17203 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sean Parkinson	ee78e63b87	Merge pull request #5203 from dgarske/zd14289 ... Fix the supported version extension to always check minDowngrade	2022-06-03 08:31:36 +10:00
David Garske	a6465c2bd0	Merge pull request #5202 from julek-wolfssl/wolfssl-multi-test/send-alert-refactor ... wolfssl-multi-test fixes	2022-06-02 14:08:46 -07:00
David Garske	2dd27c8d4a	Fix the supported version extension to check the ssl->options.minDowngrade always.	2022-06-02 11:17:25 -07:00
David Garske	56c48b31ad	Merge pull request #5105 from tmael/rsa_oaep_nomalloc ... Support RSA OAEP with nomalloc	2022-06-02 08:45:01 -07:00
Daniel Pouzzner	2e307e1cd3	tls13.c: fix null pointer deref in FreeDcv13Args().	2022-06-02 10:32:05 -05:00
Juliusz Sosinowicz	3d71956b48	wolfssl-multi-test fixes: ... - Remove RetrySendAlert and SendAlert recursion - args possible NULL dereference	2022-06-02 16:08:25 +02:00
Sean Parkinson	fb9f90b98b	Merge pull request #5200 from dgarske/qat_fsanitize ... Fixes for buffers when testing with Intel QAT hardware	2022-06-02 08:35:24 +10:00
Juliusz Sosinowicz	9f2e3a2405	Merge pull request #5198 from dgarske/qat_ecc_marker	2022-06-01 21:35:47 +02:00
David Garske	5672e2a885	Fixes for buffers when testing with Intel QAT hardware and fsanitize=address: ... * PKCS7 should use allocated buffer for RSA. * PKCS7 small stack typo for `keyAlgArray` size in `wc_PKCS7_AddRecipient_KTRI`. * Fix for use of `free`, which should be `XFREE` in api.c. * Cleanup old RSA benchmarking MDK5/WINCE code no longer needed with `WC_DECLARE_ARRAY_DYNAMIC_DEC` and `WC_DECLARE_ARRAY_DYNAMIC_EXE`.	2022-06-01 12:07:57 -07:00
Hayden Roche	8b9d2ad657	Merge pull request #5196 from douzzer/20220601-multi-test-fixes	2022-06-01 11:41:26 -07:00
David Garske	9cfcdfc7aa	Merge pull request #5149 from julek-wolfssl/store-frags-v2 ... Re-use async to support WANT_WRITE while sending fragments	2022-06-01 10:52:54 -07:00
David Garske	cced5bd700	Merge pull request #5195 from LinuxJedi/ULL-fix ... Fix 64bit postfix for constants	2022-06-01 09:40:26 -07:00
David Garske	19c51dac45	Fix for QAT ECC to gate use of HW based on marker. Introduced in PR #4997.	2022-06-01 09:36:21 -07:00
David Garske	494a9fe41a	Merge pull request #5193 from SparkiDev/tls13_send_ticket ... TLS 1.3: send ticket	2022-06-01 08:37:52 -07:00
Daniel Pouzzner	b212853bce	evp.c: in EvpCipherAesGCM(), make sure ctx->gcmAuthIn is non-null before clearing it; fix whitespace.	2022-06-01 10:29:40 -05:00
Juliusz Sosinowicz	d29c656d4f	SendAlert: clear output buffer to try and send the alert now	2022-06-01 16:48:57 +02:00
Andrew Hutchings	11a7756527	Fix 64bit postfix for constants ... GCC 4.0.4 PowerPC 32bit cross-compiler complains when `UL` is used instead of `ULL` for 64bit constants.	2022-06-01 15:04:29 +01:00
Juliusz Sosinowicz	df10e1fad2	Store RetrySendAlert error in ssl->error	2022-06-01 14:59:10 +02:00
Sean Parkinson	be743b2204	TLS 1.3: send ticket ... Can send a new session ticket any time after handshake is complete with TLS v1.3. Added API for server application to do this. Added tests.	2022-06-01 10:36:01 +10:00
Sean Parkinson	81cd1e652e	Merge pull request #5170 from haydenroche5/evp_cipher_aes_gcm ... Fix EVP_CTRL_GCM_IV_GEN with AES-GCM.	2022-06-01 08:20:33 +10:00
Juliusz Sosinowicz	c74315f1ef	Save pending alerts when using async io ... - Don't overwrite ssl->error - Clear the error in ssl->error because the return of SendBuffered is now stored in ret instead	2022-05-31 18:17:11 +02:00
Chris Conlon	0554b02215	Merge pull request #5177 from JacobBarthelmeh/PKCS7	2022-05-31 09:46:14 -06:00
Chris Conlon	da91578bc7	Merge pull request #5180 from miyazakh/tsipv_up	2022-05-31 09:41:47 -06:00
David Garske	2ed85926d5	Merge pull request #5187 from kareem-wolfssl/hsHashesNull ... Confirm ssl->hsHashes is not NULL before attempting to dereference it.	2022-05-30 10:41:35 -07:00
Juliusz Sosinowicz	8aa2da532c	Combine preproc check into one statement	2022-05-30 15:27:36 +02:00
Daniel Pouzzner	c83120d8c8	Merge pull request #5097 from tmael/c89_fixes ... Fix for c89, use WOLF_C89	2022-05-28 08:29:42 -05:00
David Garske	baaff96045	Merge pull request #5188 from kaleb-himes/PR5174-SUPPLEMENT ... Supplement to @julek-wolfssl's fantastic find, just allow for proper expansion	2022-05-27 20:36:20 -07:00
Juliusz Sosinowicz	6245395f34	Simulate WANT_WRITE only with async I/O support	2022-05-27 23:23:18 +02:00
David Garske	a91a2482e7	Merge pull request #5158 from anhu/ECDHE_PSK ... Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442	2022-05-27 13:25:48 -07:00
Kareem	e061bc23f4	Fix asn1.h NOLINT comments.	2022-05-27 13:05:56 -07:00
kaleb-himes	f5bbad185f	Supplement to @julek-wolfssl's fantastic find, just allow for proper expansion	2022-05-27 13:52:26 -06:00
Juliusz Sosinowicz	8cb4819b53	Fix curve group matching on secure renegotiation	2022-05-27 21:26:55 +02:00
Juliusz Sosinowicz	84bca63b2e	Add WOLFSSL_NO_ASYNC_IO to low resource build	2022-05-27 21:26:55 +02:00
Juliusz Sosinowicz	50c0b3d2a2	Add testing/docs for blocking write ... - Fix case where message grouping can make CheckAvailableSize return a WANT_WRITE - CheckAvailableSize in tls13.c will not return a WANT_WRITE since it only does so for DTLS <=1.2	2022-05-27 21:26:55 +02:00
Daniel Pouzzner	decf9972bb	fix whitespace.	2022-05-27 14:22:22 -05:00
Daniel Pouzzner	8c10c3776d	wolfcrypt/src/asn.c: in C89 codepath of GetFormattedTime(), add buffer size checks before calls to sprintf().	2022-05-27 14:20:38 -05:00
Tesfa Mael	aca199cb05	Fix to compile with c89 ... strncasecmp and snprintf are unavailable in C89 use // static analyzer suppressions	2022-05-27 14:20:37 -05:00
Kareem	6e6c4500d6	Fix comments in asn1.h to use ANSI C style.	2022-05-27 11:01:29 -07:00
Kareem	98ec442b37	Confirm ssl->hsHashes is not NULL before attempting to dereference it.	2022-05-27 10:57:23 -07:00
Anthony Hu	df06db114d	Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442 ... Testing: ./autogen.sh ./configure --enable-psk make all check $ ./examples/server/server -j -l ECDHE-PSK-AES128-GCM-SHA256 SSL version is TLSv1.2 SSL cipher suite is TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 SSL curve name is SECP256R1 Client message: hello wolfssl! $ ./examples/client/client -s -l ECDHE-PSK-AES128-GCM-SHA256 SSL version is TLSv1.2 SSL cipher suite is TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 SSL curve name is SECP256R1 I hear you fa shizzle!	2022-05-27 11:05:55 -04:00
Hideki Miyazaki	81ad463026	fix a compile error by clang	2022-05-27 11:37:26 +09:00
Juliusz Sosinowicz	4e8c362152	Allocate ssl->async seperately to the SSL object	2022-05-26 23:08:48 +02:00
Juliusz Sosinowicz	733fe1a8d3	Use WOLFSSL_ASYNC_IO for WOLFSSL_NONBLOCK_OCSP ... - Enable ssl->async to store function arguments for non-blocking OCSP - Remove ssl->nonblockarg	2022-05-26 23:08:48 +02:00
Juliusz Sosinowicz	c151dcec50	Re-use async to support WANT_WRITE while sending fragments ... - Async I/O can be turned off with WOLFSSL_NO_ASYNC_IO - WOLFSSL_ASYNC_IO functionality enabled in SendCertificateVerify() and SendServerKeyExchange() to allow safe re-entry into SendHandshakeMsg() - Testing size of structs is refactored int WOLFSSL_ASSERT_SIZEOF_GE()	2022-05-26 23:08:48 +02:00
David Garske	f93b23b524	Merge pull request #5169 from kareem-wolfssl/miscFixes ... Misc. fixes	2022-05-26 12:52:39 -07:00
David Garske	0b6f7c1533	Merge pull request #5176 from embhorn/zd14227 ... Fix to move wolfSSL_ERR_clear_error outside gate for OPENSSL_EXTRA	2022-05-26 08:33:52 -07:00
David Garske	ea895e99b7	Merge pull request #5184 from SparkiDev/asn_templ_make_cert_ext ... ASN template: properly handle WOLFSSL_CERT_EXT	2022-05-26 06:53:10 -07:00
Eric Blankenhorn	2800d00bb4	Fix to move wolfSSL_ERR_clear_error outside gate for OPENSSL_EXTRA	2022-05-26 06:11:45 -05:00
Sean Parkinson	cacf5aeb7e	ASN template: properly handle WOLFSSL_CERT_EXT ... Encoding extensions didn't properly handle WOLFSSL_CERT_EXT not being defined.	2022-05-26 10:01:59 +10:00
Hideki Miyazaki	a5fa98e5f0	addressed code review ... update Copyright year	2022-05-26 08:50:02 +09:00