Commit Graph

  • 96b8d31ef6 ASN.1: test that we can parse what we can write Gilles Peskine 2022-06-15 21:17:25 +02:00
  • 53875878b8 Fix copypasta in test data Gilles Peskine 2022-06-15 21:16:42 +02:00
  • 53785928fa ASN.1 write tests: test with larger buffer Gilles Peskine 2022-06-10 20:15:44 +02:00
  • bb34feea0d Fix bug whereby 0 was written as 0200 rather than 020100 Gilles Peskine 2022-06-10 20:13:33 +02:00
  • 62f217b180 Add MPI write tests when the MPI object has a leading zero limb Gilles Peskine 2022-06-10 20:12:45 +02:00
  • 4269185aa1 Fix mismatch between test data and test description Gilles Peskine 2022-06-10 20:12:25 +02:00
  • 7f56783a0a Uncomment mbedtls_asn1_write_mpi tests with leading 1 bit Gilles Peskine 2022-06-10 20:10:37 +02:00
  • aae28f178b add tests Jerry Yu 2022-06-29 16:21:32 +08:00
  • 2fe6c638e2 remove supported check from parse sig algs Jerry Yu 2022-06-29 10:02:38 +08:00
  • 959e5e030b fix format issue Jerry Yu 2022-06-29 09:49:02 +08:00
  • 660cb4209c Remove pkcs1 from key cert and sig alg map Jerry Yu 2022-06-28 16:17:58 +08:00
  • 71b18844ff fix various issues Jerry Yu 2022-06-27 23:01:49 +08:00
  • 05d5f81c20 Fix spelling and formatting consistency Werner Lewis 2022-06-29 09:19:29 +01:00
  • 9d3e2fa372 Add negative tests Jerry Yu 2022-06-27 22:14:01 +08:00
  • 2f244c43b4 Merge pull request #5980 from mprse/md_dep_fix Manuel Pégourié-Gonnard 2022-06-29 10:18:41 +02:00
  • c2e0493e6e Add rsa_pkcs1 for cert sig match Jerry Yu 2022-06-27 22:13:03 +08:00
  • cc5391048e fix various issues Jerry Yu 2022-06-27 16:27:35 +08:00
  • 202919c23d refine supported sig alg print Jerry Yu 2022-06-27 16:21:00 +08:00
  • ee28e7a21d add tests for select sig alg Jerry Yu 2022-06-24 19:35:40 +08:00
  • a0bb906c9f fix handshake_version test fail. Jerry Yu 2022-06-24 17:04:12 +08:00
  • aebaaaf527 add debug messages Jerry Yu 2022-06-24 13:14:36 +08:00
  • 64f410c246 Add tls13 sig alg parameters Jerry Yu 2022-06-24 13:09:27 +08:00
  • 430db6b6ff Remove hack fix for server hybrid issue Jerry Yu 2022-06-24 13:05:28 +08:00
  • a1255e6b8c fix various issues Jerry Yu 2022-06-24 10:10:47 +08:00
  • 9bb3ee436b Revert rsa_pss_rsae_* support for tls12 Jerry Yu 2022-06-23 10:16:33 +08:00
  • 53f5c15155 Add debug message Jerry Yu 2022-06-22 20:24:38 +08:00
  • 80dd5db808 Remove pkcs1 from certificate verify. Jerry Yu 2022-06-22 19:30:32 +08:00
  • d4a71a57a8 Add tls12 algorithms in hybrid mode client hello Jerry Yu 2022-06-22 14:42:59 +08:00
  • 5ef71f2723 remove rsa_pkcs1_* from tls13 support list Jerry Yu 2022-06-22 14:03:16 +08:00
  • f085678879 remove unnecessary check Jerry Yu 2022-06-22 13:59:31 +08:00
  • 6272c4d4aa Revert unnecessary space change Jerry Yu 2022-06-22 13:46:55 +08:00
  • 96ee23eb88 fix tls12 openssl/gnutls server fail Jerry Yu 2022-06-21 16:34:57 +08:00
  • ba5e379697 Revert order of default sig_algs Jerry Yu 2022-06-21 15:26:05 +08:00
  • 3f71ca0941 Remove rsa_pss_rsae_* from tls12 sig_algs Jerry Yu 2022-06-21 14:42:03 +08:00
  • 0c6be8f863 move big function Jerry Yu 2022-06-20 20:42:00 +08:00
  • 3896ac6e5b fix ordered sig algs fail for openssl Jerry Yu 2022-06-19 17:16:38 +08:00
  • f3b46b5082 Add debug message Jerry Yu 2022-06-19 16:52:27 +08:00
  • d099cf0325 fix unused variable issue Jerry Yu 2022-06-19 13:47:00 +08:00
  • f55886a217 fix various issues Jerry Yu 2022-06-19 11:48:56 +08:00
  • 6babfee178 remove out of scope codes Jerry Yu 2022-06-19 11:31:53 +08:00
  • fb526693c1 Rename sig_alg cert_key check Jerry Yu 2022-06-19 11:22:49 +08:00
  • a6076aa8b8 Revert temp test Jerry Yu 2022-06-17 18:52:43 +08:00
  • f0cda410a4 remove default sig_hashes Jerry Yu 2022-06-17 14:29:46 +08:00
  • 7ab7f2b184 Remove pkcs1 from certificate_verify Jerry Yu 2022-06-16 19:07:10 +08:00
  • 08524c55f9 remove pkcs1_* support Jerry Yu 2022-06-16 16:58:57 +08:00
  • 0ebce95785 create tls12/tls13 sig alg support check Jerry Yu 2022-06-16 13:54:47 +08:00
  • 9f4cc5ff65 Add pss_rsae sig algs into test conf Jerry Yu 2022-06-16 11:40:44 +08:00
  • f249ef7821 refactor get sig algo from pk Jerry Yu 2022-06-15 17:23:33 +08:00
  • 7898fd456a Merge pull request #5970 from gabor-mezei-arm/5229_Send_dummy_change_cipher_spec_records_from_server Ronald Cron 2022-06-29 09:47:49 +02:00
  • 7d0e658386 Re-enable 7 tests disabled in mbedtls-2.28 because of an old OpenSSL bug Zhangsen Wang 2022-06-29 07:33:35 +00:00
  • bd10c4e2af Test accessors to config DN hints for cert request Glenn Strauss 2022-06-25 03:15:48 -04:00
  • 87a9c86d87 Re-enable five tests disabled because of an old OpenSSL bug Zhangsen Wang 2022-06-28 06:10:35 +00:00
  • d86abf2392 Merge pull request #5861 from wernerlewis/csr_subject_comma Gilles Peskine 2022-06-28 21:00:49 +02:00
  • 06c5e929ba Merge pull request #5863 from wernerlewis/csr_subject_comma_2.28 Gilles Peskine 2022-06-28 21:00:47 +02:00
  • d0aafa6cc1 Merge pull request #5984 from gilles-peskine-arm/changelog-improvements-20220609-2.28 Gilles Peskine 2022-06-28 21:00:12 +02:00
  • 7d14c19730 Merge pull request #5905 from gilles-peskine-arm/changelog-improvements-20220609-development Gilles Peskine 2022-06-28 21:00:10 +02:00
  • 999ef70b27 Add accessors to config DN hints for cert request Glenn Strauss 2022-03-11 01:37:23 -05:00
  • 2407279fa4 Add tests with specific hash for handshake_ciphersuite_select positive tests Neil Armstrong 2022-06-27 14:43:30 +02:00
  • 9f1176a793 Move preferred_hash_for_sig_alg() check after ssl_pick_cert() and check if hash alg is supported with mbedtls_pk_can_do_ext() Neil Armstrong 2022-06-24 18:19:19 +02:00
  • ed917bf548 Update description for negative key_opaque_algs tests Neil Armstrong 2022-06-24 15:03:25 +02:00
  • 9f4606e6d2 Rename mbedtls_ssl_get_ciphersuite_sig_pk_ext_XXX in mbedtls_ssl_get_ciphersuite_sig_pk_ext_XXX() Neil Armstrong 2022-06-24 15:00:50 +02:00
  • 8c52ed8d1e Add negative testing of ciphersuite selection using Opaque algs & usage Neil Armstrong 2022-05-27 13:14:55 +02:00
  • eb4390b27c Add Cipersuite selection negative testing by using invalid algs for server-side opaque key Neil Armstrong 2022-05-27 10:26:02 +02:00
  • 0c9c10a401 Introduce mbedtls_ssl_get_ciphersuite_sig_pk_ext_alg() and use it in ssl_pick_cert() Neil Armstrong 2022-05-12 14:15:06 +02:00
  • 9e4b7bd199 Do not force TLS 1.3 on client side for TLS 1.3 middlebox compatibility tests Gabor Mezei 2022-06-28 16:22:14 +02:00
  • f7044eaec8 Fix name Gabor Mezei 2022-06-28 16:01:49 +02:00
  • e99ec7cb6a Merge pull request #5908 from ronald-cron-arm/tls13-fixes-doc Ronald Cron 2022-06-28 12:16:17 +02:00
  • 9f2596f387 Add MBEDTLS_POLY1305_C and MBEDTLS_CHACHA20_C Summer Qin 2022-06-17 12:50:32 +08:00
  • 96ae926572 Typo Gabor Mezei 2022-06-28 11:45:18 +02:00
  • 5471912269 Move switching to handshake transform after sending CCS record Gabor Mezei 2022-06-28 11:34:56 +02:00
  • 05ebf3be74 Revert "Do not encrypt CCS records" Gabor Mezei 2022-06-28 11:55:35 +02:00
  • 4dc874453e ssl_tls13_parse_certificate_verify(): optimize the code Przemek Stekiel 2022-06-28 11:05:42 +02:00
  • 273453f126 Merge pull request #5983 from gstrauss/inline-mbedtls_x509_dn_get_next Manuel Pégourié-Gonnard 2022-06-28 10:13:58 +02:00
  • 6b14c69277 Improve documentation Ronald Cron 2022-06-24 13:45:04 +02:00
  • 11b5332ffc tls13: Fix certificate extension size write Ronald Cron 2022-06-01 14:58:52 +02:00
  • 139d0aa9d3 Fix typo in documentation Ronald Cron 2022-06-14 18:45:44 +02:00
  • 81a334fc02 tls13: Fix buffer overread checks in ssl_tls13_parse_alpn_ext() Ronald Cron 2022-05-31 16:04:11 +02:00
  • 585cd70d04 tests: ssl: Fix coverity deadcode issue Ronald Cron 2022-06-10 15:02:05 +02:00
  • 7b8404608a tls13: Rename ssl_tls13_write_hello_retry_request_coordinate Ronald Cron 2022-06-01 17:05:53 +02:00
  • fb508b8f21 tls13: Move state changes up to state main handler Ronald Cron 2022-05-31 14:49:55 +02:00
  • 63dc463ed6 tls13: Simplify switch to the inbound handshake keys on server side Ronald Cron 2022-05-31 14:41:53 +02:00
  • 5afb904022 tls13: Move out of place handshake field reset Ronald Cron 2022-05-31 12:11:39 +02:00
  • 828aff6ead tls13: Rename server_hello_coordinate to preprocess_server_hello Ronald Cron 2022-05-31 12:04:31 +02:00
  • db5dfa1f1c tls13: Move ServerHello fetch to the ServerHello top handler Ronald Cron 2022-05-31 11:44:38 +02:00
  • 44b23b10e1 tls13: Document TLS 1.3 handshake implementation Ronald Cron 2022-05-31 16:05:13 +02:00
  • 9d6a545714 tls13: Re-organize EncryptedExtensions message parsing code Ronald Cron 2022-05-30 16:05:38 +02:00
  • 154d1b68d6 tls13: Fix wrong usage of MBEDTLS_SSL_CHK_BUF(_READ)_PTR macros Ronald Cron 2022-06-01 15:33:26 +02:00
  • c80835943c tls13: Fix pointer calculation before space check Ronald Cron 2022-05-31 16:24:05 +02:00
  • 2827106199 tls13: Add missing buffer overread check Ronald Cron 2022-06-10 14:43:55 +02:00
  • b94854f8e3 Merge pull request #5973 from ronald-cron-arm/tls13-misc-tests Ronald Cron 2022-06-28 09:15:17 +02:00
  • 83f54aad6a Changelog: minor copyediting Gilles Peskine 2022-06-09 18:51:18 +02:00
  • cd1608914f Changelog: clarify a cmake-related entry as being about cmake Gilles Peskine 2022-06-09 18:48:21 +02:00
  • 8960d0585b Changelog: mention bug id in bugfix entry Gilles Peskine 2022-06-09 18:44:51 +02:00
  • 06900034cb Changelog: remove bugfix entry that's actually a robustness improvement Gilles Peskine 2022-06-09 18:38:35 +02:00
  • 5969a4b5e0 Don't call memcpy(NULL, 0) which has undefined behavior Gilles Peskine 2022-06-27 23:59:20 +02:00
  • bf918b9cfe Use headlinese for added functions, per request Gilles Peskine 2022-06-27 23:34:32 +02:00
  • 3dc9ac95ec Spelling Gilles Peskine 2022-06-27 23:02:58 +02:00
  • ed5c21dc37 Declare deprecated option for no_deprecated configs Gilles Peskine 2022-06-27 23:02:09 +02:00
  • 01d2f52a32 Inline mbedtls_x509_dn_get_next() in x509.h Glenn Strauss 2022-06-27 14:12:44 -04:00
  • 18399d8d53 Add comment to config_psa.h about enabling PSA_HKDF/PSA_HKDF_EXRACT/PSA_HKDF_EXPAND algs Przemek Stekiel 2022-06-27 13:34:50 +02:00