Janos Follath
15ab7ed0f3
Merge branch 'development' into development-restricted
...
Conflicts:
programs/pkey/rsa_decrypt.c
programs/pkey/rsa_encrypt.c
programs/test/selftest.c
2016-06-14 09:20:46 +01:00
Simon Butcher
4157b6004d
Renames null entropy source function for clarity
2016-06-12 00:31:33 +01:00
Simon Butcher
ab5df40054
Rename the 'no entropy' feature to MBEDTLS_TEST_NULL_ENTROPY
...
Following review and for clarity, changed the name of the feature to 'null
entropy'.
2016-06-11 02:31:21 +01:00
Simon Butcher
30b5f978eb
Removes target_config.h file from default and thread configs
...
target_config.h is no longer needed for target/platform configurations so
this change removes it from the default and platform configurations for mbed
builds.
2016-06-10 19:42:15 +01:00
Paul Bakker
71a597a2ba
Update documentation for MBEDTLS_ENTROPY_NV_SEED
2016-06-10 19:42:15 +01:00
Paul Bakker
fc9c7c8bf4
Initial entropy run should be context specific
...
Otherwise test influence each other.
Is a change to the context but only if the NV seed feature is enabled
2016-06-10 19:42:15 +01:00
Paul Bakker
66fdf34e81
Add MBEDTLS_FS_IO guard on default NV seed defines in platform.h
...
The default implementation won't work without MBEDTLS_FS_IO, so
leave undefined otherwise.
2016-06-10 19:42:15 +01:00
Paul Bakker
d5c9f6d226
Automatically update NV seed on initial entropy run
...
Update the NV entropy seed before generating any entropy for outside
use. The reason this is triggered here and not in mbedtls_entropy_init(),
is that not all entropy sources mights have been added at that time.
2016-06-10 19:42:14 +01:00
Paul Bakker
9988d6bbd9
Introduce mbedtls_nv_seed_poll() entropy polling function
2016-06-10 19:42:14 +01:00
Paul Bakker
cf0a9f96c5
Introduce platform-layer functions for reading/writing seed from NV
...
Introduces mbedtls_nv_seed_read() and mbedtls_nv_seed_write().
The platform-layer functions are only available when
MBEDTLS_ENTROPY_NV_SEED is enabled.
2016-06-10 19:42:14 +01:00
Janos Follath
f93b8bc2e0
Add requirements for the entropy safety switch in documentation.
2016-06-09 13:54:15 +01:00
Janos Follath
53de78444c
Add entropy safety switch.
...
Add a switch that turns entropy collecting off entirely, but enables
mbed TLS to run in an entirely unsafe mode. Enables to test mbed TLS
on platforms that don't have their entropy sources integrated yet.
2016-06-09 11:54:54 +01:00
Janos Follath
ce52d7823c
Address user reported coverity issues.
2016-06-07 14:52:35 +01:00
Janos Follath
04b591ee79
Merge branch 'development' for weekly test report.
2016-05-31 10:18:41 +01:00
Simon Butcher
2917b9e5de
Clarified function param in dhm.h
2016-05-25 00:59:37 +01:00
Simon Butcher
9c22e7311c
Merge branch 'development'
2016-05-24 13:25:46 +01:00
Paul Bakker
cfe392bdd4
Add end guard comment
2016-05-23 14:29:31 +01:00
Embedthis Software
c0715cb39f
Fix single threaded builds
2016-05-23 14:29:31 +01:00
Simon Butcher
80119c5d28
Fixes minor typos in comments in pk.h and ctr_drbg.c
...
Fixes typos in PRs #475 and #437
2016-05-23 14:29:30 +01:00
Paul Bakker
4fde40f656
Fix logic to allow at least one PKCS version enabled
2016-05-23 14:29:30 +01:00
Paul Bakker
37068a79fe
Add check to prevent enabling of RSA without selecting PKCS version(s)
2016-05-23 14:29:30 +01:00
SimonB
295dfa24e7
Clarifies documentation on reported memory statistics
2016-05-23 14:29:29 +01:00
James Cowgill
c788b4cb5a
Fix segfault on x32 by using better register constraints in bn_mul.h
...
On x32, pointers are only 4-bytes wide and need to be loaded using the "movl"
instruction instead of "movq" to avoid loading garbage into the register.
The MULADDC routines for x86-64 are adjusted to work on x32 as well by getting
gcc to load all the registers for us in advance (and storing them later) by
using better register constraints. The b, c, D and S constraints correspond to
the rbx, rcx, rdi and rsi registers respectively.
2016-05-23 14:29:28 +01:00
Simon Butcher
db0feca55c
Fixes platform time_t abstraction
...
Fixes platform abstraction in error.c and the file that it's generated
from as well as DTLS samples.
2016-05-17 00:03:14 +01:00
Paul Bakker
9edf1eb062
Merge pull request #376 from jcowgill/x32
...
Support for x32
2016-05-11 20:40:08 +02:00
Paul Bakker
e049ccd405
Add end guard comment
2016-05-11 14:13:02 +01:00
Embedthis Software
17ddff5eaf
Fix single threaded builds
2016-05-11 14:13:02 +01:00
Simon Butcher
295639bfa1
Fixes minor typos in comments in pk.h and ctr_drbg.c
...
Fixes typos in PRs #475 and #437
2016-05-10 19:39:36 +01:00
Attila Molnar
7e8a6fb78c
Fix minor doc issue
2016-05-05 14:28:28 +01:00
SimonB
5be3a25691
Clarifies documentation on reported memory statistics
2016-05-05 14:25:03 +01:00
Attila Molnar
0b98d2f086
Fix minor doc issue
2016-05-02 11:06:47 +02:00
Simon Butcher
80aea30aa5
Fixes syntax and naming for check-names.sh
...
Some macros were failing checks by check-names.sh
2016-04-27 00:28:14 +01:00
Simon Butcher
3fe6cd3a2d
Fixes time() abstraction for custom configs
...
Added platform abstraction of time() to ChangeLog, version features, and fixed the build for dynamic configuration.
2016-04-26 19:51:29 +01:00
SimonB
d5800b7761
Abstracts away time()/stdlib.h into platform
...
Substitutes time() into a configurable platform interface to allow it to be
easily substituted.
2016-04-26 14:49:59 +01:00
Janos Follath
c351d18c0e
Restore a change in the documentation.
...
Using the wildcard name MBEDTLS_PLATFORM_XXX_ALT made the Travis build
fail.
2016-03-21 08:43:59 +00:00
Janos Follath
d75b782d0d
Fix a typo that confuses check-names.sh
2016-03-18 16:47:10 +00:00
Janos Follath
9194744595
Add exit value macros to platform abstraction layer.
2016-03-18 14:05:28 +00:00
Simon Butcher
68c0bd72bc
Clarified current status of RC4 usage
...
Made clear RC4 has been deprecated by IETF standard, and disabled
by default in the library.
2016-03-17 21:08:46 +00:00
Simon Butcher
7ef5cf3c54
Provided doxygen function definitions for debug.h
...
Documented each function definition.
2016-03-17 21:08:29 +00:00
Simon Butcher
d567a23c59
Fix typos, grammar in the comments and clarify them
2016-03-09 20:19:21 +00:00
Janos Follath
e2681a448b
Update default configuration
...
Change the default settings for SSL and modify the tests accordingly.
2016-03-09 19:32:11 +00:00
Simon Butcher
e846b5128f
Use the SSL IO and time callback typedefs consistently
...
The callback typedefs defined for mbedtls_ssl_set_bio() and
mbedtls_ssl_set_timer_cb() were not used consistently where the callbacks were
referenced in structures or in code.
2016-03-09 19:32:09 +00:00
Simon Butcher
c0957bdc13
Fix some minor typos in comments
...
Fix spelling mistakes and typos.
2016-03-09 19:32:09 +00:00
Manuel Pégourié-Gonnard
986bbf24ce
x509:
...
-
2016-03-09 19:32:09 +00:00
Manuel Pégourié-Gonnard
d1b7f2b8cf
ssl: ignore CertificateRequest's content for real
...
- document why we made that choice
- remove the two TODOs about checking hash and CA
- remove the code that parsed certificate_type: it did nothing except store
the selected type in handshake->cert_type, but that field was never accessed
afterwards. Since handshake_params is now an internal type, we can remove that
field without breaking the ABI.
2016-03-09 19:32:09 +00:00
Manuel Pégourié-Gonnard
eeef947040
Clarify documentation about missing CRLs
...
Also tune up some working while at it.
2016-03-09 19:32:08 +00:00
Manuel Pégourié-Gonnard
9d6241269a
Add note about not implementing PSK id_hint
2016-03-09 19:32:08 +00:00
Simon Butcher
157cb656a9
Clarified mbedtls_ssl_conf_alpn_protocols() doc
...
Clarified the lifetime of the protos parameter passed in the
function mbedtls_ssl_conf_alpn_protocols().
2016-03-09 19:32:08 +00:00
Manuel Pégourié-Gonnard
02049dcbd1
Add links to KB articles
2016-02-22 16:46:34 +00:00
Manuel Pégourié-Gonnard
325ce093f9
Give better error messages for semi-portable parts
...
Previously it was failing with errors about headers not found, which is
suboptimal in terms of clarity. Now give a clean error with pointer to the
documentation.
Do the checks in the .c files rather than check_config.h as it keeps them
closer to the platform-specific implementations.
2016-02-22 10:47:32 +01:00