Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-01 10:40:47 +03:00
Code Issues Packages Projects Releases Wiki Activity
48,436 Commits 25 Branches 192 Tags
2df44fa609ecedda1334ef9292c7ef9964ff9bc7
Commit Graph
266 Commits
Author SHA1 Message Date
Ashish Sharma ce7abcf087 fix(esp-tls): guard against NULL PSK hint to prevent crash 2026-07-03 11:36:33 +08:00
Aditya Patwardhan 8100e2f13a fix(esp-tls): clarify skip_common_name and warn when SNI is disabled 
The skip_common_name flag was named for the legacy CN field but actually
suppresses the entire mbedtls_ssl_set_hostname() call -- disabling
hostname matching against CN/SAN AND Server Name Indication. Update the
doxygen to describe the real effect, and emit a per-call WARN inside the
SNI-disable branch so debug-only use does not slip into production
unnoticed.
 2026-05-26 19:13:42 +05:30
Aditya Patwardhan 24e0913b7b fix(esp-tls): close CA-verification bypass during session resumption 
The session-resumption else-if in set_client_config() short-circuited
the CA verification chain when only client_session was supplied. Remove
the branch so session-only configs fall through to the normal error /
skip-verify path; resumption no longer silently disables CA validation.
 2026-05-26 19:12:51 +05:30
Ashish Sharma 8ddb998a8f feat(esp_tls): extends esp-tls test apps 2026-04-17 14:41:45 +08:00
Ashish Sharma 2f560ce2cd fix(esp_tls): check tls connection finished before read/write operation 2026-04-17 14:41:45 +08:00
Ashish Sharma cca227e022 feat(esp-tls): adds per ssl context state management 2026-03-30 13:45:28 +08:00
0xFEEDC0DE64 2ed84eb04b feat(esp_http_server): Allow the https server to request client certs optionally 
Closes https://github.com/espressif/esp-idf/pull/17641
 2026-02-11 17:49:44 +08:00
于小丘 692d47b6b7 fix(esp-tls): Remove unused MBEDTLS_PK_RSA_ALT_SUPPORT dependency from DS peripheral option 2026-02-03 13:55:55 +08:00
Ashish Sharma 30f93c0516 feat(mbedtls): update to version 3.6.5 2025-11-11 16:47:45 +08:00
hrushikesh.bhosale 561872ca96 fix(esp_tls): Fixed build failure for sbv2 ecdsa 
Made ESP_TLS_ECDSA_CURVE_SECP384R1 under SOC CAP.
 2025-10-16 14:48:13 +08:00
nilesh.kale 364adc79c3 feat: added config member to store block number for high part of ecdsa key 2025-10-16 14:48:13 +08:00
nilesh.kale ba0618b672 feat: added new config member to provide ecdsa curve type 2025-10-16 14:48:13 +08:00
nilesh.kale 851602ed8e feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2 
This commit adds testcases in crypto/hal and mbedtls testapps.
 2025-10-16 14:48:13 +08:00
nilesh.kale 70ee6ed7e8 fix(esp-tls): removed unncessary log for certificate verification 
This commit removed unnecessary and confusing log for
certificate verify if there is another issue during tls connection.
 2025-10-09 11:22:25 +05:30
nilesh.kale adf5b7fc91 fix(esp-tls): added missing event tracker capture during mbedtls read operation 
This commit fixed missing event tracker capture and
added new error code ESP_ERR_MBEDTLS_SSL_READ_FAILED.

Closes https://github.com/espressif/esp-idf/issues/16239
 2025-10-09 11:22:25 +05:30
Jared Pon f5edf57e9f fix(esp_tls_conn_new_sync): Fix esp_tls_conn_new_sync's doc to reflect its implementation 
Closes https://github.com/espressif/esp-idf/pull/17652
Closes https://github.com/espressif/esp-idf/issues/17598
 2025-09-30 16:49:31 +08:00
Ashish Sharma 6b0796b2a4 fix(esp_tls): limit ret code from esp_mbedtls_handshake 2025-09-24 15:48:30 +08:00
Mahavir Jain b458016805 Merge branch 'feat/adding_different_strategy_to_perform_tls_using_dynamic_feature_v5.5' into 'release/v5.5' 
Add configuration to control dynamic buffer strategy in mbedtls (v5.5)

See merge request espressif/esp-idf!39919
 2025-07-22 14:48:44 +05:30
Mahavir Jain c76d8c49ee Merge branch 'feat/adding_hidden_config_for_dynamic_buffer_control_configuration_v5.5' into 'release/v5.5' 
feat(esp_tls): Added hidden config in esp-tls for dynamic buffer strategy configuration (v5.5)

See merge request espressif/esp-idf!40265
 2025-07-22 14:48:21 +05:30
Ashish Sharma 163db6a8a5 feat(mbedtls): adds support for RSA decryption with DS peripheral 2025-07-21 09:27:06 +08:00
hrushikesh.bhosale b6d0a8a24e feat(esp_tls): Added hidden config in esp-tls for dynamic buffer strategy configuration 
Added the hidden config in the esp-tls component for the dynamic buffer
strategy configuration feature. So that external components like ota
can findout whether this feature is supported or not
 2025-07-01 11:51:26 +05:30
hrushikesh.bhosale 2bfeb41d90 feat(mbedtls): Add configuration to control dynamic buffer strategy in mbedtls 
Problem:
1. In low-memory scenarios, the dynamic buffer feature can fail due to memory fragmentation.
2. It requires a contiguous 16KB heap chunk, but continuous allocation and deallocation of
the RX buffer can lead to fragmentation.
3. If another component allocates memory between these operations, it can break up the
available 16KB block, causing allocation failure.

Solution:
1. Introduce configurable strategy for using dynamic buffers in TLS connections.
2. For example, convert RX buffers to static after the TLS handshake.
3. Allow users to select the strategy via a new field in the esp_http_client_cfg_t structure.
4. The strategy can be controlled independently for each TLS session.
 2025-06-18 15:01:17 +05:30
Ashish Sharma 08d78dcd7e fix(esp_tls): fix failing build with TLS1.3 only and dynamic buffer 2025-06-16 09:22:57 +08:00
Zhang Xiao Yan 97f904b6fb Merge branch 'docs/fix_some_typos' into 'master' 
docs: Fix some typos

Closes DOC-10600, DOC-10605, DOC-10606, DOC-10607, DOC-10608, and DOC-10671

See merge request espressif/esp-idf!37977
 2025-04-30 18:35:40 +08:00
Shen Meng Jing 62d4115e08 docs: Fix some typos 2025-04-30 18:35:39 +08:00
Mahavir Jain ff555428d1 Merge branch 'feat/dynamic_buffer_tls1.3' into 'master' 
feat(mbedtls): add support for dynamic buffer for TLS1.3

Closes IDFGH-14708, IDF-12469, IDF-9178, and IDF-1725

See merge request espressif/esp-idf!38258
 2025-04-30 17:52:43 +08:00
Aditya Patwardhan f6a7bcb54e fix(esp-tls): Fixed build issue in esp-tls related to IPV6 only config 2025-04-24 15:14:35 +05:30
Ashish Sharma 415e0f3c86 feat(mbedtls): add support for dynamic buffer for TLS1.3 
Closes https://github.com/espressif/esp-idf/issues/15448
 2025-04-24 12:05:36 +08:00
Ashish Sharma 0bad622a7a fix(esp_tls): use correct sockaddr struct size when calling connect() 
Closes https://github.com/espressif/esp-idf/issues/15812
 2025-04-23 13:23:44 +08:00
harshal.patil e738ec5ccd fix(esp-tls): Fix build failure when CONFIG_MBEDTLS_SHA1_C is disabled 2025-04-21 13:38:29 +05:30
Mahavir Jain 4f3e64331b Merge branch 'contrib/github_pr_14909' into 'master' 
fix(esp-tls): Remove useless const from size paramter (GitHub PR)

Closes IDFGH-14099

See merge request espressif/esp-idf!36828
 2025-04-07 16:48:32 +08:00
Mahavir Jain 21f59bd030 Merge branch 'feat/update_mbedtls_3.6.3' into 'master' 
feat(component/mbedtls): update to upstream v3.6.3

Closes IDF-12730

See merge request espressif/esp-idf!38041
 2025-04-01 18:38:12 +08:00
Chen Jichang c34b4eb882 feat(esp32h4): enable ESP32H4 ci build 2025-03-28 14:41:28 +08:00
Ashish Sharma 0291bee0ff feat(mbedtls): update to version 3.6.3 2025-03-28 13:03:12 +08:00
igor.udot daf2d31008 test: format all test scripts 2025-03-05 12:08:48 +08:00
Aditya Patwardhan 877057db3d Merge branch 'fix/fix_timeout_issue_in_https_server' into 'master' 
fix(esp-tls): Fixed the server session create API

Closes IDFGH-14201

See merge request espressif/esp-idf!36519
 2025-02-23 19:07:00 +08:00
Cristian Funes bfa25448b7 change(secure-element): Removed dependency on esp32 to use secure element 
Closes https://github.com/espressif/esp-idf/pull/14785
Closes https://github.com/espressif/esp-idf/issues/14761
 2025-02-19 14:54:24 +05:30
Aditya Patwardhan d31654da96 fix(esp-tls): Fixed the server session create API 
Added the option to define tls_handshake_timeout value
    for the esp_tls_server_session_create API.
    At the moment, the API gets stuck infinitely if
    the handshake is blocked on recieving more data
    and the peer connection has closed due to some issue.

    Closes https://github.com/espressif/esp-idf/issues/14999
 2025-02-18 14:46:33 +05:30
Gao Xu 1e8a48db74 Merge branch 'feat/h21_enable_ci_build_test' into 'master' 
feat(esp32h21): enable ESP32H21 ci build

Closes IDF-11561

See merge request espressif/esp-idf!36197
 2025-02-07 14:10:54 +08:00
gaoxu 5ef4f20778 feat(esp32h21): disable unsupported build test 2025-02-06 15:47:51 +08:00
harshal.patil 7d8211bf87 feat(mbedtls): Support both SHA block and DMA modes during runtime 
Dynamically switch the SHA operation modes based on the buffer operating length
 2025-02-04 16:49:30 +05:30
Alexey Lapshin 888b5f7e8d feat(newlib): add picolibc support 2024-12-02 21:35:56 +07:00
Aditya Patwardhan f9d64d4db8 feat(esp-tls): Update support for asynchronous server session create 
Closes https://github.com/espressif/esp-idf/pull/14493
 2024-11-29 17:04:31 +05:30
thetek42 d97e435af9 fix: make esp_tls_server_session_create async compatible 2024-11-29 17:04:31 +05:30
David Cermak 7801d118d4 fix(esp_tls): PSK available in headers only if enabled in Kconfig 2024-11-21 11:36:16 +01:00
0xFEEDC0DE64 4bbff34ac2 fix(esp-tls): Remove useless const from size paramter 2024-11-19 18:21:18 +01:00
David Cermak 7ef2379549 feat(esp_tls): Add support for PSK authentication on server side 2024-11-18 13:47:29 +01:00
Mahavir Jain 559e554178 Merge branch 'contrib/github_pr_14503' into 'master' 
feat(esp-tls): add option to enable/disable the full set of OCSP checks for wolfSSL (GitHub PR)

Closes IDFGH-13619

See merge request espressif/esp-idf!33700
 2024-09-23 16:57:24 +08:00
Frank Mertens ba27281c3e change(esp-tls): add option to enable/disable the full set of OCSP checks for wolfSSL 2024-09-20 12:47:08 +02:00
Aditya Patwardhan a261827ae0 fix(esp-tls): Remove unused config option from esp-wolfssl 2024-09-20 16:09:40 +05:30