- 6ef9bb3 Implement and use MBEDTLS_STATIC_ASSERT() by Tom Cosgrove · 2 years, 5 months ago
- 8a045ce Unify PSA to Mbed TLS error translation by Andrzej Kurek · 2 years, 7 months ago
- b8b07aa Handle errors from functions that now return int by Manuel Pégourié-Gonnard · 2 years, 6 months ago
- 449bd83 Switch to the new code style by Gilles Peskine · 2 years, 7 months ago
- 1e868cc fix several typos and extra blank spaces by Valerio Setti · 2 years, 7 months ago
- 2b5d3de remove remaining occurencies of mbedtls_ecc_group_to_psa() from TLS by Valerio Setti · 2 years, 7 months ago
- 40d9ca9 tls: remove useless legacy function by Valerio Setti · 2 years, 7 months ago
- 18c9fed tls: remove dependency from mbedtls_ecp_curve functions by Valerio Setti · 2 years, 7 months ago
- ac5ca5a Refactor cookie members of handshake struct by Jerry Yu · 3 years, 5 months ago
- ffc330f Merge pull request #6264 from hannestschofenig/rfc9146_2 by Manuel Pégourié-Gonnard · 2 years, 8 months ago
- ef25a99 Merge pull request #6533 from valeriosetti/issue5847 by Manuel Pégourié-Gonnard · 2 years, 8 months ago
- 819de86 tls: removed extra white spaces and other minor fix by Valerio Setti · 2 years, 8 months ago
- 6b3dab0 tls: psa_pake: use a single function for round one and two in key exchange read/write by Valerio Setti · 2 years, 8 months ago
- 9bed8ec tls: psa_pake: make round two reading function symmatric to the writing one by Valerio Setti · 2 years, 8 months ago
- a988364 tls: psa_pake: fix missing new round one parsing function on tls12 server by Valerio Setti · 2 years, 8 months ago
- a08b1a4 tls: psa_pake: move move key exchange read/write functions to ssl_tls.c by Valerio Setti · 2 years, 8 months ago
- 96a0fd9 Fix signature algorithms list entry getting overwritten by length. by Paul Elliott · 2 years, 9 months ago
- 6f1b574 tls12: psa_pake: simplify EC info parsing in server's 2nd round by Valerio Setti · 2 years, 8 months ago
- 02c25b5 tls12: psa_pake: use common code for parsing/writing round one and round two data by Valerio Setti · 2 years, 9 months ago
- d384b64 Merge branch 'development' into rfc9146_2 by Dave Rodgman · 2 years, 9 months ago
- ca7d506 Use PSA PAKE API when MBEDTLS_USE_PSA_CRYPTO is selected by Neil Armstrong · 3 years, 2 months ago
- 744fd37 Merge pull request #6467 from davidhorstmann-arm/fix-unusual-macros-0 by Gilles Peskine · 2 years, 9 months ago
- 3a334c2 Minor improvements to ssl_tls12_server.c by David Horstmann · 2 years, 9 months ago
- e0af39a Refactor macro-spanning ifs in ssl_tls12_server.c by David Horstmann · 2 years, 10 months ago
- 945b23c Include platform.h unconditionally: automatic part by Gilles Peskine · 2 years, 11 months ago
- 5166954 Make more use of MBEDTLS_MAX_HASH_SIZE macro by Przemek Stekiel · 2 years, 11 months ago
- fd6cca4 CID update to RFC 9146 by Hannes Tschofenig · 3 years, 10 months ago
- 70dfd4c ssl_tls12_server: fix potential NULL-dereferencing if local certificate was not set. by Leonid Rozenboim · 3 years ago
- 20f89a9 Remove uses of SSL compression by Thomas Daubney · 3 years, 1 month ago
- f518f81 Ensure return for mbedtls_ssl_write_alpn_ext() is checked by Paul Elliott · 3 years, 1 month ago
- ce7d76e Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr by Ronald Cron · 3 years, 1 month ago
- 4d7af2a Merge pull request #5835 from superna9999/5831-tls-1-2-ciphersuite-selection by Manuel Pégourié-Gonnard · 3 years, 1 month ago
- 999ef70 Add accessors to config DN hints for cert request by Glenn Strauss · 3 years, 5 months ago
- 9f1176a Move preferred_hash_for_sig_alg() check after ssl_pick_cert() and check if hash alg is supported with mbedtls_pk_can_do_ext() by Neil Armstrong · 3 years, 1 month ago
- 9f4606e Rename mbedtls_ssl_get_ciphersuite_sig_pk_ext_XXX in mbedtls_ssl_get_ciphersuite_sig_pk_ext_XXX() by Neil Armstrong · 3 years, 1 month ago
- 0c9c10a Introduce mbedtls_ssl_get_ciphersuite_sig_pk_ext_alg() and use it in ssl_pick_cert() by Neil Armstrong · 3 years, 3 months ago
- acb3992 Add ALPN extension to the server side by XiaokangQian · 3 years, 1 month ago
- a3115dc Mark static int SSL functions CHECK_RETURN_CRITICAL by Manuel Pégourié-Gonnard · 3 years, 1 month ago
- b64fb62 Fix unchecked return value from internal function by Manuel Pégourié-Gonnard · 3 years, 2 months ago
- e0469b5 Merge pull request #931 from AndrzejKurek/clihlo_cookie_pxy_fix by Gilles Peskine · 3 years, 1 month ago
- ca3c6a5 Merge pull request #5817 from xkqian/tls13_add_server_name by Ronald Cron · 3 years, 1 month ago
- 755ddff Fix print format in a debug message by Andrzej Kurek · 3 years, 1 month ago
- cbe14ec Improve variable extracting operations by using MBEDTLS_GET macros by Andrzej Kurek · 3 years, 1 month ago
- b58cf0d Split a debug message into two - for clarity by Andrzej Kurek · 3 years, 2 months ago
- 364fd8b More SSL debug messages for ClientHello parsing by Gilles Peskine · 3 years, 5 months ago
- a3344f7 Merge pull request #5767 from leorosen/avoid-null-args by Dave Rodgman · 3 years, 2 months ago
- 9b2b771 Change mbedtls_ssl_parse_server_name_ext base on comments by XiaokangQian · 3 years, 2 months ago
- 40a3523 Add support of server name extension to server side by XiaokangQian · 3 years, 3 months ago
- 9edf51d Merge pull request #5785 from gabor-mezei-arm/5460_unify_parsing_sig_alg_ext by Ronald Cron · 3 years, 2 months ago
- 1142038 Better check for NULL pointer by Paul Elliott · 3 years, 3 months ago
- dd428d3 Fix incorrect error message by Paul Elliott · 3 years, 3 months ago
- 696956d Typo by Gabor Mezei · 3 years, 3 months ago
- 0a4298b Remove unnecessary duble conversion by Gabor Mezei · 3 years, 3 months ago
- 8b0ecbc Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. by Shaun Case · 3 years, 7 months ago
- 86acf05 Update signiture algorithm handling by Gabor Mezei · 3 years, 3 months ago
- c1051b6 Remove `MBEDTLS_SSL_SIG_ALG_SET` macro by Gabor Mezei · 3 years, 3 months ago
- a3d016c Rename and rewrite `mbedtls_ssl_sig_hash_set_find` function by Gabor Mezei · 3 years, 3 months ago
- 1226590 Explicitly set invalid value for the end of the signiture algorithm set by Gabor Mezei · 3 years, 3 months ago
- 15b95a6 Use common macro for the invalid signiture algorithm botn in TLS 1.2 and 1.3 by Gabor Mezei · 3 years, 3 months ago
- 078e803 Unify parsing of the signature algorithms extension by Gabor Mezei · 3 years, 3 months ago
- 8ecd668 Keep raw PSK when set via mbedtls_ssl_conf_psk() and feed as input_bytes by Neil Armstrong · 3 years, 3 months ago
- 80f6f32 Make mbedtls_ssl_psk_derive_premaster() only for when MBEDTLS_USE_PSA_CRYPTO is not selected by Neil Armstrong · 3 years, 3 months ago
- cd05f0b Drop skip PMS generation for opaque XXX-PSK now Opaque PSA key is always present when MBEDTLS_USE_PSA_CRYPTO selected by Neil Armstrong · 3 years, 3 months ago
- e952a30 Remove RAW PSK when MBEDTLS_USE_PSA_CRYPTO is selected by Neil Armstrong · 3 years, 3 months ago
- 61f237a Remove PSA-only code dealing with non-opaque PSA key by Neil Armstrong · 3 years, 3 months ago
- 67397fa Merge pull request #5704 from mprse/mixed_psk_2cx by Manuel Pégourié-Gonnard · 3 years, 3 months ago
- 8855e36 Merge pull request #5674 from superna9999/5668-abstract-tls-mode-cleanup by Gilles Peskine · 3 years, 3 months ago
- 99114f3 Fix build flags for opaque/raw psk checks by Przemek Stekiel · 3 years, 3 months ago
- cb322ea Enable support for psa opaque DHE-PSK key exchange on the server side by Przemek Stekiel · 3 years, 3 months ago
- 14d11b0 Enable support for psa opaque ECDHE-PSK key exchange on the server side by Przemek Stekiel · 3 years, 4 months ago
- aeb710f Enable support for psa opaque RSA-PSK key exchange on the server side by Przemek Stekiel · 3 years, 4 months ago
- 55132c6 Merge pull request #5703 from superna9999/5322-ecdh-remove-legacy-context by Manuel Pégourié-Gonnard · 3 years, 3 months ago
- 76b7407 Use MBEDTLS_SSL_SOME_SUITES_USE_CBC_ETM to enable ssl_write_encrypt_then_mac_ext() by Neil Armstrong · 3 years, 4 months ago
- ab555e0 Rename mbedtls_get_mode_from_XXX to mbedtls_ssl_get_mode_from_XXX by Neil Armstrong · 3 years, 4 months ago
- fe635e4 Use mbedtls_get_mode_from_ciphersuite() in server-side ssl_write_encrypt_then_mac_ext() by Neil Armstrong · 3 years, 4 months ago
- 2875270 Avoid potentially passing NULL arguments by Leonid Rozenboim · 3 years, 3 months ago
- a2da9c7 Merge pull request #5631 from gstrauss/enum-tls-vers by Paul Elliott · 3 years, 3 months ago
- 8315811 Remove restrictive proto ver negotiation checks by Glenn Strauss · 3 years, 4 months ago
- 041a376 Remove some tls_ver < MBEDTLS_SSL_VERSION_TLS1_2 checks by Glenn Strauss · 3 years, 5 months ago
- e3af4cb mbedtls_ssl_(read|write)_version using tls_version by Glenn Strauss · 3 years, 5 months ago
- 60bfe60 mbedtls_ssl_ciphersuite_t min_tls_version,max_tls_version by Glenn Strauss · 3 years, 5 months ago
- da7851c Rename mbedtls_ssl_session minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
- 913b364 Simplify compile-time PSA/non-PSA ECDH(E) code in ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 3ea0149 Store TLS1.2 ECDH point format only when USE_PSA_CRYPTO isn't selected by Neil Armstrong · 3 years, 4 months ago
- d91526c Refactor to make PSA and non-PSA ECDH(E) server code exclusive by Neil Armstrong · 3 years, 4 months ago
- 927410d Merge pull request #5611 from superna9999/5318-tls-ecdhe-psk by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 1b05aff Merge pull request #5624 from superna9999/5312-tls-server-ecdh by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 1039ba5 Check if not using Opaque PSK in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- ede381c Get PSK length & check for buffer size before writting in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 3cae167 Check buffer pointers before storing peer's public key in ECHDE-PSK PSA version of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- fdf20cb Fix command indentation in ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 2d63da9 Introduce zlen size variable in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- d6e2759 Change to more appropriate pointer declaration in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- fb0a81e Return PSA translated errors in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 5a1455d Remove useless braces in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 3bcef08 Update comments in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 549a3e4 Initialize uninitialized variable in ECHDE-PSK part of ssl_parse_client_key_exchange() by Neil Armstrong · 3 years, 4 months ago
- 039db29 Implement PSA server-side ECDHE-PSK by Neil Armstrong · 3 years, 5 months ago
- e88d190 Set ecdh_psa_privkey_is_external to 1 right after setting ecdh_psa_privkey in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
- f716a70 Rename mbedtls_ssl_handshake_params variable ecdh_psa_shared_key to ecdh_psa_privkey_is_external by Neil Armstrong · 3 years, 4 months ago