WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity
33,030 Commits
8 Branches
168 Tags
358 MiB
Commit Graph

3 Commits (master)

Author SHA1 Message Date
Juliusz Sosinowicz c1982d36ed Match the full server ID length in the client session cache 
wolfSSL_GetSessionClient() compared only the requested number of bytes, so a
short server ID could match a cached entry that merely started with the same
bytes and landed in the same cache row. Applications partitioning the cache
with wolfSSL_SetServerID() could then offer a ticket across partitions,
against RFC 9846 Appendix C.4.

Fixes https://github.com/wolfSSL/wolfssl/issues/11132
 2026-09-10 05:43:26 +00:00
Kareem 4544e3bacd Avoid aliasing the ticket in wolfSSL_GetSessionAtIndex. 
Thanks to Clouditera Security; Z.ai Security; NSFOCUS for the report.
 2026-08-03 13:30:43 -07:00
Sean Parkinson c674cec4ac api.c: move out tests into other files 
Move out DTLS 1.3 specific tests into test_dtls13.c. (Also move out from
test_dtls.c)
Move out DTLS tests into test_dtls.c.
Move out LMS and XMSS tests into test_lms_xmss.c.
Move out SSL session tests into test_session.c.
Move out remaining ML-DSA/Dilithium tests in api.c into test_mldsa.c.
 2026-05-28 19:34:09 +10:00