wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-02-01 09:59:17 +01:00
Code Issues Packages Projects Releases Wiki Activity
13,539 Commits 12 Branches 184 Tags
8ab396cb45fc598aaa3623dcd9e7568df7d5e29f
Commit Graph

13539 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
John Safranek
8ab396cb45 Move the TLSv1.3 KDF into wolfCrypt with the other KDFs. 2021-02-24 18:23:37 -08:00
John Safranek
77e6849786 Add HMAC-SHA2-512 to the TLSv1.2 PRF. 2021-02-24 18:23:37 -08:00
John Safranek
08c2f7f656 Add prototype for the ssh-kdf test in the wolfCrypt test. 2021-02-24 18:23:36 -08:00
John Safranek
131fb2c1e6 KDF Update 
1. Move wolfSSH's KDF into wolfCrypt.
 2021-02-24 18:23:36 -08:00
John Safranek
2672856042 FIPS KDF Update 
1. Copied the TLSv1.2 PRF into hmac.c since it uses it and the TLSv1.3
   HKDF is in there as well.
2. Added guard around the old TLS PRF so that it switches in correctly
   for older FIPS builds only.
 2021-02-24 18:23:36 -08:00
John Safranek
344950a36d FIPS CAST Update 
1. In the unit test, when checking the build options, also check for
   FIPSv4 to make sure 2048-bit RSA is used.
2. In the standalone SHA-1 one step hash function, wc_InitSha() wasn't
   getting called, so the FIPS flags didn't get checked. (It was using
   wc_InitSha_ex() which bypasses the FIPS checks.)
 2021-02-24 18:23:36 -08:00
John Safranek
9c1fe16e62 Fix a bad assignment in the configure script. 2021-02-24 18:23:34 -08:00
John Safranek
c4a45b372f FIPS CAST Update 
1. Added a public API to run a CAST.
2. Added the other test certs for the RSA tests.
3. Added IDs for the new RSA tests and the SHA3-pairwise test.
 2021-02-24 18:21:07 -08:00
John Safranek
7d727938ec Update the fips-check script to pull the sources from GitHub rather than 
from a directory on a local machine.
 2021-02-24 18:21:07 -08:00
John Safranek
d5f6ef9f3b FIPS 140-3 
1. Change the internal version number for the FIPS 140-3 changes as v4.
2. Insert v3 as an alias for FIPS Ready.
3. Use the correct directory for the FIPS old files sources. (For local
   testing of 140-3 builds.)
4. Change back the check for the FIPS version in internal.c for
   EccMakeKey().
 2021-02-24 18:21:02 -08:00
John Safranek
bad6cd9677 FIPS 140-3 
1. Fix issue with FIPS Ready and FIPS 140-3. FR acts at the latest
   version in the code, but that leaves DES3 out of the build. The code
   was still including the header. Force DES3 disabled in FIPS Ready
   builds.
 2021-02-24 18:00:50 -08:00
John Safranek
8e4983f823 FIPS 140-3 
1. Add the old known answer test prototype back into fips_test.h for FIPSv2 builds.
 2021-02-24 18:00:50 -08:00
John Safranek
2b6dc31145 FIPS 140-3 
1. Added enable option for FIPS 140-3 in configure script.
2. Modify DES3 source to disallow DES3 for the new option.
3. Added the new constants to fips_test.h.
4. Added some new test functions.
5. Added API for doing the POST.
6. Added a processing state for the CASTs.
7. Delete some unused prototypes from FIPS test API.
 2021-02-24 18:00:44 -08:00
Daniel Pouzzner
c201b6801c Merge pull request #3808 from lechner/enable-base64-with-all 
Enable Base64 as part of --enable-all.
 2021-02-24 14:39:20 -06:00
Daniel Pouzzner
764207a9f5 Merge pull request #3806 from elms/autoconf/oot_fips_check 
configure: fix for FIPS out-of-tree builds
 2021-02-24 14:38:26 -06:00
toddouska
94a23c1d48 Merge pull request #3646 from julek-wolfssl/nginx-1.19.6 
Add support for Nginx 1.19.6
 2021-02-24 12:21:51 -08:00
toddouska
d8a053ac35 Merge pull request #3809 from embhorn/zd11773 
Warnings and error fixes
 2021-02-24 12:14:08 -08:00
Elms
36ba2e134b configure: FIPS error and compatability cleanup 
Use autotools macros for case and if. Simplify validation logic.
 2021-02-24 08:53:50 -08:00
Eric Blankenhorn
1d16af4f32 Warnings and error fixes 2021-02-24 09:08:15 -06:00
Felix Lechner
ae28550667 Enable Base64 as part of --enable-all. 
Part of an effort to standardize build options across distributions.

When building with all options, this includes Base64, a feature that
was requested in the past.

This commit passed Debian's Salsa CI pipeline [1] as part of a larger
commit streamlining the build options for distributions. [2]

A related pull request by douzzer activated reproducible builds for
distributions by default. [3]

Thanks to David Garske for his generous contributions to this commit!

[1] https://salsa.debian.org/lechner/wolfssl/-/pipelines/233601
[2] https://salsa.debian.org/lechner/wolfssl/-/blob/debian/master/debian/patches/standardize-distro-options.patch
[3] e30b3d3554
 2021-02-23 19:46:56 -08:00
David Garske
ac38e53fec Merge pull request #3804 from tmael/aws-sdk 
Use Unix line endings
 2021-02-23 18:33:07 -08:00
David Garske
e30b3d3554 Merge pull request #3807 from douzzer/distro-reproducible-build 
--enable-distro implies --enable-reproducible-build
 2021-02-23 18:32:04 -08:00
Daniel Pouzzner
9dadd02fb9 configure.ac move --enable-distro handling to top (preceding --enable-reproducible-build handling), and turn on reproducible-build by default when enable-distro; fix spelling error in reproducible-build help text. 2021-02-23 17:05:44 -06:00
Sean Parkinson
3cdbc242b4 Merge pull request #3803 from dgarske/zd11759 
Fix misplaced endif and brace
 2021-02-24 09:04:38 +10:00
Elms
47872224d8 configure: fix for FIPS out-of-tree builds 
Check for fips files relative to source directory.
 2021-02-23 14:17:35 -08:00
David Garske
7a71ec4692 Merge pull request #3802 from tmael/pkcs8err 
Fix PKCS8 build config
 2021-02-23 13:42:17 -08:00
JacobBarthelmeh
0dfdf92ff7 Merge pull request #3784 from elms/cmake_curve_ed 
configure: ED448 to enable SHA3 and SHAKE256 properly
 2021-02-24 03:20:38 +07:00
toddouska
5eba89c3ca Merge pull request #3742 from julek-wolfssl/error-queue-per-thread 
Add --enable-error-queue-per-thread
 2021-02-23 12:02:16 -08:00
toddouska
ef916df1b1 Merge pull request #3761 from JacobBarthelmeh/Release 
update changelog and bump version to 4.7.1 for development bundles
 2021-02-23 12:00:59 -08:00
toddouska
60614ff8b1 Merge pull request #3772 from SparkiDev/sp_ecdsa_set_k 
SP ECDSA sign: fix multiple loops work of generating k
 2021-02-23 12:00:21 -08:00
toddouska
a1db869491 Merge pull request #3775 from haydenroche5/openldap 
Add a define to openssl/ssl.h needed for openldap port.
 2021-02-23 11:58:37 -08:00
toddouska
363185669a Merge pull request #3776 from cconlon/pkcs7testfix 
fix wolfCrypt PKCS#7 test when PKCS7_OUTPUT_TEST_BUNDLES is defined
 2021-02-23 11:58:00 -08:00
toddouska
e471cba8df Merge pull request #3780 from SparkiDev/tls13_key_up_resp 
TLS 1.3: add API to tell if a KeyUpdate response is required
 2021-02-23 11:57:10 -08:00
Tesfa Mael
d3c8720b56 Use Unix line endings 2021-02-23 11:54:02 -08:00
toddouska
244accece1 Merge pull request #3799 from SparkiDev/sp_gcd_protect 
SP int: fix guard around sp_gcm and sp_lcm
 2021-02-23 11:53:25 -08:00
David Garske
6cc137dce0 Fix misplaced endif and brace. 2021-02-23 10:22:59 -08:00
Tesfa Mael
b199c2e444 Fix PKCS8 test 2021-02-23 09:33:14 -08:00
Juliusz Sosinowicz
d074e7443f Remove default ticket cb as this will be added in another PR 2021-02-23 10:06:11 +01:00
Sean Parkinson
22349e0539 Merge pull request #3800 from dgarske/zd11759 
Fixes for warnings in Windows and failing `wc_BufferKeyEncrypt` test
 2021-02-23 17:07:14 +10:00
David Garske
b5239f97c4 Fixes for warnings in Windows. Fix for failing wc_BufferKeyEncrypt with PBKDF disabled. ZD 11759. 2021-02-22 16:51:17 -08:00
David Garske
3ac40be091 Merge pull request #3797 from tmael/builderr 
Correct a build error with a non-standard configurations
 2021-02-22 16:33:01 -08:00
Sean Parkinson
d2f9f4c4ce SP int: fix guard around sp_gcm and sp_lcm 2021-02-23 10:21:32 +10:00
Sean Parkinson
fc6394b923 Merge pull request #3796 from elms/fix_valgrind_fpecc 
tests: fix preprocessor test for gcd/lcm
 2021-02-23 09:42:35 +10:00
John Safranek
e9cdcf5bac Merge pull request #3764 from embhorn/zd11668 
Fix typo
 2021-02-22 14:12:12 -08:00
Tesfa Mael
243c3ceacc Fix build err 2021-02-22 13:36:21 -08:00
Elms
c4d2e7cfdb configure: split SHA3 and SHAKE256 to work with ED448 
Define flags and defaults early, but set CFLAGS later to allow
override.
 2021-02-22 10:14:21 -08:00
Elms
451b8ede51 tests: fix preprocessor test for gcd/lcm 
Fixes `--enable-valgrind --enable-fpecc --enable-ecc` build
 2021-02-22 09:53:55 -08:00
Sean Parkinson
41c4a25b25 Merge pull request #3785 from embhorn/zd11752 
Fix ret val for wolfSSL_BIO_set_ssl
 2021-02-22 08:34:47 +10:00
Eric Blankenhorn
ebb2c7ae71 Fix ret val for wolfSSL_BIO_set_ssl 2021-02-19 16:35:01 -06:00
David Garske
078d78a884 Merge pull request #3782 from JacobBarthelmeh/Async 2021-02-19 14:24:09 -08:00