Rivoreo Source Code Repositories
src.rivoreo.one
/
security
/
mbedtls
/
b47368a00a84649051b8778b0838dfa76148c6b8
b47368a
Add replay detection
by Manuel Pégourié-Gonnard
· 10 years ago
4956fd7
Test and fix anti-replay functions
by Manuel Pégourié-Gonnard
· 10 years ago
7a7e140
Add functions for replay protection
by Manuel Pégourié-Gonnard
· 10 years ago
ea22ce5
Rm unneeded counter increment with DTLS
by Manuel Pégourié-Gonnard
· 10 years ago
6312e0f
udp_proxy: allow successive clients
by Manuel Pégourié-Gonnard
· 10 years ago
484b8f9
Fix bug in ssl_client2 reconnect option
by Manuel Pégourié-Gonnard
· 10 years ago
b46780e
Enlarge udp_proxy's message buffer
by Manuel Pégourié-Gonnard
· 10 years ago
825a49e
Add more udp_proxy tests
by Manuel Pégourié-Gonnard
· 10 years ago
ae8d239
udp_proxy: also drop messages from the last flight
by Manuel Pégourié-Gonnard
· 10 years ago
abf1624
Add ability to resend last flight
by Manuel Pégourié-Gonnard
· 10 years ago
992e136
Make decisions pseudo-random in udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
cd32a50
Fix NewSesssionTicket vs ChangeCipherSpec bug
by Manuel Pégourié-Gonnard
· 10 years ago
a6189f0
udp_proxy wasn't actually killed
by Manuel Pégourié-Gonnard
· 10 years ago
a071972
Add tests with dropped packets
by Manuel Pégourié-Gonnard
· 10 years ago
bc010a0
udp_proxy: don't drop messages in the last flight
by Manuel Pégourié-Gonnard
· 10 years ago
b6440a4
ssl_server2 now dies on SIGTERM during a read
by Manuel Pégourié-Gonnard
· 10 years ago
767c695
Drop out-of-sequence ChangeCipherSpec messages
by Manuel Pégourié-Gonnard
· 10 years ago
7cf3518
Enhance output of udp_proxy (with time)
by Manuel Pégourié-Gonnard
· 10 years ago
93017de
Minor optim: don't resend on duplicated HVR
by Manuel Pégourié-Gonnard
· 10 years ago
c715aed
Fix epoch swapping
by Manuel Pégourié-Gonnard
· 10 years ago
6a2bdfa
Actually resend flights
by Manuel Pégourié-Gonnard
· 10 years ago
5d8ba53
Expand and fix resend infrastructure
by Manuel Pégourié-Gonnard
· 10 years ago
ffa67be
Infrastructure for buffering & resending flights
by Manuel Pégourié-Gonnard
· 10 years ago
a014829
Use ssl_set_bio_timeout() in test client/server
by Manuel Pégourié-Gonnard
· 10 years ago
57fa314
Fix depend documentation
by Manuel Pégourié-Gonnard
· 10 years ago
9d9b003
Add net_recv_timeout()
by Manuel Pégourié-Gonnard
· 10 years ago
8fa6dfd
Introduce f_recv_timeout callback
by Manuel Pégourié-Gonnard
· 10 years ago
e6bdc44
Merge I/O contexts into one
by Manuel Pégourié-Gonnard
· 10 years ago
f4acfe1
Document previous API changes in this branch
by Manuel Pégourié-Gonnard
· 10 years ago
d92d6a1
ssl_parse_server_key_exchange() cleanups
by Manuel Pégourié-Gonnard
· 10 years ago
5ee9654
Add length checks in parse_certificate_verify()
by Manuel Pégourié-Gonnard
· 10 years ago
7222621
Merge checks in ssl_parse_certificate_verify()
by Manuel Pégourié-Gonnard
· 10 years ago
ca6440b
Small cleanups in parse_finished()
by Manuel Pégourié-Gonnard
· 10 years ago
624bcb5
No memmove: done, rm temporary things
by Manuel Pégourié-Gonnard
· 10 years ago
000d5ae
No memmove: parse_new_session_ticket()
by Manuel Pégourié-Gonnard
· 10 years ago
0b3400d
No memmove: ssl_parse_server_hello()
by Manuel Pégourié-Gonnard
· 10 years ago
069eb79
No memmove: ssl_parse_hello_verify_request()
by Manuel Pégourié-Gonnard
· 10 years ago
04c1b4e
No memmove: certificate_request + server_hello_done
by Manuel Pégourié-Gonnard
· 10 years ago
f4830b5
No memmove: ssl_parse_server_key_exchange()
by Manuel Pégourié-Gonnard
· 10 years ago
4528f3f
No memmove: parse_certificate_verify()
by Manuel Pégourié-Gonnard
· 10 years ago
2114d72
No memmove: ssl_parse_client_key_exchange()
by Manuel Pégourié-Gonnard
· 10 years ago
f49a7da
No memmove: ssl_parse_certificate()
by Manuel Pégourié-Gonnard
· 10 years ago
4abc327
No memmove: ssl_parse_finished()
by Manuel Pégourié-Gonnard
· 10 years ago
f899583
Prepare moving away from memmove() on incoming HS
by Manuel Pégourié-Gonnard
· 10 years ago
4a17536
Fix missing return in error check
by Manuel Pégourié-Gonnard
· 10 years ago
19d438f
Get rid of memmove for DTLS in parse_client_hello()
by Manuel Pégourié-Gonnard
· 10 years ago
63eca93
Drop invalid records with DTLS
by Manuel Pégourié-Gonnard
· 10 years ago
167a376
Split two functions out of ssl_read_record()
by Manuel Pégourié-Gonnard
· 10 years ago
6c18a39
Add option 'bad_ad' to udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
eb00bfd
Add option 'mtu' to udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
81f2fe9
Add option 'delay_ccs' to udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
60fdd7e
Add option 'drop' to udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
21398c3
Add option 'delay' to udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
990f9e4
Handle late handshake messages gracefully
by Manuel Pégourié-Gonnard
· 10 years ago
2c41bd8
Add a 'duplicate' option to udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
44d5e63
Enhance output of udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
be9eb87
Adapt ssl-opt.sh to allow using udp_proxy in tests
by Manuel Pégourié-Gonnard
· 10 years ago
cb4137b
Add test utility udp_proxy
by Manuel Pégourié-Gonnard
· 10 years ago
60ca5af
Drop records from wrong epoch
by Manuel Pégourié-Gonnard
· 10 years ago
0a65934
Re-enable valgrind for all tests
by Manuel Pégourié-Gonnard
· 10 years ago
1aa586e
Check handshake message_seq field
by Manuel Pégourié-Gonnard
· 10 years ago
9d1d719
Check length before reading handshake header
by Manuel Pégourié-Gonnard
· 10 years ago
d9ba0d9
Prepare for checking incoming handshake seqnum
by Manuel Pégourié-Gonnard
· 10 years ago
0c4cbc7
Add test for fragmentation + renego with GnuTLS
by Manuel Pégourié-Gonnard
· 10 years ago
ac03052
Fix segfault with some very short fragments
by Manuel Pégourié-Gonnard
· 10 years ago
f1499f6
Add interop testing for renego with GnuTLS
by Manuel Pégourié-Gonnard
· 10 years ago
77b0b8d
Disable some tests with valgrind for now
by Manuel Pégourié-Gonnard
· 10 years ago
64dffc5
Make handshake reassembly work with openssl
by Manuel Pégourié-Gonnard
· 10 years ago
a775617
Add test with openssl with DTLS in ssl-opt.sh
by Manuel Pégourié-Gonnard
· 10 years ago
502bf30
Handle reassembly of handshake messages
by Manuel Pégourié-Gonnard
· 10 years ago
ed79a4b
Prepare for DTLS handshake reassembly
by Manuel Pégourié-Gonnard
· 10 years ago
edcbe54
Reorder checks in ssl_read_record
by Manuel Pégourié-Gonnard
· 10 years ago
0557bd5
Fix message_seq with server-initiated renego
by Manuel Pégourié-Gonnard
· 10 years ago
c392b24
Fix server-initiated renegotiation with DTLS
by Manuel Pégourié-Gonnard
· 10 years ago
30d16eb
Fix client-initiated renegotiation with DTLS
by Manuel Pégourié-Gonnard
· 10 years ago
b35fe56
Fix HelloVerifyRequest version handling
by Manuel Pégourié-Gonnard
· 10 years ago
4ba6ab6
Fix glitch with HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 10 years ago
562eb78
Add and use POLARSSL_ERR_SSL_BUFFER_TOO_SMALL
by Manuel Pégourié-Gonnard
· 10 years ago
bef8f09
Make cookie timeout configurable
by Manuel Pégourié-Gonnard
· 10 years ago
e903081
Add timestamp/serial to cookies, with timeout
by Manuel Pégourié-Gonnard
· 10 years ago
445a1ec
Change internal names
by Manuel Pégourié-Gonnard
· 10 years ago
0eb6cab
Add DTLS cookies test to ssl-opt.sh
by Manuel Pégourié-Gonnard
· 10 years ago
26820e3
Add option 'cookies' to ssl_server2
by Manuel Pégourié-Gonnard
· 10 years ago
29ad7e8
Add check for missing ssl_set_client_transport_id()
by Manuel Pégourié-Gonnard
· 10 years ago
a64acd4
Add separate SSL_COOKIE_C define
by Manuel Pégourié-Gonnard
· 10 years ago
7d38d21
Allow disabling HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 10 years ago
e4de061
Fix cookie context usage
by Manuel Pégourié-Gonnard
· 10 years ago
232edd4
Move cookie callbacks implementation to own module
by Manuel Pégourié-Gonnard
· 10 years ago
d485d19
Move to a callback interface for DTLS cookies
by Manuel Pégourié-Gonnard
· 10 years ago
d7f9bc5
Refactor cookie to prepare for external callbacks
by Manuel Pégourié-Gonnard
· 10 years ago
82202f0
Make DTLS_HELLO_VERIFY a compile option
by Manuel Pégourié-Gonnard
· 10 years ago
98545f1
Generate random key for HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 10 years ago
dd3cdb0
Start using client IP in HelloVerifyRequest
by Manuel Pégourié-Gonnard
· 10 years ago
336b824
Use ssl_set_client_transport_id() in ssl_server2
by Manuel Pégourié-Gonnard
· 10 years ago
43c0218
Add ssl_set_client_transport_id()
by Manuel Pégourié-Gonnard
· 10 years ago
fb2d223
Reuse random when responding to a verify request
by Manuel Pégourié-Gonnard
· 10 years ago
b760f00
Extract generate client random to a function
by Manuel Pégourié-Gonnard
· 10 years ago
2c9ee81
Start adding srv support for hello verify request
by Manuel Pégourié-Gonnard
· 10 years ago
a0e1632
Do not use compression with DTLS
by Manuel Pégourié-Gonnard
· 10 years ago
5d53cbe
Fix length check in ssl_write_ticket()
by Manuel Pégourié-Gonnard
· 10 years ago
Next »