Commit Graph
73 Commits
Author SHA1 Message Date
Ashish Sharma 539d62b8ba fix: Skip writing to esp-idf directory when tfpsacrypto is built
Closes https://github.com/espressif/esp-idf/issues/18163
2026-01-29 13:46:44 +08:00
Ashish Sharma 1591d529fd feat(esp_http_client): adds API to get transport socket 2026-01-22 18:24:31 +08:00
Ashish Sharma 0559222711 fix: stop reading ws data when peer closes the connection
Closes https://github.com/espressif/esp-idf/issues/17822
2026-01-22 18:16:26 +08:00
Ashish Sharma 63f3072c9c fix: fixes potential ws server deadlock with blocking work queue
Closes https://github.com/espressif/esp-idf/issues/17591
2026-01-22 18:10:24 +08:00
Ashish Sharma 933dd7e02f feat: adds PSA MD5 driver support 2026-01-09 13:56:03 +05:30
Ashish Sharma 54a72063ef fix: fixes failing tee_basic example build 2026-01-09 13:55:59 +05:30
Ashish Sharma 1c74bf57dd fix(esp_http_client): fix incorrect digest calculation for SHA256 auth digest
According to RFC 7616, nonce-prime and cnonce-prime is used for SHA-256-sess only and not for SHA-256.
This commit updates the check and uses nonce only for "-sess" algorithms.

Regression from 66995965e7
2026-01-07 10:17:51 +08:00
Ashish Sharma 4073c89471 fix: fixes failing pipeline with internal wifi mbedtls client 2026-01-06 17:11:34 +08:00
Ashish Sharma 12368d65bb fix: enable SECP_R1_192 curve for ESP-TEE 2026-01-05 14:54:34 +05:30
Ashish Sharma 49876a19f7 fix: fixes coverity reported warnings 2026-01-05 14:54:34 +05:30
Ashish Sharma 246b052c93 fix(mbedtls): use ROM functions for md5 2026-01-05 14:54:33 +05:30
Ashish Sharma b02538834c fix: resolves MR comments 2025-12-20 23:02:25 +08:00
Ashish Sharma 5d5ba9d008 fix: migrate PSA SHA driver to be similar to parallel engine port 2025-12-19 11:06:41 +08:00
Ashish Sharma 646c9a994a fix: revert fastpbkdf2 implementation from PSA to improve performace 2025-12-19 07:29:43 +08:00
Ashish Sharma 76287081ea feat: code cleanup 2025-12-19 07:29:43 +08:00
Ashish Sharma 3dea3aae1d fix: fixes coverity reported warnings 2025-12-19 07:29:43 +08:00
Ashish Sharma 88346ccec5 fix: revert back to using mbedtls sha implementation for espcoredump 2025-12-19 07:29:08 +08:00
Ashish Sharma 37f665ae8c fix: improves some RSA key performances.
This fixes watchdog reset on ESP32 in certain WiFi tests.
2025-12-19 07:29:08 +08:00
Ashish Sharma 1e6621d285 fix: increase default stack size for esp_eth test apps 2025-12-19 07:29:08 +08:00
Ashish Sharma efee84f929 fix: use ROM APIs for espcoredump SHA operations 2025-12-19 07:29:08 +08:00
Ashish Sharma 98afd06c8f fix(pytest): patch to test panic test failures 2025-12-19 07:29:08 +08:00
Ashish Sharma aa88c81dfb fix(wpa_supplicant): revert changes to dpp_crypto 2025-12-19 07:29:08 +08:00
Ashish Sharma c2c31ba9d2 fix(wpa_supplicant): revert changes to dpp_crypto 2025-12-19 07:29:08 +08:00
Ashish SharmaandMahavir Jain 06d03e1a12 feat: add NVS based secure storage layer for PSA
(cherry picked from commit 31c7bad7f74ce8e54ea0563b670df37a58215600)

Co-authored-by: Mahavir Jain <mahavir@espressif.com>
2025-12-19 07:29:00 +08:00
Ashish Sharma f306dbea84 feat(mbedtls): migrates ESP-TEE with PSA APIs 2025-12-19 07:28:33 +08:00
Ashish Sharma c47caf4f0a feat(mbedtls): adds mbedtls alt drivers with PSA 2025-12-19 07:28:33 +08:00
Ashish Sharma 1d33cc26bd feat(mbedtls): adds AES drivers with PSA 2025-12-19 07:28:32 +08:00
Ashish Sharma b8a738e0c4 feat(mbedtls): adds SHA drivers with PSA 2025-12-19 07:28:32 +08:00
Ashish Sharma 7d17e8a024 feat(mbedtls): adds AES drivers with PSA 2025-12-19 07:28:28 +08:00
Ashish Sharma e629ab299c feat(mbedtls): adds SHA drivers with PSA 2025-12-19 07:27:59 +08:00
Ashish Sharma bf46351fb0 feat(mbedtls): fix build errors with PSA migration 2025-12-19 07:27:54 +08:00
Ashish Sharma d8e2e43f18 feat(wpa_supplicant): mbedtls PSA migration 2025-12-18 21:18:58 +08:00
Ashish Sharma a088d2ccdc feat(mbedtls): fix build errors with PSA migration 2025-12-18 21:18:58 +08:00
Ashish Sharma b0da66f7e1 feat(bt): migrate mbedtls to PSA APIs 2025-12-18 21:18:58 +08:00
Ashish Sharma b4fea9cccc feat(lwip): migrate to to PSA API interface 2025-12-18 21:18:58 +08:00
Ashish Sharma 1d92b530cd feat(wpa_supplicant): mbedtls PSA migration
feat(wpa_supplicant): mbedtls PSA migration
2025-12-18 21:18:58 +08:00
Ashish Sharma efd24c27db feat(mbedtls): update to version 3.6.5 2025-11-11 16:43:07 +08:00
Ashish Sharma 8f0a19d169 fix: fix the failing tcp_transport host test in the CI 2025-10-16 11:47:08 +08:00
Ashish Sharma 62f852a93b feat(esp_tls): supports setting tls version and ciphersuite in server config
Closes https://github.com/espressif/esp-idf/issues/17660
2025-10-03 15:19:41 +08:00
Ashish Sharma 59f5bb4540 Merge branch 'contrib/github_pr_17652' into 'master'
fix(esp_tls_conn_new_sync): Fix `esp_tls_conn_new_sync`'s doc to reflect its implementation (GitHub PR)

Closes IDFGH-16528 and IDFGH-16475

See merge request espressif/esp-idf!42263
2025-09-30 16:46:37 +08:00
Ashish Sharma 9cb348789c fix(esp_tls): limit ret code from esp_mbedtls_handshake 2025-09-24 09:36:38 +08:00
Ashish Sharma 030ba7d8cf Merge branch 'contrib/github_pr_17470' into 'master'
fix(http_server): Corrected initialization value for lru_counter at h… (GitHub PR)

Closes IDFGH-16325

See merge request espressif/esp-idf!41639
2025-09-12 19:59:20 +08:00
Ashish Sharma 70d9308f16 change(cjson): update cjson version to 1.7.19 2025-09-10 18:29:18 +08:00
Ashish Sharma 08a4a2b506 docs(esp_tls): adds documentation regarding sni 2025-08-29 16:13:42 +08:00
Ashish Sharma 6acdf78438 Merge branch 'doc/add_tls_client_session_management_doc' into 'master'
docs: Adds doc for client session tickets

Closes IDF-13019

See merge request espressif/esp-idf!39521
2025-08-28 16:12:58 +08:00
Ashish Sharma 2b8703ef9f fix(mbedtls): enable ssl cookie support by default 2025-08-14 12:05:02 +08:00
Ashish Sharma 414397c048 fix(esp_http_client): fix possible double memory free 2025-08-05 09:48:22 +08:00
Ashish Sharma d9c431268a feat(mbedtls): restructure mbedtls configuration page 2025-07-30 17:47:54 +08:00
Ashish Sharma f7be43c83d feat(mbedtls): adds more configuration options 2025-07-30 17:47:54 +08:00
Ashish Sharma 6259505f18 feat(mbedtls): disable unnecessary buffer allocation in dynamic buffer session reset 2025-07-30 17:45:16 +08:00
Ashish Sharma 6b02906822 fix(security): improve memory allocation handling in multiple components 2025-07-28 10:05:50 +08:00
Ashish Sharma 801ea1fc4e fix(esp_http_client): fix memory leak in current_header_value buffer
Fixed memory leak in esp_http_client_cleanup() where current_header_value
buffer was not being freed when ESP_ERR_HTTP_FETCH_HEADER is returned
during header parsing failures.
2025-07-17 10:32:50 +08:00
Ashish Sharma 466a365a02 feat(mbedtls): adds support for RSA decryption with DS peripheral 2025-07-07 13:32:06 +08:00
Ashish Sharma 9c546002cb feat(mbedtls): update to version 3.6.4 2025-07-03 11:23:34 +08:00
Ashish Sharma 0fa17c40a6 docs(system/esp_https_ota): adds ECIES-256 to pre-enc ota design doc 2025-06-30 16:04:45 +08:00
Ashish Sharma cabb5009f2 feat(esp_crt): adds support for cross signed root certificates 2025-06-26 16:01:11 +08:00
Ashish Sharma 78af627857 fix(mbedtls): handle NULL ctx in ds rsa sign 2025-06-18 17:03:37 +08:00
Ashish Sharma 2ef09a7952 fix(esp_tls): fix failing build with TLS1.3 only and dynamic buffer 2025-06-02 09:14:03 +08:00
Ashish Sharma f3da3ef9d4 docs(protocols/esp-tls): adds doc for client session tickets 2025-05-29 17:57:40 +08:00
Ashish Sharma dbb846c348 fix(mbedtls): Fixes failing TLS 1.3 server handshake
Closes https://github.com/espressif/esp-idf/issues/15984
2025-05-26 17:16:21 +08:00
Ashish Sharma 87feca0350 change: adds CVE-2023-53154 to cJSON sbom exclude list 2025-05-26 10:27:54 +08:00
Ashish Sharma 1e0577ebd0 feat(cjson): update to latest upstream 2025-05-14 12:45:35 +08:00
Ashish Sharma 415e0f3c86 feat(mbedtls): add support for dynamic buffer for TLS1.3
Closes https://github.com/espressif/esp-idf/issues/15448
2025-04-24 12:05:36 +08:00
Ashish Sharma 0bad622a7a fix(esp_tls): use correct sockaddr struct size when calling connect()
Closes https://github.com/espressif/esp-idf/issues/15812
2025-04-23 13:23:44 +08:00
Ashish Sharma 0de1429834 fix(mbedtls): remove logical dead code from mbedtls 2025-04-17 13:43:48 +08:00
Ashish Sharma 11890df95a Merge branch 'bugfix/fix_cert_verification_ds_tls1.3' into 'master'
fix(component/mbedtls): Fix failing cert verification with TLS1.3 and DS peripheral

Closes IDFGH-14097

See merge request espressif/esp-idf!37634
2025-04-14 12:31:50 +08:00
Ashish Sharma b62e486247 fix(component/mbedtls): Fix failing cert verification with TLS1.3 and DS peripheral 2025-04-11 18:34:16 +08:00
Ashish Sharma b126ebb596 feat(mbedtls): new config to allow weak cert verification 2025-03-28 15:46:48 +08:00
Ashish Sharma 0291bee0ff feat(mbedtls): update to version 3.6.3 2025-03-28 13:03:12 +08:00
Ashish Sharma 88fa3e2c9e feat(security): fixes review comments 2025-03-17 18:23:14 +08:00
Ashish Sharma 4c23ba3c1f feat(security): update idf.py extensions to support security feature application 2025-03-17 18:23:14 +08:00
Ashish Sharma fbecd65e2a feat(security): update README.md to include support for esp32s3 2025-03-17 18:23:14 +08:00
Ashish Sharma 2fc151d2a9 fix(component/mbedtls): Adds github root cert to cmn_crt_authorities.csv 2025-03-17 14:32:06 +08:00