33994 Commits

Author SHA1 Message Date
Valerio Setti
00d579e953
Merge pull request #10439 from bjwtaylor/remove-all-non-ext-apis
Remove all non ext apis
2025-11-04 09:53:34 +00:00
Gilles Peskine
18f2661c65
Merge pull request #10491 from valeriosetti/issue10229
Remove temporary fixes introduced in #10213
2025-11-04 08:59:16 +00:00
Valerio Setti
910bf4bbc6 tests: suite_x509parse: remove temporary fixes
Removes the temporary fixes that were introduced in order to allow crypto#308
to be merged.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-11-03 10:27:24 +01:00
Valerio Setti
a35e332bbb library: debug: remove temporary fixes for RSA key handling
Since crypto#308 has been merged:
- replace MBEDTLS_PK_USE_PSA_RSA_DATA with PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
- remove "no-check-names"

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-11-03 10:25:15 +01:00
Valerio Setti
ee72a20288
Merge pull request #10481 from gilles-peskine-arm/cmake-package-version-mbedtls
Fix duplication of product version in CMakeLists.txt
2025-10-31 13:02:09 +00:00
Valerio Setti
525dd917dc
Merge pull request #10477 from Cube707/fix/iar-compiler-warning
add cast to fix IAR compiler errors
2025-10-31 12:33:26 +00:00
Ben Taylor
42074c193f Rename mbedtls_ssl_get_pk_type_and_md_alg_from_sig_alg to mbedtls_ssl_get_pk_sigalg_and_md_alg_from_sig_alg
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-31 08:40:36 +00:00
Ben Taylor
b76c38334a Update name of mbedtls_ssl_pk_alg_from_sig_pk_alg to mbedtls_ssl_pk_sig_alg_from_sig
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-31 08:40:25 +00:00
Ben Taylor
f21e63c6d0 Update pk_alg to use mbedtls_pk_sigalg_t and remove casts in library/x509write_csr.c
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 15:29:02 +00:00
Ben Taylor
00b04a6590 Update mbedtls_pk_sign_ext in x509write_crt.c to use mbedtls_pk_sigalg_t directly and remove casts
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 15:11:09 +00:00
Ben Taylor
5f037c7fb3 Rename mbedtls_ssl_pk_alg_from_sig to mbedtls_ssl_pk_alg_from_sig_pk_alg and update to use mbedtls_pk_sigalg_t
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 14:59:24 +00:00
Ben Taylor
0035cfb1f0 Removed unnecessary cast in mbedtls_pk_sign_ext
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 13:42:56 +00:00
Ben Taylor
4565d5d4e6 Change the call to mbedtls_pk_verify_ext in pkcs7 to have a variable input cert->sig_pk
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 13:37:09 +00:00
minosgalanakis
32b597bd31
Merge pull request #10469 from Begasus/includedir
Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation
2025-10-29 15:21:32 +00:00
Jan Wille
64e7d4b64b format: apply suggestions (add spaces)
Signed-off-by: Jan Wille <jan.wille@siemens.com>
2025-10-29 15:49:10 +01:00
Gilles Peskine
574aae2146 Fix duplication of product version in CMakeLists.txt
The CMake package version definition had its own line with a copy of the
version number since 2.27.0. Until recently, `bump_version.sh` updated both
copies, and that was still the case when we bumped the version to 4.0.0
(7ba04a298cc648255b820d9b5ad184528a6ea5ca). However, since then, we changed
the format of the product version definition
(879cba1a67d01317422870ff736057ca2d23247f), and after that,
`bump_version.sh` would only have updated the product version, not the CMake
package version.

TF-PSA-Crypto 1.0.0 has the same problem, and there we did ship with an
outdated CMake package version:
https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/553

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-29 12:31:57 +01:00
Jan Spannberger
a5384bdf09 add cast to fix IAR compiler errors
IAR throws a warning "mixed ENUM with other type"

Signed-off-by: Jan Spannberger <jan.spannberger@siemens.com>
2025-10-28 15:13:08 +01:00
Ben Taylor
bc076f9f76 fix style isses
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
a2de40a100 Change the return type of mbedtls_ssl_get_ciphersuite_sig_pk_alg to mbedtls_pk_sigalg_t
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
4b4ca812e5 Corrected debug return
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
10d471a14d Correct debug return
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
b190c1bb0b Replace change to restartable with ext
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
1b32994bef Fix style issues
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
2c056721d1 Tidy up debug of non ext functions
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
cef9d2d31f Revert change to mbedtls_pk_{sign,verify}_restartable and replace with ext version
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
5e23093285 Fix code style issues
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
c3e2b37530 Remove mbedtls_ssl_write_handshake_msg as it now replaced by mbedtls_ssl_write_handshake_msg_ext
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
279dd4ab59 Remove dependencies on mbedtls_pk_verify
Replace mbedtls_pk_verify with mbedtls_pk_verify_restartable, as mbedtls_pk_verify has now been
removed and was origonally a pass through call to mbedtls_pk_verify_restartable.

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
94f1628aca Remove dependencies on mbedtls_pk_sign
Replace mbedtls_pk_sign with mbedtls_pk_sign_restartable, as mbedtls_pk_sign has now been
removed and was origonally a pass through call to mbedtls_pk_sign_restartable.

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Valerio Setti
4624f508d3
Merge pull request #10449 from bjwtaylor/mbedtls.remove-mbedtls_verify_new
Remove uses of mbedtls_pk_verify_new
2025-10-24 14:12:24 +00:00
Luc Schrijvers
ffc2606bf2 Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation
Signed-off-by: Luc Schrijvers <begasus@gmail.com>
2025-10-24 12:50:51 +02:00
Manuel Pégourié-Gonnard
b180696e94
Merge pull request #10459 from gilles-peskine-arm/fix-doc-submodule-links
Fix documentation link to submodule that doesn't work on GitHub
2025-10-17 08:28:40 +00:00
Gilles Peskine
58439de2ae Fix documentation link to submodule that doesn't work on GitHub
Fixes #10458

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-16 16:36:02 +02:00
Minos Galanakis
b2878ee402 Updated tf-psa-crypto pointer
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-15 16:59:12 +01:00
Minos Galanakis
2842c33e2c Merge tag 'v4.0.0' into mbedtls-4.0.0_mergeback
Mbed TLS 4.0.0

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-15 16:58:25 +01:00
Minos Galanakis
ec4044008d ChangeLog: Added CVEs
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
v4.0.0 mbedtls-4.0.0
2025-10-13 16:51:48 +01:00
Minos Galanakis
411461a86e Doc: Removed references to beta version
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
38181b6d66 Assemble ChangeLog
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
e5862c0494 Removed Beta Changelog
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
21cd2ddb1e Updated tf psa-crypto submodule
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Ben Taylor
0ff335d715 Remove uses of mbedtls_pk_verify_new
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-13 15:17:44 +01:00
Gilles Peskine
3765e5ca7e
Merge pull request #10438 from bjwtaylor/deprecated-functions
Remove internal deprecated items
2025-10-13 13:35:11 +00:00
Minos Galanakis
65c29f07c7 Updated framework submodule
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:44:26 +01:00
Minos Galanakis
ca4a1a117d Merge remote-tracking branch 'mbedtls4.0.0-documentation' into mbedtls-4.0.0.rc
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:42:39 +01:00
Minos Galanakis
0283fa0656 Merge remote-tracking branch 'restricted/development-restricted' into mbedtls-4.0.0.rc
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:41:49 +01:00
Gilles Peskine
ccd9e294e7
Merge pull request #10446 from gilles-peskine-arm/migration-guide-4.0-consolidate
Consolidate migration guide
2025-10-11 11:56:45 +02:00
Gilles Peskine
fa4e9461bd Add sentence that was in 3.0 and is in TF-PSA-Crypto 1.0
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 17:54:13 +02:00
Gilles Peskine
75a36bd9cd Fix copypasta in title
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 17:45:33 +02:00
Gilles Peskine
d83c476f3b Fix copypasta
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 16:36:42 +02:00
Gilles Peskine
66719098b8 Ensure there is a blank line before headers (markdown portability)
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 15:57:49 +02:00