wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-08-20 21:43:22 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
03cb14a30ea4e4f4da0d459ed010f88553218d26
wolfssl/tests
T
History
Tobias Frauenschläger 03cb14a30e Stop offering SHA-1 signature schemes for TLS 1.2 by default 
InitSuitesHashSigAlgo added the ecdsa_sha1 and rsa_pkcs1_sha1 signature
schemes to the signature_algorithms list based only on the build flags,
ignoring the negotiated protocol version. Because that list is also the
set a peer's signatures are validated against, any build with old TLS
compiled in advertised and accepted SHA-1 handshake and certificate
signatures for TLS 1.2, which RFC 9155 deprecates. Gate the SHA-1 schemes
on the negotiated version so they are offered only for TLS 1.0 and 1.1
handshakes, unless WOLFSSL_ALLOW_TLS_SHA1 is defined to opt back in. The
same gate excludes them for TLS 1.3, as required by RFC 8446.

Fixes F-6991.
2026-07-22 13:07:55 +02:00
..
api
Enforce attribute certificate validity period in VerifyX509Acert
2026-07-22 13:07:55 +02:00
emnet
Restore IP_SOCK_getsockopt emNET error lookup
2026-04-30 18:01:16 +01:00
freertos-mem-track-repro
Fix mem_track.h compile failure on multi-threaded non-Linux builds
2026-05-11 16:20:35 +01:00
swdev
Fix test issues in ed25519
2026-07-14 09:08:12 -07:00
unit-mcdc
tests: fix shared-CI link and FIPS build for math/kdf MC/DC tests
2026-07-17 08:56:03 +02:00
api.c
Stop offering SHA-1 signature schemes for TLS 1.2 by default
2026-07-22 13:07:55 +02:00
CONF_FILES_README.md
Cleanup markdown documentation
2021-10-13 16:39:46 +01:00
include.am
tests/swdev: add ECC support to wc_swdev
2026-05-13 16:18:51 +02:00
NCONF_test.cnf
Internal unit tests
2020-12-17 14:26:49 +01:00
quic.c
F-6547 - Reject TLS KeyUpdate on QUIC connections
2026-07-02 11:36:01 +02:00
README
…
srp.c
update Copyright year
2026-02-18 09:52:21 -07:00
suites.c
Testing fixes: unit.test - PKCS#7 and --send-ticket
2026-07-15 11:28:08 +10:00
test-altchains.conf
…
test-chains.conf
…
test-dhprime.conf
…
test-dtls13-cid.conf
add basic ConnectionID DTLS tests
2022-08-23 16:58:24 +02:00
test-dtls13-downgrade-fails.conf
tests: add negative version negotation tests
2022-09-28 18:42:38 +02:00
test-dtls13-downgrade.conf
Support (D)TLS1.3 downgrade when using PSK
2024-03-29 18:04:30 +00:00
test-dtls13-pq-hybrid-extra-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-psk.conf
fix: wrong size using DTLSv1.3 in RestartHandshakeHashWithCookie
2022-10-13 17:42:58 +02:00
test-dtls13.conf
tests: add dtls13 null cipher test
2023-05-19 08:10:26 +00:00
test-dtls-downgrade.conf
tests: add dtls downgrade tests
2022-07-06 16:18:44 +02:00
test-dtls-fails-cipher.conf
Correctly reset the Tx sequence number
2021-03-09 18:30:10 +01:00
test-dtls-fails.conf
…
test-dtls-group.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-mtu.conf
Merge pull request #5149 from julek-wolfssl/store-frags-v2
2022-06-01 10:52:54 -07:00
test-dtls-reneg-client.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-reneg-server.conf
Add testing/docs for blocking write
2022-05-27 21:26:55 +02:00
test-dtls-resume.conf
tests: add bidirectional shutdown UDP tests
2022-05-11 13:27:37 +02:00
test-dtls-sha2.conf
…
test-dtls-srtp-fails.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls-srtp.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
test-ecc-cust-curves.conf
Support TLS 1.3 ECC Brainpool authentication
2026-01-22 14:14:09 +01:00
test-ed448.conf
…
test-ed25519.conf
ECC: Disable ECC but have Curve25519/448 and PK callbacks fix
2021-05-10 10:32:55 +10:00
test-enckeys.conf
…
test-fails.conf
Allow RSA client certs on ECDHE-ECDSA mutual auth
2026-06-08 15:10:27 +02:00
test-maxfrag-dtls.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-maxfrag.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-p521.conf
…
test-psk-no-id-sha2.conf
…
test-psk-no-id.conf
…
test-psk.conf
Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
2022-05-27 11:05:55 -04:00
test-rsapss.conf
handle certificates with RSA-PSS signature that have RSAk public keys
2022-09-21 08:24:09 -06:00
test-sctp-sha2.conf
…
test-sctp.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-sha2.conf
…
test-sig.conf
…
test-sm2.conf
SM2/SM3/SM4: Chinese cipher support
2023-07-04 13:36:28 +10:00
test-tls13-down.conf
Allow trusted_ca_keys with TLSv1.3
2025-06-09 08:31:54 +01:00
test-tls13-ecc.conf
…
test-tls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-hybrid.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-psk-certs.conf
Add RFC8773bis cert_with_extern_psk support
2026-04-17 15:12:04 +02:00
test-tls13-psk.conf
TLS 1.3 PSK: add option to require only PSK with DHE
2023-02-16 09:21:29 +10:00
test-tls13-slhdsa-fail.conf
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test-tls13-slhdsa-sha2.conf
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test-tls13-slhdsa-shake.conf
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test-tls13.conf
TLS 1.3: send ticket
2022-06-01 10:36:01 +10:00
test-tls-downgrade.conf
Check for TLS downgrade
2021-04-23 14:45:35 -07:00
test-trustpeer.conf
stunnel 5.61 support
2022-02-23 09:47:34 +01:00
test.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
TXT_DB.txt
Internal unit tests
2020-12-17 14:26:49 +01:00
unit.c
SP gen: FP_ECC init mutex improvement
2026-06-05 10:58:44 +10:00
unit.h
update Copyright year
2026-02-18 09:52:21 -07:00
utils.c
Intel QAT: add async hybrid PQC server key share regression test
2026-07-07 09:54:04 -07:00
utils.h
Merge pull request #10596 from SparkiDev/regression_fixes_24
2026-06-05 13:37:56 -05:00
w64wrapper.c
update Copyright year
2026-02-18 09:52:21 -07:00

README 

Before creating any new configure files (.conf) read the CONF_FILES_README.md
Reference in New Issue View Git Blame Copy Permalink