4faa21a74a
Rust wrapper: Fix DH::FFDHE_* constant values
2025-10-17 14:46:15 -04:00
8e7f77db76
Rust wrapper: add wolfssl::wolfcrypt::dh module
2025-10-17 14:46:15 -04:00
5280bfb89a
Merge pull request #9297 from douzzer/20251011-more-fips-optest-tweaks
...
20251011-more-fips-optest-tweaks
2025-10-17 12:44:25 -06:00
f492abfe9e
Merge pull request #9314 from SparkiDev/silabs_no_hash_raw
...
SHA-2: No hash raw
2025-10-17 10:19:01 -07:00
8969e5f36a
refactor to TLSX_EchChangeSNI
2025-10-17 13:51:42 +11:00
9cf08afbbb
fixes for --disable-tls.
2025-10-16 18:50:06 -05:00
f508b44f0f
configure.ac: in setup for cryptonly, don't set enable_tls13=no or enable_tlsv12=no -- they're needed for crypto-layer KDFs.
2025-10-16 18:50:06 -05:00
b924e9a905
linuxkm/module_hooks.c: add sanity check for compiled-in verifyCore, and fix linuxkm_op_test_1() call to use argc==3 arg list.
2025-10-16 18:50:06 -05:00
5ee42402ae
wolfssl/wolfcrypt/types.h: fix whitespace around WC_SAFE_SUM_*().
2025-10-16 18:50:06 -05:00
6fb547a1ae
linuxkm/module_hooks.c: purge fipsMode override (fipsEntry() takes care of this), and add explicit fipsCastStatus[] reset code.
2025-10-16 18:50:06 -05:00
e8d9f91868
linuxkm/module_hooks.c and linuxkm/linuxkm_wc_port.h: finish implementation of
...
FIPS_OPTEST glue code, including /sys/module/libwolfssl/FIPS_optest_run_code
(FIPS_optest_trig_handler(), plus my_kallsyms_lookup_name() helper).
2025-10-16 18:50:05 -05:00
581e86c178
wolfcrypt/test/test.c: fix error-path uninitialized access defect in ecc_test_buffers().
2025-10-16 18:50:05 -05:00
0d588b446c
Merge pull request #9313 from douzzer/20251016-Wnull-dereference
...
20251016-Wnull-dereference
2025-10-16 17:47:23 -06:00
d0909991fb
SHA-2: No hash raw
...
Implementation of FinalRaw for SE050 was not usable - TLS_hmac did not
produce valid results.
Removed implementations and defining WOLFSSL_NO_HASH_RAW to compile to
not require FinalRaw APIs.
2025-10-17 07:46:50 +10:00
0c4feb0aa6
wolfcrypt/src/asn.c: revert earlier changes in EncodeName(), and add local S390-specific pragma to inhibit false-positive -Wnull-dereference.
2025-10-16 16:10:54 -05:00
d6aa157187
fixes for OPENSSL_COEXIST covering OPENSSL_COMPATIBLE_DEFAULTS and WOLFSSL_WPAS:
...
* src/ssl.c:wolfSSL_CTX_new_ex()
* src/x509.c:wolfSSL_X509_PUBKEY_set()
2025-10-16 15:10:16 -05:00
6ee660841b
fixes/workarounds for -Wnull-dereferences, some true positive, some false
...
positive:
* src/pk.c:wolfSSL_RSA_meth_new()
* tests/api.c:test_wolfSSL_PKCS7_certs()
* tests/api.c:test_wolfSSL_X509V3_EXT_get()
* wolfcrypt/src/asn.c:EncodeName()
* wolfcrypt/src/pkcs12.c:wc_i2d_PKCS12()
* wolfcrypt/src/port/af_alg/afalg_aes.c
2025-10-16 15:10:16 -05:00
0727bae09e
Merge pull request #9310 from SparkiDev/lms_cast_16bit
...
LMS: Cast constants before shifting left
2025-10-16 12:16:05 -07:00
a22d239bfd
Merge pull request #9301 from effbiae/set_srp_username
...
refactor wolfSSL_CTX_set_srp_username
2025-10-16 11:32:24 -07:00
d88ab84b9f
Merge pull request #9311 from SparkiDev/regression_fixes_19
...
Regression testing
2025-10-16 10:56:27 -07:00
058686b829
Merge pull request #9305 from dgarske/bench_rsapub
...
Fix for benchmark with key gen and "out" not being allocated
2025-10-16 12:23:23 -05:00
c111c5bacc
Regression testing
...
x509.c: realloc may fail and therefore need to store result in a
temporary so the old pointer is not lost.
tls.c: free the name if it is not pushed on to the stack of peer CA
names. Failure to push can be from memory allocation failure.
aes.c: Don't compile XTS decrypt functions without HAVE_AES_DECRYPT.
Fix tests to have better pre-processor protection.
2025-10-16 12:13:32 +10:00
36c953dd8f
LMS: Cast constants before shifting left
...
Compiling for 16-bit results in some constants type being too small for
shift amount without cast.
2025-10-16 09:24:48 +10:00
88a55cdb71
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into zd20603
2025-10-15 15:48:16 -07:00
8d41d1ca65
Add IPv6 support to wolfSSL_BIO_new_accept and wolfIO_TcpBind.
2025-10-15 15:47:22 -07:00
832e23a5f7
Merge pull request #9307 from douzzer/20251015-linuxkm-fixes
...
20251015-linuxkm-fixes
2025-10-15 16:26:00 -06:00
3746164d60
linuxkm/linuxkm_wc_port.h: don't include wolfssl/wolfcrypt/memory.h (unneeded and out of order).
2025-10-15 17:06:31 -05:00
790808b172
Merge pull request #9303 from dgarske/silabs_series2
...
Support for detecting SILABS ERF32 Series 2 ECDSA support for P384/P521
2025-10-15 12:46:44 -06:00
0c4f5879d8
Fix for benchmark with key gen and "out" not being allocated because of typo between WOLFSSL_RSA_VERIFY_INLINE and WOLFSSL_RSA_VERIFY_ONLY.
...
Reproduced with: `./configure --enable-keygen CFLAGS="-DWOLFSSL_RSA_VERIFY_INLINE" --disable-examples && make && ./wolfcrypt/benchmark/benchmark -rsa`
2025-10-15 11:25:49 -07:00
250e19a682
Merge pull request #9299 from dgarske/bench_rsasz
...
Fix for improper sizing on `bench_rsa_helper`
2025-10-15 11:55:48 -05:00
f9b666dd8a
Merge pull request #9298 from douzzer/20251014-WC_SAFE_SUM
...
20251014-WC_SAFE_SUM
2025-10-15 11:44:04 -05:00
53bbf7f2d7
Merge pull request #9302 from effbiae/wc_FreeRng
...
wc_FreeRng called multiple times in wolfSSL_CTX_set_srp_password
2025-10-15 08:48:17 -07:00
91bf738025
Support for detecting SILABS ERF32 Series 2 ECDSA support for P384/P521
2025-10-15 08:33:37 -07:00
1de2ad48bd
wc_FreeRng called multiple times in wolfSSL_CTX_set_srp_password
2025-10-15 17:43:53 +11:00
cadea76e43
refactor wolfSSL_CTX_set_srp_username
2025-10-15 17:15:07 +11:00
c771167127
add WC_ prefixes to MAX_UINT_OF() and friends, to avoid collision with wolfSentry macros.
2025-10-14 19:16:21 -05:00
21a66ec36b
wolfssl/wolfcrypt/types.h: add missing static attribute to WC_WUR_INT().
2025-10-14 19:10:15 -05:00
75097f3e09
Fix for improper sizing on bench_rsa_helper
2025-10-14 16:41:27 -07:00
1602ed2f3a
wolfcrypt/src/asn.c: rearrange check for null cname in EncodeName() to fix false positive -Wnull-dereference.
...
src/internal.c: suppress -Wnull-dereference locally in ProcessPeerCertParse() to fix false positive.
2025-10-14 18:27:02 -05:00
7c7040da24
src/internal.c: fix -Wnull-dereference in LoadCertByIssuer().
2025-10-14 17:38:12 -05:00
204eb96d2f
src/ssl.c: fix overflow/overrun defect in wolfSSL_writev().
2025-10-14 16:29:15 -05:00
014f55fe10
wolfssl/wolfcrypt/types.h: add WC_WUR_INT(), MAX_UINT_OF(), MAX_SINT_OF(), MIN_SINT_OF(), WC_SAFE_SUM_UNSIGNED(), and WC_SAFE_SUM_SIGNED().
2025-10-14 16:28:32 -05:00
3534fad3ee
Merge pull request #9295 from rizlik/shutdown_nonblocking_fix
...
wolfSSL_shutdown: handle non-blocking I/O
2025-10-14 12:50:57 -07:00
4280b52bff
test: increase coverage for multiple wolfSSL_shutdown test
2025-10-14 10:05:11 +02:00
4b7a2b677b
wolfSSL_shutdown: fix non-blocking retry after WANT_WRITE.
...
1. Send buffered message in case SendAlert_ex returned WANT_WRITE.
2. If pending messages are sent successfully return SHUTDOWN_NOT_DONE as
current API behavior.
3. Propagate WANT_READ error for ProcessReply if waiting for other peer
shutdown (when invoking wolfSSL_shutdown for the second time)
2025-10-14 10:05:11 +02:00
77dcbb5603
Merge pull request #9293 from dgpighin/docstrings_update
...
Some updates to the docstrings
2025-10-14 16:14:15 +10:00
b2c105d5f7
Merge pull request #9292 from embhorn/zd20626
...
Fix GCC warnings
2025-10-13 23:17:13 -05:00
6fbd101f7d
Merge pull request #9153 from effbiae/wc-small-stack
...
Small stack compress -- 3000line reduction
2025-10-13 23:12:01 -05:00
e877fa747d
Merge pull request #9185 from Pushyanth-Infineon/psoc6_sha1_sha2_sha3_support
...
Enable hardware acceleration for SHA1, SHA384 and SHA3 algorithms on PSoC6
2025-10-13 13:29:52 -07:00
dd22fa3243
Fix from testing
2025-10-13 15:27:01 -05:00
Josh Holtrop
lealem47
David Garske
effbiae
Daniel Pouzzner
Zackery
Sean Parkinson
Kareem
Eric Blankenhorn
Marco Oliverio