Dave Rodgman
a3fc295559
Merge pull request #7823 from SlugFiller/mbedtls-2.28
...
Support compilation using CLang on Windows
2023-07-03 09:52:03 +01:00
Tom Cosgrove
fbcb5d469b
Merge pull request #7850 from davidhorstmann-arm/2.28-fix-string-to-names-retcode
...
[Backport 2.28] Fix false success return code in `mbedtls_x509_string_to_names()`
2023-06-30 14:28:38 +01:00
Dave Rodgman
3fb807c064
Merge pull request #7761 from waleed-elmelegy-arm/crypt_and_hash-decrypt-fix_backport
...
Backport 2.28: Fix crypt_and_hash decrypt issue when used with stream cipher
2023-06-30 11:42:19 +01:00
David Horstmann
1e8086bd21
Add ChangeLog entry for string_to_names() fix
...
Signed-off-by: David Horstmann <david.horstmann@arm.com>
2023-06-27 17:34:58 +01:00
David Horstmann
5c019e0f65
Add regression testcase for string_to_names()
...
Test against a string with no '=' or ',' in it, which previously caused
mbedtls_x509_string_to_names() to return 0.
Signed-off-by: David Horstmann <david.horstmann@arm.com>
2023-06-27 17:34:58 +01:00
David Horstmann
abaea614d2
Return an error when no name is parsed
...
When less than 1 RDN is successfully parsed in
mbedtls_x509_string_to_names(), return an error. Previously this
returned success when a string containing neither '=' or ',' was
supplied.
Signed-off-by: David Horstmann <david.horstmann@arm.com>
2023-06-27 17:34:58 +01:00
Waleed Elmelegy
6a4af481e1
Replace struct access with local variable
...
Replace struct access with local variable to minimize
differnces with development branch.
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2023-06-27 14:07:57 +01:00
SlugFiller
e2d0614571
Support compilation using CLang on Windows
...
Signed-off-by: SlugFiller <5435495+SlugFiller@users.noreply.github.com>
2023-06-26 19:19:56 +03:00
Gilles Peskine
63b50b56cd
Merge pull request #7753 from lpy4105/backport-2.28/issue/renew_cert_2024-01-01
...
Backport 2.28: Updating crt/crl files due to expiry before 2024-01-01
2023-06-21 12:29:12 +02:00
Bence Szépkúti
e0dcd18a23
Merge pull request #7721 from DemiMarie/do-while-2.28
...
[Backport 2.28] Add a do-while loop around a macro
2023-06-21 11:31:48 +02:00
Manuel Pégourié-Gonnard
001a052e0f
Merge pull request #7712 from DemiMarie/backport-test-fix
...
Backport 2.28: x509parse tests: Replace TEST_ASSERT with TEST_EQUAL
2023-06-21 11:02:28 +02:00
Demi Marie Obenour
0e2074133a
Add a do-while loop around macros
...
This is good practice in C.
Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com>
2023-06-20 11:45:26 -04:00
Demi Marie Obenour
5d7cd012ac
x509parse tests: Replace TEST_ASSERT with TEST_EQUAL
...
The latter gives much more informative errors.
Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com>
2023-06-19 11:04:47 -04:00
Gilles Peskine
cc51e8a615
Merge pull request #7798 from valeriosetti/backport-7614
...
Backport: crypto_config_test_driver_extension: handle PUBLIC_KEY the same way as KEY_PAIRs
2023-06-19 16:50:15 +02:00
Valerio Setti
e20ec4f1dd
crypto_config_test_driver_extension: treat PUBLIC_KEY the same way as KEY_PAIR
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2023-06-19 10:03:29 +02:00
Pengyu Lv
e1136d5eb4
Update test-ca2.crt[.der] and server5.crt[.der]
...
Update these files to match the data in `library/certs.c`.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-19 10:17:21 +08:00
Gilles Peskine
d5f4039227
Merge pull request #7739 from davidhorstmann-arm/2.28-fix-iar-typo
...
[Backport 2.28] Fix typo in CMakeList.txt in IAR compiler flags
2023-06-15 19:23:56 +02:00
David Horstmann
7435651068
Reword changelog entry
...
Signed-off-by: David Horstmann <david.horstmann@arm.com>
2023-06-15 14:09:05 +01:00
Pengyu Lv
41bb446d12
Update TEST_CA_CRT_EC_PEM and TEST_CA_CRT_EC_DER
...
To retain the ABI compatibility, we need the DER
data to be in the exact size of 520 bytes. So,
these data are regenerated by unsetting the
'critical' flag of 'basic_constraints' extension,
though the extension should be critical for this
CA according to RFC5280 section 4.2.1.9.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-15 15:41:30 +08:00
Pengyu Lv
04da85f0f4
Update TEST_SRV_CRT_EC_PEM and TEST_SRV_CRT_EC_DER
...
Regenerate server5.crt[.der] until we got the
DER data in the size of 547 bytes to maintain
the ABI compatibility.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-15 13:01:35 +08:00
Pengyu Lv
1fca541a5f
Remove redundant PHONY targets
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-14 09:55:51 +08:00
Pengyu Lv
a640339243
Fix long line format
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-14 09:55:51 +08:00
Pengyu Lv
14f59bfca8
Update cert macros in library/certs.c
...
This commit manually updates:
- TEST_CA_CRT_EC_PEM
- TEST_CA_CRT_EC_DER
- TEST_SRV_CRT_EC_PEM
- TEST_SRV_CRT_EC_DER
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-14 09:55:41 +08:00
Bence Szépkúti
b1e2ff7377
Merge pull request #7751 from davidhorstmann-arm/2.28-build-docs-realfull
...
[Backport 2.28] Build the docs in realfull config
2023-06-13 15:04:36 +02:00
Waleed Elmelegy
558bdc3f42
Add crypt_and_hash decrypt issue to Changelog
...
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2023-06-13 12:15:30 +01:00
Waleed Elmelegy
c451b4ae11
Replace function calls in crypt_and_hash program with locals
...
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2023-06-13 12:15:04 +01:00
Waleed Elmelegy
6eb4626e3f
Fix crypt_and_hash decrypt issue when used with stream cipher
...
crypt_and_hash decryption fails when used with a stream cipher
mode of operation due to the input not being multiple of block
size, this only applies to block cipher modes and not stream
ciphers.This change exempts CTR, CFB & OFB modes from this check.
Signed-off-by: Waleed Elmelegy <waleed.elmelegy@arm.com>
2023-06-13 12:09:42 +01:00
Pengyu Lv
9dbd1df175
Update crl-ec-sha*.pem, crl.pem, crl_cat_*.pem
...
This commit updates the files manually, the rules
of generating these files will be upload in other
PR.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:51:08 +08:00
Pengyu Lv
8569c876a4
Add rules to generate crl_cat*
...
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:50:58 +08:00
Pengyu Lv
dc66d3a34c
Update server10*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:49:02 +08:00
Pengyu Lv
f23ecc1941
Update server8*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:48:31 +08:00
Pengyu Lv
3ff09ec78f
Update server7*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:47:47 +08:00
Pengyu Lv
d5be96c4c7
Update test-int-ca*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:45:39 +08:00
Pengyu Lv
fe50030b5b
Add rules to generate test-int-ca{2,3}.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:45:14 +08:00
David Horstmann
ab28649202
Whitespace-align with development branch
...
Signed-off-by: David Horstmann <david.horstmann@arm.com>
2023-06-13 10:43:32 +01:00
Pengyu Lv
bb0fd701ad
Update test-ca2_cat-*.crt and test-ca_cat*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:42:04 +08:00
Pengyu Lv
e106de0ebb
Update server6.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:41:11 +08:00
Pengyu Lv
e340675475
Update test-ca[1|2].crt[.der]
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:39:02 +08:00
Pengyu Lv
d8893ccb9b
Update server5[-der*|-sha*].crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:38:24 +08:00
Pengyu Lv
381186b853
Add rules to generate test-ca2_cat-*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:36:32 +08:00
Pengyu Lv
43ad9848db
Add rules to generate server10*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:35:10 +08:00
David Horstmann
926854c4e0
Build the docs in realfull config
...
Ensure that all possible config options are documented by building the
docs in the realfull config on Read The Docs.
Signed-off-by: David Horstmann <david.horstmann@arm.com>
2023-06-13 10:33:18 +01:00
Pengyu Lv
4217429a46
Add rules to generate server8*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:30:10 +08:00
Pengyu Lv
30cd6b0964
Add rules to generate server7*.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:27:20 +08:00
Jerry Yu
324a43b4ac
Add rules to generate server6.crt
...
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2023-06-13 17:24:11 +08:00
Jerry Yu
fa4ef28c00
Add rules to generate server5-sha*.crt
...
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2023-06-13 17:22:45 +08:00
Jerry Yu
c2d694e367
Add server5-der*crt generate command
...
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2023-06-13 17:20:01 +08:00
Jerry Yu
111f4353f7
Add rules to generate server5[-badsign].crt
...
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2023-06-13 17:08:45 +08:00
Pengyu Lv
be8faab205
Update server3.crt and server4.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:06:37 +08:00
Pengyu Lv
746e2d133d
Add rules to generate server4.crt
...
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
2023-06-13 17:05:10 +08:00