coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-09 14:50:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,835 Commits 183 Branches 286 Tags 220 MiB
Commit Graph

34835 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Naveed
852c6bee29 Force sentinel session ID length in serialized-load test 
Signed-off-by: Naveed <naveed@bugqore.com>
 2026-07-09 13:16:14 +05:30
Naveed
c099994dca Reject out-of-bounds session ID length in ssl_tls12_session_load 
Signed-off-by: Naveed <naveed@bugqore.com>
 2026-07-09 13:07:44 +05:30
Ronald Cron
9e9eb069d6
Merge pull request #10817 from Mbed-TLS/mbedtls-4.2.0_mergeback 
Mbedtls 4.2.0 mergeback
 2026-07-08 13:16:51 +00:00
Minos Galanakis
bacdd16661 Updated framework 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-07-08 10:44:21 +01:00
Minos Galanakis
53aaf3215b Updated tf-psa-crypto submodule 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-07-08 10:43:26 +01:00
Ben Taylor
7d204ac0ef
Update ChangeLog.d/empty-digest-failure.txt 
Co-authored-by: Valerio Setti <92275829+valeriosetti@users.noreply.github.com>
Signed-off-by: Ben Taylor <32939606+bjwtaylor@users.noreply.github.com>
 2026-07-08 10:33:18 +01:00
Ben Taylor
8edc147cae Add additional clarification to the empty digest changelog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-08 10:02:47 +01:00
Valerio Setti
a5b83aea58 tests: x509parse: add temporary fallback mechanism for PK error codes 
Add a temporary fallback mechanism in 'x509parse_crt' while crypto#827
is merged.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-07-07 22:56:30 +02:00
Minos Galanakis
970ccc59b0 Merge tag 'mbedtls-4.2.0' into mbedtls-4.2.0_mergeback 
Mbed TLS 4.2.0

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-07-07 16:51:57 +01:00
Ben Taylor
5114edbf2a Relocate PKCS7 Signed Hash Verification Fail empty digestAlgorithms to a more logical location 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:24:42 +01:00
Ben Taylor
dadca0ab87 Update the PSA_WANT_ALG_SHA_256 to PSA_WANT_ALG_SHA_256 in the uinsupported algorithm test 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:23:21 +01:00
Ben Taylor
15d4fd7b76 Remove duplicate test 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:21:44 +01:00
Ben Taylor
b3d68d088d Amend description of tests to remove reference to PKCS11 and remove dependencies 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-06 15:16:32 +01:00
Valerio Setti
8607628249 tests: x509parse: adjust some PK related error codes 
After crypto#827 some PK error codes changed from
MBEDTLS_ERR_PK_INVALID_PUBKEY to MBEDTLS_ERR_PK_INVALID_ALG.
This commit adjusts failing test cases.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
 2026-07-02 14:05:15 +02:00
Minos Galanakis
ece41aa84d ChangeLog: Removed CVE-ID 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
mbedtls-4.2.0 v4.2.0 		2026-07-01 12:00:14 +01:00
Ben Taylor
b7a62b4536 Add modification to pkcs7_get_signer_info to continue with empty digestAlgorithms, leaving the failure to be dtected by the verify 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-07-01 11:50:26 +01:00
Valerio Setti
47e9e61020
Merge pull request #10656 from bjwtaylor/unused-variable-ret 
Fix variable set but not used warning
 2026-07-01 08:26:29 +00:00
Ben Taylor
f37696d87f Update Changelog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 15:36:19 +01:00
Ben Taylor
9ac82ec38c Add changelog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 15:36:19 +01:00
Ben Taylor
a8375cf065 Add fix for -DENABLE_PROGRAMS=OFF build error 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 15:36:19 +01:00
Ben Taylor
0e322242d8 Add two more tests for mbedtls_pkcs7_signed_data_verify() and mbedtls_pkcs7_signed_hash_verify() 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 15:28:55 +01:00
Ben Taylor
832dfebb4e Add test for unsupported DigestAlgorithmSet passed to mbedtls_pkcs7_parse_der 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 15:11:24 +01:00
Ben Taylor
1fffed8d56 Added additional guard for PSA_WANT_ALG_SHA_256 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
7e2e9e7b0d Fix code style 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
23338f8380 Add ChangeLog 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
fb3f1758b0 Add test to verify how mbedtls_pkcs7_signed_data_verify and mbedtls_pkcs7_signed_hash_verify deals with a empty digest algorithm 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
dd015dc85b Add test for unsupported algorithm 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
e23a57ad43 Add fix for empty digestAlgorithm 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Ben Taylor
d3b10844ef Add additional test for empty digest error bug 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2026-06-30 10:54:16 +01:00
Minos Galanakis
b4ee2d4277 Update BRANCHES.md 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-29 18:16:27 +01:00
Minos Galanakis
c1cc0ed3ed ChangeLog: Removed todo placeholder for CVE 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-29 18:16:27 +01:00
Minos Galanakis
7f64d9609b Changelog: Added reference to tf-psa-crypto update 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-29 18:16:27 +01:00
Minos Galanakis
f3c2896076 Assemble ChangeLog 
./framework/scripts/assemble_changelog.py

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-29 18:12:41 +01:00
Minos Galanakis
b11a07f274 Bump version --version 4.2.0 
./scripts/bump_version.sh --version 4.2.0

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-29 18:12:41 +01:00
Minos Galanakis
97a9420455 Updated tf-psa-crypto submodule 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-29 18:12:41 +01:00
Minos Galanakis
d156cf4c02 Merge remote-tracking branch 'development-restricted' into mbedtls-4.2.0.rc 2026-06-26 22:23:37 +01:00
Ronald Cron
41a8bdf109
Merge pull request #1619 from valeriosetti/issue1585 
[development] Stale DTLS- SRTP negotiation state after session_reset() (ARM-RZ7EMQAA)
 2026-06-26 12:17:06 +02:00
Ronald Cron
3bb1c69f7e
Merge pull request #1685 from minosgalanakis/security/mlfbyt4c_tls13_policy_bypass_changelog 
Add Attribution CVE mbedtls:development-restricted
 2026-06-25 15:54:46 +02:00
Ronald Cron
05e0dfbe99
Merge pull request #10786 from minosgalanakis/mbedtls-release-sync 
Mbedtls 4.2.0 release sync
 2026-06-25 12:16:45 +00:00
Minos Galanakis
66e3648745 Updated tf-psa-crypto pointer 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-25 00:50:42 +01:00
Minos Galanakis
0aaa58b438 Updated framework pointer 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
 2026-06-25 00:50:26 +01:00
Gilles Peskine
1a4f04b0c4
Merge pull request #10788 from bensze01/readthedocs 
Upgrade readthedocs builder to Ubuntu 26.04
 2026-06-24 18:18:42 +00:00
Gilles Peskine
9baa16385d
Merge pull request #1652 from ronald-cron-arm/hsm-do-not-span-key-change 
Hsm do not span key change
 2026-06-24 19:22:01 +02:00
Bence Szépkúti
98413e8b70 Upgrade readthedocs builder to Ubuntu 26.04 
The 20.04 runner is no longer supported.

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2026-06-24 16:43:16 +02:00
Ronald Cron
b188f399f9 Check ServerHello record boundary alignment only in TLS 1.3 case 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 15:51:33 +02:00
Ronald Cron
74b9ab2008 tls13_fetch_handshake_msg(): Remove require_record_boundary parameter 
Deduce it from the handshake message type

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 15:51:33 +02:00
Ronald Cron
e08cea612f tls13_record_boundary_alignement: Append empty hs msg 
Append an empty handshake message to expand
the record instead of just a zero byte.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 15:51:33 +02:00
Ronald Cron
1a58c59470 Various improvements of tls13_(drop_early_data|record_boundary_alignment)() 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 15:51:33 +02:00
Ronald Cron
6c557a70f6 tls13: Rework mbedtls_ssl_tls13_fetch_handshake_msg() 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 15:51:33 +02:00
Ronald Cron
0c9d3d4a0f tls13: Improve argument name 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2026-06-24 15:51:33 +02:00