be02b1ea72
Added check in TLX_Parse to check if KeyShare extension is present
...
SupportedGroups must be present too (and viceversa).
From RFC 8446 Section 9.2.
2025-09-29 13:10:32 +02:00
97c094f802
linuxkm/: accommodate API change from k[v]realloc_noprof() to k[v]realloc_node_align_noprof() expected in 6.18+ (current linux-next).
2025-09-28 11:46:17 -05:00
eda6c184bb
Merge pull request #9219 from kareem-wolfssl/zd20538
...
Fix building with --enable-keygen --enable-rsavfy.
2025-09-26 14:08:33 -07:00
224dbb75d0
Enable base16 & 64 encoding when wolfGuard is enabled
2025-09-26 14:49:51 -06:00
ef989a4241
Merge remote-tracking branch 'upstream/master' into zd19563_verify
2025-09-26 11:13:28 -07:00
d2537a883f
Always add failed certs back to cert store.
2025-09-26 11:13:19 -07:00
b302e8edd0
Move CERT_FILETYPE definition, use it in echoserver.
2025-09-26 10:58:51 -07:00
28aef2f4dd
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into zd20038_3
2025-09-26 10:56:42 -07:00
f336e8fc5a
Rust wrapper: Add aes module
2025-09-26 13:18:51 -04:00
f798a585d9
Abort connection if we are about to send the same CH
2025-09-26 12:08:53 +02:00
b982f86d2f
Merge pull request #8818 from JacobBarthelmeh/tx
...
fix for threadx warning and add compile test
2025-09-26 08:33:38 +10:00
af9a06e9bf
Merge remote-tracking branch 'upstream/master' into zd19563_verify
2025-09-25 10:39:11 -07:00
a3b29ed99f
Merge remote-tracking branch 'upstream/master' into zd20038_3
2025-09-25 10:32:13 -07:00
193e5205ed
Fix documentation typo for wc_ed25519_export_public.
2025-09-25 10:31:18 -07:00
cac309d0d8
Merge pull request #9244 from douzzer/20250924-configure-fips-and-linuxkm-and-rdseed-options
...
20250924-configure-fips-and-linuxkm-and-rdseed-options
2025-09-25 11:03:22 -06:00
54a52f0482
remove sed command for -Werror and refactor threadx.yml workflow
2025-09-25 09:27:16 -06:00
677eeb31e4
add netxduo compile test
2025-09-25 09:27:16 -06:00
50835c14a2
fix warning of const char* passed as char*
2025-09-25 09:27:16 -06:00
40b9fc35f9
handle unsupported fsl algo
2025-09-25 09:14:59 -06:00
65d4e01ad6
Merge pull request #9212 from holtrop/rust-wc-random
...
Rust wrapper: add wolfssl::wolfcrypt::random module
2025-09-25 09:10:07 -06:00
8516411ff2
configure.ac: add --enable-wolfguard, --enable-intelrdseed, --enable-fips=v5.2.3, and --enable-fips=v5.2.4;
...
remove obsolete/wrong linuxkm incompatible-feature tests and errors for enable_compkey/ENABLED_COMPKEY/HAVE_COMP_KEY;
tweak ENABLED_ENTROPY_MEMUSE_DEFAULT logic to check for RDRAND/RDSEED.
2025-09-24 22:39:12 -05:00
561fead861
Merge pull request #9235 from anhu/rpi_WC_RESEED_INTERVAL
...
Fixing up a small documentation omission.
2025-09-25 10:48:37 +10:00
b5a914b6c2
Merge pull request #9239 from SKlimaRA/SKlimaRA/zd20556
...
fixes zd20556.
2025-09-24 13:53:18 -05:00
1cfafc2a52
fixes from zd20556
2025-09-24 12:03:39 +02:00
e168714123
Merge pull request #9236 from douzzer/20250923-wc_XChaCha20Poly1305_crypt_oneshot-empty-message
...
20250923-wc_XChaCha20Poly1305_crypt_oneshot-empty-message
2025-09-24 11:59:12 +10:00
ae760923e3
Merge pull request #9208 from effbiae/set-cert-type
...
refactor to WOLFSSL_SET_CERT_TYPE
2025-09-24 10:00:03 +10:00
9cf91e157c
Merge pull request #9218 from gojimmypi/pr-server-sm2-cert
...
Generate server-sm2-cert.der
2025-09-24 09:47:56 +10:00
aa87b35964
Mark variables as volatile
...
Ensures compiler optimizers don't stop code from being constant time.
2025-09-24 08:47:20 +10:00
51a7531b6a
Merge pull request #9232 from LinuxJedi/fix-deb-builds
...
Cleanup debian build
2025-09-24 08:24:51 +10:00
26c9908504
Use string literals in tests, fix add CA functions
2025-09-24 00:11:55 +02:00
4af6eb4f2b
wolfcrypt/src/chacha20_poly1305.c: in wc_XChaCha20Poly1305_crypt_oneshot(), allow empty message.
2025-09-23 17:06:22 -05:00
93955a2ba7
Fixing up a small documentation omission.
2025-09-23 15:24:50 -04:00
7084728482
Merge pull request #9230 from douzzer/20250922-linuxkm-ignore-WOLFSSL_DH_GEN_PUB
...
20250922-linuxkm-ignore-WOLFSSL_DH_GEN_PUB
2025-09-23 10:07:03 -06:00
a4d0a777bc
Generate server-sm2-cert.der
2025-09-23 08:32:21 -07:00
a8fb94b425
restore inner server name in TLSX_WriteWithEch
2025-09-23 23:30:25 +10:00
4535572428
Use memio in tests, fix ifdef, fix typos
2025-09-23 11:50:21 +02:00
b20f3dac57
refactor to set_cert_type
2025-09-23 19:27:22 +10:00
b8df4d84e9
Cleanup debian build
...
* CFLAGS get pulled in anyway with configure options, or part of the
env, we don't need to add them
* Path handling went wrong in one specific platform test run
2025-09-23 06:39:04 +01:00
e763dcc33b
Merge pull request #9228 from LinuxJedi/stm32-rtc
...
Fix STM32 benchmark endless loop after 1 hour
2025-09-23 12:05:52 +10:00
e497d28ae1
Merge pull request #9223 from kareem-wolfssl/zd20543_4
...
Fix non constant compare of TLS 1.3 binder, check for negative dst_len in wc_XChaCha20Poly1305_crypt_oneshot.
2025-09-23 09:09:33 +10:00
006fe05305
linuxkm/lkcapi_dh_glue.c: don't test for WOLFSSL_DH_GEN_PUB -- assume that wc_DhGeneratePublic() will be available when defined(WOLFSSL_DH_EXTRA), and fail at compile time if not.
2025-09-22 14:06:07 -05:00
4dfa75fbfa
Updating support/wolfssl.pc.in, CMakelist.txt, and configure.ac to track missing apple options in the resulting wolfssl.pc file by adding new PC_LIBS_PRIVATE to track options
2025-09-22 12:00:33 -06:00
e3fbb24713
Fix malformed DTLS comment syntax
2025-09-22 12:59:30 +02:00
504c51f354
Fix STM32 benchmark endless loop after 1 hour
...
If the STM32 has an RTC, this is used to time the execution of each
benchmark item. It was only multiplying hours by 24 to get seconds, so
after one hour the amount of seconds went to less than 3600. Therefore
the benchmark thought negative time elapsed and would never end.
2025-09-21 08:19:16 +01:00
4ca5c315fc
Merge pull request #9222 from douzzer/20250919-GetEcDiffieHellmanKea-clang-analyzer-deadcode.DeadStores
...
20250919-GetEcDiffieHellmanKea-clang-analyzer-deadcode.DeadStores
2025-09-19 22:01:31 -06:00
fa4312edef
curl: document tiny-curl config a bit more.
2025-09-19 15:56:51 -05:00
d50593834b
Add fix for SHA HW on ESP-IDF v6
2025-09-19 12:04:46 -07:00
7afcf20077
Fix non constant compare of TLS 1.3 binder, check for negative dst_len in wc_XChaCha20Poly1305_crypt_oneshot.
2025-09-19 11:39:46 -07:00
4174f554be
src/internal.c: fix clang-analyzer-deadcode.DeadStores in GetEcDiffieHellmanKea().
2025-09-19 11:22:19 -05:00
5efc4a7cd0
Fix tests
2025-09-19 16:45:15 +02:00
Reda Chouk
Daniel Pouzzner
David Garske
Lealem Amedie
Kareem
Josh Holtrop
Juliusz Sosinowicz
Sean Parkinson
Kaleb Himes
JacobBarthelmeh
Stanislav Klima
Mattia Moffa
Anthony Hu
gojimmypi
effbiae
Andrew Hutchings
night1rider
jordan