1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-25 16:16:38 +03:00

Commit Graph

  • ce018ff4d4 Correct verification of cert in ESP example. Thanks to Arthur Chan for the report. Kareem 2026-08-24 15:57:06 -07:00
  • 464577912a Merge pull request #11285 from danielinux/ocsp-free-fix philljj 2026-08-26 13:06:19 -05:00
  • 996591340b Merge pull request #11195 from holtrop-wolfssl/zd22329 philljj 2026-08-26 12:50:49 -05:00
  • 5d1903ff34 dtls13: support session export and import dtls13_session Marco Oliverio 2026-08-26 15:29:10 +02:00
  • a09ec82b9b tls13: factor the record key expansion out of DeriveTls13Keys Marco Oliverio 2026-08-26 15:28:38 +02:00
  • 3f9f17e010 Merge pull request #11281 from danielinux/fenrir-stsafe-2026-08-26 philljj 2026-08-26 11:01:41 -05:00
  • e1167e22f7 Xilinx Versal Gen2 ASU: support the Vitis 2026.1 xilasu client API night1rider 2026-08-25 14:56:52 -06:00
  • b94a95d00e F-8261: validate the dcp_key_slot result and roll back the channel Daniele Lacamera 2026-08-26 16:19:02 +02:00
  • f750de957e fix TLS test guard for WOLFSSL_X25519_NO_MASK_PEER builds Hideki Miyazaki 2026-08-26 10:17:48 -04:00
  • e2e8fa8d29 F-11244: make dcp_free total so a failed lock cannot orphan a reservation Daniele Lacamera 2026-08-26 16:17:32 +02:00
  • 185bda6443 fix overflow in wc_ecc_sign_hash_hw Hideki Miyazaki 2026-08-26 09:22:39 -04:00
  • e835db416b F-11239: report DCP channel pool exhaustion as WC_HW_WAIT_E Daniele Lacamera 2026-08-26 14:48:00 +02:00
  • c29a49922d Free every OCSP chain request, not just the first csr->requests Daniele Lacamera 2026-08-26 14:30:50 +02:00
  • bc2350b57b Fix C++ guards in SE050 header Eric Blankenhorn 2026-08-26 07:28:34 -05:00
  • 74a31cfcd3 fix peer key masking Hideki Miyazaki 2026-08-26 08:09:53 -04:00
  • 224f120da4 F-11244: release the reserved channel without the lock on lock failure Daniele Lacamera 2026-08-26 14:08:16 +02:00
  • 3ded564066 F-11239: clear the channel record when a DCP hash context is freed Daniele Lacamera 2026-08-26 13:10:49 +02:00
  • 4d32402286 F-11239: validate channel ownership before releasing a DCP channel Daniele Lacamera 2026-08-26 13:10:17 +02:00
  • f17e95abf9 F-11239: dispose of the destination's channel in the DCP hash copy Daniele Lacamera 2026-08-26 11:30:35 +02:00
  • ab4a186db9 F-11239: zero the probe handle and check DCP_HASH_Init in the ctx probe Daniele Lacamera 2026-08-26 11:29:29 +02:00
  • 23afb82e0c F-11244: make the DCP hash init failure cleanup lock-safe Daniele Lacamera 2026-08-26 11:29:05 +02:00
  • 65cce3b489 F-8261: expand the single-threaded dcp_unlock to (void)0 Daniele Lacamera 2026-08-26 11:28:10 +02:00
  • 5f25d46345 CI: pin STSAFE-A120 simulators ref to the merged F-11238 test Daniele Lacamera 2026-08-26 10:49:03 +02:00
  • f521983149 F-11239: give copied DCP hash contexts their own channel Daniele Lacamera 2026-08-26 10:28:36 +02:00
  • d67eb0d5ff F-11244: release the reserved DCP channel when hash init fails Daniele Lacamera 2026-08-26 10:16:13 +02:00
  • 5a8127d2a6 F-8261: check DCP lock results before touching shared state Daniele Lacamera 2026-08-26 10:15:48 +02:00
  • f4ad17ce81 F-7127: restructure dcp_key_slot as mutually exclusive branches Daniele Lacamera 2026-08-26 10:13:32 +02:00
  • 123674c013 ChaCha20 ARM32/Thumb2 BE asm: remove start of support Sean Parkinson 2026-08-26 09:01:43 +10:00
  • 751c0a4a98 SP ARMv3 assembly: fix for Montogmery Multiply Sean Parkinson 2026-08-26 08:33:57 +10:00
  • 2b2591f859 IoT-Safe: widen the lock to cover multi-transaction operations Daniele Lacamera 2026-08-26 09:40:50 +02:00
  • 5c6f5a5a9f F-11238: validate arguments before use in the A100 verify path Daniele Lacamera 2026-08-26 09:26:24 +02:00
  • 2b1d12f871 F-11238: clamp hashSz to key_sz before the int conversion Daniele Lacamera 2026-08-26 09:26:08 +02:00
  • 1740c3bcb1 CI: bump STSAFE-A120 simulators ref for the F-11238 regression test Daniele Lacamera 2026-08-26 09:08:18 +02:00
  • 68888746b7 F-11238: normalize the digest to field size in STSAFE ECDSA verify Daniele Lacamera 2026-08-26 09:06:54 +02:00
  • 62a5c4de4d IoT-Safe: make port initialization itself thread-safe by using static mutex Daniele Lacamera 2026-08-26 08:37:53 +02:00
  • cfe6a656c7 addressed copilot review Daniele Lacamera 2026-08-24 13:42:45 +02:00
  • fa610dc3cb addressed copilot review Daniele Lacamera 2026-08-24 12:21:31 +02:00
  • 130d4996b6 IoT-Safe: serialize APDU transactions with a port mutex Daniele Lacamera 2026-08-24 10:33:44 +02:00
  • 63b02a1586 CI: assert test-lib exit status in the wolfBoot host-smoke job copilot/research-task-build-uml-linux-analysis David Garske 2026-08-25 15:51:46 -07:00
  • 07ccf09e8c fixed unchecked buffer overrun when Looking up addr Aidan Keefe 2026-08-25 12:29:24 -06:00
  • b83f5d60f3 Merge pull request #11216 from dgarske/rng_seed_device philljj 2026-08-25 14:20:57 -05:00
  • 7afd4a2c68 Merge pull request #11236 from JacobBarthelmeh/netscape philljj 2026-08-25 14:12:11 -05:00
  • a417ee3a4c Merge pull request #11038 from gasbytes/dupcrl_entry-copies-fix philljj 2026-08-25 13:36:51 -05:00
  • fcb31dea21 random: add WC_RNG_SEED_DEVICE to seed from a nominated device David Garske 2026-08-19 21:32:58 -07:00
  • 514af438d7 Merge pull request #11156 from gasbytes/x509_store_ctx_verify_cb_fix philljj 2026-08-25 09:38:08 -05:00
  • 53647f9dcd Deep copy revoked cert entry extensions in DupCRL_Entry() when CRL_STATIC_REVOKED_LIST and OPENSSL_EXTRA are enabled, and add a regression test for the X509_CRL_dup path. Reda Chouk 2026-08-03 16:34:46 +02:00
  • 33824d8053 Merge pull request #11006 from rlm2002/coverity philljj 2026-08-25 08:46:03 -05:00
  • 98176d9380 benchmark: extends guards Marco Oliverio 2026-08-06 13:54:32 +02:00
  • 94dca6fdd4 Merge pull request #11228 from aidangarske/fenrir-fixes-9961 Sean Parkinson 2026-08-25 17:16:56 +10:00
  • feca5c4247 Merge pull request #11249 from night1rider/Expand-AES-Benchmark Sean Parkinson 2026-08-25 16:19:57 +10:00
  • 6c36c71c5f Merge pull request #11237 from holtrop-wolfssl/f-7106 Sean Parkinson 2026-08-25 16:09:06 +10:00
  • df727d6b90 Merge pull request #11233 from dgarske/ecc_blind_k_fixes Sean Parkinson 2026-08-25 16:07:06 +10:00
  • e15720e4e3 Merge pull request #11185 from embhorn/zd22296 Sean Parkinson 2026-08-25 11:07:37 +10:00
  • 2cda28008c Merge pull request #10992 from padelsbach/sm2-verify-overlap-test Sean Parkinson 2026-08-25 10:08:28 +10:00
  • 678a065f10 Merge pull request #11248 from night1rider/ASU-ECIES-Improvements JacobBarthelmeh 2026-08-24 16:42:06 -06:00
  • d851d60427 Free the Aes on every AES-OFB benchmark error path night1rider 2026-08-24 15:48:30 -06:00
  • 2d81662d6c Route the AES-CFB and AES-OFB benchmarks through the crypto callback devId night1rider 2026-08-24 15:46:32 -06:00
  • f8b140f511 Merge pull request #11204 from padelsbach/falcon-cb-free philljj 2026-08-24 16:30:18 -05:00
  • d3c63a06f6 Merge pull request #11224 from anhu/fake_alloc philljj 2026-08-24 15:15:40 -05:00
  • 69786c2f00 Add unit test coverage for wc_ecc_ctx_get_rng night1rider 2026-08-24 13:48:05 -06:00
  • cf27755f89 Merge pull request #11244 from SparkiDev/asn_template_doc philljj 2026-08-24 15:09:08 -05:00
  • f6a6030d6c Free DH buffers after negotiation (server only) Paul Adelsbach 2026-08-24 12:45:10 -07:00
  • 6d2454826f Offload ASU ECIES on NIST P-192 night1rider 2026-08-24 13:40:37 -06:00
  • db14062367 Return error code from atmel_get_random_number for unknown targets Josh Holtrop 2026-08-24 13:57:04 -04:00
  • 69e82f1f40 Use the caller's RNG for the ASU ECIES GCM nonce night1rider 2026-08-24 11:32:58 -06:00
  • ff17d489d3 Merge pull request #11209 from night1rider/curve448-callbacks JacobBarthelmeh 2026-08-24 09:50:17 -06:00
  • 74b8207b72 Merge pull request #11053 from night1rider/Xilinx-ASU-ECC-standalone JacobBarthelmeh 2026-08-24 09:46:02 -06:00
  • e8166219b5 CI: key the linuxkm bundle rebuild on the package set, not just the kernel Juliusz Sosinowicz 2026-08-24 12:12:01 +00:00
  • b9eabfbaf5 CI: make the linuxkm bundle retry helper do the 2 attempts it documents Juliusz Sosinowicz 2026-08-24 12:12:01 +00:00
  • 88e40d52df CI: give pq-all an apt budget that matches its job Juliusz Sosinowicz 2026-08-24 12:11:46 +00:00
  • bba979c79d CI: drop the apt budget overrides from three jobs with no timeout-minutes Juliusz Sosinowicz 2026-08-24 12:11:46 +00:00
  • e2866ad156 CI: bound the ccache-setup apt fallback Juliusz Sosinowicz 2026-08-24 12:11:46 +00:00
  • 3c8cdaecea CI: recover an interrupted dpkg in the open-coded apt retry loops Juliusz Sosinowicz 2026-08-24 12:11:46 +00:00
  • 2a455f0381 Address review: broaden SSL_get_cipher_list test coverage Juliusz Sosinowicz 2026-08-20 02:36:22 +00:00
  • 8cdd8e883c Address review: order the compat cipher stack highest priority first in all builds Juliusz Sosinowicz 2026-08-20 02:36:22 +00:00
  • 26267065c3 Guard SSL_get_cipher_list compat macro on feature availability Juliusz Sosinowicz 2026-08-05 10:31:08 +00:00
  • 01561c1d97 SSL_get_cipher_list: enumerate the SSL's configured cipher list Juliusz Sosinowicz 2026-07-29 14:44:21 +00:00
  • 8045f3408f SP ASM AArch64: improve performance by transposing table Sean Parkinson 2026-08-18 12:22:55 +10:00
  • 83b515524f Address review: cover the receive-epoch renegotiation guard Juliusz Sosinowicz 2026-08-24 02:49:31 +00:00
  • 5a1863b2f9 Address review: guard the CID negotiation tests on TLS 1.2 Juliusz Sosinowicz 2026-08-24 02:49:17 +00:00
  • 78c2528c56 ASN Template documentation: add more content Sean Parkinson 2026-08-24 10:52:23 +10:00
  • cb138b22a2 Merge pull request #11163 from kareem-wolfssl/vanessa philljj 2026-08-22 09:56:06 -05:00
  • 43ad27b2a9 docs: drop maintainer aside from published policy docs/security-policy-reconcile Mark Atwood 2026-08-21 16:13:09 -07:00
  • 0724531794 docs: word the canonical-policy line to survive copying Mark Atwood 2026-08-21 16:11:25 -07:00
  • 51975e27a5 Guard curve448 shared secret software path on ret so the cryptocb reset is read night1rider 2026-08-20 13:53:20 -06:00
  • 5dd72727cb Fix curve448 test guards for CB_FIND and zero-check builds, cover cb zero result night1rider 2026-08-20 12:16:58 -06:00
  • 2c5d885233 Fix curve448_key_make_pub being unused under WOLF_CRYPTO_CB_ONLY_CURVE448 with key export disabled night1rider 2026-08-20 10:29:07 -06:00
  • 06abdc18e6 Only offload a key-owned X448 private scalar to that key's own device night1rider 2026-08-20 08:25:56 -06:00
  • 93d71fdda9 Address second round of review findings on curve448 cryptocb support night1rider 2026-08-20 08:15:59 -06:00
  • eb1cde51ab Address review findings on curve448 cryptocb support night1rider 2026-08-20 03:19:14 -06:00
  • 3d7f7ad4d6 Add curve448 crypto callback support night1rider 2026-08-20 01:22:57 -06:00
  • 72f749472d docs: route vulnerability reports to secure@, not Zendesk Mark Atwood 2026-08-21 15:59:57 -07:00
  • ac45965828 Merge pull request #11217 from night1rider/ShakeCB-Issue philljj 2026-08-21 17:58:06 -05:00
  • f8c3f96f08 docs: make SECURITY-POLICY.md the only disclosure policy Mark Atwood 2026-08-21 15:41:09 -07:00
  • 589b9eb4bf Free the unexpected return in test_wolfSSL_load_client_CA_file Ruby Martin 2026-08-21 16:50:11 -06:00
  • 97a52ed9f6 Merge pull request #11235 from padelsbach/crypto-cb-ci-timeout philljj 2026-08-21 16:55:34 -05:00
  • ca940c34ad add better sanity checks on input arguments JacobBarthelmeh 2026-08-14 11:08:08 -06:00
  • 583f214057 Merge pull request #11234 from aidankeefe2022/fenrir-10721 philljj 2026-08-21 14:53:46 -05:00
  • 4eb192d4c8 wolfssl_local_MatchBaseName: fix 1-byte read out of bounds looking for "@" Josh Holtrop 2026-08-21 15:47:05 -04:00
  • 986066c856 Restrict duplicate netscape certificate type extensions f-10626 JacobBarthelmeh 2026-08-21 13:19:09 -06:00