e1927101fb
Unify round two
2015-09-07 12:43:11 +02:00
d8204a7bea
Provide symmetric API for the first round
2015-09-07 12:43:11 +02:00
ce4567614b
Rename variable to prepare for cli/srv unification
2015-09-07 12:43:10 +02:00
6b798b9dae
Tune up some comments
2015-09-07 12:43:10 +02:00
e0ad57b0b3
Replace explicit IDs with table look-ups
...
That's a first step towards merging symmetric version of different functions
2015-09-07 12:43:10 +02:00
5f18829609
Add derive_pms, completing first working version
2015-09-07 12:43:10 +02:00
6449391852
Store our role in the context
2015-09-07 12:43:10 +02:00
614bd5e919
Add write_client_params
2015-09-07 12:43:10 +02:00
ec0eece2ba
Add read_client_params
2015-09-07 12:43:10 +02:00
cb7cd03412
Add first draft or read_server_params
2015-09-07 12:43:10 +02:00
23dcbe3f16
Add support for passphrase in the context
2015-09-07 12:43:10 +02:00
4e8bc78ad9
Add context-using functions for Hello extensions
...
Also re-order functions in the header so that they appear in the order they're
use, ie free() last.
2015-09-07 12:43:10 +02:00
7af8bc1007
Start introducing mbedtls_ecjpake_context
2015-09-07 12:43:10 +02:00
6029a85572
Add ecjpake_zpk_read()
...
Not really tested yet
2015-09-07 12:43:09 +02:00
d9a3f47ecd
Add mbedtls_ecp_gen_keypair_base()
2015-09-07 12:43:09 +02:00
4d8685b4ff
Add skeleton for EC J-PAKE module
2015-09-07 12:43:09 +02:00
aac5502553
Bump version to 2.1.0
2015-09-04 14:33:31 +02:00
37ff14062e
Change main license to Apache 2.0
2015-09-04 14:21:07 +02:00
5f5e0ec3f1
Improve mbedtls_ssl_write() documentation
2015-08-31 20:47:04 +02:00
a2cda6bfaf
Add mbedtls_ssl_get_max_frag_len()
...
This is not very useful for TLS as mbedtls_ssl_write() will automatically
fragment and return the length used, and the application should check for that
anyway, but this is useful for DTLS where mbedtls_ssl_write() returns an
error, and the application needs to be able to query the maximum length
instead of just guessing.
2015-08-31 20:47:04 +02:00
bb83844a1d
Clarify that there are two SSL I/O buffers
2015-08-31 12:46:01 +02:00
46c4fa16ab
Fix missing casts on return
...
closes #236
2015-08-12 09:27:55 +02:00
e2b0efe24b
Separate license from comments in config.h
2015-08-11 10:38:37 +02:00
ac50fc5e2f
Fix typo in doc
2015-08-10 13:07:09 +02:00
854dab96fe
Fix the fix for armcc5 --gnu
...
Only exclude armcc5, not armcc6.
2015-08-10 12:11:31 +02:00
32da9f66a8
Add support for MBEDTLS_USER_CONFIG_FILE
2015-08-06 09:57:54 +02:00
43569a93cc
Use #ifdef rather than patch for target_config.h
2015-08-06 09:57:54 +02:00
63e7ebaaa1
Add material for generating yotta module
2015-08-06 09:57:53 +02:00
e14dec68ea
Fix stupid typo in previous commit
2015-08-04 22:49:33 +02:00
f659f0c214
Disable Padlock code with ASan
...
We're getting build errors with Clang 3.5.0 on our Debian Jessie buildslave:
library/padlock.c:99:10: error: inline assembly requires more registers than available
2015-08-04 22:19:05 +02:00
e96ce08a21
Fix compile error with armcc5 --gnu
2015-07-31 10:58:06 +02:00
6fb8187279
Update date in copyright line
2015-07-28 17:11:58 +02:00
10c767488b
Adjust rename/compat list
2015-07-15 11:07:26 +02:00
4cb87f409d
Prepare for 2.0.0 release
2015-07-10 14:09:43 +01:00
1409616d9c
Fix one renaming in the list
...
Found by Simon while testing the upgrade guide
2015-07-09 09:17:18 +01:00
20af64dc2c
Still need to #define inline for MSVC
...
I only tested with VS2015 earlier, but previous versions apparently still
don't know that standard C99 keyword though it's documented on MSDN...
2015-07-07 23:21:30 +02:00
052a6c9cfe
Add mbedtls_md_clone()
2015-07-06 16:06:02 +02:00
16d412f465
Add md/shaXXX_clone() API
...
Will be used in the SSL/TLS modules
2015-07-06 15:48:34 +02:00
7893103154
Remove 1024 bits DHM params and add one 4096 bit
2015-07-03 17:06:39 +02:00
7c3b4ab6f2
Fix typos in comments
2015-07-02 17:59:52 +02:00
5791109707
Make the hardclock test optional
...
Known to fail on VMs (such as the buildbots), see eg
http://blog.badtrace.com/post/rdtsc-x86-instruction-to-detect-vms/
2015-07-01 19:22:12 +02:00
9bd0afdb22
Add guards for closed socket in net.c
...
This is particularly problematic when calling FD_SET( -1, ... ), but let's
check it in all functions.
This was introduced with the new API and the fact the net_free() now sets the
internal fd to -1 in order to mark it as closed: now using this information.
2015-07-01 19:03:27 +02:00
2505528be4
Rm obsolete defines for inline wiht MSVC
...
The "inline" keyword is supported since Visual Studio 2005 according to MSDN,
and we require Visual Studio 2010 or higher.
2015-07-01 17:22:36 +02:00
abc729e664
Simplify net_accept() with UDP sockets
...
This is made possible by the new API where net_accept() gets a pointer to
bind_ctx, so it can update it.
2015-07-01 01:28:24 +02:00
3d7d00ad23
Rename mbedtls_net_close() to mbedtls_net_free()
...
close() may be more meaningful, but free() is symmetric with _init(), and more
consistent with all other modules
2015-06-30 16:50:37 +02:00
91895853ac
Move from naked int to a structure in net.c
...
Provides more flexibility for future changes/extensions.
2015-06-30 15:56:25 +02:00
a16e7c468c
Rename a debug function
2015-06-29 20:14:19 +02:00
b74c245a20
Rework debug to not need dynamic alloc
...
But introduces dependency on variadic macros
2015-06-29 20:08:23 +02:00
9db2887672
Actually enable fixed snprintf on windows
2015-06-26 11:04:08 +02:00
dc54ff8578
Improve documentation about SSL ticket encryption
2015-06-25 12:44:46 +02:00