46f6320380
Fix PQC hybrid KeyShare pointer sanity.
...
Also add tests for it and SetTicket
2026-03-27 14:33:41 -04:00
406f5033c6
verify ciphersuite in CH2 matches HRR
2026-03-20 16:07:27 -06:00
528b22140b
revert PR 9909
2026-03-10 14:47:21 -06:00
4b09fb36d9
Add test test_tls13_derive_keys_no_key
2026-03-09 09:49:37 -06:00
a2622746cd
Error out in case of unknown extensions in response message in TLS 1.3
2026-03-06 17:09:49 +01:00
11fc781d0d
Treat alerts as fatal errors regardless of level in TLS1.3
2026-03-05 18:21:02 +01:00
20eeba3d89
test: tls13: add wolfSSL_set1_sigalgs_list test
2026-02-25 12:10:48 +01:00
a156ed7bc7
update Copyright year
2026-02-18 09:52:21 -07:00
c3c9acc5bf
Middle box compatibility compliance.
2026-02-13 10:28:12 -05:00
b766f11e7b
TLS 1.3, plaintext alert: ignore when expecting encrypted
...
In TLS 1.3, ignore valid unencrypted alerts that appear after encryption
has started.
Only ignore WOLFSSL_ALERT_COUNT_MAX-1 alerts.
2025-12-23 09:09:06 +10:00
f61bfd7805
Check KeyShare after HRR
2025-12-17 10:27:04 +01:00
d3863e5fa3
TLS 1.3: duplicate extension alert code fix
...
The specification states to return illegal_parameter when a message is
syntactically correct but semantically invalid. (RFC 8446 section 6,
Paragraph 5)
2025-12-15 10:00:56 -08:00
44be44a509
TLS 1.3 missing extension: return correct alert code
...
Change TLS 1.3 handling to return missing_extension alert code when
- KeyShare is present but SupportedGroups is missing and
- SupportedGroups is present but KeyShare is missing
Added tests for this.
2025-12-15 09:07:13 +10:00
c14b1a0504
Validate cipher suite after HelloRetryRequest
...
- Add validation to ensure the cipher suite in the ServerHello matches the one specified in the HelloRetryRequest.
- test_TLSX_CA_NAMES_bad_extension: use the same ciphersuite in HRR and SH
2025-10-29 13:14:50 +01:00
f798a585d9
Abort connection if we are about to send the same CH
2025-09-26 12:08:53 +02:00
115d4d88c0
api.c: pull out TLS 1.3 specific tests
2025-08-26 09:05:46 +10:00
Anthony Hu
sebastian-carpenter
JacobBarthelmeh
Eric Blankenhorn
Tobias Frauenschläger
Marco Oliverio
Sean Parkinson
Juliusz Sosinowicz