1. f6a6b82 Fix x509_get_subject_alt_name to drop invalid tag by Andres Amaya Garcia · 7 years ago
  2. aed7188 Merge remote-tracking branch 'upstream-restricted/pr/427' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  3. 6cf85ff Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  4. 49349ba Merge remote-tracking branch 'upstream-public/pr/1153' into mbedtls-2.1 by Gilles Peskine · 7 years ago
  5. f663c22 Merge remote-tracking branch 'upstream-public/pr/916' into mbedtls-2.1 by Gilles Peskine · 7 years ago
  6. 1854a0e Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  7. 25aa833 Merge branch 'pr_1082' into mbedtls-2.1 by Gilles Peskine · 7 years ago
  8. 283a80d Merge remote-tracking branch 'upstream-public/pr/1108' into mbedtls-2.1 by Gilles Peskine · 7 years ago
  9. a6f6947 Merge remote-tracking branch 'upstream-public/pr/943' into mbedtls-2.1 by Gilles Peskine · 7 years ago
  10. 1b8822e Merge remote-tracking branch 'upstream-restricted/pr/422' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  11. 9aab699 Merge remote-tracking branch 'upstream-restricted/pr/406' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  12. 5a8fe05 Merge remote-tracking branch 'upstream-restricted/pr/401' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  13. 336b7de Merge remote-tracking branch 'upstream-restricted/pr/386' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  14. e881a22 Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  15. d08ae68 Merge remote-tracking branch 'upstream-public/pr/1112' into mbedtls-2.1 by Gilles Peskine · 7 years ago
  16. 5eb8edc Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  17. 7aa2419 Merge remote-tracking branch 'upstream-public/pr/1107' into mbedtls-2.1 by Gilles Peskine · 7 years ago
  18. a90c3da Merge branch 'iotssl-1368-unsafe-bounds-check-psk-identity-merge-2.1' into mbedtls-2.1-restricted by Gilles Peskine · 7 years ago
  19. aed00f7 Merge remote-tracking branch 'restricted/pr/417' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 7 years ago
  20. ce516ff Fix heap corruption in ssl_decrypt_buf by Hanno Becker · 7 years ago
  21. ea0aa65 Merge branch 'mbedtls-2.1' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 7 years ago
  22. 0f49bbc Zeroize stack before returning from mpi_fill_random by Hanno Becker · 7 years ago
  23. b3088b4 Fix information leak in ecp_gen_keypair_base by Hanno Becker · 7 years ago
  24. 7d80688 Make mpi_read_binary time constant by Hanno Becker · 7 years ago
  25. 3cd07be Fix handling of HS msgs in mbedtls_ssl_read if renegotiation unused by Hanno Becker · 7 years ago
  26. e454d73 Swap branches accepting/refusing renegotiation in in ssl_read by Hanno Becker · 7 years ago
  27. 9745cfd RSA PSS: remove redundant check; changelog by Gilles Peskine · 7 years ago
  28. a360411 Fixed SIGSEGV problem when writing with ssl_write_real a buffer that is over MBEDTLS_SSL_MAX_CONTENT_LEN bytes by Florin · 7 years ago
  29. e298c8b Correct typo by Hanno Becker · 7 years ago
  30. 31a2d14 RSA PSS: fix first byte check for keys of size 8N+1 by Gilles Peskine · 7 years ago
  31. 9e20582 RSA PSS: fix minimum length check for keys of size 8N+1 by Gilles Peskine · 7 years ago
  32. d0cd855 RSA: Fix another buffer overflow in PSS signature verification by Gilles Peskine · 7 years ago
  33. 5c32471 RSA: Fix buffer overflow in PSS signature verification by Gilles Peskine · 7 years ago
  34. bc04113 Correctly handle leap year in x509_date_is_valid() by Andres Amaya Garcia · 8 years ago
  35. bac9d4d Parse Signature Algorithm ext when renegotiating by Ron Eldor · 7 years ago
  36. 59ce0a7 Improve documentation in pkparse.c by Hanno Becker · 7 years ago
  37. 0c104b1 Fix typo by Hanno Becker · 7 years ago
  38. 570238e Fix typo in pkparse.c by Hanno Becker · 7 years ago
  39. bc7cbba Use X509 CRT version macros for version checks in x509write_crt_der by Hanno Becker · 7 years ago
  40. 7de3ff3 Minor style and typo corrections by Hanno Becker · 7 years ago
  41. c4cd8c6 Don't add extensions for X.509 non-v3 certificates by Hanno Becker · 7 years ago
  42. e3af3af Omit version from X.509 v1 certificates by Hanno Becker · 7 years ago
  43. c7845e5 Enhance documentation of ssl_write_hostname_ext, adapt ChangeLog. by Hanno Becker · 8 years ago
  44. 593b0d3 Make mbedtls_ssl_set_hostname safe to be called multiple times by Hanno Becker · 8 years ago
  45. 69f00bf Correct parsing checks in `mbedtls_pk_parse_key` by Hanno Becker · 7 years ago
  46. da8e163 Remove unreachable branches in pkparse.c by Hanno Becker · 7 years ago
  47. e5d5b90 Mention in-place decryption in pk_parse_key_pkcs8_encrypted_der by Hanno Becker · 7 years ago
  48. ff53295 Remove unnecessary cast by Hanno Becker · 7 years ago
  49. a1d5856 Add missing calls to mbedtls_pem_free in mbedtls_pk_parse by Hanno Becker · 7 years ago
  50. 9f2b60b Use in-place decryption in pk_parse_pkcs8_encrypted_der by Hanno Becker · 7 years ago
  51. f581e11 Fix extraction of signature-type from PK context instance by Hanno Becker · 7 years ago
  52. f341083 DHM: Fix dhm_check_range() always returning 0 by Janos Follath · 7 years ago
  53. 1042d86 Dont send alert on invalid DTLS record type by Andres Amaya Garcia · 7 years ago
  54. 66580d2 Add internal macro ENTROPY_HAVE_STRONG indicating strong entropy by Hanno Becker · 7 years ago
  55. 070c809 Adress Hannos's comments by Ron Eldor · 7 years ago
  56. 82a4b81 update after Andres comments by Ron Eldor · 7 years ago
  57. 4dc8af7 Backport 2.1:Set PEM buffer to zero before freeing by Ron Eldor · 7 years ago
  58. 1fe5e8a Update version number to 2.1.9 by Simon Butcher · 7 years ago mbedtls-2.1.9
  59. 6ad82d7 Rename time and index parameter to avoid name conflict. by Hanno Becker · 7 years ago
  60. cdb4dc9 Improve comments by Manuel Pégourié-Gonnard · 7 years ago
  61. c386317 Only return VERIFY_FAILED from a single point by Manuel Pégourié-Gonnard · 7 years ago
  62. 489939f Improve behaviour on fatal errors by Manuel Pégourié-Gonnard · 7 years ago
  63. b322be5 Prevent signed integer overflow in CSR parsing by Andres AG · 8 years ago
  64. 1f06d9b Fix potential integer overflow parsing DER CRT by Andres AG · 8 years ago
  65. 0ff660e Fix potential integer overflow parsing DER CRL by Andres AG · 8 years ago
  66. a886ce3 Backport 2.1: Check rc of mbedtls_mpi_fill_random by Ron Eldor · 8 years ago
  67. 0fb3e0a Backport: Resource leak fix on windows platform by Ron Eldor · 8 years ago
  68. ee709f4 Backport 2.1: Wrong preproccessor condition fix by Ron Eldor · 8 years ago
  69. 5ff277e Backport 2.1: check if iv is zero in gcm. by Ron Eldor · 7 years ago
  70. 246b163 Zeroize buf if mbedtls_base64_decode() fails by Andres Amaya Garcia · 7 years ago
  71. bab1edc Zeroize tmp buffer in entropy_update() by Andres Amaya Garcia · 7 years ago
  72. 3d23146 Set len var to 0 when buf is freed in ssl_tls.c by Andres Amaya Garcia · 7 years ago
  73. c17cc44 Zeroize tmp buf in ctr_drbg_write_seed_file() by Andres Amaya Garcia · 7 years ago
  74. 4f02a7b Zeroize heap buf on failure in pem.c by Andres Amaya Garcia · 7 years ago
  75. 1b7d6f8 Zeroize old psk buf when changing value in ssl_tls by Andres Amaya Garcia · 7 years ago
  76. 64f0e09 Zeroize tmp buf in mbedtls_mpi_fill_random() by Andres Amaya Garcia · 7 years ago
  77. e0a727e Zeroize tmp bufs in ctr_drbg.c functions by Andres Amaya Garcia · 7 years ago
  78. e7c839b Zeroize return buf on failure in pkparse.c by Andres Amaya Garcia · 7 years ago
  79. f113161 Zeroize tmp bufs in hmac_drbg.c functions by Andres Amaya Garcia · 7 years ago
  80. 81284ad Zeroize tmp bufs in entropy.c functions by Andres Amaya Garcia · 7 years ago
  81. 2390c2a Zeroize tmp buf in mbedtls_md_file() md.c by Andres Amaya Garcia · 7 years ago
  82. ea0fad4 Zeroize tmp buf on fail in load_file() dhm.c by Andres Amaya Garcia · 7 years ago
  83. c26741f Prevent bounds check bypass through overflow in PSK identity parsing by Hanno Becker · 7 years ago
  84. fbb9837 Update the version number to 2.1.8 by Simon Butcher · 7 years ago mbedtls-2.1.8
  85. 499391a Undo API change by Hanno Becker · 7 years ago
  86. 89930b3 Merge remote-tracking branch 'restricted/iotssl-1398_backport-2.1' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 7 years ago
  87. cc01908 Ensure application data records are not kept when fully processed by Hanno Becker · 7 years ago
  88. 1defa8f Merge remote-tracking branch 'restricted/iotssl-1138-rsa-padding-check-2.1-restricted' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 7 years ago
  89. 63906d9 Merge remote-tracking branch 'restricted/IOTSSL-1366/mbedtls-2.1' into mbedtls-2.1-restricted by Manuel Pégourié-Gonnard · 7 years ago
  90. 640edc7 Merge remote-tracking branch 'hanno/mpi_read_file_underflow_backport-2.1' into mbedtls-2.1 by Manuel Pégourié-Gonnard · 7 years ago
  91. ebe391d Merge remote-tracking branch 'hanno/sliding_exponentiation_backport-2.1' into mbedtls-2.1 by Manuel Pégourié-Gonnard · 7 years ago
  92. bfbc494 Add hard assertion to mbedtls_ssl_read_record_layer by Hanno Becker · 7 years ago
  93. 6a582e8 Fix mbedtls_ssl_read by Hanno Becker · 7 years ago
  94. 704f493 Simplify retaining of messages for future processing by Hanno Becker · 7 years ago
  95. 61c0c70 Add tests for missing CA chains and bad curves. by Hanno Becker · 7 years ago
  96. a3929ba Fix implementation of VERIFY_OPTIONAL verification mode by Hanno Becker · 7 years ago
  97. b55f613 Merge remote-tracking branch 'gilles/iotssl-1223/mbedtls-2.1' into mbedtls-2.1 by Manuel Pégourié-Gonnard · 7 years ago
  98. 7344e1b SHA-1 deprecation: allow it in key exchange by Gilles Peskine · 7 years ago
  99. 12c1954 Allow SHA-1 in SSL renegotiation tests by Gilles Peskine · 7 years ago
  100. 5877c27 X.509 self-tests: replaced SHA-1 certificates by SHA-256 by Gilles Peskine · 7 years ago