mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
wolfssl/certs
History
David Garske 9b6cf56a6e
Expanded support for Curve25519/Curve448 and TLS v1.3 sniffer (#4335) 
* Fixes for building with Ed/Curve25519 only. Fix for IoT safe demo to exit after running once. Added `WOLFSSL_DH_EXTRA` to `--enable-all` and `--enable-sniffer`. Cleanup uses of `==` in configure.ac. Various spelling fixes.

* Fix for sniffer with TLS v1.3 session tickets.

* Fix for ASN Template Ed25519 key export (missing version / not setting OID correctly).

* Add key import/export support for Curve25519/Curve448. Refactor of the 25519/448 ASN code to combine duplicate code.

* Refactor of Curve25519 code. Improved public key export to handle generation when only private is set. Improved private scalar buffer sizing.

* Fix for static ephemeral loading of file buffer.

* Added sniffer Curve25519 support and test case.

* Fix for sniffer to not use ECC for X25519 if both are set.

* Fix Curve448 public export when only private is set.

* Fix for `dh_generate_test` for small stack size.

* Reduce stack size use on new asymmetric DER import/export functions. Cleanup pub length calc.

* Fix invalid comment.
2021-09-01 09:28:24 +10:00
..
1024
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
3072
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
4096
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
crl
Remove execute bit on update pem/der files.
2021-06-16 10:17:20 -07:00
ecc
Added TLS v1.2 and v1.3 test cases for ECC Koblitz and Brainpool curves (both server auth and mutual auth). Cipher suites: ECDHE-ECDSA-AES128-GCM-SHA256, ECDH-ECDSA-AES128-GCM-SHA256 and TLS13-AES128-GCM-SHA256.
2020-11-10 09:47:36 -08:00
ed448
wolfSSL_X509V3_EXT_i2d: NID_ext_key_usage
2020-08-06 13:45:36 +02:00
ed25519
Add new scripts to include.am.
2021-06-11 08:19:23 -07:00
external
update google cert that was set to expire in Dec 2021
2021-07-09 23:57:50 +07:00
intermediate
Fix for invalid files in include.am. Improvement to new alt-chain tests to catch case this PR fixes.
2020-06-18 08:33:59 -07:00
ocsp
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
p521
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
renewcerts
Fix basic constraints extension present and CA Boolean not asserted
2021-07-02 12:16:16 -06:00
statickeys
Expanded support for Curve25519/Curve448 and TLS v1.3 sniffer (#4335)
2021-09-01 09:28:24 +10:00
test
fix for keyid with ktri cms
2021-06-22 21:33:12 +07:00
test-pathlen
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-cert-chain.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-cert.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-ecc384-cert.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-ecc384-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-ecc384-key.der
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-ecc384-key.pem
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-ecc-cert.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-ecc-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ca-ecc-key.der
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-ecc-key.pem
Remove execute bit from a few files.
2018-05-31 10:14:47 -07:00
ca-key.der
…
ca-key.pem
…
check_dates.sh
Script to find exipred CRLs and certificates
2020-09-18 11:26:27 +10:00
client-ca.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
client-cert-ext.der
wolfSSL Compatibility support for OpenVPN
2019-11-11 14:58:23 -08:00
client-cert-ext.pem
wolfSSL Compatibility support for OpenVPN
2019-11-11 14:58:23 -08:00
client-cert.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
client-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
client-ecc384-cert.der
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
client-ecc384-cert.pem
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
client-ecc384-key.der
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
client-ecc384-key.pem
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
client-ecc-cert.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
client-ecc-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
client-key.der
…
client-key.pem
…
client-keyEnc.pem
…
client-keyPub.der
…
client-relative-uri.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
client-uri-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
csr.attr.der
Use CSR with smaller key size 4096 -> 2048
2020-12-18 12:48:25 +01:00
csr.dsa.pem
Implement wolfSSL_BIO_*_connect and wolfSSL_BIO_set_conn_port
2020-12-17 14:26:49 +01:00
csr.ext.der
Add CSR test with Extension Request attribute
2020-12-17 14:27:46 +01:00
csr.signed.der
Tests starting to pass
2020-12-17 14:26:49 +01:00
dh2048.der
…
dh2048.pem
…
dh3072.der
Benchmark support for 3072-bit RSA and DH when USE_CERT_BUFFERS_3072 is defined.
2018-06-22 09:30:33 -07:00
dh3072.pem
Add test for 3072-bit RSA and DH and fix modexp
2017-10-17 08:36:39 +10:00
dh4096.der
Fix testing using 4096 bits keys and parameters
2020-04-14 12:03:51 +10:00
dh4096.pem
Fix testing using 4096 bits keys and parameters
2020-04-14 12:03:51 +10:00
dh-pubkey-2048.der
Add two public key files in certs folder and register them to gencertbuf.pl
2021-03-19 14:52:58 +09:00
dsa2048.der
…
dsa3072.der
Benchmark support for 3072-bit RSA and DH when USE_CERT_BUFFERS_3072 is defined.
2018-06-22 09:30:33 -07:00
dsa-pubkey-2048.der
Add two public key files in certs folder and register them to gencertbuf.pl
2021-03-19 14:52:58 +09:00
dsaparams.der
Make changes to support port of NTP from OpenSSL to wolfSSL.
2021-08-02 13:33:18 -07:00
dsaparams.pem
expanding compatibility layer
2016-12-28 14:45:29 -07:00
ecc-client-key.der
update certs, extend ntru to 1000 days, add der formatted ecc, new ecc buffer test
2016-08-12 13:00:52 -06:00
ecc-client-key.pem
…
ecc-client-keyPub.der
update certs, extend ntru to 1000 days, add der formatted ecc, new ecc buffer test
2016-08-12 13:00:52 -06:00
ecc-client-keyPub.pem
update certs, extend ntru to 1000 days, add der formatted ecc, new ecc buffer test
2016-08-12 13:00:52 -06:00
ecc-key-comp.pem
…
ecc-key.der
…
ecc-key.pem
…
ecc-keyPkcs8.der
Add support for more OpenSSL APIs
2018-11-20 07:54:24 +10:00
ecc-keyPkcs8.pem
…
ecc-keyPkcs8Enc.der
Add support for more OpenSSL APIs
2018-11-20 07:54:24 +10:00
ecc-keyPkcs8Enc.pem
…
ecc-keyPub.der
…
ecc-privkey.pem
Add test for private key only ecc key
2017-05-15 10:04:42 +10:00
ecc-privkeyPkcs8.der
Fixes for PKCS8 w/wo encryption as DER/ASN.1. Fixes for building with --disable-oldnames. Fix to enable the PKCS8 enc test without openssl comat. Added additional PKCS8 tests.
2019-08-19 16:27:46 -07:00
ecc-privkeyPkcs8.pem
Add test for ECC private key with PKCS 8 encoding (no crypt) and -----BEGIN EC PRIVATE KEY----- header.
2018-10-17 10:01:29 -07:00
ecc-privOnlyCert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ecc-privOnlyKey.pem
Add test
2017-06-14 09:44:26 +10:00
ecc-rsa-server.p12
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
entity-no-ca-bool-cert.pem
Fix basic constraints extension present and CA Boolean not asserted
2021-07-02 12:16:16 -06:00
entity-no-ca-bool-key.pem
Fix basic constraints extension present and CA Boolean not asserted
2021-07-02 12:16:16 -06:00
gen_revoked.sh
…
include.am
Make changes to support libimobiledevice.
2021-08-24 08:52:43 -07:00
ntru-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
ntru-key.raw
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
renewcerts.sh
ASN1 Template: stricter and simpler DER/BER parsing/construction
2021-08-19 11:32:41 +10:00
rsa2048.der
…
rsa3072.der
Benchmark support for 3072-bit RSA and DH when USE_CERT_BUFFERS_3072 is defined.
2018-06-22 09:30:33 -07:00
rsa-pub-2048.pem
Add Qt 5.12 and 5.13 support
2019-12-06 14:27:01 -07:00
server-cert-chain.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-cert.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-ecc384-cert.der
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
server-ecc384-cert.pem
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
server-ecc384-key.der
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
server-ecc384-key.pem
Added client/server certs and keys for P-384-bit signed by P-384 CA. Fix for broken certs/ecc/genecc.sh script. Added simple P-384 cipher suite test.
2018-10-25 09:21:27 -07:00
server-ecc-comp.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-ecc-comp.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-ecc-rsa.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-ecc-rsa.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-ecc-self.der
Release Update
2020-08-12 14:43:47 -07:00
server-ecc-self.pem
update server-ecc-self.pem before/after dates
2019-07-23 09:27:39 -06:00
server-ecc.der
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-ecc.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-key.der
…
server-key.pem
…
server-keyEnc.pem
…
server-keyPkcs8.der
add wc_GetPkcs8TraditionalOffset()
2017-03-16 15:14:20 -06:00
server-keyPkcs8.pem
…
server-keyPkcs8Enc2.pem
…
server-keyPkcs8Enc12.pem
…
server-keyPkcs8Enc.der
Add support for more OpenSSL APIs
2018-11-20 07:54:24 +10:00
server-keyPkcs8Enc.pem
…
server-pub-key.pem
Make changes to support libimobiledevice.
2021-08-24 08:52:43 -07:00
server-revoked-cert.pem
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
server-revoked-key.pem
…
taoCert.txt
Correct misspellings and typos from codespell tool
2019-12-24 12:29:33 -06:00
test-ber-exp02-05-2022.p7b
add test-ber-exp02-05-2022.p7b file for test
2019-02-06 11:11:27 -07:00
test-degenerate.p7b
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
test-servercert-rc2.p12
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
test-servercert.p12
run renewcerts.sh script
2021-02-11 03:12:54 +07:00
wolfssl-website-ca.pem
update external test certificate
2019-10-15 10:11:38 -06:00