coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,522 Commits 183 Branches 286 Tags 220 MiB
Commit Graph

34522 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ben Taylor
8edc147cae Add additional clarification to the empty digest changelog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-08 10:02:47 +01:00
Ben Taylor
5114edbf2a Relocate PKCS7 Signed Hash Verification Fail empty digestAlgorithms to a more logical location 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:24:42 +01:00
Ben Taylor
dadca0ab87 Update the PSA_WANT_ALG_SHA_256 to PSA_WANT_ALG_SHA_256 in the uinsupported algorithm test 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:23:21 +01:00
Ben Taylor
15d4fd7b76 Remove duplicate test 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:21:44 +01:00
Ben Taylor
b3d68d088d Amend description of tests to remove reference to PKCS11 and remove dependencies 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:16:32 +01:00
Ben Taylor
b7a62b4536 Add modification to pkcs7_get_signer_info to continue with empty digestAlgorithms, leaving the failure to be dtected by the verify 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-01 11:50:26 +01:00
Ben Taylor
0e322242d8 Add two more tests for mbedtls_pkcs7_signed_data_verify() and mbedtls_pkcs7_signed_hash_verify() 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 15:28:55 +01:00
Ben Taylor
832dfebb4e Add test for unsupported DigestAlgorithmSet passed to mbedtls_pkcs7_parse_der 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 15:11:24 +01:00
Ben Taylor
1fffed8d56 Added additional guard for PSA_WANT_ALG_SHA_256 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
7e2e9e7b0d Fix code style 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
23338f8380 Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
fb3f1758b0 Add test to verify how mbedtls_pkcs7_signed_data_verify and mbedtls_pkcs7_signed_hash_verify deals with a empty digest algorithm 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
dd015dc85b Add test for unsupported algorithm 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
e23a57ad43 Add fix for empty digestAlgorithm 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
d3b10844ef Add additional test for empty digest error bug 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ronald Cron
05e0dfbe99
Merge pull request #10786 from minosgalanakis/mbedtls-release-sync 
Mbedtls 4.2.0 release sync
 2026-06-25 12:16:45 +00:00
Minos Galanakis
66e3648745 Updated tf-psa-crypto pointer 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-25 00:50:42 +01:00
Minos Galanakis
0aaa58b438 Updated framework pointer 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-25 00:50:26 +01:00
Gilles Peskine
1a4f04b0c4
Merge pull request #10788 from bensze01/readthedocs 
Upgrade readthedocs builder to Ubuntu 26.04
 2026-06-24 18:18:42 +00:00
Bence Szépkúti
98413e8b70 Upgrade readthedocs builder to Ubuntu 26.04 
The 20.04 runner is no longer supported.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2026-06-24 16:43:16 +02:00
Ronald Cron
45ad2fc5ee
Merge pull request #10715 from Nadav0077/harden-tls13-session-load 
Harden TLS 1.3 serialized session loading
 2026-06-18 10:36:47 +00:00
Ronald Cron
5cd633798c
Merge pull request #10769 from mpg/security-link-dev 
Update broken link in SECURITY.md
 2026-06-05 15:44:33 +00:00
Manuel Pégourié-Gonnard
af15f6e244 Update broken link 
I believe the existing link was to the TF wiki which has been retired
for some time now.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-06-03 10:33:29 +02:00
Janos Follath
545d1b77a2
Merge pull request #10741 from valeriosetti/fix-mbedtls_config 
mbedtls_config.c missing mbedtls_platform_requirements.h
 2026-05-26 09:24:54 +00:00
Nadav0077
fc34e72fc2
Address review: symbolic mutation constants and CID bounds-check test 
Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>
 2026-05-21 13:58:17 +03:00
Nadav0077
72f767da31
Address review comments on serialized data hardening 
Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>
 2026-05-19 14:15:02 +03:00
Nadav0077
fea00c3e51
Reject out-of-bounds DTLS CID length in ssl_context_load 
Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>
 2026-05-19 14:15:01 +03:00
minosgalanakis
701132e5b3
Merge pull request #10663 from yiwu0b11/remove_unused_ffdh_code 
Remove FFDH-specific code from compat.sh
 2026-05-13 16:49:20 +00:00
Nadav0077
3f972d014d
Use block-local ret to avoid unused-variable in restricted configs 
Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>
 2026-05-12 19:32:50 +03:00
Ronald Cron
00be9c9b67
Merge pull request #10700 from gilles-peskine-arm/python-project-knowledge-directory-mbedtls-dev 
Create Python project knowledge directory
 2026-05-12 13:38:23 +00:00
Manuel Pégourié-Gonnard
902b012537
Merge pull request #10749 from bjwtaylor/broken-build 
Update framework pointer to bring in fix for python imports
 2026-05-07 19:13:19 +00:00
Ben Taylor
954e236500 Update tf-psa-crypto pointer to bring in fix for python imports 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-05-07 14:17:54 +01:00
Ben Taylor
02fb4c75cb Update framework pointer to bring in fix for python imports 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-05-07 08:14:43 +01:00
Valerio Setti
cd8b3878c5 changelog: add note about fix of issue 10740 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-29 17:05:51 +02:00
Valerio Setti
b155a58ab5 include mbedtls_platform_requirements.h in mbedtls_config.c 
This is required because if the user defined configuration file (not the
default one provided by mbedtls) includes files from the standard
C library then __STDC_WANT_LIB_EXT1__ won't be defined there which
cause weird build failures.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-29 16:57:55 +02:00
minosgalanakis
d12fbb991c
Merge pull request #10695 from valord577/patch-1 
Fix build warning/error using llvm-mingw
 2026-04-29 14:52:00 +00:00
Gilles Peskine
a314ada082
Merge pull request #10631 from yiwu0b11/destdir_install_env_support 
Support DESTDIR for install and add build-system test
 2026-04-29 14:37:29 +00:00
Nadav0077
3ab4fce1a0
Harden TLS 1.3 serialized session loading 
Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>
 2026-04-25 15:19:30 +03:00
Valerio Setti
ae8579f2a2
Merge pull request #10650 from valeriosetti/fix-tls13-guard 
check_config: add missing check for TLS 1.3 key exchanges
 2026-04-24 14:32:36 +00:00
Valerio Setti
51b62060de
Merge pull request #10639 from valeriosetti/ecdhe-rsa-fix-check 
library: check_config: remove RSA encryption requirement from ECDHE-RSA
 2026-04-24 07:30:47 +00:00
Gilles Peskine
52ca15362b Update comment 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-04-22 17:38:48 +02:00
Valerio Setti
c3d52b905b check_config: fix error message for missing TLS 1.2 key exchanges 
Align the error message to the one used for the same check in TLS 1.3.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-22 15:00:55 +02:00
Valerio Setti
5ea77200d9 check_config: add check for TLS 1.3 key exchanges 
When MBEDTLS_SSL_PROTO_TLS1_3 is enabled ensure that at least one of the
related key exchanges is also enabled.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-22 15:00:54 +02:00
valord577
68319cbc80 update ChangeLog 
Signed-off-by: valord577 <valord577@gmail.com>
 2026-04-22 11:05:04 +08:00
valord577
e022733f9f
Merge branch 'Mbed-TLS:development' into patch-1 2026-04-22 10:41:51 +08:00
Ronald Cron
391af7c976
Merge pull request #10701 from minosgalanakis/docs/4.1.0_changelog_fixes 
ChangeLog: Fixed a reference to TF-PSA-Crypto
 2026-04-20 09:38:38 +00:00
Ronald Cron
518ed0337d
Merge pull request #10672 from Maokaman1/fix/tls12-rsa-pss-sigalgs 
ssl: accept TLS 1.2 rsa_pss_rsae signature algorithms
 2026-04-20 08:03:39 +00:00
Viktor Sokolovskiy
f90e81c7f8 Pacify uncrustify 
Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>
 2026-04-18 01:51:17 +03:00
Maokaman1
78336bb5bd
Merge branch 'Mbed-TLS:development' into fix/tls12-rsa-pss-sigalgs 2026-04-17 19:13:43 +03:00
Minos Galanakis
935eb1a53b ChangeLog: Fixed a reference to TF-PSA-Crypto 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-04-17 16:59:05 +01:00