JacobBarthelmeh
ebbeb6c69e
Merge pull request #6984 from res0nance/pqc-crash-fix
...
tls: return immediately if kyber_id2type() fails
2023-11-21 09:35:22 -07:00
Kareem
ca61034d22
Add memcached support.
...
memcached support: add required functions/defines.
Fix running unit test when defining DEBUG_WOLFSSL_VERBOSE without OPENSSL_EXTRA.
Break out session_id_context APIs into separate option WOLFSSL_SESSION_ID_CTX, so they can be used without OPENSSL_EXTRA.
Make wolfSSL_ERR_get_error and wolfSSL_CTX_set_mode available for memcached.
Add --enable-memcached.
Include required defines for memcached.
Revert unit test fix, no longer needed.
Add Github actions test for memcached. Stop defining DEBUG_WOLFSSL_VERBOSE for memcached.
Add auto retry to writes.
Memcached CI: correct libevent package name.
Memcached CI: Add pkgconfig path for Github CI wolfSSL prefix.
memcached: Fix WOLFSSL_OP_NO_RENEGOTIATION going outside of int bounds, add LD_LIBRARY_PATH for memcached CI test.
memcached CI: Use correct path for wolfSSL
memcached: Add required perl dependency for SSL tests
memcached: Update to 1.6.22
memcached: actually test tls
memcached: Update wolfSSL_SSL_in_before to be side agnostic.
2023-11-20 10:10:34 -07:00
Daniel Pouzzner
7dedfe08ef
cryptonly and linuxkm fixes: fix --enable-all[-crypto] with --enable-opensslextra and --enable-cryptonly (build failures detected by multi-test linuxkm-all-asm-cryptonly-opensslextra-pie after merge of 54f2d56300 and e2bbacd548).
2023-11-19 17:22:46 -06:00
Sean Parkinson
9ed0018954
Merge pull request #6980 from gojimmypi/SM-cipher-type-PR
...
Fix evp SM cipherType check
2023-11-20 07:22:54 +10:00
res0nance
98789dc000
tls: return immediately if kyber_id2type() fails
...
This prevents a crash as ecc_key is not initialized but the
free function is still called.
2023-11-18 15:44:03 +08:00
gojimmypi
16dba37ae6
fix wolfSSL_EVP_CIPHER_CTX_ctrl() SM GCM/CCM type
2023-11-17 07:56:56 -08:00
JacobBarthelmeh
957a0ce300
Merge pull request #6964 from lealem47/zd16470
...
Parse explicit parameters in StoreEccKey()
2023-11-16 15:59:21 -07:00
JacobBarthelmeh
6945093221
Merge pull request #6935 from SparkiDev/ssl_crypto_extract
...
ssl.c: Move out crypto compat APIs
2023-11-16 11:58:14 -07:00
Daniel Pouzzner
263973bde9
src/wolfio.c: fix stack allocations for cookie digests on NO_SHA builds;
...
configure.ac: fix dependencies for enable_dsa vs enable_sha in enable-all, enable-all-crypto, and ENABLED_DSA setup.
2023-11-15 14:43:23 -06:00
Eric Blankenhorn
7bbeadcf97
Fix build errors with dtls1.3 and no tls1.2
2023-11-15 10:37:09 -06:00
Daniel Pouzzner
7569cfdff8
src/internal.c,src/wolfio.c: fallback to SHA256 when NO_SHA, in LoadCertByIssuer(), MicriumGenerateCookie(), uIPGenerateCookie(), and GNRC_GenerateCookie();
...
tests/api.c: when NO_SHA, omit test_wolfSSL_CertManagerCheckOCSPResponse() and test_wolfSSL_CheckOCSPResponse() (both use static artifacts with SHA1 name and key hashes).
2023-11-15 00:09:22 -06:00
David Garske
12878fccae
Merge pull request #6957 from lealem47/expandDistro
...
Add --enable-quic to --enable-all
2023-11-10 15:32:05 -08:00
Lealem Amedie
04ea4da6fd
Parse explicit parameters in StoreEccKey()
2023-11-10 15:11:08 -07:00
Juliusz Sosinowicz
b8d5ac83eb
Add info on how to use WOLFSSL_DTLS13_NO_HRR_ON_RESUME
2023-11-10 10:43:26 +01:00
Lealem Amedie
e2bbacd548
Add QUIC to --enable-all
2023-11-09 14:44:02 -07:00
JacobBarthelmeh
2b1c61a013
Merge pull request #6949 from bigbrett/zd16925
...
fix WOLFSSL_CALLBACK memory error
2023-11-08 23:35:32 -07:00
jordan
be24d68e5d
Add EXTENDED_KEY_USAGE_free to OpenSSL compat layer.
2023-11-08 15:26:24 -06:00
Sean Parkinson
54f2d56300
ssl.c: Move out crypto compat APIs
...
ssl_crypto.c contains OpenSSL compatibility APIS for:
- MD4, MD5, SHA/SHA-1, SHA2, SHA3
- HMAC, CMAC
- DES, DES3, AES, RC4
API implementations reworked.
Tests added for coverage.
TODOs for future enhancements.
2023-11-08 19:43:18 +10:00
JacobBarthelmeh
c5e2f414ea
Merge pull request #6929 from julek-wolfssl/dtls13-early-data-server-side
...
dtls 1.3: allow to skip cookie exchange on resumption
2023-11-06 13:30:21 -07:00
JacobBarthelmeh
8ac291bbe1
Merge pull request #6944 from miyazakh/fix_qt_jenkins_failure
...
skip DATE check if flags is set when calling AddTrustedPeer
2023-11-06 11:35:22 -07:00
JacobBarthelmeh
c92d25816a
Merge pull request #6887 from julek-wolfssl/zd/16849
...
Implement untrusted certs in wolfSSL_X509_STORE_CTX_init
2023-11-06 10:13:43 -07:00
JacobBarthelmeh
190b51ae6f
Merge pull request #6810 from bandi13/codeSonar_fixes
...
Fix 'negative character value'
2023-11-03 13:52:06 -06:00
Juliusz Sosinowicz
8c87920903
Address code review
2023-11-03 11:02:41 +01:00
Hideki Miyazaki
49121b5c47
move declaration to the top of func
2023-11-03 11:45:33 +09:00
Hideki Miyazaki
8d9dc3d79f
skip DATE if flags is set when calling AddTrustedPeer
2023-11-03 09:38:23 +09:00
David Garske
8fc754515a
Merge pull request #6938 from SparkiDev/rsa_pss_salt_len_openssl_compat_fix
...
RSA PSS OpenSSL compatibility verification: support AUTO
2023-11-02 09:07:40 -07:00
Sean Parkinson
4870435604
RSA PSS OpenSSL compatibility verification: support AUTO
...
When wolfSSL_RSA_verify_PKCS1_PSS() called with RSA_PSS_SALTLEN_AUTO
(RSA_PSS_SALTLEN_MAX_SIGN) it wasn't using RSA_PSS_SALT_LEN_DISCOVER
when available.
2023-11-02 11:24:18 +10:00
JacobBarthelmeh
21f34ef028
Merge pull request #6905 from bandi13/moreCodeSonarFixes
...
Don't nag about leaked resources
2023-11-01 14:46:02 -06:00
Brett Nicholas
9d632ccaa6
apply lateRL offset to memcpy dest, not src
2023-11-01 14:32:11 -06:00
JacobBarthelmeh
15fdf6eccc
Merge pull request #6910 from bigbrett/ios-ca-api
...
exercise --sys-ca-certs optionin external.test
2023-11-01 14:09:24 -06:00
JacobBarthelmeh
c920337f2f
Merge pull request #6891 from julek-wolfssl/zd/16849-i2d_x509
...
Advance pointer in wolfSSL_i2d_X509
2023-11-01 11:02:44 -06:00
JacobBarthelmeh
98843798c2
Merge pull request #6934 from SparkiDev/regression_fixes_8
...
Regression test fixes
2023-11-01 10:55:41 -06:00
Sean Parkinson
0eab70f806
Regression test fixes
...
Fixes for different configurations and memory allocation failure
testing.
2023-11-01 14:10:49 +10:00
David Garske
2ac0d47908
Fix for async edge case with Intel QuickAssist/Cavium Nitrox that was broken in PR #6783 . Was causing re-entry and multiple calls for some operations like DH KeyGen that don't advance state on completion. https://github.com/wolfSSL/wolfAsyncCrypt/pull/71
2023-10-31 12:43:12 -07:00
Juliusz Sosinowicz
aed715cb2c
dtls 1.3: allow to skip cookie exchange on resumption
...
tls 1.3: do cookie exchange when asked too even when found a matching cipher
2023-10-31 14:29:04 +01:00
David Garske
2c91ecb466
Merge pull request #6924 from JacobBarthelmeh/srtp
...
sanity check on length before ato16 with SRTP
2023-10-28 16:13:06 -07:00
JacobBarthelmeh
07c8c5c8ca
sanity check on length before ato16 with SRTP
2023-10-28 16:13:45 -06:00
JacobBarthelmeh
c3ed45d331
additional case for CID 330392 and 330401
2023-10-27 16:34:04 -06:00
JacobBarthelmeh
688b94cad2
fix typo and missing brackets
2023-10-27 16:11:18 -06:00
JacobBarthelmeh
7d5491994e
Fix for CID 299649 checking on if ctx is null
2023-10-27 15:28:42 -06:00
JacobBarthelmeh
29782449ec
Fix for CID 299637 make sure after free'ing pointer it is not re-used
2023-10-27 15:14:02 -06:00
JacobBarthelmeh
247bc151d9
Fix for CID 299627 memory leak on error case
2023-10-27 15:10:32 -06:00
JacobBarthelmeh
0ba406a52c
Fix for CID 299536 possible null dereference
2023-10-27 15:02:10 -06:00
JacobBarthelmeh
a2032dfb36
touch up negative value sanity check, fix CID 210741 sanity check
2023-10-27 14:50:13 -06:00
JacobBarthelmeh
ef50cb3f02
Fix for CID 299759 be explicit on compare
2023-10-27 14:33:33 -06:00
JacobBarthelmeh
271fa83a15
Fix for CID 299778 memory leak on error case
2023-10-27 14:28:47 -06:00
JacobBarthelmeh
8760ad9473
Fix for CID 299847 memory leak on error case
2023-10-27 14:17:31 -06:00
JacobBarthelmeh
c11176c276
Fixes CID 330401 and 330392 memory leak
2023-10-27 14:04:46 -06:00
Andras Fekete
42c241dbbf
Avoid use of uninitialized array
2023-10-27 15:38:46 -04:00
JacobBarthelmeh
8add411d9a
fix for CID 330412 wrong sizeof argument
2023-10-27 13:35:08 -06:00