Code

Add Dtls Srtp support (RFC5764)#3235

Code

Merged

gilles-peskine-arm merged 63 commits intoMbed-TLS:developmentMbed-TLS/mbedtls:developmentfrom jeannotlapin:pr1813jeannotlapin/mbedtls:pr1813Copy head branch name to clipboardOct 29, 2020

+1,759-14

Commits

Commits on Oct 29, 2020

• Add RFC5764 - SRTP key generation during DTLS handshake

  Show description for b62bb51
  jeannotlapin

  committed
  b62bb51

  Copy full SHA for b62bb51

• Move available dtls srtp profile list to ssl_config

  Show description for bbc057a
  jeannotlapin

  committed
  bbc057a

  Copy full SHA for bbc057a

• Improve DTLS SRTP API with a dedicated function to get generated keys

  Show description for 2d9470b
  jeannotlapin

  committed
  2d9470b

  Copy full SHA for 2d9470b

• Fix typos in documentation

  Show description for c28f1f6
  jeannotlapin

  committed
  c28f1f6

  Copy full SHA for c28f1f6

• Comply with mbedtls naming rules

  Show description for 701984d
  jeannotlapin

  committed
  701984d

  Copy full SHA for 701984d

• Remove compilation warning

  Show description for 3479078
  jeannotlapin

  committed
  3479078

  Copy full SHA for 3479078

• Add mki value and some review comments

  Show description for 3adb992
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  3adb992

  Copy full SHA for 3adb992

• support mki value

  Show description for 591f162
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  591f162

  Copy full SHA for 591f162

• Make keyu material length in \ out

  Show description for a37326a
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  a37326a

  Copy full SHA for a37326a

• Fix idetifier check script error

  Show description for 349877e
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  349877e

  Copy full SHA for 349877e

• Fix doxygen script errors

  Show description for 9e90964
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  9e90964

  Copy full SHA for 9e90964

• Enforce SRTP mandatory HS messages

  Show description for 57cc70e
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  57cc70e

  Copy full SHA for 57cc70e

• Add ChangeLog

  Show description for 4cbe693
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  4cbe693

  Copy full SHA for 4cbe693

• Fix failure in ssl-opts.sh

  Show description for 9d36d31
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  9d36d31

  Copy full SHA for 9d36d31

• Add dtls-srtp to client and server examples

  Show description for 6ea6451
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  6ea6451

  Copy full SHA for 6ea6451

• Fix mki issues

  Show description for 12c6ead
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  12c6ead

  Copy full SHA for 12c6ead

• Set authmode to optional, if not set

  Show description for 1c399bd
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  1c399bd

  Copy full SHA for 1c399bd

• Add tests and code to support

  Show description for b465539
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  b465539

  Copy full SHA for b465539

• Fix compilation errors

  Show description for 311b95a
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  311b95a

  Copy full SHA for 311b95a

• Add interop tests

  Show description for 3c6a44b
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  3c6a44b

  Copy full SHA for 3c6a44b

• Force IPv6 for DTLS interop tests with gnutls-cli

  Show description for 2b3dfe4
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  2b3dfe4

  Copy full SHA for 2b3dfe4

• Style fixes

  Show description for ef72faf
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  ef72faf

  Copy full SHA for ef72faf

• Style fixes

  Show description for a978804
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  a978804

  Copy full SHA for a978804

• Improve readability

  Show description for 089c9fe
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  089c9fe

  Copy full SHA for 089c9fe

• Add comment describing the feature

  Show description for f0f7c19
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  f0f7c19

  Copy full SHA for f0f7c19

• Change byte copy to memcpy

  Show description for 75870ec
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  75870ec

  Copy full SHA for 75870ec

• Add variable validation

  Show description for 313d7b5
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  313d7b5

  Copy full SHA for 313d7b5

• Disable SRTP by default

  Show description for 9cfb5eb
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  9cfb5eb

  Copy full SHA for 9cfb5eb

• Force IPv4 in gnutls_cli srtp tests

  Show description for 5d991c9
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  5d991c9

  Copy full SHA for 5d991c9

• Change key derivation for srtp

  Show description for 65b56ef
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  65b56ef

  Copy full SHA for 65b56ef

• Add the SRTP configuration to query_config

  Show description for 8f284c1
  

  Ron Eldor

  authored and

  jeannotlapin

  committed
  8f284c1

  Copy full SHA for 8f284c1

• Stick to ChangeLog rules

  Show description for 44c0a0a
  jeannotlapin

  committed
  44c0a0a

  Copy full SHA for 44c0a0a

• fix style

  Show description for b64eab7
  jeannotlapin

  committed
  b64eab7

  Copy full SHA for b64eab7

• Fix build warning

  Show description for 1d957e6
  jeannotlapin

  committed
  1d957e6

  Copy full SHA for 1d957e6

• Fix ssl_client2 after rebase

  Show description for 48f62e9
  jeannotlapin

  committed
  48f62e9

  Copy full SHA for 48f62e9

• Minor style modifications

  Show description for 8526957
  jeannotlapin

  committed
  8526957

  Copy full SHA for 8526957

• The client shall not enforce the use of client certificate with use_srtp extension

  Show description for a89ca86
  jeannotlapin

  committed
  a89ca86

  Copy full SHA for a89ca86

• Improve client Hello use_srtp parsing

  Show description for 042d456
  jeannotlapin

  committed
  042d456

  Copy full SHA for 042d456

• Check the server hello output buffer size when writing the use_srtp ext

  Show description for 8f70fba
  jeannotlapin

  committed
  8f70fba

  Copy full SHA for 8f70fba

• SRTP-DTLS protection profile configuration list not copied into ssl_config

  Show description for 9bc97ca
  jeannotlapin

  committed
  9bc97ca

  Copy full SHA for 9bc97ca

• Style + fix bound check in write_use_srt_ext

  Show description for d576fdb
  jeannotlapin

  committed
  d576fdb

  Copy full SHA for d576fdb

• use_srtp extension shall not interfere in the handshake settings

  Show description for 4f09926
  jeannotlapin

  committed
  4f09926

  Copy full SHA for 4f09926

• SRTP profiles definition use macros only

  Show description for 43f9490
  jeannotlapin

  committed
  43f9490

  Copy full SHA for 43f9490

• set protection profile API gets a MBEDTLS_TLS_SRTP_UNSET terminated list

  Show description for 253d026
  jeannotlapin

  committed
  253d026

  Copy full SHA for 253d026

• mki length feats in a uint16_t

  Show description for f6417ec
  jeannotlapin

  committed
  f6417ec

  Copy full SHA for f6417ec

• mbedtls_ssl_get_srtp_profile_as_string declared and defined in ssl.h

  Show description for a455cd9
  jeannotlapin

  committed
  a455cd9

  Copy full SHA for a455cd9

• style

  Show description for e79c1e8
  jeannotlapin

  committed
  e79c1e8

  Copy full SHA for e79c1e8

• Improve code readability

  Show description for aae4d22
  jeannotlapin

  committed
  aae4d22

  Copy full SHA for aae4d22

• Add bound check in the client ssl_write_use_srtp_ext

  Show description for 77696ee
  jeannotlapin

  committed
  77696ee

  Copy full SHA for 77696ee

• Update include/mbedtls/config.h

  Show description for 842d671
  

  jeannotlapin

  and

  Hanno Becker

  committed
  842d671

  Copy full SHA for 842d671

• style + missing cast

  Show description for d387aa0
  jeannotlapin

  committed
  d387aa0

  Copy full SHA for d387aa0

• interop test: openssl generate the DTLS-SRTP keys

  Show description for 39cfd3b
  jeannotlapin

  committed
  39cfd3b

  Copy full SHA for 39cfd3b

• Test check the key material exported match

  Show description for 9bc50b0
  jeannotlapin

  committed
  9bc50b0

  Copy full SHA for 9bc50b0

• style

  Show description for 1040315
  jeannotlapin

  committed
  1040315

  Copy full SHA for 1040315

• Minor fix and improvements

  Show description for 76fdf1d
  jeannotlapin

  committed
  76fdf1d

  Copy full SHA for 76fdf1d

• More minor fix

  Show description for adbd944
  jeannotlapin

  committed
  adbd944

  Copy full SHA for adbd944

• API modified so server side can get mki value

  Show description for 20c7db3
  jeannotlapin

  committed
  20c7db3

  Copy full SHA for 20c7db3

• Fix previous commit

  Show description for 275874b
  jeannotlapin

  committed
  275874b

  Copy full SHA for 275874b

• Make API safer

  Show description for 0dbcd1d
  jeannotlapin

  committed
  0dbcd1d

  Copy full SHA for 0dbcd1d

• Do not return a structure, use a return parameter

  Show description for 2258a4f
  jeannotlapin

  committed
  2258a4f

  Copy full SHA for 2258a4f

• Style and typos

  Show description for 5ef72d2
  jeannotlapin

  committed
  5ef72d2

  Copy full SHA for 5ef72d2

• Check transport in the extension parser/writer

  Show description for c3ccd98
  jeannotlapin

  committed
  c3ccd98

  Copy full SHA for c3ccd98

• remove useless parentheses

  Show description for 5fbe9e7
  jeannotlapin

  committed
  5fbe9e7

  Copy full SHA for 5fbe9e7