ebfcf58dc7
Always list TLS-RSA-WITH-NULL-SHA256, but skip conditionally with GnuTLS
...
TLS-RSA-WITH-NULL-SHA256 is officially a cipher suite only since TLS 1.2,
but Mbed TLS allows it in 1.0/1.1, and so did ancient versions of GnuTLS.
This script was only considering it for GnuTLS interoperability if the
running version of GnuTLS supported it with older protocol versions.
Change to always considering it, and in particular always including it with
--list-test-cases, but skipping it at runtime if GnuTLS doesn't support it.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-03-21 10:11:16 +01:00
ac0b350504
Remove the workarround for G->m dtls12 tests
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2024-03-20 11:35:39 +01:00
8fa06dc6fa
Align the case listing with case running in compat.sh
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com >
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2024-03-20 11:35:19 +01:00
d4b3fe7597
Merge branch 'mbedtls-2.28' into 'mbedtls-2.28-restricted'
2024-03-20 09:27:24 +00:00
14b5459faf
Fix misspelled dependency: there is no MBEDTLS_PEM_C
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-03-14 18:41:16 +01:00
eb7e2f50ee
Fix never-executed key agreement test cases
...
These test cases were backported from 3.x and use FFDH. 2.28 doesn't have
FFDH. 2.28 doesn't have a key agreement other than ECDH, so use 0 in the
policy, which still allows the key to be created.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-03-14 18:38:58 +01:00
9908b522f6
Remove misspelled unnecessary dependency
...
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com >
2024-03-14 18:21:27 +01:00
43c128db3e
Update wrapper generation script and regenerate
...
Update the guards generated by the wrapper generation script to use
!MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS and regenerate the PSA test
wrappers.
Signed-off-by: David Horstmann <david.horstmann@arm.com >
2024-03-14 11:18:22 +00:00
4201533196
Invert and rename config option
...
Replace MBEDTLS_PSA_COPY_CALLER_BUFFERS with inverse:
!MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS. This ensures that buffer
protection is enabled by default without any change to the Mbed TLS
config file.
Signed-off-by: David Horstmann <david.horstmann@arm.com >
2024-03-14 11:17:56 +00:00
4698e692e8
Flip logic of PSA memory poisoning generation
...
Change to excluding mbedtls_psa_inject_entropy() (not a PSA function)
rather than explicitly including every PSA function.
Signed-off-by: David Horstmann <david.horstmann@arm.com >
2024-03-12 14:15:38 +00:00
98ff287ab4
Simplify locating original tool
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-03-12 13:37:14 +00:00
9554940fb5
Remove unnecessary use of export
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-03-12 13:37:13 +00:00
f06494dc9e
Merge branch 'mbedtls-2.28' into buffer-sharing-merge-2.28
2024-03-11 16:28:50 +00:00
b75b47563a
Avoid recursion for relative paths
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-03-07 17:26:16 +00:00
ec84093ae6
Follow-up for less verbose logging
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-03-07 17:26:16 +00:00
7c89d1f8de
Merge branch 'mbedtls-2.28-restricted' into backport_key_agreement_buffer_protection
...
Signed-off-by: tom-daubney-arm <74920390+tom-daubney-arm@users.noreply.github.com >
2024-03-06 17:35:59 +00:00
9d0fe6e8df
Fix issue with large allocation in tests
...
In test_suite_psa_crypto_op_fail.generated.function
the function key_agreement_fail was setting the
public_key_length variable to SIZE_MAX which meant that
a huge allocation was being attempted.
Signed-off-by: Thomas Daubney <thomas.daubney@arm.com >
2024-03-06 17:34:35 +00:00
5bc604f33c
Merge pull request #8873 from daverodgman/quietbuild-2.28
...
Make builds less verbose - 2.28 backport
2024-03-05 18:04:11 +00:00
26bbd8dd4e
Merge branch 'mbedtls-2.28-restricted' into bp228_buffer_protection_for_cipher
...
Signed-off-by: Gábor Mezei <63054694+gabor-mezei-arm@users.noreply.github.com >
2024-03-04 15:39:35 +00:00
dff18da29a
fix zlib test
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-03-01 15:53:52 +00:00
422f9bcea0
Fix formatting
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 18:42:07 +00:00
7f4b7dd382
Remove write check in driver wrappers tests
...
This check is intended to ensure that we do not write intermediate
results to the shared output buffer. This check will be made obselete
by generic memory-poisoning-based testing for all functions.
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com >
2024-02-29 16:44:24 +00:00
50bcca26b3
Update test wrapper functions for ciper buffer protection
...
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com >
2024-02-29 16:44:23 +00:00
143864c121
Add test wrapper functions for cipher buffer protection
...
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com >
2024-02-29 16:41:49 +00:00
9f1003b381
blank line for readability
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 15:01:29 +00:00
7a659102f5
Use export to set VERBOSE_LOGS
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:59:40 +00:00
98397f0bba
Merge branch 'mbedtls-2.28-restricted' into generate-random-buffer-protection-backport
...
Signed-off-by: David Horstmann <david.horstmann@arm.com >
2024-02-29 14:27:16 +00:00
f4aa1ce006
Fix docs
...
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com >
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:14:53 +00:00
c2a27492bc
simplify printf call
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:13:35 +00:00
b93ae3b453
improve docs
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
03b232ae4e
Add editor hint for emacs
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
7c84471ed7
Rename quiet to quiet.sh
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
04e0f41f08
Send printed command to stderr
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
cdf57d1ddc
remove trailing space from printed command
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
f57529903d
Improve simplified quoting
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
a8e671d7bb
remove shebang from quiet
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
043325d191
Improve docs
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
6122cb1013
Quote directory name from cmake wrapper
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
62ba696bae
Undo not-needed change
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
e2317649dd
Allow wrappers to be missing; quote directory name from make
...
Co-authored-by: Gilles Peskine <gilles.peskine@arm.com >
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
0b069bd5b1
Avoid infinite loop
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
57783d7459
Extract common parts of quiet wrapper
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
6529f12d35
Tidy up quiet wrappers
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:50 +00:00
4cb98a930c
Move quiet wrapper setup
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:48 +00:00
634fe908b7
Improve quote_args output readability
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:16 +00:00
d4a5563417
Improve output from make/cmake wrapper
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:16 +00:00
59f9df999d
Always display make/cmake invocation command
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:16 +00:00
75da313166
Pacify check_files
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:16 +00:00
8470d114e2
Spelling fix
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:16 +00:00
a0b7c08b60
Use quiet make wrappers from all.sh
...
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com >
2024-02-29 14:11:14 +00:00