1
0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-06-10 21:01:41 +03:00
Commit Graph

1783 Commits

Author SHA1 Message Date
db2858ce96 Preparation for timers
Currently directly using timing.c, plan to use callbacks later to loosen
coupling, but first just get things working.
2014-10-21 16:32:41 +02:00
08a1d4bce1 Fix bug with client auth with DTLS 2014-10-21 16:32:39 +02:00
23b7b703aa Fix issue with renego & resend 2014-10-21 16:32:38 +02:00
2739313cea Make anti-replay a runtime option 2014-10-21 16:32:35 +02:00
8464a46b6b Make DTLS_ANTI_REPLAY depends on PROTO_DTLS 2014-10-21 16:32:35 +02:00
246c13a05f Fix epoch checking 2014-10-21 16:32:34 +02:00
b47368a00a Add replay detection 2014-10-21 16:32:34 +02:00
4956fd7437 Test and fix anti-replay functions 2014-10-21 16:32:34 +02:00
7a7e140d4e Add functions for replay protection 2014-10-21 16:32:33 +02:00
ea22ce577e Rm unneeded counter increment with DTLS 2014-10-21 16:32:33 +02:00
abf16240dd Add ability to resend last flight 2014-10-21 16:32:31 +02:00
767c69561b Drop out-of-sequence ChangeCipherSpec messages 2014-10-21 16:32:29 +02:00
93017de47e Minor optim: don't resend on duplicated HVR 2014-10-21 16:32:29 +02:00
c715aed744 Fix epoch swapping 2014-10-21 16:32:28 +02:00
6a2bdfaf73 Actually resend flights 2014-10-21 16:32:28 +02:00
5d8ba53ace Expand and fix resend infrastructure 2014-10-21 16:32:28 +02:00
ffa67be698 Infrastructure for buffering & resending flights 2014-10-21 16:32:27 +02:00
8fa6dfd560 Introduce f_recv_timeout callback 2014-10-21 16:32:26 +02:00
e6bdc4497c Merge I/O contexts into one 2014-10-21 16:32:25 +02:00
ca6440b246 Small cleanups in parse_finished() 2014-10-21 16:30:31 +02:00
624bcb5260 No memmove: done, rm temporary things 2014-10-21 16:30:31 +02:00
f49a7daa1a No memmove: ssl_parse_certificate() 2014-10-21 16:30:29 +02:00
4abc32734e No memmove: ssl_parse_finished() 2014-10-21 16:30:29 +02:00
f899583f94 Prepare moving away from memmove() on incoming HS 2014-10-21 16:30:29 +02:00
4a1753657c Fix missing return in error check 2014-10-21 16:30:28 +02:00
63eca930d7 Drop invalid records with DTLS 2014-10-21 16:30:28 +02:00
167a37632d Split two functions out of ssl_read_record() 2014-10-21 16:30:27 +02:00
990f9e428a Handle late handshake messages gracefully 2014-10-21 16:30:26 +02:00
60ca5afaec Drop records from wrong epoch 2014-10-21 16:30:25 +02:00
1aa586e41d Check handshake message_seq field 2014-10-21 16:30:24 +02:00
9d1d7196e4 Check length before reading handshake header 2014-10-21 16:30:24 +02:00
d9ba0d96b6 Prepare for checking incoming handshake seqnum 2014-10-21 16:30:23 +02:00
ac03052f22 Fix segfault with some very short fragments 2014-10-21 16:30:23 +02:00
64dffc5d14 Make handshake reassembly work with openssl 2014-10-21 16:30:22 +02:00
502bf30fb5 Handle reassembly of handshake messages
Works only with GnuTLS for now, OpenSSL packs other records in the same
datagram after the last fragmented one, which we don't handle yet.

Also, ssl-opt.sh fails the tests with valgrind for now: we're so slow with
valgrind that gnutls-serv retransmits some messages, and we don't handle
duplicated messages yet.
2014-10-21 16:30:22 +02:00
ed79a4bb14 Prepare for DTLS handshake reassembly 2014-10-21 16:30:21 +02:00
edcbe549fd Reorder checks in ssl_read_record 2014-10-21 16:30:21 +02:00
0557bd5fa4 Fix message_seq with server-initiated renego 2014-10-21 16:30:21 +02:00
c392b240c4 Fix server-initiated renegotiation with DTLS 2014-10-21 16:30:21 +02:00
30d16eb429 Fix client-initiated renegotiation with DTLS 2014-10-21 16:30:20 +02:00
7d38d215b1 Allow disabling HelloVerifyRequest 2014-10-21 16:30:18 +02:00
d485d194f9 Move to a callback interface for DTLS cookies 2014-10-21 16:30:17 +02:00
82202f0a9c Make DTLS_HELLO_VERIFY a compile option 2014-10-21 16:30:16 +02:00
98545f128a Generate random key for HelloVerifyRequest 2014-10-21 16:30:16 +02:00
43c021874d Add ssl_set_client_transport_id() 2014-10-21 16:30:15 +02:00
879a4f9623 Abort on DTLS epoch wrap 2014-10-21 16:30:12 +02:00
805e2300af Fix error message and return code 2014-10-21 16:30:12 +02:00
67427c07b2 Fix checksum computation with HelloVerifyRequest 2014-10-21 16:30:11 +02:00
74848811b4 Implement HelloVerifyRequest on client 2014-10-21 16:30:11 +02:00
b2f3be8757 Support multiple records in one datagram 2014-10-21 16:30:10 +02:00