Kareem ef7671f664 In DoTls13CertificateRequest, avoid assigned the CertReqCtx to the SSL object until the function has finished. ...

This avoids ssl->certReqCtx being set when the function returns an error.
Thanks to Cal Page for the report.

2026-05-12 10:30:24 -07:00

..

bio.c

Merge pull request #10208 from ColtonWilley/bio-io-negative-length-checks

2026-05-05 11:32:21 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #10162 from embhorn/gh9753

2026-04-24 14:28:00 -06:00

dtls13.c

Merge pull request #10349 from rizlik/dtls13_rtx_fixes

2026-05-12 22:19:56 +10:00

dtls.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

include.am

Replace liboqs SPHINCS+ with SLH-DSA in certificate layer

2026-04-30 18:32:07 +02:00

internal.c

Merge pull request #10394 from dgarske/sp_nonblock_rsa_dh

2026-05-12 13:25:43 +10:00

keys.c

Merge pull request #10246 from sameehj/aes-gcm-fix

2026-04-23 13:26:59 -05:00

ocsp.c

fix logic errors in stale code

2026-05-07 02:34:41 +00:00

pk_ec.c

Zeroize EC DER buffer in i2d_ECPrivateKey error path

2026-04-17 16:47:47 +02:00

pk_rsa.c

Address review comments on Fenrir zeroization fixes

2026-04-20 16:12:30 +00:00

pk.c

zeroize DH private keys on free

2026-05-07 02:31:51 +00:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

zeroize DH private keys on free

2026-05-07 02:31:51 +00:00

ssl_api_cert.c

Add a debug message.

2026-04-17 15:10:56 -04:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_pk.c

remove early der free

2026-03-13 17:03:02 -06:00

ssl_asn1.c

Add checks for ascii digits in time decode functions

2026-04-21 15:24:06 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

zero-initialize DecodedCert immediately after allocation in

2026-05-11 20:12:19 +02:00

ssl_crypto.c

guard zero length in DES ncbc

2026-05-07 02:31:51 +00:00

ssl_ech.c

TLS ECH compliance fixes

2026-05-04 15:46:18 -06:00

ssl_load.c

Fix private key lock issues in master

2026-05-08 17:08:38 -06:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

Reject PKCS#7 SignedData signer-identity forgery

2026-04-23 09:36:32 +02:00

ssl_sess.c

harden SSL config and session

2026-05-07 02:31:51 +00:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

Merge pull request #10386 from JeremiahM37/fenrir-4

2026-05-08 10:50:55 +10:00

tls13.c

In DoTls13CertificateRequest, avoid assigned the CertReqCtx to the SSL object until the function has finished.

2026-05-12 10:30:24 -07:00

tls.c

Add RSA/DH SP non-blocking support for C/Small 2048/3072/4096

2026-05-08 10:36:28 -07:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

x509.c

Fix handling of registeredID

2026-05-07 07:33:56 -05:00