29b478f3cf
* Put back TLS 1.0.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@268 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 07:42:10 +09:00
f599ff830e
* Tightened up the buffer sizes
...
* Removed support for TLS1.0.
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@267 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 07:41:33 +09:00
fc6b6b346f
Server side v1.2 is basically working
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@265 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:22:57 +09:00
09619c9340
Client side works with a certificate verify - still lots of work to go.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@264 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:21:23 +09:00
d476a79411
* Initial crack at TLS 1.2 client side only (server side is seriously broken).
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@263 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:21:01 +09:00
a9eab10499
Now include os_port.h in tls1.h, but removed ax_malloc and friends
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@255 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:05:23 +09:00
0d6e51aae4
Removed RC4 from the list of negotiated ciphers as browsers don't support it anymore
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@252 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:00:39 +09:00
36e8b497ba
Merge branch upstream into axtls-upgrade
2016-05-13 23:40:49 +02:00
69c757f2a3
Allow plain buffer size increase during handshake
2016-04-19 09:30:50 +03:00
324c2fdade
Terminate connection if increase_bm_data_size fails
...
As suggested in https://github.com/igrr/axtls-8266/issues/2#issuecomment-188544798
2016-02-26 17:53:19 +03:00
9eaeca3a03
Postpone freeing of X509 context to the first data exchange after handshake
...
X509 context contains certificate fingerprint and various names which may be used to verify the certificate.
Previously we would free it right after the handshake completion, which prevented the client from actually using any information from X509 context.
Postponing this to the first ssl_read/ssl_write call after the handshake, we give the client a chance to verify the certificate.
Also added logging to ssl_match_fingerprint function in case fingerprint doesn't match expected value.
2016-02-26 16:21:09 +03:00
1154d0a985
Changed the code to reserve bytes for hostname only if needed.
2016-02-22 10:16:01 +01:00
63da8991c2
Added SNI ( https://en.wikipedia.org/wiki/Server_Name_Indication ) support.
2016-02-19 16:48:58 +01:00
514b6685c5
Disable RC4
2015-12-09 23:39:26 +03:00
10b41c811a
Increase plaintext buffer size after handshake is complete
2015-11-17 01:50:35 +03:00
6095fde37e
Allocation debugging, reduce SSL structure size.
2015-09-01 16:39:29 +03:00
4e0ccaf9b2
Import axTLS 1.4.9
2015-08-30 13:34:00 +03:00
acf35f0ea7
* Added named unions in SHA256 code for compilers that don't support it.
...
* Some other porting suggestions from Chris Ghormley.
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@248 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2015-04-30 06:06:09 +00:00
67111693e6
* fixed issue where SSL mutex was not being picked up.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@243 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2014-11-26 19:50:20 +00:00
24384a37a4
Changed order of when os_int.h is imported
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@227 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2012-07-01 10:57:25 +00:00
8ac6264444
looks like some stuff didn't get checked in
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@226 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2012-06-08 10:42:11 +00:00
42cd25fa9d
Fixed closure alerts.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@208 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-05-07 00:10:20 +00:00
70a8f79fa6
TLSv1.1 feature added.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@207 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-05-06 12:35:32 +00:00
2ae9a3ec83
Started to implement TLS1.1 (but disabled for now)
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@204 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-04-26 20:33:55 +00:00
0d2e75b9c7
fixed regular_square. Some scan-build tweaks. Made os_port.h "private".
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@181 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2010-12-29 11:49:30 +00:00
7e570e3943
Fixed 3132700 (close_notify), 3078672 (regular_square), 3072881
...
(process_server_hello). Using Montgomery until q_dash issue solved.
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@180 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2010-12-27 09:40:51 +00:00
1b9a2cad7b
Extended the openssl compatibility layer a bit.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@154 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2009-01-30 12:35:07 +00:00
785380660e
finishing touches to cert generation
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@144 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-12-02 08:01:12 +00:00
bffc3b2197
certificate generation
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@143 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-11-29 13:02:54 +00:00
70ed44946e
changed to BSD style license
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@140 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-11-05 02:28:37 +00:00
2f2dd59545
changed var arrays to alloca
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@138 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-10-22 13:17:02 +00:00
fa0bf09b86
some more memory tweaks
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@135 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-10-04 11:25:28 +00:00
6afb2ce28b
made inc ms5/sha1 a tmp
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@134 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-10-03 22:10:21 +00:00
18cde1355d
memory reductions
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@131 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-10-01 21:49:12 +00:00
b717f94bd0
fixed server buffer issue
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@121 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-09-05 13:44:56 +00:00
f9ee197cff
dir changes - things are broken at the moment
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@116 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-08-29 09:15:39 +00:00
55d6b77f70
tx/rx hmac records separated. fixed gnu tls issue
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@80 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-03-30 23:57:28 +00:00
73dfbb7568
new trunk
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@78 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-03-14 12:03:51 +00:00
dd470db956
resurrected this trunk branch
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@68 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-03-14 11:34:36 +00:00
6843c20d38
Added openssl compatibility functions
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@64 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-02-21 13:22:36 +00:00
61fd249441
added aborts to malloc and other system calls
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@62 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-02-17 00:42:57 +00:00
f616c74150
added versioning/fragmentation
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@56 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2007-02-01 08:31:32 +00:00
d521a68821
Added my name to the copyright
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@42 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2006-11-28 02:05:07 +00:00
da46383ade
More LGPL license changes
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@13 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2006-07-05 08:16:26 +00:00
f8e703ed65
Updated LGPL licenses
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@12 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2006-07-04 21:47:18 +00:00
fa18d60b98
Initial 1.0.0
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/axTLS@2 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2006-07-01 00:39:15 +00:00