e5b0fc1847
Make malloc-init script a bit happier
2014-11-13 12:42:12 +01:00
5924f9f810
Add script to find malloc() not followed by init
2014-11-13 12:42:12 +01:00
f631bbc1da
Make x509_string_cmp() iterative
2014-11-13 12:42:06 +01:00
8a5e3d4a40
Forbid repeated X.509 extensions
2014-11-12 18:13:58 +01:00
d681443f69
Fix potential stack overflow
2014-11-12 01:25:31 +01:00
b134060f90
Fix memory leak with crafted X.509 certs
2014-11-12 00:01:52 +01:00
0369a5291b
Fix uninitialised pointer dereference
2014-11-12 00:01:52 +01:00
e9271e6835
Add a MemSan Cmake build type
...
Detects uninitialised memory reads. Available only with Clang on Linux x86_64
for now. Experimental but seems usable enough.
2014-11-12 00:01:52 +01:00
49aa99e653
Fix exit codes in cert_app
2014-11-12 00:01:52 +01:00
e959979621
Fix ECDSA sign buffer size
2014-11-12 00:01:52 +01:00
b31b61b9e8
Fix potential undefined behaviour in Camellia
2014-11-12 00:01:51 +01:00
d6197a37e0
Detect undefined behaviours too in ASan builds
2014-11-12 00:01:51 +01:00
54f6e562e6
Fix CFLAGS with cmake and gcc
2014-11-12 00:01:51 +01:00
de17125875
Update ChangeLog for pk_check_pair() & Co
2014-11-12 00:01:51 +01:00
7c13d69cb5
Fix dependency issues
2014-11-12 00:01:34 +01:00
a1efcb084f
Implement pk_check_pair() for RSA-alt
2014-11-08 18:00:22 +01:00
27e3edbe2c
Check key/cert pair in ssl_set_own_cert()
2014-11-06 18:25:51 +01:00
70bdadf54b
Add pk_check_pair()
2014-11-06 18:25:51 +01:00
30668d688d
Add ecp_check_pub_priv()
2014-11-06 18:25:51 +01:00
2f8d1f9fc3
Add rsa_check_pub_priv()
2014-11-06 18:25:51 +01:00
e10e06d863
Blind RSA operations even without CRT
2014-11-06 18:25:44 +01:00
d056ce0e3e
Use seq_num as AEAD nonce by default
2014-11-06 18:23:49 +01:00
f9d778d635
Merge branch 'etm' into dtls
...
* etm:
Fix warning in reduced config
Update Changelog for EtM
Keep EtM state across renegotiations
Adjust minimum length for EtM
Don't send back EtM extension if not using CBC
Fix for the RFC erratum
Implement EtM
Preparation for EtM
Implement initial negotiation of EtM
Conflicts:
include/polarssl/check_config.h
2014-11-06 01:36:32 +01:00
56d985d0a6
Merge branch 'session-hash' into dtls
...
* session-hash:
Update Changelog for session-hash
Make session-hash depend on TLS versions
Forbid extended master secret with SSLv3
compat.sh: allow git version of gnutls
compat.sh: make options a bit more robust
Implement extended master secret
Add negotiation of Extended Master Secret
Conflicts:
include/polarssl/check_config.h
programs/ssl/ssl_server2.c
2014-11-06 01:25:09 +01:00
9d7821d774
Fix warning in reduced config
2014-11-06 01:19:52 +01:00
fedba98ede
Merge branch 'fb-scsv' into dtls
...
* fb-scsv:
Update Changelog for FALLBACK_SCSV
Implement FALLBACK_SCSV server-side
Implement FALLBACK_SCSV client-side
2014-11-05 16:12:09 +01:00
c7647079fa
Merge branch 'development' into dtls
...
* development:
Include 1.2.12 release information in ChangeLog
2014-11-05 16:02:57 +01:00
b3c6a97b31
Update Changelog for session-hash
2014-11-05 16:00:50 +01:00
c122ae7612
Update Changelog for EtM
2014-11-05 16:00:50 +01:00
769c6b6351
Make session-hash depend on TLS versions
2014-11-05 16:00:50 +01:00
1a03473576
Keep EtM state across renegotiations
2014-11-05 16:00:50 +01:00
b575b54cb9
Forbid extended master secret with SSLv3
2014-11-05 16:00:50 +01:00
169dd6a514
Adjust minimum length for EtM
2014-11-05 16:00:50 +01:00
dd4592774b
compat.sh: allow git version of gnutls
2014-11-05 16:00:50 +01:00
78e745fc0a
Don't send back EtM extension if not using CBC
2014-11-05 16:00:50 +01:00
08558e5b46
Fix for the RFC erratum
2014-11-05 16:00:50 +01:00
313d796e80
Implement EtM
2014-11-05 16:00:50 +01:00
0098e7dc70
Preparation for EtM
2014-11-05 16:00:50 +01:00
699cafaea2
Implement initial negotiation of EtM
...
Not implemented yet:
- actually using EtM
- conditions on renegotiation
2014-11-05 16:00:50 +01:00
178f9d6e19
Update Changelog for FALLBACK_SCSV
2014-11-05 16:00:49 +01:00
85a4178f82
compat.sh: make options a bit more robust
2014-11-05 16:00:49 +01:00
01b2699198
Implement FALLBACK_SCSV server-side
2014-11-05 16:00:49 +01:00
ada3030485
Implement extended master secret
2014-11-05 16:00:49 +01:00
1cbd39dbeb
Implement FALLBACK_SCSV client-side
2014-11-05 16:00:49 +01:00
367381fddd
Add negotiation of Extended Master Secret
...
(But not the actual thing yet.)
2014-11-05 16:00:49 +01:00
a6c5ea2c43
Include 1.2.12 release information in ChangeLog
2014-10-24 16:26:29 +02:00
92c1f41e38
Add VS projects
2014-10-22 16:08:46 +02:00
f2a459df05
Preparation for PolarSSL 1.4.0
2014-10-21 16:40:54 +02:00
1de7ddc333
Remove duplicate ChangeLog lines
2014-10-21 16:33:30 +02:00
6b875fc7e5
Fix potential memory leak (from clang-analyzer)
2014-10-21 16:33:00 +02:00
