wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-01-28 09:22:23 +01:00
Code Issues Packages Projects Releases Wiki Activity
15,989 Commits 12 Branches 184 Tags
4e1c39b4c6c38d9751e2ac85d68d76200e4a67ae
Commit Graph

5141 Commits

Author SHA1 Message Date
David Garske
4e1c39b4c6 Merge pull request #4701 from SparkiDev/asn_templ_fix_1 
ASN template: get compiling
 2021-12-24 07:42:56 -08:00
Sean Parkinson
4c6af465c4 ASN template: get compiling 2021-12-24 11:21:18 +10:00
David Garske
a75e152b93 Merge pull request #4698 from JacobBarthelmeh/Jenkins 
fix for user_settings_all.h build on 'VS' and build with libz + pkcs7 test
 2021-12-23 16:54:40 -08:00
David Garske
21c8b19fc2 Merge pull request #4696 from JacobBarthelmeh/build_tests 
fix for a couple reports from build_tests
 2021-12-23 13:42:06 -08:00
David Garske
57d2555ac8 Merge pull request #4695 from douzzer/20211222-fips-config-update-and-fix-test_RsaDecryptBoundsCheck 
fips config update and test-driven cleanup
 2021-12-23 10:38:36 -08:00
JacobBarthelmeh
f9c9f4c840 refactor IP macro defines 2021-12-23 09:59:05 -08:00
Chris Conlon
9892f1f2d5 Merge pull request #4679 from dgarske/fips_ecc_pct 2021-12-23 10:27:51 -07:00
JacobBarthelmeh
63df8f0836 add fe_low_mem.c to wolfssl vs project and fix a couple warnings 2021-12-23 16:55:51 +00:00
David Garske
40d5bd052f Merge pull request #4693 from embhorn/zd13433 
Fix to init ctx in wc_Des3_SetKey
 2021-12-23 07:41:13 -08:00
Daniel Pouzzner
a5b3daf216 fix whitespace. 2021-12-22 17:34:06 -06:00
Eric Blankenhorn
29c18a110b Fix to init ctx in wc_Des3_SetKey 2021-12-22 17:05:58 -06:00
David Garske
11e8d729c2 Merge pull request #4685 from SparkiDev/sp_gen_fix_1 
SP gen: Regenerate
 2021-12-22 15:02:03 -08:00
Chris Conlon
8670e33baf Merge pull request #4651 from TakayukiMatsuo/tsip_sce 2021-12-22 15:00:32 -07:00
David Garske
38214bd083 Disable the FIPS consistency checks in ECC and DH for key generation by default. 2021-12-22 10:06:19 -08:00
David Garske
8d4c22abda Merge pull request #4687 from julek-wolfssl/asn-template-var-init 
`items` needs to be initialized as the compiler complains
 2021-12-22 08:58:54 -08:00
David Garske
9d137668c7 Merge pull request #4675 from julek-wolfssl/openssh-8.8 
Fix macro name conflicts with openssh
 2021-12-22 08:31:36 -08:00
Juliusz Sosinowicz
8435eb4644 Add WC_ namespace to variable handling defines 2021-12-22 12:16:02 +01:00
Juliusz Sosinowicz
618599656f items needs to be initialized as the compiler complains 2021-12-22 10:42:48 +01:00
TakayukiMatsuo
cd96330f2a Integrate Renesas TSIP specific code into Renesas common logics 2021-12-22 13:18:32 +09:00
Sean Parkinson
80e291fcd1 Curve448: add casts for Windows 2021-12-22 12:57:15 +10:00
Juliusz Sosinowicz
dd9b1afb72 Remove magic numbers from WOLFSSL_ASN_TEMPLATE code (#4582) 
* pkcs8KeyASN and other misc asn fixes

- Test fixes for testing with `USE_CERT_BUFFERS_1024`

* intASN

* bitStringASN

* objectIdASN

* algoIdASN

* rsaKeyASN

* pbes2ParamsASN

* pbes1ParamsASN

* pkcs8DecASN

* p8EncPbes1ASN

* rsaPublicKeyASN

* dhParamASN

* dhKeyPkcs8ASN

* dsaKeyASN

* dsaPubKeyASN

- Add `wc_SetDsaPublicKey` without header testing

* dsaKeyOctASN

* rsaCertKeyASN

* eccCertKeyASN

* rdnASN

* certNameASN

* digestInfoASN

* otherNameASN

* altNameASN

* basicConsASN

* crlDistASN

* accessDescASN

* authKeyIdASN

* keyUsageASN

* keyPurposeIdASN

* subTreeASN

* nameConstraintsASN

* policyInfoASN

* certExtHdrASN

* certExtASN

* x509CertASN

* reqAttrASN

* strAttrASN

* certReqASN

* eccPublicKeyASN

* edPubKeyASN

* ekuASN

* nameASN

* certExtsASN

* sigASN

* certReqBodyASN_IDX_EXT_BODY

* dsaSigASN

* eccSpecifiedASN

* eccKeyASN

* edKeyASN

* singleResponseASN

* respExtHdrASN

* ocspRespDataASN

* ocspBasicRespASN

* ocspResponseASN

* ocspNonceExtASN

* ocspRequestASN

* revokedASN

* crlASN

* pivASN

* pivCertASN

* dateASN

* `wc_SetDsaPublicKey` was not including `y` in the sequence length

* All index names changed to uppercase

* Shorten names in comments

* Make sure extensions have sequence header when in cert gen

* Fix/refactor size calc in `SetNameEx`

* Pad blocks for encryption

* Add casting for increased enum portability

* Use stack for small ASN types
 2021-12-22 11:28:01 +10:00
David Garske
bf612c075b Merge pull request #4668 from ejohnstown/kcapi-ecdsa 
KCAPI ECDSA Memory
 2021-12-21 15:32:33 -08:00
Sean Parkinson
395c5815bd SP gen: Regenerate 
Put back in fix for SAKKE.
 2021-12-22 08:24:33 +10:00
JacobBarthelmeh
bbfcd0cac8 fix build warning with af_alg 2021-12-21 10:20:34 -08:00
JacobBarthelmeh
d29cdd3537 fix for --enable-ip-alt-name build 2021-12-21 09:53:58 -08:00
Sean Parkinson
9f2419246e SP ARM64: P-384 prime specific Montogmery Reduction 
Improves performance
 2021-12-21 10:18:12 +10:00
David Garske
3644d97dd8 Merge pull request #4613 from SparkiDev/sp_div_max 
SP math all: div handling of length of dividend
 2021-12-20 15:10:35 -08:00
David Garske
360a513696 Merge pull request #4553 from SparkiDev/sp_mont_inv_order_fix 
SP: fix when mont_mul_order is defined
 2021-12-20 15:09:08 -08:00
David Garske
0ce9703768 Merge pull request #4666 from SparkiDev/ecc_enc_mem 
ECC: better protection when using encrypted memory
 2021-12-20 14:48:13 -08:00
David Garske
d588437504 Merge pull request #4677 from anhu/oqs_to_pqc 
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC
 2021-12-20 13:00:30 -08:00
David Garske
b290e8089c Merge pull request #4672 from SparkiDev/sp_c_mont_red 
SP C: specific Montgomery reduction code for P256 and P384
 2021-12-20 09:50:54 -08:00
Anthony Hu
7d4c13b9a4 --with-liboqs now defines HAVE_LIBOQS and HAVE_PQC 
AKA: The Great Rename of December 2021
 2021-12-20 11:48:03 -05:00
Sean Parkinson
6d2da74c21 Merge pull request #4625 from dgarske/zd13208 
Fix for PKCS7 verify to handle content type OID with indef BER encoding
 2021-12-20 14:49:59 +10:00
David Garske
ce4f436d0f Merge pull request #4587 from SparkiDev/dis_algs_fix_1 
Disable algorithms: fixes
 2021-12-19 20:12:30 -08:00
David Garske
2477574a69 Fix for PKCS7 verify to handle pkcs7-data content type OID with indef BER encoding. ZD13208 2021-12-17 14:24:35 -08:00
David Garske
ab9eda636a Merge pull request #4671 from lealem47/remove-n 
Removing extra \n from WOLFSSL_LEAVE and WOLFSSL_ENTER
 2021-12-17 14:04:42 -08:00
John Safranek
b45f1ed761 KCAPI ECDSA Memory 
Use page aligned memory when using ECDSA signing and verify.
 2021-12-17 11:11:16 -08:00
John Safranek
771647615a Merge pull request #4669 from douzzer/rehab-configure-fips 
FIPS configure cleanup
 2021-12-17 08:58:44 -08:00
David Garske
bd515cd3a6 Merge pull request #4637 from SparkiDev/sp_c32_rsa 
SP C RSA: normalize tmpa after conditionally adding p
 2021-12-16 18:54:28 -08:00
Sean Parkinson
6cac0ea5a9 SP C: specific Montgomery reduction code for P256 and P384 
Improves performance of 32-bit and 64-bit SP C code.
 2021-12-17 12:00:16 +10:00
Sean Parkinson
0b2b218de7 ECC: better protection when using encrypted memory 
Added new ECC scalar multiplication implementation.
 2021-12-17 08:30:45 +10:00
Lealem Amedie
a79440b95a Removing extra \n from WOLFSSL_LEAVE and WOLFSSL_ENTER 2021-12-16 13:30:43 -07:00
Daniel Pouzzner
e35c3c0d71 wolfcrypt/src/wc_port.c: fix whitespace. 2021-12-16 13:01:01 -06:00
Daniel Pouzzner
b7307e0ca5 ecc.c: small stack refactor for mp_int on the stack in wc_ecc_gen_deterministic_k(). 2021-12-16 13:00:10 -06:00
Daniel Pouzzner
fed5eb1d94 ecc.c: fix a deadcode.DeadStores warning in wc_ecc_gen_deterministic_k(). 2021-12-16 13:00:10 -06:00
David Garske
dec78169bf Merge pull request #4658 from julek-wolfssl/apache-2.4.51 
Add Apache 2.4.51 support
 2021-12-16 08:52:10 -08:00
David Garske
ea2245c4d1 Merge pull request #4656 from JacobBarthelmeh/SanityChecks 
sanity check before reading policy constraint
 2021-12-16 08:42:19 -08:00
Chris Conlon
3bd737b9ef Merge pull request #4665 from miyazakh/sce_fsp_update_v3p5 2021-12-16 09:39:13 -07:00
Juliusz Sosinowicz
017d6cf464 Simplify error queue macros 2021-12-16 12:39:58 +01:00
Juliusz Sosinowicz
e78f7f734e Add Apache 2.4.51 support 
- Define `OPENSSL_COMPATIBLE_DEFAULTS` and `WOLFSSL_NO_OCSP_ISSUER_CHECK` for Apache config
- Fix `SSL_set_timeout` to match OpenSSL signature
- Implement `pkey` in `X509_INFO`
- Detect attempt to connect with plain HTTP
- Implement `wolfSSL_OCSP_request_add1_nonce`
- Set `ssl->cipher.bits` when calling `wolfSSL_get_current_cipher`
- Use custom flush method in `wolfSSL_BIO_flush` when set in BIO method
- Set the TLS version options in the `ssl->options` at the end of ClientHello parsing
- Don't modify the `ssl->version` when in a handshake (`ssl->msgsReceived.got_client_hello` is set)
- `wolfSSL_get_shutdown` returns a full bidirectional return when the SSL object is cleared. `wolfSSL_get_shutdown` calls `wolfSSL_clear` on a successful shutdown so if we detect a cleared SSL object, assume full shutdown was performed.
 2021-12-16 12:39:38 +01:00