Various fixes

[Frauschi]

Hardening and correctness fixes for certificate, TLS, and crypto paths

A set of defensive fixes across several subsystems, each in its own commit with an accompanying regression test:

• PKCS7: stricter checks in the OpenSSL-compat verify path
• Cert manager: tighten key-usage handling for chain-supplied intermediates
• TLS: validate negotiated certificate type more strictly
• TLS 1.3: harden the post-handshake authentication path
• SP math: correct ECDH shared-secret output-buffer length checks (regenerated across all backends from the generator)
• BIO: guard the memory read path against non-positive lengths

All changes are covered by new unit tests; full test suite passes. Fixes findings 1, 2, 3, 6, 12, and 29 of zd21992. Needs https://github.com/wolfSSL/scripts/pull/588.

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m3

• FLASH: .text +12 B (+0.0%, 121,409 B / 262,144 B, total: 46% used)

gcc-arm-cortex-m4-tls12

• FLASH: .text +64 B (+0.1%, 122,189 B / 262,144 B, total: 47% used)
  No memory changes detected for:
• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard
• stm32-sim-stm32h753

[Frauschi]

Needs https://github.com/wolfSSL/scripts/pull/588

[JacobBarthelmeh]

wolfssl/tests/api/test_ossl_x509_str.c:1540:10: warning: Although the value stored to 'sz' is used in the enclosing expression, the value is never actually read from 'sz' [clang-analyzer-deadcode.DeadStores]
if ((sz = wc_MakeCert(&cert, out, (word32)outMax, subjKey, NULL, rng)) < 0)
^    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
wolfssl/tests/api/test_ossl_x509_str.c:1540:10: note: Although the value stored to 'sz' is used in the enclosing expression, the value is never actually read from 'sz'
if ((sz = wc_MakeCert(&cert, out, (word32)outMax, subjKey, NULL, rng)) < 0)
^    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
wolfssl/tests/api/test_ossl_x509_str.c:1569:10: warning: Although the value stored to 'sz' is used in the enclosing expression, the value is never actually read from 'sz' [clang-analyzer-deadcode.DeadStores]
if ((sz = wc_MakeCert(&cert, out, (word32)outMax, leafKey, NULL, rng)) < 0)
^    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
wolfssl/tests/api/test_ossl_x509_str.c:1569:10: note: Although the value stored to 'sz' is used in the enclosing expression, the value is never actually read from 'sz'
if ((sz = wc_MakeCert(&cert, out, (word32)outMax, leafKey, NULL, rng)) < 0)
^    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10702

Scan targets checked: wolfcrypt-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅

[JacobBarthelmeh]

Retest this please Jenkins CAVP test make check failure "wolfSSL error: port number cannot be 0"