8551 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Hanno Becker	14751aa966	Improve wording of CID debug msg in ssl_server2 example application	2019-04-23 11:39:53 +01:00
Hanno Becker	b9b7e29536	Clarify that mbedtls_ssl_set_cid() applies to all subsequent HSs	2019-04-23 11:38:47 +01:00
Hanno Becker	d928c06d01	Document that the use of CID is disabled by default. ... (Even if MBEDTLS_SSL_CID is set in config.h)	2019-04-23 11:37:38 +01:00
Hanno Becker	efde5b2e96	Reference CID Draft in Connection ID documentation in config.h	2019-04-23 11:36:56 +01:00
Hanno Becker	2dcdc926b6	Add basic Connection ID tests to ssl-opt.sh	2019-04-09 18:27:04 +01:00
Hanno Becker	1029acee1d	ssl_server2: Add cmd line options to configure use of CID extension	2019-04-09 18:27:04 +01:00
Hanno Becker	7a7aa1943e	ssl_client2: Add cmd line options to configure use of CID extension	2019-04-09 18:27:04 +01:00
Hanno Becker	ec37030afe	ssl_client2: Add helper to unhexify binary command line data	2019-04-09 18:27:04 +01:00
Hanno Becker	b9e7dea082	Add dummy implementations for CID API	2019-04-09 18:26:59 +01:00
Hanno Becker	2c54db5e66	Update version_features.c	2019-04-09 18:26:59 +01:00
Hanno Becker	c8e80eeda0	Update query_config.c	2019-04-09 18:26:59 +01:00
Hanno Becker	29a54c8415	Add dep of MBEDTLS_SSL_CID on MBEDTLS_SSL_PROTO_DTLS to config check	2019-04-09 18:26:59 +01:00
Hanno Becker	6198af33a0	Add API for the use of the DTLS Connection ID extension	2019-04-09 18:26:53 +01:00
Hanno Becker	81bd97149f	Add new configuration option controlling CID extension	2019-04-09 15:12:41 +01:00
Jaeden Amero	cef29a2fd0	Merge remote-tracking branch 'origin/pr/2401' into mbedtls-2.16 ... * origin/pr/2401: Add ChangeLog entry Fix private DER output shifted by one byte.	2019-03-05 16:37:13 +00:00
Jaeden Amero	b0abd1c84f	Merge remote-tracking branch 'origin/pr/2388' into mbedtls-2.16 ... * origin/pr/2388: Update change log all.sh: Test MBEDTLS_MPI_WINDOW_SIZE=1 Fix DEADCODE in mbedtls_mpi_exp_mod()	2019-03-05 16:34:40 +00:00
Jaeden Amero	6b79a1115e	Merge remote-tracking branch 'origin/pr/2293' into mbedtls-2.16 ... * origin/pr/2293: Declare test_suite_aes.ofb to CMake Add a facility to skip running some test suites run-test-suites: update the documentation	2019-03-05 16:31:02 +00:00
Jaeden Amero	203123b5b7	Merge remote-tracking branch 'origin/pr/1818' into mbedtls-2.16 ... * origin/pr/1818: Move ChangeLog entry from Bugfix to Changes section Adapt ChangeLog Return from debugging functions if SSL context is unset	2019-03-05 16:28:18 +00:00
Jaeden Amero	daed232dd7	Merge remote-tracking branch 'origin/pr/2436' into mbedtls-2.16 ... * origin/pr/2436: Use certificates from data_files and refer them Specify server certificate to use in SHA-1 test refactor CA and SRV certificates into separate blocks refactor SHA-1 certificate defintions and assignment refactor server SHA-1 certificate definition into a new block define TEST_SRV_CRT_RSA_SOME in similar logic to TEST_CA_CRT_RSA_SOME server SHA-256 certificate now follows the same logic as CA SHA-256 certificate add entry to ChangeLog	2019-03-05 16:26:34 +00:00
Simon Butcher	799cd57c72	Merge remote-tracking branch 'restricted/pr/550' into mbedtls-2.16 ... * restricted/pr/550: Update query_config.c Fix failure in SSLv3 per-version suites test Adjust DES exclude lists in test scripts Clarify 3DES changes in ChangeLog Fix documentation for 3DES removal Exclude 3DES tests in test scripts Fix wording of ChangeLog and 3DES_REMOVE docs Reduce priority of 3DES ciphersuites	2019-03-01 13:05:43 +00:00
Simon Butcher	e6a3f57898	Merge remote-tracking branch 'public/pr/2429' into mbedtls-2.16 ... * public/pr/2429: Add ChangeLog entry for unused bits in bitstrings Improve docs for ASN.1 bitstrings and their usage Add tests for (named) bitstring to suite_asn1write Fix ASN1 bitstring writing	2019-03-01 13:04:04 +00:00
Simon Butcher	3664fdb5f6	Merge remote-tracking branch 'public/pr/2449' into mbedtls-2.16 ... * public/pr/2449: Reword changelog entry Reenable GnuTLS next based tests	2019-03-01 13:01:54 +00:00
Manuel Pégourié-Gonnard	2eee0c3166	Update query_config.c	2019-03-01 10:30:30 +01:00
Manuel Pégourié-Gonnard	f1e62e8e1e	Fix failure in SSLv3 per-version suites test ... The test used 3DES as the suite for SSLv3, which now makes the handshake fails with "no ciphersuite in common", failing the test as well. Use Camellia instead (as there are not enough AES ciphersuites before TLS 1.2 to distinguish between the 3 versions). Document some dependencies, but not all. Just trying to avoid introducing new issues by using a new cipher here, not trying to make it perfect, which is a much larger task out of scope of this commit.	2019-03-01 10:30:11 +01:00
Andres Amaya Garcia	37e0a8c455	Adjust DES exclude lists in test scripts	2019-03-01 10:30:11 +01:00
Andres Amaya Garcia	03afdc0971	Clarify 3DES changes in ChangeLog	2019-03-01 10:30:11 +01:00
Andres Amaya Garcia	7c86e9a03e	Fix documentation for 3DES removal	2019-03-01 10:29:49 +01:00
Andres Amaya Garcia	ac9c5221c5	Exclude 3DES tests in test scripts	2019-03-01 10:29:49 +01:00
Andres Amaya Garcia	6882ec1521	Fix wording of ChangeLog and 3DES_REMOVE docs	2019-03-01 10:29:49 +01:00
Andres Amaya Garcia	5d8aade01d	Reduce priority of 3DES ciphersuites	2019-03-01 10:29:13 +01:00
Jaeden Amero	2c1d492ccc	Merge remote-tracking branch 'origin/pr/2428' into mbedtls-2.16	2019-02-22 12:53:27 +00:00
Jaeden Amero	c5b57ef9e0	Merge remote-tracking branch 'origin/pr/2412' into mbedtls-2.16	2019-02-21 12:01:50 +00:00
Jaeden Amero	0981db57e1	Merge remote-tracking branch 'origin/pr/2385' into mbedtls-2.16	2019-02-21 11:58:58 +00:00
Jaeden Amero	fe50335a1f	Merge remote-tracking branch 'origin/pr/2389' into mbedtls-2.16	2019-02-21 11:53:51 +00:00
k-stachowiak	b4595d2527	Reword changelog entry	2019-02-19 12:41:30 +01:00
k-stachowiak	abb843e8ae	Reenable GnuTLS next based tests	2019-02-18 16:14:03 +01:00
Ron Eldor	e900969cb5	Use certificates from data_files and refer them ... Use the server certificate from `data_files` folder, for formality, and refer to the source, for easier reproduction.	2019-02-12 17:10:29 +02:00
Ron Eldor	b76e765f2e	Specify server certificate to use in SHA-1 test ... Specify the SHA-1 server certificate to use in the SHA-1 test, because now the default certificates use SHA256 certificates.	2019-02-12 17:10:28 +02:00
ILUXONCHIK	a51f4c737b	refactor CA and SRV certificates into separate blocks	2019-02-12 17:10:28 +02:00
ILUXONCHIK	ecc6c13655	refactor SHA-1 certificate defintions and assignment ... As per refactoring suggestion that I made in #1520.	2019-02-12 17:10:28 +02:00
ILUXONCHIK	5f97b32b63	refactor server SHA-1 certificate definition into a new block	2019-02-12 17:10:28 +02:00
ILUXONCHIK	c3d1f546c3	define TEST_SRV_CRT_RSA_SOME in similar logic to TEST_CA_CRT_RSA_SOME	2019-02-12 17:10:28 +02:00
ILUXONCHIK	761f37616e	server SHA-256 certificate now follows the same logic as CA SHA-256 certificate	2019-02-12 17:10:28 +02:00
ILUXONCHIK	57d7a16f00	add entry to ChangeLog	2019-02-12 17:10:21 +02:00
Andres Amaya Garcia	b5eb21a0a3	Add ChangeLog entry for unused bits in bitstrings	2019-02-11 21:26:03 +00:00
Andres Amaya Garcia	6490034fb2	Improve docs for ASN.1 bitstrings and their usage	2019-02-11 21:25:09 +00:00
Andres Amaya Garcia	2c0f6f0b10	Add tests for (named) bitstring to suite_asn1write	2019-02-11 21:23:49 +00:00
Andres Amaya Garcia	d60e378016	Fix ASN1 bitstring writing ... Refactor the function mbedtls_asn1_write_bitstring() that removes trailing 0s at the end of DER encoded bitstrings. The function is implemented according to Hanno Becker's suggestions. This commit also changes the functions x509write_crt_set_ns_cert_type and crt_set_key_usage to call the new function as the use named bitstrings instead of the regular bitstrings.	2019-02-11 21:13:33 +00:00
Andrzej Kurek	ed68b31090	Move a restartable ecp context to a conditional compilation block ... This was an unused variable when compiling with parameter validation but without ecp_restartable	2019-02-11 07:28:04 -05:00
k-stachowiak	dc5893d553	Update change log	2019-02-11 09:56:23 +01:00