Sean Parkinson
91e1fe4496
Merge pull request #7220 from gojimmypi/PR-ssl-session-cache
...
Introduce MICRO_SESSION_CACHE, update comments
2024-02-07 21:25:53 +10:00
gojimmypi
538ade105c
Correct C++-style comments in settings.h
2024-02-06 18:25:05 -08:00
Sean Parkinson
fff4effe31
Thumbs inline ASM IAR: fix register clobber list
...
Change register clobber list so that it reserves the same registers for
constants regardless of WOLFSSL_NO_VAR_ASSIGN_REG.
2024-02-07 10:28:01 +10:00
gojimmypi
10b5c375ef
introduce MICRO_SESSION_CACHE, update comments
2024-02-06 14:07:50 -08:00
David Garske
8853096290
Merge pull request #7217 from douzzer/20240206-cmake-install-rule-by-default
...
20240206-cmake-install-rule-by-default
2024-02-06 10:48:55 -08:00
Daniel Pouzzner
c69442375b
CMakeLists.txt: include the install rule by default, disabled with -DWOLFSSL_INSTALL=no, to restore status quo ante. see #7188
2024-02-06 12:08:57 -06:00
David Garske
735fbc7cee
Merge pull request #7195 from philljj/zd17406
...
Update IAR-EWARM project user-settings.h.
2024-02-06 09:20:54 -08:00
Juliusz Sosinowicz
4244fe9ff4
Run openssh tests on PR's
2024-02-06 13:30:25 +01:00
Juliusz Sosinowicz
bdc0b80ddb
Don't include unnecessary headers in public header file
2024-02-06 13:27:34 +01:00
Daniel Pouzzner
4d842f094e
Merge pull request #7199 from lealem47/defaultASN
...
Default to ASN TEMPLATE library
2024-02-05 22:32:57 -05:00
Sean Parkinson
86b1aae218
Merge pull request #7209 from philljj/zd17416
...
Coverity issues: fix MD5 and SHA buffer overrun.
2024-02-06 08:58:27 +10:00
Lealem Amedie
d36bd47a27
For cppcheck: Explicitly initialize some variables
2024-02-05 15:09:05 -07:00
Daniel Pouzzner
48e40b8d8e
Merge pull request #7201 from SparkiDev/sha256_aarch64_unaligned
...
SHA-256 Aarch64: fix alignments on loads and stores
2024-02-05 16:50:27 -05:00
Daniel Pouzzner
8665295573
Merge pull request #7198 from dgarske/tls12only
...
Template for TLS v1.2 only
2024-02-05 16:14:47 -05:00
Daniel Pouzzner
1356e079f1
Merge pull request #7207 from julek-wolfssl/update-actions
...
Update github actions
2024-02-05 16:11:39 -05:00
Daniel Pouzzner
2b33079d50
Merge pull request #7188 from innolectric/innolectric
...
Innolectric CMake changes
2024-02-05 16:08:58 -05:00
Sean Parkinson
9060da42a6
Merge pull request #7211 from douzzer/20240203-linuxkm-fixes
...
20240203-linuxkm-fixes
2024-02-06 07:08:40 +10:00
jordan
9ea52c3a51
Update IAR-EWARM project user-settings.h.
2024-02-05 15:01:07 -06:00
Daniel Pouzzner
5c421d0207
Merge pull request #7178 from anhu/OQS_MEM_LEAKS
...
Fixes that prevent memory leaks when using OQS.
2024-02-05 13:26:43 -05:00
Anthony Hu
9b697a5315
Missed gating
2024-02-05 12:38:25 -05:00
Juliusz Sosinowicz
54b562f501
Point openssh workflow to wolf master
2024-02-05 18:10:24 +01:00
Juliusz Sosinowicz
8bddeb10c7
DTLS sequence number and cookie fixes
...
- dtls: check that the cookie secret is not emtpy
- Dtls13DoDowngrade -> Dtls13ClientDoDowngrade
- dtls: generate both 1.2 and 1.3 cookie secrets in case we downgrade
- dtls: setup sequence numbers for downgrade
- add dtls downgrade sequence number check test
Fixes ZD17314
2024-02-05 16:09:03 +01:00
jordan
83169f91e9
Fix ShaFinal overrun.
2024-02-03 17:36:26 -06:00
Daniel Pouzzner
3a280e8295
linuxkm fixes:
...
linuxkm/linuxkm_wc_port.h: add fallback definition for static_assert() to support legacy kernels.
wolfcrypt/src/aes.c: fix AESNI runtime failure/fallback logic in wc_AesXtsSetKeyNoInit().
2024-02-03 13:46:45 -06:00
David Garske
ca726e97f8
Peer review fixes.
2024-02-03 10:43:46 -08:00
jordan
d111d7da1b
Fix MD5 and SHA buffer overrun.
2024-02-02 19:50:22 -06:00
Daniel Pouzzner
851f059023
Merge pull request #7203 from julek-wolfssl/openssh-9.6
...
openssh 9.6p1 fixes
2024-02-02 19:51:55 -05:00
Daniel Pouzzner
4ed197d487
Merge pull request #7205 from julek-wolfssl/fix-test_wolfSSL_OPENSSL_hexstr2buf
...
test_wolfSSL_OPENSSL_hexstr2buf: test was always skipped
2024-02-02 18:45:31 -05:00
Daniel Pouzzner
866992151b
Merge pull request #7208 from philljj/fix_ext_xmss_sigsleft
...
Fix ext_xmss sigsleft null deref.
2024-02-02 18:28:20 -05:00
Daniel Pouzzner
7823acbbde
Merge pull request #7184 from JacobBarthelmeh/pkcs7-enc
...
PKCS7 streaming with encode/sign
2024-02-02 18:00:12 -05:00
jordan
13e427433c
Fix ext_xmss sigsleft null deref.
2024-02-02 16:04:23 -06:00
JacobBarthelmeh
7592559fd3
rename argument, fix warnings on casts
2024-02-02 14:50:50 -07:00
Daniel Pouzzner
d1e0b37467
Merge pull request #7202 from julek-wolfssl/bio-include-ssl
...
If bio.h is included first then it can't include options.h on its own
2024-02-02 16:00:47 -05:00
Daniel Pouzzner
6230c29194
Merge pull request #7190 from SparkiDev/tls13_hrrcookie_fix
...
TLS 1.3, HRR Cookie: send cookie back in new ClientHello
2024-02-02 15:05:00 -05:00
Juliusz Sosinowicz
31bfac43ea
Update github actions
...
Many of these updates should also speed up some steps
2024-02-02 20:14:28 +01:00
David Garske
32aecf4c35
Merge pull request #7180 from douzzer/20240126-LINUXKM_LKCAPI_REGISTER
...
20240126-LINUXKM_LKCAPI_REGISTER
2024-02-02 11:12:35 -08:00
Juliusz Sosinowicz
5b5d6481de
Fix write_dup with chacha-poly
2024-02-02 19:47:25 +01:00
Juliusz Sosinowicz
188a69e649
test_wolfSSL_OPENSSL_hexstr2buf: test was always skipped
2024-02-02 18:29:15 +01:00
Juliusz Sosinowicz
be90fe073e
tfm and integer: skip whitespace at end in radix read
2024-02-02 14:38:40 +01:00
Juliusz Sosinowicz
7ebb8cd007
Update radix tests
2024-02-02 12:09:50 +01:00
Juliusz Sosinowicz
d3b0a26b3b
If bio.h is included first then it can't include options.h on its own
...
When EXTERNAL_OPTS_OPENVPN is defined, we should be including options.h internally. When bio.h is included first, we don't include options.h and we don't pass the `#if defined(OPENSSL_EXTRA) || defined(OPENSSL_EXTRA_X509_SMALL)` guard.
2024-02-02 11:02:39 +01:00
Sean Parkinson
c8b0aac144
SHA-256 Aarch64: fix alignments on loads and stores
...
Input buffer must be loaded with a byte alignment.
Fix other loads and stores to be consistent.
2024-02-02 12:41:12 +10:00
Daniel Pouzzner
10645de648
linuxkm: various tweaks:
...
* configure.ac: in linuxkm-lkcapi-register section, force ENABLED_AESGCM_STREAM=yes if ENABLED_AESGCM is yes and there is asm or FIPS in the picture.
* linuxkm/module_hooks.c: in updateFipsHash(), if DEBUG_LINUXKM_PIE_SUPPORT || WOLFSSL_LINUXKM_VERBOSE_DEBUG, print the base16 hash to the kernel log.
* linuxkm/lkcapi_glue.c:
* implement KATs for AES-CBC, AES-CFB, and AES-GCM.
* clean out extraneous code and macro usage inherited from test/test.c.
* add post-registration crypto_tfm_alg_driver_name() tests for AES-CBC, AES-CFB, and AES-GCM.
2024-02-01 19:04:02 -06:00
Lealem Amedie
63f7298be2
Default to ASN TEMPLATE library
2024-02-01 14:52:06 -07:00
JacobBarthelmeh
ed4b87eb37
fix for clang-tidy null dereference error
2024-02-01 14:26:13 -07:00
JacobBarthelmeh
5fbadbb215
fix warning with test case
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
8d0dc7a568
fix asn original build, vs warning, and add test cases
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
bf23357c8c
refactor streaming and additional comments
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
c843064681
update macro guard
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
75762d44b6
PKCS7 streaming with encode/sign
2024-02-01 11:50:51 -07:00
