-
Notifications
You must be signed in to change notification settings - Fork 834
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
hostap update #7446
hostap update #7446
Conversation
julek-wolfssl
commented
Apr 18, 2024
- Implement PACs for EAP-FAST
- wolfSSL_set_session_ticket_ext_cb
- server side wolfSSL_set_session_secret_cb (tls <=1.2 only)
- Filter cipher list on TLS version change
- Remove unused internal API
- Advertise all supported sigalgs by default
- Expose *_set_groups for TLS < 1.3
de66aeb
to
a82f54b
Compare
Retest this please. |
87eee35
to
05d9c6c
Compare
/* use wolfSSL_API visibility to be able to test in tests/api.c */ | ||
WOLFSSL_API void InitSuitesHashSigAlgo_ex2(byte* hashSigAlgo, int have, | ||
WOLFSSL_API void InitSuitesHashSigAlgo(byte* hashSigAlgo, int have, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is marked as a public API. Should it be just to appease tests/api.c?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes that is exactly why that is. We need a better way to mark that.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like this cleanup and I agree the api.c should be the only one using this API. It could come up as a red flag at release time, but let's take it.
- Add test to make sure we fail on curve mismatch
Remove tests that fail with openssl
/* use wolfSSL_API visibility to be able to test in tests/api.c */ | ||
WOLFSSL_API void InitSuitesHashSigAlgo_ex2(byte* hashSigAlgo, int have, | ||
WOLFSSL_API void InitSuitesHashSigAlgo(byte* hashSigAlgo, int have, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like this cleanup and I agree the api.c should be the only one using this API. It could come up as a red flag at release time, but let's take it.
hostap update