Sergio R. Caprile
|
298ee549da
|
make error reporting consistent
|
2026-10-16 15:59:20 -03:00 |
|
cpq
|
37f3ed5ba4
|
Drop x25519, use p256 only
|
2026-10-15 13:36:24 +01:00 |
|
cpq
|
c8bf39dcd8
|
Built-in TLS: accept a chain that contains the configured CA
|
2026-10-06 12:41:25 +01:00 |
|
cpq
|
393c811f31
|
Fixed cert emptiness check
|
2026-10-06 12:33:02 +01:00 |
|
cpq
|
cf9d56be79
|
Add support for MS Azure MQTT
|
2026-10-05 12:41:56 +01:00 |
|
Sergio R. Caprile
|
86adf12a77
|
improve SAN matching
|
2026-09-04 17:29:44 -03:00 |
|
Sergio R. Caprile
|
a561f3e096
|
reject improper TLS record lengths
|
2026-09-04 11:24:30 -03:00 |
|
Sergio R. Caprile
|
2b0a5e9701
|
improve OID subj handling
|
2026-09-03 14:06:25 -03:00 |
|
Sergio R. Caprile
|
5a317e81d9
|
make FIN wait for TLS drain
|
2026-08-31 10:03:27 -03:00 |
|
Sergio R. Caprile
|
a6deed5868
|
Merge commit from fork
fix missing check
|
2026-08-11 09:10:46 -03:00 |
|
Sergio R. Caprile
|
5cdb25f05a
|
Merge commit from fork
fix too short length guard
|
2026-08-11 09:05:40 -03:00 |
|
Sergio R. Caprile
|
2988bc9df3
|
verify chain in bundle
|
2026-08-04 11:59:22 -03:00 |
|
Sergio R. Caprile
|
758e301f0c
|
fix too short length guard
|
2026-08-03 14:19:13 -03:00 |
|
Sergio R. Caprile
|
08e01cb312
|
fix warnings (and uncovered latent bug)
|
2026-07-27 10:35:04 -03:00 |
|
Sergio R. Caprile
|
cdd957572e
|
Add JWT Bearer Authentication support and tutorial
|
2026-07-21 14:25:03 -03:00 |
|
Sergio R. Caprile
|
b86f255407
|
Merge pull request #3637 from cesanta/misc
misc check strenghtens and debug guards
|
2026-07-16 15:16:43 -03:00 |
|
Sergio R. Caprile
|
cb57182ee0
|
misc check strenghtens and debug guards
|
2026-07-16 15:10:19 -03:00 |
|
Sergey Lyubka
|
72ff0dfb07
|
Merge pull request #3633 from cesanta/len
harden some len checks
|
2026-07-16 12:00:21 +01:00 |
|
Sergio R. Caprile
|
b6a353cae9
|
remove duplicated epoch handling, test it
|
2026-07-15 15:53:38 -03:00 |
|
Sergio R. Caprile
|
2ec27994f4
|
harden some len checks
|
2026-07-13 17:51:50 -03:00 |
|
Sergio R. Caprile
|
a8b4ae95db
|
fix missing check
|
2026-07-13 14:52:26 -03:00 |
|
Sergio R. Caprile
|
37234ad26f
|
make tls_init request boot time if it is 0
|
2026-07-10 11:40:39 -03:00 |
|
Sergio R. Caprile
|
f8816d67c3
|
delegate RSA verify to the RSA module
|
2026-07-01 12:31:11 -03:00 |
|
Sergio R. Caprile
|
a9df523f76
|
assorted patches
|
2026-06-23 13:38:35 -03:00 |
|
Sergio R. Caprile
|
05ef7ebad9
|
allow no certs for client with (not enforced) two-way auth
|
2026-06-03 13:39:59 -03:00 |
|
cpq
|
5e4c5a4d13
|
Add secp384r1, fix memory leaks in #3566
|
2026-05-28 12:27:50 -03:00 |
|
Sergio R. Caprile
|
a84ac510b1
|
Add CA bundle parsing for TLS clients
|
2026-05-27 17:29:38 -03:00 |
|
cpq
|
4bc1fe3f21
|
Switch bigint to bearssl implementation
|
2026-05-26 16:02:24 +01:00 |
|
Sergio R. Caprile
|
e7a1e580a2
|
process TLS alerts
|
2026-05-14 13:42:18 -03:00 |
|
Sergio R. Caprile
|
ce23baca7d
|
add IPv6 SAN
|
2026-04-01 14:21:42 -03:00 |
|
Sergio R. Caprile
|
9210a762de
|
fix unit tests
|
2026-04-01 10:30:59 -03:00 |
|
Sergio R. Caprile
|
0d882f1b43
|
patch
|
2026-03-31 17:38:04 -03:00 |
|
Sergio R. Caprile
|
8c64266f95
|
Fix long standing certverify failure TLS bug
|
2026-02-03 15:26:38 -03:00 |
|
cpq
|
f2ce01641e
|
Make built-in TLS vc98-friendly
|
2026-01-30 11:40:26 -03:00 |
|
cpq
|
b93822fc50
|
Read out all pending TLS data
|
2026-01-30 10:54:06 -03:00 |
|
cpq
|
46ad050cea
|
Less noisy tls_builtin
|
2026-01-23 06:47:39 +00:00 |
|
Sergio R. Caprile
|
c10a88b64b
|
unbreak stuff after last commit
|
2026-01-20 18:40:36 -03:00 |
|
cpq
|
d5e5b3397d
|
Add RSA & chain support
|
2026-01-20 18:23:58 +00:00 |
|
Sergio R. Caprile
|
5b023cb85b
|
Add support for Windriver's Diab v4 (stricter C89)
|
2025-12-04 13:58:49 -03:00 |
|
Sergio R. Caprile
|
a35901121b
|
Fix 2-way auth max msg size, + some neats
|
2025-11-12 20:13:06 -03:00 |
|
Sergio R. Caprile
|
b8994f8bc3
|
Handle OOM situations in iobuf expansion
|
2025-11-05 13:53:18 -03:00 |
|
Sergio R. Caprile
|
19d2b93ec7
|
add IPaddress type SAN elements
|
2025-11-04 16:55:03 -03:00 |
|
Sergio R. Caprile
|
e0304f2b8f
|
TLS: fix resuming handshake, cert req length, 2-way auth app key generation and handling
|
2025-11-04 15:35:28 -03:00 |
|
Sergio R. Caprile
|
0cc40b0c70
|
improve error handling with ChaCha
|
2025-10-10 13:58:53 -03:00 |
|
cpq
|
af7602497d
|
Squash warning
|
2025-09-30 16:43:41 +01:00 |
|
Sergio R. Caprile
|
4536694f20
|
Fix 2-way auth, fix skip hostname validation
|
2025-09-26 13:40:15 -03:00 |
|
Sergey Lyubka
|
9fd87060f9
|
Verify host against CN, too
|
2025-08-12 15:49:08 +01:00 |
|
Sergey Lyubka
|
9f76ea8030
|
CHACHA20 -> MG_ENABLE_CHACHA20
|
2025-08-12 08:42:20 +01:00 |
|
Sergio R. Caprile
|
e670ea3d61
|
fix possible overflow, improve tests
|
2025-07-31 13:43:18 -03:00 |
|
Sergio R. Caprile
|
aa76f5673b
|
ChaCha20 not working in S390 (bigendian)
|
2025-07-30 16:13:34 -03:00 |
|