1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • bcb8d1f0ba rng_bank: free *leaf when the pre-v7 RBGC constructors fail Daniel Pouzzner 2026-09-12 19:57:35 +00:00
  • 235d20291d rng_bank: bound n_rngs against allocation-size wrap Daniel Pouzzner 2026-09-12 19:57:35 +00:00
  • dd800e0dd6 random: route an _InitRng() mutex failure through the CSP cleanup Daniel Pouzzner 2026-09-12 19:57:35 +00:00
  • 83f63fc077 random: reject a NULL nonce with a nonzero length in Reseed_Nonce Daniel Pouzzner 2026-09-12 19:57:35 +00:00
  • 306eaea22f test: free the leaf RNG from the shared teardown path Daniel Pouzzner 2026-09-12 19:57:35 +00:00
  • e604292132 test: pin the stir's effect on the reseed counter Daniel Pouzzner 2026-09-12 19:57:35 +00:00
  • 8d84c4e0fb test: validate the NextSeedGenerate() result before overwriting it Daniel Pouzzner 2026-09-12 19:57:35 +00:00
  • 21b1531606 rng_bank: move backward-compat implementations out of rng_bank.h Daniel Pouzzner 2026-09-12 19:16:04 +00:00
  • 945c33a857 random/rng_bank/linuxkm: add nonce and personalization-string plumbing Daniel Pouzzner 2026-09-12 18:16:04 +00:00
  • f0ee19659b random: health-test caller-supplied recovery seed Daniel Pouzzner 2026-09-12 17:16:04 +00:00
  • 46fc737cd9 random/rng_bank: fix a lost re-invalidation across reseed Daniel Pouzzner 2026-09-12 16:16:04 +00:00
  • 30ee4c100d random: partition the RBGC stratum space for user-supplied seed Daniel Pouzzner 2026-09-12 15:16:04 +00:00
  • 395402e449 rng_bank: harden wc_rng_bank_seed_range() Daniel Pouzzner 2026-09-12 14:16:04 +00:00
  • 4f905ecbbb test: enable the RBGC tests on the pre-v7 FIPS boundary Daniel Pouzzner 2026-09-12 13:16:04 +00:00
  • ea75ee7d3d random: treat a NextSeed consumption failure as a DRBG failure Daniel Pouzzner 2026-09-12 12:16:04 +00:00
  • b50737a82e random: fix misattributed diagnostics and stale comment wording Daniel Pouzzner 2026-09-12 11:16:04 +00:00
  • e035f6dc1e random: correct HAVE_HASHDRBG/NO_SHA256 guards in _InitRng() Daniel Pouzzner 2026-09-12 10:16:04 +00:00
  • 4dafa01992 test: correct FIPS gating of hkdf_cryptocb_async_test() Daniel Pouzzner 2026-09-12 09:16:04 +00:00
  • 0d9e3c15ed RNG extras: rename "uncredited [re]seed" in all its spellings to "stir", appropriately spelled, for clarity and consistency. Stirring is implemented by Hash_DRBG_StirGenerate() an an SP 800-90A Rev. 1 10.1.1.4 generate, with the stir material as additional_input and no output requested. Daniel Pouzzner 2026-09-11 13:39:28 -05:00
  • a3f9a12903 wolfcrypt/src/random.c, wolfcrypt/test/test.c: Daniel Pouzzner 2026-09-11 12:42:52 -05:00
  • 2e4bf5f3f0 RNG-extras fixes from CI results: Daniel Pouzzner 2026-09-10 22:50:21 -05:00
  • 8a1d890f1d wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h: implement producer mutex on the credited nextSeed aperture, with assiduous observation of invalidation, making provenance guarantees firm. Producers claim by CAS (PRODUCING); invalidation repaints in-flight claims PURGED, so pre-event material never publishes. Contention and purge-discard return traced BUSY_E; seed buffers are zeroized only at consumption, under CONSUMING. Daniel Pouzzner 2026-09-10 18:06:48 -05:00
  • a61e91f261 doc/dox_comments/header_files/random.h: clean up duplicated clauses in wc_RNG_lock_get() docs. Daniel Pouzzner 2026-09-10 17:57:18 -05:00
  • 2266e7d1a6 .github/workflows/codespell.yml: add "checkin" to ignore_words_list. Daniel Pouzzner 2026-09-10 17:55:06 -05:00
  • 4700ddbbf2 add documentation for RNG expansion Daniel Pouzzner 2026-09-10 15:46:52 -05:00
  • ba5f45ffb3 linuxkm/lkcapi_sha_glue.c, wolfcrypt/src/rng_bank.c, wolfcrypt/test/test.c: in linuxkm_put_drbg((), properly ignore NEEDS_RECOVERY_E from wc_rng_bank_inst_checkin(); in wc_rng_bank_recover_inst(), properly handle WC_RNG_LOCK_ENTROPY_INVALIDATED; in rng_entropy_invalidate_test(), test recovery after invalidation. Daniel Pouzzner 2026-09-10 15:46:25 -05:00
  • 026d71eb6e wolfcrypt/src/random.c: fix overlong lines. Daniel Pouzzner 2026-09-10 15:36:43 -05:00
  • f085128602 linuxkm/lkcapi_sha_glue.c: fix overlong lines. Daniel Pouzzner 2026-09-10 15:36:05 -05:00
  • 6f0e2b17d0 wolfcrypt/src/rng_bank.c: fix overlong lines. Daniel Pouzzner 2026-09-10 14:36:50 -05:00
  • 4f1cc1e017 wolfcrypt/src/random.c, wolfcrypt/test/test.c: in wc_RNG_DRBG_ReseedRBGC_local() and wc_RNG_DRBG_NextSeedGenerate_local(), tolerate reseed by an RBGC root provided its stratum is less than the child's stratum (no stratum downgrade allowed), unless defined(WC_RNG_NO_RBGC_RESEED). Uncredited reseeds by wc_RNG_DRBG_ReseedRBGC_local() are now permitted unconditionally. Daniel Pouzzner 2026-09-10 14:09:54 -05:00
  • 3183c73472 linuxkm/lkcapi_glue.c, linuxkm/lkcapi_sha_glue.c: convert sysfs nodes from struct kobj_attribute to struct module_attribute, matching the module_sysfs_ops dispatch on THIS_MODULE->mkobj.kobj, for compatibility with CONFIG_CFI_CLANG (kCFI) kernels. Daniel Pouzzner 2026-09-09 23:25:34 -05:00
  • 4f8c8cc412 linuxkm/lkcapi_sha_glue.c: add WC_RNG_STAT_FMT to accommodate long long wc_rng_debug_counter_t (e.g. arm32); Daniel Pouzzner 2026-09-09 20:13:44 -05:00
  • 6c067bb867 linuxkm/include.am: add linuxkm/patches/7.3/WOLFSSL_LINUXKM_HAVE_GET_RANDOM_CALLBACKS-7v3.patch; Daniel Pouzzner 2026-09-09 16:59:23 -05:00
  • 3fa61e2151 wolfcrypt/src/random.c, wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/random.h, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c: fixes for !HAVE_HASHDRBG. Daniel Pouzzner 2026-09-09 15:04:29 -05:00
  • 7f9f4dd872 linuxkm/lkcapi_sha_glue.c: Daniel Pouzzner 2026-09-09 13:50:58 -05:00
  • a975de00b5 wolfcrypt/src/random.c: in wc_RNG_DRBG_NextSeedGenerate_local(), add missing const to nonce arg; Daniel Pouzzner 2026-09-09 00:01:15 -05:00
  • a8911b10d9 wolfcrypt/test/test.c: add FIPS gate for rng_entropy_invalidate_test(); wolfcrypt/src/rng_bank.c: in rng_bank_spawn(), add missing feature-sensing gate for WC_RNG_INIT_FLAGS_RECOVER_AND_PROMOTE_FROM_NEXT_SEED. Daniel Pouzzner 2026-09-08 23:28:16 -05:00
  • adc551c14e .wolfssl_known_macro_extras: add CONFIG_ACPI and CONFIG_PM_SLEEP. Daniel Pouzzner 2026-09-08 22:27:30 -05:00
  • f7e9a22bdb wolfssl/wolfcrypt/rng_bank.h: fix collision in WC_RNG_BANK_FLAG_* allocations. Daniel Pouzzner 2026-09-08 22:12:00 -05:00
  • 7badfed886 linuxkm/lkcapi_sha_glue.c, linuxkm/lkcapi_glue.c, linuxkm/linuxkm_wc_port.h: invalidate RNG state on VM fork/resume: Daniel Pouzzner 2026-09-09 05:20:34 +00:00
  • b40a76a2ea linuxkm/patches/7.3/WOLFSSL_LINUXKM_HAVE_GET_RANDOM_CALLBACKS-7v3.patch, linuxkm/lkcapi_sha_glue.c: add the get_random callback kernel patch and wire the harvest to the daemon root: Daniel Pouzzner 2026-09-09 05:20:34 +00:00
  • 580c71e8c0 linuxkm/lkcapi_sha_glue.c, .wolfssl_known_macro_extras: rework the DRBG glue onto the rng_bank facility, with an in-module entropy daemon: Daniel Pouzzner 2026-09-09 05:20:22 +00:00
  • 553822dfbe wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfssl/wolfcrypt/settings.h, wolfcrypt/test/test.c: add opt-in RNG debug statistics: Daniel Pouzzner 2026-09-09 05:17:12 +00:00
  • bd15bfd1e2 wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c: add bank daemon registration and the default bank: Daniel Pouzzner 2026-09-09 05:13:35 +00:00
  • 7ba78036d6 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/test/test.c: add the uncredited-nextseed stir facility: Daniel Pouzzner 2026-09-09 05:11:05 +00:00
  • 6341d921cf wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c: add entropy invalidation and recovery admission: Daniel Pouzzner 2026-09-09 05:08:35 +00:00
  • e5e1484540 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/test/test.c: add the per-instance random pool: Daniel Pouzzner 2026-09-09 05:05:57 +00:00
  • 7bca2d66f6 wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c: generalize SP 800-90C RBG chains from a leaf tag to strata: Daniel Pouzzner 2026-09-09 05:03:21 +00:00
  • 2237e5e1c1 wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c: migrate bank instance locking onto the WC_RNG lock machine, and add prediction-resistance checkout: Daniel Pouzzner 2026-09-09 05:00:30 +00:00
  • 39f508b89a wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/src/error.c, wolfssl/wolfcrypt/error-crypt.h: add the WC_RNG instance lock machine: Daniel Pouzzner 2026-09-09 04:58:08 +00:00
  • 6a04d7f857 wolfcrypt/src/random.c and wolfssl/wolfcrypt/random.h: unify DRBG reseed plumbing and make entropy crediting explicit: Daniel Pouzzner 2026-09-09 04:54:50 +00:00
  • 8e5ef6aeaf wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfssl/wolfcrypt/settings.h, wolfssl/wolfcrypt/wc_port.h, .wolfssl_known_macro_extras: portability and correctness fixes for the RNG: Daniel Pouzzner 2026-09-09 04:50:58 +00:00
  • 8054f3e5d5 wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h, wolfcrypt/test/test.c: Daniel Pouzzner 2026-08-26 14:40:03 -05:00
  • 65084f56da wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/test/test.c, wolfcrypt/test/test.h: add seed banking facility: Daniel Pouzzner 2026-08-26 14:24:30 -05:00
  • 87af605c2f wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h, wolfcrypt/test/test.c, wolfcrypt/test/test.h: add SP 800-90C RBG chain (RBGC) APIs: wc_InitRngRBGC(), wc_InitRngNonceRBGC(), wc_InitRngRBGC_New(), wc_InitRngNonceRBGC_New(), wc_RNG_DRBG_ReseedRBGC(), and read accessor wc_RNG_DRBG_IsRBGCLeaf(). Daniel Pouzzner 2026-08-25 10:05:55 -05:00
  • cba2551278 linuxkm/lkcapi_sha_glue.c: in wc_linuxkm_drbg_generate()'s reseed and reinit brackets, release and re-establish the scheduling locks per-level -- an affinity-locked checkout with WC_RNG_BANK_FLAG_NO_VECTOR_OPS (from the caller's flags or bank-wide bank->flags) holds BOTH the affinity save and the vector-ops inhibit, and the single flavor-sniffing release only popped the innermost level, while the re-establishment failure arm cleared both lock bits including the never-released affinity hold, leaving checkin unable to unwind it (leaked bh-off). Release now mirrors wc_rng_bank_inst_checkin() (innermost first), re-establishment mirrors wc_rng_bank_checkout() (acquisition order), and each level's failure clears only its own bit. (identified in 20260824 review batch) Daniel Pouzzner 2026-08-24 17:39:36 -05:00
  • 542697d491 wolfcrypt/src/{rsa,ecc,curve25519}.c, wolfssl/wolfcrypt/{rsa,ecc,curve25519}.h: add wc_RsaClearRNG(), wc_ecc_clear_rng(), wc_curve25519_clear_rng(). Daniel Pouzzner 2026-08-24 17:22:46 -05:00
  • 2f7bb1de9c linuxkm/lkcapi_sha_glue.c: fail closed on userspace randomness, and log panic-adjacent, when the FIPS RNG cannot serve (WOLFSSL_LINUXKM_GET_RANDOM_NO_FALLTHROUGH) Daniel Pouzzner 2026-08-24 17:21:14 -05:00
  • a2cc195533 linuxkm/lkcapi_sha_glue.c: use the FIPS DRBG services; map kernel-supplied seed material as uncredited, per mainline crypto/drbg.c Daniel Pouzzner 2026-08-24 17:20:49 -05:00
  • 9dd3cec1d3 wolfcrypt/src/rng_bank.c, wolfssl/wolfcrypt/rng_bank.h: access DRBG state exclusively through the new random.c services; relocate the legacy direct-access mechanism to a pre-v7-FIPS-only compat block. Daniel Pouzzner 2026-08-24 17:14:47 -05:00
  • 1a018ce08d wolfcrypt/src/random.c, wolfssl/wolfcrypt/random.h: add DRBG state accessor and reseed scheduling services Daniel Pouzzner 2026-08-24 17:13:01 -05:00
  • cd7a7d8a82 wolfcrypt/test/test.c: in random_bank_test(), hold a second instance checked out across the stale check-in probes. With the bank refcount at 1, rng_inst_matches_bank() rejected the probes with BAD_STATE_E before the WC_RNG_BANK_INST_LOCK_HELD guard in wc_rng_bank_checkin() -- the guard under test -- was reached, leaving it uncovered. With refcount >= 2 the HELD guard is the rejecting path. Daniel Pouzzner 2026-08-21 13:24:52 -05:00
  • 343c76a44f linuxkm/lkcapi_sha_glue.c: in wc__get_random_bytes(), ungate the error message on failed wc_rng_bank_default_checkout(), and rework the error message when wc_linuxkm_drbg_generate() fails. Daniel Pouzzner 2026-08-20 16:15:44 -05:00
  • 1691abd053 wolfcrypt/test/test.c: remove redundant gate in random_bank_test(). Daniel Pouzzner 2026-08-20 16:14:13 -05:00
  • b2f907fcb5 linuxkm/lkcapi_sha_glue.c: in wc_linuxkm_drbg_generate(), sample blockability into can_wait before the DRBG checkout, and gate the opportunistic reseed and the RNG_FAILURE_E reinit recovery on it -- wc_linuxkm_can_block() is false whenever the affinity lock is held (the lock callback is SAVE_VECTOR_REGISTERS_MAYBE_INHIBIT()), so the previous live-sampled guards were unsatisfiable in every reachable state and both features were dead. For each of the two blocking operations, bracket it to restore preemptibility while keeping the instance checked out: migrate_disable() (CONFIG_SMP && >= 5.11.0 -- on earlier kernels migrate_disable() is absent or maps to preempt_disable(), so migration during the operation is simply tolerated there), then RESTORE_VECTOR_REGISTERS_MAYBE_INHIBITED() keyed on the lock's _AFFINITY_LOCKED/_VEC_OPS_INH bits, then the blocking operation preemptibly (wc_rng_bank_inst_reinit()'s WC_RELAX_LONG_LOOP now sees can_block() true and actually yields), then re-establish the vector state flavor-matched (SAVE_VECTOR_REGISTERS2() for the affinity hold, DISABLE_VECTOR_REGISTERS() for the inhibit hold), then migrate_enable(). If re-establishment fails, clear the corresponding lock bits so checkin doesn't double-restore; the cleared bits also make a failed bracket a valid entry state for the subsequent one. Plain (non-atomic) accesses to drbg->lock are sound across the span: WC_RNG_BANK_INST_LOCK_HELD is invariantly held, and it is the only bit considered by contending threads. (root defect identified in 20260820 review batch; see PR discussion for why the review's proposed fix -- pre-captured blockability alone, without releasing the holds -- would have converted the dead code into sleep-in-atomic / bh-off stalls) Daniel Pouzzner 2026-08-20 14:20:50 -05:00
  • 0fb8d25dfd wolfcrypt/test/test.c: in random_bank_test(), add negative coverage for wc_rng_bank checkin and seed edge cases from the 20260820 review batch: duplicate (stale-copy) checkin through both wc_rng_bank_checkin() and wc_rng_bank_inst_checkin(), asserting BAD_STATE_E without bank mutation; seedSz == 0 no-op success for an explicit inited bank and for the default form while a default is set; and seedSz == 0 with no default bank set, asserting NO_DEFAULT_FOUND_E. Daniel Pouzzner 2026-08-20 14:19:32 -05:00
  • a65f7da039 wolfcrypt/src/rng_bank.c: * supply WC_DRBG_OK for HAVE_FIPS with FIPS_VERSION3 < 5.2.4 or == 6.0.0, for the DRBG health tests in wc_rng_bank_checkout(), wc_rng_bank_seed(), and wc_rng_bank_reseed(); * in rng_inst_matches_bank(), compare integer addresses (wc_ptr_t), and compute the mid-instance alignment check on the integer difference -- the negative tests deliberately supply fabricated pointers, for which pointer relationals and subtraction are undefined (C11 6.5.8p5 / 6.5.6p9), while integer comparisons are defined for any value. Daniel Pouzzner 2026-08-20 14:19:21 -05:00
  • bc3b2935e7 wolfcrypt/src/asn.c, wolfcrypt/src/curve25519.c, wolfcrypt/src/evp.c, wolfcrypt/src/pkcs7.c, wolfcrypt/src/pkcs12.c, wolfcrypt/src/srp.c: revert wc_InitRng_BankRef() airdrops. Daniel Pouzzner 2026-08-18 19:26:24 -05:00
  • d64cd611d4 wolfcrypt/src/rng_bank.c: additional arg validating, hardening, and improved dynamics. Daniel Pouzzner 2026-08-18 11:56:15 -05:00
  • 8ee7683269 wolfcrypt/src/error.c, wolfssl/wolfcrypt/error-crypt.h: * add NO_DEFAULT_FOUND_E "No default object registered for request type". * add missing #include <wolfssl/wolfcrypt/logging.h> in WOLFSSL_DEBUG_TRACE_ERROR_CODES path. * add __func__ to __GNUC__ WC_ERR_TRACE(). Daniel Pouzzner 2026-08-14 16:33:59 -05:00
  • bce0a0cf21 Use the full apt bundle for the Altera FCS CI so cmake is available Aidan Garske 2026-09-15 16:01:40 -07:00
  • abf85a7a38 Fix TSIP AES-GCM decrypt skipping finalFn on init/update failure Hideki Miyazaki 2026-09-16 07:46:36 +09:00
  • 804ceae116 LMS/XMSS/SLH-DSA x64 asm: SHA-256/SHA-512/SHA-3 n-way Sean Parkinson 2026-08-27 16:40:40 +10:00
  • da666a023a Add missing return code handling for mldsa_vec_expand_mask. Fixes #11454 Kareem 2026-09-15 13:52:16 -07:00
  • 0ed32f958f Merge pull request #11433 from embhorn/zd22432 JacobBarthelmeh 2026-09-15 14:51:05 -06:00
  • fad92fa095 Merge pull request #11399 from night1rider/ecies-dev-id-change JacobBarthelmeh 2026-09-15 14:31:49 -06:00
  • 7e18ed94d1 Add another bundle to allow PKCS12 test to run without ASN_BER_TO_DER defined. Disable PKCS tests when NO_SHA256 is defined. Kareem 2026-09-15 13:27:47 -07:00
  • 35233fb23e Merge pull request #10978 from kareem-wolfssl/zd21980 JacobBarthelmeh 2026-09-15 13:51:51 -06:00
  • d6ee952c4d port/st: fix the STM32 SAES DHUK wrapped-key unwrap so a wrapped blob unwraps back to its key David Garske 2026-09-15 09:15:21 -07:00
  • b238d08bb2 Register SYS_memfd_create macro for the Altera FCS port Aidan Garske 2026-09-15 12:16:46 -07:00
  • a62d4fa7bd Rework Altera FCS port for streaming, key devId and shared key objects Aidan Garske 2026-09-14 13:02:22 -07:00
  • e0424a1a0c Report bypassed re-key contamination on Altera FCS resident AES Aidan Garske 2026-08-12 13:54:16 -07:00
  • 782f7b42bb Harden Altera FCS resident AES against mode and re-key fallback gaps Aidan Garske 2026-08-12 13:26:03 -07:00
  • e7aaf6b4fb Clarify HMAC generated versus imported key protection for Altera FCS Aidan Garske 2026-08-12 12:58:30 -07:00
  • 4f018d454d Document resident versus imported AES key custody for Altera FCS Aidan Garske 2026-08-12 12:57:15 -07:00
  • 48173ba76a Add resident AES isolation tests for Altera FCS Aidan Garske 2026-08-12 12:54:13 -07:00
  • 47e0037a45 Add device-resident AES key isolation for Altera FCS SDM Aidan Garske 2026-08-12 12:23:01 -07:00
  • 4e941952f6 Fix Altera FCS cleanup abort recovery and crypto callback leaks Aidan Garske 2026-08-07 11:06:27 -07:00
  • 093bfe40b6 Keep Altera FCS key IDs in signed range Aidan Garske 2026-08-07 08:54:34 -07:00
  • 387cb2ecc4 Add Altera Agilex 5 SDM crypto offload port via libfcs Aidan Garske 2026-08-06 10:28:46 -07:00
  • 854756e768 Preserve noDegenerate state in PKCS7_VerifySignedData for bundles with certs. Kareem 2026-09-14 16:25:21 -07:00
  • e2311af477 Fix size checks in GetSafeContent. Kareem 2026-09-14 16:04:30 -07:00
  • ef1b3faecd Cap reassembly in sniffer test. Use CERT_FILETYPE for loading key file. Kareem 2026-09-15 11:28:58 -07:00
  • a9981b30ee Ensure reassembly regression test verifies reconstructed data by using overlapping segments. Kareem 2026-09-14 14:42:21 -07:00
  • a3965fa8be Code review feedback Kareem 2026-08-28 13:19:29 -07:00
  • 1563dc765d Code review feedback: Fix max MTU logic in added test Fix client and server SCTP argument. They should not be setting UDP. This was causing ./configure --enable-sctp --enable-dtls-mtu to fail on master. Kareem 2026-08-25 14:02:01 -07:00
  • 476d3d0a62 Escape error codes in added SCTP example error comparisons Kareem 2026-08-21 17:38:33 -07:00
  • 02a16bb15c Code review feedback Kareem 2026-08-19 16:23:10 -07:00
  • cbe035a85b Ensure MTU is set properly when using SCTP with DTLS. Add return code checks and fix wolfSSL_shutdown handling in SCTP examples. Kareem 2026-08-19 15:58:11 -07:00
  • 38bce9dd3f Fix handshake message size in BuildCertificateStatus and add test. This was causing issues when using OCSP stapling with secure_renegotiation and renegotiating a connection. Thanks to 007bsd for the report. Kareem 2026-08-19 15:44:10 -07:00