JacobBarthelmeh
a1e2ba2cd3
Merge pull request #9036 from kareem-wolfssl/zd20239
...
Fix size used by signature context struct with WOLFSSL_NO_MALLOC.
2025-07-29 17:13:34 -06:00
Sean Parkinson
d7f85c533b
Merge pull request #9038 from JacobBarthelmeh/tcp
...
remove QEMU test host name lookup feature
2025-07-30 08:40:39 +10:00
JacobBarthelmeh
36912c3af8
Merge pull request #9000 from kojiws/import_mldsa_seed_pkcs8
...
Import ML-DSA's seed from PKCS8 file
2025-07-29 16:02:36 -06:00
Kareem
f130a9d44d
Alias MAX_SIG_SZ to MAX_ENCODED_SIG_SZ for backwards compatibility.
2025-07-29 13:58:35 -07:00
JacobBarthelmeh
26f4c968df
Merge pull request #9032 from holtrop/allow-pkcs7-without-aes-keywrap
...
Allow building with HAVE_PKCS7 set and HAVE_AES_KEYWRAP unset
2025-07-29 09:44:07 -06:00
JacobBarthelmeh
9aace48189
remove QEMU test host name lookup feature
2025-07-28 17:04:33 -06:00
Koji Takeda
189ba201f3
Follow copilot review
2025-07-29 07:15:32 +09:00
Josh Holtrop
26a4ea93eb
Allow building with HAVE_PKCS7 set and HAVE_AES_KEYWRAP unset
2025-07-28 12:40:35 -04:00
Koji Takeda
bbcdfe92e0
Disable exporting dilithium DER tests without WOLFSSL_ASN_TEMPLATE
2025-07-28 21:46:28 +09:00
Koji Takeda
778dcbaafb
Add test data
2025-07-28 21:46:28 +09:00
Koji Takeda
a82d1a6b12
Support importing seed of ML-DSA key
2025-07-28 21:46:28 +09:00
philljj
cc2f7927ec
Merge pull request #9035 from douzzer/20250725-wc_linuxkm_relax_long_loop
...
20250725-wc_linuxkm_relax_long_loop
2025-07-26 09:22:00 -05:00
Daniel Pouzzner
b0f6829614
20250725-wc_linuxkm_relax_long_loop: improvements from peer review: fix, clarify, and extend comments, improve indentation, and snip out a stray redundant preprocessor definition.
2025-07-26 08:27:43 -05:00
Kareem
5b888f809f
Fix size used by signature context struct. This matches the size used by sigCpy/sigSz when building without WOLFSSL_NO_MALLOC.
2025-07-25 15:50:38 -07:00
Daniel Pouzzner
77dccc0c32
linuxkm:
...
* add wc_linuxkm_check_for_intr_signals(), wc_linuxkm_relax_long_loop(),
WC_CHECK_FOR_INTR_SIGNALS(), WC_RELAX_LONG_LOOP(), SAVE_NO_VECTOR_REGISTERS(),
RESTORE_NO_VECTOR_REGISTERS(), and new error code INTERRUPTED_E ("Process
interrupted");
* update the no-asm remaps in the PK implementations to use
SAVE_NO_VECTOR_REGISTERS() and RESTORE_NO_VECTOR_REGISTERS(), so that inner
loops in them are always covered by the new logic.
2025-07-25 15:56:48 -05:00
David Garske
c347f75b3c
Merge pull request #9029 from holtrop/extract-kari-rid
...
Add wc_PKCS7_GetEnvelopedDataKariRid()
2025-07-25 09:04:11 -07:00
Josh Holtrop
804c4f20b5
Explicitly initialize some unit test variables to avoid warnings
2025-07-24 18:51:58 -04:00
Josh Holtrop
1226dedeb8
Check that we don't run out of space for the RID structure
2025-07-24 15:52:34 -04:00
Josh Holtrop
71bd9e2f6e
Make unit test more resilient to earlier errors
2025-07-24 15:46:01 -04:00
Josh Holtrop
6309b241cd
Fix some clang-tidy warnings in unit test
2025-07-24 15:42:55 -04:00
David Garske
a06268f705
Merge pull request #9010 from miyazakh/sce_tlsproperties_uc
...
Make properties related to Renesas FSP Security Module TLS hidden for FSP SM context
2025-07-24 12:35:56 -07:00
David Garske
2db1669713
Merge pull request #8988 from JacobBarthelmeh/visibility
...
remove WOLFSSL_API in source code when already used in header file
2025-07-24 11:00:55 -07:00
David Garske
e4a9ffd00e
Merge pull request #9031 from danielinux/fix-regression-rsa-verify-only
...
Fix warning with WOLFSSL_RSA_VERIFY_ONLY
2025-07-24 10:29:02 -07:00
JacobBarthelmeh
c25efcee92
Merge pull request #9028 from dgarske/md5_sha1
...
Fixes for building with MD5 and SHA1 to support Hash `WC_HASH_TYPE_MD5_SHA`
2025-07-24 10:41:22 -06:00
Josh Holtrop
cf843c8b82
Add wc_PKCS7_GetEnvelopedDataKariRid()
...
Allow access to recipient ID before attempting to decrypt content.
2025-07-24 11:15:30 -04:00
Daniele Lacamera
09de113145
Fix warning with WOLFSSL_RSA_VERIFY_ONLY
...
PR #8830 introduces a warning when WOLFSSL_NO_CT_OPS is selected.
However, in WOLFSSL_RSA_VERIFY_ONLY mode this is enforced in
wolfssl/wolfcrypt/settings.h:4035, forcing this warning to appear when
this configuration is used.
This PR takes into account the special case, allowing WOLFSSL_NO_CT_OPS
when WOLFSSL_RSA_VERIFY_ONLY, and removing the warning.
2025-07-24 16:13:00 +02:00
philljj
6750c29e67
Merge pull request #9027 from douzzer/20250723-linuxkm-fixes-and-testing-workflow
...
20250723-linuxkm-fixes-and-testing-workflow
2025-07-23 22:43:51 -05:00
David Garske
6aabc73845
Merge pull request #9018 from holtrop/decode-skp
...
Add API to decode SymmetricKeyPackage and OneSymmetricKey CMS objects
2025-07-23 16:01:58 -07:00
David Garske
44eba446ec
Merge pull request #9002 from holtrop/aes-key-wrap-callbacks
...
Add callback functions for custom AES key wrap/unwrap operations
2025-07-23 16:01:49 -07:00
David Garske
551ff3f1b6
Fixes for building with MD5 and SHA1 to support Hash WC_HASH_TYPE_MD5_SHA. ZD 20269.
2025-07-23 15:59:08 -07:00
David Garske
e1b3c43a2b
Merge pull request #8987 from gojimmypi/pr-espressif-allocators
...
Add wolfSSL_GetAllocators PSRAM support for Espressif ESP32
2025-07-23 15:33:53 -07:00
Daniel Pouzzner
5e57ec5c93
linuxkm/Kbuild: if ENABLED_LINUXKM_PIE, disable KASAN and UBSAN, to avoid external references (__ubsan_handle_out_of_bounds() etc.).
2025-07-23 17:30:14 -05:00
David Garske
c261bf4452
Merge pull request #9006 from rlm2002/zd20212
...
Coverity fixes for Zendesk issue
2025-07-23 15:29:20 -07:00
Daniel Pouzzner
ca6a12769f
linuxkm/linuxkm_wc_port.h: additional fixes for version gates;
...
.github/workflows/linuxkm.yml: add a second scenario with --enable-linuxkm-pie.
2025-07-23 16:57:24 -05:00
Daniel Pouzzner
b7b0ab6dbf
src/tls.c: fix double free just added to TLSX_KeyShare_GenPqcKeyClient().
2025-07-23 16:18:22 -05:00
Daniel Pouzzner
53de4a582e
add .github/workflows/linuxkm.yml;
...
linuxkm/Makefile: add support for FORCE_NO_MODULE_SIG.
2025-07-23 14:43:33 -05:00
Daniel Pouzzner
a447a991b0
linuxkm/Kbuild: add KERNEL_EXTRA_CFLAGS_REMOVE;
...
linuxkm/linuxkm_wc_port.h: fix version threshold for HAVE_KVREALLOC (6.12.0, not 6.11.0), and add manual overrides.
2025-07-23 14:31:52 -05:00
Daniel Pouzzner
8d7009e9de
src/tls.c: in TLSX_KeyShare_GenPqcKeyClient(), add smallstack coverage to !WOLFSSL_TLSX_PQC_MLKEM_STORE_OBJ code paths.
2025-07-23 12:02:07 -05:00
Daniel Pouzzner
5360738351
wolfssl/internal.h: don't gate in prototype for sockAddrEqual() if defined(WOLFSSL_NO_SOCK).
2025-07-23 11:17:31 -05:00
Josh Holtrop
2f2f999657
Rework to remove early function returns
2025-07-22 20:35:28 -04:00
Josh Holtrop
0d48911ae4
Update style per code review comments
2025-07-22 20:30:44 -04:00
Josh Holtrop
86d7d42eb6
Comment test ASN DER sequences
2025-07-22 20:29:44 -04:00
Josh Holtrop
7762fa9b14
Update style per code review comments
2025-07-22 20:09:55 -04:00
philljj
65126352a0
Merge pull request #9025 from douzzer/20250721-wolfssl_linuxkm_pie_redirect_table-direct
...
20250721-wolfssl_linuxkm_pie_redirect_table-direct
2025-07-22 18:08:11 -05:00
Hideki Miyazaki
5e77253577
Addressed code review comments
2025-07-23 07:44:30 +09:00
Daniel Pouzzner
6043274d96
linuxkm/Kbuild: revert change to base PIE_FLAGS -- we need -fno-stack-protector to avoid compiler-generated references to __stack_chk_fail.
2025-07-22 16:45:06 -05:00
David Garske
c7bc6e834e
Merge pull request #8996 from lealem47/match_ipv6
...
Add logic to match IPv6 domain addresses
2025-07-22 13:42:15 -07:00
Josh Holtrop
13fb6b83cd
Update style per code review comments
2025-07-22 16:38:13 -04:00
Josh Holtrop
27f0ef8789
Combine AES key wrap/unwrap callbacks
2025-07-22 16:34:37 -04:00
Daniel Pouzzner
c26f6ded14
linuxkm/linuxkm_wc_port.h: use more flexible logic to define WC_LKM_INDIRECT_SYM(), allowing various overrides and orthogonalizing the definitions proper, and add explanatory comments.
2025-07-22 14:40:45 -05:00
