Latest Posts

• uncategorized wolfhsm

  Securing wolfHSM POSIX Transport with TLS

  The recent addition of a TLS transport to the wolfHSM project provides improved transport-level protection for POSIX-based communications and was included with the latest release.

  Read more
• uncategorized wolfssl-jsse-provider-and-jni-wrapper

  New X.509 Certificate Extension APIs in wolfSSL and wolfSSL JNI

  wolfSSL now adds new public X.509 certificate-generation APIs for key identifiers, CRL distribution points, and Netscape certificate type handling. wolfSSL JNI builds on top of these APIs and now exposes matching Java methods in WolfSSLCertificate. New public wolfSSL APIs (C)

  Read more
• uncategorized wolfmqtt

  WebSocket Support Comes to the wolfMQTT Broker

  wolfMQTT clients have been able to speak MQTT over WebSocket for a while. Now the broker can too.

  Read more
• uncategorized wolfssl-jsse-provider-and-jni-wrapper

  Migrating CRL Workflows from Bouncy Castle to wolfSSL JNI

  If your Java stack currently uses Bouncy Castle for certificate tooling, moving CRL generation to wolfSSL’s JNI is straightforward once you map the flow correctly. wolfSSL JNI/JSSE uses wolfSSL’s native C crypto/TLS library, so projects can share one crypto implementation across Java and non-Java components. In environments that require validated...

  Read more
• uncategorized wolssl

  Expanded CRL Support: Generating a CRL

  wolfSSL has long provided solid CRL decode and validation support. This update builds on that foundation by adding CRL generation and signing capabilities, along with certificate extension helpers that improve revocation-aware certificate creation workflows.

  Read more
• uncategorized wolssl

  New! wolfSSL Launches User-Space FIPS VPN Client in Rust

  wolfSSL is excited to announce the release of its new user-space VPN client. This client is written entirely in Rust, leveraging the language’s safety and performance characteristics. The implementation is based on the popular open-source boringtun project. Crucially, this new client incorporates FIPS-validated cryptography through the use of the wolfGuard...

  Read more
• uncategorized wolssl

  wolfSSL’s OCSP and OCSP-Stapling Support

  Sometimes, X.509 certificates need to be revoked. One way that can happen is via CRL (Certificate Revocation List), but that’s a topic for another time. Today we’ll focus on OCSP (Online Certificate Status Protocol). The OCSP protocol is designed to allow a client to send a real-time query to a...

  Read more
• uncategorized wolssl

  Keeping TLS 1.3 AES-GCM Session Keys Out of RAM

  Secure Element Offload via Crypto Callbacks in wolfSSL Modern embedded and security-critical systems increasingly rely on Secure Elements, TPMs, and hardware cryptographic accelerators to protect private keys. In wolfSSL, asymmetric keys such as ECC private keys can already reside entirely inside hardware using Crypto Callbacks. Until now, however, TLS 1.3...

  Read more
• uncategorized wolfip

  Simplified Networking: wolfIP Now Supports STM32CubeMX

  Developing robust, secure networking for embedded systems just got a whole lot smoother. We are excited to announce that wolfIP now features official STM32CubeMX Pack support.

  Read more
• uncategorized wolssl

  From TLS Blindness to Full Visibility: How eBPF Changes Observability

  The Visibility Problem No One Likes to Admit

  Read more