coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-29 02:17:27 +08:00
Code Issues Packages Projects Releases Wiki Activity
33,194 Commits 183 Branches 286 Tags Multiple Licenses 206 MiB
Commit Graph

3181 Commits

Author SHA1 Message Date
Gilles Peskine
eea0f8c0c1 Clarify that this is the "calling script" 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-09-15 12:04:47 +02:00
Gilles Peskine
32da0ae9c3 Improve docstring following the split 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-09-15 12:04:47 +02:00
Gilles Peskine
22885b6bd9 Import PSA compliance test script entry point from the framework 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-09-15 12:04:47 +02:00
Gilles Peskine
154a78c78b
Merge pull request #10912 from yiwu0b11/cmake-config-3.6 
[Backport 3.6] Cmake custom compile-time config support
 2026-09-01 14:43:32 +00:00
Valerio Setti
e6e01cd4d9
Merge pull request #10586 from gilles-peskine-arm/all.sh-silence-support-failures-3.6 
Backport 3.6: Silence support failures in all.sh
 2026-08-31 14:36:50 +00:00
Yi Wu
7d443f3534 improve test coverage 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-08-21 15:14:20 +01:00
Yi Wu
51a8076902 CMake improvements: relocatable, transformation, and more test 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-08-20 09:10:41 +01:00
Yi Wu
1e8647ff92 CMake: add support for config options 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-08-10 08:58:34 +01:00
Valerio Setti
41ada48936 tests: generate_ssl_session_reset_check: adjust rules for 3.6 branch 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-07-29 11:36:43 +02:00
Valerio Setti
2c35acc231 tests: generate_ssl_session_reset_check: remove trailing whitespace 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-07-29 11:36:27 +02:00
Valerio Setti
eb9fd86745 tests: generate_ssl_session_reset_check: pacify pylint 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-07-29 11:36:27 +02:00
Valerio Setti
96423d43d0 tests: generate_ssl_session_reset_check: order rules as fields in the struct 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-07-29 11:36:27 +02:00
Valerio Setti
d36dedc033 tests: generate_ssl_session_reset_check: add missing semicolon in generated file 
Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-07-29 11:36:27 +02:00
Valerio Setti
066f0f98a8 tests: scripts: add generate_ssl_session_reset_check.py 
Togethere with the framework counterpart ('ssl_session_reset_check.py')
this script is used to automatically generate the function
'mbedtls_test_ssl_check_context_after_session_reset()'.
The goal of this function is to verify that 'mbedtls_ssl_session_reset()'
properly handled (reset or keep) all the fields of the
'mbedtls_ssl_context' structure.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
 2026-07-29 11:36:27 +02:00
Yi Wu
3208173d3d tests: update compressed EC outcome filters 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-05-28 15:10:45 +01:00
Yi Wu
800e7f7928 test: remove tfpsacrypto checks in 3.6 DESTDIR install test 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 17:06:39 +01:00
Yi Wu
3e8625c396 test: improve symlink checks 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 11:07:39 +01:00
Yi Wu
50d85c11c5 test: versioned symlink order fix 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 11:07:39 +01:00
Yi Wu
e7e329e70b test: reorder if-else structure 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 11:07:39 +01:00
Yi Wu
033e44b4c4 test: add debug output and fix for win config 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 11:07:39 +01:00
Yi Wu
a51dc8201c tests: fix DESTDIR install checks and add macOS compatibility 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 11:07:39 +01:00
Yi Wu
909ba26843 Test: add symlinks and dangling link check 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 11:07:39 +01:00
Yi Wu
c283582015 tests: add cmake DESTDIR install test 
Signed-off-by: Yi Wu <yi.wu2@arm.com>
 2026-04-20 11:07:16 +01:00
Gilles Peskine
4a62fdc25a
Merge pull request #10677 from gilles-peskine-arm/analyze_outcomes-uncovered-3.6 
Outcome analysis: rename IGNORED_TESTS to UNCOVERED_TESTS
 2026-04-10 14:51:40 +00:00
Gilles Peskine
87eba69926
Merge pull request #10658 from gilles-peskine-arm/audit_validity_dates-move-to-framework-3.6-actually-remove-scripts 
3.6 only: Move some scripts from mbedtls into the framework redux
 2026-04-09 07:58:45 +00:00
Gilles Peskine
278dbecd97 Rename IGNORED_TESTS to UNCOVERED_TESTS 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-04-07 11:05:44 +02:00
Minos Galanakis
2d3fdb6608 Merge tag 'mbedtls-3.6.6' into mbedtls-3.6.6_mergeback 
Mbed TLS mbedtls-3.6.6

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-03-31 15:36:51 +01:00
Gilles Peskine
deba38fac0 Move some scripts from mbedtls into the framework 
Move a bunch of files from `scripts` and `mbedtls/scripts` to the framework.
Most are not called from any scripts invoked by the CI, but a couple are.
A subsequent commit will adapt the scripts. None of these scripts are
referenced from other repositories except in documentation.

The following files will be removed, and added to `mbedtls-framework`:

* `scripts/ecp_comb_table.py`
* `scripts/massif_max.pl`
* `tests/scripts/audit-validity-dates.py` (moved to `scripts/`)
* `tests/scripts/gen_ctr_drbg.pl` (moved to `scripts/`)
* `tests/scripts/gen_gcm_decrypt.pl` (moved to `scripts/`)
* `tests/scripts/gen_gcm_encrypt.pl` (moved to `scripts/`)
* `tests/scripts/gen_pkcs1_v21_sign_verify.pl` (moved to `scripts/`)
* `tests/scripts/generate-afl-tests.sh` (moved to `scripts/`)
* `tests/scripts/generate_server9_bad_saltlen.py` (moved to `scripts/`)
* `tests/scripts/run-metatests.sh` (moved to `scripts/`)
* `tests/scripts/run_demos.py` (moved to `scripts/`)
* `tests/scripts/test_config_script.py` (moved to `scripts/`)

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-25 21:42:43 +01:00
Ronald Cron
ed156d0699 Disable "DTLS proxy: 3d, (openssl|gnutls) client, fragmentation" tests 
The tests fail intermittently on the CI with a frequency that
significantly impacts CI throughput.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-25 14:28:17 +01:00
Ronald Cron
36d75df56b Revert "ssl_server2.c: DTLS: Attempt to read the response to the close notification" 
This reverts commit 0a8c35d273257d7102ef8af1e351fa9c7bb688d9.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-03-23 19:18:26 +01:00
Ronald Cron
707c8c34ec Merge remote-tracking branch 'mbedtls-restricted/mbedtls-3.6-release-sync' into 'mbedtls-restricted/mbedtls-3.6-restricted' 2026-03-23 12:08:25 +01:00
Gilles Peskine
f3c1f8dd70 Update paths after moving some scripts to the framework 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-19 13:20:36 +01:00
Gilles Peskine
c7d600f21f Align some scripts with development 
The changes made between 3.6 and 4.0+ are useless but harmless in 3.6.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-19 13:19:31 +01:00
Bence Szépkúti
c5f0f738ed
Merge pull request #1497 from gilles-peskine-arm/psa-rng-reseed-3.6 
Backport 3.6: API to reseed the PSA RNG
 2026-03-16 13:53:53 +01:00
Ronald Cron
828e3817ac
Merge pull request #10623 from ronald-cron-arm/dtls-client-hello-defragmentation-3.6 
Backport 3.6: Add support for (D)TLS 1.2 client hello defragmentation
 2026-03-10 14:46:41 +00:00
Gilles Peskine
8f8b70aff1 Merge remote-tracking branch 'mbedtls-3.6' into merge-3.6-restricted-20260309 2026-03-08 20:26:08 +01:00
Gilles Peskine
bfaa6a5c81 Allow dependencies on platform features in PSA tests 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-04 17:54:56 +01:00
Gilles Peskine
685a1ce6f4 Merge remote-tracking branch 'mbedtls-3.6' into merge-3.6-restricted-20260304 2026-03-04 14:39:06 +01:00
Gilles Peskine
a7de32a719 Disable Unix-like integration code in baremetal builds in all.sh 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-03-03 15:19:58 +01:00
Bence Szépkúti
1937efdd94
Merge pull request #10615 from gilles-peskine-arm/generate-psa_test_wrappers-3.6 
Backport 3.6: generate psa test wrappers
 2026-02-26 13:44:15 +00:00
Ronald Cron
6b529ff50d component_test_tls1_2_ccm_psk_dtls_psa: Enable MBEDTLS_HAVE_TIME 
As done in component_test_tls1_2_ccm_psk_dtls_legacy
enable MBEDTLS_HAVE_TIME in
component_test_tls1_2_ccm_psk_dtls_psa.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-02-25 17:49:53 +01:00
Ronald Cron
f44b6545fe ssl-opt.sh: Add tests with CH fragmented with DTLS in default config 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-02-24 15:30:00 +01:00
Ronald Cron
0a8c35d273 ssl_server2.c: DTLS: Attempt to read the response to the close notification 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-02-24 15:30:00 +01:00
Gilles Peskine
d841a6a782 Generate psa_test_wrappers.{h,c} automatically 
This is not only convenient, but now necessary, because if the content of
the generated files changes due to changes in Python files in the framework,
`all.sh check_generated_files` will fail in the framework CI.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-02-22 20:33:27 +01:00
Ronald Cron
373e08939f Add branch specific generate_tls_handshake_tests.py file 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-02-17 10:10:34 +01:00
Gilles Peskine
c3e6cf2995 Suppress expected output from commands when support_xxx is false 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-02-02 18:42:41 +01:00
Gilles Peskine
9540bfd9e1 Update comment in support_test_aesni 
The comment was out-of-date since the addition of `component_test_aesni_m32`
in b6d39c2f8cba00eca52bc8d1081b7ddbb2c44b29 and the change from inspecting
`/proc/cpuinfo` to calling `lscpu` in a7de78d050aa62197e105d963af926a1b82a64bb.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-02-02 18:42:27 +01:00
Gilles Peskine
05461bbb62 Hide spurious error message if uncrustify is not present 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2026-02-02 18:42:13 +01:00
Valerio Setti
2b2f430fcd tests: scripts: adapt test_tf_psa_crypto_optimized_alignment to 3.6 
Move from CMake to Make

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-01-28 00:18:09 +01:00
Valerio Setti
10193b37e3 tests: scripts: add new component to test alignment with GCC O3 optizations 
This is meant to test a bug found on:
- Little endian platforms other than x86 or ARM (these have specific
  optimizations available);
- GCC versions from 10 to 14.2 (below and above are fine);
- Optimization level "-O3" (lower levels are fine).

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-01-28 00:07:44 +01:00