- 2dfcea2 mbedtls_ssl_config min_tls_version, max_tls_version by Glenn Strauss · 3 years, 5 months ago
- da7851c Rename mbedtls_ssl_session minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
- 07c6416 Rename mbedtls_ssl_transform minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
- dff8462 Unify internal/external TLS protocol version enums by Glenn Strauss · 3 years, 5 months ago
- 1b05aff Merge pull request #5624 from superna9999/5312-tls-server-ecdh by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- f716a70 Rename mbedtls_ssl_handshake_params variable ecdh_psa_shared_key to ecdh_psa_privkey_is_external by Neil Armstrong · 3 years, 4 months ago
- 0e980e8 Merge pull request #5640 from ronald-cron-arm/version-negotiation-2 by Ronald Cron · 3 years, 4 months ago
- 33a9d61 Merge pull request #5638 from paul-elliott-arm/ssl_cid_accessors by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 451114f Merge pull request #5647 from superna9999/5179-follow-up-tls-record-hmac-no-mdinfo by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- 0113cf1 Add accessor for own cid to ssl context by Paul Elliott · 3 years, 5 months ago
- 8113d25 Add ecdh_psa_shared_key flag to protect PSA privkey if imported by Neil Armstrong · 3 years, 4 months ago
- a980adf Merge pull request #5637 from ronald-cron-arm/version-negotiation-1 by Ronald Cron · 3 years, 4 months ago
- 1fa4f68 ssl_tls.c: Return in error if default config fails by Ronald Cron · 3 years, 4 months ago
- 37bdaab tls: Simplify the logic of the config version check and test it by Ronald Cron · 3 years, 4 months ago
- e451295 Remove md_info in ssl_tls12_populate_transform() when USE_PSA_CRYPTO is defined by Neil Armstrong · 3 years, 5 months ago
- 3304f25 Merge pull request #5653 from paul-elliott-arm/handshake_over by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- f660655 TLS: Allow hybrid TLS 1.2/1.3 in default configurations by Ronald Cron · 3 years, 5 months ago
- e71639d Simplify TLS major version default value setting by Ronald Cron · 3 years, 5 months ago
- 9f0fba3 Add logic to switch to TLS 1.2 by Ronald Cron · 3 years, 6 months ago
- e1d3f06 Allow hybrid TLS 1.3 + TLS 1.2 configuration by Ronald Cron · 3 years, 6 months ago
- fbd9f99 ssl_tls.c: Move some client specific functions to ssl_client.c by Ronald Cron · 3 years, 5 months ago
- 27c85e7 ssl_tls.c: Unify TLS 1.2 and TLS 1.3 SSL state logs by Ronald Cron · 3 years, 5 months ago
- 8f6d39a Make some handshake TLS 1.3 utility routines available for TLS 1.2 by Ronald Cron · 3 years, 5 months ago
- 086ee0b ssl_tls.c: Reject TLS 1.3 version configuration for server by Ronald Cron · 3 years, 5 months ago
- a25cf58 ssl_tls.c: Remove one unnecessary minor version check by Ronald Cron · 3 years, 5 months ago
- c2f13a0 ssl_tls.c: Modify mbedtls_ssl_set_calc_verify_md() by Ronald Cron · 3 years, 5 months ago
- 4dcbca9 ssl_tls.c: Move mbedtls_ssl_set_calc_verify_md() to TLS 1.2 section by Ronald Cron · 3 years, 5 months ago
- 81591aa ssl_tls.c: Remove ssl_set_handshake_prfs unnecessary minor_ver param by Ronald Cron · 3 years, 5 months ago
- f12b81d ssl_tls.c: Fix PSA ECDH private key destruction by Ronald Cron · 3 years, 5 months ago
- 8540cf6 ssl_tls.c: Propose PKCS1 v1.5 signatures with SHA_384/512 by Ronald Cron · 3 years, 5 months ago
- 39f2f73 Merge pull request #5630 from ronald-cron-arm/restore-full-compat-testing by Manuel Pégourié-Gonnard · 3 years, 4 months ago
- fb39f15 ssl_tls.c: Use ETM status only in CBC mode case by Ronald Cron · 3 years, 4 months ago
- 9b93c0d Change cookie parameters for dtls and tls 1.3 by XiaokangQian · 3 years, 6 months ago
- 27b0d94 Use mbedtls_ssl_is_handshake_over() by Paul Elliott · 3 years, 5 months ago
- f4042f0 Merge pull request #5573 from superna9999/5176-5177-5178-5179-tsl-record-hmac by Manuel Pégourié-Gonnard · 3 years, 5 months ago
- 8d7afc6 Merge pull request #5523 from ronald-cron-arm/one-flush-output-development by Ronald Cron · 3 years, 5 months ago
- 29c0c04 Only make PSA HMAC key exportable when NULL or CBC & not EtM in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 5 months ago
- 3f20b77 Improve comment by Ronald Cron · 3 years, 5 months ago
- 66dbf91 TLS 1.3: Do not send handshake data in handshake step handlers by Ronald Cron · 3 years, 6 months ago
- 6828d8f Return MBEDTLS_ERR_SSL_BAD_INPUT_DATA if MAC algorithm isn't supported in ssl_tls.c by Neil Armstrong · 3 years, 5 months ago
- 321116c Remove spurious debug in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 5 months ago
- 6989407 Add accessor to retrieve SNI during handshake by Glenn Strauss · 3 years, 6 months ago
- 36872db Provide means to reset handshake cert list by Glenn Strauss · 3 years, 6 months ago
- 2ed9527 Add server certificate selection callback by Glenn Strauss · 3 years, 6 months ago
- e858996 Use PSA version of mbedtls_ct_hmac() in mbedtls_ssl_decrypt_buf() by Neil Armstrong · 3 years, 5 months ago
- cf8841a Remove non-PSA MAC keys in mbedtls_ssl_transform when MBEDTLS_USE_PSA_CRYPTO is defined by Neil Armstrong · 3 years, 5 months ago
- 0760ade Setup & Import HMAC keys in ssl_tls12_populate_transform() by Neil Armstrong · 3 years, 5 months ago
- 39b8e7d Add, Initialize & Free HMAC keys in mbedtls_ssl_transform by Neil Armstrong · 3 years, 5 months ago
- c63a1e0 Fix mbedtls_ssl_get_version() for TLSv1.3 by Gilles Peskine · 3 years, 7 months ago
- e1a0c25 New function to access the TLS version from a context as an enum by Gilles Peskine · 3 years, 7 months ago
- f1b23ca move wrong comments by Jerry Yu · 3 years, 6 months ago
- 18621df remove extra empty line by Jerry Yu · 3 years, 6 months ago
- 50f2f70 remove extra guards by Jerry Yu · 3 years, 6 months ago
- 840fbb2 guards populate_transform reference by Jerry Yu · 3 years, 6 months ago
- 4f9e3ef move session_save/load_tls12 by Jerry Yu · 3 years, 6 months ago
- d9d91da move sig_hash_* by Jerry Yu · 3 years, 6 months ago
- ee40f9d move get_key_exchange_md_tls12 by Jerry Yu · 3 years, 6 months ago
- 9bccc4c move populate_transform by Jerry Yu · 3 years, 6 months ago
- e93ffcd move tls_prf_get_type by Jerry Yu · 3 years, 6 months ago
- 392112c move tls12prf_from_cs by Jerry Yu · 3 years, 6 months ago
- 0b3d7c1 move parse_finished by Jerry Yu · 3 years, 6 months ago
- 3c8e47b move write_finished by Jerry Yu · 3 years, 6 months ago
- 2a9fff5 move wrapup by Jerry Yu · 3 years, 6 months ago
- aef0015 move wrapup_free_hs_transform by Jerry Yu · 3 years, 6 months ago
- b7ba49e move calc_finished_tls_sha384 by Jerry Yu · 3 years, 6 months ago
- 615bd6f move calc_finished_tls_sha256 by Jerry Yu · 3 years, 6 months ago
- d952669 move write_certificate by Jerry Yu · 3 years, 6 months ago
- c2c673d move resend_hello_request by Jerry Yu · 3 years, 6 months ago
- ce3dca4 move psk_derive_premaster by Jerry Yu · 3 years, 6 months ago
- c1cb384 move calc_verify_tls_sha384 by Jerry Yu · 3 years, 6 months ago
- 8392e0d move calc_verify_tls_sha256 by Jerry Yu · 3 years, 6 months ago
- d62f87e move derive_keys by Jerry Yu · 3 years, 6 months ago
- 2a7b5ac move compute_master by Jerry Yu · 3 years, 6 months ago
- d6ab235 move use_opaque_psk by Jerry Yu · 3 years, 6 months ago
- f009d86 move set_handshake_prfs by Jerry Yu · 3 years, 6 months ago
- dc7bd17 move tls_prf_sha256/384 by Jerry Yu · 3 years, 6 months ago
- ed14c93 add static prototypes by Jerry Yu · 3 years, 6 months ago
- 53d23e2 Guards tls_prf functions with TLS1_2 by Jerry Yu · 3 years, 6 months ago
- c73c618 Wrap function not used by test_tls13_only by Jerry Yu · 3 years, 6 months ago
- bef175d Wrap derive_keys with TLS1_2 option by Jerry Yu · 3 years, 6 months ago
- db8c48a tls13_only:Remove unnecessary functions by Jerry Yu · 3 years, 6 months ago
- 7d23963 fix wrong setting of max_minor version by Jerry Yu · 3 years, 6 months ago
- c5aef88 tls13_only: guard ssl_{cli,srv}.c with TLS1_2 by Jerry Yu · 3 years, 7 months ago
- c10f6b4 tls13_only: simple test pass by Jerry Yu · 3 years, 7 months ago
- c3091b1 tls13_only: compile pass by Jerry Yu · 3 years, 7 months ago
- 3d1f8b9 Merge pull request #5532 from ronald-cron-arm/tls13_and_use_psa_crypto by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- b788c04 Use PSA status to Mbed TLS error code conversion function by Ronald Cron · 3 years, 6 months ago
- e14b644 Merge pull request #5456 from mpg/cleanup-ecdh-psa by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- f6893e1 Finalize PSA hash operations in TLS 1.3 by Ronald Cron · 3 years, 7 months ago
- 62b49cd Merge pull request #5472 from yuhaoth/pr/move-client-auth by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- 6ca6faa Merge pull request #5080 from xffbai/add-tls13-read-certificate-request by Ronald Cron · 3 years, 6 months ago
- c234ecf Update mbedtls_ssl_handshake_free() and address review comments. by Xiaofei Bai · 3 years, 6 months ago
- 51f515a update based on comments by Xiaofei Bai · 3 years, 6 months ago
- 422370d Improve a comment and fix some whitespace by Manuel Pégourié-Gonnard · 3 years, 6 months ago
- 6928a51 Compile mbedtls_ssl_cipher_to_psa() conditionally under MBEDTLS_USE_PSA_CRYPTO only by Przemyslaw Stekiel · 3 years, 6 months ago
- 0d63b84 Add mbedtls_ssl_check_curve_tls_id() (internal) by Manuel Pégourié-Gonnard · 3 years, 7 months ago
- d66387f Init psa status to PSA_ERROR_CORRUPTION_DETECTED by Przemyslaw Stekiel · 3 years, 6 months ago
- f9cd608 ssl_tls1X_populate_transform(): import psa keys only if alg is not MBEDTLS_SSL_NULL_CIPHER by Przemyslaw Stekiel · 3 years, 6 months ago
- 77aec8d Rename ssl_psa_status_to_mbedtls->psa_ssl_status_to_mbedtls by Przemyslaw Stekiel · 3 years, 6 months ago
- 89dad93 Rename psa_status_to_mbedtls->ssl_psa_status_to_mbedtls and add conversion for PSA_ERROR_INVALID_SIGNATURE by Przemyslaw Stekiel · 3 years, 6 months ago