TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
refs/heads/dev/buffer-resizing
/
library
/
ssl_cli.c
4245980
USE_PSA_CRYPTO: don't rely on the curve encoding
by Gilles Peskine
· 6 years ago
73c616b
Put includes in alphabetical order
by Janos Follath
· 6 years ago
865b3eb
Initialize return values to an error
by Janos Follath
· 6 years ago
de718b9
Make calc_verify() return the length as well
by Manuel Pégourié-Gonnard
· 6 years ago
df3b089
Use psa_raw_key_agreement
by Janos Follath
· 6 years ago
1239d70
Remove calls to psa_allocate_key
by Janos Follath
· 6 years ago
53b8ec2
Make variable naming consistent
by Janos Follath
· 6 years ago
7bb5e6b
Update psa_create_key to PSA 1.0
by Janos Follath
· 6 years ago
bd09610
Update psa_generator_abort to PSA 1.0
by Janos Follath
· 6 years ago
6de99db
Update psa_generator_read to PSA 1.0
by Janos Follath
· 6 years ago
7d7ded8
Update psa_key_agreement to PSA 1.0
by Janos Follath
· 6 years ago
7374ee6
Update GENERATOR_INIT macro to PSA 1.0
by Janos Follath
· 6 years ago
3d158eb
Update KEYPAIR macros to PSA 1.0
by Janos Follath
· 6 years ago
a0e20d0
Rename MBEDTLS_SSL_CID to MBEDTLS_SSL_DTLS_CONNECTION_ID
by Hanno Becker
· 6 years ago
ebcc913
Consistently reference CID draft through name + URL
by Hanno Becker
· 6 years ago
4cac442
Update references to CID draft to version 5
by Hanno Becker
· 6 years ago
79594fd
Set pointer to start of plaintext at record decryption time
by Hanno Becker
· 6 years ago
5a29990
Improve structure of client-side CID extension parsing
by Hanno Becker
· 6 years ago
2262648
Improve debugging output of client-side CID extension parsing
by Hanno Becker
· 6 years ago
a8373a1
Implement parsing of CID extension in ServerHello
by Hanno Becker
· 6 years ago
49770ff
Implement writing of CID extension in ClientHello
by Hanno Becker
· 6 years ago
ade9e28
ssl_cli.c : add explicit casting to unsigned char
by Andrzej Kurek
· 6 years ago
e694c3e
Remove ciphersuite_info from ssl_transform
by Hanno Becker
· 8 years ago
bd5580a
Add further debug statements on assertion failures
by Hanno Becker
· 6 years ago
62d58ed
Add debug output in case of assertion failure
by Hanno Becker
· 6 years ago
ae553dd
Free peer's public key as soon as it's no longer needed
by Hanno Becker
· 6 years ago
a6899bb
Adapt client-side signature verification to use raw public key
by Hanno Becker
· 6 years ago
be7f508
Adapt ssl_get_ecdh_params_from_cert() to use raw public key
by Hanno Becker
· 6 years ago
c7d7e29
Adapt ssl_write_encrypted_pms() to use raw public key
by Hanno Becker
· 6 years ago
8273df8
Re-classify errors on missing peer CRT
by Hanno Becker
· 6 years ago
77adddc
Make use of macro and helper detecting whether CertRequest allowed
by Hanno Becker
· 6 years ago
86016a0
Merge remote-tracking branch 'origin/pr/2338' into development
by Jaeden Amero
· 6 years ago
9f47f82
Merge remote-tracking branch 'origin/pr/2391' into development
by Jaeden Amero
· 6 years ago
0a94a64
Add debugging output to confirm that PSA was used for ECDHE
by Hanno Becker
· 7 years ago
c14a3bb
Make variable in ssl_write_client_key_exchange() more descriptive
by Hanno Becker
· 7 years ago
4a63ed4
Implement ClientKeyExchange writing in PSA-based ECDHE suites
by Hanno Becker
· 7 years ago
bb89e27
Implement ServerKeyExchange parsing for PSA-based ECDHE suites
by Hanno Becker
· 7 years ago
b2964cb
SSL/TLS client: Remove old session ticket on renegotiation
by Hanno Becker
· 6 years ago
c470b6b
Merge development commit 8e76332 into development-psa
by Andrzej Kurek
· 6 years ago
3fbdada
SSL: Make use of the new ECDH interface
by Janos Follath
· 7 years ago
520224e
Rename ssl_conf_has_[raw_]_psk to ssl_conf_has_static_[raw_]psk
by Hanno Becker
· 7 years ago
afd311e
Skip PMS generation on client if opaque PSK is used
by Hanno Becker
· 7 years ago
dfab8e2
Allow opaque PSKs in pure-PSK ciphersuites only
by Hanno Becker
· 7 years ago
2e4f616
Don't suggest the use of a PSK suite if no PSK configured on client
by Hanno Becker
· 7 years ago
de13963
Merge remote-tracking branch 'restricted/pr/520' into development-restricted-proposed
by Simon Butcher
· 7 years ago
c37423f
Fix misleading sub-state name and comments
by Manuel Pégourié-Gonnard
· 7 years ago
8df1023
Add explicit unsigned-to-signed integer conversion
by Hanno Becker
· 7 years ago
0c161d1
Fix bounds check in ssl_parse_server_psk_hint()
by Hanno Becker
· 7 years ago
1c1c20e
Fix some whitespace issues
by Manuel Pégourié-Gonnard
· 7 years ago
125af94
Merge branch 'development-restricted' into iotssl-1260-non-blocking-ecc-restricted
by Manuel Pégourié-Gonnard
· 7 years ago
552754a
Merge remote-tracking branch 'public/pr/1988' into development
by Simon Butcher
· 7 years ago
68dbc94
Merge remote-tracking branch 'public/pr/1951' into development
by Simon Butcher
· 7 years ago
9d5a9e1
Merge remote-tracking branch 'public/pr/1625' into development
by Simon Butcher
· 7 years ago
bc2498a
Style: Add numerous comments indicating condition guarded by #endif
by Hanno Becker
· 7 years ago
327c93b
Add parameter to ssl_read_record() controlling checksum update
by Hanno Becker
· 7 years ago
3879fdf
Merge remote-tracking branch 'public/pr/1955' into iotssl-165-dtls-hs-fragmentation-new
by Manuel Pégourié-Gonnard
· 7 years ago
ad17fe9
Fix overly strict bounds check in ssl_parse_certificate_request()
by Hanno Becker
· 7 years ago
87a346f
Always save flight first, (re)send later
by Manuel Pégourié-Gonnard
· 8 years ago
31c1586
Start separating handshake from record writing
by Manuel Pégourié-Gonnard
· 8 years ago
cac0c1a
Merge remote-tracking branch 'upstream-public/pr/1378' into development
by Jaeden Amero
· 7 years ago
df15356
Merge remote-tracking branch 'public/pr/1663' into development
by Simon Butcher
· 7 years ago
755bb6a
Add ecc extensions only if ecc ciphersuite is used
by Ron Eldor
· 7 years ago
79d9b50
Merge branch 'development' into iotssl-1260-non-blocking-ecc-restricted
by Manuel Pégourié-Gonnard
· 7 years ago
d8213d0
Let MBEDTLS_SSL_MAX_CONTENT_LEN to be split into outward & inward sizes
by Angus Gratton
· 9 years ago
5f57f1e
Merge remote-tracking branch 'public/pr/1270' into development
by Simon Butcher
· 7 years ago
558da9c
Make SSL error code more generic
by Manuel Pégourié-Gonnard
· 7 years ago
da19f4c
Merge branch 'development' into iotssl-1260-non-blocking-ecc-restricted
by Manuel Pégourié-Gonnard
· 7 years ago
b5b2543
Fix undefined shifts
by Philippe Antoine
· 7 years ago
747fd53
Fixes different off by ones
by Philippe Antoine
· 7 years ago
11999bb
Fix minor code style issues
by Darryl Green
· 7 years ago
a331e0f
Merge remote-tracking branch 'upstream-restricted/pr/421' into development-proposed
by Jaeden Amero
· 7 years ago
03bac44
Change accepted ciphersuite versions when parsing server hello
by Andrzej Kurek
· 7 years ago
ca1d742
mbedtls_ssl_get_key_exchange_md_tls1_2: return hashlen
by Gilles Peskine
· 7 years ago
1d3b508
Same ciphersuite validation in server and client hello
by Mohammad Azim Khan
· 7 years ago
f2b76cd
Merge remote-tracking branch 'upstream-restricted/pr/461' into development-restricted-proposed
by Gilles Peskine
· 7 years ago
1f6301b
Rename mbedtls_zeroize to mbedtls_platform_zeroize
by Andres Amaya Garcia
· 7 years ago
e32df08
Remove individual copies of mbedtls_zeroize()
by Andres Amaya Garcia
· 8 years ago
94d4997
Improve comments style
by Krzysztof Stachowiak
· 7 years ago
cd09fc8
Remove a redundant test
by Krzysztof Stachowiak
· 7 years ago
73b183c
Add buffer size check before cert_type_len read
by Krzysztof Stachowiak
· 7 years ago
f15a8be
Merge remote-tracking branch 'upstream-public/pr/1256' into development-proposed
by Gilles Peskine
· 7 years ago
bc231cc
Add a missing buffer size check
by Krzysztof Stachowiak
· 7 years ago
bc145f7
Correct buffer size check
by Krzysztof Stachowiak
· 7 years ago
d1fedc5
Merge remote-tracking branch 'upstream-public/pr/1440' into development-proposed
by Jaeden Amero
· 7 years ago
95ad522
Merge remote-tracking branch 'upstream-public/pr/1439' into development-proposed
by Jaeden Amero
· 7 years ago
5224a75
Prevent arithmetic overflow on bounds check
by Krzysztof Stachowiak
· 7 years ago
740b218
Add bounds check before length read
by Krzysztof Stachowiak
· 7 years ago
027f84c
Prevent arithmetic overflow on bounds check
by Krzysztof Stachowiak
· 7 years ago
a1098f8
Add bounds check before signature length read
by Krzysztof Stachowiak
· 7 years ago
d5f7d24
Merge branch 'pr_1064' into development-proposed
by Gilles Peskine
· 7 years ago
d91f2a2
Merge branch 'development' into iotssl-1251-2.7
by Gilles Peskine
· 7 years ago
4e5d23f
corrected a typo in a comment
by Johannes H
· 8 years ago
0884f48
Merge remote-tracking branch 'upstream-public/pr/1141' into development
by Gilles Peskine
· 8 years ago
9c3573a
Merge remote-tracking branch 'upstream-public/pr/988' into development
by Gilles Peskine
· 8 years ago
40f8b51
Add comments on the use of the renego SCSV and the renego ext
by Hanno Becker
· 8 years ago
6bce9cb
Always print gmt_unix_time in TLS client
by Andres Amaya Garcia
· 8 years ago
1a9a51c
Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog.
by Hanno Becker
· 8 years ago
074c58f
Always print gmt_unix_time in TLS client
by Andres Amaya Garcia
· 8 years ago
2f38a43
Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog.
by Hanno Becker
· 8 years ago
4a2fb4c
Addres review comments
by Ron Eldor
· 8 years ago
Next »