Commit Graph

  • bfb9e563ba
    Merge 2d494b1a27 into 53368ea5d9 Chris Conlon 2026-09-17 21:56:51 +0000
  • 2d494b1a27 F-13489: clear the ALPN selector when setHandshakeApplicationProtocolSelector is passed null Chris Conlon 2026-09-17 15:18:05 -0600
  • 469b566ec1 F-13488: clear the ALPN selector when setHandshakeApplicationProtocolSelector is passed null Chris Conlon 2026-09-17 15:13:05 -0600
  • cb492a75ce F-13483: free native resources when closing a wrapper over an already-closed transport Chris Conlon 2026-09-17 14:44:19 -0600
  • c662514a6e F-13482: free WolfSSLCertManager on all certManagerVerify exit paths Chris Conlon 2026-09-17 14:35:03 -0600
  • 53368ea5d9
    Merge pull request #413 from cconlon/fenrirSept2 master Ruby Martin 2026-09-17 16:27:19 -0500
  • 7705b91bf4
    Merge pull request #410 from cconlon/fenrirAug31 Ruby Martin 2026-09-17 16:12:47 -0500
  • 24ad5a4d55
    Merge pull request #409 from cconlon/fenrirAug27 Ruby Martin 2026-09-17 15:54:18 -0500
  • e785be5c46 F-13481: close the keystore input stream on load failures in loadKeyStoreFileByType Chris Conlon 2026-09-17 14:21:51 -0600
  • 1b3b5d2992
    Merge 57793af951 into 537254ec10 Chris Conlon 2026-09-17 13:51:24 -0600
  • 57793af951 F-13480: skip a CA file when its DER conversion fails in the Android fallback Chris Conlon 2026-09-17 12:23:56 -0600
  • 30fb840c9f F-13474: keep cached sessions when resizing the session cache Chris Conlon 2026-09-17 12:16:56 -0600
  • a7eb375f1c F-13473: treat a zero session cache size as unlimited Chris Conlon 2026-09-17 11:50:16 -0600
  • 531f30f49b
    Merge b9e86968d3 into 537254ec10 Chris Conlon 2026-09-17 19:33:58 +0000
  • b9e86968d3 F-14005: stop freeing key-manager-owned certificates in getLocalPrincipal Chris Conlon 2026-09-17 10:34:37 -0600
  • a378b595d5 F-13479: fall back to cacerts on a missing system store, fail on a corrupt one Chris Conlon 2026-09-17 10:09:50 -0600
  • 4469fc6619 F-13478: handle EdDSA and RSASSA-PSS public key types in getPublicKey Chris Conlon 2026-09-17 09:56:52 -0600
  • 7b521cc8f1 F-13475 / F-13476: parse certificate and CRL validity dates with Locale.US Chris Conlon 2026-09-17 09:40:33 -0600
  • 5de791fec3 F-13472: honor setupIOPipe in the two-argument WolfSSLSession constructor Chris Conlon 2026-09-17 11:42:43 -0600
  • 4b1e1aedcc F-13468: validate signed wc_EccPublicKeyToDer return before storing as size Chris Conlon 2026-09-17 11:34:29 -0600
  • be1029095a F-13471: use issuer cert subject name in setIssuerName() Chris Conlon 2026-09-17 09:25:35 -0600
  • 8af4aa8662 F-12675: release JNI local references in NativeGenCookieCb Chris Conlon 2026-08-31 16:16:59 -0600
  • 1bb8418a46 F-12674: guard against a null name conversion in the peer issuer/subject getters Chris Conlon 2026-08-31 16:07:05 -0600
  • 3a19fc2fd8 F-12673: reject out-of-range timeout values in setTimeout Chris Conlon 2026-08-31 15:59:06 -0600
  • 0461766540 F-12703: resolve the example main class ahead of the wolfcrypt-jni jar Chris Conlon 2026-08-31 15:48:38 -0600
  • eb59b04cab F-12672: allow a null PSK identity hint in the client callback Chris Conlon 2026-08-31 15:43:02 -0600
  • 1b0bb99b95 F-9122: assert the revoked serial decodes unchanged from a generated CRL Chris Conlon 2026-09-02 11:13:36 -0600
  • 8717e2fcc5 F-6305: free the popped extension object and stack on the pre-4.2.0 path Chris Conlon 2026-09-02 11:07:52 -0600
  • 56c1edeaf9 F-4148: null-check the cert stack before counting it in getDerCerts Chris Conlon 2026-09-02 11:02:27 -0600
  • 58a00109a7 F-3911: copy SNI server names in the WolfSSLImplementSSLSession copy constructor Chris Conlon 2026-09-02 10:59:11 -0600
  • 20b34ec340 F-12699: document the process-wide scope of the missing CRL callback setters Chris Conlon 2026-09-02 10:43:10 -0600
  • 537254ec10
    Merge pull request #415 from padelsbach/catch-exceptions Chris Conlon 2026-09-11 15:59:11 -0600
  • d85d0b70fa PR feedback: re-throw uncaught exceptions, add tests Paul Adelsbach 2026-09-11 14:26:18 -0700
  • 27c8f34434
    Merge pull request #407 from cconlon/fenrirAug24 Ruby Martin 2026-09-11 16:04:19 -0500
  • a5307f9972 Enhancements for socket error handling Paul Adelsbach 2026-09-11 12:12:15 -0700
  • 4976515d8d F-11882 / F-11883: fail closed on verify callback errors in NativeVerifyCallback and NativeSSLVerifyCallback Chris Conlon 2026-08-25 17:31:21 -0600
  • d37afefda4 F-11876: guard against NULL PSK identity strings before NewStringUTF Chris Conlon 2026-08-24 17:10:40 -0600
  • 5e0339035c F-11875: honor revocation date in CRL add_revoked and reject it in add_revoked_cert Chris Conlon 2026-08-24 17:00:48 -0600
  • ea8aa7a49b F-11870: handle unrecognized RDN types in WolfSSLX509 DN reformatting Chris Conlon 2026-08-24 15:29:31 -0600
  • 33d3adcef7
    Merge pull request #414 from cconlon/logFix Ruby Martin 2026-09-10 11:00:39 -0500
  • 2e607ab12a
    Merge pull request #412 from cconlon/fenrirSept1_2 Ruby Martin 2026-09-09 13:45:57 -0500
  • 46ea6bed68 JSSE: fix WolfSSLSocket interrupt-pipe fd leak on deferred close, and harden socket stress tests Chris Conlon 2026-09-08 15:14:46 -0600
  • 02f8276c1a
    Merge pull request #411 from cconlon/fenrirSept1 Ruby Martin 2026-09-08 18:10:55 -0500
  • e54a45385a
    Merge pull request #408 from cconlon/fenrirAug26 Ruby Martin 2026-09-08 12:30:21 -0500
  • 52bcf391ea JNI/JSSE: remove duplicate sanitizeForLog helper from WolfSSLDebug Chris Conlon 2026-09-08 10:47:38 -0600
  • 9df2fb2660
    Merge pull request #406 from cconlon/fenrirAug21 Ruby Martin 2026-09-04 12:48:36 -0500
  • f8a45f1ceb F-6736: align critical/non-critical extension OID getters with X509 contract Chris Conlon 2026-08-28 16:18:18 -0600
  • 236b106629 F-6735: correct getCurrentCipher null-check exception message Chris Conlon 2026-08-28 16:00:52 -0600
  • 7a0a09fd61 F-11885: only resume client-side entries in client session cache lookup Chris Conlon 2026-08-28 15:57:24 -0600
  • b784d772c0 F-11873: only copy HMAC inner buffer on success in setTlsHmacInner Chris Conlon 2026-08-27 14:48:35 -0600
  • 83aaffae94 F-11884: release owned session reference in sessionToDer Chris Conlon 2026-08-26 17:17:29 -0600
  • 6a6fcf86a9 F-11878: check mutex init and free mutexes on newSSL construction rollback Chris Conlon 2026-08-26 17:06:33 -0600
  • 14673f945c F-11877: check key initialization results in WolfCrypt verify/decrypt helpers Chris Conlon 2026-08-26 16:55:56 -0600
  • 0742792d48 F-11872: delete promoted JNI local references in NativeVerifyCallback Chris Conlon 2026-08-26 16:41:39 -0600
  • 64779aab39
    Merge pull request #405 from cconlon/fenrirAug20 Ruby Martin 2026-09-03 15:57:08 -0500
  • 6c479fbc81
    Merge pull request #404 from cconlon/fenrirAug18 Ruby Martin 2026-09-02 16:09:41 -0500
  • e4956962e6 F-12695: zero pooled direct ByteBuffers before reuse or discard Chris Conlon 2026-09-01 14:57:30 -0600
  • bac85ce3af F-12694: skip cert-less aliases in the cached KeyManager alias lookup Chris Conlon 2026-09-01 14:45:49 -0600
  • fe2843144d F-12690: correct the ALPN getter comment to describe the negotiated protocol Chris Conlon 2026-09-01 14:28:03 -0600
  • 4da81a1792 F-12689: document the DTLS protocol versions in the cipher-list comment Chris Conlon 2026-09-01 14:26:27 -0600
  • 5ebf28c74c F-12683: null-check the ASN.1 time formatting result in the date getters Chris Conlon 2026-09-01 14:18:30 -0600
  • b84a57269a F-12682: compare all fields symmetrically in WolfSSLAltName.equals Chris Conlon 2026-09-01 11:43:18 -0600
  • 36f19df3bb F-12681: release JNI local references in the ATOMIC_USER callbacks Chris Conlon 2026-09-01 10:46:17 -0600
  • a146a962cb F-12680: trim trailing null elements from the getExtendedKeyUsage result Chris Conlon 2026-09-01 10:21:36 -0600
  • 6e07102006 F-12677: reject negative sizes in the session-level I/O callbacks Chris Conlon 2026-09-01 10:11:51 -0600
  • 446e18f729 F-12676: release JNI local references in the TLS secret and session ticket callbacks Chris Conlon 2026-09-01 10:08:10 -0600
  • 57c912264f F-10753: pin ant compile classpath to project jars Chris Conlon 2026-08-21 16:47:44 -0600
  • 0627c0e675 F-10751: verify Maven test dependency checksums in CI before running tests Chris Conlon 2026-08-21 16:41:54 -0600
  • e84247aec0 F-10765: document that jdk.tls.disabledAlgorithms is not applied to cipher suites Chris Conlon 2026-08-21 16:28:56 -0600
  • 2a443ad65a F-5777: sanitize peer hostname in WolfSSLAuthStore debug log sinks Chris Conlon 2026-08-21 16:05:26 -0600
  • 5f38ed51c0 F-5741: sanitize peer hostname in WolfSSLEngineHelper debug log Chris Conlon 2026-08-21 16:02:12 -0600
  • 912fe9c92f F-5739: honor caller-supplied size in WolfSSLContext memrestoreCertCache Chris Conlon 2026-08-21 15:05:13 -0600
  • ebf551a180 F-5715: skip resumption of invalidated sessions and re-check validity before caching Chris Conlon 2026-08-21 14:58:05 -0600
  • a701f8f8ae F-5638: synchronize on WolfSSLX509Name while setting subject/issuer name Chris Conlon 2026-08-21 14:43:36 -0600
  • b90c5992ad F-5637: validate RSA JNI buffer sizes against DirectByteBuffer capacity Chris Conlon 2026-08-20 15:36:38 -0600
  • ac41d9ac3c F-5275: validate ECC sign/verify buffer sizes against DirectByteBuffer capacity Chris Conlon 2026-08-20 15:21:21 -0600
  • 1675ad794d F-5273: remove no-op endpoint identification block from DtlsClientEngine example Chris Conlon 2026-08-20 14:57:28 -0600
  • cc5ad12a7c F-5271: require client certificate authentication in DualProviderFIPSTest example Chris Conlon 2026-08-20 14:19:01 -0600
  • 28d4ad5735 F-5270: require client certificate authentication in ThreadedSSLSocketClientServer example Chris Conlon 2026-08-20 14:13:28 -0600
  • d776cd8a7b F-5268: honor caller-supplied size in WolfSSLSession useCertificateChainBufferFormat Chris Conlon 2026-08-20 12:55:21 -0600
  • d2e03ee83a F-5212 / F-5269: honor caller-supplied size in WolfSSLContext buffer load JNI functions Chris Conlon 2026-08-20 12:42:42 -0600
  • 2a3191e3ae F-5211: verify server hostname in RMI TLS client example via endpoint identification Chris Conlon 2026-08-20 11:22:46 -0600
  • ce9eb0dcba F-5210: require client certificate authentication in RMI TLS server socket factory Chris Conlon 2026-08-20 10:43:40 -0600
  • a73ce423e6
    Merge pull request #403 from cconlon/gradleVerification Ruby Martin 2026-08-20 15:28:50 -0500
  • d9e63b2d99 F-5027: sanitize peer ALPN value and JSON-escape debug log fields Chris Conlon 2026-08-19 12:58:03 -0600
  • c5f0d57041 F-4851 / F-5065: honor caller sz and bound it to the array in CertManager buffer loaders Chris Conlon 2026-08-18 17:43:58 -0600
  • d03b00fd87 F-4153: release JNI local refs on all exit paths in NativeCtxMissingCRLCallback Chris Conlon 2026-08-18 16:50:49 -0600
  • b474ec3c1e F-4152: release JNI local refs on all exit paths in NativeMissingCRLCallback Chris Conlon 2026-08-18 16:46:15 -0600
  • f686e0a354 F-4151: guard against NULL host address and string in dtlsSetPeer Chris Conlon 2026-08-18 16:41:47 -0600
  • 04817c3aa3 F-6304: free the signature ASN1_OBJECT when OBJ_obj2txt fails in getSignatureOID Chris Conlon 2026-08-18 16:37:55 -0600
  • 58206b2d2a F-5636: honor ASN.1 string length for SAN values and drop entries with an embedded null Chris Conlon 2026-08-18 16:34:18 -0600
  • e6dd0cb4e0 F-4620: return an error when GetStringUTFChars yields NULL in file and hint setters Chris Conlon 2026-08-18 16:02:07 -0600
  • 21ab0c4f67 F-4619: free the owned WOLFSSL_STACK on the empty branch in getDerCerts Chris Conlon 2026-08-18 15:53:23 -0600
  • f6c4a07a88
    Merge pull request #402 from cconlon/fenrirAug17 Ruby Martin 2026-08-19 17:55:24 -0500
  • f02c51afa1
    Merge pull request #401 from cconlon/fenrirAug14 Ruby Martin 2026-08-19 17:29:25 -0500
  • 86ad890b23
    Merge pull request #399 from cconlon/ioCbLocalCleanup Ruby Martin 2026-08-18 12:51:55 -0500
  • f2886fa81f F-9123: enable Gradle dependency verification for IDE/Android example project Chris Conlon 2026-08-18 10:16:54 -0600
  • 207256bbf9 F-6737: validate JAVA_HOME points to a JDK and quote JNI include paths Chris Conlon 2026-08-17 16:24:43 -0600
  • a868f9b165 F-9130: zero the stack ASN1_TIME before use in CRL set_lastUpdate/set_nextUpdate Chris Conlon 2026-08-17 16:00:31 -0600
  • b2e0507122 F-10747: return an error when the RSA encryption callback throws, instead of using an undefined result Chris Conlon 2026-08-17 15:51:53 -0600