12d79d8838
wc_port: guard fcntl behind WOLFSSL_KERNEL_MODE.
2026-05-27 14:52:54 -05:00
e55e8a9842
Merge pull request #10524 from JacobBarthelmeh/sgx
...
SGX build does not have fcntl.h
2026-05-27 12:06:05 -07:00
f6d6ae687a
tests/api/test_mldsa_legacy.c: fix bugprone-macro-parentheses in MLDSA_LEGACY_SIZE_ASSERT().
...
wolfssl/wolfcrypt/wc_mldsa.h: move WOLFSSL_MLDSA_NO_CTX setup to precede legacy dilithium.h header, so that the _NO_CTX remap macros are properly gated in.
2026-05-27 14:02:37 -05:00
7de624ff08
Add negative length validation to d2i wrappers, PEM helpers, and buffer loaders
...
Reject negative signed lengths before they are cast to unsigned (word32/size_t),
preventing heap buffer over-reads and oversized allocations. Covers d2i_* OpenSSL
compat wrappers, ProcessBuffer, PemToDer, certgen helpers, and CRL buffer paths.
2026-05-27 11:36:38 -07:00
bddf76d4d1
fix memory report and add path filter
2026-05-27 19:18:00 +01:00
73b4f7b5fd
For chachapoly, force zero of output on auth fail
2026-05-27 13:55:15 -04:00
4e491ed3db
Merge pull request #10511 from dgarske/zd21780
...
Fix minor compile error with `WOLFSSL_DEBUG_MEMORY`
2026-05-27 11:16:19 -06:00
39a3546b64
Merge pull request #10519 from sebastian-carpenter/flaky-ech-test
...
CI Fix: fix flaky ECH test
2026-05-27 11:09:18 -06:00
3fa4ebcaec
Merge pull request #10527 from mattia-moffa/20260525-writedup-no-dtls
...
Allow --enable-writedup when DTLS is disabled
2026-05-27 11:02:55 -06:00
c568755751
Merge pull request #10528 from julek-wolfssl/tls/maxsigalgos
...
Default WOLFSSL_MAX_SIGALGO to 128
2026-05-27 11:01:54 -06:00
cd82d7e08d
Merge pull request #10529 from SparkiDev/sp_fixes_8
...
sp_int: fixes and added testing
2026-05-27 10:59:24 -06:00
43fabc694f
Check SNI/ALPN in TLS 1.2 stateful session ID resumption
2026-05-27 09:16:34 -04:00
7cf84dd833
Merge pull request #10523 from dgarske/ci_opt2
...
CI: cache compiler output in os-check Ubuntu matrix
2026-05-26 19:35:03 -06:00
5b08bc04b2
set MD5 min hash size when using --enable-wolfclu
2026-05-26 17:58:23 -06:00
91f3e7e063
Merge pull request #10332 from jackctj117/SNI
...
tls.c: send missing_extension alert on TLS 1.3 SNI absence
2026-05-27 08:37:05 +10:00
10020f9cc9
Fix minor compile error with WOLFSSL_DEBUG_MEMORY
2026-05-26 11:39:34 -07:00
8199fda0a4
Merge pull request #10160 from Roy-Carter/feature/integrate_openssl_comp_fixes
...
OpenSSL compatibility layer extension
2026-05-26 10:39:14 -07:00
cd2713a731
Default WOLFSSL_MAX_SIGALGO to 128
2026-05-26 17:37:11 +00:00
08022ffebf
CI: cache compiler output in os-check Ubuntu matrix
...
- Add .github/actions/ccache-setup composite (ccache + PATH intercept).
- Wire into os-check.yml make_check_linux; macOS unchanged for now.
- Measured on master --enable-all: cold 11.6s -> warm 1.1s (~10x), 100% hit.
2026-05-26 10:36:49 -07:00
291ec20d4e
stash caller heap before cryptocb fires so InitCmac_* callbacks can honor it
2026-05-26 09:51:59 -06:00
a3f5260260
Merge pull request #10500 from rizlik/sha224_only
...
crpytocb: support SHA224 under WOLF_CRYPTO_CB_ONLY_SHA256
2026-05-26 08:05:47 -07:00
52620e3204
Merge pull request #10516 from Frauschi/mldsa_rename
...
Finalize ML-DSA renaming
2026-05-26 08:05:04 -07:00
0c15be5fef
Revert ".wolfssl_known_macro_extra: add ONLY_AES and ONLY_SHA256"
...
This reverts commit 87f8078367
2026-05-26 15:48:06 +02:00
637c07798a
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
bc574f7930
dtls13: WOLFSSL_DTLS13_5_9_0_COMPAT -> WOLFSSL_DTLS13_ECHO_LEGACY_SESSION_ID
2026-05-26 09:16:56 +02:00
87f8078367
.wolfssl_known_macro_extra: add ONLY_AES and ONLY_SHA256
2026-05-26 09:16:53 +02:00
e6fa789e68
test_dtls: remove non-ASCII chars
2026-05-26 09:15:58 +02:00
7592b481e7
test: dtls: add WOLFSSL_DTLS13_5_9_0_COMPAT related tests
2026-05-26 09:15:58 +02:00
8f477356ce
dtls: add compat flag for buggy pre 5.9.0 DTLSv1.3 clients
2026-05-26 09:15:58 +02:00
8fb88a502d
SP x86_64: save and restore vector registers
...
Add save and restore vector registers calls to SP code for x86_64.
2026-05-26 16:30:40 +10:00
c57a873824
sp_int: fixes and added testing
...
sp_set_bit(): check i is in range before use.
_sp_div_2(): Use a constant-time clamp as called by a constant-time
function.
_sp_sqr(): static buffer needs to be one larger for when ECC with P-521
is the largest size.
Add tests:
- Testing negative numbers with mp_read_raidx/mp_to_radix 10/16
- Testing negative numbers with mp_add_d/mp_sub_d
- Testing of mp_gcd without mp_lcm
- More testing of mp_mod_d and when negative numbers are used
- Check maximum values work for square. Check of _sp_sqr() bug
- Add testing of mp_add/sub_mod_ct
- Add testing of mp_cmp_mag
- Add testing of mp_mulmod/mp_sqrmod
- Add testing of mp_exch
- Add testing of mp_to_unsigned_bin_len_ct
- Add testing of mp_exptmod that uses base-2 windowing method.
- Add testing of mp_invmod_mont_ct
2026-05-26 13:52:57 +10:00
1f619a9f50
Allow --enable-writedup when DTLS is disabled
2026-05-25 17:34:32 +02:00
887f242ee8
Merge pull request #10522 from dgarske/retrigger_prb_on_ready
...
GH Actions: retrigger Jenkins PRB when draft PR is marked ready
2026-05-25 20:55:05 +10:00
8c0d3b7ea1
SGX build does not have fcntl.h
2026-05-22 23:20:36 -06:00
b0d2b10c6b
GH Actions: retrigger Jenkins PRB when draft PR is marked ready
2026-05-22 15:14:50 -07:00
497de930fd
evp: support ML-DSA in wolfSSL_EVP_PKCS82PKEY() and wolfSSL_X509_check_private_key()
2026-05-22 14:56:14 -06:00
a9e15634db
asn: parse RFC 5958 PKCS#8 (OneAsymmetricKey) publicKey trailer in ToTraditional_ex()
2026-05-22 14:55:38 -06:00
d4ed43853f
flaky ECH test: fix method for finding ECH extension
2026-05-22 10:48:56 -06:00
b20c1db02e
Refactor - Fix pr notes + compilation error for a test
2026-05-22 19:24:53 +03:00
3aa3201ed0
Fix - leantls defines NO_PWDBASED , also add !NO_ASN guard for clarity .
2026-05-22 19:24:53 +03:00
07d71a3b87
Cosmetic - remove mirrored irrelevant note
2026-05-22 19:24:53 +03:00
210c2e45f6
Fix: Implement with const char and not der like in read
2026-05-22 19:24:53 +03:00
5403298327
Refactor - Split test to two different functions
2026-05-22 19:24:53 +03:00
e638f8ec61
Refactor: remove incorrect check against NULL , passwd and cipher can be NULL
2026-05-22 19:24:53 +03:00
96e966e779
Feat: Allow for a wrapper for pem write privatekey & PUBKEY
2026-05-22 19:24:53 +03:00
eb32554bdb
Fix: support adding UE to excluded strings
2026-05-22 19:01:05 +03:00
dc86dc34a8
Fix: change test string to the new format
2026-05-22 19:01:05 +03:00
8f15bf6d10
fix : bad merge conflics leftovers.
2026-05-22 19:01:05 +03:00
56e4612e4e
Fix : apply Julek pr notes
2026-05-22 19:01:05 +03:00
f15c896551
Build_fix:
...
When building with --enable-opensslextra=x509small, only OPENSSL_EXTRA_X509_SMALL is defined, not OPENSSL_EXTRA, so these functions are not compiled into the library
2026-05-22 19:01:05 +03:00
jordan
David Garske
Daniel Pouzzner
Colton Willey
Michael Rogov Papernov
Anthony Hu
JacobBarthelmeh
Josh Holtrop
Zackery
Sean Parkinson
Juliusz Sosinowicz
night1rider
Marco Oliverio
Tobias Frauenschläger
Mattia Moffa
Chris Conlon
sebastian-carpenter
Roy Carter