Fix private key file permissions and several CLI correctness bugs - #298

Open

julek-wolfssl wants to merge 21 commits into

wolfSSL:mainfrom

julek-wolfssl:fenrir-wolfclu-fixes

Commits on Sep 25, 2026

Create genkey private key files with owner-only permissions
julek-wolfssl
committed
7bb76c4
Create pkcs8 output files with owner-only permissions
julek-wolfssl
committed
4fbddc9
Create rsa private key output with owner-only permissions
julek-wolfssl
committed
6f169f1
Create dsaparam -genkey output with owner-only permissions
julek-wolfssl
committed
cb79142
Create pkcs12 -out files with owner-only permissions
julek-wolfssl
committed
22e3f0f
Create req -keyout private key with owner-only permissions
julek-wolfssl
committed
73543d4
Fail s_server on compiled-out protocol versions
julek-wolfssl
committed
6606924
Bound s_server throughput remainder before narrowing to int
julek-wolfssl
committed
86cec9c
Reject abbreviated or unsupported cipher modes in parseAlgo
julek-wolfssl
committed
576e8fe
Fail cleanly on EOF at the interactive password prompt
julek-wolfssl
committed
d01da47
Mark padding in legacy encrypt header for explicit key/IV
julek-wolfssl
committed
8f799e7
x509: only force version 3 when signing a CSR
julek-wolfssl
committed
83767e7
x509: fail -fingerprint when SHA-1 or hashing is unavailable
julek-wolfssl
committed
3d11ff7
Reset -subj entry encoding after countryName
julek-wolfssl
committed
cf023bf
Parse basicConstraints as comma separated NAME:VALUE pairs
julek-wolfssl
committed
cc95ce3
Write PKCS#8 DER for pkcs8 -topk8 -outform DER
julek-wolfssl
committed
d1df4a0
Create pkey private key output with owner-only permissions
julek-wolfssl
committed
324e0c2
Create dhparam -genkey output with owner-only permissions
julek-wolfssl
committed
815bd89
Create ecparam -genkey output with owner-only permissions
julek-wolfssl
committed
e013169
Verify req -x509 output as a certificate, not a CSR
julek-wolfssl
committed
425bba5
Serialize XMSS signing with a lock on the private state file
julek-wolfssl
committed
eda40ac

Navigation Menu

Fix private key file permissions and several CLI correctness bugs - #298

Fix private key file permissions and several CLI correctness bugs#298
julek-wolfssl wants to merge 21 commits into
wolfSSL:mainfrom
julek-wolfssl:fenrir-wolfclu-fixes

Commits on Sep 25, 2026

Create genkey private key files with owner-only permissions

Create pkcs8 output files with owner-only permissions

Create rsa private key output with owner-only permissions

Create dsaparam -genkey output with owner-only permissions

Create pkcs12 -out files with owner-only permissions

Create req -keyout private key with owner-only permissions

Fail s_server on compiled-out protocol versions

Bound s_server throughput remainder before narrowing to int

Reject abbreviated or unsupported cipher modes in parseAlgo

Fail cleanly on EOF at the interactive password prompt

Mark padding in legacy encrypt header for explicit key/IV

x509: only force version 3 when signing a CSR

x509: fail -fingerprint when SHA-1 or hashing is unavailable

Reset -subj entry encoding after countryName

Parse basicConstraints as comma separated NAME:VALUE pairs

Write PKCS#8 DER for pkcs8 -topk8 -outform DER

Create pkey private key output with owner-only permissions

Create dhparam -genkey output with owner-only permissions

Create ecparam -genkey output with owner-only permissions

Verify req -x509 output as a certificate, not a CSR

Serialize XMSS signing with a lock on the private state file