Commit Graph

  • 4b6649e67c Pass dgrams to mbedtls_ssl_check_record in ssl_client2/server2 Hanno Becker 2019-07-03 17:14:41 +01:00
  • dcc94e61da Add IO wrappers to ssl_server2 as interm's between NET and SSL layer Hanno Becker 2019-07-03 17:05:43 +01:00
  • 8b1af2f89c Add IO wrappers to ssl_client2 as interm's between NET and SSL layer Hanno Becker 2019-07-03 17:02:43 +01:00
  • cfe457921a Introduce configuration option and API for SSL record checking Hanno Becker 2019-07-03 16:13:00 +01:00
  • 640804b3e7 Merge pull request #191 from gilles-peskine-arm/psa-se_driver-key_bits Gilles Peskine 2019-08-05 16:58:51 +02:00
  • 93e4e03f94 Add a build on ARMv5TE in ARM mode Gilles Peskine 2019-08-05 11:34:25 +02:00
  • a5cb7d48f3 Add changelog entry for ARM assembly fix Gilles Peskine 2019-08-05 11:34:11 +02:00
  • 0bd284dc51 Add a build on ARMv5TE in ARM mode Gilles Peskine 2019-08-05 11:34:25 +02:00
  • 9ff53ffbda Add changelog entry for ARM assembly fix Gilles Peskine 2019-08-05 11:34:11 +02:00
  • 5d3be4a0f8 Merge pull request #640 from ARMmbed/mbedtls-2.7-proposed Gilles Peskine 2019-08-05 11:06:45 +02:00
  • c3c738e0fe Merge pull request #639 from ARMmbed/mbedtls-2.16-proposed Gilles Peskine 2019-08-05 11:06:37 +02:00
  • 41f2de9da2 Merge pull request #638 from ARMmbed/development-proposed Gilles Peskine 2019-08-05 11:06:20 +02:00
  • a6901796f6 bn_mul.h: require at least ARMv6 to enable the ARM DSP code Aurelien Jarno 2018-11-03 00:46:06 +01:00
  • 5daa34f155 bn_mul.h: require at least ARMv6 to enable the ARM DSP code Aurelien Jarno 2018-11-03 00:46:06 +01:00
  • cabbd2e954 Changelog entry for test certificates update Gilles Peskine 2019-08-03 14:08:46 +02:00
  • 77a2916bbd Changelog entry for test certificates update Gilles Peskine 2019-08-03 14:08:46 +02:00
  • 55603ee268 Changelog entry for test certificates update Gilles Peskine 2019-08-03 14:08:46 +02:00
  • ad8c9bf7e0 Merge pull request #2418 from RonEld/Backport2.7_2734 Gilles Peskine 2019-08-03 13:38:23 +02:00
  • a60dc25e9f Merge pull request #2419 from RonEld/Backport2.16_2734 Gilles Peskine 2019-08-03 13:38:20 +02:00
  • 01655daeee Merge pull request #2417 from RonEld/2734 Gilles Peskine 2019-08-03 13:38:14 +02:00
  • 1e3eb28ae3 Merge pull request #2735 from hanno-arm/skip_test-2.16 Gilles Peskine 2019-08-03 13:37:59 +02:00
  • 82966d26c3 Merge pull request #2734 from hanno-arm/skip_test Gilles Peskine 2019-08-03 13:37:51 +02:00
  • 745e2a1c96 Merge pull request #2762 from dgreen-arm/backport-2.7-fix-rev-parse-in-abi-script Gilles Peskine 2019-08-03 13:37:21 +02:00
  • 56216b5a3c Merge pull request #2761 from dgreen-arm/backport-2.16-fix-rev-parse-in-abi-script Gilles Peskine 2019-08-03 13:37:14 +02:00
  • 83d49bb84e Merge pull request #2760 from dgreen-arm/fix-rev-parse-in-abi-script Gilles Peskine 2019-08-03 13:36:52 +02:00
  • e3223d1f85 Merge pull request #199 from jainvikas8/dev/jainvikas8/fix-return-code Gilles Peskine 2019-08-02 16:07:46 +02:00
  • 21599b6622 Return right error code. Vikas Katariya 2019-08-02 12:26:29 +01:00
  • f3a15b3de0 Fix possibly-lossy conversion warning from MSVC Manuel Pégourié-Gonnard 2019-08-02 10:17:15 +02:00
  • 5386f6ba07 Fix PSA init/deinit in mbedtls_xxx tests when using PSA Gilles Peskine 2019-08-01 12:47:40 +02:00
  • 39581c7cf4 Merge branch 'mbedtls-2.16' into baremetal-2.16-20190801 Manuel Pégourié-Gonnard 2019-08-01 11:05:18 +02:00
  • 646a466ae2 Merge pull request #628 from hanno-arm/hardcoding_tests-baremetal Manuel Pégourié-Gonnard 2019-08-01 10:53:51 +02:00
  • 8844055b0e Remove compression field from SSL session if compression disabled Hanno Becker 2019-07-03 14:16:13 +01:00
  • ec01408389 Reintroduce length 0 check for records Hanno Becker 2019-07-26 08:20:27 +01:00
  • 8061c6e894 Don't use memcpy() for 2-byte copy operation Hanno Becker 2019-07-26 08:07:03 +01:00
  • 7b5ba84624 Remove integer parsing macro Hanno Becker 2019-07-25 10:16:37 +01:00
  • 618176126c Fix alignment in record header parsing routine Hanno Becker 2019-07-25 10:13:02 +01:00
  • e03eb7bb64 Don't disallow 'record from another epoch' log msg in proxy ref test Hanno Becker 2019-07-19 15:43:09 +01:00
  • c1c173cadf Make sure 'record from another epoch' is displayed for next epoch Hanno Becker 2019-07-19 10:59:12 +01:00
  • 5579c5399b Add x509_internal.h to cpp_dummy_build.cpp Hanno Becker 2019-07-19 10:27:58 +01:00
  • 03e2db6f35 Implement record checking API Hanno Becker 2019-07-12 14:40:00 +01:00
  • 21fc61c7a7 Mark ssl_parse_record_header() as const in SSL context Hanno Becker 2019-07-12 11:10:16 +01:00
  • c360dcc679 [API break] Remove mbedtls_ssl_context::in_iv field Hanno Becker 2019-07-12 10:00:45 +01:00
  • f903dc8354 Make mbedtls_ssl_in_hdr_len() CID-unaware Hanno Becker 2019-07-12 09:55:46 +01:00
  • 05413d9041 Remove duplicate setting of ssl->in_msgtype and ssl->in_msglen Hanno Becker 2019-07-12 09:44:55 +01:00
  • bd70c8e771 Move update of in_xxx fields in ssl_get_next_record() Hanno Becker 2019-07-12 09:40:44 +01:00
  • bf256cdb0b Move update of in_xxx fields outside of ssl_prepare_record_content() Hanno Becker 2019-07-12 09:37:30 +01:00
  • 106f3dab57 Reduce dependency of ssl_prepare_record_content() on in_xxx fields Hanno Becker 2019-07-12 09:35:58 +01:00
  • 68379720b6 Move ssl_update_in_pointers() to after record hdr parsing Hanno Becker 2019-07-12 09:23:47 +01:00
  • fc55172c41 Mark DTLS replay check as const on the SSL context Hanno Becker 2019-07-12 08:50:37 +01:00
  • 6941245852 Move updating the internal rec ptrs to outside of rec hdr parsing Hanno Becker 2019-07-12 08:33:49 +01:00
  • 40478be987 Mark ssl_decrypt_buf() as `const in the input SSL context Hanno Becker 2019-07-12 08:23:59 +01:00
  • a89610aaf2 Adapt ssl_prepare_record_content() to use SSL record structure Hanno Becker 2019-07-11 13:07:45 +01:00
  • 9babbf7e75 Use record length from record structure when fetching content in TLS Hanno Becker 2019-07-11 12:50:29 +01:00
  • 2720f4c33c Use record structure when remembering offset of next record in dgram Hanno Becker 2019-07-11 12:50:10 +01:00
  • 2528ee09ac Use SSL record structure when skipping over unexpected record Hanno Becker 2019-07-11 12:48:53 +01:00
  • af5bcfc765 Adapt ssl_buffer_future_record() to work with SSL record structure Hanno Becker 2019-07-11 12:43:20 +01:00
  • c6e7c573d9 Setup SSL record structure in ssl_parse_record_header() Hanno Becker 2019-07-11 12:29:35 +01:00
  • e84b28cb9d Expand documentation of internal mbedtls_record structure Hanno Becker 2019-07-11 09:24:36 +01:00
  • 6c0e53ce6f Minor documentation improvements in ssl_parse_record_header() Hanno Becker 2019-07-10 17:20:01 +01:00
  • e04527755b Check for sufficient datagram size in ssl_parse_record_header() Hanno Becker 2019-07-10 17:12:07 +01:00
  • a61925fa51 Don't send an alert when receiving a record of unknown ContentType Hanno Becker 2019-07-10 16:53:30 +01:00
  • dc4d62748c Don't call ssl_fetch_input for record content fetch in DTLS Hanno Becker 2019-07-10 15:01:45 +01:00
  • 29823466a1 Don't call ssl_fetch_input for record hdr size check in DTLS Hanno Becker 2019-07-10 14:53:43 +01:00
  • de7d6d33e5 Move size-check for DTLS record header with CID to DTLS-only branch Hanno Becker 2019-07-10 14:50:10 +01:00
  • 87b5626d73 Check same-port-reconnect from client outside of record hdr parsing Hanno Becker 2019-07-10 14:37:41 +01:00
  • 07d420d6ad Remove unnecessary backup of explicit IV in AEAD record decryption Hanno Becker 2019-07-10 11:44:13 +01:00
  • 8244cfa8bc Remove redundant minimum length check Hanno Becker 2019-07-10 13:55:17 +01:00
  • 6d3db0fa25 Improve documentation of mbedtls_ssl_decrypt_buf() Hanno Becker 2019-07-10 13:55:25 +01:00
  • 9520b31860 Remove misleading comment in mbedtls_ssl_decrypt_buf() Hanno Becker 2019-07-10 09:49:56 +01:00
  • b603bd34bc Remove assertion in mbedtls_ssl_decrypt_buf() Hanno Becker 2019-07-10 09:45:44 +01:00
  • f024285034 Check architectural bound for max record payload len in one place Hanno Becker 2019-07-09 17:30:02 +01:00
  • 408a2742b3 Remove redundant length-0 checks for incoming unprotected records Hanno Becker 2019-07-09 17:27:32 +01:00
  • 1c26845777 Remove redundant length check during record header parsing Hanno Becker 2019-07-10 11:37:19 +01:00
  • 8908c5e81c Make psa_calculate_key_bits return psa_key_bits_t Gilles Peskine 2019-07-31 18:55:00 +02:00
  • 8b66389d0d Adjust secure element code to the new ITS interface Gilles Peskine 2019-07-31 17:57:57 +02:00
  • 72c8c5b352 Merge remote-tracking branch 'upstream-crypto/development' into psa-api-1.0-beta-merge_development_20190801 Gilles Peskine 2019-07-31 17:47:49 +02:00
  • 1b8594a218 More refactoring: consolidate attribute validation Gilles Peskine 2019-07-31 17:21:46 +02:00
  • 3825e14e65 Fix policy validity check on key creation. Gilles Peskine 2019-07-31 15:54:33 +02:00
  • 6edfa293c2 Add test function for import with a bad policy Gilles Peskine 2019-07-31 15:53:45 +02:00
  • 7c227aee5e Test key creation with an invalid type (0 and nonzero) Gilles Peskine 2019-07-31 15:14:44 +02:00
  • 41e50d26ea Remove "allocated" flag from key slots Gilles Peskine 2019-07-31 15:01:55 +02:00
  • 76aa09c9a9 Take advantage of psa_core_key_attributes_t internally #2 Gilles Peskine 2019-07-31 14:15:34 +02:00
  • b46bef2f76 Store the key size in the slot in memory Gilles Peskine 2019-07-30 21:32:04 +02:00
  • 2431859dc7 Take advantage of psa_core_key_attributes_t internally: key loading Gilles Peskine 2019-07-30 20:30:51 +02:00
  • 4ed0e6f11a Switch storage functions over to psa_core_key_attributes_t Gilles Peskine 2019-07-30 20:22:33 +02:00
  • 8e3387029d Use psa_core_key_attributes_t in key slots in memory Gilles Peskine 2019-07-30 20:06:31 +02:00
  • 420f3589e3 Fix the license header of hkdf Ron Eldor 2019-07-31 13:58:29 +03:00
  • fe93bc4ed4 Merge pull request #187 from Patater/tls-development-20190722 Jaeden Amero 2019-07-31 11:50:15 +01:00
  • 8dd1690993 Merge remote-tracking branch 'tls/development' into development Jaeden Amero 2019-07-22 16:39:49 +01:00
  • 68cc433b5b Store key sizes in 16 bits in attributes Gilles Peskine 2019-07-30 17:42:47 +02:00
  • c744d99386 Limit keys to 65528 bits Gilles Peskine 2019-07-30 17:26:54 +02:00
  • 7e0cff90b9 Move attribute fields to a substructure Gilles Peskine 2019-07-30 13:48:52 +02:00
  • 6852e95c2a Merge pull request #618 from hanno-arm/record_checking_api-baremetal Manuel Pégourié-Gonnard 2019-07-30 17:11:46 +02:00
  • 2b29a37c91 Fix compile bugs in examples with hardcoded I/O callbacks Manuel Pégourié-Gonnard 2019-07-30 17:07:38 +02:00
  • f1358acdc7 Fix bug in MBEDTLS_X509_CRT_REMOVE_TIME Manuel Pégourié-Gonnard 2019-07-30 16:03:06 +02:00
  • 80eaddfc36 Clean generated *.su file and gitignore them Manuel Pégourié-Gonnard 2019-07-30 14:59:54 +02:00
  • d64a2f72e6 Fix wrong ifdef in ssl_server2 & add test for it Manuel Pégourié-Gonnard 2019-07-30 14:54:50 +02:00
  • 0d1db20490 Fix bug in skip_date() (MBEDTLS_X509_CRT_REMOVE_TIME) Manuel Pégourié-Gonnard 2019-07-30 14:11:25 +02:00
  • 62daad3b9a all.sh: Adhere to convention that build_ prefixes build-only tests Hanno Becker 2019-07-25 12:41:40 +01:00
  • 93de2965d0 Fix rebase slip Hanno Becker 2019-07-25 12:38:18 +01:00