summaryrefslogtreecommitdiffstats
path: root/thirdparty/mbedtls
Commit message (Collapse)AuthorAgeFilesLines
* Merge commit godotengine/godot@0f5f3bc9546b46b2029fc8896dc859697f1eab97Spartan3222024-11-115-8192/+0
|\
| * Delete unused files of thirparty libs (zlib, mbedtls)Yevhen Babiichuk (DustDFG)2024-11-075-8192/+0
| | | | | | | | Signed-off-by: Yevhen Babiichuk (DustDFG) <dfgdust@gmail.com>
* | Rebrand preambles to RedotDubhghlas McLaughlin2024-10-112-0/+4
|/ | | | | | | | | | | | | | | | | | | | | | Credits: Co-authored-by: Skogi <skogi.b@gmail.com> Co-authored-by: Spartan322 <Megacake1234@gmail.com> Co-authored-by: swashberry <swashdev@pm.me> Co-authored-by: Christoffer Sundbom <christoffer_karlsson@live.se> Co-authored-by: Dubhghlas McLaughlin <103212704+mcdubhghlas@users.noreply.github.com> Co-authored-by: McDubh <103212704+mcdubhghlas@users.noreply.github.com> Co-authored-by: Dubhghlas McLaughlin <103212704+mcdubhghlas@users.noreply.github.com> Co-authored-by: radenthefolf <radenthefolf@gmail.com> Co-authored-by: John Knight <80524176+Tekisasu-JohnK@users.noreply.github.com> Co-authored-by: Adam Vondersaar <adam.vondersaar@uphold.com> Co-authored-by: decryptedchaos <nixgod@gmail.com> Co-authored-by: zaftnotameni <122100803+zaftnotameni@users.noreply.github.com> Co-authored-by: Aaron Benjamin <lifeartstudios@gmail.com> Co-authored-by: wesam <108880473+wesamdev@users.noreply.github.com> Co-authored-by: Mister Puma <MisterPuma80@gmail.com> Co-authored-by: Aaron Benjamin <lifeartstudios@gmail.com> Co-authored-by: SingleError <isaaconeoneone@gmail.com> Co-authored-by: Bioblaze Payne <BioblazePayne@gmail.com>
* [mbedTLS] Enable TLS 1.3 supportFabio Alessandrelli2024-09-2617-12/+16890
| | | | | | | | | | Move library initialization to module registration functions. Only set library debug threshold when verbose output is enabled. TLSv1.3 functions seems to be a bit more verbose then expected, and generate a lot of noise. Yet, some level of debugging without recompiling the engine would be nice. We should discuss this upstream.
* [mbedTLS] Update to 3.6.1Fabio Alessandrelli2024-08-3167-967/+1785
|
* mbedtls: Disable AESCE on Linux ARM32, doesn't compile on our target archRémi Verschelde2024-04-301-1/+3
| | | | | | | | Our current Linux SDK for ARM32 from https://github.com/godotengine/buildroot targets a relatively conservative baseline of neon-fp-armv8, and (at least based on build issues I got) this doesn't seem to include hardware AES support. Fixes #91352.
* mbedTLS: Fix build without the module on MinGWFabio Alessandrelli2024-04-151-0/+7
| | | | | | | | | | | | | The `include/mbedtls/check_config.h` header file has a generic check which requires `MBEDTLS_PLATFORM_C` to be defined on Windows when building with MinGW and ancient MSVC versions. The few mbedTLS files we include in builds without the module don't really require anything from the mbedTLS platform file beside the `mbedtls_platform_zeroize` function which we already override with a custom one by defining `MBEDTLS_PLATFORM_ZEROIZE_ALT`. So we simply add the same check and force the define in such case.
* mbedTLS: Add patch to fix build errors with some MSVC versionsFabio Alessandrelli2024-04-113-0/+116
|
* mbedTLS: Update to new LTS v3.6.0Lyuma2024-04-10269-36765/+95391
| | | | | | | | | | | Keep module compatibility with mbedtls 2.x (old LTS branch). A patch has been added to allow compiling after removing all the `psa_*` files from the library folder (will look into upstreaming it). Note: mbedTLS 3.6 finally enabled TLSv1.3 by default, but it requires some module changes, and to enable PSA crypto (new "standard" API specification), so it might be best done in a separate commit/PR.
* mbedtls: Update to upstream version 2.28.8Rémi Verschelde2024-04-0421-116/+259
|
* mbedtls: Update to upstream version 2.28.7Rémi Verschelde2024-01-30175-2331/+377
|
* mbedtls: Backport Windows fix to use bcrypt for entropyRémi Verschelde2023-10-272-15/+73
| | | | | | | | We had a slightly older version of it for UWP, as the wincrypt API isn't allowed there. We removed this with UWP in #81416, but since this was enabled inconditionally before, this actually changed behavior for Windows compared to Godot 4.1 and earlier. This change is also needed to properly supported Windows Store.
* mbedTLS: Update to version 2.18.5Fabio Alessandrelli2023-10-2156-294/+810
|
* UWP: Remove platform port, needs to be redone from scratch for 4.xRémi Verschelde2023-09-072-75/+7
| | | | | | | | | | | The UWP platform port was never ported to the Godot 4.0+ API, and it's now accumulating bitrot as it doesn't compile, and thus we no longer propagate platform changes in it. So we finally remove to acknowledge this state. There's still some interest in reviving the UWP port eventually, especially as support for Direct3D 12 will soon be merged, but when that happens it will be easiest to redo it from scratch.
* mbedtls: Fix MSVC ARM build after 2.28.3 enabled AES-NI intrinsicsRémi Verschelde2023-09-072-2/+20
|
* mbedtls: Update to upstream version 2.28.4Rémi Verschelde2023-08-0736-275/+348
|
* mbedTLS: disable weak crypto and TLS versions.Fabio Alessandrelli2023-05-102-1/+94
| | | | | | | | | | This commit adds a new mbedTLS configuration header to customize the built-in library (and can be optionally replaced by a platform-specific one). Currently, it disables most weak cryptographic functions (with the notable exceptions of MD5 and SHA-1), along with removing support for TLS versions 1.0 and 1.1 (making TLSv1.2 the only supported one).
* mbedtls: Update to upstream version 2.28.3Rémi Verschelde2023-04-18173-35719/+35964
| | | | | Rediff patch from PR 1453, lstrlenW is no longer used upstream so that part of the patch was dropped.
* mbedtls: Update to upstream version 2.28.2Rémi Verschelde2022-12-2182-720/+668
|
* [Windows] Improve build environment detection, add support for Windows on ARM.bruvzg2022-08-271-1/+3
|
* Bump mbedtls to 2.18.1 (headers).Fabio Alessandrelli2022-07-1834-131/+341
|
* Bump mbedtls to version 2.18.1, update LICENSE.Fabio Alessandrelli2022-07-1831-310/+632
| | | | | | Keep applying windows entropy patch. Update thirdparty/README with correct version information.
* [Crypto] Implement CryptoCore::RandomGenerator.Fabio Alessandrelli2022-02-141-0/+5
| | | | | | | | | | As a cryptographically secure random generator. Internally it uses mbedTLS CTR-DRBG implementation which gets re-seeded with entropy from OS::get_entropy when needed. CryptoCore now additionally depends on `ctr_drbg.c` and `entropy.c` thirdparty mbedtls files.
* Bump mbedTLS version to 2.28.0 (new LTS).Fabio Alessandrelli2021-12-21174-17341/+27113
| | | | | | | Keep applying the windows entropy patch (UWP support). Remove no longer needed padlock patch. Update thirdparty README to reflect changes, and new source inclusion criteria.
* Bump mbedtls to 2.16.12Fabio Alessandrelli2021-12-2064-875/+1079
| | | | | | | Remove upstreamed patches. Re-apply padlock and uwp patches. NOTE: We could replace our padloack patch with mbedtls 3452.
* mbedtls: Backport PR 4819 to fix certs parsing speedRémi Verschelde2021-10-252-159/+437
| | | | | Fixes engine startup time regression described here: https://github.com/godotengine/godot/issues/43351#issuecomment-847466783
* mbedtls: Backport "Fix x86_64 assembly for bignum multiplication"Rémi Verschelde2021-10-142-3/+39
| | | | | | | Backports PR https://github.com/ARMmbed/mbedtls/pull/4948 to fix a regression with our macOS builds using Clang 12. Fixes #53297.
* mbedtls: Update to upstream version 2.16.11Rémi Verschelde2021-07-2025-602/+1034
|
* Bump mbedtls to version 2.16.10.Fabio Alessandrelli2021-03-1220-62/+371
|
* mbedtls: Update to upstream version 2.16.9Rémi Verschelde2020-12-1834-645/+748
|
* Update mbedTLS to version 2.16.8 (+ patch).Fabio Alessandrelli2020-09-07157-768/+834
|
* Update to mbedtls 2.16.7Fabio Alessandrelli2020-07-02158-616/+5701
|
* mbedtls: Update to upstream version 2.16.6Rémi Verschelde2020-04-216-17/+92
| | | | Fixes https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-04
* mbedtls: Re-add patch to disable VIA padlockRémi Verschelde2020-03-102-1/+16
| | | | | | | | | The comment mentioned a conflict with libwebsockets, but we actually still get this conflict even now that we don't use libwebsockets. Not sure what component is clashing but we should basically just keep this patch. Follow-up to #36823.
* mbedtls: Re-apply upstream PR 1453 after #36823Rémi Verschelde2020-03-092-9/+52
| | | | | | | For some weird reason 'git apply' does not error out when it does nothing, so I missed that I did not apply the patch properly in #36823... This broke the UWP 32-bit x86 build.
* mbedtls: Update to upstream version 2.16.5Rémi Verschelde2020-03-0511-120/+124
| | | | | | | Fixes https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-02 Drop patch to disable VIA padlock since we no longer use libwebsockets, so there's no conflict anymore.
* mbedtls: Update to upstream version 2.16.4Rémi Verschelde2020-01-2613-246/+632
| | | | | | | Fixes CVE-2019-18222. `include/mbedtls/version.h` was modified to include the forgotten version bump to 2.16.4, fixed upstream by ARMmbed/mbedtls#2992.
* mbedtls: Update to upstream version 2.16.3Rémi Verschelde2019-11-1235-655/+1002
|
* mbedtls: Update to upstream version 2.16.2Rémi Verschelde2019-07-1185-888/+3006
|
* CryptoCore class to access to base crypto utils.Fabio Alessandrelli2019-07-022-0/+31
| | | | | | | | | | | | | | | | | | Godot core needs MD5/SHA256/AES/Base64 which used to be provided by separate libraries. Since we bundle mbedtls in most cases, and we can easily only include the needed sources if we so desire, let's use it. To simplify library changes in the future, and better isolate header dependencies all functions have been wrapped around inside a class in `core/math/crypto_base.h`. If the mbedtls module is disabled, we only bundle the needed source files independently of the `builtin_mbedtls` option. If the module is enabled, the `builtin_mbedtls` option works as usual. Also remove some unused headers from StreamPeerMbedTLS which were causing build issues.
* Disable support for VIA PadlockHein-Pieter van Braam2019-02-242-1/+16
| | | | | | This code defines a symbol 'unsupported' which is also in a newer version of libwebsockets. To fix 32bit linux builds just disable padlock support. Processors that support this are rare and old.
* Update mbedtls PR 1453 diff (UWP crypto fixes)Fabio Alessandrelli2019-02-204-295/+63
| | | | | Also remove .orig file which should not have been committed in the first place
* Bump mbedTLS to version 2.16 (LTS version)Fabio Alessandrelli2019-02-20111-3701/+11217
|
* Disable support for VIA PadlockHein-Pieter van Braam2019-01-011-14/+0
| | | | | | This code defines a symbol 'unsupported' which is also in a newer version of libwebsockets. To fix 32bit linux builds just disable padlock support. Processors that support this are rare and old.
* mbedtls: Update to upstream version 2.12.0Rémi Verschelde2018-07-2861-588/+7372
| | | | | _WIN32_WINNT redefinition fix is no longer needed as it was merged upstream. PR 1453 is still not merged, diff updated to current state.
* Bump mbedTLS to version 2.10.0Fabio Alessandrelli2018-06-07104-2782/+5939
|
* Thirdparty: Fill copyright for lws, miniupnpc, clipperRémi Verschelde2018-06-072-0/+204
| | | | | | Rename `lws` to `libwebsockets` which is its library name. Add missing license file for mbedtls.
* MbedTLS PR 1453 (fix UWP build)Fabio Alessandrelli2018-04-033-9/+172
| | | | The patch seems to be ready for merge upstream
* Small patch to change mbedtls _WIN32_WINNTFabio Alessandrelli2018-04-031-2/+5
|
* Update mbedTLS to version 2.8.0Fabio Alessandrelli2018-04-0343-387/+849
|