netxduo.git/nx_secure/src/nx_secure_tls_send_clienthello_extensions.c, branch dev

Restored TLS 1.2 RSA signature fallback (#419)

2026-08-14T14:32:37Z

Advertise RSA-PSS for TLS 1.3 and the corresponding RSA PKCS#1 schemes for TLS 1.2 fallback. Precompute the exact extension length and cover the wire format and buffer boundaries with a focused regression test. Assisted-by: Codex (gpt-5.6-sol)

Added RSA-PSS signature verification support (TLS 1.3 with RSA cert) (#377)

2026-05-21T19:23:32Z

* Add RSA-PSS * Fix SHA-384/512 transcript hash truncation and add MGF1 bounds check Address review feedback on RSA-PSS PR: - Resize handshake_hash buffer from 130 to 162 bytes (64+34+64) in both nx_secure_tls_process_certificate_verify.c and nx_secure_tls_send_certificate_verify.c to fit SHA-512 transcript. - Replace hardcoded 32-byte transcript hash copy with dynamic length derived from hash_method->nx_crypto_ICV_size_in_bits. - Add bounds check in _nx_crypto_rsa_pss_mgf1 to reject hash_method whose output exceeds the local hash_buf size. * Fix RSA-PSS verify in TLS 1.2 ServerKeyExchange Extend RSA-PSS support to TLS 1.2 ServerKeyExchange signature verify: - nx_secure_process_server_key_exchange.c: detect RSA-PSS wire codes (0x0804/0805/0806) and dispatch to _nx_crypto_rsa_pss_verify after RSA decrypt; PKCS#1 v1.5 path kept for non-PSS signatures. - nx_secure_tls_process_clienthello_extensions.c: map RSA-PSS wire codes to the existing RSA SHA-256/384/512 internal IDs so the certificate cipher table lookup finds the right hash method.

Updated copyright headers and version strings. Removed version history

2026-03-06T23:14:18Z

Updated version numbers to 6.4.3

2025-03-18T14:24:08Z

Update copyright.

2024-01-29T03:03:49Z

Release 6.2.1 on 08 Mar 2023. Expand to see details.

2023-03-08T08:27:44Z

29eee6fe8 Update function header and version to 6.2.1 e22a02169 Fix compile errors in TLS 3e0a14c1c Fix network driver for regression test. 442f3adfa Fix compiler warnings in NetXDuo

Update on 27 Feb 2023. Expand to see details.

2023-02-27T01:06:41Z

1c87864dc [SNTP & TELNET] Clear the client ID in delete function for SNTP and TELNET. 1a957bf48 Reported ADU agent state as IDLE to server after receiving cancel command. d648902b2 [BSD] Corrected the result of FIONREAD when using TCP socket. 494f0016f create netxduo cmsis-pack c5519bdf8 Add ADU version string f52279c97 Include TLS port header in nx_secure_x509.h cf753549b Fix packet leak in TLS 1.3 be8943659 Update PnP interface to use ADU GA model 17e601544 Fix the logic to cleanup key material 11e65bacd Initialize metadata for certificate using packet buffer 7ff1841ac Fix conditional build check for TLS 1.3

Update on 18 Jan 2023. Expand to see details.

2023-01-18T08:40:56Z

5849a60fa Fix compile errors when NX_SECURE_DISABLE_X509 is defined. 775a624ac Remove internal deprecated files. fa4680237 Clear MQTT password while X509 authentication is selected 5cb6488b4 Add a notice for not released file. 7600d5747 Upgrade to the latest Container Images. 3fdcc4420 [ADU] Add secondary root key and remove testing key.

Release 6.2.0

2022-10-26T23:42:00Z

Release 6.1.11

2022-04-20T05:07:25Z