Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hostap update #7446

Merged
merged 10 commits into from
May 13, 2024
Merged

hostap update #7446

merged 10 commits into from
May 13, 2024

Conversation

julek-wolfssl
Copy link
Member

  • Implement PACs for EAP-FAST
    • wolfSSL_set_session_ticket_ext_cb
    • server side wolfSSL_set_session_secret_cb (tls <=1.2 only)
  • Filter cipher list on TLS version change
  • Remove unused internal API
  • Advertise all supported sigalgs by default
  • Expose *_set_groups for TLS < 1.3

@julek-wolfssl julek-wolfssl self-assigned this Apr 18, 2024
@julek-wolfssl
Copy link
Member Author

julek-wolfssl commented Apr 25, 2024

Retest this please.

/* use wolfSSL_API visibility to be able to test in tests/api.c */
WOLFSSL_API void InitSuitesHashSigAlgo_ex2(byte* hashSigAlgo, int have,
WOLFSSL_API void InitSuitesHashSigAlgo(byte* hashSigAlgo, int have,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is marked as a public API. Should it be just to appease tests/api.c?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes that is exactly why that is. We need a better way to mark that.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like this cleanup and I agree the api.c should be the only one using this API. It could come up as a red flag at release time, but let's take it.

Implement PACs for EAP-FAST
- wolfSSL_set_session_ticket_ext_cb
- server side wolfSSL_set_session_secret_cb (tls <=1.2 only)
- Add test to make sure we fail on curve mismatch
Remove tests that fail with openssl
/* use wolfSSL_API visibility to be able to test in tests/api.c */
WOLFSSL_API void InitSuitesHashSigAlgo_ex2(byte* hashSigAlgo, int have,
WOLFSSL_API void InitSuitesHashSigAlgo(byte* hashSigAlgo, int have,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like this cleanup and I agree the api.c should be the only one using this API. It could come up as a red flag at release time, but let's take it.

@dgarske dgarske merged commit 29f7578 into wolfSSL:master May 13, 2024
102 checks passed
jefferyq2 pushed a commit to jefferyq2/wolfssl that referenced this pull request Jun 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Bug, openSSL compatibility]:
4 participants