[pkgsrc/trunk]: pkgsrc/security/wolfssl security/wolfssl: Update to v5.5.0

[fox <fox%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/913851cfa018
branches:  trunk
changeset: 384702:913851cfa018
user:      fox <fox%pkgsrc.org@localhost>
date:      Sun Sep 04 08:41:57 2022 +0000

description:
security/wolfssl: Update to v5.5.0

Changes since v5.4.0:

wolfSSL Release 5.5.0 (Aug 30, 2022)

Note:
** If not free’ing FP_ECC caches per thread by calling wc_ecc_fp_free there is a
   possible memory leak during TLS 1.3 handshakes which use ECC. Users are urged
   to confirm they are free’ing FP_ECC caches per thread if enabled to avoid
   this issue.

Release 5.5.0 of wolfSSL embedded TLS has bug fixes and new features including:

Vulnerabilities
* [Low] Fault injection attack on RAM via Rowhammer leads to ECDSA key
  disclosure. Users doing operations with private ECC keys such as server side
  TLS connections and creating ECC signatures, who also have hardware that could
  be targeted with a sophisticated Rowhammer attack should update the version of
  wolfSSL and compile using the macro WOLFSSL_CHECK_SIG_FAULTS. Thanks to Yarkin
  Doroz, Berk Sunar, Koksal Must, Caner Tol, and Kristi Rahman all affiliated
  with the Vernam Applied Cryptography and Cybersecurity Lab at Worcester
  Polytechnic Institute for the report.
* [Low] In wolfSSL version 5.3.0 if compiled with --enable-session-ticket and
  the client has non-empty session cache, with TLS 1.2 there is the possibility
  of a man in the middle passing a large session ticket to the client and
  causing a crash due to an invalid free. There is also the potential for a
  malicious TLS 1.3 server to crash a client in a similar manner except in TLS
  1.3 it is not susceptible to a man in the middle attack. Users on the client
  side with –enable-session-ticket compiled in and using wolfSSL version 5.3.0
  should update their version of wolfSSL. Thanks to Max at Trail of Bits for the
  report and "LORIA, INRIA, France" for research on tlspuffin.
* [Low] If using wolfSSL_clear to reset a WOLFSSL object (vs the normal
  wolfSSL_free/wolfSSL_new) it can result in runtime issues. This exists with
  builds using the wolfSSL compatibility layer (--enable-opnesslextra) and only
  when the application is making use of wolfSSL_clear instead of
  SSL_free/SSL_new. In the case of a TLS 1.3 resumption, after continuing to use
  the WOLFSSH object after having called wolfSSL_clear, an application could
  crash. It is suggested that users calling wolfSSL_clear update the version of
  wolfSSL used. Thanks to Max at Trail of Bits for the report and "LORIA, INRIA,
  France" for research on tlspuffin.
* Potential DoS attack on DTLS 1.2. In the case of receiving a malicious
  plaintext handshake message at epoch 0 the connection will enter an error
  state reporting a duplicate message. This affects both server and client
  side. Users that have DTLS enabled and in use should update their version of
  wolfSSL to mitigate the potential for a DoS attack.

New Feature Additions
* QUIC support added, for using wolfSSL with QUIC implementations like ngtcp2
* SE050 port additions and fixes
* Added support for Dilithium post quantum algorithm use with TLS
* Support for RSA-PSS signed certificates
* Support for Infineon AURIX IDE
* Add Zephyr support for nRF5340 with CryptoCell-312

Enhancements
* Expanded ABI support by 50 APIs to include wolfCrypt and Certificates making a
  total of 113 ABIs controlled and maintained
* DTLS 1.3 partial support for ConnectionID as described by RFC9146 and RFC9147
* Added support for X509_CRL_print function
* Remove deprecated algorithms in Renesas cs+ project
* Support more build options disable/enable with i.MX CAAM build
* wolfSSL_CTX_set_options and wolfSSL_CTX_get_options functions added to non
  compatibility layer builds
* TFM: change inline x86 asm code to compile with clang
* Improvements to error queue and fix for behavior of wolfSSL_ERR_get_error
* scripts/makedistsmall.sh script added for creating a small source/header only
  package
* TLS 1.3: restrict extension validity by message, Extensions ServerName,
  SupportedGroups and ALPN must not appear in server_hello
* Add liboqs integration to CMake build system
* Adds wolfSSL_PEM_read_RSAPrivateKey() to the OpenSSL compatible API
* Added support for P384 pre-share in bundled example server
* Replace clz assembly instruction in ARM 32 builds when not supported
* Integrate chacha20-poly1305 into the EVP interface
* Additional validation that extensions appear in correct messages
* Allow SAN to be critical with ASN template build
* Support wolfSSL_CTX_set1_curves_list being available when X25519 and/or X448
  only defined
* Adds wolfSSL_PEM_read_RSA_PUBKEY() to the OpenSSL compatible API
* Match OpenSSL self signed error return with compatibility layer build
* Added wolfSSL_dtls_create_peer and wolfSSL_dtls_free_peer to help with Python
  and Go wrappers for DTLS

Fixes
* DTLS 1.3 asynchronous use case fixes
* Fix handling of counter to support incrementing across all bytes in ARM crypto
  asm
* Fixes for ED25519/ED448 private key with public key export (RFC8410)
* Fix for build with NO_TLS macro
* Fix for write dup function to copy over TLS version
* Fix to handle path lengths of 0 when checking certificate CA path lengths
* Fix for CMake not installing sp_int.h for SP math all
* When WOLFSSL_VALIDATE_ECC_IMPORT is defined ECC import validates private key
  value is less than order
* PSA crypto fixes
* Fix for not having default pkcs7 signed attributes
* DTLS socket and timeout fixes
* SP int: exptmod ensure base is less than modulus
* Fix for AddPacketInfo with WOLFSSL_CALLBACKS to not pass encrypted TLS 1.3
  handshake messages to callbacks
* Fix for sniffer to ensure the session was polled before trying to reprocess it

diffstat:

 security/wolfssl/Makefile |  4 ++--
 security/wolfssl/PLIST    |  5 ++++-
 security/wolfssl/distinfo |  8 ++++----
 3 files changed, 10 insertions(+), 7 deletions(-)

diffs (58 lines):

diff -r c72ae5abce5c -r 913851cfa018 security/wolfssl/Makefile
--- a/security/wolfssl/Makefile Sun Sep 04 08:25:34 2022 +0000
+++ b/security/wolfssl/Makefile Sun Sep 04 08:41:57 2022 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.14 2022/08/08 08:03:46 fox Exp $
+# $NetBSD: Makefile,v 1.15 2022/09/04 08:41:57 fox Exp $
 
-DISTNAME=      wolfssl-5.4.0
+DISTNAME=      wolfssl-5.5.0
 CATEGORIES=    security
 MASTER_SITES=  https://www.wolfssl.com/
 EXTRACT_SUFX=  .zip
diff -r c72ae5abce5c -r 913851cfa018 security/wolfssl/PLIST
--- a/security/wolfssl/PLIST    Sun Sep 04 08:25:34 2022 +0000
+++ b/security/wolfssl/PLIST    Sun Sep 04 08:41:57 2022 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2022/08/08 08:03:46 fox Exp $
+@comment $NetBSD: PLIST,v 1.10 2022/09/04 08:41:57 fox Exp $
 bin/wolfssl-config
 include/cyassl/callbacks.h
 include/cyassl/certs_test.h
@@ -154,6 +154,7 @@
 include/wolfssl/openssl/x509_vfy.h
 include/wolfssl/openssl/x509v3.h
 include/wolfssl/options.h
+include/wolfssl/quic.h
 include/wolfssl/sniffer.h
 include/wolfssl/sniffer_error.h
 include/wolfssl/ssl.h
@@ -178,6 +179,7 @@
 include/wolfssl/wolfcrypt/curve448.h
 include/wolfssl/wolfcrypt/des3.h
 include/wolfssl/wolfcrypt/dh.h
+include/wolfssl/wolfcrypt/dilithium.h
 include/wolfssl/wolfcrypt/dsa.h
 include/wolfssl/wolfcrypt/ecc.h
 include/wolfssl/wolfcrypt/eccsi.h
@@ -231,6 +233,7 @@
 include/wolfssl/wolfio.h
 lib/libwolfssl.la
 lib/pkgconfig/wolfssl.pc
+share/doc/wolfssl/QUIC.md
 share/doc/wolfssl/README.txt
 share/doc/wolfssl/example/client.c
 share/doc/wolfssl/example/echoclient.c
diff -r c72ae5abce5c -r 913851cfa018 security/wolfssl/distinfo
--- a/security/wolfssl/distinfo Sun Sep 04 08:25:34 2022 +0000
+++ b/security/wolfssl/distinfo Sun Sep 04 08:41:57 2022 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.15 2022/08/08 08:03:46 fox Exp $
+$NetBSD: distinfo,v 1.16 2022/09/04 08:41:57 fox Exp $
 
-BLAKE2s (wolfssl-5.4.0.zip) = 13ecbfe0791ffa8557c8a83e42aff81f2d7b979ddfd42c7c33d995657ccd3941
-SHA512 (wolfssl-5.4.0.zip) = a05bc2437e327f849d782e6b468aa90a2bb03101379bfc884229b455bdef9114d9e6a2bb41f9e024bf0bde2565d28082828bbed60d7f942a3f508fc99bbe9cc0
-Size (wolfssl-5.4.0.zip) = 22275844 bytes
+BLAKE2s (wolfssl-5.5.0.zip) = 082c16346b4f774a1ceb0669acbcf700de9749991fd15f6bbaea8002e4e1c67a
+SHA512 (wolfssl-5.5.0.zip) = ec2b1c21b59f92c5c29cf5616227b31ec463f2ac4a2793e41d4ab271bc7540334dcae6a69cbaf706d05a371c33527ccbe7f07620aab09046ab8e2f48ad618d3e
+Size (wolfssl-5.5.0.zip) = 20168520 bytes