coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-07-30 16:26:33 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,704 Commits 183 Branches 286 Tags Multiple Licenses 215 MiB
Commit Graph

1834 Commits

Author SHA1 Message Date
David Horstmann
2acb9a2e7b Add ChangeLog entry for NULL dereference fix 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-02-26 14:04:40 +00:00
Ronald Cron
a5f45bb935 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-02-23 12:12:36 +01:00
Gilles Peskine
f004998303 Add issue number 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-02-21 21:20:34 +01:00
Gilles Peskine
5890b22b82 Fix a build error with MSVC 
Also fixes a minor bug on Windows with timers running over ~49 days.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-02-19 16:53:52 +01:00
Gilles Peskine
86eac795c9 Have MBEDTLS_TIMING_C require MBEDTLS_HAVE_TIME 
Nowadays, the timing module just builds on a function that provides a timer
with millisecond resolution. In terms of platform requirements, this is
almost exactly equivalent to `mbedtls_ms_time()`
provides (`mbedtls_ms_time()` is arguably a little stronger because it is
supposed to last longer than a single timer object, but an application could
start a timer when it starts, so there's no real difference.) So it's a bit
silly that `timing.c` essentially reimplements this. Rely on
`mbedtls_ms_time()` instead.

This is an API break because in Mbed TLS 4.0, it was possible to enable
`MBEDTLS_TIMING_C` without `MBEDTLS_HAVE_TIME`. However, `timing.c` only
provided an implementation for Windows and Unix-like platforms, and on those
platforms, it is very likely that the default implementation of
`MBEDTLS_HAVE_TIME` would also work. (The main exception would be a platform
that has the traditional Unix function `gettimeofday()`, but not the 1990s
novelty `clock_gettime()`.) So make this an official requirement, as a
belated change that really should have gone into 4.0 if we'd taken the time
to dig into it.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-02-19 16:53:52 +01:00
David Horstmann
37e3dcf00d Reword ChangeLog entry 
We do not return failure, but return -1u which is documented as a value
that indicates that the result is not available.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-02-16 16:18:01 +00:00
Janos Follath
57f189887b Add ChangeLog entry 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2026-02-12 08:11:37 +00:00
David Horstmann
e29d7be48e Add ChangeLog entry for verify_result hardening 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2026-02-05 14:31:46 +00:00
Valerio Setti
2a72766d75
Merge pull request #10570 from valeriosetti/issue10349 
mbedtls 4.x does not expose mbedtls_ecp_curve_list()
 2026-02-03 11:01:11 +00:00
Valerio Setti
318e4314df changelog: add notes about helpers added to get list of known/supported TLS groups 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-02-02 13:38:03 +01:00
Nico Geyso
cc53b069d9 Improve changelog for alert getter 
Integrate suggestions by @ronald-cron-arm for changelog for alert
getter.

Signed-off-by: Nico Geyso <ng@gsmk.de>
 2026-01-27 10:48:55 +01:00
Nico Geyso
d589854611 mbedtls_ssl_get_alert(): getter for fatal alerts 
Even though the TLS RFCs do not mandate libraries to expose *Error
Alerts* (as defined in RFC8446 6.2 for TLS 1.3 and in RFC5246 7.2.2 for
TLS 1.2) to the user, there are use cases when it is handy to get the
actual last received fatal error instead of a generic one. For instance
this enables the user to differ between received fatal errors in case
`mbedtls_ssl_handshake()`, `mbedtls_ssl_handshake_step()` or
`mbedtls_ssl_read()` returned `MBEDTLS_ERR_SSL_FATAL_ALERT_MESSAGE`.

This changesets stores the last incoming fatal alert in
`mbedtls_ssl_context` and provides `mbedtls_ssl_get_alert()` as a getter
for retrieving it. Another option would be to provide a callback
mechanisms for all kinds of alerts (not only fatals) but for simplicity
I discarded this option.

Signed-off-by: Nico Geyso <ng@gsmk.de>
 2025-12-10 19:37:07 +01:00
Gilles Peskine
28f745515e Changelog entry for fix #10502 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-11-20 10:28:30 +01:00
Valerio Setti
525dd917dc
Merge pull request #10477 from Cube707/fix/iar-compiler-warning 
add cast to fix IAR compiler errors
 2025-10-31 12:33:26 +00:00
Jan Spannberger
a5384bdf09 add cast to fix IAR compiler errors 
IAR throws a warning "mixed ENUM with other type"

Signed-off-by: Jan Spannberger <jan.spannberger@siemens.com>
 2025-10-28 15:13:08 +01:00
Luc Schrijvers
ffc2606bf2 Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation 
Signed-off-by: Luc Schrijvers <begasus@gmail.com>
 2025-10-24 12:50:51 +02:00
Minos Galanakis
38181b6d66 Assemble ChangeLog 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-10-13 16:51:48 +01:00
Gilles Peskine
0a49a8b577
Merge pull request #10397 from minosgalanakis/debug/restore_changelogs 
Changelog entries post migration to TF-PSA-Crypto
 2025-09-30 11:26:54 +00:00
Ben Taylor
c797a35acd Improve ChangeLog entry 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-29 14:24:47 +01:00
Ben Taylor
b11d5bc949 Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-29 14:24:47 +01:00
Minos Galanakis
55e4bf8acd Changelog: Introduced oid.txt 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-29 11:42:30 +01:00
Minos Galanakis
8120169554 Changelog: Removed check-config.txt 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-29 11:38:39 +01:00
Minos Galanakis
30f42edd43 Changelog: Reworded fix-clang-psa-build-without-dhm 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-29 11:38:10 +01:00
Minos Galanakis
cc3f987c4f Changelogs: Added CVEs 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-29 11:34:24 +01:00
Minos Galanakis
9364208e33 Changelogs: Fixed aligment issues 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-29 10:39:23 +01:00
Minos Galanakis
48bfaa9353 Changelog: Removed psa migrated entries 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
9b1db5da78 Moved entries back to Changelog.d 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
514375e8c1 Changelog: Brought entries from tf-psa-crypto 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
1789bbdde8 Changelog: Moved entries to tf-psa-psa 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
4b0923f653 Changelog: Brought forward changelog changes from #4716308 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
92a2154ed2 Changelog: Split changelogs for both libraries 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
582cb04c6c Changelog: Moved fix-clang-psa-build-without-dhm to MbedTLS 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
a439ac57d1 moved psa changelogs 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
f47c86561d Moved x509 related changelogs 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
5bb46ef737 Moved TLS related changelogs 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
120914be22 Removed entries already in tf-psa-crypto Clog 
ripgrep was used to check against the
tf-psa-crypto.v1.0.0-beta Changelog.

rg --multiline -F -f {changelog_to_check}.txt -o ../tf-psa-crypto-ChangeLog
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Minos Galanakis
93145552cd Restored changelog entries 
This commit restores all changelog entries between the
mbedtls-3.6.0 tag and the mbedtls-4.0.0-beta tag.

git diff ce4683e..09dc57d --name-status -- ChangeLog.d

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-09-26 15:53:04 +01:00
Ronald Cron
7f65346177 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
0dd31fe523 Introduce MBEDTLS_SSL_NULL_CIPHERSUITES 
The support for TLS ciphersuites without
encryption does not rely anymore on the
MBEDTLS_CIPHER_NULL_CIPHER feature of
the cipher module. Introduce a specific
config option to enable these ciphersuites
and use it instead of MBEDTLS_CIPHER_NULL_CIPHER.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-16 15:53:43 +02:00
Ben Taylor
c1e76e04fe correct whitespace style issue 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-12 08:33:38 +01:00
Ben Taylor
486ec6e9b6 Improved the text in the Changelog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-11 13:22:40 +01:00
Ben Taylor
2f3523313b Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-11 13:22:40 +01:00
Gilles Peskine
fda51526b5
Merge pull request #10363 from felixc-arm/error-codes-prereq 
[1/3] Unify generic error codes (partial prerequisite)
 2025-08-29 11:04:53 +00:00
Felix Conway
0f7cf1942b Small documentation fixes 
Signed-off-by: Felix Conway <felix.conway@arm.com>
 2025-08-29 09:41:59 +01:00
Felix Conway
a01ddf65b7 Revert unification for some error codes 
Signed-off-by: Felix Conway <felix.conway@arm.com>
 2025-08-28 17:39:10 +01:00
David Horstmann
6ff9c89648
Merge pull request #10361 from bensze01/runtime-version-interface 
Simplify runtime version info string methods
 2025-08-27 14:59:15 +00:00
Manuel Pégourié-Gonnard
2bd0cfd272
Merge pull request #10331 from amtkarm1/task-remove-programs-pkey 
Removed the programs/pkey directory
 2025-08-26 09:27:00 +00:00
Ben Taylor
32e100a573 Renamed and corrected ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-21 08:00:07 +01:00
Felix Conway
3962284de6 Update & fix changelog 
Signed-off-by: Felix Conway <felix.conway@arm.com>
 2025-08-20 11:00:01 +01:00
Anton Matkin
87ae4e6a14 Added a changelog entry for the removal 
Signed-off-by: Anton Matkin <anton.matkin@arm.com>
 2025-08-20 10:51:38 +01:00
Ben Taylor
f8b4aa135b Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-19 07:52:48 +01:00
Felix Conway
f5b48c3d9c Add Changelog and documentation 
Signed-off-by: Felix Conway <felix.conway@arm.com>
 2025-08-18 14:52:41 +01:00
Bence Szépkúti
b2ba9fa68b Simplify runtime version info string methods 
Return a const char* instead of taking a char* as an argument.

This aligns us with the interface used in TF PSA Crypto.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-08-18 11:39:45 +02:00
Manuel Pégourié-Gonnard
5b74c79f00
Merge pull request #10298 from bjwtaylor/remove-deprecated-items 
Remove deprecated items
 2025-08-11 07:13:08 +00:00
Gilles Peskine
627d653863
Merge pull request #10282 from bjwtaylor/switch-to-mbedtls_pk_sigalg_t 
Switch to mbedtls pk sigalg t
 2025-08-07 11:06:31 +00:00
Valerio Setti
602fa5dd99 changelog: add note about EC curves support removal in TLS 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-08-07 10:30:30 +02:00
Ben Taylor
563d360a9b Fix ChangeLog format 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-07 08:25:52 +01:00
Ben Taylor
df6a6eaced Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-07 08:25:52 +01:00
Ben Taylor
8bd8e91485 Improve ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-06 08:31:13 +01:00
Ben Taylor
71fcb1c64b Added more detail to the ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-05 08:11:12 +01:00
Ben Taylor
304839238a Updated description in the ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-05 08:09:10 +01:00
Ben Taylor
9822bb8d5e Remove duplicate mbedtls_ssl_conf_*version from ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-05 08:05:14 +01:00
Ben Taylor
75b30e8347 Combined references to removed constants in ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-05 08:02:36 +01:00
Ben Taylor
dc1d098de2 Remove reference to sig_hashes from the ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-05 07:59:07 +01:00
Ben Taylor
4e7b2543c7 Remove trailing whitespace 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-04 08:19:45 +01:00
Ben Taylor
dbb15e6d2f Reword ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-01 11:45:14 +01:00
Ben Taylor
7aa4c40b84 Update ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-01 11:45:14 +01:00
Ben Taylor
889ac064f4 Add ChangeLog for deprecated items 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-08-01 11:45:14 +01:00
Gilles Peskine
db99ca95a7 Merge remote-tracking branch 'development' into dependency-on-generated-files-dev 2025-07-30 11:16:34 +02:00
Gilles Peskine
fff4b32324 Announce that <mbedtls/check_config.h> no longer exists 
It was already deprecated since 3.0 (although we forgot to announce it in
the changelog back then).

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-07-28 15:46:06 +02:00
Ronald Cron
37ddcf0ab4 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-07-21 09:52:16 +02:00
Minos Galanakis
83bef5b66a Merge tag 'mbedtls-4.0.0-beta' into mbedtls-4.0.0-beta-mergeback 
Mbed TLS 4.0.0-beta
 2025-07-07 17:40:18 +03:00
Manuel Pégourié-Gonnard
64e80ddf89
Merge pull request #10255 from gilles-peskine-arm/migration-guide-20250624-mbedtls 
Migration guide for API changes in 2025Q2 in mbedtls
 2025-06-30 18:33:36 +00:00
Gilles Peskine
ac18d0c0db Fix spelling of mbedtls_low_level_strerr 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-06-30 13:17:23 +02:00
Gilles Peskine
9000633f0e Move some crypto changelog files to TF-PSA-Crypto 
These files had gone on the wrong side during the repo split.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-06-30 13:17:23 +02:00
Gilles Peskine
2ee5c55c79 Fix spelling of psa_generate_random() 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-06-30 13:17:23 +02:00
Gilles Peskine
f6c03d1b7f typo 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-06-30 13:17:23 +02:00
Gilles Peskine
6f035a854b Explain why the programs have been removed 
Also fix the indentation of `*`.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-06-30 13:17:23 +02:00
Manuel Pégourié-Gonnard
921331867d
Merge pull request #10197 from gilles-peskine-arm/ssl_helpers-split_perform_handshake-dev 
Break down mbedtls_test_ssl_perform_handshake
 2025-06-30 09:39:29 +00:00
Minos Galanakis
8bccf16218 Assemble ChangeLog 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-06-27 13:01:26 +01:00
Minos Galanakis
ed87da7ad7 Merge remote-tracking branch 'restricted/development-restricted' into future_rc 
As set by process the tf-psa-crypto submodule is set
to point to tf-psa-crypto-release-sync input.
 2025-06-27 10:50:33 +01:00
Felix Conway
b9891f1fd2 Add changelog 
Signed-off-by: Felix Conway <felix.conway@arm.com>
 2025-06-20 11:48:16 +01:00
Manuel Pégourié-Gonnard
dc82fa67c5 Keep only the X.509 part from the Changelog 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2025-06-12 09:42:03 +02:00
Manuel Pégourié-Gonnard
5f6310b65f Add ChangeLog entry 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2025-06-12 09:42:03 +02:00
Gilles Peskine
53e11cb5d5 Changelog entry for the OID module in Mbed TLS 4.0 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-06-03 15:51:34 +02:00
Gilles Peskine
c4949d1426 mbedtls_ssl_conf_alpn_protocols: declare list elements as const 
This reflects the fact that the library will not modify the list, and allows
the list to be read from a const buffer.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-05-28 20:23:22 +02:00
Manuel Pégourié-Gonnard
a4ffc4e4c6 Merge remote-tracking branch 'public/development' into development-restricted 
* public/development: (23 commits)
  tests: suite_x509parse: set PSA max operations in x509_verify_restart()
  library: debug: remove mbedtls_debug_printf_ecdh()
  library: debug: make mbedtls_debug_print_psa_ec() static
  Remove call to pk_decrypt() in ssl_server2
  Change hardcoded error values in ssl-opt to take in the PSA error alias
  Test with GCC 15 with sloppy union initialization
  Update crypto with the union initialization fixes
  Mark ssl_tls12_preset_suiteb_sig_algs const
  Mark ssl_tls12_preset_default_sig_algs const
  Use PSA macros for the `pkalgs` domain
  reverted compat-2.x.h removal from psa-transition.md
  Correct ChangeLog file extension
  Add ChangeLog
  remove compat-2.x.h
  Remove trace of secp224k1
  Update submodules
  Improve comments
  Allow gcc-15 to be in $PATH
  Enable drivers when testing with GCC 15
  GCC 15: Silence -Wunterminated-string-initialization
  ...
 2025-05-28 12:41:28 +02:00
Manuel Pégourié-Gonnard
38317281e9 Fix type in ChangeLog 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2025-05-21 11:53:59 +02:00
Manuel Pégourié-Gonnard
43a1e733d8 Fix undocumented free() in x509_string_to_names() 
Now programs/x509/cert_write san="DN:CN=#0000;DN:CN=#0000" is no longer
crashing with use-after-free, instead it's now failing cleanly:

 failed
  !  mbedtls_x509_string_to_names returned -0x2800 - X509 - Input invalid

That's better of course but still not great, will be fixed by future
commits.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2025-05-12 12:34:11 +02:00
Ben Taylor
d056136a4d Correct ChangeLog file extension 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-05-08 14:55:44 +01:00
Ben Taylor
4c9ad3cfe6 Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-05-08 14:55:44 +01:00
David Horstmann
232da48471
Merge pull request #9421 from mfil/feature/implement_tls_exporter 
Implement TLS-Exporter
 2025-04-17 14:47:13 +00:00
Manuel Pégourié-Gonnard
8ab3d8c25d
Merge pull request #10074 from bjwtaylor/rng-documentation 
Add ChangeLog for rng
 2025-04-14 10:03:58 +00:00
Manuel Pégourié-Gonnard
ed4a2b4f0a Merge branch 'development-restricted' into merge-from-restricted 
* development-restricted:
  Add missing credit for set_hostname issue
  Add changelog entry for TLS 1.2 Finished fix
  TLS1.2: Check for failures in Finished calculation
  ssl_session_reset: preserve HOSTNAME_SET flag
  Document the need to call mbedtls_ssl_set_hostname
  Improve documentation of mbedtls_ssl_set_hostname
  Changelog entries for requiring mbedls_ssl_set_hostname() in TLS clients
  Add a note about calling mbedtls_ssl_set_hostname to mbedtls_ssl_setup
  mbedtls_ssl_set_hostname tests: add tests with CA callback
  Call mbedtls_ssl_set_hostname in the generic endpoint setup in unit tests
  Require calling mbedtls_ssl_set_hostname() for security
  Create error code for mbedtls_ssl_set_hostname not called
  Keep track of whether mbedtls_ssl_set_hostname() has been called
  Access ssl->hostname through abstractions in certificate verification
  mbedtls_ssl_set_hostname tests: baseline
  Add a flags field to mbedtls_ssl_context
  Automate MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK dependency
  Make guards more consistent between X.509-has-certs and SSL-has-certs
  Fix Doxygen markup
  Make ticket_alpn field private

 Conflicts:
	programs/ssl/ssl_test_common_source.c
 2025-04-01 09:40:47 +02:00
Max Fillinger
a5b63c5e40 Mention MBEDTLS_SSL_KEYING_MATERIAL_EXPORT in change log 
Signed-off-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
 2025-03-28 16:53:58 +01:00
Max Fillinger
9073e041fc Fix TLS exporter changelog entry 
Signed-off-by: Max Fillinger <max@max-fillinger.net>
 2025-03-28 16:53:58 +01:00
Max Fillinger
b84cb4b049 Add changelog entry for TLS-Exporter feature 
Signed-off-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
 2025-03-28 16:53:57 +01:00
Ben Taylor
b430f8235c removed whitespace 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-03-28 07:47:50 +00:00
Ben Taylor
d1c2d254ca Add ChangeLog for rng removal 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-03-28 07:47:50 +00:00
Ben Taylor
fc66d5876d Delete some sample programs 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-03-26 13:24:14 +00:00
David Horstmann
bc7cd93b5f Add missing credit for set_hostname issue 
Correctly credit Daniel Stenberg as the reporter of the
mbedtls_ssl_set_hostname() issue. This was previously missed.

Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2025-03-25 15:59:45 +00:00
Gilles Peskine
61621cbb5d Don't allow psa_xxx() to return MBEDTLS_ERR_XXX 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-03-24 14:26:39 +00:00
Gilles Peskine
1ffdb18cdb Remove mbedtls_low_level_sterr() and mbedtls_high_level_strerr() 
Just removed from the API. We can greatly simplify error.c but that will be
for later.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-03-24 14:26:39 +00:00
Gilles Peskine
c8c1a393e0 Changelog entry for error code space unification 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-03-24 14:13:50 +00:00
Gabor Mezei
817a1553b9
Add missing newline 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-03-20 17:55:30 +01:00
Gabor Mezei
aeea5e65af
Add changelog entry 
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>
 2025-03-20 17:53:08 +01:00
Bence Szépkúti
906d3cdff5
Merge pull request #10020 from bensze01/msvc-format-size-macros 
Fix preprocessor guards for C99 format size specifiers
 2025-03-13 10:09:06 +00:00
Bence Szépkúti
9ea9504176 Update changelog to call out MinGW 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-03-12 17:11:33 +01:00
Minos Galanakis
a2a0c2cbe7 Merge remote-tracking branch 'origin/features/tls-defragmentation/development' into feature_merge_defragmentation_dev 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-03-12 15:25:06 +00:00
Bence Szépkúti
becb21e668 Fix MSVC version guard for C99 format size specifiers 
Visual Studio 2013 (_MSC_VER == 1800) doesn't support %zu - only use it
on 2015 and above (_MSC_VER >= 1900).

%ldd works on Visual Studio 2013, but this patch keeps the two macro
definitions together, for simplicity's sake.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-03-12 16:16:20 +01:00
Gilles Peskine
4c30cd8e49 Update the location of defragmentation limitations 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-03-12 10:08:14 +01:00
David Horstmann
5ea94e6cd1 Add changelog entry for TLS 1.2 Finished fix 
Signed-off-by: David Horstmann <david.horstmann@arm.com>
 2025-03-11 15:52:48 +00:00
Gilles Peskine
1b785e2201 Refer to the API documentation for details 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-03-05 17:44:20 +01:00
Valerio Setti
05c23fbf86 ChangeLog: add note for removal of DHM related functions in SSL 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-03-05 10:11:23 +01:00
Gilles Peskine
02e303ec86 Changelog entries for requiring mbedls_ssl_set_hostname() in TLS clients 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-02-24 18:48:49 +01:00
Minos Galanakis
eddbb5a829 ChangeLog: Updated the entry for tls-hs-defragmentation 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2025-02-24 09:16:06 +00:00
Manuel Pégourié-Gonnard
28f8e205eb
Merge pull request #9872 from rojer/tls_hs_defrag_in 
Defragment incoming TLS handshake messages
 2025-02-24 09:28:11 +01:00
Valerio Setti
c8cac1d22f changelog: add note abot DHE-RSA removal 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-02-06 10:12:02 +01:00
Deomid rojer Ryabkov
eb77e5b1c7 Update the changelog message 
Signed-off-by: Deomid rojer Ryabkov <rojer@rojer.me>
 2025-02-05 13:09:26 +02:00
Ben Taylor
7d4c48ba4f fixed trailing whitespace 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-02-04 15:27:53 +00:00
Ben Taylor
b6fb07bc48 Change Changelog entry to a maximum of 80 charactors 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-02-04 09:08:02 +00:00
Ben Taylor
837130cf65 Improve Changelog and correct alg selection 
Improve the description of the API changes in the changelog and
fix some incorrect alg selection variables in ssl_server2.c.

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-02-04 07:50:19 +00:00
Ben Taylor
0c29cf87b1 Move ssl_ticket to the PSA API 
Convert the mbedtl_ssl_ticket_setup function to use the TF_PSA_Crypto
API.

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-01-30 08:22:40 +00:00
Ronald Cron
189dcf630f
Merge pull request #9910 from valeriosetti/issue9684 
Remove DHE-PSK key exchange
 2025-01-27 11:15:10 +00:00
Manuel Pégourié-Gonnard
7e1154c959
Merge pull request #9906 from mpg/rm-conf-curves 
[dev] Remove deprecated function mbedtls_ssl_conf_curves()
 2025-01-27 08:21:27 +00:00
Valerio Setti
944f3ab1d6 changelog: add note about DHE-PSK removal 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-01-24 11:49:59 +01:00
Valerio Setti
19846f5561 changelog: add note for mbedtls_x509write_crt_set_serial() deprecation 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-01-16 15:06:19 +01:00
Deomid Ryabkov
5f7c2c2182
Update ChangeLog.d/tls-hs-defrag-in.txt 
Co-authored-by: minosgalanakis <30719586+minosgalanakis@users.noreply.github.com>
Signed-off-by: Deomid Ryabkov <rojer@rojer.me>
 2025-01-15 19:26:47 +00:00
Manuel Pégourié-Gonnard
4787b4012c Add ChangeLog entry 
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2025-01-14 12:28:01 +01:00
Valerio Setti
976b53fc85 scripts: fix paths for files moved to framework 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2025-01-08 09:59:18 +01:00
Deomid rojer Ryabkov
ac2cf1f26c Defragment incoming TLS handshake messages 
Signed-off-by: Deomid rojer Ryabkov <rojer@rojer.me>
 2024-12-25 14:34:17 +02:00
Janos Follath
0aac2e5f37 Fix broken reference in ChangeLog 
Signed-off-by: Janos Follath <janos.follath@arm.com>
 2024-12-18 19:23:11 +00:00
Ronald Cron
8064c023ca Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-12-16 12:29:06 +01:00
Paul Elliott
8ef932312f
Merge pull request #9809 from solardiz/development 
Specify previously missed register clobbers in AES-NI asm blocks
 2024-12-13 15:26:27 +00:00
Solar Designer
6b2ca180a8 Add change log entry on AES-NI asm block fixes 
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com>
Signed-off-by: Solar Designer <solar@openwall.com>
 2024-12-11 02:47:20 +01:00
Minos Galanakis
e2d0074d4f Added changelog for the configuration split. 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2024-12-04 15:08:39 +00:00
Janos Follath
f4f37eced7
Merge pull request #9810 from SuperIlu/development 
Fix compilation on MS-DOS DJGPP
 2024-12-03 09:12:18 +00:00
SuperIlu
cda2a28c92
reworked changelog according to suggestion 
Signed-off-by: SuperIlu <superilu@yahoo.com>
 2024-12-02 21:24:00 +01:00
Janos Follath
62e79dc913
Merge pull request #9665 from waleed-elmelegy-arm/add-iop-key-gen-get-num-ops 
Add PSA interruptible key generation get num ops API
 2024-12-02 09:15:36 +00:00
SuperIlu
1406ace4d2
Added changelog 
Signed-off-by: SuperIlu <superilu@yahoo.com>
 2024-12-01 10:16:36 +01:00
Waleed Elmelegy
f7ebd73755 Add Changelog entry for interruptible key generation 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-11-27 16:56:47 +00:00
Ronald Cron
42a5c97d75 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2024-11-21 15:52:06 +01:00
Janos Follath
241b9012a0
Merge pull request #9490 from waleed-elmelegy-arm/add-iop-key-agrmnt-api 
Add PSA interruptible key agreement APIs
 2024-11-11 09:29:16 +00:00
Gilles Peskine
4c58e89976
Merge pull request #9613 from gilles-peskine-arm/remove-rsa-psk-key-exchange 
Remove RSA-PSK key exchange
 2024-11-07 15:09:05 +00:00
Paul Elliott
fc140d0c6b
Merge pull request #9672 from gilles-peskine-arm/coverity-20241004 
Fix edge cases of mbedtls_psa_raw_to_der and mbedtls_psa_der_to_raw
 2024-11-06 19:03:13 +00:00
Waleed Elmelegy
fa4eb35418 Improve psa iop key agreement changelog message 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-11-06 16:03:49 +00:00
Waleed Elmelegy
96a5c010d4 Add changelog entry for interuptible psa key agreement APIs 
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
 2024-11-06 16:03:49 +00:00
Gilles Peskine
ff60a0bf4e Changelog entry for removal of the RSA-PSK key exchange 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-11-05 15:49:12 +01:00
Gilles Peskine
18e8389452 Add changelog entry 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2024-11-04 14:07:20 +01:00
Gilles Peskine
8ed4d94166
Merge pull request #9614 from gilles-peskine-arm/use_psa_crypto-always_on 
Always enable MBEDTLS_USE_PSA_CRYPTO in all.sh
 2024-10-29 14:58:55 +00:00