Commit Graph

  • 78e5288a94 Remove obsolete comment Gilles Peskine 2022-04-07 21:56:26 +02:00
  • 6af9dc9c59 Simplify build_mbedtls_config_file Gilles Peskine 2022-04-07 20:55:57 +02:00
  • 7e2a91fcb6 Support alternative MBEDTLS_PSA_CRYPTO_CONFIG_FILE Gilles Peskine 2022-03-16 17:10:48 +01:00
  • 528343513c Improve documentation of MBEDTLS_PSA_CRYPTO_CONFIG Gilles Peskine 2022-03-16 17:03:55 +01:00
  • 781f734bb6 Document MBEDTLS_CONFIG_FILE and MBEDTLS_USER_CONFIG_FILE Gilles Peskine 2022-03-16 17:03:19 +01:00
  • 3577131bb4 Reintroduce trimming of input in mbedtls_mpi_mul_int() Hanno Becker 2022-04-14 11:52:11 +01:00
  • 5dc8a0ac5a Wording improvement Gilles Peskine 2022-04-14 12:46:06 +02:00
  • 58ffcba9d4 Make it explicit that an absolute path is also ok Gilles Peskine 2022-04-14 12:44:16 +02:00
  • 0c4db1f20d Wording improvement Gilles Peskine 2022-04-14 12:44:01 +02:00
  • e2c342b9bf Don't test with all-but-one elliptic curves Gilles Peskine 2022-04-14 12:00:17 +02:00
  • 769dc05597 Remove bad dependency on MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED for ecdh_ctx guard Neil Armstrong 2022-04-13 15:12:43 +02:00
  • 6abc6259d5 Add comment in compat.sh about callers Manuel Pégourié-Gonnard 2022-04-14 09:21:56 +02:00
  • 636b5f10da Add comment in compat.sh about callers Manuel Pégourié-Gonnard 2022-04-14 09:21:56 +02:00
  • 9473229996 Fix compat.sh invocation in basic-built-test.sh Manuel Pégourié-Gonnard 2022-04-14 09:12:10 +02:00
  • b623832176 Fix compat.sh invocation in basic-built-test.sh Manuel Pégourié-Gonnard 2022-04-14 09:12:10 +02:00
  • 45e680e651 Explain why we check that a certain feature is enabled Gilles Peskine 2022-04-13 23:23:21 +02:00
  • db0421b073 More precise explanation of MBEDTLS_PSA_CRYPTO_CONFIG disabled Gilles Peskine 2022-04-13 23:22:49 +02:00
  • f68f43a42e State explicitly USER config files can modify the default config Gilles Peskine 2022-04-13 23:22:20 +02:00
  • 3f49cc14e7 Clarify the "duplicate documentation" remark Gilles Peskine 2022-04-13 23:21:16 +02:00
  • d5793ce273 Document the section "General configuration options" Gilles Peskine 2022-04-13 23:05:10 +02:00
  • 611179c3f5 Fix name mismatch in section end comment Gilles Peskine 2022-04-13 23:04:48 +02:00
  • 5417d48044 Remove mostly-redundant test build Gilles Peskine 2022-04-13 22:47:17 +02:00
  • 2ecf4ff349 Restore explicit version requirement on 1.3 HelloRetryRequest tests Gilles Peskine 2022-04-13 19:08:38 +02:00
  • 70b8a69b20 Add changelog entry for #3998 fix Gilles Peskine 2022-04-13 15:19:16 +02:00
  • c912673f8d Automatically detect protocol version requirement from force_version Gilles Peskine 2022-04-08 19:33:07 +02:00
  • 282750215c Remove PSA only code from non-PSA code block code in ssl_write_client_key_exchange() Neil Armstrong 2022-04-13 15:05:11 +02:00
  • 11d4945248 Simplify compile-time PSA/non-PSA ECDH(E) code in ssl_write_client_key_exchange() Neil Armstrong 2022-04-13 15:03:43 +02:00
  • 1f198d8dee Simplify by moving ssl_check_server_ecdh_params in the ECDHE non-PSA compile-time block Neil Armstrong 2022-04-13 15:02:30 +02:00
  • 913b364a52 Simplify compile-time PSA/non-PSA ECDH(E) code in ssl_parse_client_key_exchange() Neil Armstrong 2022-04-13 14:59:48 +02:00
  • 999930e447 Add RSA PK Wrapped Sign ext tests Neil Armstrong 2022-04-12 15:12:43 +02:00
  • 9220fee17b Enable DTLS_BADMAC_LIMIT Gilles Peskine 2022-04-13 14:20:19 +02:00
  • 6e257b0bc7 Detect requirement on DTLS_BADMAC_LIMIT Gilles Peskine 2022-04-13 14:19:57 +02:00
  • a6f99a1aab Fix crash with DTLS_CONNECTION_ID but not other SSL features Gilles Peskine 2022-04-13 13:24:56 +02:00
  • 740b734f25 Move ticket, alpn detection into maybe_requires_ciphersuite_enabled Gilles Peskine 2022-04-08 19:29:27 +02:00
  • b898b3df90 Prepare to generalize maybe_requires_ciphersuite_enabled Gilles Peskine 2022-04-08 19:26:26 +02:00
  • bcb2ab0cb3 Add a few more protocol version support requirements Gilles Peskine 2022-04-09 00:11:16 +02:00
  • bba3b4c79a Add or fix requirements on FALLBACK_SCSV Gilles Peskine 2022-04-09 00:08:47 +02:00
  • 4b137d1bc4 Automatically detect protocol version requirement from force_version Gilles Peskine 2022-04-08 19:33:07 +02:00
  • 3c985f6b70 Move ticket, alpn detection into maybe_requires_ciphersuite_enabled Gilles Peskine 2022-04-08 19:29:27 +02:00
  • 511fdf435f Prepare to generalize maybe_requires_ciphersuite_enabled Gilles Peskine 2022-04-08 19:26:26 +02:00
  • e70605c28e Add requirement for RC4 tests Gilles Peskine 2022-04-08 17:22:03 +02:00
  • 5a1b3bdc44 Make mbedtls_ssl_get_bytes_avail tests more independent Gilles Peskine 2022-04-06 23:35:56 +02:00
  • a30439a7f9 Fix off-by-one in buffer_size usage Gilles Peskine 2022-04-06 23:34:36 +02:00
  • 736d91dae6 Fix buffer size calculation Gilles Peskine 2022-04-06 23:31:05 +02:00
  • f2e1f47b2e set_maybe_calc_verify: $1 is intended to be auth_mode Gilles Peskine 2022-04-06 22:23:45 +02:00
  • de4cb3569e Add requirements of "Default" Gilles Peskine 2022-04-05 22:00:32 +02:00
  • d5b1a30c2f Documentation improvements Gilles Peskine 2022-04-05 22:00:17 +02:00
  • e719d174c9 Minor documentation improvement Gilles Peskine 2022-04-05 21:52:14 +02:00
  • 22cc649769 Skip some DTLS reordering tests in PSK-only builds Gilles Peskine 2022-03-14 18:21:24 +01:00
  • 64c683fd18 calc_verify is only called in some configurations Gilles Peskine 2022-03-14 17:55:04 +01:00
  • def0e147ab test-ref-configs: clarify configuration-related traces Gilles Peskine 2022-03-14 19:05:48 +01:00
  • 20e25b9012 Simplify the logic to select configurations Gilles Peskine 2022-02-26 18:16:07 +01:00
  • 291372fd41 Add a missing requires_max_content_len Gilles Peskine 2022-02-25 21:02:28 +01:00
  • dcb13af837 ssl-opt needs debug messages Gilles Peskine 2022-02-25 21:00:16 +01:00
  • a4dbfddba2 Add DHE-RSA Opaque PK key tests variants in ssl-opt.sh Neil Armstrong 2022-03-21 10:11:07 +01:00
  • 3e9a142017 Add RSA Opaque PK key tests variants in ssl-opt.sh Neil Armstrong 2022-03-21 10:03:46 +01:00
  • f0b1271a42 Support RSA Opaque PK keys in ssl_server2 Neil Armstrong 2022-03-21 09:31:32 +01:00
  • 296787f75c Rm DES from invocations of compat.sh Manuel Pégourié-Gonnard 2022-04-06 13:28:27 +02:00
  • 4111b73d8f Update comment and default exclude Manuel Pégourié-Gonnard 2022-04-06 13:21:59 +02:00
  • 32df1450f1 Order ciphersuite names alphabetically Joe Subbiani 2021-08-13 13:30:36 +01:00
  • f05fae0f7a Remove unsupported ciphersuites Joe Subbiani 2021-08-10 12:18:35 +01:00
  • 9f84761c66 Removed redundant mode checks Joe Subbiani 2021-08-10 10:41:13 +01:00
  • 6ce6dd9bd7 Add Test generating certificates using an opaque EC key Neil Armstrong 2022-03-17 09:38:50 +01:00
  • 98f899c7a5 Test generating certificates using an opaque RSA key Neil Armstrong 2022-03-16 17:42:42 +01:00
  • 9fb9203182 Test generating CSRs using an opaque RSA key Neil Armstrong 2022-03-16 17:16:46 +01:00
  • 6c242a01f7 Merge pull request #5634 from superna9999/5625-pk-opaque-rsa-basics Manuel Pégourié-Gonnard 2022-04-13 09:55:42 +02:00
  • 0dbf04a9a6 Remove unnecessary memory operations in p25519 quasireduction Hanno Becker 2022-04-13 06:54:48 +01:00
  • 1772e05fca Reduce the scope of local variable in mbedtls_mpi_mul_mpi() Hanno Becker 2022-04-13 06:51:40 +01:00
  • da763de7d0 Revert "Don't trim MPIs to minimal size in mbedtls_mpi_mul_mpi()" Hanno Becker 2022-04-13 06:50:02 +01:00
  • 127fcabb21 Fail gracefully upon unexpectedly large input to p25519 reduction Hanno Becker 2022-04-12 22:18:36 +01:00
  • 89d892ffdd Adapt tests for PSK in PSK-only builds Gilles Peskine 2022-02-25 19:52:52 +01:00
  • 111fde4ce9 Add some missing dependencies: EXTENDED_MASTER_SECRET, CACHE Gilles Peskine 2022-02-25 19:51:52 +01:00
  • dff48c1c65 Only run "Default" tests if the ciphersuite is enabled Gilles Peskine 2022-02-25 19:50:38 +01:00
  • df4ad90a15 ssl-opt: check for protocol version support Gilles Peskine 2022-04-08 15:14:38 +02:00
  • 4502671e0b Automatically skip tests for some absent features: tickets, ALPN Gilles Peskine 2022-02-25 19:47:04 +01:00
  • e5f4958c80 ssl-opt: automatically skip DTLS tests in builds without DTLS Gilles Peskine 2022-02-25 19:46:30 +01:00
  • 83f7108f3d Small DTLS 1.2 config: timing is a default entropy source Gilles Peskine 2022-04-08 16:18:14 +02:00
  • 8c5c2930db New sample/test configuration: small DTLS 1.2 Gilles Peskine 2022-02-25 19:28:00 +01:00
  • a132beb750 Minimal TLS configuration: documentation improvements Gilles Peskine 2022-02-25 19:20:36 +01:00
  • 7c45b6767b Fix the build when MBEDTLS_PLATFORM_C is unset Gilles Peskine 2022-02-25 15:26:13 +01:00
  • 03efa0b8d3 Fix ARIA support in test driver configuration Gilles Peskine 2022-04-12 17:08:34 +02:00
  • 186331875a test_psa_crypto_config_accel_cipher: deactivate CMAC Gilles Peskine 2022-04-12 15:58:03 +02:00
  • 88fed8e700 Rewrite ecdh_curve25519 program Thomas Daubney 2022-04-12 09:03:22 +01:00
  • 62d452baac Implement PK Opaque RSA PSS signature Neil Armstrong 2022-04-12 15:11:49 +02:00
  • f3f46416e3 Remove ecdh_ctx variable, init & free when USE_PSA_CRYPTO isn't selected Neil Armstrong 2022-04-12 14:43:39 +02:00
  • 3ea01498d8 Store TLS1.2 ECDH point format only when USE_PSA_CRYPTO isn't selected Neil Armstrong 2022-04-12 14:41:50 +02:00
  • a33a255dcf Disable non-PSA ECDHE code in mbedtls_ssl_psk_derive_premaster() when USE_PSA_CRYPTO is selected Neil Armstrong 2022-04-12 14:40:47 +02:00
  • d8419ff390 Refactor to make PSA and non-PSA ECDH(E) client code exclusive Neil Armstrong 2022-04-12 14:39:12 +02:00
  • d91526c17f Refactor to make PSA and non-PSA ECDH(E) server code exclusive Neil Armstrong 2022-04-12 14:38:52 +02:00
  • 927410ded3 Merge pull request #5611 from superna9999/5318-tls-ecdhe-psk Manuel Pégourié-Gonnard 2022-04-12 13:28:02 +02:00
  • bb04cb992f Fix check in p25519 quasi-reduction Hanno Becker 2022-04-12 11:18:11 +01:00
  • d830feb256 Simplify check in p25519 quasi-reduction Hanno Becker 2022-04-12 11:10:19 +01:00
  • 2ef0cff6c3 Fix size check in p25519 modular reduction Hanno Becker 2022-04-12 10:55:34 +01:00
  • 0235f7512f Reduce scope of local variables in mpi_montmul() Hanno Becker 2022-04-12 10:54:46 +01:00
  • 9137b9c587 Note alternative implementation strategy in mbedtls_mpi_mul_int() Hanno Becker 2022-04-12 10:51:54 +01:00
  • 808e666eee Don't trim MPIs to minimal size in mbedtls_mpi_mul_mpi() Hanno Becker 2022-04-12 10:49:53 +01:00
  • ffbb7d35fc derive_output: add optional step for derivation Przemek Stekiel 2022-03-31 11:13:47 +02:00
  • d7a28646bc psa_tls12_prf_set_key(): add PSA_TLS12_PRF_STATE_OTHER_KEY_SET as a valid state Przemek Stekiel 2022-04-07 14:58:33 +02:00
  • a7695a2d76 psa_key_derivation_check_input_type(): handle PSA_KEY_DERIVATION_INPUT_OTHER_SECRET Przemek Stekiel 2022-04-07 15:39:01 +02:00
  • c8fa5a1bdd psa_tls12_prf_psk_to_ms_set_key(): add support for other secret input Przemek Stekiel 2022-04-07 14:17:13 +02:00