bunnie
cc02f3ab4f
Merge pull request #513 from betrusted-io/renode-gdbserver-3456
...
emulation: expose gdb serial to port 3456
2024-03-11 14:10:41 +08:00
Sean Cross
24fc352517
emulation: expose gdb serial to port 3456
...
Signed-off-by: Sean Cross <sean@xobs.io>
2024-03-11 14:01:37 +08:00
bunnie
f389b41ccf
Merge pull request #511 from betrusted-io/cramium
...
add quantum timer feature to cramium target
2024-03-07 01:35:44 +08:00
bunnie
c3e0bee9dc
use PIO as the system timer
...
other timers might work, but this is the one we can simulate
and pre-flight and know it will work.
2024-03-07 01:32:26 +08:00
bunnie
a96abc669f
add interrupt clear call
2024-03-07 01:32:15 +08:00
bunnie
8622fbdf7a
Merge pull request #508 from betrusted-io/ring-0.17
...
WIP: Ring 0.17
2024-03-02 01:36:08 +08:00
bunnie
b6e5e7f2c2
apply formatting patch
...
@nworbnhoj, i saw you had explicitly done a formatting pass.
However, I think maybe the +nightly flag was missing, it looks
like the formatting ignored our custom rule set, which requires
nightly?
2024-03-02 01:26:51 +08:00
bunnie
a3b869ef0f
reflect ring patch change in lockfile
2024-03-02 01:22:18 +08:00
bunnie
cfafa7f609
Update Cargo.toml to point to the git-based version of ring
...
this will allow the gh actions check to succeed, hopefully?
2024-03-02 01:21:56 +08:00
bunnie
9a43db9654
remove ring-test command that was not ported to 0.17
...
we'll port it forward if we end up needing to get that deep
into the crate.
2024-03-02 01:21:25 +08:00
nworbnhoj
ffac721c6b
rustfmt
...
deliberate check of automated rustfmt_check.yaml
confirmed - system works
2024-03-01 09:19:15 +10:00
nworbnhoj
01b13e0e32
replace vendored-in rustls::crypto: 💍 :SUPPORTED_SIG_ALGS with public access
2024-03-01 06:50:04 +10:00
nworbnhoj
7f19e660d9
add link to rustls issue
...
https://github.com/rustls/rustls/issues/1819
2024-02-29 09:53:02 +10:00
nworbnhoj
b217c1546e
tls tidy-up
2024-02-29 06:52:50 +10:00
nworbnhoj
6d24f1af41
refine tls probe() remove unnecessary Option
2024-02-29 06:18:43 +10:00
nworbnhoj
17c1fabc1e
refine shellchat net tls test for tls 1.3
...
https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof
2024-02-28 13:55:49 +10:00
nworbnhoj
332c2975ba
reinstate tls::ota add_der_header() and rm_der_header()
...
In keeping with webpki-roots - the TrustAnchors are managed without the Der Tag::Sequence header
This in turn requires that:
- the header is removed from x509 fields before saving in the pddb, and
- the der Tag::Sequence is added to ota.subject before it can be decoded () see ota.subject()
2024-02-28 12:40:05 +10:00
nworbnhoj
7760b02229
refine tls::ota.from(&TrustAnchor)
2024-02-28 06:59:38 +10:00
nworbnhoj
faece9783e
refine tls:rota.subject() -> Result<String, Error>
2024-02-28 05:24:57 +10:00
nworbnhoj
8ed22b8257
refine shellchat net tls mozilla
2024-02-27 08:48:10 +10:00
nworbnhoj
a3740df71a
refine shellchat net tls test
2024-02-27 07:23:09 +10:00
nworbnhoj
bb2b7f05e7
fix tls::ota.pddb_key()
2024-02-27 07:22:11 +10:00
nworbnhoj
2cc0052d7d
refine tls::ota.into() TrustAnchor
2024-02-27 07:21:36 +10:00
nworbnhoj
e608e7bb30
update shellchat net tls mozilla for rustls v22.2
2024-02-27 07:20:32 +10:00
nworbnhoj
1f6ec1fe69
refine danger:StifledCertificateVerifier
2024-02-25 15:50:47 +10:00
nworbnhoj
92d1b21caf
Add a single bogus TrustAnchor to danger::StifledCertificateVerification root_cert_store
...
rustls::ServerCertVerifierBuilder::build() returns a `CertVerifierBuilderError` if no trust anchors have been provided.
2024-02-25 15:49:36 +10:00
nworbnhoj
8d4494a005
implement tls::ota.subject()
2024-02-25 15:47:32 +10:00
nworbnhoj
04e2311920
simplify rustls::ClientConfig in tls.probe()
2024-02-25 07:42:45 +10:00
nworbnhoj
bda9bc94e2
tidy-up after update to rustls v22.2
2024-02-25 05:28:07 +10:00
nworbnhoj
2d744f1267
resolve tls ownership issues
2024-02-25 05:23:57 +10:00
nworbnhoj
39f3b782fa
update tls lib.rs for rustls v22.2
2024-02-25 05:20:48 +10:00
nworbnhoj
ad01b7de6c
rename RustlsOwnedTrustAnchor to OwnedTrustAnchor and update for rustls v22.2
2024-02-25 05:07:05 +10:00
nworbnhoj
fa24528226
update impl ServerCertVerifier for StifledCertificateVerification
2024-02-25 03:16:18 +10:00
nworbnhoj
8e7fd7d1a8
relocate ServerCertVerifier
2024-02-15 10:42:32 +10:00
nworbnhoj
84200b2cd2
replace Certificate with CertificateDer
2024-02-15 10:41:45 +10:00
nworbnhoj
60aa640f23
relocate ServerName
2024-02-15 10:33:55 +10:00
nworbnhoj
2b3d982d3f
relocate TrustAnchor
2024-02-15 10:30:08 +10:00
nworbnhoj
d0fba6fbd7
replace SystemTime with UnixTime
2024-02-15 10:28:17 +10:00
nworbnhoj
ba6d3fcdf6
rename WebPkiVerifier
2024-02-15 10:27:17 +10:00
nworbnhoj
f2204c5a25
relocate ServerCertVerified
2024-02-15 10:23:48 +10:00
bunnie
3b6cba6174
add a "0th order" test of ring/rustls latest API
2024-02-11 17:15:49 +08:00
bunnie
32a8a54ec4
upgrade sct so we're all using ring-0.17
2024-02-11 01:32:13 +08:00
bunnie
7a7403840f
Merge pull request #506 from betrusted-io/aes-update
...
add zeroize API to AES port
2024-02-10 15:10:36 +08:00
bunnie
a3f8ff6371
add zeroize API to AES port
...
this was missed on an earlier pass
2024-02-10 15:04:11 +08:00
bunnie
5fb368ae05
partial progress on porting to ring-0.17
2024-02-09 17:18:41 +08:00
bunnie
eb26e53e3b
Merge pull request #505 from betrusted-io/chore
...
chore: fix patch pin for curve25519-dalek
2024-02-09 14:44:40 +08:00
bunnie
e8f9152703
chore: fix patch pin for curve25519-dalek
...
the crate is patched so @kotval can do dev work on the crate,
but we should build from mainline for CI testing for now.
2024-02-09 14:42:17 +08:00
bunnie
cff2473771
Merge pull request #504 from kotval/main
...
Bump crypto crates to enable libsignal compatibility
2024-02-09 14:15:52 +08:00
David Kotval
88bac67ab5
fix: forgot to commit lock file
2024-02-08 14:25:05 -06:00
David Kotval
8eb0a26d51
fix: don't break tls
...
Due to our patch of ring@0.16.0, we must be careful
that none of the transitive deps of the tls packages
try to use a newer ring.
2024-02-08 12:47:45 -06:00
