Sean Parkinson
893a486ae1
Kyber: fix TLS usage
...
Allow only select parameter sets to be compiled in.
Fixed unit.test to recognize when level is supported.
2024-08-27 10:35:08 +10:00
Anthony Hu
bf074d2bb9
Merge pull request #7877 from SparkiDev/ml_dsa_ml_kem_final
...
Dilithum, Kyber: Update to final specification
2024-08-26 16:48:05 -04:00
Daniel Pouzzner
b17b190695
tests/api.c: add missing deallocations in test_wc_dilithium_sign_vfy().
2024-08-26 15:00:27 -05:00
Sean Parkinson
60f438f0c3
Dilithum, Kyber: Update to final specification
...
FIPS 203 and FIPS 204 final specification changes.
2024-08-26 17:42:27 +10:00
Daniel Pouzzner
bcbb5441ec
Merge pull request #7881 from gasbytes/eagain-proper-shutdown
...
Properly handling the shutdown when multiple ones go on EAGAIN back to back
2024-08-23 23:46:31 -05:00
Daniel Pouzzner
c454a4217c
Merge pull request #7866 from gojimmypi/pr-espressif-config
...
Introduce Espressif common CONFIG_WOLFSSL_EXAMPLE_NAME, Kconfig
2024-08-23 21:11:09 -05:00
Daniel Pouzzner
3f0ba97d1e
Merge pull request #7893 from gojimmypi/pr-asn-allow-zero-serial
...
Introduce WOLFSSL_ASN_ALLOW_0_SERIAL
2024-08-23 21:09:41 -05:00
Daniel Pouzzner
1d34b565fa
Merge pull request #7891 from SparkiDev/test_fixes_2
...
Test fixes
2024-08-23 21:08:44 -05:00
Daniel Pouzzner
a39f521f7f
Merge pull request #7884 from dgarske/x86_notwindows
...
Fixes for building x86 in Visual Studio for non-windows OS
2024-08-23 17:38:30 -05:00
Reda Chouk
8a6d7ff9a5
more clang-tidy edits
2024-08-23 21:31:55 +02:00
Reda Chouk
f4a27772e0
removed unnecessary copy of cb
2024-08-23 17:44:49 +02:00
Juliusz Sosinowicz
88d4f486e2
Merge pull request #7892 from douzzer/20240822-fixes
...
20240822-fixes
2024-08-23 16:47:23 +02:00
Daniel Pouzzner
166519ae67
wolfssl/openssl/asn1.h: use macro for ASN1_BIT_STRING_FIRST_BYTE to avoid non-const errors under gcc-6.5; tests/api.c: fix uninited data defect in test_wolfssl_EVP_chacha20_poly1305().
2024-08-22 14:41:06 -05:00
Reda Chouk
577cce60df
defined(HAVE_MANUAL_MEMIO_TESTS_DEPENDENCIES) && !defined(WOLFSSL_NO_TLS12)
2024-08-22 21:30:57 +02:00
Reda Chouk
7d2ca8db5f
addressing review:
...
- added unit test;
- formatting;
2024-08-22 21:30:57 +02:00
Reda Chouk
2356bec909
no magic values
2024-08-22 21:30:57 +02:00
Reda Chouk
db64d36f00
properly handling the shutdown when multiple ones go on EAGAIN back to
...
back.
2024-08-22 21:30:56 +02:00
gojimmypi
8baf39310f
Introduce WOLFSSL_ASN_ALLOW_0_SERIAL
2024-08-22 12:30:15 -07:00
Sean Parkinson
56adefcdc5
Ed25519: don't define ASM functions when small
...
Small builds don't allow ASM implementations.
Don't have functions defined for ASM when building small
implementation.
2024-08-22 17:05:26 +10:00
Sean Parkinson
08d8a74992
Test fixes
...
api.c:
Update #ifdefs.
sp_int.c:
Fix free call when hardening is disabled.
2024-08-22 16:09:22 +10:00
Sean Parkinson
e99bbf9429
Merge pull request #7875 from douzzer/20240814-debug-trace-errcodes-MP
...
20240814-debug-trace-errcodes-MP
2024-08-22 10:10:45 +10:00
Daniel Pouzzner
1a0bf421bd
Merge pull request #7781 from julek-wolfssl/sssd
...
init sssd support
2024-08-21 19:05:08 -05:00
Sean Parkinson
2505a59dae
Merge pull request #7886 from douzzer/20240819-shebang-bash-env
...
20240819-shebang-bash-env
2024-08-21 14:50:15 +10:00
Daniel Pouzzner
2448d482f4
wolfssl/wolfcrypt/error-crypt.h: move MPI error codes to range {-97, -100} to avoid collisions.
2024-08-20 23:37:21 -05:00
Daniel Pouzzner
05c4955316
linuxkm: add support for WOLFSSL_DEBUG_BACKTRACE_ERROR_CODES using dump_stack().
2024-08-20 23:36:07 -05:00
Daniel Pouzzner
0da78a7ee2
move several MP error codes from wolfssl/wolfcrypt/sp_int.h, wolfssl/wolfcrypt/tfm.h, and wolfssl/wolfcrypt/integer.h, to wolfssl/wolfcrypt/error-crypt.h, harmonizing their names and numbers.
...
wolfssl/wolfcrypt/error-crypt.h: add WC_FIRST_E.
wolfcrypt/src/error.c: add MP error code strings.
wolfssl/error-ssl.h: add WOLFSSL_FIRST_E and WOLFSSL_LAST_E.
wolfcrypt/test/test.c: update error_test() for new error code layout, refactoring the "missing" check.
src/internal.c: use WC_FIRST_E and WC_LAST_E in wolfSSL_ERR_reason_error_string().
src/ssl.c: fix wolfSSL_ERR_GET_REASON() to identify in-range error codes using WC_FIRST_E, WC_LAST_E, WOLFSSL_FIRST_E, and WOLFSSL_LAST_E.
sp_int.h: provide for WOLFSSL_DEBUG_TRACE_ERROR_CODES, and refactor MP error codes as enums, for consistency with other error codes.
wolfcrypt/src/ecc.c: fix 2 identicalInnerCondition's.
2024-08-20 14:09:06 -05:00
Daniel Pouzzner
1c68da282c
portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest.
2024-08-20 13:48:33 -05:00
Juliusz Sosinowicz
305a699398
Add sssd action
2024-08-20 17:12:43 +02:00
David Garske
4f4fb4bd0a
Merge pull request #7888 from douzzer/20240820-configure-silent
...
20240820-configure-silent
2024-08-20 05:35:23 -07:00
Juliusz Sosinowicz
3260a9b680
Address code review
2024-08-20 10:53:44 +02:00
Daniel Pouzzner
c4f978ffc8
Merge pull request #7874 from mpsuzuki/fix-posix-date
...
POSIX does not request "date" command to support "-R" option.
2024-08-20 00:42:52 -05:00
Daniel Pouzzner
0becc347b1
configure.ac: inhibit options.h reminder message when --quiet.
2024-08-20 00:25:15 -05:00
David Garske
294362a0b7
Fixes for building x86 in Visual Studio for non-windows OS.
2024-08-19 13:00:41 -07:00
suzuki toshiya
e417091f61
[configure.ac] spell out RFC 5322 "date" format for POSIX-conforming "date" with no extension.
...
Following to the advice by Daniel Pouzzner (see the discussion in the issue #7874 ),
no need to invoke "env" command to set LC_TIME.
* IEEE Std 1003.1-2024 does not request the "-R" option:
https://pubs.opengroup.org/onlinepubs/9799919799/
* Default "date" in Solaris 11.4 does not support "-R":
https://docs.oracle.com/cd/E88353_01/html/E37839/date-1.html
* Default "date" in HP-UX 11.22 does not support "-R":
https://man.freebsd.org/cgi/man.cgi?query=date&apropos=0&sektion=0&manpath=HP-UX+11.22&arch=default&format=html
* Default "date" in AIX 7 does not support "-R":
https://www.ibm.com/docs/en/aix/7.3?topic=d-date-command
2024-08-18 15:50:54 +09:00
gojimmypi
a0fc2f0497
Introduce Espressif common CONFIG_WOLFSSL_EXAMPLE_NAME, Kconfig
2024-08-17 13:42:30 -07:00
Daniel Pouzzner
e562a1c4d1
Merge pull request #7867 from ColtonWilley/cert_copy_option
...
Add new option to always copy cert buffer for each SSL object
2024-08-17 00:07:00 -05:00
Daniel Pouzzner
b412e5f24e
Merge pull request #7879 from dgarske/options_h
...
Improve wolfssl/options.h issues
2024-08-16 23:54:54 -05:00
Daniel Pouzzner
c90aa27e06
Merge pull request #7882 from kojo1/client-help
...
Fix <null> in the help message
2024-08-16 23:13:45 -05:00
Takashi Kojo
723adaad20
Fix <null> in the help message
2024-08-17 12:08:07 +09:00
Daniel Pouzzner
9a693f5e65
Merge pull request #7876 from mpsuzuki/fix-config-stray-redirect
...
Using ">>" with no command in configure can be ambigious for some ancient /bin/sh.
2024-08-16 15:38:39 -05:00
Daniel Pouzzner
b693127dcd
Analyzer fixes
2024-08-16 17:24:34 +02:00
Juliusz Sosinowicz
a6a40de249
init sssd support
...
- Refactor OCSP to separate IO callback
- wolfSSL_BIO_reset: fix return
- CheckCertCRL_ex: return CRL_CERT_DATE_ERR instead of ASN_AFTER_DATE_E
- CheckCertCRL_ex: return most relevant error code
- i2d/d2i APIs: correct parameters handling and return codes
- Custom ASN1 structures: major refactor to make it much more versatile
- Use WOLFSSL_ASSERT_SIZEOF_GE where applicable
- wolfSSL_EVP_SignFinal: implement ecc
- wolfSSL_EVP_VerifyFinal: implement ecc
- OBJ_NAME_do_all: bring closer to OpenSSL functionality
- Correct return of *_push api
- Implement:
- OCSP_REQ_CTX API
- d2i_ECPKParameters
- wolfSSL_sk_insert
- OCSP_parse_url
- X509_STORE_set1_param
- X509_get0_subject_key_id
- X509_OBJECT_retrieve_by_subject
- OCSP_sendreq_nbio
2024-08-16 17:22:41 +02:00
David Garske
a9be38eaf0
Improve wolfssl/options.h issues. Fixes #7853 .
2024-08-15 15:49:43 -07:00
David Garske
1190d1bafe
Merge pull request #7873 from SparkiDev/riscv-poly1305-asm
...
RISC-V 64 ASM: Add Poly1305 implementation
2024-08-15 09:40:06 -07:00
Colton Willey
d056b63742
Always free existing SSL cert to be compatible with openssl behavior
2024-08-15 09:24:44 -07:00
suzuki toshiya
bbdf7fc1b0
[configure.ac] ">>" without preceding command does not work in traditional Bourne shell.
2024-08-15 13:59:16 +09:00
Sean Parkinson
ccd8b9aa8d
Merge pull request #7872 from douzzer/20240814-linuxkm-kyber-asm
...
20240814-linuxkm-kyber-asm
2024-08-15 14:46:55 +10:00
Daniel Pouzzner
003ea8bff0
Merge pull request #7868 from dgarske/pq_xms_lmss
...
Fixes for building wolfBoot sources for PQ LMS/XMSS
2024-08-14 23:28:12 -05:00
Daniel Pouzzner
14254e8a6e
Merge pull request #7862 from bigbrett/wc-test-nocryptocb
...
cryptocb test disable option
2024-08-14 23:18:02 -05:00
Daniel Pouzzner
0c24aff183
Merge pull request #7864 from gojimmypi/pr-fix-dh-ret
...
fix interim return variable name when DH enabled
2024-08-14 23:08:29 -05:00