1. aed7188 Merge remote-tracking branch 'upstream-restricted/pr/427' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  2. 6cf85ff Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  3. 49349ba Merge remote-tracking branch 'upstream-public/pr/1153' into mbedtls-2.1 by Gilles Peskine · 8 years ago
  4. f663c22 Merge remote-tracking branch 'upstream-public/pr/916' into mbedtls-2.1 by Gilles Peskine · 8 years ago
  5. 1854a0e Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  6. 25aa833 Merge branch 'pr_1082' into mbedtls-2.1 by Gilles Peskine · 8 years ago
  7. 283a80d Merge remote-tracking branch 'upstream-public/pr/1108' into mbedtls-2.1 by Gilles Peskine · 8 years ago
  8. a6f6947 Merge remote-tracking branch 'upstream-public/pr/943' into mbedtls-2.1 by Gilles Peskine · 8 years ago
  9. 1b8822e Merge remote-tracking branch 'upstream-restricted/pr/422' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  10. 9aab699 Merge remote-tracking branch 'upstream-restricted/pr/406' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  11. 5a8fe05 Merge remote-tracking branch 'upstream-restricted/pr/401' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  12. 336b7de Merge remote-tracking branch 'upstream-restricted/pr/386' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  13. e881a22 Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  14. d08ae68 Merge remote-tracking branch 'upstream-public/pr/1112' into mbedtls-2.1 by Gilles Peskine · 8 years ago
  15. 5eb8edc Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  16. 7aa2419 Merge remote-tracking branch 'upstream-public/pr/1107' into mbedtls-2.1 by Gilles Peskine · 8 years ago
  17. a90c3da Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 8 years ago
  18. aed00f7 Merge remote-tracking branch 'restricted/pr/417' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 8 years ago
  19. ce516ff Fix heap corruption in ssl_decrypt_buf by Hanno Becker · 8 years ago
  20. ea0aa65 Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 8 years ago
  21. 0f49bbc Zeroize stack before returning from mpi_fill_random by Hanno Becker · 8 years ago
  22. b3088b4 Fix information leak in ecp_gen_keypair_base by Hanno Becker · 8 years ago
  23. 7d80688 Make mpi_read_binary time constant by Hanno Becker · 8 years ago
  24. 3cd07be Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused by Hanno Becker · 8 years ago
  25. e454d73 Swap branches accepting/refusing renegotiation in in ssl_read by Hanno Becker · 8 years ago
  26. 9745cfd RSA PSS: remove redundant check; changelog by Gilles Peskine · 8 years ago
  27. a360411 Fixed SIGSEGV problem when writing with ssl_write_real a buffer that is over MBEDTLS_SSL_MAX_CONTENT_LEN bytes by Florin · 9 years ago
  28. e298c8b Correct typo by Hanno Becker · 9 years ago
  29. 31a2d14 RSA PSS: fix first byte check for keys of size 8N+1 by Gilles Peskine · 8 years ago
  30. 9e20582 RSA PSS: fix minimum length check for keys of size 8N+1 by Gilles Peskine · 8 years ago
  31. d0cd855 RSA: Fix another buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
  32. 5c32471 RSA: Fix buffer overflow in PSS signature verification by Gilles Peskine · 8 years ago
  33. bc04113 Correctly handle leap year in x509_date_is_valid() by Andres Amaya Garcia · 9 years ago
  34. bac9d4d Parse Signature Algorithm ext when renegotiating by Ron Eldor · 9 years ago
  35. 59ce0a7 Improve documentation in pkparse.c by Hanno Becker · 9 years ago
  36. 0c104b1 Fix typo by Hanno Becker · 9 years ago
  37. 570238e Fix typo in pkparse.c by Hanno Becker · 9 years ago
  38. bc7cbba Use X509 CRT version macros for version checks in x509write_crt_der by Hanno Becker · 9 years ago
  39. 7de3ff3 Minor style and typo corrections by Hanno Becker · 9 years ago
  40. c4cd8c6 Don't add extensions for X.509 non-v3 certificates by Hanno Becker · 9 years ago
  41. e3af3af Omit version from X.509 v1 certificates by Hanno Becker · 9 years ago
  42. c7845e5 Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog. by Hanno Becker · 9 years ago
  43. 593b0d3 Make mbedtls_ssl_set_hostname safe to be called multiple times by Hanno Becker · 9 years ago
  44. 69f00bf Correct parsing checks in `mbedtls_pk_parse_key` by Hanno Becker · 9 years ago
  45. da8e163 Remove unreachable branches in pkparse.c by Hanno Becker · 9 years ago
  46. e5d5b90 Mention in-place decryption in pk_parse_key_pkcs8_encrypted_der by Hanno Becker · 9 years ago
  47. ff53295 Remove unnecessary cast by Hanno Becker · 9 years ago
  48. a1d5856 Add missing calls to mbedtls_pem_free in mbedtls_pk_parse by Hanno Becker · 9 years ago
  49. 9f2b60b Use in-place decryption in pk_parse_pkcs8_encrypted_der by Hanno Becker · 9 years ago
  50. f581e11 Fix extraction of signature-type from PK context instance by Hanno Becker · 9 years ago
  51. f341083 DHM: Fix dhm_check_range() always returning 0 by Janos Follath · 9 years ago
  52. 1042d86 Dont send alert on invalid DTLS record type by Andres Amaya Garcia · 9 years ago
  53. 66580d2 Add internal macro ENTROPY_HAVE_STRONG indicating strong entropy by Hanno Becker · 9 years ago
  54. 070c809 Adress Hannos's comments by Ron Eldor · 9 years ago
  55. 82a4b81 update after Andres comments by Ron Eldor · 9 years ago
  56. 4dc8af7 Backport 2.1:Set PEM buffer to zero before freeing by Ron Eldor · 9 years ago
  57. 1fe5e8a Update version number to 2.1.9 by Simon Butcher · 9 years ago mbedtls-2.1.9
  58. 6ad82d7 Rename time and index parameter to avoid name conflict. by Hanno Becker · 9 years ago
  59. cdb4dc9 Improve comments by Manuel Pégourié-Gonnard · 9 years ago
  60. c386317 Only return VERIFY_FAILED from a single point by Manuel Pégourié-Gonnard · 9 years ago
  61. 489939f Improve behaviour on fatal errors by Manuel Pégourié-Gonnard · 9 years ago
  62. b322be5 Prevent signed integer overflow in CSR parsing by Andres AG · 9 years ago
  63. 1f06d9b Fix potential integer overflow parsing DER CRT by Andres AG · 9 years ago
  64. 0ff660e Fix potential integer overflow parsing DER CRL by Andres AG · 9 years ago
  65. a886ce3 Backport 2.1: Check rc of mbedtls_mpi_fill_random by Ron Eldor · 9 years ago
  66. 0fb3e0a Backport: Resource leak fix on windows platform by Ron Eldor · 9 years ago
  67. ee709f4 Backport 2.1: Wrong preproccessor condition fix by Ron Eldor · 9 years ago
  68. 5ff277e Backport 2.1: check if iv is zero in gcm. by Ron Eldor · 9 years ago
  69. 246b163 Zeroize buf if mbedtls_base64_decode() fails by Andres Amaya Garcia · 9 years ago
  70. bab1edc Zeroize tmp buffer in entropy_update() by Andres Amaya Garcia · 9 years ago
  71. 3d23146 Set len var to 0 when buf is freed in ssl_tls.c by Andres Amaya Garcia · 9 years ago
  72. c17cc44 Zeroize tmp buf in ctr_drbg_write_seed_file() by Andres Amaya Garcia · 9 years ago
  73. 4f02a7b Zeroize heap buf on failure in pem.c by Andres Amaya Garcia · 9 years ago
  74. 1b7d6f8 Zeroize old psk buf when changing value in ssl_tls by Andres Amaya Garcia · 9 years ago
  75. 64f0e09 Zeroize tmp buf in mbedtls_mpi_fill_random() by Andres Amaya Garcia · 9 years ago
  76. e0a727e Zeroize tmp bufs in ctr_drbg.c functions by Andres Amaya Garcia · 9 years ago
  77. e7c839b Zeroize return buf on failure in pkparse.c by Andres Amaya Garcia · 9 years ago
  78. f113161 Zeroize tmp bufs in hmac_drbg.c functions by Andres Amaya Garcia · 9 years ago
  79. 81284ad Zeroize tmp bufs in entropy.c functions by Andres Amaya Garcia · 9 years ago
  80. 2390c2a Zeroize tmp buf in mbedtls_md_file() md.c by Andres Amaya Garcia · 9 years ago
  81. ea0fad4 Zeroize tmp buf on fail in load_file() dhm.c by Andres Amaya Garcia · 9 years ago
  82. c26741f Prevent bounds check bypass through overflow in PSK identity parsing by Hanno Becker · 9 years ago
  83. fbb9837 Update the version number to 2.1.8 by Simon Butcher · 9 years ago mbedtls-2.1.8
  84. 499391a Undo API change by Hanno Becker · 9 years ago
  85. 89930b3 Merge remote-tracking branch 'restricted/iotssl-1398_backport-2.1' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 9 years ago
  86. cc01908 Ensure application data records are not kept when fully processed by Hanno Becker · 9 years ago
  87. 1defa8f Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-2.1-restricted' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 9 years ago
  88. 63906d9 Merge remote-tracking branch 'restricted/IOTSSL-1366/mbedtls-2.1' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 9 years ago
  89. 640edc7 Merge remote-tracking branch 'hanno/mpi_read_file_underflow_backport-2.1' into mbedtls-2.1 by Manuel Pégourié-Gonnard · 9 years ago
  90. ebe391d Merge remote-tracking branch 'hanno/sliding_exponentiation_backport-2.1' into mbedtls-2.1 by Manuel Pégourié-Gonnard · 9 years ago
  91. bfbc494 Add hard assertion to mbedtls_ssl_read_record_layer by Hanno Becker · 9 years ago
  92. 6a582e8 Fix mbedtls_ssl_read by Hanno Becker · 9 years ago
  93. 704f493 Simplify retaining of messages for future processing by Hanno Becker · 9 years ago
  94. 61c0c70 Add tests for missing CA chains and bad curves. by Hanno Becker · 9 years ago
  95. a3929ba Fix implementation of VERIFY_OPTIONAL verification mode by Hanno Becker · 9 years ago
  96. b55f613 Merge remote-tracking branch 'gilles/iotssl-1223/mbedtls-2.1' into mbedtls-2.1 by Manuel Pégourié-Gonnard · 9 years ago
  97. 7344e1b SHA-1 deprecation: allow it in key exchange by Gilles Peskine · 9 years ago
  98. 12c1954 Allow SHA-1 in SSL renegotiation tests by Gilles Peskine · 9 years ago
  99. 5877c27 X.509 self-tests: replaced SHA-1 certificates by SHA-256 by Gilles Peskine · 9 years ago
  100. 955738a Remove SHA-1 in TLS by default by Gilles Peskine · 9 years ago