1. d09b343 Deprecate mbedtls_ssl_conf_(min/max)_version() by Glenn Strauss · 3 years, 4 months ago
  2. 39e624c Convert tests to use MBEDTLS_SSL_VERSION_TLS1_* by Glenn Strauss · 3 years, 4 months ago
  3. cd78df6 handshake->min_minor_ver to ->min_tls_version by Glenn Strauss · 3 years, 4 months ago
  4. 041a376 Remove some tls_ver < MBEDTLS_SSL_VERSION_TLS1_2 checks by Glenn Strauss · 3 years, 5 months ago
  5. e3af4cb mbedtls_ssl_(read|write)_version using tls_version by Glenn Strauss · 3 years, 5 months ago
  6. 60bfe60 mbedtls_ssl_ciphersuite_t min_tls_version,max_tls_version by Glenn Strauss · 3 years, 5 months ago
  7. 2dfcea2 mbedtls_ssl_config min_tls_version, max_tls_version by Glenn Strauss · 3 years, 5 months ago
  8. da7851c Rename mbedtls_ssl_session minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
  9. 07c6416 Rename mbedtls_ssl_transform minor_ver to tls_version by Glenn Strauss · 3 years, 5 months ago
  10. dff8462 Unify internal/external TLS protocol version enums by Glenn Strauss · 3 years, 5 months ago
  11. a91b685 Merge pull request #5429 from yuhaoth/pr/fix-parallel-build-fail-of-cmake_out_source by Gilles Peskine · 3 years, 4 months ago
  12. 8e5e8d7 Merge pull request #5686 from AndrzejKurek/off-by-one-ssl-opt by Gilles Peskine · 3 years, 4 months ago
  13. 1b05aff Merge pull request #5624 from superna9999/5312-tls-server-ecdh by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  14. fff641a Merge pull request #5695 from mprse/tls_1_3_remove_redundant_check by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  15. cccbe0e Merge pull request #5516 from tom-daubney-arm/M-AEAD_dispatch_tests by Ronald Cron · 3 years, 4 months ago
  16. ea75049 Merge pull request #5689 from yanesca/fix-lts-version-in-guidelines by Gilles Peskine · 3 years, 4 months ago
  17. 8583627 psa_ssl_status_to_mbedtls: add conversion of PSA_ERROR_BUFFER_TOO_SMALL by Przemek Stekiel · 3 years, 4 months ago
  18. 1c7c596 Merge pull request #5683 from paul-elliott-arm/fix_pk_test by Gilles Peskine · 3 years, 4 months ago
  19. a9f9335 ssl_tls13_generate_and_write_ecdh_key_exchange(): remove redundant check by Przemek Stekiel · 3 years, 4 months ago
  20. c82f62e Merge pull request #4907 from gilles-peskine-arm/config-baremetal-size-3.0 by Gilles Peskine · 3 years, 4 months ago
  21. f38c8c6 Adds test data for insufficient memory case by Thomas Daubney · 3 years, 6 months ago
  22. 30583c3 Adds test data for fallback test by Thomas Daubney · 3 years, 6 months ago
  23. 5e896d9 Adds test data for encrypt setup test case by Thomas Daubney · 3 years, 6 months ago
  24. d610191 Adds driver dispatch test for M-AEAD encryption setup by Thomas Daubney · 3 years, 7 months ago
  25. 3af3415 Fix LTS version in contributing guidelines by Janos Follath · 3 years, 4 months ago
  26. e88d190 Set ecdh_psa_privkey_is_external to 1 right after setting ecdh_psa_privkey in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
  27. f716a70 Rename mbedtls_ssl_handshake_params variable ecdh_psa_shared_key to ecdh_psa_privkey_is_external by Neil Armstrong · 3 years, 4 months ago
  28. de68e39 Merge pull request #5568 from superna9999/5159-pk-rsa-verification by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  29. 8db7c0e Fix an off-by-one error in ssl-opt.sh by Andrzej Kurek · 3 years, 4 months ago
  30. 0e980e8 Merge pull request #5640 from ronald-cron-arm/version-negotiation-2 by Ronald Cron · 3 years, 4 months ago
  31. 33a9d61 Merge pull request #5638 from paul-elliott-arm/ssl_cid_accessors by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  32. 6a25159 Merge pull request #5648 from gabor-mezei-arm/5403_hkdf_use_internal_psa_implementations by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  33. d7bdedc Merge pull request #5681 from daverodgman/migration by Dave Rodgman · 3 years, 4 months ago
  34. 451114f Merge pull request #5647 from superna9999/5179-follow-up-tls-record-hmac-no-mdinfo by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  35. 02758a5 Add tls CID tests by Paul Elliott · 3 years, 5 months ago
  36. 0113cf1 Add accessor for own cid to ssl context by Paul Elliott · 3 years, 5 months ago
  37. cbd7bfd ssl-opt.sh: Force TLS 1.2 on server for TLS 1.2 specific tests by Ronald Cron · 3 years, 4 months ago
  38. 634d865 ssl-opt.sh: Fix "no TLS 1.3 server support" test check by Ronald Cron · 3 years, 4 months ago
  39. 11218dd ssl_client.c: Fix unused parameter by Ronald Cron · 3 years, 4 months ago
  40. bdb4f58 Add and update documentation of some minor version fields by Ronald Cron · 3 years, 4 months ago
  41. ff59a34 Prevent free of uninitialised variables by Paul Elliott · 3 years, 4 months ago
  42. 82c785f Make handshake::min_minor_ver client only by Ronald Cron · 3 years, 4 months ago
  43. 017a199 Update references to old Github organisation by Dave Rodgman · 3 years, 4 months ago
  44. 91477a7 Switch handshake->ecdh_bits to size_t and remove now useless cast & limit checks by Neil Armstrong · 3 years, 4 months ago
  45. 98f6f78 Update mbedtls_pk_wrap_as_opaque() documentation for ECDH derivation usage by Neil Armstrong · 3 years, 4 months ago
  46. b7b549a Force server-side TLS1.2 for ECDH- Opaque PK key test by Neil Armstrong · 3 years, 4 months ago
  47. 1335222 Return translated PSA error in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
  48. f788253 Fix comment typo in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 4 months ago
  49. 023bf8d Add ECDH- Opaque PK key test by Neil Armstrong · 3 years, 5 months ago
  50. 80325d0 Allow ECDSA PK Opaque keys for ECDH Derivation by Neil Armstrong · 3 years, 5 months ago
  51. 104a7c1 Handle Opaque PK EC keys in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
  52. 8113d25 Add ecdh_psa_shared_key flag to protect PSA privkey if imported by Neil Armstrong · 3 years, 5 months ago
  53. 5cd5f76 Use mbedtls_platform_zeroize() in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
  54. 4f33fbc Use PSA define for max EC key pair size in ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
  55. 306d607 Fix indentation issue in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
  56. 062de7d Use PSA_BITS_TO_BYTES instead of open-coded calculation in PSA version of ssl_get_ecdh_params_from_cert() by Neil Armstrong · 3 years, 5 months ago
  57. 1f4b396 Implement PSA server-side ECDH-RSA/ECDSA by Neil Armstrong · 3 years, 5 months ago
  58. 6476726 Fix comments by Ronald Cron · 3 years, 4 months ago
  59. a980adf Merge pull request #5637 from ronald-cron-arm/version-negotiation-1 by Ronald Cron · 3 years, 4 months ago
  60. ba120bb ssl_tls13_client.c: Fix ciphersuite final validation by Ronald Cron · 3 years, 4 months ago
  61. 8fdad9e ssl_tls12_client.c: Remove duplicate of ciphersuite validation by Ronald Cron · 3 years, 4 months ago
  62. 757a2ab ssl_client.c: Extend and export ciphersuite validation function by Ronald Cron · 3 years, 4 months ago
  63. f735cf1 ssl_tls.c: Fix ciphersuite selection regarding protocol version by Ronald Cron · 3 years, 4 months ago
  64. 9847338 ssl_tls13_client.c: Add check in supported_versions parsing by Ronald Cron · 3 years, 4 months ago
  65. 1fa4f68 ssl_tls.c: Return in error if default config fails by Ronald Cron · 3 years, 4 months ago
  66. a77fc27 ssl_tls13_client.c: versions ext writing : Fix available space check by Ronald Cron · 3 years, 4 months ago
  67. 37bdaab tls: Simplify the logic of the config version check and test it by Ronald Cron · 3 years, 4 months ago
  68. 3cffc5c tls: Remove unnecessary checks of MBEDTLS_CIPHERSUITE_NODTLS by Ronald Cron · 3 years, 4 months ago
  69. 150d579 ssl_client.c: Improve coding style by Ronald Cron · 3 years, 4 months ago
  70. e451295 Remove md_info in ssl_tls12_populate_transform() when USE_PSA_CRYPTO is defined by Neil Armstrong · 3 years, 5 months ago
  71. 253e9e7 Use mbedtls_rsa_info directly in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
  72. ea54dbe Fix comment typo in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
  73. 19e6bc4 Use new PSA to mbedtls PK error mapping functions in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
  74. 8a44bb4 Handle INVALID_SIGNATURE instead of INVALID_PADDING in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
  75. 82cf804 Fix 80 characters indentation in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
  76. 6baea78 Use now shared RSA_PUB_DER_MAX_BYTES define in pk_wrap.c by Neil Armstrong · 3 years, 5 months ago
  77. a33280a Check psa_destroy_key() return in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
  78. 059a80c Map INVALID_PADDING from PSA to MbedTLS error in rsa_verify_wrap() by Neil Armstrong · 3 years, 5 months ago
  79. 52f41f8 PK: RSA verification PSA wrap implementation by Neil Armstrong · 3 years, 6 months ago
  80. 56d5127 Initialize PSA crypto in test_suite_pk for RSA verify tests by Neil Armstrong · 3 years, 6 months ago
  81. da41b38 Improve and fix comments by Ronald Cron · 3 years, 4 months ago
  82. 3304f25 Merge pull request #5653 from paul-elliott-arm/handshake_over by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  83. e42d8bf Add macro guard for header file by Gabor Mezei · 3 years, 4 months ago
  84. abed05f Merge pull request #5652 from arturallmann/issue-commit by Manuel Pégourié-Gonnard · 3 years, 4 months ago
  85. 8ecd993 ssl_client.c: Fix state change for DTLS 1.2 by Ronald Cron · 3 years, 4 months ago
  86. 3cec8e8 tests: Init PSA crypto if TLS 1.3 is enabled by Ronald Cron · 3 years, 4 months ago
  87. a1b8f6e ssl-opt.sh: Do not force TLS 1.3 on client by Ronald Cron · 3 years, 5 months ago
  88. f3b425b ssl-opt.sh: Force TLS 1.2 on server by Ronald Cron · 3 years, 5 months ago
  89. f660655 TLS: Allow hybrid TLS 1.2/1.3 in default configurations by Ronald Cron · 3 years, 5 months ago
  90. e71639d Simplify TLS major version default value setting by Ronald Cron · 3 years, 5 months ago
  91. dbe87f0 Propose TLS 1.3 and TLS 1.2 by Ronald Cron · 3 years, 6 months ago
  92. 9f0fba3 Add logic to switch to TLS 1.2 by Ronald Cron · 3 years, 6 months ago
  93. e1d3f06 Allow hybrid TLS 1.3 + TLS 1.2 configuration by Ronald Cron · 3 years, 6 months ago
  94. fbd9f99 ssl_tls.c: Move some client specific functions to ssl_client.c by Ronald Cron · 3 years, 5 months ago
  95. 7320e64 ssl_tls12_client.c: Switch to generic Client Hello state handler by Ronald Cron · 3 years, 5 months ago
  96. 27c85e7 ssl_tls.c: Unify TLS 1.2 and TLS 1.3 SSL state logs by Ronald Cron · 3 years, 5 months ago
  97. 5f4e912 ssl_client.c: Add DTLS ClientHello message sending specifics by Ronald Cron · 3 years, 6 months ago
  98. 4079abc ssl_client.c: Adapt extensions writing to the TLS 1.2 case by Ronald Cron · 3 years, 6 months ago
  99. 11e1857 ssl_client.c: Fix key share code guards by Ronald Cron · 3 years, 5 months ago
  100. df823bf ssl_client.c: Re-order partially extension writing by Ronald Cron · 3 years, 4 months ago