34195 Commits

Author SHA1 Message Date
Ben Taylor
f21e63c6d0 Update pk_alg to use mbedtls_pk_sigalg_t and remove casts in library/x509write_csr.c
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 15:29:02 +00:00
Ben Taylor
00b04a6590 Update mbedtls_pk_sign_ext in x509write_crt.c to use mbedtls_pk_sigalg_t directly and remove casts
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 15:11:09 +00:00
Ben Taylor
5f037c7fb3 Rename mbedtls_ssl_pk_alg_from_sig to mbedtls_ssl_pk_alg_from_sig_pk_alg and update to use mbedtls_pk_sigalg_t
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 14:59:24 +00:00
Ben Taylor
0035cfb1f0 Removed unnecessary cast in mbedtls_pk_sign_ext
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 13:42:56 +00:00
Ben Taylor
4565d5d4e6 Change the call to mbedtls_pk_verify_ext in pkcs7 to have a variable input cert->sig_pk
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-30 13:37:09 +00:00
Minos Galanakis
a2cba40df6 prepare_release.sh: modify submodule files recursively
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-30 10:00:22 +00:00
Minos Galanakis
bdb1dcbdb6 prepare_release.sh: simplified regex
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-30 10:00:22 +00:00
Minos Galanakis
958d9d97a4 prepare_release.sh: Added documentation
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-30 09:58:17 +00:00
minosgalanakis
32b597bd31
Merge pull request #10469 from Begasus/includedir
Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation
2025-10-29 15:21:32 +00:00
Jan Wille
64e7d4b64b format: apply suggestions (add spaces)
Signed-off-by: Jan Wille <jan.wille@siemens.com>
2025-10-29 15:49:10 +01:00
Gilles Peskine
574aae2146 Fix duplication of product version in CMakeLists.txt
The CMake package version definition had its own line with a copy of the
version number since 2.27.0. Until recently, `bump_version.sh` updated both
copies, and that was still the case when we bumped the version to 4.0.0
(7ba04a298cc648255b820d9b5ad184528a6ea5ca). However, since then, we changed
the format of the product version definition
(879cba1a67d01317422870ff736057ca2d23247f), and after that,
`bump_version.sh` would only have updated the product version, not the CMake
package version.

TF-PSA-Crypto 1.0.0 has the same problem, and there we did ship with an
outdated CMake package version:
https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/553

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-29 12:31:57 +01:00
Jan Spannberger
a5384bdf09 add cast to fix IAR compiler errors
IAR throws a warning "mixed ENUM with other type"

Signed-off-by: Jan Spannberger <jan.spannberger@siemens.com>
2025-10-28 15:13:08 +01:00
Ben Taylor
bc076f9f76 fix style isses
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
a2de40a100 Change the return type of mbedtls_ssl_get_ciphersuite_sig_pk_alg to mbedtls_pk_sigalg_t
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
4b4ca812e5 Corrected debug return
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
10d471a14d Correct debug return
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
b190c1bb0b Replace change to restartable with ext
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
1b32994bef Fix style issues
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
2c056721d1 Tidy up debug of non ext functions
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
cef9d2d31f Revert change to mbedtls_pk_{sign,verify}_restartable and replace with ext version
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
5e23093285 Fix code style issues
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
c3e2b37530 Remove mbedtls_ssl_write_handshake_msg as it now replaced by mbedtls_ssl_write_handshake_msg_ext
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
279dd4ab59 Remove dependencies on mbedtls_pk_verify
Replace mbedtls_pk_verify with mbedtls_pk_verify_restartable, as mbedtls_pk_verify has now been
removed and was origonally a pass through call to mbedtls_pk_verify_restartable.

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Ben Taylor
94f1628aca Remove dependencies on mbedtls_pk_sign
Replace mbedtls_pk_sign with mbedtls_pk_sign_restartable, as mbedtls_pk_sign has now been
removed and was origonally a pass through call to mbedtls_pk_sign_restartable.

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-28 07:58:37 +00:00
Valerio Setti
4624f508d3
Merge pull request #10449 from bjwtaylor/mbedtls.remove-mbedtls_verify_new
Remove uses of mbedtls_pk_verify_new
2025-10-24 14:12:24 +00:00
Luc Schrijvers
ffc2606bf2 Use GNUInstallDirs CMAKE_INSTALL_INCLUDEDDIR path for headers installation
Signed-off-by: Luc Schrijvers <begasus@gmail.com>
2025-10-24 12:50:51 +02:00
Minos Galanakis
c4d4f6b4a1 prepare_release.sh: Removed -r/-u modes
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-22 11:51:39 +01:00
Minos Galanakis
61fdef52a3 prepare_release.sh: Adjusted psed logic.
Fixed double quoting in sed.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-22 11:17:32 +01:00
Minos Galanakis
0b7966649f prepare_release.sh:Removed Makefiles modification
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-21 10:55:27 +01:00
Minos Galanakis
d995a21b6a prepare_release.sh: Adjusted logic
- Introduced a new -r to explicitely request project
  modification for release
- Changed the default behaviour to print_help when invoked
  without arguments

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-21 10:54:17 +01:00
Minos Galanakis
1f95b78310 prepare_release.sh: Limited .gitignore to current project
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-20 16:24:29 +01:00
Minos Galanakis
d0881eda4e prepare_release.sh: Added psed helper function
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-20 16:11:05 +01:00
Manuel Pégourié-Gonnard
b180696e94
Merge pull request #10459 from gilles-peskine-arm/fix-doc-submodule-links
Fix documentation link to submodule that doesn't work on GitHub
2025-10-17 08:28:40 +00:00
Gilles Peskine
58439de2ae Fix documentation link to submodule that doesn't work on GitHub
Fixes #10458

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-16 16:36:02 +02:00
Minos Galanakis
b2878ee402 Updated tf-psa-crypto pointer
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-15 16:59:12 +01:00
Minos Galanakis
2842c33e2c Merge tag 'v4.0.0' into mbedtls-4.0.0_mergeback
Mbed TLS 4.0.0

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-15 16:58:25 +01:00
Minos Galanakis
ec4044008d ChangeLog: Added CVEs
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
v4.0.0 mbedtls-4.0.0
2025-10-13 16:51:48 +01:00
Minos Galanakis
411461a86e Doc: Removed references to beta version
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
38181b6d66 Assemble ChangeLog
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
e5862c0494 Removed Beta Changelog
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Minos Galanakis
21cd2ddb1e Updated tf psa-crypto submodule
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-13 16:51:48 +01:00
Ben Taylor
0ff335d715 Remove uses of mbedtls_pk_verify_new
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
2025-10-13 15:17:44 +01:00
Gilles Peskine
3765e5ca7e
Merge pull request #10438 from bjwtaylor/deprecated-functions
Remove internal deprecated items
2025-10-13 13:35:11 +00:00
Minos Galanakis
65c29f07c7 Updated framework submodule
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:44:26 +01:00
Minos Galanakis
ca4a1a117d Merge remote-tracking branch 'mbedtls4.0.0-documentation' into mbedtls-4.0.0.rc
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:42:39 +01:00
Minos Galanakis
0283fa0656 Merge remote-tracking branch 'restricted/development-restricted' into mbedtls-4.0.0.rc
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-10-11 21:41:49 +01:00
Gilles Peskine
ccd9e294e7
Merge pull request #10446 from gilles-peskine-arm/migration-guide-4.0-consolidate
Consolidate migration guide
2025-10-11 11:56:45 +02:00
Gilles Peskine
fa4e9461bd Add sentence that was in 3.0 and is in TF-PSA-Crypto 1.0
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 17:54:13 +02:00
Gilles Peskine
75a36bd9cd Fix copypasta in title
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 17:45:33 +02:00
Gilles Peskine
d83c476f3b Fix copypasta
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-10-10 16:36:42 +02:00