summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-09-29Fixed _nx_websocket_client_connect_internal declaration.Frédéric Desbiens
2025-09-29Fixed typo in updated _nx_websocket_client_connect declaration.Frédéric Desbiens
2025-09-29Fixed _nxe_websocket_client_connect declaration.Frédéric Desbiens
2025-09-29Fixed _nxe_websocket_client_connect declaration.Frédéric Desbiens
2025-09-29Updated version number and added build number and hotfix.Frédéric Desbiens
2025-09-29Merge pull request #317 from sjscymru/fix-hdfk-buffer-overflowFrédéric Desbiens
Fix HKDF implementation to prevent buffer overrun when compiled with NX_SECURE_KEY_CLEAR
2025-09-29Merge pull request #313 from mdkf/devFrédéric Desbiens
#312 Handle HTTP code 429
2025-09-29Merge commit from forkFrédéric Desbiens
Insert a buffer_ptr position check before getting bytes
2025-09-29Merge commit from forkFrédéric Desbiens
Insert a index position check before getting bytes
2025-09-29Merge commit from forkFrédéric Desbiens
Added buffer length check
2025-09-29Merge commit from forkFrédéric Desbiens
Insert a remaining buffer length check before dereferencing the pointer
2025-09-29Merge commit from forkFrédéric Desbiens
Fixed issue in _nx_secure_tls_process_clienthello()
2025-09-29Merge commit from forkFrédéric Desbiens
Fix length checking in supported version extension, add test
2025-09-29Merge commit from forkFrédéric Desbiens
Fix PSK extension length checking, add tests for such
2025-09-29Merge commit from forkFrédéric Desbiens
Fix multiple NextX Duo vulnerabilities.
2025-09-29Merge commit from forkFrédéric Desbiens
Fixes an issue in nx_secure_tls_psk_identity_find()
2025-09-02Merge pull request #326 from igortomiatti/implement-ecdhe-pskFrédéric Desbiens
Implementation of ECDHE_PSK cipher suites
2025-09-02Merge pull request #330 from joelguittet/websocket-improvement-headersFrédéric Desbiens
Websocket improvement headers.
2025-07-28Address the following advisories:Yuxin Zhou
https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-pf5q-r6q5-6j2f https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-cf2g-j6vv-m8c5 https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-vwh7-h99r-fvwq https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-c9pq-93jp-w649
2025-07-28Ensure proper RAM Disk sizing in the HTTPS demo.Frédéric Desbiens
2025-07-21Added error handling to the HTTPS sample.Frédéric Desbiens
Signed-off-by: Frédéric Desbiens <[email protected]>
2025-06-19websocket client: Add support for Authorization Bearer headerJoel Guittet
The Authorization: Bearer header allow to perform authentication providing a token. It is optional. Signed-off-by: Joel Guittet <[email protected]>
2025-06-19websocket client: Sec-WebSocket-Protocol is optional headerJoel Guittet
The header Sec-WebSocket-Protocol is optional in both the request and the response from the server. Signed-off-by: Joel Guittet <[email protected]>
2025-06-12Added the cipher suites: TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA and ↵Igor Tomiatti
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
2025-06-12Generate pre master secret according to ECDHE_PSKIgor Tomiatti
2025-06-12Generate client key exchange according to ECDHE_PSKIgor Tomiatti
2025-06-12Support for ECDHE_PSK in process server key exchangeIgor Tomiatti
2025-05-27patch for GHSA-v474-mv4g-v8cxcypherbridge
edited by inspection not compiled or run-time tested
2025-05-27patch for GHSA-8h38-qjhh-mf2hcypherbridge
edited by inspection not compiled or run-time tested
2025-05-27patch for GHSA-5vrv-8j5h-h6h6cypherbridge
edited by inspection not compiled or run-time tested
2025-05-22Add length check for supported versions extension and regression testHuan Nguyen
2025-05-22Move empty packet check in nx_secure_tls_session_sendHuan Nguyen
It was causing some tests to hang forever because they were expecting different errors to be returned. We do want to keep the check for empty packets as the netx_web_invalid_release_test expects that sending an empty packet fails. Note that the test also tests HTTPS, which will technically send a non-empty packet because the empty packet will be modified to include the TLS data. However, the empty packet check in nx_secure_tls_session_send will fulfill the same role as the check in nx_tcp_socket_send.c, checking for an empty packet prior to the modification of the packet to include TLS data. This gets the tests passing again.
2025-05-22Fix broken bounds check and add regression testHuan Nguyen
The check is in the function _nx_secure_tls_process_clienthello_psk_extension and was reported as a vulnerability.
2025-05-22Move empty packet check in nx_secure_tls_session_sendHuan Nguyen
It was causing some tests to hang forever because they were expecting different errors to be returned. We do want to keep the check for empty packets as the netx_web_invalid_release_test expects that sending an empty packet fails. Note that the test also tests HTTPS, which will technically send a non-empty packet because the empty packet will be modified to include the TLS data. However, the empty packet check in nx_secure_tls_session_send will fulfill the same role as the check in nx_tcp_socket_send.c, checking for an empty packet prior to the modification of the packet to include TLS data. This gets the tests passing again.
2025-05-20Insert a buffer_ptr position check before getting bytesekleezg
2025-05-20Insert a index position check before getting bytesekleezg
2025-05-20Insert a remaining buffer length check before dereferencing the pointerekleezg
2025-05-16Merge pull request #319 from eclipse-threadx/devFrédéric Desbiens
Fixes to build script and submodule definitions
2025-05-16Merge pull request #318 from hnguyenHWI/masterFrédéric Desbiens
Fix the FileX and ThreadX dependencies
2025-05-15Fix URL for submodules to work for everyoneHuan Nguyen
2025-05-15Add newlines at EOF to comply with POSIX standardHuan Nguyen
2025-05-15Update FileX submoduleHuan Nguyen
Need to update to include the CMake version changes so that the NetXDuo build scripts succeed.
2025-05-15Try to help user if build script failsHuan Nguyen
A common error condition is that the user cloned the repo without the --recursive option. We'll try to get the submodules for them. We remove the git clone command because the submodule update should fix the issue.
2025-05-15fix: corrected cleanup method call in HKDF implementation to prevent ↵Simon Scurrell
potential buffer overflow due to incorrect pointer being passed to HMAC cleanup if NetX is build with NX_SECURE_KEY_CLEAR defined.
2025-05-14Add FileX and ThreadX as proper submodulesHuan Nguyen
2025-05-14Remove submodules improperly added via cloneHuan Nguyen
2025-04-17Update testsMichael Fowler
2025-04-07typoMichael Fowler
2025-04-02312 Handle HTTP code 429Michael DK Fowler
2025-03-18Merge pull request #308 from eclipse-threadx/devv6.4.3_relFrédéric Desbiens
Release version v.6.4.3