Manuel Pégourié-Gonnard
|
21ef42f257
|
Don't select a PSK ciphersuite if no key available
|
2013-10-28 14:00:45 +01:00 |
|
Manuel Pégourié-Gonnard
|
18dc0e2746
|
CERTS_C depends on PEM_PARSE_C
|
2013-10-28 13:59:26 +01:00 |
|
Manuel Pégourié-Gonnard
|
7c3291ea87
|
Check dependencies of protocol versions on hashes
|
2013-10-28 13:58:56 +01:00 |
|
Manuel Pégourié-Gonnard
|
3daaf3d21d
|
X509 key identifiers depend on SHA1
|
2013-10-28 13:58:32 +01:00 |
|
Manuel Pégourié-Gonnard
|
c59c9c1453
|
Fix typo in b8012fca (ECP needs at least one curve)
|
2013-10-28 13:57:39 +01:00 |
|
Paul Bakker
|
677377f472
|
Server does not send out extensions not advertised by client
|
2013-10-28 12:54:26 +01:00 |
|
Paul Bakker
|
5c17ccdf2a
|
Bumped version to 1.3.1
|
2013-10-15 13:12:41 +02:00 |
|
Paul Bakker
|
f34673e37b
|
Merged RSA-PSK key-exchange and ciphersuites
|
2013-10-15 12:46:41 +02:00 |
|
Paul Bakker
|
376e8153a0
|
Merged ECDHE-PSK ciphersuites
|
2013-10-15 12:45:36 +02:00 |
|
Paul Bakker
|
a7ea6a5a18
|
config.h is more script-friendly
|
2013-10-15 11:55:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
8a3c64d73f
|
Fix and simplify *-PSK ifdef's
|
2013-10-14 19:54:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
0fae60bb71
|
Implement RSA-PSK key exchange
|
2013-10-14 19:34:48 +02:00 |
|
Paul Bakker
|
be089b0483
|
Introduced POLARSSL_HAVE_READDIR_R for systems without it
|
2013-10-14 15:51:50 +02:00 |
|
Paul Bakker
|
b9cfaa0c7f
|
Explicit conversions and minor changes to prevent MSVC compiler warnings
|
2013-10-14 15:50:40 +02:00 |
|
Manuel Pégourié-Gonnard
|
057e0cf263
|
Fix ciphersuites dependencies on MD5 and SHA1
|
2013-10-14 14:26:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
1b62c7f93d
|
Fix dependencies and related issues
|
2013-10-14 14:02:19 +02:00 |
|
Manuel Pégourié-Gonnard
|
bd1ae24449
|
Factor PSK pms computation to ssl_tls.c
|
2013-10-14 13:17:36 +02:00 |
|
Manuel Pégourié-Gonnard
|
225d6aa786
|
Add ECDHE_PSK ciphersuites
|
2013-10-11 19:07:56 +02:00 |
|
Manuel Pégourié-Gonnard
|
3ce3bbdc00
|
Add support for ECDHE_PSK key exchange
|
2013-10-11 18:16:35 +02:00 |
|
Paul Bakker
|
4aa40d4f51
|
Better support for MSVC
|
2013-10-11 10:49:24 +02:00 |
|
Paul Bakker
|
b799dec4c0
|
Merged support for Brainpool curves and ciphersuites
|
2013-10-11 10:05:43 +02:00 |
|
Paul Bakker
|
1677033bc8
|
TLS compression only allocates working buffer once
|
2013-10-11 09:59:44 +02:00 |
|
Paul Bakker
|
d61cc3b246
|
Possible naming collision in dhm_context
|
2013-10-11 09:38:49 +02:00 |
|
Paul Bakker
|
fcc172138c
|
Fixed const-correctness issues
|
2013-10-11 09:38:06 +02:00 |
|
Manuel Pégourié-Gonnard
|
bdc96765d6
|
Remove polarssl/ from header includes
|
2013-10-11 09:17:09 +02:00 |
|
Manuel Pégourié-Gonnard
|
0cd6f98c0f
|
Don't special-case a = -3, not worth it
|
2013-10-10 15:55:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
b8012fca5f
|
Adjust dependencies
|
2013-10-10 15:40:49 +02:00 |
|
Manuel Pégourié-Gonnard
|
48ac3db551
|
Add OIDs for brainpool curves
|
2013-10-10 15:11:33 +02:00 |
|
Manuel Pégourié-Gonnard
|
cd7458aafd
|
Support brainpool curves in ecp_check_pubkey()
|
2013-10-10 12:56:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
8195c1a567
|
Add identifiers for Brainpool curves
|
2013-10-10 12:56:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
9eb883104e
|
Update some comments on ecp_group
|
2013-10-07 19:38:56 +02:00 |
|
Paul Bakker
|
30b95fa921
|
Fixed cplusplus extern defines in header files
|
2013-10-01 10:09:06 +02:00 |
|
Paul Bakker
|
6838bd1d73
|
Clarified threading issues
|
2013-09-30 15:24:33 +02:00 |
|
Paul Bakker
|
c9965dca27
|
RSA blinding threading support
|
2013-09-29 15:02:11 +02:00 |
|
Paul Bakker
|
1337affc91
|
Buffer allocator threading support
|
2013-09-29 15:02:11 +02:00 |
|
Paul Bakker
|
f4e7dc50ea
|
entropy_func() threading support
|
2013-09-29 15:02:07 +02:00 |
|
Paul Bakker
|
1ffefaca1e
|
Introduced entropy_free()
|
2013-09-29 15:01:42 +02:00 |
|
Paul Bakker
|
c55988406f
|
SSL Cache threading support
|
2013-09-28 15:24:59 +02:00 |
|
Paul Bakker
|
2466d93546
|
Threading abstraction layer added
|
2013-09-28 15:00:02 +02:00 |
|
Manuel Pégourié-Gonnard
|
a0fdf8b0a0
|
Simplify the way default certs are used
|
2013-09-25 14:05:49 +02:00 |
|
Manuel Pégourié-Gonnard
|
641de714b6
|
Use both RSA and ECDSA CA if available
|
2013-09-25 13:23:33 +02:00 |
|
Manuel Pégourié-Gonnard
|
8372454615
|
Rework SNI to fix memory issues
|
2013-09-24 22:30:56 +02:00 |
|
Manuel Pégourié-Gonnard
|
482a2828e4
|
Offer both EC and RSA in certs.c, RSA first
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
705fcca409
|
Adapt support for SNI to recent changes
|
2013-09-24 21:25:54 +02:00 |
|
Manuel Pégourié-Gonnard
|
d09453c88c
|
Check our ECDSA cert(s) against supported curves
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
f24b4a7316
|
Interface change in ECP info functions
ecp_named_curve_from_grp_id() -> ecp_curve_info_from_grp_id()
ecp_grp_id_from_named_curve() -> ecp_curve_info_from_tls_id()
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
3ebb2cdb52
|
Add support for multiple server certificates
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
834ea8587f
|
Change internal structs for multi-cert support
|
2013-09-24 21:25:53 +02:00 |
|
Manuel Pégourié-Gonnard
|
cbf3ef3861
|
RSA and ECDSA key exchanges don't depend on CRL
|
2013-09-24 21:25:53 +02:00 |
|
Paul Bakker
|
c2148753df
|
Added missing uint32_t def for Windows in gcm.h
|
2013-09-23 15:11:46 +02:00 |
|