toddouska
|
d201820e3a
|
Merge pull request #3687 from guidovranken/x963-export-reject-invalid-keys
Reject undefined keys (eg. state is ECC_STATE_NONE) from X963 export …
|
2021-01-25 14:46:59 -08:00 |
|
toddouska
|
cf9e4f0caf
|
Merge pull request #3518 from julek-wolfssl/openssh-fixes-v2
Fixes for openssh
|
2021-01-25 14:45:56 -08:00 |
|
Elms
|
234bf0c209
|
SSL: add const for *get_verify_mode to match openSSL
|
2021-01-25 10:37:50 -08:00 |
|
Elms
|
a2917ae29c
|
SSL: cleanup verify_mode coding style
|
2021-01-25 10:29:36 -08:00 |
|
David Garske
|
05e1ee1694
|
Cleanup to use fixed sizes from defines for DECLARE_VAR. Resolves issue with Visual Studio and using a variable (even const) to declare an array size.
|
2021-01-25 09:14:12 -08:00 |
|
Guido Vranken
|
29f7eebef7
|
Reject undefined keys (eg. state is ECC_STATE_NONE) from X963 export functions
Additionally, harmonize the failure conditions of wc_ecc_export_x963 and
wc_ecc_export_x963_compressed.
|
2021-01-25 16:22:21 +01:00 |
|
Sean Parkinson
|
4f0ed55232
|
SP math all: fix 1 word Montgomery Reduce
May have 3 words in partial result before shifting down.
|
2021-01-25 10:19:27 +10:00 |
|
David Garske
|
fb9836ed28
|
Merge pull request #3678 from guidovranken/zd11556
Fix wc_ecc_sign_hash memory leak. ZD 11556.
|
2021-01-22 18:06:56 -08:00 |
|
Elms
|
21ac86adb3
|
SSL: refactor SSL verify mode to be more compatible
This follows the bit flag pattern closer. Still doesn't support
`SSL_VERIFY_CLIENT_ONCE` and maybe other flags.
|
2021-01-22 12:17:07 -08:00 |
|
David Garske
|
13468d34e3
|
Apply same VS fixes to api.c as well.
|
2021-01-22 10:50:18 -08:00 |
|
David Garske
|
46aee19de3
|
Fix for Visual Studio issue with non-cost in array declaration.
|
2021-01-22 10:44:38 -08:00 |
|
toddouska
|
920c443864
|
Merge pull request #3250 from JacobBarthelmeh/Benchmark
add brainpool benchmark
|
2021-01-22 10:08:21 -08:00 |
|
David Garske
|
cd4dae8f09
|
Merge pull request #3674 from ejohnstown/alerts
Alerts
|
2021-01-22 09:16:56 -08:00 |
|
Juliusz Sosinowicz
|
b918fb9efe
|
Correct old DTLS msg rcv update
|
2021-01-22 14:33:33 +01:00 |
|
Jacob Barthelmeh
|
6fa1556daf
|
guard -ecc-all with HAVE_SELFTEST macro
|
2021-01-22 16:13:31 +07:00 |
|
Guido Vranken
|
905f0b1f5a
|
Fix wc_ecc_sign_hash memory leak. ZD 11556.
|
2021-01-22 09:55:30 +01:00 |
|
Sean Parkinson
|
a84f1c813a
|
TLS Session Ticket: Option to disable for TLS 1.2 and below
Customer may want session ticket supported with TLS 1.3 but not TLS 1.2
and below.
|
2021-01-22 13:19:29 +10:00 |
|
Sean Parkinson
|
9c34ecc130
|
ECDSA: don't modify the e mp_int (hash) value
Multiple loops of generating signatures require the same e value.
|
2021-01-22 12:51:21 +10:00 |
|
Sean Parkinson
|
fad1e67677
|
TLS 1.3: ensure key for signature in CertificateVerify
|
2021-01-22 11:54:53 +10:00 |
|
David Garske
|
9012317f5b
|
Fix copy/paste typo.
|
2021-01-21 17:41:11 -08:00 |
|
David Garske
|
1ee40ad7bd
|
Fix to always init the variable (not just when from heap). Cleanup of the DECLARE_ uses to make sure all allocations succeeded.
|
2021-01-21 17:12:29 -08:00 |
|
John Safranek
|
6f21995ec5
|
Alerts
Expand the guard around sending the PSK identity alert with a more limited option than enabling it with all the other alerts.
|
2021-01-21 16:42:54 -08:00 |
|
David Garske
|
4b47bf7b4e
|
Merge pull request #3090 from lechner/utf8
Convert a header file to UTF-8 encoding.
|
2021-01-21 16:32:27 -08:00 |
|
David Garske
|
2017de1b0f
|
Merge pull request #3617 from haydenroche5/cmake_user_settings
Add support for user settings to CMake.
|
2021-01-21 16:21:55 -08:00 |
|
David Garske
|
07f459b8d7
|
Merge pull request #3650 from kojo1/RsaSetRNG
add wc_RsaSetRNG to doc
|
2021-01-21 16:21:00 -08:00 |
|
David Garske
|
830b3cb676
|
Merge pull request #3653 from kojo1/fopen_binMode
binary mode, fopen
|
2021-01-21 16:20:07 -08:00 |
|
David Garske
|
aa64a8e835
|
Merge pull request #3672 from embhorn/zd11547
Fix FIPS compile errors
|
2021-01-21 16:08:53 -08:00 |
|
Elms
|
95d83c9856
|
SSL: refactor to allow session override or mode
|
2021-01-21 16:03:02 -08:00 |
|
toddouska
|
1acd6dfab2
|
Merge pull request #3635 from SparkiDev/hmac_openssl_fix
HMAC OpenSSL API: initialise HMAC ctx on new and allow key length of 0
|
2021-01-21 15:57:30 -08:00 |
|
toddouska
|
a8cfc23683
|
Merge pull request #3642 from SparkiDev/ecdsa_set_k_one_loop
ECDSA set k: WOLFSSL_ECDSA_SET_K_ONE_LOOP only tries k and fails when…
|
2021-01-21 15:56:36 -08:00 |
|
toddouska
|
5837d5e8de
|
Merge pull request #3649 from dgarske/stm_aesgcm_perf
STM32 AES GCM crypto hardware performance improvements
|
2021-01-21 15:55:58 -08:00 |
|
toddouska
|
85f08466f9
|
Merge pull request #3655 from SparkiDev/ext_cache_sess
SESSION: internal cache sessions can't be freed same as external
|
2021-01-21 15:54:16 -08:00 |
|
toddouska
|
e9e96dff6a
|
Merge pull request #3662 from embhorn/gh3659
Check method for NULL
|
2021-01-21 15:50:58 -08:00 |
|
toddouska
|
7b12dddf75
|
Merge pull request #3666 from SparkiDev/tls13_tick_before_group
TLS 1.3: don't group and wait on send session ticket
|
2021-01-21 15:49:52 -08:00 |
|
toddouska
|
22e6d52b7b
|
Merge pull request #3667 from SparkiDev/sp_fixes_4
SP int: fix _sp_mul_d inclusion checks
|
2021-01-21 15:49:03 -08:00 |
|
toddouska
|
b825e51d23
|
Merge pull request #3664 from SparkiDev/sp_math_all_ppc64
SP math all: Fixes for PPC64 compiler
|
2021-01-21 15:48:34 -08:00 |
|
toddouska
|
848ae3e514
|
Merge pull request #3668 from SparkiDev/jenkins_fixes_2
Compress: fix unused vars
|
2021-01-21 15:46:30 -08:00 |
|
toddouska
|
344ad2a3f8
|
Merge pull request #3625 from SparkiDev/disable_alg_fix
Disable algs: fix code to compile with various algs off/on
|
2021-01-21 15:45:29 -08:00 |
|
John Safranek
|
fe7be3e15f
|
Alerts
Alerts the server sends between receiving the client's CCS message and before it sends its own CCS message should not be encrypted.
|
2021-01-21 14:48:10 -08:00 |
|
Elms
|
7112a6dd78
|
SSL: add test and fix SSL_get_verify_mode
|
2021-01-21 14:20:27 -08:00 |
|
David Garske
|
fbe5fe1945
|
Merge pull request #3669 from embhorn/gh3657
Protect use of globalRNG
|
2021-01-21 14:09:59 -08:00 |
|
Elms
|
af3d842663
|
SSL: add support for SSL_get_verify_mode
|
2021-01-21 13:45:20 -08:00 |
|
John Safranek
|
3e4c3d13fe
|
Merge pull request #3671 from julek-wolfssl/dtls-scr-2
DTLS secure renegotiation fixes
|
2021-01-21 13:37:05 -08:00 |
|
Eric Blankenhorn
|
fd8527c15e
|
Fix FIPS compile errors
|
2021-01-21 15:27:42 -06:00 |
|
Jacob Barthelmeh
|
b418936f72
|
account for FIPS and g++ builds
|
2021-01-22 04:21:23 +07:00 |
|
Jacob Barthelmeh
|
177f4aecb6
|
add all curves to benchmark
|
2021-01-22 03:20:41 +07:00 |
|
Jacob Barthelmeh
|
e3fa462d72
|
add brainpool benchmark of key generation
|
2021-01-22 02:55:26 +07:00 |
|
JacobBarthelmeh
|
fe37137f12
|
add brainpool benchmark
|
2021-01-22 02:44:11 +07:00 |
|
Juliusz Sosinowicz
|
d8a01c6f8b
|
DTLS: client re-send on duplicate HelloRequest as well
|
2021-01-21 12:45:16 +01:00 |
|
Juliusz Sosinowicz
|
969de38764
|
Reset dtls_start_timeout on a timeout
|
2021-01-21 12:45:16 +01:00 |
|