Lucas Mulling
ba0aa64f5e
* Added generated files
* Version bump 3.6.4
* Assemble ChangeLog
* Properly initialize SSL endpoint objects
* Fix accidentally skipped test assertion
* Update framework pointer (release-sync)
* fix: additional MSVC v142 build issue with tls1.3 configuration enabled.
* Remove blank line
* Simplify changelog
* Add a note about processor memory reordering
* Add changelog
* Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING
* Improve some explanations
* Don't mutate dst_size
* Add __attribute__ ((nonstring)) to remove unterminated-string-initialization warning
* Note that GCM is also impacted
* Adjust test case with invalid base64
* Fix race condition in mbedtls_aesni_has_support
* mbedtls_base64_decode: test dst=NULL with dlen>0
* Explain some aspects of the tests
* mbedtls_base64_decode: insist on correct padding
* Added CVE's to ChangeLogs
* lms.c: Updated documentation
* test_suite_lms.data: Updated comments
* Fix mbedtls_base64_decode() accepting invalid inputs with 4n+1 digits
* mbedtls_base64_decode: assert sloppy behavior with bad number of =
* mbedtls_base64_decode: test the reported output length
* test_suite_lms: Added negative test for corrupted Merkle path
* test_suite_lms: Added a test for importing invalid sized key
* Added changelog for check return of merkle leaf
* Added changelog for lms enum casting
* Added changelog for lms overread
* Fix change log entry
* Fix build test programs in MSVC (due to a warning treated as error in winbase.h)
* Built-in lms driver: always zeroize output-buffer in create_merkle_leaf_value
* Built-in lms driver:Check return values of Merkle node creation
* Built-in lms/lmots driver: Harden public key import against enum truncation
* Built-in lms driver: Added input guard
* Add changelog
* Add fix for PEM underflow
* Add test using underflow-causing PEM keyfile
* Update framework with additional operation initialization checks
* Fix possible UB in mbedtls_asn1_write_raw_buffer()
* Fix psa_pake_operation_s member types
* Move PAKE size calculation macros, cipher suite and operation structs
* Add change log
* Move the inclusion of crypto_sizes.h and crypto_struct.h in crypto.h
* Add ChangeLog entry
* Improve unit tests for mbedtls_asn1_store_named_data
* Fix bug in mbedtls_asn1_store_named_data()
* Add tests for bug in mbedtls_x509_string_to_names()
* Restore standard initializers in _init tests
* Use short initializers for multipart operation structures
* Avoid a useless copy in cert_{req,write}
* Mark ssl_tls12_preset_suiteb_sig_algs const
* Mark ssl_tls12_preset_default_sig_algs const
* Fix type in ChangeLog
* Add comment on apparent type mismatch
* Remove redundant free loop
* Fix ECDSA documentation: blinding is no longer optional
* ECDSA is a special flower
* Note functions that store the RNG callback in a context
* Reference mbedtls_f_rng_t in public documentation
* Name and document the type of random generator callbacks
* Add credit to the reporters of the PKCS7 issue
* Grammar in comments
* Remove .gitmodules
* Changelog entry for the union initialization fixes
* Test with GCC 15 with sloppy union initialization
* Initialize MAC context in internal functions for one-shot MAC
* Initialize MAC context in internal functions for KDF
* Initialize driver context in setup functions
* Add unit test for new behaviour of string_to_names()
* Fix memory leak in cert_write & cert_req
* Fix runtime error in cert_write & cert_req
* Restore behaviour of mbedtls_x509write_set_foo_name()
* Fix undocumented free() in x509_string_to_names()
* Improve comments
* Update framework
* Allow gcc-15 to be in $PATH
* Enable drivers when testing with GCC 15
* GCC 15: Silence -Wunterminated-string-initialization
* Test with GCC 15
* Disable warning from gcc -pedantic on dlsym/dlopen
* Move persistent key tests to a separate .data file
* Move concurrent tests to a separate .data file
* Update obsolete section title
* Complain about a missing comma in multiline lists of strings
* Prepare framework for pylint check-str-concat-over-line-jumps
* framework: update reference
* Constify cipher_wrap:mbedtls_cipher_base_lookup_table
* Fix some test helper functions returning 0 on some failures
* Check the status of mbedtls_ssl_set_hostname()
* Add missing ifdef for mbedtls_ssl_tls13_exporter
* Add label_len argument to non-PSA tls_prf_generic
* Fix dependencies for TLS-Exporter tests
* Fix doxygen for MBEDTLS_SSL_KEYING_MATERIAL_EXPORT
* Fix mistake in previous comment change
* Fix HkdfLabel comment
* Allow maximum label length in Hkdf-Expand-Label
* Exporter: Add min. and max. label tests
* Fix max. label length in key material exporter
* Document BAD_INPUT_DATA error in key material exporter
* Fix requirements for TLS 1.3 Exporter compat test
* Use mbedtls_calloc, not regular calloc
* Add fixed compatibility test for TLS 1.3 Exporter
* Remove exporter compatibility test for TLS 1.3
* Fix openssl s_client invocation
* Print names of new tests properly
* Fix memory leak in example programs
* ssl-opt.sh: Add tests for keying material export
* mbedtls_test_ssl_do_handshake_with_endpoints: Zeroize endpoints
* Exporter tests: Don't use unavailbable constant
* Exporter tests: Add missing depends-ons
* Use one maximum key_len for all exported keys
* Exporter tests: Reduce key size in long key tests
* Exporter tests: Free endpoints before PSA_DONE()
* Exporter tests: Fix possible uninitialized variable use
* Coding style cleanup
* Exporter tests: Initialize allocated memory
* Exportert tests: Free endpoints and options
* Fix output size check for key material exporter
* Increase allowed output size of HKDF-Expand-Label
* Add more tests for keying material export
* Mention MBEDTLS_SSL_KEYING_MATERIAL_EXPORT in change log
* Fix #endif comment
* Enable MBEDTLS_SSL_KEYING_MATERIAL_EXPORT by default
* Create MBEDTLS_SSL_KEYING_MATERIAL_EXPORT option
* Remove TLS 1.2 Exporter if we don't have randbytes
* Revert "Store randbytes for TLS 1.2 TLS-Exporter"
* Fix typos in comments
* Use fewer magic numbers in TLS-Exporter functions
* Add label length argument to tls_prf_generic()
* Store randbytes for TLS 1.2 TLS-Exporter
* Fix coding style
* Fix build when one of TLS 1.2 or 1.3 is disabled
* Fix coding style
* Fix TLS exporter changelog entry
* Fix doxygen comment parameter name
* Fix typos in comment
* Fix mismatches in function declarations
* Fix key_len check in TLS-Exporter
* Actually set exporter defaults in ssl_client2
* Simplify mbedtls_ssl_tls13_exporter
* Add test for TLS-Exporter in TLS 1.3
* Fix commented out function declaration
* Add changelog entry for TLS-Exporter feature
* Add TLS-Exporter options to ssl_client2
* Add TLS-Exporter options to ssl_server2
* Implement TLS-Exporter feature
* programs: demo: do not source project_detection.sh directly
* Fix record insertion
* programs: demo: source project_detection.sh
* framework: update reference
* Update feature macro for 3.6
* Use HANDSHAKE_OVER in nominal test cases
* Improve comments
* Adapt dependencies to the 3.6 branch
* Use same dependencies for helper functions
* Tighten dependencies again
* Improve dependency declarations
* Tighten dependency declarations
* Improve documentation
* Remove redundant setup
* Fix copypasta
* Simulate closing the connection mid-message
* Also test inserting non-empty, non-handshake records
* Fix the build without MBEDTLS_DEBUG_C
* Fix the build in PSK-only configurations
* Fix printf of enum
* Pacify ancient clang -Wmissing-initializer
* Test split, coalesced-split and empty handshake records
* Create handshake record coalescing tests
* Document gotcha of move_handshake_to_state
* Add a log message on every SSL state transition
* Always call mbedtls_ssl_handshake_set_state
* Document assumption of mbedtls_get_pkcs_padding
* Modify ChangeLog entry to full plaintext recovery
* Add testcase for maximum padding length
* Remove unnecessary TEST_CF_PUBLIC macro call
* Update to the new name in usages as well
* Add missing credit for set_hostname issue
* cmake: Generate test_keys.h and test_certs.h in the build tree
* Update framework pointer
* Revert "Add auto-generated files"
* Restored framework as a submodule
* Deleted flattened framework dir.
* Appease check-names with prefix
* Disable check-names for static padding function
* Add ChangeLog entry for PKCS#7 side channel fix
* Fix timing side-channel in PKCS7 padding
* Add constant-flow testing for PKCS7 padding
OBS-URL: https://build.opensuse.org/package/show/security:tls/mbedtls?expand=0&rev=55
4 lines
133 B
Plaintext
4 lines
133 B
Plaintext
version https://git-lfs.github.com/spec/v1
|
|
oid sha256:c3a49794f7649f6e32c58e0fb7c4c3993367c7d10ec4ec7974970dafb07d515d
|
|
size 46485517
|