提交 · 383e9ade2b0e8333c8a5907fe4ca73d38f9ca465 · OpenHarmony / Third Party Openssl

01 2月, 2017 5 次提交
- R
  bntests.txt: add a couple of checks of possibly negative zero · 383e9ade
  由 Richard Levitte 提交于 2月 01, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2335)
```
  383e9ade
- R
  bntest: do not stop on first fautl encountered · 24dc7fe0
  由 Richard Levitte 提交于 2月 01, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2335)
```
  24dc7fe0
- R
  bntest: make sure file_rshift tests BN_rshift1 as well when appropriate · ceac1975
  由 Richard Levitte 提交于 2月 01, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2335)
```
  ceac1975
- R
  bntest: make sure that equalBN takes note of negative zero · 26141bab
  由 Richard Levitte 提交于 2月 01, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2335)
```
  26141bab
- R
  Add -Wno-parentheses-equality to dev-warnings. · 77305338
  由 Rich Salz 提交于 1月 30, 2017
```
Also fix a block comment formatting glitch.
Reviewed-by: NTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2327)
```
  77305338
31 1月, 2017 10 次提交

由 Dr. Stephen Henson 提交于 1月 30, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)

f1adb006

Remove peer_md and use peer_sigalg instead. · 6cbebb55

由 Dr. Stephen Henson 提交于 1月 30, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)

6cbebb55

Simplify sigalgs code. · 44b6318f

由 Dr. Stephen Henson 提交于 1月 30, 2017

Remove unnecessary lookup operations: use the indices and data in the
lookup table directly.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)

44b6318f

Add digest and key indices to table. · 17ae384e

由 Dr. Stephen Henson 提交于 1月 30, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)

17ae384e

D
Don't check certificate type against ciphersuite for TLS 1.3 · 05b8486e
由 Dr. Stephen Henson 提交于 1月 30, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)
```
05b8486e

Add TLS 1.3 signing curve check · 8f88cb53

由 Dr. Stephen Henson 提交于 1月 30, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)

8f88cb53

D
Only allow PSS signatures with RSA keys and TLS 1.3 · 2b4418eb
由 Dr. Stephen Henson 提交于 1月 30, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)
```
2b4418eb
D
Store table entry to peer signature algorithm. · f742cda8
由 Dr. Stephen Henson 提交于 1月 30, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2324)
```
f742cda8
M
Free up the memory for the NewSessionTicket extensions · 33d93417
由 Matt Caswell 提交于 1月 30, 2017
```
Reviewed-by: NKurt Roeckx <kurt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2326)
```
33d93417

Make sure we free and cleanse the pms value in all code paths · c8ab3a46

由 Matt Caswell 提交于 1月 30, 2017

Otherwise we get a memory leak.
Reviewed-by: NKurt Roeckx <kurt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2326)

c8ab3a46

30 1月, 2017 25 次提交

Update macros. · 787ebcaf

由 Dr. Stephen Henson 提交于 1月 29, 2017

Use TLS_MAX_SIGALGCNT for the maximum number of entries in the
signature algorithms array.

Use TLS_MAX_SIGSTRING_LEN for the maxiumum length of each signature
component instead of a magic number.
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

787ebcaf

fix style issues · 91410d40

由 Dr. Stephen Henson 提交于 1月 29, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

91410d40

Fix TLS 1.2 and no sigalgs. · cdf516d9

由 Dr. Stephen Henson 提交于 1月 29, 2017

For TLS 1.2 if we have no signature algorithms extension then lookup
using the complete table instead of (empty) shared signature algorithms
list so we pick up defaults.
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

cdf516d9

Use PSS for simple test so TLS 1.3 handhake is successful. · d8979bdd

由 Dr. Stephen Henson 提交于 1月 28, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

d8979bdd

Add tests for client and server signature type · a92e710b

由 Dr. Stephen Henson 提交于 1月 27, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

a92e710b

Add test support for TLS signature types. · 54b7f2a5

由 Dr. Stephen Henson 提交于 1月 27, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

54b7f2a5

Update documentation · a593cffe

由 Dr. Stephen Henson 提交于 1月 27, 2017

Add details of the use of PSS for signature algorithms.

Document SSL_get_peer_signature_nid() and SSL_get_peer_signature_type_nid().
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

a593cffe

make update · 377c5e98

由 Dr. Stephen Henson 提交于 1月 27, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

377c5e98

Replace TLS_SIGALGS with SIGALG_LOOKUP · 4d43ee28

由 Dr. Stephen Henson 提交于 1月 26, 2017

Since every supported signature algorithm is now an entry in the
SIGALG_LOOKUP table we can replace shared signature algortihms with
pointers to constant table entries.
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

4d43ee28

Support TLS 1.3 signature scheme names. · 8a43a42a

由 Dr. Stephen Henson 提交于 1月 26, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

8a43a42a

Extend TLS 1.3 signature table. · edbfba1a

由 Dr. Stephen Henson 提交于 1月 26, 2017

Add additional entries in the TLS 1.2 signature table to include
the name, sig and hash NID (if any) and required curve (if any).
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

edbfba1a

Use shared signature algorithm list to find type. · 018031fa

由 Dr. Stephen Henson 提交于 1月 26, 2017

Lookup the signature type in the shared list: we can use this to
use PSS if the peer supports it for TLS 1.2.
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

018031fa

Add SSL_get_peer_signature_type_nid() function. · 42ef7aea

由 Dr. Stephen Henson 提交于 1月 25, 2017

Add function to retrieve signature type: in the case of RSA
keys the signature type can be EVP_PKEY_RSA or EVP_PKEY_RSA_PSS.
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

42ef7aea

Store peer signature type. · 5554facb

由 Dr. Stephen Henson 提交于 1月 25, 2017

Store peer signature type in s->s3->tmp.peer_sigtype and check it
to see if the peer used PSS.
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

5554facb

More complete PSS support. · b2eb6998

由 Dr. Stephen Henson 提交于 1月 25, 2017

Extend support for PSS key signatures by using the EVP_PKEY_RSA_PSS type
to distinguish them from PKCS1 signature types.

Allow setting of PSS signature algorithms using the string "PSS" or
"RSA-PSS".
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

b2eb6998

Use uint16_t for signature scheme. · 98c792d1

由 Dr. Stephen Henson 提交于 1月 25, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

98c792d1

use RSA_PSS_SALTLEN_DIGEST constant · 968ae5b3

由 Dr. Stephen Henson 提交于 1月 25, 2017

Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2301)

968ae5b3

Expand comment in tls_process_hello_req() · 1f04f23e