cpq
4bc1fe3f21
Switch bigint to bearssl implementation
2026-05-26 16:02:24 +01:00
Sergio R. Caprile
e7a1e580a2
process TLS alerts
2026-05-14 13:42:18 -03:00
Sergio R. Caprile
ce23baca7d
add IPv6 SAN
2026-04-01 14:21:42 -03:00
Sergio R. Caprile
9210a762de
fix unit tests
2026-04-01 10:30:59 -03:00
Sergio R. Caprile
0d882f1b43
patch
2026-03-31 17:38:04 -03:00
Sergio R. Caprile
8c64266f95
Fix long standing certverify failure TLS bug
2026-02-03 15:26:38 -03:00
cpq
f2ce01641e
Make built-in TLS vc98-friendly
2026-01-30 11:40:26 -03:00
cpq
b93822fc50
Read out all pending TLS data
2026-01-30 10:54:06 -03:00
cpq
46ad050cea
Less noisy tls_builtin
2026-01-23 06:47:39 +00:00
Sergio R. Caprile
c10a88b64b
unbreak stuff after last commit
2026-01-20 18:40:36 -03:00
cpq
d5e5b3397d
Add RSA & chain support
2026-01-20 18:23:58 +00:00
Sergio R. Caprile
5b023cb85b
Add support for Windriver's Diab v4 (stricter C89)
2025-12-04 13:58:49 -03:00
Sergio R. Caprile
a35901121b
Fix 2-way auth max msg size, + some neats
2025-11-12 20:13:06 -03:00
Sergio R. Caprile
b8994f8bc3
Handle OOM situations in iobuf expansion
2025-11-05 13:53:18 -03:00
Sergio R. Caprile
19d2b93ec7
add IPaddress type SAN elements
2025-11-04 16:55:03 -03:00
Sergio R. Caprile
e0304f2b8f
TLS: fix resuming handshake, cert req length, 2-way auth app key generation and handling
2025-11-04 15:35:28 -03:00
Sergio R. Caprile
0cc40b0c70
improve error handling with ChaCha
2025-10-10 13:58:53 -03:00
cpq
af7602497d
Squash warning
2025-09-30 16:43:41 +01:00
Sergio R. Caprile
4536694f20
Fix 2-way auth, fix skip hostname validation
2025-09-26 13:40:15 -03:00
Sergey Lyubka
9fd87060f9
Verify host against CN, too
2025-08-12 15:49:08 +01:00
Sergey Lyubka
9f76ea8030
CHACHA20 -> MG_ENABLE_CHACHA20
2025-08-12 08:42:20 +01:00
Sergio R. Caprile
e670ea3d61
fix possible overflow, improve tests
2025-07-31 13:43:18 -03:00
Sergio R. Caprile
aa76f5673b
ChaCha20 not working in S390 (bigendian)
2025-07-30 16:13:34 -03:00
Sergio R. Caprile
52ab6bc499
make it C89-friendly
2025-07-07 15:15:31 -03:00
Sergey Lyubka
074ef5197b
Introduce mg_calloc
2025-06-24 10:52:44 +01:00
Sergio R. Caprile
d6fdfe5b1b
avoid ASAN reporting read overflows
2025-06-05 17:26:56 -03:00
Sergio R. Caprile
1f48b1ca65
flush TLS buffer
2025-05-23 14:04:59 -03:00
Sergio R. Caprile
fadf28adb4
Make built-in TLS play fair to TCP
...
Handshake functions in Mongoose TLS assumed data was being fully sent
after calling mg_io_send(). This was in fact the case with the usual 1460-bytes MSS, but not with the default 536-bytes MSS.
This PR removes all those calls from individual handshake functions, actual send is done at the main handshake function, keeping track of the amount of data sent, and so handling small MTUs/MSSs and possible MG_IO_WAITs when running over a socket layer.
2025-05-22 14:45:46 -03:00
Sergio R. Caprile
cc8ecc5a42
stronger bounds checking
2025-05-12 18:13:41 -03:00
Sergio R. Caprile
c1849c2b19
fix IO_WAIT on send for builtin TLS and MbedTLS
2025-03-11 16:14:12 -03:00
Sergio R. Caprile
8906b1ac0f
Merge pull request #3025 from cesanta/ub
...
fix UB and possible exception trigger
2025-03-07 13:49:37 -03:00
Sergey Lyubka
b50081a83b
TLS verification
2025-02-10 15:36:29 +00:00
Sergio R. Caprile
ce1a70e2dc
fix error msg
2025-01-29 10:15:45 -03:00
Sergio R. Caprile
a0d9b6a7e0
fix UB and possible HF trigger
2025-01-28 10:24:59 -03:00
Sergio R. Caprile
b8b3a5c305
fix built-in TLS not calling MG_EV_TLS_HS; uniformize mg_tls_init()
2025-01-27 10:54:56 -03:00
Sergio R. Caprile
317591bc8a
improve TLS testing
2025-01-17 14:07:49 -03:00
Sergio R. Caprile
7fc96a61ad
fix mg_tls_pending
2024-12-16 16:03:36 -03:00
Sergey Lyubka
19cbb27b4c
Fix TLS handling in net_builtin
2024-12-15 13:32:19 +00:00
Sergey Lyubka
93dd7a85f6
Fix IP fragmentation checks for big-endian CPUs
2024-10-04 16:18:33 +01:00
Sergey Lyubka
683f65f8ac
Make mg_random() fallible. Abort TLS on weak RNG
2024-09-02 11:06:10 -03:00
Sergey Lyubka
641c7d1967
MG_IO_SIZE=256 on embedded platforms
2024-08-30 15:52:14 -03:00
Sergio R. Caprile
fe77075996
Refactor tls receive pointer scheme
2024-07-26 12:15:05 -03:00
Sergio R. Caprile
4d6b126b9d
unbreak after incorrect cleanup
2024-07-26 12:14:33 -03:00
Sergio R. Caprile
5a8c56e784
Misc TLS cleanups
2024-07-25 19:01:35 -03:00
Sergey Lyubka
4b49c63344
Make net_builtin send client TLS HS
2024-07-23 18:47:48 +01:00
Sergio R. Caprile
d46798c2a7
silence cast and c++ warnings)
2024-07-08 17:02:54 -03:00
Sergey Lyubka
ddf3ba8a15
Squash vc98 chacha warnings
2024-07-07 10:29:52 +01:00
Sergio R. Caprile
00862344f7
fix stack trashing
2024-07-03 14:44:51 -03:00
Sergey Lyubka
df257a8e8a
Add mtls and chacha20
2024-06-09 17:43:49 +01:00
Sergio R. Caprile
ab75bfa6e7
bring mg_strdup() back
2024-05-31 17:45:53 -03:00