Commit Graph

  • 45eedf1ace Make use of CRT acquire/release in mbedtls_x509_crt_check_key_usage Hanno Becker 2019-02-25 13:55:33 +00:00
  • 43bf900018 Make use of CRT acquire/release searching for issuer in CRT verif. Hanno Becker 2019-02-25 14:46:49 +00:00
  • e449e2d846 Make use of CRT acquire/release for X.509 CRT signature checking Hanno Becker 2019-02-25 14:45:31 +00:00
  • 5299cf87d4 Add structure holding X.509 CRT signature information Hanno Becker 2019-02-25 13:50:41 +00:00
  • a788cab46d Check validity of potential parent before checking signature Hanno Becker 2019-02-24 17:47:46 +00:00
  • 1e0677acc1 Make use of CRT acquire/release for child in CRT chain verification Hanno Becker 2019-02-25 14:58:22 +00:00
  • 337088aa2d Add internal API for acquire/release of CRT frames and PKs Hanno Becker 2019-02-25 14:53:14 +00:00
  • 21f5567571 Introduce X.509 CRT frame structure Hanno Becker 2019-02-15 15:27:59 +00:00
  • c6573a27a1 Convert X.509 name buffer to linked list via name traversal callback Hanno Becker 2019-02-23 09:13:17 +00:00
  • 6b37812a45 Add next_merged field to X.509 name comparison abort callback Hanno Becker 2019-02-23 10:20:14 +00:00
  • 10e6b9b2b5 Move point of re-entry for restartable X.509 verification Hanno Becker 2019-02-22 17:56:43 +00:00
  • b59d3f1692 Add single function to parse ASN.1 AlgorithmIdentifier to x509.c Hanno Becker 2019-02-22 17:49:34 +00:00
  • 1898b68f09 Allow NULL pointer in mbedtls_x509_get_sig_alg if params not needed Hanno Becker 2019-02-22 16:03:29 +00:00
  • c84fd1cd95 Check whether CRT is revoked by passing its serial number only Hanno Becker 2019-02-22 15:01:03 +00:00
  • b3def1d341 Move length check into mbedtls_x509_memcasecmp() Hanno Becker 2019-02-22 11:46:06 +00:00
  • f1b39bf18c Implement v3 Extension parsing through ASN.1 SEQUENCE OF traversal Hanno Becker 2019-02-22 11:09:48 +00:00
  • c7c638eddd Implement ExtKeyUsage traversal via ASN.1 SEQUENCE OF traversal Hanno Becker 2019-02-21 21:10:51 +00:00
  • 90b9408dd0 Implement SubjectAltName traversal via ASN.1 SEQUENCE OF traversal Hanno Becker 2019-02-21 21:13:21 +00:00
  • 8730610ae0 Introduce ASN.1 API for traversing ASN.1 SEQUENCEs Hanno Becker 2019-02-21 20:52:09 +00:00
  • 5984d30f4b Make use of cb to build linked list presentation of SubjectAltName Hanno Becker 2019-02-21 14:46:54 +00:00
  • ad46219a88 Add cb to build dynamic linked list representation of SubjectAltName Hanno Becker 2019-02-21 13:32:31 +00:00
  • da410828f4 Add callback to search through SubjectAltNames extension Hanno Becker 2019-02-21 13:36:59 +00:00
  • 2c6cc045c2 Add function to traverse raw SubjectAltName extension Hanno Becker 2019-02-21 13:30:50 +00:00
  • 2492622289 Pass raw data to x509_check_wildcard() and x509_crt_check_cn() Hanno Becker 2019-02-21 13:10:55 +00:00
  • ded167e18c Add raw buffer holding SubjectAlternativeName ext to CRT structure Hanno Becker 2019-02-21 14:34:46 +00:00
  • e1956af057 Check for extended key usage by traversing raw extension data Hanno Becker 2019-02-21 14:28:12 +00:00
  • 7ec9c368f1 Add buffer holding raw ExtKeyUsage extension data to CRT struct Hanno Becker 2019-02-21 14:24:05 +00:00
  • 8b543b3ca8 Make use of abort condition callback in CN comparison Hanno Becker 2019-02-21 11:50:44 +00:00
  • 67284cce00 Add abort condition callback to mbedtls_x509_name_cmp_raw() Hanno Becker 2019-02-21 14:31:51 +00:00
  • 7dee12a38c Make use of raw comparison function in CRT verification Hanno Becker 2019-02-21 13:58:38 +00:00
  • f8a42862b7 Add buffers with raw issuer/subject data to CRT structure Hanno Becker 2019-02-20 13:45:16 +00:00
  • a632e3638c Add buffer with raw issuer data to CRL structure Hanno Becker 2019-02-20 13:44:36 +00:00
  • a3a2ca1333 Provide X.509 name comparison based on raw ASN.1 data Hanno Becker 2019-02-20 12:42:07 +00:00
  • 88de342c95 Move x509_name_cmp() from x509_crt.c to x509.c Hanno Becker 2019-02-20 12:41:55 +00:00
  • 83cd8676fa Remove sig_oid parameter from mbedtls_x509_sig_alg_gets() Hanno Becker 2019-02-21 17:13:46 +00:00
  • f226998fa2 Reduce code-size of mbedtls_asn1_get_sequence_of() Hanno Becker 2019-02-20 14:43:55 +00:00
  • b5419867cd Reduce code-size of mbedtls_asn1_get_alg() Hanno Becker 2019-02-20 14:20:45 +00:00
  • 30cb1ac23e Reduce code-size of mbedtls_x509_get_name() Hanno Becker 2019-02-20 11:30:29 +00:00
  • 3470d592ce Simplify implementation of mbedtls_x509_get_name() Hanno Becker 2019-02-20 09:45:17 +00:00
  • b40dc58a83 Introduce a helper macro to check for ASN.1 string tags Hanno Becker 2019-02-20 09:38:45 +00:00
  • ace04a6dc3 Move bounds check into ASN.1 parsing function Hanno Becker 2019-02-20 09:35:34 +00:00
  • 74b89f6051 Use private key to check suitability of PK type when picking srv CRT Hanno Becker 2019-02-17 21:22:07 +00:00
  • 81bb4d0378 Simplify server-side ssl_decrypt_encrypted_pms() Hanno Becker 2019-02-16 11:03:48 +00:00
  • cd03bb2048 Introduce helper functions to free X.509 names and sequences Hanno Becker 2019-02-15 17:15:53 +00:00
  • 7f376f4ece Allow compile-time configuration of DTLS anti replay Hanno Becker 2019-06-12 16:20:48 +01:00
  • af5ab918d9 Detect mismatching compile-time and cmd line config in ssl-opt.sh Hanno Becker 2019-06-21 12:59:46 +01:00
  • aa9fc6dd33 Update query_config.c Hanno Becker 2019-06-13 11:02:44 +01:00
  • ab1ce76682 Mention possibility of hardcoding SSL config in ssl.h Hanno Becker 2019-06-12 13:35:03 +01:00
  • f765ce617f Remove ExtendedMS configuration API if hardcoded at compile-time Hanno Becker 2019-06-21 13:17:14 +01:00
  • 57e72c750c Move getter functions for SSL configuration to ssl_internal.h Hanno Becker 2019-06-12 12:46:31 +01:00
  • 4c4a2e1a0b Don't break func'def after linkage type, fixing check-names.sh Hanno Becker 2019-06-12 12:45:12 +01:00
  • 1ab322bb51 Remove extended_ms field from HS param if ExtendedMS enforced Hanno Becker 2019-06-11 14:50:54 +01:00
  • a49ec56f51 Introduce getter function for extended_ms field in HS struct Hanno Becker 2019-06-11 14:47:55 +01:00
  • 3010d55a3b Introduce helper macro indicating if use of ExtendedMS is enforced Hanno Becker 2019-06-11 14:46:16 +01:00
  • 03b64fa6c1 Rearrange ExtendedMasterSecret parsing logic Hanno Becker 2019-06-11 14:39:38 +01:00
  • aabbb582eb Exemplify harcoding SSL config at compile-time in example of ExtMS Hanno Becker 2019-06-11 13:43:27 +01:00
  • 7a52464fba Driver registration: more future-proof bad-version test Gilles Peskine 2019-06-24 19:58:12 +02:00
  • 45a8ca373c Fix typos in function argument names Gilles Peskine 2019-06-24 15:08:56 +02:00
  • 55a6acfe4d Add negative tests for driver registration Gilles Peskine 2019-06-24 14:34:59 +02:00
  • d089021128 Unregister drivers on library deinitialization Gilles Peskine 2019-06-24 14:34:43 +02:00
  • a899a72fd0 Implement the secure element driver registration function Gilles Peskine 2019-06-24 14:06:43 +02:00
  • 393338ca78 Merge pull request #586 from ARMmbed/remove_peer_crt_after_handshake_no_digest-baremetal Manuel Pégourié-Gonnard 2019-06-24 18:12:00 +02:00
  • 79cf74a95f Merge pull request #583 from ARMmbed/remove_peer_crt_after_handshake-baremetal Manuel Pégourié-Gonnard 2019-06-24 18:11:46 +02:00
  • 8dcd80ec5c Merge pull request #578 from ARMmbed/x509_parse_bf-baremetal Manuel Pégourié-Gonnard 2019-06-24 18:08:33 +02:00
  • cc3b7ccb04 Merge pull request #579 from Patater/bm-dont-use-non-existent-encrypt-then-mac Manuel Pégourié-Gonnard 2019-06-24 18:06:53 +02:00
  • bc2adf94a8 Fix minor type choice inconsistency Gilles Peskine 2019-06-24 15:45:09 +02:00
  • 661d725044 Deref pointer when using sizeof in x509_get_other_name Sébastien Duquette 2019-06-23 17:45:26 -04:00
  • 2c2243dc0b Smoke test for secure element driver registration Gilles Peskine 2019-06-24 13:47:24 +02:00
  • d910e928e8 Declare a function to register a secure element driver Gilles Peskine 2019-06-24 13:47:07 +02:00
  • b6cadea6a5 Secure element driver structure Gilles Peskine 2019-06-24 13:46:37 +02:00
  • 7b03e87fbc Merge remote-tracking branch 'restricted/pr/582' into mbedtls-2.16-restricted Jaeden Amero 2019-06-24 11:40:59 +01:00
  • 1e61b0fb3f Merge remote-tracking branch 'restricted/pr/581' into mbedtls-2.7-restricted Jaeden Amero 2019-06-24 11:40:49 +01:00
  • bd3a7464b7 Merge remote-tracking branch 'restricted/pr/573' into development-restricted Jaeden Amero 2019-06-24 11:40:33 +01:00
  • e6d5781ef4 Merge pull request #132 from gilles-peskine-arm/mbedtls-stats-api Gilles Peskine 2019-06-24 10:52:43 +02:00
  • 7fff1fb7c5 Ignore compiled object files and executables Philippe Antoine 2019-06-07 22:26:36 +02:00
  • a8210b3b98 Also clean the fuzz subdirectory Philippe Antoine 2019-06-07 22:25:26 +02:00
  • cd6cd811f1 copyediting README.md Philippe Antoine 2019-06-06 09:22:27 +02:00
  • c32fd248e3 Protecting client/server fuzz targts with ifdefs Philippe Antoine 2019-06-06 09:12:53 +02:00
  • 03e87d909d Makefile support 1 Philippe Antoine 2019-06-04 19:37:52 +02:00
  • 8149627b80 Fuzz README and direct compilation Philippe Antoine 2019-06-04 14:47:58 +02:00
  • 801194b625 Adds a ChangeLog entry Philippe Antoine 2019-06-04 14:17:41 +02:00
  • 499c735d5e Factoring code Philippe Antoine 2019-06-04 14:14:33 +02:00
  • 08633825c0 Using custom time Philippe Antoine 2019-06-04 14:03:06 +02:00
  • dbc0db9449 include bignum.h from x509_crt.h Philippe Antoine 2018-05-28 14:27:53 +02:00
  • 3abe15bc2c Fixes dummy leak in fuzz driver Philippe Antoine 2019-06-04 12:06:34 +02:00
  • 2b7c9a2e1a Use rand instead of srand Philippe Antoine 2019-06-04 12:05:36 +02:00
  • f049304895 Removes warnings for unused parameters Philippe Antoine 2019-06-04 12:01:51 +02:00
  • 9c7b698a2e Fuzz performance test without entropy Philippe Antoine 2018-05-29 17:00:39 +02:00
  • 7233352432 Fuzz testing Philippe Antoine 2018-05-03 16:40:24 +02:00
  • 7f132cc1a3 Merge remote-tracking branch 'origin/pr/2714' into mbedtls-2.16 Jaeden Amero 2019-06-21 13:27:41 +01:00
  • 5ecbd14fdd Merge remote-tracking branch 'origin/pr/2701' into mbedtls-2.16 Jaeden Amero 2019-06-21 13:24:18 +01:00
  • a5ebd5fe10 Merge remote-tracking branch 'origin/pr/2615' into mbedtls-2.16 Jaeden Amero 2019-06-21 13:19:33 +01:00
  • 096bccf204 Merge remote-tracking branch 'origin/pr/2450' into mbedtls-2.16 Jaeden Amero 2019-06-21 13:12:54 +01:00
  • f580d43bad Merge remote-tracking branch 'origin/pr/2053' into mbedtls-2.16 Jaeden Amero 2019-06-21 12:56:05 +01:00
  • 0b2035794f Merge remote-tracking branch 'origin/pr/2713' into mbedtls-2.7 Jaeden Amero 2019-06-21 13:26:34 +01:00
  • c0ff88e624 Merge remote-tracking branch 'origin/pr/2702' into mbedtls-2.7 Jaeden Amero 2019-06-21 13:22:22 +01:00
  • 54c800ef24 Merge remote-tracking branch 'origin/pr/2616' into mbedtls-2.7 Jaeden Amero 2019-06-21 13:15:39 +01:00
  • 0cf1776a2d Merge remote-tracking branch 'origin/pr/2451' into mbedtls-2.7 Jaeden Amero 2019-06-21 13:12:05 +01:00
  • dd11fbccd2 Merge remote-tracking branch 'origin/pr/2320' into mbedtls-2.7 Jaeden Amero 2019-06-21 13:10:39 +01:00
  • 66b7edb108 Merge remote-tracking branch 'origin/pr/2711' into development Jaeden Amero 2019-06-21 13:25:30 +01:00