SSLEngine memory leak fix, X509ExtendedTrustManager chain sorting fix, support for getExtendedKeyUsage()#289

Merged

rlm2002 merged 6 commits intowolfSSL:masterfrom

cconlon:wolfsslEngineMemCleanup

Oct 15, 2025

Commits on Oct 15, 2025

JSSE: fix memory leak in WolfSSLEngine due to JNI global refs, add unit test for regression
cconlon
committed
JSSE: change SSLSocket/SSLEngine references in WolfSSLInternalVerifyCb to WeakReferences, ease garbage collection ability
cconlon
committed
JNI/JSSE: add getExtendedKeyUsage() to X509Certificate (WolfSSLX509), wrap wolfSSL_X509_get_extended_key_usage() in WolfSSLCertificate.getExtendedKeyUsage()
cconlon
committed
JSSE testing: skip WolfSSLSocketTest.testSNIMatchers() if less than wolfSSL 5.7.2
cconlon
committed
JSSE: sort peer chain based off BasicConstraints for more accurate leaf cert detection in WolfSSLTrustX509 (X509ExtendedTrustManager)
cconlon
committed
JNI/JSSE: fix cert ordering reversal in WolfSSLX509StoreCtx.getCerts(). Native wolfSSL_X509_STORE_GetCerts() direction changed between wolfSSL 5.7.0 and 5.8.0.
cconlon
committed