summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* build, s_client: Support certificates filePatrick McDermott2020-08-082-18/+36
|
* s_client: Enable wolfSSL debug msgs if not quietPatrick McDermott2020-08-071-1/+6
|
* NEWS, configure.ac: Set version to 1.0.0Patrick McDermott2020-08-052-2/+2
|
* scripts/announce-release.sh: Update URL in sigPatrick McDermott2020-07-201-1/+1
|
* tests/badssl.sh: Drop sha1-intermediatePatrick McDermott2020-07-201-2/+1
| | | | | | This subdomain is defunct with an expired certificate: https://github.com/chromium/badssl.com/pull/445
* tests/badssl.sh: badssl.com certs are expiringPatrick McDermott2020-07-201-2/+6
|
* tests/badssl.sh: Organize outputPatrick McDermott2020-07-201-3/+5
|
* Rename package and executable to wolfutilPatrick McDermott2020-07-2010-52/+52
|
* Makefile.am: Generate ChangeLogPatrick McDermott2019-10-011-0/+10
|
* Makefile.am: Fix copyright yearsPatrick McDermott2019-09-301-1/+1
|
* Update copyright noticesPatrick McDermott2019-09-058-7/+8
| | | | | | Copyrights in my contributions to this package were transferred to Libiquity LLC by a contract executed 2019-09-04. And as of this writing, this package has not yet been published.
* s_client: Don't save wolfSSL_get_error() valuePatrick McDermott2019-08-041-2/+1
|
* s_client: Merge assignment and conditionalPatrick McDermott2019-08-041-2/+1
| | | | No change to binary, just bumming one line of source code.
* s_client: Merge more conditionalsPatrick McDermott2019-08-041-15/+11
|
* s_client: Make a NULL condition explicitPatrick McDermott2019-08-041-1/+1
|
* s_client: Don't manually enable curvesPatrick McDermott2019-08-031-96/+0
| | | | They're apparently already enabled.
* README: Wrap at 72 columns, not 80Patrick McDermott2019-08-031-13/+13
|
* Rename executable to wolfsslPatrick McDermott2019-08-036-14/+14
|
* README: Stronger by default than openssl s_clientPatrick McDermott2019-08-031-0/+13
|
* s_client: Use wolfSSL DN check code, not extra APIPatrick McDermott2019-08-032-19/+4
| | | | | | And drop --enable-opensslextra option recommendation in README. Also, check SNI name, not host name.
* README: Recommend a strong wolfSSL configurationPatrick McDermott2019-08-031-0/+20
|
* build: Add Organization header to announcementsPatrick McDermott2019-08-021-0/+1
|
* build: Set GIT_DIR earlier in announce scriptPatrick McDermott2019-08-011-2/+2
|
* MD5SUMS, SHA256SUMS: Exclude from GitPatrick McDermott2019-08-011-0/+2
|
* build: Support announcing first versionPatrick McDermott2019-08-011-4/+6
|
* build: Add release targetPatrick McDermott2019-08-012-1/+180
|
* build: Save user CFLAGSPatrick McDermott2019-08-011-1/+2
|
* tests/aux/json.sh: Fix continue not in a loopPatrick McDermott2019-08-011-1/+1
| | | | | | | | | | | | Fixes the following error with Bash: [...]/tests/aux/json.sh: line 144: continue: only meaningful in a `for', `while', or `until' loop json.sh: syntax: /given_cipher_suites/1 json.sh: syntax: / json.sh: syntax: / Oddly, Dash treats continue outside a loop as return, which is undefined behavior.
* tests/howsmyssl.sh: New test scriptPatrick McDermott2019-08-012-1/+69
|
* tests/aux/json.sh: New filePatrick McDermott2019-08-012-1/+404
|
* build: Include debugging symbols in Git buildsPatrick McDermott2019-07-311-2/+5
|
* build: Fix stray printf format specifierPatrick McDermott2019-07-311-1/+1
|
* Revert "build: Disable address sanitization by default"Patrick McDermott2019-07-312-1/+43
| | | | This reverts commit 0c9789c85ca4542697fbfae82f1ed412ab2b2dbe.
* build: Search several possible CA certificate pathsPatrick McDermott2019-07-311-12/+26
|
* build: Make CA root certificates path configurablePatrick McDermott2019-07-312-2/+41
| | | | | Use of installed CA root certificates can also be disabled entirely, but that just breaks everything.
* build: Drop GCC version check for warningsPatrick McDermott2019-07-301-2/+1
| | | | I think this was a copy/paste accident.
* build: Disable address sanitization by defaultPatrick McDermott2019-07-302-43/+1
|
* README: Use name "wolfssl-util" in first sentencePatrick McDermott2019-07-301-4/+4
|
* README: SSL is disabled by default by wolfSSLPatrick McDermott2019-07-301-3/+3
| | | | And not enabled at all by wolfssl-util.
* NEWS: I forgot articlePatrick McDermott2019-07-301-2/+2
|
* build: Drop vestige of GettextPatrick McDermott2019-07-301-1/+1
|
* Revert "s_client: Enable secure renegotiation"Patrick McDermott2019-07-301-7/+1
| | | | | | | This reverts commit 6cd7b5568ce306de755bc8fff3488feedf161901. It seems a call to either wolfSSL_Rehandshake() or wolfSSL_SecureResume() is necessary, as in wolfSSL's example client.
* s_client: Enable secure renegotiationPatrick McDermott2019-07-301-1/+7
| | | | | | | | Although this causes a SIGSEGV in wolfSSL_X509_check_host(): #0 0x00007ffff7babca2 in wolfSSL_X509_check_host () from /usr/local/lib/libwolfssl.so.19 #1 0x0000555555555d3f in s_client (argc=0, argv=0x7fffffffe3b8) at src/s_client.c:382 #2 0x000055555555545a in main (argc=6, argv=0x7fffffffe388) at src/main.c:42
* s_client: Enable OCSP staplingPatrick McDermott2019-07-301-0/+11
|
* Revert "tests/ocsp-stapling.sh: New test script"Patrick McDermott2019-07-302-39/+1
| | | | | | | | This reverts commit 990942046a013e4eab23499cd32218bf046791aa. Apparently, even with OCSP stapling, wolfSSL still performs CRL and OCSP lookups. Is there a way to disable CRL and OCSP when a stapled OCSP response is found in the handshake?
* tests/ocsp-stapling.sh: New test scriptPatrick McDermott2019-07-302-1/+39
|
* s_client: Enable OCSP before CRLPatrick McDermott2019-07-301-4/+4
| | | | | Revocation methods are apparently used in the order in which they're enabled.
* s_client: Require HAVE_CRL_IO for CRLPatrick McDermott2019-07-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some reason this causes the expiry test to fail: FAIL: tests/badssl.sh 1 - not expired PASS: tests/badssl.sh 2 - not wrong.host PASS: tests/badssl.sh 3 - not self-signed PASS: tests/badssl.sh 4 - not untrusted-root PASS: tests/badssl.sh 5 - not revoked PASS: tests/badssl.sh 6 - no-common-name FAIL: tests/badssl.sh 7 - no-subject PASS: tests/badssl.sh 8 - not incomplete-chain XFAIL: tests/badssl.sh 9 - not sha1-intermediate # TODO PASS: tests/badssl.sh 10 - sha256 PASS: tests/badssl.sh 11 - sha384 PASS: tests/badssl.sh 12 - sha512 PASS: tests/badssl.sh 13 - not 1000-sans PASS: tests/badssl.sh 14 - not 10000-sans PASS: tests/badssl.sh 15 - ecc256 PASS: tests/badssl.sh 16 - ecc384 PASS: tests/badssl.sh 17 - rsa2048 PASS: tests/badssl.sh 18 - rsa4096 PASS: tests/badssl.sh 19 - not rsa8192 PASS: tests/badssl.sh 20 - extended-validation PASS: tests/badssl.sh 21 - not http PASS: tests/badssl.sh 22 - not cbc PASS: tests/badssl.sh 23 - not rc4-md5 PASS: tests/badssl.sh 24 - not rc4 PASS: tests/badssl.sh 25 - not 3des PASS: tests/badssl.sh 26 - not null XFAIL: tests/badssl.sh 27 - not mozilla-old # TODO PASS: tests/badssl.sh 28 - mozilla-intermediate PASS: tests/badssl.sh 29 - mozilla-modern PASS: tests/badssl.sh 30 - not dh480 PASS: tests/badssl.sh 31 - not dh512 PASS: tests/badssl.sh 32 - not dh1024 PASS: tests/badssl.sh 33 - dh2048 XFAIL: tests/badssl.sh 34 - not dh-small-subgroup # TODO PASS: tests/badssl.sh 35 - not dh-compsite PASS: tests/badssl.sh 36 - not static-rsa PASS: tests/badssl.sh 37 - not tls-v1-0 PASS: tests/badssl.sh 38 - not tls-v1-1 PASS: tests/badssl.sh 39 - tls-v1-2 ============================================================================ Testsuite summary for Unofficial wolfSSL Utility 0.1.0 (33-gb52e29a-dirty) ============================================================================ # TOTAL: 39 # PASS: 34 # SKIP: 0 # XFAIL: 3 # FAIL: 2 # XPASS: 0 # ERROR: 0 ============================================================================ See ./test-suite.log Please report to mailto:patrick.mcdermott@libiquity.com ============================================================================
* s_client: Enable CRLPatrick McDermott2019-07-301-0/+4
|
* build: Use -fltoPatrick McDermott2019-07-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Size difference: wolfssl-util: file format elf64-x86-64 Sections: Idx Name Size VMA LMA File off Algn 0 .interp 0000001c 0000000000000238 0000000000000238 00000238 2**0 CONTENTS, ALLOC, LOAD, READONLY, DATA 1 .note.ABI-tag 00000020 0000000000000254 0000000000000254 00000254 2**2 CONTENTS, ALLOC, LOAD, READONLY, DATA 2 .hash 00000158 0000000000000278 0000000000000278 00000278 2**3 CONTENTS, ALLOC, LOAD, READONLY, DATA 3 .dynsym 00000468 00000000000003d0 00000000000003d0 000003d0 2**3 CONTENTS, ALLOC, LOAD, READONLY, DATA 4 .dynstr 000002c6 0000000000000838 0000000000000838 00000838 2**0 CONTENTS, ALLOC, LOAD, READONLY, DATA 5 .gnu.version 0000005e 0000000000000afe 0000000000000afe 00000afe 2**1 CONTENTS, ALLOC, LOAD, READONLY, DATA 6 .gnu.version_r 00000030 0000000000000b60 0000000000000b60 00000b60 2**3 CONTENTS, ALLOC, LOAD, READONLY, DATA 7 .rela.dyn 00000420 0000000000000b90 0000000000000b90 00000b90 2**3 CONTENTS, ALLOC, LOAD, READONLY, DATA 8 .init 00000017 0000000000000fb0 0000000000000fb0 00000fb0 2**2 CONTENTS, ALLOC, LOAD, READONLY, CODE 9 .plt 00000010 0000000000000fd0 0000000000000fd0 00000fd0 2**4 CONTENTS, ALLOC, LOAD, READONLY, CODE 10 .plt.got 00000118 0000000000000fe0 0000000000000fe0 00000fe0 2**3 CONTENTS, ALLOC, LOAD, READONLY, CODE - 11 .text 000007a2 0000000000001100 0000000000001100 00001100 2**4 + 11 .text 00000792 0000000000001100 0000000000001100 00001100 2**4 CONTENTS, ALLOC, LOAD, READONLY, CODE - 12 .fini 00000009 00000000000018a4 00000000000018a4 000018a4 2**2 + 12 .fini 00000009 0000000000001894 0000000000001894 00001894 2**2 CONTENTS, ALLOC, LOAD, READONLY, CODE - 13 .rodata 0000017e 00000000000018b0 00000000000018b0 000018b0 2**3 + 13 .rodata 0000017e 00000000000018a0 00000000000018a0 000018a0 2**3 CONTENTS, ALLOC, LOAD, READONLY, DATA - 14 .eh_frame_hdr 00000034 0000000000001a30 0000000000001a30 00001a30 2**2 + 14 .eh_frame_hdr 00000034 0000000000001a20 0000000000001a20 00001a20 2**2 CONTENTS, ALLOC, LOAD, READONLY, DATA - 15 .eh_frame 000000ec 0000000000001a68 0000000000001a68 00001a68 2**3 + 15 .eh_frame 000000ec 0000000000001a58 0000000000001a58 00001a58 2**3 CONTENTS, ALLOC, LOAD, READONLY, DATA 16 .init_array 00000008 0000000000201cc0 0000000000201cc0 00001cc0 2**3 CONTENTS, ALLOC, LOAD, DATA 17 .fini_array 00000008 0000000000201cc8 0000000000201cc8 00001cc8 2**3 CONTENTS, ALLOC, LOAD, DATA 18 .jcr 00000008 0000000000201cd0 0000000000201cd0 00001cd0 2**3 CONTENTS, ALLOC, LOAD, DATA 19 .dynamic 000001d0 0000000000201cd8 0000000000201cd8 00001cd8 2**3 CONTENTS, ALLOC, LOAD, DATA 20 .got 00000158 0000000000201ea8 0000000000201ea8 00001ea8 2**3 CONTENTS, ALLOC, LOAD, DATA 21 .data 00000008 0000000000202000 0000000000202000 00002000 2**3 CONTENTS, ALLOC, LOAD, DATA 22 .bss 00000010 0000000000202020 0000000000202020 00002008 2**5 ALLOC 23 .comment 00000026 0000000000000000 0000000000000000 00002008 2**0 CONTENTS, READONLY
[next]
generated by cgit v0.9.1 at 2024-11-26 15:22:06 (EST)