Jaeden Amero
77027354f4
Merge remote-tracking branch 'origin/pr/2503' into mbedtls-2.16
...
* origin/pr/2503:
Fix ChangeLog entry ordering
Fix typo
Add non-regression test for buffer overflow
Improve documentation of mbedtls_mpi_write_string()
Adapt ChangeLog
Fix 1-byte buffer overflow in mbedtls_mpi_write_string()
2019-04-05 14:10:02 +01:00
Jaeden Amero
1c752f175d
Merge remote-tracking branch 'origin/pr/2501' into mbedtls-2.16
...
* origin/pr/2501:
Change Perl to Python in test builds
2019-04-05 14:08:11 +01:00
Jaeden Amero
9bfcebfe27
Merge remote-tracking branch 'origin/pr/2364' into mbedtls-2.16
...
* origin/pr/2364:
Increase okm_hex buffer to contain null character
Minor modifications to hkdf test
Add explanation for okm_string size
Update ChangeLog
Reduce buffer size of okm
Reduce Stack usage of hkdf test function
2019-04-05 13:53:22 +01:00
Jaeden Amero
5546267c86
Merge remote-tracking branch 'origin/pr/2510' into mbedtls-2.16
...
* origin/pr/2510:
Remove Circle CI script
2019-04-05 13:51:52 +01:00
Jaeden Amero
749c944664
Merge remote-tracking branch 'origin/pr/2514' into mbedtls-2.16
...
* origin/pr/2514:
x509.c: Fix potential memory leak in X.509 self test
2019-04-05 13:48:45 +01:00
Jaeden Amero
186c2c054d
Merge remote-tracking branch 'restricted/pr/553' into mbedtls-2.16
...
* restricted/pr/553:
Fix mbedtls_ecdh_get_params with new ECDH context
Add changelog entry for mbedtls_ecdh_get_params robustness
Fix ecdh_get_params with mismatching group
Add test case for ecdh_get_params with mismatching group
Add test case for ecdh_calc_secret
Fix typo in documentation
2019-03-27 14:54:00 +00:00
Jaeden Amero
f2357f8903
Merge remote-tracking branch 'origin/pr/2526' into mbedtls-2.16
...
* origin/pr/2526:
Update library version to 2.16.1
2019-03-26 15:27:56 +00:00
Jaeden Amero
9f4f8eec93
Update library version to 2.16.1
2019-03-19 16:20:02 +00:00
Junhwan Park
60ee28b36b
x509.c: Fix potential memory leak in X.509 self test
...
Found and fixed by Junhwan Park in #2106 .
Signed-off-by: Junhwan Park <semoking@naver.com>
2019-03-11 15:19:05 +02:00
Janos Follath
61ccc131d0
Remove Circle CI script
...
We are running an equivalent set of test by other means and therefore
this script is no longer needed.
2019-03-11 11:19:06 +00:00
Janos Follath
86d8c673c2
Fix ChangeLog entry ordering
2019-03-06 15:21:45 +00:00
Janos Follath
870ed0008a
Fix typo
2019-03-06 13:51:30 +00:00
Janos Follath
276284fd2e
Add non-regression test for buffer overflow
2019-03-06 13:51:25 +00:00
Hanno Becker
c1fa6cdab6
Improve documentation of mbedtls_mpi_write_string()
2019-03-06 13:51:19 +00:00
Hanno Becker
ae499753a2
Adapt ChangeLog
2019-03-06 13:51:12 +00:00
Hanno Becker
af97cae27d
Fix 1-byte buffer overflow in mbedtls_mpi_write_string()
...
This can only occur for negative numbers. Fixes #2404 .
2019-03-06 13:50:54 +00:00
Ron Eldor
1fea599ecc
Change Perl to Python in test builds
...
Change references to Perl when mentioning building the tests, to Python,
as this is now the script that builds the tests. Fixes #2078 .
2019-03-06 15:32:55 +02:00
Jaeden Amero
cef29a2fd0
Merge remote-tracking branch 'origin/pr/2401' into mbedtls-2.16
...
* origin/pr/2401:
Add ChangeLog entry
Fix private DER output shifted by one byte.
2019-03-05 16:37:13 +00:00
Jaeden Amero
b0abd1c84f
Merge remote-tracking branch 'origin/pr/2388' into mbedtls-2.16
...
* origin/pr/2388:
Update change log
all.sh: Test MBEDTLS_MPI_WINDOW_SIZE=1
Fix DEADCODE in mbedtls_mpi_exp_mod()
2019-03-05 16:34:40 +00:00
Jaeden Amero
6b79a1115e
Merge remote-tracking branch 'origin/pr/2293' into mbedtls-2.16
...
* origin/pr/2293:
Declare test_suite_aes.ofb to CMake
Add a facility to skip running some test suites
run-test-suites: update the documentation
2019-03-05 16:31:02 +00:00
Jaeden Amero
203123b5b7
Merge remote-tracking branch 'origin/pr/1818' into mbedtls-2.16
...
* origin/pr/1818:
Move ChangeLog entry from Bugfix to Changes section
Adapt ChangeLog
Return from debugging functions if SSL context is unset
2019-03-05 16:28:18 +00:00
Jaeden Amero
daed232dd7
Merge remote-tracking branch 'origin/pr/2436' into mbedtls-2.16
...
* origin/pr/2436:
Use certificates from data_files and refer them
Specify server certificate to use in SHA-1 test
refactor CA and SRV certificates into separate blocks
refactor SHA-1 certificate defintions and assignment
refactor server SHA-1 certificate definition into a new block
define TEST_SRV_CRT_RSA_SOME in similar logic to TEST_CA_CRT_RSA_SOME
server SHA-256 certificate now follows the same logic as CA SHA-256 certificate
add entry to ChangeLog
2019-03-05 16:26:34 +00:00
Simon Butcher
799cd57c72
Merge remote-tracking branch 'restricted/pr/550' into mbedtls-2.16
...
* restricted/pr/550:
Update query_config.c
Fix failure in SSLv3 per-version suites test
Adjust DES exclude lists in test scripts
Clarify 3DES changes in ChangeLog
Fix documentation for 3DES removal
Exclude 3DES tests in test scripts
Fix wording of ChangeLog and 3DES_REMOVE docs
Reduce priority of 3DES ciphersuites
2019-03-01 13:05:43 +00:00
Simon Butcher
e6a3f57898
Merge remote-tracking branch 'public/pr/2429' into mbedtls-2.16
...
* public/pr/2429:
Add ChangeLog entry for unused bits in bitstrings
Improve docs for ASN.1 bitstrings and their usage
Add tests for (named) bitstring to suite_asn1write
Fix ASN1 bitstring writing
2019-03-01 13:04:04 +00:00
Simon Butcher
3664fdb5f6
Merge remote-tracking branch 'public/pr/2449' into mbedtls-2.16
...
* public/pr/2449:
Reword changelog entry
Reenable GnuTLS next based tests
2019-03-01 13:01:54 +00:00
Manuel Pégourié-Gonnard
2eee0c3166
Update query_config.c
2019-03-01 10:30:30 +01:00
Manuel Pégourié-Gonnard
f1e62e8e1e
Fix failure in SSLv3 per-version suites test
...
The test used 3DES as the suite for SSLv3, which now makes the handshake fails
with "no ciphersuite in common", failing the test as well. Use Camellia
instead (as there are not enough AES ciphersuites before TLS 1.2 to
distinguish between the 3 versions).
Document some dependencies, but not all. Just trying to avoid introducing new
issues by using a new cipher here, not trying to make it perfect, which is a
much larger task out of scope of this commit.
2019-03-01 10:30:11 +01:00
Andres Amaya Garcia
37e0a8c455
Adjust DES exclude lists in test scripts
2019-03-01 10:30:11 +01:00
Andres Amaya Garcia
03afdc0971
Clarify 3DES changes in ChangeLog
2019-03-01 10:30:11 +01:00
Andres Amaya Garcia
7c86e9a03e
Fix documentation for 3DES removal
2019-03-01 10:29:49 +01:00
Andres Amaya Garcia
ac9c5221c5
Exclude 3DES tests in test scripts
2019-03-01 10:29:49 +01:00
Andres Amaya Garcia
6882ec1521
Fix wording of ChangeLog and 3DES_REMOVE docs
2019-03-01 10:29:49 +01:00
Andres Amaya Garcia
5d8aade01d
Reduce priority of 3DES ciphersuites
2019-03-01 10:29:13 +01:00
Jaeden Amero
2c1d492ccc
Merge remote-tracking branch 'origin/pr/2428' into mbedtls-2.16
2019-02-22 12:53:27 +00:00
Gilles Peskine
05fcf4f3c5
Fix mbedtls_ecdh_get_params with new ECDH context
...
The new check for matching groups in mbedtls_ecdh_get_params only worked
with legacy ECDH contexts. Make it work with the new context format.
2019-02-22 12:51:51 +01:00
Gilles Peskine
661610c8e0
Add changelog entry for mbedtls_ecdh_get_params robustness
2019-02-22 10:24:31 +01:00
Gilles Peskine
b47045a18e
Fix ecdh_get_params with mismatching group
...
If mbedtls_ecdh_get_params is called with keys belonging to
different groups, make it return an error the second time, rather than
silently interpret the first key as being on the second curve.
This makes the non-regression test added by the previous commit pass.
2019-02-22 10:24:31 +01:00
Gilles Peskine
62a73511f1
Add test case for ecdh_get_params with mismatching group
...
Add a test case for doing an ECDH calculation by calling
mbedtls_ecdh_get_params on both keys, with keys belonging to
different groups. This should fail, but currently passes.
2019-02-22 10:24:31 +01:00
Gilles Peskine
6d9b762ee0
Add test case for ecdh_calc_secret
...
Add a test case for doing an ECDH calculation by calling
mbedtls_ecdh_get_params on both keys, then mbedtls_ecdh_calc_secret.
2019-02-22 10:24:14 +01:00
Gilles Peskine
4dc50bc06e
Fix typo in documentation
2019-02-21 16:58:20 +01:00
Jaeden Amero
c5b57ef9e0
Merge remote-tracking branch 'origin/pr/2412' into mbedtls-2.16
2019-02-21 12:01:50 +00:00
Jaeden Amero
0981db57e1
Merge remote-tracking branch 'origin/pr/2385' into mbedtls-2.16
2019-02-21 11:58:58 +00:00
Jaeden Amero
fe50335a1f
Merge remote-tracking branch 'origin/pr/2389' into mbedtls-2.16
2019-02-21 11:53:51 +00:00
k-stachowiak
b4595d2527
Reword changelog entry
2019-02-19 12:41:30 +01:00
k-stachowiak
abb843e8ae
Reenable GnuTLS next based tests
2019-02-18 16:14:03 +01:00
Ron Eldor
e900969cb5
Use certificates from data_files and refer them
...
Use the server certificate from `data_files` folder, for formality,
and refer to the source, for easier reproduction.
2019-02-12 17:10:29 +02:00
Ron Eldor
b76e765f2e
Specify server certificate to use in SHA-1 test
...
Specify the SHA-1 server certificate to use in the SHA-1 test,
because now the default certificates use SHA256 certificates.
2019-02-12 17:10:28 +02:00
ILUXONCHIK
a51f4c737b
refactor CA and SRV certificates into separate blocks
2019-02-12 17:10:28 +02:00
ILUXONCHIK
ecc6c13655
refactor SHA-1 certificate defintions and assignment
...
As per refactoring suggestion that I made in #1520 .
2019-02-12 17:10:28 +02:00
ILUXONCHIK
5f97b32b63
refactor server SHA-1 certificate definition into a new block
2019-02-12 17:10:28 +02:00