Commit Graph

  • a68da8d2d5 update pksc7 decode test for new ca-cert.pem size JacobBarthelmeh 2025-11-14 14:53:48 -07:00
  • 3f441ef1a5 update tests after certificate renewal JacobBarthelmeh 2025-11-13 21:07:28 -07:00
  • 6c74098be5 run renewcerts.sh, gencertbuf.pl, and create_ocsp_test_blobs.py JacobBarthelmeh 2025-11-13 13:46:17 -07:00
  • d18b251f54 Merge pull request #9420 from wolfSSL/TLS13-cipher-suite-fix JacobBarthelmeh 2025-11-14 16:42:05 -05:00
  • 46a2234c61 Merge pull request #9425 from JacobBarthelmeh/pkcs7_stream David Garske 2025-11-14 12:59:09 -08:00
  • 30baf0a2e0 Merge pull request #9435 from dgarske/hmac_zerolen JacobBarthelmeh 2025-11-14 15:49:04 -05:00
  • 59800d8bb7 additional index checks, handle when j is 0 or 1 Ruby Martin 2025-11-14 12:19:58 -07:00
  • a071426bc8 Migrate wolfAsyncCrypt repo into wolfSSL proper David Garske 2025-11-14 09:43:59 -08:00
  • 4e1b719236 Improve wc_HmacUpdate to return early if input length == 0. Fixes QAT issue with HKDF test. David Garske 2025-11-14 09:40:56 -08:00
  • fda674a48a Clarify return value of wc_RsaSSL_Verify/Inline Eric Blankenhorn 2025-11-14 11:06:03 -06:00
  • 0767cb84bf Removed trailing white space TLS13-cipher-suite-fix jackctj117 2025-11-14 09:03:51 -07:00
  • c61ac22e89 Rust wrapper: enable conditional compilation based on C library build options Josh Holtrop 2025-11-14 09:26:43 -05:00
  • dd3b9260f9 Rust wrapper: merge wolfssl-sys crate into wolfssl crate Josh Holtrop 2025-11-12 14:50:57 -05:00
  • 50c5028c5a Merge pull request #9432 from douzzer/20251114-atomic-default-c philljj 2025-11-14 10:34:24 -05:00
  • 135bb66352 wolfssl/wolfcrypt/wc_port.h and wolfcrypt/src/wc_port.c: use stdatomic.h implementation as C default when available, as before, for proper type annotation in objects. Daniel Pouzzner 2025-11-14 07:54:14 -06:00
  • 10a60fc41b Merge pull request #9427 from douzzer/20251113-ZD20815 Sean Parkinson 2025-11-14 11:50:16 +10:00
  • 5e2fd78113 Suppress unused parameter warning jackctj117 2025-11-13 18:32:00 -07:00
  • 7916db78e8 wolfcrypt/src/wc_port.c and wolfssl/wolfcrypt/wc_port.h: change precedence of atomic implementations, and don't use the stdatomic.h in C++ builds (not compatible); Daniel Pouzzner 2025-11-13 17:28:19 -06:00
  • c430cc75ea src/ssl.c and wolfssl/ssl.h: fix signature on wolfSSL_CTX_get0_privatekey() -- ctx is not const; Daniel Pouzzner 2025-11-13 17:11:52 -06:00
  • 26ba6344f2 add wolfSSL_Atomic_Ptr_CompareExchange(); mitigate race on ctx->privateKeyPKey in wolfSSL_CTX_get0_privatekey(). Daniel Pouzzner 2025-11-13 16:25:49 -06:00
  • c63ca04228 convert to type int for return value JacobBarthelmeh 2025-11-13 12:17:04 -07:00
  • d06221c16e with decode enveloped data track total encrypted content size JacobBarthelmeh 2025-11-13 12:08:46 -07:00
  • 29c2f15a8f Add #ifdef guards to cipher suite checks jackctj117 2025-11-13 10:06:07 -07:00
  • 6ff57b8045 Merge pull request #9419 from rlm2002/coverity David Garske 2025-11-13 08:58:00 -08:00
  • 4f3586fe58 Merge pull request #9421 from SparkiDev/mlkem_to_bytes_fix David Garske 2025-11-13 08:57:31 -08:00
  • 082943649b Merge pull request #9422 from SparkiDev/ecc_sign_hash_inlen_check David Garske 2025-11-13 08:55:53 -08:00
  • de0d3e610d refactor to ExportEccTempKey, DhSetKey and others effbiae 2025-11-13 14:48:53 +11:00
  • 6c30186168 ECC sign hash: only allow up to max digest size Sean Parkinson 2025-11-13 11:21:17 +10:00
  • b272f784ec ML-KEM to bytes C: not reducing all values Sean Parkinson 2025-11-13 10:42:07 +10:00
  • 5a8411a1ad Merge pull request #9418 from SparkiDev/tls13_ks_dup_check_fix David Garske 2025-11-12 16:09:11 -08:00
  • f53191bae2 Merge pull request #9416 from julek-wolfssl/priv-key-blinding David Garske 2025-11-12 16:09:03 -08:00
  • c56ea55f89 Fix TLS 1.3 cipher suite selection when TLS 1.2 ciphers precede TLS 1.3 ciphers jackctj117 2025-11-12 17:03:06 -07:00
  • b2336c57ce initialize ctype variable Ruby Martin 2025-11-12 16:48:52 -07:00
  • 1ec18949bc TLS 1.3 duplicate KeyShare entry fix Sean Parkinson 2025-11-13 08:23:19 +10:00
  • e78752f3b2 Merge pull request #9407 from holtrop/rust-heap-devid-cleanup David Garske 2025-11-12 13:50:45 -08:00
  • 7cfffd5bbc Merge pull request #9308 from kareem-wolfssl/zd20603 David Garske 2025-11-12 11:09:17 -08:00
  • 40c471e20d Rust wrapper: fix cmac documentation Josh Holtrop 2025-11-12 13:41:08 -05:00
  • 92fffa166b Merge pull request #9413 from JacobBarthelmeh/lic David Garske 2025-11-12 10:12:29 -08:00
  • 3fe534e3a2 Merge pull request #9403 from gojimmypi/pr-lms-unary-fix David Garske 2025-11-12 08:40:33 -08:00
  • 32911dc6b8 Add blinding to CI Juliusz Sosinowicz 2025-11-12 17:11:34 +01:00
  • 4b7c052ee9 test_wolfSSL_inject: don't call accept on completed handshake Juliusz Sosinowicz 2025-11-12 17:11:18 +01:00
  • d1c321abdc Don't override errors when blinding the priv key Juliusz Sosinowicz 2025-11-12 17:10:45 +01:00
  • df99227dc8 Rust wrapper: use _ex APIs for heap and dev_id variants Josh Holtrop 2025-11-11 17:17:10 -05:00
  • ca920edbd0 Fix LMS C4146 unary minus warning in MSVC, new param check gojimmypi 2025-11-11 19:26:52 -08:00
  • fbb7ae2257 Add NULL check to wolfSSL_BIO_new_accept. Kareem 2025-11-11 16:20:09 -07:00
  • 3296e6a1f0 Merge remote-tracking branch 'upstream/master' into zd20603 Kareem 2025-11-11 16:15:22 -07:00
  • 6914f08f5e Merge pull request #9391 from holtrop/check-dup-extensions-fix David Garske 2025-11-11 14:05:14 -08:00
  • 798b16dcef Address more code review feedback for PR 9391 Josh Holtrop 2025-11-11 15:36:28 -05:00
  • 32b00fd10b Address code review feedback for PR 9391 Josh Holtrop 2025-11-11 14:05:36 -05:00
  • 4c273a6f3f Merge pull request #9404 from cconlon/jniNoQuicEch David Garske 2025-11-11 09:42:38 -08:00
  • e323fb9675 Merge pull request #9410 from SparkiDev/multi_arch_opt David Garske 2025-11-11 09:42:21 -08:00
  • 2db1c7a522 Merge pull request #9395 from SparkiDev/tls12_cv_sig_check David Garske 2025-11-11 09:18:11 -08:00
  • 4da365214a Merge pull request #9412 from SparkiDev/regression_fixes_21 JacobBarthelmeh 2025-11-11 09:32:43 -07:00
  • d84564217c Regression testing fixes Sean Parkinson 2025-11-11 21:46:04 +10:00
  • 702f6ce94f Workflow: multiple architectures with different -O levels Sean Parkinson 2025-11-11 10:28:07 +10:00
  • f54ca0d481 TLS 1.2 CertificateVerify: req sig alg to have been in CR Sean Parkinson 2025-11-07 12:29:08 +10:00
  • 967f520c28 Merge pull request #9408 from anhu/stateful_integ_deprecate David Garske 2025-11-10 15:17:51 -08:00
  • 0fa2274a16 Merge pull request #9406 from SparkiDev/sp_label_noinline JacobBarthelmeh 2025-11-10 14:52:14 -07:00
  • 0771bc42d6 Deprecate LMS and XMSS integrations. Anthony Hu 2025-11-10 15:13:06 -05:00
  • 4102f8272e Rust wrapper: support optional heap and dev_id parameters Josh Holtrop 2025-11-06 10:56:09 -05:00
  • 2c47675194 Merge pull request #9333 from gojimmypi/pr-msvc-random David Garske 2025-11-10 08:33:54 -08:00
  • 3af60ff85d Check for duplicate extensions in client hello when HAVE_TLS_EXTENSIONS is not set - fix #9377 Josh Holtrop 2025-11-05 15:33:39 -05:00
  • b7ade58c52 SP label noinline: function inlined even when asked not to Sean Parkinson 2025-11-10 19:58:16 +10:00
  • 9c1526c90d Merge pull request #9401 from cconlon/jniPublicMp Daniel Pouzzner 2025-11-08 11:07:54 -06:00
  • f977004dca Merge pull request #9400 from cconlon/ocspStaplingTls13MultiMktemp Daniel Pouzzner 2025-11-08 11:07:28 -06:00
  • 9e9a7392d4 Merge pull request #9373 from julek-wolfssl/WOLFSSL_HOSTNAME_VERIFY_ALT_NAME_ONLY Daniel Pouzzner 2025-11-08 11:04:43 -06:00
  • ea4311666e Merge pull request #9367 from julek-wolfssl/wolfDTLS_accept_stateless-early-data Daniel Pouzzner 2025-11-08 11:04:19 -06:00
  • 8b3eaa0eff Merge pull request #9370 from gojimmypi/pr-watcom-update Daniel Pouzzner 2025-11-08 09:31:22 -06:00
  • fdec53c4c9 skip test_tls13_hrr_different_cs() test when WOLFSSL_TLS13_MIDDLEBOX_COMPAT is defined Chris Conlon 2025-11-07 17:09:30 -07:00
  • 0cf3728ca0 update "--enable-jni --enable-all" combo to exclude QUIC and ECH, not compatible with WOLFSSL_TLS13_MIDDLEBOX_COMPAT Chris Conlon 2025-11-07 16:50:41 -07:00
  • b45217db00 Merge pull request #9402 from anhu/stsafe_doc David Garske 2025-11-07 13:59:45 -08:00
  • 22ab16df97 Correction about how to get interface files. Anthony Hu 2025-11-07 16:53:30 -05:00
  • 88373d8cb5 add WOLFSSL_PUBLIC_MP to --enable-jni for wolfJCE RSA KeyFactory support Chris Conlon 2025-11-07 14:14:51 -07:00
  • 4f4826ae92 Merge pull request #9385 from anhu/not_len JacobBarthelmeh 2025-11-07 13:49:30 -07:00
  • 8654599e61 Conditional wolfcrypt-only wc_RNG_GenerateBlock for MSVC gojimmypi 2025-11-07 11:08:44 -08:00
  • 0d49df7735 update to GPLv3 exception list, add Fetchmail and OpenVPN JacobBarthelmeh 2025-11-07 12:06:29 -07:00
  • 4c5bc5f8fe Merge pull request #9387 from SparkiDev/tls12_cr_order JacobBarthelmeh 2025-11-07 10:00:39 -07:00
  • 222f6084f8 Merge pull request #9399 from douzzer/20251106-linuxkm-PIE-inline-thunks JacobBarthelmeh 2025-11-07 08:33:53 -07:00
  • 58bd6a8d94 TLS 1.2 CertificateVerify: validate sig alg matches peer key Sean Parkinson 2025-11-06 11:35:26 +10:00
  • a96b35c0ff Merge pull request #9398 from toddouska/master JacobBarthelmeh 2025-11-06 17:19:59 -07:00
  • f208716b80 use portable mktemp syntax in scripts/ocsp-stapling_tls13multi.test for macOS compatibility Chris Conlon 2025-11-06 16:54:23 -07:00
  • 53a20f4928 linuxkm/Kbuild: when ENABLED_LINUXKM_PIE, use inline thunks on all objects, not just PIE objects, to resolve false-positive "unpatched thunk" warnings on some kernels/configs. also cleans up flag setup more generally. Daniel Pouzzner 2025-11-06 17:37:07 -06:00
  • f376c8d910 Merge pull request #9388 from lealem47/scan_build Sean Parkinson 2025-11-07 09:30:08 +10:00
  • 3416a0f70e Merge pull request #9393 from rlm2002/zd20756 Sean Parkinson 2025-11-07 09:27:05 +10:00
  • e02de78507 Add GPLv2 exception list to LICENSING Todd Ouska 2025-11-06 15:18:57 -08:00
  • 98d84eb435 Merge pull request #9396 from julek-wolfssl/fil-c-674 Sean Parkinson 2025-11-07 08:39:38 +10:00
  • ca51fda3bb Merge pull request #9372 from SparkiDev/curve25519_no_lshift_neg_val JacobBarthelmeh 2025-11-06 15:22:38 -07:00
  • 15ecc2e4da Update Rowley settings to define WOLFSSL_NO_SOCK Lealem Amedie 2025-11-06 15:11:49 -07:00
  • ec60d88f82 remove deadcode else statement when computing kid_type Ruby Martin 2025-11-05 15:28:14 -07:00
  • 9b2f7a371f remove duplicate keylen check (deadcode) Ruby Martin 2025-11-05 15:27:26 -07:00
  • 78f2e65da6 add cast to int64_t Ruby Martin 2025-11-05 15:26:31 -07:00
  • 2b8f83fd8d Fixes for getrandom detection Lealem Amedie 2025-11-06 14:16:38 -07:00
  • d3de6305e8 Exit wolfcrypt test if wolfCrypt_Init fails Lealem Amedie 2025-11-06 10:24:44 -07:00
  • eecf82362e Check for getrandom declaration Lealem Amedie 2025-11-06 10:24:20 -07:00
  • bd2cc5ba5c fixup! DTLS: Introduce custom I/O callbacks API and structure Juliusz Sosinowicz 2025-11-06 18:07:18 +01:00
  • c2377fd266 DTLS: Clear userSet when peer is set in EmbedReceiveFrom Juliusz Sosinowicz 2025-11-06 17:11:38 +01:00
  • 975033c64f DTLS: Introduce returnOnGoodCh option for early ClientHello processing return Juliusz Sosinowicz 2025-11-06 17:05:06 +01:00
  • 6e826583a3 DTLS: Add tests for custom I/O callbacks and stateless handling with wolfio Juliusz Sosinowicz 2025-11-06 17:05:06 +01:00
  • 0d7fe2f0a4 DTLS: Introduce custom I/O callbacks API and structure Juliusz Sosinowicz 2025-11-06 17:05:05 +01:00
  • 3ebc0c5f99 Update logs Juliusz Sosinowicz 2025-11-06 16:39:48 +01:00