Commit Graph

1590 Commits (f2886fa81fa9b645eb766625901173dea9be94aa)

Author SHA1 Message Date
Chris Conlon f2886fa81f F-9123: enable Gradle dependency verification for IDE/Android example project 2026-08-18 11:18:05 -06:00
Ruby Martin 752ebf6abd
Merge pull request #400 from cconlon/fenrirAug13_2
Fenrir fixes for resource cleanup, JNI type handling, and protocol/key-size validation
2026-08-17 14:25:27 -05:00
Ruby Martin b2006025ba
Merge pull request #397 from cconlon/ioSelectFix
Map select() EBADF to a closed-fd event in socketSelect()
2026-08-16 17:14:01 -05:00
Ruby Martin 926ebac7a6
Merge pull request #398 from cconlon/fenrirAug13
Fenrir fixes: X.509 JNI safety, I/O callback validation, and debug-log corrections
2026-08-16 16:36:36 -05:00
Ruby Martin b2ff6aa0f5
Merge pull request #396 from cconlon/fenrirAug11
Fenrir fixes for X509 EKU, RSA decrypt callback, cert retrieval, and parameter handling
2026-08-14 18:44:25 -05:00
Chris Conlon b3b38ec0d6 F-4618: log the correct method name in setSubjectName() debug output 2026-08-14 14:54:23 -06:00
Chris Conlon 41834f07af F-4147: return an error from NativeIOSendCb when sz is negative 2026-08-14 14:54:23 -06:00
Chris Conlon c33b454c0a F-4146: guard ReleaseStringUTFChars against a failed GetStringUTFChars in X.509 JNI entry points 2026-08-14 14:54:23 -06:00
Chris Conlon 2d437b0d38 F-3909: keep wrap()/unwrap() exit debug loops within the requested buffer slice 2026-08-14 14:52:26 -06:00
Chris Conlon b3d5121c95 F-9125: use a private mktemp workspace with trap cleanup in PQC keystore script 2026-08-14 14:52:26 -06:00
Chris Conlon 3a2c837632 F-9119: validate min key size range before narrowing to word16/short 2026-08-14 12:06:00 -06:00
Chris Conlon 154b52bc78 F-9118: return an error from native read() on negative offset or length 2026-08-14 12:06:00 -06:00
Chris Conlon b5b8d7ee8a F-9117: guard against a NULL altname before NewStringUTF in getPeerX509AltName 2026-08-14 12:06:00 -06:00
Chris Conlon c6763af087 F-9116: apply the requested verify mode when the setVerify callback cannot be registered 2026-08-14 12:06:00 -06:00
Chris Conlon cf37bf963c F-9115: gate SSLv3 in getProtocolsMask on the correctly spelled WOLFSSL_ALLOW_SSLV3 macro 2026-08-14 12:06:00 -06:00
Chris Conlon e098668e38 F-7010: base the cipher-suite separator on accumulator content, not loop index 2026-08-14 12:06:00 -06:00
Chris Conlon cdb0917f6c F-6734: treat an unset jdk.tls.disabledAlgorithms as empty in sanitizeProtocols 2026-08-14 12:06:00 -06:00
Chris Conlon a99a5fcb41 F-6733: size the internalSendCb grow buffer to include the existing offset 2026-08-14 12:06:00 -06:00
Chris Conlon 7ed8a1a77f F-6549: free the DER buffer on the NewByteArray failure path in X509_REQ_get_der 2026-08-14 12:06:00 -06:00
Chris Conlon e5b065fc07 F-6548: create the trimmed SAN array with the Object[][] element class 2026-08-14 12:06:00 -06:00
Ruby Martin a63c4a5e77
Merge pull request #395 from cconlon/testSocketCloseDuringConcurrentWrite
Cap spinner threads in concurrent socket close tests
2026-08-13 18:13:31 -05:00
Ruby Martin 2a84779fbb
Merge pull request #394 from cconlon/fenrirAug10
Fix native return code handling in cert cache save, I/O recv callback, and sign wrappers
2026-08-13 17:14:38 -05:00
Chris Conlon fab426fda0 Treat select() EBADF as a closed fd in socketSelect(), matching socketPoll() 2026-08-13 14:38:46 -06:00
Ruby Martin 9525cfef5e
Merge pull request #392 from cconlon/alpnLocalRefs
JNI: release JNI local refs in NativeALPNSelectCb()
2026-08-13 13:23:21 -05:00
Chris Conlon 608a7d0934 F-9128: document that wolfJSSE ignores SSLParameters algorithm constraints 2026-08-13 10:00:02 -06:00
Chris Conlon b4e42c7f7d F-9114: fail getDerCerts cleanly when a chain cert has no retrievable DER 2026-08-13 10:00:02 -06:00
Chris Conlon 671a826210 F-9127: skip native minimum key size override when no keySize limit is configured 2026-08-13 10:00:02 -06:00
Chris Conlon 57901b4361 F-9113: delete JNI local refs once on exception in NativeRsaDecCb 2026-08-13 10:00:02 -06:00
Chris Conlon 0007aef707 F-9112: include anyExtendedKeyUsage OID in X509 extended key usage results 2026-08-13 10:00:02 -06:00
Chris Conlon f8de5565f4 Testing: cap spinner threads in concurrent socket close tests 2026-08-11 11:37:32 -06:00
Chris Conlon a6077db8d3 F-9111: treat WOLFSSL_FAILURE return from wolfSSL_X509_CRL_sign as failure 2026-08-10 17:37:59 -06:00
Chris Conlon a48a19f0e0 F-9110: treat WOLFSSL_FAILURE return from wolfSSL_X509_REQ_sign as failure 2026-08-10 17:37:59 -06:00
Chris Conlon 70c3c78e95 F-9109: treat WOLFSSL_FAILURE return from wolfSSL_X509_sign as failure 2026-08-10 17:37:59 -06:00
Ruby Martin d853121a7c
Merge pull request #393 from cconlon/v1.18
Prep for 1.18 release
2026-08-10 18:27:16 -05:00
Chris Conlon ee907a50b7 F-9108: resolve internalIORecvCallback on WolfSSLContext class in NativeIORecvCb 2026-08-10 17:14:08 -06:00
Chris Conlon b1f99841ea F-9107: only publish memsaveCertCache output on success and clamp copy length 2026-08-10 17:14:08 -06:00
Chris Conlon aac5d561a4 Testing: ignore generated certs in line length check workflow 2026-08-10 14:17:57 -06:00
Chris Conlon 9fc8bcd8bb update example certs and jks files to match upstream wolfssl 2026-08-10 14:17:57 -06:00
Chris Conlon fd3becd759 Update ChangeLog.md for 1.18 release 2026-08-10 14:17:54 -06:00
Chris Conlon 67f02ac9d2 JNI/JSSE: bump version to 1.18 2026-08-07 15:42:20 -06:00
Chris Conlon c5309387af JNI: release JNI local refs in NativeALPNSelectCb() 2026-08-07 14:24:47 -06:00
Ruby Martin 2c57eb98d9
Merge pull request #390 from cconlon/peerCertChain
Return full peer certificate chain from SSLSession.getPeerCertificates()
2026-07-31 11:51:53 -05:00
Chris Conlon bf13430279 JNI/JSSE: return full peer cert chain from getPeerCertificates() 2026-07-29 13:35:52 -06:00
Ruby Martin e2be31abbc
Merge pull request #388 from cconlon/fenrirJuly22
Fixes for JNI callback locking, buffer sizing, and JSSE example updates
2026-07-24 12:04:07 -05:00
Ruby Martin f0faf42441
Merge pull request #389 from cconlon/fenrirJuly22_2
Fixes for WolfSSLSocket handshake coordination, cert request locking, example and build hardening
2026-07-24 10:35:44 -05:00
Chris Conlon 77d8b12230 F-5896: restrict Makefile VERSION extraction to an allowlist of characters 2026-07-23 16:09:02 -06:00
Chris Conlon 2728f8f4da F-5895: wait for handshake completion before stream read/write 2026-07-23 16:09:02 -06:00
Chris Conlon e6b9302f20 F-5885: verify peer hostname for non-loopback hosts in Client example 2026-07-23 16:01:45 -06:00
Chris Conlon 83d5e683ea F-5776: set connectionClosed on all WolfSSLSocket.close() paths 2026-07-23 16:01:45 -06:00
Chris Conlon 844c9a9013 F-5714: hold WolfSSLX509Name lock across setSubjectName native call 2026-07-23 16:01:45 -06:00