WolfSSL
/
wolfssljni
mirror of https://github.com/wolfSSL/wolfssljni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,685 Commits
2 Branches
20 Tags
29 MiB
Commit Graph

1685 Commits (master)

Author SHA1 Message Date
Chris Conlon e66bc90bb7 Testing: scan-build only needs the native target, drop JUnit and Java build 2026-07-23 11:09:49 -06:00
Chris Conlon 9627a75709 Testing: drop redundant jq/curl install in patched JNI CI 2026-07-23 11:09:49 -06:00
Chris Conlon b1d8b2a646 Testing: run single mvn package in Maven CI and cache Maven dependencies 2026-07-23 11:09:49 -06:00
Chris Conlon 92919ca055 Testing: run Infer over Java sources only, without native build and tests 2026-07-23 11:09:49 -06:00
Chris Conlon fa0e902f23 Testing: cancel superseded PR CI runs via concurrency groups 2026-07-23 11:09:49 -06:00
Chris Conlon f1af45ed1f F-5209: enable hostname verification in ClientSSLSocket example 2026-07-23 10:22:36 -06:00
Chris Conlon b799394f11 F-5208: enforce client authentication in MultiThreadedSSLServer example 2026-07-23 10:22:36 -06:00
Chris Conlon 1348f24361 F-5207: guard FIPS error callback jobject with a mutex 2026-07-23 10:22:36 -06:00
Chris Conlon 9e804443ce F-5206: validate sz against array length in WolfSSLSession use*Buffer 2026-07-23 10:22:36 -06:00
Chris Conlon e2cf890b58 F-5064: guard logging callback with a mutex and keep native cb registered 2026-07-23 10:22:36 -06:00
Ruby Martin 3ba35ceec6
Merge pull request #383 from cconlon/fenrirJuly20 
Order I/O guard before stream checks, generate session IDs with SecureRandom
 2026-07-22 17:27:24 -05:00
Ruby Martin 94b5f3dee8
Merge pull request #384 from cconlon/gplv3 
Change license from GPLv2 to GPLv3 to match native wolfSSL
 2026-07-22 15:25:40 -05:00
Chris Conlon 8d7dfbaa1e License: change license from GPLv2 to GPLv3 to match native wolfSSL 2026-07-22 13:41:50 -06:00
Chris Conlon 91925a17ce F-5026: generate pseudo session IDs with SecureRandom instead of object hash 2026-07-22 13:41:28 -06:00
Chris Conlon 152cbafd58 F-4854 / F-5025: enter I/O operation before state checks in WolfSSLSocket stream read/write 2026-07-22 13:41:28 -06:00
Chris Conlon 1b89ab283b Testing: cache native wolfSSL builds in CI workflows 2026-07-22 13:40:43 -06:00
Chris Conlon 7d1fc0c568 Testing: fix javash_cflags input name typo in linux-common.yml 2026-07-22 13:40:43 -06:00
Ruby Martin 4113060968
Merge pull request #387 from cconlon/fileExclusion 
IDE/Android: exclude new wolfSSL split source files from CMake build
 2026-07-22 13:50:35 -05:00
Chris Conlon acd68bdc2f IDE/Android: exclude ssl_api_hs.c, ssl_api_rw.c and ssl_err.c from CMake build, included inline by ssl.c 2026-07-22 11:30:45 -06:00
Ruby Martin a657c17214
Merge pull request #385 from cconlon/noDhBuild 
Handle NO_DH builds in min key size setters
 2026-07-22 10:58:25 -05:00
Ruby Martin fc36e7ae13
Merge pull request #382 from cconlon/fenrirJuly17 
Correctness fixes for verify callback lifecycle, session cache keying, ALPN cleanup, and IP hostname matching
 2026-07-21 16:35:15 -05:00
Ruby Martin b66b02ca29
Merge pull request #381 from cconlon/fenrirJuly16 
JSSE/JNI: wantClientAuth cert validation and RsaVerify callback exception fixes
 2026-07-21 14:59:42 -05:00
Ruby Martin 2e289dc786
Merge pull request #380 from cconlon/trustX509LeafOrdering 
Anchor peer/leaf cert at chain index 0 in WolfSSLTrustX509
 2026-07-21 12:28:27 -05:00
Chris Conlon 0b0356829b JNI/JSSE: handle NOT_COMPILED_IN from min key size setters for NO_DH builds 2026-07-21 10:24:15 -06:00
Chris Conlon db65aac73f F-4852: match IP address peer identities against iPAddress SANs only 2026-07-20 12:02:56 -06:00
Chris Conlon 536069f33f F-4312: free ALPN peerProtos on peerProtosCopy allocation failure in NativeALPNSelectCb 2026-07-17 17:05:24 -06:00
Chris Conlon 88af9ff03f F-4311: key client session cache on host:port String to prevent hashCode collisions 2026-07-17 17:05:24 -06:00
Chris Conlon 0d41185e45 F-4310: serialize session-level verify callback global ref with g_verifyCbMutex 2026-07-17 17:05:24 -06:00
Chris Conlon 09fbfdff88 F-6307: reject presented but untrusted client cert under wantClientAuth 2026-07-16 16:41:38 -06:00
Chris Conlon 05fbad13f9 F-3912: return failure from NativeRsaVerifyCb when Java verify callback throws 2026-07-16 15:52:43 -06:00
Chris Conlon 48c54ff5db F-4309: anchor peer/leaf cert at chain index 0 in WolfSSLTrustX509 2026-07-16 14:44:27 -06:00
Ruby Martin a663fa393b
Merge pull request #379 from cconlon/engineUnwrapDrainAppData 
JSSE: fix SSLEngine.unwrap() data delivery and close_notify handling after closeOutbound()
 2026-07-16 09:41:05 -06:00
Chris Conlon 165bd1bfd9 JSSE: fix SSLEngine.unwrap() to not discard app data or miss peer close_notify after closeOutbound() 2026-07-13 15:52:57 -06:00
Chris Conlon 3daad9e4c6
Merge pull request #377 from stenslae/fix/pkctx-double-free 
PkCtx double free fix
 2026-07-10 14:12:43 -06:00
Emma Stensland a4e8408347 pkctx double free fixed 2026-07-10 12:58:25 -06:00
Chris Conlon 0b47c8f36c
Merge pull request #378 from stenslae/fix/android-cmake-asn-tsp 
Android CI Fix
 2026-07-10 12:38:59 -06:00
Emma Stensland b844a5c0dd Android: exclude asn_tsp.c and ssl_tsp.c from separate compilation 
wolfSSL folded both files into asn.c/ssl.c respectively and now emits
a -Werror'd #warning if either is compiled as its own translation
unit, breaking the Android Gradle build since CMakeLists.txt globs
all of wolfcrypt/src and src.
 2026-07-10 12:06:16 -06:00
Ruby Martin a43cdd9d6b
Merge pull request #376 from cconlon/rsaServerCertChoice 
JNI/JSSE: prefer RSA server cert when configured named groups have no ECC curves
 2026-07-07 13:05:15 -06:00
Chris Conlon e7e0db5d75 JNI/JSSE: prefer RSA server cert when configured named groups have no ECC curves 2026-07-06 17:25:33 -06:00
Ruby Martin de76a2c221
Merge pull request #374 from cconlon/preserveConnectHostname 
Use InetAddress.getHostString() in WolfSSLSocket.connect() to keep original hostname
 2026-06-29 16:28:18 -06:00
Chris Conlon 01c0fd92c7 JSSE: use InetAddress.getHostString() in WolfSSLSocket.connect() to keep original hostname 2026-06-29 15:53:42 -06:00
Ruby Martin 9f37b59559
Merge pull request #373 from cconlon/csrAltNameExpansion 
Add WolfSSLCertRequest.addAltName() to support non-hostname SAN types in CSRs
 2026-06-17 16:23:01 -06:00
Ruby Martin e6dbe3b151
Merge pull request #361 from cconlon/pqc 
Add ML-KEM (FIPS 203) and ML-DSA (FIPS 204) support
 2026-06-17 13:56:33 -06:00
Chris Conlon 38398175d7 Android: update CMakeLists.txt with new native wolfSSL source files to ignore 2026-06-12 11:43:14 -06:00
Chris Conlon 2a576e3428 JNI: add WolfSSLCertRequest.addAltName() to support non-hostname Subject Alternative Name types in CSRs 2026-06-12 11:43:11 -06:00
Chris Conlon 6ee2f7b1ad Android: update CMakeLists.txt with new native wolfSSL source files to ignore 2026-06-11 16:11:01 -06:00
Chris Conlon 52fbdb6c91 JNI/JSSE: Add ML-KEM (FIPS 203) TLS 1.3 named group support and ML-DSA (FIPS 204) support and tests 2026-06-11 16:10:59 -06:00
Ruby Martin dea1613ea7
Merge pull request #372 from cconlon/antLatest 
CI: resolve current Apache Ant version dynamically
 2026-06-09 14:40:08 -06:00
Chris Conlon 40eeb839b6 CI: resolve current Apache Ant version dynamically 2026-06-09 10:30:07 -06:00
Chris Conlon 3c1fcae619
Merge pull request #371 from rlm2002/checkNulls 
check for null name in getValue
 2026-05-21 12:05:32 -07:00