24587 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jiri Malak	000f32a5a4	fix failing tests build if not found standard threads support ... Threads::Threads is not defined, if support not found for some reason if custom threads support is used then it happen always of cause some tests relates to standard threads support then it fails during build, but build is started and only some tests fail	2025-02-21 09:24:15 +01:00
David Garske	93000e5f14	Merge pull request #8467 from SparkiDev/kyber_improv_2 ... ML-KEM/Kyber: improvements	2025-02-19 16:42:42 -08:00
Sean Parkinson	82b50f19c6	ML-KEM/Kyber: improvements ... ML-KEM/Kyber: MakeKey call generate random once only for all data. Allow MakeKey/Encapsulate/Decapsulate to be compiled separately. Pull out public key decoding common to public and private key decode. Put references to FIPS 140-3 into code. Rename variables to match FIPS 140-3. Fix InvNTT assembly code for x64 - more reductions. Split out ML-KEM/Kyber tests from api.c. TLSX: Store the object instead of the private key when WOLFSSL_MLKEM_CACHE_A is defined or WOLFSSL_TLSX_PQC_MLKEM_STORE_OBJ. Faster decapsulation when A is cached and object stored. To store private key as normal define WOLFSSL_TLSX_PQC_MLKEM_STORE_PRIV_KEY. misc.c: when Intel x64 build, assume able to read/write unaligned	2025-02-20 08:14:15 +10:00
JacobBarthelmeh	539056e749	Merge pull request #8475 from embhorn/gh8473 ... Fix QUIC callback failure	2025-02-19 14:00:47 -07:00
David Garske	268326d875	Merge pull request #8408 from rizlik/ocsp-resp-refactor ... OpenSSL Compat Layer: OCSP response improvments	2025-02-19 11:20:12 -08:00
Daniel Pouzzner	597b839217	Merge pull request #8468 from jmalak/fix-test-c89 ... correct test source file to follow C89 standard	2025-02-19 11:23:48 -06:00
Eric Blankenhorn	66ed35c910	Fix QUIC callback failure	2025-02-19 10:56:44 -06:00
JacobBarthelmeh	373a7d462a	Merge pull request #8472 from SparkiDev/ed25519_fix_tests ... Ed25519: fix tests to compile with feature defines	2025-02-19 09:53:10 -07:00
Sean Parkinson	331a713271	Ed25519: fix tests to compile with feature defines ... ge_operations.c: USe WOLFSSL_NO_MALLOC rather than WOLFSSL_SP_NO_MALLOC.	2025-02-19 17:41:03 +10:00
JacobBarthelmeh	393c92c3eb	Merge pull request #8464 from kaleb-himes/SRTP-WIN-PORTING ... Porting to Windows 11 MSVS 2022	2025-02-18 16:16:14 -07:00
Jiri Malak	3c74be333e	correct test source file to follow C89 standard ... for OpenSSL interface	2025-02-18 22:12:11 +01:00
JacobBarthelmeh	48f1c3b57d	Merge pull request #8465 from douzzer/20250217-fix-test-c89 ... 20250217-fix-test-c89	2025-02-18 08:44:17 -08:00
David Garske	ff70cdf9d8	Merge pull request #8466 from douzzer/20250217-fixes ... 20250217-fixes	2025-02-17 19:39:38 -08:00
Daniel Pouzzner	258afa5493	wolfcrypt/src/pkcs7.c: in PKCS7_EncodeSigned(), check for error from SetSerialNumber().	2025-02-17 18:05:04 -06:00
Daniel Pouzzner	65f38df74d	tests/api.c: refactor several C89-incompatible dynamically constructed arrays using static const.	2025-02-17 17:47:36 -06:00
kaleb-himes	e0bc6ef9df	Porting to Windows 11 MSVS 2022	2025-02-17 16:18:10 -07:00
David Garske	a2c8168c96	Merge pull request #8460 from embhorn/gh8456 ... Fix cmake lean_tls build	2025-02-17 14:57:52 -08:00
Eric Blankenhorn	bc79803c1a	Add workflow test	2025-02-17 15:16:29 -06:00
JacobBarthelmeh	3e38bdcd2c	Merge pull request #8450 from dgarske/stm32_pka_ecc521 ... Fix for STM32 PKA ECC 521-bit support	2025-02-17 08:27:45 -08:00
Marco Oliverio	7db3c34e2b	ocsp: enable OPENSSL tlsext status cb for NGINX and HAPROXY	2025-02-17 14:53:49 +00:00
Eric Blankenhorn	1970fec190	Fix cmake lean_tls build	2025-02-17 08:17:05 -06:00
Marco Oliverio	a1d1f0ddf1	ocsp: enable SSL_CTX_set_tlsext_status_cb only in OPENSSL_ALL	2025-02-17 11:29:09 +00:00
Marco Oliverio	0945101948	ocsp: fix: remove duplicated code	2025-02-17 11:25:24 +00:00
Marco Oliverio	1eecf326fd	ocsp: use ocspReponse->heap in OcspFindSigner + minors	2025-02-17 08:59:29 +00:00
Marco Oliverio	0af092ec79	ocsp: minors	2025-02-17 08:59:29 +00:00
Marco Oliverio	a06a8b589c	ocsp: minors	2025-02-17 08:59:29 +00:00
Marco Oliverio	4351a5dd70	ocsp/test: better test assertions	2025-02-17 08:59:29 +00:00
Marco Oliverio	69116eb05d	ocsp/tests: update blobs and add license header	2025-02-17 08:59:29 +00:00
Marco Oliverio	c1c9af5cb6	minor: improve indentation of guards	2025-02-17 08:59:29 +00:00
Marco Oliverio	3724094ce2	ocsp: add test for response with unusable internal cert ... - Added a new test case `resp_bad_embedded_cert` in `create_ocsp_test_blobs.py` to test OCSP response with an unusable internal cert that can be verified in Cert Manager. - Updated `test_ocsp_response_parsing` in `ocsp.c` to include the new test case. - Ensured the new test case checks for proper handling of OCSP responses with incorrect internal certificates.	2025-02-17 08:59:29 +00:00
Marco Oliverio	2c2eb2a285	ocsp: improve OCSP response signature validation ... - search for the signer in the CertificateManager if the embedded cert verification fails in original asn template.	2025-02-17 08:59:29 +00:00
Marco Oliverio	3e50c79c3b	tests: bind test_wolfSSL_client_server_nofail_memio HAVE_SSL_MEMIO_TESTS_DEP	2025-02-17 08:59:29 +00:00
Marco Oliverio	ae3177c439	ocsp-resp-refactor: fix tests	2025-02-17 08:59:29 +00:00
Marco Oliverio	851d74fd69	ocsp-resp-refactor: address reviewer's comments	2025-02-17 08:59:29 +00:00
Marco Oliverio	eb7904b5e5	tests/api: expose test_ssl_memio functions	2025-02-17 08:59:29 +00:00
Marco Oliverio	f782614e1e	clang tidy fixes	2025-02-17 08:59:28 +00:00
Marco Oliverio	2fe413d80f	ocsp: add tests	2025-02-17 08:59:23 +00:00
Marco Oliverio	3a3238eb9f	ocsp: refactor wolfSSL_OCSP_response_get1_basic ... The internal fields of OcspResponse refer to the resp->source buffer. Copying these fields is complex, so it's better to decode the response again.	2025-02-17 08:58:03 +00:00
Marco Oliverio	b7f08b81a6	ocsp: adapt ASN original to new OCSP response refactor	2025-02-17 08:58:03 +00:00
Marco Oliverio	f526679ad5	ocsp: refactor OCSP response decoding and wolfSSL_OCSP_basic_verify ... - Search certificate based on responderId - Verify response signer is authorized for all single responses - Align with OpenSSL behavior - Separate wolfSSL_OCSP_basic_verify from verification done during decoding	2025-02-17 08:58:03 +00:00
Marco Oliverio	d7711f04ab	openssl compat: skip OCSP response verification in statusCb ... This aligns with OpenSSL behavior	2025-02-17 08:58:02 +00:00
Marco Oliverio	dedbb2526c	ocsp: fix memory leaks in OpenSSL compat layer	2025-02-17 08:58:02 +00:00
Kaleb Himes	79744a7736	Merge pull request #8455 from douzzer/20250214-fix-wolfEntropy-configure-handling ... 20250214-fix-wolfEntropy-configure-handling	2025-02-14 17:14:29 -07:00
Daniel Pouzzner	39ed0eabff	configure.ac: fix handling of --enable-wolfEntropy (don't re-default to no in following --enable-entropy-memuse clause).	2025-02-14 15:39:42 -06:00
David Garske	842b9a3709	Merge pull request #8433 from julek-wolfssl/dtls-cid-negative-tests ... Update DTLS CID Tests and Reorganize Test Utilities	2025-02-14 11:26:57 -08:00
Daniel Pouzzner	c9de3d63f9	Merge pull request #8453 from kaleb-himes/SRTP-KDF-SCRIPT-UPDATE ... Update tag for v6.0.0 module checkout	2025-02-14 13:24:25 -06:00
David Garske	e529ad51fc	Merge pull request #8451 from douzzer/20240214-workflow-TEST_OPENSSL_COEXIST ... 20250214-workflow-TEST_OPENSSL_COEXIST	2025-02-14 11:12:28 -08:00
kaleb-himes	a6a15e6211	Update tag for v6.0.0 module checkout	2025-02-14 11:38:19 -07:00
Daniel Pouzzner	10d5d59977	add .github/workflows/opensslcoexist.yml. fix TEST_OPENSSL_COEXIST section of wolfssl/ssl.h for compatibility with OpenSSL <3.2. also, remove frivolous entry for WOLFSSL_HMAC_COPY_HASH in .wolfssl_known_macro_extras.	2025-02-14 12:19:12 -06:00
Daniel Pouzzner	690bb14203	tests/utils.c and tests/api/test_dtls.c: fixes for include order, re tests/unit.h.	2025-02-14 10:57:29 -06:00