Skip to content

Conversation

@kareem-wolfssl
Copy link
Contributor

@kareem-wolfssl kareem-wolfssl commented Jan 20, 2026

Description

Fixes #7735.

Testing

Using example client:

./configure --disable-dependency-tracking --enable-certgen --enable-des3 --enable-dh --enable-dsa --enable-dtls --enable-ecc --enable-fastmath --enable-fasthugemath --enable-keygen --enable-opensslall --enable-opensslextra --enable-ripemd --enable-secure-renegotiation --enable-sessioncerts --enable-session-ticket --enable-sp --enable-sp-asm --enable-sp-math-all --enable-sha512 --enable-shared --enable-sni --enable-ssh --enable-static --enable-tls13 --enable-debug 'CFLAGS=-DWOLFSSL_ALT_NAMES -DFP_MAX_BITS=8192 -DNO_WOLFSSL_STUB -DWOLFSSL_ALT_CERT_CHAINS -DHAVE_IO_TIMEOUT -DWOLFSSL_NO_ASN_STRICT -DWOLFSSL_LOGGINGENABLED_DEFAULT=1' --enable-debug --enable-debug-trace-errcodes
./examples/client/client -v d -h media.ccc.de -p 443 -d
./examples/client/client -v e -h media.ccc.de -p 443 -d

Before this change only the client_method command (first client command) was connecting due to a difference in enabled cipher suites.

Using curl built against the above configure line, replace the wolfSSL method (req_method) with wolfSSLv23_method or wolfSSLv23_client_method, then build and connect to fsf.org with: curl -v https://fsf.org. curl will not connect with wolfSSLv23_client_method before this change.

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@kareem-wolfssl kareem-wolfssl self-assigned this Jan 20, 2026
@kareem-wolfssl kareem-wolfssl marked this pull request as draft January 20, 2026 00:53
…user. Always allocate suites in InitSSL_Side if they're NULL so InitSSL_Suites will set them.
…et to true on the client as the server side is what calls DH param generation APIs which set this to true, but we still want the client to support DH cipher suites if enabled. This matches behavior from InitSSL_EitherSide.
@dgarske dgarske requested a review from SparkiDev January 23, 2026 18:58
@dgarske dgarske merged commit cd88ec5 into wolfSSL:master Jan 23, 2026
424 of 436 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Can't establish TLS connections to https://traxxas.com/

3 participants