| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
fix:Send alarm when the client does not support the ALPN extension returned by the server Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/580 | 9 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
Fix some external interfaces to allow setting null callbacks. Co-authored-by: balabala-123<guozhang4@huawei.com> # message auto-generated for no-merge-commit merge: !796 merge temp1 into main Fix some external interfaces to allow setting null callbacks. Created-by: balabala-123 Commit-by: balabala-123 Merged-by: liwei3013 Description: Fix some external interfaces to allow setting null callbacks. See merge request: openHiTLS/openhitls!796 | 6 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
feat:memory minimization for handshake buffer Co-authored-by: longparty<taoye35@huawei.com> # message auto-generated for no-merge-commit merge: merge main into main feat:memory minimization for handshake buffer Created-by: longparty Commit-by: longparty Merged-by: liwei3013 Description: feat:memory minimization for handshake buffer See merge request: openHiTLS/openhitls!447 | 9 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
feat: support Certificate Authorities extension Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/397 | 10 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
feat: add mtu related functions Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/338 | 11 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
feat: add mtu related functions Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/338 | 11 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
feat:minimization for protocol Co-authored-by: longparty<taoye35@huawei.com> # message auto-generated for no-merge-commit merge: !990 merge main into main feat:minimization for protocol Created-by: longparty Commit-by: longparty Merged-by: liwei3013 Description: <!-- 感谢您提交 Pull Request!以下是一些提示: 1) 如果您是第一次提交,请阅读我们的贡献者指南:https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **此 PR 的作用 / 为什么需要它**:小型化加宏 **自检清单**: - [ ] **测试**:代码是否已有UT/ST测试用例覆盖,新增测试用例是否随本PR一并上库 - [ ] **接口**:是否涉及对外接口变更,变更已通过接口评审 - [ ] **文档**:是否涉及文档修改 <!-- **给审查者的特别说明**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!990 | 5 个月前 | |
Fix:Correct the TLS error stack pushing Co-authored-by: huangwenb0<huangwenbo18@h-partners.com> # message auto-generated for no-merge-commit merge: !1001 merge main into main Fix:Correct the TLS error stack pushing Created-by: huangwenb0 Commit-by: huangwenb0 Merged-by: liwei3013 Description: <!-- 感谢您提交 Pull Request!以下是一些提示: 1) 如果您是第一次提交,请阅读我们的贡献者指南:https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **此 PR 的作用 / 为什么需要它**: **自检清单**: - [x] **测试**:代码是否已有UT/ST测试用例覆盖,新增测试用例是否随本PR一并上库 - [ ] **接口**:是否涉及对外接口变更,变更已通过接口评审 - [ ] **文档**:是否涉及文档修改 <!-- **给审查者的特别说明**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!1001 | 5 个月前 | |
feat: Add cross-platform support for Darwin/macOS **Core Platform Support:** - Add Darwin/macOS platform detection and conditional compilation - Implement platform-specific library extensions (.dylib for macOS, .so for Linux) - Enhanced dynamic library loading with cross-platform error handling - Platform-optimized time functions (clock_gettime_nsec_np for macOS) - Add App module support for Darwin/macOS **Threading & Synchronization:** - BSL: Migrate from simple integer flags to proper pthread_once_t implementation - Add BSL_SAL_OnceControl type with platform-specific implementations - Implement thread-safe one-time initialization across platforms - Fix memory initialization patterns for thread-once controls **Build System Improvements:** - Remove GNU ld-specific flags for test-framework use c function pointer replace or stub_utils.h to hook target function - Boundcheck components will linked as static library for tests, reduce tests dynamic library deps - Update CMake configurations for Darwin support **Test Framework Enhancements:** - Replace jmp_buf with sigjmp_buf for better signal handling - Update time handling to avoid platform-specific gmtime issues - Improve entropy test stability across platforms - Add proper RAND initialization/deinitialization **Entropy & Cryptographic Updates:** - Temporarily disable CPU jitter entropy on macOS (pending validation) - Add cross-platform entropy source management - Update DRBG configuration for improved compatibility - Enhance hardware entropy detection and handling **Network & I/O:** - Extend POSIX network functions to support both Linux and Darwin - Add file accessibility checks before dynamic loading - Improve error handling for symbol resolution across platforms - Update socket and I/O operations for cross-platform compatibility Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/677 | 7 个月前 | |
fix:protocal handshake probelms fix - Add header file includes in hs_cookie.c - Add snidealcb invocation validation. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1505 | 1 个月前 | |
fix:protocal handshake probelms fix - Add header file includes in hs_cookie.c - Add snidealcb invocation validation. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1505 | 1 个月前 | |
Standardize the goto and return statement. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/109 | 1 年前 | |
openhitls repo init | 1 年前 | |
fix: resolve audit findings for group security and parser checks - align curve security checks with OpenSSL semantics - switch TLS 1.2 ServerKeyExchange named group validation to CURVE_CHECK - extend peer EC sign scheme verification for ServerKeyExchange and CertificateVerify - add CURVE_CHECK for ECDSA certificate curve validation - tighten TLS 1.3 server key_share candidate filtering - add frame-based regression coverage for curve security checks Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1379 | 1 个月前 | |
fix:Fixing uncleaned sensitive information && memory leaks - The plaintext message is not cleared when the encryption of the app or handshake message fails in the RecConnCbcEncryptThenMac function. - In the SESSMGR_Find function, when retrieving sess from the sess hash table, the retrieved sess is not subject to reference counting. This may lead to other threads freeing this sess, posing a risk of dangling pointers when using this sess subsequently. Signed-off-by: balabala-123 <guozhang4@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1384 | 1 个月前 | |
fix:Fix the issue where the chain is not cleared when only one certificate is loaded in HITLS_CFG_UseCertificateChainBuffer Signed-off-by: balabala-123 <guozhang4@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1535 | 1 个月前 | |
fix:fix the auto retry mode problem and alert flush problem Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/459 | 10 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
fix:Code optimization and refactoring Co-authored-by: hanzhiyang<hanzhiyang4@h-partners.com> # message auto-generated for no-merge-commit merge: !961 merge main into main fix:Code optimization and refactoring Created-by: hanzhiyang Commit-by: hanzhiyang Merged-by: liwei3013 Description: <!-- Thanks for sending a pull request! Here are some tips for you: 1) If this is your first time, please read our contributor guidelines: https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **What does this PR do / why do we need it**: **Self-checklist**:(**请自检,在[ ]内打上x**) + - [ ] **测试**:PR中的代码是否已有UT/ST测试用例进行充分的覆盖,新增测试用例是否随本PR一并上库或已经上库 + - [ ] **接口**:是否涉及对外接口变更,相应变更已得到接口评审组织的通过,API对应的注释信息已经刷新正确 + - [ ] **文档**:是否涉及官网文档修改,如果涉及请及时提交资料到Doc仓 <!-- **Special notes for your reviewers**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!961 | 5 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
fix:Support TLS_FALLBACK_SCSV feature. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/319 | 1 年前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
fix:Code optimization and refactoring Co-authored-by: hanzhiyang<hanzhiyang4@h-partners.com> # message auto-generated for no-merge-commit merge: !961 merge main into main fix:Code optimization and refactoring Created-by: hanzhiyang Commit-by: hanzhiyang Merged-by: liwei3013 Description: <!-- Thanks for sending a pull request! Here are some tips for you: 1) If this is your first time, please read our contributor guidelines: https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **What does this PR do / why do we need it**: **Self-checklist**:(**请自检,在[ ]内打上x**) + - [ ] **测试**:PR中的代码是否已有UT/ST测试用例进行充分的覆盖,新增测试用例是否随本PR一并上库或已经上库 + - [ ] **接口**:是否涉及对外接口变更,相应变更已得到接口评审组织的通过,API对应的注释信息已经刷新正确 + - [ ] **文档**:是否涉及官网文档修改,如果涉及请及时提交资料到Doc仓 <!-- **Special notes for your reviewers**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!961 | 5 个月前 | |
fix:protocal handshake probelms fix - Update the mgrCtx checks to allow it to be NULL. - Fix the encryptThenMac handling during session resumption. - Fix the wraparound issue when receiving client extensions. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1403 | 1 个月前 | |
feat: support client hello callback and cert callback Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/326 | 11 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
feat: multi-keyshare # message auto-generated for no-merge-commit merge: merge main into main feat: multi-keyshare Created-by: baoyi84930 Commit-by: baoyi84930 Merged-by: fly2x Description: feat: multi-keyshare Fixes [#36](https://gitcode.com/openHiTLS/openhitls/issues/36) ## 特性描述 客户端在发送首个client hello时支持打包多个key-share(两个), - 作为客户端,在打包client hello时,会按照客户端偏好,发送supported_group列表。并根据group所对应的算法**属于kex还是kem**,各选择一个(如果有)生成key-share发送给服务端。 See merge request: openHiTLS/openhitls!226 | 1 年前 | |
feat: Add PQC certificate support to the protocol layer Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1574 | 18 天前 | |
feat: Add PQC certificate support to the protocol layer Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1574 | 18 天前 | |
fix: harden entropy/rand handling and CMS streaming verification Add timestamp entropy startup auto-tests and related SDV coverage, preserve seed DRBG lock and rand fallback across provider/libctx teardown, and fix detached CMS streaming verification without signedAttrs while aligning key checks and build dependencies. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1428 | 1 个月前 | |
feat: Add cross-platform support for Darwin/macOS **Core Platform Support:** - Add Darwin/macOS platform detection and conditional compilation - Implement platform-specific library extensions (.dylib for macOS, .so for Linux) - Enhanced dynamic library loading with cross-platform error handling - Platform-optimized time functions (clock_gettime_nsec_np for macOS) - Add App module support for Darwin/macOS **Threading & Synchronization:** - BSL: Migrate from simple integer flags to proper pthread_once_t implementation - Add BSL_SAL_OnceControl type with platform-specific implementations - Implement thread-safe one-time initialization across platforms - Fix memory initialization patterns for thread-once controls **Build System Improvements:** - Remove GNU ld-specific flags for test-framework use c function pointer replace or stub_utils.h to hook target function - Boundcheck components will linked as static library for tests, reduce tests dynamic library deps - Update CMake configurations for Darwin support **Test Framework Enhancements:** - Replace jmp_buf with sigjmp_buf for better signal handling - Update time handling to avoid platform-specific gmtime issues - Improve entropy test stability across platforms - Add proper RAND initialization/deinitialization **Entropy & Cryptographic Updates:** - Temporarily disable CPU jitter entropy on macOS (pending validation) - Add cross-platform entropy source management - Update DRBG configuration for improved compatibility - Enhance hardware entropy detection and handling **Network & I/O:** - Extend POSIX network functions to support both Linux and Darwin - Add file accessibility checks before dynamic loading - Improve error handling for symbol resolution across platforms - Update socket and I/O operations for cross-platform compatibility Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/677 | 7 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
Branch merge # message auto-generated for no-merge-commit merge: merge baoyi_main into main Branch merge Created-by: baoyi84930 Author-id: 1168581 MR-id: 4353327 Commit-by: baoyi84930 Merged-by: liwei3013 E2E-issues: Description: 分支合并 See merge request: openHiTLS/openhitls!38 | 1 年前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
fix:Code optimization and refactoring Co-authored-by: hanzhiyang<hanzhiyang4@h-partners.com> # message auto-generated for no-merge-commit merge: !961 merge main into main fix:Code optimization and refactoring Created-by: hanzhiyang Commit-by: hanzhiyang Merged-by: liwei3013 Description: <!-- Thanks for sending a pull request! Here are some tips for you: 1) If this is your first time, please read our contributor guidelines: https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **What does this PR do / why do we need it**: **Self-checklist**:(**请自检,在[ ]内打上x**) + - [ ] **测试**:PR中的代码是否已有UT/ST测试用例进行充分的覆盖,新增测试用例是否随本PR一并上库或已经上库 + - [ ] **接口**:是否涉及对外接口变更,相应变更已得到接口评审组织的通过,API对应的注释信息已经刷新正确 + - [ ] **文档**:是否涉及官网文档修改,如果涉及请及时提交资料到Doc仓 <!-- **Special notes for your reviewers**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!961 | 5 个月前 | |
Remove libboundscheck (securec) dependency and harden sensitive data cleansing Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1086 | 2 个月前 | |
fix:Code optimization and refactoring Co-authored-by: hanzhiyang<hanzhiyang4@h-partners.com> # message auto-generated for no-merge-commit merge: !961 merge main into main fix:Code optimization and refactoring Created-by: hanzhiyang Commit-by: hanzhiyang Merged-by: liwei3013 Description: <!-- Thanks for sending a pull request! Here are some tips for you: 1) If this is your first time, please read our contributor guidelines: https://gitcode.com/openHiTLS/openhitls/wiki/FAQ-社区需求贡献流程.md --> **What does this PR do / why do we need it**: **Self-checklist**:(**请自检,在[ ]内打上x**) + - [ ] **测试**:PR中的代码是否已有UT/ST测试用例进行充分的覆盖,新增测试用例是否随本PR一并上库或已经上库 + - [ ] **接口**:是否涉及对外接口变更,相应变更已得到接口评审组织的通过,API对应的注释信息已经刷新正确 + - [ ] **文档**:是否涉及官网文档修改,如果涉及请及时提交资料到Doc仓 <!-- **Special notes for your reviewers**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!961 | 5 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 2 个月前 | ||
| 9 个月前 | ||
| 2 个月前 | ||
| 6 个月前 | ||
| 2 个月前 | ||
| 9 个月前 | ||
| 2 个月前 | ||
| 10 个月前 | ||
| 2 个月前 | ||
| 11 个月前 | ||
| 2 个月前 | ||
| 11 个月前 | ||
| 2 个月前 | ||
| 5 个月前 | ||
| 5 个月前 | ||
| 7 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 10 个月前 | ||
| 2 个月前 | ||
| 5 个月前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 2 个月前 | ||
| 5 个月前 | ||
| 1 个月前 | ||
| 11 个月前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 18 天前 | ||
| 18 天前 | ||
| 1 个月前 | ||
| 7 个月前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 2 个月前 | ||
| 5 个月前 | ||
| 2 个月前 | ||
| 5 个月前 |