Commit graph

  • 9bcf16c55d Centralized module option values in config.h Paul Bakker 2013-06-24 19:31:17 +0200
  • 28144decef PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates Paul Bakker 2013-06-24 19:28:55 +0200
  • b0c19a4b3d PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated old PBKDF2 module. (cherry picked from commit 19bd297dc8) Paul Bakker 2013-06-24 19:26:38 +0200
  • fc4f46fa9a Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler (cherry picked from commit 52b845be34) Paul Bakker 2013-06-24 19:23:56 +0200
  • 531e294313 Fixed location of brackets in pkcs12.c (cherry picked from commit 67812d396c) Paul Bakker 2013-06-24 19:23:12 +0200
  • 2c8cdd201f x509parse_crtpath() is now reentrant and uses more portable stat() Paul Bakker 2013-06-24 19:22:42 +0200
  • 42c6581110 Changed x509parse_crt_der() to support adding to chain. Paul Bakker 2013-06-24 19:21:59 +0200
  • 90995b5ce3 Added mechanism to provide alternative cipher / hash implementations Paul Bakker 2013-06-24 19:20:35 +0200
  • 28837ff2f4 Make sure polarssl/config.h is included at the start (cherry picked from commit 9691bbe9b3) Paul Bakker 2013-06-24 19:17:50 +0200
  • f1f21fe825 Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis Paul Bakker 2013-06-24 19:17:19 +0200
  • e2f5040876 Internally split up x509parse_key() Paul Bakker 2013-06-24 19:00:59 +0200
  • 89ecb2d074 ssl_parse_certificate() now calls x509parse_crt_der() directly (cherry picked from commit 1922a4e6aa) Paul Bakker 2013-06-24 19:06:15 +0200
  • 5ed3b34e22 x509parse_crt() now better handles PEM error situations Paul Bakker 2013-06-24 19:05:46 +0200
  • 00b2860e8d pem_read_buffer() already update use_len after header and footer are read Paul Bakker 2013-06-24 13:02:41 +0200
  • b2a1140469 Added error.h inclusion in error.c template (cherry picked from commit ac6168b95e) Paul Bakker 2013-06-24 13:02:12 +0200
  • 2a84424a35 Disabled the HAVEGE random generator by default Paul Bakker 2013-06-24 13:01:53 +0200
  • ef3f8c747e Fixed const correctness issues in programs and tests (cherry picked from commit e0225e4d7f) Paul Bakker 2013-06-24 13:01:08 +0200
  • 3c2122ff9d Fixed const correctness issues that have no impact on the ABI (cherry picked from commit eae09db9e5) Paul Bakker 2013-06-24 19:03:14 +0200
  • 2013950545 Secure renegotiation extension should only be sent in case client supports secure renegotiation (cherry picked from commit 7c3c3899cf) Paul Bakker 2013-06-24 12:05:39 +0200
  • de65623f3e PolarSSL 1.2.6 and PolarSSL 1.2.7 changes added to ChangeLog Paul Bakker 2013-06-24 19:07:34 +0200
  • 248fff5369 PolarSSL 1.1.6 and PolarSSL 1.1.7 changed added to ChangeLog Paul Bakker 2013-06-24 19:08:50 +0200
  • 3f5b753654 ssl_write_certificate_request() can handle empty ca_chain (cherry picked from commit 21360ca4d4) polarssl-1.1.7 Paul Bakker 2013-06-21 15:13:59 +0200
  • 21360ca4d4 ssl_write_certificate_request() can handle empty ca_chain polarssl-1.2.8 Paul Bakker 2013-06-21 15:11:10 +0200
  • 8199a3375f Added Security note (Advisory 2013-03) in ChangeLog (cherry picked from commit 016ea076e7) Paul Bakker 2013-06-19 12:16:23 +0200
  • 68514b09a1 Prepared for PolarSSL release 1.1.7 Paul Bakker 2013-06-19 12:15:10 +0200
  • 90f242bf2e Fixed values for 2-key Triple DES in cipher layer (cherry picked from commit 2be71faae4) Paul Bakker 2013-06-19 12:13:56 +0200
  • a465d758aa Added missing free() (cherry picked from commit ff3a4b010b) Paul Bakker 2013-06-19 12:11:20 +0200
  • 03437fc198 Changed x509parse_crt_der() to support adding to chain. Paul Bakker 2013-06-19 12:10:31 +0200
  • b5df3bf1b4 ssl_parse_certificate() now calls x509parse_crt_der() directly (cherry picked from commit 1922a4e6aa) Paul Bakker 2013-06-19 12:08:47 +0200
  • 721f06d49d x509parse_crt() now better handles PEM error situations Paul Bakker 2013-06-19 12:07:42 +0200
  • 03a85bca4c pem_read_buffer() already update use_len after header and footer are read Paul Bakker 2013-06-19 12:06:00 +0200
  • 1fd0e055be Disabled the HAVEGE random generator by default Paul Bakker 2013-06-19 12:05:04 +0200
  • 016ea076e7 Added Security note (Advisory 2013-03) in ChangeLog Paul Bakker 2013-06-19 11:50:30 +0200
  • 1d419500b0 Prepared for PolarSSL release 1.2.8 Paul Bakker 2013-06-19 11:48:04 +0200
  • da7fdbd534 Fixed minor comment typo Paul Bakker 2013-06-19 11:15:43 +0200
  • 602c31be23 Updated PKCS#12 define dependencies Paul Bakker 2013-06-18 16:49:18 +0200
  • db7ea6f162 Made x509parse PKCS#12 and PKCS#5 tests dependent on defines Paul Bakker 2013-06-18 16:47:59 +0200
  • 14a222cef2 Moved PKCS#12 PBE functions to cipher / md layer where possible Paul Bakker 2013-06-18 16:35:48 +0200
  • 2be71faae4 Fixed values for 2-key Triple DES in cipher layer Paul Bakker 2013-06-18 16:33:27 +0200
  • b495d3a2c7 x509parse_crt() and x509parse_crt_der() return X509 password related codes Paul Bakker 2013-06-17 15:58:04 +0200
  • 1fc7dfe2e2 Removed redundant free()s Paul Bakker 2013-06-17 15:57:02 +0200
  • ff3a4b010b Added missing free() Paul Bakker 2013-06-17 15:56:12 +0200
  • 6fa5488779 Centralized module option values in config.h Paul Bakker 2013-06-17 15:44:03 +0200
  • 1fd4321ba2 PKCS#5 v2 PBES2 support and use in PKCS#8 encrypted certificates Paul Bakker 2013-06-17 15:14:42 +0200
  • 19bd297dc8 PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated old PBKDF2 module. Paul Bakker 2013-06-14 12:06:45 +0200
  • 52b845be34 Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler Paul Bakker 2013-06-14 11:36:56 +0200
  • 67812d396c Fixed location of brackets in pkcs12.c Paul Bakker 2013-06-14 11:35:09 +0200
  • cbfcaa9206 x509parse_crtpath() is now reentrant and uses more portable stat() Paul Bakker 2013-06-13 09:20:25 +0200
  • d6d4109adc Changed x509parse_crt_der() to support adding to chain. Paul Bakker 2013-06-13 09:00:25 +0200
  • 4087c47043 Added mechanism to provide alternative cipher / hash implementations Paul Bakker 2013-06-12 16:49:10 +0200
  • 9691bbe9b3 Make sure polarssl/config.h is included at the start Paul Bakker 2013-06-12 16:33:17 +0200
  • cf6e95d9a8 Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis Paul Bakker 2013-06-12 13:18:15 +0200
  • 65a1909dc6 Internally split up x509parse_key() Paul Bakker 2013-06-06 21:14:58 +0200
  • 1922a4e6aa ssl_parse_certificate() now calls x509parse_crt_der() directly Paul Bakker 2013-06-06 15:11:16 +0200
  • 6417186365 x509parse_crt() now better handles PEM error situations Paul Bakker 2013-06-06 15:01:18 +0200
  • 9255e8300e pem_read_buffer() already update use_len after header and footer are read Paul Bakker 2013-06-06 14:58:28 +0200
  • ac6168b95e Added error.h inclusion in error.c template Paul Bakker 2013-06-06 14:52:23 +0200
  • 08f06cf49f Disabled the HAVEGE random generator by default Paul Bakker 2013-06-06 14:05:26 +0200
  • e0225e4d7f Fixed const correctness issues in programs and tests Paul Bakker 2013-06-06 12:52:24 +0200
  • eae09db9e5 Fixed const correctness issues that have no impact on the ABI Paul Bakker 2013-06-06 12:35:54 +0200
  • f92263021c Fixed offset for cert_type list in ssl_parse_certificate_request() Paul Bakker 2013-06-06 11:24:37 +0200
  • 7c3c3899cf Secure renegotiation extension should only be sent in case client supports secure renegotiation Paul Bakker 2013-06-06 11:22:13 +0200
  • 73d4431ccd Fixed parse error in ssl_parse_certificate_request() Paul Bakker 2013-05-22 13:56:26 +0200
  • 777a5757d6 ca_path and ca_file arguments added to support chain validation in cert_app Paul Bakker 2013-05-21 16:20:04 +0200
  • f6a19bd728 Possible resource leak on FILE* removed in X509 parse Paul Bakker 2013-05-14 13:26:51 +0200
  • c72d3f7d85 Possible resource leak on FILE* removed in CTR_DRBG Paul Bakker 2013-05-14 13:22:41 +0200
  • 45bda90caa Comments for extra PSK ciphersuites added to config.h Paul Bakker 2013-04-19 22:28:21 +0200
  • 40afb4ba13 Added PSK GCM, SHA256 and SHA384 ciphers from RFC5487 Paul Bakker 2013-04-19 22:03:30 +0200
  • 0c5fac2931 Reordered ID's to numerical order Paul Bakker 2013-04-19 21:10:51 +0200
  • a1bf92ddb4 Added PSK NULL ciphers from RFC4785 Paul Bakker 2013-04-19 19:48:45 +0200
  • b91c2b5782 PSK and DHE-PSK addition to ChangeLog Paul Bakker 2013-04-19 16:05:16 +0200
  • bc956d900e Added missing config.h include Paul Bakker 2013-04-19 14:51:29 +0200
  • 48f7a5d724 DHE-PSK based ciphersuite support added and cleaner key exchange based code selection Paul Bakker 2013-04-19 14:30:58 +0200
  • 0b35157467 PSK and DHE-PSK addition to ChangeLog polarssl-1.3-alpha1 Paul Bakker 2013-04-19 16:05:16 +0200
  • 7a6c07457a Added missing config.h include Paul Bakker 2013-04-19 14:51:29 +0200
  • 19b39bbca0 DHE-PSK based ciphersuite support added and cleaner key exchange based code selection Paul Bakker 2013-04-19 14:30:58 +0200
  • 188c8de430 Only allow missing SereverKeyExchange message in bare PSK mode Paul Bakker 2013-04-19 09:13:37 +0200
  • bcbe2d8d81 Prettier printing of the lists for longer ciphersuite names Paul Bakker 2013-04-19 09:10:20 +0200
  • e07f41d4be Introduced defines to control availability of specific SSL Key Exchange methods. Paul Bakker 2013-04-19 09:08:57 +0200
  • 7ad00f9808 Sanity checks added to config.h Paul Bakker 2013-04-18 23:05:25 +0200
  • ed27a041e4 More granular define selections within code to allow for smaller code sizes Paul Bakker 2013-04-18 22:46:23 +0200
  • 7e5e7ca205 Added PSK ciphersuite tests to compat.sh Paul Bakker 2013-04-17 19:27:58 +0200
  • 73a899a9eb Changed error code message to also cover missing pre-shared key Paul Bakker 2013-04-17 19:11:36 +0200
  • fbb17804d8 Added pre-shared key handling for the server side of SSL / TLS Paul Bakker 2013-04-17 19:10:21 +0200
  • 70df2fbaa5 Split parts of ssl_parse_client_key_exchange() into separate functions Paul Bakker 2013-04-17 17:19:09 +0200
  • d4a56ec6bf Added pre-shared key handling for the client side of SSL / TLS Paul Bakker 2013-04-16 18:05:29 +0200
  • f7abd422dc Removed extra spaces on end of lines Paul Bakker 2013-04-16 13:15:56 +0200
  • 29e1f12f6b split parts of ssl_parse_server_key_exchange() into separate functions Paul Bakker 2013-04-16 13:07:56 +0200
  • 8f4ddaeea9 Ability to specify allowed ciphersuites based on the protocol version. Paul Bakker 2013-04-15 15:09:54 +0200
  • 822e958bb2 Prepared for PolarSSL 1.2.7 release polarssl-1.2.7 Paul Bakker 2013-04-13 11:56:17 +0200
  • f4a84b1154 Added default value comment for ssl_set_ciphersuites*() Paul Bakker 2013-04-12 15:33:30 +0200
  • f42e5cceab Cleanup of the GCM code Paul Bakker 2013-04-12 13:21:29 +0200
  • d68703b17f Split up largest test suite data files into smaller chunks (cherry picked from commit 286bf3c501) Paul Bakker 2013-04-12 13:20:30 +0200
  • 8a4ec44c7c Blowfish has default of 128-bit keysize in cipher layer (cherry picked from commit bfe671f2d5) Paul Bakker 2013-04-12 13:18:53 +0200
  • cecfd95aba Minor checks to prevent NULL-pointer exceptions (cherry picked from commit c295b834a2) Paul Bakker 2013-04-12 13:18:07 +0200
  • 93bab7ff8e Made change to error.c for dummy error_strerror() permanent (cherry picked from commit a0234377fc) Paul Bakker 2013-04-12 13:17:02 +0200
  • a62729888b Ability to specify allowed ciphersuites based on the protocol version. Paul Bakker 2013-04-12 13:13:43 +0200
  • d4c5944212 Fixed MPI assembly for ARM when -O2 is used Paul Bakker 2013-04-12 09:40:38 +0200
  • eff2e6d414 Fixed MPI assembly for ARM when -O2 is used Paul Bakker 2013-04-11 17:13:22 +0200
  • 0ecdb23eed Cleanup of the GCM code Paul Bakker 2013-04-09 11:36:42 +0200