Valerio Setti
e2aed3a6df
tests: revert changes to test_suite_ssl.data
...
Revert changes previously done at following test cases:
- Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, PSA_ALG_ANY_HASH
- Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, PSA_ALG_SHA_256
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-09-16 16:12:07 +02:00
Valerio Setti
91c0945def
tests: fix alg and usage for some ECDHE-ECDSA opaque key tests
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-09-16 16:12:07 +02:00
Valerio Setti
bc611fe44c
[tls12|tls13]_server: fix usage being checked on the certificate key
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-09-16 16:12:07 +02:00
Valerio Setti
7b2d72aaf0
ssl: replace PSA_ALG_ECDSA with MBEDTLS_PK_ALG_ECDSA
...
When the key is parsed from PK it is assigned the pseudo-alg
MBEDTLS_PK_ALG_ECDSA. Trying to run "mbedtls_pk_can_do_psa" with an hardcoded
deterministc/randomized ECDSA can make the function to fail if the proper
variant is not the one also used by PK.
This commit fixes this problem.
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-09-16 16:12:07 +02:00
Valerio Setti
0009b042ac
library: ssl: replace mbedtls_pk_can_do_ext with mbedtls_pk_can_do_psa
...
Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no >
2025-09-16 16:12:07 +02:00
Ronald Cron
e6240f14ee
Merge pull request #10403 from ronald-cron-arm/fix-readthedocs-build
...
Fix readthedocs build with framework head
2025-09-16 11:59:29 +00:00
Ronald Cron
e5eb2639b2
readthedocs: Install cmake to build the documentation
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-16 12:25:09 +02:00
Ronald Cron
2ba5d6afcc
Update tf-psa-crypto
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-16 12:25:09 +02:00
Ronald Cron
9c2727f9f2
Update framework
...
Signed-off-by: Ronald Cron <ronald.cron@arm.com >
2025-09-16 12:25:09 +02:00
Manuel Pégourié-Gonnard
07912c9e36
Merge pull request #10370 from bjwtaylor/remove-deprecated-compilation-options
...
Remove deprecated compilation options
2025-09-15 09:26:01 +00:00
Manuel Pégourié-Gonnard
1a81ab6390
Merge pull request #10379 from bjwtaylor/update-header-guards
...
Update header guard use in p256m test
2025-09-12 10:03:02 +00:00
Ben Taylor
14e1932935
Remove stray comment int components-platform.sh
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-12 10:52:23 +01:00
Ben Taylor
5a7a72ee41
testing with analyze_outcomes changes reverted for merge
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-12 10:52:23 +01:00
Ben Taylor
5496f9025c
Temporarily revert changes to config.py
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-12 10:52:23 +01:00
Ben Taylor
bb877a8cbf
remove further references to MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT and MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-12 10:52:23 +01:00
Manuel Pégourié-Gonnard
0d530d191f
Merge pull request #10294 from bjwtaylor/remove-static-ecdh
...
Remove support for static ECDH cipher suites
2025-09-12 09:20:03 +00:00
Ben Taylor
c1e76e04fe
correct whitespace style issue
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-12 08:33:38 +01:00
Ben Taylor
486ec6e9b6
Improved the text in the Changelog
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
485d4c1343
reverting last commit as the tests cause failures
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
26cdf6ee2b
Re-adding tests for ECDH
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
2f3523313b
Add ChangeLog
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
59474406a6
Re-instate MBEDTLS_PKCS1_V15 unset
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
337161eb41
Remove comment referencing ECDH
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
df3e595536
Re-instate test for correctness of sent single supported algorithm
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
5cdbe30804
replace MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED with MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
...
After the ECDH keyexchange removal the two became synonyms so the former can
be removed.
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
9e360b8f33
Remove MBEDTLS_RSA_C from depends.py
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
a47fd0faf4
Add bug link to test modifications
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
1a4f4b32a4
Add filter to test_tls13_only_ephemeral_ffdh to remove ffdh tests
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
120bd868b6
add filter to component_full_without_ecdhe_ecdsa
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
8371674048
re-add TLS_VERSION derivation
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
f57293654e
Revert change to Everest test message back to ECDH
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
4766a23f9c
change MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED to MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
c8823a262d
Remove MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED as it appears to be causing issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
7b14d8228e
Reverting TLS_VERSION derivation improvement, as it appear to be causing issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
a7b3f26864
reverted change to MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED, as it appears it could be causing issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
677994af64
Change ecdh to ecdhe on everest test
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
59213b66df
Re-add everest test, as it was mislabelled
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
6f0eb79111
Use get_tls_version to determine TLS_VERSION instead of statically assigning it
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
b191c02f6b
Correct style issues
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
e16798ec67
Re-add reference to PSA_WANT_ALG_ECDH as this will be mantained
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
0fe02bb1bf
Removed TLS1_2_KEY_EXCHANGES_WITH_ECDSA_CERT as it is no longer used
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
844a264317
Remove stray MBEDTLS_PKCS1_V15 and MBEDTLS_PKCS1_V21
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
b2f6a69d85
Replace MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED with MBEDTLS_KEY_EXCHANGE_SOME_ECDH_OR_ECDHE_1_2_ENABLED
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
013f8aee4e
Replace MBEDTLS_KEY_EXCHANGE_PSK_ENABLED with MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
1d651cc8a1
Remove additional occurances of static ECDH symbols
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
a1914ef453
further removals of ssh tests from ssl-opt
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
fbd806ae95
Remove everest ECDH test as it is no longer required
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
5802394451
Remove further ECDH testd from ssl-opt.sh
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
0a7c5588db
Remove further ECDH tests
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00
Ben Taylor
dbf3977107
Remove tests from ssl-opt.sh that are depedendent the removed ECDH algorithm's
...
Signed-off-by: Ben Taylor <ben.taylor@linaro.org >
2025-09-11 13:22:40 +01:00