libssh/README.mbedtls

libssh mbedTLS ECDSA support
=============================

When built with mbedTLS, libssh currently does not support ECDSA key comparison.
Since the comparison function is used during the verification of publickey
authentication requests a libssh server will not be able to deal with ECDSA
keys.

In general, if the ssh_key_cmp function is used with mbedTLS, ECDSA key
comparison won't work.


mbedTLS and libssh in multithreaded applications
==================================================

To use libssh with mbedTLS in a multithreaded application, mbedTLS has to be
built with threading support enabled.

If threading support is not available and multi threading is used, ssh_init
will fail.

More information about building mbedTLS with threading support can be found
in the mbedTLS documentation.
tests: Fix segfault with mbedTLS built without threading support torture_rand and torture_server_x11 call ssh_init without checking the return value. If mbedTLS is built without threading support ssh_init fails but the tests continue and then segfault since threading wasn't correctly initialised. Add a section that documents requirements for mbedTLS usage in a multi threaded environment to README.mbedtls. Signed-off-by: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr> Reviewed-by: Andreas Schneider <asn@cryptomilk.org> 2018-02-12 18:01:48 +01:00			`libssh mbedTLS ECDSA support`
			`=============================`

add mbedtls crypto support Summary: This patch adds support for mbedTLS as a crypto backend for libssh. mbedTLS is an SSL/TLS library that has been designed to mainly be used in embedded systems. It is loosely coupled and has a low memory footprint. mbedTLS also provides a cryptography library (libmbedcrypto) that can be used without the TLS modules. The patch is unfortunately quite big, since several new files had to be added. DSA is disabled at compile time, since mbedTLS doesn't support DSA Patch review and feedback would be appreciated, and if any issues or suggestions appear, I'm willing to work on them. Signed-off-by: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr> Test Plan: * The patch has been tested with a Debug and MinSizeRel build, with libssh unit tests, client tests and the pkd tests. * All the tests have been run with valgrind's memcheck, drd and helgrind tools. * The examples/samplessh client works when built with the patch. Reviewers: asn, aris Subscribers: simonsj Differential Revision: https://bugs.libssh.org/D1 2017-12-28 11:10:43 +01:00			`When built with mbedTLS, libssh currently does not support ECDSA key comparison.`
			`Since the comparison function is used during the verification of publickey`
			`authentication requests a libssh server will not be able to deal with ECDSA`
			`keys.`

			`In general, if the ssh_key_cmp function is used with mbedTLS, ECDSA key`
			`comparison won't work.`
tests: Fix segfault with mbedTLS built without threading support torture_rand and torture_server_x11 call ssh_init without checking the return value. If mbedTLS is built without threading support ssh_init fails but the tests continue and then segfault since threading wasn't correctly initialised. Add a section that documents requirements for mbedTLS usage in a multi threaded environment to README.mbedtls. Signed-off-by: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr> Reviewed-by: Andreas Schneider <asn@cryptomilk.org> 2018-02-12 18:01:48 +01:00

			`mbedTLS and libssh in multithreaded applications`
			`==================================================`

			`To use libssh with mbedTLS in a multithreaded application, mbedTLS has to be`
			`built with threading support enabled.`

			`If threading support is not available and multi threading is used, ssh_init`
			`will fail.`

			`More information about building mbedTLS with threading support can be found`
			`in the mbedTLS documentation.`