 John Safranek
|
8356c3d7e2
DTLS Nonblocking Updates
|
6 years ago |
 Jacob Barthelmeh
|
6ac384793f
memory management with OCSP requests
|
5 years ago |
 Takashi Kojo
|
cca27f6724
examples/celient.c, server.c: removing unused headers
|
5 years ago |
 David Garske
|
2351047409
Fixes for various scan-build reports.
|
5 years ago |
|
Jacob Barthelmeh
|
48c267dda8
fix warning with secure-renegotiation build and error with ntru build
|
5 years ago |
|
John Safranek
|
b145aab6b2
Server Side Renegotiation
|
6 years ago |
|
John Safranek
|
0abf7c4997
Server Side Secure Renegotiation
|
6 years ago |
|
John Safranek
|
d168d60ade
Server Side Secure Renegotiation
|
6 years ago |
|
John Safranek
|
a55f11cdd8
DHE Speed Up
|
6 years ago |
|
John Safranek
|
564a1ee499
Make the skip DH test flag build-conditional.
|
6 years ago |
|
John Safranek
|
ff1a1dc5d5
DHE Speed Up
|
6 years ago |
 Takashi Kojo
|
a203cd4901
NO_MULTIBYTE to NO_MULTIBYTE_PRINT
|
6 years ago |
|
Takashi Kojo
|
0e94ae529c
Rollback stacing
|
6 years ago |
|
Takashi Kojo
|
c529e011a7
NO_MULTIBYTE for multibyte non-supported IDEs
|
6 years ago |
|
Jacob Barthelmeh
|
2468a19c82
static analysis fix on non default build and g++ warning
|
6 years ago |
 kaleb-himes
|
bc2bb78010
Fix -x option in server to continue in event of error (R)
|
6 years ago |
|
David Garske
|
86758f9640
Fixes for key size detection when using PK callbacks (HSM) and no private key has been loaded (affects `HAVE_PK_CALLBACKS` on server side only when no dummy private key is loaded). Fix for possible leak during ECC min key size failure with small stack. Added new API `wc_RsaPublicKeyDecode_ex` for parsing an RSA public key for the modulus and exponent. Changed `wolfSSL_CTX_SetTmpEC_DHE_Sz` to support a `size == 0` for using the long-term private key's size. Changed `ECDHE_SIZE` so it can be overridden and build-time. Added tests for `wolfSSL_CTX_SetTmpEC_DHE_Sz` and `wolfSSL_SetTmpEC_DHE_Sz`.
|
6 years ago |
 Hideki Miyazaki
|
6953677a8f
Keep the max line length to 80
|
6 years ago |
 Hideki Miyazaki
|
a27b4c2efb
Added Japanese message into the examples client and server
|
6 years ago |
|
David Garske
|
0293686990
Added example client/server support for loading certificate and private key into WOLFSSL object using `-H loadSSL`. Added `load_ssl_buffer` function to load buffers into WOLFSSL objects. Changed `wolfSSL_get_SSL_CTX` API to always be exposed. Added `TEST_LOAD_BUFFER` build option to use the `load_buffer` and `load_ssl_buffer` calls for example client/server.
|
6 years ago |
|
David Garske
|
bbdb17975c
Adds build option `WOLFSSL_EITHER_SIDE` for deferring the "side" of the TLS session until first connect or accept. Added the DTLS generic v1.0 and v1.2 methods for "either" side. Added "either" methods unit tests. Added "either" -v e support to example client/server. Fix to expose `wolfSSL_use_certificate_file` and `wolfSSL_use_PrivateKey_file` without `OPENSSL_EXTRA`. Cleanup of the methods for (void)heap and log messages. Spelling fixes.
|
6 years ago |
|
kaleb-himes
|
4f6ee556dc
Refactor the cert renewal scripts with error handling
|
6 years ago |
|
David Garske
|
3d0d10345a
Added test cases for ensuring forced error fails on client and server. Added test cases to ensure bad certificate can be overriden.
|
6 years ago |
|
John Safranek
|
4eb0d32fa8
Patches
|
6 years ago |
 Sean Parkinson
|
f1222c3f9f
Separate PSK callback for TLS 1.3
|
6 years ago |
|
David Garske
|
4eff7b641b
First pass at bugs found with `./scripts/memtest.sh`. Fixes for NULL pointer checks, making sure free'd pointers are reset, making sure pointers are initialized and making sure memory is always free'd. Fix for TicketInit() which was using non-thread safe RNG and key_ctx. Fix for possible double free case in `wolfSSL_PEM_read_X509_CRL`.
|
6 years ago |
|
David Garske
|
2c3475c1d6
Added new build option `--enable-memtest` or `WOLFSSL_FORCE_MALLOC_FAIL_TEST` which enables random malloc failures for testing. This test supresses the `abort()` calls to detect seg faults. A new script `./scripts/memtest.sh` starts the test. If an issue is found it can be reviewed with the `./scripts/memtest.txt` log and reproduced using the seed printed at top of unit test as `--- RNG MALLOC FAIL AT 295---` and rerun using `./tests/unit.test 295`.
|
6 years ago |
|
Sean Parkinson
|
6d3e145571
Changes to build with X25519 and Ed25519 only
|
6 years ago |
|
John Safranek
|
e6c7952f50
Merge master into fipsv2. Resolved a conflict in api.c.
|
6 years ago |
|
Sean Parkinson
|
a03c15e598
Allow NO_WOLFSSL_CLIENT/SERVER to compile and pass tests
|
6 years ago |
