Anthony Hu
42fb041890
Add missing call to wolfSSL_RefFree in FreeCRL
2025-05-08 13:11:37 -04:00
David Garske
1e3718ea7b
Merge pull request #8655 from SparkiDev/asn1_oid_update
...
ASN.1 OIDs and sum: Change algorithm for sum
2025-05-07 11:43:54 -07:00
Sean Parkinson
5e5f486a4c
Merge pull request #8732 from dgarske/stm32_hash_status
...
Fix for STM32 hash status check logic (also fix NO_AES_192 and NO_AES_256)
2025-05-07 20:56:18 +10:00
Sean Parkinson
4b73e70515
Merge pull request #8706 from dgarske/win_crypt_rng
...
New build option to allow reuse of the windows crypt provider handle …
2025-05-07 20:55:07 +10:00
Sean Parkinson
112351667a
ASN.1 OIDs and sum: Change algorithm for sum
...
New sum algorithm has no clashes at this time.
Old algorithm enabled by defining: WOLFSSL_OLD_OID_SUM.
New oid_sum.h file generated with scripts/asn1_oid_sum.pl.
Added bunch of OID names into asn1 example.
2025-05-07 08:32:08 +10:00
David Garske
213c43b0fc
Merge pull request #8715 from padelsbach/ssl-certman-codesonar
...
Speculative fix for CodeSonar overflow issue in ssl_certman.c
2025-05-06 14:49:57 -07:00
David Garske
05a3557b2b
Merge pull request #8703 from lealem47/zd19592
...
Attempt wolfssl_read_bio_file in read_bio even when XFSEEK is available
2025-05-06 14:42:19 -07:00
David Garske
d04ab3757e
New build option WIN_REUSE_CRYPT_HANDLE to allow reuse of the windows crypt provider handle. Seeding happens on any new RNG or after WC_RESEED_INTERVAL. If using threads make sure wolfSSL_Init() or wolfCrypt_Init() is called before spinning up threads. ZD 19754. Fixed minor implicit cast warnings in internal.c. Add missing hpke.c to wolfssl VS project.
2025-05-06 14:38:02 -07:00
Daniel Pouzzner
982a7600c2
src/tls13.c: in DoTls13ServerHello() WOLFSSL_ASYNC_CRYPT path, fix -Wdeclaration-after-statement caused by fallthrough definition;
...
.github/workflows: update async.yml, multi-arch.yml, multi-compiler.yml, no-malloc.yml, opensslcoexist.yml, and os-check.yml, with -pedantic and related flags, and add --enable-riscv-asm to multi-arch.yml RISC-V scenario;
configure.ac: clarify error message for "SP ASM not available for CPU."
2025-05-06 14:49:32 -05:00
Sean Parkinson
428915e492
Merge pull request #8719 from philljj/coverity_april_2025
...
Fix coverity warnings
2025-05-06 10:11:27 +10:00
David Garske
0f4ce03c28
Fixes for NO_AES_192 and NO_AES_256. Added CI test. Fixed bad BUILD_ logic for ADH-AES256-GCM-SHA384.
2025-05-05 14:36:36 -07:00
jordan
efd5405d0e
coverity: fix check_after_deref, assignment_where_comparison_intended, uninit vars, return values, etc.
2025-05-05 13:18:29 -05:00
jordan
baa7efa8af
Fix coverity uninit var warnings, add missing priv key ForceZero.
2025-05-05 13:14:39 -05:00
Lealem Amedie
ac139dfe49
Sniffer: Add multiple sessions by removing cached check
2025-05-01 14:27:35 -04:00
Paul Adelsbach
b4d94429d1
Speculative fix for CodeSonar overflow issue
2025-04-25 12:58:23 -07:00
David Garske
81cd5df263
Fixes to support _WIN32_WCE (VS 2008 with WinCE 6.0/7.0). Should have been part of #8621 .
2025-04-24 08:18:44 -07:00
JacobBarthelmeh
c22505a71a
Merge pull request #8700 from embhorn/rel_fixes_cs
...
Fixes from CodeSonar report
2025-04-23 11:36:15 -06:00
Lealem Amedie
882eaa5df8
Attempt wolfssl_read_bio_file in read_bio even when XFSEEK is available
2025-04-22 16:56:32 -06:00
JacobBarthelmeh
43cdc1be74
init buffer before creating digest value
2025-04-22 14:34:16 -06:00
Eric Blankenhorn
66b9256f86
Fixes from CodeSonar report
2025-04-22 14:43:01 -05:00
Daniel Pouzzner
e6f8de7d31
Merge pull request #8699 from JacobBarthelmeh/bn
...
revert BN_CTX_init stub for older applications
2025-04-22 14:21:01 -05:00
Daniel Pouzzner
25cd009a42
Merge pull request #8695 from JacobBarthelmeh/coverity
...
null derefernce sanity checks and control flow issue
2025-04-22 11:37:51 -05:00
JacobBarthelmeh
33da20c3ec
revert BN_CTX_init stub for older applications
2025-04-22 09:22:40 -06:00
Daniel Pouzzner
543ba268a4
Merge pull request #8558 from julek-wolfssl/openssh-9.9-fix
...
wolfSSL_EVP_PKEY_cmp: only compare the public keys
2025-04-19 01:51:49 -05:00
JacobBarthelmeh
d481086910
restore internal hashes pointer on error, CID 515542
2025-04-18 16:52:25 -06:00
JacobBarthelmeh
f834b9b08a
add null sanity check to wolfSSL_SESSION_get_max_early_data, CID 516264
2025-04-18 16:31:33 -06:00
JacobBarthelmeh
73c286ae46
fix possible null dereference, CID 518681
2025-04-18 16:02:46 -06:00
Juliusz Sosinowicz
43c564d48b
dtls13: send acks with correct record number order
2025-04-18 14:56:59 -05:00
Daniel Pouzzner
74232f5fe7
Merge pull request #8631 from julek-wolfssl/gh/8579-2
...
dtls13: additional epoch checks
2025-04-18 14:49:00 -05:00
Daniel Pouzzner
5e1f713995
Merge pull request #8691 from lealem47/ecc521_minSz
...
Fix SetMinEccKey_Sz to allow for P-521 minimum
2025-04-17 14:31:56 -05:00
Juliusz Sosinowicz
e709cb4cf2
_Dtls13HandshakeRecv: cast handshakeType
2025-04-17 19:21:59 +02:00
Juliusz Sosinowicz
3f560036d6
dtls13: additional epoch checks
2025-04-17 18:18:01 +02:00
Lealem Amedie
1b80c03fe9
Change to short type
2025-04-17 10:05:40 -06:00
Lealem Amedie
429f435593
Fix SetMinEccKey_Sz to allow P-521 minimum
2025-04-17 08:22:20 -06:00
David Garske
404fafd598
Merge pull request #8677 from SparkiDev/regression_fixes_17
...
Regression test fixes
2025-04-16 20:20:28 -07:00
Sean Parkinson
4f3ce188b6
Memory Zero checks: add check call
...
Must check memory is zeroed after Tls13DeriveKey() call.
2025-04-17 10:53:49 +10:00
Juliusz Sosinowicz
9b3b874aba
tls13: clear resuming flag when we don't have a way to resume
2025-04-16 18:14:09 +02:00
Sean Parkinson
3ac05dea09
Regression test fixes
...
dtls13.c: LowResTimer() not available when NO_ASN_TIME is defined.
api.c: Add certificate and key to use for when only Ed25519 or Ed448.
asn.c: Casts needed for g++ compile.
mem_track.c: Casts needed for g++ compile.
2025-04-16 21:46:48 +10:00
Sean Parkinson
5e8d018ff7
Merge pull request #8659 from kojiws/improve_mldsa_priv_key_import
...
Improve ML-DSA private key import and the test
2025-04-16 18:21:00 +10:00
Koji Takeda
c05c827d6b
Add a space after if and for
2025-04-16 16:26:52 +09:00
Sean Parkinson
f458930d24
Merge pull request #8653 from kareem-wolfssl/zd19696
...
Make trusted_ca_keys check opt-in.
2025-04-16 10:45:01 +10:00
gojimmypi
241a1ed360
Introduce and move new Arduino examples and configuration updates
2025-04-12 15:38:37 +02:00
Koji Takeda
1252d69a9a
Remove trailing spaces
2025-04-12 17:09:36 +09:00
Koji Takeda
29482a3e4d
Fix a logic
2025-04-12 13:12:36 +09:00
Koji Takeda
770b6cb9e7
Fix too long lines
2025-04-12 10:58:13 +09:00
Koji Takeda
85c71dacb1
Update src/ssl_load.c
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-04-12 10:01:17 +09:00
Daniel Pouzzner
ed5d8f8e6b
update several files in wolfcrypt/src/port/arm to include libwolfssl_sources.h;
...
update wolfcrypt/src/port/af_alg, wolfcrypt/src/port/devcrypto, and wolfcrypt/src/port/kcapi to include libwolfssl_sources.h;
remove a slew of includes across lib sources made redundant by libwolfssl_sources.h.
2025-04-11 13:57:23 -05:00
Daniel Pouzzner
29dcf42309
src/internal.c, tests/api.c: add missing casts for C++ compatibility (fixes "invalid conversion" errors).
2025-04-11 09:33:20 -05:00
Koji Takeda
a3862f0e59
Improve ML-DSA private key import
2025-04-11 16:28:54 +09:00
David Garske
368dcf51af
Merge pull request #8612 from JacobBarthelmeh/pkcs8
...
account for existing pkcs8 header
2025-04-10 16:03:49 -07:00