dce1fc4766
Merge pull request #5703 from miyazakh/renesas_rx72n_simple
2022-11-04 11:43:08 -06:00
5f4cf53d87
Merge pull request #5772 from JacobBarthelmeh/OCSP
2022-11-04 09:46:42 -07:00
8225d3642b
save next status with OCSP response verify
2022-11-03 22:39:47 -07:00
cbbe6fec94
Merge pull request #5763 from douzzer/20221031-benchmark-determinism
2022-11-03 14:52:59 -07:00
fbc4af8701
Merge pull request #5739 from anhu/no_WOLFSSL_DYN_CERT
2022-11-03 14:24:34 -07:00
7414dd7ea5
Merge pull request #5768 from kareem-wolfssl/maxCertpolSz
2022-11-03 14:23:17 -07:00
48bddc6d07
Update max Cert Policy size based on RFC 5280.
2022-11-03 11:49:15 -07:00
b140abd1fd
wolfcrypt/benchmark/benchmark.c: add check_for_excessive_stime() and remove double declaration of base_rusage and cur_rusage.
2022-11-03 13:48:51 -05:00
a7635da9e6
Merge pull request #5765 from JacobBarthelmeh/release
...
update for version 5.5.3
2022-11-02 15:46:10 -07:00
9b895b74bf
update for version 5.5.3
2022-11-02 13:58:37 -07:00
4ab41caf40
make static flags sym_header_printed, asym_header_printed, and pqasym_header_printed, local to the routines that use them (fixes an -Wunused-variable in -UBENCH_ASYM builds).
2022-11-01 01:12:17 -05:00
89182b829f
wolfcrypt/benchmark/benchmark.c: add GENERATE_MACHINE_PARSEABLE_REPORT and LINUX_RUSAGE_UTIME codepaths;
...
fflush stdout after each scenario for line-buffered pipelining;
refactor csv_header_count into sym_header_printed, asym_header_printed, and pqasym_header_printed;
move SAKKE tests to precede PQ tests;
rename bench_stats_sym_check() to bench_stats_check();
add bench_stats_asym_finish_ex() accepting a "desc_extra" arg, and use it to disambiguate otherwise-homonymous SAKKE runs;
fix bench_aesecb_internal() to not check time (syscall) for every 3 blocks processed.
2022-11-01 00:15:37 -05:00
502a395723
Merge pull request #5757 from SparkiDev/enc_err_forcezero_fix
...
ForceZero fix: encryption fail and not EtM
2022-10-31 11:43:48 -06:00
4efba8f437
ForceZero fix: encryption fail and not EtM
...
Zeroizing of plaintext on encryption failure will use wrong size when
not using Encrypt-then-MAC. Size may go negative and cast to unsigned.
2022-10-31 09:14:16 +10:00
0158c82487
Keep WOLFSSL_DYN_CERT
2022-10-28 13:37:55 -04:00
0ea0b887a5
Merge pull request #5749 from JacobBarthelmeh/release
...
update version to 5.5.2
2022-10-28 09:22:50 -07:00
8fd5a4061c
Merge pull request #5748 from SparkiDev/arm32_asm_lr_fixup
...
ARM32 ASM: fix asm saving and restoring of registers
2022-10-28 07:37:02 -06:00
eb52083afd
update version to 5.5.2
2022-10-28 06:25:33 -07:00
7bd8ced7af
ARM32 ASM: fix asm saving and restoring of registers
...
Fix push and pop generated at beginning and end of function.
2022-10-28 09:51:32 +10:00
319901a85c
Merge pull request #5743 from SparkiDev/tls_perf_fix_forcezero
...
TLS performance fix: ForceZero minimization
2022-10-27 13:43:17 -06:00
7366a9edbd
Merge pull request #5744 from SparkiDev/regression_fixes_4
...
Regresssion testing fixes
2022-10-27 11:49:52 -06:00
e9d37b9bd1
addressed code review
2022-10-27 16:52:04 +09:00
fd7544ca19
Regresssion testing fixes
...
Ed25519 and Ed448 need to enable certs.
If no system CA certs can't be parsed,
wolfSSL_CTX_load_system_CA_certs() will fail. Don't try test if RSA and
ECC are not enabled.
Fix benchmark.c so that e is defined when WOLFSSL_BENCHMARK_ALL defined.
MAX_LENGTH_SZ is 4 and supports lengths up to 2^24 - one byte for length
and 3 bytes of length.
(new gcc compiler fix)
2022-10-27 17:47:48 +10:00
b1e37377a1
TLS performance fix: ForceZero minimization
...
Don't ForceZero the output buffer before free.
ForceZero it when encryption fails.
ShrinkInputBuffer needs to zeroize input buffer even if not currently
encrypting as it may be using the buffer on wolfSSL object reuse.
Fix SP to zeroize the whole buffer.
Fix DH to check cBuf when WOLFSSL_CHECK_MEM_ZERO defined.
2022-10-27 17:00:42 +10:00
1c09a67f6a
Merge pull request #5735 from SparkiDev/aes_gcm_c_dec_auth
...
AES GCM decrypt C: don't decrypt when auth tag invalid
2022-10-26 22:41:25 -06:00
294a26ba0c
Merge pull request #5708 from JacobBarthelmeh/OCSP
2022-10-26 15:43:15 -07:00
8f2d35bb84
Merge pull request #5741 from douzzer/20221026-fixes-QUIC-and-ALPN
...
20221026-fixes-QUIC-and-ALPN
2022-10-26 15:03:28 -06:00
b477804462
Merge pull request #5725 from julek-wolfssl/rpm-pkg
2022-10-26 13:33:16 -07:00
d08c204466
remove extra memset
2022-10-26 12:54:17 -07:00
1608037c6b
Merge pull request #5740 from JacobBarthelmeh/release
...
minor warning fixes
2022-10-26 14:09:01 -05:00
4d36d494b2
Merge pull request #5738 from SKlimaRA/SKlimaRA/fix-backslash-random-c
...
removed backslash
2022-10-26 12:42:49 -05:00
33617588fc
fix setting dynamic flag with ocsp and asn template
2022-10-26 10:31:50 -07:00
8d6ee0b26a
minor warning fixes
2022-10-26 10:48:51 -06:00
dfa603e502
fixes for warnings and defects around QUIC and ALPN -- fixes for clang-diagnostic-gnu-zero-variadic-macro-arguments, clang-analyzer-deadcode.DeadStores, clang-analyzer-core.UndefinedBinaryOperatorResult, clang-analyzer-security.insecureAPI.strcpy, and an overrun prevention assert in wolfSSL_ALPN_GetPeerProtocol().
2022-10-26 11:32:06 -05:00
a26b89f66b
fix leak with multiple entries
2022-10-26 09:29:06 -07:00
9486721bb8
Prevent WOLFSSL_NO_MALLOC from breaking RSA certificate verfication
2022-10-26 12:11:55 -04:00
6fa43a3d84
removed backslash
2022-10-26 15:03:31 +02:00
2d19f00dd5
Merge pull request #5736 from douzzer/20221025-fixes-wolfsentry-and-armv7a
...
20221025-fixes-wolfsentry-and-armv7a
2022-10-26 12:38:01 +10:00
8d8371ac5a
Merge pull request #5717 from icing/sni-alpn-order
...
Changing ALPN selection to a deterministic point in the handshake.
2022-10-26 09:47:23 +10:00
0f9279ce52
Merge pull request #5684 from SparkiDev/ssl_sess_version_check
...
SSL session retrieval: check protocol version
2022-10-25 17:29:54 -06:00
55ab33a4a4
AES GCM decrypt C: don't decrypt when auth tag invalid
2022-10-26 09:25:28 +10:00
baa19c1092
tests/api.c: fix 3 clang-analyzer-deadcode.DeadStores.
2022-10-25 18:17:22 -05:00
29a5c04c2e
add test case
2022-10-25 15:35:37 -07:00
7381846edb
fix case of copying over status to existing struct
2022-10-25 15:33:17 -07:00
2575047ea2
wolfcrypt/src/port/arm/armv8-aes.c: define FIPS_NO_WRAPPERS, rather than undefine HAVE_FIPS, to fix FIPS builds.
2022-10-25 17:24:34 -05:00
e464d374c0
fix whitespace.
2022-10-25 17:24:34 -05:00
263123e7b4
wolfssl/test.h: add unsigned attribute to type of buffer passed to wolfsentry_config_json_feed() (sync with wolfsentry e22878b666).
2022-10-25 17:24:34 -05:00
084fabc733
Merge pull request #5731 from SparkiDev/armv7a_aes_fixup
...
AES-CBC decrypt ARMv8 no hw crypto: fixes
2022-10-25 17:23:45 -05:00
5c3b3e6ede
Merge pull request #5733 from ejohnstown/assert-whitespace
2022-10-25 13:45:54 -07:00
e803e5916c
Assert Consistency
...
1. Make whitespace in asserts consistent.
2. Added typecasting of the string inputs for AssertStr.
2022-10-25 11:42:51 -07:00
Chris Conlon
John Safranek
JacobBarthelmeh
Hayden Roche
Kareem
Daniel Pouzzner
David Garske
Sean Parkinson
Anthony Hu
Hideki Miyazaki
Eric Blankenhorn
Stanislav Klima