Sean Parkinson 089f1f7c91 TLSv1.3 PSK binders: always use id protection ...

Removed WOLFSSL_PSK_ID_PROTECTION from use as it is now on by default.
Always check whether the server has a certificate (not a CA chain).
If there is a certificate then continue, otherwise, report a binder
error.

Added test to ensure binder error returned and alert sent when no
NO_CERT. test_tls13_bad_psk_binder already tested no certificate.

Allowed memio test harness to be built when NO_CERT is defined.

2026-06-05 11:16:48 +10:00

..

bio.c

Merge pull request #10208 from ColtonWilley/bio-io-negative-length-checks

2026-05-05 11:32:21 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #10162 from embhorn/gh9753

2026-04-24 14:28:00 -06:00

dtls13.c

Fix CI

2026-05-14 13:10:13 +02:00

dtls.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

include.am

Rename Dilithium to canonical ML-DSA (FIPS 204) names

2026-05-16 09:48:35 -05:00

internal.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

keys.c

Merge pull request #10246 from sameehj/aes-gcm-fix

2026-04-23 13:26:59 -05:00

ocsp.c

Fail closed in CheckOcspRequest when ocspCheckAll and no URL

2026-05-14 14:07:53 +02:00

pk_ec.c

support of NO_BIO and NO_FILESYSTEM build with opensslextra

2026-05-15 10:37:46 -06:00

pk_rsa.c

support of NO_BIO and NO_FILESYSTEM build with opensslextra

2026-05-15 10:37:46 -06:00

pk.c

support of NO_BIO and NO_FILESYSTEM build with opensslextra

2026-05-15 10:37:46 -06:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

zeroize DH private keys on free

2026-05-07 02:31:51 +00:00

ssl_api_cert.c

Add a debug message.

2026-04-17 15:10:56 -04:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_pk.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

ssl_asn1.c

Add checks for ascii digits in time decode functions

2026-04-21 15:24:06 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

ssl_crypto.c

guard zero length in DES ncbc

2026-05-07 02:31:51 +00:00

ssl_ech.c

Merge pull request #10469 from sebastian-carpenter/tls-ech-server-improvements

2026-05-23 00:07:40 +10:00

ssl_load.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

Reject PKCS#7 SignedData signer-identity forgery

2026-04-23 09:36:32 +02:00

ssl_sess.c

Validate minDowngrade in wolfSSL_SetSession before reusing version

2026-05-14 14:07:53 +02:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

Merge pull request #10160 from Roy-Carter/feature/integrate_openssl_comp_fixes

2026-05-26 10:39:14 -07:00

tls13.c

TLSv1.3 PSK binders: always use id protection

2026-06-05 11:16:48 +10:00

tls.c

Merge pull request #10332 from jackctj117/SNI

2026-05-27 08:37:05 +10:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

x509.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00