828b9b7024
remove mac_alg check, mac_alg is always no_mac on subsequent iterations
2025-07-22 08:49:26 -06:00
42b80878d9
str_len check includes any value less than 0
2025-07-22 08:49:26 -06:00
dc345553df
wrap res assignment in else statement
2025-07-22 08:49:26 -06:00
aa986a2b24
Update doxygen comment style per code review comments
2025-07-22 08:27:00 -04:00
e03fc6858b
Update Doxygen comment style per code review comments
2025-07-22 08:24:22 -04:00
525f1cc39e
Update style per code review comments
2025-07-22 08:19:01 -04:00
8f00fc2594
Merge pull request #8890 from kareem-wolfssl/zd20022
...
Allow larger pathLen values in Basic Constraints.
2025-07-22 17:16:27 +10:00
cd7256ae63
Merge pull request #8979 from anhu/abort_on_bad_legacy
...
Abort TLS connection if legacy version field is TLS 1.3 or higher
2025-07-22 17:12:39 +10:00
1f72866489
Merge pull request #8993 from miyazakh/tsip_tlsproperties_uc
...
Make properties related to TLS handshake hidden for TSIP TLS user-context structure
2025-07-22 17:05:44 +10:00
6c847b1870
Merge pull request #9013 from ColtonWilley/fix_cryptocb_rsa_pad_inline
...
Set out ptr properly for RSA pad crypto cb inline
2025-07-22 16:47:06 +10:00
21f283c143
Merge pull request #9008 from gojimmypi/pr-wolfssl_user_io
...
Improve WOLFSSL_USER_IO defaults
2025-07-22 16:37:59 +10:00
7417958649
Merge pull request #9015 from philljj/fix_dual_alg_build
...
dual alg certs: fix dual alg certs build, and asn cleanup.
2025-07-22 16:26:41 +10:00
95768038b9
Merge pull request #9019 from ribes96/word64_literal
...
wolfcrypt test: Fix build on 32 bit machines
2025-07-22 16:23:02 +10:00
0c4c156893
Merge pull request #9020 from ribes96/oldgcc_uninitialized
...
Avoid bogus warning on uninitialized variables on old versions of GCC
2025-07-22 16:22:00 +10:00
f034f09bb4
Merge pull request #9021 from ribes96/fix_noshadow_overwrite
...
Support CFLAGS="-Wno-shadow"
2025-07-22 16:21:07 +10:00
f1175043f3
Merge pull request #9022 from lealem47/check_rsa_u
...
Check that u value isn't zero in RsaFunctionPrivate
2025-07-22 16:19:12 +10:00
0495f2cc20
linuxkm/linuxkm_wc_port.h: add WC_LKM_INDIRECT_SYM() macro; on x86, use wolfssl_linuxkm_pie_redirect_table directly for indirect calls from PIE container, otherwise use wolfssl_linuxkm_get_pie_redirect_table() to avoid e.g. R_AARCH64_LD64_GOT_LO12_NC relocations;
...
linuxkm/Kbuild: remove -fno-stack-protector from default PIE_FLAGS.
2025-07-21 19:34:00 -05:00
98c70fb77e
fix mldsa test case for buffer size and expire date
2025-07-21 15:15:31 -06:00
8df20d6966
Check that u value isn't zero in RsaFunctionPrivate
2025-07-21 10:45:43 -06:00
b306e88d1a
Guard for WOLFSSL_USER_IO case
2025-07-21 10:06:19 -06:00
f9afdfd8e2
Don't need to initialize with {0}
2025-07-21 10:06:19 -06:00
90bd374c16
Add logic to match IPv6 domain addresses
2025-07-21 10:06:19 -06:00
6f8e0f128a
Support CFLAGS="-Wno-shadow"
...
Avoid appending "-Wshadow" in the end of compiler flags if the user
provided CFLAGS="-Wno-shadow"
2025-07-21 12:34:39 +02:00
b2463f167c
Avoid bogus warning on uninitialized variables on old versions of GCC
...
gcc-4.3.3 erroneously complains that some variables may be used
uninitialized. Silence it assigning NULL on declaration, as is already
done with many other variables.
2025-07-21 10:57:50 +02:00
2e25c65129
wolfcrypt test: Fix build on 32 bit machines
...
Declare a 64 bit variable using W64LIT to avoid warnings on 32 bit
machines
2025-07-21 10:34:19 +02:00
06d86af67c
Add API to decode SymmetricKeyPackage and OneSymmetricKey CMS objects
2025-07-19 18:28:06 -04:00
8e46687223
dual alg certs: add missing WC_ENABLE_ASYM_KEY_IMPORT guard.
2025-07-18 09:30:17 -05:00
7a03b9fea6
fix trailing whitespaces
2025-07-18 07:54:45 +09:00
70587dd2d5
Addressed code review by devin
2025-07-18 07:51:04 +09:00
decea12e22
Merge pull request #9012 from JacobBarthelmeh/release
...
prepare for release 5.8.2
2025-07-17 14:59:24 -07:00
e571988059
dual alg certs: fix dual alg certs build, and asn cleanup.
2025-07-17 15:15:11 -05:00
f3ee192a96
Set out ptr properly for RSA pad crypto cb inline
2025-07-17 12:01:39 -07:00
c34e6ab8d9
prepare for release 5.8.2
2025-07-17 10:26:19 -06:00
fa1842e56d
Merge pull request #9011 from douzzer/20250717-linuxkm-include-am
...
20250717-linuxkm-include-am
2025-07-17 08:56:40 -06:00
c8a9e9ea12
linuxkm/include.am: add linuxkm/wolfcrypt.lds to EXTRA_DIST.
2025-07-17 08:40:55 -05:00
ba358b8fb8
Sanity check before free
2025-07-17 18:51:57 +09:00
59659ef8fb
fix long line and trailing whitespaces
2025-07-17 18:26:55 +09:00
cc123d7c3a
Make properties related to SCE TLS hidden
...
- Fix RSA Crypt callback
- Eliminate WOLFSSL_LOCAL
2025-07-17 18:16:40 +09:00
8bde512676
Merge pull request #9007 from douzzer/20250715-linuxkm-portability-fixes
...
20250715-linuxkm-portability-fixes
2025-07-16 21:02:55 -05:00
a08b93347f
Revised sockets for USE_WOLFSSL_IO, USE_WOLFSSL_IO
2025-07-16 15:18:14 -07:00
8d1289c1d7
linuxkm/Kbuild: --rename-section .rodata.cst16=.rodata.wolfcrypt
2025-07-16 16:54:20 -05:00
66650a95d8
Improve WOLFSSL_USER_IO defaults
2025-07-16 12:04:05 -07:00
01313cc0c8
linuxkm/x86_vector_register_glue.c:
...
* refactor the save_vector_registers_x86() algorithm to depend directly on preempt_count(), and use local_bh_enable() and preempt_disable() directly, to mitigate glitchiness around irq_fpu_usable() and crypto_simd_usable();
* eliminate the WC_FPU_ALREADY_FLAG kludge.
* improve the error and warning messages, and add some additional checks and messages for unexpected states; add VRG_PR_ERR_X and VRG_PR_WARN_X for pr_*_once() semantics on regular builds, but unlimited messages when WOLFSSL_LINUXKM_VERBOSE_DEBUG.
linuxkm/linuxkm_wc_port.h and linuxkm/module_hooks.c:
* move the spinlock-based implementation of wc_LockMutex() from linuxkm_wc_port.h to module_hooks.c, due to numerous stuboorn direct external symbol references;
* extensively refactor the kernel header #include strategy, keeping many more superfluous headers out of __PIE__ objects, and fixing unavoidable static header functions with grafted __always_inline attributes;
* add version exceptions for RHEL 9.5.
linuxkm/Kbuild:
* on x86 with CONFIG_MITIGATION_{RETPOLINE,RETHUNK}, use inline rethunks rather than none;
* refactor check for "Error: section(s) missed by containerization." using `readelf --sections --syms`, for 100% coverage, more informative error output, and suppression of false positives on printk-related cruft;
configure.ac and linuxkm/lkcapi_sha_glue.c: use LINUXKM_LKCAPI_[DONT_]REGISTER_{SHA,HMAC}_ALL to represent --enable-linuxkm-lkcapi-register=[-]all-{sha,hmac}, which allows alg families (notably SHA1) to be masked out piecemeal;
linuxkm/lkcapi_rsa_glue.c: in linuxkm_test_pkcs1pad_driver(), mitigate unused args when LINUXKM_AKCIPHER_NO_SIGNVERIFY.
2025-07-16 13:09:03 -05:00
2c90d1585a
Merge pull request #8897 from anhu/compat_additions
...
Compatibility layer additions for X.509 extensions and RSA PSS
2025-07-15 10:52:33 -06:00
c341a9fc05
FIPS > 2
2025-07-15 07:59:20 -04:00
e06f1bbf02
Merge pull request #9005 from douzzer/20250714-linuxkm-MODULE_LICENSE
...
20250714-linuxkm-MODULE_LICENSE
2025-07-14 17:23:22 -06:00
9430c8a5a1
Merge pull request #9003 from embhorn/cov_531298
...
Fix blake2b_final coverity reports
2025-07-14 16:20:19 -06:00
049e88b525
linuxkm/module_hooks.c: use MODULE_LICENSE("GPL").
2025-07-14 16:30:13 -05:00
af3296a836
wc_PKCS7_KeyWrap(): mark pointers as to const and check for NULL
2025-07-14 17:28:23 -04:00
2c341a5806
Merge pull request #8990 from JacobBarthelmeh/license
...
updating license from GPLv2 to GPLv3
(linuxkm tweak to `MODULE_LICENSE("GPL")` to follow.)
2025-07-14 16:14:39 -05:00
Ruby Martin
Josh Holtrop
Sean Parkinson
Daniel Pouzzner
JacobBarthelmeh
Lealem Amedie
Albert Ribes
jordan
Hideki Miyazaki
David Garske
Colton Willey
gojimmypi
Anthony Hu