History log of /seL4-camkes-master/projects/lwip/src/apps/altcp_tls/altcp_tls_mbedtls.c
Revision Date Author Comments
# 422623a8 08-Nov-2018 Simon Goldschmidt <goldsimon@gmx.de>

altcp_tls_mbedtls: implement mbedTLS debug output, comment fixes


# f58324b5 26-Oct-2018 Simon Goldschmidt <goldsimon@gmx.de>

altcp_tls_mbedtls: update list of todos

Signed-off-by: Simon Goldschmidt <goldsimon@gmx.de>


# 205cd7c1 27-Sep-2018 David GIRAULT <dgirault@sevenhugs.com>

bug #54744: if altcp_close() called from recv() callback, there is some write to freed memory

Signed-off-by: Simon Goldschmidt <goldsimon@gmx.de>
(cherry picked from commit 6e994f9df2da80cae1f88e7b771c4b803af0ce0d)


# a044c807 24-Sep-2018 Simon Goldschmidt <goldsimon@gmx.de>

altcp_tls: rename altcp_tls_new -> altcp_tls_wrap, add altcp_tls_new

The new altcp_tls_new() is a type safe version of altcp_tls_alloc()

Signed-off-by: Simon Goldschmidt <goldsimon@gmx.de>


# fc24d413 12-Sep-2018 Simon Goldschmidt <goldsimon@gmx.de>

altcp_tls_mbedtls: convert #error on too small TCP_WND to warning

Many TLS use cases are OK with a small TCP_WND, so don't prevent these
by having a preprocessor check that cannot be disabled.


# 7749088a 07-Sep-2018 Simon Goldschmidt <goldsimon@gmx.de>

Fix 2way-auth connections for TLS clients

TLS clients that need 2-way authentication (e.g. Amazon AWS IoT cloud mqtt)
need to pass a certificate and private key when creating the tls altcp_pcb.

Added a new function altcp_tls_create_config_client_2wayauth() for this that
replaces altcp_tls_create_config_client() for such clients.

See bug #54601.


# a56e61c9 24-Jun-2018 Axel Lin <axel.lin@ingics.com>

Fix compiling with LWIP_NOASSERT defined

Signed-off-by: Axel Lin <axel.lin@ingics.com>


# 325cdf3c 21-Feb-2018 goldsimon <goldsimon@gmx.de>

altcp_tls_mbedtls: restructure upper callbacks to prevent double-free

This fixes bug #53192: use-after-free in altcp_mbedtls

Signed-off-by: goldsimon <goldsimon@gmx.de>


# d66c0e33 20-Feb-2018 goldsimon <goldsimon@gmx.de>

altcp: mbedtls: move freeing state->rx from close to dealloc (catch-all)


# 2648d308 16-Feb-2018 goldsimon <goldsimon@gmx.de>

altcp_tls_mbedtls.c: tiny function rename


# de68c5be 25-Jan-2018 goldsimon <goldsimon@gmx.de>

altcp_mbedtls_sndbuf: use mbedtls_ssl_get_record_expansion()


# 8a27408e 16-Jan-2018 goldsimon <goldsimon@gmx.de>

altcp_tls_mbedtls: hide allocation strategy in altcp_tls_create_config()


# 42f14a96 16-Jan-2018 David Girault <dgirault@sevenhugs.com>

altcp_tls: avoid use of static in altcp_tls_config

cert and pkey are allocated with the altcp_tls_config structure.

Signed-off-by: goldsimon <goldsimon@gmx.de>


# c7106cc5 16-Jan-2018 David Girault <dgirault@sevenhugs.com>

altcp_tls: fix pbuf leaked when handshake failed

Signed-off-by: goldsimon <goldsimon@gmx.de>


# 6ccd12b9 11-Jan-2018 David Girault <david@dhgirault.fr>

altcp_mbedtls: added altcp_mbedtls_sndbuf implementation

Signed-off-by: goldsimon <goldsimon@gmx.de>


# 5290eacf 15-Nov-2017 David Girault <dgirault@sevenhugs.com>

altcp_mbedtls: close and error related fixes

- call conn->err() instead of conn->recv() if handshake fail and free conn
- close inner_conn and free current conn in altcp_mbedtls_close()

Signed-off-by: goldsimon <goldsimon@gmx.de>


# bd2e8208 14-Nov-2017 goldsimon <goldsimon@gmx.de>

Fix double-free when closing mbedTLS connections

Partly revert commit 0486100a2bcbce74a7214ee4f11782a9441acbf0 from 07.08.2017 as it breaks layering: every layer must free its own altcp_pcb. Freeing the inner_conn is not the right way.


# c35b1099 17-Sep-2017 Dirk Ziegelmeier <dirk@ziegelmeier.net>

Reformat altcp_tls_mbedtls* using astylerc


# 991f7513 08-Aug-2017 goldsimon <goldsimon@gmx.de>

Even more pbuf_header -> pbuf_add/remove_header replacements (also in strings)


# 07434aa7 08-Aug-2017 goldsimon <goldsimon@gmx.de>

More pbuf_header -> pbuf_add/remove_header replacements


# 6d28e9de 07-Aug-2017 goldsimon <goldsimon@gmx.de>

Some cleanups after applying David Girault's altcp patches


# bc3edfb4 01-Aug-2017 David Girault <david@dhgirault.fr>

altcp_tls_mbedtls: remove "rx pbufs left at end of handshake" assert

There is case where a close notify come right after the handshake and is in the same pbuf!
So just handle these data like any other data.


# 0486100a 07-Aug-2017 David Girault <dgirault@sevenhugs.com>

altcp_tls: some fixes

- added `altcp_tls_free_config()`.
- added `altcp_tls_context()` function to allow mbedtls parameter tweak.

Since state structure isn't exported, this allow application to get
internal context (port dependent) to tweak it.

- free altcp_pcb when lower error callback called.


# 8b1a4ef7 06-Jun-2017 David Girault <david@dhgirault.fr>

altcp_tls_mbedtls: fix log messages by include a `\n`


# 44f7a3cb 05-Jul-2017 goldsimon <goldsimon@gmx.de>

work on -Wconversion...


# 6559ffd8 31-Mar-2017 Dirk Ziegelmeier <dirk@ziegelmeier.net>

Fix C++ style comment in altcp_tls_mbedtls.c


# 4313bf2a 30-Mar-2017 goldsimon <goldsimon@gmx.de>

altcp_tls_mbedtls: fix TX when lower write returns ERR_MEM


# 51dbd1a7 30-Mar-2017 goldsimon <goldsimon@gmx.de>

altcp: added altcp_get_port()


# 38651b80 28-Mar-2017 Dirk Ziegelmeier <dirk@ziegelmeier.net>

Cleanup #include structure of altcp_tls a bit
(as discussed with Simon today)


# 537c258e 28-Mar-2017 goldsimon <goldsimon@gmx.de>

httpd/altcp: add forgotten functions


# 425b2dda 26-Mar-2017 goldsimon <goldsimon@gmx.de>

altcp_get_ip: added altcp_get_ip(), added default functions that only defer a call to the inner_conn (moved from tls_mbedtls to generic altcp)


# 6add16e3 25-Mar-2017 goldsimon <goldsimon@gmx.de>

altcp_tls_mbedtls: fixed memory leak introduced by delayed deallocation


# 0581a777 24-Mar-2017 goldsimon <goldsimon@gmx.de>

Prepare altcp_tls_mbedtls for TLS clients (not fully tested yet)


# a2bc02d6 23-Mar-2017 goldsimon <goldsimon@gmx.de>

altcp_tls_mbedtls: improve sent/recved handling


# 1e26652d 23-Mar-2017 goldsimon <goldsimon@gmx.de>

renamed altcp_mbedtls files to altcp_tls_mbedtls