hostap/src/tls
Jouni Malinen 34c1b75c82 TLS: Only allow 0xff value as TRUE for ASN.1 DER encoded BOOLEAN
While BER encoding allows any nonzero value to be used for TRUE, DER is
explicitly allowing only the value 0xff. Enforce this constraint in
X.509 parsing to be more strict with what is acceptable.

Signed-off-by: Jouni Malinen <j@w1.fi>
2019-06-22 18:27:36 +03:00
..
.gitignore Add rules for building src/tls/libtls.a and use it with eap_example 2009-12-06 16:27:54 +02:00
asn1.c TLS: Fix ASN.1 parsing with no room for the header 2019-02-11 02:35:29 +02:00
asn1.h TLS: Fix and complete ASN.1 tag list 2015-12-13 22:12:07 +02:00
bignum.c bignum: Fix documentation for bignum_cmp_d() 2019-03-05 16:10:33 +02:00
bignum.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
libtommath.c Remove trailing whitespace 2016-12-28 14:31:42 +02:00
Makefile TLS: Parse CertificateStatus message 2015-12-14 15:49:01 +02:00
pkcs1.c TLS: Use os_memcmp_const() for hash/password comparisons 2014-07-02 12:38:47 +03:00
pkcs1.h PKCS 1: Add function for checking v1.5 RSA signature 2014-05-20 19:52:18 +03:00
pkcs5.c TLS: Extend PKCS #5 to support PKCS #12 style key decryption 2015-12-14 15:49:01 +02:00
pkcs5.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
pkcs8.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
pkcs8.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
rsa.c Remove trailing whitespace 2016-12-28 14:31:42 +02:00
rsa.h Add function for building RSA public key from n and e parameters 2014-05-19 23:27:30 +03:00
tlsv1_client.c TLS: Add support for RFC 5705 TLS exporter context with internal TLS 2019-03-16 18:52:09 +02:00
tlsv1_client.h TLS: Add support for RFC 5705 TLS exporter context with internal TLS 2019-03-16 18:52:09 +02:00
tlsv1_client_i.h TLS: Parse CertificateStatus message 2015-12-14 15:49:01 +02:00
tlsv1_client_ocsp.c TLS client: Multi-OCSP check to cover intermediate CAs 2015-12-24 00:54:30 +02:00
tlsv1_client_read.c TLS client: Fix peer certificate event checking for probing 2019-02-10 01:43:50 +02:00
tlsv1_client_write.c tests: TLS fuzzing tool 2019-02-11 02:35:29 +02:00
tlsv1_common.c Remove trailing whitespace 2016-12-28 14:31:42 +02:00
tlsv1_common.h TLS server: OCSP stapling with ocsp_multi option (RFC 6961) 2015-12-22 20:44:52 +02:00
tlsv1_cred.c Use os_memdup() 2017-03-07 13:19:10 +02:00
tlsv1_cred.h TLS server: OCSP stapling with ocsp_multi option (RFC 6961) 2015-12-22 20:44:52 +02:00
tlsv1_record.c TLS: Use os_memcmp_const() for hash/password comparisons 2014-07-02 12:38:47 +03:00
tlsv1_record.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
tlsv1_server.c TLS: Add support for RFC 5705 TLS exporter context with internal TLS 2019-03-16 18:52:09 +02:00
tlsv1_server.h TLS: Add support for RFC 5705 TLS exporter context with internal TLS 2019-03-16 18:52:09 +02:00
tlsv1_server_i.h TLS server: Add internal callbacks get_failed, get_*_alerts 2019-02-10 01:43:50 +02:00
tlsv1_server_read.c TLS server: Local failure information on verify_data mismatch 2019-02-10 01:43:50 +02:00
tlsv1_server_write.c tests: TLS fuzzing tool 2019-02-11 02:35:29 +02:00
x509v3.c TLS: Only allow 0xff value as TRUE for ASN.1 DER encoded BOOLEAN 2019-06-22 18:27:36 +03:00
x509v3.h TLS client: Multi-OCSP check to cover intermediate CAs 2015-12-24 00:54:30 +02:00