Use wolfSSL 5.4.0 for tests

The 5.4.0 update changed the default bignum implementation to what
could explicitly be enabled via `--enable-sp-math-all`.  Since this uses
fixed-sized buffers sufficient for key sizes of SP_INT_BITS, with a default
of 4096, modp6144 and modp8192 didn't work anymore (wc_DhGenerateKeyPair()
returned MP_EXPTMOD_E).  So we have to adapt the feature checks for this.

To support the larger DH groups we can either increase the buffer size
via `--with-max-rsa-bits` or add `--enable-heapmath` so buffers get
(re-)allocated as needed.  We go with the latter for now.
This commit is contained in:
Tobias Brunner
2022-07-18 12:42:24 +02:00
parent 110e8e6608
commit eae30af029
3 changed files with 29 additions and 12 deletions
+2 -1
View File
@@ -2,7 +2,7 @@
PKG = wolfssl
SRC = https://github.com/wolfSSL/$(PKG).git
REV = v5.3.0-stable
REV = v5.4.0-stable
NUM_CPUS := $(shell getconf _NPROCESSORS_ONLN)
@@ -27,6 +27,7 @@ CONFIG_OPTS = \
--enable-ecccustcurves \
--enable-ed25519 \
--enable-ed448 \
--enable-heapmath \
--enable-keygen \
--enable-md4 \
--enable-rsapss \