1. 9fbb0cf Merge remote-tracking branch 'origin/development' into safer-ct5 by Dave Rodgman · 2 years, 1 month ago
  2. db041cc Merge pull request #7665 from AndrzejKurek/optimize-error-translation-code-size by Tom Cosgrove · 2 years, 1 month ago
  3. 6835b4a tls: always zeroize buffer on exit by Valerio Setti · 2 years, 1 month ago
  4. 3589a4c tls: keep buffer declaration in a single line by Valerio Setti · 2 years, 1 month ago
  5. b46217d tls: never destroy a priavte key that is not owned/created by TLS module by Valerio Setti · 2 years, 1 month ago
  6. 0813b6f tls: optimize code in ssl_get_ecdh_params_from_cert() by Valerio Setti · 2 years, 1 month ago
  7. 1e4a030 Fix wrong array size calculation in error translation code by Andrzej Kurek · 2 years, 2 months ago
  8. 1c7a998 Add missing ifdefs by Andrzej Kurek · 2 years, 2 months ago
  9. 0064484 Optimize error translation code size by Andrzej Kurek · 2 years, 2 months ago
  10. c216d94 Merge remote-tracking branch 'origin/development' into safer-ct5 by Dave Rodgman · 2 years, 2 months ago
  11. 6076f41 Remove hash_info.[ch] by Manuel Pégourié-Gonnard · 2 years, 4 months ago
  12. 8857984 Replace hash_info macro with MD macro by Manuel Pégourié-Gonnard · 2 years, 4 months ago
  13. 7b11368 Merge pull request #7438 from valeriosetti/issue7074 by Manuel Pégourié-Gonnard · 2 years, 2 months ago
  14. 293eedd Use new CT interface in ssl_tls12_server.c by Dave Rodgman · 2 years, 2 months ago
  15. d040509 tls: use pk_get_group_id() instead of directly accessing PK's structure by Valerio Setti · 2 years, 2 months ago
  16. f9f0ba8 Use functions in alignment.h to get value by Thomas Daubney · 2 years, 2 months ago
  17. 9720778 tls/x509: minor enhancement for using the new private key format by Valerio Setti · 2 years, 2 months ago
  18. 3f00b84 pk: fix build issues by Valerio Setti · 2 years, 3 months ago
  19. 77a7568 pk: align library and tests code to the new internal functions by Valerio Setti · 2 years, 3 months ago
  20. 4f387ef pk: use better naming for the new key ID field by Valerio Setti · 2 years, 3 months ago
  21. 048cd44 pk: fix library code for using the new opaque key solution by Valerio Setti · 2 years, 3 months ago
  22. fe01ec2 tls12: srv: Use sizeof() instead of constant by Ronald Cron · 2 years, 4 months ago
  23. c564938 Add downgrade protection mechanism by Ronald Cron · 2 years, 4 months ago
  24. 6291b23 tls: Add logic in handshake step to enable server version negotiation by Ronald Cron · 2 years, 5 months ago
  25. 77a904c ssl: remove useless guard by Valerio Setti · 2 years, 4 months ago
  26. 1fa5c56 ssl_tls: fix guard symbols for EC accelerated tests by Valerio Setti · 2 years, 4 months ago
  27. 6ef9bb3 Implement and use MBEDTLS_STATIC_ASSERT() by Tom Cosgrove · 2 years, 5 months ago
  28. 8a045ce Unify PSA to Mbed TLS error translation by Andrzej Kurek · 2 years, 7 months ago
  29. b8b07aa Handle errors from functions that now return int by Manuel Pégourié-Gonnard · 2 years, 6 months ago
  30. 449bd83 Switch to the new code style by Gilles Peskine · 2 years, 7 months ago
  31. 1e868cc fix several typos and extra blank spaces by Valerio Setti · 2 years, 7 months ago
  32. 2b5d3de remove remaining occurencies of mbedtls_ecc_group_to_psa() from TLS by Valerio Setti · 2 years, 7 months ago
  33. 40d9ca9 tls: remove useless legacy function by Valerio Setti · 2 years, 7 months ago
  34. 18c9fed tls: remove dependency from mbedtls_ecp_curve functions by Valerio Setti · 2 years, 7 months ago
  35. ac5ca5a Refactor cookie members of handshake struct by Jerry Yu · 3 years, 5 months ago
  36. ffc330f Merge pull request #6264 from hannestschofenig/rfc9146_2 by Manuel Pégourié-Gonnard · 2 years, 8 months ago
  37. ef25a99 Merge pull request #6533 from valeriosetti/issue5847 by Manuel Pégourié-Gonnard · 2 years, 8 months ago
  38. 819de86 tls: removed extra white spaces and other minor fix by Valerio Setti · 2 years, 9 months ago
  39. 6b3dab0 tls: psa_pake: use a single function for round one and two in key exchange read/write by Valerio Setti · 2 years, 9 months ago
  40. 9bed8ec tls: psa_pake: make round two reading function symmatric to the writing one by Valerio Setti · 2 years, 9 months ago
  41. a988364 tls: psa_pake: fix missing new round one parsing function on tls12 server by Valerio Setti · 2 years, 9 months ago
  42. a08b1a4 tls: psa_pake: move move key exchange read/write functions to ssl_tls.c by Valerio Setti · 2 years, 9 months ago
  43. 96a0fd9 Fix signature algorithms list entry getting overwritten by length. by Paul Elliott · 2 years, 9 months ago
  44. 6f1b574 tls12: psa_pake: simplify EC info parsing in server's 2nd round by Valerio Setti · 2 years, 9 months ago
  45. 02c25b5 tls12: psa_pake: use common code for parsing/writing round one and round two data by Valerio Setti · 2 years, 9 months ago
  46. d384b64 Merge branch 'development' into rfc9146_2 by Dave Rodgman · 2 years, 9 months ago
  47. ca7d506 Use PSA PAKE API when MBEDTLS_USE_PSA_CRYPTO is selected by Neil Armstrong · 3 years, 2 months ago
  48. 744fd37 Merge pull request #6467 from davidhorstmann-arm/fix-unusual-macros-0 by Gilles Peskine · 2 years, 9 months ago
  49. 3a334c2 Minor improvements to ssl_tls12_server.c by David Horstmann · 2 years, 9 months ago
  50. e0af39a Refactor macro-spanning ifs in ssl_tls12_server.c by David Horstmann · 2 years, 10 months ago
  51. 945b23c Include platform.h unconditionally: automatic part by Gilles Peskine · 2 years, 11 months ago
  52. 5166954 Make more use of MBEDTLS_MAX_HASH_SIZE macro by Przemek Stekiel · 2 years, 11 months ago
  53. fd6cca4 CID update to RFC 9146 by Hannes Tschofenig · 3 years, 10 months ago
  54. 70dfd4c ssl_tls12_server: fix potential NULL-dereferencing if local certificate was not set. by Leonid Rozenboim · 3 years ago
  55. 20f89a9 Remove uses of SSL compression by Thomas Daubney · 3 years, 1 month ago
  56. f518f81 Ensure return for mbedtls_ssl_write_alpn_ext() is checked by Paul Elliott · 3 years, 1 month ago
  57. ce7d76e Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr by Ronald Cron · 3 years, 1 month ago
  58. 4d7af2a Merge pull request #5835 from superna9999/5831-tls-1-2-ciphersuite-selection by Manuel Pégourié-Gonnard · 3 years, 1 month ago
  59. 999ef70 Add accessors to config DN hints for cert request by Glenn Strauss · 3 years, 5 months ago
  60. 9f1176a Move preferred_hash_for_sig_alg() check after ssl_pick_cert() and check if hash alg is supported with mbedtls_pk_can_do_ext() by Neil Armstrong · 3 years, 1 month ago
  61. 9f4606e Rename mbedtls_ssl_get_ciphersuite_sig_pk_ext_XXX in mbedtls_ssl_get_ciphersuite_sig_pk_ext_XXX() by Neil Armstrong · 3 years, 1 month ago
  62. 0c9c10a Introduce mbedtls_ssl_get_ciphersuite_sig_pk_ext_alg() and use it in ssl_pick_cert() by Neil Armstrong · 3 years, 3 months ago
  63. acb3992 Add ALPN extension to the server side by XiaokangQian · 3 years, 1 month ago
  64. a3115dc Mark static int SSL functions CHECK_RETURN_CRITICAL by Manuel Pégourié-Gonnard · 3 years, 1 month ago
  65. b64fb62 Fix unchecked return value from internal function by Manuel Pégourié-Gonnard · 3 years, 2 months ago
  66. e0469b5 Merge pull request #931 from AndrzejKurek/clihlo_cookie_pxy_fix by Gilles Peskine · 3 years, 1 month ago
  67. ca3c6a5 Merge pull request #5817 from xkqian/tls13_add_server_name by Ronald Cron · 3 years, 1 month ago
  68. 755ddff Fix print format in a debug message by Andrzej Kurek · 3 years, 2 months ago
  69. cbe14ec Improve variable extracting operations by using MBEDTLS_GET macros by Andrzej Kurek · 3 years, 2 months ago
  70. b58cf0d Split a debug message into two - for clarity by Andrzej Kurek · 3 years, 2 months ago
  71. 364fd8b More SSL debug messages for ClientHello parsing by Gilles Peskine · 3 years, 5 months ago
  72. a3344f7 Merge pull request #5767 from leorosen/avoid-null-args by Dave Rodgman · 3 years, 2 months ago
  73. 9b2b771 Change mbedtls_ssl_parse_server_name_ext base on comments by XiaokangQian · 3 years, 2 months ago
  74. 40a3523 Add support of server name extension to server side by XiaokangQian · 3 years, 3 months ago
  75. 9edf51d Merge pull request #5785 from gabor-mezei-arm/5460_unify_parsing_sig_alg_ext by Ronald Cron · 3 years, 2 months ago
  76. 1142038 Better check for NULL pointer by Paul Elliott · 3 years, 3 months ago
  77. dd428d3 Fix incorrect error message by Paul Elliott · 3 years, 3 months ago
  78. 696956d Typo by Gabor Mezei · 3 years, 3 months ago
  79. 0a4298b Remove unnecessary duble conversion by Gabor Mezei · 3 years, 3 months ago
  80. 8b0ecbc Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. by Shaun Case · 3 years, 7 months ago
  81. 86acf05 Update signiture algorithm handling by Gabor Mezei · 3 years, 3 months ago
  82. c1051b6 Remove `MBEDTLS_SSL_SIG_ALG_SET` macro by Gabor Mezei · 3 years, 3 months ago
  83. a3d016c Rename and rewrite `mbedtls_ssl_sig_hash_set_find` function by Gabor Mezei · 3 years, 3 months ago
  84. 1226590 Explicitly set invalid value for the end of the signiture algorithm set by Gabor Mezei · 3 years, 3 months ago
  85. 15b95a6 Use common macro for the invalid signiture algorithm botn in TLS 1.2 and 1.3 by Gabor Mezei · 3 years, 3 months ago
  86. 078e803 Unify parsing of the signature algorithms extension by Gabor Mezei · 3 years, 3 months ago
  87. 8ecd668 Keep raw PSK when set via mbedtls_ssl_conf_psk() and feed as input_bytes by Neil Armstrong · 3 years, 3 months ago
  88. 80f6f32 Make mbedtls_ssl_psk_derive_premaster() only for when MBEDTLS_USE_PSA_CRYPTO is not selected by Neil Armstrong · 3 years, 3 months ago
  89. cd05f0b Drop skip PMS generation for opaque XXX-PSK now Opaque PSA key is always present when MBEDTLS_USE_PSA_CRYPTO selected by Neil Armstrong · 3 years, 3 months ago
  90. e952a30 Remove RAW PSK when MBEDTLS_USE_PSA_CRYPTO is selected by Neil Armstrong · 3 years, 3 months ago
  91. 61f237a Remove PSA-only code dealing with non-opaque PSA key by Neil Armstrong · 3 years, 3 months ago
  92. 67397fa Merge pull request #5704 from mprse/mixed_psk_2cx by Manuel Pégourié-Gonnard · 3 years, 3 months ago
  93. 8855e36 Merge pull request #5674 from superna9999/5668-abstract-tls-mode-cleanup by Gilles Peskine · 3 years, 3 months ago
  94. 99114f3 Fix build flags for opaque/raw psk checks by Przemek Stekiel · 3 years, 3 months ago
  95. cb322ea Enable support for psa opaque DHE-PSK key exchange on the server side by Przemek Stekiel · 3 years, 3 months ago
  96. 14d11b0 Enable support for psa opaque ECDHE-PSK key exchange on the server side by Przemek Stekiel · 3 years, 4 months ago
  97. aeb710f Enable support for psa opaque RSA-PSK key exchange on the server side by Przemek Stekiel · 3 years, 4 months ago
  98. 55132c6 Merge pull request #5703 from superna9999/5322-ecdh-remove-legacy-context by Manuel Pégourié-Gonnard · 3 years, 3 months ago
  99. 76b7407 Use MBEDTLS_SSL_SOME_SUITES_USE_CBC_ETM to enable ssl_write_encrypt_then_mac_ext() by Neil Armstrong · 3 years, 4 months ago
  100. ab555e0 Rename mbedtls_get_mode_from_XXX to mbedtls_ssl_get_mode_from_XXX by Neil Armstrong · 3 years, 4 months ago