aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Avoid g_ prefix on local variableJack Lloyd2017-09-031-3/+3
| | | | Reserving it for globals so they are easy to grep for
* Avoid leaking address info in the case of a connection failureJack Lloyd2017-09-031-2/+2
| | | | | | Not really a problem since we're exiting shortly afterwards. [ci skip]
* Clean up use of <limits> headerJack Lloyd2017-09-038-14/+6
| | | | Don't include it where it is not needed, included it where it is used.
* Add missing overrideJack Lloyd2017-09-031-1/+1
|
* Avoid using std::cout and std::cerr within cli codeJack Lloyd2017-09-025-85/+87
| | | | Prevents redirection using --output and --error-output
* Output errors to cerrJack Lloyd2017-09-021-4/+4
|
* Avoid using <iostream> header within the libraryJack Lloyd2017-09-022-2/+4
| | | | We only need <istream> + <ostream> here
* Clean up fuzzer code a bitJack Lloyd2017-09-025-46/+34
| | | | | If we ever output something to the terminal it should be because we are crashing.
* Merge GH #1179 Support negative base in power_mod closes #1168Jack Lloyd2017-09-023-3/+44
|\
| * Support a negative base in power_modJack Lloyd2017-09-023-3/+44
| | | | | | | | Closes #1168
* | Merge GH #1178 Use botan-ci-tools repo for binaries needed by CIJack Lloyd2017-09-021-11/+14
|\ \
| * | Fix qemu packageJack Lloyd2017-09-021-1/+1
| | | | | | | | | | | | The qemu-user-static package installs them under different names.
| * | Use botan-ci-tools repo for packagesJack Lloyd2017-09-021-11/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Largely the goal with that is to reduce dependencies, especially removing www.randombit.net from the critical path for CI. Other marginally related attempts at speeding up CI - Only install qemu-user-static (which should be all we need) instead of the full qemu metapackage. - Avoid running brew update, all we need is ccache and really any version is fine.
* | | Bump up Travis maxfilesJack Lloyd2017-09-021-1/+1
| |/ |/| | | | | | | | | | | The coverage build has 2 obj files per source file, and it ends up bumping up against the max files limit and suffering excessive misses. [ci skip]
* | Add --dump-traces option to tls_serverJack Lloyd2017-09-022-2/+19
| |
* | Add a todoJack Lloyd2017-09-021-0/+2
| |
* | Document how to use TLS-AttackerJack Lloyd2017-09-021-0/+18
| |
* | Add a script for running TLS-Attacker, remove old shell scriptsJack Lloyd2017-09-0215-163/+202
| | | | | | | | [ci skip]
* | s/MAYOR/MAJOR/Jack Lloyd2017-09-021-2/+2
| |
* | Merge GH #1176 Sort isa_extensions listJack Lloyd2017-09-024-14/+11
|\ \
| * | Sort isa_extensions lists [ci skip]Simon Warta2017-09-024-14/+11
| |/ | | | | | | this removes the duplicate "sha" in x86_64
* | Merge GH #1177 Add --cc-min-versionJack Lloyd2017-09-021-30/+49
|\ \ | |/ |/|
| * Remove case cc_min_version == None in compatible_compilerSimon Warta2017-09-021-8/+4
| | | | | | | | | | This does not happen anymore. cc_min_version is set to 0.0 in case of auto-detection error
| * Rename --cc-version to --cc-min-versionSimon Warta2017-09-021-25/+27
| |
| * Implement --cc-versionSimon Warta2017-09-021-11/+32
|/
* Change http://botan.randombit.net to https URIsJack Lloyd2017-09-015-7/+7
| | | | | | Not a big deal since the site already uses HSTS, but whatever. [ci skip]
* Add a CLI util for inspecting TLS client hellosJack Lloyd2017-09-011-0/+111
|
* De-inline accessor functions in Client_Hello typeJack Lloyd2017-09-012-93/+130
| | | | | This class is exposed but the extension types aren't, so calls to these functions from outside the library would not link.
* Fix --error-output= option to cliJack Lloyd2017-09-011-3/+3
| | | | [ci skip]
* Merge GH #1173 Correct TLS signature hash policy checkJack Lloyd2017-09-015-18/+62
|\
| * Don't try enforcing the hash policy for PSK ciphersuitesJack Lloyd2017-09-011-1/+1
| | | | | | | | Since we don't end up signing anything in any case.
| * Enforce signature hash policy properlyJack Lloyd2017-08-315-18/+62
| | | | | | | | | | | | | | | | Previously if the client did not send signature_algorithms, or if it only included algos not in the policy, we would just fallback to the hardcoded SHA-1 default of TLS v1.2 Instead check the policy before accepting anything.
* | Merge GH #1174 Simplify AppVeyor build config closes #1172Jack Lloyd2017-09-011-50/+22
|\ \
| * | Simplifiy AppVeyor config, single debug build on VC2017Jack Lloyd2017-09-011-50/+22
| |/
* / Just skip Sonar build if SONAR_TOKEN is not setJack Lloyd2017-09-011-10/+5
|/ | | | | | This is the case for a PR coming from an external repo [ci skip]
* Rename file to match conventionsJack Lloyd2017-08-311-0/+0
| | | | [ci skip]
* Fix missing virtual destructor on CSP_HandleJack Lloyd2017-08-313-3/+4
| | | | Caught by GCC cross compiling. Also fix a couple 0-as-null warnings.
* Bump ccache size on TravisJack Lloyd2017-08-311-2/+2
| | | | | | | I think the problem with caching on the fuzzer build is the files are large due to debug iterators + debug symbols + ASan. So compiling the latter half of the build ends up flushing out most of the files cached from the first half of the build.
* Remove python3 dep from cli_testsJack Lloyd2017-08-311-1/+1
| | | | It runs fine under python2
* Update newsJack Lloyd2017-08-311-2/+11
|
* Simplify RNG logic in CLI a bitJack Lloyd2017-08-312-15/+13
|
* Merge GH #1169 Add LLVM bitcode targetJack Lloyd2017-08-3114-123/+200
|\
| * Use object list argument, other lint nitsJack Lloyd2017-08-311-4/+3
| |
| * Fix MSVC buildJack Lloyd2017-08-311-0/+3
| | | | | | | | | | The nmake build does something different here and I don't want to mess with it too much right now.
| * Work around limitation in old GCC and ClangJack Lloyd2017-08-311-1/+1
| |
| * Add support for fuzzing with KLEEJack Lloyd2017-08-303-32/+65
| | | | | | | | | | | | For the fuzzers, builds an object and then links in a second step, because we need that to link the fuzzer binaries for LLVM. (Clang will emit bitcode for us, but doesn't want to link it.)
| * Add support for LLVM bitcode targetJack Lloyd2017-08-3010-21/+51
| |
| * Refactor RNG seeding logic in command line interfaceJack Lloyd2017-08-302-69/+81
| | | | | | | | | | This is needed for LLVM which doesn't have any usable entropy sources. Also useful for determinsitic private key creation, etc.
* | Make shellcheck happyJack Lloyd2017-08-311-6/+0
| | | | | | | | | | I have no idea if an empty if/then/fi block in shell is valid or not but anyway shellcheck doesn't like it so remove it.
* | Reorder Travis build to run fastest targets firstJack Lloyd2017-08-311-4/+4
| |