aboutsummaryrefslogtreecommitdiffstats
path: root/src/tls
Commit message (Collapse)AuthorAgeFilesLines
* Remove unnecessary definesJouni Malinen2009-12-051-2/+0
| | | | | | | | | The following defines are not really needed in most places, so remove them to clean up source code and build scripts: EAP_TLS_FUNCS EAP_TLS_OPENSSL EAP_TLS_GNUTLS CONFIG_TLS_INTERNAL
* Remove src/crypto from default include pathJouni Malinen2009-11-2913-25/+24
| | | | | | In addition, start ordering header file includes to be in more consistent order: system header files, src/utils, src/*, same directory as the *.c file.
* Fix a typo in a commentJouni Malinen2009-11-211-1/+1
|
* Move PKCS# {1,5,8} functionality into separate filesJouni Malinen2009-10-176-0/+704
| | | | | | This functionality fits better with src/tls (i.e., internal TLS implementation), so move it there to make crypto_internal.c more of a wrapper like other crypto_*.c files.
* TLS: Replace set_key helpers to return key instead of status codeJouni Malinen2009-10-171-19/+21
| | | | | The status code was not being used anyway, so it is simpler to just return the key as is done in crypto functions.
* Add support for PKCS #5 encrypted PKCS #8 keys with internal cryptoJouni Malinen2009-10-171-5/+36
| | | | | | Private keys can now be used in either unencrypted or encrypted PKCS #8 encoding. Only the pbeWithMD5AndDES-CBC algorithm (PKCS #5) is currently supported.
* Internal TLS: Add support for unencrypred PKCS#8 private keys in PEMJouni Malinen2009-10-161-7/+16
| | | | | | | Recognize the PEM header "BEGIN PRIVATE KEY" as base64-decode the data to be able to use PEM encoded, unencrypted PKCS#8 private keys with the internal TLS implementation. Previously, only DER encoding of the PKCS#8 private key was supported.
* Reject X.509 certificate strings with embedded NUL charactersJouni Malinen2009-08-231-0/+31
| | | | | | | | | | | | | These could, at least in theory, be used to generate unexpected common name or subject alternative name matches should a CA sign strings with NUL (C string termination) in them. For now, just reject the certificate if an embedded NUL is detected. In theory, all the comparison routines could be made to compare these strings as binary blobs (with additional X.509 rules to handle some exceptions) and display NUL characters somehow. Anyway, just rejecting the certificate will get rid of potential problems with the C string getting terminated and it should not really be used in certificates, so this should not break valid use cases.
* Support PEM format RSA private key with internal TLS implementationJouni Malinen2009-08-161-0/+29
|
* Add root .gitignore file to cleanup ignore listsJouni Malinen2009-06-291-1/+0
| | | | | | This removes need for local configuration to ignore *.o and *~ and allows the src/*/.gitignore files to be removed (subdirectories will inherit the rules from the root .gitignore).
* X.509: Add parsing of alternative name to internal TLS implementationJouni Malinen2009-06-114-16/+254
| | | | | The alternative name extensions are now parsed, but the actual values are not yet used for alt. subject name matching.
* hostapd: Fix internal crypto build without TLSJouni Malinen2009-05-261-0/+2
|
* Resolve couple of compiler warningsJouni Malinen2009-05-261-7/+3
|
* Rename EAP server defines from EAP_* to EAP_SERVER_*Jouni Malinen2009-03-253-11/+11
| | | | | This allows separate set of EAP server and peer methods to be built into a single binary.
* Add a workaround for EAP-FAST with Cisco AP local RADIUS serverJouni Malinen2009-03-081-0/+11
| | | | | | | | | | | | | | | | When using the internal TLS implementation, EAP-FAST unauthenticated provisioning ends up proposing multiple cipher suites. It looks like Cisco AP (at least 350 and 1200 series) local authentication server does not know how to search cipher suites from the list and seem to require that the last entry in the list is the one that it wants to use. However, TLS specification requires the list to be in the client preference order. As a workaround, ass anon-DH AES-128-SHA1 again at the end of the list to allow the Cisco code to find it. This fixed EAP-FAST provisioning with the following IOS version: Cisco IOS Software, C350 Software (C350-K9W7-M), Version 12.3(8)JEA3, RELEASE SOFTWARE (fc2) Compiled Wed 21-Nov-07 14:08 by ccai
* Improved 'make install' (use BINDIR/LIBDIR, install shared objects)Daniel Mierswa2009-02-151-0/+3
|
* Fixed number of doxygen warningsJouni Malinen2009-01-022-1/+3
|
* Silenced compiler warnings on size_t printf format and shadowed variablesJouni Malinen2008-09-271-2/+2
|
* Internal X.509/TLSv1: Support SHA-256 in X.509 certificate digestJouni Malinen2008-08-161-2/+42
|
* Updated the LibTomMath reference to use 0.41 versionJouni Malinen2008-06-061-3/+3
|
* Combined internal LibTomMath configuration into one optionJouni Malinen2008-06-061-11/+11
| | | | | | CONFIG_INTERNAL_LIBTOMMATH_FAST=y in .config can now be used to enable all optimized routines at a cost of about 4 kB. This is small enough increase in size to justify simplified configuration.
* Added an option to build internal LibTomMath with faster div routineJouni Malinen2008-06-061-0/+287
| | | | | | | At the cost of about 1 kB of additional binary size, the internal LibTomMath can be configured to include faster div routine to speed up DH and RSA. This can be enabled with CONFIG_INTERNAL_LIBTOMMATH_FAST_DIV=y in .config.
* Add faster, optional sqr routine for internal LibTomMathJouni Malinen2008-06-051-0/+104
| | | | | | | At the cost of about 0.5 kB of additional binary size, the internal LibTomMath can be configured to include faster sqr routine to speed up DH and RSA. This can be enabled with CONFIG_INTERNAL_LIBTOMMATH_FAST_SQR=y in .config.
* Updated the comments since Montgomery reduction is now includedJouni Malinen2008-06-041-8/+5
|
* Internal LibTomMath: add optional support for Montgomery reductionJouni Malinen2008-06-041-0/+608
| | | | | | | Add a cost of about 2.5 kB of additional cost, the internal LibTomMath can be configured to include fast exptmod routine to speed up DH and RSA. This can be enabled with CONFIG_INTERNAL_LIBTOMMATH_FAST_EXPTMOD=y in .config.
* Reduce integrated LibTomMath size by dropping negative exponent supportJouni Malinen2008-06-041-2/+17
| | | | | Current uses do not require support for negative exponent in exptmod, so we can save about 1.5 kB in leaving out invmod.
* Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 releaseJouni Malinen2008-02-2728-0/+12016
generated by cgit v1.1 at 2025-01-27 12:33:12 +0000