1
0
mirror of https://github.com/esp8266/Arduino.git synced 2025-04-21 10:26:06 +03:00

23 Commits

Author SHA1 Message Date
Ivan Grokhotkov
f85f8269b7 axtls: update to 24af415
Clear bigint cache once certificates and keys are loaded, and also
during verification. Can save up to 3kB of heap in a typical use case.
2017-10-08 05:00:08 +08:00
Ivan Grokhotkov
80e9a841d6 axTLS: update to 49b9deb
- Upstream fix: Fixed issue with pathlen=0 for root certs

Fixes #2711, #3340
2017-10-02 00:26:43 +08:00
Ivan Grokhotkov
c8947953ac axtls: update to 66d530a, fixes #3335
SHA512 module stored padding in PROGMEM, but would then pass the pointer
to padding into Update function which would do a memcpy. Use the same
approach as with SHA256, that is to copy padding to the stack first, and
then pass it to Update.
2017-09-20 11:37:26 +08:00
Ivan Grokhotkov
f05ed6e27d Update axTLS to 5de79d71.
Includes two PRs:

- https://github.com/igrr/axtls-8266/pull/46 by @earlephilhower:
  Move debug strings from RAM to Flash

- https://github.com/igrr/axtls-8266/pull/50:
  Fix memory leak in ssl_ext_host_name
2017-07-23 16:15:37 +08:00
Ivan Grokhotkov
1d41859238 axTLS: update to 1b2c299
Includes memory optimizations (less .rodata, less heap)
2017-05-09 17:40:52 +08:00
Ivan Grokhotkov
c5c138ec5a axtls: update to bddda2a0
- update ssl_client_new signature
- add max fragment length negotiation support (hardcoded to 4096 bytes)
- build axtls with -f{function,data}-sections, ~1k less DRAM usage,
  ~3k less flash
- strip prefix from build paths in debug symbols
2017-04-29 22:58:19 +08:00
Ivan Grokhotkov
c2414a2252 Update axTLS to 144994c
https://github.com/igrr/axtls-8266/pull/23
2016-08-29 13:48:54 +08:00
Ivan Grokhotkov
35ee060c09 axTLS: update to d26f23a (2.0.0+) 2016-08-25 12:49:32 +08:00
Ivan Grokhotkov
0f0386e3c4 Update axTLS to ab516f7
fe6e51a...ab516f7
2016-06-13 00:56:38 +08:00
Ivan Grokhotkov
9e60d4d463 Update axTLS to fe6e51a (1.5.3+) 2016-06-01 17:40:04 +08:00
Ivan Grokhotkov
e8b8a606e4 Update axTLS to 139914f
- Fix occasional software WDT due to lengthy bigint operations
- Implement truly blocking reads as a workaround for half-duplex nature of axTLS
2016-05-10 23:34:33 +08:00
Ivan Grokhotkov
c8a1507504 Update axTLS to 69c757f
Fix issue with handling of large certificates (#1816)
2016-04-19 09:32:51 +03:00
Ivan Grokhotkov
8c65f2fcd0 Update axTLS to fe4518d, SNI support in WiFiClientSecure (#1285)
Fixes #1933
2016-04-19 08:29:13 +03:00
Ivan Grokhotkov
efa35e257a Update axTLS to 5b4be7d
Changes:
5b4be7d2738de5874f2e302157a0b726fe7bd4a6 Reserve 16k fragment buffer only when it is actually required.
b33ef68e6a3e2be1171e5a9f5b6156af424489ec Fix handshake status not being set if increase_bm_data_size fails
2016-03-02 15:47:12 +03:00
Ivan Grokhotkov
e206093b60 Update libaxtls.a to 324c2fd
Changelog:
324c2fdade3f39b4c7fb7fbe707f4a313023ecd3 Terminate connection if increase_bm_data_size fails
96fbb39f21d3af7ca3e4dee78f8c45c4e2e652b5 Update README.md
c18bb56e6100177cfa0bef3c90708efb9d7a071d Add travis CI
9eaeca3a030692bdf949b89d80705061b516f70b Postpone freeing of X509 context to the first data exchange after handshake
28869ea94b3b1cabfbe8679d962adc12ba0b28db Use free followed by malloc instead of realloc when increasing raw buffer
43a90bcf3559ed145db9286f28bdcd8b07832b51 Merge pull request #8 from slaff/feature/lwipr-compat
66e1a5f423c0ee25d4318968ea14384887d287aa Merge pull request #7 from slaff/feature/sni
1154d0a985cc442f39f5e6b3678a7d4ffca5db31 Changed the code to reserve bytes for hostname only if needed.
63da8991c2878f2a7cd526667f9e23adc9dca1c9 Added SNI ( https://en.wikipedia.org/wiki/Server_Name_Indication ) support.
7c38865f66cfdd0884183619b0d1e89b8717cb01 Restructured the lwip raw comat code. Added replacements for the time functions on ESP8266.
885ff3e8f0455d48acbc5e67557602e9d548fd81 Merge pull request #6 from slaff/feature/lwip-raw
d78e7a07998f456d452a760d478d1518b009fd4a Initial version of axTLS integration with lwip raw tcp mode (http://lwip.wikia.com/wiki/Raw/TCP).
2016-02-26 18:41:27 +03:00
Ivan Grokhotkov
70cf3c36ef Add missing AES table pointers (#1271, #1256) 2015-12-22 07:59:54 +03:00
Ivan Grokhotkov
b66ddbf93a Update to SDK 1.5 (#1102) 2015-12-17 23:14:59 +03:00
Ivan Grokhotkov
14b70e9328 Allow setting client side TLS key and certificate 2015-12-04 19:02:46 +03:00
Ivan Grokhotkov
655437752b Update axTLS to 34ff442
Use hardware RNG
2015-12-03 09:09:47 +03:00
Ivan Grokhotkov
e9f0ea2afe WiFiClientSecure: handle full size TLS fragments (#43)
- free up some memory by getting rid of intermediate buffer
- libaxtls: update to 6830d98
    - allocate plaintext buffer in two stages: 4*MSS initially, grow to 16k after handshake
    - free certificate data after handshake is complete
    - preallocate some structures to reduce memory fragmentation
2015-11-17 02:47:57 +03:00
Ivan Grokhotkov
ed1a4063a2 Update libaxtls to 6f48f0d 2015-09-19 22:38:18 +03:00
Ivan Grokhotkov
f73d414f38 WiFiClientSecure: add certificate fingerprint verification (#43) 2015-09-14 10:22:54 +03:00
Ivan Grokhotkov
9a2f2f2849 Add axTLS, first draft of WiFiClientSecure (#43) 2015-09-01 15:45:12 +03:00