Valerio Setti c0ac4a6933 library: ssl: specify hash algorithm when checking signature in ssl_parse_certificate_verify ...

Since the hash algorithm is known, this can be used when calling
"mbedtls_pk_can_do_psa()" to get a more accurate answer.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>

2025-12-09 16:18:11 +01:00

..

.gitignore

Register generate_config_files.py outputs as generated files

2025-09-19 13:36:24 +02:00

CMakeLists.txt

Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation

2025-10-24 12:50:51 +02:00

debug_internal.h

Remove usage of old crypto options in public headers

2025-09-17 16:06:31 +02:00

debug.c

library: debug: remove temporary fixes for RSA key handling

2025-11-03 10:25:15 +01:00

Makefile

Add dependency of mbedtls_config on generated config check headers

2025-09-24 17:20:35 +02:00

mbedtls_check_config.h

library: check_config: remove references to secp192 curves

2025-11-20 13:01:18 +01:00

mbedtls_config.c

Enable checks for bad options in the config file

2025-09-24 17:20:35 +02:00

mbedtls_utils.h

library: ssl: adjust return type of mbedtls_psa_alg_from_pk_sigalg()

2025-12-09 16:15:48 +01:00

mps_common.h

Fix some non-standard headers

2023-11-03 12:24:58 +00:00

mps_error.h

Fix some non-standard headers

2023-11-03 12:24:58 +00:00

mps_reader.c

Include ssl_misc.h for additional SSL helper files

2024-10-11 12:21:30 +01:00

mps_reader.h

Fix some non-standard headers

2023-11-03 12:24:58 +00:00

mps_trace.c

Include ssl_misc.h for additional SSL helper files

2024-10-11 12:21:30 +01:00

mps_trace.h

Include ssl_misc.h for additional SSL helper files

2024-10-11 12:21:30 +01:00

net_sockets.c

Make mbedTLS compile with MS-DOS DJGPP

2024-12-01 10:05:21 +01:00

pkcs7.c

Change the call to mbedtls_pk_verify_ext in pkcs7 to have a variable input cert->sig_pk

2025-10-30 13:37:09 +00:00

ssl_cache.c

Update includes for each library file

2024-10-09 11:18:50 +01:00

ssl_ciphersuites_internal.h

ssl: rm useless private includes in internal headers

2025-12-01 10:24:41 +01:00

ssl_ciphersuites.c

Change the return type of mbedtls_ssl_get_ciphersuite_sig_pk_alg to mbedtls_pk_sigalg_t

2025-10-28 07:58:37 +00:00

ssl_client.c

Tidy up debug of non ext functions

2025-10-28 07:58:37 +00:00

ssl_client.h

Update includes for each library file

2024-10-09 11:18:50 +01:00

ssl_cookie.c

remove RNG parameters from SSL API's

2025-03-10 13:24:31 +00:00

ssl_debug_helpers.h

Update includes for each library file

2024-10-09 11:18:50 +01:00

ssl_misc.h

Add comments for remaining internal includes

2025-12-02 12:35:20 +01:00

ssl_msg.c

Add comments for remaining internal includes

2025-12-02 12:35:20 +01:00

ssl_ticket.c

removed psa_crypto_init from library as this is supposed to be called by the application

2025-03-10 13:46:14 +00:00

ssl_tls12_client.c

library: ssl: replace mbedtls_pk_can_do() with mbedtls_pk_can_do_psa()

2025-12-04 16:28:44 +01:00

ssl_tls12_server.c

library: ssl: specify hash algorithm when checking signature in ssl_parse_certificate_verify

2025-12-09 16:18:11 +01:00

ssl_tls13_client.c

mbedtls_ssl_conf_alpn_protocols: declare list elements as const

2025-05-28 20:23:22 +02:00

ssl_tls13_generic.c

library: ssl: replace mbedtls_pk_can_do() with mbedtls_pk_can_do_psa()

2025-12-04 16:28:44 +01:00

ssl_tls13_invasive.h

Update includes for each library file

2024-10-09 11:18:50 +01:00

ssl_tls13_keys.c

Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING

2025-06-20 11:48:16 +01:00

ssl_tls13_keys.h

Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING

2025-06-20 11:48:16 +01:00

ssl_tls13_server.c

[tls12|tls13]_server: fix usage being checked on the certificate key

2025-09-16 16:12:07 +02:00

ssl_tls.c

ssl: replace remaining occurrence of pk_can_do with pk_get_key_type

2025-12-05 15:57:39 +01:00

timing.c

Move back timing.c to mbedtls

2024-12-04 14:25:02 +01:00

version.c

Simplify runtime version info string methods

2025-08-18 11:39:45 +02:00

x509_create.c

Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include

2025-08-29 07:05:40 +02:00

x509_crl.c

Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include

2025-08-29 07:05:40 +02:00

x509_crt.c

library: x509: replace mbedtls_pk_can_do() with mbedtls_pk_can_do_psa()

2025-12-04 16:28:44 +01:00

x509_csr.c

Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include

2025-08-29 07:05:40 +02:00

x509_internal.h

Add comments for remaining internal includes

2025-12-02 12:35:20 +01:00

x509_oid.c

Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include

2025-08-29 07:05:40 +02:00

x509_oid.h

x509: rm useless private includes in internal headers

2025-12-01 10:24:50 +01:00

x509.c

Unfortunately, we had two files named oid.h - one in the main repo, and one in the tf-psa-crypto repo, and these files included the mbedtls one, so I restored the header include

2025-08-29 07:05:40 +02:00

x509write_crt.c

x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type()

2025-12-04 16:28:44 +01:00

x509write_csr.c

x509: replace usage of mbedtls_pk_can_do() with mbedtls_pk_get_key_type()

2025-12-04 16:28:44 +01:00

x509write.c

Remove two more useless internal includes

2025-12-02 12:06:39 +01:00