coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-31 03:16:37 +08:00
Code Issues Packages Projects Releases Wiki Activity
mbedtls/tests
History
Joachim Bauernberger f958c05fa7 Validate the TLS 1.3 server supported_groups extension 
The TLS 1.3 server accepted an empty named_group_list, and data trailing
the list, in a ClientHello supported_groups extension and continued the
handshake. RFC 8446 section 4.2.7 defines the list as
NamedGroup<2..2^16-1>, so it must hold at least one group and be the
whole content of the extension.

Reject an empty list and trailing data in
ssl_tls13_parse_supported_groups_ext() with a decode_error alert, which
is what OpenSSL does. Expose the parser with MBEDTLS_STATIC_TESTABLE and
add unit tests.

Fixes #10897.
Fixes #10733.

Signed-off-by: Joachim Bauernberger <joachim.bauernberger@protonmail.com>
2026-10-25 20:18:11 +01:00
..
.jenkins
configs Remove deprecated items 2025-08-01 11:45:14 +01:00
git-scripts Header updates 2023-11-03 12:21:36 +00:00
include/test Merge pull request #10394 from gilles-peskine-arm/threading-1.0-alt-build-mbedtls 2026-09-01 11:00:04 +02:00
opt-testcases Do not check fail cases for verify skipped 2026-03-13 18:04:16 +00:00
scripts Removed explicit include path from consistency check 2026-10-19 14:12:30 +01:00
src tests: ssl_helpers: run ssl_context reset check only when the SSL context is setup 2026-06-24 15:37:00 +02:00
suites Validate the TLS 1.3 server supported_groups extension 2026-10-25 20:18:11 +01:00
.gitignore cmake: Generate test_keys.h and test_certs.h in the build tree 2025-03-26 21:19:28 +01:00
CMakeLists.txt Add fix for -DENABLE_PROGRAMS=OFF build error 2026-06-30 15:36:19 +01:00
compat-in-docker.sh Header updates 2023-11-03 12:21:36 +00:00
compat.sh Merge pull request #10663 from yiwu0b11/remove_unused_ffdh_code 2026-05-13 16:49:20 +00:00
context-info.sh Fix test and formatting in ssl_context_info 2025-04-29 22:02:24 +02:00
Descriptions.txt
make-in-docker.sh Header updates 2023-11-03 12:21:36 +00:00
Makefile Make installable pqcp headers available to the libtestdriver1 build 2026-08-18 16:07:13 +02:00
ssl-opt.sh Merge pull request #10620 from mpg/ref-for-drivers 2026-08-13 09:56:09 +00:00