philljj 17302ea446 Merge pull request #11831 from rlm2002/fipsV5customSHAKEPQ ...

Add V523_NONFIPS_SHAKE dev opt-in for FIPS v5 SHAKE128/256

2026-10-22 16:54:19 -05:00

..

bio.c

Add a verbose logging tier and move the highest-volume traces onto it

2026-09-11 14:10:31 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Prevent unverified CRL from replacing a verified one in AddCRL()

2026-10-07 11:48:04 -07:00

dtls13.c

Close the remaining paths that write after close_notify

2026-10-21 12:14:01 -07:00

dtls.c

session: initialize the external cache copy flag to 1

2026-10-07 19:30:09 +09:00

include.am

Merge pull request #11831 from rlm2002/fipsV5customSHAKEPQ

2026-10-22 16:54:19 -05:00

internal.c

Merge pull request #11428 from julek-wolfssl/fix/get0-pubkey-borrowed

2026-10-22 11:22:30 -05:00

keys.c

Merge pull request #11345 from Frauschi/tls_mem_4

2026-10-09 18:17:59 -05:00

ocsp.c

OpenResty 1.31.1.1 support and CI

2026-09-18 12:58:30 +00:00

pk_ec.c

X509: cache the decoded public key and give get0_pubkey borrowed semantics

2026-10-12 05:33:42 +00:00

pk_rsa.c

cap derLen at largest valid DER size

2026-08-20 13:11:32 -06:00

pk.c

Address review comments

2026-10-15 17:24:03 +02:00

quic.c

Fenrir Fixes: quic.c

2026-10-12 11:53:10 -06:00

sniffer.c

Avoid out-of-bounds pointer arithmetic in sniffer record checks

2026-10-16 13:17:39 -07:00

ssl_api_cert.c

Add WOLFSSL_CHAIN_VERIFY_CB to replace peer chain verification

2026-10-13 05:24:59 +00:00

ssl_api_crl_ocsp.c

ssl.c split: cleanup

2026-08-07 09:30:56 +10:00

ssl_api_dtls.c

Continue on SNI warning_return in TLS 1.3, drop stale KeyUpdates

2026-10-21 12:14:01 -07:00

ssl_api_ext.c

Merge pull request #11230 from aidangarske/fenrir-fixes-10620

2026-10-01 00:45:46 -05:00

ssl_api_hs.c

Add WOLFSSL_CHAIN_VERIFY_CB to replace peer chain verification

2026-10-13 05:24:59 +00:00

ssl_api_pk.c

Wipe long-term secrets before freeing them

2026-10-19 13:55:28 +05:30

ssl_api_rw.c

Close the remaining paths that write after close_notify

2026-10-21 12:14:01 -07:00

ssl_asn1.c

Address review: NUL terminate explicitly in ASN1_STRING_to_UTF8

2026-10-16 11:04:33 -07:00

ssl_bn.c

Add a verbose logging tier and move the highest-volume traces onto it

2026-09-11 14:10:31 -07:00

ssl_certman.c

asn, certman: add selfIssued and verify selfSigned against own key

2026-10-13 08:44:40 +09:00

ssl_crypto.c

RNG SP-800-90* compliance mechanism completion (the balance of the

2026-10-14 16:13:43 -05:00

ssl_ech.c

Restore the caller's key RNG after an HPKE operation

2026-08-01 12:04:56 +02:00

ssl_err.c

Address review comments

2026-10-15 17:24:03 +02:00

ssl_load.c

Zero the SLH-DSA key before the parameter lookup in wc_SlhDsaKey_Init

2026-10-21 22:21:07 -07:00

ssl_misc.c

F-5625 - Cap BIO file read at MAX_WOLFSSL_FILE_SIZE

2026-08-12 15:51:59 -07:00

ssl_p7p12.c

Transfer PKCS7 cert stack ownership only on encode success

2026-08-14 14:52:43 -07:00

ssl_sess.c

Keep client and server cache entries in separate rows

2026-10-21 12:14:01 -07:00

ssl_sk.c

Address review: build the stack API without certs

2026-09-30 09:47:36 +00:00

ssl_tsp.c

Wipe long-term secrets before freeing them

2026-10-19 13:55:28 +05:30

ssl.c

Refuse application writes only after a fatal alert or close_notify

2026-10-21 12:14:01 -07:00

tls13.c

Continue on SNI warning_return in TLS 1.3, drop stale KeyUpdates

2026-10-21 12:14:01 -07:00

tls.c

Append point formats through a typed local

2026-10-21 11:49:34 +02:00

wolfio.c

Copy the resolved address pointer out of an unaligned hostent

2026-09-28 17:39:34 +02:00

x509_str.c

asn, certman: add selfIssued and verify selfSigned against own key

2026-10-13 08:44:40 +09:00

x509.c

Merge pull request #11428 from julek-wolfssl/fix/get0-pubkey-borrowed

2026-10-22 11:22:30 -05:00