Fixes for things found with the NSS regression suite#110

Merged

douzzer merged 50 commits into

wolfSSL:masterfrom

LinuxJedi:nss-fixes

Aug 6, 2025

Commits on Aug 5, 2025

Add configdir and other fixes

julek-wolfssl
authored and
LinuxJedi
committed
Fix C_CopyObject

julek-wolfssl
authored and
LinuxJedi
committed
Fix regression test failures and NSS test failures
LinuxJedi
committed
Add `CKM_RSA_PKCS` to wrap and unwrap
LinuxJedi
committed
Fix CI failure
LinuxJedi
committed
More NSS fixes
LinuxJedi
committed
Add tests for `C_CopyObject` changes
LinuxJedi
committed
Add ECC support to `C_CopyObject`
LinuxJedi
committed
Add support for CKO_DATA
LinuxJedi
committed
Check that the whole file path fits

julek-wolfssl
authored and
LinuxJedi
committed
Move debugging functions
LinuxJedi
committed
More support for CKO_DATA
LinuxJedi
committed
Try to return invalid sig when applicable

julek-wolfssl
authored and
LinuxJedi
committed
Fix typos and wolfSSL 5.6.6 compatibility
LinuxJedi
committed
Address things in the review
LinuxJedi
committed
Fix styling and other nits

julek-wolfssl
authored and
LinuxJedi
committed
Return found objects in reverse order for NSS

julek-wolfssl
authored and
LinuxJedi
committed
Add Get/Set for MD5

julek-wolfssl
authored and
LinuxJedi
committed
Differentiate between CKO_DATA and other object classes in HKDF derivation

mattia-moffa
authored and
LinuxJedi
committed
Cache WP11_Slot_Has_Empty_Pin result

julek-wolfssl
authored and
LinuxJedi
committed
CKM_*_HMAC can use any opaque secret

julek-wolfssl
authored and
LinuxJedi
committed
CKM_*_HMAC: check digest size based on algorithm

mattia-moffa
authored and
LinuxJedi
committed
Avoid branch on uninit memory

julek-wolfssl
authored and
LinuxJedi
committed
Allow wrapping hkdf with ckm_aes_ecb

julek-wolfssl
authored and
LinuxJedi
committed
Fix uninit variable errors

julek-wolfssl
authored and
LinuxJedi
committed
Fix `test_rsa_gen_keys` for NSS builds
LinuxJedi
committed
Fix `NO_HMAC` compiling
LinuxJedi
committed
Get the correct key length when deriving CKM_ECDH1_DERIVE

julek-wolfssl
authored and
LinuxJedi
committed
Allow zero-length key in AES

mattia-moffa
authored and
LinuxJedi
committed
Support non-standard CKM_NSS_TLS_PRF_GENERAL_SHA256

mattia-moffa
authored and
LinuxJedi
committed
Check if object supports operation

julek-wolfssl
authored and
LinuxJedi
committed
Disable AES key length check in NSS

mattia-moffa
authored and
LinuxJedi
committed
Implement CKM_SHA1_RSA_PKCS and CKM_SHA1_RSA_PKCS_PSS

julek-wolfssl
authored and
LinuxJedi
committed
Fix WP11_Rsa_Verify_Recover

julek-wolfssl
authored and
LinuxJedi
committed
Increase dh key size

julek-wolfssl
authored and
LinuxJedi
committed
remove fall_through

julek-wolfssl
authored and
LinuxJedi
committed
Fix CheckOpSupported return type

mattia-moffa
authored and
LinuxJedi
committed
Fix most of pkcs11test

mattia-moffa
authored and
LinuxJedi
committed
Fix aes failures

julek-wolfssl
authored and
LinuxJedi
committed
Add verify to priv key

julek-wolfssl
authored and
LinuxJedi
committed
clang fixes

julek-wolfssl
authored and
LinuxJedi
committed
Fix msan errors

julek-wolfssl
authored and
LinuxJedi
committed
Fix CKO_DATA storage for TPM
LinuxJedi
committed
Simplify copying ecc keys

julek-wolfssl
authored and
LinuxJedi
committed
Fix object copy for TPM
LinuxJedi
committed
Fix PR for dynamically allocated keys
LinuxJedi
committed
Fix debug_test again

mattia-moffa
authored and
LinuxJedi
committed
Fix file store naming
LinuxJedi
committed
Fix issue with CopyObject on TPM
dgarske
committed
Fix some minor sanitizer issues with use of NULL.
dgarske
committed