David Garske
|
561d3a2340
|
Add CMakeList.txt to autoconf, so its in the "make dist" commercial bundles.
|
2023-12-04 17:14:27 -08:00 |
David Garske
|
53acf0bcbf
|
Use localhost 127.0.0.1 for CSR. Add TLS server option `-self` to use the self signed certs.
|
2023-12-01 14:37:34 -08:00 |
David Garske
|
137a348c14
|
TLS PK callback RSA PSS Padding cleanups. TLS server/client cleanups. Added server `-i` option to keep running unless failure.
|
2023-12-01 14:12:57 -08:00 |
David Garske
|
e601803f1b
|
Added support for PK callbacks with RSA Sign using PKCSv1.5 and PSS.
Fixes for building wolfTPM without crypto callbacks.
Fixes for building/running with FIPS.
|
2023-12-01 08:25:53 -08:00 |
Eric Blankenhorn
|
18e6177634
|
Merge pull request #311 from dgarske/tpm_cryptocb_keygen
Add TPM crypto callback support for RSA key generation
|
2023-11-29 15:37:33 -06:00 |
David Garske
|
50137547ed
|
Fix for policy_sign issue when r or s is less than key size (needs zero padding).
|
2023-11-29 13:10:04 -08:00 |
David Garske
|
18531274da
|
Fix TLS bidirectional shutdown socket issue. Just use 11111 for all TLS tests, to avoid real random port collision with SWTPM sockets. Resolves TLS issue with "ERROR: failed to bind! errno 98".
|
2023-11-29 12:34:06 -08:00 |
David Garske
|
3d28d9044f
|
Fix for `wolfTPM2_GetRng` not properly returning an initialized WC_RNG.
|
2023-11-28 14:15:56 -08:00 |
David Garske
|
119b6f275b
|
Fix the wolfSSL build instructions.
|
2023-11-28 13:25:46 -08:00 |
David Garske
|
74fd3c6841
|
Fix for ECC encrypt secret integrity check failed due to zero pad issue.
|
2023-11-28 13:14:23 -08:00 |
David Garske
|
a82c93d15b
|
Fix leading zero issue on verify.
|
2023-11-28 11:58:21 -08:00 |
David Garske
|
4abd14cd95
|
Fix to make sure leading ECC sign leading zeros are removed when not required.
|
2023-11-28 11:41:09 -08:00 |
David Garske
|
b6473792c0
|
Cleanup KDF function return code checking to avoid scan-build warning.
|
2023-11-28 09:59:27 -08:00 |
David Garske
|
f684dbd53b
|
Support ECC KeyGen for signing or derive based on callback context eccKey or ecdhKey population.
|
2023-11-28 08:20:29 -08:00 |
Eric Blankenhorn
|
4d65e9f10f
|
Merge pull request #310 from dgarske/csr_cryptocb_devid
Use a different (not default) devId for the CSR crypto callback.
|
2023-11-28 07:43:47 -06:00 |
David Garske
|
b2457e45e7
|
Properly translate a TPM ECC signature verify error for compatibility.
|
2023-11-27 16:16:40 -08:00 |
David Garske
|
ef59d06bc5
|
Improve logic for finding TPM curve in ECC key generation. A call to wc_ecc_make_key can use curve_id 0 (to detect), but we can get it from the "dp".
|
2023-11-20 16:09:21 -08:00 |
David Garske
|
4b433f24fb
|
Troubleshooting issues with socket `tcp bind failed: Address already in use`.
|
2023-11-20 15:42:26 -08:00 |
David Garske
|
a48b074e5f
|
Improve the ECC key import scheme for signing.
|
2023-11-17 11:18:53 -08:00 |
David Garske
|
249f9d4942
|
Fixes for building wolfCrypt without PEM to DER support.
|
2023-11-15 21:53:50 -08:00 |
David Garske
|
a33ed5b9ae
|
Allow import of wolf ECC marked as private only (`ECC_PRIVATEKEY_ONLY`).
|
2023-11-15 21:52:49 -08:00 |
David Garske
|
7dbd844586
|
Add TPM crypto callback support for RSA key generation.
|
2023-11-13 14:56:46 -08:00 |
David Garske
|
b366a8db85
|
Use a different (not default) devId for the CSR crypto callback.
|
2023-11-09 19:13:20 -08:00 |
David Garske
|
ce56065f91
|
Merge pull request #309 from night1rider/Jenkins-wolfTPM-example-fix
Adding error fix for Jenkins Test: nightly-wolfTPM-examples-V2
|
2023-11-02 13:54:08 -07:00 |
dell5060
|
b02a33fd0e
|
Adding error fix for Jenkins Test: nightly-wolfTPM-examples-V2
|
2023-11-02 13:07:57 -06:00 |
David Garske
|
3e1f90d1cd
|
Merge pull request #308 from tmael/use_crypto_e
Remove error-ssl.h
|
2023-11-01 17:41:12 -07:00 |
Tesfa Mael
|
df89f497e5
|
Remove error-ssl.h
|
2023-11-01 17:17:28 -07:00 |
JacobBarthelmeh
|
5b288d480d
|
Merge pull request #306 from dgarske/rel_v3.0_prep
Prep for release v3.0
|
2023-10-30 14:02:18 -06:00 |
David Garske
|
a10a10db5d
|
Added v3.0 release notes and updated version.
|
2023-10-30 12:02:28 -07:00 |
David Garske
|
9cad7f4e24
|
Fix some of the example TODO's. Fixes for seal/unseal example. Fixes for TLS with param enc. Fix signed_timestamp with ECC.
|
2023-10-30 12:00:37 -07:00 |
David Garske
|
f35dbbbb30
|
Fixes for using Windows TBS API. The `wolfTPM2_NVStoreKey` should return `TPM_RC_COMMAND_CODE` or `TPM_E_COMMAND_BLOCKED` for the `WOLFTPM_IS_COMMAND_UNAVAILABLE` macro. Add better enable option name `--enable-wintbs` (currently is `--enable-winapi`.
|
2023-10-30 10:06:17 -07:00 |
David Garske
|
2d14cd2297
|
Fixes for building wolfCrypt with no RSA (--disable-rsa / NO_RSA).
|
2023-10-23 14:05:10 -07:00 |
David Garske
|
1041898120
|
Compiler warning files with `NO_FILESYSTEM`.
|
2023-10-23 14:04:44 -07:00 |
David Garske
|
862617c07b
|
Update the TODO list in the README.
|
2023-10-23 14:04:44 -07:00 |
John Bland
|
45847e3f63
|
Merge pull request #307 from dgarske/csr_sigtype
Fixes and improvements for wolfTPM CSR wrappers
|
2023-10-23 16:57:15 -04:00 |
David Garske
|
cfd96d595e
|
Add CI tests for CSharp wrappers.
|
2023-10-23 11:16:26 -07:00 |
David Garske
|
7a11cb2213
|
Fix support for ECC 384-bit only support. Tested with: `./configure --enable-wolftpm CFLAGS="-DECC_USER_CURVES -DNO_ECC256 -DHAVE_ECC384" --disable-examples --disable-crypttests && make`
|
2023-10-20 15:08:45 -07:00 |
David Garske
|
8ae11cf9eb
|
Add wrapper support for setting key usage (not just extended key usage).
|
2023-10-20 14:40:49 -07:00 |
David Garske
|
b9c51335a4
|
Fix for trying to use a custom wolfTPM CSR `sigType`. The `csr->req.sigType` was being initialized to CTC_SHA256wRSA, and not allowing override.
|
2023-10-18 14:16:28 -07:00 |
John Bland
|
79105f9466
|
Merge pull request #305 from dgarske/auth_refactor
TPM command authentication refactor
|
2023-10-12 17:41:08 -04:00 |
David Garske
|
cdcdf389c3
|
Fixes for command auth flag typo. Fix to make sure extra auth are not provided.
|
2023-10-12 14:19:42 -07:00 |
David Garske
|
f3e1bbbf3d
|
Refactor of the command authentication. If command does not require auth do not supply it. ZD 16689
|
2023-10-12 13:48:04 -07:00 |
John Bland
|
ddbf4ef5fc
|
Merge pull request #303 from dgarske/structassignment
Fixes to avoid struct assignment and C++ build fixes
|
2023-10-12 13:48:05 -04:00 |
David Garske
|
0c7254d7c0
|
Fixes for building with C++.
|
2023-10-11 15:56:04 -07:00 |
David Garske
|
37c3bd2535
|
Fix for another struct assignment on `eccDetail.kdf`. ZD 16788
|
2023-10-11 14:51:25 -07:00 |
David Garske
|
e9f89db538
|
Fixes to avoid struct assignment, which can result is unaligned access (use memcpy).
|
2023-10-11 14:51:25 -07:00 |
John Bland
|
241f55415c
|
Merge pull request #302 from dgarske/stm32_i2c
Fixes for STM32 I2C
|
2023-10-06 16:51:35 -04:00 |
John Bland
|
29634c226a
|
Merge pull request #304 from dgarske/cryptocb_cleanup
Relocate crypto callback code to its own code file
|
2023-10-06 16:23:53 -04:00 |
David Garske
|
5226df34d1
|
Improve STM HAL I2C performance by adding proper guard delay between wake, write and read.
|
2023-10-05 14:22:50 -07:00 |
David Garske
|
14d766512f
|
Fixes for STM32 I2C.
|
2023-10-04 15:31:30 -07:00 |