Chris Conlon
|
e84247aec0
|
F-10765: document that jdk.tls.disabledAlgorithms is not applied to cipher suites
|
2026-08-24 10:07:58 -06:00 |
Chris Conlon
|
2a443ad65a
|
F-5777: sanitize peer hostname in WolfSSLAuthStore debug log sinks
|
2026-08-24 10:07:58 -06:00 |
Chris Conlon
|
5f38ed51c0
|
F-5741: sanitize peer hostname in WolfSSLEngineHelper debug log
|
2026-08-24 10:07:58 -06:00 |
Chris Conlon
|
912fe9c92f
|
F-5739: honor caller-supplied size in WolfSSLContext memrestoreCertCache
|
2026-08-24 10:07:58 -06:00 |
Chris Conlon
|
ebf551a180
|
F-5715: skip resumption of invalidated sessions and re-check validity before caching
|
2026-08-24 10:07:58 -06:00 |
Chris Conlon
|
a701f8f8ae
|
F-5638: synchronize on WolfSSLX509Name while setting subject/issuer name
|
2026-08-24 10:07:58 -06:00 |
Chris Conlon
|
b90c5992ad
|
F-5637: validate RSA JNI buffer sizes against DirectByteBuffer capacity
|
2026-08-21 10:44:16 -06:00 |
Chris Conlon
|
ac41d9ac3c
|
F-5275: validate ECC sign/verify buffer sizes against DirectByteBuffer capacity
|
2026-08-21 10:26:37 -06:00 |
Chris Conlon
|
1675ad794d
|
F-5273: remove no-op endpoint identification block from DtlsClientEngine example
|
2026-08-20 16:20:14 -06:00 |
Chris Conlon
|
cc5ad12a7c
|
F-5271: require client certificate authentication in DualProviderFIPSTest example
|
2026-08-20 16:20:14 -06:00 |
Chris Conlon
|
28d4ad5735
|
F-5270: require client certificate authentication in ThreadedSSLSocketClientServer example
|
2026-08-20 16:20:14 -06:00 |
Chris Conlon
|
d776cd8a7b
|
F-5268: honor caller-supplied size in WolfSSLSession useCertificateChainBufferFormat
|
2026-08-20 16:20:14 -06:00 |
Chris Conlon
|
d2e03ee83a
|
F-5212 / F-5269: honor caller-supplied size in WolfSSLContext buffer load JNI functions
|
2026-08-20 16:20:14 -06:00 |
Chris Conlon
|
2a3191e3ae
|
F-5211: verify server hostname in RMI TLS client example via endpoint identification
|
2026-08-20 15:37:31 -06:00 |
Chris Conlon
|
ce9eb0dcba
|
F-5210: require client certificate authentication in RMI TLS server socket factory
|
2026-08-20 15:37:31 -06:00 |
Ruby Martin
|
a73ce423e6
|
Merge pull request #403 from cconlon/gradleVerification
Enable Gradle dependency verification for IDE/Android example
|
2026-08-20 15:28:50 -05:00 |
Chris Conlon
|
d9e63b2d99
|
F-5027: sanitize peer ALPN value and JSON-escape debug log fields
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
c5f0d57041
|
F-4851 / F-5065: honor caller sz and bound it to the array in CertManager buffer loaders
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
d03b00fd87
|
F-4153: release JNI local refs on all exit paths in NativeCtxMissingCRLCallback
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
b474ec3c1e
|
F-4152: release JNI local refs on all exit paths in NativeMissingCRLCallback
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
f686e0a354
|
F-4151: guard against NULL host address and string in dtlsSetPeer
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
04817c3aa3
|
F-6304: free the signature ASN1_OBJECT when OBJ_obj2txt fails in getSignatureOID
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
58206b2d2a
|
F-5636: honor ASN.1 string length for SAN values and drop entries with an embedded null
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
e6dd0cb4e0
|
F-4620: return an error when GetStringUTFChars yields NULL in file and hint setters
|
2026-08-19 17:25:48 -06:00 |
Chris Conlon
|
21ab0c4f67
|
F-4619: free the owned WOLFSSL_STACK on the empty branch in getDerCerts
|
2026-08-19 17:21:20 -06:00 |
Ruby Martin
|
f6c4a07a88
|
Merge pull request #402 from cconlon/fenrirAug17
Fixes for JNI callback error paths, certificate dates, CRL time init, Makefile JDK checks
|
2026-08-19 17:55:24 -05:00 |
Ruby Martin
|
f02c51afa1
|
Merge pull request #401 from cconlon/fenrirAug14
Fenrir fixes: JNI callback error paths, key handling, DH key size validation, and comment corrections
|
2026-08-19 17:29:25 -05:00 |
Ruby Martin
|
86ad890b23
|
Merge pull request #399 from cconlon/ioCbLocalCleanup
Release all JNI local references in the context-level I/O callbacks
|
2026-08-18 12:51:55 -05:00 |
Chris Conlon
|
f2886fa81f
|
F-9123: enable Gradle dependency verification for IDE/Android example project
|
2026-08-18 11:18:05 -06:00 |
Chris Conlon
|
207256bbf9
|
F-6737: validate JAVA_HOME points to a JDK and quote JNI include paths
|
2026-08-17 17:05:34 -06:00 |
Chris Conlon
|
a868f9b165
|
F-9130: zero the stack ASN1_TIME before use in CRL set_lastUpdate/set_nextUpdate
|
2026-08-17 17:05:34 -06:00 |
Chris Conlon
|
b2e0507122
|
F-10747: return an error when the RSA encryption callback throws, instead of using an undefined result
|
2026-08-17 17:05:34 -06:00 |
Chris Conlon
|
b464d479b4
|
F-10746: return an error when the ECC shared-secret callback throws, instead of using an undefined result
|
2026-08-17 17:05:34 -06:00 |
Chris Conlon
|
b769f278f7
|
F-10745: return an error when the ECC sign callback throws, instead of using an undefined result
|
2026-08-17 17:05:34 -06:00 |
Chris Conlon
|
6a436fac2a
|
F-10744: cast certificate validity dates directly from jlong to time_t
|
2026-08-17 17:05:34 -06:00 |
Chris Conlon
|
476f5549c3
|
JNI: release JNI local refs in NativeIOSendCb() and NativeIORecvCb()
|
2026-08-17 14:12:38 -06:00 |
Chris Conlon
|
ea207d9f94
|
F-9129: check the negotiated DH group size against the configured DH minimum in checkKeySize
|
2026-08-17 13:59:20 -06:00 |
Ruby Martin
|
752ebf6abd
|
Merge pull request #400 from cconlon/fenrirAug13_2
Fenrir fixes for resource cleanup, JNI type handling, and protocol/key-size validation
|
2026-08-17 14:25:27 -05:00 |
Ruby Martin
|
b2006025ba
|
Merge pull request #397 from cconlon/ioSelectFix
Map select() EBADF to a closed-fd event in socketSelect()
|
2026-08-16 17:14:01 -05:00 |
Ruby Martin
|
926ebac7a6
|
Merge pull request #398 from cconlon/fenrirAug13
Fenrir fixes: X.509 JNI safety, I/O callback validation, and debug-log corrections
|
2026-08-16 16:36:36 -05:00 |
Ruby Martin
|
b2ff6aa0f5
|
Merge pull request #396 from cconlon/fenrirAug11
Fenrir fixes for X509 EKU, RSA decrypt callback, cert retrieval, and parameter handling
|
2026-08-14 18:44:25 -05:00 |
Chris Conlon
|
c5d622670c
|
F-6732: force-zero the temporary private key copy on every exit path in Session usePrivateKeyBuffer
|
2026-08-14 15:06:22 -06:00 |
Chris Conlon
|
b3b38ec0d6
|
F-4618: log the correct method name in setSubjectName() debug output
|
2026-08-14 14:54:23 -06:00 |
Chris Conlon
|
41834f07af
|
F-4147: return an error from NativeIOSendCb when sz is negative
|
2026-08-14 14:54:23 -06:00 |
Chris Conlon
|
c33b454c0a
|
F-4146: guard ReleaseStringUTFChars against a failed GetStringUTFChars in X.509 JNI entry points
|
2026-08-14 14:54:23 -06:00 |
Chris Conlon
|
2d437b0d38
|
F-3909: keep wrap()/unwrap() exit debug loops within the requested buffer slice
|
2026-08-14 14:52:26 -06:00 |
Chris Conlon
|
b3d5121c95
|
F-9125: use a private mktemp workspace with trap cleanup in PQC keystore script
|
2026-08-14 14:52:26 -06:00 |
Chris Conlon
|
182d669512
|
F-3915: check wc_InitRng and key init return values in RSA and ECC example sign paths
|
2026-08-14 14:52:04 -06:00 |
Chris Conlon
|
d164901f57
|
F-3914: skip ReleaseStringUTFChars when GetStringUTFChars returns NULL
|
2026-08-14 14:46:55 -06:00 |
Chris Conlon
|
e27ff831b7
|
F-3913: return after a thrown callback in the RSA sign-check PK callbacks
|
2026-08-14 14:36:32 -06:00 |