Cyclic0007/wolfssl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
27,397 Commits 12 Branches 184 Tags
100d765b0c333ec00a111ce7c19be6f1bf4070a5
Commit Graph

27397 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Juliusz Sosinowicz
89946126f2 Remove dtls_expected_rx and use expected values directly 
We should always read MTU + EXTRA so that we capture the entire message and are able to correctly decrypt the entire datagram. A smaller MTU also breaks larger handshake messages sent during a connection like secure renegotiation in DTLS 1.2 (confirmed) and post-handshake messages in DTLS 1.3 (suspected).
 2023-10-05 16:58:45 +02:00
Juliusz Sosinowicz
80c8c62fb2 Proper initial_ctx clean up 
- Call wolfSSL_CTX_free on ssl->initial_ctx so that it decrements the counter and free's the object
- Clean up where ssl->initial_ctx is free'd. It only needs to be free'd when the ssl object is being free'd
 2023-10-05 16:58:45 +02:00
jordan
33d4b331fb Add XMSS/XMSSMT wolfCrypt hooks. 2023-10-05 09:18:50 -05:00
Juliusz Sosinowicz
9abc611550 Update dtls in readme 2023-10-05 13:32:58 +02:00
Juliusz Sosinowicz
6b28a68e42 Add DTLS 1.3 to README 2023-10-05 13:26:35 +02:00
Juliusz Sosinowicz
c88fec1534 Remove unsupported distros from readme badge 2023-10-05 13:22:34 +02:00
Juliusz Sosinowicz
8ce8359bd7 Add option to disable OPENSSL_COMPATIBLE_DEFAULTS 2023-10-05 10:30:44 +02:00
Anthony Hu
630d75153f Minor correction to documentation 2023-10-04 16:51:55 -04:00
JacobBarthelmeh
96205fc80d Merge pull request #6820 from julek-wolfssl/zd/16550-int-crl 
CRL verify the entire chain including loaded CA's
 2023-10-04 14:37:50 -06:00
David Garske
4d81725438 Merge pull request #6832 from jpbland1/cryptocb-key-context 
add devCtx to all keys for use in cryptoCb
 2023-10-04 09:34:06 -07:00
JacobBarthelmeh
94043723c9 Merge pull request #6833 from douzzer/20231003-options-h-flag-order-etc 
20231003-options-h-flag-order-etc
 2023-10-04 09:01:58 -06:00
Daniel Pouzzner
45b613ee55 wolfcrypt/test/test.c: fix error codes in hpke_test_single(), hpke_test(), and ecc521_test_deterministic_k(). 2023-10-03 22:44:11 -05:00
Daniel Pouzzner
71649388a0 configure.ac: in options.h generation, fix order of flags to match Makefile order. 2023-10-03 21:11:59 -05:00
John Bland
f4acc8f33d add devCtx to all keys for use in cryptoCb 2023-10-03 19:29:36 -04:00
Hideki Miyazaki
f9fb966bb4 fix compile error due to rz port change 2023-10-04 06:47:12 +09:00
JacobBarthelmeh
88d25036a0 Merge pull request #6823 from rizlik/stale_suites_fix 
fix: tls13: don't use stale suites pointers in CheckPreSharedKeys
 2023-10-03 11:41:53 -06:00
Juliusz Sosinowicz
7baf151c37 CRL verify the entire chain including loaded CA's 
- Regen CRL's as most of them are expired
- certs/crl/extra-crls/ca-int-cert-revoked.pem: CRL that revokes certs/intermediate/ca-int-cert.pem signed by certs/ca-cert.pem
- Add CheckCertCRL_ex API to not depend on DecodedCert
- CheckCertCRLList: accept raw serial or hashed version to work with Signers
- Add XELEM_CNT to simplify pre-proc element counting
 2023-10-03 11:45:43 +02:00
Sean Parkinson
e55e6790dd mp_sqrtmod_prime: bail early on the check for small values 
When using custom curves, only use the first 22 values with the prime to
calculate Legendre symbol. The known curves work and defeats long running
times when non-prime values are passed in.
 2023-10-03 16:48:34 +10:00
Daniel Pouzzner
5066771f10 Merge pull request #6824 from bandi13/PRB-fips-ready-config-issues 
Fix issue created by 62c14e4d5b
 2023-10-03 00:47:14 -04:00
JacobBarthelmeh
1a3bf5e932 Merge pull request #6822 from douzzer/20230930-aes-xts-test-gate 
20230930-aes-xts-test-gate
 2023-10-02 17:57:17 -06:00
Andras Fekete
47f0d5a5d0 Fix issue created by 62c14e4d5b 2023-10-02 12:34:33 -04:00
Chris Conlon
ecf666a121 Merge pull request #6819 from miyazakh/renesas_rz_opt 
Update usage of sha acceleration on RSIP
 2023-10-02 09:22:06 -06:00
Marco Oliverio
c70b3f297e fix: tls13: don't use stale suites pointers in CheckPreSharedKeys 2023-10-02 15:03:55 +00:00
Daniel Pouzzner
3e7f4c5f2d wolfcrypt/test/test.c: in aes_xts_128_test(), fix gate on LARGE_XTS_SZ test added in 3ea0fb30dd (disable for AF_ALG and pre-5.3 FIPS). 2023-09-30 12:07:56 -05:00
JacobBarthelmeh
369db531d2 Merge pull request #6817 from anhu/tls13_server_suppgroups 
Allow the server to send supported groups extension in TLS 1.3
 2023-09-29 13:53:37 -06:00
Anthony Hu
7c1cc5e8f9 Allow the server to send supported groups extension in TLS 1.3 2023-09-29 12:42:44 -04:00
JacobBarthelmeh
8a57936d7e Merge pull request #6801 from julek-wolfssl/zephyr-fixes 
Misc zephyr fixes
 2023-09-29 09:50:19 -06:00
JacobBarthelmeh
53f729f959 Merge pull request #6815 from SparkiDev/aes_xts_x64 
AES XTS x64 ASM: add AVX1 and AESNI implementations
 2023-09-29 09:42:58 -06:00
Hideki Miyazaki
e092c57675 change sha h/w acceleration implementation 2023-09-29 16:22:16 +09:00
JacobBarthelmeh
aedebac649 Merge pull request #6818 from bandi13/containerReadme 
Container readme
 2023-09-28 15:21:23 -06:00
Sean Parkinson
3ea0fb30dd AES XTS x64 ASM: add AVX1 and AESNI implementations 
Adding AES-XTS AVX1 and AESNI implementations.
Fix name in comment at top of x64 assembly files.
 2023-09-28 14:44:23 -05:00
Andras Fekete
005346d9ec Fix entrypoint 2023-09-28 14:45:51 -04:00
Andras Fekete
93358f1402 Define WOLFSSL_DIR 2023-09-28 13:59:04 -04:00
Andras Fekete
5e1bd8174c Push multi-platform wolfCLU to DockerHub 2023-09-28 13:55:38 -04:00
Andras Fekete
2ef83e142f Update buildAndPush.sh and README.md 2023-09-28 13:27:07 -04:00
JacobBarthelmeh
0571040e36 Merge pull request #6816 from bandi13/fixContainers 
Fix containers
 2023-09-28 10:37:20 -06:00
Andras Fekete
9fdb3cf17a Appease test scripts 2023-09-28 10:48:03 -04:00
Andras Fekete
b88754bb64 Add in clang-10 and clang-11 tests 2023-09-28 10:29:36 -04:00
Andras Fekete
5e3f00f6f7 Specify the OS version 
'ubuntu-latest' doesn't have clang-12 in it anymore
 2023-09-28 10:29:20 -04:00
Andras Fekete
0f4f677ea4 Show logs on test failure 2023-09-28 10:17:30 -04:00
JacobBarthelmeh
20f992af5e Merge pull request #6809 from SparkiDev/static_rsa_len_check_fix 
Static RSA length check
 2023-09-27 15:09:08 -06:00
Andras Fekete
d95ce57eea Fix script errors 2023-09-27 15:31:01 -04:00
JacobBarthelmeh
79a6cbc860 Merge pull request #6813 from anhu/elliptical 
Fixup spelling: Elliptic
 2023-09-26 17:11:12 -06:00
JacobBarthelmeh
a97e13f823 Merge pull request #6798 from gojimmypi/autogen-update-wsl-pr 
no WSL/Windows git hooks from autogen.sh
 2023-09-26 16:59:41 -06:00
Sean Parkinson
9acba6ee2d Static RSA length check 
Better length check on decrypted pre-master secret length.
 2023-09-27 07:55:53 +10:00
Anthony Hu
b22c2971e3 Fixup spelling: Elliptic 
Fixes https://github.com/wolfSSL/wolfssl/issues/6767
 2023-09-26 16:18:02 -04:00
JacobBarthelmeh
60f30e994d Merge pull request #6811 from gojimmypi/esp32-sha-revert-verbosity 
ESP32 debug only: Mode REVERT to ESP32_SHA_SW
 2023-09-26 13:34:43 -06:00
JacobBarthelmeh
f042863ddf Merge pull request #6807 from kareem-wolfssl/zd16715 
Prevent current handshake counter from underflowing.
 2023-09-26 10:55:52 -06:00
gojimmypi
4ece466fca ESP32 debug only: Mode REVERT to ESP32_SHA_SW 2023-09-26 08:32:23 -07:00
JacobBarthelmeh
237d10ab1e Merge pull request #6803 from gojimmypi/esp32-example-time 
ESP32 examples: update interim set_time() fixed value
 2023-09-25 13:34:22 -06:00