Glenn Strauss

Shared code to free x509 structs like mbedtls_x509_named_data

2

## Description Shared code to free x509 structs like mbedtls_x509_named_data First commit is shared code. Second commit is for discussion: is it excessive to zeroize read-only pointers to data? (Of...

mbedtls_x509_time performance and reduce memory use

5

## Description Features * Improve mbedtls_x509_time performance and reduce memory use. * Reduce syscalls to time() during certificate verification. Please consider reviewing commit-by-commit to step through the code transformations. ##...

lighttpd: update to lighttpd-1.4.66

1

#### Description lighttpd: update to lighttpd-1.4.66 * update to lighttpd-1.4.66 * remove patch hunks incorporated upstream ###### Type(s) - [x] bugfix - [ ] enhancement - [ ] security fix...

update git-http-backend doc for lighttpd

31

update git-http-backend doc for lighttpd: git-http-backend may be found at /usr/libexec/git-core/git-http-backend scope lighttpd config directives for git-http-backend under "^/git" Note: lighttpd 1.4.51 setenv.add-environment does not add vars with empty value....

h2spec generic/5 test 1 should not send an HTTP header with an empty value

2

h2spec generic/5 test 1 should not send an HTTP header with an empty value. Such a header might be rejected by a server since a field-name: (empty value) is an...

h2spec http2/8 tests should accept 400 Bad Request

7

(Thank you very much for h2spec!) `h2spec http2/8` tests should accept 400 Bad Request in addition to accepting RST_STREAM or GOAWAY. My server responds with 400 Bad Request, and `h2spec...

h2: 64k initial window size change from RFC 7540 default 65535 (64k-1) avoid some degenerative WINDOW_UPDATE behaviors in the wild nghttp2/nghttp2#1722 Signed-off-by: Glenn Strauss --- Note: this patch changes the...

mbedtls_ecp_point_read_binary from compressed fmt

4

## Description `mbedtls_ecp_point_read_binary()` from `MBEDTLS_ECP_PF_COMPRESSED` format ## Status **READY** ## Requires Backporting Yes: mbedtls-2.28 ## Migrations NO ## Additional comments While this is a feature, it adds major missing functionality...

ssl_tls12_populate_transform optim

7

## Description ssl_tls12_populate_transform optimizations - remove redundant calls to retrieve info (`mbedtls_ssl_cipher_to_psa()` and `mbedtls_cipher_info_from_type()` are also called from `mbedtls_ssl_get_mode_from_ciphersuite()`) - defer calls to where needed for specific ssl_modes ## Status...

x509_info.c containing sample/debug funcs

8

## Description x509_info.c containing sample/debug funcs Follows discussion in #5431. * collect sample/debug x509 functions into x509_info.c * replace mbedtls_snprintf with faster memcpy in most x509 info funcs - code...