12639 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Daniel Pouzzner	196ae63eb2	scripts/external.test: skip test when -DWOLFSSL_SNIFFER (staticCipherList in client.c is incompatible).	2020-11-10 00:03:02 -06:00
Daniel Pouzzner	bd38124814	ssl.c: refactor wolfSSL_RSA_generate_key() and wolfSSL_RSA_generate_key_ex() to retry failed wc_MakeRsaKey() on PRIME_GEN_E when -DHAVE_FIPS, matching non-FIPS behavior, to eliminate exposed nondeterministic failures due to finite failCount.	2020-11-09 21:24:34 -06:00
Daniel Pouzzner	4b1a779fcc	tests: fix for fips-test -Wunused-variable on "rng"	2020-11-09 11:54:49 -06:00
Daniel Pouzzner	22bcceb2d3	src/sniffer.c: guard against null arguments to TraceSetNamedServer(), to eliminate -Werror=format-overflow= warnings from gcc.	2020-11-06 17:40:12 -06:00
Kaleb Himes	937a7ce8ce	Merge pull request #3448 from dgarske/crypto_cb ... Improve the crypto callback for ASN	2020-11-06 15:26:11 -07:00
John Safranek	884a9b59ab	Merge pull request #3461 from dgarske/fips_ready_wopensslextra ... Fix for FIPS ready with openssl compat	2020-11-06 13:14:06 -08:00
Chris Conlon	ac4c8a0112	Merge pull request #3419 from ethanlooney/29th_branch ... Added case for Logging.c unit test	2020-11-06 13:10:24 -07:00
toddouska	4110297b62	Merge pull request #3473 from embhorn/zd11198 ... wc_SetIssuerRaw should copy raw subject to issuer	2020-11-06 10:48:37 -08:00
toddouska	b4e7f196df	Merge pull request #3470 from SparkiDev/config_fix_3 ... TLS configurations fixes	2020-11-06 10:35:51 -08:00
toddouska	3f25cda354	Merge pull request #3469 from SparkiDev/cpuid_sp_asm ... cpuid and SP ASM: ensure WOLFSSL_X86_64_BUILD is defined	2020-11-06 10:34:40 -08:00
toddouska	f3d961b1b1	Merge pull request #3453 from dgarske/ZD11159 ... Fix for possible memory leak when overriding error for verify callback	2020-11-06 10:18:52 -08:00
toddouska	f9ec7c472a	Merge pull request #3440 from ejohnstown/ntf3 ... Nightly Test Fix	2020-11-06 10:15:23 -08:00
Hayden Roche	2cad844d29	Merge pull request #3421 from dgarske/apache_httpd ... Apache httpd w/TLS 1.3 support	2020-11-06 12:14:58 -06:00
kaleb-himes	182a3e6bc2	Also addressing opensslall, pkcs7 and combinations	2020-11-05 17:29:30 -07:00
Ethan Looney	232ac03bbe	Changed it to only the inverse	2020-11-05 14:38:23 -07:00
Eric Blankenhorn	a92e31f6cb	Fix from review	2020-11-05 14:47:10 -06:00
David Garske	d784bd61cd	Merge pull request #3462 from kabuobeid/wolfrand_freescale_ecc_fix ... Fix build issue when building wolfrand on a Freescale platform.	2020-11-05 12:29:49 -08:00
Ethan Looney	06f1a1870d	Added inverse case	2020-11-05 13:05:15 -07:00
David Garske	1dc7293b19	Fix the return code. openssl uses void on these, but let's go ahead and do a return code.	2020-11-05 09:31:12 -08:00
David Garske	063fb2cfa0	Merge pull request #3455 from douzzer/linuxkm-install-rules ... add "module", "modules_install", and "clean_module" rules for linuxkm	2020-11-05 09:09:35 -08:00
Kaleb Himes	648c5e4735	Merge pull request #3471 from douzzer/fix-scan-build-20201104 ... fix various possibly spurious scan-build null deref reports.	2020-11-05 09:36:42 -07:00
Eric Blankenhorn	fa9a0a4b49	Copy raw subject to issuer	2020-11-05 09:06:02 -06:00
Daniel Pouzzner	5751319e00	fix various possibly spurious scan-build null deref reports.	2020-11-04 23:11:42 -06:00
Kaleb Himes	b40543b342	Merge pull request #3466 from douzzer/fix-benchmark-dh-key-size ... fix bench_dh() key size initialization	2020-11-04 20:33:06 -07:00
Sean Parkinson	8a42ee7ffd	TLS configurations fixes ... --enable-leanpsk --disable-tls13: ensure WriteSEQ is defined when !WOLFSSL_NO_TLS12 (tls.c) CFLAGS=-DWOLFSSL_NO_CLIENT_AUTH -disable-tls13" TLS server was expecting certificate from peer when verifyPeer is set. Fix with checks for !WOLFSSL_NO_CLIENT_AUTH.	2020-11-05 12:21:19 +10:00
Sean Parkinson	2588fe366e	cpuid and SP ASM: ensure WOLFSSL_X86_64_BUILD is defined ... WOLFSSL_X86_64_BUILD is defined only when fast math is enabled. Define it when SP ASM is enabled and on an x86_64 host. Undo cpuid code being enabled when WOLFSSL_SP_ASM as it shouldn't for non-Intel CPUs.	2020-11-05 11:16:27 +10:00
Kareem Abuobeid	37952b2776	Fix build issue when building wolfrand on a Freescale platform.	2020-11-04 16:52:59 -07:00
David Garske	3b4ec74174	Fixes for openssl compatibility. Added SSL_CTX_set_post_handshake_auth and SSL_set_post_handshake_auth API's for enabling or disabling post handshake authentication for TLS v1.3.	2020-11-04 15:05:50 -08:00
David Garske	eb19306f16	Merge pull request #3459 from haydenroche5/sniffer_fixes ... Fix a couple of issues related to the sniffer.	2020-11-04 14:09:43 -08:00
Daniel Pouzzner	2d149b1bef	benchmark.c: backport fixes to bench_dh() DH key size initialization from SparkiDev:sp_math_all.	2020-11-04 15:35:58 -06:00
Daniel Pouzzner	3858bda7e9	add "module", "modules_install", and "clean_module" rules to BUILD_LINUXKM section of Makefile.am, and add working install rule to linuxkm/Makefile, so that "make module" and "make modules_install" now work when --enable-linuxkm; fix "make dist" logic in Makefile.am and scripts/include.am to be unaffected by --enable-linuxkm; don't build wolfcrypt/benchmark or testwolfcrypt when --enable-linuxkm and --enable-crypttests.	2020-11-04 14:13:39 -06:00
Hayden Roche	3b1c536418	Fix a couple of issues related to the sniffer. ... - Fix an issue in sniffer.c where some pointer math was giving a warning. - Fix an issue in snifftest.c where a local variable was never read. - Ignore non-TCP/IP packets in snifftest.c. Fixes some tests with pcaps with other types of packets.	2020-11-04 10:46:11 -06:00
David Garske	00dd22adc4	Merge pull request #3464 from SparkiDev/sha512_valgrind_fix ... SHA-512 AVX2: use register for wk other than rsp	2020-11-04 07:15:04 -08:00
Sean Parkinson	235ea98b90	SHA-512 AVX2: use register for wk other than rsp ... Valgrind thinks that stack values are uninitialised when the stack pointer is added to. The asm code was moving rsp around rather than use another register. Put length to hash onto stack and use that register instead.	2020-11-04 12:02:34 +10:00
toddouska	b76ac0b842	Merge pull request #3442 from SparkiDev/config_fix_2 ... Configuration fixes	2020-11-03 14:48:49 -08:00
toddouska	e52efc7a8a	Merge pull request #3441 from SparkiDev/ecdsa_vfy_safe ... ECDSA verification: handle doubling of infinity	2020-11-03 14:47:45 -08:00
toddouska	2acef1c114	Merge pull request #3436 from haydenroche5/chacha_msvc_fix ... Fix MSVC compile issue in chacha.c.	2020-11-03 14:44:43 -08:00
toddouska	63bf5dc56c	Merge pull request #3426 from SparkiDev/rsa_pss_fix ... RSA-PSS: Handle edge case with encoding message to hash	2020-11-03 14:43:56 -08:00
toddouska	3cce86d7a8	Merge pull request #3420 from dgarske/small_pk ... ECC memory reductions with key and signature parsing	2020-11-03 14:42:43 -08:00
toddouska	9f9901e10e	Merge pull request #3417 from douzzer/fix-ipv6-ocsp-tests ... Fix ipv6 ocsp tests	2020-11-03 14:38:32 -08:00
David Garske	d6b219bd38	Fix for ./configure --enable-fips=ready --enable-opensslextra.	2020-11-03 14:23:08 -08:00
David Garske	f8176dd646	Merge pull request #3454 from SparkiDev/sp_def_fix ... SP C64/32: Fix define check	2020-11-02 17:07:56 -08:00
Sean Parkinson	b3f6c483bf	SP C64/32: Fix define check ... WOLFSSL_SP_DH -> WOLFSSL_HAVE_SP_DH	2020-11-03 08:42:55 +10:00
Ethan Looney	48073fb678	Removed unnecessary test	2020-11-02 14:22:01 -07:00
David Garske	89c39dcfe5	Fix for possible memory leak when overriding error for verify callback on cert 0 (peer) if OPENSSL_EXTRA or OPENSSL_EXTRA_X509_SMALL and KEEP_PEER_CERT is not defined.	2020-11-02 12:04:56 -08:00
John Safranek	29c7351fe0	Merge pull request #3383 from kaleb-himes/ACVP_TESTING_UPDATE ... In ACVP testing NIST needs to see failed decryption output	2020-11-02 10:42:28 -08:00
Chris Conlon	87abb5257e	Merge pull request #3447 from dgarske/microchip ... Fixes for building with Microchip	2020-11-02 10:09:13 -07:00
JacobBarthelmeh	a411dab74f	Merge pull request #3410 from cconlon/zd11001 ... PKCS#7: Reset variables correctly in VerifySignedData	2020-11-02 11:33:52 +08:00
John Safranek	d24add10f2	Nightly Test Fix ... When performing a fast_mp_montgomery_reduce(), scan-build didn't like that the destination buffer was fully zeroed out. We were only zeroing what was expected to be used. This zeroes only the expected to be used section of the output buffer.	2020-11-01 18:58:05 -08:00
David Garske	0df5079f8b	Fixes for building with Microchip. The min/max patch allows non PIC32MZ parts to build in MPLABX. The cryptoauthlib already defines SHA_BLOCK_SIZE, so undef to prevent redef error.	2020-10-30 12:46:14 -07:00