jordan
fa4312edef
curl: document tiny-curl config a bit more.
2025-09-19 15:56:51 -05:00
Sean Parkinson
b90720c6be
Merge pull request #9176 from effbiae/do-server-key-exchange
...
refactor parts of DoServerKeyExchange()
2025-09-19 08:36:07 +10:00
JacobBarthelmeh
5d9c608ed6
Merge pull request #9195 from rlm2002/zd20508
...
address undefined shift behavior and overflow
2025-09-18 15:34:32 -06:00
JacobBarthelmeh
f143dbb858
Merge pull request #9217 from douzzer/20250918-25519-low-mem-gates
...
20250918-25519-low-mem-gates
2025-09-18 14:34:13 -06:00
JacobBarthelmeh
1f33b9910c
Merge pull request #9215 from LinuxJedi/fix-ACVP_VECTOR_TESTING
...
Fix a test when using `ACVP_VECTOR_TESTING`
2025-09-18 11:47:02 -06:00
JacobBarthelmeh
beaf16b9e8
Merge pull request #9216 from philljj/log_mem_err_msg
...
ssl internal: log preMasterSecret Memory error msg.
2025-09-18 11:45:03 -06:00
Daniel Pouzzner
d15523a6df
fix gating in wolfssl/wolfcrypt/fe_operations.h -- gate out load_3() and load_4() when !(CURVE25519_SMALL || ED25519_SMALL);
...
harmonize low-mem outer gate in wolfcrypt/src/fe_operations.c with outer gate in wolfcrypt/src/fe_low_mem.c.
2025-09-18 12:27:37 -05:00
jordan
0231f33b2e
ssl internal: log preMasterSecret Memory error msg.
2025-09-18 09:26:10 -05:00
Andrew Hutchings
b7679dbe96
Fix a test when using ACVP_VECTOR_TESTING
...
The `ACVP_VECTOR_TESTING` blocks the clearing of the output when an auth
tag check fails. This causes a test for that scenario to fail, so don't
do that test whcn `ACVP_VECTOR_TESTING` is defined.
2025-09-18 11:37:06 +01:00
philljj
7a0c40ee16
Merge pull request #9210 from douzzer/20250916-linuxkm-fixes
...
20250916-linuxkm-fixes
2025-09-17 15:50:03 -05:00
JacobBarthelmeh
05bcd82adc
Merge pull request #9191 from holtrop/rust-wrapper
...
Create initial Rust wrapper structure
2025-09-17 14:20:34 -06:00
Daniel Pouzzner
66ee2c2ef3
linuxkm/Makefile and linuxkm/Kbuild:
...
* refactor .PHONY Kbuild target rename-pie-text-and-data-sections into macro RENAME_PIE_TEXT_AND_DATA_SECTIONS, and execute it conditional on module_exports.c regeneration;
* use .ONESHELL in the wrapper Makefile too, and rework the changes in bf5536d6b8
2025-09-17 13:10:16 -05:00
Daniel Pouzzner
7ddf263199
linuxkm/Kbuild: add support for FORCE_GLOBAL_OBJTOOL_OFF.
2025-09-17 13:10:16 -05:00
JacobBarthelmeh
72ae012ace
Merge pull request #9202 from gojimmypi/pr-apple-workflow-update
...
Remove missing workflow strategy, run only for wolfssl owner
2025-09-17 11:44:34 -06:00
JacobBarthelmeh
b8b35e25e6
Merge pull request #9204 from gojimmypi/pr-test-order
...
Change test order: random_test after SHA tests
2025-09-17 10:43:30 -06:00
JacobBarthelmeh
377d238457
Merge pull request #9207 from embhorn/zd20520
...
Check for NO_THREAD_LS before assigning THREAD_LS_T
2025-09-17 10:38:48 -06:00
JacobBarthelmeh
5b864657b7
Merge pull request #9175 from SparkiDev/sm2_cert_vfy_fix
...
SM2 TLS1.3: Fix certificate verify
2025-09-17 10:16:44 -06:00
Josh Holtrop
d2c16bacb6
Rust wrapper: add include.am to include files in distribution
2025-09-17 10:44:40 -04:00
philljj
5cb2103feb
Merge pull request #9206 from douzzer/20250916-linuxkm-module-update-fips-hash
...
20250916-linuxkm-module-update-fips-hash
2025-09-16 19:06:06 -05:00
JacobBarthelmeh
65108beee8
Merge pull request #9201 from julek-wolfssl/debian-rules
...
Ignore `debian/rules`
2025-09-16 17:50:57 -06:00
JacobBarthelmeh
b591b52ab2
Merge pull request #9182 from douzzer/20250910-wc_ecc_export_x963-no-PRIVATE_KEY_UNLOCK
...
20250910-wc_ecc_export_x963-no-PRIVATE_KEY_UNLOCK
2025-09-16 17:15:24 -06:00
Eric Blankenhorn
600058529c
Check for NO_THREAD_LS before assigning THREAD_LS_T
2025-09-16 16:17:49 -05:00
Daniel Pouzzner
bf5536d6b8
linuxkm/Makefile:
...
* add module-update-fips-hash rule, for in-place FIPS hash update without rebuild;
* improve PIE sequence in module build rule to double-check stability of the relocation table after final rebuild;
Makefile.am: add a module-update-fips-hash passthrough target.
2025-09-16 14:38:51 -05:00
gojimmypi
152075848c
Change test order: random_test after SHA tests
2025-09-16 10:48:14 -07:00
Ruby Martin
a8fca08b7e
add edge case unit test where cost=22, block=8
2025-09-16 11:04:43 -06:00
Ruby Martin
86abe793d7
address undefined shift behavior and overflow
2025-09-16 11:03:21 -06:00
gojimmypi
01178b325e
Remove missing strategy, run only for wolfssl owner
2025-09-16 08:50:14 -07:00
Juliusz Sosinowicz
c2a3a37c1e
Ignore debian/rules
2025-09-16 16:08:01 +02:00
effbiae
7da0b54d32
refactor DoServerKeyExchange()
2025-09-16 12:02:38 +10:00
JacobBarthelmeh
d4f8c9c754
Merge pull request #9189 from julek-wolfssl/hostap-vm.yml-cache-check
...
Fix: Avoids hostap checkout on cache hit
2025-09-15 13:21:54 -06:00
Chris Conlon
aa8151dc4b
Merge pull request #9186 from miyazakh/fsp_ra6m3_up2
...
Renesas RA6M3 : Minor README update
2025-09-15 10:10:50 -06:00
Josh Holtrop
167e76add4
Create initial Rust wrapper structure
...
Generate bindings to C library with bindgen
Add github CI workflow to build Rust wrapper
2025-09-12 15:49:56 -04:00
Juliusz Sosinowicz
98ac98db9a
Fix: Avoids hostap checkout on cache hit
...
This change prevents the hostap repository from being cloned
unnecessarily when the cache is hit, improving workflow efficiency.
2025-09-12 17:10:13 +02:00
Hideki Miyazaki
13809256ef
minor update README
2025-09-12 17:54:49 +09:00
Sean Parkinson
dc421a0d4c
Merge pull request #9164 from dgarske/keytoder
...
Add support for enabling RSA private key to DER without keygen
2025-09-12 10:36:34 +10:00
Sean Parkinson
a17b10ef10
Merge pull request #9171 from effbiae/ss-callback
...
refactor SessionSecret_callback*
2025-09-12 08:02:51 +10:00
JacobBarthelmeh
f5a735a184
Merge pull request #9180 from dgarske/stsafe-pad
...
Fix for ST-Safe issue with ECC signature R/S needing leading zero pad
2025-09-11 14:47:49 -06:00
philljj
a7cb64fcc0
Merge pull request #9184 from douzzer/20250910-linuxkm-even-more-OBJECT_FILES_NON_STANDARD
...
20250910-linuxkm-even-more-OBJECT_FILES_NON_STANDARD
2025-09-11 15:18:52 -05:00
Daniel Pouzzner
20d7650edf
linuxkm/Kbuild: when ENABLED_LINUXKM_PIE, always set "$(WOLFCRYPT_PIE_FILES): OBJECT_FILES_NON_STANDARD := y", as before. completes reversion of 04834680d5.
2025-09-11 13:53:59 -05:00
David Garske
f0b35d18a0
Merge pull request #9174 from philljj/tiny_curl
...
curl: support --enable-curl=tiny option.
2025-09-11 10:39:56 -07:00
David Garske
3e63bc68d4
Add support for enabling RSA private key to DER without keygen. ( new macro WOLFSSL_KEY_TO_DER)
2025-09-11 10:29:31 -07:00
David Garske
c397a27897
Appease IAR compiler possible use of uninitialized variables
2025-09-11 10:27:01 -07:00
David Garske
88586a5a47
Fix for ST-Safe issue with ECC signature R/S parsing needing leading zero pad (ZD 20504)
2025-09-11 10:27:01 -07:00
philljj
472605fb54
Merge pull request #9183 from douzzer/20250911-linuxkm-dont-undefine-CONFIG_OBJTOOL
...
20250911-linuxkm-dont-undefine-CONFIG_OBJTOOL
2025-09-11 12:24:05 -05:00
Daniel Pouzzner
de50268dfd
linuxkm/Kbuild: don't undefine CONFIG_OBJTOOL (breaks FIPS hash stability on some target kernels/configs);
...
add config-based gate on "$(WOLFCRYPT_PIE_FILES): OBJECT_FILES_NON_STANDARD := y".
2025-09-11 10:24:53 -05:00
philljj
edf3c3158c
Merge pull request #9181 from douzzer/20250910-linuxkm-more-OBJECT_FILES_NON_STANDARD
...
20250910-linuxkm-more-OBJECT_FILES_NON_STANDARD
2025-09-10 22:03:10 -05:00
effbiae
2332347ca1
refactor SessionSecret_callback*
2025-09-11 11:54:40 +10:00
Daniel Pouzzner
2028d1f0f4
doc/dox_comments/header_files/ecc.h: add docs for wc_ecc_make_pub() and wc_ecc_make_pub_ex(), and update docs for wc_ecc_export_x963() and wc_ecc_export_x963_ex() to reflect that they export the public key, and add see-alsos to wc_ecc_make_pub.
2025-09-10 17:02:57 -05:00
Daniel Pouzzner
04834680d5
linuxkm/Kbuild: when ENABLED_LINUXKM_PIE, use "undefine CONFIG_OBJTOOL" to inhibit false-positive "unannotated intra-function call" due to inline retpolines;
...
linuxkm/Makefile, linuxkm/include.am, linuxkm/module_hooks.c: remove linuxkm/pie_first.c, linuxkm/pie_last.c, and references to them (replaced by fenceposts in linuxkm/wolfcrypt.lds).
2025-09-10 15:08:41 -05:00
David Garske
484f35244e
Merge pull request #9179 from wolfSSL/revert-9145-zd20038_2
...
Revert "Fix building with --coding=no/WOLFSSL_PEM_TO_DER undefined."
2025-09-10 12:33:31 -07:00
