coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,503 Commits 183 Branches 286 Tags 220 MiB
Commit Graph

34503 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ben Taylor
351419f1ff Correct changelog style 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ben Taylor
84966c1bda Add further testing 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ben Taylor
6443590448 Update ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ben Taylor
4e797c14e0 Update ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ben Taylor
62162e6e4d Fix style issues 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ben Taylor
f60f5ba85c Remove redundant function from pkcs7_parse_reuse 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ben Taylor
e9ec4ce3ca Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ben Taylor
67e696b430 Add fix for stale pointer after mbedtls_pkcs7_free 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-15 13:27:02 +01:00
Ronald Cron
5ca2218a28
Merge pull request #1589 from gilles-peskine-arm/ssl_tls13_prepare_new_session_ticket-psa_get_random-4.1 
Fix ssl_tls13_prepare_new_session_ticket returning 1 on an RNG failure
 2026-05-29 16:20:27 +02:00
Ronald Cron
05bd7f6429
Merge pull request #1612 from valeriosetti/issue1569 
[development] TLS 1.3 certificate chain signature algorithm policy gap
 2026-05-29 13:35:32 +02:00
Gilles Peskine
b05434c1b1 Improve changelog wording 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-05-28 16:32:35 +02:00
Valerio Setti
147ad72669 changelog: fix typos 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-05-19 12:37:30 +02:00
Valerio Setti
c53e78796a changelog: add note about issue 1569 resolution 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-05-18 11:08:23 +02:00
Valerio Setti
a3ae8be611 ssl: improve documentation of mbedtls_ssl_conf_sig_algs() 
Clarify that the 'sig_algs' set through this function are only enforced
during the key exchange and that 'mbedtls_ssl_conf_cert_profile()' should
instead be used to enforce the same algorithms when verifying certificates.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-05-18 11:04:59 +02:00
Manuel Pégourié-Gonnard
4a1d150cdf
Merge pull request #1600 from mpg/development-restricted 
Merge public development into -restricted
 2026-05-12 08:59:49 +02:00
Manuel Pégourié-Gonnard
00dfa64627 Merge branch 'development' into development-restricted 
* development: (46 commits)
  Update tf-psa-crypto pointer to bring in fix for python imports
  Update framework pointer to bring in fix for python imports
  check_config: fix error message for missing TLS 1.2 key exchanges
  check_config: add check for TLS 1.3 key exchanges
  update ChangeLog
  Pacify uncrustify
  ChangeLog: Fixed a reference to TF-PSA-Crypto
  ssl: add TLS 1.2 RSA-PSS debug trace
  add ChangeLog
  Fix build warning/error using llvm-mingw
  ssl: narrow TLS 1.2 RSA-PSS handling and add interop coverage
  test: improve symlink checks
  test: versioned symlink order fix
  test: reorder if-else structure
  test: add debug output and fix for win config
  ChangeLog fix
  Unify TF-PSA-Crypto and mbedtls templates
  tests: fix DESTDIR install checks and add macOS compatibility
  ChangeLog fixes
  Update crypto submodule with analyze_outcomes.py
  ...
 2026-05-11 12:04:15 +02:00
Manuel Pégourié-Gonnard
902b012537
Merge pull request #10749 from bjwtaylor/broken-build 
Update framework pointer to bring in fix for python imports
 2026-05-07 19:13:19 +00:00
Ben Taylor
954e236500 Update tf-psa-crypto pointer to bring in fix for python imports 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-05-07 14:17:54 +01:00
Ben Taylor
02fb4c75cb Update framework pointer to bring in fix for python imports 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-05-07 08:14:43 +01:00
Gilles Peskine
465d6e9669 Fix ssl_tls13_prepare_new_session_ticket returning 1 on an RNG failure 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-05-04 18:44:05 +02:00
minosgalanakis
d12fbb991c
Merge pull request #10695 from valord577/patch-1 
Fix build warning/error using llvm-mingw
 2026-04-29 14:52:00 +00:00
Gilles Peskine
a314ada082
Merge pull request #10631 from yiwu0b11/destdir_install_env_support 
Support DESTDIR for install and add build-system test
 2026-04-29 14:37:29 +00:00
Valerio Setti
ae8579f2a2
Merge pull request #10650 from valeriosetti/fix-tls13-guard 
check_config: add missing check for TLS 1.3 key exchanges
 2026-04-24 14:32:36 +00:00
Valerio Setti
51b62060de
Merge pull request #10639 from valeriosetti/ecdhe-rsa-fix-check 
library: check_config: remove RSA encryption requirement from ECDHE-RSA
 2026-04-24 07:30:47 +00:00
Valerio Setti
c3d52b905b check_config: fix error message for missing TLS 1.2 key exchanges 
Align the error message to the one used for the same check in TLS 1.3.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-22 15:00:55 +02:00
Valerio Setti
5ea77200d9 check_config: add check for TLS 1.3 key exchanges 
When MBEDTLS_SSL_PROTO_TLS1_3 is enabled ensure that at least one of the
related key exchanges is also enabled.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-22 15:00:54 +02:00
valord577
68319cbc80 update ChangeLog 
Signed-off-by: valord577 <valord577@gmail.com>
 2026-04-22 11:05:04 +08:00
valord577
e022733f9f
Merge branch 'Mbed-TLS:development' into patch-1 2026-04-22 10:41:51 +08:00
Ronald Cron
391af7c976
Merge pull request #10701 from minosgalanakis/docs/4.1.0_changelog_fixes 
ChangeLog: Fixed a reference to TF-PSA-Crypto
 2026-04-20 09:38:38 +00:00
Ronald Cron
518ed0337d
Merge pull request #10672 from Maokaman1/fix/tls12-rsa-pss-sigalgs 
ssl: accept TLS 1.2 rsa_pss_rsae signature algorithms
 2026-04-20 08:03:39 +00:00
Viktor Sokolovskiy
f90e81c7f8 Pacify uncrustify 
Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>
 2026-04-18 01:51:17 +03:00
Maokaman1
78336bb5bd
Merge branch 'Mbed-TLS:development' into fix/tls12-rsa-pss-sigalgs 2026-04-17 19:13:43 +03:00
Minos Galanakis
935eb1a53b ChangeLog: Fixed a reference to TF-PSA-Crypto 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-04-17 16:59:05 +01:00
Viktor Sokolovskiy
3d61c38ea0 ssl: add TLS 1.2 RSA-PSS debug trace 
Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>
 2026-04-17 17:36:31 +03:00
valord577
37b81f13c7 add ChangeLog 
Signed-off-by: valord577 <valord577@gmail.com>
 2026-04-16 15:17:32 +08:00
valord577
a3d3ede9d6
Fix build warning/error using llvm-mingw 
error logs refs: https://github.com/valord577/nativepkgs/actions/runs/24490614774/job/71574726128

Signed-off-by: valord577 <valord577@gmail.com>
 2026-04-16 14:31:55 +08:00
Viktor Sokolovskiy
2168fe9cda ssl: narrow TLS 1.2 RSA-PSS handling and add interop coverage 
Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>
 2026-04-16 04:36:48 +03:00
Yi Wu
970df30a8f test: improve symlink checks 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-15 12:13:09 +01:00
Gilles Peskine
8426c9bc51
Merge pull request #10684 from gilles-peskine-arm/maintainer-scripts-create-directory-dev 
development: Create a directory for maintainer-only Python scripts
 2026-04-15 08:19:36 +00:00
Gilles Peskine
8bf89416cf
Merge pull request #10647 from gilles-peskine-arm/github-pr-template-add-4.1-mbedtls 
Add 1.1 line to the PR template
 2026-04-15 08:17:24 +00:00
Yi Wu
0c02d74a48 test: versioned symlink order fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-14 11:06:16 +01:00
Yi Wu
f38b17e7a0 test: reorder if-else structure 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-14 10:12:44 +01:00
Yi Wu
331ad77fe2 test: add debug output and fix for win config 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-13 15:13:52 +01:00
Yi Wu
6fb557c31a ChangeLog fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-13 15:00:44 +01:00
Gilles Peskine
6b31bc6885 Unify TF-PSA-Crypto and mbedtls templates 
Following the team discussion, don't suggest "prerequisite" or "consuming"
in the template. Suggest linking all the pull requests in a group
everywhere.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-04-13 14:57:07 +02:00
Yi Wu
e9e0409b11 tests: fix DESTDIR install checks and add macOS compatibility 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-13 12:48:01 +01:00
Yi Wu
15be9e9048 ChangeLog fixes 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-13 12:12:24 +01:00
Gilles Peskine
2a7d1ece77
Merge pull request #10676 from gilles-peskine-arm/analyze_outcomes-read_crypto 
Let TF-PSA-Crypto define test cases that Mbed TLS does not need to cover
 2026-04-13 09:24:21 +00:00
Gilles Peskine
cc134b0b94 Update crypto submodule with analyze_outcomes.py 
Update framework to match.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-04-10 14:49:14 +02:00
Yi Wu
f14f28ce75 ChangeLog padding space fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-10 10:27:09 +01:00