ARMmbed/mbedtls
1
0
Fork 0
mirror of https://github.com/ARMmbed/mbedtls.git synced 2025-10-20 13:04:23 +08:00
Code Issues Releases Wiki Activity
33,962 Commits 176 Branches 276 Tags
development
Commit Graph

33962 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Gilles Peskine
cf9b557d1c Removed static ECDH 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-26 16:07:38 +02:00
Bence Szépkúti
8d95062aeb Eliminate use of git worktree prune 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-26 15:44:11 +02:00
Bence Szépkúti
dc88f6e1f3 Use f-string literal 
This makes path-construction a bit more readable

Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-26 15:37:42 +02:00
David Horstmann
0da9ce0ee7 Merge pull request #10418 from mpg/fix-udp-proxy 
Fix includes in udp_proxy.c
 2025-09-26 11:45:43 +00:00
Manuel Pégourié-Gonnard
355b00e8e0 Fix includes in udp_proxy.c 
The program uses atoi() unconditionally, so it should include stdlib.h
unconditionally. Previously this happened to be indirectly included by
some other header (via pk.h via ssl.h) but we should not rely on that.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
 2025-09-26 12:11:03 +02:00
Gilles Peskine
3415d2dd5f Merge pull request #10306 from gilles-peskine-arm/config-error-on-removed-options-mbedtls 
Mechanism to error out on removed configuration options
 2025-09-25 16:35:51 +00:00
Bence Szépkúti
effa534e71 Use worktrees instead of fetches for submodules 
Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
 2025-09-25 15:51:07 +02:00
David Horstmann
9c1f18a99a Merge pull request #10414 from ronald-cron-arm/deprecate-make-follow-up 
Make deprecation follow-up
 2025-09-24 16:05:16 +00:00
Gilles Peskine
3cee43e8ab Be more consistent about method naming 
Indicate which config file has the most relevant tweak.

Duplicate a few test cases so that both the crypto config and the mbedtls
config are tested.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
f7ed4e506f Add test case for allowing setting an always-on removed option 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
4bb82fdb16 Fix copypasta in documentation 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
562763b5bd Add dependency of mbedtls_config on generated config check headers 
Fix the build of libmbedx509 when generated files are not already present.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
c45d9ac4c2 Allow setting removed options that are now always on 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
cc1ac1d3dc CMake: support generated headers 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
379d38de1c Unit tests for checks for removed options in the config file 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
8e44a94d39 Automatically generate checkers for removed options 
Read the list of historical config options in 3.6, compare that to 1.0/4.0
and emit the appropriate checkers.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
24273c06db Checks for crypto options or internal macros set in mbedtls 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
24d058bc6c Enable checks for bad options in the config file 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:35 +02:00
Gilles Peskine
d3d0652dca Update framework submodule with config_history.py 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-24 17:20:33 +02:00
Ronald Cron
3a252dda0c Adapt code_size_compare.py to make deprecation and submodules 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-24 16:31:12 +02:00
Ronald Cron
37148d0fe3 Adapt memory.sh to make deprecation 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-24 12:39:29 +02:00
Ronald Cron
15cd8b0a63 Adapt footprint.sh to make deprecation 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-24 12:38:35 +02:00
Ronald Cron
e5bae0dde3 Adapt basic-build-test.sh to make deprecation 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-24 12:38:02 +02:00
Gilles Peskine
caaf52d6d0 Merge pull request #10391 from bjwtaylor/remove-deprecated-compilation-options-2 
Remove deprecated compilation options 2
 2025-09-23 08:40:11 +00:00
Ronald Cron
90979728ee Merge pull request #10382 from ronald-cron-arm/deprecate-make 
Deprecate Make build system and remove MS visual studio files
 2025-09-23 08:14:28 +00:00
David Horstmann
f2672e3f99 Merge pull request #10409 from gilles-peskine-arm/config-error-on-removed-options-prerequisite-for-crypto 
Mechanism to error out on removed configuration options: mbedtls prerequisite for crypto
 2025-09-22 16:25:59 +00:00
Ronald Cron
7f65346177 Add change log 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
ee63b64892 Update README.md 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
e7bac84a22 Remove the generation of MS visual studio files 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
31f63210ec Deprecate Make 
Move and rename the root Makefile to
scripts/legacy.make. That way running
make from the root fails.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
401f20fb35 Prepare test components to scripts/legacy.make 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
bb02ec121e Prepare abi_check.py to scripts/legacy.make 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:26 +02:00
Ronald Cron
9a05bb901a Update framework 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 18:00:24 +02:00
Gilles Peskine
9da0dce845 Bypass config checks when setting a low-level option directly 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-22 15:55:10 +02:00
Gilles Peskine
d57a0985ab Add dependency of tf_psa_crypto_config on generated config check headers 
Fix the build of libtfpsacrypto when generated files are not already present.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-22 15:52:06 +02:00
Ronald Cron
35d59c6cb6 cmake: Install libmbedcrypto.* libraries 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 15:08:39 +02:00
Ronald Cron
a33b371f36 programs/tests/dlopen.c: Prioritize libtfpsacrypto.so 
Prioritize libtfpsacrypto.so over libmbedcrypto.so
as the crypto library to load to be sure we test
the loading of libtfpsacrypto.so.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 14:34:56 +02:00
Ronald Cron
466a1a29d9 cmake: Provide the crypto libs under their historical name 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 14:34:55 +02:00
Ronald Cron
c09a84e285 cmake: library: Rework and improve the copy of the crypto libraries 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 14:34:55 +02:00
Ronald Cron
879cba1a67 cmake: Introduce version and soversion variables 
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 14:34:55 +02:00
Ronald Cron
8df65636fd Clarify target name for library generated files 
The target mbedtls_generated_files_target could
be misinterpreted as the target covering all project
generated files, but it does not.

It is specifically the target for files generated
to build the mbedtls library.

Rename it to libmbedtls_generated_files_target
and align x509.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
 2025-09-22 14:03:18 +02:00
Ben Taylor
fec1c002d5 Revert changes to analyze outcomes after dependencies have been merged 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-22 09:07:12 +01:00
Ben Taylor
62491a9327 Revert changes to config.py after dependencies have been merged 
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
 2025-09-22 09:07:12 +01:00
Janos Follath
c84dbee82d Merge pull request #10340 from gilles-peskine-arm/config-checks-generator-mbedtls 
Introduce generated config checks in mbedtls
 2025-09-19 15:39:05 +00:00
Gilles Peskine
6712f1b6af Use --list-for-cmake with generate_config_checks.py 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-19 13:36:25 +02:00
Gilles Peskine
67b115cfda Register crypto's generate_config_files.py outputs as generated files 
Mbed TLS needs to know the generated files of TF-PSA-Crypto. There's no
mechanism for TF-PSA-Crypto to declare them.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-19 13:36:24 +02:00
Gilles Peskine
b53b443f8e Register generate_config_files.py outputs as generated files 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-19 13:36:24 +02:00
Gilles Peskine
3374f6e90b Generate checks for bad options in the config file 
Just a proof-of-concept for now. Interesting checks will come later.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-19 13:36:24 +02:00
Gilles Peskine
ff6306655b Update submodules with config_checks_generator.py 
* Update framework with `config_checks_generator.py`.
* Update crypto with the files generated by `generate_config_checks.py`.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2025-09-19 13:36:22 +02:00
Ronald Cron
f328de9ddd Merge pull request #10407 from gilles-peskine-arm/config-version-uncomment 
Have the definition of MBEDTLS_CONFIG_VERSION uncommented by default
 2025-09-19 10:30:03 +00:00