Manuel Pégourié-Gonnard
|
ed79a4bb14
|
Prepare for DTLS handshake reassembly
|
2014-10-21 16:30:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
edcbe549fd
|
Reorder checks in ssl_read_record
|
2014-10-21 16:30:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
0557bd5fa4
|
Fix message_seq with server-initiated renego
|
2014-10-21 16:30:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
c392b240c4
|
Fix server-initiated renegotiation with DTLS
|
2014-10-21 16:30:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
30d16eb429
|
Fix client-initiated renegotiation with DTLS
|
2014-10-21 16:30:20 +02:00 |
|
Manuel Pégourié-Gonnard
|
7d38d215b1
|
Allow disabling HelloVerifyRequest
|
2014-10-21 16:30:18 +02:00 |
|
Manuel Pégourié-Gonnard
|
d485d194f9
|
Move to a callback interface for DTLS cookies
|
2014-10-21 16:30:17 +02:00 |
|
Manuel Pégourié-Gonnard
|
82202f0a9c
|
Make DTLS_HELLO_VERIFY a compile option
|
2014-10-21 16:30:16 +02:00 |
|
Manuel Pégourié-Gonnard
|
98545f128a
|
Generate random key for HelloVerifyRequest
|
2014-10-21 16:30:16 +02:00 |
|
Manuel Pégourié-Gonnard
|
43c021874d
|
Add ssl_set_client_transport_id()
|
2014-10-21 16:30:15 +02:00 |
|
Manuel Pégourié-Gonnard
|
879a4f9623
|
Abort on DTLS epoch wrap
|
2014-10-21 16:30:12 +02:00 |
|
Manuel Pégourié-Gonnard
|
805e2300af
|
Fix error message and return code
|
2014-10-21 16:30:12 +02:00 |
|
Manuel Pégourié-Gonnard
|
67427c07b2
|
Fix checksum computation with HelloVerifyRequest
|
2014-10-21 16:30:11 +02:00 |
|
Manuel Pégourié-Gonnard
|
74848811b4
|
Implement HelloVerifyRequest on client
|
2014-10-21 16:30:11 +02:00 |
|
Manuel Pégourié-Gonnard
|
b2f3be8757
|
Support multiple records in one datagram
|
2014-10-21 16:30:10 +02:00 |
|
Manuel Pégourié-Gonnard
|
34c1011b3d
|
Fix a few warnings in reduced configs
|
2014-10-21 16:30:09 +02:00 |
|
Manuel Pégourié-Gonnard
|
fe98aceb70
|
Adapt ssl_fetch_input() for UDP
|
2014-10-21 16:30:09 +02:00 |
|
Manuel Pégourié-Gonnard
|
e89bcf05da
|
Write new DTLS handshake fields correctly
|
2014-10-21 16:30:07 +02:00 |
|
Manuel Pégourié-Gonnard
|
ce441b3442
|
Add space for new DTLS fields in handshake
|
2014-10-21 16:30:07 +02:00 |
|
Manuel Pégourié-Gonnard
|
a59543af30
|
Minor refactoring in ssl_read_record()
|
2014-10-21 16:30:07 +02:00 |
|
Manuel Pégourié-Gonnard
|
f302fb52e1
|
Fix hmac computation for DTLS
|
2014-10-21 16:30:06 +02:00 |
|
Manuel Pégourié-Gonnard
|
5afb167e2c
|
Implement DTLS epochs
|
2014-10-21 16:30:06 +02:00 |
|
Manuel Pégourié-Gonnard
|
0619348288
|
Add explicit counter in DTLS record header
|
2014-10-21 16:30:06 +02:00 |
|
Manuel Pégourié-Gonnard
|
507e1e410a
|
Prep: allow {in,out}_len != {in,out}_hdr + 3
|
2014-10-21 16:30:06 +02:00 |
|
Manuel Pégourié-Gonnard
|
7ee6f0e6e5
|
Preparation: allow {in,out}_ctr != {in,out}_buf
|
2014-10-21 16:30:05 +02:00 |
|
Manuel Pégourié-Gonnard
|
abc7e3b4ba
|
Handle DTLS version encoding and fix some checks
|
2014-10-21 16:30:05 +02:00 |
|
Manuel Pégourié-Gonnard
|
864a81fdc0
|
More ssl_set_XXX() functions can return BAD_INPUT
|
2014-10-21 16:30:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
b21ca2a69f
|
Adapt version-handling functions to DTLS
|
2014-10-21 16:30:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
0b1ff29328
|
Add basic flags for DTLS
|
2014-10-21 16:30:03 +02:00 |
|
Paul Bakker
|
82788fb63b
|
Fix minor style issues
|
2014-10-20 13:59:19 +02:00 |
|
Manuel Pégourié-Gonnard
|
a13500fdf7
|
Fix bug with ssl_close_notify and non-blocking I/O
|
2014-08-19 16:14:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
f07f421759
|
Fix server-initiated renego with non-blocking I/O
|
2014-08-19 13:32:15 +02:00 |
|
Manuel Pégourié-Gonnard
|
6591962f06
|
Allow delay on renego on client
Currently unbounded: will be fixed later
|
2014-08-19 12:50:30 +02:00 |
|
Manuel Pégourié-Gonnard
|
f26a1e8602
|
ssl_read() stops returning non-application data
|
2014-08-19 12:28:50 +02:00 |
|
Manuel Pégourié-Gonnard
|
55e4ff2ace
|
Tune comments
|
2014-08-19 11:52:33 +02:00 |
|
Manuel Pégourié-Gonnard
|
8d4ad07706
|
SHA-2 ciphersuites now require TLS 1.x
|
2014-08-14 11:34:34 +02:00 |
|
Paul Bakker
|
968afaa06f
|
ssl_key_cert not available in all configurations
|
2014-07-09 11:34:48 +02:00 |
|
Paul Bakker
|
84bbeb58df
|
Adapt cipher and MD layer with _init() and _free()
|
2014-07-09 10:19:24 +02:00 |
|
Paul Bakker
|
accaffe2c3
|
Restructure ssl_handshake_init() and small fixes
|
2014-07-09 10:19:24 +02:00 |
|
Paul Bakker
|
8f870b047c
|
Add dhm_init()
|
2014-07-09 10:19:23 +02:00 |
|
Paul Bakker
|
5b4af39a36
|
Add _init() and _free() for hash modules
|
2014-07-09 10:19:23 +02:00 |
|
Paul Bakker
|
c7ea99af4f
|
Add _init() and _free() for cipher modules
|
2014-07-09 10:19:22 +02:00 |
|
Paul Bakker
|
8fb99abaac
|
Merge changes for leaner memory footprint
|
2014-07-04 15:02:19 +02:00 |
|
Manuel Pégourié-Gonnard
|
481fcfde93
|
Make PSK_LEN configurable and adjust PMS size
|
2014-07-04 14:59:08 +02:00 |
|
Manuel Pégourié-Gonnard
|
a9964dbcd5
|
Add ssl_set_renegotiation_enforced()
|
2014-07-04 14:16:07 +02:00 |
|
Manuel Pégourié-Gonnard
|
dd0c0f33c0
|
Better usage of dhm_calc_secret in SSL
|
2014-06-25 11:26:14 +02:00 |
|
Manuel Pégourié-Gonnard
|
8df68632e8
|
Fix bug in DHE-PSK PMS computation
|
2014-06-25 11:26:14 +02:00 |
|
Manuel Pégourié-Gonnard
|
03576887c2
|
Remove misplaced debugging message
|
2014-06-25 11:26:13 +02:00 |
|
Manuel Pégourié-Gonnard
|
eaa76f7e20
|
Fix computation of minlen for encrypted packets
|
2014-06-25 11:26:12 +02:00 |
|
Manuel Pégourié-Gonnard
|
e800cd81d7
|
Re-arrange some code in ssl_derive_keys()
|
2014-06-25 11:26:11 +02:00 |
|