WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity
wolfssl/scripts
History
Tobias Frauenschläger f0b78fb9ba Complete a TLS 1.3 handshake with the ECC PK callbacks 
myEccKeyGen() generated the key share straight into the library's key object,
and myEccSharedSecret() is handed only the peer's key, so a TLS 1.3 client had
no private key left to reach and every handshake ended with:

  wolfSSL_connect error -170, ECC input argument wrong type, invalid input

TEST_PK_PRIVKEY already kept the key on the application's side, which is what
a real PK-callback application does anyway; it just was not the default. Keep
it whenever the connection is TLS or DTLS v1.3 as well, and have the shared
secret callback pick the key by the same question its key gen asked, not by a
flag key gen has not set yet. The union holding it stops being
TEST_PK_PRIVKEY-only, and its comment stops naming TLS v1.2 as the version
that needs it.

Neither example zeroed its PkCbInfo, so hasKeyGen started as stack garbage.
Only the TEST_PK_PRIVKEY paths read it before, which hid that; zero it in
both.

scripts/pkcallbacks.test only ever ran the build's default version, and that
is TLS v1.2 wherever it is compiled in, so none of the above was covered. Run
the default and then each version the build has.
 		2026-09-08 18:56:18 +02:00
..
bench fix: use SPDX GPL-3.0-or-later license identifiers in metadata 2026-08-07 13:34:41 -07:00
testdata feat: SBOM generation and OmniBOR build provenance (CRA compliance) 2026-07-23 21:51:26 -07:00
advisory-vex-overlay.example.json feat: SBOM generation and OmniBOR build provenance (CRA compliance) 2026-07-23 21:51:26 -07:00
advisory-vex-overlay.schema.json feat: SBOM generation and OmniBOR build provenance (CRA compliance) 2026-07-23 21:51:26 -07:00
aria-cmake-build-test.sh
…
asn1_oid_sum.pl add ssh server extended key usage parsing and missing ssh extended key parsing to asn template from asn orig 2026-09-02 23:03:51 -06:00
benchmark.test Regression testing fixes 2026-09-03 20:59:54 +10:00
benchmark_compare.sh
…
bomsh_verify.py sbom: address advisory/SBOM review findings 2026-07-23 21:51:26 -07:00
cleanup_testfiles.sh
…
crl-gen-openssl.test Generate CRLs from unit test script 2026-03-10 13:25:12 -07:00
crl-revoked.test Address review: make the hang guards actually fire 2026-08-13 15:52:17 +00:00
csaf_validate.mjs feat: SBOM generation and OmniBOR build provenance (CRA compliance) 2026-07-23 21:51:26 -07:00
cwe-names.json feat: SBOM generation and OmniBOR build provenance (CRA compliance) 2026-07-23 21:51:26 -07:00
dertoc.pl
…
dtls.test Regression testing fixes 2026-09-03 20:59:54 +10:00
dtlscid.test Regression testing fixes 2026-09-03 20:59:54 +10:00
external.test Send SNI in external.test so the peer returns its own certificate 2026-09-04 15:02:39 +02:00
falcon-interop.c Falcon: remove FN-DSA / FIPS 206 references from code comments and text 2026-07-22 09:52:26 +02:00
gen-advisory sbom: address advisory/SBOM review findings 2026-07-23 21:51:26 -07:00
gen-sbom sbom: drop liboqs dependency support (removed from wolfSSL) 2026-07-23 22:32:50 -07:00
google.test Address review: make the hang guards actually fire 2026-08-13 15:52:17 +00:00
include.am Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
makedistsmall.sh
…
memtest.sh
…
multi-msg-record.py Regression testing fixes 2026-09-03 20:59:54 +10:00
multi-msg-record.test Fix comment dash 2026-05-14 13:10:13 +02:00
ocsp-responder-openssl-interop.test Regression testing fixes 2026-09-03 20:59:54 +10:00
ocsp-stapling-with-ca-as-responder.test Regression testing fixes 2026-09-03 20:59:54 +10:00
ocsp-stapling-with-wolfssl-responder.test Regression testing fixes 2026-09-03 20:59:54 +10:00
ocsp-stapling.test Regression testing fixes 2026-09-03 20:59:54 +10:00
ocsp-stapling2.test Regression testing fixes 2026-09-03 20:59:54 +10:00
ocsp-stapling_tls13multi.test Regression testing fixes 2026-09-03 20:59:54 +10:00
ocsp.test Address review: make the hang guards actually fire 2026-08-13 15:52:17 +00:00
openssl.test Regression testing fixes 2026-09-03 20:59:54 +10:00
openssl_srtp.test Regression testing fixes 2026-09-03 20:59:54 +10:00
pem.test scripts/pem.test: correctly compute and use SRC_DIR, and fix whitespace. 2026-04-20 17:42:29 -05:00
ping.test
…
pkcallbacks.test Complete a TLS 1.3 handshake with the ECC PK callbacks 2026-09-08 18:56:18 +02:00
psk.test Address review: tell a timeout kill apart from an expected failure 2026-08-17 03:35:10 +00:00
puf_bch_genpoly.py wolfCrypt SRAM PUF: configurable error correction and footprint 2026-08-09 09:04:51 +02:00
resume.test Address review: make the hang guards actually fire 2026-08-13 15:52:17 +00:00
rsapss.test Regression testing fixes 2026-09-03 20:59:54 +10:00
sbom.am scripts/sbom.am: add SBOM_OPTIONS_H override to unify the fragment 2026-07-23 21:51:26 -07:00
sniffer-gen.sh Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-ipv6.pcap Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-static-rsa.pcap Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-testsuite.test Fix threaded snifftest dropping every queued packet 2026-09-01 09:33:17 +02:00
sniffer-tls12-etm-keylog.out Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-tls12-etm-keylog.pcap Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-tls12-etm-keylog.sslkeylog Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-tls12-etm.out Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-tls12-etm.pcap Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-tls12-keylog.out Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-tls12-keylog.pcap updated email to facts@wolfssl.com 2026-06-26 14:44:16 -06:00
sniffer-tls12-keylog.sslkeylog updated email to facts@wolfssl.com 2026-06-26 14:44:16 -06:00
sniffer-tls13-dh-resume.pcap updated email to facts@wolfssl.com 2026-06-26 14:44:16 -06:00
sniffer-tls13-dh.pcap updated email to facts@wolfssl.com 2026-06-26 14:44:16 -06:00
sniffer-tls13-ecc-resume.pcap updated email to facts@wolfssl.com 2026-06-26 14:44:16 -06:00
sniffer-tls13-ecc.pcap updated email to facts@wolfssl.com 2026-06-26 14:44:16 -06:00
sniffer-tls13-hrr.pcap
…
sniffer-tls13-keylog.out Address review findings on the sniffer Encrypt-Then-MAC fix 2026-09-01 09:33:17 +02:00
sniffer-tls13-keylog.pcap updated email to facts@wolfssl.com 2026-06-26 14:44:16 -06:00
sniffer-tls13-keylog.sslkeylog Parse sniffer keylog file line by line for RFC 9850 2026-07-17 11:04:24 +02:00
sniffer-tls13-x25519-resume.pcap Give the sniffer's X25519 static ephemeral key an RNG 2026-09-01 09:33:17 +02:00
sniffer-tls13-x25519.pcap Give the sniffer's X25519 static ephemeral key an RNG 2026-09-01 09:33:17 +02:00
stm32l4-v4_0_1_build.sh
…
test_csaf_validate.mjs fix spelling 2026-07-23 21:51:26 -07:00
test_gen_advisory.py sbom: address advisory/SBOM review findings 2026-07-23 21:51:26 -07:00
test_gen_sbom.py sbom: drop liboqs dependency support (removed from wolfSSL) 2026-07-23 22:32:50 -07:00
tls13.test Address review: tell a timeout kill apart from an expected failure 2026-08-17 03:35:10 +00:00
trusted_peer.test Address review: tell a timeout kill apart from an expected failure 2026-08-17 03:35:10 +00:00
tsp.test Time-Stamp Protocol (RFC 3161) 2026-07-08 09:33:47 +10:00
unit.test.in
…
user_settings_asm.sh
…