wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 14:30:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
130f683d8ca6401857fde3c0388c38496f6d91a0
wolfssl/tests/api
T
History
Juliusz Sosinowicz 130f683d8c Validate minDowngrade in wolfSSL_SetSession before reusing version 
When resuming a session wolfSSL_SetSession unconditionally
overwrote ssl->version with the version stored in the cached
session, even if that version was below the WOLFSSL's configured
minDowngrade. The overwritten version then fed straight into
SendClientHello, so a client configured to require TLS 1.2 or
higher could still emit a ClientHello advertising e.g. TLS 1.0
when resuming an old cached session. The ServerHello path catches
the actual downgrade, but the ClientHello version is already a
protocol-conformance issue and can confuse middleboxes.

Reject the session if its stored minor version is below
ssl->options.minDowngrade. The check is DTLS-aware: DTLS minor
versions decrease as the protocol version increases, so the
direction of the comparison is flipped for DTLS.

F-2105
2026-05-14 14:07:53 +02:00
..
api_decl.h
update Copyright year
2026-02-18 09:52:21 -07:00
api.h
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
create_ocsp_test_blobs.py
tests: add OCSP responder CertID issuerKeyHash binding test
2026-05-12 14:36:00 +02:00
include.am
Add SHE (Secure Hardware Extension) support to wolfCrypt
2026-04-15 11:27:44 -06:00
test_aes.c
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_aes.h
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_arc4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_arc4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_ascon_kats.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ascon.c
Merge pull request #10155 from aidangarske/fenrir-fixes-2
2026-05-11 21:07:53 -07:00
test_ascon.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_asn.c
Merge pull request #10458 from philljj/fix_GetShortInt
2026-05-13 16:44:38 +10:00
test_asn.h
Merge pull request #9567 from jackctj117/serial-0
2026-05-12 09:19:56 -07:00
test_blake2.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_blake2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_camellia.c
tests: cover input validation fixes
2026-05-07 02:31:25 +00:00
test_camellia.h
tests: cover input validation fixes
2026-05-07 02:31:25 +00:00
test_certman.c
Fix handling of registeredID
2026-05-07 07:33:56 -05:00
test_certman.h
Fix handling of registeredID
2026-05-07 07:33:56 -05:00
test_chacha20_poly1305.c
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_chacha20_poly1305.h
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_chacha.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_cmac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_cmac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve448.c
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_curve448.h
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_curve25519.c
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_curve25519.h
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_des3.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_des3.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_dsa.c
Merge pull request #10291 from JeremiahM37/test-coverage
2026-05-13 16:39:54 +10:00
test_dsa.h
Validate DSA parameters when verifying DSA key.
2026-05-11 10:05:45 -07:00
test_dtls.c
Validate minDowngrade in wolfSSL_SetSession before reusing version
2026-05-14 14:07:53 +02:00
test_dtls.h
Validate minDowngrade in wolfSSL_SetSession before reusing version
2026-05-14 14:07:53 +02:00
test_ecc.c
Fix formatting
2026-05-08 18:50:44 +02:00
test_ecc.h
Fix ECC validation regression
2026-04-23 11:26:33 +02:00
test_ed448.c
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_ed448.h
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_ed25519.c
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_ed25519.h
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_evp_cipher.c
extra sanity check for hash of all 0's
2026-05-01 13:27:39 -06:00
test_evp_cipher.h
Fix review feedback
2026-03-05 08:51:52 -06:00
test_evp_digest.c
add unit test for NULL SHAKE parameters
2026-05-06 15:25:06 -06:00
test_evp_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp_pkey.c
Merge pull request #10302 from JacobBarthelmeh/ecc
2026-05-07 14:39:21 -07:00
test_evp_pkey.h
Merge pull request #10135 from lealem47/nid_ED
2026-04-30 14:16:05 -06:00
test_evp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hash.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
test_hash.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hmac.c
Fix test cleanup
2026-02-26 14:51:49 -06:00
test_hmac.h
Fix issue in TLS_hmac size calculation
2026-02-26 10:26:20 -06:00
test_md2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_mldsa.c
tests/api.c: fix readability-uppercase-literal-suffix in rfc9802_verify_one_cert();
2026-05-08 18:53:57 +02:00
test_mldsa.h
fix SetAsymKeyDer to set PKCS#8 version=1 when bundling publicKey (RFC 5958)
2026-05-07 14:05:51 -06:00
test_mlkem.c
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_mlkem.h
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_ocsp_test_blobs.h
tests: add OCSP responder CertID issuerKeyHash binding test
2026-05-12 14:36:00 +02:00
test_ocsp.c
tests: add OCSP responder CertID issuerKeyHash binding test
2026-05-12 14:36:00 +02:00
test_ocsp.h
tests: add OCSP responder CertID issuerKeyHash binding test
2026-05-12 14:36:00 +02:00
test_ossl_asn1.c
prevent resource leak if ASN1_INTEGER_to_BN() != null if expected
2026-04-03 17:13:29 -06:00
test_ossl_asn1.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_bio.c
Fix flaky tcp bind on Windows test runs
2026-05-04 10:35:04 +02:00
test_ossl_bio.h
Feat: support openssl compatibility layer functionality for libevent integration
2026-04-21 19:05:26 +03:00
test_ossl_bn.c
Add tests for BN_bn2binpad with zero output length
2026-04-13 15:50:26 +02:00
test_ossl_bn.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_cipher.c
tests
2026-05-07 02:33:58 +00:00
test_ossl_cipher.h
tests
2026-05-07 02:33:58 +00:00
test_ossl_dgst.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dgst.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
test_ossl_dsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ec.c
Fixes from review
2026-05-11 15:06:32 -05:00
test_ossl_ec.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_p7p12.c
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_p7p12.h
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_pem.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_pem.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rand.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rand.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rsa.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_crypto.c
Initialize certificate: default to SHA-1 when necessary
2026-04-10 07:58:37 +10:00
test_ossl_x509_crypto.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_ext.c
Address Copilot suggestions
2026-04-21 02:35:57 +02:00
test_ossl_x509_ext.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_lu.c
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_lu.h
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_name.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_name.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_str.c
Merge pull request #10339 from embhorn/zd21707
2026-05-05 11:41:28 -07:00
test_ossl_x509_str.h
Fixes ZD 19760
2026-04-09 13:09:17 -04:00
test_ossl_x509_vp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_vp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509.c
Fixes from review
2026-05-07 07:32:51 -05:00
test_ossl_x509.h
Fix IDNA matching
2026-05-07 07:31:25 -05:00
test_pkcs7.c
Merge pull request #10291 from JeremiahM37/test-coverage
2026-05-13 16:39:54 +10:00
test_pkcs7.h
Merge pull request #10291 from JeremiahM37/test-coverage
2026-05-13 16:39:54 +10:00
test_pkcs12.c
initialize test variable regCiphertext
2026-04-30 14:00:15 -06:00
test_pkcs12.h
PKCS12: check mismatch between hash algo and hash size
2026-04-15 03:08:50 +02:00
test_poly1305.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_poly1305.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_random.c
add DRBG reseed boundary test
2026-05-12 20:59:29 +00:00
test_random.h
add DRBG reseed boundary test
2026-05-12 20:59:29 +00:00
test_rc2.c
Add wc_Rc2Free for key zeroization
2026-05-12 20:57:31 +00:00
test_rc2.h
Add wc_Rc2Free for key zeroization
2026-05-12 20:57:31 +00:00
test_ripemd.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ripemd.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_rsa.c
add signature negative verify tests
2026-05-12 20:59:29 +00:00
test_rsa.h
add signature negative verify tests
2026-05-12 20:59:29 +00:00
test_sha3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_she.c
wc_SHE_ImportM1M2M3: fix guard from || to && so it gates on WOLF_CRYPTO_CB
2026-04-15 18:03:39 -06:00
test_she.h
Fix CMake SHE deps, const-correctness in CryptoCb uid, stale comment, XSTRLEN double call, configure.ac AES-CBC guard, and add LoadKey/LoadKey_Verify test coverage
2026-04-15 11:28:03 -06:00
test_signature.c
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_signature.h
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_slhdsa.c
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_slhdsa.h
HashSLH-DSA APIs now take the pre-hashed digest, not the raw message
2026-05-11 10:14:13 +02:00
test_sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_sm4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_tls13.c
TLSv1.3 testing: add fuzz test of decryption
2026-05-12 15:59:28 +10:00
test_tls13.h
TLSv1.3 testing: add fuzz test of decryption
2026-05-12 15:59:28 +10:00
test_tls_ext.c
tests
2026-05-07 02:33:58 +00:00
test_tls_ext.h
tests
2026-05-07 02:33:58 +00:00
test_tls.c
Validate minDowngrade in wolfSSL_SetSession before reusing version
2026-05-14 14:07:53 +02:00
test_tls.h
Validate minDowngrade in wolfSSL_SetSession before reusing version
2026-05-14 14:07:53 +02:00
test_wc_encrypt.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wc_encrypt.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wolfmath.c
wolfmath: check mpSz cleanup.
2026-05-11 12:09:50 -05:00
test_wolfmath.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_x509.c
Fix from review
2026-04-14 07:47:29 -05:00
test_x509.h
Fix wolfSSL_sk_X509_OBJECT_deep_copy to check bounds
2026-04-13 17:02:51 -05:00