Sean Parkinson
fc8a509b06
Merge pull request #7597 from ColtonWilley/max_altnames_and_name_constraints
...
Max limits on number of alternative names and name constraints
2024-05-31 11:24:30 +10:00
David Garske
7fadd4ed9f
Merge pull request #7595 from JacobBarthelmeh/static
...
Pull in some staticmemory features
2024-05-30 16:31:54 -07:00
David Garske
bb57c1de94
Merge pull request #7603 from lealem47/detect_cut
...
Fix cut detection in configure.ac
2024-05-30 15:42:55 -07:00
Lealem Amedie
ecef3c214c
Fix cut detection in configure.ac
2024-05-30 16:09:04 -06:00
JacobBarthelmeh
ebdc8b9a32
rename of macros, add descriptions, minor fixes
2024-05-30 14:48:52 -06:00
Colton Willey
1310c97a22
Add new certs to include.am
2024-05-30 12:45:46 -07:00
David Garske
66a5d8cc8a
Merge pull request #7601 from douzzer/20240529-linuxkm-6v10-updates
...
20240529-linuxkm-6v10-updates
2024-05-30 11:49:11 -07:00
David Garske
107c10d795
Merge pull request #7596 from JacobBarthelmeh/decl
...
make function signature match declaration
2024-05-30 10:59:04 -07:00
David Garske
61fea768b3
Merge pull request #7598 from JacobBarthelmeh/x509
...
fix typo with NO_CERTS macro
2024-05-30 09:59:37 -07:00
Daniel Pouzzner
41cbbfe3ab
linuxkm: updates for kernel 6.10: use new _noprof names for newly macro-shimmed kmalloc, krealloc, kzmalloc, kvmalloc_node, and kmalloc_trace, and refactor linuxkm/Makefile and linuxkm/Kbuild to set up links to sources in the dest tree (works around breakage from linux commit 9a0ebe5011).
2024-05-30 11:21:42 -05:00
JacobBarthelmeh
34ca03770f
still compile in wc_RsaKeyToDer with keygen but NO_CERTS
2024-05-30 09:58:25 -06:00
Colton Willey
f13a82610c
Add flag guard for IGNORE_NAME_CONSTRAINTS
2024-05-29 22:41:36 -07:00
Colton Willey
a17677c946
Remove trailing whitespace
2024-05-29 21:29:55 -07:00
Colton Willey
473de5796c
Free ctx before return
2024-05-29 20:52:09 -07:00
Colton Willey
284dea43fe
Unify max name testing to use cert files for both cases.
2024-05-29 19:00:15 -07:00
Colton Willey
e620b47e1a
Add configuration file for generating cert with too many name constraints
2024-05-29 18:23:13 -07:00
Colton Willey
a4544ce2eb
Updates to address review comments
2024-05-29 17:54:52 -07:00
Colton Willey
af537a6ae3
Move definition to beginning of block
2024-05-29 17:02:29 -07:00
David Garske
3e9f656ac3
Merge pull request #7580 from kareem-wolfssl/zd17975
...
Fix missing stdio.h include on Freescale MQX. Use sprintf as snprintf is not available on MQX.
2024-05-29 16:55:34 -07:00
JacobBarthelmeh
cf61df129c
fix typo with NO_CERTS macro
2024-05-29 17:08:01 -06:00
JacobBarthelmeh
9673b3f218
make function signature match declaration
2024-05-29 17:00:22 -06:00
Colton Willey
b00ae2ac69
Initial implementation of max limits on number of alternative names and name constraints
2024-05-29 15:55:17 -07:00
JacobBarthelmeh
511c403631
account for yes/no options
2024-05-29 15:59:51 -06:00
JacobBarthelmeh
6cca3a0d92
tie in static memory debug callback
2024-05-29 15:50:14 -06:00
JacobBarthelmeh
288fe430f5
tying in lean staticmemory build with --enable-staticmemory=small
2024-05-29 15:50:11 -06:00
JacobBarthelmeh
18d80864b9
add lean static memory build
2024-05-29 15:44:09 -06:00
David Garske
200f309e0e
Merge pull request #7587 from douzzer/20240524-pq-clang-tidy
...
20240524-pq-clang-tidy
2024-05-24 16:40:11 -07:00
Anthony Hu
021b573027
Merge pull request #7581 from dgarske/embos_emnet
...
Fixes for Segger emNet to handle non-blocking want read/want write
2024-05-24 17:31:16 -04:00
Daniel Pouzzner
8de00d7651
fix benign clang-analyzer-deadcode.DeadStores in pq crypto files introduced in 9a58301ab1.
2024-05-24 14:24:02 -05:00
Kareem
911f21ed36
Fix missing stdio.h include and XSNPRINTF definition on Freescale MQX.
2024-05-24 11:54:23 -07:00
Juliusz Sosinowicz
a5154b22f1
Merge pull request #7583 from gasbytes/patch-segv
...
separating two x509_store xmalloc checks
2024-05-24 19:58:29 +02:00
gasbytes
063e48014a
fix tabs and spaces
2024-05-24 17:52:54 +02:00
David Garske
9b058ec3a2
Fixes for EMNET with non-blocking to handle want read/want write. ZD 18012
2024-05-24 07:42:18 -07:00
David Garske
3b5517692e
Merge pull request #7582 from aidangarske/hpke_test_fix
...
Revert change from PR #7570
2024-05-24 07:35:39 -07:00
David Garske
51f19f42c6
Merge pull request #7574 from douzzer/20240522-quantum-safe-linuxkm
...
20240522-quantum-safe-linuxkm
2024-05-24 07:35:01 -07:00
David Garske
76e7d8627f
Merge pull request #7584 from Frauschi/zephyr_fix
...
Zephyr fix for XSTRNCASECMP
2024-05-24 07:32:53 -07:00
Tobias Frauenschläger
30eb26bd79
Zephyr fix for XSTRNCASECMP
...
The macro missed the third argument for wc_strncasecmp().
Signed-off-by: Tobias Frauenschläger <t.frauenschlaeger@me.com >
2024-05-24 11:49:58 +02:00
gasbytes
3f96d14b32
80 characters limit fix
2024-05-24 00:12:38 +02:00
gasbytes
12a5cb45fb
separating two x509_store xmalloc checks
2024-05-23 23:04:00 +02:00
aidan garske
3670bfb9ae
Revert change from PR #7570
2024-05-23 12:34:59 -07:00
Tobias Frauenschläger
d28dd602e5
Various fixes for dual algorithm certificates ( #7577 )
...
This commit adds varios fixes for the implementation of hybrid
certificates with two algorithms:
* Support for Certificate Signing Requests (both creating hybrid ones
and also verifying ones)
* Fix for SAN fields in the DecodedCert and PreTBS generation
* Fix related to WOLFSSL_SMALL_STACK
Signed-off-by: Tobias Frauenschläger <t.frauenschlaeger@me.com >
2024-05-23 15:03:55 -04:00
Anthony Hu
b98e4e0093
Merge pull request #7576 from Frauschi/pqc_private_key_fix
...
Fix PQC and hybrid certificate regressions
2024-05-23 15:03:16 -04:00
Chris Conlon
e05dbd531e
Merge pull request #7570 from jackctj117/test
...
Code Coverage for hpke.c test case HAVE_CURVE448 using test.c
2024-05-23 11:49:37 -06:00
Chris Conlon
688ae60cd9
Merge pull request #7573 from aidangarske/hpke_sha512_test
...
Add test for HPKE for Curve448
2024-05-23 11:46:30 -06:00
David Garske
ff6e6848de
Merge pull request #7578 from Frauschi/stm32h5_aes
...
Add support for STM32H5 AES hardware acceleration
2024-05-23 10:38:44 -07:00
David Garske
40db521f8b
Merge pull request #7575 from josepho0918/cmac
...
Simplify CMAC verification logic
2024-05-23 10:37:57 -07:00
Tobias Frauenschläger
9a58301ab1
Fix PQC and hybrid certificate regressions
...
Due to recent changes in the logic to decode private keys and to parse
the TLS1.3 CertificateVerify message, some regressions regarding PQC
private keys and hybrid certificates have been introduced:
* Decoding PQC private keys fails as the PKCS8 header of a decoded DER
file is now already removed before parsing the key.
* The key size wasn't properly stored in the context for PQC keys after
decoding a certificate (always the maximum size)
* The two 16-bit size values in case of a hybrid signature in the
CertificateVerify message have been incorrectly decoded as 32-bit
values instead of 16-bit values. This resulted in wrong values,
leading to segmentation faults.
All three regressions are fixed with the changes in this commit.
Signed-off-by: Tobias Frauenschläger <t.frauenschlaeger@me.com >
2024-05-23 16:01:28 +02:00
Sean Parkinson
023f604213
Merge pull request #7572 from douzzer/20240522-sha256-avx1-IS_INTEL_SHA
...
20240522-sha256-avx1-IS_INTEL_SHA
2024-05-23 22:37:54 +10:00
Tobias Frauenschläger
82642c1ee1
Add support for STM32H5 AES hardware acceleration
...
Tested with STM32H573i discovery board.
Signed-off-by: Tobias Frauenschläger <t.frauenschlaeger@me.com >
2024-05-23 12:22:11 +02:00
Joseph Chen
8a7e3ba52e
Simplify CMAC verification logic
2024-05-23 15:12:10 +08:00