Merge remote-tracking branch 'upstream/master' into gh9951

Author: kareem-wolfssl

.github/workflows/os-check.yml

@@ -90,6 +90,7 @@ jobs:
           '--enable-all CPPFLAGS=''-DNO_WOLFSSL_SERVER -DWOLFSSL_NO_CLIENT_AUTH''',
           '--enable-curve25519=nonblock --enable-ecc=nonblock --enable-sp=yes,nonblock CPPFLAGS="-DWOLFSSL_PUBLIC_MP -DWOLFSSL_DEBUG_NONBLOCK"',
           '--enable-certreq --enable-certext --enable-certgen --disable-secure-renegotiation-info CPPFLAGS="-DNO_TLS"',
+          '--enable-ocsp --enable-ocsp-responder --enable-ocspstapling',
         ]
     name: make check
     if: github.repository_owner == 'wolfssl'

.gitignore

@@ -70,6 +70,7 @@ examples/sctp/sctp-client
 examples/sctp/sctp-client-dtls
 examples/asn1/asn1
 examples/pem/pem
+examples/ocsp_responder/ocsp_responder
 server_ready
 snifftest
 output

.wolfssl_known_macro_extras

@@ -847,7 +847,6 @@ WOLFSSL_NO_WORD64_OPS
 WOLFSSL_NO_XOR_OPS
 WOLFSSL_NRF51_AES
 WOLFSSL_OLDTLS_AEAD_CIPHERSUITES
-WOLFSSL_OLDTLS_SHA2_CIPHERSUITES
 WOLFSSL_OLD_SET_CURVES_LIST
 WOLFSSL_OLD_TIMINGPADVERIFY
 WOLFSSL_OLD_UNSUPPORTED_EXTENSION
@@ -882,7 +881,6 @@ WOLFSSL_RSA_DECRYPT_TO_0_LEN
 WOLFSSL_RW_THREADED
 WOLFSSL_SAKKE_SMALL
 WOLFSSL_SAKKE_SMALL_MODEXP
-WOLFSSL_SLHDSA_FULL_HASH
 WOLFSSL_SE050_AUTO_ERASE
 WOLFSSL_SE050_CRYPT
 WOLFSSL_SE050_HASH
@@ -897,6 +895,7 @@ WOLFSSL_SHA256_ALT_CH_MAJ
 WOLFSSL_SHA512_HASHTYPE
 WOLFSSL_SHUTDOWNONCE
 WOLFSSL_SILABS_TRNG
+WOLFSSL_SLHDSA_FULL_HASH
 WOLFSSL_SM4_EBC
 WOLFSSL_SNIFFER_NO_RECOVERY
 WOLFSSL_SP_ARM32_UDIV

IDE/WIN/user_settings.h

@@ -40,6 +40,11 @@
     #define HAVE_CRL
     #define HAVE_CRL_MONITOR
 
+    #define HAVE_OCSP
+    #define HAVE_OCSP_RESPONDER
+    #define WOLFSSL_CERT_GEN
+    #define HAVE_CERTIFICATE_STATUS_REQUEST
+
     #if defined(WOLFSSL_LIB)
         /* The lib */
         #define OPENSSL_EXTRA

certs/ocsp/include.am

@@ -14,26 +14,46 @@ EXTRA_DIST += \
         certs/ocsp/openssl.cnf \
         certs/ocsp/renewcerts-for-test.sh \
         certs/ocsp/intermediate1-ca-key.pem \
+        certs/ocsp/intermediate1-ca-key.der \
         certs/ocsp/intermediate1-ca-cert.pem \
+        certs/ocsp/intermediate1-ca-cert.der \
         certs/ocsp/intermediate2-ca-key.pem \
+        certs/ocsp/intermediate2-ca-key.der \
         certs/ocsp/intermediate2-ca-cert.pem \
+        certs/ocsp/intermediate2-ca-cert.der \
         certs/ocsp/intermediate3-ca-key.pem \
+        certs/ocsp/intermediate3-ca-key.der \
         certs/ocsp/intermediate3-ca-cert.pem \
+        certs/ocsp/intermediate3-ca-cert.der \
         certs/ocsp/ocsp-responder-key.pem \
+        certs/ocsp/ocsp-responder-key.der \
         certs/ocsp/ocsp-responder-cert.pem \
+        certs/ocsp/ocsp-responder-cert.der \
         certs/ocsp/server1-key.pem \
+        certs/ocsp/server1-key.der \
         certs/ocsp/server1-cert.pem \
+        certs/ocsp/server1-cert.der \
         certs/ocsp/server1-chain-noroot.pem \
         certs/ocsp/server2-key.pem \
+        certs/ocsp/server2-key.der \
         certs/ocsp/server2-cert.pem \
+        certs/ocsp/server2-cert.der \
         certs/ocsp/server3-key.pem \
+        certs/ocsp/server3-key.der \
         certs/ocsp/server3-cert.pem \
+        certs/ocsp/server3-cert.der \
         certs/ocsp/server4-key.pem \
+        certs/ocsp/server4-key.der \
         certs/ocsp/server4-cert.pem \
+        certs/ocsp/server4-cert.der \
         certs/ocsp/server5-key.pem \
+        certs/ocsp/server5-key.der \
         certs/ocsp/server5-cert.pem \
+        certs/ocsp/server5-cert.der \
         certs/ocsp/root-ca-key.pem \
+        certs/ocsp/root-ca-key.der \
         certs/ocsp/root-ca-cert.pem \
+        certs/ocsp/root-ca-cert.der \
         certs/ocsp/root-ca-crl.pem \
         certs/ocsp/test-response.der \
         certs/ocsp/test-response-rsapss.der \