Refresh for wolfSSL 5.9.1/master and fix security/correctness findings#9

Merged

dgarske merged 10 commits into

mainfrom

refresh-5.9.1-security-fixes

Jun 12, 2026

Commits on Jun 11, 2026

Fix socket close, TLS connect/negotiate/read logic and password callback
aidangarske
committed
Harden HTTP request/response parsing and tighten daemon umask
aidangarske
committed
Harden vault header validation, fix handle leak and zeroize key data
aidangarske
committed
Fix ETS fingerprint digest, key caching, worker shutdown and zeroization
aidangarske
committed
Add portable secure-zero helper and fix hex and error-string helpers
aidangarske
committed
Add unit tests for HTTP, vault, socket and fingerprint paths
aidangarske
committed
Add CI coverage for wolfSSL 5.9.1 and master and bump version to 1.2
aidangarske
committed
Bound URI encode/decode, null-terminate password buffer, init worker ret
aidangarske
committed
Auto-resolve latest wolfSSL and expand CI to cover all feature configs and sanitizers
aidangarske
committed
Build wolfSSL with opensslextra so the encrypted ETS server key decrypts
aidangarske
committed