mirror of
https://github.com/openharmony/third_party_openhitls.git
synced 2026-07-22 00:57:09 -04:00
dny
df6b1a292c
Harden newly added app command paths and keep command-line behavior aligned with supported functionality. - restrict enc output files and SM key-store files to owner-only permissions - fail closed for explicitly configured CA files and enforce s_client host identity checks - keep TLS app mode TLS-only and require client certificates when server verification is enabled - validate SM key UUID inputs and preserve IPv4 split allocation bases during SAN parsing - apply stdin size limits, cast ctype inputs safely, and honor errdecode -hex parsing - reject unsupported GMAC/AES-WRAP/prime -safe command paths and update documentation - apply pkcs12 algorithm options and add focused SDV coverage for the fixed paths Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1463 Signed-off-by: Dongjianwei001 <dongjianwei1@huawei.com>