Mattia Moffa 9514b21133 Cap session ticket lifetime hint at half of key lifetime ...

The default ticket encryption callback rotates two keys and can only
honor a hint below WOLFSSL_TICKET_KEY_LIFETIME/2; a larger hint
previously left no key available for encryption, failing every handshake
after the first on a reused server CTX. Now these values are rejected.

2026-07-01 21:44:05 +02:00

..

bio.c

BIO: reject negative length in memory BIO read

2026-06-16 20:56:45 +02:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Regression testing fixes - memory allocation failure testing

2026-06-11 12:14:06 +10:00

dtls13.c

Merge pull request #10652 from SparkiDev/regression_fixes_25

2026-06-12 16:30:57 -06:00

dtls.c

Cache AEAD record overhead on WOLFSSL

2026-05-28 16:19:44 +02:00

include.am

Merge pull request #10756 from SparkiDev/aes_asm_ymm_zmm

2026-06-25 21:41:17 -07:00

internal.c

Merge pull request #10714 from Frauschi/zd21992_2

2026-06-17 17:34:15 -06:00

keys.c

Cache AEAD record overhead on WOLFSSL

2026-05-28 16:19:44 +02:00

ocsp.c

Regression testing fixes - memory allocation failure testing

2026-06-11 12:14:06 +10:00

pk_ec.c

Add d2i NULL-deref guards and regression tests

2026-05-27 15:38:30 -07:00

pk_rsa.c

Size cert signature buffers from the key and check sig type vs key

2026-06-10 10:51:41 +02:00

pk.c

F-4591: fix right-justification of short DH shared secret

2026-06-03 13:01:19 +02:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

zero sensitive material before free

2026-05-14 16:59:48 +00:00

ssl_api_cert.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_dtls.c

ssl.c: Move functions out to own files and add testing

2026-06-10 09:11:59 +10:00

ssl_api_ext.c

Cap session ticket lifetime hint at half of key lifetime

2026-07-01 21:44:05 +02:00

ssl_api_pk.c

src/ssl_api_ext.c and src/ssl_api_pk.c: restore early BAD_FUNC_ARG returns that were refactored away in 359e688dc3, fixing null pointer deref regression in wolfSSL_UseALPN() (possibly others too).

2026-06-10 12:05:00 -05:00

ssl_asn1.c

Merge pull request #10207 from ColtonWilley/d2i_pem_negative_length

2026-06-08 15:42:00 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

certman: enforce keyCertSign usage on chain-supplied intermediate CAs

2026-06-16 20:31:36 +02:00

ssl_crypto.c

cryptocb: support WOLF_CRYPTO_CB_ONLY_SHA512

2026-06-04 20:21:50 +02:00

ssl_ech.c

Merge pull request #10469 from sebastian-carpenter/tls-ech-server-improvements

2026-05-23 00:07:40 +10:00

ssl_load.c

Add negative length validation to d2i wrappers, PEM helpers, and buffer loaders

2026-05-27 11:36:38 -07:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

PKCS7: tighten signature presence check in PKCS7_verify

2026-06-16 20:19:22 +02:00

ssl_sess.c

Check SNI/ALPN in TLS 1.2 stateful session ID resumption

2026-05-27 09:16:34 -04:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

Merge pull request #10639 from julek-wolfssl/fix-current-cipher-kx-nid

2026-06-10 14:50:02 -07:00

tls13.c

TLS 1.3: fix for post-handshake authentication

2026-06-16 20:56:45 +02:00

tls.c

Merge pull request #10652 from SparkiDev/regression_fixes_25

2026-06-12 16:30:57 -06:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

x509: harden wolfSSL_X509_verify_cert() against alloc failure and stack pollution

2026-06-12 17:29:31 +02:00

x509.c

Merge pull request #10207 from ColtonWilley/d2i_pem_negative_length

2026-06-08 15:42:00 -07:00