Daniel Pouzzner
|
6a56d3e131
jumbo patch of fixes for clang-tidy gripes (with some bug fixes).
|
há 2 anos atrás |
Marco Oliverio
|
231a0bbb84
dtls-srtp: no ekm cross check on single threaded/no pthread conf
|
há 2 anos atrás |
David Garske
|
8e0ece920b
Test cleanups. Fix possible leak in `TLSX_UseSRTP`.
|
há 2 anos atrás |
Marco Oliverio
|
86ba0ef643
tests: support test for SRTP
|
há 2 anos atrás |
Anthony Hu
|
7d4c13b9a4
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC
|
há 2 anos atrás |
Daniel Pouzzner
|
0b4f34d62a
typographic cleanup: fix whitespace, remove unneeded UTF-8, convert C++ comment constructs to C.
|
há 3 anos atrás |
David Garske
|
c16f0db1b5
Fixes for handling `WC_PENDING_E` async responses in API unit test and examples. Resolves all issues with `--enable-all --enable-asynccrypt --with-intelqa=`.
|
há 3 anos atrás |
Anthony Hu
|
0e80923fb3
Unit tests for post-quantum groups.
|
há 3 anos atrás |
Anthony Hu
|
33cb823148
Remove legacy NTRU and OQS (#4418)
|
há 3 anos atrás |
Sean Parkinson
|
142c7a9892
cppcheck fixes and a config fix
|
há 3 anos atrás |
Daniel Pouzzner
|
186ff2b365
make -DNO_ED25519_KEY_{IMPORT,EXPORT} buildable, and fix api.c and suites.c so that -DNO_ED*_KEY_{IMPORT,EXPORT} pass make check.
|
há 3 anos atrás |
Daniel Pouzzner
|
9b43e57ccf
ED: add streaming API to the ED verify routines: wc_ed*_verify_msg_init(), wc_ed*_verify_msg_update(), wc_ed*_verify_msg_final();
|
há 3 anos atrás |
David Garske
|
2e4e65f518
Asynchronous support for TLS v1.3 TLSX ECC/DH key generation and key agreement
|
há 3 anos atrás |
Tesfa Mael
|
0c16ef4b29
Check for TLS downgrade
|
há 3 anos atrás |
Juliusz Sosinowicz
|
70a3857ae8
Fragmentation for ServerKeyExchange and CeriticateVerify
|
há 3 anos atrás |
Jacob Barthelmeh
|
c729318ddd
update copyright date
|
há 3 anos atrás |
Juliusz Sosinowicz
|
d4302cc71b
Correctly reset the Tx sequence number
|
há 3 anos atrás |
Jacob Barthelmeh
|
97bc5e870c
fix for default OCSP cmp value and fix for WOLFSSL_NO_CLIENT_AUTH build
|
há 4 anos atrás |
toddouska
|
367f28b917
Merge pull request #3443 from SparkiDev/tls13_psk_no_dhe
|
há 4 anos atrás |
Sean Parkinson
|
d8b58286d1
TLS 1.3: PSK only
|
há 4 anos atrás |
Daniel Pouzzner
|
7850d71ccb
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
|
há 4 anos atrás |
David Garske
|
10f459f891
Added TLS v1.2 and v1.3 test cases for ECC Koblitz and Brainpool curves (both server auth and mutual auth). Cipher suites: `ECDHE-ECDSA-AES128-GCM-SHA256`, `ECDH-ECDSA-AES128-GCM-SHA256` and `TLS13-AES128-GCM-SHA256`.
|
há 4 anos atrás |
Daniel Pouzzner
|
eb7a79aa5e
misc fixes for coverage and buildability: add MD2 to --enable-all*; fix spelling of "Sno" to "no" for $ENABLED_BLAKE2S default; when ENABLED_QSH add -DWOLFSSL_STATIC_DH -DWOLFSSL_STATIC_PSK (relates to ZD11073); add missing gating for !defined(WOLFSSL_DEVCRYPTO) in api.c:test_wc_Sha256FinalRaw(); fix tests/api.c:IsValidCipherSuite() to build under gcc10 (relates to ZD11073).
|
há 4 anos atrás |
Sean Parkinson
|
d63ff07edc
TLS 1.3: Fix P-521 algorithm matching
|
há 4 anos atrás |
Sean Parkinson
|
89b9a77eca
Get builds with WOLFSSL_NO_CLIENT_AUTH compiling and testing
|
há 4 anos atrás |
John Safranek
|
98ae3a2352
Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.
|
há 4 anos atrás |
toddouska
|
925e9d9213
Merge pull request #3075 from julek-wolfssl/dtls-no-cookie
|
há 4 anos atrás |
David Garske
|
667d9ca896
Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.
|
há 4 anos atrás |
David Garske
|
9be61c61f5
Add alternate chain test case where peer presents chain (INT -> INT2 -> PEER) and only INT2 is loaded as trusted. Update existing alternate chain partial test cases to use INT2. Fix for test suite to allow extra newlines in .test files.
|
há 4 anos atrás |
Juliusz Sosinowicz
|
03c5359fcd
Add session resumption testing for DTLS
|
há 4 anos atrás |