1. c1385c1 Don't use idiom `if( func() )` but always add explicit value check by Hanno Becker · 7 years ago
  2. 845b946 Add server-support for opaque PSKs by Hanno Becker · 7 years ago
  3. bc2498a Style: Add numerous comments indicating condition guarded by #endif by Hanno Becker · 7 years ago
  4. 327c93b Add parameter to ssl_read_record() controlling checksum update by Hanno Becker · 7 years ago
  5. 1985947 Store outgoing record sequence number outside record buffer by Hanno Becker · 7 years ago
  6. 87a346f Always save flight first, (re)send later by Manuel Pégourié-Gonnard · 8 years ago
  7. 31c1586 Start separating handshake from record writing by Manuel Pégourié-Gonnard · 8 years ago
  8. cac0c1a Merge remote-tracking branch 'upstream-public/pr/1378' into development by Jaeden Amero · 7 years ago
  9. df15356 Merge remote-tracking branch 'public/pr/1663' into development by Simon Butcher · 7 years ago
  10. e7aeef0 Merge remote-tracking branch 'public/pr/536' into development by Simon Butcher · 7 years ago
  11. 755bb6a Add ecc extensions only if ecc ciphersuite is used by Ron Eldor · 7 years ago
  12. d8213d0 Let MBEDTLS_SSL_MAX_CONTENT_LEN to be split into outward & inward sizes by Angus Gratton · 9 years ago
  13. 600c5e6 Compilation warning fixes on 32b platfrom with IAR by Simon Butcher · 7 years ago
  14. 5f57f1e Merge remote-tracking branch 'public/pr/1270' into development by Simon Butcher · 7 years ago
  15. 0a8352b Fix harmless use of uninitialized memory in ssl_parse_encrypted_pms by Gilles Peskine · 7 years ago
  16. 747fd53 Fixes different off by ones by Philippe Antoine · 7 years ago
  17. 1febfef Rename mbedtls_ssl_async_{get,set}_data for clarity by Gilles Peskine · 7 years ago
  18. 8f97af7 Don't pass the async config data to async callbacks by Gilles Peskine · 7 years ago
  19. e141638 Finish writing an unfinished comment by Gilles Peskine · 7 years ago
  20. 0fd90dd ssl_prepare_server_key_exchange: clarify where the signature is written by Gilles Peskine · 7 years ago
  21. 22e695f Be more precise about when a variable is unused by Gilles Peskine · 7 years ago
  22. ad28bf0 Documentation improvements by Gilles Peskine · 7 years ago
  23. 168dae8 Comment formatting and whitespace fixes by Gilles Peskine · 7 years ago
  24. df13d5c Pass the SSL context to async callbacks by Gilles Peskine · 7 years ago
  25. 2e33337 Fix invalid data being accepted in RSA-decryption-based ciphersuites by Gilles Peskine · 7 years ago
  26. b74a1c7 Rename MBEDTLS_SSL_ASYNC_PRIVATE_C to MBEDTLS_SSL_ASYNC_PRIVATE by Gilles Peskine · 7 years ago
  27. f112725 Style and grammar fixes by Gilles Peskine · 7 years ago
  28. b44692f Merge branch 'mbedtls_ssl_get_key_exchange_md_ssl_tls-return_hashlen' into tls_async_server-2.9 by Gilles Peskine · 7 years ago
  29. 8491406 Remove preprocessor directives around platform_util.h include by Andres Amaya Garcia · 7 years ago
  30. ca1d742 mbedtls_ssl_get_key_exchange_md_tls1_2: return hashlen by Gilles Peskine · 7 years ago
  31. 2c6078e SSL asynchronous decryption (server side) by Gilles Peskine · 8 years ago
  32. bcd98a5 ssl_parse_encrypted_pms refactor: prepare, decrypt, return by Gilles Peskine · 8 years ago
  33. 422ccab ssl_parse_encrypted_pms refactor: prepare for remote private key by Gilles Peskine · 8 years ago
  34. f9f15ae ssl_write_server_key_exchange refactor: don't use p at all by Gilles Peskine · 8 years ago
  35. d3eb061 ssl_write_server_key_exchange refactor: minor cleanup by Gilles Peskine · 8 years ago
  36. ebd30ae ssl_write_server_key_exchange refactor: ssl_resume_server_key_exchange by Gilles Peskine · 8 years ago
  37. d04d292 Get rid of useless handshake field out_async_start by Gilles Peskine · 8 years ago
  38. 7ab013a ssl_write_server_key_exchange refactor: move signature_len out by Gilles Peskine · 8 years ago
  39. 1004c19 ssl_write_server_key_exchange refactor: don't use p in the signing phase by Gilles Peskine · 8 years ago
  40. 184a3fa ssl_write_server_key_exchange refactor: create ssl_prepare_server_key_exchange by Gilles Peskine · 8 years ago
  41. 3ce9b90 ssl_write_server_key_exchange refactor: remove dig_signed_len by Gilles Peskine · 8 years ago
  42. 4bf9a28 SSL asynchronous signature: first implementation by Gilles Peskine · 8 years ago
  43. ebd652f ssl_write_server_key_exchange: calculate hashlen explicitly by Gilles Peskine · 8 years ago
  44. e1efdf9 ssl_write_server_key_exchange: don't hard-code max hash size by Gilles Peskine · 8 years ago
  45. e198df5 ssl_pick_cert: use the public key for can_do by Gilles Peskine · 8 years ago
  46. fe1c093 ssl_write_server_key_exchange refactor: remove redundant variable n by Gilles Peskine · 8 years ago
  47. 81d4e89 Don't rely on private key metadata in SSL by Gilles Peskine · 8 years ago
  48. 1f6301b Rename mbedtls_zeroize to mbedtls_platform_zeroize by Andres Amaya Garcia · 7 years ago
  49. e32df08 Remove individual copies of mbedtls_zeroize() by Andres Amaya Garcia · 8 years ago
  50. 2bd5757 Merge branch 'development' into iotssl-1204 by Hanno Becker · 7 years ago
  51. 784de59 Merge remote-tracking branch 'upstream-restricted/pr/410' into development-restricted by Jaeden Amero · 8 years ago
  52. 66954e1 Merge branch 'development' into development-restricted by Jaeden Amero · 8 years ago
  53. 005239e Merge remote-tracking branch 'upstream-public/pr/1294' into development by Jaeden Amero · 8 years ago
  54. 41b40e6 Merge remote-tracking branch 'upstream-restricted/pr/441' into development-restricted by Gilles Peskine · 8 years ago
  55. aaaa98c Merge branch 'development-proposed' into development-restricted by Gilles Peskine · 8 years ago
  56. d91f2a2 Merge branch 'development' into iotssl-1251-2.7 by Gilles Peskine · 8 years ago
  57. 239987f Fix heap-buffer overread in ALPN ext parsing by Manuel Pégourié-Gonnard · 8 years ago
  58. 1a2640c Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge' into development-restricted by Gilles Peskine · 8 years ago
  59. 27b34d5 Wrong identifier used to check Encrypt-then-MAC flag by Hanno Becker · 8 years ago
  60. 73a3817 Parse Signature Algorithm ext when renegotiating by Ron Eldor · 8 years ago
  61. 8dd73e6 Parse Signature Algorithm ext when renegotiating by Ron Eldor · 8 years ago
  62. 90333da Replace wrong usage of WANT_READ by CONTINUE_PROCESSING by Hanno Becker · 8 years ago
  63. 4cb1f4d Style corrections by Hanno Becker · 8 years ago
  64. ab74056 Make use of `mbedtls_dhm_set_group` when generating DHM params by Hanno Becker · 8 years ago
  65. 46f5a3e Check return codes from MD in ssl code by Andres Amaya Garcia · 8 years ago
  66. d21d625 Change ssl_srv to new MD API and check return code by Andres Amaya Garcia · 8 years ago
  67. 83c9f49 Prevent bounds check bypass through overflow in PSK identity parsing by Hanno Becker · 8 years ago
  68. ddc6e52 Merge remote-tracking branch 'gilles/iotssl-1223/development' into development by Manuel Pégourié-Gonnard · 8 years ago
  69. 383a118 Merge remote-tracking branch 'gilles/IOTSSL-1330/development' into development by Manuel Pégourié-Gonnard · 8 years ago
  70. 23b33f8 Merge remote-tracking branch 'hanno/sig_hash_compatibility' into development by Manuel Pégourié-Gonnard · 8 years ago
  71. d50177f Fix FALLBACK_SCSV parsing by Gilles Peskine · 8 years ago
  72. 088ce43 Implement optional CA list suppression in Certificate Request by Janos Follath · 8 years ago
  73. cf7ae7e Improve documentation by Hanno Becker · 8 years ago
  74. 0d0cd4b Split long lines by Hanno Becker · 8 years ago
  75. 7e5437a Remember suitable hash function for any signature algorithm. by Hanno Becker · 8 years ago
  76. 1aa267c Introduce macros and functions to characterize certain ciphersuites. by Hanno Becker · 8 years ago
  77. c94f735 Ignore failures when sending fatal alerts by Gilles Peskine · 8 years ago
  78. 1cc8e34 Send TLS alerts in many more cases by Gilles Peskine · 8 years ago
  79. f982852 Balanced braces across preprocessor conditionals by Gilles Peskine · 8 years ago
  80. 9900014 Merge fix for IE Certificate Compatibility by Simon Butcher · 9 years ago
  81. 29f221f Fix guards in SSL for ECDH key exchanges by Paul Bakker · 9 years ago
  82. b5b6af2 Puts platform time abstraction into its own header by Simon Butcher · 9 years ago
  83. 584a547 Fix whitespace and formatting in ssl_srv.c by Simon Butcher · 9 years ago
  84. c6dab2b Fix non compliance SSLv3 in server extension handling. by Janos Follath · 9 years ago
  85. d5800b7 Abstracts away time()/stdlib.h into platform by SimonB · 9 years ago
  86. 9d62412 Add note about not implementing PSK id_hint by Manuel Pégourié-Gonnard · 9 years ago
  87. 7f17155 Avoid seemingly-possible overflow by Manuel Pégourié-Gonnard · 10 years ago
  88. fadacb9 Merge branch 'development' into iotssl-461-ecjpake-finalization by Manuel Pégourié-Gonnard · 10 years ago
  89. 5674a97 Fix compilers warnings in reduced configs by Manuel Pégourié-Gonnard · 10 years ago
  90. ae8535d Changed defs. back to MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED by Robert Cragie · 10 years ago
  91. 39a60de Correct overwritten fixes by Robert Cragie · 10 years ago
  92. 136884c Use MBEDTLS_ECJPAKE_C def. for correct conditional compilation by Robert Cragie · 10 years ago
  93. bc1babb Fix potential overflow in CertificateRequest by Manuel Pégourié-Gonnard · 10 years ago
  94. faee44d Avoid false positives in bounds check by Manuel Pégourié-Gonnard · 10 years ago
  95. 0f1660a Implement key exchange messages and PMS derivation by Manuel Pégourié-Gonnard · 10 years ago
  96. 25dbeb0 Skip certificate-related messages with ECJPAKE by Manuel Pégourié-Gonnard · 10 years ago
  97. 55c7f99 Add server writing of the extension by Manuel Pégourié-Gonnard · 10 years ago
  98. bf57be6 Add server extension parsing by Manuel Pégourié-Gonnard · 10 years ago
  99. e511b4e Ignore ECJPAKE suite if not configured on server by Manuel Pégourié-Gonnard · 10 years ago
  100. c1b46d0 Fix bug in server parsing point formats extension by Manuel Pégourié-Gonnard · 10 years ago