JacobBarthelmeh
6d8136c63e
Merge pull request #6896 from SparkiDev/rsa_to_bin_len_ct
...
RSA: convert to bin with length in constant time
2023-10-25 08:34:37 -06:00
András Fekete
5da7efacc9
Merge pull request #6894 from julek-wolfssl/fix-possible-hang
...
Fix static analyzer possible leak
2023-10-24 09:13:58 -04:00
András Fekete
a74228b5b0
Merge pull request #6904 from julek-wolfssl/suites-allocation
...
Don't try to allocate 0 size suites copy. Fixes `--enable-trackmemory --enable-smallstack CFLAGS="-DALT_ECC_SIZE" --enable-opensslextra` errors.
2023-10-24 09:07:42 -04:00
Juliusz Sosinowicz
dc5a246fdd
Do NULL check in FreeCRL
2023-10-24 10:31:17 +02:00
Juliusz Sosinowicz
4aad7589d6
Don't try to allocate 0 size suites copy
2023-10-24 10:10:08 +02:00
Sean Parkinson
13cadbbe55
Merge pull request #6903 from douzzer/20231021-fix-null-derefs
...
20231021-fix-null-derefs
2023-10-24 13:12:09 +10:00
JacobBarthelmeh
1de048826e
Merge pull request #6895 from bigbrett/ios-ca-api
...
Fix WOLFSSL_SYS_CA_CERTS bug on Apple devices
2023-10-23 07:57:08 -06:00
Juliusz Sosinowicz
3c5d3c0fa9
bwrap ocsp renew script
2023-10-23 15:53:42 +02:00
Daniel Pouzzner
501299bc31
fix null pointer derefs in examples/pem/pem.c:pemApp_ReadFile() and tests/api.c:LoadPKCS7SignedDataCerts() detected by clang-tidy.
2023-10-21 13:34:04 -05:00
JacobBarthelmeh
9db828a099
Merge pull request #6898 from SparkiDev/ed25519_g++
...
Ed25519: add missing C++ directives for C functions
2023-10-20 15:52:12 -06:00
JacobBarthelmeh
5018d6c2bb
Merge pull request #6897 from SparkiDev/tls13_psk_one_id_var_decl
...
TLS 1.3: compiling with WOLFSSL_PSK_ONE_ID fix
2023-10-20 15:48:59 -06:00
JacobBarthelmeh
ca2a6d7daa
Merge pull request #6878 from SparkiDev/sha256_armv7a_vmov_fix
...
ARMv7a SHA256: explicit size on vmov
2023-10-20 15:46:58 -06:00
Brett
2387579880
added FIPS warning for Apple native cert validation
2023-10-20 15:40:49 -06:00
Brett
dd12e5a39e
Fix WOLFSSL_SYS_CA_CERTS bug that accepted intermediate CA certs with invalid
...
signatures. Also adds --sys-ca-certs to client in unit.test to detect
regressions
2023-10-20 15:40:44 -06:00
Sean Parkinson
fcf1406675
RSA: convert to bin with length in constant time
...
Add mp_to_unsigned_bin_len_ct() which puts a number into a buffer with
padding in constant time.
Call mp_to_unsigned_bin_len_ct() in RSA when encoding result of
exponentiation.
2023-10-20 14:04:36 +10:00
Sean Parkinson
c88dcac80e
Ed25519: add missing C++ directives for C functions
...
Assembly code has C function names.
Need to tell C++ that these are C function and not to mangle names.
2023-10-20 12:02:51 +10:00
Sean Parkinson
ce1e44d5e8
TLS 1.3: compiling with WOLFSSL_PSK_ONE_ID fix
...
Move use of 'suites' into non-WOLFSSL_PSK_ONE_ID path as variable
declared and used only in that case.
2023-10-20 10:32:45 +10:00
Sean Parkinson
4ac795961b
ARMv7a SHA256: explicit size on vmov
...
For SHA256 using NEON on ARM32, change vmov instruction that is moving
from scalar to general-purpose register to have explicit size (32 bits).
May be needed by some compilers.
2023-10-20 10:21:57 +10:00
JacobBarthelmeh
1abaa94120
Merge pull request #6889 from SparkiDev/sm2_priv_import_range
...
ECC SM2 import private key: check less than order-1
2023-10-19 17:12:07 -06:00
JacobBarthelmeh
22be42a161
Merge pull request #6885 from bigbrett/aes-eax
...
Move AesEax definition to aes.h
2023-10-19 16:49:10 -06:00
Juliusz Sosinowicz
cecc5f6b19
Call wc_UnLockRwLock only once
2023-10-19 17:04:41 +02:00
Juliusz Sosinowicz
8a8acbd55f
Add log about allocation failure
2023-10-19 17:00:49 +02:00
Juliusz Sosinowicz
2dd8e713f2
Fix static analyzer possible leak
...
crl would never be null there but clean up code to make sure newcrl->crlLock gets free'd
2023-10-19 16:58:28 +02:00
Sean Parkinson
abd7bb3ac3
ECC SM2 import private key: check less than order-1
...
SM2 curves must have private key less than order-1 instead of order.
2023-10-19 17:29:25 +10:00
JacobBarthelmeh
a3bf7a66a4
Merge pull request #6886 from julek-wolfssl/openvpn-master-fix
...
Define SSL_get_peer_tmp_key
2023-10-18 13:17:15 -06:00
David Garske
22ab21749c
Merge pull request #6869 from bigbrett/ios-ca-api
...
Add support for new Apple trust APIs with WOLFSSL_SYS_CA_CERTS
2023-10-18 10:29:41 -07:00
Juliusz Sosinowicz
f99c7cbb21
Define SSL_get_peer_tmp_key
2023-10-18 19:24:11 +02:00
JacobBarthelmeh
269090353e
Merge pull request #6884 from kareem-wolfssl/zd16824
...
Add explicit break to switch statement in GetHmacLength
2023-10-18 11:20:55 -06:00
JacobBarthelmeh
b4724b515d
Merge pull request #6880 from SparkiDev/sm2_named_group_val_fix
...
SM2 named curve disabled: value outside of supported values
2023-10-18 10:51:02 -06:00
Brett
d805e06469
add AesEax struct to header for public use
2023-10-18 09:23:39 -06:00
Sean Parkinson
1e84d24c20
SM2 named curve disabled: value outside of supported values
...
SM2 named curve value is specified in specification.
Values 0-14 aren't used, so, those bits in disabledCurves are used for
values over 31.
Add range checks.
2023-10-18 10:51:37 +10:00
JacobBarthelmeh
3943852b79
Merge pull request #6882 from douzzer/20231017-wolfsentry-wolfssl_test-h
...
20231017-wolfsentry-wolfssl_test-h
2023-10-17 16:03:41 -06:00
David Garske
bc0643803d
Merge pull request #6873 from JacobBarthelmeh/coverity
...
Coverity scan touch up
2023-10-17 14:44:33 -07:00
JacobBarthelmeh
19870b2378
Merge pull request #6883 from bigbrett/cmake-aarch64-build-macro-fix
...
cmake aarch64 fix
2023-10-17 15:31:23 -06:00
Kareem
f59b22d3a0
Add explicit break to switch statement in GetHmacLength
2023-10-17 14:14:05 -07:00
JacobBarthelmeh
4f1b3fff73
Merge pull request #6879 from jpbland1/cmac-invalid-devId
...
correctly set invalid devId for when cryptoCb is on
2023-10-17 13:23:17 -06:00
Brett
a1d76849e6
added CMake support for new Apple native certificate verification
2023-10-17 13:17:42 -06:00
JacobBarthelmeh
dc7e044157
Merge pull request #6881 from lealem47/mingw_pthreads
...
Fix for pthreads on MSYS2 & MINGW
2023-10-17 13:10:05 -06:00
Brett
e976a7faeb
added CMake host processor check to appropriately set WOLFSSL_AARCH64_BUILD on M1 macs
2023-10-17 12:51:36 -06:00
Daniel Pouzzner
f0db681550
wolfssl/test.h: move wolfsentry logic out of wolfssl project and into header file in wolfsentry project.
2023-10-17 13:05:23 -05:00
Lealem Amedie
a810514f86
Get multi-test passing
2023-10-17 11:36:19 -06:00
John Bland
76b770d4ee
update comment based on PR advise
2023-10-17 13:01:00 -04:00
Lealem Amedie
286d551ad0
Use same mingw macro in codebase for consistency
2023-10-17 10:22:17 -06:00
JacobBarthelmeh
603b5bb573
Merge pull request #6875 from douzzer/20231016-sp-math-fix-redux
...
20231016-sp-math-fix-redux
2023-10-17 10:08:43 -06:00
Lealem Amedie
5bc2edd5ad
Allow override of XSNPRINTF for Windows
2023-10-17 09:37:50 -06:00
Lealem Amedie
b73a440205
Fix for pthreads on MSYS2 & MINGW
2023-10-17 09:16:41 -06:00
John Bland
92382602dd
fix bad placement
2023-10-17 01:39:34 -04:00
John Bland
53d80c0b7f
correctly set invalid devId for when cryptoCb is on
...
but the user has opted to use software, or cmac is not available on for their
device. currently a devId of 0 is set which causes CRYPTOCB_UNAVAILABLE
2023-10-17 01:33:06 -04:00
Daniel Pouzzner
f1725b4962
fix to 3e9f8bc649: (void)h was a typo for correct (void)n.
2023-10-16 18:23:45 -05:00
JacobBarthelmeh
b7b0316ac9
free buffer on error case
2023-10-16 15:04:57 -06:00