fc6b6b346f
Server side v1.2 is basically working
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@265 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:22:57 +09:00
09619c9340
Client side works with a certificate verify - still lots of work to go.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@264 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:21:23 +09:00
d476a79411
* Initial crack at TLS 1.2 client side only (server side is seriously broken).
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@263 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:21:01 +09:00
abda243710
Cleaned up alerts as per TLS v1.2 spec (7.2.2)
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@262 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:08:45 +09:00
01a0531bc3
* Backed out code where close notify from other side closed the socket and ssl session. This needs to be done by the application.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@261 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:08:15 +09:00
549bcb478e
Tightened up closure alerts for v1.2 (7.2.1)
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@260 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:08:11 +09:00
106a59cf23
Removed some printfs in skeleton mode
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@258 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:08:06 +09:00
6d0a2c03c3
Fixed some skeleton mode warnings
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@257 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:08:00 +09:00
acc38e3ab3
Can handle SSL chains which are out of order (thanks Paul Johnstone)
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@254 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:01:45 +09:00
0d6e51aae4
Removed RC4 from the list of negotiated ciphers as browsers don't support it anymore
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@252 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2016-08-19 00:00:39 +09:00
ab516f799d
Purge certificates only when expanding plaintext buffer
2016-06-13 00:50:25 +08:00
f41146fb17
Merge pull request #16 from jmue/fix/doubled_code
...
fix doubled code introduced with r231 - 97f9f969
2016-06-01 18:11:09 +08:00
9a9be633f2
Merge pull request #17 from jmue/fix/memset_usage
...
fix memset usage
2016-06-01 18:11:02 +08:00
07fe883157
fix doubled code introduced with r231 - 97f9f969
2016-05-21 21:26:39 +02:00
87163b23e0
fix memset usage
2016-05-21 21:13:48 +02:00
36e8b497ba
Merge branch upstream into axtls-upgrade
2016-05-13 23:40:49 +02:00
139914f312
Add option for blocking reads
2016-05-10 23:17:44 +08:00
69c757f2a3
Allow plain buffer size increase during handshake
2016-04-19 09:30:50 +03:00
fe4518da8d
Make SNI host name an ssl_client_new argument
...
ssl_set_hostname was mostly useless, because it allowed setting host name of an existing SSL object. However SNI was sent as part of client_hello, which was done in ssl_client_new. So it wasn't possible to actually set host name before connection would start.
2016-04-19 08:23:15 +03:00
5b4be7d273
Reserve 16k fragment buffer only when it is actually required.
...
This change reduces memory pressure when server response size fits into 6k buffer allocated by default.
2016-03-02 15:34:15 +03:00
b33ef68e6a
Fix handshake status not being set if increase_bm_data_size fails
...
Also set warning level to -Wall
https://github.com/esp8266/Arduino/issues/1708
2016-03-02 15:17:47 +03:00
324c2fdade
Terminate connection if increase_bm_data_size fails
...
As suggested in https://github.com/igrr/axtls-8266/issues/2#issuecomment-188544798
2016-02-26 17:53:19 +03:00
9eaeca3a03
Postpone freeing of X509 context to the first data exchange after handshake
...
X509 context contains certificate fingerprint and various names which may be used to verify the certificate.
Previously we would free it right after the handshake completion, which prevented the client from actually using any information from X509 context.
Postponing this to the first ssl_read/ssl_write call after the handshake, we give the client a chance to verify the certificate.
Also added logging to ssl_match_fingerprint function in case fingerprint doesn't match expected value.
2016-02-26 16:21:09 +03:00
28869ea94b
Use free followed by malloc instead of realloc when increasing raw buffer
...
At this point we don't need to preserve the data inside the buffer.
Using free followed by malloc reduces fragmentation for some heap implementations.
2016-02-26 16:09:47 +03:00
1154d0a985
Changed the code to reserve bytes for hostname only if needed.
2016-02-22 10:16:01 +01:00
63da8991c2
Added SNI ( https://en.wikipedia.org/wiki/Server_Name_Indication ) support.
2016-02-19 16:48:58 +01:00
514b6685c5
Disable RC4
2015-12-09 23:39:26 +03:00
1551076816
Remove default private key and certificate ( #3 )
2015-12-04 17:08:04 +03:00
6830d98c7f
Pre-allocate encrypt/decrypt ctx to reduce memory fragmentation
2015-11-17 02:35:09 +03:00
10b41c811a
Increase plaintext buffer size after handshake is complete
2015-11-17 01:50:35 +03:00
6f48f0d114
Store fingerprint as raw byte array
2015-09-18 12:38:27 +03:00
a069bc0eb6
Add function to match certificate fingerprint
2015-09-14 10:24:51 +03:00
6095fde37e
Allocation debugging, reduce SSL structure size.
2015-09-01 16:39:29 +03:00
6030371051
Initial compilation fixes
2015-08-31 09:05:04 +03:00
4e0ccaf9b2
Import axTLS 1.4.9
2015-08-30 13:34:00 +03:00
b0bd12beda
* Added SHA384 and SHA512 digests.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@245 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2015-03-10 03:08:16 +00:00
0d334d81c2
* PT_APP_PROTOCOL_DATA has a test for hs_status=SSL_OK to prevent possible exchanges before the handshake is complete.
...
* Changed license on sha256.c to full BSD.
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@244 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2015-03-09 01:42:59 +00:00
82a7638efa
* Added SHA256
...
* Return code checked for get_random()
* MD2 code removed.
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@238 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2014-11-19 03:51:22 +00:00
29e7d3554d
Fixed array access out of bounds bug in add_cert()
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@234 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2014-09-24 10:21:23 +00:00
97f9f969a3
added printf changes from Fabian Frank to stop warnings/erros
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@231 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2013-09-22 10:34:51 +00:00
5c51893035
Moved setting encryption flags to after handshake completion
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@230 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2013-08-05 15:47:52 +00:00
f74c9cafca
Client version number comes from client hello and not the record layer. This was causing issues in Chrome
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@229 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2013-01-06 12:38:42 +00:00
8ac6264444
looks like some stuff didn't get checked in
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@226 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2012-06-08 10:42:11 +00:00
c0074b3044
Fixed issue with session id's in the future
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@224 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2012-02-25 08:07:12 +00:00
42cd25fa9d
Fixed closure alerts.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@208 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-05-07 00:10:20 +00:00
70a8f79fa6
TLSv1.1 feature added.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@207 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-05-06 12:35:32 +00:00
8558c49351
Fixed variable length macs used by gnutls.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@205 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-04-28 13:00:20 +00:00
2ae9a3ec83
Started to implement TLS1.1 (but disabled for now)
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@204 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-04-26 20:33:55 +00:00
222f2d98f1
Fixed SOCKET_WRITE() when blocked.
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@203 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-02-11 12:43:01 +00:00
7f3d1265ef
fixed issue with bad certs on cygwin
...
git-svn-id: svn://svn.code.sf.net/p/axtls/code/trunk@202 9a5d90b5-6617-0410-8a86-bb477d3ed2e3
2011-02-08 11:38:05 +00:00
