Manuel Pégourié-Gonnard
2df4bfe803
Fix typo in comments
2018-05-22 13:39:01 +02:00
Manuel Pégourié-Gonnard
565e4e0fb2
Use more appropriate type for local variable
2018-05-22 13:30:28 +02:00
Manuel Pégourié-Gonnard
08c337d058
Remove useless parameter from function
2018-05-22 13:18:01 +02:00
Manuel Pégourié-Gonnard
89924ddc7e
Wipe sensitive info from the stack
2018-05-22 13:07:07 +02:00
Manuel Pégourié-Gonnard
12e2fbdf29
Style adjustments
2018-05-22 13:01:09 +02:00
Manuel Pégourié-Gonnard
d418b0dcba
Fix typo in comment
2018-05-22 12:56:11 +02:00
Manuel Pégourié-Gonnard
9d410733c2
Fix typos from copy-pasting
2018-05-22 12:49:22 +02:00
Darryl Green
4d393b9835
Add check-files.py to travis.yml
2018-05-21 11:59:28 +01:00
Darryl Green
2699de3370
Add check-files.py to pre-push.sh
2018-05-21 11:41:18 +01:00
Darryl Green
a07039cfe2
Add check-files.py to all.sh
2018-05-21 11:41:04 +01:00
Darryl Green
10d9ce332f
Add script for source integrity checking
2018-05-21 11:39:49 +01:00
Jaeden Amero
c4bd8ec5ed
Merge remote-tracking branch 'upstream-public/pr/1446' into development
2018-05-17 11:46:13 +01:00
Darryl Green
11999bb72e
Fix minor code style issues
2018-05-15 09:21:57 +01:00
Jaeden Amero
cdd97fd632
Merge remote-tracking branch 'upstream-public/pr/1433' into development
2018-05-11 10:48:15 +01:00
Manuel Pégourié-Gonnard
707e9624e0
Update visualc project files
2018-05-09 10:57:04 +02:00
Philippe Antoine
6087f200bf
Fix memory leak in mbedtls_x509_csr_parse
2018-05-09 07:54:12 +02:00
Jaeden Amero
a331e0f0af
Merge remote-tracking branch 'upstream-restricted/pr/421' into development-proposed
2018-05-04 14:39:24 +01:00
Jaeden Amero
fb19399f41
Merge remote-tracking branch 'upstream-public/pr/1498' into development-proposed
2018-05-04 11:09:14 +01:00
Jaeden Amero
09c4e7ef5a
Merge remote-tracking branch 'upstream-public/pr/1486' into development-proposed
2018-05-04 11:03:16 +01:00
Andres Amaya Garcia
54306c14f6
Add more SNI/DTLS tests
...
Run the normal SNI/TLS tests over DTLS in ssl-opt.sh for greater
coverage.
2018-05-01 20:27:37 +01:00
Andres Amaya Garcia
f77d3d31d6
Rename SNI/DTLS tests in ssl-opt.sh script
2018-05-01 20:26:47 +01:00
Jaeden Amero
070e356476
Merge remote-tracking branch 'upstream-restricted/pr/481' into development-restricted
2018-05-01 15:28:18 +01:00
Simon Butcher
e6a2a1aa97
Add the uodate to the soversion to the ChangeLog
2018-05-01 14:02:24 +01:00
Mohammad Azim Khan
0b3f00c3cf
Avoid -Wformat-truncation warning on gcc7
2018-05-01 10:17:48 +01:00
Jaeden Amero
78d2f7d5df
Merge remote-tracking branch 'upstream-restricted/pr/478' into development-restricted
2018-04-30 17:37:42 +01:00
Simon Butcher
b03120ad41
Fix the ChangeLog for clarity, english and credit
2018-04-30 17:13:42 +01:00
Gilles Peskine
276b9a650c
ssl_server2: get op_name from context in ssl_async_resume as well
2018-04-30 16:39:35 +02:00
Gilles Peskine
9ceae8b4f6
Clarify "as directed here" in SSL async callback documentation
2018-04-30 16:37:03 +02:00
Gilles Peskine
ea5fab829c
SSL async callbacks documentation: clarify resource cleanup
...
Clarify when resume must clean up resources and when cancel is called.
2018-04-30 13:58:09 +02:00
Gilles Peskine
26d01bcb5c
Async callback: use mbedtls_pk_check_pair to compare keys
...
In the current test code, the object that is used as a public key in
the certificate also contains a private key. However this is because
of the way the stest code is built and does not demonstrate the API in
a useful way. Use mbedtls_pk_check_pair, which is not what real-world
code would do (since the private key would typically be in an external
cryptoprocessor) but is a more representative placeholder.
2018-04-30 12:07:56 +02:00
Gilles Peskine
1febfef561
Rename mbedtls_ssl_async_{get,set}_data for clarity
...
Rename to mbedtls_ssl_get_async_operation_data and
mbedtls_ssl_set_async_operation_data so that they're about
"async operation data" and not about some not-obvious "data".
2018-04-30 11:54:39 +02:00
Gilles Peskine
6a8cb36c24
Fix copypasta in the async callback documentation
2018-04-30 11:54:14 +02:00
Jaeden Amero
00cbed23b8
Merge remote-tracking branch 'upstream-restricted/pr/474' into development-restricted
2018-04-30 10:21:25 +01:00
Jaeden Amero
7d7bad6b1f
Update version to 2.9.0
...
Bump SOVERSION for parity with 2.7.2 and 2.7.3.
2018-04-30 09:58:33 +01:00
Gilles Peskine
807d74a062
SSL async callback: cert is not always from mbedtls_ssl_conf_own_cert
...
The certificate passed to async callbacks may not be the one set by
mbedtls_ssl_conf_own_cert. For example, when using an SNI callback,
it's whatever the callback is using. Document this, and add a test
case (and code sample) with SNI.
2018-04-30 10:30:49 +02:00
Gilles Peskine
0b53e24c6b
ssl_async_set_key: detect if ctx->slots overflows
2018-04-30 10:23:56 +02:00
Gilles Peskine
deda75a09e
Fix missing continuation indicator in ssl-opt.sh
2018-04-30 10:02:45 +02:00
Jaeden Amero
8b98498e9a
Merge remote-tracking branch 'upstream-restricted/pr/477' into development-restricted-proposed
2018-04-27 18:27:47 +01:00
Jaeden Amero
fe0669f52a
ecp: Fix binary compatibility with group ID
...
We naturally added the new Curve448 ECP group ID in alphabetical order in
the mbedtls_ecp_group_id enum. However, this causes binary incompatibility
issues as previous binaries will use values for groups that now have a
different meaning. For example, MBEDTLS_ECP_DP_SECP192K1, old value 10,
would mean Curve448 (MBEDTLS_ECP_DP_CURVE448) and the wrong group ID used.
Fix the binary compatibility issue by adding new enum entries to the end of
the enum, even though this isn't so great for readbility as the list is no
longer in alphabetical order. However, the list wasn't perfectly in
alphabetical order before anyway.
2018-04-27 18:20:31 +01:00
Gilles Peskine
37289cdb99
SSL async tests: tighten a few log checks in some test cases
2018-04-27 11:50:14 +02:00
Gilles Peskine
20deb01264
Improve documentation of the async callback's crypto parameters
2018-04-26 17:57:37 +02:00
Gilles Peskine
12d0cc1b8f
Add test case for SSL async resume after resume
...
Add a test case for SSL asynchronous signature where f_async_resume is
called twice. Verify that f_async_sign_start is only called once.
This serves as a non-regression test for a bug where f_async_sign_start
was only called once, which turned out to be due to a stale build
artifacts with mismatched numerical values of
MBEDTLS_ERR_SSL_ASYNC_IN_PROGRESS.
2018-04-26 15:06:56 +02:00
Gilles Peskine
9de55fab56
Fix uninitialized variable in ssl_server2
2018-04-26 14:33:43 +02:00
Gilles Peskine
5bea9f61b9
Don't use the printf format %zd
...
We target C89 libc, so don't use %zd or %zu. Just use %u, and make
slot numbers `unsigned` for simplicity.
2018-04-26 13:29:17 +02:00
Gilles Peskine
783007375f
Change boolean bitfield to unsigned
...
Reminder to self: 1 is not a valid value in a 1-bit bitfield. It's
undefined behavior and gcc -ansi -pedantic helpfully complains about it.
2018-04-26 13:03:29 +02:00
Gilles Peskine
5ffe41c8f9
Turn on MBEDTLS_SSL_ASYNC_PRIVATE by default
...
This is an ABI change in libmbedtls.
2018-04-26 11:51:03 +02:00
Gilles Peskine
ac5e8a3286
Document that callbacks must not return arbitrary SSL errors
2018-04-26 11:50:07 +02:00
Gilles Peskine
8f97af7ea3
Don't pass the async config data to async callbacks
...
The config data is in the SSL config, so callbacks can retrieve it
from there, with the new function mbedtls_ssl_conf_get_async_config_data.
2018-04-26 11:46:10 +02:00
Gilles Peskine
e141638868
Finish writing an unfinished comment
2018-04-26 10:23:34 +02:00
Jaeden Amero
c64a300027
Merge remote-tracking branch 'upstream-restricted/pr/471' into development-restricted-proposed
...
Remove trailing whitespace in ChangeLog.
2018-04-26 09:06:33 +01:00
