Commit Graph

558 Commits (master)

Author SHA1 Message Date
Chris Conlon ab2fbfceca JNI: Stop printing verify/ALPN callback exceptions and cipher/RSA-PSS errors 2026-10-28 16:43:29 -06:00
Ruby Martin 158c50e7f6
Merge pull request #444 from cconlon/windowsSocketTimeoutAndClose
Fix setSoTimeout() being ignored on Windows
2026-10-26 15:50:38 -05:00
Ruby Martin 1bcb85d6db
Merge pull request #441 from cconlon/fenrirOct20
Javadoc and native comments fixes
2026-10-26 15:35:14 -05:00
Ruby Martin ffb428fd5f
Merge pull request #445 from cconlon/fenrirOct22
Fixes for native callback length checks, callback ByteBuffer docs, and dist packaging cleanup
2026-10-26 15:34:20 -05:00
Ruby Martin fee4595edb
Merge pull request #438 from cconlon/fenrirOct19
Fix Key Usage bits past decipherOnly
2026-10-26 13:43:30 -05:00
Ruby Martin 6b75a071e9
Merge pull request #439 from cconlon/fenrirOct19_2
Fixes for PSK identity length, Javadoc corrections
2026-10-26 12:16:25 -05:00
Chris Conlon bcf8bb7200 JNI/JSSE: Name select/poll() in socket error messages, use WSAGetLastError() on Windows 2026-10-23 16:07:10 -06:00
Chris Conlon f19c9e1703 JNI/JSSE: Stop select() waits on Windows when closing and enable close interrupt tests 2026-10-23 16:07:10 -06:00
Chris Conlon ebff82d8fb JNI/JSSE: Set socket non-blocking on Windows so setSoTimeout() is honored 2026-10-23 15:32:22 -06:00
Chris Conlon ccefd6efa2 F-15728: correct context getter name in PK callback lookup comments 2026-10-22 15:36:13 -06:00
Chris Conlon 8d9f3ef433 F-15727: correct getAssociatedContextPtr() owner in context I/O callback comments 2026-10-22 15:36:13 -06:00
Chris Conlon 9cf58aa0df F-15726: correct send callback jbyteArray comment to say data to send 2026-10-22 15:36:13 -06:00
Chris Conlon ab369c3ca5 F-15724: correct JNI_OnUnload timing in logging callback registration comment 2026-10-22 15:36:13 -06:00
Chris Conlon f5859e5d10 F-15700: reject atomic decrypt callback padding sizes outside the record before narrowing to unsigned int 2026-10-22 15:32:24 -06:00
Chris Conlon 7643607cff F-15699: reject RSA verify, sign check and decrypt callback returns larger than the inline buffer 2026-10-22 15:32:24 -06:00
Chris Conlon 62b90e0328 JNI: return original wolfSSL error from getError() instead of SSL_ERROR_SYSCALL 2026-10-22 12:39:19 -06:00
Chris Conlon 9590e4ce8c F-15725: label the byte-array receive callback invocation as receive, not send 2026-10-22 10:28:15 -06:00
Chris Conlon 68ef17dc77 F-15698: accept a PSK client identity of exactly idMaxLen bytes 2026-10-19 17:45:33 -06:00
Chris Conlon 96bdd55ba7 F-15697: return Key Usage bits past decipherOnly from X509_get_key_usage 2026-10-19 17:00:10 -06:00
Chris Conlon 3fe8b8dbf6 F-15696: return every EKU OID, including unrecognized ones, from X509_get_extended_key_usage 2026-10-16 17:05:50 -06:00
Chris Conlon 34e35ab6c0 F-15741: fail closed and throw when setVerify cannot store the verify callback 2026-10-16 17:05:50 -06:00
Chris Conlon 439a237c95 F-15695: return the extension value instead of its OID from X509_get_extension 2026-10-16 17:05:50 -06:00
Chris Conlon 07d988041e JSSE: keep closed sessions in SSLSessionContext lookups 2026-10-14 17:32:22 -06:00
Chris Conlon d77b6d7470 JNI: skip empty peer chain slots left by newer native wolfSSL 2026-10-14 16:52:30 -06:00
Ruby Martin bdecaf0b8f
Merge pull request #430 from cconlon/fenrirSept25_6
Fixes for JNI size checks, session buffer zeroing, freed X509 CA check
2026-10-02 12:47:00 -05:00
Ruby Martin baf5708519
Merge pull request #421 from cconlon/fenrirSept18_2
Fixes for JSSE session/local-identity correctness and DTLS IPv6 peers
2026-10-02 12:07:13 -05:00
Chris Conlon de2416043b F-13502: reject out-of-range setTmpDH sizes before allocating 2026-10-02 10:59:20 -06:00
Chris Conlon 38cef60800 F-12701: zero the serialized session buffer before freeing 2026-10-02 10:58:49 -06:00
Ruby Martin 5d1f099623
Merge pull request #433 from cconlon/fenrirSept30
Fixes for HRR cookie secret zeroing, PK callback output length checks
2026-10-02 11:43:30 -05:00
Chris Conlon c52cf9eaab F-14007: marshal DTLS peer addresses family-aware to support IPv6 2026-10-02 10:34:14 -06:00
Ruby Martin 9fd3926ee6
Merge pull request #431 from cconlon/fenrirSept25_7
ALPN select callback fix to handle opaque protocol names
2026-10-02 11:30:49 -05:00
Ruby Martin cfac8e134b
Merge pull request #429 from cconlon/fenrirSept25_5
Fixes for buffer zeroing, KeyManagerFactory password copy, read() arg checks
2026-10-02 11:08:29 -05:00
Ruby Martin 091b1f7051
Merge pull request #428 from cconlon/fenrirSept25_4
Fixes for TrustX509 issuer lookup, JNI callbacks, session cache save
2026-10-02 11:00:08 -05:00
Ruby Martin e4df809264
Merge pull request #419 from cconlon/fenrirSept17_4
Fixes for wolfJSSE handshake/parsing and JNI buffer/length hardening
2026-10-01 18:08:49 -05:00
Chris Conlon 10cb4402f6 F-13506: build ALPN select callback strings from the wire list, one byte per char 2026-09-30 17:13:57 -06:00
Chris Conlon 658ce6e38d F-12700: zero session-cache scratch buffers before freeing 2026-09-30 17:13:01 -06:00
Chris Conlon 8ee4c41ae5 F-12696: honor entryLen in X509_NAME_add_entry_by_txt 2026-09-30 17:13:01 -06:00
Chris Conlon d7fbe576b1 F-11887: clear private-key DER buffers with wc_ForceZero before freeing 2026-09-30 17:13:01 -06:00
Chris Conlon 3959b72faf F-10768: zero the Java PSK key array after the native callback copies it 2026-09-30 17:09:21 -06:00
Chris Conlon 3724450063 F-10766: build the MAC/encrypt callback encIn ByteBuffer from encIn 2026-09-30 17:09:21 -06:00
Chris Conlon 13a519633d F-3917: bound memsaveSessionCache copy to the caller-supplied size 2026-09-30 17:08:35 -06:00
Chris Conlon ab57ed5691 F-13470: bound array length against GetArrayLength in dtlsCidSet and sessionFromDerNative 2026-09-30 17:05:38 -06:00
Chris Conlon bfe54229f2 F-14028: copy server ECC public key into a JVM-owned buffer for the shared-secret callback 2026-09-30 17:05:38 -06:00
Chris Conlon b475d78998 F-13471: use issuer cert subject name in setIssuerName() 2026-09-30 17:00:35 -06:00
Chris Conlon 182f62229b F-13508: reject PK callback output lengths larger than the native buffer 2026-09-30 16:55:18 -06:00
Chris Conlon c0c793636e F-13507: zero the JVM copy of the HRR cookie secret before release 2026-09-30 15:27:30 -06:00
Ruby Martin 937e1d29c7
Merge pull request #427 from cconlon/fenrirSept25_3
Fixes for write() argument validation, native comment corrections
2026-09-30 13:02:20 -05:00
Chris Conlon d56d34c4cc F-10749: label NativePskServerCb identityString as the client identity 2026-09-25 11:58:49 -06:00
Chris Conlon 50431d5c70 F-10748: name the ECC sign context in NativeEccSignCb invocation comment 2026-09-25 11:58:49 -06:00
Chris Conlon 0bb7c2fd8a F-9463: name ctx in setDevId NULL-check commen 2026-09-25 11:58:49 -06:00