wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-08 08:40:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
5c1225e6ab05db139be93749b8fdbba21aae6fe1
wolfssl/tests/api
T
History
Tobias Frauenschläger 5c1225e6ab x509: harden wolfSSL_X509_verify_cert() against alloc failure and stack pollution 
Robustness fixes in the OpenSSL-compatibility certificate verifier, independent
of the depth-exhaustion fix:

- Fail closed on allocation failure. When the failedCerts working stack could
  not be allocated, the function fell through to exit with ret still set to
  WOLFSSL_SUCCESS and reported the chain as verified without checking anything
  (a fail-open regression from the leak fix that turned the early return into a
  goto exit). Also check the ctx->chain allocation. Both now set an error.

- Remove caller-supplied intermediates from the correct stack. The intermediates
  appended to the working cert list during chain building were popped from
  ctx->store->certs by count, but they are appended to whichever stack is in use
  - which may be the caller's setTrustedSk (X509_STORE_CTX_set0_trusted_stack).
  Remove them by pointer identity from that same stack, recomputed from
  ctxIntermediates. Identity removal also survives the chain-building retries
  that reorder the stack, where a positional pop could drop a legitimate trusted
  entry and leave an injected intermediate behind - which a later verification
  reusing the store/ctx would then snapshot as a trust anchor. The removal helper
  walks the list once (O(n)) rather than indexing per position.

- NULL-guard ctx->store->param before dereferencing its flags in the
  partial-chain check.

Add regression tests covering: the trusted stack being restored after
verification, and the retry path (tampered plus genuine same-subject
intermediates, both orderings) leaving the store clean for later use.
2026-06-12 17:29:31 +02:00
..
api_decl.h
update Copyright year
2026-02-18 09:52:21 -07:00
api.h
remove unnecessary check, idx will be 1 and derSz is at least 5
2026-05-13 16:32:54 -06:00
create_ocsp_test_blobs.py
Remove non-RFC-compliant OCSP responder chain walk. The chain walk
2026-06-02 16:20:37 -06:00
include.am
ssl.c: Move functions out to own files and add testing
2026-06-10 09:11:59 +10:00
test_aes.c
fixes for F-3325:
2026-06-11 15:38:28 -05:00
test_aes.h
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_arc4.c
Ensure a key is set for ARC4 operations
2026-06-10 11:36:29 +02:00
test_arc4.h
Ensure a key is set for ARC4 operations
2026-06-10 11:36:29 +02:00
test_ascon_kats.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ascon.c
Merge pull request #10155 from aidangarske/fenrir-fixes-2
2026-05-11 21:07:53 -07:00
test_ascon.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_asn.c
Merge pull request #10641 from rlm2002/zd21890
2026-06-11 08:01:20 +10:00
test_asn.h
add regression test for sm builds
2026-06-09 15:40:16 -06:00
test_blake2.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_blake2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_camellia.c
initiallize camellia variable
2026-05-13 09:01:20 -06:00
test_camellia.h
tests: cover input validation fixes
2026-05-07 02:31:25 +00:00
test_certman.c
Merge pull request #10532 from rlm2002/zd21800
2026-06-05 16:27:00 -05:00
test_certman.h
Disallow matching URI type in CheckForAltNames.
2026-05-27 16:54:14 -07:00
test_chacha20_poly1305.c
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_chacha20_poly1305.h
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_chacha.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_cmac.c
Gate out all of the newly added AES-CMAC tests for FIPS as none of them will apply to the old FIPS AES-CMAC code.
2026-05-14 15:19:56 -07:00
test_cmac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve448.c
Enable all-zero shared secret check for curve448/25519 by default. Change macro to opt-out macro WOLFSSL_NO_ECDHX_SHARED_ZERO_CHECK. Add unit test.
2026-05-13 17:02:08 -07:00
test_curve448.h
Enable all-zero shared secret check for curve448/25519 by default. Change macro to opt-out macro WOLFSSL_NO_ECDHX_SHARED_ZERO_CHECK. Add unit test.
2026-05-13 17:02:08 -07:00
test_curve25519.c
X25519 x64 ASM: fix full reduction
2026-06-01 09:14:57 +10:00
test_curve25519.h
X25519 x64 ASM: fix full reduction
2026-06-01 09:14:57 +10:00
test_des3.c
Ensure a key is set for DES3 operations
2026-06-10 11:36:59 +02:00
test_des3.h
Ensure a key is set for DES3 operations
2026-06-10 11:36:59 +02:00
test_dh.c
dh tests: fix define gate.
2026-06-10 01:39:18 -05:00
test_dh.h
dh: fix subgroup check in wc_DhAgree.
2026-06-10 01:28:12 -05:00
test_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_dsa.c
Merge pull request #10291 from JeremiahM37/test-coverage
2026-05-13 16:39:54 +10:00
test_dsa.h
Validate DSA parameters when verifying DSA key.
2026-05-11 10:05:45 -07:00
test_dtls13.c
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_dtls13.h
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_dtls.c
ssl.c: Move functions out to own files and add testing
2026-06-10 09:11:59 +10:00
test_dtls.h
ssl.c: Move functions out to own files and add testing
2026-06-10 09:11:59 +10:00
test_ecc.c
tests/swdev: add ECC support to wc_swdev
2026-05-13 16:18:51 +02:00
test_ecc.h
Fix ECC validation regression
2026-04-23 11:26:33 +02:00
test_ed448.c
More regression testing fixes
2026-06-05 11:30:53 +10:00
test_ed448.h
Reject small-order public keys for Ed25519 and Ed448
2026-05-28 19:53:19 +02:00
test_ed25519.c
More regression testing fixes
2026-06-05 11:30:53 +10:00
test_ed25519.h
Reject small-order public keys for Ed25519 and Ed448
2026-05-28 19:53:19 +02:00
test_evp_cipher.c
Merge pull request #10364 from MarkAtwood/fix/evp-cipher-iv-length-cfb-ofb
2026-06-04 17:26:48 -05:00
test_evp_cipher.h
Fix review feedback
2026-03-05 08:51:52 -06:00
test_evp_digest.c
add unit test for NULL SHAKE parameters
2026-05-06 15:25:06 -06:00
test_evp_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp_pkey.c
Regression testing fixes
2026-06-04 18:29:24 +10:00
test_evp_pkey.h
Add NID_X25519 and NID_X448 support to the EVP layer
2026-05-28 14:40:36 +00:00
test_evp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hash.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
test_hash.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hmac.c
tests: api: remove extra wolfSSL_cleanup()
2026-05-13 16:18:52 +02:00
test_hmac.h
Fix issue in TLS_hmac size calculation
2026-02-26 10:26:20 -06:00
test_lms_xmss.c
Support RFC 9802 LMS and XMSS in X.509 certificate and CSR generation
2026-06-10 10:51:33 +02:00
test_lms_xmss.h
Support RFC 9802 LMS and XMSS in X.509 certificate and CSR generation
2026-06-10 10:51:33 +02:00
test_md2.c
update MD2 functions to return int instead of void
2026-05-13 11:36:36 -06:00
test_md2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.c
update MD4 return from void to int
2026-05-13 11:36:36 -06:00
test_md4.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_mldsa_legacy.c
Regression testing fixes
2026-06-04 18:29:24 +10:00
test_mldsa.c
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_mldsa.h
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_mlkem.c
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_mlkem.h
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_ocsp_test_blobs.h
Remove non-RFC-compliant OCSP responder chain walk. The chain walk
2026-06-02 16:20:37 -06:00
test_ocsp.c
Merge pull request #10532 from rlm2002/zd21800
2026-06-05 16:27:00 -05:00
test_ocsp.h
Merge pull request #10532 from rlm2002/zd21800
2026-06-05 16:27:00 -05:00
test_ossl_asn1.c
prevent resource leak if ASN1_INTEGER_to_BN() != null if expected
2026-04-03 17:13:29 -06:00
test_ossl_asn1.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_bio.c
Fix flaky tcp bind on Windows test runs
2026-05-04 10:35:04 +02:00
test_ossl_bio.h
Feat: support openssl compatibility layer functionality for libevent integration
2026-04-21 19:05:26 +03:00
test_ossl_bn.c
Add tests for BN_bn2binpad with zero output length
2026-04-13 15:50:26 +02:00
test_ossl_bn.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_cipher.c
Ensure a key is set for ARC4 operations
2026-06-10 11:36:29 +02:00
test_ossl_cipher.h
tests
2026-05-07 02:33:58 +00:00
test_ossl_dgst.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dgst.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
test_ossl_dsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ec.c
Add d2i NULL-deref guards and regression tests
2026-05-27 15:38:30 -07:00
test_ossl_ec.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_p7p12.c
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_p7p12.h
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_pem.c
Refactor - Split test to two different functions
2026-05-22 19:24:53 +03:00
test_ossl_pem.h
Refactor - Split test to two different functions
2026-05-22 19:24:53 +03:00
test_ossl_rand.c
honor OpenSSL fail-open contracts
2026-05-14 16:59:12 +00:00
test_ossl_rand.h
honor OpenSSL fail-open contracts
2026-05-14 16:59:12 +00:00
test_ossl_rsa.c
F-3888: add negative tests for tampered RSA signatures/hashes
2026-06-08 14:21:53 +02:00
test_ossl_rsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_crypto.c
evp: support ML-DSA in wolfSSL_EVP_PKCS82PKEY() and wolfSSL_X509_check_private_key()
2026-05-22 14:56:14 -06:00
test_ossl_x509_crypto.h
evp: support ML-DSA in wolfSSL_EVP_PKCS82PKEY() and wolfSSL_X509_check_private_key()
2026-05-22 14:56:14 -06:00
test_ossl_x509_ext.c
X509 API: fix issues
2026-06-01 09:57:19 +10:00
test_ossl_x509_ext.h
X509 API: fix issues
2026-06-01 09:57:19 +10:00
test_ossl_x509_info.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.c
Harden X509 DER length handling in wolfSSL_X509_get_der and wolfSSL_i2d_X509
2026-06-04 10:38:37 -07:00
test_ossl_x509_io.h
Harden X509 DER length handling in wolfSSL_X509_get_der and wolfSSL_i2d_X509
2026-06-04 10:38:37 -07:00
test_ossl_x509_lu.c
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_lu.h
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_name.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_name.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_str.c
x509: harden wolfSSL_X509_verify_cert() against alloc failure and stack pollution
2026-06-12 17:29:31 +02:00
test_ossl_x509_str.h
x509: require a trusted anchor in wolfSSL_X509_verify_cert()
2026-06-12 17:29:31 +02:00
test_ossl_x509_vp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_vp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509.c
Fixes from review
2026-05-07 07:32:51 -05:00
test_ossl_x509.h
Fix IDNA matching
2026-05-07 07:31:25 -05:00
test_pkcs7.c
Fix from review
2026-06-09 16:37:44 -05:00
test_pkcs7.h
Harden PKCS#7 FlattenEncodedAttribs
2026-06-08 09:26:29 -05:00
test_pkcs12.c
tests/api/test_pkcs12.c, tests/api/test_pwdbased.c: add missing FIPS version gates to test_wc_PKCS12_PBKDF(), test_wc_PKCS12_PBKDF_ex(), and test_wc_PBKDF1_ex_iterations();
2026-06-01 14:23:38 -05:00
test_pkcs12.h
PKCS12: check mismatch between hash algo and hash size
2026-04-15 03:08:50 +02:00
test_poly1305.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_poly1305.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_pwdbased.c
tests/api/test_pkcs12.c, tests/api/test_pwdbased.c: add missing FIPS version gates to test_wc_PKCS12_PBKDF(), test_wc_PKCS12_PBKDF_ex(), and test_wc_PBKDF1_ex_iterations();
2026-06-01 14:23:38 -05:00
test_pwdbased.h
fix clamp iterations <= 0 to 1 instead of returning an error
2026-05-20 07:25:35 -07:00
test_random.c
Addressed Copilot comments
2026-06-04 15:30:39 +09:00
test_random.h
Add MAX ENTROPY BITS check
2026-06-04 09:08:24 +09:00
test_rc2.c
Add wc_Rc2Free for key zeroization
2026-05-12 20:57:31 +00:00
test_rc2.h
Add wc_Rc2Free for key zeroization
2026-05-12 20:57:31 +00:00
test_ripemd.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ripemd.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_rsa.c
Rework added test
2026-05-27 18:20:20 -07:00
test_rsa.h
Fix potential mismatch in size between DECL_MP_INT_SIZE_DYN and NEW_MP_INT_SIZE. In some configurations DECL_MP_INT_SIZE_DYN will set the size to max while NEW_MP_INT_SIZE will memset bits.
2026-05-27 15:57:00 -07:00
test_session.c
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_session.h
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_sha3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.c
cryptocb: support WOLF_CRYPTO_CB_ONLY_SHA512
2026-06-04 20:21:50 +02:00
test_sha512.h
cryptocb: support WOLF_CRYPTO_CB_ONLY_SHA512
2026-06-04 20:21:50 +02:00
test_sha.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_she.c
wc_SHE_ImportM1M2M3: fix guard from || to && so it gates on WOLF_CRYPTO_CB
2026-04-15 18:03:39 -06:00
test_she.h
Fix CMake SHE deps, const-correctness in CryptoCb uid, stale comment, XSTRLEN double call, configure.ac AES-CBC guard, and add LoadKey/LoadKey_Verify test coverage
2026-04-15 11:28:03 -06:00
test_signature.c
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_signature.h
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_slhdsa.c
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_slhdsa.h
HashSLH-DSA APIs now take the pre-hashed digest, not the raw message
2026-05-11 10:14:13 +02:00
test_sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_sm4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_ssl_cert.c
tests/api/test_ssl_cert.c, tests/api/test_ssl_ext.c, tests/api/test_ssl_pk.c: add missing gates on !NO_TLS.
2026-06-10 12:05:00 -05:00
test_ssl_cert.h
ssl.c: Move functions out to own files and add testing
2026-06-10 09:11:59 +10:00
test_ssl_ext.c
tests/api/test_ssl_cert.c, tests/api/test_ssl_ext.c, tests/api/test_ssl_pk.c: add missing gates on !NO_TLS.
2026-06-10 12:05:00 -05:00
test_ssl_ext.h
ssl.c: Move functions out to own files and add testing
2026-06-10 09:11:59 +10:00
test_ssl_pk.c
tests/api/test_ssl_cert.c, tests/api/test_ssl_ext.c, tests/api/test_ssl_pk.c: add missing gates on !NO_TLS.
2026-06-10 12:05:00 -05:00
test_ssl_pk.h
ssl.c: Move functions out to own files and add testing
2026-06-10 09:11:59 +10:00
test_tls13.c
Strengthen regression tests for group and shared-cipher API guards
2026-06-08 12:41:34 -07:00
test_tls13.h
Merge pull request #10534 from SparkiDev/tls13_psk_id_fix
2026-06-05 12:36:00 -05:00
test_tls_ext.c
Merge pull request #10582 from julek-wolfssl/fenrir-20260602
2026-06-11 15:29:51 -07:00
test_tls_ext.h
Merge pull request #10582 from julek-wolfssl/fenrir-20260602
2026-06-11 15:29:51 -07:00
test_tls.c
Merge pull request #10582 from julek-wolfssl/fenrir-20260602
2026-06-11 15:29:51 -07:00
test_tls.h
Merge pull request #10582 from julek-wolfssl/fenrir-20260602
2026-06-11 15:29:51 -07:00
test_wc_encrypt.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wc_encrypt.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wolfmath.c
wolfmath: check mpSz cleanup.
2026-05-11 12:09:50 -05:00
test_wolfmath.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_x509.c
Regression testing fixes
2026-06-04 18:29:24 +10:00
test_x509.h
Fix wolfSSL_sk_X509_OBJECT_deep_copy to check bounds
2026-04-13 17:02:51 -05:00