Issues

Issues

• Espressif esp_crt_bundle: cacrt_all.pem trusts the compromised eMudhra root and its Sectigo cross-sign path

  wolfSSL/wolfssl#12078 · opened on Nov 10, 2026
  1

• [Bug]: DTLS 1.3: NO_ASN_TIME compiles out the only retransmission throttle; client loops on Finished/ACK over slow links

  wolfSSL/wolfssl#12022 · opened on Nov 5, 2026

• [Bug]: Wrong rsa_pss_pss_* handling for id-RSASSA-PSS keys in (D)TLS 1.2 and 1.3

  wolfSSL/wolfssl#11988 · opened on Nov 4, 2026

• Client rejects server chain containing a serial 0 root (-140), e.g. www.godaddy.com

  wolfSSL/wolfssl#11952 · opened on Oct 31, 2026
  1

• wolfSSL_BIO_read_filename() leaves a closed FILE* in the BIO when the new file cannot be opened

  wolfSSL/wolfssl#11903 · opened on Oct 27, 2026
  1

• [Bug]: runtime errors when running on MacOSX with MariaDB server under UBSan

  wolfSSL/wolfssl#11874 · opened on Oct 23, 2026
  9

• crl: CRL_STATIC_REVOKED_LIST + opensslextra doesn't build, and crashes printing a CRL

  wolfSSL/wolfssl#11845 · opened on Oct 21, 2026

• ci(socat): 1.8.0.0 shards hang to the 600s kill

  wolfSSL/wolfssl#11844 · opened on Oct 21, 2026

• RFE: PKCS#11 - run RSA public-key operations in software when n/e are known

  wolfSSL/wolfssl#11803 · opened on Oct 19, 2026
  1

• [Bug]: DTLS 1.3 KeyUpdate response WANT_WRITE skips incoming-message acknowledgement

  wolfSSL/wolfssl#11761 · opened on Oct 15, 2026
  2

• [Bug]: socat 1.8.0.0 CI multicast test fails with an uninitialized interface pointer

  Bug

  wolfSSL/wolfssl#11737 · opened on Oct 14, 2026

• DTLS 1.3 server silently drops a fragmented second ClientHello when the cookie extension is not in the first fragment (WOLFSSL_DTLS_CH_FRAG)

  wolfSSL/wolfssl#11697 · opened on Oct 9, 2026
  2

• X25519 PKCS#8/RFC 8410 keys are imported and exported in reversed byte order

  wolfSSL/wolfssl#11673 · opened on Oct 6, 2026

• PKCS#8 decode doesn't check [1] publicKey against the private key for X25519, ML-DSA, Falcon

  wolfSSL/wolfssl#11671 · opened on Oct 6, 2026

• PKCS#8 private keys with [0] attributes fail to decode (ASN_PARSE_E)

  wolfSSL/wolfssl#11670 · opened on Oct 6, 2026

• Feature request: incremental LMS verification

  wolfSSL/wolfssl#11559 · opened on Sep 25, 2026
  3

• TLS 1.3 ChaCha Sequence Wrap Is Not Enforced in wolfSSL

  wolfSSL/wolfssl#11129 · opened on Aug 11, 2026
  1

• Potential mismatch in permit a valid encrypted record containing padding without application content

  wolfSSL/wolfssl#11086 · opened on Aug 6, 2026
  1

• TLS 1.3 NewSessionTicket is not fragmented under reduced max fragment length

  wolfSSL/wolfssl#11079 · opened on Aug 6, 2026

• Confirmed mismatch in use certificates signed with acceptable signature algorithms

  wolfSSL/wolfssl#11075 · opened on Aug 6, 2026

• Server certificate callback can ignore signature_algorithms_cert and send an unacceptable certificate chain

  wolfSSL/wolfssl#11072 · opened on Aug 6, 2026

• Potential mismatch in send no more messages on that connection

  wolfSSL/wolfssl#11071 · opened on Aug 6, 2026

• [Feature]: wolfSSL doesn't support multiple certificates in the same server SSL_CTX

  wolfSSL/wolfssl#10766 · opened on Jun 24, 2026
  4

• [Bug]: X509 decoder fails to handle OtherName with value of an IA5String

  wolfSSL/wolfssl#10694 · opened on Jun 16, 2026
  3

• RequestConnectionId Response with cid_spare Is Not Implemented

  wolfSSL/wolfssl#10622 · opened on Jun 5, 2026
  1