Paul Adelsbach
2325c68d4e
Address connection issues in ocsp-stapling test
2026-01-20 09:46:35 -08:00
Sean Parkinson
c71a4dd66f
Merge pull request #9662 from AlexLanzano/tls1.2-empty-cert-fix
...
[TLS 1.2, TLS 1.3] Fail immediately if server sends empty certificate message for TLS 1.2 and beyond
2026-01-20 09:45:29 +10:00
Daniel Pouzzner
4ce6c4c262
Merge pull request #9623 from julek-wolfssl/dtls-1.3-ms-interval
...
dtls 1.3: allow rtx interval to be less than a second
2026-01-19 17:01:23 -06:00
Daniel Pouzzner
e465f92905
Merge pull request #9642 from holtrop-wolfssl/hmac-blake2
...
Add HMAC-BLAKE2b and HMAC-BLAKE2s API functions
2026-01-19 16:49:08 -06:00
Daniel Pouzzner
c2cf8b1545
Merge pull request #9659 from holtrop-wolfssl/improve-error-for-invalid-helloretryrequest
...
Improve log message and error code for invalid HelloRetryRequest - fix #9653
2026-01-19 16:23:59 -06:00
Daniel Pouzzner
bfc4f6bb01
Merge pull request #9677 from dgarske/riscv_sha512
...
Fix for building RISC-V 64-bit without SHA512
2026-01-19 12:57:59 -06:00
Juliusz Sosinowicz
bba4671042
wolfSSL_dtls13_use_quick_timeout: check for NULL input
2026-01-19 10:13:23 +01:00
Juliusz Sosinowicz
429b690370
Address code review
2026-01-19 09:38:17 +01:00
Juliusz Sosinowicz
48067f1fa7
dtls 1.3: allow rtx interval to be less than a second
2026-01-19 09:32:09 +01:00
Josh Holtrop
e90429dbb8
HMAC-BLAKE2: avoid clang-analyzer warnings about x_key being uninitialized
2026-01-18 22:20:14 -05:00
David Garske
d98bbf1bc4
Merge pull request #9679 from douzzer/20260117-fix-test_wolfSSL_EVP_sm3
...
20260117-fix-test_wolfSSL_EVP_sm3
2026-01-17 11:47:51 -08:00
Daniel Pouzzner
467d6dd338
tests/api/test_evp_digest.c: fix for copy-paste error in test_wolfSSL_EVP_sm3(), introduced in 43d831ff06.
2026-01-17 09:58:21 -06:00
Josh Holtrop
90c8b5c80d
HMAC-BLAKE2: Use uppercase U for unsigned integer constants
2026-01-17 09:15:47 -05:00
Daniel Pouzzner
1e51938965
Merge pull request #9675 from embhorn/zd21049
...
Doc fixes for ecc
2026-01-17 00:03:46 -06:00
Daniel Pouzzner
84bca62ace
Merge pull request #9667 from bigbrett/ancv-verify-callback-fix
...
Apple Cert Fix: Prevent verify callback from blocking ANCV invocation
2026-01-17 00:02:42 -06:00
Daniel Pouzzner
9ae87e2a48
Merge pull request #9657 from embhorn/gh9655
...
Fix TLSX_Parse to correctly handle client and server cert type ext with TLS1.3
2026-01-16 23:59:31 -06:00
Daniel Pouzzner
5c7f986925
Merge pull request #9670 from miyazakh/fix_selftest
...
Fix compilation, crypt test and unit test failures when selftest is enabled
2026-01-16 23:57:27 -06:00
Daniel Pouzzner
0ceed2d832
Merge pull request #9664 from padelsbach/hmac-update-len-check
...
Add length check to Hmac_UpdateFinal_CT to prevent build error
2026-01-16 15:35:58 -06:00
David Garske
214b3c2dd7
Fix for building RISC-V 64-bit without SHA512
2026-01-16 13:07:08 -08:00
Daniel Pouzzner
9aabef04ba
Merge pull request #9641 from SparkiDev/api_c_split_evp
...
API testing: split out more test cases
2026-01-16 14:58:15 -06:00
Daniel Pouzzner
d18b4b28e0
Merge pull request #9676 from night1rider/fix-sha256-inter-init
...
initialize i_shaCopy to prevent undefined behavior
2026-01-16 14:14:45 -06:00
Josh Holtrop
b1086a1dbc
HMAC-BLAKE2[bs] - remove some spaces per review feedback
2026-01-16 10:38:49 -05:00
Zackery Backman
7a894515cb
initialize i_shaCopy to prevent undefined behavior
2026-01-15 18:00:27 -07:00
David Garske
f58787259c
Merge pull request #9674 from douzzer/20260115-PQC-WOLFSSL_NO_MALLOC
...
20260115-PQC-WOLFSSL_NO_MALLOC
2026-01-15 16:18:34 -08:00
Hideki Miyazaki
8ad73d8ac1
Fix compile and crypt test failures when selftest is enabled
2026-01-16 08:55:06 +09:00
Sean Parkinson
9427f9f26c
Merge pull request #9665 from dgarske/cleanup_20260114
...
Remove Devin Lifeguard
2026-01-16 09:22:47 +10:00
Sean Parkinson
fabe0c090a
Merge pull request #9646 from rlm2002/coverity
...
20260112 Coverity: update macros and add length checks
2026-01-16 09:20:01 +10:00
Eric Blankenhorn
b3bb8edf45
Fix doc for wc_ecc_verify_hash / _ex
2026-01-15 17:01:24 -06:00
Eric Blankenhorn
8316a4080d
Fix doc for wc_ecc_mulmod
2026-01-15 16:45:48 -06:00
Daniel Pouzzner
eb65361281
wolfcrypt/test/test.c:
...
* tweaks to xmss_test() for compatibility with WOLFSSL_NO_MALLOC && NO_WOLFSSL_MEMORY;
* fixes for return codes in dilithium_test().
wolfssl/wolfcrypt/dilithium.h: add !WC_NO_CONSTRUCTORS gate around wc_dilithium_new() and wc_dilithium_delete() prototypes, to match gating in implementation.
2026-01-15 16:04:36 -06:00
Brett
65a2b06d89
ANCV: support server-side policy creation
2026-01-15 11:59:59 -07:00
Brett
22a9665e6d
Prevent verify callback from blocking ANCV invocation when verify
...
callback is registered. Reverts behavior to pre-PR#9144
2026-01-15 11:59:59 -07:00
Ruby Martin
b4344c17cc
add cleanup logic to sakke_kat_derive_test()
2026-01-15 10:58:26 -07:00
Ruby Martin
2596d56802
verify length limit for supported version ext
...
add length check to tls extensions
2026-01-15 10:58:26 -07:00
Josh Holtrop
e7612ff36f
Improve log message and error code for invalid HelloRetryRequest - fix #9653
2026-01-15 12:55:17 -05:00
David Garske
20c4e2760b
Remove Devin Lifeguard
2026-01-15 09:50:34 -08:00
David Garske
16e45f94ae
Merge pull request #9672 from holtrop-wolfssl/fix-hostap-git-url
...
Fix hostap repo clone URL
2026-01-15 09:49:45 -08:00
David Garske
7370e3145d
Merge pull request #9666 from padelsbach/arduino-esp32-space
...
Experimental: Reduce disk space for esp32 Arduino builds
2026-01-15 09:49:27 -08:00
Josh Holtrop
a4a24ad2fe
Fix hostap repo clone URL
2026-01-15 09:30:27 -05:00
Eric Blankenhorn
3c5b8f900e
Fix TLSX_Parse to correctly handle client and server cert type ext with TLS1.3
2026-01-15 07:36:52 -06:00
Paul Adelsbach
c193c4c64f
Reduce disk space for esp32 Arduino builds
2026-01-14 20:02:50 -08:00
David Garske
0f3c769c44
Merge pull request #9660 from douzzer/20260114-fixes
...
20260114-fixes
2026-01-14 20:00:27 -08:00
David Garske
f0d3957aa9
Merge pull request #9643 from mattia-moffa/20260112-sniffer-fixes
...
More sniffer length checks
2026-01-14 17:00:12 -08:00
Daniel Pouzzner
96f8eb01f9
wolfssl/wolfcrypt/asn.h and wolfssl/openssl/obj_mac.h: add shortname and longname mappings for ASN subject fields.
2026-01-14 18:03:32 -06:00
Daniel Pouzzner
8d3adfad44
wolfssl/wolfcrypt/falcon.h and wolfssl/wolfcrypt/sphincs.h: in falcon_key and sphincs_key, use WC_BITFIELD foo:1, not bool, to fix readability-implicit-bool-conversion.
2026-01-14 18:03:32 -06:00
Daniel Pouzzner
f738e44e39
wolfcrypt/test/test.c: in random_bank_test(), fix position of a misplaced WC_DRBG_BANKREF gate.
2026-01-14 18:03:32 -06:00
Sean Parkinson
9b5cbbc3fb
Merge pull request #9663 from embhorn/zd21045
...
Resolve unused var warning in oss-fuzz
2026-01-15 08:36:17 +10:00
Josh Holtrop
b432ee93a5
Add incremental API for HMAC-BLAKE2[bs] computation
2026-01-14 16:12:42 -05:00
Daniel Pouzzner
e8934f7a9e
Merge pull request #9661 from JacobBarthelmeh/lic
...
add SWUpdate to GPLv2 exception list
2026-01-14 14:39:49 -06:00
Josh Holtrop
74c79dab1e
Update constants in BLAKE2 doxygen documentation
2026-01-14 15:37:29 -05:00
