Add CRL generation capability

padelsbach · padelsbach · commit 3676f25d8db5 · 2026-01-21T12:32:48.000-08:00
diff --git a/.github/workflows/address-sanitizer.yml b/.github/workflows/address-sanitizer.yml
@@ -39,8 +39,10 @@ jobs:
       - name: Build native wolfSSL with AddressSanitizer
         uses: wolfSSL/actions-build-autotools-project@v1
         with:
-          repository: wolfSSL/wolfssl
-          ref: master
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          repository: padelsbach/wolfssl
+          ref: crl-generation
           path: wolfssl
           configure: ${{ inputs.wolfssl_configure }} CFLAGS="-fsanitize=address -fno-omit-frame-pointer" LDFLAGS="-fsanitize=address"
           check: false
diff --git a/.github/workflows/android_gradle.yml b/.github/workflows/android_gradle.yml
@@ -21,7 +21,10 @@ jobs:
       - name: Clone native wolfSSL
         uses: actions/checkout@v4
         with:
-          repository: 'wolfssl/wolfssl'
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          repository: 'padelsbach/wolfssl'
+          ref: crl-generation
           path: IDE/Android/app/src/main/cpp/wolfssl
 
       # Copy options.h.in to blank options.h
diff --git a/.github/workflows/infer.yml b/.github/workflows/infer.yml
@@ -75,8 +75,10 @@ jobs:
       - name: Build native wolfSSL
         uses: wolfSSL/actions-build-autotools-project@v1
         with:
-          repository: wolfSSL/wolfssl
-          ref: master
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          ref: crl-generation
+          repository: padelsbach/wolfssl
           path: wolfssl
           configure: ${{ inputs.wolfssl_configure }}
           check: false
diff --git a/.github/workflows/linux-common.yml b/.github/workflows/linux-common.yml
@@ -42,8 +42,10 @@ jobs:
       - name: Build native wolfSSL
         uses: wolfSSL/actions-build-autotools-project@v1
         with:
-          repository: wolfSSL/wolfssl
-          ref: master
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          repository: padelsbach/wolfssl
+          ref: crl-generation
           path: wolfssl
           configure: ${{ inputs.wolfssl_configure }}
           check: false
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
@@ -25,8 +25,10 @@ jobs:
       - name: Build native wolfSSL
         uses: wolfSSL/actions-build-autotools-project@v1
         with:
-          repository: wolfSSL/wolfssl
-          ref: master
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          repository: padelsbach/wolfssl
+          ref: crl-generation
           path: wolfssl
           configure: ${{ inputs.wolfssl_configure }}
           check: false
diff --git a/.github/workflows/scan-build.yml b/.github/workflows/scan-build.yml
@@ -40,8 +40,10 @@ jobs:
       - name: Build native wolfSSL
         uses: wolfSSL/actions-build-autotools-project@v1
         with:
-          repository: wolfSSL/wolfssl
-          ref: master
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          repository: padelsbach/wolfssl
+          ref: crl-generation
           path: wolfssl
           configure: '--enable-jni --enable-all'
           check: false
diff --git a/.github/workflows/stable-wolfssl-releases.yml b/.github/workflows/stable-wolfssl-releases.yml
@@ -31,7 +31,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        wolfssl_version: ${{ fromJson(needs.get-stable-releases.outputs.versions) }}
+        wolfssl_version: crl-generation
         jdk_version: [ '21' ]
         wolfssl_configure: [ '--enable-jni', '--enable-jni --enable-all' ]
     name: wolfSSL ${{ matrix.wolfssl_version }} (JDK ${{ matrix.jdk_version }}, ${{ matrix.wolfssl_configure }})
@@ -56,7 +56,9 @@ jobs:
       - name: Build native wolfSSL ${{ matrix.wolfssl_version }}
         uses: wolfSSL/actions-build-autotools-project@v1
         with:
-          repository: wolfSSL/wolfssl
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          repository: padelsbach/wolfssl
           ref: ${{ matrix.wolfssl_version }}
           path: wolfssl
           configure: ${{ matrix.wolfssl_configure }}
diff --git a/.github/workflows/windows-vs.yml b/.github/workflows/windows-vs.yml
@@ -39,8 +39,10 @@ jobs:
       - name: Checkout wolfSSL
         uses: actions/checkout@v4
         with:
-          repository: wolfSSL/wolfssl
-          ref: master
+          # Point to PR branch until merge
+          # TODO: Switch back to wolfssl/wolfssl after merge
+          repository: padelsbach/wolfssl
+          ref: crl-generation
           path: wolfssl
 
       - name: Verify file structure
diff --git a/IDE/Android/app/src/main/cpp/CMakeLists.txt b/IDE/Android/app/src/main/cpp/CMakeLists.txt
@@ -343,6 +343,7 @@ add_library(wolfssljni SHARED
         ${wolfssljni_DIR}/native/com_wolfssl_WolfSSLCertManager.c
         ${wolfssljni_DIR}/native/com_wolfssl_WolfSSLCertRequest.c
         ${wolfssljni_DIR}/native/com_wolfssl_WolfSSLCertificate.c
+        ${wolfssljni_DIR}/native/com_wolfssl_WolfSSLCRL.c
         ${wolfssljni_DIR}/native/com_wolfssl_WolfSSLContext.c
         ${wolfssljni_DIR}/native/com_wolfssl_WolfSSLSession.c
         ${wolfssljni_DIR}/native/com_wolfssl_WolfSSLX509Name.c
diff --git a/IDE/WIN/wolfssljni.vcxproj b/IDE/WIN/wolfssljni.vcxproj
@@ -42,6 +42,7 @@
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLCertificate.c" />
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLCertManager.c" />
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLCertRequest.c" />
+    <ClCompile Include="..\..\native\com_wolfssl_WolfSSLCRL.c" />
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLContext.c" />
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLSession.c" />
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLX509Name.c" />
@@ -56,6 +57,7 @@
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLCertificate.h" />
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLCertManager.h" />
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLCertRequest.h" />
+    <ClInclude Include="..\..\native\com_wolfssl_WolfSSLCRL.h" />
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLContext.h" />
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLSession.h" />
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLX509Name.h" />
diff --git a/IDE/WIN/wolfssljni.vcxproj.filters b/IDE/WIN/wolfssljni.vcxproj.filters
@@ -36,6 +36,9 @@
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLCertRequest.c">
       <Filter>Source Files</Filter>
     </ClCompile>
+    <ClCompile Include="..\..\native\com_wolfssl_WolfSSLCRL.c">
+      <Filter>Source Files</Filter>
+    </ClCompile>
     <ClCompile Include="..\..\native\com_wolfssl_WolfSSLContext.c">
       <Filter>Source Files</Filter>
     </ClCompile>
@@ -77,6 +80,9 @@
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLCertRequest.h">
       <Filter>Header Files</Filter>
     </ClInclude>
+    <ClInclude Include="..\..\native\com_wolfssl_WolfSSLCRL.h">
+      <Filter>Header Files</Filter>
+    </ClInclude>
     <ClInclude Include="..\..\native\com_wolfssl_WolfSSLContext.h">
       <Filter>Header Files</Filter>
     </ClInclude>
diff --git a/build.xml b/build.xml
@@ -153,6 +153,7 @@
             <class name="com.wolfssl.WolfSSL"/>
             <class name="com.wolfssl.WolfSSLCertManager"/>
             <class name="com.wolfssl.WolfSSLCertificate"/>
+            <class name="com.wolfssl.WolfSSLCRL"/>
             <class name="com.wolfssl.WolfSSLContext"/>
             <class name="com.wolfssl.WolfSSLSession"/>
             <class name="com.wolfssl.WolfSSLX509StoreCtx"/>
diff --git a/java.sh b/java.sh
@@ -115,9 +115,10 @@ gcc -Wall -c $fpic $CFLAGS ./native/com_wolfssl_WolfCryptEccKey.c -o ./native/co
 gcc -Wall -c $fpic $CFLAGS ./native/com_wolfssl_WolfSSLCertManager.c -o ./native/com_wolfssl_WolfSSLCertManager.o $javaIncludes
 gcc -Wall -c $fpic $CFLAGS ./native/com_wolfssl_WolfSSLCertRequest.c -o ./native/com_wolfssl_WolfSSLCertRequest.o $javaIncludes
 gcc -Wall -c $fpic $CFLAGS ./native/com_wolfssl_WolfSSLCertificate.c -o ./native/com_wolfssl_WolfSSLCertificate.o $javaIncludes
+gcc -Wall -c $fpic $CFLAGS ./native/com_wolfssl_WolfSSLCRL.c -o ./native/com_wolfssl_WolfSSLCRL.o $javaIncludes
 gcc -Wall -c $fpic $CFLAGS ./native/com_wolfssl_WolfSSLX509Name.c -o ./native/com_wolfssl_WolfSSLX509Name.o $javaIncludes
 gcc -Wall -c $fpic $CFLAGS ./native/com_wolfssl_WolfSSLX509StoreCtx.c -o ./native/com_wolfssl_WolfSSLX509StoreCtx.o $javaIncludes
-gcc -Wall $javaLibs $CFLAGS -o ./lib/$jniLibName ./native/com_wolfssl_WolfSSL.o ./native/com_wolfssl_WolfSSLSession.o ./native/com_wolfssl_WolfSSLContext.o ./native/com_wolfssl_WolfCryptRSA.o ./native/com_wolfssl_WolfCryptECC.o ./native/com_wolfssl_WolfCryptEccKey.o ./native/com_wolfssl_WolfSSLCertManager.o ./native/com_wolfssl_WolfSSLCertRequest.o ./native/com_wolfssl_WolfSSLCertificate.o ./native/com_wolfssl_WolfSSLX509Name.o ./native/com_wolfssl_WolfSSLX509StoreCtx.o -L$WOLFSSL_INSTALL_DIR/lib -L$WOLFSSL_INSTALL_DIR/lib64 -l$WOLFSSL_LIBNAME
+gcc -Wall $javaLibs $CFLAGS -o ./lib/$jniLibName ./native/com_wolfssl_WolfSSL.o ./native/com_wolfssl_WolfSSLSession.o ./native/com_wolfssl_WolfSSLContext.o ./native/com_wolfssl_WolfCryptRSA.o ./native/com_wolfssl_WolfCryptECC.o ./native/com_wolfssl_WolfCryptEccKey.o ./native/com_wolfssl_WolfSSLCertManager.o ./native/com_wolfssl_WolfSSLCertRequest.o ./native/com_wolfssl_WolfSSLCertificate.o ./native/com_wolfssl_WolfSSLCRL.o ./native/com_wolfssl_WolfSSLX509Name.o ./native/com_wolfssl_WolfSSLX509StoreCtx.o -L$WOLFSSL_INSTALL_DIR/lib -L$WOLFSSL_INSTALL_DIR/lib64 -l$WOLFSSL_LIBNAME
 if [ $? != 0 ]; then
     echo "Error creating native JNI library"
     exit 1
diff --git a/native/com_wolfssl_WolfSSLCRL.c b/native/com_wolfssl_WolfSSLCRL.c
diff --git a/native/com_wolfssl_WolfSSLCRL.h b/native/com_wolfssl_WolfSSLCRL.h
diff --git a/platform/android_aosp/wolfssljni/Android.mk b/platform/android_aosp/wolfssljni/Android.mk
diff --git a/src/java/com/wolfssl/WolfSSLCRL.java b/src/java/com/wolfssl/WolfSSLCRL.java
diff --git a/src/test/com/wolfssl/test/WolfSSLCRLTest.java b/src/test/com/wolfssl/test/WolfSSLCRLTest.java
