Sean Parkinson 5fce8025bb Merge pull request #10386 from JeremiahM37/fenrir-4 ...

Harden TLS handshake validation, OpenSSL-compat defaults, and stale code paths

2026-05-08 10:50:55 +10:00

..

bio.c

Merge pull request #10208 from ColtonWilley/bio-io-negative-length-checks

2026-05-05 11:32:21 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #10162 from embhorn/gh9753

2026-04-24 14:28:00 -06:00

dtls13.c

dtls13: free and null the cipher slot on init failure in Dtls13InitAesCipher and ChaCha equivalent

2026-04-30 16:59:42 +02:00

dtls.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

include.am

Replace liboqs SPHINCS+ with SLH-DSA in certificate layer

2026-04-30 18:32:07 +02:00

internal.c

Merge pull request #10386 from JeremiahM37/fenrir-4

2026-05-08 10:50:55 +10:00

keys.c

Merge pull request #10246 from sameehj/aes-gcm-fix

2026-04-23 13:26:59 -05:00

ocsp.c

fix logic errors in stale code

2026-05-07 02:34:41 +00:00

pk_ec.c

Zeroize EC DER buffer in i2d_ECPrivateKey error path

2026-04-17 16:47:47 +02:00

pk_rsa.c

Address review comments on Fenrir zeroization fixes

2026-04-20 16:12:30 +00:00

pk.c

zeroize DH private keys on free

2026-05-07 02:31:51 +00:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

zeroize DH private keys on free

2026-05-07 02:31:51 +00:00

ssl_api_cert.c

Add a debug message.

2026-04-17 15:10:56 -04:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_pk.c

remove early der free

2026-03-13 17:03:02 -06:00

ssl_asn1.c

Add checks for ascii digits in time decode functions

2026-04-21 15:24:06 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

Fix bugs found in crl.c, keys.c, and ssl_certman.c review

2026-04-14 13:14:21 +00:00

ssl_crypto.c

guard zero length in DES ncbc

2026-05-07 02:31:51 +00:00

ssl_ech.c

TLS ECH compliance fixes

2026-05-04 15:46:18 -06:00

ssl_load.c

harden SSL config and session

2026-05-07 02:31:51 +00:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

Reject PKCS#7 SignedData signer-identity forgery

2026-04-23 09:36:32 +02:00

ssl_sess.c

harden SSL config and session

2026-05-07 02:31:51 +00:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

Merge pull request #10386 from JeremiahM37/fenrir-4

2026-05-08 10:50:55 +10:00

tls13.c

Merge pull request #10306 from sebastian-carpenter/tls-ech-client-oe

2026-05-07 14:14:50 -07:00

tls.c

Merge pull request #10386 from JeremiahM37/fenrir-4

2026-05-08 10:50:55 +10:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

x509.c

Merge pull request #10075 from josepho0918/mqx

2026-05-05 12:47:45 -07:00