Skip to content

ChangeLog.rst

Latest commit

 

History

History
70 lines (53 loc) · 2.52 KB

ChangeLog.rst

File metadata and controls

70 lines (53 loc) · 2.52 KB

wolfSSL-py Release 5.8.4 (Dec 29, 2025)

  • Fix an issue which allowed a client without a cert to connect despite setting verify_mode to CERT_REQUIRED (CVE-2025-15346):

A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client certificate requirements to not be fully enforced. Because the WOLFSSL_VERIFY_FAIL_IF_NO_PEER_CERT flag was not included, the behavior effectively matched CERT_OPTIONAL: a peer certificate was verified if presented, but connections were incorrectly authenticated when no client certificate was provided. This results in improper authentication, allowing attackers to bypass mutual TLS (mTLS) client authentication by omitting a client certificate during the TLS handshake. Thanks to Matan Radomski from Microsoft for the report. * Update wolfSSL to version 5.8.4

wolfSSL-py Release 5.8.2 (Jul 24, 2025)

  • Update wolfSSL to version 5.8.2

wolfSSL-py Release 5.7.4 (Nov 13, 2024)

  • Update wolfSSL to version 5.7.4

wolfSSL-py Release 5.7.2 (Sep 6, 2024)

  • SSLSocket: support version() version
  • support disabling secure renegotiation
  • Update wolfSSL to version 5.7.2

wolfSSL-py Release 5.6.6 (Jan 23, 2024)

  • Fix segfault issue with TLS v1.3
  • Update expired example certs
  • Update wolfSSL to version 5.6.6

wolfSSL-py Release 5.6.0 (May 2, 2022)

  • Update wolfSSL to version 5.6.0

wolfSSL-py Release 5.5.4 (December 30, 2022)

  • Update wolfSSL to version 5.5.4

wolfSSL-py Release 5.5.3 (November 7, 2022)

  • Fix TLSv1.3 support
  • Disable oldtls support
  • Add changelog
  • Adding support for CRL and DTLS
  • Fix alert history code
  • Update wolfSSL to version 5.5.3

wolfSSL-py Release 5.4.0 (July 13, 2022)

New Features

  • Update to wolfSSL 5.4.0 C library
  • Add GitHub Actions support and remove Travis CI support

wolfSSL-py Release 5.3.0 (May 13, 2022)

New Features

  • Update to wolfSSL 5.3.0
  • Build completely refactored to be more Python-like and easier to use
  • Add support for wolfSSL ctx password callback

Fixes

  • Raise error when wolfSSL_write() returns 0
  • Update example certs to match main wolfSSL ones