Commit Graph

  • dc7e34ca2e Clarify potential ambiguity in changelog entry Gilles Peskine 2022-06-27 14:47:15 +02:00
  • c9529f9649 Fix null pointer dereference in mpi_mod_int(0, 2) Gilles Peskine 2022-06-09 19:32:46 +02:00
  • 4118092105 Merge pull request #5825 from polhenarejos/mbedtls-2.28 Dave Rodgman 2022-06-27 13:47:31 +01:00
  • f5b7082f6e Merge pull request #5811 from polhenarejos/bug_x448 Dave Rodgman 2022-06-27 13:47:24 +01:00
  • 251ca25d94 Clarify potential ambiguity in changelog entry Gilles Peskine 2022-06-27 14:47:15 +02:00
  • 52396ef622 Remove largely useless bit of test log to silence GCC 12 Gilles Peskine 2022-06-25 14:29:23 +02:00
  • 1421efa25e Fix case where final special char exceeds buffer Werner Lewis 2022-06-27 12:01:22 +01:00
  • 9b0e940135 Fix case where final special char exceeds buffer Werner Lewis 2022-06-27 12:01:22 +01:00
  • 9e30fc94f3 Remove redundant spaces Przemek Stekiel 2022-06-27 12:48:35 +02:00
  • fd8cfe4f8e Replace parsing with outputting Werner Lewis 2022-06-27 09:58:12 +01:00
  • 31ecb9600a Add tests for exceeded buffer size Werner Lewis 2022-06-17 15:51:55 +01:00
  • b33dacdb50 Fix parsing of special chars in X509 DN values Werner Lewis 2022-05-20 12:48:46 +01:00
  • 6a5e01858f ssl_tls13_parse_certificate_verify(): remove md dependency Przemek Stekiel 2022-06-27 11:53:13 +02:00
  • 6230d0d398 mbedtls_x509_sig_alg_gets(): remove md dependency Przemek Stekiel 2022-06-27 11:19:04 +02:00
  • 2ee1e2dd22 Replace parsing with outputting Werner Lewis 2022-06-27 10:03:10 +01:00
  • 4abd7c2545 Minor phrasing changes Werner Lewis 2022-06-27 09:22:49 +01:00
  • 129d6adc0e Use mbedtls-2.28 branch for documentation link Werner Lewis 2022-06-27 09:41:28 +01:00
  • 4b8aaa4e60 Add clarification on 2.x branch choice Werner Lewis 2022-06-27 09:30:11 +01:00
  • f5b86f3b16 Add clarification for 2.x section Werner Lewis 2022-06-27 09:20:01 +01:00
  • cf600bc07c Comment fixes Ronald Cron 2022-06-17 15:54:16 +02:00
  • e0d7367a9e Add change log Ronald Cron 2022-06-17 15:38:26 +02:00
  • 2b1a43c101 tls13: Add missing overread check in Certificate msg parsing. Ronald Cron 2022-06-10 17:03:54 +02:00
  • e7b9b6b380 tls13: Add checks of overread check failures Ronald Cron 2022-06-10 17:24:31 +02:00
  • ad8c17b9c6 tls: Add overread/overwrite check failure tracking Ronald Cron 2022-06-10 17:18:09 +02:00
  • e3dac4aaa1 tls13: Add Certificate msg parsing tests with invalid vector lengths Ronald Cron 2022-06-10 17:21:51 +02:00
  • a8d79b9eb6 ssl-opt.sh: Remove one pattern check Ronald Cron 2022-06-27 09:05:35 +02:00
  • 07040bb179 Merge pull request #5951 from xkqian/tls13_add_alpn Ronald Cron 2022-06-27 08:33:03 +02:00
  • 9738a8d0fd Merge pull request #943 from ronald-cron-arm/tls13-fix-key-usage-checks Ronald Cron 2022-06-27 08:32:17 +02:00
  • 0ff241a1ea Remove largely useless bit of test log to silence GCC 12 Gilles Peskine 2022-06-25 14:29:23 +02:00
  • 668b31f210 Fix the wrong variable being used for TLS record size checks Paul Elliott 2022-06-10 14:11:31 +01:00
  • f8a478795c Add guidance for generating deprecated list Werner Lewis 2022-06-24 11:02:54 +01:00
  • 21a1b2d374 Enable "Sending app data" SSL unit tests for TLS 1.3 Ronald Cron 2022-06-15 17:11:35 +02:00
  • c78511b59a ssl-opt.sh: Enable some authentication tests for TLS 1.3 Ronald Cron 2022-06-15 16:48:34 +02:00
  • 1938588e80 tls13: Align some debug messages with TLS 1.2 ones Ronald Cron 2022-06-15 16:26:13 +02:00
  • a4417c13a1 ssl-opt.sh: Add Small/Large packets TLS 1.3 tests Ronald Cron 2022-06-23 16:06:28 +02:00
  • ba80d4d60b ssl-opt.sh: Enable Event-driven I/O tests for TLS 1.3 Ronald Cron 2022-06-23 16:03:02 +02:00
  • 2cffd284bc ssl-opt.sh: Enable Non-blocking I/O tests for TLS 1.3 Ronald Cron 2022-06-23 15:51:23 +02:00
  • 0b776e282a Change some comments for alpn XiaokangQian 2022-06-24 09:04:59 +00:00
  • 93a7f7d7f8 Merge pull request #5954 from wernerlewis/x509_next_merged Manuel Pégourié-Gonnard 2022-06-24 09:59:22 +02:00
  • fc425ee9a4 Merge pull request #5838 from mprse/HKDF_2 Manuel Pégourié-Gonnard 2022-06-24 09:28:17 +02:00
  • 95d5f549f1 Fix coding styles XiaokangQian 2022-06-24 02:29:26 +00:00
  • 016cec17e8 Add deprecated macros to migration guide Werner Lewis 2022-06-23 12:33:35 +01:00
  • 745fcde406 Add reference to 2.x docs to migration guide Werner Lewis 2022-06-23 12:19:27 +01:00
  • 3e5585b45d Replace TEST_ASSERT macro uses Werner Lewis 2022-06-23 15:12:10 +01:00
  • ac80a66395 Reduce buffer sizes to expected size Werner Lewis 2022-06-23 11:58:02 +01:00
  • 5708b45154 Add a changelog entry for the session resumption + CID bug Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-23 08:00:14 -04:00
  • 4f799fc333 Merge pull request #941 from mpg/buf-overread-use-psa-static-ecdh-dev Manuel Pégourié-Gonnard 2022-06-23 11:57:33 +02:00
  • 8776042e44 Merge pull request #935 from mpg/buf-overread-use-psa-static-ecdh-2.28 Manuel Pégourié-Gonnard 2022-06-23 11:57:29 +02:00
  • ed36d20ea6 Save code size by calling get_type only once Manuel Pégourié-Gonnard 2022-06-23 09:43:39 +02:00
  • 4cfaae5b6b Save code size by calling get_type only once Manuel Pégourié-Gonnard 2022-06-23 09:43:39 +02:00
  • 1b0ebdf363 Zeroize hkdf_label buffer Przemek Stekiel 2022-06-23 09:22:49 +02:00
  • 38ab400dc4 Adapt code to be consistent with the existing code Przemek Stekiel 2022-06-23 09:05:40 +02:00
  • c740345c5b Adress review comments XiaokangQian 2022-06-23 03:24:12 +00:00
  • f9c13fe69f ssl-opt.sh: Add positive check in successful "keyUsage client-auth" tests Ronald Cron 2022-06-22 14:35:17 +02:00
  • ba65fbbe30 Fix comments Ronald Cron 2022-06-22 14:35:05 +02:00
  • 96ec831385 Do not encrypt CCS records Gabor Mezei 2022-06-22 13:17:28 +02:00
  • 7e2dbafe2d Add test for dummy CCS records Gabor Mezei 2022-05-24 16:05:29 +02:00
  • 7b39bf178e Send dummy change_cipher_spec records from TLS 1.3 server Gabor Mezei 2022-05-24 16:04:14 +02:00
  • acb3992251 Add ALPN extension to the server side XiaokangQian 2022-06-17 10:18:48 +00:00
  • b33bd19197 Enable HKDF EXTRACT/EXPAND algs Przemek Stekiel 2022-06-21 09:58:51 +02:00
  • d5ae365b97 Use PSA HKDF-Extrat/Expand algs instead mbedtls_psa_hkdf_extract(), mbedtls_psa_hkdf_xpand() Przemek Stekiel 2022-05-13 12:10:08 +02:00
  • 88e7101d03 Remove mbedtls_psa_hkdf_extract(), mbedtls_psa_hkdf_expand() Przemek Stekiel 2022-05-13 12:08:50 +02:00
  • 0c9e74bd55 Remove mbedtls_psa_hkdf_expand() and mbedtls_psa_hkdf_extract() tests Przemek Stekiel 2022-05-12 14:38:48 +02:00
  • a82a8b9f4b Mark internal int SSL functions CHECK_RETURN_CRITICAL Manuel Pégourié-Gonnard 2022-06-17 10:53:58 +02:00
  • a3115dc0e6 Mark static int SSL functions CHECK_RETURN_CRITICAL Manuel Pégourié-Gonnard 2022-06-17 10:52:54 +02:00
  • 66b0d61718 Add comments when can_do() is safe to use Manuel Pégourié-Gonnard 2022-06-17 10:49:29 +02:00
  • 19a567ba43 Fix impact evaluation Manuel Pégourié-Gonnard 2022-06-16 09:50:04 +02:00
  • 22e84de971 Improve contract of mbedtls_pk_ec/rsa() Manuel Pégourié-Gonnard 2022-06-10 09:48:38 +02:00
  • 1c91b0c434 Clarify warning about mbedtls_pk_ec/rsa() Manuel Pégourié-Gonnard 2022-06-10 09:40:58 +02:00
  • b64fb62ead Fix unchecked return value from internal function Manuel Pégourié-Gonnard 2022-06-10 09:34:20 +02:00
  • 32a38dfec5 Add ChangeLog for potential overread with USE_PSA Manuel Pégourié-Gonnard 2022-06-15 10:50:18 +02:00
  • 5721059281 Mark internal int SSL functions CHECK_RETURN_CRITICAL Manuel Pégourié-Gonnard 2022-06-17 10:32:25 +02:00
  • d904d66639 Mark static int SSL functions CHECK_RETURN_CRITICAL Manuel Pégourié-Gonnard 2022-06-17 10:24:00 +02:00
  • 08b2ebd2be Improve readability with less negation. Manuel Pégourié-Gonnard 2022-06-17 10:11:15 +02:00
  • 06e1fcdb45 Add comments when can_do() is safe to use Manuel Pégourié-Gonnard 2022-06-16 10:48:06 +02:00
  • 8641102bc1 Fix impact evaluation Manuel Pégourié-Gonnard 2022-06-16 09:50:04 +02:00
  • d80d8a40ee Add negative tests for opaque mixed-PSK (server) Manuel Pégourié-Gonnard 2022-06-14 10:53:15 +02:00
  • a49a00cc24 Add negative tests for opaque mixed-PSK (client) Manuel Pégourié-Gonnard 2022-06-14 10:45:19 +02:00
  • 938be422c6 Add negative test for Opaque key & static ECDH Manuel Pégourié-Gonnard 2022-06-14 10:43:36 +02:00
  • b3de3fd68c ssl-opt.sh: adapt paramteters of key opaque cases Przemyslaw Stekiel 2021-10-26 12:25:27 +02:00
  • 67fc488515 ssl_client2/ssl_server_2: use PSA_ALG_ANY_HASH as algorithm for opaque key Przemyslaw Stekiel 2021-10-26 12:21:45 +02:00
  • 331c3421d1 Address review comments Przemyslaw Stekiel 2021-10-21 12:26:58 +02:00
  • 69e567c0e1 ssl_server2.c: fix build err (key_slot - unused variable) Przemyslaw Stekiel 2021-10-07 15:11:32 +02:00
  • 5b6c4c9552 add client/server opaque test Przemyslaw Stekiel 2021-10-06 11:31:49 +02:00
  • ab09c9eb79 Add key_opaque option to ssl_server2.c + test Przemyslaw Stekiel 2021-10-04 11:13:22 +02:00
  • b9c7ea459e Improve a comment. Manuel Pégourié-Gonnard 2022-06-14 09:25:17 +02:00
  • a4a4aab542 Improve contract of mbedtls_pk_ec/rsa() Manuel Pégourié-Gonnard 2022-06-10 09:48:38 +02:00
  • 853f06732e Clarify warning about mbedtls_pk_ec/rsa() Manuel Pégourié-Gonnard 2022-06-10 09:40:58 +02:00
  • 5b3f24f214 Fix unchecked return value from internal function Manuel Pégourié-Gonnard 2022-06-10 09:34:20 +02:00
  • 37e5999ac3 Fix potential buffer overread with USE_PSA Manuel Pégourié-Gonnard 2022-06-10 09:25:01 +02:00
  • e0469b5908 Merge pull request #931 from AndrzejKurek/clihlo_cookie_pxy_fix Gilles Peskine 2022-06-20 19:35:54 +02:00
  • bb54fce91e Merge pull request #944 from AndrzejKurek/clihlo_cookie_pxy_fix_2_28 Gilles Peskine 2022-06-20 19:35:54 +02:00
  • 76851ae3a6 Add warnings to test code and data about storage format stability Gilles Peskine 2022-06-20 19:10:35 +02:00
  • 228d99b57e Document how to interpret negative reports Gilles Peskine 2022-06-20 18:51:44 +02:00
  • 6100d3c93c Remove redundant sentence Gilles Peskine 2022-06-20 18:51:18 +02:00
  • 4b873874a3 Backward compatibility: the key store with drivers Gilles Peskine 2022-06-20 18:50:09 +02:00
  • 9956efaf32 Backward compatibility: the key store Gilles Peskine 2022-06-20 18:48:52 +02:00
  • 43e51fa88c Backward compatibility: add a note about the configuration Gilles Peskine 2022-06-20 18:48:06 +02:00
  • 98473c4523 Officially deprecate MBEDTLS_PSA_CRYPTO_SE_C Gilles Peskine 2022-06-20 18:46:22 +02:00
  • 7973399f7b Add compatibility notes regarding values embedded in the key store Gilles Peskine 2022-06-20 18:41:20 +02:00