wolfssl

mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-01-27 14:02:25 +01:00

Files

Masashi Honma 3ab5ccd04f Add support for EVP_PKEY_sign/verify functionality (#5056 )

* Fix wolfSSL_RSA_public_decrypt() return value to match Openssl
* Add support for EVP_PKEY_verify_init() and EVP_PKEY_verify()
* wpa_supplicant SAE public key functionality requires this function.
* Add DSA support for EVP_PKEY_sign/verify()
* Add ECDSA support for EVP_PKEY_sign/verify()
* Add tests for EVP_PKEY_sign_verify()
* Fix "siglen = keySz" at error cases
* Fix wolfSSL_DSA_do_sign() usage
1. Check wolfSSL_BN_num_bytes() return value
2. Check siglen size
3. Double the siglen
* Check return code of wolfSSL_i2d_ECDSA_SIG() in wolfSSL_EVP_DigestSignFinal()
* Add size calculations to `wolfSSL_EVP_PKEY_sign`
* Add size checks to wolfSSL_EVP_PKEY_sign before writing out signature
* Use wc_ecc_sig_size() to calculate ECC signature size
Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
Co-authored-by: Juliusz Sosinowicz <juliusz@wolfssl.com>

2022-04-25 14:19:56 -07:00

api.c

Add support for EVP_PKEY_sign/verify functionality (#5056 )

2022-04-25 14:19:56 -07:00

CONF_FILES_README.md

Cleanup markdown documentation

2021-10-13 16:39:46 +01:00

hash.c

MD5 vs. FIPS 140-3: fix gating so that unit.test succeeds when --enable-fips=v5 --enable-md5 (HMAC-MD5 is non-FIPS in 140-3, but even in a FIPS 140-3 build, the non-FIPS API can be accessed directly by #undef'ing wc_Hmac*()).

2022-01-27 18:37:29 -06:00

include.am

tests: support test for SRTP

2022-01-19 13:35:29 +01:00

NCONF_test.cnf

Internal unit tests

2020-12-17 14:26:49 +01:00

README

re-format test-psk-no-id.conf add README

2015-08-03 11:04:18 -06:00

srp.c

update copyright date

2021-03-11 13:42:46 +07:00

suites.c

add WOLF_CRYPTO_CB_ONLY_RSA and WOLF_CRYPTO_CB_ONLY_ECC

2022-04-01 09:36:52 +09:00

test-altchains.conf

Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.

2020-06-18 09:26:50 -07:00

test-chains.conf

Fix for tests/test-chains.conf with new intermediate CA.

2020-06-18 08:33:59 -07:00

test-dhprime.conf

Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.

2018-12-21 12:36:47 -08:00

test-dtls-fails-cipher.conf

Correctly reset the Tx sequence number

2021-03-09 18:30:10 +01:00

test-dtls-fails.conf

Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.

2020-07-22 13:20:23 -07:00

test-dtls-group.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-mtu.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-reneg-client.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-reneg-server.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-resume.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-dtls-srtp-fails.conf

tests: support test for SRTP

2022-01-19 13:35:29 +01:00

test-dtls-srtp.conf

tests: support test for SRTP

2022-01-19 13:35:29 +01:00

test-dtls.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-ecc-cust-curves.conf

Added TLS v1.2 and v1.3 test cases for ECC Koblitz and Brainpool curves (both server auth and mutual auth). Cipher suites: ECDHE-ECDSA-AES128-GCM-SHA256, ECDH-ECDSA-AES128-GCM-SHA256 and TLS13-AES128-GCM-SHA256.

2020-11-10 09:47:36 -08:00

test-ed448.conf

Update OpenSSL interopability testing

2020-08-11 16:44:45 +10:00

test-ed25519.conf

ECC: Disable ECC but have Curve25519/448 and PK callbacks fix

2021-05-10 10:32:55 +10:00

test-enckeys.conf

New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:

2018-12-21 09:54:55 -08:00

test-fails.conf

Verify Callback Fix

2020-11-24 11:46:10 -08:00

test-maxfrag-dtls.conf

New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:

2018-12-21 09:54:55 -08:00

test-maxfrag.conf

New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:

2018-12-21 09:54:55 -08:00

test-p521.conf

TLS 1.3: Fix P-521 algorithm matching

2020-09-18 10:51:55 +10:00

test-psk-no-id-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-psk-no-id.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-psk.conf

New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:

2018-12-21 09:54:55 -08:00

test-sctp-sha2.conf

SCTP Test

2020-07-20 15:03:48 -07:00

test-sctp.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-sig.conf

add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.

2020-11-11 22:47:47 -06:00

test-tls13-down.conf

update test conf to fix jenkins failures

2021-06-25 16:31:49 +09:00

test-tls13-ecc.conf

2020-11-11 22:47:47 -06:00

test-tls13-pq.conf

--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC

2021-12-20 11:48:03 -05:00

test-tls13-psk.conf

TLS 1.3 PSK: use the hash algorithm to choose cipher suite

2021-06-10 09:55:27 +10:00

test-tls13.conf

TLS Session Ticket: Option to disable for TLS 1.2 and below

2021-01-22 13:19:29 +10:00

test-tls-downgrade.conf

Check for TLS downgrade

2021-04-23 14:45:35 -07:00

test-trustpeer.conf

stunnel 5.61 support

2022-02-23 09:47:34 +01:00

test.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

TXT_DB.txt

Internal unit tests

2020-12-17 14:26:49 +01:00

unit.c

The minimal changes needed to add KCAPI support with fips-ready

2021-12-10 14:44:20 -07:00

unit.h

update headers to resolve clang-tidy carping (mostly bugprone-macro-parentheses and readability-named-parameter). also disables MSC C4028 because incompatible with readability-avoid-const-params-in-decls.

2022-01-26 02:06:37 -06:00

README

Before creating any new configure files (.conf) read the CONF_FILES_README.md