All pull requests

Pull requests

• Avoid resuming a TLS 1.3 session after downgrading below TLS 1.3. Reject SRP g = 0, 1, N-1; and even N values.

  #11855·kareem-wolfssl opened Oct 21, 2026Contributor·1 of 4 tasks·

  ·
  4

  

• BIO_new_accept/BIO_do_accept: validate port and bind the given address

  #11854·aidankeefe2022 opened Oct 21, 2026Member·

  ·
  7

  

• Fix AVX512 Visual Studio assembly build.

  #11853·kareem-wolfssl opened Oct 21, 2026Contributor·4 tasks·

  ·
  7

  

• Anchor FP ECC cache entries to a and modulus. Avoid writing partial blocks in AES-NI assembly. Ensure that the top bit is masked/rejected throughout curve25519 functions. Enable WOLFSSL_AES_CBC_LENGTH_CHECKS by default.

  #11852·kareem-wolfssl opened Oct 21, 2026Contributor·1 of 4 tasks·

  ·
  10

  

• Build sp_mul_d for SAKKE and ECC CDH in RSA verify-only builds

  #11851·stenslae opened Oct 21, 2026Member·4 tasks·

  ·
  3

  

• Pure RBGC tree (rng-tree) and scalar-C SHA512 pinning

  #11850·kaleb-himes opened Oct 21, 2026Contributor·4 tasks·

  ·
  72

  

• Handle even moduli in sp_exptmod_nct for RSA public-only builds

  #11849·stenslae opened Oct 21, 2026Member·1 of 4 tasks·

  ·
  4

  

• Build sp_mont_red_ex for ECCSI/SAKKE in RSA verify-only builds

  #11848·stenslae opened Oct 21, 2026Member·4 tasks·

  ·
  3

  

• Tests: Pin validity dates in test_dual_alg_ecdsa_mldsa

  #11847·stenslae opened Oct 21, 2026Member·4 tasks·

  ·
  4

  

• fix(crl): chain the static revoked list for list walkers

  #11846·MarkAtwood opened Oct 21, 2026Contributor·

  ·
  1

  5

  

• Fenrir Fixes: bio.c

  #11843·aidankeefe2022 opened Oct 21, 2026Member·

  ·
  12

  

• Report PQC verify as invalid whenever it returns an error

  #11842·stenslae opened Oct 21, 2026Member·4 tasks·

  ·
  3

  

• ci(socat): expect-fail 4 flaky non-TLS tests

  #11841·MarkAtwood opened Oct 21, 2026Contributor·

  ·
  3

• SLH-DSA: return BAD_FUNC_ARG for WC_HASH_TYPE_NONE from SignHashWithRandom and SignHashDeterministic

  #11840·Arpan0995 opened Oct 21, 2026Contributor·2 of 4 tasks·

  ·
  3

• CI and build fixes: expand source text checks and dynamic build params filter

  #11839·stenslae opened Oct 21, 2026Member·4 tasks·

  ·
  2

  

• Reject x86 assembly options on non-x86 hosts in configure

  #11837·Frauschi opened Oct 21, 2026Member·

  ·
  2

  

• Report failures from test_wolfSSL_dtls13_null_cipher

  #11836·Frauschi opened Oct 21, 2026Member·

  ·
  3

• wolfSSL_clear: drop the previous peer certificate public key

  #11835·sameehj opened Oct 21, 2026Contributor·

  ·
  9

• X509_verify_cert: unload temp CAs before loading each candidate issuer

  #11834·sameehj opened Oct 21, 2026Contributor·

  ·
  4

• 20261020-drbgStateMutex-refactor-out

  For FIPS v7 Module
  #11832·douzzer opened Oct 21, 2026Contributor·

  ·
  25

  

• Add V523_NONFIPS_SHAKE dev opt-in for FIPS v5 SHAKE128/256

  #11831·rlm2002 opened Oct 20, 2026Contributor·

  ·
  8

  

• Do not cache unsigned chain CAs after a verification override

  #11830·miyazakh opened Oct 20, 2026Contributor·4 tasks·

  ·
  9

  

• fix for edge case sanity checks when converting internal PKCS12 struct to a DER

  #11828·JacobBarthelmeh opened Oct 20, 2026Contributor·

  ·
  3

  

• Fix WANT_WRITE propagation from SendTls13KeyUpdate. Enable HAVE_SERVER_RENEGOTIATION_INFO for CMake builds by default.

  #11826·kareem-wolfssl opened Oct 20, 2026Contributor·1 of 4 tasks·

  ·
  1

  7

  

• Fix X509 leaks from mismatched free guards

  #11825·ColtonWilley opened Oct 20, 2026Contributor·

  ·
  1

  3