WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity
32,199 Commits
8 Branches
168 Tags
358 MiB
Commit Graph

32199 Commits (copilot/research-task-build-uml-linux-analysis)

Author SHA1 Message Date
David Garske 63b02a1586 CI: assert test-lib exit status in the wolfBoot host-smoke job 2026-08-26 07:55:01 +02:00
philljj b83f5d60f3
Merge pull request #11216 from dgarske/rng_seed_device 
random: add WC_RNG_SEED_DEVICE to seed from a nominated device
 2026-08-25 14:20:57 -05:00
philljj 7afd4a2c68
Merge pull request #11236 from JacobBarthelmeh/netscape 
Restrict duplicate netscape certificate type extensions f-10626
 2026-08-25 14:12:11 -05:00
philljj a417ee3a4c
Merge pull request #11038 from gasbytes/dupcrl_entry-copies-fix 
Deep copy revoked cert entry extensions in DupCRL_Entry()
 2026-08-25 13:36:51 -05:00
David Garske fcb31dea21 random: add WC_RNG_SEED_DEVICE to seed from a nominated device 2026-08-25 08:19:24 -07:00
philljj 514af438d7
Merge pull request #11156 from gasbytes/x509_store_ctx_verify_cb_fix 
Report X509_VERIFY_PARAM hostname/IP mismatches to the verify callback so applications can inspect or override them
 2026-08-25 09:38:08 -05:00
Reda Chouk 53647f9dcd Deep copy revoked cert entry extensions in DupCRL_Entry() when CRL_STATIC_REVOKED_LIST and OPENSSL_EXTRA are enabled, and add a regression test for the X509_CRL_dup path. 2026-08-25 16:04:26 +02:00
philljj 33824d8053
Merge pull request #11006 from rlm2002/coverity 
20260729 Coverity fixes
 2026-08-25 08:46:03 -05:00
Sean Parkinson 94dca6fdd4
Merge pull request #11228 from aidangarske/fenrir-fixes-9961 
Encode default cert validity as UTCTime through 2049
 2026-08-25 17:16:56 +10:00
Sean Parkinson feca5c4247
Merge pull request #11249 from night1rider/Expand-AES-Benchmark 
Expand aes benchmark and fix leak in benchmark
 2026-08-25 16:19:57 +10:00
Sean Parkinson 6c36c71c5f
Merge pull request #11237 from holtrop-wolfssl/f-7106 
wolfssl_local_MatchBaseName: fix 1-byte read out of bounds looking for "@"
 2026-08-25 16:09:06 +10:00
Sean Parkinson df727d6b90
Merge pull request #11233 from dgarske/ecc_blind_k_fixes 
Fix private scalar handling under ECC key blinding and add CI coverage
 2026-08-25 16:07:06 +10:00
Sean Parkinson e15720e4e3
Merge pull request #11185 from embhorn/zd22296 
Enforce RFC 8446 SHA-1 certificate rule on TLS 1.3 chains
 2026-08-25 11:07:37 +10:00
Sean Parkinson 2cda28008c
Merge pull request #10992 from padelsbach/sm2-verify-overlap-test 
Add SM2 verify hash test with identical points
 2026-08-25 10:08:28 +10:00
JacobBarthelmeh 678a065f10
Merge pull request #11248 from night1rider/ASU-ECIES-Improvements 
Asu ecies improvements
 2026-08-24 16:42:06 -06:00
night1rider d851d60427 Free the Aes on every AES-OFB benchmark error path 2026-08-24 15:48:30 -06:00
night1rider 2d81662d6c Route the AES-CFB and AES-OFB benchmarks through the crypto callback devId 2026-08-24 15:46:32 -06:00
philljj f8b140f511
Merge pull request #11204 from padelsbach/falcon-cb-free 
Add CB_FREE mode for Falcon
 2026-08-24 16:30:18 -05:00
philljj d3c63a06f6
Merge pull request #11224 from anhu/fake_alloc 
Macro guard to prevent dead code.
 2026-08-24 15:15:40 -05:00
night1rider 69786c2f00 Add unit test coverage for wc_ecc_ctx_get_rng 2026-08-24 14:13:37 -06:00
philljj cf27755f89
Merge pull request #11244 from SparkiDev/asn_template_doc 
ASN Template documentation: add more content
 2026-08-24 15:09:08 -05:00
night1rider 6d2454826f Offload ASU ECIES on NIST P-192 2026-08-24 13:40:37 -06:00
night1rider 69e82f1f40 Use the caller's RNG for the ASU ECIES GCM nonce 2026-08-24 11:51:36 -06:00
JacobBarthelmeh ff17d489d3
Merge pull request #11209 from night1rider/curve448-callbacks 
Add curve448 crypto callback support
 2026-08-24 09:50:17 -06:00
JacobBarthelmeh 74b8207b72
Merge pull request #11053 from night1rider/Xilinx-ASU-ECC-standalone 
Xilinx asu ecc standalone
 2026-08-24 09:46:02 -06:00
Sean Parkinson 78c2528c56 ASN Template documentation: add more content 
Added a bunch of content about how to use ASN templates.
Added a section with a list of things to do when adding a new template.
Added mappiong of ASN.1 notation to template lines.
Added ASN.1 type specific information.
Added a checklist at the end to head off the common issues.
Added references to ASN_TEMPLATE.md.
Added other informatrion.
 2026-08-24 10:52:23 +10:00
philljj cb138b22a2
Merge pull request #11163 from kareem-wolfssl/vanessa 
Fix a few sniffer issues.  Document DES function size requirements.
 2026-08-22 09:56:06 -05:00
night1rider 51975e27a5 Guard curve448 shared secret software path on ret so the cryptocb reset is read 2026-08-21 17:04:19 -06:00
night1rider 5dd72727cb Fix curve448 test guards for CB_FIND and zero-check builds, cover cb zero result 2026-08-21 17:04:19 -06:00
night1rider 2c5d885233 Fix curve448_key_make_pub being unused under WOLF_CRYPTO_CB_ONLY_CURVE448 with key export disabled 2026-08-21 17:04:19 -06:00
night1rider 06abdc18e6 Only offload a key-owned X448 private scalar to that key's own device 
wc_curve448_make_key and wc_curve448_export_public_ex derived the public
point through the keyless wc_curve448_make_pub, which dispatches to the
first registered device; route them through a devId-carrying helper.
 2026-08-21 17:04:19 -06:00
night1rider 93d71fdda9 Address second round of review findings on curve448 cryptocb support 
Restore key devId on the keygen stub's error return, full-buffer-check
callback output, cover the new/delete NULL out-params, drop a dead guard.
 2026-08-21 17:04:19 -06:00
night1rider eb1cde51ab Address review findings on curve448 cryptocb support 
Assert cryptocb output in curve448_onlycb_test, reject an all-zero
wc_curve448_generic result, guard the new API test for CB-only builds.
 2026-08-21 17:04:18 -06:00
night1rider 3d7f7ad4d6 Add curve448 crypto callback support 
Mirror curve25519: keygen, shared secret, make pub and generic
callbacks, wc_curve448_init_ex/new/delete, new wc_curve448_generic
API with scalar clamp checks, WOLF_CRYPTO_CB_ONLY_CURVE448 mode,
TLS devId plumbing, tests (test.c, api unit tests, swdev),
benchmark devId, CI entries.
 2026-08-21 17:04:18 -06:00
philljj ac45965828
Merge pull request #11217 from night1rider/ShakeCB-Issue 
Set hashType on SHAKE128/256 contexts so crypto-callback Copy/Free can clean up correctly
 2026-08-21 17:58:06 -05:00
Ruby Martin 589b9eb4bf Free the unexpected return in test_wolfSSL_load_client_CA_file 2026-08-21 16:50:11 -06:00
philljj 97a52ed9f6
Merge pull request #11235 from padelsbach/crypto-cb-ci-timeout 
CI: increase timeout and fix minutes in cryptocb-only test
 2026-08-21 16:55:34 -05:00
philljj 583f214057
Merge pull request #11234 from aidankeefe2022/fenrir-10721 
Fix: Out of date comment
 2026-08-21 14:53:46 -05:00
Josh Holtrop 4eb192d4c8 wolfssl_local_MatchBaseName: fix 1-byte read out of bounds looking for "@" 
Fixes F-7106
 2026-08-21 15:47:05 -04:00
JacobBarthelmeh 986066c856 Restrict duplicate netscape certificate type extensions f-10626 2026-08-21 13:19:09 -06:00
Paul Adelsbach bded1f48c8 CI: increase timeout and fix minutes in cryptocb-only test 2026-08-21 11:48:55 -07:00
night1rider ddbd4c10b0 Xilinx Versal Gen2 ASU: TRNG seed in the template, no compressed key ECIES 2026-08-21 11:58:32 -06:00
Kareem 54e41494ab Code review feedback 2026-08-21 10:55:18 -07:00
Kareem 0f9e3580cc Code review feedback 2026-08-21 10:55:16 -07:00
Kareem e59b42b2ca Add documentation for expected size for DES functions. 
A complete fix is not possible without breaking OpenSSL compatibility.
Fixes F-2246.
 2026-08-21 10:54:51 -07:00
Ruby Martin b9575d9502 Assert TLSX_GetRequestSize matches TLSX_WriteRequest in cookie echo test 2026-08-21 11:43:16 -06:00
Kareem 7b0a50d44c Fix multiple comparisons in AdjustSequence and CheckFinCapture in the sniffer. 
Thanks to NVIDIA Project Vanessa for the report.
 2026-08-21 10:41:38 -07:00
Kareem 46f13980d6 Avoid a negative length in CheckHeaders/Sequence. 2026-08-21 10:41:38 -07:00
David Garske addd5ea04b Fix private scalar handling under ECC key blinding and add CI coverage 2026-08-21 11:53:29 -04:00
Aidan Keefe 550597a43a strengthen wording of 'test only' comment and cite relvent RFC along with correcting 'Currently allows comment to represent current behavior' 2026-08-21 09:43:42 -06:00