81 lines
3.0 KiB
ReStructuredText
81 lines
3.0 KiB
ReStructuredText
wolfSSL-py Release 5.9.2 (Jul 15, 2026)
|
|
============================================
|
|
* Fix SSLSocket.write() corrupting bytes-like data such as bytearray/memoryview
|
|
* Return None instead of raising from getpeercert() when the peer sends no certificate
|
|
* Require verify_mode=CERT_REQUIRED when enabling check_hostname
|
|
* Map non-blocking WANT_READ/WANT_WRITE to SSLWantReadError/SSLWantWriteError
|
|
* FFI and build fixes
|
|
* Fenrir fixes
|
|
* Update wolfSSL to version 5.9.2
|
|
|
|
wolfSSL-py Release 5.8.4 (Dec 29, 2025)
|
|
============================================
|
|
* Fix an issue which allowed a client without a cert to connect despite setting verify_mode to CERT_REQUIRED (CVE-2025-15346):
|
|
A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced. Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided. This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake.
|
|
Thanks to Matan Radomski from Microsoft for the report.
|
|
* Update wolfSSL to version 5.8.4
|
|
|
|
wolfSSL-py Release 5.8.2 (Jul 24, 2025)
|
|
============================================
|
|
* Update wolfSSL to version 5.8.2
|
|
|
|
wolfSSL-py Release 5.7.4 (Nov 13, 2024)
|
|
============================================
|
|
* Update wolfSSL to version 5.7.4
|
|
|
|
wolfSSL-py Release 5.7.2 (Sep 6, 2024)
|
|
============================================
|
|
* SSLSocket: support version() version
|
|
* support disabling secure renegotiation
|
|
* Update wolfSSL to version 5.7.2
|
|
|
|
wolfSSL-py Release 5.6.6 (Jan 23, 2024)
|
|
============================================
|
|
* Fix segfault issue with TLS v1.3
|
|
* Update expired example certs
|
|
* Update wolfSSL to version 5.6.6
|
|
|
|
|
|
wolfSSL-py Release 5.6.0 (May 2, 2022)
|
|
============================================
|
|
* Update wolfSSL to version 5.6.0
|
|
|
|
wolfSSL-py Release 5.5.4 (December 30, 2022)
|
|
============================================
|
|
* Update wolfSSL to version 5.5.4
|
|
|
|
wolfSSL-py Release 5.5.3 (November 7, 2022)
|
|
===========================================
|
|
* Fix TLSv1.3 support
|
|
* Disable oldtls support
|
|
* Add changelog
|
|
* Adding support for CRL and DTLS
|
|
* Fix alert history code
|
|
* Update wolfSSL to version 5.5.3
|
|
|
|
|
|
wolfSSL-py Release 5.4.0 (July 13, 2022)
|
|
========================================
|
|
|
|
New Features
|
|
------------
|
|
|
|
* Update to wolfSSL 5.4.0 C library
|
|
* Add GitHub Actions support and remove Travis CI support
|
|
|
|
wolfSSL-py Release 5.3.0 (May 13, 2022)
|
|
=======================================
|
|
|
|
New Features
|
|
------------
|
|
|
|
* Update to wolfSSL 5.3.0
|
|
* Build completely refactored to be more Python-like and easier to use
|
|
* Add support for wolfSSL ctx password callback
|
|
|
|
Fixes
|
|
-----
|
|
|
|
* Raise error when wolfSSL_write() returns 0
|
|
* Update example certs to match main wolfSSL ones
|