mirror of https://github.com/wolfSSL/wolfssl.git
9d2082f7e1
* This PR resolves issues with using TLS client authentication (mutual auth) with crypto callbacks. The TLS client auth will not be sent without a private key being set. The solution is to allow setting a public key only if crypto callbacks is enabled and a devId is set. * Fix to allow using crypto callbacks with TLS mutual authentication where a private key is not available. * Fix for ED25519 sign when only a private key is loaded. * Fix to enable crypto callbacks for ED25519 and Curve25519 in TLS by using the _ex init functions. * Fix for wc_PemToDer return code where a PKCS8 header does not exist. * Remove duplicate logs in DoCertificateVerify. * Doxygen API updates: Added crypto callback help and updated use_PrivateKey with info about public key use. * * Added crypto callback tests for TLS client and server with mutual auth for RSA, ECC and ED25519. * Enhanced the API unit test TLS code to allow setting CA, cert and key. * Revert ED25519 changes. Opt to calculate public key directly when required for signing in the TLS crypto callback test. Build configuration fixes. * Fix to use proper devId in `ProcessBufferTryDecode`. * Various build fixes due to changes in PR. G++ issue with `missing-field-initializers`. Unused api.c func with DTLS and session export. Duplicate `eccKeyPubFile` def. * Added crypto callback TLS tests at WOLFSSL object level. Fix for ED25519/ED448 with client mutual auth where the private key is not set till WOLFSSL object. Fix issues with `wolfSSL_CTX_GetDevId` where devId is set on WOLFSSL object. Enable the `_id` API's for crypto callbacks. * Proper fix for `eccKeyPubFile` name conflict. Was causing RSA test to fail (expected DER, not PEM). |
||
|---|---|---|
| .. | ||
| 1024 | ||
| 3072 | ||
| 4096 | ||
| crl | ||
| ecc | ||
| ed448 | ||
| ed25519 | ||
| external | ||
| intermediate | ||
| ocsp | ||
| p521 | ||
| renewcerts | ||
| statickeys | ||
| test | ||
| test-pathlen | ||
| ca-cert-chain.der | ||
| ca-cert.der | ||
| ca-cert.pem | ||
| ca-ecc-cert.der | ||
| ca-ecc-cert.pem | ||
| ca-ecc-key.der | ||
| ca-ecc-key.pem | ||
| ca-ecc384-cert.der | ||
| ca-ecc384-cert.pem | ||
| ca-ecc384-key.der | ||
| ca-ecc384-key.pem | ||
| ca-key.der | ||
| ca-key.pem | ||
| check_dates.sh | ||
| client-ca.pem | ||
| client-cert-ext.der | ||
| client-cert-ext.pem | ||
| client-cert.der | ||
| client-cert.pem | ||
| client-crl-dist.der | ||
| client-crl-dist.pem | ||
| client-ecc-cert.der | ||
| client-ecc-cert.pem | ||
| client-ecc384-cert.der | ||
| client-ecc384-cert.pem | ||
| client-ecc384-key.der | ||
| client-ecc384-key.pem | ||
| client-key.der | ||
| client-key.pem | ||
| client-keyEnc.pem | ||
| client-keyPub.der | ||
| client-keyPub.pem | ||
| client-relative-uri.pem | ||
| client-uri-cert.pem | ||
| csr.attr.der | ||
| csr.dsa.pem | ||
| csr.ext.der | ||
| csr.signed.der | ||
| dh-pubkey-2048.der | ||
| dh2048.der | ||
| dh2048.pem | ||
| dh3072.der | ||
| dh3072.pem | ||
| dh4096.der | ||
| dh4096.pem | ||
| dsa-pubkey-2048.der | ||
| dsa2048.der | ||
| dsa3072.der | ||
| dsaparams.der | ||
| dsaparams.pem | ||
| ecc-client-key.der | ||
| ecc-client-key.pem | ||
| ecc-client-keyPub.der | ||
| ecc-client-keyPub.pem | ||
| ecc-key-comp.pem | ||
| ecc-key.der | ||
| ecc-key.pem | ||
| ecc-keyPkcs8.der | ||
| ecc-keyPkcs8.pem | ||
| ecc-keyPkcs8Enc.der | ||
| ecc-keyPkcs8Enc.pem | ||
| ecc-keyPub.der | ||
| ecc-keyPub.pem | ||
| ecc-privOnlyCert.pem | ||
| ecc-privOnlyKey.pem | ||
| ecc-privkey.pem | ||
| ecc-privkeyPkcs8.der | ||
| ecc-privkeyPkcs8.pem | ||
| ecc-rsa-server.p12 | ||
| entity-no-ca-bool-cert.pem | ||
| entity-no-ca-bool-key.pem | ||
| gen_revoked.sh | ||
| include.am | ||
| renewcerts.sh | ||
| rsa-pub-2048.pem | ||
| rsa2048.der | ||
| rsa3072.der | ||
| server-cert-chain.der | ||
| server-cert.der | ||
| server-cert.pem | ||
| server-ecc-comp.der | ||
| server-ecc-comp.pem | ||
| server-ecc-rsa.der | ||
| server-ecc-rsa.pem | ||
| server-ecc-self.der | ||
| server-ecc-self.pem | ||
| server-ecc.der | ||
| server-ecc.pem | ||
| server-ecc384-cert.der | ||
| server-ecc384-cert.pem | ||
| server-ecc384-key.der | ||
| server-ecc384-key.pem | ||
| server-key.der | ||
| server-key.pem | ||
| server-keyEnc.pem | ||
| server-keyPkcs8.der | ||
| server-keyPkcs8.pem | ||
| server-keyPkcs8Enc.der | ||
| server-keyPkcs8Enc.pem | ||
| server-keyPkcs8Enc2.pem | ||
| server-keyPkcs8Enc12.pem | ||
| server-keyPub.pem | ||
| server-revoked-cert.pem | ||
| server-revoked-key.pem | ||
| taoCert.txt | ||
| test-ber-exp02-05-2022.p7b | ||
| test-degenerate.p7b | ||
| test-servercert-rc2.p12 | ||
| test-servercert.p12 | ||
| wolfssl-website-ca.pem | ||
| x942dh2048.pem | ||