83954100d6
Merge pull request #8812 from kosmax871/tropic01-dev
...
Added crypto callback functions for TROPIC01 secure element
2025-06-17 10:03:18 -07:00
9defad0b24
Check for STDC_NO_ATOMICS
2025-06-17 11:40:07 -05:00
9c54032159
Add bind v9.18.33 testing
2025-06-17 18:38:38 +02:00
5e6c1ba05f
Merge pull request #8879 from julek-wolfssl/openssh-10.0p2
...
Updates for OpenSSH 10.0p2
2025-06-17 09:36:45 -07:00
d28045daa8
wolfcrypt/test/test.c: fix prime_test() uninitialized data access by wc_FreeRng().
2025-06-17 09:31:19 -05:00
3e5e470005
Merge pull request #8876 from philljj/small_drbg_cleanup
...
linuxkm drbg: refactor drbg_ctx clear.
2025-06-16 16:33:57 -05:00
037ccbaa05
Update TROPIC01 integration guide and header file for key slot definitions and datasheet link
2025-06-16 21:12:19 +02:00
842e2366e3
Merge pull request #8881 from douzzer/20250615-heapmath-FREE_MP_INT_SIZE
...
20250615-heapmath-FREE_MP_INT_SIZE
2025-06-16 11:46:12 -07:00
5151a2297a
Merge pull request #8880 from holtrop/fix-printing-cert-with-empty-issuer-name
...
Fix printing empty names in certificates
2025-06-16 11:37:02 -07:00
cafb1f5fd7
Merge branch 'tropic01-dev' of github.com:kosmax871/wolfssl into tropic01-dev
2025-06-16 20:32:30 +02:00
f865e0de97
improve ED25519 key handling in CryptoCb function
2025-06-16 20:27:15 +02:00
60f442b04e
Fix formatting inconsistencies in README.md
2025-06-16 20:27:15 +02:00
bab7677273
Added AES IV retrieval from TROPIC01 and use of new R-Memory slot definitions
2025-06-16 20:27:15 +02:00
3b198babe3
Add Tropic01_Deinit call in wolfCrypt_Cleanup for proper resource management
2025-06-16 20:27:15 +02:00
172728bf7f
Refactor Tropic01 interface: clean up code formatting and improve function declarations
2025-06-16 20:27:15 +02:00
5696582add
Update README.md
2025-06-16 20:27:15 +02:00
375af753aa
Changes for the PR https://github.com/wolfSSL/wolfssl/pull/8812
2025-06-16 20:27:15 +02:00
2f210b3907
Refactor TROPIC01 integration: update README, enhance pairing key handling, and improve error messages
2025-06-16 20:27:15 +02:00
296bfd258c
README.md added
2025-06-16 20:27:15 +02:00
0eecfbfb35
ed25519 fixes
2025-06-16 20:27:15 +02:00
cd76615e49
added support of ED25519
2025-06-16 20:27:15 +02:00
7c1980fe01
some fixes and updates
2025-06-16 20:27:15 +02:00
b13fdaa05e
Draft of readme.md
2025-06-16 20:27:15 +02:00
5664507e65
Support for static libraries
2025-06-16 20:27:15 +02:00
385be1c08a
added support for Tropic01 crypto callbacks
2025-06-16 20:27:15 +02:00
3da72fb9b6
Merge branch 'wolfSSL:master' into tropic01-dev
2025-06-16 19:30:32 +02:00
9a576d9e2e
Fix CI failures
2025-06-16 19:07:58 +02:00
e82c099bec
fix indentation
2025-06-16 18:42:17 +02:00
72db5e5108
Remove NO_FILESYSTEM for CI
2025-06-16 18:06:19 +02:00
aca6da66f6
Set default seedCb when not FIPS
2025-06-16 17:39:22 +02:00
3bd9b2e0bc
Add generation instructions for empty issuer cert and change expiry to 100 years
2025-06-16 11:39:01 -04:00
ce61f0d517
account for Intel RDRAND build without HAVE_HASHDRBG
2025-06-16 09:04:50 -06:00
b1b49c9ffb
dtls13: always send ACKs on detected retransmission
...
Otherwise the connection can stall due the indefinite delay of an explicit ACK,
for exapmle:
-> client sends the last Finished message
<- server sends the ACK, but the ACK is lost
-> client rentrasmit the Finished message
- server delay sending of the ACK until a fast timeout
-> client rentrasmit the Finished message quicker than the server timeout
- server resets the timeout, delaying sending the ACK
-> client rentrasmit the Finished...
2025-06-16 14:19:32 +02:00
509491f554
dtls13: wolfSSL_is_init_finished true after last server ACK
...
Do not consider the handshake finished until the last server ACK.
This way the application knows where to switch from
wolfSSL_negotiate/wolfSSL_connect to wolfSSL_read/wolfSSL_write.
2025-06-16 14:19:31 +02:00
d5ce9744a4
linuxkm/lkcapi_sha_glue.c: explicitly free hash state in wrappers.
2025-06-15 14:40:42 -05:00
89e51025ab
.wolfssl_known_macro_extras: snip out unneeded entries.
2025-06-15 12:46:44 -05:00
e852c090c0
wolfssl/wolfcrypt/integer.h: for heapmath FREE_MP_INT_SIZE(), rather than WC_DO_NOTHING(), conditionally mp_free(), for functional isomorphism with sp_int and tfm MPI lifecycles.
2025-06-15 07:56:25 -05:00
05ff12969e
Merge pull request #8864 from kojiws/improve_pkcs12_export_params
...
Apply 16 bytes salt length for PBES2 key encryption on wc_PKCS12_create()
2025-06-13 14:12:37 -07:00
37554a13db
Updates for OpenSSH 10.0p2
...
- random.c: use getrandom when available and fall back to direct file access
- openssh.yml: run more tests
- openssh.yml: add 10.0p2 and 9.9p2
- configure.ac: detect if `getrandom` is available on the system
- configure.ac: openssh requires WC_RNG_SEED_CB to always use `getrandom` so that the RNG doesn't get killed by SECCOMP
2025-06-13 18:06:19 +02:00
ff1baf0ae7
Apply stronger salt length for PBES2
2025-06-14 00:45:03 +09:00
8bde5e6982
Fix printing empty names in certificates
...
The empty-issuer-cert.pem certificate was created with:
wolfssl genkey rsa -size 2048 -out mykey -outform pem -output KEY
wolfssl req -new -days 3650 -key mykey.priv -out empty-issuer-cert.pem -x509
Prior to this fix this command would error printing the certificate:
wolfssl x509 -inform pem -in empty-issuer-cert.pem -text
2025-06-13 11:22:52 -04:00
e74214ded0
Merge pull request #8878 from dgarske/fix_pr8867_oscheck
...
Fix for syntax error in os-check.yml
2025-06-13 09:09:27 -06:00
8181561f0f
Fix for syntax error in os-check.yml added in PR #8867 .
2025-06-13 07:17:37 -07:00
1549425411
Merge pull request #8873 from philljj/fix_fips_enabled
...
linuxkm: don't toggle fips_enabled.
2025-06-13 05:56:52 -05:00
b6b58a957b
linuxkm: add missing WC_NO_ERR_TRACE.
2025-06-13 01:45:47 -05:00
bb5291aa5e
linuxkm: don't toggle fips_enabled.
2025-06-13 00:45:12 -05:00
41965750c8
linuxkm drbg: refactor drbg_ctx clear.
2025-06-12 19:59:19 -05:00
6cb0c8513d
Merge pull request #8874 from JacobBarthelmeh/nginx-tests
...
fix for perl module version used with nginx test
2025-06-12 16:09:31 -07:00
b78f8a4ed6
fix for perl module version used with nginx test
2025-06-12 15:55:56 -06:00
c5e63b84ca
Merge pull request #8840 from douzzer/20250605-linuxkm-DRBG-multithread-round-1
...
20250605-linuxkm-DRBG-multithread-round-1
2025-06-12 13:17:54 -07:00
David Garske
Eric Blankenhorn
Juliusz Sosinowicz
Daniel Pouzzner
Maxim Kostin
Marco Oliverio
Josh Holtrop
JacobBarthelmeh
Koji Takeda
jordan