Commit Graph

  • 13c327d500 Adapt ssl_clear_peer_cert() to removal of peer_cert field Hanno Becker 2019-02-07 13:17:53 +00:00
  • 6d1986e6f5 Adapt mbedtls_ssl_session_copy() to removal of peer_cert field Hanno Becker 2019-02-07 12:27:42 +00:00
  • 94cc26dfa6 Adapt session ticket implementation to removal of peer_cert field Hanno Becker 2019-02-07 12:26:46 +00:00
  • abe6f66c00 Remove peer CRT from mbedtls_ssl_session if new option is disabled Hanno Becker 2019-02-07 13:29:55 +00:00
  • 2a831a4ba7 Adapt client auth detection in ssl_parse_certificate_verify() Hanno Becker 2019-02-07 13:17:25 +00:00
  • 57b33c9e4e Use mbedtls_ssl_get_peer_cert() to query peer cert in cert_app Hanno Becker 2019-02-07 13:28:57 +00:00
  • a1ab9be367 Adapt server-side signature verification to use raw public key Hanno Becker 2019-02-06 18:31:04 +00:00
  • a6899bb89d Adapt client-side signature verification to use raw public key Hanno Becker 2019-02-06 18:26:03 +00:00
  • be7f50866d Adapt ssl_get_ecdh_params_from_cert() to use raw public key Hanno Becker 2019-02-06 17:44:07 +00:00
  • c7d7e29b46 Adapt ssl_write_encrypted_pms() to use raw public key Hanno Becker 2019-02-06 16:49:54 +00:00
  • a27475335a Make a copy of peer's raw public key after verifying its CRT chain Hanno Becker 2019-02-06 16:19:04 +00:00
  • 75173121fe Add field for peer's raw public key to TLS handshake param structure Hanno Becker 2019-02-06 16:18:31 +00:00
  • 494dd7a6b4 Add raw public key buffer bounds to mbedtls_x509_crt struct Hanno Becker 2019-02-06 16:13:41 +00:00
  • a887d1a5b6 Remove peer CRT from cache if !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE Hanno Becker 2019-02-06 15:57:49 +00:00
  • c966bd16be Remove peer CRT from tickets if !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE Hanno Becker 2019-02-06 15:40:27 +00:00
  • c5fcbb33c0 Add peer CRT digest to session tickets Hanno Becker 2019-02-06 15:23:38 +00:00
  • 3dad311ef0 Parse and verify peer CRT chain in local variable Hanno Becker 2019-02-05 17:19:52 +00:00
  • 177475a3aa Mitigate triple handshake attack by comparing digests only Hanno Becker 2019-02-05 17:02:46 +00:00
  • 6bbd94c4eb Compute digest of peer's end-CRT in mbedtls_ssl_parse_certificate() Hanno Becker 2019-02-05 17:02:28 +00:00
  • 9198ad1101 Extend mbedtls_ssl_session by buffer holding peer CRT digest Hanno Becker 2019-02-05 17:00:50 +00:00
  • 8d84fd83ff Update version_features.c Hanno Becker 2019-02-07 15:13:38 +00:00
  • bb278f52ca Add configuration option to remove peer CRT after handshake Hanno Becker 2019-02-05 17:04:00 +00:00
  • 4a82c1ccb4 Improve documentation of mbedtls_ssl_get_peer_cert() Hanno Becker 2019-02-05 11:33:12 +00:00
  • 8273df8383 Re-classify errors on missing peer CRT Hanno Becker 2019-02-06 17:37:32 +00:00
  • 0329f75a93 Increase robustness and documentation of ticket implementation Hanno Becker 2019-02-06 15:04:32 +00:00
  • aee8717877 Simplify session cache implementation via mbedtls_ssl_session_copy() Hanno Becker 2019-02-06 14:53:19 +00:00
  • 52055ae91f Give ssl_session_copy() external linkage Hanno Becker 2019-02-06 14:30:46 +00:00
  • c7bd780e02 Allow passing any X.509 CRT chain to ssl_parse_certificate_chain() Hanno Becker 2019-02-05 15:37:23 +00:00
  • 6863619a2f Introduce helper function for peer CRT chain verification Hanno Becker 2019-02-05 14:36:34 +00:00
  • fcd9e71cdf Don't progress TLS state machine on peer CRT chain parsing error Hanno Becker 2019-02-05 14:35:46 +00:00
  • 77adddc9e9 Make use of macro and helper detecting whether CertRequest allowed Hanno Becker 2019-02-07 12:32:43 +00:00
  • 28f2fcd08d Add helper function to check whether a CRT msg is expected Hanno Becker 2019-02-07 10:11:07 +00:00
  • 7177a88a36 Introduce helper function to determine whether suite uses server CRT Hanno Becker 2019-02-05 13:36:46 +00:00
  • 2148993900 Use helper macro to detect whether some ciphersuite uses CRTs Hanno Becker 2019-02-05 13:20:55 +00:00
  • 6bdfab2ccc Unify state machine update in mbedtls_ssl_parse_certificate() Hanno Becker 2019-02-05 13:11:17 +00:00
  • 7a955a043e Clear peer's CRT chain outside before parsing new one Hanno Becker 2019-02-05 13:08:01 +00:00
  • 4a55f638e2 Introduce helper to check for no-CRT notification from client Hanno Becker 2019-02-05 12:49:06 +00:00
  • a028c5bbd8 Introduce CRT counter to CRT chain parsing function Hanno Becker 2019-02-05 12:38:45 +00:00
  • 1294a0b260 Introduce helper function to clear peer CRT from session structure Hanno Becker 2019-02-05 12:38:15 +00:00
  • f852b1c035 Break overly long line in definition of mbedtls_ssl_get_session() Hanno Becker 2019-02-05 11:42:30 +00:00
  • 60848e6574 Don't reuse CRT from initial handshake during renegotiation Hanno Becker 2019-02-05 15:06:15 +00:00
  • fea3d0a3d0 Adjust DES exclude lists in test scripts Andres Amaya Garcia 2019-02-19 20:20:57 +00:00
  • 72f8348d1b Merge pull request #72 from gilles-peskine-arm/psa-fix_setup_cleanup Jaeden Amero 2019-02-26 11:25:31 +00:00
  • 9e0a4a54a2 Test abort after failed setup Gilles Peskine 2019-02-25 22:11:18 +01:00
  • 9ab61b603d Fix cleanup in psa_cipher_setup Gilles Peskine 2019-02-25 17:43:14 +01:00
  • f426e0f303 Smoke-test operation contexts after setup+abort Gilles Peskine 2019-02-25 17:42:03 +01:00
  • e23a693873 Merge pull request #70 from Patater/include-platform-util Jaeden Amero 2019-02-26 10:06:34 +00:00
  • 81fb206a6a Ignore more generated files: seedfile, apidoc Gilles Peskine 2019-02-25 22:49:33 +01:00
  • ceeea02d51 Improve .gitignore grouping and documentation Gilles Peskine 2019-02-25 22:49:09 +01:00
  • 66c1e2c766 Generate tags for Vi, for Emacs and with Global Gilles Peskine 2018-01-16 14:04:05 +01:00
  • afd19dd9b6 Silence pylint Gilles Peskine 2019-02-25 21:39:42 +01:00
  • 6fc5215831 check-files.py: readability improvement in permission check Gilles Peskine 2019-02-25 21:24:27 +01:00
  • 21e85f78b8 check-files.py: use class fields for class-wide constants Gilles Peskine 2019-02-25 21:10:04 +01:00
  • d5240ec4c7 check-files.py: clean up class structure Gilles Peskine 2019-02-25 20:59:05 +01:00
  • 9df176320e abi_check.py: Document more methods Gilles Peskine 2019-02-25 20:36:52 +01:00
  • 7660549187 check-files.py: document some classes and methods Gilles Peskine 2019-02-25 20:35:31 +01:00
  • 7b9fcdc2d5 Fix pylint errors going uncaught Gilles Peskine 2019-02-25 20:26:06 +01:00
  • e70c6dcee0 Call pylint3, not pylint Gilles Peskine 2019-02-25 20:25:02 +01:00
  • 5612a9372b New, documented pylint configuration Gilles Peskine 2019-02-25 20:17:33 +01:00
  • ffbd7e8ff3 Improve mbedtls_ecp_point_read_binary tests Janos Follath 2019-02-25 11:35:20 +00:00
  • 81cefed27f psa: Explicitly include platform_util.h Jaeden Amero 2019-02-25 08:51:27 +00:00
  • 7caf8e452f Add Montgomery points to ecp_point_write_binary Janos Follath 2019-02-20 12:00:22 +00:00
  • bf7a98b791 Fix typos found in PSA Crypto API 1.0 beta2 before publication Gilles Peskine 2019-02-22 16:42:11 +01:00
  • ab0f71a22a ECDH: Add test vectors for Curve25519 Janos Follath 2019-02-20 10:48:49 +00:00
  • e344d0f6fc Add little endian export to Bignum Janos Follath 2019-02-19 16:17:40 +00:00
  • 171a7efd02 Add mbedtls_ecp_read_key Janos Follath 2019-02-15 16:17:45 +00:00
  • 59b813c7be Add Montgomery points to ecp_point_read_binary Janos Follath 2019-02-13 10:44:06 +00:00
  • a778a94b7d Add little endian import to Bignum Janos Follath 2019-02-13 10:28:28 +00:00
  • 86016a03a1 Merge remote-tracking branch 'origin/pr/2338' into development Jaeden Amero 2019-02-22 12:55:30 +00:00
  • 2c1d492ccc Merge remote-tracking branch 'origin/pr/2428' into mbedtls-2.16 Jaeden Amero 2019-02-22 12:53:27 +00:00
  • e895342522 Merge remote-tracking branch 'origin/pr/2427' into development Jaeden Amero 2019-02-22 12:53:13 +00:00
  • d247762a8d Merge remote-tracking branch 'origin/pr/2460' into development Jaeden Amero 2019-02-22 10:56:13 +00:00
  • 85fd913950 Fix typo in check_config.h Hanno Becker 2019-02-22 12:50:35 +00:00
  • 3081629de4 Fix mbedtls_ecdh_get_params with new ECDH context Gilles Peskine 2019-02-22 12:31:25 +01:00
  • e023c80477 Test undefining MBEDTLS_ECDH_LEGACY_CONTEXT in all.sh Gilles Peskine 2019-02-22 12:31:02 +01:00
  • 43f564f29d Define MBEDTLS_ECDH_LEGACY_CONTEXT in config.h Gilles Peskine 2019-02-22 12:14:02 +01:00
  • 05fcf4f3c5 Fix mbedtls_ecdh_get_params with new ECDH context Gilles Peskine 2019-02-22 12:31:25 +01:00
  • caca307f42 crypto: Update submodule to Mbed Crypto 1.0.0d6 Jaeden Amero 2019-02-22 10:48:48 +00:00
  • 415620c1f2 Merge remote-tracking branch 'origin/pr/2105' into development Jaeden Amero 2019-02-22 10:03:27 +00:00
  • 461bd3dcca Merge remote-tracking branch 'origin/pr/2454' into development Jaeden Amero 2019-02-21 12:04:34 +00:00
  • 9f47f82218 Merge remote-tracking branch 'origin/pr/2391' into development Jaeden Amero 2019-02-21 12:04:13 +00:00
  • 8963b0311c Merge remote-tracking branch 'origin/pr/2411' into development Jaeden Amero 2019-02-21 12:03:41 +00:00
  • d9516b508a Merge remote-tracking branch 'origin/pr/2407' into development Jaeden Amero 2019-02-21 12:01:29 +00:00
  • 0ae63f7bc3 Merge remote-tracking branch 'origin/pr/2383' into development Jaeden Amero 2019-02-21 11:57:43 +00:00
  • b46f1bd451 Fix too small buffer in a test Gilles Peskine 2019-02-22 11:30:14 +01:00
  • 241b524964 Disable restartable ECC in full config PSA test in all.sh Hanno Becker 2019-02-22 10:26:18 +00:00
  • 1ce51e4dc3 Forbid setting MBEDTLS_ECP_RESTARTABLE and MBEDTLS_USE_PSA_CRYPTO_C Hanno Becker 2019-02-22 10:25:47 +00:00
  • 661610c8e0 Add changelog entry for mbedtls_ecdh_get_params robustness Gilles Peskine 2018-11-07 22:39:16 +01:00
  • b47045a18e Fix ecdh_get_params with mismatching group Gilles Peskine 2018-11-07 22:10:59 +01:00
  • 62a73511f1 Add test case for ecdh_get_params with mismatching group Gilles Peskine 2018-11-07 22:09:29 +01:00
  • 6d9b762ee0 Add test case for ecdh_calc_secret Gilles Peskine 2018-11-07 22:07:58 +01:00
  • ccf8ba0e6d Add changelog entry for mbedtls_ecdh_get_params robustness Gilles Peskine 2018-11-07 22:39:16 +01:00
  • 0b1b71d712 Fix ecdh_get_params with mismatching group Gilles Peskine 2018-11-07 22:10:59 +01:00
  • c4dff06f31 Add test case for ecdh_get_params with mismatching group Gilles Peskine 2018-11-07 22:09:29 +01:00
  • 552563b741 Add test case for ecdh_calc_secret Gilles Peskine 2018-11-07 22:07:58 +01:00
  • bf61ca7a04 Merge pull request #58 from Patater/disallow-invalid-context Jaeden Amero 2019-02-21 17:37:04 +00:00
  • 0efa8567d8 Add changelog entry for mbedtls_ecdh_get_params robustness Gilles Peskine 2018-11-07 22:39:16 +01:00
  • f58078c7c5 Fix ecdh_get_params with mismatching group Gilles Peskine 2018-11-07 22:10:59 +01:00
  • 496c9e053d Add test case for ecdh_get_params with mismatching group Gilles Peskine 2018-11-07 22:09:29 +01:00
  • 390bbd08f7 Add test case for ecdh_calc_secret Gilles Peskine 2018-11-07 22:07:58 +01:00