6418 Commits

Author	SHA1	Message	Date
Sean Parkinson	56be09005f	Merge pull request #5427 from julek-wolfssl/dtls-timeout-and-closed-socket ... DTLS socket and timeout fixes	2022-08-05 08:13:14 +10:00
David Garske	99dad91344	Merge pull request #5435 from douzzer/20220803-gcc-12-ASAN ... 20220803-gcc-12-ASAN	2022-08-04 08:41:26 -07:00
Juliusz Sosinowicz	6d4f0146ca	Refactor sending alert on decryption failure ... Take sending of the alert outside of DecryptTls() and DecryptTls13(). The alert is now sent in ProcessReplyEx().	2022-08-04 12:06:26 +02:00
Juliusz Sosinowicz	ebcfa31993	Refactor checking socket type into a function	2022-08-04 11:35:27 +02:00
Juliusz Sosinowicz	3278210e1c	Silently discard DTLS msgs that fail decryption ... Don't send alerts when decryption fails inside a DTLS connection. TLS should always send a bad_record_mac when decryption fails.	2022-08-04 11:27:45 +02:00
Juliusz Sosinowicz	fd1e8c49eb	Reset timeout when reading a valid DTLS message ... - Increment the DTLS 1.3 timeout on a long timeout	2022-08-04 11:27:45 +02:00
Juliusz Sosinowicz	67d518544b	EmbedReceiveFrom: fix when using a TCP socket ... - recvfrom() returns 0 on a closed TCP socket - TCP sockets set WOLFSSL_CBIO_ERR_ISR on a timeout	2022-08-04 11:27:45 +02:00
Sean Parkinson	9ea3e173d0	Merge pull request #5277 from JacobBarthelmeh/req_attr ... expand subject name and req attribute support	2022-08-04 14:32:14 +10:00
David Garske	2c2a7750a4	Merge pull request #5414 from darktohka/feature/chacha20-poly1305-evp ... Integrate chacha20-poly1305 into the EVP interface	2022-08-03 18:21:17 -07:00
Sean Parkinson	1dc848d8e3	Merge pull request #5429 from dgarske/sniffer_async2 ... Fix for sniffer to ensure the session was polled before trying to reprocess it	2022-08-04 08:18:55 +10:00
Sean Parkinson	e32cfb79e5	Merge pull request #5419 from dgarske/aurix ... Support for Infineon AURIX IDE and minor compiler warnings.	2022-08-04 08:01:57 +10:00
Daniel Pouzzner	a7f0c92c0d	src/internal.c: in GetCipherKeaStr(), when gcc-12 or higher and __SANITIZE_ADDRESS__, wrap in a pragma to ignore -Wstringop-overread, due to false positives.	2022-08-03 12:30:29 -05:00
David Garske	664fe390d6	Merge pull request #5382 from icing/announce-pskkem-plain ... Announce TLSX_PSK_KEY_EXCHANGE_MODES in non-resuming ClientHello	2022-08-03 07:40:24 -07:00
David Garske	4937557ddc	Merge pull request #5422 from julek-wolfssl/dtls-async-fix ... Fix dtls + async multi-test misc errors	2022-08-03 07:24:58 -07:00
David Garske	53e0483e47	Support for Infineon AURIX IDE. Fixes for Aurix compiler warnings.	2022-08-02 16:53:47 -07:00
David Garske	9d2ed67a5c	Fix for sniffer to ensure the session was polled before trying to reprocess it.	2022-08-02 08:11:21 -07:00
Anthony Hu	fd412ed298	Fix so curl can do FTPS on TLS 1.3 with session resumption.	2022-08-02 10:51:14 -04:00
JacobBarthelmeh	99ed727179	add WOLFSSL_CERT_NAME_ALL macro guard and new values to set subject	2022-08-01 10:52:09 -07:00
Marco Oliverio	8878922f95	fix: dtls13: use correct buffer index to get epoch bits ... Fixes: d079662765	2022-08-01 14:24:20 +02:00
Juliusz Sosinowicz	fb2feee9b6	Fix dtls + async multi-test misc errors ... DTLS uses DtlsMsgStore() to process messages when using async crypto. A check was skipping the storing straight to DtlsMsgDrain().	2022-07-29 15:49:49 +02:00
Stefan Eissing	a943de7969	Changes after PR review. ... - removed additions to REAME.md - changed coding style of conditional PSKKEM announce as requested.	2022-07-29 11:26:08 +02:00
Stefan Eissing	c8008e29b9	Announce TLSX_PSK_KEY_EXCHANGE_MODES in non-resuming ClientHello. ... - can be reverted to previous style by defining NO_TLSX_PSKKEM_PLAIN_ANNOUNCE - QUIC interop testing reveals that at least QUIC stacks refrain from issuing session tickets unless the ClientHello shows this extension.	2022-07-29 11:18:56 +02:00
David Garske	da422eb422	Merge pull request #5406 from SparkiDev/mp_int_size ... Maths bit size: ensure size is right	2022-07-28 15:36:58 -07:00
Disyer	52cc73a6a4	Integrate chacha20-poly1305 into the EVP interface	2022-07-28 13:01:35 +03:00
Daniel Pouzzner	9256d6aa7c	src/internal.c: fixes for redundant assignments and preprocessor typo.	2022-07-27 14:42:00 -05:00
Daniel Pouzzner	c63e22701f	src/pk.c: fix type mismatch in return value.	2022-07-27 14:42:00 -05:00
Daniel Pouzzner	ed449d5b20	wolfsentry integration: avoid redundant and frivolous dispatches (ssl.c wolfSSL_connect(), wolfSSL_negotiate(), wolfSSL_accept(); tls13.c wolfSSL_connect_TLSv13(), wolfSSL_accept_TLSv13()).	2022-07-27 14:42:00 -05:00
David Garske	a56d25d58e	Merge pull request #5408 from julek-wolfssl/FreeAsyncCtx-location ... FreeAsyncCtx should only be called when advancing state	2022-07-27 09:59:28 -07:00
Juliusz Sosinowicz	e9b3b5936f	FreeAsyncCtx should only be called when advancing state ... The call to FreeAsyncCtx after SendBuffered was added to clean up state when we are ready to advance state. If we do not advance state, then clean up should be handled in the relevant state.	2022-07-27 14:14:22 +02:00
Sean Parkinson	460845ba49	Maths bit size: ensure size is right ... Ensure WOLFSSL_MAX_RSA_BITS works. Fix SP math size defines. Regression testing maths implementations.	2022-07-27 18:58:30 +10:00
Sean Parkinson	01aad13c38	Rework	2022-07-27 12:02:15 +10:00
David Garske	9c480ece66	Fix to use the new outTmp.	2022-07-26 15:48:58 -07:00
Marco Oliverio	856ea2ffc8	internal.c: RsaDec improvements	2022-07-26 20:59:01 +02:00
Marco Oliverio	1727efbc2c	internal.c: rsa decription buffer handling	2022-07-26 20:59:01 +02:00
David Garske	a98642ba61	Merge pull request #5383 from julek-wolfssl/negating-ciphersuites ... Expand SetCipherList()	2022-07-25 08:26:47 -07:00
Juliusz Sosinowicz	e7cd1562b4	Expand SetCipherList() ... - support disabling ciphersuites starting from the default list	2022-07-25 11:14:16 +02:00
Eric Blankenhorn	4369873540	Fix to copy TLS version with wolfSSL_write_dup	2022-07-22 15:09:35 -05:00
Juliusz Sosinowicz	6f2889c07d	BIO_eof returns 1 when no more data remains in the BIO	2022-07-22 13:24:32 +02:00
Sean Parkinson	dc8b796d1d	Merge pull request #5347 from dgarske/async_sess_tick ... Support for asynchronous session ticket callback	2022-07-22 08:04:48 +10:00
Marco Oliverio	163acb89af	dtls13: consider certificate_request processed on WC_PENDING_E ... The error is due to the message triggered by the processing of the message (Connect()->SendTls13Certificate/SendTls13CertificateVerify/SendTls13Verify). Consider the message processed to avoid double processing.	2022-07-21 12:00:18 -07:00
Marco Oliverio	aca83b42d7	fix: dtls13: send immediately post-handshake certificate request	2022-07-21 12:00:18 -07:00
Marco Oliverio	53dde1dafe	dtls12: async: store the message only if async is really used	2022-07-21 12:00:18 -07:00
David Garske	964ea85d3d	Fix typos for dynamic types in dtls13.c.	2022-07-21 12:00:18 -07:00
Marco Oliverio	dce63fdfb3	async: fix issue with DTLSv1.3	2022-07-21 12:00:16 -07:00
Marco Oliverio	07afc594a8	dtls13: aesthetic only changes	2022-07-21 11:55:50 -07:00
David Garske	b5ce0b021e	Merge pull request #5381 from rizlik/async_fix ... fix: async: don't rewind index if post-handshake connect() fails	2022-07-21 11:53:15 -07:00
JacobBarthelmeh	1281d97b1e	Merge pull request #5373 from haydenroche5/error_queue_fix ... Fix backwards behavior for various wolfSSL_ERR* functions.	2022-07-21 09:35:21 -06:00
Marco Oliverio	a235de25fe	fix: async: don't rewind index if post-handshake connect() fails ... During post-handshake authentication async code mistakes connect() error code with the error code of DoTls13CertificateRequest and wrongly rewinds the buffer. The bug was never triggered because of side effects of ShrinkBuffer (removed in 40cb6e0853)	2022-07-21 16:35:43 +02:00
David Garske	8605195709	Support for asynchronous session ticket callback (can return WC_PENDING_E). Requires wolfAsyncCrypt support. ZD 14420.	2022-07-20 16:43:17 -07:00
Daniel Pouzzner	3842889649	src/tls13.c: in SendTls13ClientHello(), move nullness check on WOLFSSL* ssl back to the start of the function.	2022-07-20 18:19:58 -05:00