summaryrefslogtreecommitdiffstats
path: root/modules/mbedtls
Commit message (Collapse)AuthorAgeFilesLines
* Merge commit godotengine/godot@cb411fa960f0b7fdbd97dcdb4c90f9346360ee0eSpartan3222024-11-121-27/+35
|\
| * [mbedTLS] Keep reading/writing partial until "would block"Fabio Alessandrelli2024-11-091-27/+35
| | | | | | | | | | | | | | | | | | | | Them mbedTLS read and write functions will never read or write more than the negotiated fragment length at every iteration (which usually depends on MBEDTLS_SSL_IN_CONTENT_LEN and MBEDTLS_SSL_OUT_CONTENT_LEN). For this reason, when reading or writing partial data, we must always keep retrying until we receive a "would block" (no bytes read or wrote), or we have fulfilled the read or write.
* | Merge commit godotengine/godot@8004c7524fb9f43425c4d6f614410a76678e0f7cSpartan3222024-10-301-1/+1
|\|
| * Set clang-format `RemoveSemicolon` rule to `true`Adam Scott2024-10-251-1/+1
| | | | | | | | - Set clang-format `Standard` rule to `c++20`
* | Fix copyright headers referring to GodotSpartan3222024-10-2714-28/+28
| |
* | Rebrand preambles to RedotDubhghlas McLaughlin2024-10-1114-0/+28
|/ | | | | | | | | | | | | | | | | | | | | | Credits: Co-authored-by: Skogi <skogi.b@gmail.com> Co-authored-by: Spartan322 <Megacake1234@gmail.com> Co-authored-by: swashberry <swashdev@pm.me> Co-authored-by: Christoffer Sundbom <christoffer_karlsson@live.se> Co-authored-by: Dubhghlas McLaughlin <103212704+mcdubhghlas@users.noreply.github.com> Co-authored-by: McDubh <103212704+mcdubhghlas@users.noreply.github.com> Co-authored-by: Dubhghlas McLaughlin <103212704+mcdubhghlas@users.noreply.github.com> Co-authored-by: radenthefolf <radenthefolf@gmail.com> Co-authored-by: John Knight <80524176+Tekisasu-JohnK@users.noreply.github.com> Co-authored-by: Adam Vondersaar <adam.vondersaar@uphold.com> Co-authored-by: decryptedchaos <nixgod@gmail.com> Co-authored-by: zaftnotameni <122100803+zaftnotameni@users.noreply.github.com> Co-authored-by: Aaron Benjamin <lifeartstudios@gmail.com> Co-authored-by: wesam <108880473+wesamdev@users.noreply.github.com> Co-authored-by: Mister Puma <MisterPuma80@gmail.com> Co-authored-by: Aaron Benjamin <lifeartstudios@gmail.com> Co-authored-by: SingleError <isaaconeoneone@gmail.com> Co-authored-by: Bioblaze Payne <BioblazePayne@gmail.com>
* [mbedTLS] Enable TLS 1.3 supportFabio Alessandrelli2024-09-263-4/+43
| | | | | | | | | | Move library initialization to module registration functions. Only set library debug threshold when verbose output is enabled. TLSv1.3 functions seems to be a bit more verbose then expected, and generate a lot of noise. Yet, some level of debugging without recompiling the engine would be nice. We should discuss this upstream.
* SCons: Add unobtrusive type hints in SCons filesThaddeus Crews2024-09-251-0/+1
|
* [mbedTLS] Fix incorrect cert pinning with client_unsafeFabio Alessandrelli2024-08-271-1/+1
|
* Allow ClassDB to create a Object without postinitialization for GDExtension.Daylily-Zeleen2024-08-208-21/+21
|
* [Crypto] Expose TLSOptions gettersFabio Alessandrelli2024-06-141-5/+7
|
* mbedTLS: Update to new LTS v3.6.0Lyuma2024-04-104-21/+60
| | | | | | | | | | | Keep module compatibility with mbedtls 2.x (old LTS branch). A patch has been added to allow compiling after removing all the `psa_*` files from the library folder (will look into upstreaming it). Note: mbedTLS 3.6 finally enabled TLSv1.3 by default, but it requires some module changes, and to enable PSA crypto (new "standard" API specification), so it might be best done in a separate commit/PR.
* SCons: Fix Ninja compilation with MSVCThaddeus Crews2024-04-041-3/+3
|
* Add unit tests for CryptoKeyEdward Moulsdale2024-03-013-0/+73
|
* Add const lvalue ref to core/* container parametersMuller-Castro2024-02-142-26/+26
|
* [Modules] Replace `ERR_FAIL_COND` with `ERR_FAIL_NULL` where applicableA Thousand Ships2023-09-263-7/+7
|
* [Crypto] Fix generate_random_bytes for large chunksFabio Alessandrelli2023-09-251-1/+11
| | | | | Properly handle mbedtls errors, ensure we don't ask more bytes than allowed for each iteration.
* mbedtls: Improve X509 certificate load error handlingRémi Verschelde2023-06-261-8/+17
| | | | | | | | | | | | | Positive numbers shouldn't be treated as a hard failure: > For CRTs in PEM encoding, the function parses permissively: > if at least one certificate can be parsed, the function > returns the number of certificates for which parsing failed > (hence \c 0 if all certificates were parsed successfully). > If no certificate could be parsed, the function returns > the first (negative) error encountered during parsing. Fixes #77994.
* Style: Harmonize header includes in modulesRémi Verschelde2023-06-157-10/+14
| | | | | | | | | | | | | | | | | | | | This applies our existing style guide, and adds a new rule to that style guide for modular components such as platform ports and modules: Includes from the platform port or module ("local" includes) should be listed first in their own block using relative paths, before Godot's "core" includes which use "absolute" (project folder relative) paths, and finally thirdparty includes. Includes in `#ifdef`s come after their relevant section, i.e. the overall structure is: - Local includes * Conditional local includes - Core includes * Conditional core includes - Thirdparty includes * Conditional thirdparty includes
* [TLS] Add support for platform-specific CA bundles.Fabio Alessandrelli2023-05-121-11/+18
| | | | | | | | | | | | | | | | | Adds a new OS::get_system_ca_certs method which can be implemented by platforms to retrieve the list of trusted CA certificates using OS specific APIs. The function should return the certificates in PEM format, and is currently implemented for Windows/macOS/LinuxBSD(*)/Android. mbedTLS will fall back to bundled certificates when the OS returns no certificates. (*) LinuxBSD does not have a standardized certificates store location. The current implementation will test for common locations and may return an empty string on some distributions (falling back to the bundled certificates).
* mbedTLS: disable weak crypto and TLS versions.Fabio Alessandrelli2023-05-102-1/+4
| | | | | | | | | | This commit adds a new mbedTLS configuration header to customize the built-in library (and can be optionally replaced by a platform-specific one). Currently, it disables most weak cryptographic functions (with the notable exceptions of MD5 and SHA-1), along with removing support for TLS versions 1.0 and 1.1 (making TLSv1.2 the only supported one).
* Exposes String functions for X509CertificatesScorpionInc2023-05-092-0/+32
| | | | Exposes String functions for X509Certificates via two function calls: save_to_string() and load_from_string(str).
* [Net] Remove StreamPeerTLS.blocking_handshake option.Fabio Alessandrelli2023-01-281-18/+11
| | | | | | | | | Which was unused internally, and can be replaced by: ``` while tls.get_status() == tls.STATUS_HANDSHAKING: tls.poll() ```
* [NET] Refactor TLS configuration.Fabio Alessandrelli2023-01-288-56/+67
| | | | | | | | | | | | | Use a TLSOptions configuration object which is created via static functions. - "TLSOptions.client": uses the standard CA and common name verification. - "TLSOptions.client_unsafe": uses optional CA verification (i.e. if specified) - "TLSOptions.server": is the standard server configuration (chain + key) This will allow us to expand the TLS configuration options to include e.g. mutual authentication without bloating the classes that uses StreamPeerTLS and PacketPeerDTLS as underlying peers.
* One Copyright Update to rule them allRémi Verschelde2023-01-0514-406/+406
| | | | | | | | | | | | | | | | | | | | As many open source projects have started doing it, we're removing the current year from the copyright notice, so that we don't need to bump it every year. It seems like only the first year of publication is technically relevant for copyright notices, and even that seems to be something that many companies stopped listing altogether (in a version controlled codebase, the commits are a much better source of date of publication than a hardcoded copyright statement). We also now list Godot Engine contributors first as we're collectively the current maintainers of the project, and we clarify that the "exclusive" copyright of the co-founders covers the timespan before opensourcing (their further contributions are included as part of Godot Engine contributors). Also fixed "cf." Frenchism - it's meant as "refer to / see".
* Code simplifications found by cppcheckMarkus Sauermann2022-11-211-4/+3
| | | | | | | They are based on: - Boolean arithmetic simplifications - setting variables that are not accessed - constant variables
* Style: Misc docs and comment style and language fixesRémi Verschelde2022-11-021-1/+1
| | | | | | | | | | - Removed empty paragraphs in XML. - Consistently use bold style for "Example:", on a new line. - Fix usage of `[code]` when hyperlinks could be used (`[member]`, `[constant]`). - Fix invalid usage of backticks for inline code in BBCode. - Fix some American/British English spelling inconsistencies. - Other minor fixes spotted along the way, including typo fixes with codespell. - Don't specify `@GlobalScope` for `enum` and `constant`.
* [Net] Rename "ssl" references to "tls" in methods and members.Fabio Alessandrelli2022-09-089-78/+78
|
* [Net] Rename StreamPeerSSL to StreamPeerTLS.Fabio Alessandrelli2022-09-073-5/+5
| | | | SSL has been deprectated almost 10 years ago.
* Code quality: Fix header guards consistencyRémi Verschelde2022-07-253-9/+9
| | | | | Adds `header_guards.sh` bash script, used in CI to validate future changes. Can be run locally to fix invalid header guards.
* Add StreamPeerSSL.get_stream() accessor.Lyuma2022-05-252-0/+5
|
* Refactor module initializationreduz2022-05-042-4/+14
| | | | | | | * Changed to use the same stages as extensions. * Makes the initialization more coherent, helping solve problems due to lack of stages. * Makes it easier to port between module and extension. * removed the DRIVER initialization level (no longer needed).
* Merge pull request #59582 from Faless/net/4.x_tcp_explicit_pollRémi Verschelde2022-04-271-1/+1
|\
| * [Net] Drop is_connected_to_host for TCP and UDP.Fabio Alessandrelli2022-03-271-1/+1
| | | | | | | | | | | | | | | | | | | | The UDP method is now called `is_socket_connected` to limit confusion with the actual host connection status which doesn't make sense in UDP. The TCP method is completly dropped, use get_status instead. The only one left is the WebSocketPeer one, which should be fine as is for now.
* | Make FileAccess and DirAccess classes reference counted.bruvzg2022-04-111-14/+8
| |
* | Fix some issues found by cppcheck.bruvzg2022-04-062-8/+8
|/
* Merge pull request #56130 from Faless/mbedtls/2.28.0Rémi Verschelde2022-01-111-1/+5
|\
| * Bump mbedTLS version to 2.28.0 (new LTS).Fabio Alessandrelli2021-12-211-1/+5
| | | | | | | | | | | | | | Keep applying the windows entropy patch (UWP support). Remove no longer needed padlock patch. Update thirdparty README to reflect changes, and new source inclusion criteria.
* | Update copyright statements to 2022Rémi Verschelde2022-01-0314-28/+28
|/ | | | Happy new year to the wonderful Godot community!
* Replace String comparisons with "", String() to is_empty()Nathan Franke2021-12-091-1/+1
| | | | | | Also: - Adds two stress tests to test_string.h - Changes to .empty() on std::strings
* Remove unimplemented methodsMarcel Admiraal2021-10-213-6/+0
|
* Misc cleanup of header includesRémi Verschelde2021-07-151-1/+1
| | | | | Was looking for misuse of module headers without checking that the module is actually enabled and got carried away...
* [Crypto] Delete mbedtls ctx in deconstructor.Fabio Alessandrelli2021-07-032-0/+8
| | | | | Would cause memory leak when the context was `start`ed but not `finish`ed.
* Rename `instance()`->`instantiate()` when it's a verbLightning_A2021-06-194-6/+6
|
* Rename Reference to RefCountedPedro J. Estébanez2021-06-111-3/+3
|
* Core: Move DirAccess and FileAccess to `core/io`Rémi Verschelde2021-06-114-4/+4
| | | | | File handling APIs are typically considered part of I/O, and we did have most `FileAccess` implementations in `core/io` already.
* Rename File::get_len() get_length()Marcel Admiraal2021-05-251-2/+2
|
* Make all file access 64-bit (uint64_t)Pedro J. Estébanez2021-05-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This changes the types of a big number of variables. General rules: - Using `uint64_t` in general. We also considered `int64_t` but eventually settled on keeping it unsigned, which is also closer to what one would expect with `size_t`/`off_t`. - We only keep `int64_t` for `seek_end` (takes a negative offset from the end) and for the `Variant` bindings, since `Variant::INT` is `int64_t`. This means we only need to guard against passing negative values in `core_bind.cpp`. - Using `uint32_t` integers for concepts not needing such a huge range, like pages, blocks, etc. In addition: - Improve usage of integer types in some related places; namely, `DirAccess`, core binds. Note: - On Windows, `_ftelli64` reports invalid values when using 32-bit MinGW with version < 8.0. This was an upstream bug fixed in 8.0. It breaks support for big files on 32-bit Windows builds made with that toolchain. We might add a workaround. Fixes #44363. Fixes godotengine/godot-proposals#400. Co-authored-by: Rémi Verschelde <rverschelde@gmail.com>
* Rename `IP_Unix`, `IP_Address` and `TCP_Server` to remove underscoresHugo Locurcio2021-05-061-1/+1
|
* Replace remaining uses of `NULL` with `nullptr`Rémi Verschelde2021-04-291-1/+1
| | | | Follow-up to #38736 (these uses were likely added after this PR was merged).