8000 Pull requests · Mbed-TLS/mbedtls · GitHub

Repository navigation

All pull requests

Labels (42)Milestones (1)New pull request

[4.1] Guard some certificate extensions with a flag
#11046davidhorstmann-arm opened Nov 4, 2026Contributor7 tasks
TLS 1.3 server: skip early data when no ticket was accepted
#11040dlazobnaKocka opened Nov 1, 20265 of 7 tasks
TLS 1.3 client: recompute early secret if server selects another PSK
#11038dlazobnaKocka opened Nov 1, 20265 of 7 tasks
ssl_tls: Fix potential overflow / underflow issue
#11037alexivanov-google opened Oct 31, 2026
Reject repeated X.509 extensions that have no parser
#11036wihansaem1991 opened Oct 30, 20262 of 7 tasks
Support both old and new interruptible max-ops names
#11035v1rtu3x opened Oct 30, 2026Contributor6 of 7 tasks
x509write: Omit the extensions field when there is no extension
#11034aronrosenberg opened Oct 29, 20265 of 7 tasks
x509: reject GeneralName entries with the wrong primitive/constructed form
#11031hezhibo-research opened Oct 29, 20261 of 7 tasks
Parse and enforce the X.509 Name Constraints extension
#11027thejoeejoee opened Oct 26, 20264 of 8 tasks
test: cover Montgomery and Koblitz curves in ecp_curve_info
#11025jbauernberger opened Oct 26, 2026
ssl-opt.sh: Fix detection of a recent gnutls-serv
#11023jbauernberger opened Oct 25, 20265 tasks
1
tls13: validate the server key_share and supported_groups extensions
#11022jbauernberger opened Oct 25, 20262 of 5 tasks
ssl: Clear TLS 1.3 secrets from the exported client session
#11021jbauernberger opened Oct 25, 20263 of 7 tasks
1
tls13: protect post-Finished records and send the correct certificate alerts
#11020jbauernberger opened Oct 25, 20263 of 7 tasks
Reject malformed server_name extensions in ClientHello
#11018jbauernberger opened Oct 25, 20263 of 7 tasks
Ignore TLS 1.3 tickets in the TLS 1.2 session_ticket extension
#11017nvxbug opened Oct 23, 2026Contributor5 of 7 tasks
fix: add X509_USE guard on OID helper
#11016Thomasdjb opened Oct 23, 20262 of 7 tasks
Free unusable ticket session in TLS 1.3 pre_shared_key parsing
#11015nvxbug opened Oct 23, 2026Contributor5 of 7 tasks
Reject a non-CA issuer certificate in the cert_write program
#11014akasakariko opened Oct 22, 20265 of 7 tasks
lms: zeroize create_merkle_internal_value output on failure, alias-safely
#11013Johnsonajibi opened Oct 21, 20263 of 6 tasks
support OID subidentifiers wider than 32 bits when decoding (#11001)
#11009Ankit-cs opened Oct 19, 20265 of 7 tasks
1
Fix out-of-bounds write in mbedtls_ssl_cookie_write
#11007nvxbug opened Oct 16, 2026Contributor5 of 7 tasks
5
[3.6] Fix IP SAN handling in cert_write and cert_req
#11004JayOfTheKeyboard opened Oct 12, 20265 tasks done
1
[4.1] Fix IP SAN handling in cert_write and cert_req
#11003JayOfTheKeyboard opened Oct 12, 20265 tasks done
1
Fix IP SAN handling in cert_write and cert_req
#11002JayOfTheKeyboard opened Oct 12, 20267 tasks done
1

0