wolfssl

Files

Sean Parkinson dad62fc182 pk.c: rework DH API and improve PEM read/write

Reorganized the DH APIs into groups.
Reworked all DH APIs.
Improved testing of DH API.

Implemented wolfSSL_PEM_read_RSAPublicKey() and
wolfSSL_PEM_write_RSA_PUBKEY().
Fix public key PEM write implementations to use the correct
header/footer names.
Added support for "RSA PUBLIC KEY" in header and footer in DerToPemEx().

Reworked PEM read/write APIs to be independent. No longer create an EVP
to use common function - common functionality refectored out.
Similarly file APIs don't create a BIO and call the partner APIs.

Improved testing of PEM read/write APIs.

Generic read BIO from memory BIO now returns the buffer instead of
allocating memory and reading.
No longer reading chunks when a file BIO.

Added wolfssl_make_rng() to create or get get global random. All RSA and
DH APIs now use this. DH_generate_parameters() creates a random object
and use global on error rather than just using global random.

Changed implementations to use BIO_new_fp() instead of create a new BIO
and setting file pointer.

2022-10-26 10:28:20 +10:00

api.c

pk.c: rework DH API and improve PEM read/write

2022-10-26 10:28:20 +10:00

CONF_FILES_README.md

Cleanup markdown documentation

2021-10-13 16:39:46 +01:00

hash.c

update copyright year to 2022

2022-07-19 10:44:31 -06:00

include.am

tests: add negative version negotation tests

2022-09-28 18:42:38 +02:00

NCONF_test.cnf

Internal unit tests

2020-12-17 14:26:49 +01:00

quic.c

tests/quic.c: gate QuicConversation_fail() definition to avoid -Wunused-function.

2022-09-14 09:46:07 -05:00

README

re-format test-psk-no-id.conf add README

2015-08-03 11:04:18 -06:00

srp.c

update copyright year to 2022

2022-07-19 10:44:31 -06:00

suites.c

Various build fixes:

2022-10-13 12:49:06 -07:00

test-altchains.conf

Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.

2020-06-18 09:26:50 -07:00

test-chains.conf

Fix for tests/test-chains.conf with new intermediate CA.

2020-06-18 08:33:59 -07:00

test-dhprime.conf

Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.

2018-12-21 12:36:47 -08:00

test-dtls13-cid.conf

add basic ConnectionID DTLS tests

2022-08-23 16:58:24 +02:00

test-dtls13-downgrade-fails.conf

tests: add negative version negotation tests

2022-09-28 18:42:38 +02:00

test-dtls13-downgrade.conf

tests: add dtls downgrade tests

2022-07-06 16:18:44 +02:00

test-dtls13-psk.conf

fix: wrong size using DTLSv1.3 in RestartHandshakeHashWithCookie

2022-10-13 17:42:58 +02:00

test-dtls13.conf

server: add optional argument to -J disable hrr cookie

2022-09-01 09:37:35 +02:00

test-dtls-downgrade.conf

tests: add dtls downgrade tests

2022-07-06 16:18:44 +02:00

test-dtls-fails-cipher.conf

Correctly reset the Tx sequence number

2021-03-09 18:30:10 +01:00

test-dtls-fails.conf

Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.

2020-07-22 13:20:23 -07:00

test-dtls-group.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-mtu.conf

Merge pull request #5149 from julek-wolfssl/store-frags-v2

2022-06-01 10:52:54 -07:00

test-dtls-reneg-client.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-reneg-server.conf

Add testing/docs for blocking write

2022-05-27 21:26:55 +02:00

test-dtls-resume.conf

tests: add bidirectional shutdown UDP tests

2022-05-11 13:27:37 +02:00

test-dtls-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-dtls-srtp-fails.conf

tests: support test for SRTP

2022-01-19 13:35:29 +01:00

test-dtls-srtp.conf

tests: support test for SRTP

2022-01-19 13:35:29 +01:00

test-dtls.conf

tests: add bidirectional shutdown UDP tests

2022-05-11 13:27:37 +02:00

test-ecc-cust-curves.conf

Added TLS v1.2 and v1.3 test cases for ECC Koblitz and Brainpool curves (both server auth and mutual auth). Cipher suites: ECDHE-ECDSA-AES128-GCM-SHA256, ECDH-ECDSA-AES128-GCM-SHA256 and TLS13-AES128-GCM-SHA256.

2020-11-10 09:47:36 -08:00

test-ed448.conf

Update OpenSSL interopability testing

2020-08-11 16:44:45 +10:00

test-ed25519.conf

ECC: Disable ECC but have Curve25519/448 and PK callbacks fix

2021-05-10 10:32:55 +10:00

test-enckeys.conf

New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:

2018-12-21 09:54:55 -08:00

test-fails.conf

Verify Callback Fix

2020-11-24 11:46:10 -08:00

test-maxfrag-dtls.conf

New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:

2018-12-21 09:54:55 -08:00

test-maxfrag.conf

Add testing/docs for blocking write

2022-05-27 21:26:55 +02:00

test-p521.conf

TLS 1.3: Fix P-521 algorithm matching

2020-09-18 10:51:55 +10:00

test-psk-no-id-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-psk-no-id.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-psk.conf

Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442

2022-05-27 11:05:55 -04:00

test-rsapss.conf

handle certificates with RSA-PSS signature that have RSAk public keys

2022-09-21 08:24:09 -06:00

test-sctp-sha2.conf

SCTP Test

2020-07-20 15:03:48 -07:00

test-sctp.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-sig.conf

add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.

2020-11-11 22:47:47 -06:00

test-tls13-down.conf

update test conf to fix jenkins failures

2021-06-25 16:31:49 +09:00

test-tls13-ecc.conf

2020-11-11 22:47:47 -06:00

test-tls13-pq-2.conf

Kyber: Add option to build Kyber API

2022-09-13 10:07:27 -04:00

test-tls13-pq.conf

Kyber: Add option to build Kyber API

2022-09-13 10:07:27 -04:00

test-tls13-psk.conf

TLS 1.3 PSK: use the hash algorithm to choose cipher suite

2021-06-10 09:55:27 +10:00

test-tls13.conf

TLS 1.3: send ticket

2022-06-01 10:36:01 +10:00

test-tls-downgrade.conf

Check for TLS downgrade

2021-04-23 14:45:35 -07:00

test-trustpeer.conf

stunnel 5.61 support

2022-02-23 09:47:34 +01:00

test.conf

Add testing/docs for blocking write

2022-05-27 21:26:55 +02:00

TXT_DB.txt

Internal unit tests

2020-12-17 14:26:49 +01:00

unit.c

configure.ac: remove enable-quic from enable-all feature set;

2022-08-17 14:25:38 -05:00

unit.h

Assert Consistency

2022-10-25 11:42:51 -07:00

w64wrapper.c

2022-07-19 10:44:31 -06:00

README

Before creating any new configure files (.conf) read the CONF_FILES_README.md