Commit Graph

1685 Commits (master)

Author SHA1 Message Date
Chris Conlon e84247aec0 F-10765: document that jdk.tls.disabledAlgorithms is not applied to cipher suites 2026-08-24 10:07:58 -06:00
Chris Conlon 2a443ad65a F-5777: sanitize peer hostname in WolfSSLAuthStore debug log sinks 2026-08-24 10:07:58 -06:00
Chris Conlon 5f38ed51c0 F-5741: sanitize peer hostname in WolfSSLEngineHelper debug log 2026-08-24 10:07:58 -06:00
Chris Conlon 912fe9c92f F-5739: honor caller-supplied size in WolfSSLContext memrestoreCertCache 2026-08-24 10:07:58 -06:00
Chris Conlon ebf551a180 F-5715: skip resumption of invalidated sessions and re-check validity before caching 2026-08-24 10:07:58 -06:00
Chris Conlon a701f8f8ae F-5638: synchronize on WolfSSLX509Name while setting subject/issuer name 2026-08-24 10:07:58 -06:00
Chris Conlon b90c5992ad F-5637: validate RSA JNI buffer sizes against DirectByteBuffer capacity 2026-08-21 10:44:16 -06:00
Chris Conlon ac41d9ac3c F-5275: validate ECC sign/verify buffer sizes against DirectByteBuffer capacity 2026-08-21 10:26:37 -06:00
Chris Conlon 1675ad794d F-5273: remove no-op endpoint identification block from DtlsClientEngine example 2026-08-20 16:20:14 -06:00
Chris Conlon cc5ad12a7c F-5271: require client certificate authentication in DualProviderFIPSTest example 2026-08-20 16:20:14 -06:00
Chris Conlon 28d4ad5735 F-5270: require client certificate authentication in ThreadedSSLSocketClientServer example 2026-08-20 16:20:14 -06:00
Chris Conlon d776cd8a7b F-5268: honor caller-supplied size in WolfSSLSession useCertificateChainBufferFormat 2026-08-20 16:20:14 -06:00
Chris Conlon d2e03ee83a F-5212 / F-5269: honor caller-supplied size in WolfSSLContext buffer load JNI functions 2026-08-20 16:20:14 -06:00
Chris Conlon 2a3191e3ae F-5211: verify server hostname in RMI TLS client example via endpoint identification 2026-08-20 15:37:31 -06:00
Chris Conlon ce9eb0dcba F-5210: require client certificate authentication in RMI TLS server socket factory 2026-08-20 15:37:31 -06:00
Ruby Martin a73ce423e6
Merge pull request #403 from cconlon/gradleVerification
Enable Gradle dependency verification for IDE/Android example
2026-08-20 15:28:50 -05:00
Chris Conlon d9e63b2d99 F-5027: sanitize peer ALPN value and JSON-escape debug log fields 2026-08-19 17:25:48 -06:00
Chris Conlon c5f0d57041 F-4851 / F-5065: honor caller sz and bound it to the array in CertManager buffer loaders 2026-08-19 17:25:48 -06:00
Chris Conlon d03b00fd87 F-4153: release JNI local refs on all exit paths in NativeCtxMissingCRLCallback 2026-08-19 17:25:48 -06:00
Chris Conlon b474ec3c1e F-4152: release JNI local refs on all exit paths in NativeMissingCRLCallback 2026-08-19 17:25:48 -06:00
Chris Conlon f686e0a354 F-4151: guard against NULL host address and string in dtlsSetPeer 2026-08-19 17:25:48 -06:00
Chris Conlon 04817c3aa3 F-6304: free the signature ASN1_OBJECT when OBJ_obj2txt fails in getSignatureOID 2026-08-19 17:25:48 -06:00
Chris Conlon 58206b2d2a F-5636: honor ASN.1 string length for SAN values and drop entries with an embedded null 2026-08-19 17:25:48 -06:00
Chris Conlon e6dd0cb4e0 F-4620: return an error when GetStringUTFChars yields NULL in file and hint setters 2026-08-19 17:25:48 -06:00
Chris Conlon 21ab0c4f67 F-4619: free the owned WOLFSSL_STACK on the empty branch in getDerCerts 2026-08-19 17:21:20 -06:00
Ruby Martin f6c4a07a88
Merge pull request #402 from cconlon/fenrirAug17
Fixes for JNI callback error paths, certificate dates, CRL time init, Makefile JDK checks
2026-08-19 17:55:24 -05:00
Ruby Martin f02c51afa1
Merge pull request #401 from cconlon/fenrirAug14
Fenrir fixes: JNI callback error paths, key handling, DH key size validation, and comment corrections
2026-08-19 17:29:25 -05:00
Ruby Martin 86ad890b23
Merge pull request #399 from cconlon/ioCbLocalCleanup
Release all JNI local references in the context-level I/O callbacks
2026-08-18 12:51:55 -05:00
Chris Conlon f2886fa81f F-9123: enable Gradle dependency verification for IDE/Android example project 2026-08-18 11:18:05 -06:00
Chris Conlon 207256bbf9 F-6737: validate JAVA_HOME points to a JDK and quote JNI include paths 2026-08-17 17:05:34 -06:00
Chris Conlon a868f9b165 F-9130: zero the stack ASN1_TIME before use in CRL set_lastUpdate/set_nextUpdate 2026-08-17 17:05:34 -06:00
Chris Conlon b2e0507122 F-10747: return an error when the RSA encryption callback throws, instead of using an undefined result 2026-08-17 17:05:34 -06:00
Chris Conlon b464d479b4 F-10746: return an error when the ECC shared-secret callback throws, instead of using an undefined result 2026-08-17 17:05:34 -06:00
Chris Conlon b769f278f7 F-10745: return an error when the ECC sign callback throws, instead of using an undefined result 2026-08-17 17:05:34 -06:00
Chris Conlon 6a436fac2a F-10744: cast certificate validity dates directly from jlong to time_t 2026-08-17 17:05:34 -06:00
Chris Conlon 476f5549c3 JNI: release JNI local refs in NativeIOSendCb() and NativeIORecvCb() 2026-08-17 14:12:38 -06:00
Chris Conlon ea207d9f94 F-9129: check the negotiated DH group size against the configured DH minimum in checkKeySize 2026-08-17 13:59:20 -06:00
Ruby Martin 752ebf6abd
Merge pull request #400 from cconlon/fenrirAug13_2
Fenrir fixes for resource cleanup, JNI type handling, and protocol/key-size validation
2026-08-17 14:25:27 -05:00
Ruby Martin b2006025ba
Merge pull request #397 from cconlon/ioSelectFix
Map select() EBADF to a closed-fd event in socketSelect()
2026-08-16 17:14:01 -05:00
Ruby Martin 926ebac7a6
Merge pull request #398 from cconlon/fenrirAug13
Fenrir fixes: X.509 JNI safety, I/O callback validation, and debug-log corrections
2026-08-16 16:36:36 -05:00
Ruby Martin b2ff6aa0f5
Merge pull request #396 from cconlon/fenrirAug11
Fenrir fixes for X509 EKU, RSA decrypt callback, cert retrieval, and parameter handling
2026-08-14 18:44:25 -05:00
Chris Conlon c5d622670c F-6732: force-zero the temporary private key copy on every exit path in Session usePrivateKeyBuffer 2026-08-14 15:06:22 -06:00
Chris Conlon b3b38ec0d6 F-4618: log the correct method name in setSubjectName() debug output 2026-08-14 14:54:23 -06:00
Chris Conlon 41834f07af F-4147: return an error from NativeIOSendCb when sz is negative 2026-08-14 14:54:23 -06:00
Chris Conlon c33b454c0a F-4146: guard ReleaseStringUTFChars against a failed GetStringUTFChars in X.509 JNI entry points 2026-08-14 14:54:23 -06:00
Chris Conlon 2d437b0d38 F-3909: keep wrap()/unwrap() exit debug loops within the requested buffer slice 2026-08-14 14:52:26 -06:00
Chris Conlon b3d5121c95 F-9125: use a private mktemp workspace with trap cleanup in PQC keystore script 2026-08-14 14:52:26 -06:00
Chris Conlon 182d669512 F-3915: check wc_InitRng and key init return values in RSA and ECC example sign paths 2026-08-14 14:52:04 -06:00
Chris Conlon d164901f57 F-3914: skip ReleaseStringUTFChars when GetStringUTFChars returns NULL 2026-08-14 14:46:55 -06:00
Chris Conlon e27ff831b7 F-3913: return after a thrown callback in the RSA sign-check PK callbacks 2026-08-14 14:36:32 -06:00