 Sean Parkinson
|
7e0c372e4c
TLS 1.3 PSK: use the hash algorithm to choose cipher suite
|
3 years ago |
 David Garske
|
c88afdef87
Fixes for building with `WOLFSSL_USER_IO` (with no built-in socket support). Related to issue #3998.
|
3 years ago |
 toddouska
|
40fe746710
Merge pull request #3942 from dgarske/get_static_ephemeral
|
3 years ago |
 Daniel Pouzzner
|
9c7ee3fa64
examples/server/server.c: when TEST_IPV6, set the remote address to IPv6 localhost for wolfsentry_route_insert_static().
|
3 years ago |
|
Daniel Pouzzner
|
0cf9bacf1b
WOLFSSL_WOLFSENTRY_HOOKS/HAVE_EX_DATA*: refactor wolfSSL_CRYPTO_cleanup_ex_data() to take only one arg (the WOLFSSL_CRYPTO_EX_DATA *); fix preprocessor gates on wolfSSL_set_ex_data() and wolfSSL_X509_get_ex_new_index(); fix line lengths.
|
3 years ago |
|
Daniel Pouzzner
|
660e64cdff
examples/server/server.c: clean up wolfsentry printfs.
|
3 years ago |
|
Daniel Pouzzner
|
cb976db02b
server.c: update for wolfSentry API changes.
|
3 years ago |
|
Daniel Pouzzner
|
6175e11156
server.c: update wolfsentry_init() usage (hpi pointer).
|
3 years ago |
|
Daniel Pouzzner
|
23d8df720e
remove WOLFSSL_NETWORK_INTROSPECTION code; add wolfSSL_X509_STORE_set_ex_data_with_cleanup(); refactor WOLFSSL_WOLFSENTRY_HOOKS code in server.c to use HAVE_EX_DATA/HAVE_EX_DATA_CLEANUP_HOOKS.
|
3 years ago |
|
Daniel Pouzzner
|
2a05fcb59a
examples/server: fix wolfSentry integration to handle DTLS correctly.
|
3 years ago |
|
Daniel Pouzzner
|
1cbe696716
checkpoint: fully functioning demo via examples/server/ and unit.test (which produces a "filtered" error on a subtest when built --enable-wolfsentry).
|
3 years ago |
|
Daniel Pouzzner
|
734860f535
WOLFSSL_NETWORK_INTROSPECTION WIP
|
3 years ago |
|
Daniel Pouzzner
|
ba2cc00e5d
initial implementation of WOLFSSL_NETWORK_INTROSPECTION: --enable-network-introspection, struct wolfSSL_network_connection, wolfSSL_*_endpoints*(), NetworkFilterCallback_t, wolfSSL_*set_AcceptFilter().
|
3 years ago |
 Juliusz Sosinowicz
|
70a3857ae8
Fragmentation for ServerKeyExchange and CeriticateVerify
|
3 years ago |
|
David Garske
|
e13c93d493
Added API's for getting pointer to load static ephemeral key.
|
3 years ago |
|
David Garske
|
f65e1f1f09
Expose functions to get client/server random when `HAVE_SECRET_CALLBACK` is defined.
|
3 years ago |
 Hideki Miyazaki
|
4650aaf4fb
addressed review comments part 1
|
3 years ago |
|
Hideki Miyazaki
|
b4a573ca98
Initial implemented X509_LOOKUP_ctrl L_ADD_DIR
|
3 years ago |
 Jacob Barthelmeh
|
c729318ddd
update copyright date
|
3 years ago |
|
Hideki Miyazaki
|
9bae05525c
addressed review comments
|
3 years ago |
|
Hideki Miyazaki
|
e39477c531
initial implement SSL_get_early_data_status
|
3 years ago |
|
toddouska
|
39cb84de25
Merge pull request #3697 from julek-wolfssl/openvpn-2.5-missing-stuff
|
3 years ago |
|
Sean Parkinson
|
794cb5c7a9
TLS Session Ticket: default encryption callback
|
3 years ago |
|
Juliusz Sosinowicz
|
542e0d79ec
Jenkins Fixes
|
3 years ago |
|
toddouska
|
6e0e507dad
Merge pull request #3660 from dgarske/sess_ticket_aes_gcm
|
3 years ago |
|
Sean Parkinson
|
a84f1c813a
TLS Session Ticket: Option to disable for TLS 1.2 and below
|
3 years ago |
 Eric Blankenhorn
|
a3cbcf255f
Fix from review
|
3 years ago |
|
David Garske
|
219cbd47eb
Added support for AES GCM session ticket encryption. If ChaCha/Poly is disabled it will use AES GCM. Thanks Sean for the code in ZD 11511.
|
3 years ago |
|
Eric Blankenhorn
|
50843b22cd
Check method for NULL
|
3 years ago |
|
toddouska
|
367f28b917
Merge pull request #3443 from SparkiDev/tls13_psk_no_dhe
|
4 years ago |
