Daniel Pouzzner d86174cc50 src/ssl.c: in wolfSSL_check_domain_name(), use XSTRCMP(), not strcmp(); ...

wolfcrypt/src/asn.c, wolfssl/wolfcrypt/asn.h, src/ssl.c, wolfssl/ssl.h: move wolfssl_local_IsValidFQDN() from ASN.1 layer (where it has no users and is gated out in lean PSK builds) to TLS layer (where its users are);

scripts/crl-revoked.test: use `cp --symbolic-link` opportunistically but fall back to `cp -p`.

2026-05-06 21:40:33 -05:00

..

bio.c

Merge pull request #10208 from ColtonWilley/bio-io-negative-length-checks

2026-05-05 11:32:21 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #10162 from embhorn/gh9753

2026-04-24 14:28:00 -06:00

dtls13.c

dtls13: free and null the cipher slot on init failure in Dtls13InitAesCipher and ChaCha equivalent

2026-04-30 16:59:42 +02:00

dtls.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

include.am

Replace liboqs SPHINCS+ with SLH-DSA in certificate layer

2026-04-30 18:32:07 +02:00

internal.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

keys.c

Merge pull request #10246 from sameehj/aes-gcm-fix

2026-04-23 13:26:59 -05:00

ocsp.c

Avoid unneeded temporary stack buffer; remove redundant check

2026-04-17 19:32:23 +02:00

pk_ec.c

Zeroize EC DER buffer in i2d_ECPrivateKey error path

2026-04-17 16:47:47 +02:00

pk_rsa.c

Address review comments on Fenrir zeroization fixes

2026-04-20 16:12:30 +00:00

pk.c

Merge pull request #10135 from lealem47/nid_ED

2026-04-30 14:16:05 -06:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

Merge pull request #10075 from josepho0918/mqx

2026-05-05 12:47:45 -07:00

ssl_api_cert.c

Add a debug message.

2026-04-17 15:10:56 -04:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_pk.c

remove early der free

2026-03-13 17:03:02 -06:00

ssl_asn1.c

Add checks for ascii digits in time decode functions

2026-04-21 15:24:06 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

Fix bugs found in crl.c, keys.c, and ssl_certman.c review

2026-04-14 13:14:21 +00:00

ssl_crypto.c

update Copyright year

2026-02-18 09:52:21 -07:00

ssl_ech.c

TLS ECH compliance fixes

2026-05-04 15:46:18 -06:00

ssl_load.c

Merge pull request #10135 from lealem47/nid_ED

2026-04-30 14:16:05 -06:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

Reject PKCS#7 SignedData signer-identity forgery

2026-04-23 09:36:32 +02:00

ssl_sess.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

src/ssl.c: in wolfSSL_check_domain_name(), use XSTRCMP(), not strcmp();

2026-05-06 21:40:33 -05:00

tls13.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

tls.c

Merge pull request #10141 from sebastian-carpenter/tls-ech-downgrade

2026-05-05 12:14:20 -07:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

x509.c

Merge pull request #10075 from josepho0918/mqx

2026-05-05 12:47:45 -07:00