WolfSSL
/
wolfssljni
mirror of https://github.com/wolfSSL/wolfssljni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,824 Commits
2 Branches
21 Tags
31 MiB
Commit Graph

1824 Commits (master)

Author SHA1 Message Date
Chris Conlon 07d988041e JSSE: keep closed sessions in SSLSessionContext lookups 2026-10-14 17:32:22 -06:00
Chris Conlon d77b6d7470 JNI: skip empty peer chain slots left by newer native wolfSSL 2026-10-14 16:52:30 -06:00
Ruby Martin bdecaf0b8f
Merge pull request #430 from cconlon/fenrirSept25_6 
Fixes for JNI size checks, session buffer zeroing, freed X509 CA check
 2026-10-02 12:47:00 -05:00
Ruby Martin baf5708519
Merge pull request #421 from cconlon/fenrirSept18_2 
Fixes for JSSE session/local-identity correctness and DTLS IPv6 peers
 2026-10-02 12:07:13 -05:00
Chris Conlon 919c5df803 F-13503: report a freed WolfSSLX509 as not a CA 2026-10-02 10:59:20 -06:00
Chris Conlon de2416043b F-13502: reject out-of-range setTmpDH sizes before allocating 2026-10-02 10:59:20 -06:00
Chris Conlon 38cef60800 F-12701: zero the serialized session buffer before freeing 2026-10-02 10:58:49 -06:00
Ruby Martin 5d1f099623
Merge pull request #433 from cconlon/fenrirSept30 
Fixes for HRR cookie secret zeroing, PK callback output length checks
 2026-10-02 11:43:30 -05:00
Chris Conlon c52cf9eaab F-14007: marshal DTLS peer addresses family-aware to support IPv6 2026-10-02 10:34:14 -06:00
Chris Conlon 6943410df1 F-14006: return null from local-identity accessors when no X509KeyManager is set 2026-10-02 10:34:14 -06:00
Chris Conlon 27f6505c54 F-14004: capture per-session local certificate alias instead of the shared auth-store alias 2026-10-02 10:34:14 -06:00
Chris Conlon e6d38f145e F-14002: map 3DES to its own bulk-cipher enum and add ChaCha/Camellia mirrors 2026-10-02 10:34:14 -06:00
Chris Conlon 22c64271a3 F-13490: return null from SSLEngine.getHandshakeSession outside an active handshake 2026-10-02 10:34:14 -06:00
Ruby Martin 9fd3926ee6
Merge pull request #431 from cconlon/fenrirSept25_7 
ALPN select callback fix to handle opaque protocol names
 2026-10-02 11:30:49 -05:00
Ruby Martin cfac8e134b
Merge pull request #429 from cconlon/fenrirSept25_5 
Fixes for buffer zeroing, KeyManagerFactory password copy, read() arg checks
 2026-10-02 11:08:29 -05:00
Ruby Martin 091b1f7051
Merge pull request #428 from cconlon/fenrirSept25_4 
Fixes for TrustX509 issuer lookup, JNI callbacks, session cache save
 2026-10-02 11:00:08 -05:00
Ruby Martin e4df809264
Merge pull request #419 from cconlon/fenrirSept17_4 
Fixes for wolfJSSE handshake/parsing and JNI buffer/length hardening
 2026-10-01 18:08:49 -05:00
Ruby Martin 85b150ee6a
Merge pull request #416 from cconlon/fenrirSept17 
Fixes for cert issuer DN, locale date parsing, key types, trust store fallback, local certs
 2026-10-01 17:59:43 -05:00
Chris Conlon 10cb4402f6 F-13506: build ALPN select callback strings from the wire list, one byte per char 2026-09-30 17:13:57 -06:00
Chris Conlon 658ce6e38d F-12700: zero session-cache scratch buffers before freeing 2026-09-30 17:13:01 -06:00
Chris Conlon 53684bc47b F-12698: validate read() arguments before the pooled read consumes data 2026-09-30 17:13:01 -06:00
Chris Conlon 7b3e1d1237 F-12697: copy the KeyManagerFactory password and zero replaced copies 2026-09-30 17:13:01 -06:00
Chris Conlon 8ee4c41ae5 F-12696: honor entryLen in X509_NAME_add_entry_by_txt 2026-09-30 17:13:01 -06:00
Chris Conlon d7fbe576b1 F-11887: clear private-key DER buffers with wc_ForceZero before freeing 2026-09-30 17:13:01 -06:00
Chris Conlon 3959b72faf F-10768: zero the Java PSK key array after the native callback copies it 2026-09-30 17:09:21 -06:00
Chris Conlon 3724450063 F-10766: build the MAC/encrypt callback encIn ByteBuffer from encIn 2026-09-30 17:09:21 -06:00
Chris Conlon bc36999510 F-9134: free the hostname-check WolfSSLCertificate on every exit path 2026-09-30 17:08:35 -06:00
Chris Conlon bef0cf9944 F-9131: skip non-CA KeyStore entries in findIssuerBySignature unless peer certs are trusted 2026-09-30 17:08:35 -06:00
Chris Conlon 13a519633d F-3917: bound memsaveSessionCache copy to the caller-supplied size 2026-09-30 17:08:35 -06:00
Chris Conlon ab57ed5691 F-13470: bound array length against GetArrayLength in dtlsCidSet and sessionFromDerNative 2026-09-30 17:05:38 -06:00
Chris Conlon 6f46e36f88 F-13469: return early for an empty chain in sortCertChainBySubjectIssuer 2026-09-30 17:05:38 -06:00
Chris Conlon bfe54229f2 F-14028: copy server ECC public key into a JVM-owned buffer for the shared-secret callback 2026-09-30 17:05:38 -06:00
Chris Conlon 019f8578ac F-14003: trim whitespace on each signature-scheme token in formatSigSchemes 2026-09-30 17:05:04 -06:00
Chris Conlon c96e1af4e8 F-13491: reject setUseClientMode once the handshake has begun 2026-09-30 17:05:04 -06:00
Chris Conlon a3855de1d7 Testing: suppress expected callback-exception traces in WolfSSLSessionTest 2026-09-30 17:01:32 -06:00
Chris Conlon fff70e0274 F-14005: stop freeing key-manager-owned certificates in getLocalPrincipal 2026-09-30 17:01:32 -06:00
Chris Conlon 7ce84514e4 F-13479: fall back to cacerts on a missing system store, fail on a corrupt one 2026-09-30 17:00:35 -06:00
Chris Conlon 0291bb1021 F-13478: handle EdDSA and RSASSA-PSS public key types in getPublicKey 2026-09-30 17:00:35 -06:00
Chris Conlon dd3192f5d6 F-13475 / F-13476: parse certificate and CRL validity dates with Locale.US 2026-09-30 17:00:35 -06:00
Chris Conlon b475d78998 F-13471: use issuer cert subject name in setIssuerName() 2026-09-30 17:00:35 -06:00
Chris Conlon 182f62229b F-13508: reject PK callback output lengths larger than the native buffer 2026-09-30 16:55:18 -06:00
Ruby Martin 28892e364f
Merge pull request #432 from cconlon/androidFipsReadyv7 
Android: 16 KB page alignment and FIPS v7 FIPS Ready support
 2026-09-30 16:53:45 -05:00
Chris Conlon c0c793636e F-13507: zero the JVM copy of the HRR cookie secret before release 2026-09-30 15:27:30 -06:00
Ruby Martin 937e1d29c7
Merge pull request #427 from cconlon/fenrirSept25_3 
Fixes for write() argument validation, native comment corrections
 2026-09-30 13:02:20 -05:00
Chris Conlon ce629fe827 Android: align native libs to 16 KB pages, update FIPS Ready core hashes to FIPS v7 HMAC-SHA-512 length 2026-09-30 11:37:37 -06:00
Ruby Martin 50727a5d39
Merge pull request #426 from cconlon/fenrirSept25_2 
Fixes for OCSP enable error, LDAPS wildcard matching, JNI cleanups
 2026-09-30 11:02:46 -05:00
Ruby Martin 647940f094
Merge pull request #425 from cconlon/fenrirSept25 
Android: update Gradle wrapper and remove unused fileTree dependency
 2026-09-29 17:42:45 -05:00
Chris Conlon d56d34c4cc F-10749: label NativePskServerCb identityString as the client identity 2026-09-25 11:58:49 -06:00
Chris Conlon 50431d5c70 F-10748: name the ECC sign context in NativeEccSignCb invocation comment 2026-09-25 11:58:49 -06:00
Chris Conlon 0bb7c2fd8a F-9463: name ctx in setDevId NULL-check commen 2026-09-25 11:58:49 -06:00