Cyclic0007/wolfssl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
22,165 Commits 12 Branches 184 Tags
e1bd4dd1ec287bb29f533df0794de3c7e605696f
Commit Graph

22165 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jacob Barthelmeh
e2b411805d add ca-cert-chain.der to renewcerts.sh, update ed25519 certs and gen script 2021-01-12 00:40:15 +07:00
Hayden Roche
a3cc4110b0 Clamp the normalization value at the end of sp_mont_norm. 2021-01-11 09:59:11 -06:00
Hayden Roche
798d9ed0d5 Various CMake changes. 
- Add support for user settings to CMake.
- Update version number.
- Add an option to enable/disable generation of config.h and the HAVE_CONFIG_H
  define.
 2021-01-08 12:15:58 -06:00
Juliusz Sosinowicz
a745947498 Code review changes 2021-01-08 15:27:30 +01:00
Juliusz Sosinowicz
23a4d64caf wolfSSL_EVP_PKEY_set1_EC_KEY should generate PKCS8 internal DER buffer 
This PKCS8 buffer should include both the private and the public parts of the key.
 2021-01-08 15:27:30 +01:00
Juliusz Sosinowicz
cd4affddac Set ecc_key.rng when using ECC_TIMING_RESISTANT 
Set ecc_key.rng to either a local rng struct or the globalRNG object when using ECC_TIMING_RESISTANT
Add helpful logs to some ecc functions
 2021-01-08 15:18:00 +01:00
Juliusz Sosinowicz
0fe3efb8b4 Add option to only resend previous DTLS flight on a network read timeout 2021-01-07 19:13:35 +01:00
Chris Conlon
c57fee136a Merge pull request #3568 from miyazakh/espidf_unittest 
fix wolfssl unit test on ESP-IDF
 2021-01-07 09:18:18 -07:00
Sean Parkinson
f955c92008 ECC gen z: convert blinding value to Montgomery form before using 2021-01-07 11:30:58 +10:00
David Garske
209ad82df2 Merge pull request #3629 from ejohnstown/aarch64 
M1 Support
 2021-01-06 14:12:45 -08:00
David Garske
931dc5b29f Merge pull request #3619 from tmael/fuzz_math 
Fix for OSS-Fuzz issue #29103: out-of-bounds read in TLSX_CSR_Parse()
 2021-01-06 14:10:28 -08:00
John Safranek
d4e13796c2 M1 Support 
We separate out 64-bit desktop support based on the Intel check. With
the advent of the new Apple chip, ARM can also be a desktop processor.
Detect it like we do the Intel 64-bit, and treat it similarly with
respect to fast and normal math.
 2021-01-06 09:21:07 -08:00
Sean Parkinson
fa86c1aa91 Configuration: enable all, disable TLS 1.3 - turn off TLS 1.3 only options 
configuration: --enable-all --disable-tls13
Post-handshake authentication and HRR cookie are enable with
'--enable-all' but disabling TLS 1.3 caused configure to fail.
Don't enable these TLS 1.3 only options when TLS 1.3 is disabled.

Also fix up tests that don't work without TLS 1.3 enabled.
 2021-01-06 14:19:57 +10:00
Sean Parkinson
cd0670cbd7 RSA: verify only build fixes 
configuration: --disable-ecc --disable-dh --disable-aes --disable-aesgcm
--disable-sha512 --disable-sha384 --disable-sha --disable-poly1305
--disable-chacha --disable-md5 --disable-sha3 --enable-cryptonly
--disable-inline --enable-rsavfy --disable-asn --disable-oaep
--disable-rng --disable-filesystem --enable-sp=rsa2048 --enable-sp-math
Fixes to make code build again.
 2021-01-06 11:58:15 +10:00
Sean Parkinson
5accd57c21 X509 API no file system: hide wolfSSL_X509_NAME_print_ex_fp 
configuration: --enable-all --disable-filesystem
wolfSSL_X509_NAME_print_ex_fp has XFILE as a parameter and cannot be
compiled with --disable-filesystem
 2021-01-06 11:05:58 +10:00
Sean Parkinson
10722fba14 RSA/DH test: even number error check fixup 
Configuration: --enable-sp=3072
Test only enabled when SP is used.
Return codes checked are those we expect from SP.
Code, with configuration, is compiled so that 2048-bit operations are
not going to SP and the error returns were not correct.
 2021-01-06 09:39:24 +10:00
Hideki Miyazaki
b8997d0b47 revert test_wolfssl.c changes 
add test.c as src target
 2021-01-05 16:20:42 +09:00
Hideki Miyazaki
99d4a7417a fix wolfssl unit test on ESP-IDF 2021-01-05 16:08:05 +09:00
Sean Parkinson
a6b69b6864 TLS send change cipher: Don't set keys when negotiating TLS 1.3 2021-01-05 14:32:48 +10:00
Sean Parkinson
f196c60c66 TLS 1.3 key share: add a key share from supported list 2021-01-05 13:08:48 +10:00
Sean Parkinson
1b94309a6c SP math all: doco fix and don't assign 0 to o 
o is not used after that point so no need to zero it.
 2021-01-05 10:40:34 +10:00
Sean Parkinson
2a2b194d71 SP arm64 MAC: non-ct mod inv not use so many registers 2021-01-05 10:23:14 +10:00
Tesfa Mael
46e260dd61 Correct unsigned arithmetic 2021-01-04 15:48:27 -08:00
Chris Conlon
54f072fd8d Merge pull request #3607 from douzzer/WOLFSSL_TEST_SUBROUTINE 
test.c: add WOLFSSL_TEST_SUBROUTINE macro to make subtests optionally static
 2021-01-04 10:10:56 -07:00
Hayden Roche
96ece3ac7d Modify ParseCertRelative to ensure issuerKeyHash gets parsed and copied into the 
decoded cert for self-signed CA certs.

The bit of code that does this copy was previously inside a conditional that's
only entered if the certificate is not self-signed. The primary purpose of this
conditional is to set the maxPathLen field. It's possible that the copying of
the issuerKeyHash was mistakenly included in the "else" block here, when it
should be outside.
 2021-01-04 10:34:09 -06:00
Sean Parkinson
b5403fe6b9 SP int: Hide func decls if only available with WOLFSSL_SP_MATH_ALL 2021-01-04 16:39:51 +10:00
Sean Parkinson
413bde9146 Merge pull request #3608 from tmael/sp_squre 
Fix SP integer square
 2021-01-04 16:29:40 +10:00
Sean Parkinson
faf7d307b4 Merge pull request #3606 from dgarske/zd11438 
Fix for possible ECC sign memory leak with custom "k"
 2021-01-04 15:39:53 +10:00
Tesfa Mael
01c27068c1 Correct SP x->used with sp_clamp() 2021-01-03 20:08:06 -08:00
Sean Parkinson
68c2e36ad5 AES test: Remove unneeded loop 2021-01-04 12:43:34 +10:00
Sean Parkinson
40ab08be45 SP rand_prime: fix length check 
-ve length indicates to use a BBS prime (last two bits set)
 2021-01-04 12:31:59 +10:00
John Safranek
ef56bc09f1 Merge pull request #3596 from julek-wolfssl/dtls-multiple-hellorequest 
Calling wolfSSL_Rehandshake during renegotiation should not be an error
 2020-12-31 13:53:32 -08:00
David Garske
fbb3e9fca3 Merge pull request #3605 from tmael/cm_free 
Free mutex and fix tls13.test script
 2020-12-31 08:40:35 -08:00
David Garske
c9ac64d77d Merge pull request #3609 from douzzer/lkm_kvmalloc 
use kvmalloc()/kvfree() for heap allocations in the linuxkm build
 2020-12-31 08:37:53 -08:00
Daniel Pouzzner
9dc8721032 linuxkm: on kernels >= 4.12, use kvmalloc()/kvfree() and a partial implementation of realloc() leveraging them, rather than kmalloc()/kfree()/krealloc(). this makes large allocations possible and relatively safe. note that the realloc() implementation fails gracefully when the supplied pointer is larger than the page size, but otherwise works normally. 2020-12-31 00:30:35 -06:00
Daniel Pouzzner
a2dec7ce9c test.c: work around toolchain/ecosystem bug on aarch64 linux 4.14.0-xilinx-v2018.3. 2020-12-30 20:03:13 -06:00
Tesfa Mael
9598c03716 Free mutex and fix test script 2020-12-30 17:40:15 -08:00
Daniel Pouzzner
3d88676ff1 test.c: add WOLFSSL_TEST_SUBROUTINE macro to qualify all previously global subtest handlers, defaulting to the empty string. this restores the version<=4.5 test.c namespace allowing end users to call the tests directly piecemeal. --enable-linuxkm[-defaults] sets -DWOLFSSL_TEST_SUBROUTINE=static for extra namespace hygiene. 2020-12-30 16:12:08 -06:00
David Garske
060ebd1ca2 Fix for possible ECC sign memory leak when using WOLFSSL_ECDSA_SET_K and wc_ecc_sign_set_k, where the k is not valid. ZD 11438. 2020-12-30 09:54:54 -08:00
David Garske
7fb2c0f63f Merge pull request #3603 from haydenroche5/zd11434 
Ensure that all leading zeros are skipped in sp_tohex.
 2020-12-30 08:28:52 -08:00
David Garske
1b6a988dc0 Merge pull request #3601 from tmael/mp_rand_p 
Add parameter check in sp_rand_prime()
 2020-12-30 08:20:18 -08:00
Hayden Roche
81f70fba5f Ensure that all leading zeros are skipped in sp_tohex. 2020-12-30 08:32:01 -06:00
Tesfa Mael
d366ca74af Review comments and cast 2020-12-29 19:48:45 -08:00
John Safranek
c482d16029 Merge pull request #3544 from haydenroche5/ocsp_stapling_bug 
Fix bug where OCSP stapling wasn't happening even when requested by client
 2020-12-29 14:23:10 -08:00
Chris Conlon
da007ecd7b Merge pull request #3409 from kojo1/mqx 
add IDE/MQX
 2020-12-29 13:53:37 -07:00
David Garske
c6abb59343 Merge pull request #3593 from tmael/sp_cast 
casting fix for clang-12
 2020-12-29 09:51:37 -08:00
tmael
837e9856f5 Merge pull request #3590 from dgarske/stcube_rel 
Fixes for STM Cube Pack rename
 2020-12-29 09:37:39 -08:00
David Garske
dc21d56545 Merge pull request #3600 from douzzer/low-resources-fixes 
--enable-lowresource --enable-sp-math-all
 2020-12-29 08:01:51 -08:00
Daniel Pouzzner
2bd0d4c467 wolfcrypt/src/evp.c: fix wolfSSL_EVP_CipherUpdate_GCM() to not fail when inl is zero, to properly handle realloc implementations that return NULL for zero-size allocations. 2020-12-28 23:49:48 -06:00
Daniel Pouzzner
fbcfc6adbf test.c: rehab fail codes in ecc_test_curve_size(). 2020-12-28 21:56:39 -06:00