Hanno Becker
a34cc6b1c6
Correct length check for DTLS records from old epochs.
...
DTLS records from previous epochs were incorrectly checked against the
current epoch transform's minimal content length, leading to the
rejection of entire datagrams. This commit fixed that and adapts two
test cases accordingly.
Internal reference: IOTSSL-1417
2019-01-30 15:07:09 +01:00
Simon Butcher
d09324ac58
Merge remote-tracking branch 'public/pr/2264' into mbedtls-2.7
2019-01-23 10:58:08 +01:00
Simon Butcher
32331305dd
Merge remote-tracking branch 'public/pr/1797' into mbedtls-2.7
2019-01-23 10:56:40 +01:00
Simon Butcher
12b60bc702
Merge remote-tracking branch 'public/pr/2341' into mbedtls-2.7
2019-01-23 09:53:29 +01:00
Simon Butcher
c5b6c2f877
Merge remote-tracking branch 'public/pr/2296' into mbedtls-2.7
2019-01-23 09:51:48 +01:00
Masashi Honma
4a47112834
Remove duplicate #include
...
Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
2019-01-09 15:38:37 +00:00
Simon Butcher
78f040cf33
Merge remote-tracking branch 'public/pr/2233' into HEAD
2019-01-08 15:33:48 +00:00
Simon Butcher
7f899b406c
Merge remote-tracking branch 'public/pr/2304' into HEAD
2019-01-08 15:31:37 +00:00
Simon Butcher
3187e7ca98
Merge pull request #545 from ARMmbed/version-2.7.9
...
Update the version of the library to 2.7.9
2018-12-21 12:21:10 +00:00
Simon Butcher
b22a808cc6
Update the version of the library to 2.7.9
2018-12-21 10:52:37 +00:00
Simon Butcher
3112d10abd
Merge remote-tracking branch 'public/pr/2144' into mbedtls-2.7
2018-12-20 01:17:45 +00:00
Ron Eldor
314bd71894
Update ChangeLog
...
Add an entry in ChangeLog describing the fix.
2018-12-19 14:16:36 +02:00
Ron Eldor
44f6d0b3b1
Test AD too long only when CCM_ALT not defined
...
Since the AD too long is a limitation on Mbed TLS,
HW accelerators may support this. Run the test for AD too long,
only if `MBEDTLS_CCM_ALT` is not defined.
Addresses comment in #1996 .
2018-12-19 14:14:58 +02:00
Ron Eldor
bdcb54ff20
Add entry describing the bug fix
...
Add entry describing the bug fix in `mbedtls_ecdsa_genkey()`.
2018-12-17 10:26:52 +02:00
Ron Eldor
c7aac417f2
Return error code of underlying function.
...
Return the error code if failed, instead of returning value `1`.
If not failed, return the call of the underlying function,
in `mbedtls_ecdsa_genkey()`.
2018-12-17 10:22:19 +02:00
Ron Eldor
3625e56930
Include configuration file for all headers
...
Include the configuration file for all headers that were not
included.
2018-12-16 12:24:22 +02:00
Ron Eldor
0559c66ac2
Include configuration file to headers
...
Add inclusion to configration file in header files,
instead of relying on other header files to include
the configuration file. This issue resolves #1371
2018-12-16 12:22:12 +02:00
Jaeden Amero
b85e35d8d2
Merge remote-tracking branch 'upstream-public/pr/2102' into mbedtls-2.7
2018-12-07 16:15:46 +00:00
Jaeden Amero
e4cf723a70
Merge remote-tracking branch 'upstream-public/pr/2168' into mbedtls-2.7
2018-12-07 16:07:37 +00:00
Jaeden Amero
3ee55795e3
test: Make basic-build-test.sh see summary statuses
...
We've changed the behavior of "-v" to no longer output test summary
statuses. Update basic-build-test.sh to use the test runner's verbosity
option "-v 2", so that the basic-build-test.sh script can get the summary
statuses it needs.
2018-12-07 13:35:55 +00:00
Jaeden Amero
48d2f1e2d4
Merge remote-tracking branch 'upstream-public/pr/2220' into mbedtls-2.7
2018-12-06 16:17:15 +00:00
Jaeden Amero
a7e5cbd4f4
Merge remote-tracking branch 'upstream-public/pr/2179' into mbedtls-2.7
2018-12-06 16:11:22 +00:00
Jaeden Amero
93bfd1da0c
Merge remote-tracking branch 'upstream-public/pr/2132' into mbedtls-2.7
2018-12-06 16:06:21 +00:00
Jaeden Amero
5e264e37d8
Merge remote-tracking branch 'upstream-public/pr/2129' into mbedtls-2.7
2018-12-06 16:02:43 +00:00
Jaeden Amero
a7d16ba3a1
Merge remote-tracking branch 'upstream-public/pr/2150' into mbedtls-2.7
2018-12-06 16:02:06 +00:00
Jaeden Amero
a507910e16
Merge remote-tracking branch 'upstream-public/pr/2064' into mbedtls-2.7
2018-12-06 15:58:27 +00:00
Jaeden Amero
6ef6efbd8e
Merge remote-tracking branch 'upstream-public/pr/1984' into mbedtls-2.7
2018-12-06 15:54:38 +00:00
Jaeden Amero
ac021d901b
Merge remote-tracking branch 'upstream-public/pr/2143' into mbedtls-2.7
2018-12-06 15:52:01 +00:00
Simon Butcher
41349fd2bc
Fix CSR parsing header call
...
Change the secondary X509 CSR parsing call for the alternative MS header to only
occur if the first call fails due to the header being unfound, instead of any
call.
2018-12-05 23:23:39 +00:00
Simon Butcher
b37c29d673
Add additional test case for alternative CSR headers
...
Add a test case for alternative headers possible for CSR's, as defined in
RFC7468.
2018-12-05 23:23:28 +00:00
Simon Butcher
ff719bbf20
Add Changelog entry for #767
...
Add Changelog entry for fix for alternative header/footers in CSR's.
2018-12-05 23:23:06 +00:00
Simon Butcher
c47614ab42
Add support for alternative CSR headers
...
Add support for RFC7468, and the alternative Microsoft footer/headers for CSR's
that contain the text 'BEGIN NEW CERTIFICATE REQUEST' instead of
'BEGIN CERTIFICATE REQUEST'.
2018-12-05 23:17:52 +00:00
Simon Butcher
2297157dd6
Merge pull request #541 from ARMmbed/version-2.7.8
...
Update the library version to 2.7.8
2018-12-02 13:21:10 +00:00
Simon Butcher
4a908ca6bb
Update library version number to 2.7.8
2018-12-01 23:12:40 +00:00
Simon Butcher
be16e38102
Clarify attribution for the Bleichenbacher's Cat fix
2018-12-01 23:04:54 +00:00
Simon Butcher
4303f7619e
Merge remote-tracking branch 'restricted/pr/513' into mbedtls-2.7-restricted
2018-11-29 17:27:35 +00:00
Simon Butcher
e34a4f5825
Merge remote-tracking branch 'restricted/pr/536' into mbedtls-2.7-restricted
2018-11-29 17:26:43 +00:00
Simon Butcher
a0d3e1d570
Merge remote-tracking branch 'restricted/pr/518' into mbedtls-2.7-restricted
2018-11-29 17:26:25 +00:00
Gilles Peskine
5db9c830f1
Add changelog entry for mbedtls_mpi_write_binary fix
2018-11-29 12:47:02 +01:00
Gilles Peskine
813bdeb663
Tweak RSA vulnerability changelog entry
...
* Correct the list of authors.
* Add the CVE number.
* Improve the impact description.
2018-11-29 12:46:47 +01:00
Andres Amaya Garcia
97a184ba84
Fix resource leak of file desc in test code
2018-11-26 21:29:29 +00:00
Gilles Peskine
220cc17165
mbedtls_mpi_write_binary: don't leak the exact size of the number
...
In mbedtls_mpi_write_binary, avoid leaking the size of the number
through timing or branches, if possible. More precisely, if the number
fits in the output buffer based on its allocated size, the new code's
trace doesn't depend on the value of the number.
2018-11-26 12:45:35 +01:00
Gilles Peskine
da6ccfca68
check-files: detect merge artifacts
...
Detect Git merge artifacts. These are lines starting with "<<<<<<",
"|||||||" or ">>>>>>>" followed by a space, or containing just
"=======". For "=======", exempt Markdown files, because this can be
used to underline a title, as a compromise between false negatives and
false positives.
2018-11-23 22:42:42 +01:00
Gilles Peskine
232fae37e3
Factor record_issue into its own method
2018-11-23 22:42:40 +01:00
Simon Butcher
e26f79ba67
Merge pull request #533 from sbutcher-arm/version-2.7.7
...
Bump Mbed TLS Version to 2.7.7
2018-11-19 18:50:34 +00:00
Simon Butcher
20f30d97a8
Update library version number to 2.7.7
2018-11-19 18:32:22 +00:00
Simon Butcher
7fd58a9e4f
Refine the language in the ChangeLog
...
Fix the language and descriptions in the ChangeLog following review of the
Release Notes for the next release.
2018-11-19 16:01:15 +00:00
Simon Butcher
357fbee3fd
Fix language and formatting in ChangeLog
...
Changed the formatting and language in the ChangeLog to the house-style.
2018-11-08 13:47:21 +00:00
Simon Butcher
58012321b8
Merge remote-tracking branch 'restricted/pr/521' into mbedtls-2.7-restricted-proposed
2018-11-07 13:36:00 +00:00
Simon Butcher
02d3b1cfbb
Merge remote-tracking branch 'restricted/pr/523' into mbedtls-2.7-restricted-proposed
2018-11-07 13:35:07 +00:00
