Commit graph

  • 535e97dbab - Better checking for reading over buffer boundaries - Zeroize altSubjectName chain memory before use Paul Bakker 2012-08-23 10:49:55 +0000
  • 9195662a4c - Added test for no-subject certificates with altSubjectNames Paul Bakker 2012-08-23 10:46:54 +0000
  • 894dece46c - Cleaner return value (for C++) Paul Bakker 2012-08-23 08:34:32 +0000
  • b68cad6cc7 - Made cipersuites in ssl context const (no intention to modify) - Adjusted ssl_set_ciphersuites() to match Paul Bakker 2012-08-23 08:34:18 +0000
  • 835b29e7c3 - Should not be debug_level 5 in repo (reset to 0) Paul Bakker 2012-08-23 08:31:59 +0000
  • bb51f0cb3d - Only include md.h if needed by POLARSSL_PKCS1_V21 Paul Bakker 2012-08-23 07:46:58 +0000
  • 6a2f857b08 - Added DragonflyBSD support Paul Bakker 2012-08-23 07:45:37 +0000
  • 3c16db9a10 - Fixed potential memory zeroization on miscrafted RSA key Paul Bakker 2012-07-05 13:58:08 +0000
  • 5552c8c0b3 - Updated documentation Paul Bakker 2012-07-05 13:31:54 +0000
  • 3d58fe8af6 - Added Blowfish to benchmarks Paul Bakker 2012-07-04 17:15:31 +0000
  • 6132d0aa93 - Added Blowfish to generic cipher layer - Renamed POLARSSL_MODE_CFB128 to POLARSSL_MODE_CFB Paul Bakker 2012-07-04 17:10:40 +0000
  • 26c4e3cb0b - Made crypt_and_cipher more robust with other ciphers / hashes Paul Bakker 2012-07-04 17:08:33 +0000
  • 83f00bba9c - Updated strerror codes for SSL Compression and Blowfish Paul Bakker 2012-07-04 11:08:50 +0000
  • a9379c0ed1 - Added base blowfish algorithm Paul Bakker 2012-07-04 11:02:11 +0000
  • 92eeea4627 - Modified CMakeLists to support zlib Paul Bakker 2012-07-03 15:10:33 +0000
  • 2770fbd651 - Added DEFLATE compression support as per RFC3749 (requires zlib) Paul Bakker 2012-07-03 13:30:23 +0000
  • 4f9a7bb7fd - Added Thumb assembly optimizations Paul Bakker 2012-07-02 08:36:36 +0000
  • cefb396a77 - Handle empty certificate subject names Paul Bakker 2012-06-27 11:51:09 +0000
  • e4791f3936 - Bugfix for Windows in cert path handling Paul Bakker 2012-06-04 21:29:15 +0000
  • 67820bd38e - Only include padlock header when POLARSSL_PADLOCK_C is defined Paul Bakker 2012-06-04 12:47:23 +0000
  • 8d914583f3 - Added X509 CA Path support Paul Bakker 2012-06-04 12:46:42 +0000
  • d36da11125 Version 1.1.4 polarssl-1.1.4 Paul Bakker 2012-05-31 10:46:28 +0000
  • 8639578f58 - Correctly handle empty packets (Found by James Yonan) Paul Bakker 2012-05-30 07:39:36 +0000
  • ce30bdf624 - Fixed single RSA test that failed on Big Endian systems (Closes ticket #54) Paul Bakker 2012-05-30 07:36:21 +0000
  • 7f113205bf - Merged 'Fixed potential heap corruption in x509_name allocation' into 1.1 branch Paul Bakker 2012-05-30 07:33:49 +0000
  • 0715668eea Paul Bakker 2012-05-30 07:33:30 +0000
  • e6ee41f932 - Added OpenSSL / PolarSSL compatibility script (tests/compat.sh) and example application (programs/ssl/o_p_test) (Requires OpenSSL) - Handle encryption with private key and decryption with public key as per RFC 2313 Paul Bakker 2012-05-19 08:43:48 +0000
  • 50546921ac - Moved to prevent uninitialized exit var Paul Bakker 2012-05-19 08:40:49 +0000
  • 4248823f43 - Updated to handle x509parse_crtfile() positive return values Paul Bakker 2012-05-16 08:21:05 +0000
  • f6198c1513 - mpi_exp_mod() now correctly handles negative base numbers (Closes ticket #52) Paul Bakker 2012-05-16 08:02:29 +0000
  • 5b37784f6d - Updated with tickets Paul Bakker 2012-05-16 07:57:36 +0000
  • 40dd5303c2 - Fixed test on Big Endian systems (Fixed Ticket #54) Paul Bakker 2012-05-15 15:02:38 +0000
  • 2a5c7a87af - Add Windows required library Paul Bakker 2012-05-10 21:54:28 +0000
  • 62f88dc473 Makefile more compatible with WINDOWS environment Paul Bakker 2012-05-10 21:26:28 +0000
  • cd5b529d6d - Added automatic WINDOWS define in Makefile Paul Bakker 2012-05-10 20:49:10 +0000
  • 4d2c1243b1 - Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present. Paul Bakker 2012-05-10 14:12:46 +0000
  • d14cd35ece - Adapted Makefile for buildbot Paul Bakker 2012-05-08 15:39:50 +0000
  • 02adedb0b1 - Added casting to prevent warnings on some compilers Paul Bakker 2012-05-08 13:35:48 +0000
  • 7e2c728178 - Updated to support NetBSD Paul Bakker 2012-05-08 13:23:16 +0000
  • 186751d9dd - Moved out_msg to out_hdr + 32 to support hardware acceleration Paul Bakker 2012-05-08 13:16:14 +0000
  • 3aac1daf1d - Added exception error parsing when FATAL ssl message is received Paul Bakker 2012-05-08 13:12:27 +0000
  • 6b906e5095 - Const correctness mpi_get_bit() - Documentation mpi_lsb(), mpi_msb() Paul Bakker 2012-05-08 12:01:43 +0000
  • 05ef835b6a - Added support for Hardware Acceleration hooking in SSL/TLS Paul Bakker 2012-05-08 09:17:57 +0000
  • 8308e68d53 - Added strerror to svn:ignore Paul Bakker 2012-05-08 09:04:42 +0000
  • fad3893ead - Added release notes for 1.1.2 and 1.1.3 to trunk Paul Bakker 2012-05-08 09:04:04 +0000
  • 384b75ac9c - Added missing files to Visual C projects Paul Bakker 2012-05-08 08:40:00 +0000
  • 01cc394848 - Added commandline error code convertor (util/strerror) Paul Bakker 2012-05-08 08:36:15 +0000
  • 430ffbe564 - Fixed potential heap corruption in x509_name allocation Paul Bakker 2012-05-01 08:14:20 +0000
  • a63c9e9fba - Added 1.1.3 changes to 1.1 branch polarssl-1.1.3 Paul Bakker 2012-04-29 20:29:53 +0000
  • 662d1686d9 - Fixed random MPI generation to not generate more size than requested. Paul Bakker 2012-04-29 20:15:55 +0000
  • e893b669de - Updated polarssl-1.1 branch with merged trunk patches polarssl-1.1.2 Paul Bakker 2012-04-26 19:30:20 +0000
  • aec37cb653 - Added extra sanity check to DHM values Paul Bakker 2012-04-26 18:59:59 +0000
  • c9b3e1e783 - Fixed typo Paul Bakker 2012-04-26 18:59:23 +0000
  • 88f17b8549 - Fixed for new DHM handling (TLS 1.2) Paul Bakker 2012-04-26 18:52:13 +0000
  • 279432a7c0 - Fixed size of clean Paul Bakker 2012-04-26 10:09:35 +0000
  • 4cf2b7f8bf - Added name Paul Bakker 2012-04-20 13:59:39 +0000
  • 145e68119b - Ready for release 1.1.2 Paul Bakker 2012-04-20 13:58:28 +0000
  • 84bef1db2c - Fixed DHM length to correct one Paul Bakker 2012-04-20 13:42:02 +0000
  • 79e9477d08 Paul Bakker 2012-04-20 13:41:32 +0000
  • 32356acc4f - Fixed handling error in mpi_cmp_mpi() on longer B values (found by Hui Dong) Paul Bakker 2012-04-20 13:34:52 +0000
  • e2f8ff6797 - Merged security fixes to 1.1 branch Paul Bakker 2012-04-20 13:33:14 +0000
  • 901c65620e - Fill full buffer (Wrong parameter usage) Paul Bakker 2012-04-20 13:25:38 +0000
  • 380da53c48 - Abstracted checksum updating during handshake Paul Bakker 2012-04-18 16:10:25 +0000
  • ca4ab49158 - Added GCM ciphersuites to TLS implementation Paul Bakker 2012-04-18 14:23:57 +0000
  • 0b22e3e989 - Print return codes properly Paul Bakker 2012-04-18 14:23:29 +0000
  • 915940ef80 - Added TLS1.2 Paul Bakker 2012-04-18 14:21:32 +0000
  • d8ef167833 - Updated for latest GCM error Paul Bakker 2012-04-18 14:17:32 +0000
  • fc5183cf5d - Added input checking and more efficient buffer overlap use Paul Bakker 2012-04-18 14:17:01 +0000
  • 369e14bbf1 - Small code rewrite Paul Bakker 2012-04-18 14:16:09 +0000
  • 7890405856 - Added GCM as known module Paul Bakker 2012-04-18 14:11:33 +0000
  • 030277ab1e - Updated error.c to include GCM errors Paul Bakker 2012-04-17 12:24:26 +0000
  • 13ed9ab921 - Removed unused variable Paul Bakker 2012-04-16 09:43:49 +0000
  • 0a9251870a - Report unexpected_message if unknown record type is received Paul Bakker 2012-04-16 06:46:41 +0000
  • 6f3578cfc8 - Report proper error number Paul Bakker 2012-04-16 06:46:01 +0000
  • 10cd225962 - Added support for the SHA256 ciphersuites of AES and Camellia Paul Bakker 2012-04-12 21:26:34 +0000
  • bf63b36127 - Updated comments Paul Bakker 2012-04-12 20:44:34 +0000
  • c3f177a77b - Added client side support for signature_algorithm extension and affiliated handling Paul Bakker 2012-04-11 16:11:49 +0000
  • 1ef83d66dd - Initial bare version of TLS 1.2 Paul Bakker 2012-04-11 12:09:53 +0000
  • 570267f01a - print error string in useful format Paul Bakker 2012-04-10 08:22:46 +0000
  • 398cb514e2 - Allow to test for multiple modes Paul Bakker 2012-04-10 08:22:31 +0000
  • e93dfa72a5 - Added hex documentation for alerts Paul Bakker 2012-04-10 08:03:03 +0000
  • f34cf85534 - Fixed too restrictive test Paul Bakker 2012-04-10 07:48:40 +0000
  • 96d42da8fe - Removed debug value Paul Bakker 2012-04-05 13:22:07 +0000
  • c7ffd36a97 - Added automatic debug flags to CFLAGS if DEBUG is set in shell Paul Bakker 2012-04-05 12:08:29 +0000
  • f9964abe7c - Added extra build options Paul Bakker 2012-04-05 12:07:50 +0000
  • 452d532955 - Fixed potential memory corruption on miscrafted client messages (found by Frama-C team at CEA LIST) Paul Bakker 2012-04-05 12:07:34 +0000
  • 6126481796 - Added compat for sun in net.c Paul Bakker 2012-04-03 07:54:30 +0000
  • 56a7684023 - Added alternative for SHA1 signature structure to check for (without NULL) Paul Bakker 2012-03-22 15:31:27 +0000
  • 7beceb2e2b Paul Bakker 2012-03-22 14:19:49 +0000
  • 37824581b7 - Added Changelog for bugfix in mpi_cmp_mpi() Paul Bakker 2012-03-22 14:10:22 +0000
  • 0c8f73ba8b - Fixed a mistake in mpi_cmp_mpi() where longer B values are handled wrong Paul Bakker 2012-03-22 14:08:57 +0000
  • b78c74551f - Use standard IV of 12 Paul Bakker 2012-03-20 15:05:59 +0000
  • f9169629c9 - Removed unused variables Paul Bakker 2012-03-20 15:05:51 +0000
  • 89e80c9a43 - Added base Galois/Counter mode (GCM) for AES Paul Bakker 2012-03-20 13:50:09 +0000
  • b6ad62dd21 - Added missing x509write.c Paul Bakker 2012-03-20 13:41:33 +0000
  • 02f61692ef - Removed trailing char Paul Bakker 2012-03-15 10:54:25 +0000
  • f654371b2b - Only include dependencies when required Paul Bakker 2012-03-05 14:01:29 +0000
  • 12f5dbb8b4 - Fixed MD type to SHA1 Paul Bakker 2012-03-05 13:37:13 +0000
  • ad8d354a1a - Updated RFC ref Paul Bakker 2012-02-16 15:28:14 +0000
  • 92101f2d02 - Keep requests for future use Paul Bakker 2012-02-16 14:09:31 +0000