Gilles Peskine 9bb5d495e8 Detect GnuTLS support for TLS-RSA-WITH-NULL-SHA256 ...

TLS-RSA-WITH-NULL-SHA256, like other SHA256-based cipher suites, was first
introduced in TLS 1.2. Mbed TLS accepts it in earlier protocol versions as
well. This is technically a bug, which older versions of GnuTLS also have.
GnuTLS 3.4.7 fixed this bug. Adapt compat.sh to automatically omit
TLS-RSA-WITH-NULL-SHA256 in invalid protocol versions if GnuTLS doesn't
support it. It's already not included in invalid protocol versions in
OpenSSL interoperability testing.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

2023-09-04 15:47:17 +02:00

..

.jenkins

Add a Jenkinsfile for PR job testing

2018-10-19 16:41:54 +01:00

configs

Tests: provide necessary functions for MBEDTLS_PSA_INJECT_ENTROPY

2023-07-20 18:08:24 +02:00

data_files

Merge pull request #7768 from lpy4105/backport-2.28/issue/renew_cert_2027-01-01

2023-08-17 18:55:42 +00:00

docker/bionic

Point to docker images used in the CI

2022-12-16 10:21:11 +01:00

git-scripts

Fix typographical errors in .md files found by cspell

2022-07-29 13:54:52 +01:00

include

Merge pull request #7940 from AgathiyanB/backport-assert-false-macro

2023-08-10 13:03:44 +00:00

scripts

Remove GNUTLS_LEGACY

2023-08-27 21:50:06 +02:00

src

Merge pull request #7940 from AgathiyanB/backport-assert-false-macro

2023-08-10 13:03:44 +00:00

suites

Merge remote-tracking branch 'mbedtls-2.28' into calloc-also-zeroizes-2-28

2023-08-21 17:25:47 +02:00

.gitignore

Ignore *.o everywhere

2023-05-12 13:57:39 +02:00

CMakeLists.txt

Fix build errors in CMake

2023-03-16 11:10:17 +08:00

compat-in-docker.sh

Use OPENSSL everywhere, not OPENSSL_CMD

2023-01-10 09:47:09 +01:00

compat.sh

Detect GnuTLS support for TLS-RSA-WITH-NULL-SHA256

2023-09-04 15:47:17 +02:00

context-info.sh

Merge pull request #3614 from gilles-peskine-arm/ssl-opt-gnutls-printf-development

2020-11-04 17:55:42 +01:00

Descriptions.txt

Revert "Remove tests that depend on TLS or X.509"

2020-03-19 14:17:54 +01:00

make-in-docker.sh

Point to docker images used in the CI

2022-12-16 10:21:11 +01:00

Makefile

Fix build errors in CMake

2023-03-16 11:10:17 +08:00

ssl-opt-in-docker.sh

Use OPENSSL everywhere, not OPENSSL_CMD

2023-01-10 09:47:09 +01:00

ssl-opt.sh

ssl-opt.sh doesn't actually use OPENSSL_LEGACY, so remove it

2023-08-27 21:31:47 +02:00