1
0
mirror of https://github.com/ARMmbed/mbedtls.git synced 2025-06-28 18:12:46 +08:00

33346 Commits

Author SHA1 Message Date
Manuel Pégourié-Gonnard
42c4bddc07
Merge pull request #10245 from felixc-arm/gcc-15-remove-wnoerror-dev
[Dev] Turn Wunterminated-string-initialization back into an error
2025-06-26 07:08:33 +00:00
Gilles Peskine
f68f45c827
Merge pull request #10213 from valeriosetti/issue298-development
[development] PK: try storing all private RSA keys in PSA (2/3)
2025-06-25 15:23:27 +00:00
minosgalanakis
247ad6e303
Merge pull request #10251 from gilles-peskine-arm/tls-exporter-coverity-202505-dev
Fix SSL exporter tests
2025-06-25 10:19:32 +00:00
Valerio Setti
abfa8acb39 framework: update reference
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:03 +02:00
Valerio Setti
e0fb40e6fb library: debug: add error log message in mbedtls_debug_print_psa_rsa()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:03 +02:00
Valerio Setti
069617fdce library: debug: improve input param check in mbedtls_debug_print_psa_rsa()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
0c92466bb0 library: debug: rename len as bitlen in mbedtls_debug_print_integer()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
a18627a625 library: debug: add comment to explain no-code-check comments
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
27eb0141b9 tests: suite_x509parse: rename variable in x509parse_crt()
- rename result_ext to result_back_comp
- add a comment to describe its purpose

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
210b61111b tests: suite_x509parse: fix indentation in x509parse_crt()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
1e4423bcfa library: debug: add comment for follow-up in mbedtls_debug_print_psa_rsa()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
6676f72a5f library: debug: rename mbedtls_debug_print_ec_coord()
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
2747ac1e70 tests: x509parse: fix RSA key in DER certificates
The previous key was not correct so it could not be imported into PSA
for validation inside the PK module.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
11345e9de3 tests: x509parse: fix return values for invalid RSA keys
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Valerio Setti
3388c4acee library: debug: add support for RSA keys in PSA friendly format
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-25 10:25:02 +02:00
Gilles Peskine
760608d47b Properly initialize SSL endpoint objects
In some cases, we were calling `mbedtls_test_ssl_endpoint_free()` on an
uninitialized `mbedtls_test_ssl_endpoint` object if the test case failed
early, e.g. due to `psa_crypto_init()` failing. This was largely harmless,
but could have caused weird test results in case of failure, and was flagged
by Coverity.

Use a more systematic style for initializing the stack object as soon as
it's declared.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-24 18:42:04 +02:00
Gilles Peskine
b836d46870 Fix accidentally skipped test assertion
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2025-06-24 18:42:04 +02:00
Manuel Pégourié-Gonnard
8419e61328
Merge pull request #10237 from valeriosetti/issue10226
Remove temporary path fixes introduced in mbedtls#10225
2025-06-24 07:24:10 +00:00
Valerio Setti
8e8dc11406 scripts: generate_visualc_files: remove temporary Everest path fixes
Remove temporary path fixes for Everest's headers that were introduced
in #10225. Only the new and correct path of the header files is kept.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-23 21:54:58 +02:00
David Horstmann
8e95ba94c6
Merge pull request #10214 from ariwo17/fix-typo
Fixed some minor typos in comments.
2025-06-23 16:33:45 +00:00
Felix Conway
95c48b3b44 Turn Wunterminated-string-initialization back into an error
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-23 14:54:33 +01:00
Ronald Cron
415d7eb039
Merge pull request #10242 from Mbed-TLS/mbedtls-release-sync
Release input synchronisation pr for MbedTLS
2025-06-23 15:45:20 +02:00
Minos Galanakis
ed7c0d146b Updated tf-psa-crypto pointer (release-sync)
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-06-23 10:13:58 +01:00
Minos Galanakis
07b95f07ed Updated framework pointer (release-sync)
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
2025-06-22 21:15:52 +01:00
minosgalanakis
a3857eb746
Merge pull request #10162 from davidhorstmann-arm/fix-bump-version
Fix bug in `bump_version.sh`
2025-06-20 16:50:35 +00:00
Gilles Peskine
2180a7e5d3
Merge pull request #10240 from valeriosetti/prereq-for-psa298
library: Makefile: use wildcard to select sources for crypto library
2025-06-20 14:01:51 +00:00
Manuel Pégourié-Gonnard
68e531f35e
Merge pull request #10216 from felixc-arm/gcc-15-warning-dev
[Development] Fix GCC 15 warning 'Wunterminated-string-initialization'
2025-06-20 12:29:52 +00:00
Valerio Setti
06d64ad6a0 library: Makefile: use wildcard to select sources for crypto library
This gives the possibility to add new source files in tf-psa-crypto
library without any need to update this Makefile.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-20 13:45:57 +02:00
Ari Weiler-Ofek
78b0521449 Remove trailing whitespace
Signed-off-by: Ari Weiler-Ofek <ariwei01@e134794.arm.com>
2025-06-20 11:48:50 +01:00
Ari Weiler-Ofek
69f5706431 Add explanatory comment above #include "../tf-psa-crypto/core/common.h"
Signed-off-by: Ari Weiler-Ofek <ariwei01@e134794.arm.com>
2025-06-20 11:48:50 +01:00
Felix Conway
cfbee27b45 Add include so psasim files can find new macro
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-20 11:48:50 +01:00
Felix Conway
b9891f1fd2 Add changelog
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-20 11:48:16 +01:00
Felix Conway
5b84ae14e9 Replace __attribute__((nonstring)) with macro MBEDTLS_ATTRIBUTE_UNTERMINATED_STRING
This macro applies __attribute__((nonstring)) when using a compiler that supports it

Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-20 11:48:16 +01:00
Felix Conway
79b513894a Add __attribute__ ((nonstring)) to remove unterminated-string-initialization warning
Signed-off-by: Felix Conway <felix.conway@arm.com>
2025-06-20 11:48:16 +01:00
Ronald Cron
7c536dab54
Merge pull request #10231 from ronald-cron-arm/mbedtls-build-info
Preparatory work for the resolution of #10022
2025-06-19 14:43:03 +00:00
Manuel Pégourié-Gonnard
a9dc998fb9
Merge pull request #10235 from mpg/cleanup-oid
Clean up after crypto hides its OID module
2025-06-19 12:30:07 +00:00
Manuel Pégourié-Gonnard
838a114f05 Remove MBEDTLS_OID_C from sample configs
This option no longer exists (and there's a Changelog entry saying so).

After this commit, git grep -l -w MBEDTLS_OID_C shows the only remaining
occurences are in text files (.txt, .md).

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:16:38 +02:00
Manuel Pégourié-Gonnard
6a3b877d60 Remove OID from generate_error.pl
There is no longer any associated error code, so this commit does not
change the generated file in any way.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:14:02 +02:00
Manuel Pégourié-Gonnard
d9fa0755d9 Update tf-psa-crypto
We need #311

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2025-06-19 12:11:55 +02:00
Manuel Pégourié-Gonnard
4ccde0c8e5
Merge pull request #10225 from valeriosetti/issue229-mbedtls
[development] Move Everest headers to a private subdirectory (1/2)
2025-06-19 06:47:21 +00:00
Valerio Setti
2d7ded653f scripts: generate_visualc_files: fix include_directories
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-18 10:01:29 +02:00
Valerio Setti
f5e27fa361 Revert "update further everest paths"
This reverts commit 243b54f3869953a674ff6730685a623a98a1d9cd.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 23:06:24 +02:00
Valerio Setti
26893d99f6 Revert "CMakeLists: prepare for Everest headers relocation"
This reverts commit 653a86dc2a36d6fa6b37ada91d9ca01a7ee63ff8.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 23:04:46 +02:00
Ronald Cron
d1e4ccf0a0 cmake: Fix library order
A library that depends on another one should come first
in the list of libraries to link against.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-17 09:48:05 +02:00
Valerio Setti
e4960bc159 framework: update reference
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
Valerio Setti
3150913be7 Revert "update framework submodule to pull in everest changes"
This reverts commit 83e5a7bf75ba8a24392ecdc93fe68f48fd56557a.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
Valerio Setti
653a86dc2a CMakeLists: prepare for Everest headers relocation
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-17 09:09:47 +02:00
Ronald Cron
a3b562aa17 programs: test: Let zeroize be an Mbed TLS test program
In TF-PSA-Crypto there is the crypto specific one.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-16 15:55:05 +02:00
Ronald Cron
0815c67ce1 programs: pkey: Use tf-psa-crypto/build_info.h
pkey programs are crypto programs (only linked to
the TF-PSA-Crypto library) thus use the TF-PSA-Crypto
build-time configuration info file
tf-psa-crypto/build_info.h instead of the Mbed TLS one.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
2025-06-16 15:54:49 +02:00
Valerio Setti
3de417fce2 scripts: generate_visualc_files.pl: prepare for Everest headers relocation
This change allows the Perl script to manage Everest headers in
tf-psa-crypto repo both before and after psa#235. Once psa#235 will be
merged this commit can be simplified, i.e. it will be returned to its
original state with paths of Everest headers updated.

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>
2025-06-16 15:04:27 +02:00