1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 04c6dbcea4 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, tests/unit-mcdc/test_random_whitebox.c: Daniel Pouzzner 2026-09-21 00:35:36 -05:00
  • d95483fff7 Merge pull request #11525 from JacobBarthelmeh/nightly philljj 2026-09-22 20:51:53 -05:00
  • d3dbe4cc50 address reviewers' comments Marco Oliverio 2026-09-22 21:29:51 +02:00
  • 42f6703e7a Merge pull request #11070 from philljj/sanity_session JacobBarthelmeh 2026-09-22 15:47:13 -06:00
  • 6b498e2224 CI: refresh ccache on merge to master, and schedule Paul Adelsbach 2026-09-22 14:37:07 -07:00
  • 960b3d2e3c Merge pull request #11174 from kareem-wolfssl/fbatch1 JacobBarthelmeh 2026-09-22 14:57:39 -06:00
  • 35b867e518 dtls: ignore unauthenticated datagrams until the peer is verified - only update the replay window once stateful - silently drop malformed handshake messages from unveriffied peers - drop datagrams from an unpexected peer address Reda Chouk 2026-09-22 16:42:30 +02:00
  • 3e7b2cd026 fix for test case macro guards JacobBarthelmeh 2026-09-22 14:39:58 -06:00
  • 85258648f9 Merge pull request #11397 from sameehj/fix/mem-alloc-mismatch JacobBarthelmeh 2026-09-22 13:48:47 -06:00
  • b1dc0be5bd Merge pull request #11517 from night1rider/RNG-DefaultDevID JacobBarthelmeh 2026-09-22 13:24:37 -06:00
  • 1592d9f663 Rust wrapper: random: fix wrapped C function names in comments Josh Holtrop 2026-09-22 14:20:00 -04:00
  • 14e12f9ff0 Merge pull request #11489 from padelsbach/azure-nightly JacobBarthelmeh 2026-09-22 11:58:11 -06:00
  • f3482a7924 Merge pull request #11456 from padelsbach/zd22438-tls-12-gs JacobBarthelmeh 2026-09-22 11:14:32 -06:00
  • 242d6e390b Merge pull request #11371 from SparkiDev/mldsa_check_low_ct JacobBarthelmeh 2026-09-22 10:36:57 -06:00
  • 12a9b0f4e2 Fake a byte-wise counter seed in the test crypto callback The word-wise counter fails the APT seed health test at AMD RDSEED seed sizes Zackery Backman 2026-09-22 10:04:41 -06:00
  • 66916d0f62 Use the RNG seed devId when filling the next-seed bank Lets a callback-only seed source serve the bank instead of failing WC_HW_E night1rider 2026-09-22 00:20:15 -06:00
  • 5dd6da4763 Pass devId to every RNG init in testwolfcrypt Found by the seed-only mode night1rider 2026-09-22 00:20:15 -06:00
  • b85f6818f3 Rust wrapper: curve25519: fix comments about RNG usage Josh Holtrop 2026-09-22 11:39:13 -04:00
  • 4eb2394e3f memory: reword the NULL-free comment for check-source-text Sameeh Jubran 2026-09-22 11:49:54 +03:00
  • 2d46394aa5 Add a seed-only test mode to testwolfcrypt NO_DEV_RANDOM cryptocb build where a missing devId fails night1rider 2026-09-22 00:20:15 -06:00
  • d3cd57e6da Fix CI: give the OpenResty wolfSSL check the library search path Juliusz Sosinowicz 2026-09-22 05:27:14 +00:00
  • 4b77aad356 Fix test issue with precompiler defines Paul Adelsbach 2026-09-21 20:08:20 -07:00
  • 98f59b9ae6 PR feedback: tweak logic around minVersionSet again Paul Adelsbach 2026-09-21 16:35:33 -07:00
  • 4c23ec77df ssl_sess: cleanup for review. jordan 2026-09-21 18:30:21 -05:00
  • f8e7a6184d PR feedback: handling of minVersionSet Paul Adelsbach 2026-09-21 16:00:44 -07:00
  • 6b2746ea41 ssl_sess: fix expected mem size in session cache test. jordan 2026-09-21 16:20:59 -05:00
  • 0437fdcdc8 Merge pull request #11513 from gasbytes/x509_store_ctx-fix JacobBarthelmeh 2026-09-21 15:11:24 -06:00
  • 50efd565c7 Update QUIC test for new wolfSSL_process_quic_post_handshake behavior. Kareem 2026-09-21 13:57:45 -07:00
  • 852b57f5b6 Merge pull request #11210 from kaleb-himes/DRBG-Threading JacobBarthelmeh 2026-09-21 14:48:10 -06:00
  • 5e8c85b489 ssl_sess: sanitize session cache save and restore, copy full session row, and add unit tests. jordan 2026-09-21 15:16:48 -05:00
  • 3e41433bf3 PR feedback: ensure downgrade and failNoPSK flags are aligned Paul Adelsbach 2026-09-21 12:34:10 -07:00
  • 4696a882de Distinguish QUIC alerts from TLS alerts in the alert history. Kareem 2026-09-11 15:27:12 -07:00
  • 90bbf52915 Code review feedback Kareem 2026-09-10 16:48:16 -07:00
  • 99733f9be6 Code review feedback Kareem 2026-08-31 10:13:00 -07:00
  • 3d7439c41c Code review feedback: Refactor QUIC alert handling into its own function Add test case for TLS 1.2 client + server to exercise new supported_version logic Kareem 2026-08-26 14:28:06 -07:00
  • db8e992ce4 Send correct alert type PROTOCOL_VIOLATION. Add defines for QUIC alert codes as they differ from TLS alert codes. Kareem 2026-08-13 18:22:34 -07:00
  • aa5cea66e6 Ensure max_early_data_size matches the expected value of 0xffffffff when using QUIC. Fixes F-9233. Kareem 2026-08-13 16:30:07 -07:00
  • b6b9ae15ec Forbid sending more than one cert when using RPK. Fixes F-9231. Kareem 2026-08-13 16:29:17 -07:00
  • d7df305e44 Forbid supported_versions from being sent when using TLS <1.3. Fixes F-9230. Kareem 2026-08-13 16:28:37 -07:00
  • b9a41e9daa Inhreit full verify params into X509_STORE_CTX and WOLFSSL Reda Chouk 2026-09-21 20:03:59 +02:00
  • 865f203358 Merge pull request #11509 from douzzer/20260920-fixes JacobBarthelmeh 2026-09-21 11:51:18 -06:00
  • 797790b010 Merge pull request #11108 from julek-wolfssl/openssl-compat-fixes JacobBarthelmeh 2026-09-21 10:24:29 -06:00
  • e56a7c8f14 Merge pull request #11500 from Frauschi/fixes JacobBarthelmeh 2026-09-21 10:23:59 -06:00
  • df4f2968d8 Merge pull request #11505 from dgarske/mlkem_bench_zero JacobBarthelmeh 2026-09-21 09:50:17 -06:00
  • 8b3eabae73 zephyr: gate MAIN_NO_ARGS so apps can enable benchmark arg parsing David Garske 2026-09-17 16:04:30 -07:00
  • 7a943c8e39 Rust wrapper: random: implement fallible rand_core traits Josh Holtrop 2026-09-21 10:00:29 -04:00
  • 98bb401eac Keep the CTX ECDH curve across SSL_clear() Juliusz Sosinowicz 2026-09-21 10:46:12 +00:00
  • 99af6abc6a wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h: Daniel Pouzzner 2026-09-21 00:29:27 -05:00
  • 66d5504eec Fix CI: check out the OpenResty OSP patches from julek-wolfssl/osp Juliusz Sosinowicz 2026-09-21 05:20:46 +00:00
  • 636c142b08 configure.ac: add --enable-fips=v6.1.0 for explicit configuration for kernel-patched FIPS v6. Daniel Pouzzner 2026-09-20 23:35:38 -05:00
  • d5af5eb34f src/internal.c: Daniel Pouzzner 2026-09-20 23:35:04 -05:00
  • 2614c07d29 tests/api/test_dtls.c, tests/api/test_ssl_hs.c: Daniel Pouzzner 2026-09-20 23:32:36 -05:00
  • c9abb59fe8 wolfcrypt/test/test.c: add missing !WC_NO_CONSTRUCTORS gates in mldsa_param_test(). Daniel Pouzzner 2026-09-20 23:32:07 -05:00
  • e8401cdea1 wolfcrypt/src/ecc.c: fix identicalInnerCondition in ecc_verify_hash(). Daniel Pouzzner 2026-09-20 23:31:22 -05:00
  • 6ea4d0a7aa tests/api/test_hmac.c: add !WOLFSSL_KCAPI gates in test_wc_HmacInit_Id() and test_wc_HmacInit_Label(). Daniel Pouzzner 2026-09-20 23:31:05 -05:00
  • 048c894471 tests/api/test_aes.c, tests/api/test_ed25519.c, tests/api/test_ed448.c, tests/api/test_rsa.c: fix FIPS gating in test_wc_AesGcmEncryptDecrypt(), test_wc_AesKeyExportArgMcdc(), test_wc_ed25519_sign_verify_ctx_ph(), test_wc_ed448_make_public_stores_pub, test_wc_RsaDecisionCoverage. Daniel Pouzzner 2026-09-20 23:30:38 -05:00
  • 5d0861bc1a bsdkm/bsdkm_wc_port.h, wolfcrypt/src/cpuid.c, wolfssl/wolfcrypt/cpuid.h: refactor BSD-kernel WOLFSSL_ATOMIC_LOAD() and WOLFSSL_ATOMIC_STORE() as polymorphic macros, eliminating BSDKM-unique WOLFSSL_ATOMIC_LOAD_UINT(). Daniel Pouzzner 2026-09-20 23:16:56 -05:00
  • 48f2e7c0be benchmark: zero the ML-KEM key objects before any wc_MlKemKey_Free call David Garske 2026-09-19 11:12:20 -07:00
  • 683aa40cff Merge pull request #11504 from aidangarske/fix-custom-rng-init-cleanup David Garske 2026-09-19 08:25:28 -07:00
  • 2067a14924 Bind a client session cache reference to the entry contents it was issued for Tobias Frauenschläger 2026-09-16 15:24:24 +02:00
  • c31f2d8e2d Report a small-verify signature failure ahead of the parse errors that follow it Tobias Frauenschläger 2026-09-16 10:19:44 +02:00
  • faec5fd3d3 Check the CRL when a peer certificate names no OCSP responder Tobias Frauenschläger 2026-09-15 16:02:35 +02:00
  • 78bf64f494 Address new Skoll findings kaleb-himes 2026-09-18 16:26:18 -06:00
  • 2b9600c9a1 Peer requested feature, a runtime off switch kaleb-himes 2026-09-18 16:26:06 -06:00
  • f10735b67c Address Fenrir findings kaleb-himes 2026-09-18 14:59:17 -06:00
  • 92916c0e24 Let a caller force the RNG auto lock on or off for one instance kaleb-himes 2026-09-18 13:48:24 -06:00
  • 5c0105b16c Rename the RNG lock configure options to rng-autolock and rng-autofork kaleb-himes 2026-09-18 13:48:16 -06:00
  • 7c6c377918 Skip the RNG flag pins where a FIPS build freezes an older random.h kaleb-himes 2026-09-18 11:59:21 -06:00
  • 82f4a6829f Keep the pre-move cancel state default when the call fails kaleb-himes 2026-09-18 11:05:54 -06:00
  • ccb15569f5 Rename the automatic lock helpers away from WC_RNG.lock's names kaleb-himes 2026-09-18 10:50:28 -06:00
  • 5a8a807823 Move the RNG lock cancel state handling out to wc_port.c kaleb-himes 2026-09-18 10:50:18 -06:00
  • 4aecdf519d Drop Rng from the name of the generic image pin helper kaleb-himes 2026-09-18 10:49:55 -06:00
  • b4e8504997 Declare the RNG mutex once instead of once per lock facility kaleb-himes 2026-09-18 10:49:45 -06:00
  • 7fc02b2e11 Gate the RNG auto lock on kernel mode, not on each kernel flavor kaleb-himes 2026-09-18 10:49:45 -06:00
  • fd10d9ffd2 Lock the DRBG mutators so a concurrent generate cannot race them kaleb-himes 2026-09-18 10:49:27 -06:00
  • 167fbb95b2 Say plainly that a signal handler fork can hang, and that values stay safe kaleb-himes 2026-09-18 08:51:13 -06:00
  • ccec59296e Declare the flag pin test where the test is actually defined kaleb-himes 2026-09-18 08:24:08 -06:00
  • 054735e3a1 Fold the condemning holder into the one the other lock tests use kaleb-himes 2026-09-18 07:32:34 -06:00
  • d273bce777 Tighten the comments added across the RNG lock work kaleb-himes 2026-09-18 07:24:24 -06:00
  • 52ba905583 Run the stateless RNG backends before the lock, not under it kaleb-himes 2026-09-18 07:24:18 -06:00
  • 7939f3c320 Pin the public RNG flag bit values so a renumbering cannot land quietly kaleb-himes 2026-09-18 07:13:36 -06:00
  • 0b8b97fd6f Stop the fork child breaking a lock its own thread still holds kaleb-himes 2026-09-18 06:11:30 -06:00
  • 8437427404 Run the deterministic lock tests on the plain mutex builds too kaleb-himes 2026-09-17 23:24:47 -06:00
  • 62c248afb0 Skip locks the forking thread already holds in the prepare handler kaleb-himes 2026-09-17 23:24:47 -06:00
  • f9e0021946 Take the RNG lock before the reseed health checks read status kaleb-himes 2026-09-17 22:21:36 -06:00
  • a9c706de76 Test that a broken flag flipped across fork leaves one lock holder kaleb-himes 2026-09-17 21:38:26 -06:00
  • 843266ce2b Release exactly the fork locks that the prepare handler took kaleb-himes 2026-09-17 21:19:04 -06:00
  • 82cbef1ba9 Turn the fork handlers off for WOLFSSL_NO_GETPID and unnest their API kaleb-himes 2026-09-17 20:36:59 -06:00
  • 63df425847 Make the fork lock flags atomic and note the signal handler limit kaleb-himes 2026-09-17 19:56:55 -06:00
  • 693813ac1f Move the RNG fork lock into wc_port.c, outside the FIPS boundary kaleb-himes 2026-09-17 16:35:50 -06:00
  • 8ad6e9a3d2 Resolve the merge conflicts against the upstream RNG rework kaleb-himes 2026-09-17 14:27:50 -06:00
  • cad72086a4 Leave the RNG lock out of CMSIS-RTOS v1 builds, whose mutex pool has ten slots kaleb-himes 2026-09-11 19:12:33 -06:00
  • 48c940fdaa Add PTHREAD_CANCEL_DISABLE to the known macro list kaleb-himes 2026-09-09 10:53:06 -06:00
  • eb4d3c5512 Define the no-op RNG lock helpers for builds without the Hash DRBG kaleb-himes 2026-09-09 08:23:07 -06:00
  • 480a38466c Lock the hardware and async RNG backends and make the lock tests prove the wait kaleb-himes 2026-09-09 07:27:33 -06:00
  • b306ca6743 Treat a failed thread join in the RNG tests as an error, not a reason to leak kaleb-himes 2026-09-09 05:47:43 -06:00
  • 7adb5672d4 Require thread cancellation in the fork handler probes: Android has none kaleb-himes 2026-09-08 20:03:02 -06:00
  • e34398e651 Keep HAVE_GETPID out of CMake user_settings builds and scan EXTRA_CFLAGS kaleb-himes 2026-09-08 19:23:06 -06:00
  • 328b55f0b1 Guard the compat fork on its pipe and churn the registry during the fork tests kaleb-himes 2026-09-08 18:39:51 -06:00
  • 62d2fc1b72 Probe getpid through unistd.h in CMake, pin once, and scope the test watchdog kaleb-himes 2026-09-08 17:08:06 -06:00