wolfssl / osp

wolfSSL Open Source project ports

wolfSSL Open Source Project (osp) Ports

This repository contains wolfSSL ports into Open Source projects and packages. When porting the wolfSSL lightweight SSL/TLS library into an existing Open Source project, wolfSSL tries to upstream changes/patches. This is not always possible, and as such we maintain this repository of patches and modified projects.

Why use wolfSSL?

wolfSSL can provide several advantages over using the default SSL/TLS implementation in a project, product, or system. Some of these include:

• Portability across platforms and OS/RTOS environments
• Low/optimized memory use (runtime and footprint)
• Best-tested SSL/TLS/crypto implementation available, reducing vulnerabilities
• Current protocol support, up to TLS 1.3 and DTLS 1.3
• Progressive algorithm support (ChaCha20, Poly1305, Curve/Ed25519, etc)
• Commercial support available direct from wolfSSL engineers
• Commercial licenses available (in addition to standard GPLv2)

For a full list of features, please visit the wolfSSL product page.

List of Open Source Project Ports

Each project port included in this repository is contained in its own subdirectory.

Directory	Description	Home Page	Blog	Port Documentation
apache-httpd	Apache HTTP Server	Link	Link	README
asio	Asio C++ Library	Link	Link	README
bind9	DNS software system	Link		README
cjose	JOSE for C/C++	Link	Link	README
freeradius-server-2.1.12	FreeRADIUS Server Project	Link		README
gRPC	RPC library and framework	Link		README
haproxy	HAProxy	Link		README
libest	Cisco EST stack written in C	Link	Link	README
libimobiledevice	Library to communicate with services on iOS devices	Link		README
libsignal-protocol-c	Signal Protocol C Library	Link	Link	README
libspdm	Security Protocol and Data Model implementation	Link		README
libssh2	client-side C library for SSH2	Link	Link	README
lighttpd	lighttpd web server	Link	Link	README
mariadb	MariaDB relational database	Link		README
mosquitto	Eclipse Mosquitto - An open source MQTT broker	Link		README
net-snmp	Simple Network Management Protocol	Link		README
ntp	Network Time Protocol	Link	Link	README
NXP SE05X Middleware	wolfSSL HostCrypto support patch	Link		README
openldap	Open source lightweight directory access protocol	Link	Link	README
openpegasus	Open source DMTF CIM and WBEM	Link	Link	README
openresty	Nginx and LuaJIT-based web platform	Link		README
openssh-patches	OpenSSH	Link	Link	README
ppp	Paul's PPP Package	Link		README
Python	Python language and interpreter	Link		README
qt	Qt	Link	Link	README
rsyslog	rocket-fast Syslog Server	Link	Link	README
sblim-sfcb	SBLIM Small-footprint CIM Broker	Link		README
socat	socat Multipurpose relay	Link	Link	1.7.3.4 README 1.7.4.1 README
stunnel	stunnel Proxy	Link	Link	5.57 Unix README 5.57 Windows README
tcpdump	command-line packet analyzer	Link	Link	README
urllib3	urllib3 HTTP client for Python	Link		README
websocket-client	WebSocket client for python	Link		README
websocketpp	WebSocket++	Link	Link	README
wolfengine	OpenSSL Engine using wolfCrypt	Link		README

Licensing

wolfSSL and wolfCrypt are either licensed for use under the GPLv2 (or at your option any later version) or a standard commercial license. For users who cannot use wolfSSL under GPLv2 (or any later version), a commercial license to wolfSSL and wolfCrypt is available. For license inquiries, please contact wolfSSL Inc. directly at [email protected].

All non-wolfSSL projects in this repository are licensed under their respective project licenses.

Support

For support or build issues, please contact the wolfSSL support team at [email protected].

osp's Issues

Building lighthttpd with wolfssl

I am trying to build lighthttpd-1.4.51 with wolfssl 5.6.3. I followed the instructions:

wolfssl:
/configure --enable-lighty --prefix=/usr/local && make -j8 && sudo make install && sudo ldconfig

ls /usr/local/lib:

lighthttpd:
./configure --with-wolfssl=yes --prefix=/usr/local/lib --without-bzip2 --without-zlib --without-pcre

It showes:

Then I also tried to replace --with-wolfssl=yes with --with-wolfssl=/usr/local, it is still not working.

stunnel build with wolf-ssl(pre-built with the liboqs) failure

Hi ,

First of all the appreciate for the great work .

I am following your procedure outlined in here .

could successfully the wolfssl with liboqs, however stunnel build failed with the below error . could you please let me know where am I going wrong or what I would be missing ?

I am doing this whole build in Mac OS 13.4.1 (c) (M1 chip) .

aishwaryanarayanan@Aishwaryas-MBP stunnel-5.67 % make
Making all in src
/Library/Developer/CommandLineTools/usr/bin/make  all-am
  CC       stunnel-str.o
str.c:239:21: warning: a function declaration without a prototype is deprecated in all versions of C [-Wstrict-prototypes]
void str_canary_init() {
                    ^
                     void
str.c:248:15: warning: a function declaration without a prototype is deprecated in all versions of C [-Wstrict-prototypes]
void str_stats() {
              ^
               void
str.c:565:28: warning: a function declaration without a prototype is deprecated in all versions of C [-Wstrict-prototypes]
void leak_table_utilization() {
                           ^
                            void
str.c:587:11: error: call to undeclared function 'sk_LEAK_ENTRY_new_reserve'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
    stats=sk_LEAK_ENTRY_new_reserve(leak_cmp, utilization);
          ^
str.c:587:37: error: use of undeclared identifier 'leak_cmp'
    stats=sk_LEAK_ENTRY_new_reserve(leak_cmp, utilization);
                                    ^
str.c:590:13: error: call to undeclared function 'sk_LEAK_ENTRY_push'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
            sk_LEAK_ENTRY_push(stats, leak_hash_table + i);
            ^

I did the wolfssl build following the below approach after building liboqs as detailed in the instruction provided here

---

aishwaryanarayanan@Aishwaryas-MBP wolfssl % /usr/local/bin/wolfssl-config --version
5.6.4
aishwaryanarayanan@Aishwaryas-MBP wolfssl % ./examples/server/server -v 4 --pqc P521_KYBER_LEVEL5
Using Post-Quantum KEM: P521_KYBER_LEVEL5

aishwaryanarayanan@Aishwaryas-MBP wolfssl % ./configure --enable-stunnel --with-liboqs

aishwaryanarayanan@Aishwaryas-MBP wolfssl % /usr/local/bin/wolfssl-config --version
5.6.4
aishwaryanarayanan@Aishwaryas-MBP wolfssl % ./examples/server/server -v 4 --pqc P521_KYBER_LEVEL5
Using Post-Quantum KEM: P521_KYBER_LEVEL5

Error in running make all command patched OQS openssl fork

I am following all the instructions as given here. I am getting following errors after running the final command i.e, make all.

stunnel ssl library include

addition of --with-ssl to stunnel configure.ac for setting a SSL library path other than /usr/local

Per Project gitignores

A small issue I ran into with adding pppd is that it had its own gitignore and a hand-tooled configure script. Our master gitignore skips configure scripts. Since each project has its own list of special things to ignore each should have its own gitignore file.

Anyway, I think this would get a good 10 minute project, and I'll probably get to it. But, I'm adding this issue as a reminder. (And if someone else wants to tackle it, all the better.)

Process to patch Python 3.8.14 or 3.8.5 for wolfSSL on Windows

Since the Windows build doesn't run the autoconf and configure I am wondering what the process is to get Python patched for wolfssl on Windows. Is this possible with configuration passed into CMake?

I would like to help get this working if there is an avenue.

Working on a CMake/Python build system which bootstraps Python from source. Seems that using Wolf is preferable to downloading Strawberry Perl bins & OpenSSL src on Windows, in order to get Python built. CMake can build anything first so why not build Python in the most succinct way.. Would like to commit PR in this area if I get something going.

Error in running make all command patched OQS openssl fork

I am following all the instructions as given here. I am getting following errors after running the final command i.e, make all. I have attached the screenshots of the history as well as the start of the error in make all command. You can check the output of history command to see if all the steps were followed properly. The OpenSSL version is OpenSSL 3.0.11 19 Sep 2023 (Library: OpenSSL 3.0.11 19 Sep 2023). Also, even though this screenshot is of error on raspberry pi, I faced the same error on Ubuntu as well.