coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-28 18:07:34 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,497 Commits 183 Branches 286 Tags Multiple Licenses 206 MiB
Commit Graph

34497 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ben Taylor
8fa7e89fc5 Add fix for -DENABLE_PROGRAMS=OFF build error 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-02 13:33:22 +01:00
Valerio Setti
7357e4df87
Merge pull request #10770 from bjwtaylor/unused-variable-ret-4.1 
Backport 4.1: Fix variable set but not used warning
 2026-07-01 08:35:49 +00:00
Ronald Cron
cc5f7bc061
Merge pull request #10785 from minosgalanakis/mbedtls-4.1-release-sync 
Mbedtls 4.1.1 release sync
 2026-06-25 12:09:50 +00:00
Minos Galanakis
caad5d95e5 Updated tf-psa-crypto pointer 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-25 00:53:15 +01:00
Minos Galanakis
f43bdae2d2 Updated framework pointer 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-25 00:52:36 +01:00
Gilles Peskine
fe4733b1de
Merge pull request #10790 from bensze01/readthedocs-4.1 
[Backport 4.1] Upgrade readthedocs builder to Ubuntu 26.04
 2026-06-24 18:48:16 +00:00
Bence Szépkúti
a493f22738 Upgrade readthedocs builder to Ubuntu 26.04 
The 20.04 runner is no longer supported.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2026-06-24 17:02:37 +02:00
Gilles Peskine
e106d8ad1c
Merge pull request #10761 from Nadav0077/harden-serialized-load-4.1 
Backport to 4.1: harden serialized data deserialization
 2026-06-19 20:18:03 +00:00
Ronald Cron
6b175d2404
Merge pull request #10771 from mpg/security-link-4.1 
[4.1] Update broken link in SECURITY.md
 2026-06-05 16:49:28 +00:00
Manuel Pégourié-Gonnard
a982231904 Update broken link 
I believe the existing link was to the TF wiki which has been retired
for some time now.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2026-06-05 12:28:01 +02:00
Ben Taylor
fd5b76b8db Add ret return pattern to avoid variable ret was set but never used warning 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-04 14:07:58 +01:00
Janos Follath
a4f79350ac
Merge pull request #10742 from valeriosetti/backport-pr10741 
[backport 4.1] mbedtls_config.c missing mbedtls_platform_requirements.h
 2026-05-26 09:24:50 +00:00
Nadav0077
e0a83c328d
Harden serialized data deserialization 
Reject malformed TLS 1.3 serialized sessions instead of accepting
unterminated strings or extra trailing data, and reject serialized SSL
contexts whose DTLS Connection ID length exceeds the maximum supported
size instead of overflowing the internal buffer.

Backport of #10715 (development).

Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>
 2026-05-22 13:07:17 +03:00
minosgalanakis
e862725edd
Merge pull request #10709 from yiwu0b11/remove_unused_ffdh_code-4.1 
Backport 4.1: tests: remove remaining FFDH code in compat.sh
 2026-05-13 16:49:07 +00:00
Ronald Cron
123216ea40
Merge pull request #10751 from gilles-peskine-arm/python-project-knowledge-directory-mbedtls-4.1 
Backport 4.1: Create Python project knowledge directory
 2026-05-12 13:38:11 +00:00
Manuel Pégourié-Gonnard
10ff2fc1d9
Merge pull request #10750 from bjwtaylor/broken-build-1.1 
Update framework pointer to bring in fix for python imports
 2026-05-11 10:50:47 +00:00
Gilles Peskine
4f149ffc02 Update comment 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-05-08 18:00:45 +02:00
Gilles Peskine
c7b1c86e6b Prefer to load tf_psa_crypto_test_case_info from project_knowledge 
Try to load the list of tests that TF-PSA-Crypto wants us to ignore in three
ways, depending on the age of the tf-psa-crypto submodule:

* Modern: import `tf_psa_crypto_test_case_info` as an ordinary module,
  expected to be found in `tf-psa-crypto/scripts/project_knowledge`.
* First location, quickly superseded: load
  `tf-psa-crypto/tests/scripts/tf_psa_crypto_test_case_info.py`,
  in a hackish way because we don't want to put that directory on the
  load path.
* Oldest: there is no `tf_psa_crypto_test_case_info.py`. Use a hard-coded
  list.

Once all the TF-PSA-Crypto branches we care about (e.g. pull requests
in progress) are updated with
`tf-psa-crypto/scripts/project_knowledge/tf_psa_crypto_test_case_info.py`,
we can drop the backward compatibilty hacks and simply
`import tf_psa_crypto_test_case_info` unconditionally and use
`tf_psa_crypto_test_case_info.INTERNAL_TEST_CASES` unconditionally.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-05-08 18:00:45 +02:00
Gilles Peskine
da2b5d6f42 Add tf-psa-crypto/scripts/project_knowledge to Python load path 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-05-08 18:00:45 +02:00
Ben Taylor
e18c52e93d Update framework pointer to bring in fix for python imports 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-05-08 11:01:05 +01:00
Ben Taylor
ce8c6708dd Update tf-psa-crypto to bring in python fix 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-05-08 11:00:50 +01:00
Valerio Setti
cfb07a923d changelog: add note about fix of issue 10740 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-29 17:10:04 +02:00
Valerio Setti
23538fd562 include mbedtls_platform_requirements.h in mbedtls_config.c 
This is required because if the user defined configuration file (not the
default one provided by mbedtls) includes files from the standard
C library then __STDC_WANT_LIB_EXT1__ won't be defined there which
cause weird build failures.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-29 17:10:04 +02:00
minosgalanakis
8f8b35b41c
Merge pull request #10711 from valord577/patch-1-backport-v4 
[backport 4.1 #10695] Fix build warning/error using llvm-mingw
 2026-04-29 14:52:04 +00:00
Gilles Peskine
ded271a8c4
Merge pull request #10696 from yiwu0b11/destdir_install_env_support-4.1 
Backport 4.1: Support DESTDIR for install and add build-system test
 2026-04-29 14:37:40 +00:00
Valerio Setti
5875ffa6fc
Merge pull request #10713 from valeriosetti/backport-pr10650 
[backport 4.1] check_config: add missing check for TLS 1.3 key exchanges
 2026-04-24 14:32:42 +00:00
Valerio Setti
b4df7bb14d
Merge pull request #10712 from valeriosetti/backport-pr10639 
[backport 4.1] library: check_config: remove RSA encryption requirement from ECDHE-RSA
 2026-04-24 07:30:58 +00:00
Valerio Setti
f2ab107392 check_config: fix error message for missing TLS 1.2 key exchanges 
Align the error message to the one used for the same check in TLS 1.3.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-23 14:51:52 +02:00
Valerio Setti
1caa7db5e8 check_config: add check for TLS 1.3 key exchanges 
When MBEDTLS_SSL_PROTO_TLS1_3 is enabled ensure that at least one of the
related key exchanges is also enabled.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-23 14:51:48 +02:00
Valerio Setti
377cbb2055 tests: depends.py: extend pkalgs including PSA_WANT_ALG_RSA_PKCS1V15_SIGN 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-22 17:17:41 +02:00
Valerio Setti
9d4447fdc5 tests: depends.py: fix reverse dependency for RSA 
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-22 17:17:41 +02:00
Valerio Setti
2882b73697 library: check_config: remove RSA encryption requirement from ECDHE-RSA 
ECDHE-RSA only requires RSA signature, not encryption. This commits fixes
guards in "mbedtls_check_config.h".

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-04-22 17:17:41 +02:00
valord577
fce010911c update ChangeLog 
Signed-off-by: valord577 <valord577@gmail.com>
 2026-04-22 11:09:29 +08:00
valord577
3bf4af0838 add ChangeLog 
Signed-off-by: valord577 <valord577@gmail.com>
 2026-04-22 11:09:21 +08:00
valord577
fb43ea9278 Fix build warning/error using llvm-mingw 
error logs refs: https://github.com/valord577/nativepkgs/actions/runs/24490614774/job/71574726128

Signed-off-by: valord577 <valord577@gmail.com>
 2026-04-22 11:09:16 +08:00
Yi Wu
c7b630ffa1 tests: remove remaining FFDH code in compat.sh 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-21 10:33:54 +01:00
Ronald Cron
6a5e0139f8
Merge pull request #10703 from minosgalanakis/docs/4.1.0_changelog_fixes_bp 
ChangeLog 4.1 Fixed references to TF-PSA-Crypto
 2026-04-20 09:49:28 +00:00
Yi Wu
7c63e641e3 test: improve symlink checks 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
6c63f39eeb test: versioned symlink order fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
5bddf62a69 test: reorder if-else structure 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
9d88e0b200 test: add debug output and fix for win config 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
0dc58e196d ChangeLog fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
ee0f8cbc11 tests: fix DESTDIR install checks and add macOS compatibility 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
f645b06c38 ChangeLog fixes 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
9ffdbe5bf3 ChangeLog padding space fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
291fb02523 Test: add symlinks and dangling link check 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
ff66c4efb9 ChangeLog fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
f2d35a04ed ChangeLog newline fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
c839d60443 Add changelog 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00
Yi Wu
897daf3ea1 Support DESTDIR for install and add build-system test 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 10:48:29 +01:00