|
| 1 | +### wolfSSL JNI Release 1.14.0 (11/7/2024) |
| 2 | + |
| 3 | +Release 1.14.0 has bug fixes and new features including: |
| 4 | + |
| 5 | +**New JSSE Functionality:** |
| 6 | +* Add wolfJCE WKS KeyStore type support (PR 178) |
| 7 | +* Add support for native `poll()` and set as default over `select()` (PR 201) |
| 8 | +* Add `getSSLParameters()` to SSLServerSocket implementation (PR 214) |
| 9 | +* Add `rsa_pss` support and tests to wolfJSSE (PR 218) |
| 10 | +* Add LDAPS endpoint identification to X509ExtendedTrustManager (PR 227) |
| 11 | + |
| 12 | +**JSSE System/Security Property Support:** |
| 13 | +* Add option to print debug logs in JSON format (`wolfjsse.debugFormat=JSON`) (PR 187) |
| 14 | +* Add Security property to disable Java client session cache (`wolfjsse.clientSessionCache.disabled=true`) (PR 225) |
| 15 | + |
| 16 | +**JSSE Changes:** |
| 17 | +* Fix for native memory leak when calling `wolfSSL_get_peer_certificate()` (PR 188) |
| 18 | +* Optimization to allow for easier garbage collection (PR 189) |
| 19 | +* Fix for SSLEngine session storage and unwrap() FINISHED state (PR 193) |
| 20 | +* Fix to not close SSLSocket when SSLServerSocket is closed (PR 194) |
| 21 | +* Fix for getting end of stream when calling InputStream.read() (PR 195) |
| 22 | +* Fix for throwing exceptions on KeyManagerFactory/TrustManagerFactory use before init (PR 196) |
| 23 | +* Fix for SSLEngine HandshakeStatus when receiving TLS 1.3 session tickets after handshake (PR 197) |
| 24 | +* Throw SSLException to indicate lack of renegotiation support in `SSLEngine.beginHandshake()` (PR 197) |
| 25 | +* Fix to mark inbound and outbound closed in SSLEngine when fatal alerts are received (PR 197) |
| 26 | +* Return `X509Certificate[]` from `SSLSession.getPeerCertificates()` (PR 199) |
| 27 | +* Remove unneeded `SSLServerSocket.close()` method (PR 200) |
| 28 | +* Fix `SSLSession.getLocalPrincipal()` to assume user cert is first in chain (PR 204) |
| 29 | +* Ensure that socket is closed if implicit handshake in `SSLSocket.getSession()` fails (PR 205) |
| 30 | +* If SSLSocket handshake is unsuccessful, close Socket before throwing an exception (PR 205) |
| 31 | +* Close SSLEngine inbound on ALPN protocol name error (PR 208) |
| 32 | +* Adjust client-side session resumption to check cipher suite and protocol (PR 209) |
| 33 | +* Pass lower level exception messages up during X509TrustManager verification (PR 211) |
| 34 | +* Refactor code calls not available in Android API 24 (PR 216) |
| 35 | +* Fix to return end of stream in `InputStream.read()` on socket error (PR 217) |
| 36 | +* Fix to update the TLS protocol in SSLSession after handshake completes (PR 219) |
| 37 | +* Fix potential deadlock on close() between SSLSocket and Input/OutputStream (PR 220) |
| 38 | +* Fixes for issues found with SpotBugs (PR 221) |
| 39 | +* Clean up ant build warnings on Corretto 20.0.1 (PR 223) |
| 40 | +* Error out on invalid port during creation of SSLEngine (PR 224) |
| 41 | +* Correct SSLSocket exception types and fix setting of native file descriptor (PR 228) |
| 42 | +* Fix deadlock issues between `SSLSocket close()` and `OutputStream.write()` (PR 230) |
| 43 | + |
| 44 | +**New JNI Wrapped APIs and Functionality:** |
| 45 | +* `wolfSSL_SessionIsSetup()` (PR 191) |
| 46 | +* `wolfSSL_SESSION_dup()` (PR 206) |
| 47 | + |
| 48 | +**JNI Changes:** |
| 49 | +* Fix for JNI example use of TLS 1.3 secret callback strings (PR 192) |
| 50 | + |
| 51 | +**Example Changes:** |
| 52 | +* Add Host into HTTP GET in example ClientJSSE when used with `-g` (PR 213) |
| 53 | +* Add example JNI-only threaded client/server applications (PR 212) |
| 54 | +* Add basic RMI example client and server (PR 226) |
| 55 | + |
| 56 | +**Debugging Changes:** |
| 57 | +* Fix typo in SSLEngine debug logs (PR 203) |
| 58 | + |
| 59 | +**Testing Changes:** |
| 60 | +* Run Facebook Infer on all PRs with GitHub Actions (PR 190) |
| 61 | +* Run TLS 1.0 and 1.1 tests if enabled in native wolfSSL even if disabled in `java.security` (PR 198) |
| 62 | +* Add GitHub Actions PRB test for Android gradle build (PR 222) |
| 63 | + |
| 64 | +The wolfSSL JNI Manual is available at: |
| 65 | +https://www.wolfssl.com/documentation/manuals/wolfssljni. For build |
| 66 | +instructions and more detailed comments, please check the manual. |
| 67 | + |
1 | 68 | ### wolfSSL JNI Release 1.13.0 (4/9/2024) |
2 | 69 |
|
3 | 70 | Release 1.13.0 has bug fixes and new features including: |
|
0 commit comments