Enable all-zero shared secret check for Curve448/25519 by default. Ensure post_handshake_auth extension was sent before accepting post-handshake CertificateRequest message.#10374

Open

kareem-wolfssl wants to merge 3 commits intowolfSSL:masterfrom

kareem-wolfssl:zd21699

Commits on Apr 30, 2026

Ensure post_handshake_auth extension was sent before accepting post-handshake CertificateRequest message as per RFC 8446 4.6.2.
kareem-wolfssl
committed
Enable all-zero shared secret check for curve448/25519 by default. Change macro to opt-out macro WOLFSSL_NO_ECDHX_SHARED_ZERO_CHECK. Add unit test.
kareem-wolfssl
committed

Commits on May 1, 2026

Avoid overwriting shared secret in non-blocking mode
kareem-wolfssl
committed