26  * Source file for all wolfSSL specific code for the TLS/SSL layer. No code
36 #include <wolfssl/options.h>
37 #include <wolfssl/version.h>
39 #if LIBWOLFSSL_VERSION_HEX < 0x03004006 /* wolfSSL 3.4.6 (2015) */
40 #error "wolfSSL version should be at least 3.4.6"
44    - the user's options.h generated by wolfSSL
49 /* HAVE_ALPN is wolfSSL's build time symbol for enabling ALPN in options.h. */
73 #include <wolfssl/ssl.h>
74 #include <wolfssl/error-ssl.h>
75 #include "wolfssl.h"
87    in wolfSSL's settings.h, and the latter two are build time symbols in
103 /* wolfSSL 5.7.4 and older do not have these symbols, but only the
122  * wolfSSL 4.4.0, but requires the -DHAVE_SECRET_CALLBACK build option. If that
178 wolfssl_log_tls12_secret(WOLFSSL *ssl)  in wolfssl_log_tls12_secret()
321     /* bug in wolfSSL: <https://github.com/wolfSSL/wolfssl/issues/7784>  in wolfssl_bio_cf_out_write()
379                                                "wolfSSL CF BIO");  in wolfssl_bio_cf_init_methods()
449 static int wssl_vtls_new_session_cb(WOLFSSL *ssl, WOLFSSL_SESSION *session)  in wssl_vtls_new_session_cb()
480     /* wolfSSL changes the passed pointer for whatever reasons, yikes */  in Curl_wssl_setup_session()
725      or no source is provided and we are falling back to wolfSSL's built-in  in Curl_wssl_setup_x509_store()
743     /* wolfSSL's initial store in CTX is not shareable by default.  in Curl_wssl_setup_x509_store()
865     failf(data, "wolfSSL: could not create a client method");  in wolfssl_connect_step1()
874     failf(data, "wolfSSL: could not create a context");  in wolfssl_connect_step1()
896     failf(data, "wolfSSL: unsupported minimum TLS version value");  in wolfssl_connect_step1()
900     failf(data, "wolfSSL: failed set the minimum TLS version");  in wolfssl_connect_step1()
924     failf(data, "wolfSSL: unsupported maximum TLS version value");  in wolfssl_connect_step1()
928     failf(data, "wolfSSL: failed set the maximum TLS version");  in wolfssl_connect_step1()
1129     failf(data, "SSL: Certificates cannot be loaded because wolfSSL was built"  in wolfssl_connect_step1()
1203       infof(data, "ECH: outername not (yet) supported with wolfSSL");  in wolfssl_connect_step1()
1207       infof(data, "ECH: GREASE'd ECH not yet supported for wolfSSL");  in wolfssl_connect_step1()
1367      * Note that OpenSSL SSL_want_read() is always true here. If wolfSSL ever  in wolfssl_connect_step2()
1799   return msnprintf(buffer, size, "wolfSSL/%s", wolfSSL_lib_version());  in Curl_wssl_version()
1801   return msnprintf(buffer, size, "wolfSSL/%s", WOLFSSL_VERSION);  in Curl_wssl_version()
1928      * wolfSSL already does that as part of the handshake. */  in wolfssl_connect_common()
2010   { CURLSSLBACKEND_WOLFSSL, "wolfssl" }, /* info */