Commit Graph

  • b7769e4fc0 Remove wrong reference to ARMCC in all.sh test name Hanno Becker 2019-07-25 12:38:03 +01:00
  • c4296a3bbb Modify all.sh test names to reflect use of ARMCC Hanno Becker 2019-07-24 16:02:53 +01:00
  • 28d2a88173 Fix indentation in three example programs Hanno Becker 2019-07-24 16:01:38 +01:00
  • e7895aae2c Add all.sh test for baremetal.h runtime test Hanno Becker 2019-07-22 12:47:20 +01:00
  • a1f3c521e7 Add --build-only option to baremetal.sh --ram Hanno Becker 2019-07-22 12:37:21 +01:00
  • fe1bd781de Add all.sh test for hardcoded elliptic curve Hanno Becker 2019-07-19 17:32:14 +01:00
  • 7cedd8bed2 Remove overly strict guard in ssl_server2 Hanno Becker 2019-07-22 11:04:16 +01:00
  • 6dd8e1c54d Add all.sh test for hardcoded miscellaneous SSL config options Hanno Becker 2019-07-22 11:04:12 +01:00
  • 41e5a6871d Example apps: Don't use runtime IO config API if CBs are hardcoded Hanno Becker 2019-07-19 17:07:30 +01:00
  • 2a0cd5a031 Add all.sh test for hardcoded IO callbacks Hanno Becker 2019-07-19 17:07:20 +01:00
  • 9fb3f1eaf2 Add all.sh test for hardcoded SSL version Hanno Becker 2019-07-19 16:55:35 +01:00
  • 32bbe4a66b Remove unused label in ssl_client2/ssl_server2 Hanno Becker 2019-07-24 16:06:23 +01:00
  • e29dfb2157 Add missing word in documentation of mbedtls_ssl_check_record() Hanno Becker 2019-07-24 14:23:16 +01:00
  • 83b8c3b8eb cli/srv ex: Add dbg msg if record checking gives inconsistent result Hanno Becker 2019-07-24 13:59:07 +01:00
  • c2b08d1251 Fix minor issues in documentation of mbedtls_ssl_check_record() Hanno Becker 2019-07-18 08:21:17 +01:00
  • bec8885b7d State that record checking is DTLS only and doesn't check content type Hanno Becker 2019-07-18 08:20:53 +01:00
  • 82ff6f1e17 Update version_features.c Hanno Becker 2019-07-04 17:05:10 +01:00
  • de9e36e6b3 Pass dgrams to mbedtls_ssl_check_record in ssl_client2/server2 Hanno Becker 2019-07-03 17:14:41 +01:00
  • fe24b3b269 Add IO wrappers to ssl_server2 as interm's between NET and SSL layer Hanno Becker 2019-07-03 17:05:43 +01:00
  • 14219feb27 Add IO wrappers to ssl_client2 as interm's between NET and SSL layer Hanno Becker 2019-07-03 17:02:43 +01:00
  • 02f2609551 Introduce configuration option and API for SSL record checking Hanno Becker 2019-07-03 16:13:00 +01:00
  • b84b6a68c7 Add some negative tests for policy checks Gilles Peskine 2019-07-30 11:38:12 +02:00
  • aad3dabd2b Merge pull request #165 from gilles-peskine-arm/storage_spec-1.1.0-release Jaeden Amero 2019-07-30 10:12:44 +01:00
  • f010eba833 Merge pull request #632 from hanno-arm/baremetal_sh_debug-baremetal Manuel Pégourié-Gonnard 2019-07-30 00:07:45 +02:00
  • cdb83e7c88 Merge pull request #616 from mpg/context-s11n Manuel Pégourié-Gonnard 2019-07-30 00:07:23 +02:00
  • fc321f1a5e SE keys: test that the bit size is saved and loaded correctly Gilles Peskine 2019-07-24 20:30:14 +02:00
  • e60d1d08a4 SE keys: save the bit size in storage Gilles Peskine 2019-07-24 20:27:59 +02:00
  • 1801740a7c SE driver: report the bit size on key import Gilles Peskine 2019-07-24 20:25:59 +02:00
  • dc5bfe9784 SE keys: implement and test psa_get_key_attributes Gilles Peskine 2019-07-24 19:09:30 +02:00
  • d8727230f7 Add negative tests for empty buffer decoding for certain ciphers k-stachowiak 2019-07-29 17:46:29 +02:00
  • 424f89453b SE keys: store the bit size internally (partial implementation) Gilles Peskine 2019-07-15 21:59:53 +02:00
  • c5899a0fca Fix dependencies for some GCM empty buffer decoding tests k-stachowiak 2019-07-29 15:11:16 +02:00
  • 8e88a8f4ea Remove redundant empty buffer decoding test k-stachowiak 2019-07-29 15:09:29 +02:00
  • e0b4c433fe Merge pull request #273 from k-stachowiak/IOTCRYPT-726-unchecked-return-ecjpake Jaeden Amero 2019-07-29 11:48:23 +01:00
  • 69a3e417d8 Improve reability and debugability of large if Manuel Pégourié-Gonnard 2019-07-29 12:28:52 +02:00
  • 18332c5c6c Improve getter for renegotiation enabled Manuel Pégourié-Gonnard 2019-07-29 12:17:52 +02:00
  • d04850507d Merge pull request #634 from hanno-arm/single_ec_doc-baremetal Manuel Pégourié-Gonnard 2019-07-29 11:59:12 +02:00
  • 7c575d29dc Merge pull request #605 from ARMmbed/x509_ondemand_remove_unneeded_fields Manuel Pégourié-Gonnard 2019-07-29 11:58:58 +02:00
  • 7d33b7e2b9 Merge pull request #610 from ARMmbed/delay_alerts-baremetal Manuel Pégourié-Gonnard 2019-07-29 11:58:44 +02:00
  • b3bb31bd90 Introduce getter function for disable_renego Manuel Pégourié-Gonnard 2019-07-26 16:37:45 +02:00
  • 14e2a8ac06 Fix a typo in a comment Manuel Pégourié-Gonnard 2019-07-26 16:31:53 +02:00
  • adb1c52149 Merge pull request #157 from gilles-peskine-arm/psa-se_driver-create_key Gilles Peskine 2019-07-26 14:39:55 +02:00
  • fcb721d733 Correct documentation on use of alert pending Hanno Becker 2019-07-26 12:47:16 +01:00
  • 66be51c35d If starting a transaction fails, wipe the transaction data Gilles Peskine 2019-07-25 18:02:52 +02:00
  • 2ea06fd48d Improve documentation of transaction storage Gilles Peskine 2019-07-25 17:53:16 +02:00
  • dd69119b32 Update include/mbedtls/ssl_internal.h Hanno Becker 2019-07-26 09:59:18 +01:00
  • 2736d1983c Fix and improve documentation of MBEDTLS_SSL_CONF_SINGLE_EC Hanno Becker 2019-07-26 07:49:02 +01:00
  • 42a6b04c4a Don't forget about pending alerts after ssl_get_next_record() Hanno Becker 2019-07-26 07:25:20 +01:00
  • b82350b25f Introduce helper function to send pending fatal alerts Hanno Becker 2019-07-26 07:24:05 +01:00
  • f9bb29ec26 Add boilerplate to recover a transaction during init Gilles Peskine 2019-07-25 17:52:59 +02:00
  • 4aea1036c6 Bug fix: don't start a transaction for non-SE keys Gilles Peskine 2019-07-25 17:38:34 +02:00
  • 0a4c78f7c2 Add --debug option to baremetal.sh Hanno Becker 2019-07-25 14:55:47 +01:00
  • e3a7c9c081 Change worktree_rev to HEAD for rev-parse Darryl Green 2019-07-25 14:33:33 +01:00
  • 64b4b6e35e Change worktree_rev to HEAD for rev-parse Darryl Green 2019-07-25 14:33:33 +01:00
  • 762351be1b Change worktree_rev to HEAD for rev-parse Darryl Green 2019-07-25 14:33:33 +01:00
  • 340b127ed1 psa_destroy_se_key: explain why the error is NOT_PERMITTED Gilles Peskine 2019-07-25 14:13:24 +02:00
  • 0c3ae1f0b4 Improve documentation of SE driver persistent state Gilles Peskine 2019-07-25 14:04:38 +02:00
  • 50d53212ef Document mbedtls_ssl_context::pending_fatal_alert_msg Hanno Becker 2019-07-25 12:54:16 +01:00
  • c8f529995f Rename pend_alert_msg -> pending_fatal_alert_msg Hanno Becker 2019-07-25 11:15:08 +01:00
  • d829d0fbd0 Remove return value from mbedtls_ssl_pend_fatal_alert() Hanno Becker 2019-07-25 10:28:57 +01:00
  • eeabfa460c Note that mbedtls_ssl_pend_fatal_alert() must only be called once Hanno Becker 2019-07-25 10:28:30 +01:00
  • 2e8d133ebf Reintroduce return code checking when sending NoRenego alert Hanno Becker 2019-07-25 10:27:36 +01:00
  • 3caf7189f9 Remove field to store level of pending alert Hanno Becker 2019-07-24 13:34:14 +01:00
  • 2e0f388d2a Don't explicitly dereference function pointers Gilles Peskine 2019-07-25 11:34:33 +02:00
  • 60450a4812 Improve comments Gilles Peskine 2019-07-25 11:32:45 +02:00
  • 725f22a545 Bug fix: save the driver's persistent data in destroy_key Gilles Peskine 2019-07-25 11:31:48 +02:00
  • adad813d7b psa_key_slot_is_external exists. Use it. Gilles Peskine 2019-07-25 11:31:23 +02:00
  • 6a3dd89a64 Improve alignment in comments Gilles Peskine 2019-07-25 10:56:39 +02:00
  • f77a6acf83 Fix indentation Gilles Peskine 2019-07-25 10:51:03 +02:00
  • 456674d585 Merge pull request #186 from simonqhughes/psa-storage-and-cmake-fix Jaeden Amero 2019-07-24 15:52:21 +01:00
  • 4b73422318 Transaction support: be more future-proof Gilles Peskine 2019-07-24 15:56:31 +02:00
  • 75c126b958 Explain some non-obvious parts of the code Gilles Peskine 2019-07-24 15:56:01 +02:00
  • f96aefe3ad Test with secure element support Gilles Peskine 2019-07-24 14:58:38 +02:00
  • de62da9d3c Use separate functions to pend fatal and non-fatal alerts Hanno Becker 2019-07-24 13:23:50 +01:00
  • 1f5a793124 Use attribute always_inline only for GCC and ARM compiler Hanno Becker 2019-07-03 14:58:59 +01:00
  • 1facd552fc Replace xxx_send_alert by xxx_pend_alert to save code Hanno Becker 2019-07-03 13:57:23 +01:00
  • f46e1ce812 Introduce SSL helper function to mark pending alerts Hanno Becker 2019-07-03 13:56:59 +01:00
  • d0e66b00fb Turn off secure element support by default Gilles Peskine 2019-07-24 13:52:51 +02:00
  • 105736653f SE keys: test that no function goes crazy Gilles Peskine 2019-07-24 13:45:36 +02:00
  • d1cd766e96 SE keys: test NOT_SUPPORTED error from generate_key Gilles Peskine 2019-07-24 13:45:02 +02:00
  • f4ee662868 SE keys: error out in key creation function that lack support Gilles Peskine 2019-07-24 13:44:30 +02:00
  • 89870eb123 Cosmetic improvements in SE driver tests Gilles Peskine 2019-07-24 13:44:03 +02:00
  • 28f8f3068f SE keys: ensure that functions that lack support properly error out Gilles Peskine 2019-07-24 13:30:31 +02:00
  • 6763fe4a12 Change LINK_WITH_TRUSTED_STORAGE option to OFF Moshe Shahar 2019-07-24 14:19:35 +03:00
  • 7e36765945 Add CMake option for explicitly link library to trusted_storage (#2) Moshe Shahar 2019-07-15 15:50:19 +03:00
  • b992313f47 Merge pull request #180 from simonqhughes/feature-psa-storage Jaeden Amero 2019-07-24 11:19:32 +01:00
  • 7af7375473 Fix MSVC warning Manuel Pégourié-Gonnard 2019-07-24 00:58:27 +02:00
  • 573bbc1b4e Error out if a driver tries to store more than ITS can handle Gilles Peskine 2019-07-23 19:59:23 +02:00
  • 831ac72338 Add transaction file and driver storage; new key file format Gilles Peskine 2019-07-23 19:29:35 +02:00
  • 105f67f0fa Move the definition of psa_key_attributes_t to crypto_types.h Gilles Peskine 2019-07-23 18:16:05 +02:00
  • 9dd125d8bb Fix overly complex Doxygen markup Gilles Peskine 2019-07-23 18:26:43 +02:00
  • bda5a21112 Add psa_trusted_storage_linux persistent storage support for v1.0.0 APIs Simon D Hughes 2019-07-10 16:34:21 +01:00
  • 1d04b05fae Dear check-names, where you accept struct, also accept union. Gilles Peskine 2019-07-23 17:38:41 +02:00
  • 8b96cad204 SE drivers: implement persistent storage Gilles Peskine 2019-07-23 17:38:08 +02:00
  • 2cc9223a3b Fix compile error in reduced configurations Manuel Pégourié-Gonnard 2019-07-23 17:11:24 +02:00
  • 3b014fc23a Merge remote-tracking branch 'origin/pr/604' into baremetal Simon Butcher 2019-07-23 16:16:24 +01:00
  • 6fe6b437da Merge remote-tracking branch 'origin/pr/589' into baremetal Simon Butcher 2019-07-23 16:10:56 +01:00
  • c0b3633194 Merge remote-tracking branch 'origin/pr/627' into baremetal Simon Butcher 2019-07-23 16:06:07 +01:00
  • 25b5579a09 Merge remote-tracking branch 'origin/pr/626' into baremetal Simon Butcher 2019-07-23 16:03:21 +01:00
  • 7ce9446e4c Avoid duplication of session format header Manuel Pégourié-Gonnard 2019-07-23 16:52:45 +02:00