JeremiahM37
3c1c4792da
tls fix for set_groups
2025-06-05 22:04:49 +02:00
JacobBarthelmeh
c207e2d198
Merge pull request #8838 from miyazakh/fsp_fix2
...
Fix Renesas SCE on RA6M4
2025-06-05 09:43:05 -06:00
Brett
89be92f1a8
formatting
2025-06-04 18:29:05 -06:00
Brett
0e2a3fd0b6
add missing error trace macro
2025-06-04 16:56:16 -06:00
Brett
bc8eeea703
prevent apple native cert validation from overriding error codes other than ASN_NO_SIGNER_E
2025-06-04 15:48:15 -06:00
Hideki Miyazaki
6d2a8b3f4c
ready-for-use flag fix
2025-06-04 13:41:01 +09:00
Ruby Martin
9864959e41
create policy for WOLFSSL_APPLE_NATIVE_CERT_VALIDATION, domain name
...
checking
2025-06-03 10:08:58 -06:00
Sean Parkinson
8ea01056c3
Merge pull request #8788 from julek-wolfssl/gh/8765
...
tls13: handle malformed CCS and CCS before CH
2025-05-28 09:45:09 +10:00
David Garske
6de7bb74ed
Merge pull request #8787 from julek-wolfssl/refactor-GetHandshakeHeader
...
Refactor GetHandshakeHeader/GetHandShakeHeader into one
2025-05-27 15:26:24 -07:00
Juliusz Sosinowicz
2ec6b92b41
tls13: handle malformed CCS and CCS before CH
...
- fix incorrect alert type being sent
- error out when we receive a CCS before a CH
- error out when we receive an encrypted CCS
2025-05-23 15:04:22 +02:00
Sean Parkinson
999641d9b1
Merge pull request #8642 from rizlik/dtls_no_span_records
...
DTLS: drop records that span datagrams
2025-05-23 14:57:24 +10:00
Ruby Martin
5352e100db
Add NO_OLD_TLS macroguard, remove dead code
2025-05-22 14:21:38 -06:00
Juliusz Sosinowicz
5e7ef142e8
Refactor GetHandshakeHeader/GetHandShakeHeader into one
2025-05-20 13:23:14 +02:00
Juliusz Sosinowicz
83ce63ac1a
TLSX_UseSupportedCurve: Check group correctness outside of TLS 1.3 too
2025-05-19 14:19:59 +02:00
Marco Oliverio
cbe1fb2c62
dtls: drop DTLS messages that span across datagrams
...
A new macro "WOLFSSL_DTLS_RECORDS_CAN_SPAN_DATAGRAMS" restores the old
behaviour.
2025-05-19 10:28:13 +02:00
Marco Oliverio
80bdd1736a
internal: refactor out Decryption in DoDecrypt function
...
To uniform error handling for the SanityCheckCipherText check.
2025-05-19 10:25:24 +02:00
Daniel Pouzzner
91af9073b0
Merge pull request #8777 from rizlik/dtls_reject_v11
...
Drop DTLS packets with bogus minor version number
2025-05-16 14:45:25 -05:00
David Garske
a1b644202c
Merge pull request #8759 from anhu/index_idx
...
Rename variable index to idx to avoid conflicting declaration.
2025-05-15 11:01:27 -07:00
David Garske
63c3c547b6
Merge pull request #8768 from lealem47/zd19853
...
Add sniffer cleanup API's
2025-05-15 11:01:19 -07:00
Marco Oliverio
22f41a8dbb
Drop DTLS packets with bogus minor version number
2025-05-15 19:50:36 +02:00
Anthony Hu
a814683684
Rename variable index to idx to avoid conflicting declaration.
2025-05-14 18:26:37 -04:00
Lealem Amedie
4af0e14e7b
Add ssl_RemoveSession API
2025-05-14 12:09:41 -06:00
Daniel Pouzzner
55460a5261
wolfssl/wolfcrypt/logging.h and wolfcrypt/src/logging.c: add
...
WOLFSSL_DEBUG_PRINTF() macro adapted from wolfssl_log(), refactor
wolfssl_log() to use it, and move printf setup includes/prototypes from
logging.c to logging.h;
src/ssl_load.c: add source_name arg and WOLFSSL_DEBUG_CERTIFICATE_LOADS clauses
to ProcessBuffer() and ProcessChainBuffer(), and pass reasonable values from
callers;
remove expired "Baltimore CyberTrust Root" from certs/external/ca_collection.pem
and certs/external/baltimore-cybertrust-root.pem.
2025-05-13 20:30:48 -05:00
Lealem Amedie
5a4c1d99a3
Expose RemoveStaleSessions sniffer API
2025-05-13 15:16:02 -06:00
David Garske
e09e3f6098
Fix for Curve25519 and static ephemeral issue with curve25519 blinding. Added new test case (used by wolfKeyMgr).
2025-05-12 10:26:31 -07:00
David Garske
407efd3c5d
Merge pull request #8710 from JacobBarthelmeh/codesonar
...
ech get length fix and x509 extension print temporary buffer size
2025-05-09 11:41:24 -07:00
David Garske
7cd080b421
Merge pull request #8713 from JacobBarthelmeh/scan
...
use proper heap hint when free'ing CRL in error case
2025-05-09 11:23:20 -07:00
David Garske
0adb6eb788
Merge pull request #8748 from ColtonWilley/pkcs7_x509_store_update
...
Update PKCS7 to use X509 STORE for internal verification
2025-05-09 11:22:53 -07:00
JacobBarthelmeh
77c0f79cbe
adjust ech get length only case
2025-05-08 13:50:42 -06:00
JacobBarthelmeh
9fb34d76c2
adjust size of temporary buffer
2025-05-08 13:50:42 -06:00
Anthony Hu
42fb041890
Add missing call to wolfSSL_RefFree in FreeCRL
2025-05-08 13:11:37 -04:00
Colton Willey
9e7a4f6518
Update PKCS7 to use X509 STORE for internal verification instead of underlying CM
2025-05-08 09:45:58 -07:00
David Garske
1e3718ea7b
Merge pull request #8655 from SparkiDev/asn1_oid_update
...
ASN.1 OIDs and sum: Change algorithm for sum
2025-05-07 11:43:54 -07:00
Sean Parkinson
5e5f486a4c
Merge pull request #8732 from dgarske/stm32_hash_status
...
Fix for STM32 hash status check logic (also fix NO_AES_192 and NO_AES_256)
2025-05-07 20:56:18 +10:00
Sean Parkinson
4b73e70515
Merge pull request #8706 from dgarske/win_crypt_rng
...
New build option to allow reuse of the windows crypt provider handle …
2025-05-07 20:55:07 +10:00
Sean Parkinson
112351667a
ASN.1 OIDs and sum: Change algorithm for sum
...
New sum algorithm has no clashes at this time.
Old algorithm enabled by defining: WOLFSSL_OLD_OID_SUM.
New oid_sum.h file generated with scripts/asn1_oid_sum.pl.
Added bunch of OID names into asn1 example.
2025-05-07 08:32:08 +10:00
David Garske
213c43b0fc
Merge pull request #8715 from padelsbach/ssl-certman-codesonar
...
Speculative fix for CodeSonar overflow issue in ssl_certman.c
2025-05-06 14:49:57 -07:00
David Garske
05a3557b2b
Merge pull request #8703 from lealem47/zd19592
...
Attempt wolfssl_read_bio_file in read_bio even when XFSEEK is available
2025-05-06 14:42:19 -07:00
David Garske
d04ab3757e
New build option WIN_REUSE_CRYPT_HANDLE to allow reuse of the windows crypt provider handle. Seeding happens on any new RNG or after WC_RESEED_INTERVAL. If using threads make sure wolfSSL_Init() or wolfCrypt_Init() is called before spinning up threads. ZD 19754. Fixed minor implicit cast warnings in internal.c. Add missing hpke.c to wolfssl VS project.
2025-05-06 14:38:02 -07:00
Daniel Pouzzner
982a7600c2
src/tls13.c: in DoTls13ServerHello() WOLFSSL_ASYNC_CRYPT path, fix -Wdeclaration-after-statement caused by fallthrough definition;
...
.github/workflows: update async.yml, multi-arch.yml, multi-compiler.yml, no-malloc.yml, opensslcoexist.yml, and os-check.yml, with -pedantic and related flags, and add --enable-riscv-asm to multi-arch.yml RISC-V scenario;
configure.ac: clarify error message for "SP ASM not available for CPU."
2025-05-06 14:49:32 -05:00
Sean Parkinson
428915e492
Merge pull request #8719 from philljj/coverity_april_2025
...
Fix coverity warnings
2025-05-06 10:11:27 +10:00
David Garske
0f4ce03c28
Fixes for NO_AES_192 and NO_AES_256. Added CI test. Fixed bad BUILD_ logic for ADH-AES256-GCM-SHA384.
2025-05-05 14:36:36 -07:00
jordan
efd5405d0e
coverity: fix check_after_deref, assignment_where_comparison_intended, uninit vars, return values, etc.
2025-05-05 13:18:29 -05:00
jordan
baa7efa8af
Fix coverity uninit var warnings, add missing priv key ForceZero.
2025-05-05 13:14:39 -05:00
JacobBarthelmeh
203758695f
use proper heap hint when free'ing CRL in error case
2025-05-05 11:21:03 -06:00
Lealem Amedie
ac139dfe49
Sniffer: Add multiple sessions by removing cached check
2025-05-01 14:27:35 -04:00
Paul Adelsbach
b4d94429d1
Speculative fix for CodeSonar overflow issue
2025-04-25 12:58:23 -07:00
David Garske
81cd5df263
Fixes to support _WIN32_WCE (VS 2008 with WinCE 6.0/7.0). Should have been part of #8621 .
2025-04-24 08:18:44 -07:00
JacobBarthelmeh
c22505a71a
Merge pull request #8700 from embhorn/rel_fixes_cs
...
Fixes from CodeSonar report
2025-04-23 11:36:15 -06:00
Lealem Amedie
882eaa5df8
Attempt wolfssl_read_bio_file in read_bio even when XFSEEK is available
2025-04-22 16:56:32 -06:00
