17975 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Marco Oliverio	edd723cc84	ssl: add new wolfSSL_disable_hrr_cookie() API to disable hrr cookie ... Add a way to disable hrr cookie so it can be enabled by default for DTLS connections.	2022-09-01 09:37:34 +02:00
David Garske	db6d69143e	Merge pull request #5533 from lealem47/crlPrintFix ... Add missing DN nid to work with PrintName()	2022-08-31 18:32:55 -07:00
David Garske	fe583faf32	Merge pull request #5501 from haydenroche5/ecc_non_block ... Add support for non-blocking ECC key gen and shared secret gen for P-256/384/521.	2022-08-31 18:31:28 -07:00
Lealem Amedie	2df1c25263	Add missing DN nid to work with PrintName()	2022-08-31 15:18:12 -07:00
Hayden Roche	41207f5d9b	Add support for non-blocking ECC key gen and shared secret gen for ... P-256/384/521. New functions: - sp_ecc_make_key_256_nb - sp_ecc_make_key_384_nb - sp_ecc_make_key_521_nb - sp_ecc_secret_gen_256_nb - sp_ecc_secret_gen_384_nb - sp_ecc_secret_gen_521_nb This commit also tweaks the testing for ECDSA testing in test.c. Instead of testing with one of P-256/384/521, we test with all that are available.	2022-08-31 14:34:26 -07:00
David Garske	38e4ecc27c	Merge pull request #5529 from anhu/wextra ... Fix Windows CMakeList compiler options	2022-08-31 14:04:24 -07:00
David Garske	9531552795	Merge pull request #5522 from tim-weller-wolfssl/update-ide-win10-build ... Update ide win10 build files to add missing sp source files	2022-08-31 12:45:17 -07:00
David Garske	b1301d9dc4	Merge pull request #5518 from CallumMcLoughlin/master ... Allow Post Quantum Keyshare for DTLS 1.3	2022-08-31 12:29:08 -07:00
David Garske	f0812fa21f	Added vcpkg instructions to the INSTALL file.	2022-08-31 11:41:43 -07:00
David Garske	8722a46d52	Merge pull request #5503 from julek-wolfssl/dtls-fragments ... DTLS limit fragments	2022-08-31 09:53:09 -07:00
David Garske	3b8d230223	Merge pull request #5515 from anhu/custExtDoc ... Improve `wc_SetCustomExtension` documentation	2022-08-31 08:35:04 -07:00
Anthony Hu	f7482d96e6	Windows cl.exe does not support -Wextra other flags	2022-08-31 10:32:55 -04:00
Tim Weller	1d9d8bdefb	Removed sp_c64.c due to reliance on 128-bit type, replaced with sp_x86_64.c and _asm.asm.	2022-08-31 07:15:05 -07:00
Tim Weller	71b1aca373	Merge branch 'master' into update-ide-win10-build	2022-08-31 06:32:20 -07:00
Juliusz Sosinowicz	54bd786707	DTLS limit fragments ... - Limit the amount of fragments we store per a DTLS connection - Error out when we reach the DTLS fragment connection limit	2022-08-31 14:24:20 +02:00
David Garske	44f81f8bc0	Merge pull request #5525 from JacobBarthelmeh/release ... Release version 5.5.0 v5.5.0-stable	2022-08-30 10:35:13 -07:00
JacobBarthelmeh	4ce1cf1d7c	update RPM build	2022-08-30 08:50:41 -07:00
Jacob Barthelmeh	d75ce08d75	update readme for release 5.5.0	2022-08-30 09:31:28 -06:00
CallumMcLoughlin	43388186bb	Tidy up TLS 1.3 and DTLS 1.3 check	2022-08-30 19:59:36 +12:00
CallumMcLoughlin	565d1b33e5	Update examples to allow post quantum KEM within DTLS 1.3	2022-08-30 18:39:57 +12:00
Tim Weller	69d60f5099	Merge branch 'master' into update-ide-win10-build	2022-08-29 09:13:51 -07:00
David Garske	a7f86f9473	Merge pull request #5517 from JacobBarthelmeh/Testing ... misc. testing items from static analysis tools	2022-08-29 08:48:51 -07:00
JacobBarthelmeh	11c553ea1d	Merge pull request #5520 from julek-wolfssl/sni-tls-1.2 ... SNI can appear in ServerHello for TLS 1.2	2022-08-29 09:36:53 -06:00
Juliusz Sosinowicz	88deaf9b5c	SNI can appear in ServerHello for TLS 1.2 ... Co-authored-by: Eric Blankenhorn <eric@wolfssl.com>	2022-08-29 14:22:10 +02:00
CallumMcLoughlin	91d3cd7111	Allow Post Quantum Keyshare for DTLS 1.3	2022-08-28 17:35:28 +12:00
JacobBarthelmeh	1e673aee3b	scan-build warning fix	2022-08-26 16:29:11 -07:00
JacobBarthelmeh	ad0fd15a0d	static analysis fix from infer	2022-08-26 14:55:42 -07:00
JacobBarthelmeh	ce2cf3439d	subject info. acc. should contain a CA repo entry not OCSP	2022-08-26 14:39:20 -07:00
Anthony Hu	b1e9cc320b	Add documentation telling the user not to modify a buffer.	2022-08-26 14:27:27 -04:00
David Garske	e88bd66501	Merge pull request #5514 from julek-wolfssl/wolfSSL_EVP_MD_CTX_copy_ex-leak ... Cleanup output object in wolfSSL_EVP_MD_CTX_copy_ex before copy	2022-08-26 11:08:17 -07:00
David Garske	d84bfd511d	Merge pull request #5511 from SparkiDev/sp_submod_neg_fix ... SP math: don't modify sign in sp_div	2022-08-26 08:07:37 -07:00
Juliusz Sosinowicz	2fb3f58c03	Cleanup output object in wolfSSL_EVP_MD_CTX_copy_ex before copy	2022-08-26 13:07:45 +02:00
Sean Parkinson	8b2719cc83	SP math: don't modify sign in sp_div ... Not need to modify sign of a and d in sp_div(). Signs cached at start and used to calculate sign result.	2022-08-26 08:47:49 +10:00
David Garske	1976601811	Merge pull request #5505 from julek-wolfssl/dtls-plaintext ... Ignore plaintext on established connections	2022-08-25 07:25:03 -07:00
David Garske	b9cee17b01	Merge pull request #5508 from SparkiDev/aes_ctr_arm32_neon_fix2 ... AES-CTR ARM32 ASM: Fix 128-bit counter increment	2022-08-25 07:04:48 -07:00
Sean Parkinson	bd13fcc92a	AES-CTR ARM32 ASM: Fix 128-bit counter increment ... Include hash.h to sp_int.h for when no public key algorithms compiled in - need WC_MAX_DIGEST_SIZE.	2022-08-25 14:54:00 +10:00
David Garske	842d415de0	Merge pull request #5507 from haydenroche5/general_names_leak ... Fix wolfSSL_GENERAL_NAMES_free memory leak.	2022-08-24 21:05:53 -07:00
Sean Parkinson	2c829f19d3	Merge pull request #5506 from dgarske/dtlscid ... Fixes for build warnings and string macros for DTLS CID	2022-08-25 13:52:55 +10:00
Hayden Roche	9f39ffdba7	Fix wolfSSL_GENERAL_NAMES_free memory leak. ... This function was just freeing the stack object itself of GENERAL_NAMES with wolfSSL_sk_free, but this doesn't free the data in the items of the stack. The fix is to replace wolfSSL_sk_free with wolfSSL_sk_GENERAL_NAME_free.	2022-08-24 18:42:30 -07:00
David Garske	a0448155d5	Fix for type warnings in example for DTLS CID ./configure --enable-dtls --enable-dtlscid --enable-dtls13.	2022-08-24 16:02:05 -07:00
David Garske	8268214297	Merge pull request #5504 from ejohnstown/ppc-warn ... API Test Fixes for GCC/PowerPC Warnings	2022-08-24 15:19:53 -07:00
Juliusz Sosinowicz	159a3c8b03	Ignore plaintext on established connections	2022-08-24 21:40:19 +02:00
John Safranek	9b65f5819c	API Test Fixes for GCC/PowerPC Warnings ... 1. In api.c, change the name of the devId global to testDevId. 2. In api.c, for the SNI test, some of the pointers were multiply typecast eventually to `void **`. An older compiler didn't like that. Just use void pointer.	2022-08-24 11:30:56 -07:00
Uriah-wolfSSL	7ea904c873	Added CertNew() and CertFree() info. (#5502) ... * Updated wc_CertNew() dox for the return value listings, small changes to description and add some detail to the example per peer review.	2022-08-24 13:09:50 -04:00
David Garske	9b12011d71	Merge pull request #5499 from SparkiDev/aes_ctr_arm32_asm ... AES-CTR ARM32 crypto ASM fix	2022-08-24 09:59:49 -07:00
David Garske	53b74e2d32	Merge pull request #5498 from SparkiDev/tls_ecc_sig_fault ... Check ECC signature in TLS	2022-08-24 09:59:06 -07:00
David Garske	124cff60f1	Merge pull request #5500 from SparkiDev/sp_int_div_ss_rework ... Rework sp_div to work around static analysis error	2022-08-24 09:58:13 -07:00
Sean Parkinson	d087cbea1b	Rework sp_div to work around static analysis error ... Fix _sp_exptmod_mont_ext() to handle when number of bits in exponent is a multiple of the window size.	2022-08-24 12:31:21 +10:00
Sean Parkinson	9228354d29	AES-CTR ARM32 crypto ASM fix ... Fix handling of counter to support incrementing across all bytes in ARM32 crypto asm. Added test cases for wrapping of counter when 2 blocks are being encrypted to check assembly alternative path.	2022-08-24 10:51:56 +10:00
Sean Parkinson	2571f65e85	Check ECC signature in TLS ... Verifying gnerated ECC signature in TLS handshake code to mitigate when an attacker can gain knowledge of the private key through fault injection in the signing process. Requires WOLFSSL_CHECK_SIG_FAULTS to be defined.	2022-08-24 09:01:18 +10:00