提交 · 312e9387fddacbcef4148bd3ace25c7db89e374e · OpenHarmony / Third Party Openssl

05 3月, 2017 1 次提交

Fix a memory leak on an error path · 312e9387

由 Matt Caswell 提交于 3月 04, 2017

A leak of an SSL_SESSION object can occur when decoding a psk extension on
an error path when using TLSv1.3
Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2843)

312e9387

04 3月, 2017 6 次提交

Ensure we don't call memcpy with a NULL pointer · d0808664

由 Matt Caswell 提交于 3月 03, 2017

Commit d5aa14dd simplified the bn_expand_internal() and BN_copy() functions.
Unfortunately it also removed some checks which are still required,
otherwise we call memcpy passing in NULL which is not allowed.
Reviewed-by: NTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2836)

d0808664

Update and add test · 8336ca13

由 Dr. Stephen Henson 提交于 3月 03, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

8336ca13

D
Set specific error is we have no valid signature algorithms set · 5528d68f
由 Dr. Stephen Henson 提交于 3月 03, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)
```
5528d68f

Signature algorithm enhancement. · b0e9ab95

由 Dr. Stephen Henson 提交于 3月 03, 2017

Change tls12_sigalg_allowed() so it is passed a SIGALG_LOOKUP parameter,
this avoids multiple lookups.

When we copy signature algorithms return an error if no valid TLS message
signing algorithm is present. For TLS 1.3 this means we need at least one
signature algorithm other than RSA PKCS#1 or SHA1 both of which can only be
used to sign certificates and not TLS messages.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

b0e9ab95

Disallow zero length signature algorithms · 8f12296e

由 Dr. Stephen Henson 提交于 3月 03, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

8f12296e

Don't allow DSA for TLS 1.3 · 224b4e37

由 Dr. Stephen Henson 提交于 3月 01, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

224b4e37

03 3月, 2017 33 次提交

use OSSLzu instead of lu format for size_t display · dbaa069a

由 edelangh 提交于 2月 17, 2017

CLA: trivial
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2660)

dbaa069a

Reset executable bits on files where not needed. · d7345822

由 Bernd Edlinger 提交于 3月 03, 2017

Reviewed-by: NMatt Caswell <matt@openssl.org>
Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2835)

d7345822

Update the cipher(1) documentation to explicitly state that the RSA cipher · f2bcff43

由 Pauli 提交于 3月 02, 2017

string means the same a kRSA.
Reviewed-by: NAndy Polyakov <appro@openssl.org>
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2821)

f2bcff43

sh_malloc & sh_free prototype change to match POSIX · 332dc4fa

由 Rich Salz 提交于 3月 02, 2017

CLA: trivial
Reviewed-by: NAndy Polyakov <appro@openssl.org>
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2823)

332dc4fa

Silence some more clang warnings · 42f50fdf

由 Matt Caswell 提交于 3月 03, 2017

Reviewed-by: NTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2832)

42f50fdf

Silence some clang warnings · 30d1bab1

由 Matt Caswell 提交于 3月 02, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2831)

30d1bab1

M
More early data documentation updates following feedback · 83750d9b
由 Matt Caswell 提交于 3月 02, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
83750d9b
M
Update the API documentation for the latest early data changes · cd9f7f62
由 Matt Caswell 提交于 3月 02, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
cd9f7f62

Update early data API for writing to unauthenticated clients · 09f28874

由 Matt Caswell 提交于 3月 02, 2017

Change the early data API so that the server must use
SSL_write_early_data() to write to an unauthenticated client.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

09f28874

Rename SSL_write_early() to SSL_write_early_data() · 0665b4ed

由 Matt Caswell 提交于 3月 02, 2017

This is for consistency with the rest of the API where all the functions
are called *early_data*.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

0665b4ed

Rename SSL_read_early() to SSL_read_early_data() · f533fbd4

由 Matt Caswell 提交于 3月 02, 2017

This is for consistency with the rest of the API where all the functions
are called *early_data*.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

f533fbd4

Updates to the early data documentation · ef466acc

由 Matt Caswell 提交于 2月 28, 2017

Following on from the latest API changes.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

ef466acc

M
Updates to s_server and s_client for the latest early_data API changes · ade1e888
由 Matt Caswell 提交于 2月 27, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
ade1e888
M
Make SSL_write_early_finish() an internal only function · 3eaa4170
由 Matt Caswell 提交于 2月 27, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
3eaa4170

Add early_data tests · 5f982038

由 Matt Caswell 提交于 2月 27, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

5f982038

M
Various fixes required to allow SSL_write/SSL_read during early data · f7e393be
由 Matt Caswell 提交于 2月 27, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
f7e393be
M
Enable the server to call SSL_write() without stopping the ability to call SSL_read_early() · d7f8783f
由 Matt Caswell 提交于 2月 25, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
d7f8783f
M
Enable the client to call SSL_read() without stopping the ability to call SSL_write_early() · 564547e4
由 Matt Caswell 提交于 2月 25, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
564547e4

Introduce a new early_data state in the state machine · 4004ce5f

由 Matt Caswell 提交于 2月 25, 2017

Also simplifies the state machine a bit.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

4004ce5f

M
Improve the early data sanity check in SSL_do_handshake() · bc908c67
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
bc908c67
M
Add documentation for the new s_client and s_server early_data options · 6437b802
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
6437b802
M
Tighten sanity checks when calling early data functions · 0a5ece5b
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
0a5ece5b

Add documentation for the early data functions · fd6c1025