Juliusz Sosinowicz 1f4afe9ccc F-5810: require renegotiation_info on renegotiation ClientHello ...

The server validated client_verify_data only inside
TLSX_SecureRenegotiation_Parse, which never runs when the renegotiation_info
extension is absent, so a renegotiation ClientHello that omitted it was never
checked. Track a per-handshake renegInfoSeen flag and, after parsing the
renegotiation ClientHello extensions, abort with handshake_failure if the
extension was absent (RFC 5746 3.7). Also reject an SCSV received during
renegotiation (RFC 5746 3.5).

2026-06-08 14:25:10 +02:00

..

openssl

Merge pull request #10317 from Roy-Carter/feature/pem_write_enhancement

2026-06-01 10:10:39 -07:00

wolfcrypt

Merge pull request #10259 from sebastian-carpenter/tls-ech-keylog

2026-06-05 16:22:11 -05:00

callbacks.h

update Copyright year

2026-02-18 09:52:21 -07:00

certs_test_sm.h

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

certs_test.h

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

crl.h

update Copyright year

2026-02-18 09:52:21 -07:00

error-ssl.h

F-5813: fail TLS 1.2 record send before the sequence number wraps

2026-06-08 14:25:10 +02:00

include.am

Generate server-sm2-cert.der

2025-09-23 08:32:21 -07:00

internal.h

F-5810: require renegotiation_info on renegotiation ClientHello

2026-06-08 14:25:10 +02:00

ocsp.h

Remove CheckOcspResponderChain and related references. Function is not compliant with RFC 6960, 4.2.2.2.

2026-06-02 16:20:32 -06:00

options.h.in

update Copyright year

2026-02-18 09:52:21 -07:00

quic.h

CI: more smoke coverage + header self-sufficiency

2026-05-21 14:37:11 -07:00

sniffer_error.h

update Copyright year

2026-02-18 09:52:21 -07:00

sniffer_error.rc

Initial sniffer keylog file support for TLS 1.2

2023-08-22 11:23:46 -06:00

sniffer.h

update Copyright year

2026-02-18 09:52:21 -07:00

ssl.h

Merge pull request #10575 from julek-wolfssl/fenrir-fixes-20260601

2026-06-05 16:26:05 -05:00

test.h

Fix flaky tcp bind on Windows test runs

2026-05-04 10:35:04 +02:00

version.h

prepare for release 5.9.1

2026-04-08 07:34:41 -06:00

version.h.in

update Copyright year

2026-02-18 09:52:21 -07:00

wolfio.h

Fix include for errno in Microchip port settings

2026-05-06 16:14:59 -05:00