MirrorSave
/
nodemcu-firmware
mirror of https://github.com/nodemcu/nodemcu-firmware.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nodemcu-firmware/app/include/mbedtls
History
Nathaniel Wesley Filardo 6e95d74fbd Update TLS protocol support (#2587) 
* Update TLS protocol support

TLS1.0 is past PCI's EOL; BEAST is no more
Enable elliptic curve key exchanges
	Do not enable the smallest ECs for security
	Do not enable the largest ECs for computational time
	Do not enable 25519 (sad) because it doesn't go across the wire
Drop non-PFS key exchanges
Drop ARC4, Blowfish, DES, genprime, XTEA code
Drop renegotiation support completely
	It takes so much heap that it's not likely to work out well

Tidy handling of SSL_BUFFER_SIZE

Update docs
Drop mention of startcom, since they are no more, for letsencrypt

* Update mbedtls to 2.7.7

Preserve our vsnprintf and platform hacks

* Introduce TLS maximum fragment size knob

Reduce buffer size to 4Ki by default and advertize that.  That's the
largest we can advertize with the TLS MFL extension, so there's no
point in making them larger.  The truly adventurous can re-raise
SSL_BUFFER_SIZE and undefine the SSL_MAX_FRAGMENT_LENGTH_CODE and get
back to the earlier behavior.

* Default to mbedTLS debug with DEVELOP_VERSION
 		2019-01-15 17:02:32 +01:00
..
aes.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
aesni.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
arc4.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
asn1.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
asn1write.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
base64.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
bignum.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
blowfish.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
bn_mul.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
camellia.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
ccm.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
certs.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
check_config.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
cipher.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
cipher_internal.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
cmac.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
compat-1.3.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
config.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ctr_drbg.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
debug.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
des.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
dhm.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ecdh.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
ecdsa.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ecjpake.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
ecp.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ecp_internal.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
entropy.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
entropy_poll.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
error.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
gcm.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
havege.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
hmac_drbg.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
md.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
md2.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
md4.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
md5.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
md_internal.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
memory_buffer_alloc.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
net.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
net_sockets.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
oid.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
padlock.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
pem.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
pk.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
pk_internal.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
pkcs5.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
pkcs11.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
pkcs12.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
platform.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
platform_time.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
ripemd160.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
rsa.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
rsa_internal.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
sha1.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
sha256.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
sha512.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ssl.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ssl_cache.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
ssl_ciphersuites.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ssl_cookie.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
ssl_internal.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
ssl_ticket.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
threading.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
timing.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
version.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
x509.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
x509_crl.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
x509_crt.h Update TLS protocol support (#2587) 2019-01-15 17:02:32 +01:00
x509_csr.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00
xtea.h Update mbedTLS to 2.7.0 (#2267) 2018-03-03 23:28:26 +01:00