JacobBarthelmeh
9e331aa6d5
Merge pull request #6195 from embhorn/zd15836
...
Fix type conv error in logging
2023-03-17 14:46:54 -06:00
JacobBarthelmeh
06d970c999
Merge pull request #6181 from kareem-wolfssl/zd15767
...
Fix not ignoring date errors when VERIFY_SKIP_DATE is set
2023-03-17 10:53:41 -06:00
JacobBarthelmeh
042ceff08e
Merge pull request #6160 from lealem47/indefPKCS12
...
Adding support for indefinite length PKCS12
2023-03-17 10:45:46 -06:00
Sean Parkinson
21c5ecc371
Merge pull request #6179 from tim-weller-wolfssl/zd14527-pemtoder-return-size
...
zd14527 - Update `PubKey` and `Key` PEM-to-DER APIs to support return of needed DER size
2023-03-17 08:37:51 +10:00
John Safranek
db166e5e5a
Merge pull request #6198 from kaleb-himes/140-3-iOS-early-stage
...
Add a base-line user_settings.h for use with FIPS 140-3 in xCode example app
2023-03-16 15:20:15 -07:00
Kareem
cc51b2d52e
Add additional fix for absolute URN issue from PR #5964 and add test.
2023-03-16 14:56:44 -07:00
Kareem
4c12c334cf
Allow alternative absolute URI syntax in certificate general name.
2023-03-16 14:25:42 -07:00
Kareem
2bb8eeae85
Fix not ignoring date errors when VERIFY_SKIP_DATE is set
2023-03-16 14:25:41 -07:00
kaleb-himes
e1d1f0790e
Fixup uninitialized warnings detected by xCode
2023-03-16 15:18:00 -06:00
tim-weller-wolfssl
5659bd6036
Prevent out-of-bound read in ASN parsing logic by erroring out.
2023-03-16 06:11:34 -05:00
JacobBarthelmeh
7f6811a731
Merge pull request #6146 from kareem-wolfssl/zd15324
...
Fixes various warnings
2023-03-15 16:59:00 -06:00
Kareem
aaad3980a0
Various warning fixes. ESP32S3 include and build fixes. Added optional slot support for STSAFE shared secret using WOLFSSL_STSAFE_TAKES_SLOT.
2023-03-15 13:34:02 -07:00
JacobBarthelmeh
0486db8a2e
Merge pull request #6188 from SparkiDev/aes_gcm_streaming_long_nonce
...
AES-GCM streaming: fix IV caching
2023-03-15 11:39:37 -06:00
Eric Blankenhorn
7c918255b9
Fix type conv error in logging
2023-03-15 07:46:22 -05:00
Sean Parkinson
3b5310d186
AES-GCM streaming: fix IV caching
...
AES-GCM stremaing was caching IV even when larger than buffer copying
into.
Instead, require calls to wc_AesGcmSetIV() or wc_AesGcmSetExtIV() to
cache IV.
wc_AesGcmInit() now uses passed in IV or retrieves from cache.
2023-03-15 07:52:06 +10:00
tim-weller-wolfssl
52105a10c9
Add means to get size of DER buffer size needed for PEM-to-DER conversion to Key and PubKey APis
2023-03-14 06:33:12 -05:00
Sean Parkinson
1d0b04bfb3
ASN template: compile option to allow leading zeros
...
DER/BER encoding requires positive numbers to not have leading zeros.
Sometimes customer's have examples that break the rules.
In those cases define: WOLFSSL_ASN_INT_LEAD_0_ANY
Define used in original ASN.1 implementation.
2023-03-14 09:23:15 +10:00
Lealem Amedie
1c9fa5c5ae
Set some freed data to NULL
2023-03-10 13:40:25 -07:00
John Safranek
907a29ab9e
RNG Tweak
...
1. Remove a redundant test. The duplicate data test is not required and
is checking for something that potentially can happen normally,
albeit rarely.
2023-03-10 11:08:35 -08:00
David Garske
90f1c26211
Merge pull request #6162 from gojimmypi/Espressif_fix_6148
...
compiler appeasement initialization
2023-03-09 20:08:24 -08:00
gojimmypi
30106d82ea
replace fp_init_copy to appease some compilers
2023-03-08 20:37:19 -08:00
Chris Conlon
d03347d79c
fix GetAsnTimeString() to correctly increment data_ptr, fixes PKCS#7 signedData signingTime attribute
2023-03-08 16:39:49 -07:00
Lealem Amedie
13867dab12
Fix leak and address more feedback
2023-03-08 13:14:16 -07:00
Sean Parkinson
6e58ca3bc4
Merge pull request #6171 from JacobBarthelmeh/Testing
...
build checks on mp_read_radix
2023-03-08 10:36:19 +10:00
Sean Parkinson
842b22858b
Merge pull request #6168 from anhu/WOLFSSL_RELAXED_ASN_PARSING
...
Relaxed parsing of explicit ECC public key
2023-03-08 08:20:04 +10:00
Jacob Barthelmeh
eb0bf7cd03
build checks on mp_read_radix
2023-03-07 13:55:10 -07:00
Anthony Hu
f1757b1bae
WOLFSSL_NO_ASN_STRICT
2023-03-07 07:24:25 -05:00
Anthony Hu
109063e427
Relaxed parsing of explicit ECC public key
2023-03-06 20:11:36 -05:00
Chris Conlon
9bc3b867e0
Merge pull request #6157 from miyazakh/add_favouriteDrinkNID
2023-03-06 16:45:14 -07:00
Lealem Amedie
d9429185d8
Addressing some review feedback
2023-03-06 10:42:23 -07:00
David Garske
86e1b0d8ab
Merge pull request #6165 from SparkiDev/bn_move
...
BN compatibility API: move implementation out to separate API
2023-03-06 09:27:24 -08:00
Sean Parkinson
e4c2386b61
BN compatibility API: move implementation out to separate API
...
BN APIs from ssl.c have been moved out to ssl_bn.c that is included in
ssl.c.
Added defines for BN_rand() and BN_pseudo_rand() to indicate which bits
are to be set.
'internal' field now always maps to the ;mpi' field that is a MP
integer.
SetIndividualInternal/External renamed to wolfssl_bn_get/set_value.
Fixed BN APIs to work as closely to OpenSSL as possible.
Added tests.
Moved wolfssl_make_rng out to ssl.c as BN APIs are using it now.
SP int and TFM now check trials are in a valid range for
mp_prime_is_prime_ex().
2023-03-06 14:32:10 +10:00
Hideki Miyazaki
05b0796361
add favourite drink pilot attibute type to get it from the encoding
2023-03-04 14:20:48 +09:00
Daniel Pouzzner
ab71f6fd4c
extend C89 build to whole codebase including examples:
...
configure.ac: remove implied --disable-examples when --disable-inline;
tests/api.c: always include wolfcrypt/src/misc.c;
wolfcrypt/src/misc.c: use WC_MISC_STATIC to designate staticness of the misc functions;
wolfssl/wolfcrypt/misc.h: define WC_MISC_STATIC to empty or static depending on #ifdef NO_INLINE or not (respectively);
wolfssl/wolfcrypt/types.h: #ifdef NO_INLINE, #define WC_INLINE WC_MAYBE_UNUSED, and move the definitions of WARN_UNUSED_RESULT and WC_MAYBE_UNUSED above the definition of WC_INLINE for clarity;
wolfssl/wolfcrypt/mem_track.h: always declare TrackMalloc() et al static (no functional change, because the state and callback bindings were and remain unconditionally static, but previously #ifdef NO_INLINE the functions were globals, leading to multiple definitions.
2023-03-03 22:30:08 -06:00
Lealem Amedie
bb9c1bb253
Adding support for indefinite length PKCS12
2023-03-03 15:58:17 -07:00
David Garske
35b68fb23d
Merge pull request #5597 from Tathorack/add-renesas-rx64-rx72-sha-support
...
Add RX64/RX71 SHA hardware support
2023-03-03 13:14:32 -08:00
Rhys Hansen
4d81a06557
Update comment format and other minor changes
2023-03-03 13:57:44 -06:00
David Garske
4ebc896231
Merge pull request #6095 from SparkiDev/aes_gcm_win_asm
...
Aes gcm win asm
2023-03-02 15:02:55 -08:00
JacobBarthelmeh
9a54cea78b
Fix AES-ECB with SECO
2023-03-02 07:55:05 -07:00
Daniel Pouzzner
51339edf47
wolfcrypt/src/asn.c: fix WOLFSSL_ASYNC_CRYPT codepath in SignCert() -- fall through to non-async certSignCtx_lcl for algs without async support.
2023-03-01 17:51:25 -06:00
Daniel Pouzzner
6a7674a146
wolfcrypt/test/test.c: improve strerror_r() flavor sensing (simpler gate randomly provoked cppcheck-all-async-quic).
2023-03-01 17:50:00 -06:00
David Garske
63b049814b
Merge pull request #6136 from SparkiDev/armv7_aes_no_reloc_text
...
ARMv7a AES asm: don't have relocatable text
2023-03-01 14:36:41 -08:00
David Garske
7d049aa90a
Merge pull request #6141 from SparkiDev/cert_name_enc_fix
...
Cert name encoding fix
2023-02-28 17:36:22 -08:00
Sean Parkinson
3aa1ef5907
ARMv7a AES asm: don't have relocatable text
...
For FIPS hash, don't have relocatable text in ARMv7's AES assembly code.
2023-03-01 11:32:00 +10:00
David Garske
91d77393b9
Merge pull request #6110 from SparkiDev/sp_small_stack
...
SP: WOLFSSL_SP_SMALL_STACK
2023-02-28 17:17:58 -08:00
Sean Parkinson
d1b8386d36
Cert name encoding fix
...
Only include extra name entries once when encoding.
Fix certDefaultName to not have \0 on strings of extra names.
2023-03-01 10:01:54 +10:00
Sean Parkinson
2a33f24dc9
RSA padding - no pad length check fix
...
Perform correct length check of input bytes based on bits in key in
wc_RsaPad_ex when no padding to be done.
2023-03-01 09:42:39 +10:00
Sean Parkinson
cc8493668b
SP: WOLFSSL_SP_SMALL_STACK
...
Defined when WOLFSSL_SMALL_STACK and !WOLFSSL_SP_NO_MALLOC or on
configuration line as an option to --enable-sp: smallstack.
2023-03-01 09:35:05 +10:00
Daniel Pouzzner
47aad3fedb
Merge pull request #6138 from dgarske/pkcs7_async
...
Fix for PKCS7 with asynchronous crypto enabled
2023-02-28 17:24:56 -06:00
David Garske
2420d5d3b6
Merge pull request #6144 from kareem-wolfssl/zd15741Gh6142
...
Fix for PIC32 crypto HW and unused `TLSX_SetResponse`
2023-02-28 15:10:37 -08:00