Manuel Pégourié-Gonnard
451ea75286
Merge remote-tracking branch 'restricted/pr/412' into mbedtls-2.1-restricted
...
* restricted/pr/412:
Correct record header size in case of TLS
Don't allocate space for DTLS header if DTLS is disabled
Improve debugging output
Adapt ChangeLog
Add run-time check for handshake message size in ssl_write_record
Add run-time check for record content size in ssl_encrypt_buf
Add compile-time checks for size of record content and payload
2017-12-19 11:33:07 +01:00
Gilles Peskine
92e6a0e71a
Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted
2017-12-04 18:01:28 +00:00
Gilles Peskine
a15486a35f
Merge branch 'pr_1044' into mbedtls-2.1
2017-12-04 17:29:28 +01:00
Gilles Peskine
45c8f6a38a
Added ChangeLog entry
2017-12-04 17:28:09 +01:00
Gilles Peskine
4b36dfb820
Merge remote-tracking branch 'upstream-public/pr/1174' into mbedtls-2.1
2017-12-04 17:20:45 +01:00
Gilles Peskine
aed7188b2e
Merge remote-tracking branch 'upstream-restricted/pr/427' into mbedtls-2.1-restricted
2017-12-01 18:05:40 +01:00
Gilles Peskine
6cf85ff1a4
Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted
2017-11-29 21:07:28 +01:00
Gilles Peskine
49349bacb9
Merge remote-tracking branch 'upstream-public/pr/1153' into mbedtls-2.1
2017-11-29 20:53:58 +01:00
Gilles Peskine
f663c22ab7
Merge remote-tracking branch 'upstream-public/pr/916' into mbedtls-2.1
2017-11-29 20:53:44 +01:00
Gilles Peskine
1854a0e0cd
Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted
2017-11-28 18:44:49 +01:00
Gilles Peskine
25aa833ac3
Merge branch 'pr_1082' into mbedtls-2.1
2017-11-28 18:33:50 +01:00
Gilles Peskine
026d18aefa
Add ChangeLog entry
2017-11-28 18:33:31 +01:00
Gilles Peskine
283a80d51f
Merge remote-tracking branch 'upstream-public/pr/1108' into mbedtls-2.1
2017-11-28 18:31:28 +01:00
Gilles Peskine
31dce36364
Merge remote-tracking branch 'upstream-public/pr/1080' into mbedtls-2.1
2017-11-28 18:30:18 +01:00
Gilles Peskine
a6f6947490
Merge remote-tracking branch 'upstream-public/pr/943' into mbedtls-2.1
2017-11-28 18:28:39 +01:00
Gilles Peskine
1b8822e9b3
Merge remote-tracking branch 'upstream-restricted/pr/422' into mbedtls-2.1-restricted
...
Resolved simple conflicts caused by the independent addition of
calls to mbedtls_zeroize with sometimes whitespace or comment
differences.
2017-11-28 16:21:07 +01:00
Gilles Peskine
9aab6995a9
Merge remote-tracking branch 'upstream-restricted/pr/406' into mbedtls-2.1-restricted
2017-11-28 16:19:19 +01:00
Gilles Peskine
5a8fe053d8
Merge remote-tracking branch 'upstream-restricted/pr/401' into mbedtls-2.1-restricted
2017-11-28 14:24:15 +01:00
Gilles Peskine
336b7de48a
Merge remote-tracking branch 'upstream-restricted/pr/386' into mbedtls-2.1-restricted
2017-11-28 14:24:05 +01:00
Gilles Peskine
206110dcb9
Merge branch 'iotssl-1419-safermemcmp-volatile_backport-2.1' into mbedtls-2.1-restricted
2017-11-28 13:51:37 +01:00
Gilles Peskine
2f615af5cf
add changelog entry
2017-11-28 13:34:24 +01:00
Gilles Peskine
e881a22126
Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted
2017-11-24 16:06:16 +01:00
Gilles Peskine
d08ae68237
Merge remote-tracking branch 'upstream-public/pr/1112' into mbedtls-2.1
2017-11-24 15:37:29 +01:00
Gilles Peskine
5eb8edc0cb
Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted
2017-11-23 20:11:07 +01:00
Gilles Peskine
7aa24190b4
Merge remote-tracking branch 'upstream-public/pr/1107' into mbedtls-2.1
2017-11-23 20:09:48 +01:00
Gilles Peskine
a90c3da42f
Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge-2.1' into mbedtls-2.1-restricted
2017-11-23 19:06:29 +01:00
Gilles Peskine
86eece9e87
ChangeLog entry for ssl_parse_client_psk_identity fix
2017-11-23 19:04:39 +01:00
Manuel Pégourié-Gonnard
aed00f7bf7
Merge remote-tracking branch 'restricted/pr/417' into mbedtls-2.1-restricted
...
* restricted/pr/417:
RSA PSS: remove redundant check; changelog
RSA PSS: fix first byte check for keys of size 8N+1
RSA PSS: fix minimum length check for keys of size 8N+1
RSA: Fix another buffer overflow in PSS signature verification
RSA: Fix buffer overflow in PSS signature verification
2017-11-23 12:13:49 +01:00
Darryl Green
1b052e80aa
Add checks for private parameter in mbedtls_ecdsa_sign()
2017-11-20 17:11:17 +00:00
Hanno Becker
b09c5721f5
Adapt ChangeLog
2017-11-20 10:43:48 +00:00
Manuel Pégourié-Gonnard
ea0aa655f6
Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted
...
* mbedtls-2.1:
Fix typo in asn1.h
Improve leap year test names in x509parse.data
Correctly handle leap year in x509_date_is_valid()
Renegotiation: Add tests for SigAlg ext parsing
Parse Signature Algorithm ext when renegotiating
Fix changelog for ssl_server2.c usage fix
Fix ssl_server2 sample application prompt
Update ChangeLog for fix to #836
Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog.
Enhance documentation of mbedtls_ssl_set_hostname
Add test case calling ssl_set_hostname twice
Make mbedtls_ssl_set_hostname safe to be called multiple times
Fix typo in configs/README.txt file
2017-11-14 08:38:52 +01:00
Hanno Becker
25e39d38bd
Add ChangeLog message for EC private exponent information leak
2017-10-25 15:46:31 +01:00
Hanno Becker
cf873f74d4
Adapt ChangeLog
2017-10-25 15:46:31 +01:00
Hanno Becker
489f80cbf5
Adapt ChangeLog
2017-10-24 11:56:58 +01:00
Gilles Peskine
9745cfd87d
RSA PSS: remove redundant check; changelog
...
Remove a check introduced in the previous buffer overflow fix with keys of
size 8N+1 which the subsequent fix for buffer start calculations made
redundant.
Added a changelog entry for the buffer start calculation fix.
2017-10-23 14:49:43 +02:00
Hanno Becker
b658ee63c2
Adapt ChangeLog
2017-10-19 15:45:17 +01:00
Gilles Peskine
d0cd855145
RSA: Fix another buffer overflow in PSS signature verification
...
Fix buffer overflow in RSA-PSS signature verification when the masking
operation results in an all-zero buffer. This could happen at any key size.
2017-10-17 19:19:55 +02:00
Gilles Peskine
5c3247120f
RSA: Fix buffer overflow in PSS signature verification
...
Fix buffer overflow in RSA-PSS signature verification when the hash is
too large for the key size. Found by Seth Terashima, Qualcomm.
Added a non-regression test and a positive test with the smallest
permitted key size for a SHA-512 hash.
2017-10-17 19:16:14 +02:00
Andres Amaya Garcia
bc041130b0
Correctly handle leap year in x509_date_is_valid()
...
This patch ensures that invalid dates on leap years with 100 or 400
years intervals are handled correctly.
2017-10-12 21:03:01 +01:00
Ron Eldor
bac9d4d90f
Parse Signature Algorithm ext when renegotiating
...
Signature algorithm extension was skipped when renegotiation was in
progress, causing the signature algorithm not to be known when
renegotiating, and failing the handshake. Fix removes the renegotiation
step check before parsing the extension.
2017-10-11 13:58:08 +01:00
Hanno Becker
ffa7a33ee4
Adapt ChangeLog
2017-10-05 09:08:06 +01:00
Hanno Becker
fbaeea4693
Adapt ChangeLog
2017-10-04 14:15:53 +01:00
Simon Butcher
5d39aceb04
Fix changelog for ssl_server2.c usage fix
2017-10-02 19:17:57 +01:00
Simon Butcher
72e9ba2ce3
Update ChangeLog for fix to #836
2017-09-30 23:51:44 +01:00
Hanno Becker
c7845e51f3
Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog.
...
Add a reference to the relevant RFC, adapt ChangeLog.
2017-09-30 23:49:01 +01:00
Hanno Becker
380aa64d65
Adapt ChangeLog
2017-09-28 16:26:17 +01:00
Hanno Becker
a89dbd168e
Adapt ChangeLog
2017-09-28 14:38:26 +01:00
Janos Follath
f341083b3c
DHM: Fix dhm_check_range() always returning 0
...
Although the variable ret was initialised to an error, the
MBEDTLS_MPI_CHK macro was overwriting it. Therefore it ended up being
0 whenewer the bignum computation was successfull and stayed 0
independently of the actual check.
2017-09-21 10:42:18 +01:00
Andres Amaya Garcia
41a38dfed6
Add ChangeLog entry
2017-09-15 11:01:40 +01:00
Ron Eldor
00cb3af4ab
Backport 2.1:Add configuration file in md.h
...
include `*config.h*` in md.h as MACROS in the header file get ignored.
Fix for #1001 .
2017-09-07 14:42:51 +03:00
