#WolfSSL
LightNews LightNews
linuxjedi.co.uk
Mixing work and play, making an #Amiga wolfSSL port and running it on a real Amiga 4000.
linuxjedi.co.uk/wolfssl-on-a...
wolfSSL on Amiga
As many of you are probably aware, I am one of the developers of wolfSSL. I specialise in porting to various platforms, everything from 16bit microcontrollers to big iron 64bit server processors.
linuxjedi.co.uk
December 28, 2024 at 9:04 AM
campuscodi.risky.biz
The WolfSSL project has released wolfIP, a TCP/IP stack designed for embedded and safety-critical systems

github.com/wolfssl/wolfIP

www.prweb.com/releases/wol...
April 9, 2026 at 12:29 PM
bagder.mastodon.social.ap.brid.gy
#curl stickers at the wolfSSL booth at #fosdem
January 31, 2026 at 11:13 AM
davidcrespo.bsky.social
my impression is that everyone who knows anything has said things like this, and the people saying otherwise have all been basically clowns
www.wolfssl.com/how-claude-m...
https://www.wolfssl.com/how-claude-mythos-preview-helped-harden-wolfssl/
April 24, 2026 at 2:56 AM
linuxjedi.co.uk
Wherever there is a new computer, embedded or not, someone asks if you can run Doom on it. Last year I created the wolfSSL wolfDemo board. Today I managed to get Doom running on it.

There is no sound, so the LEDs act like a VU meter for the sound effects. I haven’t wired up a controller yet either.
May 2, 2026 at 3:28 PM
lea-linux.org
github.com/wolfSSL/wolf...
"Wolfie is fine, dear. Wolfie is just fine. Where are you ?"
"Your foster parents are dead."
GitHub - wolfSSL/wolfCOSE: A fast, portable, and lightweight COSE + CBOR implementation for embedded systems. Supports PQC, FIPS 140-3, DO-178, and MISRA C. Powered by wolfSSL.
A fast, portable, and lightweight COSE + CBOR implementation for embedded systems. Supports PQC, FIPS 140-3, DO-178, and MISRA C. Powered by wolfSSL. - wolfSSL/wolfCOSE
github.com
May 30, 2026 at 9:42 PM
sockpuppet.org
This is a fucking incredibly great bug. Ask Claude to demonstrate it for you; it'll one-shot it. For ECC signatures (at least), WolfSSL thinks a 1-byte SHA2 hash is just as good as a 32-byte hash.
April 11, 2026 at 4:39 AM
isolyth.dev
"One example of an opensource vulnerability .. was in wolfSSL, an open-source cryptography library .. is used by billions of devices worldwide. Mythos .. constructed an exploit that would let an attacker forge certificates that would .. allow them to host a fake website for a bank or email provider"
isolyth.dev Eris @isolyth.dev · May 22
Glasswing update: they used mythos to find 10k+ high or critical severity vulnerabilities, cloudflare has found the false positive rate to be better than human testers, and they've used mythos to scan 1k+ OSS projects, finding 6k+ bugs with high or crit severity, and 23k total). Crazy stuff in this
Project Glasswing: An initial update
An early update on what we've learned from Project Glasswing.
www.anthropic.com
May 22, 2026 at 7:44 PM
bagder.mastodon.social.ap.brid.gy
*sigh*

https://hackerone.com/reports/3459636
curl disclosed on HackerOne: Stack Buffer Overflow in cURL wolfSSL...
**Summary:** A stack-based buffer overflow exists in the wssl_strerror function of cURL's wolfSSL TLS backend. The function uses an unsafe strcpy call, relying solely on a DEBUGASSERT macro for...
hackerone.com
December 9, 2025 at 11:10 PM
gojimmypi.bsky.social
@wolfssl.bsky.social
ESP Registry Managed Component.

wolfSSL v5.8.2 fresh off the press! #ESP32

all the latest TLS 1.3 features, Post Quantum, and more.
Screen snip: wolfssl/wolfssl 5.8.2 Latest uploaded 2 minutes ago wolfSSL Embedded SSL/TLS Library readme This is wolfSSL version 5.8.2, published as an Espressif Managed Component.
August 14, 2025 at 7:58 PM
linuxjedi.co.uk
To prove that you can port wolfSSL to almost anything, here is the benchmark of a quick port I compiled, running on an emulated #Amiga 3000. When I get some spare time, I'll run it on real hardware 🙂
December 16, 2024 at 3:13 PM
bagder.mastodon.social.ap.brid.gy
The list of top #curl sponsors remains the exact same release after release...
curl top sponsors Jan 2026: Haxx, wolfSSL, Fastly, TeamViewer, GitHub, kirei, IBB, Elastic
January 6, 2026 at 5:17 PM
jameshhoward.bsky.social
Nice work! I used WolfSSL too when prototyping my DOS Bluesky client.
bsky.app/profile/jame...
jameshhoward.bsky.social James Howard @jameshhoward.bsky.social · Dec 1
Kicking off #DOScember on Bluesky by sharing a pic of my Bluesky client for DOS! Here it is running on my Pocket 386
December 17, 2024 at 7:10 AM
gojimmypi.bsky.social
I've updated the wolfSSL and wolfSSH Managed Components in the Espressif library for the #ESP32 family of products:
@wolfssl.bsky.social #TLS #SSH
Screen snip of the text at the Espressif Managed Components home page for wolfSSL Displaying 1-3 of total 3 components wolfssl/wolfssl v5.7.6 uploaded 5 minutes ago wolfSSL Embedded SSL/TLS Library Supports all targets License: Custom Includes 5 examples Downloaded 1.0k times wolfssl/wolfssh v1.4.18 uploaded 1 day ago wolfSSL wolfSSH Library Supports all targets License: Custom Includes 2 examples Downloaded 76 times
February 24, 2025 at 1:01 AM
kateholterhoff.com
“… they pointed Mythos at @wolfssl.com. Their findings generated 8 CVEs and triggered the release of wolfSSL 5.9.1. We already spend thousands of dollars a month testing with Opus and other models, and none of them found what Mythos did.” Thanks @linuxjedi.co.uk www.wolfssl.com/how-claude-m...
How Claude Mythos Preview helped harden wolfSSL - wolfSSL
At wolfSSL, we do an incredible amount of testing. Some of it is visible, some of it is not. You can see our GitHub Actions run on every pull request, and
www.wolfssl.com
April 22, 2026 at 9:00 PM
gojimmypi.bsky.social
Using #wolfSSL cryptographic libraries on Arduino? I've created a PR that clarifies how to make successful custom user settings and use in sketches:

github.com/wolfSSL/wolf...

@wolfssl.bsky.social
Source Code: #ifndef WOLFSSL_USER_SETTINGS #define WOLFSSL_USER_SETTINGS #endif #include <Arduino.h> /* wolfSSL user_settings.h must be included from settings.h * * Make all configurations changes in user_settings.h * * Do not edit wolfSSL `settings.h` or `config.h` files. * * Do not explicitly include user_settings.h in any source code. * * Each Arduino sketch that uses wolfSSL must have: #include "wolfssl.h" * * C/C++ source files can use: #include <wolfssl/wolfcrypt/settings.h> * * The wolfSSL "settings.h" must be included in each source file using wolfSSL. * * The wolfSSL "settings.h" must be listed before any other wolfSSL include. */ #include <wolfssl/wolfcrypt/settings.h> #include <wolfssl/ssl.h> README See Getting Started with wolfSSL on Arduino, wolfSSL features are enabled and disabled in the user_settings.h file. The user_settings.h file is found in the <Arduino>/libraries/wolfssl/src directory. For Windows this is typically C:\Users\%USERNAME%\Documents\Arduino\libraries\wolfssl\src For Mac: ~/Documents/Arduino/libraries/wolfssl/src For Linux: ~/Arduino/libraries/wolfssl/src Tips for success: The WOLFSSL_USER_SETTINGS macro must be defined project-wide. (see wolfssl.h) Apply any customizations only to user_settings.h; Do not edit wolfSSL settings.h or configh.h files. Do not explicitly include user_settings.h in any source file. For every source file that uses wolfssl, include wolfssl/wolfcrypt/settings.h before any other wolfSSL include, typically via #include "wolfssl.h". See the wolfSSL docs for details on build configuration macros.
January 26, 2025 at 10:44 PM
bleepingcomputer.com
A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures.
Critical flaw in wolfSSL library enables forged certificate use
A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures.
www.bleepingcomputer.com
April 13, 2026 at 7:56 PM
linuxjedi.co.uk
This year for #FOSDEM I gave a demonstration of wolfSSL cryptographic benchmarks on the wolfDemo board I designed.
Question for next year, should I demo it on an Amiga instead? 🙂
February 2, 2026 at 12:46 PM
gojimmypi.bsky.social
The wolfSSL v5.7.6 update for Arduino is currently in review and should be available soon in the Arduino IDE. It can also be installed manually at any time.

@wolfssl.bsky.social

github.com/wolfSSL/Ardu...
wolfssl 5.7.6 Release for Arduino by gojimmypi · Pull Request #12 · wolfSSL/Arduino-wolfSSL
wolfSSL Release 5.7.6 (Dec 31, 2024) The published version of wolfSSL for Arduino when running wolfssl-arduino.sh for wolfSSL v5.7. 6: wolfssl-arduino.sh INSTALL /mnt/c/workspace/Arduino-wolfSSL-$...
github.com
January 28, 2025 at 2:40 AM
bagder.mastodon.social.ap.brid.gy
Apache httpd, curl, Django, Firefox, glibc, GnuTLS, Haproxy, libssh, Linux kernel, python, Temporal, Wireshark, wolfSSL

More?
April 7, 2026 at 8:15 AM
gojimmypi.bsky.social
Official wolfSSL Arduino!

github.com/wolfSSL/Ardu...
February 16, 2024 at 5:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-87922
📊 6.3/10
🏢 wolfSSL

📝 wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87922

#cybersecurity #infosec #cve #euvd
September 27, 2026 at 11:01 AM
euvd-bot.bsky.social
🚨 EUVD-2026-87908
📊 2.3/10
🏢 wolfSSL

📝 When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for any peer cert...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87908

#cybersecurity #infosec #cve #euvd
September 27, 2026 at 10:01 AM
euvd-bot.bsky.social
🚨 EUVD-2026-87923
📊 8.3/10
🏢 wolfSSL

📝 In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certifi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87923

#cybersecurity #infosec #cve #euvd
September 27, 2026 at 11:01 AM
gojimmypi.bsky.social
I'm giving another webinar soon! I'll be sharing some of my tips and suggestions. Hope to see you there. 😎

"Getting Started with wolfSSL Using Visual Studio 2022"

February 19, 2025
10:00 AM Pacific time

us02web.zoom.us/webinar/regi...
Getting Started with wolfSSL Using Visual Studio 2022 Date & TimeFeb 19, 2025 10:00 AM in DescriptionLooking to secure your applications and boost your development skills? Join our free webinar on “Getting Started with wolfSSL Using Visual Studio 2022” and learn how to integrate wolfSSL’s powerful TLS library with Visual Studio 2022 for secure, high-performance development. What You'll Learn: - What is wolfSSL? Discover the power of the TLS library and how it secures communications for applications across platforms. - What is Visual Studio 2022? Learn how to leverage Visual Studio’s advanced features for seamless development and debugging. - Where are wolfSSL and Visual Studio used? Explore practical use cases, including Windows apps, embedded systems, and beyond. - How is wolfSSL Customized? Learn how to tailor wolfSSL to meet the specific needs of your development projects.
February 7, 2025 at 3:14 AM