89946126f2
Remove dtls_expected_rx and use expected values directly
...
We should always read MTU + EXTRA so that we capture the entire message and are able to correctly decrypt the entire datagram. A smaller MTU also breaks larger handshake messages sent during a connection like secure renegotiation in DTLS 1.2 (confirmed) and post-handshake messages in DTLS 1.3 (suspected).
2023-10-05 16:58:45 +02:00
80c8c62fb2
Proper initial_ctx clean up
...
- Call wolfSSL_CTX_free on ssl->initial_ctx so that it decrements the counter and free's the object
- Clean up where ssl->initial_ctx is free'd. It only needs to be free'd when the ssl object is being free'd
2023-10-05 16:58:45 +02:00
96205fc80d
Merge pull request #6820 from julek-wolfssl/zd/16550-int-crl
...
CRL verify the entire chain including loaded CA's
2023-10-04 14:37:50 -06:00
4d81725438
Merge pull request #6832 from jpbland1/cryptocb-key-context
...
add devCtx to all keys for use in cryptoCb
2023-10-04 09:34:06 -07:00
94043723c9
Merge pull request #6833 from douzzer/20231003-options-h-flag-order-etc
...
20231003-options-h-flag-order-etc
2023-10-04 09:01:58 -06:00
45b613ee55
wolfcrypt/test/test.c: fix error codes in hpke_test_single(), hpke_test(), and ecc521_test_deterministic_k().
2023-10-03 22:44:11 -05:00
71649388a0
configure.ac: in options.h generation, fix order of flags to match Makefile order.
2023-10-03 21:11:59 -05:00
f4acc8f33d
add devCtx to all keys for use in cryptoCb
2023-10-03 19:29:36 -04:00
88d25036a0
Merge pull request #6823 from rizlik/stale_suites_fix
...
fix: tls13: don't use stale suites pointers in CheckPreSharedKeys
2023-10-03 11:41:53 -06:00
7baf151c37
CRL verify the entire chain including loaded CA's
...
- Regen CRL's as most of them are expired
- certs/crl/extra-crls/ca-int-cert-revoked.pem: CRL that revokes certs/intermediate/ca-int-cert.pem signed by certs/ca-cert.pem
- Add CheckCertCRL_ex API to not depend on DecodedCert
- CheckCertCRLList: accept raw serial or hashed version to work with Signers
- Add XELEM_CNT to simplify pre-proc element counting
2023-10-03 11:45:43 +02:00
5066771f10
Merge pull request #6824 from bandi13/PRB-fips-ready-config-issues
...
Fix issue created by 62c14e4d5b
2023-10-03 00:47:14 -04:00
1a3bf5e932
Merge pull request #6822 from douzzer/20230930-aes-xts-test-gate
...
20230930-aes-xts-test-gate
2023-10-02 17:57:17 -06:00
47f0d5a5d0
Fix issue created by 62c14e4d5b
2023-10-02 12:34:33 -04:00
ecf666a121
Merge pull request #6819 from miyazakh/renesas_rz_opt
...
Update usage of sha acceleration on RSIP
2023-10-02 09:22:06 -06:00
c70b3f297e
fix: tls13: don't use stale suites pointers in CheckPreSharedKeys
2023-10-02 15:03:55 +00:00
3e7f4c5f2d
wolfcrypt/test/test.c: in aes_xts_128_test(), fix gate on LARGE_XTS_SZ test added in 3ea0fb30dd (disable for AF_ALG and pre-5.3 FIPS).
2023-09-30 12:07:56 -05:00
369db531d2
Merge pull request #6817 from anhu/tls13_server_suppgroups
...
Allow the server to send supported groups extension in TLS 1.3
2023-09-29 13:53:37 -06:00
7c1cc5e8f9
Allow the server to send supported groups extension in TLS 1.3
2023-09-29 12:42:44 -04:00
8a57936d7e
Merge pull request #6801 from julek-wolfssl/zephyr-fixes
...
Misc zephyr fixes
2023-09-29 09:50:19 -06:00
53f729f959
Merge pull request #6815 from SparkiDev/aes_xts_x64
...
AES XTS x64 ASM: add AVX1 and AESNI implementations
2023-09-29 09:42:58 -06:00
e092c57675
change sha h/w acceleration implementation
2023-09-29 16:22:16 +09:00
aedebac649
Merge pull request #6818 from bandi13/containerReadme
...
Container readme
2023-09-28 15:21:23 -06:00
3ea0fb30dd
AES XTS x64 ASM: add AVX1 and AESNI implementations
...
Adding AES-XTS AVX1 and AESNI implementations.
Fix name in comment at top of x64 assembly files.
2023-09-28 14:44:23 -05:00
005346d9ec
Fix entrypoint
2023-09-28 14:45:51 -04:00
93358f1402
Define WOLFSSL_DIR
2023-09-28 13:59:04 -04:00
5e1bd8174c
Push multi-platform wolfCLU to DockerHub
2023-09-28 13:55:38 -04:00
2ef83e142f
Update buildAndPush.sh and README.md
2023-09-28 13:27:07 -04:00
0571040e36
Merge pull request #6816 from bandi13/fixContainers
...
Fix containers
2023-09-28 10:37:20 -06:00
9fdb3cf17a
Appease test scripts
2023-09-28 10:48:03 -04:00
b88754bb64
Add in clang-10 and clang-11 tests
2023-09-28 10:29:36 -04:00
5e3f00f6f7
Specify the OS version
...
'ubuntu-latest' doesn't have clang-12 in it anymore
2023-09-28 10:29:20 -04:00
0f4f677ea4
Show logs on test failure
2023-09-28 10:17:30 -04:00
20f992af5e
Merge pull request #6809 from SparkiDev/static_rsa_len_check_fix
...
Static RSA length check
2023-09-27 15:09:08 -06:00
d95ce57eea
Fix script errors
2023-09-27 15:31:01 -04:00
79a6cbc860
Merge pull request #6813 from anhu/elliptical
...
Fixup spelling: Elliptic
2023-09-26 17:11:12 -06:00
a97e13f823
Merge pull request #6798 from gojimmypi/autogen-update-wsl-pr
...
no WSL/Windows git hooks from autogen.sh
2023-09-26 16:59:41 -06:00
9acba6ee2d
Static RSA length check
...
Better length check on decrypted pre-master secret length.
2023-09-27 07:55:53 +10:00
b22c2971e3
Fixup spelling: Elliptic
...
Fixes https://github.com/wolfSSL/wolfssl/issues/6767
2023-09-26 16:18:02 -04:00
60f30e994d
Merge pull request #6811 from gojimmypi/esp32-sha-revert-verbosity
...
ESP32 debug only: Mode REVERT to ESP32_SHA_SW
2023-09-26 13:34:43 -06:00
f042863ddf
Merge pull request #6807 from kareem-wolfssl/zd16715
...
Prevent current handshake counter from underflowing.
2023-09-26 10:55:52 -06:00
4ece466fca
ESP32 debug only: Mode REVERT to ESP32_SHA_SW
2023-09-26 08:32:23 -07:00
237d10ab1e
Merge pull request #6803 from gojimmypi/esp32-example-time
...
ESP32 examples: update interim set_time() fixed value
2023-09-25 13:34:22 -06:00
83117ae33f
ESP32 examples: interim set_time() fixed value
2023-09-23 17:16:19 -07:00
df6a65e151
Prevent current handshake counter from underflowing.
2023-09-22 14:47:00 -07:00
f9082c54e3
Merge pull request #6800 from DimitriPapadopoulos/codespell
...
More typos found by codespell
2023-09-22 14:12:34 -06:00
717249c0cc
Trust github.com in container, add in possible Jenkins userIDs
2023-09-22 16:01:54 -04:00
f0d0a87822
Add in working cross-compiler container and builder script
2023-09-22 14:55:30 -04:00
1141f9bee9
Use wolfssl/wolfssl-builder as the container name
2023-09-22 14:55:01 -04:00
470e839b26
Misc zephyr fixes
...
- Need to call fs_file_t_init() before calling fs_open()
- 0 is a valid POSIX socket number
- Include stdio.h when needed to simplify macro logic
- Define Zephyr specific macros in CMakeLists.txt to make for a better user experience
2023-09-22 12:19:06 +02:00
f7d7006e87
More typos found by codespell
2023-09-22 11:38:24 +02:00
Juliusz Sosinowicz
JacobBarthelmeh
David Garske
Daniel Pouzzner
John Bland
Andras Fekete
Chris Conlon
Marco Oliverio
Anthony Hu
Hideki Miyazaki
Sean Parkinson
gojimmypi
Kareem
Dimitri Papadopoulos