Andres Amaya Garcia
c5380649d9
Change value of MBEDTLS_ERR_AES_FEATURE_UNAVAILABLE
...
Change the value of the error MBEDTLS_ERR_AES_FEATURE_UNAVAILABLE to
0x0023 to ensure the errors in the AES module are all in a continuous
range.
2017-11-29 10:42:49 +00:00
Ron Eldor
0728d69d6d
Change kB to KiB
...
Change the style of the units to KiB, according to
https://docs.mbed.com/docs/writing-and-publishing-guides/en/latest/units/
2017-11-29 12:08:35 +02:00
Gilles Peskine
4daffe236a
Merge branch 'pr_1025' into development
...
Merge PR #1025 + ChangeLog entry
2017-11-28 18:23:53 +01:00
Gilles Peskine
d742b74838
Add ChangeLog entry
2017-11-28 17:40:56 +01:00
Gilles Peskine
ea8d697fa2
Merge remote-tracking branch 'upstream-public/pr/1089' into development
...
Resolve trivial conflict due to additions in the same place in
tests/data_files/Makefile; minor comment/whitespace presentation
improvements.
2017-11-28 17:32:32 +01:00
Gilles Peskine
4b117d9c92
Merge remote-tracking branch 'upstream-public/pr/1055' into development
2017-11-28 17:23:37 +01:00
Gilles Peskine
f2421210a5
Merge remote-tracking branch 'upstream-public/pr/828' into development
2017-11-28 17:22:37 +01:00
Gilles Peskine
9c3573a962
Merge remote-tracking branch 'upstream-public/pr/988' into development
2017-11-28 17:08:03 +01:00
Gilles Peskine
f16de7d525
Merge remote-tracking branch 'upstream-public/pr/995' into development
2017-11-28 16:59:20 +01:00
Ron Eldor
a0748019f1
Change KB to kB
...
Change KB to kB, as this is the proper way to write kilo bytes
2017-11-28 16:48:51 +02:00
Gilles Peskine
e7707228b4
Merge remote-tracking branch 'upstream-public/pr/1062' into development
2017-11-24 15:35:50 +01:00
Gilles Peskine
68306ed31f
Merge remote-tracking branch 'upstream-public/pr/1094' into development
2017-11-23 20:02:46 +01:00
Darryl Green
36ba8b683a
Add changelog for mbedtls_ecdsa_sign fix
2017-11-21 09:55:33 +00:00
Gilles Peskine
5eafc74154
Merge pull request #1159 from RonEld/1862
...
Change Arm Trademarks
2017-11-20 17:45:49 +01:00
Darryl Green
f5bcbede92
Add tests for invalid private parameters in mbedtls_ecdsa_sign()
2017-11-17 17:09:31 +00:00
Darryl Green
c64a48bec7
Add checks for private parameter in mbedtls_ecdsa_sign()
2017-11-17 17:09:17 +00:00
Andres Amaya Garcia
5a6da63138
Fix indentation for mbedtls_x509_crt_check_key_usage()
2017-11-14 21:47:08 +00:00
Andres Amaya Garcia
c81fcb9d36
Fix typos in documentation for mbedtls_x509_crt_check_extended_key_usage()
2017-11-14 21:43:14 +00:00
Manuel Pégourié-Gonnard
888fedea06
Merge branch 'development' into development-restricted
...
* development: (30 commits)
update README file (#1144 )
Fix typo in asn1.h
Improve leap year test names in x509parse.data
Correctly handle leap year in x509_date_is_valid()
Renegotiation: Add tests for SigAlg ext parsing
Parse Signature Algorithm ext when renegotiating
Minor style fix
config.pl get: be better behaved
config.pl get: don't rewrite config.h; detect write errors
Fixed "config.pl get" for options with no value
Fix typo and bracketing in macro args
Ensure failed test_suite output is sent to stdout
Remove use of GNU sed features from ssl-opt.sh
Fix typos in ssl-opt.sh comments
Add ssl-opt.sh test to check gmt_unix_time is good
Extend ssl-opt.h so that run_test takes function
Always print gmt_unix_time in TLS client
Restored note about using minimum functionality in makefiles
Note in README that GNU make is required
Fix changelog for ssl_server2.c usage fix
...
2017-11-14 08:24:22 +01:00
Chris Xue
9a51c032ee
Fix copy paste error in the error message of mbedtls_ecp_gen_key in gen_key.c
2017-11-05 19:10:51 +00:00
Ron Eldor
2ac96620f3
change URL
...
Change URL from developer.mbed.org to os.mbed.com
2017-11-01 14:19:50 +02:00
Ron Eldor
9d22619a13
Change Arm Trademarks to the issue template
...
Change the Trademarks to the issue template document
2017-10-30 18:39:47 +02:00
Ron Eldor
c7acb913ce
Change Arm Trademarks
...
Change the Arm Trademarks according to updated Trademarks
2017-10-30 17:24:50 +02:00
Ron Eldor
22360825ae
Address PR review comments
...
set `cache->chain` to NULL,
instead of setting the whole structure to zero.
2017-10-29 17:53:52 +02:00
Hanno Becker
3319555b7c
Improve documentation of mbedtls_rsa_import[_raw]
2017-10-25 17:04:10 +01:00
Hanno Becker
27b34d5bad
Wrong identifier used to check Encrypt-then-MAC flag
...
This commit fixes a comparison of ssl_session->encrypt_then_mac against the
ETM-unrelated constant MBEDTLS_SSL_EXTENDED_MS_DISABLED. Instead,
MBEDTLS_SSL_ETM_DISABLED should be used.
The typo is has no functional effect since both constants have the same value 0.
2017-10-20 14:24:51 +01:00
Hanno Becker
9cfabe3597
Use a conservative excess of the maximum fragment length in tests
...
This leads to graceful test failure instead of crash when run on the previous
code.
2017-10-18 14:42:01 +01:00
RonEld
005939db98
update README file ( #1144 )
...
* update README file
update VS 2010 as the minimal version of required Visual Studio
* Rephrase the MS VS requirement
Rephrase the VS version sentence
2017-10-17 18:19:48 +01:00
Ron Eldor
e1a9a4a826
Fix crash when calling mbedtls_ssl_cache_free
twice
...
Set `cache` to zero at the end of `mbedtls_ssl_cache_free` #1104
2017-10-17 18:15:41 +03:00
Hanno Becker
479e8e24e6
Adapt ChangeLog
2017-10-17 11:03:50 +01:00
Hanno Becker
134c2ab891
Add build and ssl-opt.sh run for !SSL_RENEGOTIATION to all.sh
2017-10-17 11:03:50 +01:00
Hanno Becker
6a2436493f
Add dependency on SSL_RENEGOTIATION to renego tests in ssl-opt.sh
2017-10-17 11:03:50 +01:00
Hanno Becker
40f8b51221
Add comments on the use of the renego SCSV and the renego ext
2017-10-17 11:03:50 +01:00
Hanno Becker
6851b10ec7
Note that disabling SSL_RENEGO doesn't open door for renego attack
2017-10-17 11:03:50 +01:00
Hanno Becker
21df7f90d2
Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused
...
Previously, if `MBEDTLS_SSL_RENEGOTIATION` was disabled, incoming handshake
messages in `mbedtls_ssl_read` (expecting application data) lead to the
connection being closed. This commit fixes this, restricting the
`MBEDTLS_SSL_RENEGOTIATION`-guard to the code-paths responsible for accepting
renegotiation requests and aborting renegotiation attempts after too many
unexpected records have been received.
2017-10-17 11:03:26 +01:00
Hanno Becker
b4ff0aafd9
Swap branches accepting/refusing renegotiation in in ssl_read
2017-10-17 11:03:04 +01:00
Hanno Becker
fc8fbfa059
Switch to gender neutral wording in rsa.h
2017-10-17 10:34:04 +01:00
Hanno Becker
580869dae8
Handle RSA_EXPORT_UNSUPPORTED error code in strerror
2017-10-17 10:34:04 +01:00
Hanno Becker
e2a73c13cf
Enhancement of ChangeLog entry
2017-10-17 10:34:04 +01:00
Hanno Becker
554c32dae6
Mention validate_params does primality tests only if GENPRIME def'd
2017-10-17 10:34:01 +01:00
Hanno Becker
68767a6e88
Improve documentation in mbedtls_rsa_check_privkey
2017-10-17 10:13:31 +01:00
Hanno Becker
f8c028a2fb
Minor corrections
2017-10-17 09:20:57 +01:00
Hanno Becker
4055a3a16f
Shorten prime array in mbedtls_rsa_deduce_primes
2017-10-17 09:15:26 +01:00
Hanno Becker
c36aab69b5
Swap D,E parameters in mbedtls_rsa_deduce_primes
2017-10-17 09:15:06 +01:00
Simon Butcher
6f63db7ed5
Fix changelog for ssl_server2.c usage fix
2017-10-12 23:22:17 +01:00
Gilles Peskine
085c10afdb
Allow comments in test data files
2017-10-12 23:22:17 +01:00
Andres Amaya Garcia
9fb02057a5
Fix typo in asn1.h
2017-10-12 23:21:37 +01:00
Andres Amaya Garcia
60100d09ee
Improve leap year test names in x509parse.data
2017-10-12 23:21:37 +01:00
Andres Amaya Garcia
735b37eeef
Correctly handle leap year in x509_date_is_valid()
...
This patch ensures that invalid dates on leap years with 100 or 400
years intervals are handled correctly.
2017-10-12 23:21:37 +01:00
Janos Follath
b0f148c0ab
Renegotiation: Add tests for SigAlg ext parsing
...
This commit adds regression tests for the bug when we didn't parse the
Signature Algorithm extension when renegotiating. (By nature, this bug
affected only the server)
The tests check for the fallback hash (SHA1) in the server log to detect
that the Signature Algorithm extension hasn't been parsed at least in
one of the handshakes.
A more direct way of testing is not possible with the current test
framework, since the Signature Algorithm extension is parsed in the
first handshake and any corresponding debug message is present in the
logs.
2017-10-12 23:21:37 +01:00