Commit Graph

1685 Commits (master)

Author SHA1 Message Date
Ruby Martin 33058daed5 check for null name in getValue 2026-05-21 10:55:30 -07:00
Ruby Martin bf065a479f
Merge pull request #369 from cconlon/crlVerifyCbRefLifecycle
Fix global ref lifecycle for verify and missing-CRL callbacks
2026-05-14 16:22:13 -06:00
Chris Conlon c2fcdf1b3c JNI/JSSE: fix global ref lifecycle for verify and missing-CRL callbacks 2026-05-13 17:50:05 -06:00
Ruby Martin 5cc5248d0f
Merge pull request #362 from cconlon/akidTest
Add round trip test for WolfSSLCertificate.setAuthorityKeyId()
2026-05-11 15:08:24 -06:00
Ruby Martin e0d1808d29
Merge pull request #366 from cconlon/x509name-dn-constructors
Add DN-based constructors to WolfSSLX509Name
2026-05-11 15:07:33 -06:00
Chris Conlon 882098fea5 JNI: clarify setAuthorityKeyId() Javadoc and add round trip test 2026-05-11 14:46:49 -06:00
Chris Conlon e013b63b20 JNI: add String and X500Principal constructors to WolfSSLX509Name 2026-05-06 16:27:37 -06:00
Chris Conlon 1bea4bec2d
Merge pull request #365 from JeremiahM37/fenrir-fixes-4
unwrap bounds, CBIO error returns, key zeroization
2026-05-04 10:31:09 -06:00
Ruby Martin 0c92ec09c1
Merge pull request #364 from cconlon/jdk24Warnings
Suppress JDK 24 deprecation/removal warnings
2026-05-04 10:09:46 -06:00
Jeremiah Mackey 10f4df4c51 Add regression tests for unwrap bounds 2026-05-04 15:44:04 +00:00
Jeremiah Mackey b514258f9c Zero private key bytes on release 2026-05-04 15:44:04 +00:00
Jeremiah Mackey 76cbb27805 Return CBIO_ERR_GENERAL in callbacks 2026-05-04 15:44:04 +00:00
Jeremiah Mackey cb2b0f602c Fix unwrap copy-loop bounds 2026-05-04 14:44:19 +00:00
Ruby Martin 43d6b421c1
Merge pull request #363 from cconlon/scanIssues
Security and correctness fixes from internal scan
2026-05-01 15:30:15 -06:00
Chris Conlon b3edefd6bb Suppress JDK 24 deprecation/removal warnings 2026-05-01 15:22:42 -06:00
Chris Conlon 7addc50289 JSSE: replace printStackTrace with debug log in getId() 2026-05-01 11:11:53 -06:00
Chris Conlon 2efe358e08 JSSE: throw SSLPeerUnverifiedException from getPeerCertificateChain() error path 2026-05-01 11:11:52 -06:00
Chris Conlon 27bfc0b847 JSSE: return unmodifiable list from all getRequestedServerNames() paths 2026-05-01 11:11:52 -06:00
Chris Conlon 3c8888593d JSSE: use ConcurrentHashMap for thread-safe SSLSession bindings; reject null in putValue() 2026-05-01 11:11:52 -06:00
Chris Conlon c0c6a4e2a7 JSSE: invalidate sessions with future-dated creation time 2026-05-01 11:11:52 -06:00
Chris Conlon 4ae047b566 JSSE: distinguish 'no cache key' from hashCode==0 in addSession() 2026-05-01 11:11:52 -06:00
Chris Conlon e996c63406 JSSE: fix initSecureRandom() overwriting default with null 2026-05-01 11:11:52 -06:00
Chris Conlon 840e9b1763 JSSE: drop unnecessary class-wide locks from getAllCiphers/getAllProtocols 2026-05-01 11:11:52 -06:00
Chris Conlon 2039266faa JSSE: send shutdown alert when doHandshake() rejects new session 2026-05-01 11:11:52 -06:00
Chris Conlon 222f5b9bf1 JSSE: drop unnecessary class-wide lock from getTotalOutputSize() 2026-05-01 11:11:52 -06:00
Chris Conlon c27c1c69ee JSSE: replace printStackTrace with debug log in beginHandshake() catch 2026-05-01 11:11:52 -06:00
Chris Conlon c3f54437c5 JSSE: zero plaintext buffers in SendAppData() and on engine cleanup 2026-05-01 11:11:52 -06:00
Chris Conlon 8e31dd6e9b JSSE: log KeyManager/TrustManager class names instead of toString() 2026-05-01 10:06:07 -06:00
Chris Conlon 21841c9485 JSSE: make WolfSSLContext.getProtocolsMask() private 2026-04-30 15:32:18 -06:00
Chris Conlon 21bd6de65d JSSE: skip 'loaded trusted root cert' log when CA load fails 2026-04-30 15:24:54 -06:00
Chris Conlon 57f35cff0c
Merge pull request #360 from JeremiahM37/fenrir-fixes-3
WolfSSLEngine ByteBuffer offset/bounds fixes and JNI arrayOffset honoring
2026-04-29 13:31:12 -06:00
Jeremiah Mackey 56810a8850 Add regression tests 2026-04-29 15:55:20 +00:00
Jeremiah Mackey 9c99f7dfe9 Fix wrap/unwrap debug-log loop bounds 2026-04-28 17:21:45 +00:00
Jeremiah Mackey e72d2cfcc6 Honor arrayOffset() in ByteBuffer read/write 2026-04-28 17:21:45 +00:00
Jeremiah Mackey 076faafd52 Fix unwrap() null-check loop bound 2026-04-28 15:55:36 +00:00
Jeremiah Mackey 1edeadf26c Fix wrap() null-check loop bound 2026-04-28 15:55:36 +00:00
Jeremiah Mackey 35121f6588 Close inBound on pre-handshake closeOutbound 2026-04-28 15:55:36 +00:00
Jeremiah Mackey 6d05a9327f Fix SendAppData OOB when ofst > 0 2026-04-28 15:55:36 +00:00
Ruby Martin 2b49287525
Merge pull request #358 from cconlon/antTestElapsedTime
Replace JUnit passed/failed/skipped status with per-method timing
2026-04-23 16:36:24 -06:00
Chris Conlon 0dde886b7e Tests: Replace passed/failed/skipped status with per-method timing 2026-04-23 14:29:12 -06:00
Chris Conlon ca41a364a7
Merge pull request #359 from rlm2002/fenrir
Fenrir fixes
2026-04-22 10:58:54 -06:00
Ruby Martin 837436cfd8 JSSE: add unit test for instance when multiple records are queued and partial drain of CopyOutPacket() is necesssary 2026-04-22 10:21:51 -06:00
Ruby Martin 5cf3d7572a JSSE: decrement internalIOSendBufOffset by sendSz when copying out buffered data into output ByteBuffer 2026-04-21 18:39:35 -06:00
Ruby Martin a6b840691c JSSE: return unmodifiable list instead of internal mutable list 2026-04-21 15:37:31 -06:00
Ruby Martin 792c73d193 JNI: release String UTF chars if uriStr != NULL 2026-04-21 15:00:16 -06:00
Ruby Martin 5f98be67e2 JNI: change filePath to fileBytes 2026-04-21 13:04:42 -06:00
Ruby Martin 6d29fc5209 JNI: added additional null checks on ReleaseByteArrayElements() calls 2026-04-21 13:04:36 -06:00
Ruby Martin 4f5cb15f61
Merge pull request #357 from cconlon/v1.17release
Prep for 1.17 release
2026-04-20 16:37:02 -06:00
Ruby Martin 7b507fb475 JSSE: replace identity hash with content hash. Corrects sni server name equals() 2026-04-20 11:39:49 -06:00
Chris Conlon ac511b5cd7 Tests: Raise WolfSSLEngineMemoryLeakTest timeout to 180s 2026-04-20 10:37:27 -06:00