David Garske 983e1090d7 Merge pull request #10922 from aidangarske/fenrir-asn-strict ...

Enforce RFC 5280 extension MUSTs under WOLFSSL_NO_ASN_STRICT and validate DTLS 1.3 legacy_session_id echo

2026-07-22 14:12:33 -07:00

..

bio.c

F-6345 - Reject oversized length in memory BIO write

2026-07-02 11:36:01 +02:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #10693 from padelsbach/crl-use-after-free

2026-07-08 11:37:41 -07:00

dtls13.c

Merge pull request #10833 from kareem-wolfssl/zd22079

2026-07-06 17:28:22 -07:00

dtls.c

6824 - Verify echoed legacy_session_id matches the value sent in DTLS 1.3

2026-07-15 16:33:55 -07:00

include.am

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

internal.c

Merge pull request #10941 from Frauschi/rfc_compliance

2026-07-21 16:19:33 +10:00

keys.c

Cache AEAD record overhead on WOLFSSL

2026-05-28 16:19:44 +02:00

ocsp.c

OCSP: opt-in fail-closed on missing responder

2026-07-17 13:21:01 -07:00

pk_ec.c

wolfssl/wolfcrypt/hash.h, src/internal.c, src/pk_ec.c, tests/api/api.h, wolfcrypt/src/dsa.c, wolfcrypt/src/ecc.c, wolfcrypt/src/pkcs7.c, wolfcrypt/test/test.c:

2026-07-07 00:19:48 -05:00

pk_rsa.c

Size cert signature buffers from the key and check sig type vs key

2026-06-10 10:51:41 +02:00

pk.c

hardening against potential overflow cases

2026-07-07 16:03:30 -06:00

quic.c

Merge pull request #10788 from aidangarske/fenrir-tls-batch-2026-06

2026-07-08 13:58:14 -07:00

sniffer.c

Parse sniffer keylog file line by line for RFC 9850

2026-07-17 11:04:24 +02:00

ssl_api_cert.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_api_crl_ocsp.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_api_dtls.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_api_ext.c

Move ticket hint check to default callback

2026-07-08 06:17:36 +02:00

ssl_api_hs.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_api_pk.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_api_rw.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_asn1.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

OCSP: opt-in fail-closed on missing responder

2026-07-17 13:21:01 -07:00

ssl_crypto.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_ech.c

Merge pull request #10469 from sebastian-carpenter/tls-ech-server-improvements

2026-05-23 00:07:40 +10:00

ssl_err.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

ssl_load.c

Merge pull request #10209 from ColtonWilley/harden-chain-depth-and-parser-bounds

2026-07-03 01:03:36 -05:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

Lock globalRNGMutex around all shared globalRNG access in OpenSSL-compat RNG

2026-07-09 08:43:22 +09:00

ssl_sess.c

Check SNI/ALPN in TLS 1.2 stateful session ID resumption

2026-05-27 09:16:34 -04:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl_tsp.c

Time-Stamp Protocol (RFC 3161)

2026-07-08 09:33:47 +10:00

ssl.c

ssl.c: Move code out and some fixes

2026-07-22 17:08:26 +10:00

tls13.c

Merge pull request #10922 from aidangarske/fenrir-asn-strict

2026-07-22 14:12:33 -07:00

tls.c

Merge pull request #10941 from Frauschi/rfc_compliance

2026-07-21 16:19:33 +10:00

wolfio.c

OCSP: opt-in SSRF screening of AIA responder

2026-07-17 13:11:16 -07:00

x509_str.c

Fixes from review

2026-07-08 12:36:35 -05:00

x509.c

openssl compat errors and mldsa oid fix

2026-07-13 11:56:57 -06:00