wolfssl

Author	SHA1	Message	Date
Marco Oliverio	c1c1929e55	dtls13: move Dtls13NewEpoch into DeriveTls13Keys Dlts13NewEpoch saves the keys currently derived in the ssl object. Moving Dtls13NewEpoch inside DeriveTls13Keys avoid the risk of using the wrong keys when creating a new Epoch. This fixes at least he following scenario: - Client has encryption epoch != 2 in the handshake (eg. due to rtx) - Client derives traffic0 keys after receiving server Finished message - Client set encryption epoch to 2 again to send the Finished message, this override the traffic key computed - Client creates the new epoch with the wrong key	2025-06-09 02:35:29 +02:00
Juliusz Sosinowicz	736a5e1f89	dtlsProcessPendingPeer: correctly set the current peer	2025-06-06 00:12:38 +02:00
Marco Oliverio	cbe1fb2c62	dtls: drop DTLS messages that span across datagrams A new macro "WOLFSSL_DTLS_RECORDS_CAN_SPAN_DATAGRAMS" restores the old behaviour.	2025-05-19 10:28:13 +02:00
Marco Oliverio	22f41a8dbb	Drop DTLS packets with bogus minor version number	2025-05-15 19:50:36 +02:00
Juliusz Sosinowicz	43c564d48b	dtls13: send acks with correct record number order	2025-04-18 14:56:59 -05:00
Juliusz Sosinowicz	3f560036d6	dtls13: additional epoch checks	2025-04-17 18:18:01 +02:00
David Garske	3075e57207	Whitespace and filename comment.	2025-02-14 09:51:29 -06:00
Juliusz Sosinowicz	68c27c4e5d	Move dtls cid tests to tests/api/dtls.c	2025-02-14 09:51:29 -06:00