Janos Follath 23bdca0d63 Fix an x509 compatibility issue ...

Certificates with unsupported algorithms in the certificate chain
prevented verification even if a certificate before the unsupported
ones was already trusted.

We change the behaviour to ignoring every certificate with unknown
(unsupported) signature algorithm oid when parsing the certificate
chain received from the peer.

2016-10-07 16:12:50 +01:00

..

.gitignore

Split libs with make + general make cleanups

2015-06-25 10:59:56 +02:00

aes.c

Fix unused variable in AES selftest when CBC and CFB disabled (#393)

2016-06-22 16:48:16 +01:00

aesni.c

Fix build errors on x32 by using the generic 'add' instruction

2016-05-23 14:29:28 +01:00

arc4.c

Adds casts to zeroize functions to allow building as C++

2016-05-23 14:29:32 +01:00

asn1parse.c

Adds additional casts to calloc calls

2016-05-23 14:29:33 +01:00

asn1write.c

Add mbedtls_asn1_write_len() support for 3 and 4 byte lengths

2016-08-25 15:42:27 +01:00

base64.c

Address user reported coverity issues.

2016-06-07 14:52:35 +01:00

bignum.c

Adds additional casts to calloc calls

2016-05-23 14:29:33 +01:00

blowfish.c

Adds casts to zeroize functions to allow building as C++

2016-05-23 14:29:32 +01:00

camellia.c

Address user reported coverity issues.

2016-06-07 14:52:35 +01:00

ccm.c

Adds casts to zeroize functions to allow building as C++

2016-05-23 14:29:32 +01:00

certs.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

cipher_wrap.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

cipher.c

Refactor and change CMAC interface

2016-10-05 14:19:18 +01:00

cmac.c

Clean up of formatting, and potential integer overflow fix

2016-10-06 15:23:39 +01:00

CMakeLists.txt

Add support for AES-128-CMAC and AES-CMAC-PRF-128

2016-10-05 14:19:13 +01:00

ctr_drbg.c

Corrects incorrectly named function in ctr_drbg.c comment

2016-05-23 14:29:31 +01:00

debug.c

Address issues find by manual coverity scan.

2016-06-03 15:40:57 +01:00

des.c

Adds casts to zeroize functions to allow building as C++

2016-05-23 14:29:32 +01:00

dhm.c

Corrected references for RSA and DHM

2016-01-20 00:44:42 +00:00

ecdh.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

ecdsa.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

ecjpake.c

Fix potential stack buffer overflow in ecjpake

2015-10-20 16:20:56 +02:00

ecp_curves.c

Fix macroization of inline in C++

2015-10-05 11:41:36 +01:00

ecp.c

Address user reported coverity issues.

2016-06-07 14:52:35 +01:00

entropy_poll.c

Renames null entropy source function for clarity

2016-06-12 00:31:33 +01:00

entropy.c

Fix unused variable warnings for null entropy config

2016-09-15 18:57:34 +01:00

error.c

Regenerate error.c file to remove CMAC

2016-10-05 14:39:15 +01:00

gcm.c

Fix wrong length limit in GCM

2015-12-10 14:54:21 +01:00

havege.c

Fixes warnings found by Clang static analyser

2016-05-23 23:18:26 +01:00

hmac_drbg.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

Makefile

Added cmac.o to libary/Makefile

2016-10-05 14:19:15 +01:00

md2.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

md4.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

md5.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

md_wrap.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

md.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

memory_buffer_alloc.c

Fixes memory leak in memory_buffer_alloc.c debug

2016-05-23 14:29:29 +01:00

net_sockets.c

Rename net.{c,h} to net_sockets.{c,h}

2016-09-26 23:23:52 +01:00

oid.c

Removing in compile time unused entries from oid_ecp_grp list

2016-09-04 15:14:38 +01:00

padlock.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

pem.c

Merge of IOTSSL-476 - Random malloc in pem_read()

2015-10-05 00:26:36 +01:00

pk_wrap.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

pk.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

pkcs5.c

Fix output of PKCS#5 and RIPEMD-160 self tests

2016-08-25 16:36:35 +01:00

pkcs11.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

pkcs12.c

Shut up a few clang-analyze warnings about use of uninitialized variables

2016-05-23 14:29:28 +01:00

pkparse.c

Clean up compilation warnings

2015-10-02 13:32:17 +01:00

pkwrite.c

Fix other occurrences of same bounds check issue

2015-10-21 12:50:45 +02:00

platform.c

Adds missing conditions for platform time

2016-07-13 14:47:07 +01:00

ripemd160.c

Fix output of PKCS#5 and RIPEMD-160 self tests

2016-08-25 16:36:35 +01:00

rsa.c

Merge branch 'development' into development-restricted

2016-06-23 21:42:26 +01:00

sha1.c

Adds casts to zeroize functions to allow building as C++

2016-05-23 14:29:32 +01:00

sha256.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

sha512.c

Move K inside MBEDTLS_SHA512_PROCESS_ALT block

2016-05-23 14:29:28 +01:00

ssl_cache.c

Puts platform time abstraction into its own header

2016-07-13 14:46:18 +01:00

ssl_ciphersuites.c

Puts platform time abstraction into its own header

2016-07-13 14:46:18 +01:00

ssl_cli.c

Fix guards in SSL for ECDH key exchanges

2016-09-05 01:48:31 +03:00

ssl_cookie.c

Puts platform time abstraction into its own header

2016-07-13 14:46:18 +01:00

ssl_srv.c

Fix guards in SSL for ECDH key exchanges

2016-09-05 01:48:31 +03:00

ssl_ticket.c

Puts platform time abstraction into its own header

2016-07-13 14:46:18 +01:00

ssl_tls.c

Fix an x509 compatibility issue

2016-10-07 16:12:50 +01:00

threading.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

timing.c

Give better error messages for semi-portable parts

2016-02-22 10:47:32 +01:00

version_features.c

Use autogenerated version_features.c

2016-10-05 14:19:13 +01:00

version.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

x509_create.c

Fix other occurrences of same bounds check issue

2015-10-21 12:50:45 +02:00

x509_crl.c

Fixes whitespace errors in x509_crl.c

2016-05-23 14:29:32 +01:00

x509_crt.c

Allow the entry_name size to be set in config.h

2016-09-16 11:42:35 +01:00

x509_csr.c

Silence a clang-analyze warning

2016-05-23 14:29:29 +01:00

x509.c

Puts platform time abstraction into its own header

2016-07-13 14:46:18 +01:00

x509write_crt.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

x509write_csr.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00

xtea.c

Change main license to Apache 2.0

2015-09-04 14:21:07 +02:00