Commit Graph

  • b00a398d79
    Merge pull request #447 from cconlon/v1.19 master v1.19.0-stable Ruby Martin 2026-10-29 13:10:30 -0500
  • 70798c5253 Update ChangeLog.md for 1.19 release Chris Conlon 2026-10-28 15:09:12 -0600
  • e892571eb8 JNI/JSSE: bump version to 1.19 Chris Conlon 2026-10-28 15:09:01 -0600
  • ab2fbfceca JNI: Stop printing verify/ALPN callback exceptions and cipher/RSA-PSS errors Chris Conlon 2026-10-28 16:43:16 -0600
  • 158c50e7f6
    Merge pull request #444 from cconlon/windowsSocketTimeoutAndClose Ruby Martin 2026-10-26 15:50:38 -0500
  • 6313eb64fa
    Merge pull request #446 from cconlon/fenrirOct22_2 Ruby Martin 2026-10-26 15:36:59 -0500
  • 1bcb85d6db
    Merge pull request #441 from cconlon/fenrirOct20 Ruby Martin 2026-10-26 15:35:14 -0500
  • ffb428fd5f
    Merge pull request #445 from cconlon/fenrirOct22 Ruby Martin 2026-10-26 15:34:20 -0500
  • fee4595edb
    Merge pull request #438 from cconlon/fenrirOct19 Ruby Martin 2026-10-26 13:43:30 -0500
  • f64c140387
    Merge pull request #443 from cconlon/fenrirOct20_2 Ruby Martin 2026-10-26 12:44:26 -0500
  • 6b75a071e9
    Merge pull request #439 from cconlon/fenrirOct19_2 Ruby Martin 2026-10-26 12:16:25 -0500
  • bf7cdea436 JNI/JSSE: Treat SO_LINGER as seconds in close() and do not wait when linger is 0 Chris Conlon 2026-10-22 10:12:47 -0600
  • a93757313c JNI/JSSE: Make test setup re-runnable and avoid test listener port collisions Chris Conlon 2026-10-22 10:12:47 -0600
  • bcf8bb7200 JNI/JSSE: Name select/poll() in socket error messages, use WSAGetLastError() on Windows Chris Conlon 2026-10-22 10:12:47 -0600
  • f19c9e1703 JNI/JSSE: Stop select() waits on Windows when closing and enable close interrupt tests Chris Conlon 2026-10-22 10:12:46 -0600
  • ebff82d8fb JNI/JSSE: Set socket non-blocking on Windows so setSoTimeout() is honored Chris Conlon 2026-10-22 09:24:03 -0600
  • 693c2befa4
    Merge pull request #442 from cconlon/jsseUnconvertedErrors Ruby Martin 2026-10-23 15:11:35 -0500
  • 2bf77c3157 F-15753: use NAME in the rpm target cleanup pattern so prior project RPMs are removed Chris Conlon 2026-10-22 15:43:41 -0600
  • ccefd6efa2 F-15728: correct context getter name in PK callback lookup comments Chris Conlon 2026-10-20 15:24:24 -0600
  • 8d9f3ef433 F-15727: correct getAssociatedContextPtr() owner in context I/O callback comments Chris Conlon 2026-10-20 15:22:02 -0600
  • 9cf58aa0df F-15726: correct send callback jbyteArray comment to say data to send Chris Conlon 2026-10-20 15:20:54 -0600
  • ab369c3ca5 F-15724: correct JNI_OnUnload timing in logging callback registration comment Chris Conlon 2026-10-20 15:12:35 -0600
  • c3fe90dedc F-15723: correct getSubjectAltNames() Javadoc to say it returns an empty collection, not null Chris Conlon 2026-10-20 15:09:21 -0600
  • 93fc522c4e F-15722: fix inverted NO_WOLFSSL_DIR condition in loadVerifyLocations() Javadoc Chris Conlon 2026-10-20 15:02:33 -0600
  • 83f788f977 F-15742: document that callback ByteBuffer arguments are only valid until the callback returns Chris Conlon 2026-10-22 15:11:29 -0600
  • f5859e5d10 F-15700: reject atomic decrypt callback padding sizes outside the record before narrowing to unsigned int Chris Conlon 2026-10-22 14:59:29 -0600
  • 7643607cff F-15699: reject RSA verify, sign check and decrypt callback returns larger than the inline buffer Chris Conlon 2026-10-22 14:18:58 -0600
  • 62b90e0328 JNI: return original wolfSSL error from getError() instead of SSL_ERROR_SYSCALL Chris Conlon 2026-10-20 16:15:05 -0600
  • 3f48caebcf
    Merge pull request #440 from cconlon/fipsv5CASTFix Ruby Martin 2026-10-22 13:37:25 -0500
  • d8acb6b44c F-15752: strip native objects and dependency files from the dist staging tree Chris Conlon 2026-10-22 10:38:16 -0600
  • 9590e4ce8c F-15725: label the byte-array receive callback invocation as receive, not send Chris Conlon 2026-10-22 10:28:15 -0600
  • 31299d4413 F-15740: check basicConstraints and keyUsage before loading chain certs as issuers in certManagerVerify Chris Conlon 2026-10-21 15:16:36 -0600
  • 3946bd2312 JNI: create WolfSSL in cert test classes so NID values are set under Maven Chris Conlon 2026-10-20 13:15:23 -0600
  • 440d68e078 Run FIPS CASTs once per process in WolfSSL() instead of on every init Chris Conlon 2026-10-20 10:43:48 -0600
  • 18246cd32a F-15721: name WOLFSSL_CERT_REQ in certReqEnabled() Javadoc Chris Conlon 2026-10-19 17:33:30 -0600
  • b63e8ca91d F-15720: correct setDevId() Javadoc, it only stores the device ID Chris Conlon 2026-10-19 17:32:03 -0600
  • 377cdcd964 F-15719: document RSA verify and decrypt callbacks as returning the plaintext length Chris Conlon 2026-10-19 17:26:56 -0600
  • 02fbf52255 F-15718: document getDisabledAlgorithmsKeySizeLimit() as returning a minimum key size Chris Conlon 2026-10-19 17:25:13 -0600
  • 68ef17dc77 F-15698: accept a PSK client identity of exactly idMaxLen bytes Chris Conlon 2026-10-19 17:19:22 -0600
  • 96bdd55ba7 F-15697: return Key Usage bits past decipherOnly from X509_get_key_usage Chris Conlon 2026-10-19 16:21:27 -0600
  • 2c60d2ff42
    Merge pull request #437 from cconlon/fenrirOct16 Ruby Martin 2026-10-19 11:55:06 -0500
  • 3fe8b8dbf6 F-15696: return every EKU OID, including unrecognized ones, from X509_get_extended_key_usage Chris Conlon 2026-10-16 12:11:55 -0600
  • 34e35ab6c0 F-15741: fail closed and throw when setVerify cannot store the verify callback Chris Conlon 2026-10-16 11:13:43 -0600
  • 439a237c95 F-15695: return the extension value instead of its OID from X509_get_extension Chris Conlon 2026-10-16 11:06:12 -0600
  • e730af476e
    Merge pull request #436 from cconlon/engineUnwrapSessionPeek Ruby Martin 2026-10-16 13:25:49 -0500
  • d090391518
    Merge pull request #434 from cconlon/endpointIdCaseInsensitive Ruby Martin 2026-10-16 12:51:36 -0500
  • 5cabfab0ba JSSE: match endpoint identification algorithm names case-insensitively Chris Conlon 2026-10-14 11:22:42 -0600
  • 0fc0c9ec63 JSSE: stop SSLEngine session save from reading unwrap() input Chris Conlon 2026-10-15 15:59:25 -0600
  • 29ca7602bd
    Merge pull request #435 from cconlon/wolfSSLMasterCompat Ruby Martin 2026-10-15 16:03:14 -0500
  • 1a3671c40d Testing: share one SSLContext in WolfSSLEngineMemoryLeakTest Chris Conlon 2026-10-14 17:15:58 -0600
  • 07d988041e JSSE: keep closed sessions in SSLSessionContext lookups Chris Conlon 2026-10-14 14:29:21 -0600
  • d77b6d7470 JNI: skip empty peer chain slots left by newer native wolfSSL Chris Conlon 2026-10-14 12:27:21 -0600
  • bdecaf0b8f
    Merge pull request #430 from cconlon/fenrirSept25_6 Ruby Martin 2026-10-02 12:47:00 -0500
  • baf5708519
    Merge pull request #421 from cconlon/fenrirSept18_2 Ruby Martin 2026-10-02 12:07:13 -0500
  • 919c5df803 F-13503: report a freed WolfSSLX509 as not a CA Chris Conlon 2026-09-25 15:58:46 -0600
  • de2416043b F-13502: reject out-of-range setTmpDH sizes before allocating Chris Conlon 2026-09-25 15:55:35 -0600
  • 38cef60800 F-12701: zero the serialized session buffer before freeing Chris Conlon 2026-09-25 15:49:48 -0600
  • 5d1f099623
    Merge pull request #433 from cconlon/fenrirSept30 Ruby Martin 2026-10-02 11:43:30 -0500
  • c52cf9eaab F-14007: marshal DTLS peer addresses family-aware to support IPv6 Chris Conlon 2026-09-18 17:21:59 -0600
  • 6943410df1 F-14006: return null from local-identity accessors when no X509KeyManager is set Chris Conlon 2026-09-18 16:13:31 -0600
  • 27f6505c54 F-14004: capture per-session local certificate alias instead of the shared auth-store alias Chris Conlon 2026-09-18 16:07:29 -0600
  • e6d38f145e F-14002: map 3DES to its own bulk-cipher enum and add ChaCha/Camellia mirrors Chris Conlon 2026-09-18 13:39:54 -0600
  • 22c64271a3 F-13490: return null from SSLEngine.getHandshakeSession outside an active handshake Chris Conlon 2026-09-18 13:27:04 -0600
  • 9fd3926ee6
    Merge pull request #431 from cconlon/fenrirSept25_7 Ruby Martin 2026-10-02 11:30:49 -0500
  • cfac8e134b
    Merge pull request #429 from cconlon/fenrirSept25_5 Ruby Martin 2026-10-02 11:08:29 -0500
  • 091b1f7051
    Merge pull request #428 from cconlon/fenrirSept25_4 Ruby Martin 2026-10-02 11:00:08 -0500
  • e4df809264
    Merge pull request #419 from cconlon/fenrirSept17_4 Ruby Martin 2026-10-01 18:08:49 -0500
  • 85b150ee6a
    Merge pull request #416 from cconlon/fenrirSept17 Ruby Martin 2026-10-01 17:59:43 -0500
  • 10cb4402f6 F-13506: build ALPN select callback strings from the wire list, one byte per char Chris Conlon 2026-09-28 15:10:07 -0600
  • 658ce6e38d F-12700: zero session-cache scratch buffers before freeing Chris Conlon 2026-09-25 15:27:57 -0600
  • 53684bc47b F-12698: validate read() arguments before the pooled read consumes data Chris Conlon 2026-09-25 15:22:42 -0600
  • 7b3e1d1237 F-12697: copy the KeyManagerFactory password and zero replaced copies Chris Conlon 2026-09-25 15:12:52 -0600
  • 8ee4c41ae5 F-12696: honor entryLen in X509_NAME_add_entry_by_txt Chris Conlon 2026-09-25 15:03:36 -0600
  • d7fbe576b1 F-11887: clear private-key DER buffers with wc_ForceZero before freeing Chris Conlon 2026-09-25 14:50:47 -0600
  • 3959b72faf F-10768: zero the Java PSK key array after the native callback copies it Chris Conlon 2026-09-25 13:57:19 -0600
  • 3724450063 F-10766: build the MAC/encrypt callback encIn ByteBuffer from encIn Chris Conlon 2026-09-25 13:32:58 -0600
  • bc36999510 F-9134: free the hostname-check WolfSSLCertificate on every exit path Chris Conlon 2026-09-25 13:28:04 -0600
  • bef0cf9944 F-9131: skip non-CA KeyStore entries in findIssuerBySignature unless peer certs are trusted Chris Conlon 2026-09-25 13:20:31 -0600
  • 13a519633d F-3917: bound memsaveSessionCache copy to the caller-supplied size Chris Conlon 2026-09-25 13:03:16 -0600
  • ab57ed5691 F-13470: bound array length against GetArrayLength in dtlsCidSet and sessionFromDerNative Chris Conlon 2026-09-17 17:16:36 -0600
  • 6f46e36f88 F-13469: return early for an empty chain in sortCertChainBySubjectIssuer Chris Conlon 2026-09-17 17:04:07 -0600
  • bfe54229f2 F-14028: copy server ECC public key into a JVM-owned buffer for the shared-secret callback Chris Conlon 2026-09-17 16:52:31 -0600
  • 019f8578ac F-14003: trim whitespace on each signature-scheme token in formatSigSchemes Chris Conlon 2026-09-17 16:41:46 -0600
  • c96e1af4e8 F-13491: reject setUseClientMode once the handshake has begun Chris Conlon 2026-09-17 16:29:42 -0600
  • a3855de1d7 Testing: suppress expected callback-exception traces in WolfSSLSessionTest Chris Conlon 2026-09-18 11:08:48 -0600
  • fff70e0274 F-14005: stop freeing key-manager-owned certificates in getLocalPrincipal Chris Conlon 2026-09-17 10:34:37 -0600
  • 7ce84514e4 F-13479: fall back to cacerts on a missing system store, fail on a corrupt one Chris Conlon 2026-09-17 10:09:50 -0600
  • 0291bb1021 F-13478: handle EdDSA and RSASSA-PSS public key types in getPublicKey Chris Conlon 2026-09-17 09:56:52 -0600
  • dd3192f5d6 F-13475 / F-13476: parse certificate and CRL validity dates with Locale.US Chris Conlon 2026-09-17 09:40:33 -0600
  • b475d78998 F-13471: use issuer cert subject name in setIssuerName() Chris Conlon 2026-09-17 09:25:35 -0600
  • 182f62229b F-13508: reject PK callback output lengths larger than the native buffer Chris Conlon 2026-09-30 15:49:58 -0600
  • 28892e364f
    Merge pull request #432 from cconlon/androidFipsReadyv7 Ruby Martin 2026-09-30 16:53:45 -0500
  • c0c793636e F-13507: zero the JVM copy of the HRR cookie secret before release Chris Conlon 2026-09-30 15:27:30 -0600
  • 937e1d29c7
    Merge pull request #427 from cconlon/fenrirSept25_3 Ruby Martin 2026-09-30 13:02:20 -0500
  • ce629fe827 Android: align native libs to 16 KB pages, update FIPS Ready core hashes to FIPS v7 HMAC-SHA-512 length Chris Conlon 2026-09-29 14:44:26 -0600
  • 50727a5d39
    Merge pull request #426 from cconlon/fenrirSept25_2 Ruby Martin 2026-09-30 11:02:46 -0500
  • 647940f094
    Merge pull request #425 from cconlon/fenrirSept25 Ruby Martin 2026-09-29 17:42:45 -0500
  • d56d34c4cc F-10749: label NativePskServerCb identityString as the client identity Chris Conlon 2026-09-25 11:49:16 -0600
  • 50431d5c70 F-10748: name the ECC sign context in NativeEccSignCb invocation comment Chris Conlon 2026-09-25 11:48:34 -0600
  • 0bb7c2fd8a F-9463: name ctx in setDevId NULL-check commen Chris Conlon 2026-09-25 11:47:43 -0600