 Fix ssl_read wrt non-Application Data Manuel Pégourié-Gonnard 2014-10-23 15:29:55 +0200
  • 3fdfcedebb Fix net_accept() regarding non-blocking sockets Manuel Pégourié-Gonnard 2014-10-23 15:23:48 +0200
  • 982eda385f Don't print uninitialised buffer in ssl_mail_client Manuel Pégourié-Gonnard 2014-10-23 15:20:19 +0200
  • 0b0b522932 Fix compiler warnings on iOS Manuel Pégourié-Gonnard 2014-10-23 15:17:27 +0200
  • 7d75ea4787 x509_crt_parse() did not increase total_failed on PEM error Manuel Pégourié-Gonnard 2014-10-23 15:13:39 +0200
  • 86792a6cf3 Fix ssl_close_notify() with non-blocking I/O Manuel Pégourié-Gonnard 2014-10-23 15:02:45 +0200
  • 066c1f60bb Fix potential bad read in parsing ServerHello Manuel Pégourié-Gonnard 2014-10-23 14:58:09 +0200
  • 6b44038913 Fix memory leak parsing some X.509 certs Manuel Pégourié-Gonnard 2014-10-23 14:53:46 +0200
  • 92c1f41e38 Add VS projects Paul Bakker 2014-10-22 16:08:46 +0200
  • f2a459df05 Preparation for PolarSSL 1.4.0 Paul Bakker 2014-10-21 16:40:54 +0200
  • 1de7ddc333 Remove duplicate ChangeLog lines Paul Bakker 2014-10-21 16:33:30 +0200
  • 6b875fc7e5 Fix potential memory leak (from clang-analyzer) Manuel Pégourié-Gonnard 2014-10-17 14:02:33 +0200
  • 7498f0da0a Disable warning about deprecation attribute Manuel Pégourié-Gonnard 2014-10-15 17:35:14 +0200
  • 4d7fbbf8fd Update Changelog Manuel Pégourié-Gonnard 2014-10-15 15:40:55 +0200
  • ef88e68188 Deprecate ssl_set_bio() Manuel Pégourié-Gonnard 2014-10-15 15:35:32 +0200
  • df3acd82e2 Limit HelloRequest retransmission if not enforced Manuel Pégourié-Gonnard 2014-10-15 15:07:45 +0200
  • 26a4cf63ec Add retransmission of HelloRequest Manuel Pégourié-Gonnard 2014-10-15 13:52:48 +0200
  • a6ace04c5c Test for lost HelloRequest Manuel Pégourié-Gonnard 2014-10-15 12:44:41 +0200
  • f1384470bf Avoid spurious timeout in ssl-opt.sh Manuel Pégourié-Gonnard 2014-10-14 22:57:46 +0200
  • 74a1378175 Avoid false positive in ssl-opt.sh with memcheck Manuel Pégourié-Gonnard 2014-10-14 22:34:08 +0200
  • 8e704f0f74 DTLS depends on TIMING_C for now Manuel Pégourié-Gonnard 2014-10-14 20:03:35 +0200
  • e698f59a25 Add tests for ssl_set_dtls_badmac_limit() Manuel Pégourié-Gonnard 2014-10-14 19:36:36 +0200
  • b0643d152d Add ssl_set_dtls_badmac_limit() Manuel Pégourié-Gonnard 2014-10-14 18:30:36 +0200
  • 9b35f18f66 Add ssl_get_record_expansion() Manuel Pégourié-Gonnard 2014-10-14 17:47:31 +0200
  • e63582a166 Add dlts_client.c and dtls_server.c Manuel Pégourié-Gonnard 2014-10-14 11:47:21 +0200
  • dc6a75a952 ERR_NET_CONN_RESET can't happen with UDP Manuel Pégourié-Gonnard 2014-10-13 19:19:39 +0200
  • caecdaed25 Cosmetics in ssl_server2 & complete tests for HVR Manuel Pégourié-Gonnard 2014-10-13 19:04:37 +0200
  • 2d87e419e0 Adapt ssl_{client,server}2.c to datagram write Manuel Pégourié-Gonnard 2014-10-13 18:38:36 +0200
  • a6fcffe516 Add warnings about disabling replay detection Manuel Pégourié-Gonnard 2014-10-13 18:15:52 +0200
  • 37e08e1689 Fix max_fragment_length with DTLS Manuel Pégourié-Gonnard 2014-10-13 17:55:52 +0200
  • 23cad339c4 Fail cleanly on unhandled case Manuel Pégourié-Gonnard 2014-10-13 17:06:41 +0200
  • 994f8b554f Ok for close_notify to fail Manuel Pégourié-Gonnard 2014-10-09 19:56:44 +0200
  • 127ab88dba Give more time to lossy tests with normal timers Manuel Pégourié-Gonnard 2014-10-09 17:59:32 +0200
  • fc572dd4f6 Retransmit only on last message from prev flight Manuel Pégourié-Gonnard 2014-10-09 17:56:57 +0200
  • 8a7cf2543a Add a few #ifdefs Manuel Pégourié-Gonnard 2014-10-09 17:35:53 +0200
  • ba958b8bdc Add test for server-initiated renego Manuel Pégourié-Gonnard 2014-10-09 16:13:44 +0200
  • a9d7d03e30 SIGTERM also interrupts server2 during net_read() Manuel Pégourié-Gonnard 2014-10-09 16:07:08 +0200
  • 6a2bc23f63 Allow exchanges=0 in ssl_server2 Manuel Pégourié-Gonnard 2014-10-09 15:33:13 +0200
  • cce220d6aa Adapt ssl_server2 to datagram-style read Manuel Pégourié-Gonnard 2014-10-06 18:11:43 +0200
  • 46fb942046 Fix warning about function that should be static Manuel Pégourié-Gonnard 2014-10-02 18:10:40 +0200
  • f1e9b09a0c Fix missing #ifdef's Manuel Pégourié-Gonnard 2014-10-02 18:08:53 +0200
  • 85beb30b11 Add test for resumption with non-blocking I/O Manuel Pégourié-Gonnard 2014-10-02 17:59:19 +0200
  • a59af05dce Give more time to tests that time out too often Manuel Pégourié-Gonnard 2014-10-02 17:07:09 +0200
  • 4e2f245752 Fix timer issues Manuel Pégourié-Gonnard 2014-10-02 16:51:56 +0200
  • 7a26d73735 Add test for session resumption Manuel Pégourié-Gonnard 2014-10-02 14:50:46 +0200
  • df9a0a8460 Drop unexpected ApplicationData Manuel Pégourié-Gonnard 2014-10-02 14:17:18 +0200
  • f1e0df3ccd Allow ssl_client2 to resend on read timeout Manuel Pégourié-Gonnard 2014-10-02 14:02:32 +0200
  • 6b65141718 Implement ssl_read() timeout (DTLS only for now) Manuel Pégourié-Gonnard 2014-10-01 18:29:03 +0200
  • 2707430a4d Fix types and comments about read_timeout Manuel Pégourié-Gonnard 2014-10-01 17:35:50 +0200
  • 6c1fa3a184 Fix misplaced initialisation of timeout Manuel Pégourié-Gonnard 2014-10-01 16:58:16 +0200
  • 37a4de2cec Use shorter timeouts in ssl-opt.sh proxy tests Manuel Pégourié-Gonnard 2014-10-01 16:38:03 +0200
  • d823bd0a04 Add handshake_timeout option to test server/client Manuel Pégourié-Gonnard 2014-10-01 14:40:56 +0200
  • c8d8e97cbd Move to milliseconds in recv_timeout() Manuel Pégourié-Gonnard 2014-10-01 15:01:39 +0200
  • 905dd2425c Add ssl_set_handshake_timeout() Manuel Pégourié-Gonnard 2014-10-01 12:03:55 +0200
  • 0ac247fd88 Implement timeout back-off (fixed range for now) Manuel Pégourié-Gonnard 2014-09-30 22:21:31 +0200
  • ce8588c9ef Make udp_proxy more robust Manuel Pégourié-Gonnard 2014-10-01 00:56:03 +0200
  • 6093d81c20 Add tests with proxy and non-blocking I/O Manuel Pégourié-Gonnard 2014-09-29 17:52:57 +0200
  • 579950c2bb Fix bug with non-blocking I/O and cookies Manuel Pégourié-Gonnard 2014-09-29 17:47:33 +0200
  • f03651217c Adapt programs to use nbio with DTLS Manuel Pégourié-Gonnard 2014-09-29 16:11:47 +0200
  • 7de3c9eecb Count timeout per flight, not per message Manuel Pégourié-Gonnard 2014-09-29 15:29:48 +0200
  • db2858ce96 Preparation for timers Manuel Pégourié-Gonnard 2014-09-29 14:04:42 +0200
  • bd97fdb3a4 Make ssl_server2's HVR handling more realistic Manuel Pégourié-Gonnard 2014-09-26 16:46:36 +0200
  • 36795197d9 Rm now useless MTU setting in compat.sh Manuel Pégourié-Gonnard 2014-09-26 16:33:45 +0200
  • 7a66cbca75 Rm some redundant tests Manuel Pégourié-Gonnard 2014-09-26 16:31:46 +0200
  • 9590e0a176 Add proxy tests with gnutls-srv & fragmentation Manuel Pégourié-Gonnard 2014-09-26 16:27:59 +0200
  • fa60f128d6 Quit using "yes" in ssl-opt.sh with openssl Manuel Pégourié-Gonnard 2014-09-26 16:07:29 +0200
  • ae666c5092 proxy: avoid always dropping the same packet Manuel Pégourié-Gonnard 2014-09-26 12:08:36 +0200
  • 08a1d4bce1 Fix bug with client auth with DTLS Manuel Pégourié-Gonnard 2014-09-26 10:35:50 +0200
  • d0fd1daa6b Add test with proxy and openssl server Manuel Pégourié-Gonnard 2014-09-25 17:00:27 +0200
  • 1b753f1e27 Add test for renego with proxy Manuel Pégourié-Gonnard 2014-09-25 16:09:36 +0200
  • 23b7b703aa Fix issue with renego & resend Manuel Pégourié-Gonnard 2014-09-25 13:50:12 +0200
  • 8cc7e03ae0 udp_proxy: show encrypted messages as encrypted Manuel Pégourié-Gonnard 2014-09-25 12:59:05 +0200
  • 18e519a660 Add proxy tests with more handshake flows Manuel Pégourié-Gonnard 2014-09-24 19:09:17 +0200
  • 6265d305f1 Fix some delayed packets going the wrong way Manuel Pégourié-Gonnard 2014-09-24 17:42:09 +0200
  • bf02319b58 udp_proxy: don't overwrite delayed packets Manuel Pégourié-Gonnard 2014-09-24 17:18:17 +0200
  • 76fe9e41c1 Test that anti-replay ignores all duplicates Manuel Pégourié-Gonnard 2014-09-24 15:17:31 +0200
  • f03c7aa469 Add replay detection in parse_client_hello() Manuel Pégourié-Gonnard 2014-09-24 14:54:06 +0200
  • 2739313cea Make anti-replay a runtime option Manuel Pégourié-Gonnard 2014-09-24 14:41:11 +0200
  • 8464a46b6b Make DTLS_ANTI_REPLAY depends on PROTO_DTLS Manuel Pégourié-Gonnard 2014-09-24 14:05:32 +0200
  • 246c13a05f Fix epoch checking Manuel Pégourié-Gonnard 2014-09-24 13:56:09 +0200
  • b47368a00a Add replay detection Manuel Pégourié-Gonnard 2014-09-24 13:29:58 +0200
  • 4956fd7437 Test and fix anti-replay functions Manuel Pégourié-Gonnard 2014-09-24 11:13:44 +0200
  • 7a7e140d4e Add functions for replay protection Manuel Pégourié-Gonnard 2014-09-24 10:52:58 +0200
  • ea22ce577e Rm unneeded counter increment with DTLS Manuel Pégourié-Gonnard 2014-09-24 09:46:10 +0200
  • 6312e0f4e6 udp_proxy: allow successive clients Manuel Pégourié-Gonnard 2014-09-23 12:46:33 +0200
  • 484b8f9ed8 Fix bug in ssl_client2 reconnect option Manuel Pégourié-Gonnard 2014-09-23 12:36:12 +0200
  • b46780edee Enlarge udp_proxy's message buffer Manuel Pégourié-Gonnard 2014-09-23 12:17:30 +0200
  • 825a49ed7c Add more udp_proxy tests Manuel Pégourié-Gonnard 2014-09-23 11:00:37 +0200