ba1de9fa4e
Enable ssl_tls13_get_ciphersuite_hash_alg only if macro is active
...
Signed-off-by: Norbert Fabritius <norbert.fabritius@esrlabs.com >
2024-04-05 14:16:31 +02:00
b6ff6101d9
Unconditionally define session variable
...
Signed-off-by: Norbert Fabritius <norbert.fabritius@esrlabs.com >
2024-04-05 14:16:31 +02:00
5e297b984d
tls13: srv: Fix guards of _is_psk_(ephemeral_)available
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2024-04-05 14:16:31 +02:00
da0d169fae
Guard ticket specific TLS 1.3 function with macro
...
Guard ssl_tls13_write_new_session_ticket_coordinate with
MBEDTLS_SSL_SESSION_TICKETS macro.
Signed-off-by: Norbert Fabritius <norbert.fabritius@esrlabs.com >
2024-04-05 14:16:31 +02:00
4ee6ddca86
Merge pull request #9004 from valeriosetti/issue8903-backport
...
[Backport 3.6] Test gap: mbedtls_pk_check_pair with MBEDTLS_PK_OPAQUE
2024-04-04 13:44:31 +00:00
ec17c1c1ab
Merge pull request #9005 from valeriosetti/issue8712-backport
...
[Backport 3.6] Clarify the documentation of mbedtls_pk_setup_opaque
2024-04-04 13:41:15 +00:00
87747c7a82
Fix closing comment to match opening guard
...
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2024-04-04 12:57:07 +02:00
5aa6a64b17
Fix style of preprocessor expression
...
We use logical '&&' everywhere, let's be consistent.
(Unless I'm mistaken, binary '&' happens to give the same results for
booleans so this wasn't an actual bug, just style/readability issue.)
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2024-04-04 12:57:06 +02:00
3bb89dc935
Fix failures in psa_cryto_driver_wrappers suite
...
- "in-driver" test should depend on the present
of a driver.
- add new counter in key manangement driver test
hook which counts the calls of generate_key.
- We only care about the hits when processing
`psa_generate_key`.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
2024-04-04 12:57:06 +02:00
a44cab020e
Add missing dependency of fallback test in driver wrappers suite
...
To pass a fallback test, we need a dependency on built-in
implementation.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
2024-04-04 12:57:06 +02:00
b13c218b10
Add missing definition of AT_LEAST_ONE_BUILTIN_KDF
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
2024-04-04 12:57:05 +02:00
64b6e4dece
Fix wrong dependency in psa_crypto_driver_wrappers suite
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
2024-04-04 12:57:04 +02:00
a9d3eaf4bb
Fix wrong dependency in psa_crypto_pake suite
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
2024-04-04 12:57:04 +02:00
f3abbfe735
Fix typo in ssl test suite
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
2024-04-04 12:57:04 +02:00
0dfb5bbb31
Correct dependancy on MBEDTLS_X509_INFO for x509parse
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
2024-04-04 12:57:04 +02:00
387aafff5b
Merge pull request #9007 from mpg/checkbox-3.6
...
Add 3.6 backport checkbox to the PR template
2024-04-04 10:33:22 +00:00
b76573c662
We now have two LTS branches to backport to.
...
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2024-04-04 10:44:18 +02:00
fd0e2f3beb
pk: fix documentation of mbedtls_pk_setup_opaque()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
b2470d9bbf
pk: fix typos in description of mbedtls_pk_setup_opaque()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
320180f043
pk: add check_pair info to mbedtls_pk_setup_opaque() documentation
...
This also updates use-psa-crypto.md accordingly.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
b2840b0aac
test_suite_pk: add failing check for sign_ext() in pk_psa_wrap_sign_ext()
...
If the wrapped key has a PKCS1 v1.5 signature algorithm, then try
to call sign_ext() to perform PSA RSS. Of course this will fail
because it's not supported by the wrapped key.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
a53f54350e
pk: simplify mbedtls_pk_sign_ext()
...
In case of opaque keys skip the check of the supported primary/enrollment
algorithms. Just try to perfom the signature and if the wrapped key
does not support RSA PSS the operation will fail automatically.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
c26646c211
pk: fix description of mbedtls_pk_setup_opaque for sign_ext()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
c51b08ca1d
pk: fix indentation in description of mbedtls_pk_setup_opaque()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
013fa95222
pk: fix description of mbedtls_pk_setup_opaque()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
872b8c4678
pk: update documentation of mbedtls_pk_setup_opaque() based on #8951
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
3c5ea11284
pk: fix documentation for mbedtls_pk_setup_opaque()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
b711a987d3
pk: improve documentation of mbedtls_pk_setup_opaque()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
7ab1861163
pk: fix documentation for mbedtls_pk_setup_opaque()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 09:42:01 +02:00
7e9711ae07
test_suite_pk: test check_pair() also with opaque RSA keys
...
check_pair() is not supported by opaque RSA keys, but we want
to be sure that calling this functions fails nicely instead
for crashing.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2024-04-04 07:02:47 +02:00
da73abc8d7
Fix NULL handling in mbedtls_ssl_config.free() function
...
Signed-off-by: Troy-Butler <squintik@outlook.com >
2024-04-02 13:37:31 -04:00
b32d7ae0fe
Fix compilation of ssl_tls13_generic.c when memcpy() is a function-like macro
...
Fixes #8994
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com >
2024-04-02 14:52:29 +01:00
30978ec650
Merge pull request #8874 from stevenwdv/development
...
Fix compilation on macOS without apple-clang
2024-03-29 13:59:36 +00:00
e146940714
Merge pull request #1216 from Mbed-TLS/mbedtls-3.6.0_mergeback
...
Mbedtls 3.6.0 mergeback
2024-03-28 14:31:03 +00:00
9860056006
Revert "Autogenerated files for 3.6.0"
...
This reverts commit e8a6833b28minos.galanakis@arm.com >
2024-03-27 17:36:15 +00:00
2ca6c285a0
Merge pull request #1215 from Mbed-TLS/mbedtls-3.6.0rc1-pr
...
Mbedtls 3.6.0rc1
2024-03-26 14:58:02 +00:00
078f823843
Merge pull request #8990 from tom-cosgrove-arm:record-size-limit-support-is-now-released
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2024-03-26 12:32:00 +00:00
a11b9d69dd
Merge pull request #8989 from tom-cosgrove-arm:fix-typo-in-psa_key_production_parameters_t-doc
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2024-03-26 12:31:38 +00:00
f02c6ef86d
Fix typo in psa_key_production_parameters_t doc: 65535 should be 65537
...
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com >
2024-03-26 12:25:07 +00:00
1b3b1743f5
Record size limit support is released, so remove warning about only for testing
...
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com >
2024-03-26 12:23:49 +00:00
7424296082
Merge pull request #1213 from Mbed-TLS/mbedtls-3.6.0rc0-pr
...
Mbedtls 3.6.0 Release Candidate
2024-03-22 22:50:33 +00:00
9ac3e23f5d
Fix NULL argument handling in mbedtls_xxx_free() functions
...
Signed-off-by: Troy-Butler <squintik@outlook.com >
2024-03-22 14:46:04 -04:00
e8a6833b28
Autogenerated files for 3.6.0
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2024-03-22 16:00:55 +00:00
8d94aec75c
Fix some Changelog typos
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2024-03-22 16:00:55 +00:00
4492dbd286
Version Bump for 3.6.0
...
./scripts/bump_version.sh --version 3.6.0 --so-crypto 16 --so-x509 7 --so-tls 21
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2024-03-22 11:46:25 +00:00
2c1daef183
Assemble Changelog
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2024-03-22 11:46:25 +00:00
96948e9a7b
Merge pull request #8980 from adeaarm/fix_jinja_template
...
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com >
2024-03-22 11:44:46 +00:00
700632eca2
Fix #ifdef guard in driver wrapper template
...
The #ifdef guard in the get_builtin_key() should be
PSA_CRYPTO_ACCELERATOR_DRIVER_PRESENT to allow for
multiple drivers to be plugged into the wrapper.
Signed-off-by: Antonio de Angelis <antonio.deangelis@arm.com >
2024-03-22 11:43:19 +00:00
611f899c0c
Merge pull request #8957 from valeriosetti/issue8836
...
Unify consistency tests for mbedtls_pk_import_into_psa and mbedtls_pk_copy_from_psa
2024-03-22 08:57:45 +00:00
e2925efa42
Merge pull request #8967 from ronald-cron-arm/improve-version-selection-tests-titles
...
ssl-opt.sh: Improve version selection test titles
2024-03-22 08:52:39 +00:00
