Commit Graph

  • 4d556fb77c
    Merge pull request #180 from cconlon/SSLEngineGCFix Daniel Pouzzner 2024-03-30 03:03:32 -0400
  • 9c63b7fc28
    Merge pull request #179 from cconlon/skpopfree Daniel Pouzzner 2024-03-30 02:59:06 -0400
  • 8826635d61
    Merge pull request #181 from cconlon/tls13secretcb lealem47 2024-03-28 10:29:40 -0600
  • 3dee881dda JNI: wrap wolfSSL_set_tls13_secret_cb() in WolfSSLSession.setTls13SecretCb(), along with example in Client.java Chris Conlon 2024-03-27 12:25:15 -0600
  • 66ac903297 JSSE: add -profile option to example ClientJSSE/ServerJSSE/MultiThreadedSSLClient to allow easier analysis with VisualVM Chris Conlon 2024-03-26 14:52:55 -0600
  • 115e93aaa7 JSSE: unset native verify callback when SSLEngine is finished, allows garbage collection Chris Conlon 2024-03-26 14:41:29 -0600
  • a7031b395f JNI/JSSE: delete global verify callback before resetting in WolfSSLSession.setVerify() Chris Conlon 2024-03-26 14:40:42 -0600
  • 687d7ca1cb JNI/JSSE: call wolfSSL_sk_X509_pop_free() instead of wolfSSL_sk_X509_free() in WolfSSLX509StoreCtx.getDerCerts() Chris Conlon 2024-03-18 14:44:02 -0600
  • ecd67a4596
    Merge pull request #172 from cconlon/needWantClientAuth JacobBarthelmeh 2024-02-15 20:54:55 +0700
  • 1d0b807d9c JSSE: fix handling of setWantClientAuth()/setNeedClientAuth in SSLEngine and choosing of key alias with chooseEngineClient/ServerAlias() Chris Conlon 2024-01-30 14:43:17 -0700
  • 1d5cbd66c7 JNI: wrap native wolfSSL_use_certificate_chain_buffer_format() in WolfSSLSession Chris Conlon 2024-01-30 14:37:22 -0700
  • 0e4953f1a6
    Merge pull request #176 from cconlon/github-actions JacobBarthelmeh 2024-02-15 01:30:01 +0700
  • dcfd210703 add initial GitHub actions (Linux, Mac) Chris Conlon 2024-02-13 10:11:53 -0700
  • 5155493914
    Merge pull request #177 from cconlon/testactions András Fekete 2024-02-14 12:56:12 -0500
  • fd70f09fce add simple test action Chris Conlon 2024-02-14 10:41:33 -0700
  • 424d4c035d
    Merge pull request #175 from cconlon/getSessionCheckForTicket JacobBarthelmeh 2024-02-14 03:59:52 +0700
  • 21e35057c1 JNI/JSSE: check for ticket with TLS 1.3 before saving WOLFSSL_SESSION to cache Chris Conlon 2024-02-12 17:09:30 -0700
  • bde68360bc
    Merge pull request #174 from philljj/fix_sunjsse_issues Chris Conlon 2024-02-12 13:44:12 -0700
  • dbb0ee80e5 Don't skip renegotiation for invalidated sessions. jordan 2024-02-09 15:38:07 -0600
  • d38a989f23 Don't handshake on unconnected socket. jordan 2024-02-09 14:35:19 -0600
  • b3db25f0ab
    Merge pull request #171 from cconlon/select-eintr JacobBarthelmeh 2024-02-01 09:25:12 -0700
  • 60522c7f63
    Merge pull request #170 from philljj/fix_sunjsse_issues Chris Conlon 2024-01-30 17:00:47 -0700
  • 247aedd2b1 JNI: call select() again on error with EINTR Chris Conlon 2024-01-29 17:29:53 -0700
  • 22166cf681 Fix sun jsse test issues. jordan 2024-01-26 13:15:34 -0600
  • 2829ad72ee
    Merge pull request #169 from cconlon/SSL_CTX_set1_sigalgs_list JacobBarthelmeh 2024-01-25 08:18:31 -0800
  • 5146e74c4d JNI: add TLS 1.3 version to example Client.java and Server.java Chris Conlon 2024-01-24 15:17:38 -0700
  • 8087699d79 JNI: add example of session resumption to example Client.java Chris Conlon 2024-01-24 15:05:06 -0700
  • 91acf5ff19 JNI: wrap native SSL_CTX_set1_sigalgs_list() in WolfSSLContext Chris Conlon 2024-01-24 10:03:47 -0700
  • 93814067d6
    Merge pull request #168 from cconlon/2024 JacobBarthelmeh 2024-01-16 14:51:55 -0800
  • 85cfeeaf90 update copyright to 2024 Chris Conlon 2024-01-16 15:35:09 -0700
  • 545b500b2b
    Merge pull request #167 from cconlon/X509ExtendedKeyManager JacobBarthelmeh 2024-01-16 14:14:28 -0800
  • f9b4112af2
    Merge pull request #166 from cconlon/nativeDebugLogs JacobBarthelmeh 2024-01-16 13:59:17 -0800
  • 0d9f321a28 JSSE: add implementation of X509ExtendedKeyManager for chooseEngineClientAlias() / chooseEngineServerAlias() Chris Conlon 2024-01-16 12:14:36 -0700
  • 47d36cb0cc JSSE: enable native wolfSSL debug logs at SSLContext and WolfSSLProvider levels, register Java logging callback to push native logs over System.out.println and include thread ID Chris Conlon 2024-01-15 16:45:14 -0700
  • 37692e7855
    Merge pull request #163 from cconlon/alpnGaps JacobBarthelmeh 2024-01-03 13:23:33 -0700
  • 682f1ea5fc JSSE: add support for SSLSocket/SSLEngine get/setHandshakeApplicationProtocolSelector() for ALPN select support Chris Conlon 2023-12-05 17:10:40 -0700
  • 4cc6a45842
    Merge pull request #165 from cconlon/sslEngineExtendedTestFix JacobBarthelmeh 2024-01-02 13:45:04 -0700
  • e6bc9ea721 JSSE: SSLEngine: skip saveSession() after ssl.accept/connect() since TLS 1.3 session ticket can come later, fixes extended SSLEngine test case Chris Conlon 2023-12-22 16:39:02 -0700
  • 134f3112c3
    Merge pull request #164 from cconlon/tls13Methods JacobBarthelmeh 2023-12-21 16:38:32 -0700
  • 465559ebfd JNI: wrap wolfSSL_CTX_set_groups() Chris Conlon 2023-12-21 15:59:59 -0700
  • b09556d961 JNI: wrap wolfTLSv1_3_client_method() and wolfTLSv1_3_server_method() Chris Conlon 2023-12-21 14:07:33 -0700
  • 67aee347cd
    Merge pull request #162 from cconlon/sslSessionGetPeerCertificates David Garske 2023-12-12 08:17:16 -0800
  • 712d902c43 JSSE: SSLSession: always call ssl.getPeerCertificate() first before returning cached peer cert Chris Conlon 2023-12-07 14:29:20 -0700
  • 23ab251e3a JNI: wrap native wolfSSL_CTX_flush_sessions() in com.wolfssl.WolfSSLContext Chris Conlon 2023-12-07 14:28:35 -0700
  • c8ed69241a
    Merge pull request #161 from JacobBarthelmeh/master Chris Conlon 2023-12-04 10:21:32 -0700
  • dff8690e9e
    Merge pull request #159 from cconlon/x509ExtendedTrustManager JacobBarthelmeh 2023-12-04 10:07:11 -0700
  • f99fc863df fixes for heap hint used JacobBarthelmeh 2023-12-04 10:03:53 -0700
  • b782a6516f
    Merge pull request #160 from cconlon/xfreeFixes JacobBarthelmeh 2023-12-01 11:43:08 -0700
  • a02f3400ab JNI: correct heap pointers for a few XFREE calls in JNI code Chris Conlon 2023-12-01 11:33:43 -0700
  • 75cf505e9a JSSE: remove extraneous ioLock in WolfSSLInputStream/WolfSSLOutputStream, prevents threaded I/O from working properly; already have a native JNI mutex lock in place around WOLFSSL read/write operations Chris Conlon 2023-11-28 16:24:01 -0700
  • 76513f60de JSSE: set peer InetAddress in WolfSSLSocket.connect(), use as first choice for SNI if jdk.tls.trustNameService set to true Chris Conlon 2023-11-28 10:27:03 -0700
  • f29486d72e JSSE: add implementation of X509ExtendedTrustManager for internal hostname verification Chris Conlon 2023-11-22 15:09:41 -0700
  • 10406c5078
    Merge pull request #158 from cconlon/ctxUseSupportedCurve JacobBarthelmeh 2023-11-13 10:37:27 -0700
  • f95e446b87 JNI: wrap wolfSSL_CTX_UseSupportedCurve() in com.wolfssl.WolfSSLContext Chris Conlon 2023-11-10 10:21:00 -0700
  • 454d0e6e80
    Merge pull request #134 from cconlon/hostname JacobBarthelmeh 2023-11-03 16:00:09 -0600
  • 35ab8366c1 Avoid calling InetAddress.getHostName() unless jdk.tls.trustNameService property is set, avoids unnecessary DNS lookups Chris Conlon 2023-06-01 10:49:42 -0600
  • 1a86dd6701
    Merge pull request #151 from cconlon/socketExceptionErrno JacobBarthelmeh 2023-11-03 15:46:09 -0600
  • 327bd5a4fc
    Merge pull request #157 from cconlon/exampleClientResumeGET JacobBarthelmeh 2023-11-03 15:32:05 -0600
  • 6a1468f6ad JSSE: fix ClientJSSE example resumption when sending HTTP GET Chris Conlon 2023-11-03 13:50:14 -0600
  • 40e94f3f73 JNI/JSSE: throw SocketException with native errno if native socket select() fails Chris Conlon 2023-10-11 11:38:55 -0600
  • e48d38b2b5
    Merge pull request #156 from cconlon/fipsDebugCleanup JacobBarthelmeh 2023-11-02 09:09:27 -0600
  • 48293f962e
    Merge pull request #155 from cconlon/clientExampleNoVerify JacobBarthelmeh 2023-11-02 09:09:06 -0600
  • 564e1328c4
    Merge pull request #154 from cconlon/trustPeerCert JacobBarthelmeh 2023-11-01 12:13:39 -0600
  • 30f2109ee3 JNI: remove extraneous unable to set FIPS callback debug print Chris Conlon 2023-10-23 15:14:55 -0600
  • 2446ced76e JSSE: fix example client option to disable peer verification, add -g option to send HTTP GET Chris Conlon 2023-10-20 17:04:02 -0600
  • f1235884ad JSSE: only store session into Java cache if valid, add error check for wolfSSL_set_session() Chris Conlon 2023-10-19 15:05:20 -0600
  • 3d6ceb09a3 JNI/JSSE: pass socket timeout to select() for wolfSSL_accept() Chris Conlon 2023-10-19 15:04:30 -0600
  • 15a1c90a8c JSSE: optimize locking of sesPtrLock inside WolfSSLImplementSSLSession, reduce time spent inside lock Chris Conlon 2023-10-18 10:44:51 -0600
  • 90a1f0308c JSSE: delay creation of WolfSSLImplementSSLSession objects until needed, reduces overall memory usage by active objects Chris Conlon 2023-10-18 10:43:52 -0600
  • 544e054ce3 JNI: lock jniSessLock in native WolfSSLSession.get1Session() since we call wolfSSL_peek() which does I/O Chris Conlon 2023-10-18 10:40:58 -0600
  • 0b226188b6 JNI/JSSE: wrap JNI method to get WOLFSSL_TRUST_PEER_CERT definition, allow WolfSSLTrustX509.getAcceptedIssuers() to return all certs in KeyStore if WOLFSSL_TRUST_PEER_CERT has been defined in native wolfSSL Chris Conlon 2023-10-16 15:40:12 -0600
  • 7cf645256e
    Merge pull request #153 from cconlon/mavenPom JacobBarthelmeh 2023-10-12 16:15:36 -0600
  • a31aaa6f62 JSSE: SSLServerSocketTest: only add SSLServerSocketFactory to be tested if has enabled protocols available Chris Conlon 2023-10-12 16:10:18 -0600
  • f6ca65ccc1 JNI/JSSE: add initial Maven build support, update README.md with instructions Chris Conlon 2023-10-11 15:20:20 -0600
  • 5f8e2f55f4 JNI: call WolfSSL.loadLibrary() in WolfSSLContextTest and WolfSSLSessionTest in @BeforeClass so tests can run independently Chris Conlon 2023-10-11 15:04:13 -0600
  • 7da3a34dd7 JNI: change debug printf for setFd() to Info instead of Error, Java app may use I/O callbacks with no fd Chris Conlon 2023-10-11 15:03:20 -0600
  • c96f4e1eb4
    Merge pull request #152 from cconlon/jniDylib JacobBarthelmeh 2023-10-11 11:52:00 -0600
  • 8d3c42e96f JNI/JSSE: standardize native JNI library artifact name on OSX to .dylib instead of .jnilib Chris Conlon 2023-10-11 11:47:48 -0600
  • 63f3497815
    Merge pull request #149 from cconlon/WolfSSLSocket_ioLock JacobBarthelmeh 2023-10-10 14:21:20 -0600
  • 776e0314be JSSE: add doxygen comment for WolfSSLImplementSSLSession sesPtrUpdatedAfterTable Chris Conlon 2023-10-06 12:23:52 -0600
  • b8bffd9802
    Merge pull request #150 from cconlon/sslSocketALPN JacobBarthelmeh 2023-10-10 14:09:42 -0600
  • 086f0c9440 JSSE: SSLSocket: add getApplicationProtocol(), fixes okhttp compatibility with h2 Chris Conlon 2023-10-10 10:27:21 -0600
  • 1651eb77ab JSSE: add extended threading test of SSLSocket Chris Conlon 2023-10-06 12:21:13 -0600
  • fd940c0ae4 JSSE: SSLSocket: additional exceptions if Socket has been closed, only try TLS shutdown on close() if handshake has completed Chris Conlon 2023-10-06 12:01:26 -0600
  • d358c5bd84 JSSE: remove client-side cache entry on resumption attempt for compatibility with TLS 1.3, print SessionStore entries when wolfjsse.debug enabled Chris Conlon 2023-10-06 11:59:25 -0600
  • b9652d79ee JSSE: protect WolfSSLInputStream/WolfSSLOutputStream calls to ssl.read/write using ioLock Chris Conlon 2023-09-19 16:14:27 -0600
  • a330e10f52
    Merge pull request #138 from cconlon/devId David Garske 2023-09-19 08:13:01 -0700
  • 37738ac8da JNI/JSSE: return CRYPTOCB_UNAVAILABLE if no crypto callback implementation found/called, additional code comments Chris Conlon 2023-09-18 16:31:56 -0600
  • d98453758f Fix vaultic cb name billphipps 2023-08-29 15:58:19 -0400
  • 72d8c74b2f Adjust native CryptoCB comment and add VaultIC420 callback registration Chris Conlon 2023-07-26 11:41:18 -0600
  • 40134ba260 JSSE: add WolfSSLProvider.unRegisterDevId() and WolfSSLProvider.registerDevId() Chris Conlon 2023-07-24 15:49:57 -0600
  • 64a79c50b1 JNI/JSSE: add support for wolfSSL CryptoCb in WolfSSLProvider and WolfSSLContext Chris Conlon 2023-07-17 17:39:21 -0600
  • aca5192426
    Merge pull request #148 from cconlon/debugTimestamp JacobBarthelmeh 2023-09-08 16:01:19 -0600
  • cff25f73d2 JSSE: add timestamp to debug logs Chris Conlon 2023-09-08 15:54:47 -0600
  • 2df44558b9
    Merge pull request #144 from cconlon/WolfSSLSessionSyncFix JacobBarthelmeh 2023-09-07 11:34:00 -0600
  • 9a1f367522 JSSE: update WolfSSLEngine extended threading test to use AtomicIntegerArray instead of int[] Chris Conlon 2023-09-07 10:42:01 -0600
  • 22264bc3b2 JSSE: fix client session cache and resumption to make copy of WolfSSLImplementSSLSession when taking out of WolfSSLAuthStore cache, prevents multiple objects overwriting/changing WolfSSLSession held internally Chris Conlon 2023-09-06 17:29:42 -0600
  • a744850f62 JSSE: SSLEngine: protected setSSLCallbacks/unsetSSLCallbacks() with ioLock since I/O ops depends on them Chris Conlon 2023-09-05 16:37:02 -0600
  • b9f858397c
    Merge pull request #146 from cconlon/csrGen JacobBarthelmeh 2023-09-05 06:47:42 -0600
  • b6e8452c25 JSSE: use CountDownLatch to detect when server thread has started in WolfSSLEngine ExtendedThreadingUse test Chris Conlon 2023-09-01 16:58:12 -0600