04a1a3fec7
Merge branch 'wolfSSL:master' into tropic01-dev
2025-06-06 17:51:29 +02:00
407a1259af
Merge pull request #8851 from douzzer/20250606-fixes
...
Adjustment for warnings with NO_TLS build and add github actions test
2025-06-06 09:46:42 -06:00
efc36655e6
src/internal.c: add pedantic-compatible NO_TLS codepath for cipher_names[] and GetCipherNamesSize().
2025-06-06 18:02:19 +04:00
4572dcf9f9
tests/api/test_x509.c: in test_x509_rfc2818_verification_callback(), add dependency on HAVE_MANUAL_MEMIO_TESTS_DEPENDENCIES;
...
wolfcrypt/test/test.c: in lms_test(), fix -Wdeclaration-after-statement;
add .github/workflows/no-tls.yml;
.github/workflows/pq-all.yml: add smallstack scenario.
2025-06-06 17:18:50 +04:00
7eca4fb331
ML_KEM IDs backward compat
...
Allow backward compatibilitly of Hybrid ML_KEM codepoints in TLS with
version before wolfSSL 5.8.0.
When WOLFSSL_ML_KEM_USE_OLD_IDS is defined, it will accept the old
codepoints for P256 with ML-KEM-512, P384 with ML-KEM-768, P521 with
ML-KEM-10124. (Others combinations were not know pre 5.8.0.)
Both old client with new server and new client with new server work with
old codepoints.
2025-06-06 09:17:40 +10:00
3ecc58cc0e
Merge pull request #8842 from julek-wolfssl/zd/19966
...
ALT_NAMES_OID: Mark IP address as WOLFSSL_V_ASN1_OCTET_STRING
2025-06-05 17:07:47 -06:00
736a5e1f89
dtlsProcessPendingPeer: correctly set the current peer
2025-06-06 00:12:38 +02:00
53f3e74bf1
Sniffer: Don't include AEAD nonce in decrypted data size
2025-06-05 14:13:45 -06:00
edfc5360d4
TLSX_SupportedCurve_Parse: fix commonCurves wouldn't be free'd on error
2025-06-05 22:04:50 +02:00
0ac6ca3cf7
Fix hard tabs and c++ style comments
2025-06-05 22:04:50 +02:00
761f0f1d1f
Simplify TLSX_SupportedCurve_Parse
...
Server only uses curves that are supported by both the client and the server. If no common groups are found, the connection will fail in TLS 1.2 and below. In TLS 1.3, HRR may still be used to resolve the group mismatch.
2025-06-05 22:04:49 +02:00
a160ba1379
Supported_group unit test fix
2025-06-05 22:04:49 +02:00
9d342bae83
unit tests for set_groups curve fix
2025-06-05 22:04:49 +02:00
888407e40b
Updated fix for set_groups
2025-06-05 22:04:49 +02:00
3c1c4792da
tls fix for set_groups
2025-06-05 22:04:49 +02:00
a413be1984
remove null assignment, add null check
2025-06-05 12:25:50 -06:00
f2584fd5fa
ALT_NAMES_OID: Mark IP address as WOLFSSL_V_ASN1_OCTET_STRING
2025-06-05 19:17:00 +02:00
c207e2d198
Merge pull request #8838 from miyazakh/fsp_fix2
...
Fix Renesas SCE on RA6M4
2025-06-05 09:43:05 -06:00
e51702043f
Merge pull request #8837 from BridgerVoss/code_cov
...
Unit test for Dh.c code coverage
2025-06-05 09:37:42 -06:00
a17b3b4985
Merge pull request #8831 from JeremiahM37/UnitTest
...
Unit test for wolfcrypt pkcs12 file to improve code coverage
2025-06-05 09:30:48 -06:00
307840388b
Merge pull request #8786 from SparkiDev/lms_kid
...
LMS: Key ID fixup
2025-06-05 09:22:48 -06:00
dbc34352c7
linuxkm/lkcapi_sha_glue.c: in wc_linuxkm_drbg_seed(), prefix the supplied seed with the CPU ID of each DRBG, to avoid duplicate states;
...
wolfcrypt/src/random.c: in Hash_DRBG_Generate(), always put digest[] on the stack even in WOLFSSL_SMALL_STACK configuration (it's only 32 bytes);
configure.ac: default smallstackcache on when linuxkm-defaults.
2025-06-05 16:31:46 +04:00
29cf3eb84e
linuxkm/lkcapi_sha_glue.c: refactor DRBG wrapper to instantiate one DRBG per core, to relieve contention.
2025-06-05 09:18:18 +04:00
fbc483e23a
Merge pull request #8833 from rlm2002/AppleNativeCert
...
domain name policy for WOLFSSL_APPLE_NATIVE_CERT_VALIDATION
2025-06-05 12:22:20 +10:00
89be92f1a8
formatting
2025-06-04 18:29:05 -06:00
1f78923590
Add a test for mixture of algorithms
2025-06-05 09:26:44 +09:00
640b060792
LMS: Key ID fixup
...
Fix implementation for extracting from private key data.
Add implementation that gets Key ID from wc_LmsKey.
2025-06-05 10:25:47 +10:00
0e2a3fd0b6
add missing error trace macro
2025-06-04 16:56:16 -06:00
a6580d3916
Unit test for wolfcrypt pkcs12 file to improve code coverage
2025-06-04 16:01:35 -06:00
80c6ac141a
Unit test for Dh.c wc_DhSetNamedKey code coverage
2025-06-04 15:48:52 -06:00
bc8eeea703
prevent apple native cert validation from overriding error codes other than ASN_NO_SIGNER_E
2025-06-04 15:48:15 -06:00
50471342b3
Merge pull request #8819 from sebastian-carpenter/asn-allow-0-serial-make-check-fail
...
WOLFSSL_ASN_ALLOW_0_SERIAL not handled in make check
2025-06-04 13:39:55 -06:00
a29d12fd3f
WOLFSSL_ASN_ALLOW_0_SERIAL not handled in make check
...
test_MakeCertWith0Ser needed an extra #define check for WOLFSSL_ASN_ALLOW_0_SERIAL. Previously, it was validating that a 0 serial should not work -> now it validates that a 0 serial does work.
2025-06-04 12:21:41 -06:00
02a49693e2
Fix bug in ParseCRL_Extensions
2025-06-04 10:23:53 -06:00
7c33096398
Support PBE_AES256_CBC and PBE_AES128_CBC cert encryption on wc_PKCS12_create()
2025-06-04 16:43:30 +09:00
e633dd7537
trailing whitespace
2025-06-04 13:41:01 +09:00
4aea2a1cd2
Update README to add SEGGER_RTT control block
2025-06-04 13:41:01 +09:00
8445e66ceb
Update signed certificate
2025-06-04 13:41:01 +09:00
6d2a8b3f4c
ready-for-use flag fix
2025-06-04 13:41:01 +09:00
7898823d42
Merge pull request #8834 from JacobBarthelmeh/sp_int
...
Comment to avoid older versions of clang-tidy false positive
2025-06-04 11:15:54 +10:00
c1b683f307
add clang-tidy lint comment to avoid false positive
2025-06-03 14:44:01 -06:00
9864959e41
create policy for WOLFSSL_APPLE_NATIVE_CERT_VALIDATION, domain name
...
checking
2025-06-03 10:08:58 -06:00
b34fd2f685
Merge pull request #8829 from gojimmypi/pr-espressif-time-correction
...
Correct Espressif default time setting
2025-06-02 17:03:06 -06:00
a9db6d08f7
Adjust Espressif Examples for Post Quantum ML-KEM
2025-06-02 15:11:53 -07:00
1aa97a9070
Correct Espressif default time setting
2025-06-02 15:04:49 -07:00
e635afd26a
Refactor Tropic01 interface: clean up code formatting and improve function declarations
2025-06-02 20:12:41 +02:00
ecb8cb744e
Merge pull request #8799 from dgarske/csharp_wince_unicode
...
Fix issue with CSharp and Windows CE with conversion of ASCII and Unicode
2025-06-02 10:39:23 -06:00
66b0a5bd02
Merge branch 'wolfSSL:master' into tropic01-dev
2025-06-01 09:35:34 +02:00
30490f9650
Merge pull request #8828 from douzzer/20250531-wc_linuxkm_fpu_state_assoc-optimize
...
20250531-wc_linuxkm_fpu_state_assoc-optimize
2025-05-31 09:23:59 -07:00
8c33f47a85
linuxkm/x86_vector_register_glue.c: fix overhead in wc_linuxkm_fpu_state_assoc() from pointless full searches of wc_linuxkm_fpu_states.
2025-05-31 00:23:32 -05:00
kosmax871
JacobBarthelmeh
Daniel Pouzzner
Sean Parkinson
Juliusz Sosinowicz
Lealem Amedie
JeremiahM37
Ruby Martin
Chris Conlon
Brett
Koji Takeda
Bridger Voss
Sebastian Carpenter
Hideki Miyazaki
gojimmypi
David Garske
Daniel Pouzzner