1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • 2ba96c384c Address review: build the group APIs in FFDHE-only builds Juliusz Sosinowicz 2026-08-27 14:22:22 +00:00
  • e4cfb9f0c5 Address review: do not report a group from a previous connection Juliusz Sosinowicz 2026-08-27 14:22:13 +00:00
  • a50b526d69 Address review: pick the peer key by the negotiated curve Juliusz Sosinowicz 2026-08-27 14:22:04 +00:00
  • 67ffa0142e Address review: keep a non-blocking OCSP handshake in flight Juliusz Sosinowicz 2026-08-27 14:21:55 +00:00
  • b95045458e Say why shutdown-in-init leaves ssl->error alone, and test it Juliusz Sosinowicz 2026-08-21 10:20:18 +00:00
  • 68b93cd198 Address review: only report a group that was actually negotiated Juliusz Sosinowicz 2026-08-21 10:20:18 +00:00
  • 1b3782da83 Address review: report an overridden verify-param name mismatch Juliusz Sosinowicz 2026-08-21 10:20:10 +00:00
  • deda01f86e Address review: allocate the retained peer X25519/X448 keys with their own type Juliusz Sosinowicz 2026-08-21 02:32:19 +00:00
  • 6888423089 Fix CI: reword a comment codespell reads as a typo Juliusz Sosinowicz 2026-08-20 12:06:41 +00:00
  • 16011e9021 Use a single success return in x509GetIssuerFromCM() Juliusz Sosinowicz 2026-08-20 11:44:07 +00:00
  • 23f124f175 Give the FFDHE groups their own NIDs instead of a sentinel Juliusz Sosinowicz 2026-08-20 11:44:07 +00:00
  • fc14f45249 Address review: match the peer name helper guard and assert key type Juliusz Sosinowicz 2026-08-20 03:34:40 +00:00
  • 41448f51a2 Address review: guard the signer derCert dereference Juliusz Sosinowicz 2026-08-20 03:34:40 +00:00
  • 84ca014a18 Address review: stop FFDHE rows colliding with EC NIDs Juliusz Sosinowicz 2026-08-20 03:34:40 +00:00
  • 32b2f396e9 Address review: free and gate the retained X25519 peer key like X448 Juliusz Sosinowicz 2026-08-20 03:34:40 +00:00
  • 664f78fe3a Address review: check X509_VERIFY_PARAM host and IP independently Juliusz Sosinowicz 2026-08-20 03:34:29 +00:00
  • 67eeee45c6 Fix CI: let shutdown notify the peer after a failed handshake Juliusz Sosinowicz 2026-08-17 02:44:30 +00:00
  • ff1f3a6b36 Fix CI: define test_peer_tmp_key_group() only when it is called Juliusz Sosinowicz 2026-08-14 17:06:33 +00:00
  • 38782be070 Fix CI: guard the namedGroup read in wolfSSL_get_negotiated_group() Juliusz Sosinowicz 2026-08-14 17:06:33 +00:00
  • 93c31c73af tests: mark the shutdown white-boxes as established connections Juliusz Sosinowicz 2026-08-14 15:23:19 +00:00
  • 91d26987a2 Fail wolfSSL_shutdown() on an incomplete handshake Juliusz Sosinowicz 2026-08-14 15:09:39 +00:00
  • 361838395f Report received alerts through the info callback Juliusz Sosinowicz 2026-08-14 14:54:58 +00:00
  • b04009c062 Fix CI: do not alias SSL_get_negotiated_group for nginx builds Juliusz Sosinowicz 2026-08-14 15:00:42 +00:00
  • 22221a02be Fix CI: do not alias SSL_group_to_name for nginx builds Juliusz Sosinowicz 2026-08-14 11:20:29 +00:00
  • de0a77c479 Fix CI: build test_peer_tmp_key_group() without TLS 1.3 Juliusz Sosinowicz 2026-08-14 11:15:06 +00:00
  • 674a1add4f Fix CI: rank key share groups against the full preferred list Juliusz Sosinowicz 2026-08-14 11:15:00 +00:00
  • 4f20a878d4 Address review: clear *pkey up front in wolfSSL_get_peer_tmp_key Juliusz Sosinowicz 2026-08-13 14:34:48 +00:00
  • 7386e2ae8d Fix SSL_get_peer_tmp_key() for TLS 1.3 Juliusz Sosinowicz 2026-08-07 10:56:05 +00:00
  • 0ad009c12e Report peer name mismatches through the verify callback Juliusz Sosinowicz 2026-08-07 10:52:32 +00:00
  • 0f6d53cef2 Add SSL_get_negotiated_group() and SSL_group_to_name() Juliusz Sosinowicz 2026-08-07 10:44:38 +00:00
  • 9d4620a45e Accept ffdhe group names in SSL_set1_groups_list() Juliusz Sosinowicz 2026-08-07 10:39:25 +00:00
  • 8c5652fa81 Define WOLFSSL_SIGNER_DER_CERT for OPENSSL_ALL builds Juliusz Sosinowicz 2026-08-07 16:29:27 +00:00
  • 97ae05063c wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h: backport wc_InitRngNonceRBGC(), wc_RNG_DRBG_Reseed_Now(), wc_RNG_DRBG_Reseed_Uncredited(), wc_RNG_DRBG_ReseedRBGC(), and wc_RNG_DRBG_GetReseedCtr(). Daniel Pouzzner 2026-09-16 22:41:14 -05:00
  • db486694cd Document build.bat/debug_run.bat in README_EN/README_JP Hideki Miyazaki 2026-09-17 12:17:39 +09:00
  • 5041aabc01 Fix zero-length payload/AAD handling in TSIP AES-GCM Hideki Miyazaki 2026-09-17 12:09:29 +09:00
  • f08691a5ac Drop the unused OPENSSL_EXTRA define from user_settings.h Hideki Miyazaki 2026-09-17 10:59:16 +09:00
  • 13df5adeb1 Regenerate cached CA certificate signature arrays in key_data.c Hideki Miyazaki 2026-09-17 10:59:15 +09:00
  • f58ffe232e Match demo-mode macros with a regex in set_demo_mode.ps1 Hideki Miyazaki 2026-09-17 10:59:15 +09:00
  • 1defce3b5d Add a restart mode to debug_run.bat Hideki Miyazaki 2026-09-17 10:59:15 +09:00
  • 7de4a6ef90 Add BusyBox to PATH and a wolfssl-only rebuild mode to build.bat Hideki Miyazaki 2026-09-17 10:59:14 +09:00
  • 100f1a6a67 Link src/x509.c into the wolfssl e2studio project Hideki Miyazaki 2026-09-17 10:59:14 +09:00
  • a685fbecb6 Fix double padSz counting in TSIP TLS 1.3 CertificateVerify/Finished Hideki Miyazaki 2026-09-17 10:49:50 +09:00
  • aa19ddacb8 Fix stale output buffer pointer in tsip_Tls13SendFinished Hideki Miyazaki 2026-09-17 08:59:48 +09:00
  • 60f220abfd linuxkm/lkcapi_sha_glue.c, wolfcrypt/src/random.c, wolfcrypt/src/rng_bank.c, wolfcrypt/test/test.c, wolfssl/wolfcrypt/random.h: fixes for a second batch of static-analysis findings. Daniel Pouzzner 2026-09-16 17:55:36 -05:00
  • 2954eab124 Check the CRL issuer name against the signing CA Paul Adelsbach 2026-09-16 15:47:46 -07:00
  • ed4a762e81 Assembly code fixes Sean Parkinson 2026-09-16 17:21:53 +10:00
  • c42212d38f Merge pull request #11287 from embhorn/zd22372 philljj 2026-09-17 00:03:41 +02:00
  • 5ba5b5cbe1 wolfcrypt/src/random.c, wolfcrypt/src/rng_bank.c, wolfcrypt/test/test.c, wolfssl/wolfcrypt/settings.h: fixes for a batch of static-analysis findings. Daniel Pouzzner 2026-09-16 16:32:14 -05:00
  • 6a43d3355b Merge pull request #11462 from dgarske/stm32_dhuk_wrapped_key JacobBarthelmeh 2026-09-16 14:31:30 -06:00
  • ece58a8ec2 Merge pull request #11466 from dgarske/mx2_conf_pack_define JacobBarthelmeh 2026-09-16 14:17:14 -06:00
  • b3f0773f95 Add wolfCOSE and wolfIP compatibility checks Aidan Garske 2026-09-01 15:43:18 -07:00
  • 1c9622161e PR feedback: adjust downgrade behavior, update tests Paul Adelsbach 2026-09-16 10:37:55 -07:00
  • 51d806564f Merge pull request #11264 from night1rider/fenrir-10650 JacobBarthelmeh 2026-09-16 11:25:24 -06:00
  • 1c3bc498b2 Guard benchmark PQ option table against NO_MAIN_DRIVER builds where its use sites are compiled out David Garske 2026-09-16 10:14:56 -07:00
  • c0c370a885 Use Hmac_UpdateFinal for TLS CBC MAC verify when a crypto callback device owns the HMAC key since the raw-hash constant-time path reads software hash state such a device does not maintain David Garske 2026-09-05 09:37:02 -07:00
  • 67c62da647 Merge pull request #11474 from philljj/fix_rsacleanup JacobBarthelmeh 2026-09-16 11:08:30 -06:00
  • 89d7f840eb Fix quic record length reset and conform the quictls return values - reset the quic record lenght when the wire length exceeds the cap - return wolfssl_failures from the quic calls published under quictls names and keep the reason on ssl->error - document the failure returns of the quic api Reda Chouk 2026-09-15 19:35:37 +02:00
  • 465b44875d rsa: cleanup, add mem zero check. jordan 2026-09-16 10:45:40 -05:00
  • 3e4ab5446d rsa: fix wc_RsaCleanup key type check. jordan 2026-09-16 09:50:10 -05:00
  • d61205bf3d asn: test certificatePolicies over-limit rejection (issue 10628) jackctj117 2026-08-26 09:30:53 -06:00
  • 1cca152a56 asn: reject critical certificatePolicies that exceed MAX_CERTPOL_NB in both back-ends jackctj117 2026-08-26 09:30:53 -06:00
  • 8cddf2177e wolfcrypt/test/test.h: fix bugprone-macro-parentheses in revised WC_TEST_RET_ENC_I(). Daniel Pouzzner 2026-09-16 02:06:29 -05:00
  • 8d95ec5da0 wolfcrypt/test/test.c: in rng_drbg_svc_test(), fix gating on wc_ecc_set_rng(). Daniel Pouzzner 2026-09-16 01:15:05 -05:00
  • 622299a7ba wolfcrypt/src/random.c, wolfcrypt/src/rng_bank.c, wolfcrypt/test/test.c: fix RNG-extras support for HAVE_INTEL_RDRAND. Daniel Pouzzner 2026-09-16 01:09:11 -05:00
  • 5bda097a91 wolfcrypt/test/test.h: tweak WC_TEST_RET_ENC_I() to put a ceiling on i. Daniel Pouzzner 2026-09-16 01:07:38 -05:00
  • dd4f684e3f Address review: free native CA lists before the static memory hint Juliusz Sosinowicz 2026-08-24 09:48:48 +00:00
  • 0f6def0f34 Address review: reject an empty authorities vector and reset the peer list Juliusz Sosinowicz 2026-08-21 02:38:19 +00:00
  • 49950750ed Address review: correct certificate_authorities lifetime docs Juliusz Sosinowicz 2026-08-21 02:38:19 +00:00
  • 45d6931a06 Fix CI: gate the compat CA-list tests on OPENSSL_EXTRA Juliusz Sosinowicz 2026-08-13 14:24:26 +00:00
  • c1c737d98e Address review feedback on certificate_authorities API Juliusz Sosinowicz 2026-08-06 13:49:33 +00:00
  • b2001e2f0c Add native API for TLS 1.3 certificate_authorities extension Juliusz Sosinowicz 2026-08-06 11:19:50 +00:00
  • babdbc41d2 wolfcrypt/src/random.c: in wc_RNG_DRBG_NextSeedGenerate_local(), initialize seed and lenp to NULL to work around false positive from CI. Daniel Pouzzner 2026-09-16 00:10:26 -05:00
  • 645bedc74d tests/unit-mcdc/test_random_fault_whitebox.c and tests/unit-mcdc/test_random_whitebox.c: update for new Hash_DRBG_Generate() arity and WUR on Hash512_DRBG_Instantiate() (fixed by collecting and asserting errors). Daniel Pouzzner 2026-09-16 00:01:16 -05:00
  • 9c65ab8094 update doc/dox_comments/header_files/random.h and doc/dox_comments/header_files/rng_bank.h. Daniel Pouzzner 2026-09-15 21:44:04 -05:00
  • ba1797509d Key the STM32CubeMX2 configuration off a macro the pack declares David Garske 2026-09-14 13:08:39 -07:00
  • 29cadf7be2 Compat layer: fix incorrect signature of d2i_X509_CRL Paul Adelsbach 2026-09-15 17:32:28 -07:00
  • 0b5b0b4812 port/st: default wc_Stm32_Aes_Wrap to the raw blob order on both build paths and document WOLFSSL_SAES_DEVID as a wrap-key marker David Garske 2026-09-15 17:01:27 -07:00
  • 10e6117d8e wolfcrypt/src/random.c: Daniel Pouzzner 2026-09-15 19:16:24 -05:00
  • 54780d4551 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h: refuse condemned and contradictory states at their entry points. Daniel Pouzzner 2026-09-15 17:41:53 -05:00
  • a010f7b289 wolfcrypt/src/random.c: zeroize event-abandoned entropy under the sibling-lineage doctrine: bytes a purge abandons here may be consumed by an identical clone/fork sibling there, and consumed-elsewhere is CSP. Daniel Pouzzner 2026-09-15 17:09:01 -05:00
  • d0c48dd8f5 wolfcrypt/test/test.c: old-FIPS compat def for WC_RNG_INIT_FLAG_NONE. Daniel Pouzzner 2026-09-15 17:01:43 -05:00
  • f20d55572e wolfcrypt/src/random.c: Close the invalidation epoch race on the credited nextSeed aperture, and percolate or dispose of all remaining failable results. Daniel Pouzzner 2026-09-15 15:36:13 -05:00
  • e4d25f8ee5 linuxkm/lkcapi_sha_glue.c: fix unused-value warning around can_sleep in linuxkm_InitRng_DefaultRBGC(). Daniel Pouzzner 2026-09-15 15:13:36 -05:00
  • 9913e49c3b wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/src/rng_bank.c, linuxkm/lkcapi_sha_glue.c, wolfcrypt/test/test.c: 's/WC_RNG_INIT_FLAGS_/WC_RNG_INIT_FLAG_/g'. Daniel Pouzzner 2026-09-15 01:25:05 -05:00
  • 4c387e5338 wolfcrypt/src/random.c: in wc_RNG_Pool_Extract(), fix (remove) argument overwrite on error return, and add missing _stats_pool_bytes_missed advance. Daniel Pouzzner 2026-09-15 01:20:17 -05:00
  • fd14f12c06 wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c: fixes for old-FIPS compatibility. Daniel Pouzzner 2026-09-15 00:59:28 -05:00
  • f4af685ab9 linuxkm/lkcapi_sha_glue.c: Daniel Pouzzner 2026-09-15 00:19:43 -05:00
  • b25bd17474 wolfcrypt/test/test.c: when TEST_SLEEP is not otherwise defined, define it to WC_RELAX_LONG_LOOP(). Daniel Pouzzner 2026-09-15 00:18:45 -05:00
  • fb7d15b992 wolfssl/wolfcrypt/wc_port.h: add WC_CAS_WITH_RETRY_BEGIN(), WC_CAS_WITH_RETRY_BEGIN_INIT_CUR(), WC_CAS_WITH_RETRY_LOOP_UNTIL(), WC_CAS_WITH_RETRY_LOOP_FOREVER(), and WC_CAS_WITH_RETRY_END(), and port helpers WC_CAS_WITH_RETRY_EXTRA_DECLS, WC_CAS_WITH_RETRY_ITER_CLAUSE, and WC_CAS_WITH_RETRY_FOREVER_CLAUSE. Daniel Pouzzner 2026-09-14 17:46:41 -05:00
  • 344a25dff2 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, linuxkm/lkcapi_sha_glue.c: refactor WC_RNG_HAVE_POOL facility as a CAS-synchronized-writer FIFO, preserving lock-free single-reader, while assiduously enforcing entropy invalidation locally for both readers and writers. Daniel Pouzzner 2026-09-14 11:04:02 -05:00
  • bcde61c7b6 linuxkm/lkcapi_sha_glue.c: Daniel Pouzzner 2026-09-13 17:46:03 -05:00
  • 64ea3bc6ca wolfcrypt/src/rng_bank.[ch]: Daniel Pouzzner 2026-09-13 14:01:12 -05:00
  • 6ff1906a02 wolfcrypt/src/random.c: in wc_RNG_Pool_Collect2(), reject inferior-stratum generators. Daniel Pouzzner 2026-09-13 13:07:51 -05:00
  • 758cf13b50 wolfcrypt/src/random.c: in wc_RNG_DRBG_NextStirNow(), burn the stir aperture after absorbing it. Daniel Pouzzner 2026-09-13 01:23:52 -05:00
  • 8ef87b481f wolfcrypt/src/random.c: implement rng_pid_change_check(), and use it in wc_RNG_Pool_Extract(), wc_RNG_DRBG_NextSeedNow_Nonce(), and wc_RNG_GenerateBlock(), to guard against duplicate internal state. Daniel Pouzzner 2026-09-13 01:23:40 -05:00
  • 76143ceb02 wolfcrypt/src/random.c: remove frivolous rng_lock_required_check() in wc_FreeRng(); Daniel Pouzzner 2026-09-13 00:08:17 -05:00
  • bb349fe7aa wolfcrypt/src/random.c: add explanatory comment to wc_RNG_DRBG_NextSeedGenerate_local() re seed test failures. Daniel Pouzzner 2026-09-12 23:30:41 -05:00
  • 1d26b47b2c wolfcrypt/src/random.c: in wc_RNG_DRBG_NextStirNow(), add early NOT_READY_E return if reseed is due. Daniel Pouzzner 2026-09-12 22:19:08 -05:00
  • 2c02431529 linuxkm/lkcapi_sha_glue.c, wolfssl/wolfcrypt/rng_bank.h: Daniel Pouzzner 2026-09-12 22:18:48 -05:00
  • c3855604ca linuxkm: gate the RNG registry on the features it requires Daniel Pouzzner 2026-09-12 19:57:35 +00:00