Commit Graph

  • 227ee24c1f list-symbols.sh: if the build fails, print the build transcript Gilles Peskine 2019-05-22 18:22:58 +02:00
  • 017adc7c9c Document "check-names.sh -v" Gilles Peskine 2019-05-22 18:22:45 +02:00
  • 39d7c58db5 list-symbols.sh: if the build fails, print the build transcript Gilles Peskine 2019-05-22 18:22:58 +02:00
  • 902a1f3f7f Document "check-names.sh -v" Gilles Peskine 2019-05-22 18:22:45 +02:00
  • 9a52cf3d97 list-symbols.sh: if the build fails, print the build transcript Gilles Peskine 2019-05-22 18:22:58 +02:00
  • 0c12e308af Document "check-names.sh -v" Gilles Peskine 2019-05-22 18:22:45 +02:00
  • ac36388e3e Exemplify ways of calling mbedtls_ssl_get_peer_cid() in ssl_client2 Hanno Becker 2019-05-22 16:59:25 +01:00
  • 633d604837 Allow passing NULL pointers to mbedtls_ssl_get_peer_cid() Hanno Becker 2019-05-22 16:50:35 +01:00
  • 56f071fb9e Add negative test for malformed SAN Ron Eldor 2019-05-22 17:21:08 +03:00
  • 8907b019e7 Merge pull request #124 from Patater/full-parent-paths Jaeden Amero 2019-05-22 15:08:52 +01:00
  • 5aebeeb5f4 Set next sequence of subject_alt_names to NULL Ron Eldor 2019-05-22 16:41:21 +03:00
  • 8d4d4f55f0 Makefile: Use full paths to refer to parent files Jaeden Amero 2019-05-22 13:53:00 +01:00
  • 0cad4bac30 Merge pull request #123 from gilles-peskine-arm/api-link-index Jaeden Amero 2019-05-22 12:40:03 +01:00
  • 496c176d90 Merge pull request #266 from ARMmbed/psa-policy_alg2-poc Jaeden Amero 2019-05-22 11:55:01 +01:00
  • 549ea8676a Minor documentation improvements Gilles Peskine 2019-05-22 11:45:59 +02:00
  • 7a91ece3be Update link to PSA Crypto API HTML Gilles Peskine 2019-05-21 20:05:34 +02:00
  • 4719db39b7 Merge pull request #121 from gilles-peskine-arm/psa-api-1.0-beta-beta3_fix_unlinked_macros Jaeden Amero 2019-05-21 18:41:03 +01:00
  • a9b9cf7d1e Document macros that are referenced Gilles Peskine 2019-05-21 19:18:33 +02:00
  • 6a21123619 Remove obsolete mentions of PSA_ERROR_EMPTY_SLOT Gilles Peskine 2019-05-21 19:11:07 +02:00
  • 5b93990fc1 Merge pull request #119 from gilles-peskine-arm/psa-api-1.0-beta-beta3_minor_fixes Jaeden Amero 2019-05-21 17:52:57 +01:00
  • a741d39893 State that all error codes are negative Gilles Peskine 2019-05-21 16:01:09 +02:00
  • 737c6bef6a Fix grammar Gilles Peskine 2019-05-21 16:01:06 +02:00
  • 56e2dc8010 Use "sufficient buffer size" in buffer size macros Gilles Peskine 2019-05-21 15:59:56 +02:00
  • 2cb9e39b50 Convert TLS1.2 KDF descriptions to multistep key derivation Gilles Peskine 2019-05-21 15:58:13 +02:00
  • 6c6195d7ba Remove implementation comment from API specification Gilles Peskine 2019-05-21 15:57:11 +02:00
  • 4754cdeef8 Improve description of psa_open_key() Gilles Peskine 2019-05-21 15:56:29 +02:00
  • 52315e4c16 Enrollment algorithm in policy: add tests of psa_copy_key Gilles Peskine 2019-05-20 18:03:39 +02:00
  • 705cbfd802 Enrollment algorithm in policy: add support in psa_copy_key tests Gilles Peskine 2019-05-20 17:28:11 +02:00
  • 131aa31c82 New key file format for 1.0.1 Gilles Peskine 2019-05-20 17:17:17 +02:00
  • 640273a35e Update key file format information for 1.0.0 Gilles Peskine 2019-05-20 17:16:43 +02:00
  • 468c96cccc Enrollment algorithm in policy: update persistent key tests Gilles Peskine 2019-05-14 11:16:10 +02:00
  • 81efb391eb Enrollment algorithm in policy: implement persistent keys Gilles Peskine 2019-05-13 14:38:16 +02:00
  • 6fbfdb9e06 Enrollment algorithm in policy: test persistent keys Gilles Peskine 2019-05-13 14:32:11 +02:00
  • cbce4d8889 Persistent key reload: test more metadata Gilles Peskine 2019-05-13 14:24:15 +02:00
  • 2c86ebc2f8 EC key pair import: check the buffer size Gilles Peskine 2019-05-13 14:21:57 +02:00
  • 536e20571a New macro to get the bit size of an elliptic curve Gilles Peskine 2019-05-13 12:51:03 +02:00
  • ca5bed742f Align test functions to usage/alg parameter order Gilles Peskine 2019-05-13 11:29:51 +02:00
  • d6f371b1ba Keys may allow a second algorithm Gilles Peskine 2019-05-10 19:33:38 +02:00
  • d7d43b9791 Convert code samples to the new attribute-based key creation API Gilles Peskine 2019-05-21 15:56:03 +02:00
  • a0c0655c91 Add missing declarations to the API document Gilles Peskine 2019-05-21 15:54:54 +02:00
  • 3d07ffade2 Merge remote-tracking branch 'tls/development' into development Jaeden Amero 2019-05-21 08:57:44 +01:00
  • 31d1432233 Merge remote-tracking branch 'origin/pr/2530' into development Jaeden Amero 2019-05-20 18:02:25 +01:00
  • 6945983588 Rename MBEDTLS_SSL_CID->MBEDTLS_SSL_DTLS_CONNECTION_ID in SSL suite Hanno Becker 2019-05-20 15:40:23 +01:00
  • 2f8c804d79 Fix typo in Doxygen documentation of mbedtls_ssl_conf_cid() Hanno Becker 2019-05-20 10:19:56 +01:00
  • a5a2b08a05 Rename MBEDTLS_SSL_CID to MBEDTLS_SSL_DTLS_CONNECTION_ID Hanno Becker 2019-05-15 14:03:01 +01:00
  • 3cdf8fe50b Consistently reference CID draft through name + URL Hanno Becker 2019-05-15 10:26:32 +01:00
  • e582d12264 Slightly reorder CID debug messages during creation of transforms Hanno Becker 2019-05-15 10:21:55 +01:00
  • cfa6be76bd Fix typo in documentation of mbedtls_ssl_context::cid_in_use Hanno Becker 2019-05-15 10:17:48 +01:00
  • 96f35b4f06 Improve wording of documentation of mbedtls_ssl_get_peer_cid() Hanno Becker 2019-05-15 10:14:16 +01:00
  • 5fcac0dc99 Slightly reword documentation of mbedtls_ssl_set_cid() Hanno Becker 2019-05-15 10:12:11 +01:00
  • 53f36e9230 Use full sentences in Doxygen documentation of mbedtls_ssl_set_cid() Hanno Becker 2019-05-15 10:10:36 +01:00
  • dc19b41eb3 Use uniform spacing in def's of MBEDTLS_SSL_CID_{IN|OUT}_LEN_MAX Hanno Becker 2019-05-15 10:09:15 +01:00
  • f83017ccd1 Improve wording in documentation of mbedtls_ssl_set_cid() Hanno Becker 2019-05-15 10:08:35 +01:00
  • 75b334f33a Update references to CID draft to version 5 Hanno Becker 2019-05-15 10:07:44 +01:00
  • ef2b8b0dcf Improve wording in documentation of MBEDTLS_SSL_CID Hanno Becker 2019-05-15 09:44:59 +01:00
  • 791ec6bff2 Fix mbedtls_ssl_conf_cid() to not depend on macro constant values Hanno Becker 2019-05-14 11:45:26 +01:00
  • a69b4315eb Modify MBEDTLS_SSL_UNEXPECTED_CID_{FAIL|IGNORE} to ignore by default Hanno Becker 2019-05-14 11:44:35 +01:00
  • b86c2a8c5d Remove warnings about unfinished CID implementation Hanno Becker 2019-05-14 11:35:59 +01:00
  • e8eff9a517 Allow to configure the stack's behaviour on unexpected CIDs Hanno Becker 2019-05-14 11:30:10 +01:00
  • 7c3cdb62de Add specific SSL error code for unexpected CIDs Hanno Becker 2019-05-14 11:02:36 +01:00
  • 7842609e3b Remove restriction on value of MBEDTLS_SSL_CID_PADDING_GRANULARITY Hanno Becker 2019-05-13 15:31:17 +01:00
  • 241947d062 Reword CID documentation Hanno Becker 2019-05-13 15:26:11 +01:00
  • d23605d056 Add missing compile-time guard around CID API in ssl_server2 Hanno Becker 2019-05-09 15:56:01 +01:00
  • 7ba3568318 Make signed to unsigned integer truncation cast explicit Hanno Becker 2019-05-09 15:54:28 +01:00
  • 550e1662c7 Allow the configuration of padding when using CID extension Hanno Becker 2019-05-08 17:37:58 +01:00
  • 9bf10ea25d Set CID pointer to default value even for TLS Hanno Becker 2019-05-08 16:43:21 +01:00
  • f65ad82eba Fix typo in comment Hanno Becker 2019-05-08 16:26:21 +01:00
  • 84bbc51968 Add CID test not using datagram packing to ssl-opt.sh Hanno Becker 2019-05-08 16:20:46 +01:00
  • 6c4bc14021 UDP Proxy: Don't drop CID records Hanno Becker 2019-05-08 15:36:31 +01:00
  • 04ca04caf2 Add Proxy tests for Connection ID to ssl-opt.sh Hanno Becker 2019-05-08 13:31:15 +01:00
  • 043a2a4869 Remove indicators and warnings about unfinished CID implementation Hanno Becker 2019-05-08 13:24:25 +01:00
  • ad8e2c9144 Fix mismatching debug grep in ssl-opt.sh CID tests Hanno Becker 2019-05-08 13:19:53 +01:00
  • 9687029d22 Add support for change of CID to ssl_client2 / ssl_server2 Hanno Becker 2019-05-03 17:30:59 +01:00
  • b7f9e9c9a5 Reintroduce grepping for debug messages in CID tests in ssl-opt.sh Hanno Becker 2019-05-03 17:04:23 +01:00
  • 4932f9f229 Re-enable passing CIDs to record transforms Hanno Becker 2019-05-03 15:23:51 +01:00
  • 687e0fb568 Don't fail on record with unexpected CID Hanno Becker 2019-05-08 13:02:55 +01:00
  • abd7c89923 Re-enable CID comparison when decrypting CID-based records Hanno Becker 2019-05-08 13:02:22 +01:00
  • 8b09b73cb1 Implement parsing of CID-based records Hanno Becker 2019-05-08 12:03:28 +01:00
  • ff3e9c2d0d Adapt record encryption/decryption routines to change of record type Hanno Becker 2019-05-08 11:57:13 +01:00
  • 70e7928d76 Add pointers to in/out CID fields to mbedtls_ssl_context Hanno Becker 2019-05-03 14:34:53 +01:00
  • add0190059 Account for additional record expansion when using CIDs Hanno Becker 2019-05-08 15:40:11 +01:00
  • eec2be9c9f Add CID configuration API Hanno Becker 2019-05-03 13:06:44 +01:00
  • ccc2456db9 Re-implement mbedtls_ssl_{in/out}_hdr_len() via in/out pointers Hanno Becker 2019-05-03 15:05:27 +01:00
  • 4339576208 Split mbedtls_ssl_hdr_len() in separate functions for in/out records Hanno Becker 2019-05-03 14:46:38 +01:00
  • 46483f11bf Add helper function to check validity of record content type Hanno Becker 2019-05-03 13:25:54 +01:00
  • 74dd3a70d8 Move dropping of unexpected AD records to after record decryption Hanno Becker 2019-05-03 16:54:26 +01:00
  • f5970a0945 Set pointer to start of plaintext at record decryption time Hanno Becker 2019-05-08 09:38:41 +01:00
  • 16e9ae2f95 Treat an invalid record after decryption as fatal Hanno Becker 2019-05-03 16:36:59 +01:00
  • 70463dbb2d Expain rationale for handling of consecutive empty AD records Hanno Becker 2019-05-08 10:38:32 +01:00
  • 78c430269b Don't allow calling CID API outside of DTLS Hanno Becker 2019-05-03 14:38:32 +01:00
  • 6943920839 Add missing dependencies in unit tests for CID-based record enc/dec Hanno Becker 2019-05-20 15:23:11 +01:00
  • 1f02f05f2e Fix additional data calculation if CID is disabled Hanno Becker 2019-05-09 11:38:24 +01:00
  • 3b1a88506b Remove unnecessary empty line in ssl_tls.c Hanno Becker 2019-05-20 15:10:50 +01:00
  • 7dc2577f01 Don't quote DTLSInnerPlaintext structure multiple times Hanno Becker 2019-05-20 15:08:01 +01:00
  • 8969369a83 Improve wording in ssl_build_inner_plaintext() Hanno Becker 2019-05-20 15:06:12 +01:00
  • 24ce1eba66 Remove unnecessary whitespace in ssl_extract_add_data_from_record() Hanno Becker 2019-05-20 15:01:46 +01:00
  • 28a0c4e149 Reduce stack usage for additional data buffers in record dec/enc Hanno Becker 2019-05-20 14:54:26 +01:00
  • acadb0a8c9 Add length of CID to additional data used for record protection Hanno Becker 2019-05-08 18:15:21 +01:00
  • 99abf51056 Improve documentation of ssl_extract_add_data_from_record() Hanno Becker 2019-05-20 14:50:53 +01:00
  • 346a590c1c Unify documentation of internal SSL record structure Hanno Becker 2019-05-20 14:49:02 +01:00