wolfSSL Release 3.15.5 (11/07/2018)

Release 3.15.5 of wolfSSL embedded TLS has bug fixes and new features including:

• Fixes for GCC-8 warnings with strings
• Additional compatibility API’s added, including functions like wolfSSL_X509_CA_num and wolfSSL_PEM_read_X509_CRL
• Fixes for OCSP use with NGINX port
• Renamed the macro INLINE to WC_INLINE for inline functions
• Doxygen updates and formatting for documentation generation
• Added support for the STM32L4 with AES/SHA hardware acceleration
• Adds checking for critical extension with certificate Auth ID and the macro WOLFSSL_ALLOW_CRIT_SKID to override the check
• Added public key callbacks to ConfirmSignature function to expand public key callback support
• Added ECC and Curve25519 key generation callback support
• Fix for memory management with wolfSSL_BN_hex2bn function
• Added support for dynamic allocation of PKCS7 structure using wc_PKCS7_New and wc_PKCS7_Free
• Port to apache mynewt added in the directory wolfssl-3.15.5/IDE/mynewt/*
• OCSP stapling in TLS 1.3 additions
• Port for ASIO added with --enable-asio configure flag
• Contiki port added with macro WOLFSSL_CONTIKI
• Memory free optimizations with adding in earlier free’s where possible
• Made modifications to the primality testing so that the Miller-Rabin tests check against up to 40 random numbers rather than a fixed list of small primes
• Certificate validation time generation updated
• Fixes for MQX classic 4.0 with IAR-EWARM
• Fix for assembly optimized version of Curve25519
• Make SOCKET_PEER_CLOSED_E consistent between read and write cases
• Relocate compatibility layer functions for OpenSSH port update
• Update to Intel® SGX port, files included by Windows version and macros defined when using WOLFSSL_SGX
• Updates to Nucleus version supported
• Stack size reduction with smallstack build
• Updates to Rowley-Crossworks settings for CMSIS 4
• Added reference STSAFE-A100 public key callbacks for TLS support
• Added reference ATECC508A/ATECC608A public key callbacks for TLS support
• Updated support for latest CryptoAuthLib (10/25/2018)
• Added a wolfSSL static library project for Atollic TrueSTUDIO
• Flag to disable AES-CBC and have only AEAD cipher suites with TLS
• AF_ALG and cryptodev-linux crypto support added
• Update to IO callbacks with use of WOLFSSL_BIO
• Additional support for parsing certificate subject OIDs (businessCategory, jurisdiction of incorporation country, and jurisdiction of incorporation state)
• Added wc_ecc_ecport_ex and wc_export_inti API's for ECC hex string exporting
• Updates to XCODE build with wolfSSL
• Fix for guard on when to include sys/time.h header
• Updates and enhancements to the GCC-ARM example
• Fix for PKCS8 padding with encryption
• Updates for wolfcrypt JNI wrapper
• ALT_ECC_SIZE use with SP math
• PIC32MZ hardware acceleration buffer alignment fixes
• Renesas e2studio project files added
• Renesas RX example project added
• Fix for DH algorithm when using SP math with ARM assembly
• Fixes and enhancements for NXP K82 support
• Benchmark enhancements to print in CSV format and in Japanese
• Support for PKCS#11 added with --enable-pkcs11
• Fixes for asynchronous crypto use with TLS 1.3
• TLS 1.3 only build, allows for disabling TLS 1.2 and earlier protocols
• Fix for GCC warnings in function wolfSSL_ASN1_TIME_adj
• Added --enable-asn=nocrypt for certificate only parsing support
• Added support for parsing PIV format certificates with the function wc_ParseCertPIV and macro WOLFSSL_CERT_PIV
• Added APIs to support GZIP
• Updates to support Lighttpd
• Version resource added for Windows DLL builds
• Increased code coverage with additional testing
• Added support for constructed OCTET_STRING with PKCS#7 signed data
• Added DTLS either (server/client) side initialization setting
• Minor fixes for building with MINGW32 compiler
• Added support for generic ECC PEM header/footer with PKCS8 parsing
• Added Japanese output to example server and client with “-1 1” flag
• Added USE_ECDSA_KEYSZ_HASH_ALGO macro for building to use digest sizes that match ephemeral key size
• Expand PKCS#7 CMS support with KEKRI, PWRI and ORI
• Streaming capability for PKCS#7 decoding and sign verify added

See INSTALL file for build instructions.
More info can be found on-line at http://wolfssl.com/wolfSSL/Docs.html