Commit Graph

127 Commits (6eefcd61dfc09365b41ee31f4a5d7d8a6ce782f9)

Author SHA1 Message Date
Michael Zillgith 8ac478f629 - fixed typo in comment 2 months ago
Michael Zillgith 899a2bbe2e - merged HAL code from lib60870 (release/2.3.3) 8 months ago
Michael Zillgith 6dbdb1636c - TLS: fixed - certificate not validated when allow only allowed certificate is selected and certificate is matching (LIB61850-473)
- TLS: Added option to ignore validity times in certificates and CRLs (LIB61850-474)
9 months ago
Michael Zillgith b86806ef13 - .NET API: added support for server side log service (LIB61850-461) 11 months ago
Michael Zillgith 830059fca2 - HAL (Linux): fixed problem with Hal_getTimeInNs on 32 bit systems 1 year ago
Michael Zillgith d309018340 - TLS: fixed memory leak in TLSConiguration (I6PLLCV-99)
- TLS: configured default TLS 1.3 cipher suites as defined in IEC 62351-3:2023
1 year ago
Michael Zillgith fef8f94751 - some updates for mbedtls 3.6 integration (LIB61850-448) 1 year ago
Michael Zillgith 6830e85d8c - added code and cmake build system support for mbedtls 3.6 1 year ago
Michael Zillgith d7b7ed6a18 - replaced select by poll in linux hal (LIB61850-416)(#463) 1 year ago
Michael Zillgith 34366ce284 - R-GOOSE/R-SMV can now also be compiled on Windows without winpcap
- SMV subscriber: removed legacy compatibility functions
1 year ago
Michael Zillgith 5d7dd6160b Merge branch 'v1.6_develop' into v1.6_develop_rgoose_sntp__merge_develop 1 year ago
Michael Zillgith f80e81abc6 Merge branch 'v1.6_develop_tls_cipher_suite_444' into v1.6_develop 1 year ago
Michael Zillgith 625fb65e50 Merge branch 'v1.6_develop' into v1.6_develop_rgoose_sntp__merge_develop 1 year ago
Michael Zillgith 1ed5ab3a4e - ethernet_linux: renamed ethernetSocket to self 1 year ago
Michael Zillgith c37cc76f9b - Linux Ethernet Socket: set interface to promisc mode by default 1 year ago
Michael Zillgith affe0ed1d0 - code format updates 1 year ago
Michael Zillgith 9f93d7d035 - integrated code to set TLS cipher suites in TLSConfiguration (LIB61850-444) 1 year ago
Michael Zillgith 69b7b28e84 - HAL socket: added missing initialization of address structure 1 year ago
Federico Francescon 790e3e6714
fix: ssl renegotiation causing handshake failure (#494)
* feat: added semaphore around `TLSSocket_performHandshake`

* fix: improved error checking in TLS read and write

* removed useless semaphore for renegotiation lock

* added some tls debug and cleared the session renegotiation events

* using mbedtls API instead of using internals

* fixed deadlock situation with TLSSocket_read

* test fix sonarcloud minor notice

* still some sonarcloud minor things

---------

Co-authored-by: Federico Francescon <federico.francescon@higeco.com>
1 year ago
Michael Zillgith 7faf053e67 Merge branch 'v1.6_develop' into v1.6_develop_rgoose_sntp 2 years ago
Michael Zillgith e57dcc7214 - PAL: fixed wrong order of function arguments for fread and fwrite functions 2 years ago
Michael Zillgith da62fe854f Merge branch 'v1.6_develop' into v1.6_develop_rgoose_sntp 2 years ago
Michael Zillgith 24babeb2f9 - GOOSE subscriber: fixed - possible heap corruption in parseAllData due to missing validity check in bit-string handling (LIB61850-402) 2 years ago
Michael Zillgith 6895d8214b - MMS server: add function to ignore client requests (for test purposes) 3 years ago
Michael Zillgith eba36fec65 - renamed TLSConfiguration_EventLevel to TLSEventLevel 3 years ago
Michael Zillgith 97923e7238 - updated required mbedtls version to 2.28.x 3 years ago
Michael Zillgith 21903710ad - applied coding style 3 years ago
Federico Francescon 5a8d3effec Added check for changed CRL on socket read/write. Added reset of renegotiation ssl cache on CRL add 3 years ago
Federico Francescon e5c9f2e267 Fixing Security events messages to match IEC62351-100-3 3 years ago
Federico Pellegrin 9ddb10faea tls: add method to reset used CRL (certificate revocation list)
Add a method to be able to reset the CRL, otherwise any previously
added CRL will stay there until the object is totally destroyed.
This proves to be needed for cases when we need to delete the
CRL (ie. it expired) during the lifetime of the server.
3 years ago
Michael Zillgith 3ad8da23b6 - fixed wrong number in TLS event code define (LIB61850_366) 3 years ago
Michael Zillgith f61c58dd35 - added TLSConnection object to provide more context in TLS event callback (LIB61850-366) 3 years ago
Michael Zillgith e0e1e3b6f4 - fixed bug in windows UDP socket implementation (WSA was not started)
(LIB61850-360)
3 years ago
Michael Zillgith 6836063414 - removed duplicate code in socket_linux.c (LIB61850-360) 3 years ago
Michael Zillgith cec871f2e3 - make rsession code compatible with MSVC (LIB61850-360) 3 years ago
Michael Zillgith f3eab207e8 - added UDP socket functions to Macos socket interface implementatio (LIB61850-360) 3 years ago
Michael Zillgith 90372ced72 - merged R-GOOSE/R-SMV/SNTP code from v1.5_sntp_rsv feature branch (LIB61850-360) 3 years ago
Federico Pellegrin 4b06fd3b6e tls: fix order of operations to copy peer certificate
The memcpy is done before assigning the length, so the length is not
set and is therefore either 0 (so no peer certificate will be available)
or a random number (that can lead to crashes) making the feature not work.

The MR simply copies first the length that will make the memcpy work.
3 years ago
Federico Pellegrin d427179250 TLS: update CRL load time also when loading from file
Similarly as done when loading a CRL directly, this allows to
have the CA chain recalculated for ongoing connections also when
using CRLs from files.
3 years ago
Michael Zillgith f778868fa0 - removed some VC++ warnings 3 years ago
Michael Zillgith 87b4ead369 - TLS: added TLS alert callbacks; support for session resumption with session IDs (LIB61850-339) 3 years ago
Michael Zillgith 795b6cfba8 - fixed path traversal vulnerability in MMS file services (LIB61850-357) 3 years ago
Michael Zillgith 9f09152d7c - fixed - TLS: CRL is ignored 3 years ago
Michael Zillgith b444fba88c - added more debug output for linux socket driver 3 years ago
Michael Zillgith 377d708f4e - enabled TLS 1.2 support in mbedtls configuration 3 years ago
Michael Zillgith f0651adb36 - add GOOSE subscriber/Ethernet layer support to listen to specific multicast messages 4 years ago
Michael Zillgith 2adb4dec23 - BSD socket HAL: make server side connection sockets non-blocking (LIB61850-243) 4 years ago
Michael Zillgith 258651eca8 Merge branch 'v1.5_issue_243' into v1.5_develop 4 years ago
Michael Zillgith d7b48a891e - updated cmake minimum version requirement to 3.5.1 4 years ago
Michael Zillgith 8aa988068c - MacOS thread layer: replaced semaphore by mutex 4 years ago