Commit Graph
96 Commits
Author SHA1 Message Date
Sergio R. Caprile 298ee549da make error reporting consistent 2026-10-16 15:59:20 -03:00
cpq 37f3ed5ba4 Drop x25519, use p256 only 2026-10-15 13:36:24 +01:00
cpq c8bf39dcd8 Built-in TLS: accept a chain that contains the configured CA 2026-10-06 12:41:25 +01:00
cpq 393c811f31 Fixed cert emptiness check 2026-10-06 12:33:02 +01:00
cpq cf9d56be79 Add support for MS Azure MQTT 2026-10-05 12:41:56 +01:00
Sergio R. Caprile 86adf12a77 improve SAN matching 2026-09-04 17:29:44 -03:00
Sergio R. Caprile a561f3e096 reject improper TLS record lengths 2026-09-04 11:24:30 -03:00
Sergio R. Caprile 2b0a5e9701 improve OID subj handling 2026-09-03 14:06:25 -03:00
Sergio R. Caprile 5a317e81d9 make FIN wait for TLS drain 2026-08-31 10:03:27 -03:00
Sergio R. Caprile a6deed5868 Merge commit from fork
fix missing check
2026-08-11 09:10:46 -03:00
Sergio R. Caprile 5cdb25f05a Merge commit from fork
fix too short length guard
2026-08-11 09:05:40 -03:00
Sergio R. Caprile 2988bc9df3 verify chain in bundle 2026-08-04 11:59:22 -03:00
Sergio R. Caprile 758e301f0c fix too short length guard 2026-08-03 14:19:13 -03:00
Sergio R. Caprile 08e01cb312 fix warnings (and uncovered latent bug) 2026-07-27 10:35:04 -03:00
Sergio R. Caprile cdd957572e Add JWT Bearer Authentication support and tutorial 2026-07-21 14:25:03 -03:00
Sergio R. Caprile b86f255407 Merge pull request #3637 from cesanta/misc
misc check strenghtens and debug guards
2026-07-16 15:16:43 -03:00
Sergio R. Caprile cb57182ee0 misc check strenghtens and debug guards 2026-07-16 15:10:19 -03:00
Sergey Lyubka 72ff0dfb07 Merge pull request #3633 from cesanta/len
harden some len checks
2026-07-16 12:00:21 +01:00
Sergio R. Caprile b6a353cae9 remove duplicated epoch handling, test it 2026-07-15 15:53:38 -03:00
Sergio R. Caprile 2ec27994f4 harden some len checks 2026-07-13 17:51:50 -03:00
Sergio R. Caprile a8b4ae95db fix missing check 2026-07-13 14:52:26 -03:00
Sergio R. Caprile 37234ad26f make tls_init request boot time if it is 0 2026-07-10 11:40:39 -03:00
Sergio R. Caprile f8816d67c3 delegate RSA verify to the RSA module 2026-07-01 12:31:11 -03:00
Sergio R. Caprile a9df523f76 assorted patches 2026-06-23 13:38:35 -03:00
Sergio R. Caprile 05ef7ebad9 allow no certs for client with (not enforced) two-way auth 2026-06-03 13:39:59 -03:00
cpq 5e4c5a4d13 Add secp384r1, fix memory leaks in #3566 2026-05-28 12:27:50 -03:00
Sergio R. Caprile a84ac510b1 Add CA bundle parsing for TLS clients 2026-05-27 17:29:38 -03:00
cpq 4bc1fe3f21 Switch bigint to bearssl implementation 2026-05-26 16:02:24 +01:00
Sergio R. Caprile e7a1e580a2 process TLS alerts 2026-05-14 13:42:18 -03:00
Sergio R. Caprile ce23baca7d add IPv6 SAN 2026-04-01 14:21:42 -03:00
Sergio R. Caprile 9210a762de fix unit tests 2026-04-01 10:30:59 -03:00
Sergio R. Caprile 0d882f1b43 patch 2026-03-31 17:38:04 -03:00
Sergio R. Caprile 8c64266f95 Fix long standing certverify failure TLS bug 2026-02-03 15:26:38 -03:00
cpq f2ce01641e Make built-in TLS vc98-friendly 2026-01-30 11:40:26 -03:00
cpq b93822fc50 Read out all pending TLS data 2026-01-30 10:54:06 -03:00
cpq 46ad050cea Less noisy tls_builtin 2026-01-23 06:47:39 +00:00
Sergio R. Caprile c10a88b64b unbreak stuff after last commit 2026-01-20 18:40:36 -03:00
cpq d5e5b3397d Add RSA & chain support 2026-01-20 18:23:58 +00:00
Sergio R. Caprile 5b023cb85b Add support for Windriver's Diab v4 (stricter C89) 2025-12-04 13:58:49 -03:00
Sergio R. Caprile a35901121b Fix 2-way auth max msg size, + some neats 2025-11-12 20:13:06 -03:00
Sergio R. Caprile b8994f8bc3 Handle OOM situations in iobuf expansion 2025-11-05 13:53:18 -03:00
Sergio R. Caprile 19d2b93ec7 add IPaddress type SAN elements 2025-11-04 16:55:03 -03:00
Sergio R. Caprile e0304f2b8f TLS: fix resuming handshake, cert req length, 2-way auth app key generation and handling 2025-11-04 15:35:28 -03:00
Sergio R. Caprile 0cc40b0c70 improve error handling with ChaCha 2025-10-10 13:58:53 -03:00
cpq af7602497d Squash warning 2025-09-30 16:43:41 +01:00
Sergio R. Caprile 4536694f20 Fix 2-way auth, fix skip hostname validation 2025-09-26 13:40:15 -03:00
Sergey Lyubka 9fd87060f9 Verify host against CN, too 2025-08-12 15:49:08 +01:00
Sergey Lyubka 9f76ea8030 CHACHA20 -> MG_ENABLE_CHACHA20 2025-08-12 08:42:20 +01:00
Sergio R. Caprile e670ea3d61 fix possible overflow, improve tests 2025-07-31 13:43:18 -03:00
Sergio R. Caprile aa76f5673b ChaCha20 not working in S390 (bigendian) 2025-07-30 16:13:34 -03:00