Commit Graph

  • 036a9bb92b Test MBEDTLS_USER_CONFIG_FILE as such Gilles Peskine 2022-04-07 21:06:41 +0200
  • 78e5288a94 Remove obsolete comment Gilles Peskine 2022-04-07 21:56:26 +0200
  • 6af9dc9c59 Simplify build_mbedtls_config_file Gilles Peskine 2022-04-07 20:55:57 +0200
  • 7e2a91fcb6 Support alternative MBEDTLS_PSA_CRYPTO_CONFIG_FILE Gilles Peskine 2022-03-16 17:10:48 +0100
  • 528343513c Improve documentation of MBEDTLS_PSA_CRYPTO_CONFIG Gilles Peskine 2022-03-16 17:03:55 +0100
  • 781f734bb6 Document MBEDTLS_CONFIG_FILE and MBEDTLS_USER_CONFIG_FILE Gilles Peskine 2022-03-16 17:03:19 +0100
  • 6abc6259d5 Add comment in compat.sh about callers Manuel Pégourié-Gonnard 2022-04-14 09:21:56 +0200
  • b623832176 Fix compat.sh invocation in basic-built-test.sh Manuel Pégourié-Gonnard 2022-04-14 09:12:10 +0200
  • 9220fee17b Enable DTLS_BADMAC_LIMIT Gilles Peskine 2022-04-13 14:20:19 +0200
  • 6e257b0bc7 Detect requirement on DTLS_BADMAC_LIMIT Gilles Peskine 2022-04-13 14:19:57 +0200
  • a6f99a1aab Fix crash with DTLS_CONNECTION_ID but not other SSL features Gilles Peskine 2022-04-13 13:24:56 +0200
  • bcb2ab0cb3 Add a few more protocol version support requirements Gilles Peskine 2022-04-09 00:11:16 +0200
  • bba3b4c79a Add or fix requirements on FALLBACK_SCSV Gilles Peskine 2022-04-09 00:08:47 +0200
  • 4b137d1bc4 Automatically detect protocol version requirement from force_version Gilles Peskine 2022-04-08 19:33:07 +0200
  • 3c985f6b70 Move ticket, alpn detection into maybe_requires_ciphersuite_enabled Gilles Peskine 2022-04-08 19:29:27 +0200
  • 511fdf435f Prepare to generalize maybe_requires_ciphersuite_enabled Gilles Peskine 2022-04-08 19:26:26 +0200
  • e70605c28e Add requirement for RC4 tests Gilles Peskine 2022-04-08 17:22:03 +0200
  • 5a1b3bdc44 Make mbedtls_ssl_get_bytes_avail tests more independent Gilles Peskine 2022-04-06 23:35:56 +0200
  • a30439a7f9 Fix off-by-one in buffer_size usage Gilles Peskine 2022-04-06 23:34:36 +0200
  • 736d91dae6 Fix buffer size calculation Gilles Peskine 2022-04-06 23:31:05 +0200
  • f2e1f47b2e set_maybe_calc_verify: $1 is intended to be auth_mode Gilles Peskine 2022-04-06 22:23:45 +0200
  • de4cb3569e Add requirements of "Default" Gilles Peskine 2022-04-05 22:00:32 +0200
  • d5b1a30c2f Documentation improvements Gilles Peskine 2022-04-05 22:00:17 +0200
  • e719d174c9 Minor documentation improvement Gilles Peskine 2022-04-05 21:52:14 +0200
  • 22cc649769 Skip some DTLS reordering tests in PSK-only builds Gilles Peskine 2022-03-14 18:21:24 +0100
  • 64c683fd18 calc_verify is only called in some configurations Gilles Peskine 2022-03-14 17:55:04 +0100
  • def0e147ab test-ref-configs: clarify configuration-related traces Gilles Peskine 2022-03-14 19:05:48 +0100
  • 20e25b9012 Simplify the logic to select configurations Gilles Peskine 2022-02-26 18:16:07 +0100
  • 291372fd41 Add a missing requires_max_content_len Gilles Peskine 2022-02-25 21:02:28 +0100
  • dcb13af837 ssl-opt needs debug messages Gilles Peskine 2022-02-25 21:00:16 +0100
  • 89d892ffdd Adapt tests for PSK in PSK-only builds Gilles Peskine 2022-02-25 19:52:52 +0100
  • 111fde4ce9 Add some missing dependencies: EXTENDED_MASTER_SECRET, CACHE Gilles Peskine 2022-02-25 19:51:52 +0100
  • dff48c1c65 Only run "Default" tests if the ciphersuite is enabled Gilles Peskine 2022-02-25 19:50:38 +0100
  • df4ad90a15 ssl-opt: check for protocol version support Gilles Peskine 2022-04-08 15:14:38 +0200
  • 4502671e0b Automatically skip tests for some absent features: tickets, ALPN Gilles Peskine 2022-02-25 19:47:04 +0100
  • e5f4958c80 ssl-opt: automatically skip DTLS tests in builds without DTLS Gilles Peskine 2022-02-25 19:46:30 +0100
  • 83f7108f3d Small DTLS 1.2 config: timing is a default entropy source Gilles Peskine 2022-04-08 16:18:14 +0200
  • 8c5c2930db New sample/test configuration: small DTLS 1.2 Gilles Peskine 2022-02-25 19:28:00 +0100
  • a132beb750 Minimal TLS configuration: documentation improvements Gilles Peskine 2022-02-25 19:20:36 +0100
  • 7c45b6767b Fix the build when MBEDTLS_PLATFORM_C is unset Gilles Peskine 2022-02-25 15:26:13 +0100
  • 03efa0b8d3 Fix ARIA support in test driver configuration Gilles Peskine 2022-04-12 17:08:34 +0200
  • 186331875a test_psa_crypto_config_accel_cipher: deactivate CMAC Gilles Peskine 2022-04-12 15:58:03 +0200
  • d81b5ae238
    Merge pull request #5717 from daverodgman/backport_2.28-alert_reentrant Gilles Peskine 2022-04-12 11:05:26 +0200
  • 50b677d9e5
    Merge pull request #5713 from tom-cosgrove-arm/pr-2479-backport-2.28 Dave Rodgman 2022-04-11 09:50:36 +0100
  • c2d1938a0d
    Merge pull request #5720 from tom-cosgrove-arm/adamwolf-reasonable-2.28 Dave Rodgman 2022-04-11 09:47:26 +0100
  • 9cd8831472
    Merge pull request #5721 from tom-cosgrove-arm/roneld-1805-2.28 Manuel Pégourié-Gonnard 2022-04-11 09:31:21 +0200
  • 27ad033a96
    Merge pull request #5718 from AndrzejKurek/timeless-struggles-2-28 Gilles Peskine 2022-04-08 18:43:12 +0200
  • b283228ea3 Fix shared library link error with cmake on Windows Ron Eldor 2017-10-09 19:07:26 +0300
  • ef30d90cf0 Fix spelling of 'reasonable' in comments Adam Wolf 2019-09-10 09:53:08 -0500
  • 7ece768578 Seed the PRNG even if time() isn't available Gilles Peskine 2022-04-05 21:39:43 +0200
  • 263d8f7e61 Remove the dependency on MBEDTLS_HAVE_TIME from MBEDTLS_TIMING_C Andrzej Kurek 2022-04-08 08:34:41 -0400
  • 2603fec329 Remove dummy timing implementation Andrzej Kurek 2022-04-08 08:28:50 -0400
  • 28fd4cd8e9 Update ChangeLog.d/alert_reentrant.txt Dave Rodgman 2022-04-08 12:53:00 +0100
  • a349cfd585 Add ChangeLog entry Hanno Becker 2018-08-14 16:38:12 +0100
  • d9c66c0509 Make alert sending function re-entrant Hanno Becker 2018-08-06 11:35:16 +0100
  • 1882b9a8cd Fix spelling of 'features' in comment Jacob Schloss 2019-02-27 22:22:00 -0800
  • e29a837ed3
    Merge pull request #5705 from AndrzejKurek/off-by-one-ssl-opt-2-28 Gilles Peskine 2022-04-07 16:20:58 +0200
  • 363553b5e4 Fix an off-by-one error in ssl-opt.sh Andrzej Kurek 2022-04-01 08:52:06 -0400
  • dbeaad3e0c Add missing logic for accelerated ECB under MBEDTLS_PSA_CRYPTO_CONFIG Gilles Peskine 2022-03-17 11:09:23 +0100
  • bc79582105 Fix psa_mac_verify() returning BUFFER_TOO_SMALL Gilles Peskine 2022-03-16 13:54:49 +0100
  • 449e02e909 If a cipher algorithm is not supported, fail during setup Gilles Peskine 2022-03-16 12:25:17 +0100
  • 161c5ee5ff Use a plausible input size with asymmetric verification Gilles Peskine 2022-03-15 19:51:53 +0100
  • c2fc241e46 Test attempts to use a public key for a private-key operation Gilles Peskine 2021-04-29 21:56:59 +0200
  • 739c98c5e8 Make psa_key_derivation_setup return early if the key agreement is not supported Gilles Peskine 2021-04-29 21:34:33 +0200
  • ea0d95e27b Make psa_key_derivation_setup return early if the hash is not supported Gilles Peskine 2021-04-29 21:18:14 +0200
  • cdacf0431b Simplify is_kdf_alg_supported in psa_key_derivation_setup_kdf Gilles Peskine 2021-04-29 21:10:00 +0200
  • 23cb12ef9f A key agreement algorithm can contain a key derivation Gilles Peskine 2021-04-29 20:54:40 +0200
  • d096445dfe In NOT_SUPPORTED test case descriptions, show what is not supported Gilles Peskine 2021-04-29 21:35:03 +0200
  • 35409be6aa Add a few manual test cases Gilles Peskine 2022-03-15 19:50:30 +0100
  • f8b6b503b4 Systematically generate test cases for operation setup failure Gilles Peskine 2022-03-15 17:26:33 +0100
  • 390543381c Add knowledge of the compatibility of key types and algorithms Gilles Peskine 2021-04-29 20:38:47 +0200
  • 0dacd4d266 Add knowledge of algorithms Gilles Peskine 2021-04-29 20:38:01 +0200
  • a218047245 Generate test cases for hash operation failure Gilles Peskine 2021-04-27 21:03:43 +0200
  • c05158bf86 New test suite for systematically generated operation failure tests Gilles Peskine 2021-04-27 20:40:10 +0200
  • 2a71b72bd5 Add missing type annotation Gilles Peskine 2021-04-29 20:19:57 +0200
  • a296e48b2b Simplify key_for_usage_flags Gilles Peskine 2022-02-24 18:58:08 +0100
  • b5c4382bef check-generated-files.sh -u: don't update file timestamps Gilles Peskine 2022-04-05 14:08:09 +0200
  • 619cbfedc9
    Merge pull request #5696 from yanesca/fix-lts-version-in-guidelines-2.28 Gilles Peskine 2022-04-05 11:11:22 +0200
  • b71c6259b4 Fix LTS version in contributing guidelines Janos Follath 2022-04-05 09:05:22 +0100
  • a8827d190f
    Merge pull request #5542 from gilles-peskine-arm/config-baremetal-size-2.28 Gilles Peskine 2022-04-04 16:13:05 +0200
  • f749930ab8
    Merge pull request #5682 from daverodgman/migration_2.28 Dave Rodgman 2022-04-01 09:51:28 +0100
  • 52af769878 Update references to old Github organisation Dave Rodgman 2022-03-31 14:27:24 +0100
  • 3a7d7b926b
    Merge pull request #5670 from bensze01/typo-2.28 Manuel Pégourié-Gonnard 2022-03-30 10:00:05 +0200
  • e25dc1ccdc Fix typo "phtreads" to "pthreads" Artur Allmann 2022-03-21 16:11:35 +0200
  • 19f2d59184
    Merge pull request #5660 from ronald-cron-arm/restore-full-compat-testing-2.28 Manuel Pégourié-Gonnard 2022-03-28 18:31:25 +0200
  • e7dad1f616 ssl_tls.c: Fix inappropriate use of ssl context Ronald Cron 2022-03-28 10:19:54 +0200
  • f1ed5951e3 ssl_srv.c: Mark ETM as disabled if cipher is not CBC Ronald Cron 2022-03-24 14:15:28 +0100
  • c2e2876e0e compat.sh: Fix check for OpenSSL support Ronald Cron 2022-03-23 14:14:19 +0100
  • 01e3c37f7b compat.sh: Restore full TLS compatibility testing Ronald Cron 2022-03-11 17:15:23 +0100
  • ce514def84
    Merge pull request #5563 from AndrzejKurek/timeless-2.28 Dave Rodgman 2022-03-15 16:43:18 +0000
  • 2f39f191e3
    Merge pull request #5603 from tom-cosgrove-arm/fix_test_md_api_violation-2.28 Dave Rodgman 2022-03-10 09:21:52 +0000
  • 76d1cb26ef
    Merge pull request #5601 from SiliconLabs/erase_secret_before_free_backport_2_28 Gilles Peskine 2022-03-07 17:04:01 +0100
  • ecd119d241
    Merge pull request #5605 from gilles-peskine-arm/storage-format-check-mononicity-2.28 Gilles Peskine 2022-03-07 17:02:29 +0100
  • 478181d1f3 Refactor ssl_context_info time printing Andrzej Kurek 2022-02-28 05:51:57 -0500
  • 388ee8a072 Guard cache_timeout in ssl_server2 with MBEDTLS_HAVE_TIME Andrzej Kurek 2022-03-02 12:33:24 -0500
  • 161005b2be Add the timing test dependency on MBEDTLS_HAVE_TIME Andrzej Kurek 2022-03-02 12:13:50 -0500
  • 65f93d5567 Fix udp_proxy dependency on MBEDTLS_HAVE_TIME Andrzej Kurek 2022-03-04 15:18:09 -0500
  • 77daaad198 Provide a dummy implementation of timing.c Andrzej Kurek 2022-03-04 15:10:06 -0500
  • 448cf48e18 Fix requirement mismatch in fuzz/common.c Andrzej Kurek 2022-03-02 10:56:22 -0500
  • 516e1b0700 Add a missing guard for time.h in net_sockets.c Andrzej Kurek 2022-03-02 10:55:08 -0500