1. c00ccea Move def'n of X.509 time-verif funcs to hdr if no time available by Hanno Becker · 6 years ago
  2. de8869c Merge remote-tracking branch 'restricted/pr/608' into baremetal-proposed by Manuel Pégourié-Gonnard · 6 years ago
  3. 44ba6b0 Merge remote-tracking branch 'restricted/pr/594' into baremetal-proposed by Manuel Pégourié-Gonnard · 6 years ago
  4. 37261e6 Merge remote-tracking branch 'restricted/pr/601' into baremetal-proposed by Manuel Pégourié-Gonnard · 6 years ago
  5. 417d2ce Merge remote-tracking branch 'restricted/pr/584' into baremetal-proposed by Manuel Pégourié-Gonnard · 6 years ago
  6. c2cfdaa Allow config'n of incl of CertificateReq CA list Y/N at compile-time by Hanno Becker · 6 years ago
  7. 2d9623f Allow configuration of endpoint (cli/srv) at compile-time by Hanno Becker · 6 years ago
  8. 1f835fa Allow configuration of read timeouts at compile-time by Hanno Becker · 6 years ago
  9. e0200da Allow configuration of ConnectionID at compile-time by Hanno Becker · 6 years ago
  10. b0b2b67 Allow compile-time configuration of legacy renegotiation by Hanno Becker · 6 years ago
  11. acd4fc0 Allow compile-time configuration of authentication mode by Hanno Becker · 6 years ago
  12. de67154 Allow compile-time configuration of DTLS badmac limit by Hanno Becker · 6 years ago
  13. 1772c9f Move code to reduce probability of conflicts by Manuel Pégourié-Gonnard · 6 years ago
  14. c27fabf Fix typos caught by check-names.sh by Manuel Pégourié-Gonnard · 6 years ago
  15. 754b9f3 Introduce getter function for renego_status by Manuel Pégourié-Gonnard · 6 years ago
  16. 3652e99 Add getter function for handshake->resume by Manuel Pégourié-Gonnard · 6 years ago
  17. 33cb3e1 Remove cache callbacks from config on client by Manuel Pégourié-Gonnard · 6 years ago
  18. 320eb7a Expand documentation of new options a bit by Manuel Pégourié-Gonnard · 6 years ago
  19. 8a0944c Fix renaming oversight in documentation by Manuel Pégourié-Gonnard · 6 years ago
  20. e431563 Remove backticks in doxygen in config.h by Manuel Pégourié-Gonnard · 6 years ago
  21. f130b10 Restore config.h defaults by Manuel Pégourié-Gonnard · 6 years ago
  22. 29f2dd0 Address review comments by Jarno Lamsa · 6 years ago
  23. 4f74f6d Fix check-files, check-names and check-generated-features by Jarno Lamsa · 6 years ago
  24. ac57e82 Doxygen for new config options by Jarno Lamsa · 6 years ago
  25. 59bd12b Add new config MBEDTLS_SSL_SESSION_RESUMPTION by Jarno Lamsa · 6 years ago
  26. 590bf51 Enable MBEDTLS_SSL_SESSION_CACHE by default by Jarno Lamsa · 6 years ago
  27. 7be1406 Add config MBEDTLS_SSL_SESSION_CACHE by Jarno Lamsa · 6 years ago
  28. abd929c Merge branch 'mbedtls-2.16' into baremetal-2.16-01_07_19 by Hanno Becker · 6 years ago
  29. 69c3033 Don't return threading error on release()-without-acquire() calls by Hanno Becker · 6 years ago
  30. fc99a09 Don't allow nested CRT acquire()-calls if MBEDTLS_X509_ALWAYS_FLUSH by Hanno Becker · 6 years ago
  31. a4bfaa8 Make X.509 CRT cache reference counting unconditional by Hanno Becker · 6 years ago
  32. b653aa3 Don't mention pk_sign() in the context of public-key contexts by Hanno Becker · 6 years ago
  33. d92078f Fix copy pasta in x509_crt.h by Hanno Becker · 6 years ago
  34. 608de6a Reference copy-less versions of X.509 CRT frame/PK getters by Hanno Becker · 6 years ago
  35. 2656bfe [FIXUP] Fix typo in declaration of mbedtls_x509_memcasecmp() by Hanno Becker · 6 years ago
  36. 60785d1 Remove unused variable warning in on-demand X.509 parsing by Hanno Becker · 6 years ago
  37. 2ba9fbd Allow multiple concurrent readers for X.509 CRT frame and PK context by Hanno Becker · 6 years ago
  38. 4b70e12 Document mbedtls_x509_crt_pk_{acquire/release}() by Hanno Becker · 6 years ago
  39. b8670fc Document mbedtls_x509_crt_frame_{acquire/release}() by Hanno Becker · 6 years ago
  40. 5f268b3 Don't allow change of CRT frame returned by x509_crt_frame_acquire() by Hanno Becker · 6 years ago
  41. 9219f9e Fix yet another occasions of 'setup' vs. 'set up' typo in x509_crt.h by Hanno Becker · 6 years ago
  42. a4dfc0d Move X.509 CRT cache handling functions to x509_internal.h by Hanno Becker · 6 years ago
  43. 3c3d5c5 Fix spacing in declaration of mbedtls_asn1_get_sequence_of() by Hanno Becker · 6 years ago
  44. c0dab62 Fix typo 'setup' -> 'set up' throughout x509_crt.h by Hanno Becker · 6 years ago
  45. fd5c185 Use uint16_t to store key usage field in X.509 CRT by Hanno Becker · 6 years ago
  46. 00d3903 Move internal mbedtls_x509_crt_cache to x509_internal.h by Hanno Becker · 6 years ago
  47. f332a97 Add ASN.1 API to free linked list representation of ASN.1 sequences by Hanno Becker · 6 years ago
  48. f6bc888 Move declarations of internal X.509 functions to separate header by Hanno Becker · 6 years ago
  49. 7642835 Move existence check for pk/frame to mbedtls_x509_crt_provide_xxx() by Hanno Becker · 6 years ago
  50. bc68519 Implement MBEDTLS_X509_ALWAYS_FLUSH by Hanno Becker · 6 years ago
  51. ffcd8c3 Introduce compile-time option to always flush X.509 CRT caches by Hanno Becker · 6 years ago
  52. c6d1c3e Remove frame/pk parameter from mbedtls_x509_crt_xxx_release() by Hanno Becker · 6 years ago
  53. 1e11f21 Solely use raw X.509 name data references including SEQUENCE header by Hanno Becker · 6 years ago
  54. 4e021c8 Remove raw SubjectAltNames and ExtKeyUsage from legacy CRT struct by Hanno Becker · 6 years ago
  55. 2bcc764 Give x509_{sequence|name}_free() external linkage by Hanno Becker · 6 years ago
  56. ab6c8ea Add public API to query SubjectAltNames and ExtKeyUsage extensions by Hanno Becker · 6 years ago
  57. 63e6998 Add public API to query subject and issuer from CRT by Hanno Becker · 6 years ago
  58. 823efad Add public API to query for CRT frame and PK by Hanno Becker · 6 years ago
  59. 180f7bf Add compile-time option to remove legacy CRT fields by Hanno Becker · 6 years ago
  60. b6c39fc Add parsing cache to `mbedtls_x509_crt` by Hanno Becker · 6 years ago
  61. 343fec0 Add version of MBEDTLS_X509_SAFE_SNPRINTF supporting cleanup section by Hanno Becker · 6 years ago
  62. 21f5567 Introduce X.509 CRT frame structure by Hanno Becker · 6 years ago
  63. 6b37812 Add `next_merged` field to X.509 name comparison abort callback by Hanno Becker · 6 years ago
  64. b59d3f1 Add single function to parse ASN.1 AlgorithmIdentifier to x509.c by Hanno Becker · 6 years ago
  65. b3def1d Move length check into mbedtls_x509_memcasecmp() by Hanno Becker · 6 years ago
  66. 8730610 Introduce ASN.1 API for traversing ASN.1 SEQUENCEs by Hanno Becker · 6 years ago
  67. ded167e Add raw buffer holding SubjectAlternativeName ext to CRT structure by Hanno Becker · 6 years ago
  68. e1956af Check for extended key usage by traversing raw extension data by Hanno Becker · 6 years ago
  69. 7ec9c36 Add buffer holding raw ExtKeyUsage extension data to CRT struct by Hanno Becker · 6 years ago
  70. 67284cc Add abort condition callback to `mbedtls_x509_name_cmp_raw()` by Hanno Becker · 6 years ago
  71. 7dee12a Make use of raw comparison function in CRT verification by Hanno Becker · 6 years ago
  72. f8a4286 Add buffers with raw issuer/subject data to CRT structure by Hanno Becker · 6 years ago
  73. a632e36 Add buffer with raw issuer data to CRL structure by Hanno Becker · 6 years ago
  74. a3a2ca1 Provide X.509 name comparison based on raw ASN.1 data by Hanno Becker · 6 years ago
  75. 88de342 Move x509_name_cmp() from x509_crt.c to x509.c by Hanno Becker · 6 years ago
  76. 83cd867 Remove `sig_oid` parameter from mbedtls_x509_sig_alg_gets() by Hanno Becker · 6 years ago
  77. b40dc58 Introduce a helper macro to check for ASN.1 string tags by Hanno Becker · 6 years ago
  78. 7f376f4 Allow compile-time configuration of DTLS anti replay by Hanno Becker · 6 years ago
  79. ab1ce76 Mention possibility of hardcoding SSL config in ssl.h by Hanno Becker · 6 years ago
  80. f765ce6 Remove ExtendedMS configuration API if hardcoded at compile-time by Hanno Becker · 6 years ago
  81. 57e72c7 Move getter functions for SSL configuration to ssl_internal.h by Hanno Becker · 6 years ago
  82. 4c4a2e1 Don't break func'def after linkage type, fixing check-names.sh by Hanno Becker · 6 years ago
  83. 1ab322b Remove extended_ms field from HS param if ExtendedMS enforced by Hanno Becker · 6 years ago
  84. a49ec56 Introduce getter function for `extended_ms` field in HS struct by Hanno Becker · 6 years ago
  85. 3010d55 Introduce helper macro indicating if use of ExtendedMS is enforced by Hanno Becker · 6 years ago
  86. aabbb58 Exemplify harcoding SSL config at compile-time in example of ExtMS by Hanno Becker · 6 years ago
  87. 5ecbd14 Merge remote-tracking branch 'origin/pr/2701' into mbedtls-2.16 by Jaeden Amero · 6 years ago
  88. 096bccf Merge remote-tracking branch 'origin/pr/2450' into mbedtls-2.16 by Jaeden Amero · 6 years ago
  89. 5882dd0 Remove CRT digest from SSL session if !RENEGO + !KEEP_PEER_CERT by Hanno Becker · 6 years ago
  90. d972f00 Use consistent error messages in check_config.h by Hanno Becker · 6 years ago
  91. 2984bd2 Add config sanity check for !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE by Hanno Becker · 6 years ago
  92. 24bc570 Improve documentation of mbedtls_ssl_get_peer_cert() by Hanno Becker · 6 years ago
  93. 3ed6457 Improve documentation of MBEDTLS_SSL_KEEP_PEER_CERTIFICATE by Hanno Becker · 6 years ago
  94. dd68931 Fix indentation of Doxygen comment in ssl_internal.h by Hanno Becker · 6 years ago
  95. e669770 Remove misleading and redundant guard around restartable ECC field by Hanno Becker · 6 years ago
  96. 3bf8cdf Add field for peer's raw public key to TLS handshake param structure by Hanno Becker · 6 years ago
  97. 32c530e Add raw public key buffer bounds to mbedtls_x509_crt struct by Hanno Becker · 6 years ago
  98. 2e6d347 Remove peer CRT from mbedtls_ssl_session if !KEEP_PEER_CERT by Hanno Becker · 6 years ago
  99. e4aeb76 Parse and verify peer CRT chain in local variable by Hanno Becker · 6 years ago
  100. 9fb6e2e Extend mbedtls_ssl_session by buffer holding peer CRT digest by Hanno Becker · 6 years ago