mbedtls

mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-13 14:22:19 +08:00

Author	SHA1	Message	Date
Janos Follath	c6f1637f8c	Merge pull request #8534 from paul-elliott-arm/fix_mutex_abstraction Make mutex abstraction and tests thread safe	2023-11-29 13:26:23 +00:00
Tom Cosgrove	12d8b8eaba	Merge pull request #8539 from tom-daubney-arm/add_test_script_psa_hash Add Demo Script for PSA Hash Program	2023-11-27 12:13:18 +00:00
Paul Elliott	f25d831123	Ensure mutex test mutex gets free'd Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2023-11-23 18:49:43 +00:00
Dave Rodgman	8cd4bc4ac2	Merge pull request #8124 from yanrayw/support_cipher_encrypt_only Support the negative option MBEDTLS_BLOCK_CIPHER_NO_DECRYPT	2023-11-23 17:43:00 +00:00
Paul Elliott	2e3f6902ed	Merge pull request #8549 from gilles-peskine-arm/metatest-gcc-12 Fix metatest.c with gcc-12 -Wuse-after-free	2023-11-23 11:09:41 +00:00
Yanray Wang	690ee81533	Merge remote-tracking branch 'origin/development' into support_cipher_encrypt_only	2023-11-23 10:31:26 +08:00
Gilles Peskine	7a715c4537	Fix the build with gcc-12 -Wuse-after-free Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-21 13:42:40 +01:00
Jerry Yu	713ce1f889	various improvement - improve change log entry - improve comments - remove unnecessary statement - change type of client_age Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-11-21 09:59:25 +08:00
Jerry Yu	cf9135100e	fix various issues - fix CI failure due to wrong usage of ticket_lifetime - Improve document and comments Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-11-21 09:58:19 +08:00
Jerry Yu	25ba4d40ef	rename `ticket_creation` to `ticket_creation_time` Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-11-21 09:58:19 +08:00
Jerry Yu	3ff0b1fda3	Cleanup ticket negative tests. - improve comments - case 3/4 is for server age check. - case 5/6 is for client age check Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-11-21 09:58:18 +08:00
Jerry Yu	ec6d07870d	Replace `start` with `ticket_creation` Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-11-21 09:58:18 +08:00
Jerry Yu	f16efbc78d	fix various issues - Add comments for ticket test hooks - improve code style. Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-11-21 09:58:18 +08:00
Jerry Yu	cebffc3446	change time unit of ticket to milliseconds Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-11-21 09:58:18 +08:00
Gilles Peskine	6267dd59c8	Merge pull request #8463 from gilles-peskine-arm/metatest-create Create a metatest program	2023-11-20 14:07:08 +00:00
Thomas Daubney	dd2a09a22b	Introduce demo script for PSA hash program Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-11-16 18:45:55 +00:00
Matthias Schulz	70595f7983	Explicitly indicating when private fields are accessed in benchmark.c. Signed-off-by: Matthias Schulz <mschulz@hilscher.com>	2023-11-16 17:43:58 +01:00
Matthias Schulz	3b9240bbd0	Alternative Timing compatible benchmark.c Signed-off-by: Matthias Schulz <mschulz@hilscher.com>	2023-11-16 17:39:43 +01:00
Matthias Schulz	aa7dffa24a	Add benchmark for RSA 3072. Signed-off-by: Matthias Schulz <mschulz@hilscher.com>	2023-11-16 15:31:32 +01:00
Gilles Peskine	2f40cc05f0	Improve explanations of what bad thing a metatest does Especially clarify the situation with respect to mutex usage. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-16 15:13:38 +01:00
Gilles Peskine	ad2a17eb60	Uniformly use MBEDTLS_THREADING_C guards Since the code compiles with MBEDTLS_THREADING_C, not just with MBEDTLS_THREADING_PTHREAD, use MBEDTLS_THREADING_C as the guard. The runtime behavior is only as desired under certain conditions that imply MBEDTLS_THREADING_PTHREAD, but that's fine: no metatest is expected to pass in all scenarios, only under specific build- and run-time conditions. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-16 15:09:48 +01:00
Manuel Pégourié-Gonnard	752dd39a69	Merge pull request #8508 from valeriosetti/issue6323 [G3] Driver-only cipher+aead: TLS: ssl-opt.sh	2023-11-14 11:39:06 +00:00
Gilles Peskine	cce0012463	Add documentation Explain the goals of metatests, how to write them, and how to read their output. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-10 15:36:15 +01:00
Gilles Peskine	ccb121500d	Uninitialized read: make the pointer non-volatile rather than the buffer Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-10 11:35:36 +01:00
Gilles Peskine	da6e7a2ac2	More consistent usage of volatile Fix MSVC warning C4090. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-10 10:09:27 +01:00
Valerio Setti	38e75fb1a7	ssl_server2: remove usage of mbedtls_cipher_info_from_string() This removes the dependency from cipher module and legacy key/modes symbols which are used in cipher_wrap. Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-11-10 08:27:39 +01:00
Gilles Peskine	d2fa698155	Strengthen against possible compiler optimizations Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-09 21:46:24 +01:00
Yanray Wang	0751761b49	max_early_data_size: rename configuration function Rename mbedtls_ssl_tls13_conf_max_early_data_size as mbedtls_ssl_conf_max_early_data_size since in the future this may not be specific to TLS 1.3. Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-11-07 11:49:34 +08:00
Yanray Wang	d5ed36ff24	early data: rename configuration function Rename mbedtls_ssl_tls13_conf_early_data as mbedtls_ssl_conf_early_data since in the future this may not be specific to TLS 1.3. Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-11-07 11:49:24 +08:00
Gilles Peskine	a1023e2bd6	programs/test/metatest indirectly includes library/common.h Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	4bc873f0a1	Add missing program to .gitignore Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	102aea2ba8	Add metatests for mutex usage Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	f0d5cf9a0c	Don't use %llx in printf We still do MinGW builds on our CI whose printf doesn't support it! Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	a1dfa14c06	Fix cast from pointer to integer of different size Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	ee8109541a	Don't cast a function pointer to a data pointer That's nonstandard. Instead, convert to an integer. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	6aa9f32124	Use casts when doing nonstandard pointer conversions Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	69e8db0366	Strengthen against Clang optimizations Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	b0f0a64de0	Metatests for basic Asan and Msan features Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:19 +01:00
Gilles Peskine	80ba832be6	Metatests for null pointer dereference Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:09 +01:00
Gilles Peskine	f309fbf0d5	Validate that test_fail causes a test failure Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:09 +01:00
Gilles Peskine	33406b645d	Add a metatest program This program can be used to validate that things that should be detected as test failures are indeed caught, either by setting the test result to MBEDTLS_TEST_RESULT_FAILED or by aborting the program. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-11-06 20:33:09 +01:00
Yanray Wang	f24bbd987a	dh_client.c: modify prompt message Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-11-06 10:02:10 +08:00
Gilles Peskine	8b6b41f6cd	Merge pull request #8434 from valeriosetti/issue8407 [G2] Make TLS work without Cipher	2023-11-04 15:05:00 +00:00
Dave Rodgman	f8be5f6ade	Fix overlooked files Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2023-11-02 20:43:00 +00:00
Dave Rodgman	16799db69a	update headers Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2023-11-02 19:47:20 +00:00
Valerio Setti	74d48c89fa	ssl_server2: small improvement of code readability Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-11-02 16:43:55 +01:00
Yanray Wang	b67b47425e	Rename MBEDTLS_CIPHER_ENCRYPT_ONLY as MBEDTLS_BLOCK_CIPHER_NO_DECRYPT Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-10-31 17:22:06 +08:00
Paul Elliott	afc6a992c5	Merge pull request #8381 from gilles-peskine-arm/20231017-misc-cleanup Cleanups in test code	2023-10-30 18:08:01 +00:00
Valerio Setti	dc55470341	ssl_context_info: add guards for CIPHER_C mbedtls_cipher_info_from_type() is only available when CIPHER_C is defined. So when it is not we just print the cipher type decimal value on the output instead of the cipher's name. Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-10-30 11:36:32 +01:00
Valerio Setti	bdf04e840a	ssl_server2: support ticket_aead only when CIPHER_C is defined Cipher parsing requires mbedtls_cipher_info_from_string() which depends on CIPHER_C. Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-10-30 11:36:32 +01:00
Gilles Peskine	5d055f8206	Merge pull request #7844 from mpg/ssl-progs-usage Fix usage & error reporting in SSL programs	2023-10-26 08:19:25 +00:00
Gilles Peskine	0ea1b8fe8c	Merge pull request #7982 from gilles-peskine-arm/sample_program_demo_scripts-3.4 Run sample program demo scripts in all.sh	2023-10-18 10:03:52 +00:00
Gilles Peskine	62418dd20b	Merge pull request #8350 from waleed-elmelegy-arm/fix-null-dereference-in-x509-cert-write Fix possible NULL dereference issue in X509 cert_write program	2023-10-18 10:03:36 +00:00
Paul Elliott	d44ee9e6d1	Merge pull request #8351 from waleed-elmelegy-arm/fix-null-dereference-in-x509-cert-req Fix possible NULL dereference issue in X509 cert_req program	2023-10-18 09:01:31 +00:00
Gilles Peskine	a0e810de4b	Convey that it's ok for mbedtls_ssl_session_save to fail mbedtls_ssl_session_save() always outputs the output length, even on error. Here, we're only calling it to get the needed output length, so it's ok to ignore the return value. Convey this to linters. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-10-17 16:04:27 +02:00
David Horstmann	9534dfd15b	Reword error message on format of SAN arguments Signed-off-by: David Horstmann <david.horstmann@arm.com>	2023-10-17 14:59:31 +01:00
David Horstmann	4a493b267f	Reword error message on format of SAN arguments Signed-off-by: David Horstmann <david.horstmann@arm.com>	2023-10-17 14:57:23 +01:00
Yanray Wang	aa01ee303a	Merge remote-tracking branch 'origin/development' into support_cipher_encrypt_only	2023-10-16 17:38:32 +08:00
Gilles Peskine	28b56335bb	Merge pull request #7942 from tom-daubney-arm/psa_crypto_example_hash Add example program for PSA hash	2023-10-13 15:22:58 +00:00
Waleed Elmelegy	5867465e90	Fix code style issue in cert_write program Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>	2023-10-13 10:03:12 +01:00
Waleed Elmelegy	eade3fedb2	Fix code style issue in cert_req program Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>	2023-10-13 09:59:19 +01:00
Waleed Elmelegy	ac97af223e	Fix possible NULL dereference issue in X509 cert_req program Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>	2023-10-12 15:46:06 +01:00
Waleed Elmelegy	1444c0eb20	Add changelog entry for x509 cert_write null dereference fix Also fix a typo in cert_write.c Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>	2023-10-12 14:31:06 +01:00
Waleed Elmelegy	476c1198e8	Fix possible NULL dereference issue in X509 cert_write program Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>	2023-10-12 14:19:25 +01:00
Thomas Daubney	2e67781e93	Alter program layout for better clarity Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-12 10:46:43 +01:00
Thomas Daubney	a21c972941	Remove extra blank line Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-11 17:17:32 +01:00
Thomas Daubney	d8453bb184	Remove superfluous comment Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-11 15:29:02 +01:00
Thomas Daubney	cd79f77439	Add missing newline Newline character was missing from end of print statement. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-11 15:28:13 +01:00
Thomas Daubney	1c2378b8b1	Add variable for message length Add variable to store message length to increase clarity in what the program is doing. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-11 15:19:38 +01:00
Tom Cosgrove	3c1cdc9061	Merge pull request #8185 from yanrayw/aes_benchmark_cfb Benchmark: add AES_CFB128 and AES_CFB8	2023-10-11 09:48:27 +00:00
Thomas Daubney	34500874ce	Remove trailing white space in documentation Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-11 10:04:54 +01:00
Thomas Daubney	760538885a	Inform user when unknown hash algorithm supplied Excplictly inform the user that their hash algorithm selection is invalid. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-10 17:38:53 +01:00
Thomas Daubney	86f9795b00	Update documentation Add further information about PSA hashing to the comment at the beginning of the code. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-10 16:50:49 +01:00
Yanray Wang	5cae6e8ddd	benchmark: improve code readability Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-10-09 18:40:19 +08:00
Thomas Daubney	540324cd21	Correct styling of Mbed TLS in documentation Several bits of documentation were incorrectly styling Mbed TLS as MbedTLS. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-10-06 17:07:24 +01:00
David Horstmann	6c979856c3	Remove generated files in all cmake_as_x tests Signed-off-by: David Horstmann <david.horstmann@arm.com>	2023-09-28 11:30:43 +01:00
Minos Galanakis	a8b02ef79b	pkey-random: Removed setting mbedtls_target in libs Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>	2023-09-25 14:12:22 +01:00
Minos Galanakis	7f8e8c5ae2	program-random: Updated Cmake libs variable Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>	2023-09-25 14:12:22 +01:00
Minos Galanakis	ce33e7b22d	pkey Cmakelists: Updated the set libs to be consistent with others. Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>	2023-09-25 14:12:22 +01:00
Minos Galanakis	e13775dedb	fuzzer Makefile: Added -lbcrypt linkage Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>	2023-09-25 14:12:21 +01:00
Minos Galanakis	b8d6b82df4	programs: Cleaned up bcrypt linking refererences. bcrypt is added to the cmake `libs` dependency at library\CMakeLists.txt Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>	2023-09-25 14:12:21 +01:00
Simon Butcher	1c0c5d2a62	Fix for building programs with mingw mingw build files were missing the dependency on the bcrypt library Signed-off-by: Simon Butcher <simon.butcher@arm.com>	2023-09-25 14:12:20 +01:00
Simon Butcher	33425de128	Correct check for WIN32 in cmake files for programs Condition was checking for Visual Studio, not use of WIN32 Signed-off-by: Simon Butcher <simon.butcher@arm.com>	2023-09-25 14:12:20 +01:00
Kevin Kane	0ec1e68548	Replace Windows APIs that are banned in Windows Store apps CryptGenRandom and lstrlenW are not permitted in Windows Store apps, meaning apps that use mbedTLS can't ship in the Windows Store. Instead, use BCryptGenRandom and wcslen, respectively, which are permitted. Also make sure conversions between size_t, ULONG, and int are always done safely; on a 64-bit platform, these types are different sizes. Also suppress macro redefinition warning for intsafe.h: Visual Studio 2010 and earlier generates C4005 when including both <intsafe.h> and <stdint.h> because a number of <TYPE>_MAX constants are redefined. This is fixed in later versions of Visual Studio. The constants are guaranteed to be the same between both files, however, so we can safely suppress the warning when including intsafe.h. Signed-off-by: Kevin Kane <kkane@microsoft.com>	2023-09-25 14:12:20 +01:00
Gilles Peskine	bd50d5baec	Merge pull request #8177 from gilles-peskine-arm/generated-files-off-in-release Generated files off in release	2023-09-18 14:11:58 +00:00
Paul Elliott	fd3360ebf4	Remove unneeded setting of ret from ssl programs Remove coverity warnings on unused values. Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2023-09-15 17:41:25 +01:00
Dave Rodgman	da0bb9fae8	Merge pull request #8034 from gilles-peskine-arm/bump_version-doc_mainpage Update capitalization of "Mbed" and fix bump_version.sh	2023-09-13 08:41:20 +00:00
Gilles Peskine	e820c0abc8	Update spelling "mbed TLS" to "Mbed TLS" The official spelling of the trade mark changed from all-lowercase "mbed" to normal proper noun capitalization "Mbed" a few years ago. We've been using the new spelling in new text but still have the old spelling in a lot of text. This commit updates most occurrences of "mbed TLS": ``` sed -i -e 's/mbed TLS/Mbed TLS/g' $(git ls-files ':!ChangeLog' ':!tests/data_files/*' ':!tests/suites/.data' ':!programs/x509/' ':!configs/tfm') ``` Justification for the omissions: * `ChangeLog`: historical text. * `test/data_files/*`, `tests/suites/.data`, `programs/x509/`: many occurrences are significant names in certificates and such. Changing the spelling would invalidate many signatures and tests. `configs/tfm*`: this is an imported file. We'll follow the upstream updates. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-09-12 19:18:17 +02:00
Paul Elliott	a722d0a415	Update CMake minimum version(s) to match main CMakeLists.txt Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2023-09-12 16:42:14 +01:00
Yanray Wang	022b9a1ca0	benchmark: add AES_CFB8 Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-09-12 16:28:37 +08:00
Yanray Wang	55aba195de	benchmark: add AES_CFB128 Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-09-12 16:24:27 +08:00
Gilles Peskine	1bfc09bca7	Move comment to its intended location Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-09-09 21:26:05 +02:00
Gilles Peskine	0b62b7a21f	Allow turning off re-generation of files with make In make builds, when GEN_FILES is false (empty), don't try to re-generate configuration-independent source files, regardless of whether they seem out of date. This is useful, for example, if you have a source tree where `make generated_files` has already run and file timestamps reflect the time the files were copied or extracted, and you are now in an environment that lacks some of the necessary tools to re-generate the files. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-09-08 16:19:13 +02:00
Ronald Cron	eab2055bde	Fix query_config.c generation with CMake build system In case of an out-of-tree build with the CMake build system the path to crypto_config.h has to be defined as the path to mbedtls_config.h. Add this possibility tp generate_query_config.pl. Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2023-09-08 10:23:25 +02:00
Yanray Wang	9b811658a8	Merge remote-tracking branch 'origin/development' into support_cipher_encrypt_only	2023-09-07 16:18:00 +08:00
Gilles Peskine	b9664ee676	Don't include configuration adjustment headers Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-09-05 11:57:14 +02:00
Yanray Wang	d7058b0a35	dh_client: removed under CIPHER_ENCRYPT_ONLY dh_client requests AES-ECB to do decryption. So it needs to be removed under CIPHER_ENCRYPT_ONLY. Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2023-09-01 17:35:58 +08:00
Gilles Peskine	f745e5b8de	Merge remote-tracking branch 'development' into HEAD	2023-08-23 20:35:32 +02:00
Tom Cosgrove	17d5081ffb	Merge pull request #8099 from gilles-peskine-arm/split-config_psa-prepare Prepare to split config_psa.h	2023-08-22 07:30:46 +00:00
Gilles Peskine	796bc2b8f9	Merge pull request #7486 from AndrzejKurek/calloc-also-zeroizes Document mbedtls_calloc zeroization	2023-08-21 15:47:21 +00:00
Gilles Peskine	9af413bcc5	Don't try to include mbedtls/config_*.h They're included by build_info.h and must not be included directly. Currently, this only concerns one file: config_psa.h. It's technically a bug to include it, but a harmless one because that header has already been included by build_info.h except in configurations where it effectively had no effect (enabling PSA options with PSA turned off). We plan to split config_psa.h into multiple headers that are less independent, which could make the inclusion more problematic. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-08-21 16:12:36 +02:00
Gilles Peskine	dbd13c3689	Merge pull request #7662 from lpy4105/issue/renew_cert_2027-01-01 Updating crt/crl files due to expiry before 2027-01-01	2023-08-17 15:38:35 +00:00
Gilles Peskine	d370f93898	Merge pull request #7898 from AndrzejKurek/csr-rfc822-dn OPC UA - add support for RFC822 and DirectoryName SubjectAltNames when generating CSR's	2023-08-16 09:19:46 +00:00
Manuel Pégourié-Gonnard	660bbf2470	test: disable BIGNUM support on the test ecc_no_bignum component Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-08-10 06:43:23 +02:00
Paul Elliott	2f12a29cdd	Merge pull request #7896 from AgathiyanB/gitignore-generated-files-toggle Add script to toggle ignoring generated files	2023-08-09 14:54:32 +00:00
Thomas Daubney	a68ef95394	Check length before calling memcmp Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-08-07 11:09:51 +01:00
Thomas Daubney	102033c38d	Add new line at end of file to satisfy code style Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-08-03 16:20:09 +01:00
Thomas Daubney	5c2dcbd250	Implement cleanup label Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-08-03 16:03:30 +01:00
Thomas Daubney	21fbe4c90e	Remove further superfluous call to psa_hash_abort Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-08-03 15:39:42 +01:00
Thomas Daubney	1ba9744afb	Correct code style Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 17:25:16 +01:00
Thomas Daubney	c918c32cc0	Stop hashing the null byte Change the hash data to not include the null byte used to terminate the string. Pass sizeof() - 1 to the hash operation API functions so that the null byte can be ignored. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 17:15:03 +01:00
Thomas Daubney	fbe742b2d0	Add extra check to one-shot operation results Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 16:17:38 +01:00
Thomas Daubney	ce14124f7c	Check result of multipart operation Check that the multi-part operation has produced the correct result. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 16:14:20 +01:00
Thomas Daubney	606110fc19	Restructure start of program Restructure the start of the program to make it clear to a user exactly what this program is for. Add a comment for additional clarity. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 15:57:10 +01:00
Thomas Daubney	1f98736e71	Add clarifying comment to new program section Mark the beginning of the section that prints the result with a comment. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 15:23:06 +01:00
Thomas Daubney	a2b7519d63	Use memcmp instead of reinventing it Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 15:21:46 +01:00
Thomas Daubney	9730cb1274	Change hash output formatting Change the formatting of the hash output to remove line breaks and spaces. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 15:07:19 +01:00
Thomas Daubney	c07fa29b58	Change wording in error message Change wording from "failed" since this implied the function had returned an error status instead of producing the wrong result. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 14:58:55 +01:00
Thomas Daubney	3071c85835	Clarify comments Clarify comments when moving into one-shot part of demo. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 14:47:47 +01:00
Thomas Daubney	c050037c08	Remove mbedtls_ and psa_ prefix from var names Remove the mbedtls and psa prefixes from variable names in order to make clearer what is part of the API and what is just part of the demo program. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 14:44:25 +01:00
Thomas Daubney	a79f806225	Remove superfluous calls to psa_hash_abort Calls were not required since psa_hash_setup was yet to be called. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 14:33:20 +01:00
Thomas Daubney	6fc4ca2d85	Replace hash_size with hash_length This is to make the variable naming covnention align with the PSA API documentation. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 14:31:06 +01:00
Thomas Daubney	2c872340e8	Fix erroneous macro guards Replace MBEDTLS_SHA256_C for PSA_WANT_ALG_SHA_256 everywhere, including comments and print statements. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-28 14:21:38 +01:00
Gowtham Suresh Kumar	186731b22a	Fix warnings from clang-16 Running clang-16 on mbedtls reports warnings of type "-Wstrict-prototypes". This patch fixes these warnings by adding void to functions with no arguments. The generate_test_code.py is modified to insert void into test functions with no arguments in *.function files. Signed-off-by: Gowtham Suresh Kumar <gowtham.sureshkumar@arm.com>	2023-07-26 17:11:51 +01:00
Gilles Peskine	f5d2d1c7cd	Skip dlopen demo in static builds Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 20:23:44 +02:00
Gilles Peskine	c25ae6f48c	Use demo_common.sh in dlopen test script Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 20:23:44 +02:00
Gilles Peskine	086f85f055	Fix some mistakes in descriptive messages Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:40:35 +02:00
Gilles Peskine	911081efd2	Explain why $root_dir needs a complicated calculation Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:40:14 +02:00
Gilles Peskine	fc09d27a92	Print only missing dependencies Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:40:14 +02:00
Gilles Peskine	c142620724	cleanup is part of the external interface Since there's no EXIT trap in plain sh, the main script must call it explicitly when it exits. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:40:14 +02:00
Gilles Peskine	03be234c7f	Declare the dependencies of key_ladder_demo.sh Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:36:39 +02:00
Gilles Peskine	b2bcdc1c17	Let demo scripts declare their dependencies Demo scripts should declare their build-time dependencies, to make them more user-friendly. If a dependency is not met, users should see an explicit message rather than an incomprehensible error. Don't rely on the dependencies of individual programs because some demo scripts use multiple programs and because some scripts might have additional requirements. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:36:39 +02:00
Gilles Peskine	958be36b19	Demo scripts: create a seedfile if the configuration requires it Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:36:39 +02:00
Gilles Peskine	d1b5f6f609	Move common code of demo scripts into a library The new file programs/demo_common.sh contains initialization code, utility functions and cleanup code meant to be used by all demo scripts written in sh. Initial features: * msg: Display a message. * run, run_bad: Run a command, visibly. * $root_dir, $programs_dir: location of the mbedtls source tree. * $files_to_clean: files that are cleaned up on exit. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-07-25 19:36:13 +02:00
Thomas Daubney	1fd916a1a3	Address review comments - make operation name more generic - make use of psa_hash_abort Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-25 16:10:48 +01:00
Thomas Daubney	9520df7580	Fix code style Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-25 10:56:54 +01:00
Thomas Daubney	1db78fa32a	Demonstrate algorithm agility Define HALH_ALG to the desired PSA algorithm to demostrate the ease of swapping algorithms with the PSA API. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-24 16:49:14 +01:00
Thomas Daubney	f7348ae1fc	Improve program from first round review comments Following an initial review: - Swap printf for mbedtls_printf - Remove MBEDTLS_xxx dependencies - Demonstrate correct buffer sizing Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-24 12:18:40 +01:00
Thomas Daubney	209c9c9492	Bring code-style up-to-date This PR was originally created before the code style was changed. This commit updates the style. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-18 14:59:45 +01:00
Hannes Tschofenig	f8b9ebf297	Add example program for PSA hash This commit adds the example program for PSA hash as well as the relevant changes to CMakeLists.txt and the Makefile. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2023-07-18 13:55:36 +01:00
Manuel Pégourié-Gonnard	828b3acd6b	Merge pull request #7848 from valeriosetti/issue7749 driver-only ECC: EPCf.TLS testing	2023-07-18 10:33:21 +02:00
Dave Rodgman	91d9daf2b3	Merge pull request #7925 from hasheddan/dtls-server-order Fix order of steps in DTLS server example program	2023-07-17 09:41:43 +01:00
Daniel Mangum	af2f7a6fcb	Fix order of steps in DTLS server example program Fixes the numbered order of steps in the DTLS server example program. Signed-off-by: Daniel Mangum <georgedanielmangum@gmail.com>	2023-07-14 12:00:33 -04:00
Andrzej Kurek	312b6df38a	Add a missing guard in cert_req.c IP parsing requires x509_CRT_PARSE_C Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-07-10 08:45:30 -04:00
Valerio Setti	dda0019e2e	ssl_test_lib: fix rebase error Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-07-10 10:22:51 +02:00
Valerio Setti	5bdebb2004	ssl_test_lib: fix variable naming for curve group Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-07-10 09:13:57 +02:00
Valerio Setti	fb6356f003	ssl_test_lib: simplify function which prints supported curves Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-07-10 09:13:57 +02:00
Valerio Setti	deb676442d	ssl_test_lib: manage FFDH keys the same way as ECC ones Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-07-10 09:13:57 +02:00
Valerio Setti	acd32c005f	programs: add helper functions for supported EC curves - get full list, or - get TLS ID from name Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-07-10 09:13:57 +02:00
Manuel Pégourié-Gonnard	461d59b2f8	Merge pull request #7858 from mprse/ffdh_tls13_v2_f Make use of FFDH keys in TLS 1.3 - follow-up	2023-07-07 16:19:35 +02:00
Dave Rodgman	c4749b1c66	Merge pull request #7584 from gilles-peskine-arm/fuzz-file-open-fail Fuzz programs: print an error if loading the reproducer fails	2023-07-07 11:51:59 +01:00
Andrzej Kurek	6bc7a38683	Support more SAN subtypes in cert_req.c Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-07-07 05:13:13 -04:00
Agathiyan Bragadeesh	77b0d645f5	Add gitignore anchors to denote generated files These anchors encapsulate gitignore patterns which typically ignore files generated, so that scripts can be used to comment and uncomment these patterns for releases when we need the generated files in the repository. Signed-off-by: Agathiyan Bragadeesh <agabra02@e127300.arm.com>	2023-07-06 17:58:18 +01:00
Przemek Stekiel	68e7544de8	parse_groups: curve -> group adaptations Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-07-06 12:16:44 +02:00
Przemek Stekiel	45255e4c71	Adapt names (curves -> groups) Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-07-05 09:26:26 +02:00
Pengyu Lv	b078607f04	cert_write: Support write any for extended key usage Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>	2023-07-04 17:30:21 +08:00
Manuel Pégourié-Gonnard	56b159a12a	Merge pull request #7627 from mprse/ffdh_tls13_v2 Make use of FFDH keys in TLS 1.3 v.2	2023-07-03 10:12:33 +02:00
Dave Rodgman	c23d2222ea	Merge pull request #7728 from waleed-elmelegy-arm/crypt_and_hash-decrypt-fix Fix crypt_and_hash decrypt issue when used with stream cipher	2023-06-30 11:42:35 +01:00
Andrzej Kurek	60de0b198a	Move the overallocation test to test suites This way the compiler does not complain about an overly large allocation made. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-27 09:26:08 -04:00
Andrzej Kurek	aae3208c29	Add an mbedtls_calloc(SIZE_MAX/2, SIZE_MAX/2) test It should return NULL and not a valid pointer. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-27 09:26:08 -04:00
Andrzej Kurek	e35f3a23be	Add a calloc selftest for more than a page Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-27 09:26:08 -04:00
Andrzej Kurek	ecaf6fb8b2	Documentation and cosmetic fixes Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-27 09:26:08 -04:00
Andrzej Kurek	9032711dc7	Move the calloc buffer initialization test to selftest.c This way it's more in line with the 2.28 version. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-27 09:26:08 -04:00
Manuel Pégourié-Gonnard	39a0a76fcc	SSL programs: improve command-line error reporting Every now and then, I see of these programs failing with a super-long usage message that gives no clue as to what went wrong. (Recently it happened with a test case in ssl-opt.sh with a fairly long command line that was entirely correct, except some options were not valid in this config - the test should have been skipped but wasn't due to some other bug. It took me longer to figure out than it should have, and could have if the program had simply reported which param was not recognized.) Also, have an explicit "help" command, separate "help_ciphersuites", and have default usage message that's not multiple screens long. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-06-27 09:28:24 +02:00
Manuel Pégourié-Gonnard	3eea9a461c	SSL programs: allow invoking without arguments All options have reasonable default so the programs don't need arguments to do something useful. It is widely accepted for programs that can work without arguments need not insist on the user passing arguments, see 'ls', 'wc', 'sort', 'more' and any number of POSIX utilities that all work without arguments. It is also the historical behaviour of those programs, and something relied one by at least a few team members. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-06-26 11:29:35 +02:00
Manuel Pégourié-Gonnard	0b74434e2a	SSL programs: group options processing in 1 place Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-06-26 11:28:00 +02:00
Paul Elliott	458b96b1a7	Merge pull request #7638 from AndrzejKurek/cert-apps-use-ips Use better IP parsing in x509 apps	2023-06-20 17:21:04 +01:00
Przemek Stekiel	7d42c0d0e5	Code cleanup #2 Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-06-13 12:30:40 +02:00
Przemek Stekiel	75a5a9c205	Code cleanup Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-06-13 09:57:23 +02:00
Waleed Elmelegy	46549cb5fa	Replace function calls in crypt_and_hash program with locals Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>	2023-06-12 14:53:02 +01:00
Waleed Elmelegy	7d39cc410c	Fix crypt_and_hash decrypt issue when used with stream cipher crypt_and_hash decryption fails when used with a stream cipher mode of operation due to the input not being multiple of block size, this only applies to block cipher modes and not stream ciphers.This change exempts CTR, CFB & OFB modes from this check. Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>	2023-06-09 16:58:23 +01:00
Dave Rodgman	05d71ffe5b	Merge remote-tracking branch 'origin/development' into sha3-updated	2023-06-07 18:02:04 +01:00
Andrzej Kurek	0624e460fb	Add a guard for IP parsing in cert_req app Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-07 08:54:35 -04:00
Andrzej Kurek	cd17ecfe85	Use better IP parsing in x509 programs Remove unnecessary duplicated code. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-07 08:50:05 -04:00
Przemek Stekiel	ff9fcbcace	ssl_client2, ssl_server2: code optimization + guards adaptation Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-06-06 12:53:40 +02:00
Przemek Stekiel	da4fba64b8	Further code optimizations Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-06-06 12:31:09 +02:00
Przemek Stekiel	316c19ef93	Adapt guards, dependencies + optimizations Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com> Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-06-06 12:31:09 +02:00
Przemek Stekiel	e7db09bede	Move FFDH helper functions and macros to more suitable locations Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-06-06 12:31:08 +02:00
Przemek Stekiel	6d7da5ee1e	Add FFDH support in client2, server2 applications Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-06-06 12:31:08 +02:00
Gilles Peskine	84b547b5ee	Merge pull request #7400 from AndrzejKurek/cert-write-sans Add a possibility to generate certificates with a Subject Alternative Name	2023-06-05 15:38:38 +02:00
Andrzej Kurek	f994bc51ad	Refactor code in cert_write.c This way is more robust. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-06-02 05:10:17 -04:00
Dave Rodgman	7f97675b64	Merge pull request #5237 from davidhorstmann-arm/demo-out-of-tree	2023-05-19 21:27:24 +01:00
Andrzej Kurek	5eebfb8fd0	Enable escaping ';' in cert_write.c SANs This might get used in URIs. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-05-17 15:23:56 -04:00
Andrzej Kurek	446e53d401	Fix a code style issue Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-05-17 15:23:56 -04:00
Andrzej Kurek	f70f460e5f	Fix temporary IP parsing error Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-05-17 15:23:56 -04:00
Andrzej Kurek	ed557930bb	Update ip_string_to_bytes to cert_req version Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-05-17 15:23:56 -04:00
Andrzej Kurek	5da1d751e9	Add missing memory deallocation Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-05-17 15:23:56 -04:00
Andrzej Kurek	1bc7df2540	Add documentation and a changelog entry Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-05-17 15:23:56 -04:00
Andrzej Kurek	ccdd975286	Add a certificate exercising all supported SAN types This will be used for comparison in unit tests. Add a possibility to write certificates with SAN in cert_write. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-05-17 11:45:36 -04:00
Paul Elliott	aba165b58c	Merge pull request #7586 from gilles-peskine-arm/gitignore-objects-at-root Ignore *.o everywhere	2023-05-15 13:57:24 +01:00
Gilles Peskine	8075f76708	Ignore .o everywhere We don't commit .o files anywhere, not even as test data. So ignore them everywhere. This resolves .o files not being ignored under 3rdparty/p256-m. Also remove a redundant ignore of .exe in a subdirectory. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-05-12 13:58:05 +02:00
Gilles Peskine	1f9d8a43c2	Fuzz programs: print an error if loading the reproducer fails The fuzz programs were returning a nonzero status if they failed to load the reproducer, but that's discreet and not informative. Make them also print an error message. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-05-12 13:18:08 +02:00
David Horstmann	4dfa368681	Fix demo scripts for out-of-tree builds Allow demo scripts to be run from the build directory for out-of-tree builds. If the executable is not found in the source tree then search in the current directory in case the script is being run from a build directory. Signed-off-by: David Horstmann <david.horstmann@arm.com>	2023-05-09 18:30:05 +01:00
Gilles Peskine	97edeb4fb8	Merge pull request #6866 from mprse/extract-key-ids Extracting SubjectKeyId and AuthorityKeyId in case of x509 V3 extensions v.2	2023-05-08 20:38:29 +02:00
Pol Henarejos	d06c6fc45b	Merge branch 'development' into sha3 Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>	2023-05-05 16:01:18 +02:00
Dave Rodgman	417c4c8b2c	Merge pull request #5770 from mstorsjo/win32-fallback-timer Use QueryPerformanceCounter as fallback timer on non-x86 mingw	2023-05-05 14:31:41 +01:00
Gilles Peskine	53a9ac576d	Merge pull request #7443 from mprse/psa_init_in_programs Init PSA in ssl and x509 programs	2023-04-28 12:49:11 +02:00
Przemek Stekiel	94cf710edc	Revert increase of MEMORY_HEAP_SIZE in ssl_client2 Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-24 16:35:40 +02:00
Przemek Stekiel	5346396c48	Fix code-style Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-24 09:01:41 +02:00
Przemek Stekiel	758aef60c5	Add guards for mbedtls_psa_crypto_free() Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-24 08:10:01 +02:00
Przemek Stekiel	774f9debf2	Init PSA in fuzz programs Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-24 08:07:20 +02:00
Przemek Stekiel	2c1ef0967c	Init PSA in pkey programs Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-19 10:16:53 +02:00
Przemek Stekiel	a8c560a799	Free psa crypto at the end of programs when initialized Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-19 10:15:26 +02:00
Przemek Stekiel	e296868b25	Remove print from mini_client Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-17 11:11:01 +02:00
Przemek Stekiel	a0a1c1eab5	Move psa_crypto_init() after other init calls Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-17 11:10:05 +02:00
Przemek Stekiel	6260ee9cab	cert_app: init entropy unconditionally When mbedtls_entropy_free() is called without mbedtls_entropy_init() entropy is uninitialized and contains garbage which may lead to segmentation fault. Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-16 22:42:01 +02:00
Przemek Stekiel	89c636e6cf	Init PSA in ssl and x509 programs Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-04-16 22:41:52 +02:00
Valerio Setti	d49cbc1493	test: fix remaining failures in test due to the ECP_LIGHT symbol Changes in test_suite_psa_crypto are to enforce the dependency on ECP_C which is mandatory for some key's derivation. Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-04-11 11:33:50 +02:00
Gilles Peskine	7c1c7ce90e	Merge pull request #7401 from AndrzejKurek/md-guards-missing Add missing md.h includes	2023-04-11 09:32:17 +02:00
Gilles Peskine	c9e8a65d06	Merge pull request #7298 from lpy4105/issue/6840/add-cache-entry-removal-api ssl_cache: misc improvements	2023-04-11 09:30:40 +02:00
Andrzej Kurek	0af32483f3	Change the format of md.h include comments Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-04-07 03:10:28 -04:00
Andrzej Kurek	0e03f4c119	Remove unnecessary include This is a PSA-based program and psa/crypto.h is already included. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-04-06 07:55:25 -04:00
Andrzej Kurek	316b7dd19c	Add a justification for early md.h include in programs Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-04-05 14:44:38 -04:00
Andrzej Kurek	da86e2e5bd	Revert to using MBEDTLS_SHA_1_C when mbedtls_sha1 is called directly This was mistakingly changed in #7327. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-04-05 14:39:22 -04:00
Andrzej Kurek	eaea30d30e	Remove duplicated md.h includes Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-04-05 14:36:51 -04:00
toth92g	27f9e7815c	Adding openssl configuration file and command to Makefile to be able to reproduce the certificate for testing Authority and Subject Key Id fields Increasing heap memory size of SSL_Client2 and SSL_Server2, because the original value is not enough to handle some certificates. The AuthorityKeyId and SubjectKeyId are also parsed now increasing the size of some certificates Signed-off-by: toth92g <toth92g@gmail.com>	2023-04-04 17:48:27 +02:00
Andrzej Kurek	1b75e5f784	Add missing md.h includes MBEDTLS_MD_CAN_SHAXXX are defined there. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2023-04-04 09:55:06 -04:00
Manuel Pégourié-Gonnard	33783b4646	Manually fix two remaining instances of old macros Unless I missed something, all remaining instance of all macros are in files where it makes sense to use these. I went over the output of: git grep -c -E 'MBEDTLS_(MD5\|RIPEMD160\|SHA[0-9])_C' and I think all the files listed fall into one of the following acceptable categories: - documentation and historical documents: Changelog, docs//.md - config files and related: mbedtls_config.h, configs/*.h, check_config.h, config_psa.h, etc. - scripts that build/modify configs: all.sh, depends.py, set_psa_test_dependencies.py, etc. - implementation of MD or PSA or related: md.h, psa_util.h, etc. and corresponding test suites - implementation of hashes: md5.c, sha256.h, etc. and corresponding test suites - two example programs using a low-level hash API: hash/hello.c, pkey/ecdsa.c - test/benchmark.c, test/selftest.c: actually want our built-in implementations - a function in test_suite_psa_crypto_storage_format that is specifically for checking if the hash is built in. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-03-24 10:43:40 +01:00
Manuel Pégourié-Gonnard	93302422fd	Fix instances of old feature macros being used sed -i -f md.sed include/mbedtls/ssl.h library/hmac_drbg.c programs/pkey/.c programs/x509/.c tests/scripts/generate_pkcs7_tests.py tests/suites/test_suite_random.data Then manually revert programs/pkey/ecdsa.c as it's using a low-level hash API. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-03-24 10:43:40 +01:00
Manuel Pégourié-Gonnard	7224086ebc	Remove legacy_or_psa.h Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-03-21 16:29:31 +01:00
Manuel Pégourié-Gonnard	23fc437037	SSL: fix test failures 1. Change USE_PSA_CRYPTO_INIT/DONE to MD_OR_USE. 2. Add missing occurrences - some of these were already necessary in principle (in one form or another) but where missing and this was not detected so far as `psa_hash` doesn't complain in case of a missing init, but now MD makes it visible. 3. Add missing include in ssl_test_lib.h. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-03-21 16:29:31 +01:00
Manuel Pégourié-Gonnard	bef824d394	SSL: use MD_CAN macros Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2023-03-21 16:29:31 +01:00
Paul Elliott	9f02a4177b	Merge pull request #7009 from mprse/csr_write_san Added ability to include the SubjectAltName extension to a CSR - v.2	2023-03-17 10:07:27 +00:00
Pengyu Lv	b1895899f1	ssl_cache: Improve some comments Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>	2023-03-16 14:33:28 +08:00
Gilles Peskine	2a44ac245f	Merge pull request #7217 from lpy4105/issue/6840/add-cache-entry-removal-api ssl_cache: Add cache entry removal api	2023-03-15 15:38:06 +01:00
Pengyu Lv	f30488f5cd	Move the usage string of cache_remove to USAGE_CACHE Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>	2023-03-15 09:53:45 +08:00
Przemek Stekiel	f86fe73d59	Fix error on Windows builds (conversion from 'unsigned long' to 'uint8_t') Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-03-14 09:55:29 +01:00
Pengyu Lv	753d02ffd4	ssl_server2: Add options to support cache removal Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>	2023-03-13 09:28:17 +08:00
Przemek Stekiel	55ceff6d2f	Code optimization and style fixes Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-03-10 14:36:16 +01:00
Przemek Stekiel	68ca81c8fe	Change separator for SAN names to ';' When ';' is used as a separator san names must be provided in quotation marks: ./cert_req filename=../../tests/data_files/server8.key subject_name=dannybackx.hopto.org san="URI:http://pki.example.com/;IP:127.1.1.0;DNS:example.com" Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-03-09 14:04:11 +01:00
Dave Rodgman	5e5aa4a4e6	Merge pull request #7218 from tom-cosgrove-arm/fix-typos-230307 Fix typos in development prior to release	2023-03-08 17:19:59 +00:00
Manuel Pégourié-Gonnard	289e5baa83	Merge pull request #7082 from valeriosetti/issue6861 driver-only ECDSA: add ssl-opt.sh testing with testing parity	2023-03-08 16:45:38 +01:00
Tom Cosgrove	5c8505f061	Fix typos Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2023-03-07 11:39:52 +00:00
Przemek Stekiel	6cb59c55c3	ip_string_to_bytes: remove status, add info about supported ip version Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-03-06 10:13:20 +01:00
Pol Henarejos	f61d6c0a2b	Merge branch 'development' into sha3	2023-03-04 00:03:06 +01:00
Przemek Stekiel	5a49d3cce3	Replace mbedtls_x509_san_node with mbedtls_x509_subject_alternative_name Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-03-03 12:58:11 +01:00
Przemek Stekiel	3a92593d1e	Adapt cert_req app to support SAN IP Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2023-03-03 12:58:11 +01:00
Gilles Peskine	df6e84a447	Test the PSA alternative header configuration macros Test that MBEDTLS_PSA_CRYPTO_PLATFORM_FILE and MBEDTLS_PSA_CRYPTO_STRUCT_FILE can be set to files in a directory that comes after the standard directory in the include file search path. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-02-23 17:18:33 +01:00
Valerio Setti	5ba1d5eb2c	programs: use proper macro for ECDSA capabilities in ssl_sever2 Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-02-23 08:15:17 +01:00
Hannes Tschofenig	6b108606fa	Added ability to include the SubjectAltName extension to a CSR Signed-off-by: Hannes Tschofenig <hannes.tschofenig@arm.com>	2023-02-21 13:42:39 +01:00
Dave Rodgman	54647737f6	Add checks to selftest Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2023-02-10 16:16:17 +00:00
Pol Henarejos	b3b220cbf8	Correct style. Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>	2023-02-08 12:52:18 +01:00
Pol Henarejos	a6779287e8	Style. Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>	2023-02-08 00:50:04 +01:00
Pol Henarejos	4e747337ee	Merge branch 'development' into sha3 Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>	2023-02-07 19:55:31 +01:00
Dave Rodgman	f31c9e441b	Merge pull request #7019 from tom-cosgrove-arm/dont-use-cast-assignment-in-ssl_server2.c Don't use cast-assignment in ssl_server.c	2023-02-06 12:13:08 +00:00
Dave Rodgman	94c9c96c94	Merge pull request #6998 from aditya-deshpande-arm/fix-example-programs-usage Fix incorrect dispatch to USAGE in example programs, which causes uninitialized memory to be used	2023-02-06 09:53:50 +00:00
Tom Cosgrove	de85725507	Don't use cast-assignment in ssl_server.c Would have used mbedtls_put_unaligned_uint32(), but alignment.h is in library/. Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2023-02-03 16:38:05 +00:00
Aditya Deshpande	9b45f6bb68	Fix more argc checks Signed-off-by: Aditya Deshpande <aditya.deshpande@arm.com>	2023-02-03 16:15:30 +00:00
Dave Rodgman	6dd757a8ba	Fix use of sizeof without brackets Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2023-02-02 12:40:50 +00:00
Aditya Deshpande	644a5c0b2b	Fix bugs in example programs: change argc == 0 to argc < 2 Signed-off-by: Aditya Deshpande <aditya.deshpande@arm.com>	2023-01-30 16:48:13 +00:00
Manuel Pégourié-Gonnard	aae61257d1	Merge pull request #6883 from valeriosetti/issue6843 Improve X.509 cert writing serial number management	2023-01-30 13:08:57 +01:00
Valerio Setti	af4815c6a4	x509: replace/fix name of new function for setting serial Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>	2023-01-26 17:43:09 +01:00
Pengyu Lv	e2f1dbf5ae	update docs of ssl_client2 and improve code format Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>	2023-01-16 12:38:12 +08:00
Pengyu Lv	302feb3955	add cases to test session resumption with different ticket_flags This commit add test cases to test if the check of kex change mode in SessionTicket works well. Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>	2023-01-13 11:05:56 +08:00
Valerio Setti	48fdbb3940	programs: cert_write: fixed bug in parsing dec serial Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2023-01-12 17:01:45 +01:00
Valerio Setti	791bbe629d	programs: improved cert_write serial management Now it can accept serial both as decimal and hex number (only one format at a time, of course, not simultaneously). Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2023-01-12 17:01:45 +01:00
Valerio Setti	acf12fb744	x509: fix endianness and input data format for x509write_crt_set_serial_new Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2023-01-12 17:01:44 +01:00
Valerio Setti	5d164c4e23	fix: add missing deprecation guards Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2023-01-12 17:01:44 +01:00
Valerio Setti	da0afcc2fb	x509: remove direct dependency from BIGNUM_C Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2023-01-12 17:01:44 +01:00
Gilles Peskine	449bd8303e	Switch to the new code style Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2023-01-11 14:50:10 +01:00
Jerry Yu	a15af37867	Change time resolution of reco_delay from second to millionseconds Per gnutls anti replay issue, it needs millionsecond time delay for improve the fail rate. From test result of #6712, this can improve the fail rate from 4% to 92%. Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2023-01-07 13:01:42 +08:00
David Horstmann	e3d8f31ba1	Workaround Uncrustify parsing of "asm" The following code: #ifndef asm #define asm __asm #endif causes Uncrustify to stop correcting the rest of the file. This may be due to parsing the "asm" keyword in the definition. Work around this by wrapping the idiom in an INDENT-OFF comment wherever it appears. Signed-off-by: David Horstmann <david.horstmann@arm.com>	2023-01-03 11:07:09 +00:00
Manuel Pégourié-Gonnard	7a389ddc84	Merge pull request #6784 from valeriosetti/issue6702 Make SHA224_C/SHA384_C independent from SHA256_C/SHA512_C	2023-01-03 09:36:58 +01:00
Valerio Setti	d10e0a6341	sha: fix minor issues/typos Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-22 14:25:26 +01:00
Dave Rodgman	2038da9266	Merge pull request #6826 from daverodgman/fix_gettimeofday Fix gettimeofday overflow	2022-12-20 16:01:53 +00:00
Dave Rodgman	7796cc4f24	Fix overflow in mbedtls_timing_hardclock Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-12-20 13:12:23 +00:00
Valerio Setti	e7221a21ad	test: adjust depends.py to new SHA224/SHA384 changes Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-16 14:43:48 +01:00
Gilles Peskine	6b21820bd3	Merge pull request #6687 from gilles-peskine-arm/fuzz-cflags programs/fuzz: set sensible default CFLAGS	2022-12-15 19:47:22 +01:00
Manuel Pégourié-Gonnard	c98624af3c	Merge pull request #6680 from valeriosetti/issue6599 Allow isolation of EC J-PAKE password when used in TLS	2022-12-14 11:04:33 +01:00
Valerio Setti	46e8fd8263	test: sha: test SHA224 and SHA256 separately This is meant to adapt to the new library design in which SHA224 and SHA256 can be built independently from each other. Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-14 10:58:02 +01:00
Valerio Setti	898e7a3afe	test: sha: test SHA384 and SHA512 separately This is meant to adapt to the new library design in which SHA384 and SHA512 can be built independently from each other. Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-14 10:50:54 +01:00
Manuel Pégourié-Gonnard	ebf322ddf6	Merge pull request #6629 from concatime/cmake-config-dir Install CMake files in MbedTLS dir	2022-12-14 10:30:52 +01:00
Valerio Setti	d75c5c4405	test: pake: fail in case the opaque key is destroyed unexpectedly Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-13 11:51:32 +01:00
Valerio Setti	785116a5be	test: pake: modify opaque key verification before destruction Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-12 11:59:25 +01:00
Manuel Pégourié-Gonnard	1a100b69a4	Merge pull request #6705 from davidhorstmann-arm/code-style-script-non-corrected Add code style correction script	2022-12-09 09:41:14 +01:00
Valerio Setti	eb3f788b03	tls: pake: do not destroy password key in TLS Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-08 18:42:58 +01:00
Valerio Setti	d5fa0bfb85	test: pake: check psa key validity before destroying it Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-07 16:02:42 +01:00
Ronald Cron	fbba0e9d75	Merge pull request #6537 from yuhaoth/pr/tls13-refactor-early-data-configuration-interface TLS 1.3: Refactor early data configuration interface.	2022-12-07 09:42:12 +01:00
Jerry Yu	d146a37d56	Change the definition of max_early_data_size argument. `conf_max_early_data_size` does not reuse as en/disable. When call it, we should call `conf_early_data()` also. Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-12-06 14:56:54 +08:00
Jerry Yu	2c93fc1544	Revert "Add reco_debug_level to reduce debug output" This reverts commit a6934776c90a834a321daf7eeb35f2ad7d402c50. Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-12-06 11:05:54 +08:00
Jerry Yu	54dfcb7794	fix comments and debug info issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-12-05 15:43:09 +08:00
Tom Cosgrove	1797b05602	Fix typos prior to release Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-12-04 17:19:59 +00:00
Issam E. Maghni	760f3a0a48	Install CMake files in MbedTLS dir Right now, CMake files are installed in <prefix>/cmake. That being said, it gets easily bloated, and the standard is to use a directory with the same name as the project. I discovered this issue with this "bug": https://github.com/termux/termux-packages/issues/12416 The issue's author claimed that MbedTLS's files were not installed in the lib directory. But the patch applied by termux team broke CMake's search of MbedTLS config files. So I wanted to upstream the real fix here instead. Here are some examples of projects using directories: - https://github.com/xiph/flac/blob/1.4.2/CMakeLists.txt#L239 - https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.15.2/CMakeLists.txt#L675 - https://github.com/catchorg/Catch2/blob/v3.2.0/CMakeLists.txt#L62 - https://github.com/capnproto/capnproto/blob/v0.10.2/c++/CMakeLists.txt#L162 Signed-off-by: Issam E. Maghni <issam.e.maghni@mailbox.org>	2022-12-04 03:00:38 +00:00
Valerio Setti	d6feb20869	test: pake: allow opaque password only when USE_PSA is enabled Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-12-02 14:28:49 +01:00
Jerry Yu	7854a4e019	Add max_early_data_size option for ssl_sever2 - to set max_early_data_set Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-12-01 23:11:48 +08:00
Jerry Yu	a6934776c9	Add reco_debug_level to reduce debug output Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-12-01 23:11:48 +08:00
Valerio Setti	661b9bca75	test: psa_pake: add specific log message for the opaque password Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-11-29 17:28:17 +01:00
Valerio Setti	77e8315f5b	fix formatting and typos Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-11-29 17:28:04 +01:00
Gilles Peskine	9ec14f6dcb	programs/fuzz: set sensible default CFLAGS Running make from programs/fuzz didn't set any optimization flags (running make from programs or from the root inherited the parent's optimization flags). Default to -O2. There were no -W flags. Default to -Wall -Wextra, but not -Werror in line with the other makefiles. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-11-29 17:23:19 +01:00
Valerio Setti	d572a82df9	tls: psa_pake: add test for opaque password Signed-off-by: Valerio Setti <vsetti@baylibre.com>	2022-11-29 11:30:56 +01:00
Bence Szépkúti	a17d038ee1	Merge branch 'development' into pr3431	2022-11-22 15:54:52 +01:00
Ronald Cron	d12922a69a	Merge pull request #6486 from xkqian/tls13_add_early_data_indication The merge job of the internal CI ran successfully. This is good to go.	2022-11-17 12:48:50 +01:00
Gilles Peskine	32605b24be	Merge pull request #6559 from ihsinme/patch-1 dh_genprime: Fix issue where the error code returned by mbedtls_mpi_write_file() is incorrectly reported on failure	2022-11-15 12:38:41 +01:00
Xiaokang Qian	2cd5ce0c6b	Fix various issues cause rebase to latest code Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>	2022-11-15 10:33:53 +00:00
Xiaokang Qian	9a0aafbe79	Enable/disable MBEDTLS_SSL_EARLY_DATA for cases in ssl-opt.sh Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>	2022-11-15 02:49:46 +00:00
David Horstmann	5b98d73864	Linewrap for the benefit of Uncrustify The last line of programs/psa/key_ladder_demo.c is of the following form: #endif /* Very long comment ... / Uncrustify tries to reduce the length: #endif \ / Very long comment ... */ and causes a compiler error as there is a continuation line with no actual code in it. Work around this by linewrapping the comment in advance. Signed-off-by: David Horstmann <david.horstmann@arm.com>	2022-11-14 12:10:37 +00:00
Xiaokang Qian	0e97d4d16d	Add early data indication to client side Add fields to mbedtls_ssl_context Add write early data indication function Add check whether write early data indication Add early data option to ssl_client2 Add test cases for early data Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>	2022-11-14 03:13:50 +00:00
Gilles Peskine	fd7aa13671	Merge pull request #6436 from yanrayw/ssl_client2-add-build-version Add build version to the output of ssl_client2 and ssl_server2	2022-11-10 14:39:38 +01:00
ihsinme	d21ecd71c0	dh_genprime: Fix issue where the error code returned by mbedtls_mpi_write_file() is incorrectly reported on failure In 'dh_genprime.c', the following condition can be found inside an 'if' statement: ret = mbedtls_mpi_write_file( "P = ", &P, 16, fout ) != 0 As the '!=' operator binds closer than the assignment operator ('='), the value assigned to 'ret' will be the boolean result of the comparison (0 or 1) instead of the status code returned by 'mbedtls_mpi_write_file'. This means that the above statement is actually equivalent to: ret = ( mbedtls_mpi_write_file( "P = ", &P, 16, fout ) != 0 ) What we want instead is for the the status code to be assigned to 'ret'. If the value assigned is non-zero, it will be 'truthy' and the 'if' branch will be taken. ( ret = mbedtls_mpi_write_file( "P = ", &P, 16, fout ) ) != 0 This PR fixes the issue by explicitly specifying the precedence of operations with parentheses. Signed-off-by: ihsinme <ihsinme@gmail.com>	2022-11-10 12:58:15 +03:00
Dave Rodgman	f58172fe43	Merge remote-tracking branch 'origin/development' into pr3431	2022-11-10 09:54:49 +00:00
Gilles Peskine	bf249accc7	Merge pull request #6498 from yuhaoth/pr/fix-session-resumption-fail-when-hostname-is-not-localhost BUG: Fix session resumption fail when hostname is not localhost	2022-11-07 17:33:38 +01:00
Dave Rodgman	55fd0b9fc1	Merge pull request #6121 from daverodgman/pr277 cert_write - add a way to set extended key usages - rebase	2022-10-31 13:27:49 +00:00
Jerry Yu	2883219edb	Improve output message Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-10-30 13:53:31 +08:00
Jerry Yu	c3a7fa386e	Update output message when certification verified fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-10-28 12:38:33 +08:00
Jerry Yu	ad9e99bd2e	fix session resumption fail when hostname is not localhost Change-Id: Icb2f625bb11debb5c7cae36e34d7270f7baae4d5 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-10-28 12:30:58 +08:00
Yanray Wang	eaf46d1291	Add output of build version in ssl_server2 Usage: - By default, build version is printed out in the beginning of ssl_server2 application. - ./ssl_server2 build_version=1 only prints build verison and stop Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2022-10-28 10:53:50 +08:00
Yanray Wang	84645e92c6	Simplify code of adding output in ssl_client2 - print build version macro defined in build_info.h directly - Remove all the MBEDTLS_VERSION_C guards as build version information is always available in build_info.h Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2022-10-28 10:53:22 +08:00
Dave Rodgman	66e05505b6	Support generating DER format certificates Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-10-27 17:41:40 +01:00
Gilles Peskine	744fd37d23	Merge pull request #6467 from davidhorstmann-arm/fix-unusual-macros-0 Fix unusual macros	2022-10-25 19:55:29 +02:00
David Horstmann	3f44e5b11a	Refactor macro-spanning if in ssl_server2.c Signed-off-by: David Horstmann <david.horstmann@arm.com>	2022-10-24 13:12:19 +01:00
David Horstmann	f160ef1dd1	Refactor macro-spanning if in ssl_client2.c Signed-off-by: David Horstmann <david.horstmann@arm.com>	2022-10-24 13:11:38 +01:00
Yanray Wang	7f9ddb584a	Merge branch 'Mbed-TLS:development' into ssl_client2-add-build-version	2022-10-24 12:19:39 +08:00
Ronald Cron	73fe8df922	Introduce and use MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED Introduce and use MBEDTLS_SSL_HANDSHAKE_WITH_PSK_ENABLED to guard TLS code (both 1.2 and 1.3) specific to handshakes involving PSKs. Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-10-22 14:42:04 +02:00
Ronald Cron	e68ab4f55e	Introduce and use MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED Introduce and use MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED to guard TLS code (both TLS 1.2 and 1.3) specific to handshakes involving certificates. Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-10-22 14:42:04 +02:00
Ronald Cron	81378b72e8	programs: ssl: Remove dependency on TLS 1.3 for "sig_algs" option Signature algorithms can be specified through the sig_algs option for TLS 1.2 as well. Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-10-21 14:40:56 +02:00
Ronald Cron	20a8e63b23	programs: ssl: Fix some mbedtls_ssl_conf_sig_algs() guards Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-10-21 14:36:43 +02:00
Yanray Wang	076b2d062f	Improve the method of printing string build version Following changes are introduced with this commit: - Call mbedtls_version_get_string before printing string build version instead of printing macro directly - Output build version in the beginning of ssl_client2 program Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2022-10-21 11:22:44 +08:00
Andrzej Kurek	b50754ae86	Switch from x509_CRT_PARSE to KEY_EXCHANGE_WITH_CERT_ENABLED Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-10-19 08:35:09 -04:00
Andrzej Kurek	d0786f5f26	Revert one of the changes to ssl_server2 dependencies Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-10-19 08:35:09 -04:00
Andrzej Kurek	6ee1e20d7f	Replace x509_CRT_PARSE_C with KEY_EXCHANGE_WITH_CERT_ENABLED SSL programs use certificates in an exchange, so it's more natural to have such dependency instead of just certificate parsing. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-10-19 08:35:09 -04:00
Andrzej Kurek	eabeb30c65	Fix SHA512 vs SHA384 dependencies When building SHA512 without SHA384, there are some code paths that resulted in unused variables or usage of undefined code. This commit fixes that. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-10-19 08:35:09 -04:00
Andrzej Kurek	e38b788b79	Add missing key exchange dependencies Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-10-19 08:35:08 -04:00
Andrzej Kurek	68327748d3	Add missing dependencies Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-10-19 08:35:08 -04:00
Yanray Wang	ff4181e246	Fix build error in cmake while printing digital build version Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2022-10-18 18:20:40 +08:00
Yanray Wang	d976673dd6	Add build version to the output of ssl_client2 Signed-off-by: Yanray Wang <yanray.wang@arm.com>	2022-10-18 10:53:49 +08:00
Ronald Cron	49e4184812	Merge pull request #6299 from xkqian/tls13_add_servername_check Add server name check when proposing pre-share key	2022-10-13 16:00:59 +02:00
Gilles Peskine	0fe6631486	Merge pull request #6291 from gilles-peskine-arm/platform.h-unconditional-3.2 Include platform.h unconditionally	2022-10-13 10:19:22 +02:00
Pol Henarejos	c9754c3ec1	Merge branch 'Mbed-TLS:development' into sha3	2022-10-13 08:28:13 +02:00
Xiaokang Qian	bc663a0461	Refine code based on commnets Change code layout Change hostname_len type to size_t Fix various issues Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>	2022-10-12 11:06:01 +00:00
Xiaokang Qian	adf84a4a8c	Remove public api mbedtls_ssl_reset_hostname() Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>	2022-10-12 11:05:11 +00:00
Xiaokang Qian	fb8ac46add	Change the name of servername when re-connect Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>	2022-10-12 11:03:44 +00:00
Xiaokang Qian	281fd1bdd8	Add server name check when proposeing pre-share key Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>	2022-10-12 11:03:41 +00:00
Gilles Peskine	8fd3254cfc	Merge pull request #6374 from mprse/enc_types Test TLS 1.2 builds with each encryption type	2022-10-12 12:45:50 +02:00
Jerry Yu	c79742303d	Remove unnecessary empty line and fix format issue Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-10-11 21:22:33 +08:00
Przemek Stekiel	d61a4d3d1a	Fix missing guard and double-space Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-10-11 09:40:40 +02:00
Jerry Yu	6916e70521	fix various issues - adjust guards. Remove duplicate guards and adjust format. - Return success at function end. Not `ret` - change input len Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-10-10 21:33:51 +08:00
Przemek Stekiel	68a01a6720	Fix session tickets related build flags in fuzz_server and ssl_server2 Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-10-10 13:30:43 +02:00
Jerry Yu	03b8f9d299	Adjust guards for `dummy_tickets` Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-10-08 14:56:38 +08:00
Jerry Yu	25ab654781	Add dummy ticket support Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-10-07 10:11:05 +08:00
Manuel Pégourié-Gonnard	e3358e14b2	Merge pull request #6051 from mprse/permissions_2b_v2 Permissions 2b: TLS 1.3 sigalg selection	2022-09-28 09:50:04 +02:00
Paul Elliott	2c282c9bd0	Merge pull request #6180 from yuhaoth/pr/add-tls13-multiple-session-tickets TLS 1.3: NewSessionTicket: Add support for sending multiple tickets per session.	2022-09-23 15:48:33 +01:00
Manuel Pégourié-Gonnard	d433cd7d07	Merge pull request #6283 from mpg/driver-only-hashes-wrap-up Driver only hashes wrap-up	2022-09-21 08:29:46 +02:00
Ronald Cron	50969e3af5	ssl-opt.sh: TLS 1.3 opaque key: Add test with unsuitable sig alg Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-09-20 15:57:57 +02:00
Jerry Yu	7a51305478	Add multi-session tickets test Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-09-19 14:26:07 +08:00
Ronald Cron	be0224aef3	Merge pull request #6167 from yuhaoth/pr/finalize-tls13-session-tickets	2022-09-18 21:18:13 +02:00
Manuel Pégourié-Gonnard	e896705c1a	Take advantage of legacy_or_psa.h being public Opportunities for using the macros were spotted using: git grep -E -n -A2 'MBEDTLS_(MD\|SHA)[0-9]+_C' \| egrep 'PSA_WANT_ALG_(MD\|SHA)' then manually filtering the results. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-09-16 12:03:52 +02:00
Gilles Peskine	e9b55929dc	Remove useless platform macro redefinitions: automatic part Some source files had code to set mbedtls_xxx aliases when MBEDTLS_PLATFORM_C is not defined. These aliases are defined unconditionally by mbedtls/platform.h, so these macro definitions were redundant. Remove them. This commit used the following code: ``` perl -i -0777 -pe 's~#if !defined$MBEDTLS_PLATFORM_C$\n(#define (mbedtls\|MBEDTLS)_.\n\|#include <(stdarg\|stddef\|stdio\|stdlib\|string\|time)\.h>\n)#endif.*\n~~mg' $(git grep -l -F '#if !defined(MBEDTLS_PLATFORM_C)') ``` Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-09-15 20:34:15 +02:00
Gilles Peskine	945b23c46f	Include platform.h unconditionally: automatic part We used to include platform.h only when MBEDTLS_PLATFORM_C was enabled, and to define ad hoc replacements for mbedtls_xxx functions on a case-by-case basis when MBEDTLS_PLATFORM_C was disabled. The only reason for this complication was to allow building individual source modules without copying platform.h. This is not something we support or recommend anymore, so get rid of the complication: include platform.h unconditionally. There should be no change in behavior since just including the header should not change the behavior of a program. This commit replaces most occurrences of conditional inclusion of platform.h, using the following code: ``` perl -i -0777 -pe 's!#if.\n#include "mbedtls/platform.h"\n(#else.\n(#define (mbedtls\|MBEDTLS)_.\n\|#include <(stdarg\|stddef\|stdio\|stdlib\|string\|time)\.h>\n))?#endif.*!#include "mbedtls/platform.h"!mg' $(git grep -l '#include "mbedtls/platform.h"') ``` Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-09-15 20:33:07 +02:00
Przemek Stekiel	632939df4b	ssl_client2: print pk key name when provided using key_opaque_algs Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-09-15 14:16:11 +02:00
Jerry Yu	4746b10c2e	fix various issues - Format issues - Possible memory leak - Improve naming and comment issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-09-13 15:37:46 +08:00
Andrzej Kurek	0bc834b27f	Enable signature algorithms in ssl programs with PSA based hashes Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-12 05:37:46 -04:00
Dave Rodgman	1577c548d1	Use NULL instead of 0 Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-09-09 10:22:15 +01:00
Nayna Jain	106a0afc5a	pkcs7: provide fuzz harness This allows for pkcs7 fuzz testing with OSS-Fuzz. Signed-off-by: Daniel Axtens <dja@axtens.net> Signed-off-by: Nayna Jain <nayna@linux.ibm.com>	2022-09-01 19:45:41 -05:00
Jerry Yu	0203534c64	Add session save after got new session ticket Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-31 23:24:25 +08:00
Ronald Cron	e00d6d6b55	Merge pull request #6135 from yuhaoth/pr/tls13-finalize-external-psk-negotiation TLS 1.3: SRV: Finalize external PSK negotiation	2022-08-31 17:21:57 +02:00
Andrzej Kurek	dcce505a08	Add a missing guard in an example program MD variable is not used in builds without MD. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-30 17:56:08 -04:00
Manuel Pégourié-Gonnard	bf22a2500b	Merge pull request #6208 from AndrzejKurek/tls-tests-no-md-structured Remove the dependency on MD from TLS 1.2 tests	2022-08-30 12:34:37 +02:00
Manuel Pégourié-Gonnard	a84ce3fa81	Merge pull request #6111 from superna9999/6101-programs-dont-build-with-libtestdriver-and-use-psa Programs don't build with libtestdriver and USE_PSA	2022-08-30 12:29:01 +02:00
Dave Rodgman	c5e0a8a890	Add missing error message Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Dave Rodgman	64937856e0	Correct order of extended key usage attributes Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Dave Rodgman	18b02d35d6	Remove redundant sig_alg argument Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Dave Rodgman	2ee7bbd10a	Replace some constant values with sizeof Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Dave Rodgman	5f3f0d06e6	Address minor review comments Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Dave Rodgman	ec9f6b4de1	Fix minor compile errors Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Nicholas Wilson	99a96b1c22	Improve programs/cert_write with a way to set the signature digest This is useful for generating SHA-1 and MD5 certificates for test purposes. I guess RSA-PSS could be added too, but I don't need that now. Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:08:43 +01:00
Nicholas Wilson	8e5bdfbbcf	Improve programs/cert_write with a way to set extended key usages Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:08:43 +01:00
Jerry Yu	c5a23a0f12	fix various issues - code style - variable initialize - update comments Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-25 11:09:35 +08:00
Andrzej Kurek	cccb044804	Style & formatting fixes Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-23 05:26:02 -04:00
Andrzej Kurek	8c95ac4500	Add missing dependencies / alternatives A number of places lacked the necessary dependencies on one of the used features: MD, key exchange with certificate, entropy, or ETM. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-22 17:46:50 -04:00
Jerry Yu	5d01c05d93	fix various issues - wrong typo in comments - replace psk null check with key_exchange_mode check - set psk NULL when error return in export hs psk Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-21 12:55:01 +08:00
Jerry Yu	2b7a51ba8f	Add psk_or_ephemeral mode and tests psk_or_ephemeral exists in theory. This change is for improving test coverage. Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-21 12:51:53 +08:00
Jerry Yu	62c8763de7	Improve macro expansion help message Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-11 10:18:36 +08:00
Jerry Yu	08dccc1f75	Improve help message Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-10 10:02:04 +08:00
Neil Armstrong	9bb8e0d3c5	Fix fuzz_privkey build without MBEDTLS_ENTROPY_C defined Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-08 13:56:13 +02:00
Jerry Yu	2fcb056ea9	Add requires_{any,all}_configs_enabled functions - requires_any_configs_enabled - requires_all_configs_enabled - requires_any_configs_disabled - requires_all_configs_disabled Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-31 12:23:39 +08:00
Jan Bruckner	25fdc2addb	Fix minor typos Signed-off-by: Jan Bruckner <jan@janbruckner.de>	2022-07-26 10:52:46 +02:00
Jerry Yu	2b4f02d7fb	Add new_session_ticket err handler Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-20 11:07:29 +08:00
Paul Elliott	7adb8cbc0e	Revert "Add generated files for 3.2.0 release" This reverts commit cb21f2eab302b6661405c502ee92f8b8a1f41ae4. Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-11 18:18:30 +01:00
Paul Elliott	cb21f2eab3	Add generated files for 3.2.0 release Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-11 13:56:01 +01:00
Ronald Cron	ce7d76e2ee	Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr	2022-07-11 10:22:37 +02:00
Paul Elliott	41aa808a56	Merge pull request #952 from gilles-peskine-arm/stdio_buffering-setbuf Turn off stdio buffering with setbuf()	2022-07-04 10:12:22 +01:00
Ronald Cron	0e39ece23f	Merge pull request #5916 from yuhaoth/pr/tls13-refactor-get-sig-alg-from-pk Refactor signature algorithm chooser	2022-07-04 09:10:08 +02:00
Paul Elliott	bae7a1a5a6	Merge pull request #5620 from gstrauss/dn_hints Add accessors to config DN hints for cert request	2022-07-01 17:23:14 +01:00
Paul Elliott	ff15dbab4c	Make definition order a bit neater Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-01 16:30:08 +01:00
Gilles Peskine	6d576c9646	Call setbuf when reading or writing files: programs After opening a file containing sensitive data, call mbedtls_setbuf() to disable buffering. This way, we don't expose sensitive data to a memory disclosure vulnerability in a buffer outside our control. This commit adds a call to mbedtls_setbuf() after each call to fopen(), but only in sample programs that were calling mbedtls_platform_zeroize(). Don't bother protecting stdio buffers in programs where application buffers weren't protected. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-30 17:06:11 +02:00
Jerry Yu	cc5391048e	fix various issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:18:30 +08:00
Jerry Yu	202919c23d	refine supported sig alg print Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:18:29 +08:00
Jerry Yu	64f410c246	Add tls13 sig alg parameters Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:16:09 +08:00
Jerry Yu	a1255e6b8c	fix various issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:16:09 +08:00
Jerry Yu	9bb3ee436b	Revert rsa_pss_rsae_* support for tls12 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:16:08 +08:00
Jerry Yu	3896ac6e5b	fix ordered sig algs fail for openssl Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:16:06 +08:00
Jerry Yu	9f4cc5ff65	Add pss_rsae sig algs into test conf Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:13:41 +08:00
Glenn Strauss	bd10c4e2af	Test accessors to config DN hints for cert request Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>	2022-06-29 02:54:28 -04:00
Gilles Peskine	0ff241a1ea	Remove largely useless bit of test log to silence GCC 12 GCC 12 emits a warning because it thinks `buffer1` is used after having been freed. The code is correct C because we're only using the value of `(uintptr_t)buffer1`, not `buffer1`. However, we aren't using the value for anything useful: it doesn't really matter if an alloc-free-alloc sequence returns the same address twice. So don't print that bit of information, and this way we don't need to save the old address. Fixes #5974. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-25 14:29:23 +02:00
Ronald Cron	ba65fbbe30	Fix comments Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-22 17:36:12 +02:00
Ronald Cron	903c979376	programs: ssl: Add one RSA PSS signature algorithm Add one RSA PSS signature algorithm to the test list of signature algorithms. This allows certificate chains exposing an RSA key with signatures using SHA-1 to be used in tests where an TLS 1.3 handshake is performed. Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-17 08:45:30 +02:00
Ronald Cron	4ccd226cbf	Merge pull request #5864 from xkqian/tls13_add_comprehensive_cases Tls13 add comprehensive cases	2022-06-15 09:18:11 +02:00
Gilles Peskine	f940693960	Merge pull request #5725 from tom-daubney-arm/x25519_program Rewrite x25519 example program	2022-05-31 11:27:22 +02:00
XiaokangQian	d5d5b60c07	Add comprehensive test cases for TLS1.3 server side Change-Id: I544cb12b3ffe5edd7d59fa54342ca7db5b5c8a2a Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>	2022-05-31 02:51:26 +00:00
Thomas Daubney	413550c529	Change memcmp call Previous call used sizeof() function which is not needed. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-05-23 16:11:31 +01:00
Pol Henarejos	7dbd5d1760	Add self tests (taken from #1549 ). Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>	2022-05-20 20:42:33 +02:00
Pol Henarejos	ebb3640ada	Added SHA3 to benchmark. Taken from #1549, as it is closed. Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>	2022-05-20 20:07:40 +02:00
Thomas Daubney	70c0088239	Change use of olen variables Removed olen variable in favour of storing olens for client and server separately. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-05-20 18:46:10 +01:00
bootstrap-prime	6dbbf44d78	Fix typos in documentation and constants with typo finding tool Signed-off-by: bootstrap-prime <bootstrap.prime@gmail.com>	2022-05-18 14:15:33 -04:00
Thomas Daubney	306a89094a	Add additional error checking Initialise client and server secret buffers and check their lengths. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-05-18 15:26:39 +01:00
Thomas Daubney	ec2ec42828	Fix formatting Line up function parameters. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-05-18 10:23:20 +01:00
Thomas Daubney	64042b8d3d	Fix typo Fix typo that was caught during review. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-05-18 09:59:55 +01:00
Dave Rodgman	d87e46f3de	Merge pull request #3641 from okhowang/c99 Pass c99 to compiler	2022-05-12 14:01:10 +01:00
Manuel Pégourié-Gonnard	9bc53a2e84	Merge pull request #5806 from josesimoes/fix-3031 Remove prompt to exit in all programs	2022-05-12 10:50:31 +02:00
Andrzej Kurek	5c65c5781f	Fix additional misspellings found by codespell Remaining hits seem to be hex data, certificates, and other miscellaneous exceptions. List generated by running codespell -w -L keypair,Keypair,KeyPair,keyPair,ciph,nd Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-05-11 21:25:54 +01:00
Shaun Case	8b0ecbccf4	Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. Signed-off-by: Shaun Case <warmsocks@gmail.com> Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-05-11 21:25:51 +01:00
Dave Rodgman	faef649dec	Fix Ubuntu compile error in udp_proxy.c Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-05-11 19:55:45 +01:00
josesimoes	23419560c9	Remove prompt to exit in all programs Signed-off-by: José Simões <jose.simoes@eclo.solutions>	2022-05-06 17:11:22 +01:00
Przemek Stekiel	cb20d202d2	Further code optimization - key_opaque_set_alg_usage(): set alg/usage in loop - key_opaque_set_alg_usage(): add key paramteter to set default alg/usage if it is not specified by command line parameters - unify default alg/usage for client and server - optimize opaque code on client and server side Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-06 09:34:30 +02:00
Przemek Stekiel	296bfba924	ssl_server2: add key_opaque_algs2 usage info Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 11:08:34 +02:00
Przemek Stekiel	1d25e076f3	ssl_client2: fix default key opaque algs Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 11:05:10 +02:00
Przemek Stekiel	488efa05b6	Fix compiler warnings: initialize local variables: psa_alg, psa_alg2, psa_usage Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	134eb8b6e2	Fix style Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	092128324f	ssl_client2/ss_server2: optimize code for opaque key Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	76a41f5a52	ssl_test_lib: fix compilation flags for default config Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	e5e9ba920f	ssl_server2: refactor opaque code Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	89132a6ab0	Fix call to mbedtls_pk_wrap_as_opaque(): use usage variable instead PSA_KEY_USAGE_SIGN_HASH Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	b58c47a666	ssl_server2: use key opaque algs given from command line Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	344c561292	ssl_server2: Add support for key_opaque_algs2 command line paramtere Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	a17b5c6ba2	ssl_client: use key opaque algs given from command line Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	01396a16da	ssl_test_lib: add function translate given opaque algoritms to psa Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	77fc9ab1ba	Fix typos and code style Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	4ca0d72c3b	ssl server: add key_opaque_algs command line option Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	f1822febc4	ssl client: add key_opaque_algs command line option Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Przemek Stekiel	85d692d1c4	ssl client/server: add parsing function for key_opaque_algs command line option Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-05 10:17:01 +02:00
Manuel Pégourié-Gonnard	068a13d909	Merge pull request #5771 from superna9999/5761-rsa-decrypt-rework-pk-wrap-as-opaque RSA decrypt 0: Rework `mbedtls_pk_wrap_as_opaque()`	2022-05-02 09:06:49 +02:00
Manuel Pégourié-Gonnard	67397fa4fd	Merge pull request #5704 from mprse/mixed_psk_2cx Mixed PSK 2a, 2b, 2c: enable client/server support opaque RSA-PSK, ECDHE-PSK, DHE-PSK	2022-04-29 10:47:16 +02:00
Neil Armstrong	94e371af91	Update mbedtls_pk_wrap_as_opaque() usage in SSL client2 & server2 Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-04-28 13:27:59 +02:00
Gilles Peskine	72b99edf31	Merge pull request #5381 from mpg/benchmark-ecc-heap Improve benchmarking of ECC heap usage	2022-04-22 16:43:11 +02:00
Przemek Stekiel	cb322eac6b	Enable support for psa opaque DHE-PSK key exchange on the server side Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-04-22 14:54:33 +02:00
Przemek Stekiel	b293aaa61b	Enable support for psa opaque DHE-PSK key exchange on the client side Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-04-22 14:54:33 +02:00
Przemek Stekiel	14d11b0877	Enable support for psa opaque ECDHE-PSK key exchange on the server side Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-04-22 14:53:55 +02:00
Przemek Stekiel	19b80f8151	Enable support for psa opaque ECDHE-PSK key exchange on the client side Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-04-22 14:52:28 +02:00
Przemek Stekiel	aeb710fec5	Enable support for psa opaque RSA-PSK key exchange on the server side Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-04-22 14:52:28 +02:00
Przemek Stekiel	fc72e428ed	ssl_client2: Enable support for TLS 1.2 RSA-PSK opaque ciphersuite Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-04-22 14:52:27 +02:00
Martin Storsjö	5c1479d04a	Use QueryPerformanceCounter as fallback timer on non-x86 mingw The QueryPerformanceCounter implementation previously was within defined(_MSC_VER), but it works just as well on other Windows toolchains, like mingw. For most common mingw x86 build configurations, one of the earlier inline assembly implementations would end up used, but for non-x86 (arm, aarch64), it would end up falling back on the gettimeofday implementation. This implementation did build successfully (as mingw toolchains do provide gettimeofday, contrary to MSVC), but the header providing gettimeofday, <sys/time.h>, wasn't ever included when building targeting Windows - thus the function was called without a proper declaration. Clang 15 changes such implicit function declarations into a hard error by default, when building in C99 mode (or newer) [1]. (While Clang 15 still is under development, this may still change before it's released, but it's a valid issue in any case.) [1] `7d644e1215` Signed-off-by: Martin Storsjö <martin@martin.st>	2022-04-22 13:12:52 +03:00
Ronald Cron	38b8aa4f63	Merge pull request #5539 from xkqian/add_client_hello_to_server Add client hello into server side	2022-04-22 10:26:00 +02:00
Manuel Pégourié-Gonnard	21f82c7510	Merge pull request #5709 from superna9999/5625-pk-opaque-rsa-tls12 RSA sign 3b: TLS 1.2 integration testing	2022-04-22 10:05:43 +02:00
Gilles Peskine	afbfed9397	Merge pull request #5582 from gilles-peskine-arm/ssl-opt-auto-psk Run ssl-opt.sh in more reduced configurations	2022-04-21 12:03:53 +02:00
XiaokangQian	318dc763a6	Fix test failure issue and update code styles Change-Id: I0b08da1b083abdb19dc383e6f4b210f66659c109 Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>	2022-04-20 09:43:51 +00:00
Paul Elliott	a2da9c7e45	Merge pull request #5631 from gstrauss/enum-tls-vers Unify internal/external TLS protocol version enums	2022-04-19 17:05:26 +01:00
Glenn Strauss	e3af4cb72a	mbedtls_ssl_(read\|write)_version using tls_version remove use of MBEDTLS_SSL_MINOR_VERSION_* remove use of MBEDTLS_SSL_MAJOR_VERSION_* (only remaining use is in tests/suites/test_suite_ssl.data) Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>	2022-04-14 15:40:14 -04:00
Glenn Strauss	60bfe60d0f	mbedtls_ssl_ciphersuite_t min_tls_version,max_tls_version Store the TLS version in tls_version instead of major, minor version num Note: existing application use which accesses the struct member (using MBEDTLS_PRIVATE) is not compatible, as the struct is now smaller. Reduce size of mbedtls_ssl_ciphersuite_t members are defined using integral types instead of enums in order to pack structure and reduce memory usage by internal ciphersuite_definitions[] Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>	2022-04-14 15:40:12 -04:00
Neil Armstrong	f0b1271a42	Support RSA Opaque PK keys in ssl_server2 Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-04-13 10:49:25 +02:00
Thomas Daubney	88fed8e700	Rewrite ecdh_curve25519 program Rewrite the example ECDH x25519 program using the high-level ECDH API. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-04-12 14:37:16 +01:00

... 7 8 9 10 11 ...

2993 Commits