Daniel Pouzzner
|
bdd62314f0
|
Merge pull request #8111 from JacobBarthelmeh/release
prepare for release 5.7.4
v5.7.4-stable
|
2024-10-24 16:00:03 -05:00 |
|
JacobBarthelmeh
|
dd2b191c36
|
update version listed in wolfssl-fips.rc and Ada wrapper
|
2024-10-24 14:19:17 -06:00 |
|
JacobBarthelmeh
|
8c5e188dd4
|
remove trailing white space in README
|
2024-10-24 13:04:00 -06:00 |
|
JacobBarthelmeh
|
8604024b95
|
prepare for release 5.7.4
|
2024-10-24 11:32:33 -06:00 |
|
Daniel Pouzzner
|
3f651a8dd0
|
Merge pull request #8109 from JacobBarthelmeh/coverity
Recent coverity warnings
|
2024-10-23 21:18:44 -05:00 |
|
JacobBarthelmeh
|
52ba700eb3
|
CID 426426 code maintainability warning, stored NULL value overwritten before used
|
2024-10-23 18:05:12 -06:00 |
|
JacobBarthelmeh
|
077b070132
|
CID 426427 remove duplicate null checks
|
2024-10-23 17:57:14 -06:00 |
|
JacobBarthelmeh
|
9af8716e85
|
Merge pull request #8087 from ColtonWilley/x509_store_rewrite
Initial rewrite of X509 STORE to replicate openssl behavior
|
2024-10-23 17:14:40 -06:00 |
|
Daniel Pouzzner
|
e7e20532eb
|
Merge pull request #8097 from julek-wolfssl/zd/18822
Fix TLS v1.2 session resumption edge cases
|
2024-10-23 18:01:35 -05:00 |
|
JacobBarthelmeh
|
830c5dace6
|
Merge pull request #8106 from douzzer/20241023-fixes
20241023-fixes
|
2024-10-23 16:44:09 -06:00 |
|
David Garske
|
25e32c2539
|
Fix for TLS v1.2 session resumption with tickets where the server decides to do a full handshake. The wrong sessionIDSz was being checked and should be the arrays one since it get set from the server_hello.
|
2024-10-23 15:14:05 -07:00 |
|
Daniel Pouzzner
|
cab20fbdd2
|
add and use WOLFSSL_PARTIAL_CHAIN as native bitmask macro for compat layer X509_V_FLAG_PARTIAL_CHAIN;
in src/x509_str.c, fix several C++ "invalid conversion" errors in X509StoreFreeObjList() and wolfSSL_X509_STORE_get0_objects().
|
2024-10-23 16:57:58 -05:00 |
|
Colton Willey
|
6f0bcac737
|
Address review comments, rename WOLFSSL_INTER_CA, use up_ref for get issuer
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
ee4e1b6262
|
Properly omit self signed CA from untrusted intermediates, handle memory leak for SSL case with proper flow
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
95f8d74202
|
Fix loop to decrement
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
96138e70f8
|
Restore proper error code handling for self signed CA in non-trusted intermediates
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
4c63668295
|
Small changes per review comments
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
3fc3a84a6b
|
Move X509_STORE_CTX_set_flags under OPENSSL_EXTRA
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
1ddb2ce435
|
Properly implement set flags for X509_V_FLAG_PARTIAL_CHAIN
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
87ce96527a
|
Changes for various failing build configs
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
1afbf55a80
|
Fix new build error after refactor
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
6607314dc6
|
Address code comments, rewrite get issuer internals, use better internal names, get rid of all lines over 80 chars
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
f0fae6506f
|
Fix windows warnings
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
98eb6b398c
|
Fix for windows builds
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
f7bfa71d9f
|
Implement support for verify flag X509_V_FLAG_PARTIAL_CHAIN
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
12f4f69fb4
|
Allow intermediate CA certs without keycertsign when added through X509 STORE
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
38c7de1707
|
Fixes for CI build errors
|
2024-10-23 16:55:34 -05:00 |
|
Colton Willey
|
17c9e92b7f
|
Initial rewrite of X509 STORE to replicate openssl behavior
|
2024-10-23 16:55:34 -05:00 |
|
Daniel Pouzzner
|
82273094e0
|
Merge pull request #8107 from JacobBarthelmeh/aesgcm
fix for state of aes.gcm.H on re-use
|
2024-10-23 16:52:42 -05:00 |
|
JacobBarthelmeh
|
1d25e0f89b
|
Merge pull request #8104 from gojimmypi/pr-vs2022-wolfssl-name
Name VS2022 binary output wolfssl via project name
|
2024-10-23 15:36:55 -06:00 |
|
JacobBarthelmeh
|
8fbf6a59bc
|
Merge pull request #8105 from kareem-wolfssl/zd18825
Fix 256-bit ECC conditional in ecc_map_ex.
|
2024-10-23 15:19:50 -06:00 |
|
JacobBarthelmeh
|
d0f5778429
|
fix for state of aes.gcm.H on re-use
|
2024-10-23 15:04:06 -06:00 |
|
Kareem
|
8986a9dae0
|
Fix 256-bit ECC conditional in ecc_map_ex.
|
2024-10-23 11:12:48 -07:00 |
|
Daniel Pouzzner
|
afa5b0168e
|
fix HAVE_SHA* configurations in IDE/iotsafe/user_settings.h to also set WOLFSSL_SHA*, and in IDE/STM32Cube/default_conf.ftl, IDE/iotsafe/user_settings.h, and examples/configs/user_settings_stm32.h, comment HAVE_SHA* as "old freeRTOS settings.h requires this".
|
2024-10-23 12:46:32 -05:00 |
|
gojimmypi
|
e3c9c07393
|
Name VS2022 binary output wolfssl via project name
|
2024-10-23 09:51:18 -07:00 |
|
Daniel Pouzzner
|
6e14889758
|
Merge pull request #8094 from JacobBarthelmeh/coverity
minor fixes for Coverity reports
|
2024-10-23 11:26:33 -05:00 |
|
JacobBarthelmeh
|
beeda7bc6f
|
Merge pull request #8100 from douzzer/20241022-cleanups
20241022-cleanups
|
2024-10-23 10:08:57 -06:00 |
|
Juliusz Sosinowicz
|
031656ee7a
|
Send a new ticket when rejecting a ticket and tickets enabled
|
2024-10-23 13:12:46 +02:00 |
|
Daniel Pouzzner
|
ea491b80ef
|
tests/api.c: gate test_GENERAL_NAME_set0_othername() on OPENSSL_ALL, not OPENSSL_EXTRA, as it fails with --enable-all-crypto --enable-opensslextra, and is commented to require --enable-opensslall.
|
2024-10-23 00:02:29 -05:00 |
|
Daniel Pouzzner
|
3bbd00f918
|
wolfcrypt/src/asn.c: tweak retval handling in MakeSignature() CERTSIGN_STATE_DO section for the benefit of WOLFSSL_DEBUG_TRACE_ERROR_CODES.
|
2024-10-23 00:02:29 -05:00 |
|
Daniel Pouzzner
|
508555c927
|
configure.ac: add several missing low level crypto algorithms to all-crypto that are already included indirectly in enable-all.
|
2024-10-23 00:02:29 -05:00 |
|
Daniel Pouzzner
|
30181f2ced
|
configure.ac: for reproducible-build, use --build-id=sha1, not --build-id=none, to support users relying on build-id in the linked object.
|
2024-10-23 00:02:29 -05:00 |
|
Daniel Pouzzner
|
bffcfb7efc
|
wolfcrypt/src/ecc.c: in wc_ecc_get_curve_id_from_oid(), deconditionalize guard against zero-length len added in 03a6eed037, to fix test_wc_ecc_get_curve_id_from_oid() failing in cross-mingw-all-crypto.
|
2024-10-23 00:02:29 -05:00 |
|
Daniel Pouzzner
|
6429315216
|
fix references to misnamed HAVE_SHA224, HAVE_SHA384, HAVE_SHA512 (correct names have WOLFSSL_ prefixes).
|
2024-10-23 00:02:28 -05:00 |
|
JacobBarthelmeh
|
43fe46cf24
|
Merge pull request #8099 from dgarske/armasm_aes
Fix issue with ARM ASM with AES CFB/OFB not initializing the "left" member
|
2024-10-22 17:29:45 -06:00 |
|
David Garske
|
5a0bb3a3ed
|
Fix issue with ARM ASM with AES CFB/OFB not initializing the "left" member. ZD 18841.
|
2024-10-22 14:30:54 -07:00 |
|
JacobBarthelmeh
|
f21a763ae9
|
return out of test function if failing RNG init
|
2024-10-22 14:22:46 -06:00 |
|
Juliusz Sosinowicz
|
2847cbfbad
|
Simplify TLS 1.2 session ID logic
Optimize entropy use. Only generate the exact amount of random data that we will actually keep.
Refactor done as part of work on ZD18822
|
2024-10-22 14:31:46 +02:00 |
|
JacobBarthelmeh
|
18150a11aa
|
CID 426062,426063 initialization and free check
|
2024-10-22 00:24:29 -06:00 |
|
JacobBarthelmeh
|
27267d7d2e
|
CID 426066 fix check if null before free
|
2024-10-22 00:21:26 -06:00 |
|