WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity
19,447 Commits
27 Branches
168 Tags
358 MiB
Commit Graph

19447 Commits (7116f1e005eab01b8d1e47244a2bb859f0aa14ad)

Author SHA1 Message Date
Juliusz Sosinowicz 7116f1e005 Add comment. 2023-03-28 14:14:40 +02:00
Juliusz Sosinowicz f0ad01f552 Send secure renegotiation extension by default 
- Add test for terminating the connection
- Add ProcessReplyEx(ssl, 1) to wolfSSL_accept
 2023-03-28 12:43:53 +02:00
Juliusz Sosinowicz 28fd14621a Add harden config to testing 2023-03-27 17:20:16 +02:00
Juliusz Sosinowicz c0b0c14a15 Allow user to choose between 112 and 128 bits of security 2023-03-27 15:42:19 +02:00
Juliusz Sosinowicz 3b759580b2 Require 128 bits of security for public keys 2023-03-27 10:27:57 +02:00
Juliusz Sosinowicz 40cbb32b23 Ciphersuite check 
https://www.rfc-editor.org/rfc/rfc9325#section-4.1
 2023-03-24 16:44:33 +01:00
Juliusz Sosinowicz e465089798 No old TLS check 2023-03-24 16:44:01 +01:00
Juliusz Sosinowicz 94cf845c05 Truncated hmac check 2023-03-24 16:43:34 +01:00
Juliusz Sosinowicz 7791b8ff4d Add config option 2023-03-24 16:42:56 +01:00
JacobBarthelmeh e0e590f126
Merge pull request #6223 from lealem47/misc_fixes 
Async build typos and miscellaneous fixes
 2023-03-23 23:55:20 +07:00
David Garske aeffe6cfa7
Merge pull request #6222 from JacobBarthelmeh/alerts 
don't try to send an alert to a disconnected peer
 2023-03-23 09:49:15 -07:00
David Garske 3ef7db8e1b
Merge pull request #6229 from JacobBarthelmeh/Testing 
fix for check on ecc public key size with FIPS and compressed keys
 2023-03-23 08:25:31 -07:00
JacobBarthelmeh e9214e07cf
Merge pull request #6219 from RSmatRA/RSmatRA/zeroing-input-buffer 
Do not ForceZero the part of the buffer that has not been used.
 2023-03-23 21:13:37 +07:00
JacobBarthelmeh a121a5c270
Merge pull request #6225 from SparkiDev/memzero_check_fixes_1 
MemZero check fixes
 2023-03-23 21:04:39 +07:00
JacobBarthelmeh 25577ab96c fix for check on ecc public key size with FIPS and compressed keys 2023-03-23 06:58:03 -07:00
Sean Parkinson d1e4349661 MemZero check fixes 
ForceZero the client and server secret regardless of whether TLS 1.3 as
it may change but have been copied in.
ForceZero the input buffer in wolfSSL_Clear() when encryption was on.

Changed wc_PRF_TLS to only check the parts of data used.
Changed where scatch is added for checking in wc_AesCtrEncrypt.
Change wc_MakeRsaKey to memset p, q, tmp1, tmp2 and tmp3 to all zeros so
that MemZero check works. Memset not needed otherwise.
Changes for new compiler - thinks uninitialized.
 2023-03-23 12:27:38 +10:00
JacobBarthelmeh 6ad786abe4
Merge pull request #6224 from SparkiDev/quic_aes_gcm_stream 
AES-GCM streaming: EVP needs to set IV with wc_AesGcmInit
 2023-03-23 08:25:31 +07:00
Lealem Amedie a31ca24bb0 Fix for async build with enable all 2023-03-22 17:30:38 -06:00
Lealem Amedie c83e899b78 Fix for overlong string warning 2023-03-22 17:29:53 -06:00
Lealem Amedie a5e7a20c93 Fix for logic gating strerror_r() 2023-03-22 17:29:13 -06:00
Sean Parkinson 1fa75a5503 AES-GCM streaming: EVP needs to set IV with wc_AesGcmInit 
Store IV if it is small enough to fit in aes->reg - was a copy of the
aes->reg in the first place.
 2023-03-23 09:28:22 +10:00
Sean Parkinson df4081ea5a
Merge pull request #6215 from JacobBarthelmeh/static_analysis 
fixes for static analysis reports
 2023-03-23 08:37:08 +10:00
JacobBarthelmeh 7734588669 don't try to send an alert to a disconnected peer 2023-03-22 14:20:07 -07:00
David Garske 835e8a18c7
Merge pull request #6216 from JacobBarthelmeh/fuzzing 
adjust sanity check for index into URI
 2023-03-22 12:52:04 -07:00
JacobBarthelmeh c11f5d0ee5 fixes for static analysis reports 2023-03-22 12:34:37 -07:00
David Garske 7c122cda6d
Merge pull request #6197 from JacobBarthelmeh/Testing 
adjust location of Options typdef
 2023-03-22 12:31:00 -07:00
JacobBarthelmeh edca6b9d03 adjust location of Options typedef 2023-03-22 09:27:26 -07:00
JacobBarthelmeh 7e8d027a17
Merge pull request #6217 from douzzer/20230321-fixes 
20230321-fixes
 2023-03-22 10:23:07 -06:00
Radim Smat e618bb9686 Do not ForceZero the part of the buffer that has not been used. 2023-03-22 14:48:18 +01:00
Daniel Pouzzner 49cd3ff872 wolfssl/internal.h: fixes for -Wpedantic "redefinition of typedef" around typedef ... TLSX and Options; 
src/internal.c: fix for -Wdeclaration-after-statement and clang-diagnostic-unreachable-code-break;

tests/api.c: fix for -Wunused-variable and clang-analyzer-deadcode.DeadStores;

olfcrypt/src/pkcs12.c: fixes for cppcheck uselessAssignmentPtrArg and arrayIndexThenCheck, and clang-tidy clang-analyzer-deadcode.DeadStores and clang-analyzer-core.NonNullParamChecker;

wolfssl/src/tls.c: fix for clang-analyzer-deadcode.DeadStores;

wolfcrypt/src/tfm.c: fix for clang-diagnostic-newline-eof;

src/tls13.c: fix for clang-analyzer-core.NonNullParamChecker.
 2023-03-21 22:52:56 -05:00
JacobBarthelmeh 180a20d535 adjust sanity check for index into URI 2023-03-21 20:19:08 -07:00
JacobBarthelmeh 147395476f
Merge pull request #6213 from SparkiDev/regression_fixes_6 
Regression testing fixes
 2023-03-21 20:17:30 -06:00
Sean Parkinson 9ec742b11f Regression testing fixes 
HAVE_ECH only used by TLS 1.3 add protection around all code.
ssl->options.onlyPskDheKe only available when HAVE_SUPPORTED_CURVES.
CleanupClientTickets() defined when HAVE_SUPPORTED_CURVES.
TLSX_KeyShare_DeriveSecret only defined when HAVE_SUPPORTED_CURVES.
DecodeResponseData - initialize variable single.
New OpenSSL compatibility BN code requires mp_read_radix - turn on in
integer.c, sp_int.c when OPENSSL_EXTRA defined.
rsa.c:_CheckProbablePrime - make sure tmp1 and tmp2 are initialized
before error handling jumps to freeing them.

test_remove_hs_message uses 1024-bit DH key which is not supported when
using SP math with SP.
 2023-03-22 08:57:20 +10:00
Sean Parkinson 1eeb54e981
Merge pull request #6208 from JacobBarthelmeh/fuzzing 
handle failing RNG init when creating PKEY
 2023-03-22 08:55:38 +10:00
JacobBarthelmeh 2af55903c5
Merge pull request #6187 from SparkiDev/tls13_server_id 
Server ID - long id, TLS 1.3 - cache client session for tickets
 2023-03-21 16:48:05 -06:00
JacobBarthelmeh 265a6c824f
Merge pull request #6164 from wolfSSL/gojimmypi-patch-zephyr-link 
Update README link
 2023-03-21 09:10:52 -06:00
Sean Parkinson 17e20b8c36 Server ID - long id, TLS 1.3 - cache client session for tickets 
Long server IDs were being truncated. Hash long IDs instead.
TLS 1.3 session ticket on client side no longer added session to client
cache. Explicit call added.
 2023-03-21 15:29:07 +10:00
John Safranek 74f549a0b4
Merge pull request #6206 from SparkiDev/aesgcm_armv6_asm 
AES ARMASM <ARMV7: fix load order
 2023-03-20 21:21:01 -07:00
Sean Parkinson 4eeb792a05 AES ARMASM <ARMV7: fix load order 
Loading from memory based on register that is overwritten in ldrd.
When ldrd split out for older processors, register overwritten before
second load.
Switch order of loads in this case.
 2023-03-21 10:53:47 +10:00
Sean Parkinson 09dd9a0ca3
Merge pull request #6207 from rizlik/move_alerts_from_get_record_header 
Move alerts from get record header
 2023-03-21 08:20:22 +10:00
JacobBarthelmeh 5c7be2fa98
Merge pull request #6202 from philljj/zd15807 
Fix out-of-bounds read in CRL parsing
 2023-03-20 14:19:01 -06:00
JacobBarthelmeh 72e53ca1a4 handle failing RNG init when creating PKEY 2023-03-20 07:17:25 -07:00
Marco Oliverio 84d8245e58 internal: move SendAlerts outside of GetRecordHeader 
This will give a chance to DTLS logic to ignore an error.
 2023-03-20 10:50:00 +00:00
Marco Oliverio aabd665e73 SendAlert: propagate return error in non-fatal SendAlert 2023-03-20 10:50:00 +00:00
Sean Parkinson c3b51af6cd
Merge pull request #6204 from JacobBarthelmeh/name 
Fix for value of givenName and name
 2023-03-20 10:59:47 +10:00
jordan 2fe473cf9f Fix out-of-bounds read in CRL parsing 2023-03-17 22:33:35 -05:00
JacobBarthelmeh 327692b09f
Merge pull request #6200 from kareem-wolfssl/zd15324_2 
Fix IAR warnings.
 2023-03-17 15:04:35 -06:00
JacobBarthelmeh 9e331aa6d5
Merge pull request #6195 from embhorn/zd15836 
Fix type conv error in logging
 2023-03-17 14:46:54 -06:00
JacobBarthelmeh 9c3cfab328
Merge pull request #6196 from bandi13/zd15783 
OCSP_CERT_UNKNOWN
 2023-03-17 14:33:57 -06:00
JacobBarthelmeh 0e431c3eaa add given name test case 2023-03-17 13:07:15 -07:00