Commit Graph

  • fd0f65459c Merge remote-tracking branch 'origin/pr/2697' into development Jaeden Amero 2019-06-21 13:21:05 +01:00
  • e2d5b9e5cc Merge remote-tracking branch 'origin/pr/2690' into development Jaeden Amero 2019-06-21 13:20:22 +01:00
  • 8d936e87fb Merge remote-tracking branch 'origin/pr/2681' into development Jaeden Amero 2019-06-21 13:20:02 +01:00
  • ca4e4a8b2a Merge remote-tracking branch 'origin/pr/2614' into development Jaeden Amero 2019-06-21 13:15:07 +01:00
  • aada0c7fd0 Merge remote-tracking branch 'origin/pr/2053' into development Jaeden Amero 2019-06-21 12:54:27 +01:00
  • 0c42e908e5 programs: Make make clean clean all programs always Jaeden Amero 2019-06-03 09:14:14 +01:00
  • 16529b21fa ssl_tls: Enable Suite B with subset of ECP curves Jaeden Amero 2019-06-03 08:27:16 +01:00
  • 73a36ff512 windows: Fix Release x64 configuration Jaeden Amero 2019-06-03 08:13:10 +01:00
  • b196a0a781 timing: Remove redundant include file Jaeden Amero 2019-05-30 13:15:33 +01:00
  • 88a6e89fb6 net_sockets: Fix typo in net_would_block() Jaeden Amero 2019-05-29 09:38:29 +01:00
  • a1ab6fed91 programs: Make make clean clean all programs always Jaeden Amero 2019-06-03 09:14:14 +01:00
  • ba59f6b38e ssl_tls: Enable Suite B with subset of ECP curves Jaeden Amero 2019-06-03 08:27:16 +01:00
  • a33bb945eb windows: Fix Release x64 configuration Jaeden Amero 2019-06-03 08:13:10 +01:00
  • 548ba2e190 timing: Remove redundant include file Jaeden Amero 2019-05-30 13:15:33 +01:00
  • 1529ede823 net_sockets: Fix typo in net_would_block() Jaeden Amero 2019-05-29 09:38:29 +01:00
  • 1d10257d21 Copy the new header files to Mbed OS on-target test directories Gilles Peskine 2019-06-20 17:23:58 +02:00
  • 54b8eabd76 Merge pull request #153 from gilles-peskine-arm/remove_unused_functions-iotssl-2563-clang-warnings Jaeden Amero 2019-06-20 15:04:29 +01:00
  • 9e5bcbd8d1 Remove unused functions Gilles Peskine 2019-06-19 18:18:58 +02:00
  • 3cff768ad4 Move the one non-crypto-specific PSA helper macro to a new header Gilles Peskine 2019-06-20 12:54:43 +02:00
  • 1838e82190 Rename psa_helpers.function to psa_crypto_helpers.h Gilles Peskine 2019-06-20 12:40:56 +02:00
  • befe1e1536 programs: Make make clean clean all programs always Jaeden Amero 2019-06-03 09:14:14 +01:00
  • d431104926 ssl_tls: Enable Suite B with subset of ECP curves Jaeden Amero 2019-06-03 08:27:16 +01:00
  • 4f4af6e2ef windows: Fix Release x64 configuration Jaeden Amero 2019-06-03 08:13:10 +01:00
  • 32eb58ff29 platform: Include stdarg.h where needed Jaeden Amero 2019-05-30 13:18:24 +01:00
  • a180926556 timing: Remove redundant include file Jaeden Amero 2019-05-30 13:15:33 +01:00
  • a152e42e9b net_sockets: Fix typo in net_would_block() Jaeden Amero 2019-05-29 09:38:29 +01:00
  • 982fe790c1 Remove unused functions Gilles Peskine 2019-06-19 18:18:58 +02:00
  • e256f7c9ae Add test for !KEEP_PEER_CERTIFICATE + !RENEGOTIAITON to all.sh Hanno Becker 2019-06-07 11:14:53 +01:00
  • 5882dd0856 Remove CRT digest from SSL session if !RENEGO + !KEEP_PEER_CERT Hanno Becker 2019-06-06 16:25:57 +01:00
  • 0528f82fa9 Clarify documentation of serialized session format Hanno Becker 2019-06-18 12:45:31 +01:00
  • d972f005bf Use consistent error messages in check_config.h Hanno Becker 2019-06-18 12:41:15 +01:00
  • 17daaa5cc6 Move return statement in ssl_srv_check_client_no_crt_notification Hanno Becker 2019-06-18 12:31:45 +01:00
  • 2326d20361 Validate consistency of certificate hash type and length in session Hanno Becker 2019-06-06 14:54:55 +01:00
  • fd5dc8ae07 Fix unused variable warning in ssl_parse_certificate_coordinate() Hanno Becker 2019-03-01 08:10:46 +00:00
  • 488c8dee47 Add missing compile time guard in ssl_client2 Hanno Becker 2019-02-27 08:34:31 +00:00
  • b6f7241741 Update programs/ssl/query_config.c Hanno Becker 2019-02-26 14:38:40 +00:00
  • b7fab76890 ssl_client2: Reset peer CRT info string on reconnect Hanno Becker 2019-02-26 12:36:53 +00:00
  • c39e23ebb6 Add further debug statements on assertion failures Hanno Becker 2019-02-26 12:36:01 +00:00
  • 42de8f8a42 Fix typo in documentation of ssl_parse_certificate_chain() Hanno Becker 2019-02-26 11:51:34 +00:00
  • e9839c001b Add debug output in case of assertion failure Hanno Becker 2019-02-26 11:51:06 +00:00
  • 2984bd2543 Add config sanity check for !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE Hanno Becker 2019-02-26 11:43:09 +00:00
  • f9ca30d042 ssl_client2: Zeroize peer CRT info buffer when reconnecting Hanno Becker 2019-02-26 11:38:29 +00:00
  • 890d7ee4cb Reintroduce numerous ssl-opt.sh tests if !MBEDTLS_SSL_KEEP_PEER_CERT Hanno Becker 2019-02-25 18:01:57 +00:00
  • 975c463b3f ssl_client2: Extract peer CRT info from verification callback Hanno Becker 2019-02-25 17:43:18 +00:00
  • b94cf822f3 unconditional mbedtls_ssl_conf_rng Philippe Antoine 2019-06-19 15:19:38 +02:00
  • 24bc570814 Improve documentation of mbedtls_ssl_get_peer_cert() Hanno Becker 2019-02-25 10:13:43 +00:00
  • 3ed64578d2 Improve documentation of MBEDTLS_SSL_KEEP_PEER_CERTIFICATE Hanno Becker 2019-02-25 10:13:33 +00:00
  • dd689316d1 Fix indentation of Doxygen comment in ssl_internal.h Hanno Becker 2019-02-25 10:08:06 +00:00
  • 9d64b789cf Set peer CRT length only after successful allocation Hanno Becker 2019-02-25 10:06:59 +00:00
  • 257ef65d94 Remove question in comment about verify flags on cli vs. server Hanno Becker 2019-02-25 10:03:26 +00:00
  • e669770b52 Remove misleading and redundant guard around restartable ECC field Hanno Becker 2019-02-22 16:27:15 +00:00
  • 92820a1dff Add test for !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE to all.sh Hanno Becker 2019-02-19 11:10:48 +00:00
  • 34106f6ae2 Free peer CRT chain immediately after verifying it Hanno Becker 2019-02-08 14:59:05 +00:00
  • 0cc7af5be5 Parse peer's CRT chain in-place from the input buffer Hanno Becker 2019-02-08 14:39:16 +00:00
  • 6c83db7f7b Free peer's public key as soon as it's no longer needed Hanno Becker 2019-02-08 14:06:00 +00:00
  • 17572473c6 Correct compile-time guards for ssl_clear_peer_cert() Hanno Becker 2019-02-08 07:19:04 +00:00
  • 597ffe43a1 Adapt ChangeLog Hanno Becker 2019-02-07 13:42:45 +00:00
  • bfab9dfea1 Guard mbedtls_ssl_get_peer_cert() by new compile-time option Hanno Becker 2019-02-07 13:18:46 +00:00
  • 8b6d2cd5af Add dependency to ssl-opt.sh tests which need peer CRT debug info Hanno Becker 2019-02-07 13:44:35 +00:00
  • 81d11aa640 Adapt mbedtls_ssl_parse_certificate() to removal of peer_cert field Hanno Becker 2019-02-07 13:18:21 +00:00
  • 5062897507 Adapt ssl_clear_peer_cert() to removal of peer_cert field Hanno Becker 2019-02-07 13:17:53 +00:00
  • d5258faa29 Adapt mbedtls_ssl_session_copy() to removal of peer_cert field Hanno Becker 2019-02-07 12:27:42 +00:00
  • cd90126ab3 Adapt client auth detection in ssl_parse_certificate_verify() Hanno Becker 2019-02-07 13:17:25 +00:00
  • b265f5f191 Use mbedtls_ssl_get_peer_cert() to query peer cert in cert_app Hanno Becker 2019-02-07 13:28:57 +00:00
  • 0833c1082b Adapt server-side signature verification to use raw public key Hanno Becker 2019-02-06 18:31:04 +00:00
  • 69fad13853 Adapt client-side signature verification to use raw public key Hanno Becker 2019-02-06 18:26:03 +00:00
  • 53b6b7e09b Adapt ssl_get_ecdh_params_from_cert() to use raw public key Hanno Becker 2019-02-06 17:44:07 +00:00
  • 374800a231 Adapt ssl_write_encrypted_pms() to use raw public key Hanno Becker 2019-02-06 16:49:54 +00:00
  • cf291d63dd Make a copy of peer's raw public key after verifying its CRT chain Hanno Becker 2019-02-06 16:19:04 +00:00
  • 3bf8cdf2f8 Add field for peer's raw public key to TLS handshake param structure Hanno Becker 2019-02-06 16:18:31 +00:00
  • 32c530ece2 Add raw public key buffer bounds to mbedtls_x509_crt struct Hanno Becker 2019-02-06 16:13:41 +00:00
  • 2e6d34761f Remove peer CRT from mbedtls_ssl_session if !KEEP_PEER_CERT Hanno Becker 2019-02-06 15:40:27 +00:00
  • 4a2f8e584f Add peer CRT digest to session tickets Hanno Becker 2019-02-06 15:23:38 +00:00
  • e4aeb76a2c Parse and verify peer CRT chain in local variable Hanno Becker 2019-02-05 17:19:52 +00:00
  • df75938b84 Mitigate triple handshake attack by comparing digests only Hanno Becker 2019-02-05 17:02:46 +00:00
  • 3008d2869f Compute digest of peer's end-CRT in mbedtls_ssl_parse_certificate() Hanno Becker 2019-02-05 17:02:28 +00:00
  • 9fb6e2e203 Extend mbedtls_ssl_session by buffer holding peer CRT digest Hanno Becker 2019-02-05 17:00:50 +00:00
  • c88289a64d Update version_features.c Hanno Becker 2019-02-07 15:13:38 +00:00
  • b90f655a78 Add configuration option to remove peer CRT after handshake Hanno Becker 2019-02-05 17:04:00 +00:00
  • 869144b3e9 Improve documentation of mbedtls_ssl_get_peer_cert() Hanno Becker 2019-02-05 11:33:12 +00:00
  • f02d5501d8 Re-classify errors on missing peer CRT Hanno Becker 2019-02-06 17:37:32 +00:00
  • a177b38618 Simplify session cache implementation via mbedtls_ssl_session_copy() Hanno Becker 2019-02-06 14:53:19 +00:00
  • 58fccf2f62 Give ssl_session_copy() external linkage Hanno Becker 2019-02-06 14:30:46 +00:00
  • 35e41771fe Allow passing any X.509 CRT chain to ssl_parse_certificate_chain() Hanno Becker 2019-02-05 15:37:23 +00:00
  • 3cf5061091 Introduce helper function for peer CRT chain verification Hanno Becker 2019-02-05 14:36:34 +00:00
  • a7c1df6321 Don't progress TLS state machine on peer CRT chain parsing error Hanno Becker 2019-02-05 14:35:46 +00:00
  • ae39b9eb48 Make use of macro and helper detecting whether CertRequest allowed Hanno Becker 2019-02-07 12:32:43 +00:00
  • 6b9a6f3f37 Add helper function to check whether a CRT msg is expected Hanno Becker 2019-02-07 10:11:07 +00:00
  • 5097cba93c Introduce helper function to determine whether suite uses server CRT Hanno Becker 2019-02-05 13:36:46 +00:00
  • b71e90acc5 Use helper macro to detect whether some ciphersuite uses CRTs Hanno Becker 2019-02-05 13:20:55 +00:00
  • 613d490bf1 Unify state machine update in mbedtls_ssl_parse_certificate() Hanno Becker 2019-02-05 13:11:17 +00:00
  • a46c287796 Clear peer's CRT chain outside before parsing new one Hanno Becker 2019-02-05 13:08:01 +00:00
  • b8a085744f Introduce helper to check for no-CRT notification from client Hanno Becker 2019-02-05 12:49:06 +00:00
  • 8794fd927c Introduce CRT counter to CRT chain parsing function Hanno Becker 2019-02-05 12:38:45 +00:00
  • 22141593e1 Introduce helper function to clear peer CRT from session structure Hanno Becker 2019-02-05 12:38:15 +00:00
  • 933b9fc815 Break overly long line in definition of mbedtls_ssl_get_session() Hanno Becker 2019-02-05 11:42:30 +00:00
  • 1332f35a4e Don't reuse CRT from initial handshake during renegotiation Hanno Becker 2019-02-05 15:06:15 +00:00
  • 738153a048 Adding usage and removing dummy random Philippe Antoine 2019-06-18 20:16:43 +02:00
  • e210b6616d Merge remote-tracking branch 'origin/pr/595' into baremetal Simon Butcher 2019-06-18 17:36:54 +01:00
  • 7400e8fb36 Merge remote-tracking branch 'origin/pr/591' into baremetal Simon Butcher 2019-06-18 17:36:45 +01:00