Commit Graph

  • 6ae0ecc5f3 Merge pull request #9133 from AlexLanzano/log-fix David Garske 2025-08-25 14:09:20 -07:00
  • cfee026f98 Merge pull request #9131 from embhorn/zd20429 David Garske 2025-08-25 14:08:30 -07:00
  • e0913c47ef Merge pull request #9039 from tamasan238/for-pr-1 JacobBarthelmeh 2025-08-25 14:47:07 -06:00
  • 623c593210 Merge branch 'master' of https://github.com/wolfSSL/wolfssl into zd19563_verify Kareem 2025-08-25 11:36:12 -07:00
  • 8207053636 Fix value comparison typo in if statement Alex Lanzano 2025-08-25 13:56:35 -04:00
  • 2885df68b4 Properly detect duplicate CKS extensions. Anthony Hu 2025-08-25 12:01:29 -04:00
  • 6ab6634efc Fix markdown in docs Eric Blankenhorn 2025-08-25 09:28:08 -05:00
  • ffbcd4f86c Merge pull request #9125 from douzzer/20250819-linuxkm-fips-v5-wc_GenerateSeed_IntelRD Sean Parkinson 2025-08-25 21:37:35 +10:00
  • a67d1a84f5 configure.ac: for linuxkm with PIE, don't include enable-fpcc in enable-all-crypto (the compiler generates a weird out-of-bounds bss reference for find_hole()); Daniel Pouzzner 2025-08-23 17:21:24 -05:00
  • d9467db007 wolfssl/wolfcrypt/types.h: fix bugprone-macro-parentheses in definition of DISABLE_VECTOR_REGISTERS. Daniel Pouzzner 2025-08-22 23:43:36 -05:00
  • e0383b496a linuxkm/module_hooks.c: implement wc_linuxkm_GenerateSeed_IntelRD, gated on WC_LINUXKM_RDSEED_IN_GLUE_LAYER; Daniel Pouzzner 2025-08-22 21:57:23 -05:00
  • 8dd43077fd Fix for sniffer partial segment overlap that can occur when a TCP window is full and a TCP retransmission occurs. David Garske 2025-08-22 13:24:13 -07:00
  • 6f567bbca2 Merge pull request #9122 from julek-wolfssl/hostap-fix-cert-update JacobBarthelmeh 2025-08-22 15:28:19 -06:00
  • 9575c69d3b Merge pull request #9121 from douzzer/20250819-linuxkm-pie-normalize_relocs JacobBarthelmeh 2025-08-22 15:11:48 -06:00
  • c2eeeafdbe Merge remote-tracking branch 'upstream/master' into zd19563_verify Kareem 2025-08-22 13:56:44 -07:00
  • bc5b297d33 Merge pull request #9046 from kareem-wolfssl/zd20038 JacobBarthelmeh 2025-08-22 14:43:46 -06:00
  • 1f579afc66 Merge pull request #9117 from SparkiDev/tls13_ks_fix David Garske 2025-08-22 12:54:54 -07:00
  • 0d1e9c3264 Fix whitespace issue and known macros list David Garske 2025-08-22 12:48:55 -07:00
  • 4a067fa1bc Don't enforce test_wolfSSL_X509_STORE_CTX_ex12 return code as it may be skipped, modifying the return code. Kareem 2025-08-22 11:29:21 -07:00
  • 4043dc2dd0 Fix hostap cert update Juliusz Sosinowicz 2025-08-22 17:24:43 +02:00
  • af4e2d127f linuxkm/: implement wc_linuxkm_pie_reloc_tab and wc_linuxkm_normalize_relocations(), and integrate with updateFipsHash(). Daniel Pouzzner 2025-08-22 00:34:01 -05:00
  • 077beaecd8 Fix memory leak in unit test, fix for loop syntax. Kareem 2025-08-21 16:33:57 -07:00
  • b53db94f1e x509_verify_cert: Code review feedback. Kareem 2025-08-21 11:55:54 -07:00
  • 7ab4c6fa14 Merge pull request #9087 from JacobBarthelmeh/dhuk David Garske 2025-08-21 14:32:20 -07:00
  • da8ffd5762 Merge pull request #8463 from JacobBarthelmeh/sgx David Garske 2025-08-21 11:06:35 -07:00
  • 42c5324962 SAES does not have GCM support, added IV option for CBC wrapping of key JacobBarthelmeh 2025-08-21 09:26:40 -06:00
  • d66c69eaec Merge pull request #9079 from holtrop/error-getshortint-on-negative-values Sean Parkinson 2025-08-21 08:35:17 +10:00
  • b3366acdaf Merge pull request #9103 from rlm2002/zd20314-reduce-binary-footprint Sean Parkinson 2025-08-21 08:33:39 +10:00
  • b1cdf0b214 TLS 1.3 KeyShare: error on duplicate group Sean Parkinson 2025-08-20 20:48:14 +10:00
  • 658c3d69fb use memset, fix unlock, adjust return value checks JacobBarthelmeh 2025-08-20 13:53:27 -06:00
  • 993099e47e Merge pull request #9114 from douzzer/20250819-debug-trace-errcodes-dist-artifacts JacobBarthelmeh 2025-08-20 10:48:38 -06:00
  • 79fe6e467b Merge pull request #9112 from SparkiDev/tls13_onlyDhePskKe_fix David Garske 2025-08-20 06:44:08 -07:00
  • 596e211a97 Merge pull request #9113 from SparkiDev/tls13_certvfy_sigalg_check David Garske 2025-08-20 06:44:03 -07:00
  • d2f139c9b0 Error from GetShortInt with negative INTEGER values - Add WORD8 case Josh Holtrop 2025-08-20 09:34:19 -04:00
  • 0e6e040039 formatting remove whitespace Ruby Martin 2025-08-18 15:49:59 -06:00
  • 5f7e2389d9 wolfssl/include.am: include wolfssl/debug-trace-error-codes.h and wolfssl/debug-untrace-error-codes.h in dist archives. Daniel Pouzzner 2025-08-19 17:09:58 -05:00
  • 8119034555 work around for shellcheck warning JacobBarthelmeh 2025-05-21 11:30:41 -06:00
  • 23498c293e cpuid dummy call with sgx and fix assembly SP + SGX build JacobBarthelmeh 2025-04-30 01:10:03 -06:00
  • 44784729c0 touch up clean script and comment out sp-asm for now JacobBarthelmeh 2025-02-17 15:00:22 -07:00
  • 59ac260ae8 add option for building sgx with assembly optimizations JacobBarthelmeh 2025-02-17 13:52:31 -07:00
  • 9cdbc03a23 Merge pull request #9111 from douzzer/20250818-configure-linuxkm-fips-v5 JacobBarthelmeh 2025-08-19 14:31:08 -06:00
  • 98b6b92a76 Error from GetShortInt with negative INTEGER values Josh Holtrop 2025-08-08 13:15:37 -04:00
  • 2810656242 TLS 1.3: CertificateVerify - check sig alg was sent Sean Parkinson 2025-08-19 16:27:19 +10:00
  • cd55fe6135 TLS 1.3: Fix for onlyDhePskKe Sean Parkinson 2025-08-19 11:55:29 +10:00
  • b9cc060340 configure.ac: tweaks for ENABLED_LINUXKM_DEFAULTS and FIPS v5. Daniel Pouzzner 2025-08-18 18:21:33 -05:00
  • c089abe92f add macro to list JacobBarthelmeh 2025-08-18 16:47:30 -06:00
  • 27d03fce7a additional check for ARM ASM Inline option Ruby Martin 2025-08-13 13:57:54 -06:00
  • f114f2cde2 Merge pull request #9093 from kareem-wolfssl/zd20372 David Garske 2025-08-18 13:43:53 -07:00
  • fb6375551b updating unwrap/wrap with use of DHUK JacobBarthelmeh 2025-08-18 13:38:26 -06:00
  • aa6f1b231a Fix memory leak in X509StoreRemoveCa. Kareem 2025-07-29 10:07:34 -07:00
  • 19b778dda0 Protect against exceeding original depth, fix overlong lines. Kareem 2025-07-25 16:36:59 -07:00
  • cb985dcfa8 ECC required for newly added unit test. Kareem 2025-07-10 10:28:12 -07:00
  • 60c84744c8 Fix memory leak in x509_verify_cert itself, the failed certs need a pop_free call so the reference is properly decremented, as they are no longer in the X509_STORE. Kareem 2025-07-09 17:16:31 -07:00
  • 1e367597b6 Fix memory leak in newly added unit test. Kareem 2025-07-09 12:19:01 -07:00
  • 6b01053d98 Add test case for new x509_verify_cert retry functionality. Kareem 2025-06-20 11:31:18 -07:00
  • 027f0891f4 Don't fail out if X509StoreRemoveCa fails, since adding the temp CA was optional, it is possible there is no temp CA to remove. Kareem 2025-05-22 16:29:55 -07:00
  • aaadb7971d Fix narrowing conversion of type in RemoveCa. Kareem 2025-05-21 12:40:37 -07:00
  • 7b4a50b701 Add missing XFREE for dCert. Kareem 2025-05-21 12:17:57 -07:00
  • d6f603b661 Add X509StoreRemoveCa wrapper around RemoveCa Kareem 2025-05-09 11:59:16 -07:00
  • 15a147d957 Remove incorrectly added NULL check, add debug logging to RemoveCA. Kareem 2025-04-17 16:43:17 -07:00
  • f9eda18445 Fix missing cast and correct freeing of certs. Kareem 2025-04-17 15:09:32 -07:00
  • 946f20ccc7 Add type parameter to RemoveCA to avoid removing CAs of the wrong type. Kareem 2025-04-17 12:36:54 -07:00
  • 025dbc3454 Retry all certificates passed into wolfSSL_X509_verify_cert until a valid chain is found, rather than failing out on the first invalid chain. This allows for registering multiple certs with the same subject key, ie. alt cert chains. Kareem 2025-04-16 16:16:32 -07:00
  • 43f94a5d7d Merge pull request #9107 from douzzer/20250816-cpuid_get_flags_ex-optimize Sean Parkinson 2025-08-18 22:13:44 +10:00
  • 0ba16a9c5b Merge pull request #9104 from kojiws/export_long_key_orig_asn Sean Parkinson 2025-08-18 22:11:25 +10:00
  • 39c6c5af6f wolfcrypt/src/cpuid.c, wolfssl/wolfcrypt/cpuid.h: change cpuid_flags_t to a regular word32, and use non-atomics for general flag checking, with a new implementation of cpuid_get_flags_ex() that is threadsafe by idempotency; Daniel Pouzzner 2025-08-16 13:04:28 -05:00
  • b096d9b250 Merge pull request #9106 from dgarske/zd20399 lealem47 2025-08-15 15:57:00 -06:00
  • 32b0bd963b Fix issue introduced in PR #9051 causing TLS records with multiple handshake messages to be skipped (ZD 20399) David Garske 2025-08-15 10:05:23 -07:00
  • a98006eca9 Merge pull request #9105 from douzzer/20250815-dilithium-dilithium_expand_s-UndefinedBinaryOperatorResult David Garske 2025-08-15 09:07:38 -07:00
  • 10a05ad839 wolfcrypt/src/dilithium.c: fix dilithium_expand_s() to fall through to dilithium_expand_s_c() for s1Len not implemented for USE_INTEL_SPEEDUP. Daniel Pouzzner 2025-08-15 09:48:55 -05:00
  • ffe3d80f8d Merge pull request #9097 from douzzer/20250812-atomic-cmpxchg Juliusz Sosinowicz 2025-08-15 01:14:45 +02:00
  • 5b1302e4df Merge pull request #9094 from dgarske/zd20369 Sean Parkinson 2025-08-15 09:01:02 +10:00
  • 228ede7495 Merge pull request #9102 from rlm2002/zd20212 Sean Parkinson 2025-08-15 08:21:38 +10:00
  • c5bbf4c7e0 Merge pull request #9085 from effbiae/while-pending Daniel Pouzzner 2025-08-14 14:51:05 -05:00
  • e00fd2fd70 Fix to better detect invalid spurious retransmission. David Garske 2025-08-12 16:03:22 -07:00
  • c535e281c6 Skip unit test when using Apple native cert validation. Kareem 2025-08-14 11:34:04 -07:00
  • cb3f7de3f7 Fix issues found by CI/CD tests. Kareem 2025-08-04 17:10:35 -07:00
  • 3bcbbd2924 Fix issue with loading PEM certs. Address code review feedback. Add tests. Kareem 2025-08-04 16:37:41 -07:00
  • a652b733e4 Fix conversion warning. Kareem 2025-07-30 17:37:32 -07:00
  • ab342978d7 Fix implicit conversion warning. Kareem 2025-07-30 16:54:32 -07:00
  • 61ccea55ac Allow setting the CA type when loading into cert manager and unloading specific CA types from the cert manager. Kareem 2025-07-30 16:33:30 -07:00
  • cb623dc9ea Multiple fixes to wolfSSL_CIPHER_description to match documentation. Kareem 2025-08-12 16:35:38 -07:00
  • 0a9356e645 Improve original implementation on SetAsymKeyDer() and the test Koji Takeda 2025-08-14 16:57:42 +09:00
  • cefeb4cd7e atomics/cpuid_flags fixes from peer review: Daniel Pouzzner 2025-08-14 09:33:14 -05:00
  • bd4e723f9d add cpuid_flags_t, WC_CPUID_INITIALIZER, and cpuid_get_flags_ex(); Daniel Pouzzner 2025-08-13 13:28:28 -05:00
  • a1dd7dae6f Merge pull request #9095 from miyazakh/add_sha512_typeproperty Sean Parkinson 2025-08-14 21:43:06 +10:00
  • 102525c9c9 Merge pull request #9100 from dgarske/cryptocb_only Sean Parkinson 2025-08-14 21:41:26 +10:00
  • 034df3d28f Merge pull request #9101 from dgarske/asm_introspection Sean Parkinson 2025-08-14 21:38:42 +10:00
  • a64c719fd2 Merge pull request #9092 from douzzer/20250812-Base64_Decode-outLen-bounds-fix Daniel Pouzzner 2025-08-13 23:15:04 -05:00
  • 0e3f877326 WOLFSSL_ASYNC_WHILE_PENDING refactor effbiae 2025-08-10 19:56:00 +10:00
  • 8458b5ec1d Merge pull request #9053 from rlm2002/sessionTickets JacobBarthelmeh 2025-08-13 17:19:52 -06:00
  • 18f3f22a7e add option for WOLFSSL_ARMASM_INLINE to CMake Ruby Martin 2025-08-13 11:29:08 -06:00
  • 7fe890d5e7 wolfcrypt/src/coding.c: clean up comment in Base64_Decode(), per peer review. Daniel Pouzzner 2025-08-13 18:00:36 -05:00
  • 344db9d7f7 wolfcrypt/src/coding.c: in Base64_Decode_nonCT() and Base64_Decode(), remove overly restrictive preamble check on outLen; return BUFFER_E, not BAD_FUNC_ARG, when output buffer is too short (similarly fixed in Base16_Decode()); Daniel Pouzzner 2025-08-12 18:10:14 -05:00
  • dc18f404ca remove dead code in fe_operations.c Ruby Martin 2025-08-13 16:34:14 -06:00
  • 71c2878780 verify previously unchecked return values Ruby Martin 2025-08-13 16:28:36 -06:00
  • 53c36f8529 Add assembly introspection for RISC-V and PPC32. David Garske 2025-08-13 22:29:43 +01:00
  • d79ca8a746 Improve some of the build cases around crypto callback only David Garske 2025-08-13 21:58:34 +01:00
  • b67e063535 add hashtype property to wc_Sha512 Hideki Miyazaki 2025-08-13 11:53:09 +09:00
  • 22b221a8be Merge pull request #9099 from gojimmypi/pr-cert-test-sizeof Daniel Pouzzner 2025-08-13 14:41:21 -05:00