Manuel Pégourié-Gonnard
535553e7d8
Merge remote-tracking branch 'public/pr/1184' into development
...
* public/pr/1184:
Add --no-yotta option to all.sh
Fix build without MBEDTLS_FS_IO
2017-12-18 11:42:30 +01:00
Gilles Peskine
12c49c7f7c
compat.sh: use wait_server_start
...
Port wait_server_start from ssl-opt.sh to compat.sh, instead of just
using "sleep 1". This solves the problem that on a heavily loaded
machine, sleep 1 is sometimes not enough (we had CI failures because
of this). This is also faster on a lightly-loaded machine (execution
time reduced from ~8min to ~6min on my machine).
2017-12-14 19:02:00 +01:00
Gilles Peskine
418b536028
wait_server_start: minor efficiency improvement
...
In wait_server_start, fork less. When lsof is present, call it on the
expected process. This saves a few percent of execution time on a
lightly loaded machine. Also, sleep for a short duration rather than
using a tight loop.
2017-12-14 18:58:42 +01:00
Hanno Becker
1434a365a6
Don't split error code description across multiple lines
2017-12-13 11:24:49 +00:00
Gilles Peskine
86ffd80456
Register new error code in error.h
2017-12-10 20:04:13 +01:00
Gilles Peskine
d629411212
Merge branch 'pr_920' into development
2017-12-01 23:46:58 +01:00
Gilles Peskine
8acce85175
Added ChangeLog entry
2017-12-01 23:46:40 +01:00
Gilles Peskine
ff01e009e6
Merge branch 'pr_1043' into development
2017-12-01 23:42:17 +01:00
Gilles Peskine
b592f32291
Added ChangeLog entry
2017-12-01 23:40:28 +01:00
Gilles Peskine
e3783da0b2
Merge remote-tracking branch 'upstream-public/pr/1172' into development
2017-12-01 22:36:21 +01:00
Gilles Peskine
da519251d4
Add --no-yotta option to all.sh
...
The Yotta tools break in some environments and it's useful to be able
to run the rest of all.sh nonetheless.
2017-11-30 14:24:33 +01:00
Gilles Peskine
832f349f93
Fix build without MBEDTLS_FS_IO
...
Fix missing definition of mbedtls_zeroize when MBEDTLS_FS_IO is
disabled in the configuration.
Introduced by e7707228b4
Merge remote-tracking branch 'upstream-public/pr/1062' into development
2017-11-30 12:03:27 +01:00
Gilles Peskine
0884f4811b
Merge remote-tracking branch 'upstream-public/pr/1141' into development
2017-11-29 20:50:59 +01:00
Gilles Peskine
183de312f9
Merge remote-tracking branch 'upstream-public/pr/895' into development
2017-11-29 20:49:21 +01:00
Andres Amaya Garcia
c5380649d9
Change value of MBEDTLS_ERR_AES_FEATURE_UNAVAILABLE
...
Change the value of the error MBEDTLS_ERR_AES_FEATURE_UNAVAILABLE to
0x0023 to ensure the errors in the AES module are all in a continuous
range.
2017-11-29 10:42:49 +00:00
Ron Eldor
0728d69d6d
Change kB to KiB
...
Change the style of the units to KiB, according to
https://docs.mbed.com/docs/writing-and-publishing-guides/en/latest/units/
2017-11-29 12:08:35 +02:00
Gilles Peskine
4daffe236a
Merge branch 'pr_1025' into development
...
Merge PR #1025 + ChangeLog entry
2017-11-28 18:23:53 +01:00
Gilles Peskine
d742b74838
Add ChangeLog entry
2017-11-28 17:40:56 +01:00
Gilles Peskine
ea8d697fa2
Merge remote-tracking branch 'upstream-public/pr/1089' into development
...
Resolve trivial conflict due to additions in the same place in
tests/data_files/Makefile; minor comment/whitespace presentation
improvements.
2017-11-28 17:32:32 +01:00
Gilles Peskine
4b117d9c92
Merge remote-tracking branch 'upstream-public/pr/1055' into development
2017-11-28 17:23:37 +01:00
Gilles Peskine
f2421210a5
Merge remote-tracking branch 'upstream-public/pr/828' into development
2017-11-28 17:22:37 +01:00
Gilles Peskine
9c3573a962
Merge remote-tracking branch 'upstream-public/pr/988' into development
2017-11-28 17:08:03 +01:00
Gilles Peskine
f16de7d525
Merge remote-tracking branch 'upstream-public/pr/995' into development
2017-11-28 16:59:20 +01:00
Ron Eldor
a0748019f1
Change KB to kB
...
Change KB to kB, as this is the proper way to write kilo bytes
2017-11-28 16:48:51 +02:00
Gilles Peskine
e7707228b4
Merge remote-tracking branch 'upstream-public/pr/1062' into development
2017-11-24 15:35:50 +01:00
Gilles Peskine
68306ed31f
Merge remote-tracking branch 'upstream-public/pr/1094' into development
2017-11-23 20:02:46 +01:00
Darryl Green
36ba8b683a
Add changelog for mbedtls_ecdsa_sign fix
2017-11-21 09:55:33 +00:00
Gilles Peskine
5eafc74154
Merge pull request #1159 from RonEld/1862
...
Change Arm Trademarks
2017-11-20 17:45:49 +01:00
Darryl Green
f5bcbede92
Add tests for invalid private parameters in mbedtls_ecdsa_sign()
2017-11-17 17:09:31 +00:00
Darryl Green
c64a48bec7
Add checks for private parameter in mbedtls_ecdsa_sign()
2017-11-17 17:09:17 +00:00
Manuel Pégourié-Gonnard
888fedea06
Merge branch 'development' into development-restricted
...
* development: (30 commits)
update README file (#1144 )
Fix typo in asn1.h
Improve leap year test names in x509parse.data
Correctly handle leap year in x509_date_is_valid()
Renegotiation: Add tests for SigAlg ext parsing
Parse Signature Algorithm ext when renegotiating
Minor style fix
config.pl get: be better behaved
config.pl get: don't rewrite config.h; detect write errors
Fixed "config.pl get" for options with no value
Fix typo and bracketing in macro args
Ensure failed test_suite output is sent to stdout
Remove use of GNU sed features from ssl-opt.sh
Fix typos in ssl-opt.sh comments
Add ssl-opt.sh test to check gmt_unix_time is good
Extend ssl-opt.h so that run_test takes function
Always print gmt_unix_time in TLS client
Restored note about using minimum functionality in makefiles
Note in README that GNU make is required
Fix changelog for ssl_server2.c usage fix
...
2017-11-14 08:24:22 +01:00
Ron Eldor
2ac96620f3
change URL
...
Change URL from developer.mbed.org to os.mbed.com
2017-11-01 14:19:50 +02:00
Ron Eldor
9d22619a13
Change Arm Trademarks to the issue template
...
Change the Trademarks to the issue template document
2017-10-30 18:39:47 +02:00
Ron Eldor
c7acb913ce
Change Arm Trademarks
...
Change the Arm Trademarks according to updated Trademarks
2017-10-30 17:24:50 +02:00
Ron Eldor
22360825ae
Address PR review comments
...
set `cache->chain` to NULL,
instead of setting the whole structure to zero.
2017-10-29 17:53:52 +02:00
Hanno Becker
9cfabe3597
Use a conservative excess of the maximum fragment length in tests
...
This leads to graceful test failure instead of crash when run on the previous
code.
2017-10-18 14:42:01 +01:00
RonEld
005939db98
update README file ( #1144 )
...
* update README file
update VS 2010 as the minimal version of required Visual Studio
* Rephrase the MS VS requirement
Rephrase the VS version sentence
2017-10-17 18:19:48 +01:00
Ron Eldor
e1a9a4a826
Fix crash when calling mbedtls_ssl_cache_free
twice
...
Set `cache` to zero at the end of `mbedtls_ssl_cache_free` #1104
2017-10-17 18:15:41 +03:00
Hanno Becker
479e8e24e6
Adapt ChangeLog
2017-10-17 11:03:50 +01:00
Hanno Becker
134c2ab891
Add build and ssl-opt.sh run for !SSL_RENEGOTIATION to all.sh
2017-10-17 11:03:50 +01:00
Hanno Becker
6a2436493f
Add dependency on SSL_RENEGOTIATION to renego tests in ssl-opt.sh
2017-10-17 11:03:50 +01:00
Hanno Becker
40f8b51221
Add comments on the use of the renego SCSV and the renego ext
2017-10-17 11:03:50 +01:00
Hanno Becker
6851b10ec7
Note that disabling SSL_RENEGO doesn't open door for renego attack
2017-10-17 11:03:50 +01:00
Hanno Becker
21df7f90d2
Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused
...
Previously, if `MBEDTLS_SSL_RENEGOTIATION` was disabled, incoming handshake
messages in `mbedtls_ssl_read` (expecting application data) lead to the
connection being closed. This commit fixes this, restricting the
`MBEDTLS_SSL_RENEGOTIATION`-guard to the code-paths responsible for accepting
renegotiation requests and aborting renegotiation attempts after too many
unexpected records have been received.
2017-10-17 11:03:26 +01:00
Hanno Becker
b4ff0aafd9
Swap branches accepting/refusing renegotiation in in ssl_read
2017-10-17 11:03:04 +01:00
Simon Butcher
6f63db7ed5
Fix changelog for ssl_server2.c usage fix
2017-10-12 23:22:17 +01:00
Gilles Peskine
085c10afdb
Allow comments in test data files
2017-10-12 23:22:17 +01:00
Andres Amaya Garcia
9fb02057a5
Fix typo in asn1.h
2017-10-12 23:21:37 +01:00
Andres Amaya Garcia
60100d09ee
Improve leap year test names in x509parse.data
2017-10-12 23:21:37 +01:00
Andres Amaya Garcia
735b37eeef
Correctly handle leap year in x509_date_is_valid()
...
This patch ensures that invalid dates on leap years with 100 or 400
years intervals are handled correctly.
2017-10-12 23:21:37 +01:00