Commit Graph

18 Commits (c769c1b58409e2c85c7c0d35d606929964fde780)

Author SHA1 Message Date
Hauke Mehrtens bd20cb272e polarssl: update to version 1.3.17
This fixes 3 minor security problems.
SSLv3 is deactivated by default now.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
8 years ago
Jo-Philipp Wich 9e45f9d63c polarssl: enable AES-GCM and CAMELLIA-GCM ciphersuites
Recent versions of Chrome require this ciphers to successfully handshake with
a TLS enabled uhttpd server using the ustream-polarssl backend.

If `CONFIG_GCM` is disabled, `ssl_ciphersuite_from_id()` will return `NULL`
when cipher `0x9d` is looked up, causing the calling `ssl_ciphersuite_match()`
to fail with `POLARSSL_ERR_SSL_INTERNAL_ERROR`.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
8 years ago
Felix Fietkau b0b0c319f9 polarssl: update to 1.3.16, fixes intermediate certificate validation
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 48257
9 years ago
Hauke Mehrtens b792ea7ac0 polarssl: update to version 1.3.14
This fixes CVE-2015-5291 and some other smaller security issues.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 47201
9 years ago
Felix Fietkau 34cacae2b9 polarssl: disable runtime version checks to save some space
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 45607
9 years ago
Felix Fietkau 434bf8a90b polarssl: disable an unused random number generator
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 45606
9 years ago
Steven Barth 1a014d170a polarssl: bump to 1.3.10, work around rename to mbedtls
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 44361
10 years ago
Jo-Philipp Wich 555492e41a polarssl: patch CVE-2015-1182
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 44060
10 years ago
Steven Barth 6d1d02eefb polarssl: update to 1.3.9
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 43170
10 years ago
Felix Fietkau e5daecce98 polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 42947
10 years ago
Steven Barth 0472c0e22f polarssl: bump to 1.3.8
SVN-Revision: 42061
10 years ago
Steven Barth b5b0381cbb polarssl: bump to 1.3.7
SVN-Revision: 40892
10 years ago
Felix Fietkau 6d270ebc2b polarssl: add support for generating rsa keys
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39999
10 years ago
Felix Fietkau b9825247c2 polarssl: update to version 1.3.4 and add openssl compat patch
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39930
10 years ago
Luka Perkov d6415bf1bd polarssl: update to 1.2.9
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38330
11 years ago
Felix Fietkau 4cd1ace48d polarssl: update to version 1.2.8
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37527
11 years ago
Tim Yardley 8f54ec7ce7 polarssl: security update (1.2.5) addressing CBC TLS issue
Signed-off-by: Tim Yardley <yardley@gmail.com>

SVN-Revision: 35525
12 years ago
Felix Fietkau e4e460afb5 polarssl: add from /packages, update to 1.2.4, fix openssl compatibility
SVN-Revision: 35411
12 years ago