Valerio Setti
00d579e953
Merge pull request #10439 from bjwtaylor/remove-all-non-ext-apis
...
Remove all non ext apis
2025-11-04 09:53:34 +00:00
Gilles Peskine
18f2661c65
Merge pull request #10491 from valeriosetti/issue10229
...
Remove temporary fixes introduced in #10213
2025-11-04 08:59:16 +00:00
Valerio Setti
910bf4bbc6
tests: suite_x509parse: remove temporary fixes
...
Removes the temporary fixes that were introduced in order to allow crypto#308
to be merged.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-11-03 10:27:24 +01:00
Valerio Setti
a35e332bbb
library: debug: remove temporary fixes for RSA key handling
...
Since crypto#308 has been merged:
- replace MBEDTLS_PK_USE_PSA_RSA_DATA with PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
- remove "no-check-names"
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-11-03 10:25:15 +01:00
Valerio Setti
ee72a20288
Merge pull request #10481 from gilles-peskine-arm/cmake-package-version-mbedtls
...
Fix duplication of product version in CMakeLists.txt
2025-10-31 13:02:09 +00:00
Valerio Setti
525dd917dc
Merge pull request #10477 from Cube707/fix/iar-compiler-warning
...
add cast to fix IAR compiler errors
2025-10-31 12:33:26 +00:00
Ben Taylor
42074c193f
Rename mbedtls_ssl_get_pk_type_and_md_alg_from_sig_alg to mbedtls_ssl_get_pk_sigalg_and_md_alg_from_sig_alg
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-31 08:40:36 +00:00
Ben Taylor
b76c38334a
Update name of mbedtls_ssl_pk_alg_from_sig_pk_alg to mbedtls_ssl_pk_sig_alg_from_sig
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-31 08:40:25 +00:00
Ben Taylor
f21e63c6d0
Update pk_alg to use mbedtls_pk_sigalg_t and remove casts in library/x509write_csr.c
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 15:29:02 +00:00
Ben Taylor
00b04a6590
Update mbedtls_pk_sign_ext in x509write_crt.c to use mbedtls_pk_sigalg_t directly and remove casts
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 15:11:09 +00:00
Ben Taylor
5f037c7fb3
Rename mbedtls_ssl_pk_alg_from_sig to mbedtls_ssl_pk_alg_from_sig_pk_alg and update to use mbedtls_pk_sigalg_t
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 14:59:24 +00:00
Ben Taylor
0035cfb1f0
Removed unnecessary cast in mbedtls_pk_sign_ext
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 13:42:56 +00:00
Ben Taylor
4565d5d4e6
Change the call to mbedtls_pk_verify_ext in pkcs7 to have a variable input cert->sig_pk
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 13:37:09 +00:00
minosgalanakis
32b597bd31
Merge pull request #10469 from Begasus/includedir
...
Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation
2025-10-29 15:21:32 +00:00
Jan Wille
64e7d4b64b
format: apply suggestions (add spaces)
...
Signed-off-by: Jan Wille <jan.wille@siemens.com>
2025-10-29 15:49:10 +01:00
Gilles Peskine
574aae2146
Fix duplication of product version in CMakeLists.txt
...
The CMake package version definition had its own line with a copy of the
version number since 2.27.0. Until recently, `bump_version.sh` updated both
copies, and that was still the case when we bumped the version to 4.0.0
(7ba04a298cc648255b820d9b5ad184528a6ea5ca). However, since then, we changed
the format of the product version definition
(879cba1a67d01317422870ff736057ca2d23247f), and after that,
`bump_version.sh` would only have updated the product version, not the CMake
package version.
TF-PSA-Crypto 1.0.0 has the same problem, and there we did ship with an
outdated CMake package version:
https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/553
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-29 12:31:57 +01:00
Jan Spannberger
a5384bdf09
add cast to fix IAR compiler errors
...
IAR throws a warning "mixed ENUM with other type"
Signed-off-by: Jan Spannberger <jan.spannberger@siemens.com>
2025-10-28 15:13:08 +01:00
Ben Taylor
bc076f9f76
fix style isses
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
a2de40a100
Change the return type of mbedtls_ssl_get_ciphersuite_sig_pk_alg to mbedtls_pk_sigalg_t
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
4b4ca812e5
Corrected debug return
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
10d471a14d
Correct debug return
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
b190c1bb0b
Replace change to restartable with ext
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
1b32994bef
Fix style issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
2c056721d1
Tidy up debug of non ext functions
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
cef9d2d31f
Revert change to mbedtls_pk_{sign,verify}_restartable and replace with ext version
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
5e23093285
Fix code style issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
c3e2b37530
Remove mbedtls_ssl_write_handshake_msg as it now replaced by mbedtls_ssl_write_handshake_msg_ext
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
279dd4ab59
Remove dependencies on mbedtls_pk_verify
...
Replace mbedtls_pk_verify with mbedtls_pk_verify_restartable, as mbedtls_pk_verify has now been
removed and was origonally a pass through call to mbedtls_pk_verify_restartable.
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
94f1628aca
Remove dependencies on mbedtls_pk_sign
...
Replace mbedtls_pk_sign with mbedtls_pk_sign_restartable, as mbedtls_pk_sign has now been
removed and was origonally a pass through call to mbedtls_pk_sign_restartable.
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Valerio Setti
4624f508d3
Merge pull request #10449 from bjwtaylor/mbedtls.remove-mbedtls_verify_new
...
Remove uses of mbedtls_pk_verify_new
2025-10-24 14:12:24 +00:00
Luc Schrijvers
ffc2606bf2
Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation
...
Signed-off-by: Luc Schrijvers <begasus@gmail.com>
2025-10-24 12:50:51 +02:00
Manuel Pégourié-Gonnard
b180696e94
Merge pull request #10459 from gilles-peskine-arm/fix-doc-submodule-links
...
Fix documentation link to submodule that doesn't work on GitHub
2025-10-17 08:28:40 +00:00
Gilles Peskine
58439de2ae
Fix documentation link to submodule that doesn't work on GitHub
...
Fixes #10458
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-16 16:36:02 +02:00
Minos Galanakis
b2878ee402
Updated tf-psa-crypto pointer
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-15 16:59:12 +01:00
Minos Galanakis
2842c33e2c
Merge tag 'v4.0.0' into mbedtls-4.0.0_mergeback
...
Mbed TLS 4.0.0
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-15 16:58:25 +01:00
Minos Galanakis
ec4044008d
ChangeLog: Added CVEs
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
v4.0.0
mbedtls-4.0.0
2025-10-13 16:51:48 +01:00
Minos Galanakis
411461a86e
Doc: Removed references to beta version
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
38181b6d66
Assemble ChangeLog
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
e5862c0494
Removed Beta Changelog
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
21cd2ddb1e
Updated tf psa-crypto submodule
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Ben Taylor
0ff335d715
Remove uses of mbedtls_pk_verify_new
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-13 15:17:44 +01:00
Gilles Peskine
3765e5ca7e
Merge pull request #10438 from bjwtaylor/deprecated-functions
...
Remove internal deprecated items
2025-10-13 13:35:11 +00:00
Minos Galanakis
65c29f07c7
Updated framework submodule
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:44:26 +01:00
Minos Galanakis
ca4a1a117d
Merge remote-tracking branch 'mbedtls4.0.0-documentation' into mbedtls-4.0.0.rc
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:42:39 +01:00
Minos Galanakis
0283fa0656
Merge remote-tracking branch 'restricted/development-restricted' into mbedtls-4.0.0.rc
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:41:49 +01:00
Gilles Peskine
ccd9e294e7
Merge pull request #10446 from gilles-peskine-arm/migration-guide-4.0-consolidate
...
Consolidate migration guide
2025-10-11 11:56:45 +02:00
Gilles Peskine
fa4e9461bd
Add sentence that was in 3.0 and is in TF-PSA-Crypto 1.0
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 17:54:13 +02:00
Gilles Peskine
75a36bd9cd
Fix copypasta in title
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 17:45:33 +02:00
Gilles Peskine
d83c476f3b
Fix copypasta
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 16:36:42 +02:00
Gilles Peskine
66719098b8
Ensure there is a blank line before headers (markdown portability)
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 15:57:49 +02:00