wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 15:30:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
061311d6ca3a785f81ffd0d04461c3af6f475202
wolfssl/tests/api
T
History
Juliusz Sosinowicz 061311d6ca zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore 
- x509_str: require CA:TRUE unconditionally in wolfSSL_X509_verify_cert;
  verify leaf signature even when verify_cb overrides INVALID_CA
- x509_str: align WOLFSSL_X509_V_ERR_INVALID_CA with OpenSSL value (79)
  so OPENSSL_COEXIST builds compile; bump WC_OSSL_V509_V_ERR_MAX to 80
  and extend error_test() missing-value table for the new gaps
- asn: reject embedded NUL in dNSName / rfc822Name / URI SAN entries
- internal: re-verify restored ticket peer cert against trust store with
  CRL/OCSP checks; clear stale state from session cache on verification
  failure
- ticket: bind SNI and ALPN into session ticket via compile-time selected
  hash (TICKET_BINDING_HASH_TYPE); reject resumption on mismatch in both
  TLS 1.3 and TLS 1.2 paths
- ticket: defer SNI/ALPN binding check until after extensions are parsed
  by consolidating into VerifyTicketBinding(), called once after
  ALPN_Select in DoTls13ClientHello and DoClientHello; the early
  per-call sites ran before extensions were parsed and rejected valid
  resumptions in nginx, haproxy, grpc, and CPython integration tests
- ssl_sess: free previous session in wolfSSL_d2i_SSL_SESSION before
  overwrite
- examples/client: increase SESSION_TICKET_LEN fallback from 256 to 2048
  to support larger tickets
- tests: update SAN NUL fixtures and add parse-time rejection coverage;
  add test_tls13_ticket_peer_cert_reverify for CA-removal scenario; skip
  it under WOLFSSL_NO_DEF_TICKET_ENC_CB
2026-05-06 16:45:58 +02:00
..
api_decl.h
update Copyright year
2026-02-18 09:52:21 -07:00
api.h
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
create_ocsp_test_blobs.py
Fix OCSP->CRL fallback
2026-02-26 11:44:50 -08:00
include.am
Add SHE (Secure Hardware Extension) support to wolfCrypt
2026-04-15 11:27:44 -06:00
test_aes.c
Zero TLS 1.3 traffic keys after AES SE offload
2026-04-20 10:45:23 +03:00
test_aes.h
Zero TLS 1.3 traffic keys after AES SE offload
2026-04-20 10:45:23 +03:00
test_arc4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_arc4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_ascon_kats.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ascon.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_ascon.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_asn.c
zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore
2026-05-06 16:45:58 +02:00
test_asn.h
Rebase conflicts
2026-03-20 16:16:21 -05:00
test_blake2.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_blake2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_camellia.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_camellia.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_certman.c
Merge pull request #10239 from gasbytes/crl-idp-extension-fix
2026-04-21 10:21:31 +10:00
test_certman.h
Merge pull request #10239 from gasbytes/crl-idp-extension-fix
2026-04-21 10:21:31 +10:00
test_chacha20_poly1305.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha20_poly1305.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_cmac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_cmac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve448.c
tests: cover private-key flag rejection on export
2026-05-05 04:36:16 +00:00
test_curve448.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve25519.c
Merge pull request #10392 from JeremiahM37/fenrir-5
2026-05-05 12:24:17 -07:00
test_curve25519.h
fix: curve25519 clamp check missing rule 3 (bit6 of byte31)
2026-04-30 10:41:10 -07:00
test_des3.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_des3.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
test_dsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_dtls.c
Fix DTLS 1.3 extSz out-of-bounds and word16 truncation on oversized certificate chains
2026-04-03 12:10:42 +02:00
test_dtls.h
Fix DTLS 1.3 extSz out-of-bounds and word16 truncation on oversized certificate chains
2026-04-03 12:10:42 +02:00
test_ecc.c
Fix ECC validation regression
2026-04-23 11:26:33 +02:00
test_ecc.h
Fix ECC validation regression
2026-04-23 11:26:33 +02:00
test_ed448.c
tests: cover private-key flag rejection on export
2026-05-05 04:36:16 +00:00
test_ed448.h
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
test_ed25519.c
tests: cover private-key flag rejection on export
2026-05-05 04:36:16 +00:00
test_ed25519.h
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
test_evp_cipher.c
evp: verify Poly1305 tag on ChaCha20-Poly1305 decrypt
2026-04-02 12:35:15 +02:00
test_evp_cipher.h
Fix review feedback
2026-03-05 08:51:52 -06:00
test_evp_digest.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_evp_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp_pkey.c
Merge pull request #10135 from lealem47/nid_ED
2026-04-30 14:16:05 -06:00
test_evp_pkey.h
Merge pull request #10135 from lealem47/nid_ED
2026-04-30 14:16:05 -06:00
test_evp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hash.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
test_hash.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hmac.c
Fix test cleanup
2026-02-26 14:51:49 -06:00
test_hmac.h
Fix issue in TLS_hmac size calculation
2026-02-26 10:26:20 -06:00
test_md2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_mldsa.c
Fix for the comments
2026-05-02 08:15:22 +09:00
test_mldsa.h
test_mldsa_x509_pubkey_sigtype to TEST_MLDSA_DECLS
2026-05-02 08:19:19 +09:00
test_mlkem.c
Remove liboqs for ML-KEM and ML-DSA, update for Falcon
2026-04-30 11:03:06 +02:00
test_mlkem.h
Fix ML-KEM ARM64 NEON ciphertext comparison reduction
2026-04-15 03:09:11 +02:00
test_ocsp_test_blobs.h
Fix OCSP->CRL fallback
2026-02-26 11:44:50 -08:00
test_ocsp.c
Merge pull request #10064 from julek-wolfssl/master
2026-04-02 22:54:10 -05:00
test_ocsp.h
Fix multiple bugs in OCSP implementation
2026-04-02 11:24:25 +02:00
test_ossl_asn1.c
prevent resource leak if ASN1_INTEGER_to_BN() != null if expected
2026-04-03 17:13:29 -06:00
test_ossl_asn1.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_bio.c
Fix flaky tcp bind on Windows test runs
2026-05-04 10:35:04 +02:00
test_ossl_bio.h
Feat: support openssl compatibility layer functionality for libevent integration
2026-04-21 19:05:26 +03:00
test_ossl_bn.c
Add tests for BN_bn2binpad with zero output length
2026-04-13 15:50:26 +02:00
test_ossl_bn.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_cipher.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_cipher.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dgst.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dgst.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
test_ossl_dsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ec.c
ecc: fix invalid-curve attack via missing on-curve validation
2026-04-06 21:18:32 +02:00
test_ossl_ec.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_p7p12.c
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_p7p12.h
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_pem.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_pem.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rand.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rand.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rsa.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_crypto.c
Initialize certificate: default to SHA-1 when necessary
2026-04-10 07:58:37 +10:00
test_ossl_x509_crypto.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_ext.c
Address Copilot suggestions
2026-04-21 02:35:57 +02:00
test_ossl_x509_ext.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_lu.c
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_lu.h
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_name.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_name.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_str.c
Merge pull request #10339 from embhorn/zd21707
2026-05-05 11:41:28 -07:00
test_ossl_x509_str.h
Fixes ZD 19760
2026-04-09 13:09:17 -04:00
test_ossl_x509_vp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_vp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509.c
zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore
2026-05-06 16:45:58 +02:00
test_ossl_x509.h
wolfcrypt/src/asn.c, wolfssl/wolfcrypt/asn.h: add wolfssl_local_IsValidFQDN()
2026-04-21 16:56:08 -05:00
test_pkcs7.c
tests/api/test_pkcs7.c: in test_wc_PKCS7_BER(), in expected-failure wc_PKCS7_DecodeEnvelopedData() in WOLFSSL_SP_MATH build, allow failure with either WC_KEY_SIZE_E or BUFFER_E, to accommodate blinding added by #10128 / 589feabc0c.
2026-04-25 11:47:24 -05:00
test_pkcs7.h
Bounds-check the RecipientInfo SET length in wc_PKCS7_ParseToRecipientInfoSet()
2026-04-23 11:03:24 +02:00
test_pkcs12.c
initialize test variable regCiphertext
2026-04-30 14:00:15 -06:00
test_pkcs12.h
PKCS12: check mismatch between hash algo and hash size
2026-04-15 03:08:50 +02:00
test_poly1305.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_poly1305.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_random.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
test_random.h
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
test_rc2.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_rc2.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_ripemd.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ripemd.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_rsa.c
gate out fast math
2026-04-15 17:29:37 -04:00
test_rsa.h
Add bounds checks for MP integer size in SizeASN_Items
2026-04-10 11:17:45 -04:00
test_sha3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_she.c
wc_SHE_ImportM1M2M3: fix guard from || to && so it gates on WOLF_CRYPTO_CB
2026-04-15 18:03:39 -06:00
test_she.h
Fix CMake SHE deps, const-correctness in CryptoCb uid, stale comment, XSTRLEN double call, configure.ac AES-CBC guard, and add LoadKey/LoadKey_Verify test coverage
2026-04-15 11:28:03 -06:00
test_signature.c
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_signature.h
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_slhdsa.c
fixes for fips#379 and related:
2026-05-05 11:02:13 -05:00
test_slhdsa.h
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test_sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_sm4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_tls13.c
zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore
2026-05-06 16:45:58 +02:00
test_tls13.h
zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore
2026-05-06 16:45:58 +02:00
test_tls_ext.c
fenrir: address review feedback on PR 10230
2026-04-27 14:03:31 +02:00
test_tls_ext.h
tests: add TLS 1.3 ticket age out-of-window test (F-1824)
2026-04-27 14:03:14 +02:00
test_tls.c
Merge pull request #10166 from JeremiahM37/test-coverage
2026-04-17 10:41:53 +10:00
test_tls.h
Merge pull request #10166 from JeremiahM37/test-coverage
2026-04-17 10:41:53 +10:00
test_wc_encrypt.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wc_encrypt.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wolfmath.c
Use size_t in wolfSSL_strnstr and reject negative indices in mp_get_digit
2026-04-10 10:48:17 -07:00
test_wolfmath.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_x509.c
Fix from review
2026-04-14 07:47:29 -05:00
test_x509.h
Fix wolfSSL_sk_X509_OBJECT_deep_copy to check bounds
2026-04-13 17:02:51 -05:00