Commit Graph

  • 083036af64 Safely erase key material upon abort Janos Follath 2019-06-11 10:22:26 +01:00
  • 71a4c9125b Add flag for removing deprecated API Janos Follath 2019-06-11 09:14:47 +01:00
  • cf8fdfd8e1 Documentation for corpus generation Philippe Antoine 2019-06-25 22:06:35 +02:00
  • 1c582c3b8b Restore tests/fuzz/Makefile after in-tree cmake Philippe Antoine 2019-06-25 21:55:21 +02:00
  • adc23e6132 Adding ifdefs to avoid warnings for unused globals Philippe Antoine 2019-06-25 21:53:12 +02:00
  • cd2c127f75 Adds LDFLAGS fsanitize=address Philippe Antoine 2019-06-25 21:50:07 +02:00
  • c2d56a4446 Allow declarations after statements Gilles Peskine 2019-06-25 18:52:06 +02:00
  • ab83fdf944 CMake: Add a subdirectory build regression test Jaeden Amero 2019-06-20 17:38:22 +01:00
  • 41421c4797 README: Enable builds as a CMake subproject Jaeden Amero 2019-06-20 17:26:29 +01:00
  • 33b6a99d4d ChangeLog: Enable builds as a CMake subproject Jaeden Amero 2019-06-18 17:27:20 +01:00
  • 3278081428 Remove use of CMAKE_SOURCE_DIR Ashley Duncan 2019-04-29 20:35:06 +12:00
  • 72662a495c Refactor receive_uint32() Ron Eldor 2019-06-25 14:50:20 +03:00
  • b220489422 Refactor get_byte function Ron Eldor 2019-06-03 16:39:59 +03:00
  • 64e45950de Make the script portable to both pythons Ron Eldor 2019-06-03 13:39:21 +03:00
  • 5075f4df18 Update the test encoding to support python3 Ron Eldor 2019-06-03 11:38:42 +03:00
  • 33908e8429 update the test script Ron Eldor 2019-05-29 17:17:10 +03:00
  • ed87d31d7d Specify the order of inputs for TLS-1.2 KDFs Gilles Peskine 2019-05-29 17:32:39 +02:00
  • 8f2a6dcc25 Support PSA_KEY_DERIVATION_INPUT_SEED Gilles Peskine 2019-05-29 17:32:21 +02:00
  • 35b86a872f [FIXUP] Fix bug in ASN.1 traversal of silently ignored tag Hanno Becker 2019-06-25 09:50:07 +01:00
  • 2656bfe9b0 [FIXUP] Fix typo in declaration of mbedtls_x509_memcasecmp() Hanno Becker 2019-06-25 09:44:56 +01:00
  • 08d341211d Move signature-info extraction out of MBEDTLS_X509_REMOVE_INFO Hanno Becker 2019-06-25 09:42:57 +01:00
  • 040c564888 Fix certificate validity checking logic to work with !TIME_DATE Hanno Becker 2019-06-10 11:14:24 +01:00
  • 97aa4363e1 Simplify X.509 CRT version check in UID parsing Hanno Becker 2019-06-08 07:38:20 +01:00
  • 60785d113b Remove unused variable warning in on-demand X.509 parsing Hanno Becker 2019-06-07 17:49:11 +01:00
  • 7c5fbbeec0 Reduce number of parallel workers in X.509 CRT threading test Hanno Becker 2019-06-07 16:45:45 +01:00
  • e908412a35 Simplify logic for issuer/subject ID parsing Hanno Becker 2019-06-07 12:04:39 +01:00
  • fd64f14ef9 Remove redundant CRT version check during CRT parsing Hanno Becker 2019-06-07 11:47:12 +01:00
  • 938a80507a Add MBEDTLS_X509_ON_DEMAND_PARSING to baremetal config Hanno Becker 2019-06-05 18:07:00 +01:00
  • b36a245654 Add comment to #endif indicating which condition was guarded Hanno Becker 2019-05-29 14:43:17 +01:00
  • 484caf0abc Consistently use (type *) instead of (type*) for pointer conversion Hanno Becker 2019-05-29 14:41:44 +01:00
  • 2ba9fbdfe9 Allow multiple concurrent readers for X.509 CRT frame and PK context Hanno Becker 2019-05-28 16:11:43 +01:00
  • d687ef0a91 Move X.509 threading test to separate test suite Hanno Becker 2019-05-29 13:05:55 +01:00
  • 22cf255e09 Force linking of pthread in 'full config' tests in all.sh Hanno Becker 2019-05-28 16:45:21 +01:00
  • fa37d07a0d Make: Link test suites with pthread if PTHREAD is set Hanno Becker 2019-05-28 16:38:18 +01:00
  • 1ba602c2f6 CMake: Link test suites with pthread if LINK_WITH_PTHREAD set Hanno Becker 2019-05-28 16:17:09 +01:00
  • fd8b7bd63f Add concurrent X.509 CRT verification test Hanno Becker 2019-05-28 16:16:17 +01:00
  • 4b70e12dde Document mbedtls_x509_crt_pk_{acquire/release}() Hanno Becker 2019-05-20 16:51:01 +01:00
  • b8670fcab3 Document mbedtls_x509_crt_frame_{acquire/release}() Hanno Becker 2019-05-20 16:50:45 +01:00
  • 5f268b3cf6 Don't allow change of CRT frame returned by x509_crt_frame_acquire() Hanno Becker 2019-05-20 16:26:34 +01:00
  • 9219f9e7b8 Fix yet another occasions of 'setup' vs. 'set up' typo in x509_crt.h Hanno Becker 2019-05-14 12:40:58 +01:00
  • 1250623ad1 Mark CRT frame argument to mbedtls_x509_xxx_from_frame() constant Hanno Becker 2019-05-13 13:53:21 +01:00
  • a4dfc0d73d Move X.509 CRT cache handling functions to x509_internal.h Hanno Becker 2019-05-13 13:45:11 +01:00
  • 3c3d5c5836 Fix spacing in declaration of mbedtls_asn1_get_sequence_of() Hanno Becker 2019-05-13 13:38:40 +01:00
  • c0dab627ce Fix typo 'setup' -> 'set up' throughout x509_crt.h Hanno Becker 2019-05-13 13:04:53 +01:00
  • fd5c185ed6 Use uint16_t to store key usage field in X.509 CRT Hanno Becker 2019-05-13 12:52:57 +01:00
  • 00d390338d Move internal mbedtls_x509_crt_cache to x509_internal.h Hanno Becker 2019-05-13 12:39:44 +01:00
  • 54f1c2cb20 Rename MBEDTLS_X509_SAFE_SNPRINTF_WITH_ERROR to _WITH_CLEANUP Hanno Becker 2019-05-13 11:58:47 +01:00
  • f332a97e1b Add ASN.1 API to free linked list representation of ASN.1 sequences Hanno Becker 2019-05-13 11:56:21 +01:00
  • 7b8e11e724 Avoid allocating empty buffers when handling length-0 CRTs Hanno Becker 2019-05-03 12:37:12 +01:00
  • 0ed348a14e Update VS2010 project file Hanno Becker 2019-05-02 16:16:46 +01:00
  • 529f25d119 Don't use mbedtls_asn1_get_sequence_of() in x509_crt.c Hanno Becker 2019-05-02 14:48:25 +01:00
  • 15b73b4066 Correct placement of comment on X.509 SAN parsing Hanno Becker 2019-05-02 13:21:27 +01:00
  • e452add01e Comment on return value type in two internal X.509 functions Hanno Becker 2019-05-02 13:19:34 +01:00
  • be0cf9b1f6 Improve formatting in x509.c Hanno Becker 2019-05-02 13:17:29 +01:00
  • f6bc8886c7 Move declarations of internal X.509 functions to separate header Hanno Becker 2019-05-02 13:05:58 +01:00
  • 1421246d44 Update version_features.c Hanno Becker 2019-03-05 17:53:48 +00:00
  • a7ac412dcd Update query_config.c Hanno Becker 2019-03-05 17:40:40 +00:00
  • 76428359b3 Move existence check for pk/frame to mbedtls_x509_crt_provide_xxx() Hanno Becker 2019-03-05 15:29:23 +00:00
  • bc685199d9 Implement MBEDTLS_X509_ALWAYS_FLUSH Hanno Becker 2019-03-05 15:35:31 +00:00
  • ffcd8c39a4 Introduce compile-time option to always flush X.509 CRT caches Hanno Becker 2019-03-05 13:44:33 +00:00
  • c6d1c3ed1c Remove frame/pk parameter from mbedtls_x509_crt_xxx_release() Hanno Becker 2019-03-05 13:50:56 +00:00
  • 7dbf49a518 Enable threading in all.sh test for X.509 on demand parsing Hanno Becker 2019-03-04 16:30:14 +00:00
  • 38f0cb487c Introduce helpers for conversion between X.509 buffer structs Hanno Becker 2019-03-04 15:13:45 +00:00
  • 1e11f217d4 Solely use raw X.509 name data references including SEQUENCE header Hanno Becker 2019-03-04 14:43:43 +00:00
  • 4e021c8f50 Remove raw SubjectAltNames and ExtKeyUsage from legacy CRT struct Hanno Becker 2019-03-04 13:53:10 +00:00
  • ea32d8ba2a Provide direct way of setting up a CRT frame from legacy CRT struct Hanno Becker 2019-03-04 11:52:23 +00:00
  • bfabd1dfae Add test to all.sh Hanno Becker 2019-02-28 17:31:54 +00:00
  • 008d304d1b Adapt ChangeLog Hanno Becker 2019-02-28 16:51:01 +00:00
  • 5d9021e7f2 Make use of new API in ssl_server2 example application Hanno Becker 2019-02-28 14:32:37 +00:00
  • 4588dc4754 Update query_config.c Hanno Becker 2019-02-28 14:20:44 +00:00
  • 3f8f0dc3fd Use mbedtls_x509_crt_get_subject() in test_suite_x509parse test Hanno Becker 2019-02-27 18:06:47 +00:00
  • 5226c53e13 Modify mbedtls_x509_crt_info() to use getter API Hanno Becker 2019-02-27 17:38:40 +00:00
  • 7a4de9cdab Flush CRT cache after parsing Hanno Becker 2019-02-27 13:12:24 +00:00
  • 828a8c08b6 Add compile-guard for < TLS1.2 path in server-side ssl_pick_cert() Hanno Becker 2019-02-26 16:48:55 +00:00
  • c69c4465b6 Adapt test_suite_x509parse to new CRT structure Hanno Becker 2019-02-27 09:05:41 +00:00
  • d8eab343d2 Adapt cert_write example program to work with new CRT structure Hanno Becker 2019-02-26 18:47:11 +00:00
  • 2bcc7640f8 Give x509_{sequence|name}_free() external linkage Hanno Becker 2019-02-26 19:01:00 +00:00
  • ab6c8ea8bc Add public API to query SubjectAltNames and ExtKeyUsage extensions Hanno Becker 2019-02-27 17:33:14 +00:00
  • 63e6998dd7 Add public API to query subject and issuer from CRT Hanno Becker 2019-02-26 18:50:49 +00:00
  • 823efad6e8 Add public API to query for CRT frame and PK Hanno Becker 2019-02-28 13:23:58 +00:00
  • 180f7bf60b Add compile-time option to remove legacy CRT fields Hanno Becker 2019-02-28 13:23:38 +00:00
  • b6c39fca5c Add parsing cache to mbedtls_x509_crt Hanno Becker 2019-02-25 13:50:14 +00:00
  • 73cd8d8adc Make use of acquire/release in ssl_parse_certificate_verify() Hanno Becker 2019-02-28 14:04:16 +00:00
  • 2fefa4845d Make use of acquire/release in ssl_parse_server_key_exchange() Hanno Becker 2019-02-28 14:03:46 +00:00
  • 39ae65cf73 Make use of acquire/release in ssl_get_ecdh_params_from_cert() Hanno Becker 2019-02-28 14:03:20 +00:00
  • 0c1681685c Make use of acquire/release in client-side ssl_write_encrypted_pms() Hanno Becker 2019-02-28 14:02:30 +00:00
  • 232f8faf00 Make use of CRT acquire/release in ssl_write_certificate_request() Hanno Becker 2019-02-26 16:49:57 +00:00
  • 30649f7a17 Make use of CRT acquire/release in server-side ssl_pick_cert() Hanno Becker 2019-02-26 16:49:40 +00:00
  • 8c13ee615f Make use of CRT acquire/release in ssl_parse_certificate_verify() Hanno Becker 2019-02-26 16:48:17 +00:00
  • 6cb5f86dac Make use of CRT acquire/release in mbedtls_debug_print_crt() Hanno Becker 2019-02-26 16:46:04 +00:00
  • 5c03058bbc Make use of CRT acquire/release in test_suite_x509parse suite Hanno Becker 2019-02-26 16:45:32 +00:00
  • 8723336831 Make use of CRT acquire/release in x509_crt_verify_restartable Hanno Becker 2019-02-25 18:15:33 +00:00
  • 082435c011 Make use of CRT acquire/release in x509_crt_verify_name() Hanno Becker 2019-02-25 18:14:40 +00:00
  • 58c35646df Make use of CRT acquire/release in CRT chain verification #2 Hanno Becker 2019-02-25 18:13:46 +00:00
  • bb26613d32 Make use of CRT acquire/release in x509_crt_verifycrl() Hanno Becker 2019-02-25 18:12:46 +00:00
  • 79ae5b68e7 Make use of CRT acquire/release in x509_serial_is_revoked() Hanno Becker 2019-02-25 18:12:00 +00:00
  • e9718b451a Make use of CRT acquire/release in ExtKeyUsage checking Hanno Becker 2019-02-25 18:11:42 +00:00
  • 371e0e4573 Determine whether CRT is initialized or not through raw data pointer Hanno Becker 2019-02-25 18:08:59 +00:00
  • 4f869eda64 Make use of CRT acquire/release in mbedtls_x509_crt_info() Hanno Becker 2019-02-24 16:47:57 +00:00
  • 343fec08ad Add version of MBEDTLS_X509_SAFE_SNPRINTF supporting cleanup section Hanno Becker 2019-02-23 12:12:46 +00:00