aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Add a few more tests of the test suite codeJack Lloyd2018-01-301-2/+56
|
* Fix copy paste errorJack Lloyd2018-01-302-2/+2
|
* Add function to query if filesystem support is enabled.Jack Lloyd2018-01-304-80/+63
| | | | Makes for much simpler code.
* Merge GH #1434 Avoid unnecessary allocations in SHA-3 finalizationJack Lloyd2018-01-305-71/+697
|\
| * WhitespaceJack Lloyd2018-01-301-5/+5
| |
| * Use copy_out_vec_le instead of explicit loop in SHA-3 and KeccakJack Lloyd2018-01-302-4/+2
| |
| * Reorganize SHA-3 source file [ci skip]Jack Lloyd2018-01-301-35/+35
| | | | | | | | Put all the statics at beginning followed by member functions.
| * Add a set of SHAKE-128 test vectors from NIST CAVSJack Lloyd2018-01-301-0/+627
| |
| * Avoid allocating zero bytes for SHA-3 paddingJack Lloyd2018-01-304-27/+28
| | | | | | | | Inspired by #1433
* | For hash/mac speed tests finalize the computation under the timerJack Lloyd2018-01-301-1/+6
| | | | | | | | | | | | Otherwise this misses the perf difference between SHAKE-128(512) and SHAKE-128(5120000) all the extra computation happens in the final function.
* | Have to remove sessions on client sideJack Lloyd2018-01-301-1/+1
|/ | | | | Clearing server side state doesn't help because we resume with a session ticket.
* Move FFI tests to sub-functionsJack Lloyd2018-01-301-235/+292
| | | | Add a test for hostname match function
* Add botan_x509_cert_hostname_matchJack Lloyd2018-01-302-0/+15
|
* Add test for non-null pointerJack Lloyd2018-01-301-0/+9
|
* Improve X.509 documentationJack Lloyd2018-01-291-1/+9
| | | | GH #1428
* Catch exceptions from subprocess in build_docs [ci skip]Jack Lloyd2018-01-291-6/+12
| | | | If eg binary file not found, this just crashed with no useful diagnostic.
* Move generic TLS tests to test_tls.cppJack Lloyd2018-01-285-211/+310
| | | | | | Leaves unit_tls.cpp for the handshake level tests. Add some basic tests of the string<->enum conversions in tls_algos.h
* Reorder signature scheme listJack Lloyd2018-01-281-12/+20
| | | | Now PSS shows up first and we negotiate it by default ;)
* Use enums to represent TLS signature and kex algorithms.Jack Lloyd2018-01-2827-747/+1171
| | | | Adds support for PSS signatures (currently verifying only).
* Avoid resuming a session if policy doesn't allow itJack Lloyd2018-01-283-6/+7
| | | | Previously if the policy changed we'd continue to resume. #1431
* Blind attempt at fixing #1431Jack Lloyd2018-01-281-3/+2
|
* Fix a leak in OpenSSL block ciphersJack Lloyd2018-01-281-0/+3
| | | | Introduced when support for 1.1.0 API was added in #1056
* Merge GH #1395 Add info on server-desired CA names to client cert callbackJack Lloyd2018-01-275-601/+329
|\
| * Add tests for server passing CA names for client authJack Lloyd2018-01-271-596/+289
| |
| * For TLS client auth add callback giving list of trusted CA namesJack Lloyd2018-01-274-5/+40
| | | | | | | | Fixes #1261
* | In client hello printer, don't require the handshake headerJack Lloyd2018-01-271-11/+8
|/
* Fix a few warningsJack Lloyd2018-01-272-3/+3
|
* Update TLS parser testsJack Lloyd2018-01-272-6/+6
| | | | | Now all extensions are parsed at least to the extent of creating an unknown extension object.
* Make it possible to test custom extensionsJack Lloyd2018-01-274-269/+331
|
* Add an examine callback alsoJack Lloyd2018-01-277-11/+45
|
* Add ability for application to control which TLS extensions are usedJack Lloyd2018-01-279-1/+56
| | | | GH #1186
* Fix speed test of cipher modes [ci skip]Jack Lloyd2018-01-273-5/+6
| | | | | Add BOTAN_HAS_CIPHER_MODES which is an easier to read/remember macro than BOTAN_HAS_MODES
* Merge GH #1385 Remove TLS compression negotitation logicJack Lloyd2018-01-2411-118/+60
|\
| * Remove vestigial support for TLS compressionJack Lloyd2018-01-2111-118/+60
| | | | | | | | | | It was never supported and never will be. Removing negotiation entirely simplifies the code a bit.
* | Remove iostream includes [ci skip]Jack Lloyd2018-01-242-2/+0
| |
* | Merge GH #1429 Improve application ability to set extensions in PKCS10 requestsJack Lloyd2018-01-239-281/+360
|\ \
| * | Allow applications to easily override extensions in cert requestsJack Lloyd2018-01-239-281/+360
| |/ | | | | | | | | | | | | | | | | | | | | | | | | Refactor the code so it's possible to create a cert request without going through x509self.h (PKCS10_Request::create). Add Extensions::add_new, so we can add an extension to a PKCS10 request without stomping on one already included by the application. Refactor the X509 unit tests to avoid (some) duplicated key creations. Just create a key once at the start and use it for all of the tests. GH #1428
* | Comments from code reviewKrzysztof Kwiatkowski2018-01-223-7/+73
| |
* | FFI function for Elgamal key generationKrzysztof Kwiatkowski2018-01-213-48/+81
| | | | | | | | | | Adds function for Elgamal key generation that allows usage of 'p' chosen by the caller.
* | FFI function for DSA key generationKrzysztof Kwiatkowski2018-01-213-7/+35
|/ | | | | Adds function for DSA key generation that allows usage of 'p' and 'q' chosen by the caller.
* Fix headers of command line docsJack Lloyd2018-01-211-1/+2
| | | | | | | Sphinx and rst2man want slightly different things, so just edit the Sphinx-formatted ReST into a file in build dir Fixes #1398
* Fix a bug in command line handlingJack Lloyd2018-01-211-9/+12
| | | | | | | If --help was provided to a command line that required at least one argument (such as hmac), a usage error would be shown before the help output. But we should not require any arguments if the --help option is given since no arguments will be used in that case.
* Add Pipe::prepend_filterJack Lloyd2018-01-213-2/+45
| | | | Fixes #1402
* Avoid using CMAKE_CURRENT_LIST_DIRJack Lloyd2018-01-191-4/+4
| | | | Blind attempt at fixing GH #1424
* Build fix when threads are disabled [ci skip]Jack Lloyd2018-01-191-0/+2
| | | | GH #1423
* Merge GH #1421 Fix documentation errorJack Lloyd2018-01-191-1/+1
|\
| * Fix documentation of DataSource::end_of_data.Marcus Brinkmann2018-01-191-1/+1
| |
* | Reorganize code to avoid cli/test build failures if filesystem disabledJack Lloyd2018-01-1912-277/+301
|/ | | | Fixes #1422
* Merge GH #1420 Changes to (eventually) allow making BER_Object members privateJack Lloyd2018-01-1819-196/+257
|\
| * Prepare for making BER_Object members privateJack Lloyd2018-01-1819-196/+257
| | | | | | | | | | Now there are usable accessors that allow the library to avoid using BER_Object members directly.