15879 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Juliusz Sosinowicz	afa6237f56	Add WOLFSSL_FORCE_AUTO_RETRY option: force retrying of network reads	2021-12-16 15:33:30 +01:00
Marco Oliverio	fa913f797a	Merge pull request #4657 from SparkiDev/sakke_cond_add ... SAKKE: fixup cond add to use all words	2021-12-16 07:40:13 +01:00
Sean Parkinson	bd7e19b8fe	Merge pull request #4639 from JacobBarthelmeh/ECC ... deterministic ECC sign edge case fix and add variant	2021-12-16 08:48:37 +10:00
David Garske	abe8696852	Merge pull request #4642 from cconlon/pubKeyDerFromX509 ... Add wc_GetPubKeyDerFromCert()	2021-12-15 14:30:58 -08:00
John Safranek	e1cee463b6	Merge pull request #4662 from douzzer/20211214-fixits ... 20211214 fixits	2021-12-15 10:47:50 -08:00
Daniel Pouzzner	463118005f	Merge pull request #4663 from ejohnstown/revert-pr ... Revert configure.ac PR	2021-12-15 12:33:19 -06:00
John Safranek	8688bd43f1	Revert "Swap v5-ready (exception) and v5, add the wildcard back in for all non-ready cases" ... This reverts commit 23fbf2e786.	2021-12-15 10:24:05 -08:00
John Safranek	1b6e0c45d0	Merge pull request #4660 from kaleb-himes/FIPS_READY_KCAPI_FOLLOWUP ... Swap v5-ready (exception) and v5, add the wildcard back in for all non-ready cases	2021-12-15 10:16:33 -08:00
Chris Conlon	5172130287	add wc_GetPubKeyDerFromCert(), get pub key DER from DecodedCert	2021-12-15 11:04:52 -07:00
Daniel Pouzzner	a773cdfd5d	pkcs12.c wc_d2i_PKCS12_fp(): mollify Visual Studio (false positives C4701 and C4703).	2021-12-14 18:33:24 -06:00
Daniel Pouzzner	242eb2dcf1	wolfcrypt/src/pkcs12.c: fix scan-build deadcode.DeadStores gripe.	2021-12-14 18:08:54 -06:00
Daniel Pouzzner	eb032e0266	configure.ac: refactor changes of 7cccaa98b7 around FIPS v5*.	2021-12-14 18:08:12 -06:00
kaleb-himes	23fbf2e786	Swap v5-ready (exception) and v5, add the wildcard back in for all non-ready cases	2021-12-14 13:28:35 -07:00
David Garske	a6c7d56c32	Merge pull request #4655 from haydenroche5/wc_pkcs12_from_file ... Add wc_d2i_PKCS12_fp to parse a PKCS #12 file directly in wolfCrypt.	2021-12-14 08:58:57 -08:00
Sean Parkinson	994e370db3	SAKKE: fixup cond add to use all words	2021-12-14 12:02:59 +10:00
John Safranek	2359045b28	Merge pull request #4649 from kaleb-himes/KCAPI_FIPS_READY ... The minimal changes needed to add KCAPI support with fips-ready	2021-12-13 17:33:03 -08:00
Hayden Roche	92d207a1cd	Add wc_d2i_PKCS12_fp to parse a PKCS #12 file directly in wolfCrypt.	2021-12-13 15:28:34 -08:00
Sean Parkinson	f5cd61e4f9	Merge pull request #4654 from embhorn/zd13375 ... Fix _sp_exptmod_base_2 to init vars.	2021-12-14 07:38:20 +10:00
David Garske	7fd1b7aa51	Merge pull request #4650 from anhu/changelog ... Mention falcon in the changelog	2021-12-13 10:37:07 -08:00
kareem-wolfssl	638d00f593	Merge pull request #4634 from danielinux/iotsafe-16bit-id ... IoT-SAFE module: improvements and bug fixes	2021-12-13 11:33:19 -07:00
David Garske	caf9024984	Merge pull request #4652 from douzzer/no-rsa-no-dh-no-dsa ... WOLFSSL_ECC_NO_SMALL_STACK etc	2021-12-13 10:12:14 -08:00
David Garske	9a85638ac3	Merge pull request #4647 from anhu/evp_pkey_dummy_falcon ... In d2iGenericKey(), if a falcon key is encountered, make a dummy pkey.	2021-12-13 10:12:07 -08:00
Eric Blankenhorn	53eb5d2e5a	Fix _sp_exptmod_base_2 to init vars.	2021-12-13 10:16:55 -06:00
Daniel Pouzzner	355b779a3e	feature gating tweaks to better support --disable-rsa --disable-dh --disable-dsa. also a whitespace fix in ssl.c.	2021-12-11 14:08:04 -06:00
Daniel Pouzzner	2193df1d62	add WOLFSSL_ECC_NO_SMALL_STACK.	2021-12-10 23:57:14 -06:00
David Garske	41d4aafa3f	Merge pull request #4645 from haydenroche5/parse_cert_public ... Make wolfCrypt ASN cert parsing functionality public.	2021-12-10 18:27:18 -08:00
Anthony Hu	eec9649049	Mention falcon in the changelog	2021-12-10 16:54:13 -05:00
kaleb-himes	7cccaa98b7	The minimal changes needed to add KCAPI support with fips-ready	2021-12-10 14:44:20 -07:00
Anthony Hu	4c12f0be95	Only one call to wc_falcon_init() and comment on 300.	2021-12-10 16:40:41 -05:00
Anthony Hu	1d8ff70900	In d2iGenericKey(), if a falcon key is encountered, make a dummy pkey. ... This allows apache-httpd to work without PQ-specific patch along with a previous pull request.	2021-12-10 14:18:42 -05:00
Hayden Roche	6764e7c15f	Make wolfCrypt ASN cert parsing functionality public. ... Currently, the `ParseCert` function is only available if `WOLFSSL_ASN_API` is defined to `WOLFSSL_API`. The only way to achieve this without enabling the compatibility layer is to define `WOLFSSL_TEST_CERT`. There are users defining this so that they can parse certs with wolfCrypt, even though this doesn't seem to be the original intent of the define. This commit adds the function `wc_ParseCert` to the public wolfCrypt API. It's simply a wrapper around `ParseCert`. Similarly, this commit adds `wc_InitDecodedCert` and `wc_FreeDecodedCert` to the public API, which are wrappers around `InitDecodedCert` and `FreeDecodedCert`, respectively.	2021-12-10 10:43:28 -08:00
David Garske	dde8cd9039	Merge pull request #4646 from julek-wolfssl/SSL_OP_NO_COMPRESSION-redef-error ... Fix redefinition error of `WOLFSSL_OP_NO_COMPRESSION`	2021-12-10 08:46:43 -08:00
David Garske	65a0b71994	Merge pull request #4641 from anhu/priv_key_check ... Actually do a private/public key check for FALCON.	2021-12-10 06:53:35 -08:00
Juliusz Sosinowicz	e40ba00ece	Fix redefinition error of WOLFSSL_OP_NO_COMPRESSION	2021-12-10 15:11:11 +01:00
Anthony Hu	6b5fa9d0ae	remove consistency check; let it fail elsewhere.	2021-12-09 17:12:42 -05:00
David Garske	b921161309	Merge pull request #4633 from SparkiDev/tls13_expired ... TLS13: Skip if expired rather than turning off resuming	2021-12-09 14:10:42 -08:00
David Garske	dd0e3d6ebf	Merge pull request #4644 from kareem-wolfssl/iotsafe_class ... Fix compiling Iotsafe with C++ by avoiding reserved keyword 'class'.	2021-12-09 09:10:24 -08:00
Anthony Hu	494abde3eb	Better casting.	2021-12-09 09:45:28 -05:00
Daniele Lacamera	f02763b088	Fixes after review comments	2021-12-09 11:23:44 +01:00
David Garske	4764c4d6fa	Merge pull request #4636 from JacobBarthelmeh/client ... print out PEM of peer cert with example client	2021-12-08 20:04:57 -08:00
Sean Parkinson	32014c69fd	TLS 13 session ticket timeout: fixup checks ... Check difference between now and ticket seen from encrypted ticket against timeout.	2021-12-09 12:43:30 +10:00
Sean Parkinson	6da0cc1ced	Merge pull request #4600 from dgarske/cust_oid ... Support for Custom OID in subject and CSR request extension	2021-12-09 11:24:30 +10:00
Kareem	4200cf1b4d	Fix compiling Iotsafe with C++ by avoiding reserved keyword 'class'.	2021-12-08 17:17:58 -07:00
Anthony Hu	7022eb6f89	Actually do a private/public key check for FALCON.	2021-12-08 18:04:11 -05:00
David Garske	dac0c21989	Merge pull request #4640 from anhu/prevent_stack_corruption ... Pass in pointer to a local size_t var, not word32 var to prevent stack corruption	2021-12-08 14:44:07 -08:00
Sean Parkinson	cf0d3263ac	Merge pull request #4628 from julek-wolfssl/issue-4623 ... Handle an `EPIPE` error from the socket	2021-12-09 08:08:56 +10:00
Anthony Hu	74442605fa	Pass in pointer to a local size_t var, not word32 var to prevent stack corruption.	2021-12-08 16:01:52 -05:00
Jacob Barthelmeh	ad078a7358	adjust macro guard in example client	2021-12-08 13:45:37 -07:00
Jacob Barthelmeh	0446d93285	add deterministic k variant for ECC to enable all	2021-12-08 10:49:17 -07:00
Jacob Barthelmeh	dfce101b5b	deterministic ECC sign edge case fix and add variant	2021-12-08 09:54:47 -07:00