Andres Amaya Garcia
420f0ccdfd
Make DLEXT var configurable in programs and tests makefiles
2018-03-27 19:17:21 +01:00
Andres Amaya Garcia
d1b1788b40
Improve ChangeLog for DLEXT and AR_DASH changes
2018-03-27 19:14:24 +01:00
Andy Leiserson
79e7789d44
return plaintext data faster on unpadded decryption
2018-03-27 10:55:24 -07:00
Hanno Becker
98a678674b
Adapt changes to all.sh to work with --keep-going mode
2018-03-27 17:10:09 +01:00
Hanno Becker
4c1dc3c2a4
Improve documentation of MBEDTLS_AES_ROM_TABLES
2018-03-27 16:52:03 +01:00
Hanno Becker
783cb06e05
Remove duplicate test in all.sh
2018-03-27 16:49:04 +01:00
Jaeden Amero
b604960572
Merge remote-tracking branch 'upstream-public/pr/1435' into development-proposed
2018-03-27 16:45:36 +01:00
Jaeden Amero
fba16f782c
Merge remote-tracking branch 'upstream-public/pr/572' into development-proposed
2018-03-27 16:42:20 +01:00
Deomid Ryabkov
de420a47b6
Fix some test deps
...
* Cert revocation tests require `MBEDTLS_HAVE_TIME_DATE`.
* Verison features tests require... well, `MBEDTLS_VERSION_FEATURES`, actually.
Fixes https://github.com/ARMmbed/mbedtls/issues/1475
2018-03-27 14:39:26 +01:00
Azim Khan
f4659efedc
Document config restrictions of psk fields
2018-03-26 22:11:24 +01:00
Gilles Peskine
e4f2736b42
Add ChangeLog entry
2018-03-26 12:29:30 +02:00
Andres Amaya Garcia
ea5a8a418b
Add ChangeLog entry for library/makefile changes
2018-03-25 23:57:09 +01:00
Andres Amaya Garcia
ceed91b72c
Allow overriding ar param prefix in library/Makefile
2018-03-25 23:48:39 +01:00
Andres Amaya Garcia
873f15d70d
Make DLEXT var configurable in library/Makefile
2018-03-25 23:47:15 +01:00
Ivan Krylov
5cb1f09ab4
slight rewording requested by reviewer ( #758 )
2018-03-24 18:48:04 +03:00
Jaeden Amero
f65379bc40
Merge remote-tracking branch 'upstream-restricted/pr/382' into development
2018-03-23 11:14:17 +00:00
Gilles Peskine
51d9394fdf
Add changelog entries for improved testing
...
Fixes #1040
2018-03-23 02:16:43 +01:00
Gilles Peskine
1cfa2d0e19
Add missing dependencies in test_suite_x509parse
...
Found by depends-hashes.pl and depends-pkgalgs.pl.
2018-03-23 02:16:43 +01:00
Gilles Peskine
396fac1fe0
all.sh --keep-going: properly handle multiple-builds scripts
...
In keep-going mode, if a multiple-builds script fails, record its
status and keep going.
2018-03-23 02:16:43 +01:00
Gilles Peskine
15ad579895
Merge tag 'mbedtls-2.8.0' into iotssl-1381-x509-verify-refactor-restricted
...
Conflict resolution:
* ChangeLog
* tests/data_files/Makefile: concurrent additions, order irrelevant
* tests/data_files/test-ca.opensslconf: concurrent additions, order irrelevant
* tests/scripts/all.sh: one comment change conflicted with a code
addition. In addition some of the additions in the
iotssl-1381-x509-verify-refactor-restricted branch need support for
keep-going mode, this will be added in a subsequent commit.
2018-03-23 02:16:22 +01:00
Jethro Beekman
d2df936e67
Fix parsing of PKCS#8 encoded Elliptic Curve keys.
...
The relevant ASN.1 definitions for a PKCS#8 encoded Elliptic Curve key are:
PrivateKeyInfo ::= SEQUENCE {
version Version,
privateKeyAlgorithm PrivateKeyAlgorithmIdentifier,
privateKey PrivateKey,
attributes [0] IMPLICIT Attributes OPTIONAL
}
AlgorithmIdentifier ::= SEQUENCE {
algorithm OBJECT IDENTIFIER,
parameters ANY DEFINED BY algorithm OPTIONAL
}
ECParameters ::= CHOICE {
namedCurve OBJECT IDENTIFIER
-- implicitCurve NULL
-- specifiedCurve SpecifiedECDomain
}
ECPrivateKey ::= SEQUENCE {
version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),
privateKey OCTET STRING,
parameters [0] ECParameters {{ NamedCurve }} OPTIONAL,
publicKey [1] BIT STRING OPTIONAL
}
Because of the two optional fields, there are 4 possible variants that need to
be parsed: no optional fields, only parameters, only public key, and both
optional fields. Previously mbedTLS was unable to parse keys with "only
parameters". Also, only "only public key" was tested. There was a test for "no
optional fields", but it was labelled incorrectly as SEC.1 and not run because
of a great renaming mixup.
2018-03-22 18:01:18 -07:00
Gilles Peskine
fc458d0b9b
Merge remote-tracking branch 'myfork/pr_1073' into development-proposed
2018-03-22 21:53:12 +01:00
Gilles Peskine
a7b34c7810
Merge remote-tracking branch 'upstream-public/pr/1406' into development-proposed
2018-03-22 21:52:48 +01:00
Gilles Peskine
f15a8beacf
Merge remote-tracking branch 'upstream-public/pr/1256' into development-proposed
2018-03-22 21:51:53 +01:00
Gilles Peskine
0818540ff7
Merge branch 'pr_726' into development-proposed
2018-03-22 21:50:48 +01:00
Gilles Peskine
88c6df1ce8
Add ChangeLog entry
2018-03-22 21:48:28 +01:00
Gilles Peskine
5bdb671404
Merge branch 'pr_403' into development-proposed
2018-03-22 21:34:15 +01:00
Gilles Peskine
58afc39dd7
Add ChangeLog entry
2018-03-22 21:33:28 +01:00
Gilles Peskine
4b6b247512
Merge remote-tracking branch 'upstream-public/pr/1441' into development-proposed
2018-03-22 21:30:07 +01:00
Gilles Peskine
9b9cc616ca
Add ChangeLog entry
2018-03-22 17:03:45 +01:00
Kevin Luty
d9d5c55438
Assign error return value for failed write
2018-03-22 09:59:16 -05:00
Azim Khan
bdfc14e4a3
Add reference to original PR in Changelog
2018-03-22 12:17:36 +00:00
Azim Khan
4d58881f52
Clarify bug scenario in Changlog
2018-03-22 12:04:25 +00:00
Azim Khan
bc30c5fec2
Add change log entry for mbedtls_ssl_config_free() fix
2018-03-22 10:24:06 +00:00
mohammad1603
b878805919
Verify that f_send and f_recv send and receive the expected length
...
Verify that f_send and f_recv send and receive the expected length
2018-03-22 02:58:23 -07:00
Andres Amaya Garcia
768bbaf0c1
Add ChangeLog entry for redundant mutex initialization optimizations
2018-03-21 17:36:52 +00:00
Gilles Peskine
d49ab3ee60
Add ChangeLog entry.
...
Fixes #1353
2018-03-21 17:03:44 +01:00
Gilles Peskine
4e4be7cf62
Optimize unnecessary zeorizing in mbedtls_mpi_copy
...
Based on a contribution by Alexey Skalozub
(https://github.com/ARMmbed/mbedtls/pull/405 ).
2018-03-21 16:29:03 +01:00
Gilles Peskine
70ad839725
Clarify the behavior of bignum resize and copy functions
2018-03-21 16:28:41 +01:00
Gergely Budai
13f7fb372e
Do not define and initialize global mutexes on configurations that do not use them.
2018-03-21 15:01:55 +00:00
Kevin Luty
1e7059fedd
Adding requested changes
2018-03-21 10:01:38 -05:00
Azim Khan
27e8a120b2
Assign NULL after freeing psk and psk_identity
2018-03-21 14:24:11 +00:00
junyeonLEE
316b162ac3
Separate psk and psk_identity buffers free
...
Sometimes, psk_identity buffer can't released because psk buffer is NULL.
So, separate it.
2018-03-21 14:15:28 +00:00
Andres Amaya Garcia
8e0e16032d
Add ChangeLog entry for dylib builds using Makefile
2018-03-21 11:15:08 +00:00
Mitsuhiro Nakamura
5ff2ee51e9
Fix dylib linking
2018-03-21 11:10:59 +00:00
Jaeden Amero
8be0e6db41
Update version to 2.8.0
2018-03-16 16:25:12 +00:00
Simon Butcher
a4cbfa3ea2
Add clarity to use of the rsa_internal.h interface
...
Added additional clarification to the use of the rsa_internal.h interface and as
and when it can be used by whom. Policy hasn't changed, but it needed to be
clearer who can and can't use it and it's level of support.
2018-03-16 15:42:54 +00:00
Jaeden Amero
79a5e72719
Merge remote-tracking branch 'upstream-restricted/pr/463' into development-restricted-proposed
2018-03-15 08:25:05 +00:00
Jaeden Amero
24b2d6fb6d
Merge remote-tracking branch 'upstream-restricted/pr/459' into development-restricted-proposed
2018-03-15 08:24:44 +00:00
Jaeden Amero
8e4ff12909
Merge branch 'development-proposed' into development-restricted-proposed
2018-03-15 08:23:55 +00:00