Ruby Martin
7c44f14e77
add apple test to github actions
2025-06-26 08:38:30 -06:00
Ruby Martin
d3b30f8d51
Check underlying error, want only maximum validity period error
...
add apple test macros to tests requiring cert manager
2025-06-26 08:38:28 -06:00
Brett
877bade216
additional debugging
2025-06-26 08:38:28 -06:00
Brett
7232b3a6bb
Apple native cert validation: add WOLFSSL_TEST_APPLE_CERT_VALIDATION feature macro that forces system CA certs on and makes all CA certs added to CM via xxx_load_verify_xxx APIs to instead be loaded as system trust anchors when used for TLS cert verification
2025-06-26 08:38:26 -06:00
Daniel Pouzzner
981ba4b14c
Merge pull request #8925 from mattia-moffa/20250625-wolftpm-ca-false
...
Allow CA:FALSE on wolftpm
2025-06-25 22:27:27 -05:00
Daniel Pouzzner
41e2d920a5
Merge pull request #8924 from JacobBarthelmeh/cert_expr
...
regenerate intermediate and crl certs to update ca-int.pem
2025-06-25 22:26:26 -05:00
Daniel Pouzzner
d49eb5f2c4
Merge pull request #8920 from kaleb-himes/wolfEntropy-2025
...
Update wolfEntropy checkout with AdPr update
2025-06-25 22:21:36 -05:00
Daniel Pouzzner
6fb1c54c29
Merge pull request #8854 from dgarske/renesas_rx_tsip_aesctr
...
Added Renesas RX TSIP AES CTR support
2025-06-25 22:20:03 -05:00
Daniel Pouzzner
6bfd2632db
Merge pull request #8917 from dgarske/various_20250623
...
Fix for broken `test_wolfSSL_check_domain_basic`
2025-06-25 22:15:02 -05:00
Daniel Pouzzner
23a37b2ebc
Merge pull request #8916 from dgarske/revert_pr8911
...
Revert PR #8911
2025-06-25 21:52:34 -05:00
Daniel Pouzzner
d6d124bb85
Merge pull request #8774 from SparkiDev/armv8_ghs
...
Armv8 (Aarch64) ASM fixes for Green Hills compiler
2025-06-25 21:46:48 -05:00
Daniel Pouzzner
29f534f3b0
Merge pull request #8836 from SparkiDev/lms_serialize_state
...
LMS: Allow state to be saved with private key
2025-06-25 21:34:42 -05:00
Daniel Pouzzner
38892fdd07
Merge pull request #8757 from anhu/recalc_suites
...
Recalculate suites at ssl initialization.
2025-06-25 21:32:38 -05:00
Sean Parkinson
f119086d3e
Merge pull request #8918 from kojiws/fix_asn_integer_export
...
Fix SetShortInt() not to export wrong DER
2025-06-26 08:16:48 +10:00
Sean Parkinson
80a234a0c5
Merge pull request #8830 from JacobBarthelmeh/rx_threadx
...
add option to not use CT code with min/max
2025-06-26 08:15:09 +10:00
Mattia Moffa
e9e00c47ab
Allow CA:FALSE on wolftpm
...
The Intel CSME fTFM sets this basic constraint on their EK certificates
and by default wolfSSL fails to parse because of this.
2025-06-25 22:48:53 +02:00
JacobBarthelmeh
7b5e3e2551
regenerate intermediate and crl certs to update ca-int.pem
2025-06-25 10:00:57 -06:00
Daniel Pouzzner
1c1c556e5e
Merge pull request #8915 from philljj/linuxkm_rsa_fix_sig_callbacks
...
linuxkm rsa: set sig_alg max_size and digest_size callbacks.
2025-06-25 08:28:04 -05:00
Daniel Pouzzner
e223da457c
Merge pull request #8922 from JacobBarthelmeh/rng
...
altering macro guards and test case for RNG test on alternate builds
2025-06-24 22:15:14 -05:00
Koji Takeda
d76386f38c
Add tests
2025-06-25 11:27:12 +09:00
Koji Takeda
05c8bc7514
Fix SetShortInt()
2025-06-25 11:27:11 +09:00
JacobBarthelmeh
6cf3b51333
guard test that uses pipe from running with mingw
2025-06-24 17:21:24 -06:00
Sean Parkinson
5c9ad359d1
Merge pull request #8904 from anhu/bigger_header
...
Fix missing dashes on the end of header and footer.
2025-06-25 08:26:59 +10:00
JacobBarthelmeh
fe7d458d29
random.c is also locked in FIPS v6
2025-06-24 16:08:25 -06:00
JacobBarthelmeh
1c5e531332
add new macro to known macro list
2025-06-24 14:57:17 -06:00
JacobBarthelmeh
c33035e6a6
add conditions to constant time mask functions
2025-06-24 13:52:40 -06:00
JacobBarthelmeh
838636c76b
add option to not use CT code with min/max
2025-06-24 13:52:40 -06:00
jordan
1e0e4932ca
linuxkm rsa: fix km_pkcs1_key_size callback.
2025-06-24 14:41:57 -05:00
David Garske
33972e3678
Disable system CA certs for msys2 test.
2025-06-24 10:28:42 -07:00
kaleb-himes
f5f0bdf61e
Update wolfEntropy checkout with AdPr update
2025-06-24 10:54:52 -06:00
David Garske
41591e7eb9
Fixes for TSIP AES CTR unit tests and handling of invalid cases.
2025-06-24 09:41:33 -07:00
David Garske
191165a021
Test case created by @miyazakh.
2025-06-24 09:41:33 -07:00
David Garske
dc57adcfed
Fix to increment IV for AES CTR with TSIP (allow encrypt to be called multiple times without having to manually reset the IV).
2025-06-24 09:41:33 -07:00
David Garske
c7ff3b99b7
Allow for calling the Renesas RX TSIP AES crypto callback without a user context.
2025-06-24 09:41:33 -07:00
David Garske
ad9d068174
Fix issues with crypto callbacks and HAVE_ECC_DHE. Fix issues with ecc_onlycb_test.
2025-06-24 09:41:33 -07:00
David Garske
111feedadc
Add build guards on the crypto callback ECC items.
2025-06-24 09:41:32 -07:00
David Garske
c7f6673e53
Fixup the .wolfssl_known_macro_extras
2025-06-24 09:41:32 -07:00
David Garske
ebe8816c2a
Code size reductions (check RX TSIP enables).
2025-06-24 09:41:32 -07:00
David Garske
78362bc346
Changes to support Renesas RX TSIP AES CTR.
2025-06-24 09:41:32 -07:00
David Garske
bfebeae533
Revert PR #8911 . For TLS v1.2 RSA only is only supported with WOLFSSL_STATIC_RSA. For TLS v1.3 RSA only is not supported (must be PFS).
2025-06-24 09:40:15 -07:00
Daniel Pouzzner
b8aa4bd84b
Merge pull request #8919 from philljj/fix_linuxkm_getpid
...
linuxkm: add WOLFSSL_NO_GETPID to wolfcrypt settings.h.
2025-06-24 11:32:56 -05:00
jordan
5503ea8e6d
linuxkm: add WOLFSSL_NO_GETPID to wolfcrypt settings.h.
2025-06-24 11:12:00 -05:00
David Garske
5d7cb2ec07
Fix for new api.c test test_wolfSSL_check_domain_basic added in PR #8863 that fails with --disable-sys-ca-certs.
2025-06-24 08:25:01 -07:00
Anthony Hu
72ec4029d1
Correct the size for MLDSA PEM header
2025-06-24 11:12:27 -04:00
Anthony Hu
423ecf8b1f
Try harder not to make stack increases
2025-06-24 11:12:27 -04:00
Anthony Hu
a0f6b779a5
-----BEGIN SPHINCS_SMALL_LEVEL1 PRIVATE KEY----- is the longest one at length 48
2025-06-24 11:12:27 -04:00
Anthony Hu
bf928795b3
Fix missing dashes on the end of header and footer.
2025-06-24 11:12:27 -04:00
Anthony Hu
43df11c9c1
Add gate on having DH
2025-06-24 10:37:26 -04:00
Anthony Hu
8c1298a1d8
Check if DH's P and G are set
2025-06-24 09:59:12 -04:00
Sean Parkinson
d05790ed89
LMS: Allow state to be saved with private key
...
Defining WOLFSSL_WC_LMS_SERIALIZE_STATE will have the state serialized
before the private key data.
Lots of memory used but means fast reload times. That means that the key
can be reloaded for each sign.
2025-06-24 20:46:41 +10:00
