Commit Graph

  • 5256318936
    Merge c61dda3491 into 53368ea5d9 Chris Conlon 2026-09-18 23:23:28 +0000
  • c61dda3491 F-14007: marshal DTLS peer addresses family-aware to support IPv6 Chris Conlon 2026-09-18 17:21:59 -0600
  • bd61ec3225 F-14006: return null from local-identity accessors when no X509KeyManager is set Chris Conlon 2026-09-18 16:13:31 -0600
  • 2b64dcde16 F-14004: capture per-session local certificate alias instead of the shared auth-store alias Chris Conlon 2026-09-18 16:07:29 -0600
  • 0cd33889e8 F-14002: map 3DES to its own bulk-cipher enum and add ChaCha/Camellia mirrors Chris Conlon 2026-09-18 13:39:54 -0600
  • cb6c38abc3 F-13490: return null from SSLEngine.getHandshakeSession outside an active handshake Chris Conlon 2026-09-18 13:27:04 -0600
  • c9de853494
    Merge 530dca1630 into 53368ea5d9 Chris Conlon 2026-09-18 19:15:17 +0000
  • 530dca1630 F-13487: reject negative maximum packet sizes and out-of-range DTLS MTU values Chris Conlon 2026-09-18 13:13:47 -0600
  • 264fbed1ee F-13486: reject null and invalid application protocols in WolfSSLParameters.setApplicationProtocols Chris Conlon 2026-09-18 12:09:59 -0600
  • 0ed3136efa F-13485: reject negative session timeouts in WolfSSLSessionContext.setSessionTimeout Chris Conlon 2026-09-18 11:58:59 -0600
  • a05ad5bffa F-13484: close the accepted socket when WolfSSLSocket wrapping fails in accept() Chris Conlon 2026-09-18 11:52:44 -0600
  • 32c2137341 F-13477: implement WolfSSLX509Name.toString via wolfSSL_X509_NAME_oneline Chris Conlon 2026-09-18 11:48:00 -0600
  • 122a0bd886
    Merge 61e283c3cd into 53368ea5d9 Chris Conlon 2026-09-18 11:26:11 -0600
  • 61e283c3cd F-13470: bound array length against GetArrayLength in dtlsCidSet and sessionFromDerNative Chris Conlon 2026-09-17 17:16:36 -0600
  • 0c7af18114 F-13469: return early for an empty chain in sortCertChainBySubjectIssuer Chris Conlon 2026-09-17 17:04:07 -0600
  • 1659059769 F-14028: copy server ECC public key into a JVM-owned buffer for the shared-secret callback Chris Conlon 2026-09-17 16:52:31 -0600
  • eb333b5a40 F-14003: trim whitespace on each signature-scheme token in formatSigSchemes Chris Conlon 2026-09-17 16:41:46 -0600
  • e0cd70f45f F-13491: reject setUseClientMode once the handshake has begun Chris Conlon 2026-09-17 16:29:42 -0600
  • f15d13ca5c
    Merge 49195fa409 into 53368ea5d9 Chris Conlon 2026-09-18 11:14:31 -0600
  • 49195fa409 F-13480: skip a CA file when its DER conversion fails in the Android fallback Chris Conlon 2026-09-17 12:23:56 -0600
  • 68c2f41b0f F-13474: keep cached sessions when resizing the session cache Chris Conlon 2026-09-17 12:16:56 -0600
  • 0de820dca5 F-13473: treat a zero session cache size as unlimited Chris Conlon 2026-09-17 11:50:16 -0600
  • 213c038bf6 F-13472: honor setupIOPipe in the two-argument WolfSSLSession constructor Chris Conlon 2026-09-17 11:42:43 -0600
  • 6368d90b79 F-13468: validate signed wc_EccPublicKeyToDer return before storing as size Chris Conlon 2026-09-17 11:34:29 -0600
  • b5d680b5b7
    Merge fa26a9383f into 53368ea5d9 Chris Conlon 2026-09-18 11:08:59 -0600
  • fa26a9383f Testing: suppress expected callback-exception traces in WolfSSLSessionTest Chris Conlon 2026-09-18 11:08:48 -0600
  • 7e6e7f6b40 F-14005: stop freeing key-manager-owned certificates in getLocalPrincipal Chris Conlon 2026-09-17 10:34:37 -0600
  • 885a8ad0e1 F-13479: fall back to cacerts on a missing system store, fail on a corrupt one Chris Conlon 2026-09-17 10:09:50 -0600
  • 4c83ed21be F-13478: handle EdDSA and RSASSA-PSS public key types in getPublicKey Chris Conlon 2026-09-17 09:56:52 -0600
  • 6e4611d979 F-13475 / F-13476: parse certificate and CRL validity dates with Locale.US Chris Conlon 2026-09-17 09:40:33 -0600
  • 067f600de5 F-13471: use issuer cert subject name in setIssuerName() Chris Conlon 2026-09-17 09:25:35 -0600
  • bfb9e563ba
    Merge 2d494b1a27 into 53368ea5d9 Chris Conlon 2026-09-17 21:56:51 +0000
  • 2d494b1a27 F-13489: clear the ALPN selector when setHandshakeApplicationProtocolSelector is passed null Chris Conlon 2026-09-17 15:18:05 -0600
  • 469b566ec1 F-13488: clear the ALPN selector when setHandshakeApplicationProtocolSelector is passed null Chris Conlon 2026-09-17 15:13:05 -0600
  • cb492a75ce F-13483: free native resources when closing a wrapper over an already-closed transport Chris Conlon 2026-09-17 14:44:19 -0600
  • c662514a6e F-13482: free WolfSSLCertManager on all certManagerVerify exit paths Chris Conlon 2026-09-17 14:35:03 -0600
  • 53368ea5d9
    Merge pull request #413 from cconlon/fenrirSept2 master Ruby Martin 2026-09-17 16:27:19 -0500
  • 7705b91bf4
    Merge pull request #410 from cconlon/fenrirAug31 Ruby Martin 2026-09-17 16:12:47 -0500
  • 24ad5a4d55
    Merge pull request #409 from cconlon/fenrirAug27 Ruby Martin 2026-09-17 15:54:18 -0500
  • e785be5c46 F-13481: close the keystore input stream on load failures in loadKeyStoreFileByType Chris Conlon 2026-09-17 14:21:51 -0600
  • 8af4aa8662 F-12675: release JNI local references in NativeGenCookieCb Chris Conlon 2026-08-31 16:16:59 -0600
  • 1bb8418a46 F-12674: guard against a null name conversion in the peer issuer/subject getters Chris Conlon 2026-08-31 16:07:05 -0600
  • 3a19fc2fd8 F-12673: reject out-of-range timeout values in setTimeout Chris Conlon 2026-08-31 15:59:06 -0600
  • 0461766540 F-12703: resolve the example main class ahead of the wolfcrypt-jni jar Chris Conlon 2026-08-31 15:48:38 -0600
  • eb59b04cab F-12672: allow a null PSK identity hint in the client callback Chris Conlon 2026-08-31 15:43:02 -0600
  • 1b0bb99b95 F-9122: assert the revoked serial decodes unchanged from a generated CRL Chris Conlon 2026-09-02 11:13:36 -0600
  • 8717e2fcc5 F-6305: free the popped extension object and stack on the pre-4.2.0 path Chris Conlon 2026-09-02 11:07:52 -0600
  • 56c1edeaf9 F-4148: null-check the cert stack before counting it in getDerCerts Chris Conlon 2026-09-02 11:02:27 -0600
  • 58a00109a7 F-3911: copy SNI server names in the WolfSSLImplementSSLSession copy constructor Chris Conlon 2026-09-02 10:59:11 -0600
  • 20b34ec340 F-12699: document the process-wide scope of the missing CRL callback setters Chris Conlon 2026-09-02 10:43:10 -0600
  • 537254ec10
    Merge pull request #415 from padelsbach/catch-exceptions Chris Conlon 2026-09-11 15:59:11 -0600
  • d85d0b70fa PR feedback: re-throw uncaught exceptions, add tests Paul Adelsbach 2026-09-11 14:26:18 -0700
  • 27c8f34434
    Merge pull request #407 from cconlon/fenrirAug24 Ruby Martin 2026-09-11 16:04:19 -0500
  • a5307f9972 Enhancements for socket error handling Paul Adelsbach 2026-09-11 12:12:15 -0700
  • 4976515d8d F-11882 / F-11883: fail closed on verify callback errors in NativeVerifyCallback and NativeSSLVerifyCallback Chris Conlon 2026-08-25 17:31:21 -0600
  • d37afefda4 F-11876: guard against NULL PSK identity strings before NewStringUTF Chris Conlon 2026-08-24 17:10:40 -0600
  • 5e0339035c F-11875: honor revocation date in CRL add_revoked and reject it in add_revoked_cert Chris Conlon 2026-08-24 17:00:48 -0600
  • ea8aa7a49b F-11870: handle unrecognized RDN types in WolfSSLX509 DN reformatting Chris Conlon 2026-08-24 15:29:31 -0600
  • 33d3adcef7
    Merge pull request #414 from cconlon/logFix Ruby Martin 2026-09-10 11:00:39 -0500
  • 2e607ab12a
    Merge pull request #412 from cconlon/fenrirSept1_2 Ruby Martin 2026-09-09 13:45:57 -0500
  • 46ea6bed68 JSSE: fix WolfSSLSocket interrupt-pipe fd leak on deferred close, and harden socket stress tests Chris Conlon 2026-09-08 15:14:46 -0600
  • 02f8276c1a
    Merge pull request #411 from cconlon/fenrirSept1 Ruby Martin 2026-09-08 18:10:55 -0500
  • e54a45385a
    Merge pull request #408 from cconlon/fenrirAug26 Ruby Martin 2026-09-08 12:30:21 -0500
  • 52bcf391ea JNI/JSSE: remove duplicate sanitizeForLog helper from WolfSSLDebug Chris Conlon 2026-09-08 10:47:38 -0600
  • 9df2fb2660
    Merge pull request #406 from cconlon/fenrirAug21 Ruby Martin 2026-09-04 12:48:36 -0500
  • f8a45f1ceb F-6736: align critical/non-critical extension OID getters with X509 contract Chris Conlon 2026-08-28 16:18:18 -0600
  • 236b106629 F-6735: correct getCurrentCipher null-check exception message Chris Conlon 2026-08-28 16:00:52 -0600
  • 7a0a09fd61 F-11885: only resume client-side entries in client session cache lookup Chris Conlon 2026-08-28 15:57:24 -0600
  • b784d772c0 F-11873: only copy HMAC inner buffer on success in setTlsHmacInner Chris Conlon 2026-08-27 14:48:35 -0600
  • 83aaffae94 F-11884: release owned session reference in sessionToDer Chris Conlon 2026-08-26 17:17:29 -0600
  • 6a6fcf86a9 F-11878: check mutex init and free mutexes on newSSL construction rollback Chris Conlon 2026-08-26 17:06:33 -0600
  • 14673f945c F-11877: check key initialization results in WolfCrypt verify/decrypt helpers Chris Conlon 2026-08-26 16:55:56 -0600
  • 0742792d48 F-11872: delete promoted JNI local references in NativeVerifyCallback Chris Conlon 2026-08-26 16:41:39 -0600
  • 64779aab39
    Merge pull request #405 from cconlon/fenrirAug20 Ruby Martin 2026-09-03 15:57:08 -0500
  • 6c479fbc81
    Merge pull request #404 from cconlon/fenrirAug18 Ruby Martin 2026-09-02 16:09:41 -0500
  • e4956962e6 F-12695: zero pooled direct ByteBuffers before reuse or discard Chris Conlon 2026-09-01 14:57:30 -0600
  • bac85ce3af F-12694: skip cert-less aliases in the cached KeyManager alias lookup Chris Conlon 2026-09-01 14:45:49 -0600
  • fe2843144d F-12690: correct the ALPN getter comment to describe the negotiated protocol Chris Conlon 2026-09-01 14:28:03 -0600
  • 4da81a1792 F-12689: document the DTLS protocol versions in the cipher-list comment Chris Conlon 2026-09-01 14:26:27 -0600
  • 5ebf28c74c F-12683: null-check the ASN.1 time formatting result in the date getters Chris Conlon 2026-09-01 14:18:30 -0600
  • b84a57269a F-12682: compare all fields symmetrically in WolfSSLAltName.equals Chris Conlon 2026-09-01 11:43:18 -0600
  • 36f19df3bb F-12681: release JNI local references in the ATOMIC_USER callbacks Chris Conlon 2026-09-01 10:46:17 -0600
  • a146a962cb F-12680: trim trailing null elements from the getExtendedKeyUsage result Chris Conlon 2026-09-01 10:21:36 -0600
  • 6e07102006 F-12677: reject negative sizes in the session-level I/O callbacks Chris Conlon 2026-09-01 10:11:51 -0600
  • 446e18f729 F-12676: release JNI local references in the TLS secret and session ticket callbacks Chris Conlon 2026-09-01 10:08:10 -0600
  • 57c912264f F-10753: pin ant compile classpath to project jars Chris Conlon 2026-08-21 16:47:44 -0600
  • 0627c0e675 F-10751: verify Maven test dependency checksums in CI before running tests Chris Conlon 2026-08-21 16:41:54 -0600
  • e84247aec0 F-10765: document that jdk.tls.disabledAlgorithms is not applied to cipher suites Chris Conlon 2026-08-21 16:28:56 -0600
  • 2a443ad65a F-5777: sanitize peer hostname in WolfSSLAuthStore debug log sinks Chris Conlon 2026-08-21 16:05:26 -0600
  • 5f38ed51c0 F-5741: sanitize peer hostname in WolfSSLEngineHelper debug log Chris Conlon 2026-08-21 16:02:12 -0600
  • 912fe9c92f F-5739: honor caller-supplied size in WolfSSLContext memrestoreCertCache Chris Conlon 2026-08-21 15:05:13 -0600
  • ebf551a180 F-5715: skip resumption of invalidated sessions and re-check validity before caching Chris Conlon 2026-08-21 14:58:05 -0600
  • a701f8f8ae F-5638: synchronize on WolfSSLX509Name while setting subject/issuer name Chris Conlon 2026-08-21 14:43:36 -0600
  • b90c5992ad F-5637: validate RSA JNI buffer sizes against DirectByteBuffer capacity Chris Conlon 2026-08-20 15:36:38 -0600
  • ac41d9ac3c F-5275: validate ECC sign/verify buffer sizes against DirectByteBuffer capacity Chris Conlon 2026-08-20 15:21:21 -0600
  • 1675ad794d F-5273: remove no-op endpoint identification block from DtlsClientEngine example Chris Conlon 2026-08-20 14:57:28 -0600
  • cc5ad12a7c F-5271: require client certificate authentication in DualProviderFIPSTest example Chris Conlon 2026-08-20 14:19:01 -0600
  • 28d4ad5735 F-5270: require client certificate authentication in ThreadedSSLSocketClientServer example Chris Conlon 2026-08-20 14:13:28 -0600
  • d776cd8a7b F-5268: honor caller-supplied size in WolfSSLSession useCertificateChainBufferFormat Chris Conlon 2026-08-20 12:55:21 -0600
  • d2e03ee83a F-5212 / F-5269: honor caller-supplied size in WolfSSLContext buffer load JNI functions Chris Conlon 2026-08-20 12:42:42 -0600