TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / 0b0b522932ed70e93f18eca66dede570ea1a00a3 / ChangeLog
  1. 0b0b522 Fix compiler warnings on iOS by Manuel Pégourié-Gonnard · 11 years ago
  2. 7d75ea4 x509_crt_parse() did not increase total_failed on PEM error by Manuel Pégourié-Gonnard · 11 years ago
  3. 86792a6 Fix ssl_close_notify() with non-blocking I/O by Manuel Pégourié-Gonnard · 11 years ago
  4. 066c1f6 Fix potential bad read in parsing ServerHello by Manuel Pégourié-Gonnard · 11 years ago
  5. 6b44038 Fix memory leak parsing some X.509 certs by Manuel Pégourié-Gonnard · 11 years ago
  6. 695266c Updated to version 1.2.11 by Paul Bakker · 11 years ago
  7. bbc843f Fix base64_decode() to return and check length correctly by Paul Bakker · 11 years ago
  8. 03917bf Disable broken Sparc64 bn_mul assembly by Manuel Pégourié-Gonnard · 11 years ago
  9. 4564af9 Fix asm format of bn_mul.h for more portability by Manuel Pégourié-Gonnard · 11 years ago
  10. 22ca9c0 Fix preprocessor checks for bn_mul PPC asm by Barry K. Nathan · 11 years ago
  11. 5bad6af Fix length checking for AEAD ciphersuites by Paul Bakker · 11 years ago
  12. 312da33 Introduce polarssl_zeroize() instead of memset() for zeroization by Paul Bakker · 11 years ago
  13. 75ee010 Stricter check on SSL ClientHello internal sizes compared to actual packet size by Paul Bakker · 11 years ago
  14. 55bdbc1 Make compilation on DragonFly work by Markus Pfeiffer · 11 years ago
  15. 358d325 Fix bug with mpi_fill_random() on big-endian by Paul Bakker · 11 years ago
  16. 95a11f8 On OpenBSD, use arc4random_buf() instead of rand() to prevent warnings by Paul Bakker · 11 years ago
  17. b0af563 rsa_check_pubkey() now allows an E up to N by Paul Bakker · 11 years ago
  18. 838ed3c Improve interop by not writing ext_len in ClientHello when 0 by Paul Bakker · 11 years ago
  19. 243d618 Reject certificates with times not in UTC by Paul Bakker · 11 years ago
  20. f48de95 Use UTC to heck certificate validity by Paul Bakker · 11 years ago
  21. dedce0c Prevent potential NULL pointer dereference in ssl_read_record() by Paul Bakker · 11 years ago
  22. 6995efe Potential memory leak in mpi_exp_mod() when error occurs during by Paul Bakker · 11 years ago
  23. 3cbaf1e Add ssl_close_notify() to servers that missed it by Paul Bakker · 11 years ago
  24. 358a841 x509_get_current_time() uses localtime_r() to prevent thread issues by Paul Bakker · 11 years ago
  25. 24aaf44 Make sure no random pointer occur during failed malloc()'s by Paul Bakker · 11 years ago
  26. bc89849 Improvements to tests/Makefile when using shared library by Paul Bakker · 11 years ago
  27. 1e94237 Support for seed file writing and reading in Entropy by Paul Bakker · 11 years ago
  28. b000f82 ssl_init() left a dirty in_ctr pointer on failed allocation of out_ctr by Paul Bakker · 11 years ago
  29. 57291a7 Work around a compiler bug on OS X. by Manuel Pégourié-Gonnard · 11 years ago
  30. 3baeb15 Update changelog for cmake changes by Manuel Pégourié-Gonnard · 11 years ago
  31. e635604 Don't try to use MIPS32 asm macros on MIPS64 by Alex Wilson · 11 years ago
  32. be04673 Forbid sequence number wrapping by Manuel Pégourié-Gonnard · 11 years ago
  33. 50a5c53 Reject certs and CRLs from the future by Paul Bakker · 11 years ago
  34. 963918b Countermeasure against "triple handshake" attack by Manuel Pégourié-Gonnard · 11 years ago
  35. 57ca570 Fixed CMake symlinking on out-of-source builds by Paul Bakker · 11 years ago
  36. 6d841c2 Fix verion-major intolerance by Manuel Pégourié-Gonnard · 11 years ago
  37. e96bfbc Fixed testing with out-of-source builds using cmake by Paul Bakker · 11 years ago
  38. c675e4b Fix bug in RSA PKCS#1 v1.5 "reversed" operations by Manuel Pégourié-Gonnard · 12 years ago
  39. af0ccc8 SMTP lines are officially terminated with CRLF, ssl_mail_client fixed by Paul Bakker · 12 years ago
  40. 0b6355d Updated ChangeLog by Paul Bakker · 11 years ago
  41. d15718c Updated ChangeLog by Paul Bakker · 11 years ago
  42. d83584e Fixed potential overflow in certificate size in ssl_write_certificate() by Paul Bakker · 12 years ago
  43. 78e8196 Added missing MPI_CHK() around some statements by Paul Bakker · 12 years ago
  44. 40cc914 Fixed x509_crt_parse_path() bug on Windows platforms by Paul Bakker · 11 years ago
  45. b9f6d50 crypt_and_hash: check MAC earlier by Manuel Pégourié-Gonnard · 12 years ago
  46. a1caf6e SSL now gracefully handles missing RNG by Paul Bakker · 12 years ago
  47. c941adb Fixed X.509 hostname comparison (with non-regular characters) by Paul Bakker · 11 years ago
  48. e46b177 Make get_pkcs_padding() constant-time by Paul Bakker · 11 years ago
  49. 9ccb211 Introduced POLARSSL_HAVE_READDIR_R for systems without it by Paul Bakker · 11 years ago
  50. 6b06502 Changed RSA blinding to a slower but thread-safe version by Paul Bakker · 12 years ago polarssl-1.2.10
  51. adace27 Prepped for 1.2.10 release by Paul Bakker · 12 years ago
  52. 178e744 Fixed MS VC project files by Paul Bakker · 12 years ago
  53. 495830d Fixed ssl_pkcs11_decrypt() prototype by Paul Bakker · 12 years ago
  54. 62087ee Fixed memory leak in rsa.c introduced in 43f9799 by Paul Bakker · 12 years ago
  55. 60ad84f Fixed release date for 1.2.9 by Paul Bakker · 12 years ago polarssl-1.2.9
  56. e45574e Prepped for 1.2.9 release by Paul Bakker · 12 years ago
  57. 43f9799 RSA blinding on CRT operations to counter timing attacks by Paul Bakker · 12 years ago
  58. 88a2264 Fixed potential file descriptor leaks by Paul Bakker · 12 years ago
  59. f65fbee x509_verify() now case insensitive for cn (RFC 6125 6.4) by Paul Bakker · 12 years ago
  60. a565ace Fixed potential memory leak when failing to resume a session by Paul Bakker · 12 years ago
  61. 78020fe Added fixes to ChangeLog by Paul Bakker · 12 years ago
  62. 21360ca ssl_write_certificate_request() can handle empty ca_chain by Paul Bakker · 12 years ago polarssl-1.2.8
  63. 016ea07 Added Security note (Advisory 2013-03) in ChangeLog by Paul Bakker · 12 years ago
  64. 1d41950 Prepared for PolarSSL release 1.2.8 by Paul Bakker · 12 years ago
  65. 2be71fa Fixed values for 2-key Triple DES in cipher layer by Paul Bakker · 12 years ago
  66. 6fa5488 Centralized module option values in config.h by Paul Bakker · 12 years ago
  67. 19bd297 PKCS#5 module added. Moved PBKDF2 functionality inside and deprecated by Paul Bakker · 12 years ago
  68. 52b845b Fixed bignum.c and bn_mul.h to support Thumb2 and LLVM compiler by Paul Bakker · 12 years ago
  69. cbfcaa9 x509parse_crtpath() is now reentrant and uses more portable stat() by Paul Bakker · 12 years ago
  70. 4087c47 Added mechanism to provide alternative cipher / hash implementations by Paul Bakker · 12 years ago
  71. cf6e95d Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis by Paul Bakker · 12 years ago
  72. 65a1909 Internally split up x509parse_key() by Paul Bakker · 12 years ago
  73. 1922a4e ssl_parse_certificate() now calls x509parse_crt_der() directly by Paul Bakker · 12 years ago
  74. 6417186 x509parse_crt() now better handles PEM error situations by Paul Bakker · 12 years ago
  75. 08f06cf Disabled the HAVEGE random generator by default by Paul Bakker · 12 years ago
  76. eae09db Fixed const correctness issues that have no impact on the ABI by Paul Bakker · 12 years ago
  77. f922630 Fixed offset for cert_type list in ssl_parse_certificate_request() by Paul Bakker · 12 years ago
  78. 7c3c389 Secure renegotiation extension should only be sent in case client supports secure renegotiation by Paul Bakker · 12 years ago
  79. 822e958 Prepared for PolarSSL 1.2.7 release by Paul Bakker · 12 years ago polarssl-1.2.7
  80. a627298 Ability to specify allowed ciphersuites based on the protocol version. by Paul Bakker · 12 years ago
  81. d4c5944 Fixed MPI assembly for ARM when -O2 is used by Paul Bakker · 12 years ago
  82. 90f042d Prepared for PolarSSL 1.2.6 release by Paul Bakker · 12 years ago polarssl-1.2.6
  83. fb1cbd3 Fixed assembly code for ARM (Thumb and regular) for some compilers by Paul Bakker · 12 years ago
  84. e81beda The SSL session cache module (ssl_cache) now also retains peer_cert information (not the entire chain) by Paul Bakker · 12 years ago
  85. a35aa54 Fixed whitespaces in ChangeLog by Paul Bakker · 12 years ago
  86. 78a8c71 Re-added support for parsing and handling SSLv2 Client Hello messages by Paul Bakker · 12 years ago
  87. 37286a5 Fixed net_bind() for specified IP addresses on little endian systems by Paul Bakker · 12 years ago
  88. 8804f69 Removed timing differences due to bad padding from RSA decrypt for by Paul Bakker · 12 years ago
  89. a43231c Added support for custom labels when using rsa_rsaes_oaep_encrypt() or rsa_rsaes_oaep_decrypt() by Paul Bakker · 12 years ago
  90. b386913 Split up the RSA PKCS#1 encrypt, decrypt, sign and verify functions by Paul Bakker · 12 years ago
  91. e3e4a59 Added bugfix line for previous fixes for MS Visual Studio by Paul Bakker · 12 years ago
  92. 3d2dc0f Corrected GCM counter incrementation to use only 32-bits instead of 128-bits by Paul Bakker · 12 years ago
  93. e47b34b Removed further timing differences during SSL message decryption in ssl_decrypt_buf() by Paul Bakker · 12 years ago
  94. c046350 Fixed memory leak in ssl_free() and ssl_reset() for active session by Paul Bakker · 12 years ago
  95. c7a2da4 Updated for PolarSSL 1.2.5 by Paul Bakker · 13 years ago polarssl-1.2.5
  96. 40865c8 Added sending of alert messages in case of decryption failures as per RFC by Paul Bakker · 13 years ago
  97. d66f070 Disable debug messages that can introduce a timing side channel. by Paul Bakker · 13 years ago
  98. 4582999 Fixed timing difference resulting from badly formatted padding. by Paul Bakker · 13 years ago
  99. 8fe40dc Allow enabling of dummy error_strerror() to support some use-cases by Paul Bakker · 13 years ago
  100. 14c56a3 Updated for PolarSSL 1.2.4 by Paul Bakker · 13 years ago polarssl-1.2.4