331a713271
Ed25519: fix tests to compile with feature defines
...
ge_operations.c: USe WOLFSSL_NO_MALLOC rather than WOLFSSL_SP_NO_MALLOC.
2025-02-19 17:41:03 +10:00
393c92c3eb
Merge pull request #8464 from kaleb-himes/SRTP-WIN-PORTING
...
Porting to Windows 11 MSVS 2022
2025-02-18 16:16:14 -07:00
3c74be333e
correct test source file to follow C89 standard
...
for OpenSSL interface
2025-02-18 22:12:11 +01:00
48f1c3b57d
Merge pull request #8465 from douzzer/20250217-fix-test-c89
...
20250217-fix-test-c89
2025-02-18 08:44:17 -08:00
ff70cdf9d8
Merge pull request #8466 from douzzer/20250217-fixes
...
20250217-fixes
2025-02-17 19:39:38 -08:00
258afa5493
wolfcrypt/src/pkcs7.c: in PKCS7_EncodeSigned(), check for error from SetSerialNumber().
2025-02-17 18:05:04 -06:00
65f38df74d
tests/api.c: refactor several C89-incompatible dynamically constructed arrays using static const.
2025-02-17 17:47:36 -06:00
e0bc6ef9df
Porting to Windows 11 MSVS 2022
2025-02-17 16:18:10 -07:00
a2c8168c96
Merge pull request #8460 from embhorn/gh8456
...
Fix cmake lean_tls build
2025-02-17 14:57:52 -08:00
bc79803c1a
Add workflow test
2025-02-17 15:16:29 -06:00
3e38bdcd2c
Merge pull request #8450 from dgarske/stm32_pka_ecc521
...
Fix for STM32 PKA ECC 521-bit support
2025-02-17 08:27:45 -08:00
7db3c34e2b
ocsp: enable OPENSSL tlsext status cb for NGINX and HAPROXY
2025-02-17 14:53:49 +00:00
1970fec190
Fix cmake lean_tls build
2025-02-17 08:17:05 -06:00
a1d1f0ddf1
ocsp: enable SSL_CTX_set_tlsext_status_cb only in OPENSSL_ALL
2025-02-17 11:29:09 +00:00
0945101948
ocsp: fix: remove duplicated code
2025-02-17 11:25:24 +00:00
1eecf326fd
ocsp: use ocspReponse->heap in OcspFindSigner + minors
2025-02-17 08:59:29 +00:00
0af092ec79
ocsp: minors
2025-02-17 08:59:29 +00:00
a06a8b589c
ocsp: minors
2025-02-17 08:59:29 +00:00
4351a5dd70
ocsp/test: better test assertions
2025-02-17 08:59:29 +00:00
69116eb05d
ocsp/tests: update blobs and add license header
2025-02-17 08:59:29 +00:00
c1c9af5cb6
minor: improve indentation of guards
2025-02-17 08:59:29 +00:00
3724094ce2
ocsp: add test for response with unusable internal cert
...
- Added a new test case `resp_bad_embedded_cert` in
`create_ocsp_test_blobs.py` to test OCSP response with an unusable
internal cert that can be verified in Cert Manager.
- Updated `test_ocsp_response_parsing` in `ocsp.c` to include the new
test case.
- Ensured the new test case checks for proper handling of OCSP responses
with incorrect internal certificates.
2025-02-17 08:59:29 +00:00
2c2eb2a285
ocsp: improve OCSP response signature validation
...
- search for the signer in the CertificateManager if the embedded cert
verification fails in original asn template.
2025-02-17 08:59:29 +00:00
3e50c79c3b
tests: bind test_wolfSSL_client_server_nofail_memio HAVE_SSL_MEMIO_TESTS_DEP
2025-02-17 08:59:29 +00:00
ae3177c439
ocsp-resp-refactor: fix tests
2025-02-17 08:59:29 +00:00
851d74fd69
ocsp-resp-refactor: address reviewer's comments
2025-02-17 08:59:29 +00:00
eb7904b5e5
tests/api: expose test_ssl_memio functions
2025-02-17 08:59:29 +00:00
f782614e1e
clang tidy fixes
2025-02-17 08:59:28 +00:00
2fe413d80f
ocsp: add tests
2025-02-17 08:59:23 +00:00
3a3238eb9f
ocsp: refactor wolfSSL_OCSP_response_get1_basic
...
The internal fields of OcspResponse refer to the resp->source buffer.
Copying these fields is complex, so it's better to decode the response again.
2025-02-17 08:58:03 +00:00
b7f08b81a6
ocsp: adapt ASN original to new OCSP response refactor
2025-02-17 08:58:03 +00:00
f526679ad5
ocsp: refactor OCSP response decoding and wolfSSL_OCSP_basic_verify
...
- Search certificate based on responderId
- Verify response signer is authorized for all single responses
- Align with OpenSSL behavior
- Separate wolfSSL_OCSP_basic_verify from verification done during
decoding
2025-02-17 08:58:03 +00:00
d7711f04ab
openssl compat: skip OCSP response verification in statusCb
...
This aligns with OpenSSL behavior
2025-02-17 08:58:02 +00:00
dedbb2526c
ocsp: fix memory leaks in OpenSSL compat layer
2025-02-17 08:58:02 +00:00
79744a7736
Merge pull request #8455 from douzzer/20250214-fix-wolfEntropy-configure-handling
...
20250214-fix-wolfEntropy-configure-handling
2025-02-14 17:14:29 -07:00
39ed0eabff
configure.ac: fix handling of --enable-wolfEntropy (don't re-default to no in following --enable-entropy-memuse clause).
2025-02-14 15:39:42 -06:00
842b9a3709
Merge pull request #8433 from julek-wolfssl/dtls-cid-negative-tests
...
Update DTLS CID Tests and Reorganize Test Utilities
2025-02-14 11:26:57 -08:00
c9de3d63f9
Merge pull request #8453 from kaleb-himes/SRTP-KDF-SCRIPT-UPDATE
...
Update tag for v6.0.0 module checkout
2025-02-14 13:24:25 -06:00
e529ad51fc
Merge pull request #8451 from douzzer/20240214-workflow-TEST_OPENSSL_COEXIST
...
20250214-workflow-TEST_OPENSSL_COEXIST
2025-02-14 11:12:28 -08:00
a6a15e6211
Update tag for v6.0.0 module checkout
2025-02-14 11:38:19 -07:00
10d5d59977
add .github/workflows/opensslcoexist.yml. fix TEST_OPENSSL_COEXIST section of wolfssl/ssl.h for compatibility with OpenSSL <3.2. also, remove frivolous entry for WOLFSSL_HMAC_COPY_HASH in .wolfssl_known_macro_extras.
2025-02-14 12:19:12 -06:00
690bb14203
tests/utils.c and tests/api/test_dtls.c: fixes for include order, re tests/unit.h.
2025-02-14 10:57:29 -06:00
29f2767b88
Merge pull request #8441 from philljj/wolfio_comments
...
wolfio: comment ifdef endif blocks.
2025-02-14 08:55:31 -08:00
cfa6fbfcef
Correct wolfSSL_dtls_cid_parse declaration in docs
2025-02-14 09:51:29 -06:00
3075e57207
Whitespace and filename comment.
2025-02-14 09:51:29 -06:00
7380ec68bb
cmake.yml: fix error and run tests with ctest
2025-02-14 09:51:29 -06:00
825ca22bd8
Fix cmake build
2025-02-14 09:51:29 -06:00
ede34f132b
fixup! Move dtls cid tests to tests/api/dtls.c
2025-02-14 09:51:29 -06:00
301a9a97cc
Don't use buffer as it can shadow global declarations
2025-02-14 09:51:29 -06:00
21dce84448
Add negative tests for DTLS CID
2025-02-14 09:51:29 -06:00
Sean Parkinson
JacobBarthelmeh
Jiri Malak
David Garske
Daniel Pouzzner
kaleb-himes
Eric Blankenhorn
Marco Oliverio
Juliusz Sosinowicz