- fb5e2e5 Mark ssl_tls12_preset_suiteb_sig_algs const by Deomid rojer Ryabkov · 1 year, 4 months ago
- e3aaf82 Mark ssl_tls12_preset_default_sig_algs const by Deomid rojer Ryabkov · 1 year, 4 months ago
- 40c2024 Add label_len argument to non-PSA tls_prf_generic by Max Fillinger · 3 months ago
- 76bb753 Fix max. label length in key material exporter by Max Fillinger · 8 months ago
- 97a2879 Document BAD_INPUT_DATA error in key material exporter by Max Fillinger · 8 months ago
- 8ee2141 Use one maximum key_len for all exported keys by Max Fillinger · 9 months ago
- e95edbf Fix output size check for key material exporter by Max Fillinger · 9 months ago
- 951b886 Create MBEDTLS_SSL_KEYING_MATERIAL_EXPORT option by Max Fillinger · 9 months ago
- 7b52328 Remove TLS 1.2 Exporter if we don't have randbytes by Max Fillinger · 9 months ago
- 92d2930 Revert "Store randbytes for TLS 1.2 TLS-Exporter" by Max Fillinger · 9 months ago
- 6c02ea8 Use fewer magic numbers in TLS-Exporter functions by Max Fillinger · 9 months ago
- 76077e2 Add label length argument to tls_prf_generic() by Max Fillinger · 9 months ago
- 85b33ee Store randbytes for TLS 1.2 TLS-Exporter by Max Fillinger · 9 months ago
- 0118293 Fix build when one of TLS 1.2 or 1.3 is disabled by Max Fillinger · 10 months ago
- 9359f4d Fix coding style by Max Fillinger · 10 months ago
- 3be83a7 Fix mismatches in function declarations by Max Fillinger · 12 months ago
- 1466bf8 Fix key_len check in TLS-Exporter by Max Fillinger · 12 months ago
- 44042f0 Implement TLS-Exporter feature by Max Fillinger · 1 year ago
- 49f179d Always call mbedtls_ssl_handshake_set_state by Gilles Peskine · 5 months ago
- dfc8e43 Merge remote-tracking branch 'upstream/mbedtls-3.6' into pre-3.6.3-upstream-merge by Minos Galanakis · 4 months ago
- b5ef7da TLS1.2: Check for failures in Finished calculation by David Horstmann · 5 months ago
- cb72cd2 Don't reset badmac_seen on a DTLS client reconnect by Gilles Peskine · 5 months ago
- b710599 Merge in_hsfraglen with badmac_seen_or_in_hsfraglen by Gilles Peskine · 5 months ago
- f6a676d Rename badmac_seen to badmac_seen_or_in_hsfraglen by Gilles Peskine · 5 months ago
- bbe8745 Remove in_hshdr by Deomid rojer Ryabkov · 5 months ago
- 96e2290 Remove mbedtls_ssl_reset_in_out_pointers by Deomid rojer Ryabkov · 6 months ago
- 3fc5a4d Defragment incoming TLS handshake messages by Deomid rojer Ryabkov · 1 year, 5 months ago
- 2c33c75 Require calling mbedtls_ssl_set_hostname() for security by Gilles Peskine · 5 months ago
- 6b88594 Keep track of whether mbedtls_ssl_set_hostname() has been called by Gilles Peskine · 5 months ago
- e61852e Access ssl->hostname through abstractions by Gilles Peskine · 5 months ago
- 9f10979 Merge branch 'mbedtls-3.6-restricted' into mbedtls-3.6.1rc0-pr by David Horstmann · 11 months ago
- c46edd4 Fix/Improve documentation by Ronald Cron · 11 months ago
- 9f44c88 Rename some "new_session_tickets" symbols by Ronald Cron · 11 months ago
- ba45a44 Move session tickets getter functions to ssl_misc.h by Ronald Cron · 11 months ago
- d67f801 Do not add a new field in the SSL config by Ronald Cron · 11 months ago
- bedddd7 Add mbedtls_ssl_conf_enable_new_session_tickets() API by Ronald Cron · 11 months ago
- c32a4a2 Fix guards around function now used by 1.3 as well by Manuel Pégourié-Gonnard · 11 months ago
- 565da76 Fix typos in comments by Manuel Pégourié-Gonnard · 11 months ago
- f2aa65f Improve some comments by Manuel Pégourié-Gonnard · 11 months ago
- ce60330 Merge 1.2 and 1.3 certificate verification by Manuel Pégourié-Gonnard · 11 months ago
- d37054c Minor refactoring of generic SSL certificate verif by Manuel Pégourié-Gonnard · 11 months ago
- dee6ffa Add support for context f_vrfy callback in 1.3 by Manuel Pégourié-Gonnard · 11 months ago
- e910ac8 Improve a variable's name by Manuel Pégourié-Gonnard · 12 months ago
- 523a7e4 Restrict the scope of a few variables by Manuel Pégourié-Gonnard · 12 months ago
- e1cc926 Allow optional authentication of the server in 1.3 by Manuel Pégourié-Gonnard · 12 months ago
- 85b864e Rm translation code for unused flag by Manuel Pégourié-Gonnard · 12 months ago
- 8a14aaa Simplify certificate curve check for 1.2 by Manuel Pégourié-Gonnard · 12 months ago
- 4938b69 Make mbedtls_ssl_check_cert_usage() work for 1.3 by Manuel Pégourié-Gonnard · 12 months ago
- 96a0c5c Clean up mbedtls_ssl_check_cert_usage() by Manuel Pégourié-Gonnard · 12 months ago
- 422a276 Merge pull request #9045 from Troy-Butler/handle-null-args by Gilles Peskine · 1 year, 1 month ago
- 8fb5df8 Merge pull request #9248 from sezrab/fix-function-parameter-3.6 by Tom Cosgrove · 1 year, 1 month ago
- 9722fd1 Fix incorrect array length in function prototype by Sam Berry · 1 year, 2 months ago
- 6d4d94f Set psk to NULL in ssl_psk_remove -backpor to 3.6 by lhuang04 · 1 year, 2 months ago
- 8d63084 tls13: Do not initiate at all resumption if tickets not supported by Ronald Cron · 1 year, 4 months ago
- 93b2c32 Constify parameter of ssl_tls13_session_load by Norbert Fabritius · 2 years, 6 months ago
- da73abc Fix NULL handling in mbedtls_ssl_config.free() function by Troy-Butler · 1 year, 4 months ago
- b70f0fd Merge branch 'development' into 'development-restricted' by Minos Galanakis · 1 year, 4 months ago
- 4dfb0e7 Add ALPN checking when accepting early data by Waleed Elmelegy · 1 year, 5 months ago
- 131b2ff Fix bug in ALPN negotiating by Waleed Elmelegy · 1 year, 5 months ago
- b28ab0a Fix code style in ssl_tls.c by Waleed Elmelegy · 1 year, 5 months ago
- daa4da7 Increase ALPN length in saved session to 2 bytes by Waleed Elmelegy · 1 year, 5 months ago
- 7dfba34 Fix possible overflow in ALPN length when saving session by Waleed Elmelegy · 1 year, 5 months ago
- 75e33fa Fix code style in ssl_tls.c by Waleed Elmelegy · 1 year, 5 months ago
- fe9ae08 Update serialized session description with ALPN information by Waleed Elmelegy · 1 year, 5 months ago
- 1102563 Add ALPN bit flag to session header by Waleed Elmelegy · 1 year, 5 months ago
- 883f77c Add mbedtls_ssl_session_set_alpn() function by Waleed Elmelegy · 1 year, 5 months ago
- 2824a20 Add ALPN information in session tickets by Waleed Elmelegy · 1 year, 5 months ago
- 05d7cfb tls13: cli: Rename STATE_UNKNOWN to STATE_IDLE by Ronald Cron · 1 year, 5 months ago
- d288466 tls13: cli: Split early data user status and internal state by Ronald Cron · 1 year, 5 months ago
- 93fa4e1 Merge branch 'development' into buffer-sharing-merge by David Horstmann · 1 year, 5 months ago
- 7e1f9f2 Merge pull request #8854 from ronald-cron-arm/tls13-srv-max-early-data-size by Ronald Cron · 1 year, 5 months ago gh-readonly-queue/development/pr-8854-080a5171e2e07abaf01faff6e1862d70aaf35e9f
- 139a418 Merge pull request #8587 from yanrayw/issue/4911/ssl_setup-check-RNG-configuration by Ronald Cron · 1 year, 5 months ago
- 71fa1a9 Fix code style by David Horstmann · 1 year, 5 months ago
- 76ba26a Fixup: add peer_cert_digest_type to comment by David Horstmann · 1 year, 5 months ago
- f686f1d Fix naming inconsistencies in config bits by David Horstmann · 1 year, 5 months ago
- 19bfe0a tls13: Rename early_data_count to total_early_data_size by Ronald Cron · 1 year, 5 months ago
- 26a9811 ssl: Add early_data_count field by Ronald Cron · 1 year, 5 months ago
- 531aca2 Fix missing fields in ssl session struct comment by David Horstmann · 1 year, 5 months ago
- cb01b36 Move session descriptions into a single comment by David Horstmann · 1 year, 5 months ago
- 80a9668 Add config guards to session struct comments by David Horstmann · 1 year, 5 months ago
- e59f970 Move session functions to same part of file by David Horstmann · 1 year, 5 months ago
- 92b258b Update ssl session serialization config bitflag by David Horstmann · 1 year, 5 months ago
- 5c5a32f Add session config bit for KEEP_PEER_CERTIFICATE by David Horstmann · 1 year, 5 months ago
- 0ecb5fd Merge pull request #8574 from ronald-cron-arm/ssl-tickets by Manuel Pégourié-Gonnard · 1 year, 5 months ago
- e6c80bc Merge pull request #8755 from ronald-cron-arm/tls13-client-early-data-status by Manuel Pégourié-Gonnard · 1 year, 5 months ago
- a93e25e tls12: Fix documentation of TLS 1.2 session serialized data by Ronald Cron · 1 year, 6 months ago
- 195c0bc tls: Reset TLS maximum negotiable version by Ronald Cron · 1 year, 6 months ago
- c8de362 Merge pull request #8665 from ivq/reduce_static_mem by Tom Cosgrove · 1 year, 6 months ago gh-readonly-queue/development/pr-8665-9b272ac1c6e6056a1080ad04713633345bb93ac9
- 90e2233 tls13: cli: Refine early data status by Ronald Cron · 1 year, 6 months ago
- 5c9cc0b Merge pull request #8727 from ronald-cron-arm/tls13-ignore-early-data-when-rejected by Manuel Pégourié-Gonnard · 1 year, 6 months ago
- 4e9683e Reduce many unnecessary static memory consumption by Chien Wong · 1 year, 7 months ago
- 32c28ce Merge pull request #8715 from valeriosetti/issue7964 by Manuel Pégourié-Gonnard · 1 year, 6 months ago
- 4caf3ca tls13: srv: Add discard_early_data_record SSL field by Jerry Yu · 1 year, 8 months ago
- 78a38f6 tls13: srv: Do not use early_data_status by Ronald Cron · 1 year, 6 months ago
- 3b90345 Revert "tls13: Introduce early_data_state SSL context field" by Ronald Cron · 1 year, 6 months ago
- 0883b8b tls13: Introduce early_data_state SSL context field by Ronald Cron · 1 year, 6 months ago
- 5d0ae90 tls13: srv: Refine early data status by Ronald Cron · 1 year, 7 months ago
- b4f5076 debug: move internal functions declarations to an internal header file by Valerio Setti · 1 year, 6 months ago
- 4d4891e Merge pull request #8666 from valeriosetti/issue8340 by Gilles Peskine · 1 year, 6 months ago
- 40a4ab0 ssl_tls.c: Factorize save/load of endpoint and ciphersuite by Ronald Cron · 1 year, 6 months ago