cdacf3a53e
Merge pull request #9964 from SparkiDev/asm_gen_fixes_1
...
SP fixes: 32-bit ARM assembly fixes
2026-03-13 06:16:57 +01:00
bac0563669
Merge pull request #9919 from anhu/lms-leaf-idx
...
Fix buffer-overflow in LMS leaf cache indexing
2026-03-13 10:02:50 +10:00
d23cb79f18
SP fixes: 32-bit ARM assembly fixes
...
mod_exp: subtract from 32 instread of 64 as n is 32 bits
sp_521_ecc_mulmod_fast: look up the last point in constant time when
required.
2026-03-13 09:37:28 +10:00
424af6eb5b
Merge pull request #9956 from rlm2002/coverity
...
20260311 Coverity changes
2026-03-12 16:53:39 -06:00
e5594a6366
Merge pull request #9889 from rlm2002/F29
...
remove word16 cast, add WOLFSSL_MAX_16BIT check
2026-03-12 14:54:19 -06:00
80ba723e16
Merge pull request #9943 from philljj/fix_evp_set_iv_length
...
evp: check ivLen in wolfSSL_EVP_CIPHER_CTX_set_iv_length.
2026-03-12 14:47:32 -06:00
67abcc6f2d
Merge pull request #9949 from philljj/fix_d2i_SSL_SESSION
...
ssl_sess: check fields in wolfSSL_d2i_SSL_SESSION.
2026-03-12 14:45:29 -06:00
c1f71fcf33
Merge pull request #9959 from philljj/fix_wolfboot_build
...
asn: add HAVE_OCSP_RESPONDER guard, to fix wolfboot build.
2026-03-12 14:44:29 -06:00
351d2594ac
Merge pull request #9938 from SparkiDev/regression_fixes_23
...
Fixes from regression testing
2026-03-12 14:41:18 -06:00
a05a3ed1c2
Merge pull request #9940 from cconlon/pathLenSet
...
Fix pathlen not copied in ASN1_OBJECT_dup and not marked set in X509_add_ext
2026-03-12 10:34:58 -06:00
2831a1e864
Merge pull request #9958 from julek-wolfssl/ocsp-responder-follow-up
...
Address final comments from #9761
2026-03-12 10:29:56 -06:00
d359f420ab
set *inLen = outLen if output == NULL, if != NULL, check that outLen <= *inLen before assigning *inLen = outLen
2026-03-12 10:25:14 -06:00
6ebd967345
bounds check on ext_dump
2026-03-12 09:53:35 -06:00
d432759fdd
verify algoSz is <= MAX_ALGO_SZ
2026-03-12 09:53:34 -06:00
8314aa56ae
catch MEMORY_E from CALLOC_ASNSETDATA()
2026-03-12 09:53:34 -06:00
d67c034b14
asn: add HAVE_OCSP_RESPONDER guard, to fix wolfboot build.
2026-03-12 10:50:18 -05:00
4fbc81916c
Address final comments from #9761
...
- Fix line length
- Remove duplicate comment
- Check return of `wc_HashGetDigestSize`
- Use constant instead of magic number
2026-03-12 12:30:13 +01:00
0de6e8fd50
Merge pull request #9950 from douzzer/20260311-bench_slhdsa-smallstack
...
20260311-bench_slhdsa-smallstack
2026-03-11 17:30:08 -06:00
a8dfa59bbe
Merge pull request #9761 from julek-wolfssl/ocsp-responder
...
Implement OCSP responder
2026-03-11 17:27:33 -06:00
bbd2f6f898
Fixes from regression testing
...
CRL APIs not usable when NO_ASN_TIME defined.
WOLFSSL_TLS13 needs to be defined with HAVE_ECH.
When session ticket encrypted with CBC, must be a multiple of block
size.
Fix test define protection.
Fix ML-DSA protection of reduction functions.
Need !NO_RSA with WC_RSA_PSS.
Connection ID is not a DTLS 1.3 only extension.
2026-03-12 08:19:39 +10:00
c15715ed54
Merge pull request #9737 from sebastian-carpenter/tls-ech-confirmation-fix
...
TLS ECH Testing Improvements
2026-03-11 15:11:13 -06:00
00d0b09401
Fix buffer-overflow in LMS leaf cache indexing
...
wc_lms_treehash_init() writes leaf node hashes into the leaf cache
using an absolute index (i * hash_len), but the cache is only
max_cb entries starting from leaf->idx. When leaf->idx > 0 (which
occurs when wc_LmsKey_Reload is called after signing more than
max_cb times), the write goes past the end of the cache buffer.
Fix by using the relative offset (i - leaf->idx) * hash_len instead.
Added unit tests (test_lms.c):
- test_wc_LmsKey_sign_verify: basic sign/verify sanity check
- test_wc_LmsKey_reload_cache: (TDD) reproduces the overflow by
signing 33 times then reloading the key
2026-03-11 16:58:48 -04:00
bb7c6a13c8
ECH tidying
2026-03-11 12:07:20 -06:00
8a7d327d24
ECH fixes F-293, F-201, F-358, F-203
2026-03-11 10:06:37 -06:00
032dbe6878
ECH fixes F-292, F-28
2026-03-11 10:06:36 -06:00
354691d24a
Copy pathlen in ASN1_OBJECT_dup() and set pathLengthSet in X509_add_ext() when adding basic constraints with a path length
2026-03-11 09:59:19 -06:00
e17ac41070
TLS ECH fixes [SNI, api.c, server.c, comments]
2026-03-11 09:52:13 -06:00
58625d1f03
corrections for ECH specification
2026-03-11 09:52:11 -06:00
ecf71e745b
.wolfssl_known_macro_extras: fix for disorder and unneeded entries.
2026-03-11 10:22:11 -05:00
aeb4c042fd
wolfcrypt/benchmark/benchmark.c: smallstack (WC_*_VAR*()) refactor for bench_slhdsa().
2026-03-11 10:21:55 -05:00
c3a38dced7
testing + bug fixes for TLS ECH
2026-03-11 08:56:26 -06:00
cb2d693550
bad rebase + fixing dtls13 support for ECH
2026-03-11 08:54:00 -06:00
a2fe12a38a
TLS ECH OuterExtensions support (Server side)
2026-03-11 08:54:00 -06:00
30cfb385eb
fixed seg fault when confirmation not present
2026-03-11 08:54:00 -06:00
3605c2a417
client and server fix for TLS ECH
2026-03-11 08:54:00 -06:00
0a99a08b0f
ssl_sess: check fields in wolfSSL_d2i_SSL_SESSION.
2026-03-11 09:47:15 -05:00
c920d2882c
Restore body size calculation and add comment
2026-03-11 12:46:22 +01:00
5a4c63423b
Address code review
2026-03-11 12:28:11 +01:00
6bb122d29f
Address copilot review
2026-03-11 11:08:44 +01:00
6fc83e292b
Address code review
2026-03-11 10:21:17 +01:00
0a1b4f9185
fix shaCopy errors
2026-03-11 10:21:17 +01:00
7ae2ecc686
fixup! Implement OCSP responder
2026-03-11 10:21:17 +01:00
3be004f3ef
fixup! Implement OCSP responder
2026-03-11 10:21:17 +01:00
9015ae9e17
Return unknown information inside of Basic Responde
2026-03-11 10:21:17 +01:00
00c6436cce
Refactor date parsing
2026-03-11 10:21:17 +01:00
cec611987a
fixup! Implement OCSP responder
2026-03-11 10:21:17 +01:00
10be06d747
Address copilot feedback
2026-03-11 10:21:17 +01:00
fcd6c4f203
Enhance OCSP responder error handling for serial validation and HTTP response truncation
2026-03-11 10:21:16 +01:00
931d056688
Add stapling to test scripts/ocsp-stapling-with-wolfssl-responder.test
2026-03-11 10:21:16 +01:00
9a9eb2bf1d
Add ocsp responder test to testsuite.c and tested on windows
2026-03-11 10:21:16 +01:00
David Garske
Sean Parkinson
JacobBarthelmeh
Ruby Martin
jordan
Juliusz Sosinowicz
Anthony Hu
sebastian-carpenter
Chris Conlon
Daniel Pouzzner