TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-04-05 20:15:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • f070a5e5d5 Document how PSA identifiers are generally constructed Gilles Peskine 2022-06-20 18:40:45 +02:00
  • 36aeb7f163 Merge pull request #5834 from mprse/HKDF_1 Gilles Peskine 2022-06-20 15:27:46 +02:00
  • c3e9abedff Add change log Ronald Cron 2022-06-17 17:23:06 +02:00
  • 12657cdcc6 Remove binary int use Werner Lewis 2022-06-20 11:47:57 +01:00
  • 90c46c376b Use consistent test case names Werner Lewis 2022-06-20 11:46:58 +01:00
  • 2f1d51070c Fix incorrect param in function declaration Werner Lewis 2022-06-20 11:45:01 +01:00
  • 9a2356b190 Add tests for exceeded buffer size Werner Lewis 2022-06-17 15:51:55 +01:00
  • b3acb053fb Add mbedtls_x509_dn_get_next function Werner Lewis 2022-06-17 15:59:58 +01:00
  • eb8570f174 Fix missing newline Dave Rodgman 2022-06-17 14:59:36 +01:00
  • 5cab9dafb7 fix whitespace Dave Rodgman 2022-06-17 13:48:29 +01:00
  • 46b5cb553a Add test-case for checking curve order Dave Rodgman 2022-06-17 13:41:18 +01:00
  • 57080461f7 Add test-case for checking curve order Dave Rodgman 2022-06-17 13:41:18 +01:00
  • 719c723afc test_suite_ssl: Use a zero fragment offset in a test with a too short record Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-15 07:19:40 -04:00
  • 6b4f062cde Fix incorrect changelog entry Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 12:00:52 -04:00
  • 3c036f54cc Add missing test dependencies for cookie parsing Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 11:57:57 -04:00
  • 4353d3d593 Split a debug message into two - for clarity Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 11:53:59 -04:00
  • 33f41a8fa8 Add the mbedtls prefix to ssl_check_dtls_clihlo_cookie Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 11:47:33 -04:00
  • a39170bbed Add a changelog entry for the cookie parsing bounds bug Co-authored-by: Gilles Peskine <Gilles.Peskine@arm.com> Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-06 14:54:58 -04:00
  • 862acb8403 Add cookie parsing tests to test_suite_ssl Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-06 13:08:23 -04:00
  • e5af9fabf7 Add missing sid_len in calculations of cookie sizes This could lead to a potential buffer overread with small MBEDTLS_SSL_IN_CONTENT_LEN. Change the bound calculations so that it is apparent what lengths and sizes are used. Andrzej Kurek 2022-06-06 14:42:41 -04:00
  • f333dfab4a More SSL debug messages for ClientHello parsing Gilles Peskine 2022-02-15 23:53:36 +01:00
  • 44baacd089 Update documenation of PSA_ALG_RSA_PSS Tuvshinzaya Erdenekhuu 2022-06-17 10:25:05 +01:00
  • 8988e23690 Add missing break Tuvshinzaya Erdenekhuu 2022-06-17 10:19:56 +01:00
  • 30c5a2520e tls13: Fix certificate key usage checks Ronald Cron 2022-06-16 19:31:06 +02:00
  • d28f5a98f1 ssl-opt.sh: Add certificate key usage tests for TLS 1.3 Ronald Cron 2022-06-16 19:27:25 +02:00
  • 903c979376 programs: ssl: Add one RSA PSS signature algorithm Ronald Cron 2022-06-16 16:55:31 +02:00
  • ca3c6a5698 Merge pull request #5817 from xkqian/tls13_add_server_name Ronald Cron 2022-06-16 08:30:09 +02:00
  • 6194053feb ASN.1: test that we can parse what we can write Gilles Peskine 2022-06-15 21:17:25 +02:00
  • b7e215f6bc Fix copypasta in test data Gilles Peskine 2022-06-15 21:16:42 +02:00
  • 755ddff25c Fix print format in a debug message Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-15 07:31:40 -04:00
  • ca35f5bed0 test_suite_ssl: Use a zero fragment offset in a test with a too short record Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-15 07:19:40 -04:00
  • cbe14ec967 Improve variable extracting operations by using MBEDTLS_GET macros Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-15 07:17:28 -04:00
  • 75fe8c7e54 Change place of ssl_tls13_check_ephemeral_key_exchange XiaokangQian 2022-06-15 09:42:45 +00:00
  • 4ccd226cbf Merge pull request #5864 from xkqian/tls13_add_comprehensive_cases Ronald Cron 2022-06-15 09:18:11 +02:00
  • fb665a8452 Adress the comments about styles and pick_cert XiaokangQian 2022-06-15 03:57:21 +00:00
  • 6c9fd61565 exercise_key_agreement_key: add special handling for HKDF_EXPAND Przemek Stekiel 2022-06-14 14:41:42 +02:00
  • 7cf872557a Rearrange the session resumption code Previously, the transforms were populated before extension parsing, which resulted in the client rejecting a server hello that contained a connection ID. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-14 07:12:33 -04:00
  • d898745f70 exercise_key_agreement_key: provide SALT for HKDF_EXTRACT Przemek Stekiel 2022-06-14 11:41:52 +02:00
  • 69c4679b22 Adapt macro name to meet requested criteria: MBEDTLS_PSA_BUILTIN_ALG_ANY_HKDF->BUILTIN_ALG_ANY_HKDF Przemek Stekiel 2022-06-10 12:59:51 +02:00
  • 3ed16231ab Refine server side SNI test cases XiaokangQian 2022-06-14 08:24:04 +00:00
  • 07aad0710c Refine function name ssl_tls13_pick_key_cert XiaokangQian 2022-06-14 05:35:09 +00:00
  • 81802f43a2 Select certificate base on the received signature list XiaokangQian 2022-06-10 13:25:22 +00:00
  • b7c12a466f Refactor compat scripts Jerry Yu 2022-06-12 20:53:02 +08:00
  • 2c2730a372 ASN.1 write tests: test with larger buffer Gilles Peskine 2022-06-10 20:15:44 +02:00
  • 321a08944b Fix bug whereby 0 was written as 0200 rather than 020100 Gilles Peskine 2022-06-10 20:13:33 +02:00
  • c9a30fba74 Add MPI write tests when the MPI object has a leading zero limb Gilles Peskine 2022-06-10 20:12:45 +02:00
  • 0ab804a794 Fix mismatch between test data and test description Gilles Peskine 2022-06-10 20:12:25 +02:00
  • d8579b7673 Uncomment mbedtls_asn1_write_mpi tests with leading 1 bit Gilles Peskine 2022-06-10 20:10:37 +02:00
  • 96d5439da5 Fix incorrect changelog entry Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 12:00:52 -04:00
  • 9b938b7c37 Share code with base class in generate_tls13_compat_tests.py XiaokangQian 2022-06-10 03:10:59 +00:00
  • fb1a3fe7f3 Address comments about python syntax XiaokangQian 2022-06-09 06:37:33 +00:00
  • ae25bb043c Fix null pointer dereference in mpi_mod_int(0, 2) Gilles Peskine 2022-06-09 19:32:46 +02:00
  • 9b3278b263 Doc: the SHA256/SHA512 options also cover SHA224/SHA384 Gilles Peskine 2022-06-09 19:09:38 +02:00
  • 76c1c6b9c1 Changelog: minor copyediting Gilles Peskine 2022-06-09 18:51:18 +02:00
  • e1efbf7f36 Changelog: when adding a new function, state its name Gilles Peskine 2022-06-09 18:50:50 +02:00
  • c23a6d4feb Changelog: make some long entries about TLS 1.3 more to the point Gilles Peskine 2022-06-09 18:50:06 +02:00
  • 26a51cfe54 Changelog: list deprecations in the dedicated section Gilles Peskine 2022-06-09 18:49:07 +02:00
  • 8df3623bee Changelog: clarify some cmake-related entries as being about cmake Gilles Peskine 2022-06-09 18:48:21 +02:00
  • fed024dd52 Changelog: mention bug id in bugfix entry Gilles Peskine 2022-06-09 18:44:51 +02:00
  • d99083f7a4 Changelog: remove bugfix entry that's actually a robustness improvement Gilles Peskine 2022-06-09 18:38:35 +02:00
  • 3ea721e234 Changelog: Remove redundant entry about USE_PSA_CRYPTO in reduced configs Gilles Peskine 2022-06-09 18:36:47 +02:00
  • 10301d4322 Changelog: Consolidate and clarify Armv8 SHA2 acceleration support Gilles Peskine 2022-06-09 18:32:22 +02:00
  • 2e22ecbd09 Add guide to implementing new cryptographic mechanisms Gilles Peskine 2022-06-09 17:35:03 +02:00
  • f30ff75137 List all markdown files in makefile Gilles Peskine 2022-06-09 17:33:51 +02:00
  • 75fe3fb1d7 psa_crypto.c: add MBEDTLS_PSA_BUILTIN_ALG_ANY_HKDF macro to limit number of #if conditions Przemek Stekiel 2022-06-09 14:44:55 +02:00
  • b1847a234e Re-structure to share more common code XiaokangQian 2022-06-08 07:49:31 +00:00
  • ed4d217874 Add missing test dependencies for cookie parsing Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 11:57:57 -04:00
  • b58cf0d172 Split a debug message into two - for clarity Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 11:53:59 -04:00
  • 078e9bcda6 Add the mbedtls prefix to ssl_check_dtls_clihlo_cookie Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-08 11:47:33 -04:00
  • 02c9d3b9c2 Fix parsing of special chars in X509 DN values Werner Lewis 2022-05-20 12:48:46 +01:00
  • 271c3052fb Merge pull request #5892 from AndrzejKurek/ssl-opt-client-kill-fix Paul Elliott 2022-06-08 14:27:01 +01:00
  • 7e163d796c Merge pull request #5893 from AndrzejKurek/ssl-opt-client-kill-fix-2.28 Paul Elliott 2022-06-08 14:26:42 +01:00
  • ce02537b0c Merge pull request #5828 from wernerlewis/time_utc_2.28 Dave Rodgman 2022-06-08 13:55:38 +01:00
  • 11930699f1 Merge pull request #5827 from wernerlewis/time_utc Dave Rodgman 2022-06-08 13:54:19 +01:00
  • 5f2bc754d6 Merge pull request #5792 from yuhaoth/pr/add-tls13-moving-state-tests Paul Elliott 2022-06-08 13:39:52 +01:00
  • 3a833271aa Merge pull request #5727 from SiliconLabs/feature/PSEC-3207-TLS13-hashing-HMAC-to-PSA Manuel Pégourié-Gonnard 2022-06-08 11:53:35 +02:00
  • 96287d98d8 Remove the certificate key check against the received signature XiaokangQian 2022-06-08 08:37:53 +00:00
  • d9aaf768b5 Fixing CI complains. Signed-off-by: pespacek <peter.spacek@silabs.com> pespacek 2022-06-08 09:44:11 +02:00
  • 5313f034b4 Add change log Ronald Cron 2022-05-31 12:29:00 +02:00
  • 9850fa8e8d Refine ssl_tls13_pick_cert() XiaokangQian 2022-06-08 06:58:05 +00:00
  • b088a900f4 test_suite_psa_crypto_storage_format: disable KA(ECDH,HKDF_EXTRACT/EXPAND...) test cases Przemek Stekiel 2022-06-07 15:34:18 +02:00
  • d9e1287e64 crypto_config_test_driver_extension.h add HKDF_EXTRACT/EXPAND algs Przemek Stekiel 2022-06-07 14:19:39 +02:00
  • b06acd734b Fixing PSA return status Signed-off-by: pespacek <peter.spacek@silabs.com> pespacek 2022-06-07 13:07:21 +02:00
  • 23c5be6b94 Enable SNI test for both tls12 and tls13 XiaokangQian 2022-06-07 02:04:34 +00:00
  • 00e5eaad62 test: ssl: Remove more TLS 1.2 dependencies in handshake state tests Ronald Cron 2022-06-07 10:38:29 +02:00
  • bdddaef9bb test: ssl: Enable client authentication in handshake state tests Ronald Cron 2022-06-07 10:34:59 +02:00
  • 209cae9c42 tls13: server: Fix state update in CLIENT_CERTIFICATE Ronald Cron 2022-06-07 10:30:19 +02:00
  • 670913f4dc Fixing return value for ssl_tls13_write_certificate_body() Signed-off-by: pespacek <peter.spacek@silabs.com> pespacek 2022-06-07 10:53:39 +02:00
  • 4b55a89327 Merge pull request #5887 from tom-daubney-arm/mbedtls_x509_crt_ext_types_accessor Dave Rodgman 2022-06-06 21:51:38 +01:00
  • e6487ab490 Add a changelog entry for the cookie parsing bounds bug Co-authored-by: Gilles Peskine <Gilles.Peskine@arm.com> Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-06 14:54:58 -04:00
  • cfb01948c8 Add cookie parsing tests to test_suite_ssl Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-06-06 13:08:23 -04:00
  • c8183cc492 Add missing sid_len in calculations of cookie sizes This could lead to a potential buffer overread with small MBEDTLS_SSL_IN_CONTENT_LEN. Change the bound calculations so that it is apparent what lengths and sizes are used. Andrzej Kurek 2022-06-06 14:42:41 -04:00
  • d27cdcc16f Fix a bug with executing ssl-client2 in ssl-opt.sh in a subshell When executing eval in the background, the next "$!" gives the eval PID, not the ssl-client2 pid. This causes problems when a client times out and the script tries to kill it. Instead, it kills the parent eval call. This caused problems with subsequent proxy tests receiving old packets from a client from a previous test. Moving the "&" to inside the eval call fixes the problem. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-05-27 06:44:19 -04:00
  • 140b589ec6 Fix a bug with executing ssl-client2 in ssl-opt.sh in a subshell When executing eval in the background, the next "$!" gives the eval PID, not the ssl-client2 pid. This causes problems when a client times out and the script tries to kill it. Instead, it kills the parent eval call. This caused problems with subsequent proxy tests receiving old packets from a client from a previous test. Moving the "&" to inside the eval call fixes the problem. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com> Andrzej Kurek 2022-05-27 06:44:19 -04:00
  • 364fd8bb71 More SSL debug messages for ClientHello parsing Gilles Peskine 2022-02-15 23:53:36 +01:00
  • 5c9c2ce86d Add correct test dependencies Thomas Daubney 2022-06-06 16:36:43 +01:00
  • a5f39e0ec2 Move accessor definition Thomas Daubney 2022-06-06 15:42:32 +01:00
  • 5e03d9e601 Merge pull request #5837 from robert-shade/robert-shade/add_subdirectory_support Dave Rodgman 2022-06-06 14:11:06 +01:00
  • b57a44bf9b is_kdf_alg_supported: Adapt impl to new build flags for HKDF EXTRACT/EXPAND Przemek Stekiel 2022-06-06 08:33:45 +02:00
  • 221391b3d2 generate_psa_tests.py: REVERT adapt OpFail test generator for HKDF-Exract/Expand algs Przemek Stekiel 2022-06-06 07:56:41 +02:00