59b61da7c4
Fix dependency check for TLS 1.3 ECDH
...
This part is specific to 1.3 and directly calls PSA APIs regardless of
whether MBEDTLS_USE_PSA_CRYPTO is defined, so use PSA_WANT. Note: the
code is already using PSA_WANT everywhere in ssl_tls13*.c.
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2023-03-30 09:35:41 +02:00
99771a3593
Merge pull request #7336 from yanrayw/6500-gitignore-fix
...
fix: ignore *.o under tests/src/test_helpers
2023-03-30 09:20:13 +02:00
1640682a53
Merge pull request #7334 from valeriosetti/analyze_outcomes_improvement
...
Improve analyze_outcomes.py script
2023-03-30 09:17:39 +02:00
303704ef4a
Remove unnecessary tabs
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:41:34 -04:00
c27ba3a531
Clarify SAN structure memory management
...
Co-authored-by: David Horstmann <david.horstmann@arm.com >
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:41:34 -04:00
43d7131c14
Fix rfc822name test arguments
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:41:32 -04:00
8bc128eca7
Add missing information about supported subjectAltName types
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:40:38 -04:00
5f0c6e82fb
Add missing deallocation of subject alt name
...
Since mbedtls_x509_get_name allocates memory
when parsing a directoryName, deallocation
has to be performed if anything fails in the
meantime.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:40:38 -04:00
532b8d41af
Move an x509 malformation test
...
Now, that the errors are not silently ignored
anymore, instead of expecting a <malformed>
tag in parsed data, the test case returns
an error.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:40:36 -04:00
9fa1d25aeb
Add changelog entry for directoryname SAN
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:38:47 -04:00
d90376ef46
Add a test for a malformed directoryname sequence
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:38:45 -04:00
d348632a6a
Switch from PEM to DER format for new x509 directoryname test
...
This simplifies generating malformed data and doesn't require
the PEM support for tests.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:03:01 -04:00
bf8ccd8109
Adjust error reporting in x509 SAN parsing
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:03:01 -04:00
151d85d82c
Introduce a test for a malformed directoryname SAN
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:03:01 -04:00
d40c2b65a6
Introduce proper memory management for SANs
...
DirectoryName parsing performs allocation that has to be handled.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:03:01 -04:00
4a4f1ec8e9
Add the original certificate to be malformed for x509 tests
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:03:01 -04:00
e12b01d31b
Add support for directoryName subjectAltName
...
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com >
2023-03-29 11:03:01 -04:00
846118b98d
test: remove old component errouneously reintroduced during rebase
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 13:46:59 +02:00
05c5a91514
Merge pull request #7307 from Mbed-TLS/sphinx-versioned-documentation
...
Generate API documentation with Sphinx and Breathe
2023-03-29 12:01:59 +01:00
4fa702ae79
Update documented dependencies on ECC algs
...
Previous PRs update check_config.h correctly, but forgot the
documentation in mbedtls_config.h.
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2023-03-29 12:19:41 +02:00
f109c66d73
Use proper log function
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 11:15:44 +02:00
22992a04f1
Fix function description
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 11:15:28 +02:00
5aab43f1cd
test: fix/improve comments in all.sh
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:42:07 +02:00
5c8c9e068e
Minor improvements
...
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2023-03-29 10:33:03 +02:00
93b21e74f9
Update documentation to mention ECC drivers
...
Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com >
2023-03-29 10:30:26 +02:00
1f1420df36
test: fix text output
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:28:39 +02:00
d0c644db69
test: minor refactoring
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:28:39 +02:00
ee97a1ef47
test: improve comments and code in newly added helper function
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:28:39 +02:00
ee9fa46111
check_config: add helper symbol for SECP256R1
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:28:39 +02:00
e4758aa34b
test: add a companion test for another curve (x25519) and fix issues
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:28:06 +02:00
1a6d96f59e
test: use full config as test starting point and solve issues
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:28:06 +02:00
659aa686c8
test: use BUILTIN symbols in as weierstrass key derivation guard
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:27:18 +02:00
3ebecc9513
test: disable proper key exchanges while testing accel EC algs
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:27:18 +02:00
5360886ad3
test: minor fixes to all.sh
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:27:18 +02:00
271c12e256
psa: use only PSA_WANT symbols for PSA_VENDOR_ECC_MAX_CURVE_BITS
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:27:18 +02:00
a532983e56
test: add legacy dependency for weierstrass key derivation
...
Weierstrass key derivation still depends on ECP_C (no driver dispatch
yet), so the legacy dependency is still mandatory here.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:27:18 +02:00
8f1e98a971
psa: set PSA_VENDOR_ECC_MAX_CURVE_BITS based on both SW and accelerated support
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:27:18 +02:00
b7e9544194
test: add specific test with only accel EC curves and algs
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-29 10:27:18 +02:00
77902df54a
Merge pull request #7321 from valeriosetti/issue7272
...
Driver-only ECC: all three top-level modules
2023-03-29 09:56:21 +02:00
df9c029dd5
Remove obsolete ecp_fix_negative function
...
Signed-off-by: Gabor Mezei <gabor.mezei@arm.com >
2023-03-28 18:43:07 +02:00
46423164c1
tls12_client: remove unnecessary parentheses
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:48 +02:00
b76672dd52
test: fix wrong accelerated SHA1 symbol
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:48 +02:00
6d687b98cf
test: simplify comment in test_psa_crypto_config_accel_all_ec_algs_use_psa()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:48 +02:00
c762797856
test: removing test with all accel EC algs without USE_PSA
...
We keep tests without USE_PSA for single accel components (i.e.
ECDH, ECDSA, ECJPAKE), but when testing for all 3 accelerated
at the same time we use USE_PSA for better test coverage.
However for this purpose there is already the:
component_test_psa_crypto_config_[reference/accel]_all_ec_algs_use_psa()
so we can delete this extra component.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:48 +02:00
4fa6d0bb88
test: moving accel ECJPAKE test close to accel ECDH and ECDSA ones
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:48 +02:00
77a904c761
ssl: remove useless guard
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:48 +02:00
77bdff1963
test: improve comment in the added test
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:48 +02:00
2495cdbcc2
test: remove unused tasks in analyze_outcomes.py
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:47 +02:00
44b178ca60
test: fix erroneous changes in all.sh
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:47 +02:00
9affb73e44
psa_crypto: fix guard for mbedtls_ecc_group_of_psa()
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2023-03-28 16:26:47 +02:00
