David Garske
|
9b6cf56a6e
Expanded support for Curve25519/Curve448 and TLS v1.3 sniffer (#4335)
|
3 years ago |
Kareem
|
9a438ce289
liboqs integration using keyshare/supported_groups extensions in TLS 1.3
|
3 years ago |
David Garske
|
70535f51d5
Fixes for PK callbacks with TLS v1.3. Tested with `./configure --enable-pkcallbacks CFLAGS="-DTEST_PK_PRIVKEY -DDEBUG_PK_CB"`.
|
3 years ago |
Lealem Amedie
|
0722fb56d8
Adding README.md to examples dir and links to wolfssl-examples github repo in client/server.c
|
3 years ago |
Juliusz Sosinowicz
|
1b6b16c2c3
HaProxy 2.4-dev18 support
|
3 years ago |
JacobBarthelmeh
|
45486ac904
Merge pull request #4166 from miyazakh/supportedversion_ex_mindowngrade
|
3 years ago |
Hideki Miyazaki
|
b0688688c1
addressed review comments
|
3 years ago |
Hideki Miyazaki
|
d576e3ef96
not send smaller versions than minimum downgradable version as supportedversion ext
|
3 years ago |
Sean Parkinson
|
8592053856
Regression test fixes
|
3 years ago |
David Garske
|
716237c5dd
Fix minor line length and spelling.
|
3 years ago |
Daniel Pouzzner
|
8c75553e08
wolfSentry integration: move rest of recyclable code out of examples and into wolfsentry_setup() in wolfssl/test.h, and implement peer review corrections on error codes and string.h wrapper macros.
|
3 years ago |
Daniel Pouzzner
|
93dfb4c7f4
add outbound connection filtering support to libwolfssl, add wolfSentry support to the test client, and add wolfSentry JSON config file support to the test client and server using --wolfsentry-config.
|
3 years ago |
David Garske
|
2e4e65f518
Asynchronous support for TLS v1.3 TLSX ECC/DH key generation and key agreement
|
3 years ago |
Sean Parkinson
|
7e0c372e4c
TLS 1.3 PSK: use the hash algorithm to choose cipher suite
|
3 years ago |
David Garske
|
c88afdef87
Fixes for building with `WOLFSSL_USER_IO` (with no built-in socket support). Related to issue #3998.
|
3 years ago |
toddouska
|
40fe746710
Merge pull request #3942 from dgarske/get_static_ephemeral
|
3 years ago |
Daniel Pouzzner
|
9c7ee3fa64
examples/server/server.c: when TEST_IPV6, set the remote address to IPv6 localhost for wolfsentry_route_insert_static().
|
3 years ago |
Daniel Pouzzner
|
0cf9bacf1b
WOLFSSL_WOLFSENTRY_HOOKS/HAVE_EX_DATA*: refactor wolfSSL_CRYPTO_cleanup_ex_data() to take only one arg (the WOLFSSL_CRYPTO_EX_DATA *); fix preprocessor gates on wolfSSL_set_ex_data() and wolfSSL_X509_get_ex_new_index(); fix line lengths.
|
3 years ago |
Daniel Pouzzner
|
660e64cdff
examples/server/server.c: clean up wolfsentry printfs.
|
3 years ago |
Daniel Pouzzner
|
cb976db02b
server.c: update for wolfSentry API changes.
|
3 years ago |
Daniel Pouzzner
|
6175e11156
server.c: update wolfsentry_init() usage (hpi pointer).
|
3 years ago |
Daniel Pouzzner
|
23d8df720e
remove WOLFSSL_NETWORK_INTROSPECTION code; add wolfSSL_X509_STORE_set_ex_data_with_cleanup(); refactor WOLFSSL_WOLFSENTRY_HOOKS code in server.c to use HAVE_EX_DATA/HAVE_EX_DATA_CLEANUP_HOOKS.
|
3 years ago |
Daniel Pouzzner
|
2a05fcb59a
examples/server: fix wolfSentry integration to handle DTLS correctly.
|
3 years ago |
Daniel Pouzzner
|
1cbe696716
checkpoint: fully functioning demo via examples/server/ and unit.test (which produces a "filtered" error on a subtest when built --enable-wolfsentry).
|
3 years ago |
Daniel Pouzzner
|
734860f535
WOLFSSL_NETWORK_INTROSPECTION WIP
|
3 years ago |
Daniel Pouzzner
|
ba2cc00e5d
initial implementation of WOLFSSL_NETWORK_INTROSPECTION: --enable-network-introspection, struct wolfSSL_network_connection, wolfSSL_*_endpoints*(), NetworkFilterCallback_t, wolfSSL_*set_AcceptFilter().
|
3 years ago |
Juliusz Sosinowicz
|
70a3857ae8
Fragmentation for ServerKeyExchange and CeriticateVerify
|
3 years ago |
David Garske
|
e13c93d493
Added API's for getting pointer to load static ephemeral key.
|
3 years ago |
David Garske
|
f65e1f1f09
Expose functions to get client/server random when `HAVE_SECRET_CALLBACK` is defined.
|
3 years ago |
Hideki Miyazaki
|
4650aaf4fb
addressed review comments part 1
|
3 years ago |