1. 02 Feb, 2019 1 commit
  2. 15 Jan, 2019 1 commit
    • Nathaniel Wesley Filardo's avatar
      Update TLS protocol support (#2587) · 6e95d74f
      Nathaniel Wesley Filardo authored
      * Update TLS protocol support
      
      TLS1.0 is past PCI's EOL; BEAST is no more
      Enable elliptic curve key exchanges
      	Do not enable the smallest ECs for security
      	Do not enable the largest ECs for computational time
      	Do not enable 25519 (sad) because it doesn't go across the wire
      Drop non-PFS key exchanges
      Drop ARC4, Blowfish, DES, genprime, XTEA code
      Drop renegotiation support completely
      	It takes so much heap that it's not likely to work out well
      
      Tidy handling of SSL_BUFFER_SIZE
      
      Update docs
      Drop mention of startcom, since they are no more, for letsencrypt
      
      * Update mbedtls to 2.7.7
      
      Preserve our vsnprintf and platform hacks
      
      * Introduce TLS maximum fragment size knob
      
      Reduce buffer size to 4Ki by default and advertize that.  That's the
      largest we can advertize with the TLS MFL extension, so there's no
      point in making them larger.  The truly adventurous can re-raise
      SSL_BUFFER_SIZE and undefine the SSL_MAX_FRAGMENT_LENGTH_CODE and get
      back to the earlier behavior.
      
      * Default to mbedTLS debug with DEVELOP_VERSION
      6e95d74f
  3. 13 Mar, 2018 1 commit
    • Nathaniel Wesley Filardo's avatar
      Update to sdk 2.2 · c972d86e
      Nathaniel Wesley Filardo authored
      Initial commit for
      https://github.com/nodemcu/nodemcu-firmware/issues/2225 .
      
      Replay patches from Espressif's repository at
      https://github.com/espressif/ESP8266_NONOS_SDK between tags v2.1.0 and
      v2.2.0:
      
      	0001-sync-from-ccca00f2.patch
      
      		Superseded by existing changes, but lines reordered in app/driver/key.c
      		to minimize divergences.
      
      	0002-sync-from-3f38ad5a.patch
      
      		Upstream files only
      
      	0003-Update-links.patch
      
      		Not meaningful to NodeMCU
      
      	0004-sync-from-01990ad0.patch
      	0005-sync-from-cdf6877d.patch
      
      		Upstream files only
      
      	0006-sync-from-f29e744c.patch
      
      		Upstream files only, user_interface.h override non-conflicting
      
      	0009-feat-lwip-Move-lwip-source-code-to-third_party-folde.patch
      
      		Merged change to lwip/app/espconn_udp.c; rest is just moves or
      		appears to not apply.
      
      	0010-feat-mbedtls-Add-mbedtls-source-code-in-third_party-.patch
      
      		Does not apply; we use our own mbedtls
      
      	0011-added-C-support.patch
      
      		Merged to Makefile
      
      	0012-feat-mbedtls-Rebuild-libmbedtls.patch
      
      		Already ...
      c972d86e
  4. 03 Mar, 2018 1 commit
    • Nathaniel Wesley Filardo's avatar
      Update mbedTLS to 2.7.0 (#2267) · 5c8af3c4
      Nathaniel Wesley Filardo authored
      * mbedtls 2.7.0 (mbedtls-2.7.0-0-g32605dc8)
      
      Wholesale import, with a few changes from earlier preserved through.
      Ideally we would soon get to the point of having no divergences from
      upstream.
      
      * tls: add function to adjust mbedTLS debug level
      5c8af3c4
  5. 31 Dec, 2016 1 commit
    • Yury Popov's avatar
      Net functionality rewrite on top of LWIP (#1379) · 3adba91b
      Yury Popov authored
      * Rewrite net.dns.resolve on LWIP
      
      * Move IGMP (net multicast) to LWIP
      
      * Cleanup net module
      
      * Move secure connection operations to tls module
      
      * Net module on LWIP
      
      * Server timeout parameter
      
      * TCP hold
      
      * Fixes in documentation
      
      * Documentation fixes
      
      * Note TLS module depends on net
      
      * Add TLS module to user_modules.h
      
      * Callback on connect event
      
      * Fix depends net module on tls module
      
      * Fix unhold exponential time issue
      3adba91b