1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

Commit Graph

  • ec905b7ec8 Correct reassembly logic in sniffer and add test. Thanks to 007bsd for the report. Kareem 2026-08-19 15:40:26 -07:00
  • ea6e1ec252 Code review feedback: Avoid underflow in ticket time comparison. Ensure test_suite_contains is built for the SHA256_SHA256 test. Kareem 2026-09-11 11:50:12 -07:00
  • 01661f08f8 Code review feedback Kareem 2026-08-27 16:49:43 -07:00
  • bd2e8d9e79 Add missing NULL suite conf files. Kareem 2026-08-11 14:15:37 -07:00
  • 46854d9491 Code review feedback: Added tests Restored NULL cipher suite tests into new conf files Restored previous eNULL handling Fix session timeout check and clear ticket when not resuming Document WOLFSSL_TLS13_NULL_CIPHER_IN_DEFAULT Kareem 2026-08-11 13:21:06 -07:00
  • baf82e2f06 Add WOLFSSL_TLS13_NULL_CIPHER_IN_DEFAULT to known macros. Kareem 2026-07-23 16:14:54 -07:00
  • 3ad1a95217 Avoid using preprocessor gate inside of a macro. Kareem 2026-07-22 16:06:56 -07:00
  • fdeb2ea302 Avoid advertising NULL cipher suites by default unless WOLFSSL_TLS13_NULL_CIPHER_IN_DEFAULT is defined. Thanks to Ben Smyth for the report. Kareem 2026-07-22 13:47:29 -07:00
  • 335114d16a Code review feedback Kareem 2026-06-15 10:08:13 -07:00
  • dd27f119a7 Skip session timeout check if bornOn is 0 or if a secret callback is set. This should fix hostap EAP-FAST failures. Kareem 2026-06-08 10:38:20 -07:00
  • 1fade8d2f7 Code review feedback: set idSz = 0 for both cases. Kareem 2026-06-04 15:58:58 -07:00
  • 4705b72041 Check for ticket expiration before using a ticket for resumption. Thanks to Ben Smyth for the report. Kareem 2026-06-03 17:29:30 -07:00
  • a32d92e9eb Prevent exporting keying material until the handshake is complete. Thanks to Ben Smyth for the report. Kareem 2026-06-03 17:27:54 -07:00
  • 184e167811 ECIES: test the WOLF_CRYPTO_CB_FIND path and build it in CI A new API test registers a finder and checks that a context with no device id is routed to the device by the finder and not routed once the finder is gone, and the os-check matrix gains an ECIES entry with the finder on so the test runs. night1rider 2026-09-15 11:59:32 -06:00
  • 793c37ee59 Remove attempted musl detection. Add opt-in via HAVE_ACCEPT4 macro for user_settings.h libcs that are not detected. Kareem 2026-09-15 10:41:39 -07:00
  • 9a18633548 Detect accept4 in configure/CMake. Enable accept4 for musl. Musl has no dedicated macro so it is detected as non glibc/bionic/uclibc on Linux/Android. Kareem 2026-09-14 11:47:59 -07:00
  • 09b739ab93 Don't use accept4 on older glibc, uclibc and Android (bionic) versions that don't support it. Fall back to accept instead. Kareem 2026-09-14 10:54:09 -07:00
  • 5a59a56e36 Merge pull request #11269 from aidankeefe2022/fenrir-10736 JacobBarthelmeh 2026-09-15 10:42:20 -06:00
  • 25f31a557d Fix from review Eric Blankenhorn 2026-09-15 11:42:19 -05:00
  • 2ed567c29c ECIES: take the device id from the context instead of the ECC key A context starts in software and only wc_ecc_ctx_set_dev_id() sends the ECIES callback and the KDF, AES and HMAC steps to a device; tests, benchmark, docs and the os-check matrix are updated to match. night1rider 2026-09-15 10:18:02 -06:00
  • 1b6326271d Merge pull request #11461 from philljj/fix_test_ssl_ext JacobBarthelmeh 2026-09-15 10:13:31 -06:00
  • ecc2f75626 Merge pull request #11432 from Frauschi/rsa-ca-pubkey-static-memory JacobBarthelmeh 2026-09-15 10:09:31 -06:00
  • 34292f741c Merge pull request #11256 from julek-wolfssl/x509-auth-level-ssl-tlsext-debug-cb JacobBarthelmeh 2026-09-15 10:09:10 -06:00
  • 6fac3806ce Merge pull request #11186 from embhorn/zd22288 JacobBarthelmeh 2026-09-15 09:59:39 -06:00
  • 4a9d559022 Merge pull request #11404 from SparkiDev/asn_templ_depth_fix JacobBarthelmeh 2026-09-15 09:31:59 -06:00
  • 25d8e9ee0b Merge pull request #11377 from LinuxJedi/se05x-api-improvements JacobBarthelmeh 2026-09-15 09:17:23 -06:00
  • 5c9de0f979 Fix from review Eric Blankenhorn 2026-09-15 10:12:54 -05:00
  • 2efbed81c4 Fix from review Eric Blankenhorn 2026-09-10 15:28:25 -05:00
  • aefd3d54c1 Fix non-minimal DER encoding of caller-supplied certificate serials Eric Blankenhorn 2026-09-10 13:35:51 -05:00
  • 0a012ae638 test_ssl_ext: fix typo. jordan 2026-09-15 09:16:10 -05:00
  • fb7208ab4e Add no-malloc CI coverage for the compatibility layer Tobias Frauenschläger 2026-09-15 15:27:48 +02:00
  • cb049aebcb Set the global heap hint in the static memory examples Tobias Frauenschläger 2026-09-14 20:06:04 +02:00
  • 00b8e2e5a9 Size the wolfCrypt test pool for no-malloc OPENSSL_EXTRA builds Tobias Frauenschläger 2026-09-14 20:05:56 +02:00
  • 7970cd3655 test_ssl_ext: fix and cleanup define guards. jordan 2026-09-15 08:05:43 -05:00
  • 19d60752d9 test_ssl_ext: use NO_CLIENT_CACHE define guard. jordan 2026-09-15 07:32:36 -05:00
  • da9540d320 Copy the RSA public key onto the CA Signer in static-memory builds Tobias Frauenschläger 2026-09-14 20:05:47 +02:00
  • dd5ab54af1 Address review: drop the function-pointer cast from SSL_set_tlsext_debug_callback Juliusz Sosinowicz 2026-09-15 05:52:12 +00:00
  • 569ae5f35c Address review: bound 0-RTT acceptance and reset ticketCacheHit per hello Juliusz Sosinowicz 2026-09-08 05:29:32 +00:00
  • b842af9a6c Fix CI: scope the per-ticket session ID to 0-RTT capable sessions Juliusz Sosinowicz 2026-08-27 02:35:39 +00:00
  • dbf311c6cc TLS 1.3: gate 0-RTT on a session cache hit Juliusz Sosinowicz 2026-08-26 21:51:10 +00:00
  • 3278128661 ASN template depth fix Sean Parkinson 2026-09-09 09:39:01 +10:00
  • 9f78becb1d Fix resuming EMS ticket when EMS is disabled. Ticket is now rejected as expected. Kareem 2026-09-14 17:40:00 -07:00
  • b8f3617325 Enforce EMS requirement for secret callback as well. Add test for this case, and for --enable-all + HAVE_SECRET_CALLBACK. Kareem 2026-09-14 14:23:31 -07:00
  • eec8b18896 EMS: Fix test failure under WOLFSSL_BLIND_PRIVATE_KEY. Kareem 2026-08-28 12:38:22 -07:00
  • a219b2f2be Fix test failures due to not re-arming DH params Kareem 2026-08-28 11:19:58 -07:00
  • b0acc953d8 EMS code review feedback: Ensure wolfSSL_clear resets EMS state Prevent EMS APIs from being called after handshake Return on EMS error in wolfSSL_SetSession Update tests Kareem 2026-08-27 16:36:39 -07:00
  • b960ffdf93 Code review feedback Kareem 2026-08-26 14:57:35 -07:00
  • 40920ef007 Fix failing resume test Kareem 2026-08-18 15:29:20 -07:00
  • a7d5b0db09 EMS code review feedback: Disable peerAuthGood when rejecting ticket due to EMS being disabled Ensure that if EMS is disabled, sessions with EMS are not used Add client resumption test and extend server resumption test to optionally use session tickets Kareem 2026-08-14 16:40:43 -07:00
  • c26842949d EMS code review feedback: Check as early in the connection as possible Abort resumption rather than fully aborting connection when EMS is disabled Make version check around haveEMS consistent Clear premaster secret when EMS check fails Update documentation Kareem 2026-08-10 16:18:36 -07:00
  • 15bd0bb841 Code review feedback Kareem 2026-08-07 13:55:42 -07:00
  • 93ec1aedbf Code review feedback Kareem 2026-08-06 17:03:49 -07:00
  • 636cb34bd7 Code review feedback Kareem 2026-07-22 16:28:50 -07:00
  • fd1baae78a Add Enable/DisableNormalMasterSecret APIs to enforce EMS requirement at runtime. Disable server EMS when DisableExtendedMasterSecret is called, not just client EMS. Kareem 2026-07-22 15:55:24 -07:00
  • 5b9f1793d0 Merge pull request #11387 from dgarske/log_verbose_tier JacobBarthelmeh 2026-09-14 16:44:44 -06:00
  • e8213e3c2b Merge pull request #11410 from miyazakh/f12986_hash2mgf JacobBarthelmeh 2026-09-14 16:32:16 -06:00
  • 5d17d603e2 Merge pull request #11178 from julek-wolfssl/fix/rfc9846-session-ticket-compliance JacobBarthelmeh 2026-09-14 16:03:40 -06:00
  • ec5fdb7fe5 Merge pull request #11278 from night1rider/CryptoCB-RegistrationOrder JacobBarthelmeh 2026-09-14 15:40:55 -06:00
  • b8d44ecc65 CI: resolve the ghcr .deb bundle against its own apt index (#11408) Juliusz Sosinowicz 2026-09-14 23:36:21 +02:00
  • 408e49f418 Fix no-pk test issue Paul Adelsbach 2026-09-14 14:28:40 -07:00
  • b6fd66987d Merge pull request #11306 from Frauschi/erlang-interop JacobBarthelmeh 2026-09-14 15:10:07 -06:00
  • 1e2d34c343 Merge pull request #11421 from SparkiDev/cert_name_subject_fix JacobBarthelmeh 2026-09-14 15:09:21 -06:00
  • c9cca6bc9f PR feedback: fix mask, address no-min scenario Paul Adelsbach 2026-09-14 13:08:29 -07:00
  • 8e049bd209 Fix max version setting in wolfSSL_SetVersion Paul Adelsbach 2026-09-14 12:53:51 -07:00
  • 04a9d91a7f ZD-22438: fix TLS version checks Paul Adelsbach 2026-09-14 12:06:16 -07:00
  • 30c1c7fdb6 Merge pull request #11355 from danielinux/mcdc-test-coverage JacobBarthelmeh 2026-09-14 11:50:17 -06:00
  • f805041d21 Merge pull request #11429 from julek-wolfssl/fix/forcezero-fence JacobBarthelmeh 2026-09-14 10:49:20 -06:00
  • 5b5ab577fd Merge pull request #11451 from philljj/bsdkm_fixes JacobBarthelmeh 2026-09-14 10:23:00 -06:00
  • 9ff9e20869 Merge pull request #11253 from julek-wolfssl/hrr-no-common-group JacobBarthelmeh 2026-09-14 10:00:35 -06:00
  • 80472790e3 tests: compare forgery packets field by field, not as raw memory Daniele Lacamera 2026-09-11 16:59:32 +02:00
  • d64c1d295a tests: restore the lowercase %u in the xmss white-box trace Daniele Lacamera 2026-09-11 11:09:06 +02:00
  • 6a73553789 tests: skip the client-to-server wire sweep on async builds Daniele Lacamera 2026-09-11 00:27:59 +02:00
  • f66acf1064 tests: free the wire-mangle fixtures, and give every method a clean baseline Daniele Lacamera 2026-09-10 22:49:09 +02:00
  • 19de30b270 tests: mangle the client's wire bytes too, and check handshake outcomes Daniele Lacamera 2026-09-10 21:24:24 +02:00
  • 58a6ff187b tests: guard the CRL I/O mock on NO_FILESYSTEM and PEM support Daniele Lacamera 2026-09-10 21:24:24 +02:00
  • 2b1eee58fe tests: assert wire mangling per method, and drive CRL with a CDP cert Daniele Lacamera 2026-09-10 20:45:38 +02:00
  • 03b8a1c9d3 tests: address Fenrir review findings on PR 11355 Daniele Lacamera 2026-09-10 19:28:55 +02:00
  • b572532ffd tests: guard wolfSSL_get_curve_name, and declare WOLFSSL_MCDC_ALLOC_SWEEP Daniele Lacamera 2026-09-09 15:43:54 +02:00
  • b0c21e9e5b tests: uppercase numeric literal suffixes, and make the allocation sweep opt-in Daniele Lacamera 2026-09-09 14:14:46 +02:00
  • 44bed851a0 tests: ship the two new white-boxes, and guard a dereference after a failed Expect Daniele Lacamera 2026-09-09 11:16:11 +02:00
  • e8cfd901ba tests: pin the session-cache ring-start conditions Daniele Lacamera 2026-09-09 08:45:41 +02:00
  • 156b7db33c tests: check API availability guards before the build does Daniele Lacamera 2026-09-09 08:31:53 +02:00
  • 6d863b9221 tests: run the allocation sweep on small-stack builds too Daniele Lacamera 2026-09-09 08:26:17 +02:00
  • 8536b45391 tests: compile the CRL mock only where its caller is Daniele Lacamera 2026-09-08 18:14:03 +02:00
  • a267320762 tests: record the certman white-box as smoke-covered Daniele Lacamera 2026-09-08 17:52:09 +02:00
  • b112f6efd6 tests: restore the CRL mock's counters after the rebase move Daniele Lacamera 2026-09-08 17:17:10 +02:00
  • 4b0c7f1d75 tests: guard the API-availability macros the no-TLS builds need Daniele Lacamera 2026-09-07 13:11:12 +02:00
  • bbbc872ef1 tests: build the CA bucket GetCAByName's second operand needs Daniele Lacamera 2026-09-07 06:58:52 +02:00
  • 4fd2017bf4 tests: cover the LMS and XMSS bounds checks the rebase brought in Daniele Lacamera 2026-09-07 01:22:39 +02:00
  • 17cd3ed715 tests: fix the build guards the narrow CI configurations broke Daniele Lacamera 2026-09-04 18:10:23 +02:00
  • c4bab8d292 tests: name the renegotiation_info extension and widen two skip messages Daniele Lacamera 2026-09-04 16:43:28 +02:00
  • 54b4e3b5eb tests: fail one crypto operation on demand to reach the verify guards Daniele Lacamera 2026-09-04 16:03:03 +02:00
  • b3f2a0c6da tests: drive the OCSP cache lookup and mock the responder replies Daniele Lacamera 2026-09-04 15:36:20 +02:00
  • 8d9b25b0e1 tests: fake the revocation back ends to drive the leaf-revocation decisions Daniele Lacamera 2026-09-04 15:24:34 +02:00
  • 94ed15e27b tests: white-box the certificate-status and send-path error decisions Daniele Lacamera 2026-09-04 15:16:42 +02:00
  • bc5c9b1940 tests: white-box the certificate error classification in internal.c Daniele Lacamera 2026-09-04 14:30:53 +02:00
  • 605b451d2a tests: widen the allocation-failure workload, and record the small-stack cause Daniele Lacamera 2026-09-04 14:27:09 +02:00
  • a1c8b4b0cd tests: DTLS API and X509 accessor argument guards Daniele Lacamera 2026-09-04 10:16:14 +02:00
  • 17e2699d8d tests: session lifecycle guards, clearing the post-rebase ssl_sess.c regression Daniele Lacamera 2026-09-04 09:21:18 +02:00
  • adcac31f57 tests: public-API argument NULLs, one call per named operand Daniele Lacamera 2026-09-04 09:16:09 +02:00