WolfSSL
/
wolfssljni
mirror of https://github.com/wolfSSL/wolfssljni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,550 Commits
2 Branches
20 Tags
29 MiB
Commit Graph

1550 Commits (67f02ac9d2739a4e7ada5db47e304472996078cd)

Author SHA1 Message Date
Chris Conlon 67f02ac9d2 JNI/JSSE: bump version to 1.18 2026-08-07 15:42:20 -06:00
Ruby Martin 2c57eb98d9
Merge pull request #390 from cconlon/peerCertChain 
Return full peer certificate chain from SSLSession.getPeerCertificates()
 2026-07-31 11:51:53 -05:00
Chris Conlon bf13430279 JNI/JSSE: return full peer cert chain from getPeerCertificates() 2026-07-29 13:35:52 -06:00
Ruby Martin e2be31abbc
Merge pull request #388 from cconlon/fenrirJuly22 
Fixes for JNI callback locking, buffer sizing, and JSSE example updates
 2026-07-24 12:04:07 -05:00
Ruby Martin f0faf42441
Merge pull request #389 from cconlon/fenrirJuly22_2 
Fixes for WolfSSLSocket handshake coordination, cert request locking, example and build hardening
 2026-07-24 10:35:44 -05:00
Chris Conlon 77d8b12230 F-5896: restrict Makefile VERSION extraction to an allowlist of characters 2026-07-23 16:09:02 -06:00
Chris Conlon 2728f8f4da F-5895: wait for handshake completion before stream read/write 2026-07-23 16:09:02 -06:00
Chris Conlon e6b9302f20 F-5885: verify peer hostname for non-loopback hosts in Client example 2026-07-23 16:01:45 -06:00
Chris Conlon 83d5e683ea F-5776: set connectionClosed on all WolfSSLSocket.close() paths 2026-07-23 16:01:45 -06:00
Chris Conlon 844c9a9013 F-5714: hold WolfSSLX509Name lock across setSubjectName native call 2026-07-23 16:01:45 -06:00
Ruby Martin e6fb3844a4
Merge pull request #386 from cconlon/ci-workflow-optimizations 
Reduce PR workflow time and runner usage
 2026-07-23 13:01:47 -05:00
Chris Conlon 7e5a5fe7d3 JNI: fix socketSelect() so SSLSocket.close() interrupts a blocked write with WOLFJNI_USE_IO_SELECT 2026-07-23 11:09:49 -06:00
Chris Conlon 0790d12c15 Testing: pin wolfSSL build to the resolved commit used in the cache key 2026-07-23 11:09:49 -06:00
Chris Conlon fb3447cdab Testing: fix stale comment, stable release CI tests last 5 wolfSSL tags 2026-07-23 11:09:49 -06:00
Chris Conlon 9d4bd338f5 Testing: consolidate JUnit setup into shared composite action with checksum verification 2026-07-23 11:09:49 -06:00
Chris Conlon e66bc90bb7 Testing: scan-build only needs the native target, drop JUnit and Java build 2026-07-23 11:09:49 -06:00
Chris Conlon 9627a75709 Testing: drop redundant jq/curl install in patched JNI CI 2026-07-23 11:09:49 -06:00
Chris Conlon b1d8b2a646 Testing: run single mvn package in Maven CI and cache Maven dependencies 2026-07-23 11:09:49 -06:00
Chris Conlon 92919ca055 Testing: run Infer over Java sources only, without native build and tests 2026-07-23 11:09:49 -06:00
Chris Conlon fa0e902f23 Testing: cancel superseded PR CI runs via concurrency groups 2026-07-23 11:09:49 -06:00
Chris Conlon f1af45ed1f F-5209: enable hostname verification in ClientSSLSocket example 2026-07-23 10:22:36 -06:00
Chris Conlon b799394f11 F-5208: enforce client authentication in MultiThreadedSSLServer example 2026-07-23 10:22:36 -06:00
Chris Conlon 1348f24361 F-5207: guard FIPS error callback jobject with a mutex 2026-07-23 10:22:36 -06:00
Chris Conlon 9e804443ce F-5206: validate sz against array length in WolfSSLSession use*Buffer 2026-07-23 10:22:36 -06:00
Chris Conlon e2cf890b58 F-5064: guard logging callback with a mutex and keep native cb registered 2026-07-23 10:22:36 -06:00
Ruby Martin 3ba35ceec6
Merge pull request #383 from cconlon/fenrirJuly20 
Order I/O guard before stream checks, generate session IDs with SecureRandom
 2026-07-22 17:27:24 -05:00
Ruby Martin 94b5f3dee8
Merge pull request #384 from cconlon/gplv3 
Change license from GPLv2 to GPLv3 to match native wolfSSL
 2026-07-22 15:25:40 -05:00
Chris Conlon 8d7dfbaa1e License: change license from GPLv2 to GPLv3 to match native wolfSSL 2026-07-22 13:41:50 -06:00
Chris Conlon 91925a17ce F-5026: generate pseudo session IDs with SecureRandom instead of object hash 2026-07-22 13:41:28 -06:00
Chris Conlon 152cbafd58 F-4854 / F-5025: enter I/O operation before state checks in WolfSSLSocket stream read/write 2026-07-22 13:41:28 -06:00
Chris Conlon 1b89ab283b Testing: cache native wolfSSL builds in CI workflows 2026-07-22 13:40:43 -06:00
Chris Conlon 7d1fc0c568 Testing: fix javash_cflags input name typo in linux-common.yml 2026-07-22 13:40:43 -06:00
Ruby Martin 4113060968
Merge pull request #387 from cconlon/fileExclusion 
IDE/Android: exclude new wolfSSL split source files from CMake build
 2026-07-22 13:50:35 -05:00
Chris Conlon acd68bdc2f IDE/Android: exclude ssl_api_hs.c, ssl_api_rw.c and ssl_err.c from CMake build, included inline by ssl.c 2026-07-22 11:30:45 -06:00
Ruby Martin a657c17214
Merge pull request #385 from cconlon/noDhBuild 
Handle NO_DH builds in min key size setters
 2026-07-22 10:58:25 -05:00
Ruby Martin fc36e7ae13
Merge pull request #382 from cconlon/fenrirJuly17 
Correctness fixes for verify callback lifecycle, session cache keying, ALPN cleanup, and IP hostname matching
 2026-07-21 16:35:15 -05:00
Ruby Martin b66b02ca29
Merge pull request #381 from cconlon/fenrirJuly16 
JSSE/JNI: wantClientAuth cert validation and RsaVerify callback exception fixes
 2026-07-21 14:59:42 -05:00
Ruby Martin 2e289dc786
Merge pull request #380 from cconlon/trustX509LeafOrdering 
Anchor peer/leaf cert at chain index 0 in WolfSSLTrustX509
 2026-07-21 12:28:27 -05:00
Chris Conlon 0b0356829b JNI/JSSE: handle NOT_COMPILED_IN from min key size setters for NO_DH builds 2026-07-21 10:24:15 -06:00
Chris Conlon db65aac73f F-4852: match IP address peer identities against iPAddress SANs only 2026-07-20 12:02:56 -06:00
Chris Conlon 536069f33f F-4312: free ALPN peerProtos on peerProtosCopy allocation failure in NativeALPNSelectCb 2026-07-17 17:05:24 -06:00
Chris Conlon 88af9ff03f F-4311: key client session cache on host:port String to prevent hashCode collisions 2026-07-17 17:05:24 -06:00
Chris Conlon 0d41185e45 F-4310: serialize session-level verify callback global ref with g_verifyCbMutex 2026-07-17 17:05:24 -06:00
Chris Conlon 09fbfdff88 F-6307: reject presented but untrusted client cert under wantClientAuth 2026-07-16 16:41:38 -06:00
Chris Conlon 05fbad13f9 F-3912: return failure from NativeRsaVerifyCb when Java verify callback throws 2026-07-16 15:52:43 -06:00
Chris Conlon 48c54ff5db F-4309: anchor peer/leaf cert at chain index 0 in WolfSSLTrustX509 2026-07-16 14:44:27 -06:00
Ruby Martin a663fa393b
Merge pull request #379 from cconlon/engineUnwrapDrainAppData 
JSSE: fix SSLEngine.unwrap() data delivery and close_notify handling after closeOutbound()
 2026-07-16 09:41:05 -06:00
Chris Conlon 165bd1bfd9 JSSE: fix SSLEngine.unwrap() to not discard app data or miss peer close_notify after closeOutbound() 2026-07-13 15:52:57 -06:00
Chris Conlon 3daad9e4c6
Merge pull request #377 from stenslae/fix/pkctx-double-free 
PkCtx double free fix
 2026-07-10 14:12:43 -06:00
Emma Stensland a4e8408347 pkctx double free fixed 2026-07-10 12:58:25 -06:00