gojimmypi
1a113c5429
Espressif add TLS Client/Server local user_settings.h
2023-10-22 16:59:54 +02:00
gojimmypi
8eaf09d7a0
Update Espressif TLS Client/Server CMakeLists.txt
2023-10-22 16:53:56 +02:00
gojimmypi
9fe071fe73
Espressif remove pre-existing /include/user_settings.h during compile all.
2023-10-22 16:21:06 +02:00
Daniel Pouzzner
501299bc31
fix null pointer derefs in examples/pem/pem.c:pemApp_ReadFile() and tests/api.c:LoadPKCS7SignedDataCerts() detected by clang-tidy.
2023-10-21 13:34:04 -05:00
David Garske
cf1dcdf402
Fix for adding signature where OID is not found. Currently our AddSignature function will add without OID, which is invalid. For example RSA is disabled and CSR tries to use CTC_SHA256wRSA. The wc_SignCert_ex will succeed and report success, but the CSR/Cert will be invalid (missing sigType OID).
2023-10-20 16:29:59 -07:00
David Garske
6887281361
Fix for ./configure --enable-pkcs7 --disable-rsa && make check.
2023-10-20 16:27:54 -07:00
JacobBarthelmeh
9db828a099
Merge pull request #6898 from SparkiDev/ed25519_g++
...
Ed25519: add missing C++ directives for C functions
2023-10-20 15:52:12 -06:00
JacobBarthelmeh
5018d6c2bb
Merge pull request #6897 from SparkiDev/tls13_psk_one_id_var_decl
...
TLS 1.3: compiling with WOLFSSL_PSK_ONE_ID fix
2023-10-20 15:48:59 -06:00
JacobBarthelmeh
ca2a6d7daa
Merge pull request #6878 from SparkiDev/sha256_armv7a_vmov_fix
...
ARMv7a SHA256: explicit size on vmov
2023-10-20 15:46:58 -06:00
Brett
2387579880
added FIPS warning for Apple native cert validation
2023-10-20 15:40:49 -06:00
Brett
dd12e5a39e
Fix WOLFSSL_SYS_CA_CERTS bug that accepted intermediate CA certs with invalid
...
signatures. Also adds --sys-ca-certs to client in unit.test to detect
regressions
2023-10-20 15:40:44 -06:00
Andras Fekete
0925f8ab18
Use 'unsigned char'
2023-10-20 16:16:48 -04:00
Andras Fekete
ec0a2f2683
Fix 'negative character value'
...
In a number of libc implementations, isalpha()/isalnum() is implemented using lookup tables (arrays): passing in a negative value can result in a read underrun.
2023-10-20 16:16:48 -04:00
Juliusz Sosinowicz
8cd6cd175d
EVP_EncodeBlock should not append a newline
2023-10-20 13:20:11 +02:00
Sean Parkinson
fcf1406675
RSA: convert to bin with length in constant time
...
Add mp_to_unsigned_bin_len_ct() which puts a number into a buffer with
padding in constant time.
Call mp_to_unsigned_bin_len_ct() in RSA when encoding result of
exponentiation.
2023-10-20 14:04:36 +10:00
Sean Parkinson
c88dcac80e
Ed25519: add missing C++ directives for C functions
...
Assembly code has C function names.
Need to tell C++ that these are C function and not to mangle names.
2023-10-20 12:02:51 +10:00
Sean Parkinson
ce1e44d5e8
TLS 1.3: compiling with WOLFSSL_PSK_ONE_ID fix
...
Move use of 'suites' into non-WOLFSSL_PSK_ONE_ID path as variable
declared and used only in that case.
2023-10-20 10:32:45 +10:00
Sean Parkinson
4ac795961b
ARMv7a SHA256: explicit size on vmov
...
For SHA256 using NEON on ARM32, change vmov instruction that is moving
from scalar to general-purpose register to have explicit size (32 bits).
May be needed by some compilers.
2023-10-20 10:21:57 +10:00
JacobBarthelmeh
1abaa94120
Merge pull request #6889 from SparkiDev/sm2_priv_import_range
...
ECC SM2 import private key: check less than order-1
2023-10-19 17:12:07 -06:00
JacobBarthelmeh
22be42a161
Merge pull request #6885 from bigbrett/aes-eax
...
Move AesEax definition to aes.h
2023-10-19 16:49:10 -06:00
Juliusz Sosinowicz
d13d446c2e
Add missing guard
2023-10-19 20:05:59 +02:00
Juliusz Sosinowicz
2ccbdd3a7e
Log correct message
2023-10-19 19:07:45 +02:00
Juliusz Sosinowicz
cecc5f6b19
Call wc_UnLockRwLock only once
2023-10-19 17:04:41 +02:00
Juliusz Sosinowicz
8a8acbd55f
Add log about allocation failure
2023-10-19 17:00:49 +02:00
Juliusz Sosinowicz
2dd8e713f2
Fix static analyzer possible leak
...
crl would never be null there but clean up code to make sure newcrl->crlLock gets free'd
2023-10-19 16:58:28 +02:00
Eric Blankenhorn
962e35aa24
Add error reporting to loadX509orX509REQFromBuffer
2023-10-19 09:31:30 -05:00
Sean Parkinson
abd7bb3ac3
ECC SM2 import private key: check less than order-1
...
SM2 curves must have private key less than order-1 instead of order.
2023-10-19 17:29:25 +10:00
Juliusz Sosinowicz
1ae248018f
Implement untrusted certs in wolfSSL_X509_STORE_CTX_init
2023-10-18 22:24:19 +02:00
JacobBarthelmeh
a3bf7a66a4
Merge pull request #6886 from julek-wolfssl/openvpn-master-fix
...
Define SSL_get_peer_tmp_key
2023-10-18 13:17:15 -06:00
David Garske
22ab21749c
Merge pull request #6869 from bigbrett/ios-ca-api
...
Add support for new Apple trust APIs with WOLFSSL_SYS_CA_CERTS
2023-10-18 10:29:41 -07:00
Juliusz Sosinowicz
f99c7cbb21
Define SSL_get_peer_tmp_key
2023-10-18 19:24:11 +02:00
JacobBarthelmeh
269090353e
Merge pull request #6884 from kareem-wolfssl/zd16824
...
Add explicit break to switch statement in GetHmacLength
2023-10-18 11:20:55 -06:00
JacobBarthelmeh
b4724b515d
Merge pull request #6880 from SparkiDev/sm2_named_group_val_fix
...
SM2 named curve disabled: value outside of supported values
2023-10-18 10:51:02 -06:00
Brett
d805e06469
add AesEax struct to header for public use
2023-10-18 09:23:39 -06:00
Sean Parkinson
1e84d24c20
SM2 named curve disabled: value outside of supported values
...
SM2 named curve value is specified in specification.
Values 0-14 aren't used, so, those bits in disabledCurves are used for
values over 31.
Add range checks.
2023-10-18 10:51:37 +10:00
JacobBarthelmeh
3943852b79
Merge pull request #6882 from douzzer/20231017-wolfsentry-wolfssl_test-h
...
20231017-wolfsentry-wolfssl_test-h
2023-10-17 16:03:41 -06:00
David Garske
bc0643803d
Merge pull request #6873 from JacobBarthelmeh/coverity
...
Coverity scan touch up
2023-10-17 14:44:33 -07:00
JacobBarthelmeh
19870b2378
Merge pull request #6883 from bigbrett/cmake-aarch64-build-macro-fix
...
cmake aarch64 fix
2023-10-17 15:31:23 -06:00
Kareem
f59b22d3a0
Add explicit break to switch statement in GetHmacLength
2023-10-17 14:14:05 -07:00
JacobBarthelmeh
4f1b3fff73
Merge pull request #6879 from jpbland1/cmac-invalid-devId
...
correctly set invalid devId for when cryptoCb is on
2023-10-17 13:23:17 -06:00
Brett
a1d76849e6
added CMake support for new Apple native certificate verification
2023-10-17 13:17:42 -06:00
JacobBarthelmeh
dc7e044157
Merge pull request #6881 from lealem47/mingw_pthreads
...
Fix for pthreads on MSYS2 & MINGW
2023-10-17 13:10:05 -06:00
Brett
e976a7faeb
added CMake host processor check to appropriately set WOLFSSL_AARCH64_BUILD on M1 macs
2023-10-17 12:51:36 -06:00
Daniel Pouzzner
f0db681550
wolfssl/test.h: move wolfsentry logic out of wolfssl project and into header file in wolfsentry project.
2023-10-17 13:05:23 -05:00
Lealem Amedie
a810514f86
Get multi-test passing
2023-10-17 11:36:19 -06:00
John Bland
76b770d4ee
update comment based on PR advise
2023-10-17 13:01:00 -04:00
Lealem Amedie
286d551ad0
Use same mingw macro in codebase for consistency
2023-10-17 10:22:17 -06:00
JacobBarthelmeh
603b5bb573
Merge pull request #6875 from douzzer/20231016-sp-math-fix-redux
...
20231016-sp-math-fix-redux
2023-10-17 10:08:43 -06:00
Lealem Amedie
5bc2edd5ad
Allow override of XSNPRINTF for Windows
2023-10-17 09:37:50 -06:00
Lealem Amedie
b73a440205
Fix for pthreads on MSYS2 & MINGW
2023-10-17 09:16:41 -06:00