JacobBarthelmeh
14deb7afda
Merge pull request #6700 from julek-wolfssl/dtls13-downgrade-acks
...
DTLS 1.3: do not send ACKs until we negotiate 1.3 (through SH)
2023-08-25 09:34:53 -06:00
JacobBarthelmeh
c9e9e0fc72
Merge pull request #6704 from icing/session-copy-on-write
...
Updating a shared session objects needs to do copy on write
2023-08-24 16:52:17 -06:00
JacobBarthelmeh
2f2dddde25
Merge pull request #6727 from bigbrett/tls13-sniffer-keylogfile
...
TLS 1.3 sniffer keylog file support
2023-08-24 16:52:00 -06:00
Brett Nicholas
15918d8ee6
First pass at TLS1.3 keylog file working
2023-08-24 13:04:59 -06:00
JacobBarthelmeh
5f44a73f8e
Merge pull request #6725 from julek-wolfssl/zd/16598
...
TLSX_CA_Names_Parse: Include header in length check
2023-08-24 10:30:07 -06:00
Juliusz Sosinowicz
82c5170659
TLSX_CA_Names_Parse: Include header in length check
2023-08-24 15:23:37 +02:00
Juliusz Sosinowicz
8ce71cc19c
Call HaveUniqueSessionObj when we need to have a unique session object
2023-08-24 15:01:22 +02:00
Sean Parkinson
36b92a4cef
Thumb2 ASM, Curve25519
...
Add support for compiling ASM for Thumb2
Add Curve25519 ASM for Thumb2
Limit assembly code compiled when Ed25519 not required.
Rework all assembly implementations to replace ge_*() functions instead
of having fe_ge_*() versions that take many parameters.
Get ARM32 inline asm working.
2023-08-24 17:43:03 +10:00
Juliusz Sosinowicz
a99954c0b0
Update dtls_expected_peer_handshake_number when downgrading
2023-08-23 23:20:51 +02:00
Juliusz Sosinowicz
5624b6e9d2
Update comment
2023-08-23 23:20:51 +02:00
Juliusz Sosinowicz
058dfca809
Use explicit field to signal that we received a unified hdr
2023-08-23 23:20:51 +02:00
Juliusz Sosinowicz
3cc473b1ec
Check that HVR and HRR don't appear in the same connection
2023-08-23 22:18:21 +02:00
Juliusz Sosinowicz
9427bea275
DTLS 1.3: do not send ACKs until we negotiate 1.3 (through SH)
2023-08-23 22:18:21 +02:00
Stefan Eissing
7b29362d90
Updating a shared session objects needs to do copy on write
2023-08-23 22:15:25 +02:00
JacobBarthelmeh
3033371abc
Merge pull request #6717 from bigbrett/sniffer-keylogfile
...
sniffer keylog file support
2023-08-22 14:06:27 -06:00
Brett Nicholas
66c53b0996
Decoupled keylogfile registration and sniffer server creation APIs
...
fixed (very old) use-after-free found by ASAN
Updated documentation
review comments (spelling and housekeeping)
2023-08-22 11:29:58 -06:00
Brett Nicholas
2ee6a01d91
Initial sniffer keylog file support for TLS 1.2
2023-08-22 11:23:46 -06:00
JacobBarthelmeh
205cdb1809
Merge pull request #6719 from anhu/MBSTRING_ASC
...
Support MBSTRING_ASC for cert encoding
2023-08-22 09:29:50 -06:00
Anthony Hu
7669f966f3
Support MBSTRING_ASC for cert encoding
2023-08-18 17:50:25 -04:00
jordan
d4ba2e50d4
Used codespell and fixed obvious typos.
2023-08-17 15:20:10 -05:00
JacobBarthelmeh
cc4e327316
Merge pull request #6544 from TakayukiMatsuo/rpk
...
Add support for raw-public-key
2023-08-17 09:23:18 -06:00
Hideki Miyazaki
47caa9b06d
generalize sce protect impl to fsp sm(secure module)
2023-08-13 09:23:03 +09:00
TakayukiMatsuo
3a5739a8fa
Add support for raw-public-key
2023-08-11 11:29:15 +09:00
Juliusz Sosinowicz
e96837aa34
cond: Add start and end API for mutex handling
2023-08-10 18:07:51 +02:00
JacobBarthelmeh
12685d7713
Merge pull request #6686 from dgarske/fix_cond
...
Fixes for wolfSSL conditional porting
2023-08-09 12:08:05 -06:00
JacobBarthelmeh
35f4a1a09d
Merge pull request #6672 from anhu/cert_err_message
...
Add some OpenSSL compat error strings.
2023-08-09 09:28:51 -06:00
Juliusz Sosinowicz
d747df2ae4
Make sure no mutexes are held when cond API are called
2023-08-09 16:25:58 +02:00
Juliusz Sosinowicz
7ba00f3b84
Initialize BIO methods at compile time
2023-08-09 16:23:46 +02:00
Anthony Hu
5daabe0801
Suggestion from Jacob to remove OPENSSL_EXTRA_X509_SMALL
2023-08-08 16:35:55 -04:00
David Garske
5b16586483
Fixes for wolfSSL conditional porting. Can cause deadlock in high usage situations. Added better signal support on MacOS. Issue created in PR #6437 .
2023-08-08 12:46:42 -07:00
Daniel Pouzzner
e51ca7941f
fixes for code warned by clang-tidy:18 and cppcheck-2.11:
...
bugprone-inc-dec-in-conditions: examples/server/server.c:server_test(), src/internal.c:MatchDomainName(), src/x509.c:wolfSSL_X509_set_ext(), wolfcrypt/src/asn.c:MatchBaseName()
missingReturn: wolfcrypt/src/wc_port.c:mystrnstr()
bugprone-unused-return-value: wolfcrypt/src/wc_port.c:wolfSSL_NewThreadNoJoin()
clang-analyzer-deadcode.DeadStores: wolfssl/test.h:udp_accept()
2023-08-05 12:28:41 -05:00
JacobBarthelmeh
65b515aec8
Merge pull request #6655 from julek-wolfssl/threading-testing
...
Port testing to wolfSSL threading interface
2023-08-04 13:46:14 -06:00
Anthony Hu
cec438a4e4
Add some OpenSSL compat error strings.
2023-08-04 13:26:28 -04:00
Juliusz Sosinowicz
90a6a14878
Merge pull request #6446 from JacobBarthelmeh/session
2023-08-04 11:34:59 +02:00
Juliusz Sosinowicz
67d6d438c5
Port testing to wolfSSL threading interface
2023-08-04 10:49:39 +02:00
JacobBarthelmeh
7f0cfcb27d
Merge pull request #6667 from bandi13/byebyeCyaSSL
...
Byebye cya ssl
2023-08-03 15:43:01 -06:00
Andras Fekete
a6c850d7f9
Fix CAVP errors
2023-08-03 12:05:40 -04:00
Juliusz Sosinowicz
8a9a363621
DTLS 1.3: move state machine forward when HVR received
2023-08-03 15:00:14 +02:00
Juliusz Sosinowicz
907a0201e7
Require HAVE_SECURE_RENEGOTIATION for API that perform SCR (not just indication)
2023-08-03 11:32:42 +02:00
Juliusz Sosinowicz
5a94dc961d
DtlsShouldDrop: don't ignore app data sent before a SCR handshake
2023-08-03 11:32:03 +02:00
Andras Fekete
b31e485dc9
Remove 'HAVE_FIPS_VERSION < 2' blocks
2023-08-02 17:08:03 -04:00
Juliusz Sosinowicz
dee32247b9
Code review
2023-08-02 18:02:41 +02:00
Juliusz Sosinowicz
bfe7bc0fcc
Recover when the client sends a 0-length session ID when using tickets
...
Fixes ZD16477
2023-08-02 18:02:30 +02:00
Juliusz Sosinowicz
724fe53379
DoHelloVerifyRequest: only do DTLS 1.3 version check
2023-08-02 10:30:12 +02:00
Andras Fekete
25f542adb4
Clean up compile errors
2023-08-01 15:46:18 -04:00
JacobBarthelmeh
1468d77e50
Merge pull request #6644 from julek-wolfssl/zd/16441
...
TLSX_CA_Names_Parse: Verify the length of the extension
2023-07-31 16:03:23 -06:00
Juliusz Sosinowicz
854ae0dcdb
Code review
2023-07-31 15:16:59 +02:00
Juliusz Sosinowicz
a495bb4e7f
TLSX_CA_Names_Parse: make sure to do cleanup when smallstack is on
2023-07-28 16:34:35 +02:00
Dimitri Papadopoulos
6d9c85a762
Fix typos found by codespell
2023-07-27 23:38:44 +02:00
David Garske
c529b2f3aa
Merge pull request #6627 from jpbland1/ocsp-nonce-usage-fix
...
fix bad & statement that was setting ocspSendNonce
2023-07-27 09:22:08 -07:00