Angus Gratton
d8213d00db
Let MBEDTLS_SSL_MAX_CONTENT_LEN to be split into outward & inward sizes
...
For the situation where the mbedTLS device has limited RAM, but the
other end of the connection doesn't support the max_fragment_length
extension. To be spec-compliant, mbedTLS has to keep a 16384 byte
incoming buffer. However the outgoing buffer can be made smaller without
breaking spec compliance, and we save some RAM.
See comments in include/mbedtls/config.h for some more details.
(The lower limit of outgoing buffer size is the buffer size used during
handshake/cert negotiation. As the handshake is half-duplex it might
even be possible to store this data in the "incoming" buffer during the
handshake, which would save even more RAM - but it would also be a lot
hackier and error-prone. I didn't really explore this possibility, but
thought I'd mention it here in case someone sees this later on a mission
to jam mbedTLS into an even tinier RAM footprint.)
2018-06-18 20:51:51 +10:00
Simon Butcher
b6a5bffc4b
Add ChangeLog entry for clang version fix. Issue #1072
2018-06-18 11:51:36 +01:00
Manuel Pégourié-Gonnard
c7bc9e122f
Fix a few typos
2018-06-18 10:30:30 +02:00
Simon Butcher
cbe248a3f5
Merge remote-tracking branch 'public/pr/1727' into development
2018-06-17 17:37:29 +01:00
Simon Butcher
1f91575546
Merge remote-tracking branch 'public/pr/1681' into development
2018-06-17 17:35:54 +01:00
Simon Butcher
688a456f58
Merge remote-tracking branch 'public/pr/1734' into development
2018-06-17 17:35:34 +01:00
Simon Butcher
cdc338bfd7
Merge remote-tracking branch 'public/pr/1735' into development
2018-06-17 17:35:15 +01:00
Simon Butcher
2711ad7505
Merge remote-tracking branch 'public/pr/1736' into development
2018-06-17 17:34:55 +01:00
Simon Butcher
600c5e6d20
Compilation warning fixes on 32b platfrom with IAR
...
Fix compilation warnings with IAR toolchain, on 32 bit platform.
Reported by rahmanih in #683
This is based on work by Ron Eldor in PR #750 , some of which was independently
fixed by Azim Khan and already merged in PR #1646 .
2018-06-17 17:24:56 +01:00
Jaeden Amero
d9c71dad50
Revert "Turn on MBEDTLS_SSL_ASYNC_PRIVATE by default"
...
This reverts commit 5ffe41c8f9
.
Turn off MBEDTLS_SSL_ASYNC_PRIVATE by default because we don't want to
change the ABI yet.
2018-06-15 20:31:26 +01:00
Simon Butcher
2dbecc04cc
Merge remote-tracking branch 'public/pr/1602' into development
2018-06-15 20:15:00 +01:00
Simon Butcher
66a8903f4a
Fix for missing len var when XTS config'd and CTR not
...
The AES XTS self-test was using a variable len, which was declared only when CTR
was enabled. Changed the declaration of len to be conditional on CTR and XTS.
2018-06-15 18:20:29 +01:00
Simon Butcher
9873696c34
Merge remote-tracking branch 'public/pr/710' into development
2018-06-15 14:18:11 +01:00
Simon Butcher
5f57f1e3cc
Merge remote-tracking branch 'public/pr/1270' into development
2018-06-15 14:17:31 +01:00
Simon Butcher
675590519a
Merge remote-tracking branch 'public/pr/1602' into development
2018-06-15 14:13:14 +01:00
Gilles Peskine
d5d983e168
ssl_server2: handle mbedtls_x509_dn_gets failure
...
If mbedtls_x509_dn_gets fails, the server could end up calling printf
on an uninitialized buffer. Check if the function succeeds. Found by
Coverity.
2018-06-15 14:05:10 +02:00
Andres Amaya Garcia
6b9bcd6267
Remove redundant ret = 1 in dh_client.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
eb8bca6561
Add missing platform macro defines in cert_app.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
bce5f7882c
Add missing platform macro defines in pk_decrypt.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
7d42965ea8
Fix typo in platform macro defines for examples
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
28abd8e98c
Fix ret code in gen_random_havege.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
25b5af58b4
Fix ret code in rsa_encrypt.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
7fe4edf8c0
Fix ret code in rsa_decrypt.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
7a9d01ceed
Fix ret code in cert_app.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
dabd78fdc3
Fix ret code in generic_sum.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
9f3379d3ca
Fix ret code in pk_verify.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
82b2726b4c
Fix ret code in pk_sign.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
0a7522c127
Fix ret code in pk_encrypt.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
52898179cf
Fix ret code in pk_encrypt.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
f47c9c11d1
Fix ret code in ecdh_curve25519.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
d905db65b7
Fix ret code in mpi_demo.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
78dabe07bf
Fix ret code in pem2der.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
357b0b283a
Fix ret code in ssl_cert_test.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
80081a68cd
Fix ret code in udp_proxy.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
57a0c9b62c
Fix ret code in req_app.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
898b208929
Fix ret code in crl_app.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
f9a54d339f
Fix ret code in cert_write.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
aacd928f97
Fix ret code in cert_req.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
67a42acfb8
Fix ret code in ssl_mail_client.c
2018-06-14 23:01:55 +01:00
Andres Amaya Garcia
4be53b5519
Fix ret code in ssl_fork_server.c
2018-06-14 23:01:10 +01:00
Andres Amaya Garcia
5517202541
Fix ret code in ssl_client1.c
2018-06-14 23:01:10 +01:00
Andres Amaya Garcia
73d4a5f131
Fix ret code in gen_random_ctr_drbg.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
55a0d56b33
Fix ret code in gen_entropy.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
a8332637d7
Fix ret code in rsa_verify_pss.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
0a860f6301
Fix ret code in rsa_verify.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
3c41e564f8
Fix ret code in rsa_sign_pss.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
1a66056c77
Fix ret code in rsa_sign.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
70e1ffdacd
Fix ret code in rsa_genkey.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
ed68488e28
Fix ret code in key_app_writer.c
2018-06-14 22:59:57 +01:00
Andres Amaya Garcia
0faf1a5c01
Fix ret code in key_app.c
2018-06-14 22:59:57 +01:00