Commit graph

  • ae8d2399a5 udp_proxy: also drop messages from the last flight Manuel Pégourié-Gonnard 2014-09-23 10:01:06 +0200
  • abf16240dd Add ability to resend last flight Manuel Pégourié-Gonnard 2014-09-23 09:42:16 +0200
  • 992e13665d Make decisions pseudo-random in udp_proxy Manuel Pégourié-Gonnard 2014-09-20 18:06:23 +0200
  • cd32a50d67 Fix NewSesssionTicket vs ChangeCipherSpec bug Manuel Pégourié-Gonnard 2014-09-20 13:54:12 +0200
  • a6189f0fb0 udp_proxy wasn't actually killed Manuel Pégourié-Gonnard 2014-09-20 13:15:43 +0200
  • a0719727da Add tests with dropped packets Manuel Pégourié-Gonnard 2014-09-20 12:46:27 +0200
  • bc010a045c udp_proxy: don't drop messages in the last flight Manuel Pégourié-Gonnard 2014-09-20 12:40:51 +0200
  • b6440a496b ssl_server2 now dies on SIGTERM during a read Manuel Pégourié-Gonnard 2014-09-20 12:03:00 +0200
  • 767c69561b Drop out-of-sequence ChangeCipherSpec messages Manuel Pégourié-Gonnard 2014-09-20 10:04:00 +0200
  • 7cf3518284 Enhance output of udp_proxy (with time) Manuel Pégourié-Gonnard 2014-09-20 09:43:48 +0200
  • 93017de47e Minor optim: don't resend on duplicated HVR Manuel Pégourié-Gonnard 2014-09-19 22:42:40 +0200
  • c715aed744 Fix epoch swapping Manuel Pégourié-Gonnard 2014-09-19 21:39:13 +0200
  • 6a2bdfaf73 Actually resend flights Manuel Pégourié-Gonnard 2014-09-19 21:18:23 +0200
  • 5d8ba53ace Expand and fix resend infrastructure Manuel Pégourié-Gonnard 2014-09-19 15:09:21 +0200
  • ffa67be698 Infrastructure for buffering & resending flights Manuel Pégourié-Gonnard 2014-09-19 11:18:57 +0200
  • a014829024 Use ssl_set_bio_timeout() in test client/server Manuel Pégourié-Gonnard 2014-09-18 16:06:04 +0200
  • 57fa314412 Fix depend documentation Manuel Pégourié-Gonnard 2014-09-18 11:43:18 +0200
  • 9d9b003a9a Add net_recv_timeout() Manuel Pégourié-Gonnard 2014-09-18 11:22:45 +0200
  • 8fa6dfd560 Introduce f_recv_timeout callback Manuel Pégourié-Gonnard 2014-09-17 10:47:43 +0200
  • e6bdc4497c Merge I/O contexts into one Manuel Pégourié-Gonnard 2014-09-17 11:34:57 +0200
  • f4acfe1808 Document previous API changes in this branch Manuel Pégourié-Gonnard 2014-09-17 10:56:54 +0200
  • d92d6a1b5b ssl_parse_server_key_exchange() cleanups Manuel Pégourié-Gonnard 2014-09-10 15:25:02 +0000
  • 5ee96546de Add length checks in parse_certificate_verify() Manuel Pégourié-Gonnard 2014-09-10 14:27:21 +0000
  • 72226214b1 Merge checks in ssl_parse_certificate_verify() Manuel Pégourié-Gonnard 2014-09-10 14:23:38 +0000
  • ca6440b246 Small cleanups in parse_finished() Manuel Pégourié-Gonnard 2014-09-10 12:39:54 +0000
  • 624bcb5260 No memmove: done, rm temporary things Manuel Pégourié-Gonnard 2014-09-10 21:56:38 +0200
  • 000d5aec13 No memmove: parse_new_session_ticket() Manuel Pégourié-Gonnard 2014-09-10 21:52:12 +0200
  • 0b3400dafa No memmove: ssl_parse_server_hello() Manuel Pégourié-Gonnard 2014-09-10 21:23:41 +0200
  • 069eb79043 No memmove: ssl_parse_hello_verify_request() Manuel Pégourié-Gonnard 2014-09-10 20:08:29 +0200
  • 04c1b4ece1 No memmove: certificate_request + server_hello_done Manuel Pégourié-Gonnard 2014-09-10 19:25:43 +0200
  • f4830b5092 No memmove: ssl_parse_server_key_exchange() Manuel Pégourié-Gonnard 2014-09-10 15:15:51 +0000
  • 4528f3f5c0 No memmove: parse_certificate_verify() Manuel Pégourié-Gonnard 2014-09-10 14:17:23 +0000
  • 2114d724dc No memmove: ssl_parse_client_key_exchange() Manuel Pégourié-Gonnard 2014-09-10 13:59:41 +0000
  • f49a7daa1a No memmove: ssl_parse_certificate() Manuel Pégourié-Gonnard 2014-09-10 13:30:43 +0000
  • 4abc32734e No memmove: ssl_parse_finished() Manuel Pégourié-Gonnard 2014-09-10 12:02:46 +0000
  • f899583f94 Prepare moving away from memmove() on incoming HS Manuel Pégourié-Gonnard 2014-09-10 08:25:12 +0000
  • 4a1753657c Fix missing return in error check Manuel Pégourié-Gonnard 2014-09-09 17:45:31 +0200
  • 19d438f4ff Get rid of memmove for DTLS in parse_client_hello() Manuel Pégourié-Gonnard 2014-09-09 17:08:52 +0200
  • 63eca930d7 Drop invalid records with DTLS Manuel Pégourié-Gonnard 2014-09-08 16:39:08 +0200
  • 167a37632d Split two functions out of ssl_read_record() Manuel Pégourié-Gonnard 2014-09-08 16:14:10 +0200
  • 6c18a39807 Add option 'bad_ad' to udp_proxy Manuel Pégourié-Gonnard 2014-09-08 11:24:58 +0200
  • eb00bfd9c2 Add option 'mtu' to udp_proxy Manuel Pégourié-Gonnard 2014-09-08 11:11:42 +0200
  • 81f2fe9f08 Add option 'delay_ccs' to udp_proxy Manuel Pégourié-Gonnard 2014-09-08 10:44:57 +0200
  • 60fdd7e0f2 Add option 'drop' to udp_proxy Manuel Pégourié-Gonnard 2014-09-06 14:49:52 +0200
  • 21398c37c0 Add option 'delay' to udp_proxy Manuel Pégourié-Gonnard 2014-09-06 14:36:46 +0200
  • 990f9e428a Handle late handshake messages gracefully Manuel Pégourié-Gonnard 2014-09-06 12:27:02 +0200
  • 2c41bd85e0 Add a 'duplicate' option to udp_proxy Manuel Pégourié-Gonnard 2014-09-06 08:14:47 +0200
  • 44d5e63e6a Enhance output of udp_proxy Manuel Pégourié-Gonnard 2014-09-06 08:07:45 +0200
  • be9eb877f7 Adapt ssl-opt.sh to allow using udp_proxy in tests Manuel Pégourié-Gonnard 2014-09-05 17:45:19 +0200
  • cb4137b646 Add test utility udp_proxy Manuel Pégourié-Gonnard 2014-09-04 14:55:28 +0200
  • 60ca5afaec Drop records from wrong epoch Manuel Pégourié-Gonnard 2014-09-03 16:02:42 +0200
  • 0a65934ef3 Re-enable valgrind for all tests Manuel Pégourié-Gonnard 2014-09-03 13:11:08 +0200
  • 1aa586e41d Check handshake message_seq field Manuel Pégourié-Gonnard 2014-09-03 12:54:04 +0200
  • 9d1d7196e4 Check length before reading handshake header Manuel Pégourié-Gonnard 2014-09-03 11:01:14 +0200
  • d9ba0d96b6 Prepare for checking incoming handshake seqnum Manuel Pégourié-Gonnard 2014-09-02 18:30:26 +0200
  • 0c4cbc7895 Add test for fragmentation + renego with GnuTLS Manuel Pégourié-Gonnard 2014-09-02 14:47:31 +0200
  • ac03052f22 Fix segfault with some very short fragments Manuel Pégourié-Gonnard 2014-09-02 14:23:40 +0200
  • f1499f602e Add interop testing for renego with GnuTLS Manuel Pégourié-Gonnard 2014-08-31 17:13:13 +0200
  • 77b0b8d100 Disable some tests with valgrind for now Manuel Pégourié-Gonnard 2014-08-31 20:19:40 +0200
  • 64dffc5d14 Make handshake reassembly work with openssl Manuel Pégourié-Gonnard 2014-09-02 13:39:16 +0200
  • a77561765f Add test with openssl with DTLS in ssl-opt.sh Manuel Pégourié-Gonnard 2014-08-31 18:37:01 +0200
  • 502bf30fb5 Handle reassembly of handshake messages Manuel Pégourié-Gonnard 2014-08-20 13:12:58 +0200
  • ed79a4bb14 Prepare for DTLS handshake reassembly Manuel Pégourié-Gonnard 2014-08-20 10:43:01 +0200
  • edcbe549fd Reorder checks in ssl_read_record Manuel Pégourié-Gonnard 2014-08-11 19:27:24 +0200
  • 0557bd5fa4 Fix message_seq with server-initiated renego Manuel Pégourié-Gonnard 2014-08-19 19:18:39 +0200
  • c392b240c4 Fix server-initiated renegotiation with DTLS Manuel Pégourié-Gonnard 2014-08-19 17:53:11 +0200
  • 30d16eb429 Fix client-initiated renegotiation with DTLS Manuel Pégourié-Gonnard 2014-08-19 17:43:50 +0200
  • b35fe5638a Fix HelloVerifyRequest version handling Manuel Pégourié-Gonnard 2014-08-09 17:00:46 +0200
  • 4ba6ab6d0d Fix glitch with HelloVerifyRequest Manuel Pégourié-Gonnard 2014-08-07 17:21:47 +0200
  • 562eb787ec Add and use POLARSSL_ERR_SSL_BUFFER_TOO_SMALL Manuel Pégourié-Gonnard 2014-07-23 23:41:53 +0200
  • bef8f09899 Make cookie timeout configurable Manuel Pégourié-Gonnard 2014-07-23 23:40:29 +0200
  • e90308178f Add timestamp/serial to cookies, with timeout Manuel Pégourié-Gonnard 2014-07-23 21:29:11 +0200
  • 445a1ec6cd Change internal names Manuel Pégourié-Gonnard 2014-07-23 20:48:05 +0200
  • 0eb6cab979 Add DTLS cookies test to ssl-opt.sh Manuel Pégourié-Gonnard 2014-07-23 20:17:47 +0200
  • 26820e3061 Add option 'cookies' to ssl_server2 Manuel Pégourié-Gonnard 2014-07-23 19:34:59 +0200
  • 29ad7e8fc0 Add check for missing ssl_set_client_transport_id() Manuel Pégourié-Gonnard 2014-07-23 19:12:15 +0200
  • a64acd4f84 Add separate SSL_COOKIE_C define Manuel Pégourié-Gonnard 2014-07-23 18:30:45 +0200
  • 7d38d215b1 Allow disabling HelloVerifyRequest Manuel Pégourié-Gonnard 2014-07-23 17:52:09 +0200
  • e4de06145a Fix cookie context usage Manuel Pégourié-Gonnard 2014-07-23 17:26:48 +0200
  • 232edd46be Move cookie callbacks implementation to own module Manuel Pégourié-Gonnard 2014-07-23 16:56:27 +0200
  • d485d194f9 Move to a callback interface for DTLS cookies Manuel Pégourié-Gonnard 2014-07-23 14:56:15 +0200
  • d7f9bc5091 Refactor cookie to prepare for external callbacks Manuel Pégourié-Gonnard 2014-07-23 11:09:27 +0200
  • 82202f0a9c Make DTLS_HELLO_VERIFY a compile option Manuel Pégourié-Gonnard 2014-07-23 00:28:58 +0200
  • 98545f128a Generate random key for HelloVerifyRequest Manuel Pégourié-Gonnard 2014-07-22 22:10:43 +0200
  • dd3cdb0fbc Start using client IP in HelloVerifyRequest Manuel Pégourié-Gonnard 2014-07-22 20:40:40 +0200
  • 336b824f07 Use ssl_set_client_transport_id() in ssl_server2 Manuel Pégourié-Gonnard 2014-07-22 17:57:43 +0200
  • 43c021874d Add ssl_set_client_transport_id() Manuel Pégourié-Gonnard 2014-07-22 17:32:01 +0200
  • fb2d22371f Reuse random when responding to a verify request Manuel Pégourié-Gonnard 2014-07-22 15:59:14 +0200
  • b760f001d7 Extract generate client random to a function Manuel Pégourié-Gonnard 2014-07-22 15:53:27 +0200
  • 2c9ee81f6e Start adding srv support for hello verify request Manuel Pégourié-Gonnard 2014-07-22 11:45:03 +0200
  • a0e1632b79 Do not use compression with DTLS Manuel Pégourié-Gonnard 2014-07-14 17:38:41 +0200
  • 5d53cbef3a Fix length check in ssl_write_ticket() Manuel Pégourié-Gonnard 2014-07-14 13:51:41 +0200
  • 879a4f9623 Abort on DTLS epoch wrap Manuel Pégourié-Gonnard 2014-07-11 22:31:12 +0200
  • 53aef81a7d Work around OpenSSL bug in compat.sh Manuel Pégourié-Gonnard 2014-07-11 17:41:24 +0200
  • d1af1025d0 Add DTLS interop testing with OpenSSL server Manuel Pégourié-Gonnard 2014-07-11 17:01:06 +0200
  • 805e2300af Fix error message and return code Manuel Pégourié-Gonnard 2014-07-11 16:06:15 +0200
  • 9bfb1226da Add DTLS interop testing with GnuTLS server Manuel Pégourié-Gonnard 2014-07-11 14:18:35 +0200
  • ae5050c212 Start adapting ssl_client2 to datagram I/O Manuel Pégourié-Gonnard 2014-07-11 14:14:15 +0200
  • 67427c07b2 Fix checksum computation with HelloVerifyRequest Manuel Pégourié-Gonnard 2014-07-11 13:45:34 +0200
  • 74848811b4 Implement HelloVerifyRequest on client Manuel Pégourié-Gonnard 2014-07-11 02:43:49 +0200