提交 · 8b0d4242404f9e5da26e7594fa0864b2df4601af · OpenHarmony / Third Party Openssl

05 3月, 2017 2 次提交

A
apps/s_client.c: harden ldap_ExtendedResponse_parse. · 8b0d4242
由 Andy Polyakov 提交于 3月 02, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
Reviewed-by: NRichard Levitte <levitte@openssl.org>
```
8b0d4242

Fix a memory leak on an error path · 312e9387

由 Matt Caswell 提交于 3月 04, 2017

A leak of an SSL_SESSION object can occur when decoding a psk extension on
an error path when using TLSv1.3
Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2843)

312e9387

04 3月, 2017 6 次提交

Ensure we don't call memcpy with a NULL pointer · d0808664

由 Matt Caswell 提交于 3月 03, 2017

Commit d5aa14dd simplified the bn_expand_internal() and BN_copy() functions.
Unfortunately it also removed some checks which are still required,
otherwise we call memcpy passing in NULL which is not allowed.
Reviewed-by: NTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2836)

d0808664

Update and add test · 8336ca13

由 Dr. Stephen Henson 提交于 3月 03, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

8336ca13

D
Set specific error is we have no valid signature algorithms set · 5528d68f
由 Dr. Stephen Henson 提交于 3月 03, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)
```
5528d68f

Signature algorithm enhancement. · b0e9ab95

由 Dr. Stephen Henson 提交于 3月 03, 2017

Change tls12_sigalg_allowed() so it is passed a SIGALG_LOOKUP parameter,
this avoids multiple lookups.

When we copy signature algorithms return an error if no valid TLS message
signing algorithm is present. For TLS 1.3 this means we need at least one
signature algorithm other than RSA PKCS#1 or SHA1 both of which can only be
used to sign certificates and not TLS messages.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

b0e9ab95

Disallow zero length signature algorithms · 8f12296e

由 Dr. Stephen Henson 提交于 3月 03, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

8f12296e

Don't allow DSA for TLS 1.3 · 224b4e37

由 Dr. Stephen Henson 提交于 3月 01, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2840)

224b4e37

03 3月, 2017 32 次提交

use OSSLzu instead of lu format for size_t display · dbaa069a

由 edelangh 提交于 2月 17, 2017

CLA: trivial
Reviewed-by: NRichard Levitte <levitte@openssl.org>
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2660)

dbaa069a

Reset executable bits on files where not needed. · d7345822

由 Bernd Edlinger 提交于 3月 03, 2017

Reviewed-by: NMatt Caswell <matt@openssl.org>
Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2835)

d7345822

Update the cipher(1) documentation to explicitly state that the RSA cipher · f2bcff43

由 Pauli 提交于 3月 02, 2017

string means the same a kRSA.
Reviewed-by: NAndy Polyakov <appro@openssl.org>
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2821)

f2bcff43

sh_malloc & sh_free prototype change to match POSIX · 332dc4fa

由 Rich Salz 提交于 3月 02, 2017

CLA: trivial
Reviewed-by: NAndy Polyakov <appro@openssl.org>
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2823)

332dc4fa

Silence some more clang warnings · 42f50fdf

由 Matt Caswell 提交于 3月 03, 2017

Reviewed-by: NTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2832)

42f50fdf

Silence some clang warnings · 30d1bab1

由 Matt Caswell 提交于 3月 02, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2831)

30d1bab1

M
More early data documentation updates following feedback · 83750d9b
由 Matt Caswell 提交于 3月 02, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
83750d9b
M
Update the API documentation for the latest early data changes · cd9f7f62
由 Matt Caswell 提交于 3月 02, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
cd9f7f62

Update early data API for writing to unauthenticated clients · 09f28874

由 Matt Caswell 提交于 3月 02, 2017

Change the early data API so that the server must use
SSL_write_early_data() to write to an unauthenticated client.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

09f28874

Rename SSL_write_early() to SSL_write_early_data() · 0665b4ed

由 Matt Caswell 提交于 3月 02, 2017

This is for consistency with the rest of the API where all the functions
are called *early_data*.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

0665b4ed

Rename SSL_read_early() to SSL_read_early_data() · f533fbd4

由 Matt Caswell 提交于 3月 02, 2017

This is for consistency with the rest of the API where all the functions
are called *early_data*.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

f533fbd4

Updates to the early data documentation · ef466acc

由 Matt Caswell 提交于 2月 28, 2017

Following on from the latest API changes.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

ef466acc

M
Updates to s_server and s_client for the latest early_data API changes · ade1e888
由 Matt Caswell 提交于 2月 27, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
ade1e888
M
Make SSL_write_early_finish() an internal only function · 3eaa4170
由 Matt Caswell 提交于 2月 27, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
3eaa4170

Add early_data tests · 5f982038

由 Matt Caswell 提交于 2月 27, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

5f982038

M
Various fixes required to allow SSL_write/SSL_read during early data · f7e393be
由 Matt Caswell 提交于 2月 27, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
f7e393be
M
Enable the server to call SSL_write() without stopping the ability to call SSL_read_early() · d7f8783f
由 Matt Caswell 提交于 2月 25, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
d7f8783f
M
Enable the client to call SSL_read() without stopping the ability to call SSL_write_early() · 564547e4
由 Matt Caswell 提交于 2月 25, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
564547e4

Introduce a new early_data state in the state machine · 4004ce5f

由 Matt Caswell 提交于 2月 25, 2017

Also simplifies the state machine a bit.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

4004ce5f

M
Improve the early data sanity check in SSL_do_handshake() · bc908c67
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
bc908c67
M
Add documentation for the new s_client and s_server early_data options · 6437b802
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
6437b802
M
Tighten sanity checks when calling early data functions · 0a5ece5b
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
0a5ece5b

Add documentation for the early data functions · fd6c1025

由 Matt Caswell 提交于 2月 24, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

fd6c1025

Make SSL_get_early_data_status() take a const · f5b519c4

由 Matt Caswell 提交于 2月 24, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

f5b519c4

M
Make SSL_get_max_early_data() and SSL_CTX_get_max_early_data() take a const · 46dcb945
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
46dcb945

Add a SSL_SESSION_get_max_early_data() function · fcc47578

由 Matt Caswell 提交于 2月 24, 2017

Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

fcc47578

M
Don't attempt to write more early_data than we know the server will accept · 7daf7156
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
7daf7156
M
Only accept early_data if the negotiated ALPN is the same · f6370040
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
f6370040
M
Skip early_data if appropriate after a HelloRetryRequest · a832b5ef
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
a832b5ef
M
Don't accept early_data if we are going to issue a HelloRetryRequest · 38df5a45
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
38df5a45

Add extra validation parsing the server-to-client early_data extension · 538bea6c

由 Matt Caswell 提交于 2月 24, 2017

Check that we actually resumed the session, and that we selected the first
identity.
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)

538bea6c

M
Remove some TLSv1.3 TODOs that are no longer relevant · 329114f9
由 Matt Caswell 提交于 2月 24, 2017
```
Reviewed-by: NRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
```
329114f9

OpenHarmony / Third Party Openssl 大约 1 年 前同步成功

OpenHarmony / Third Party Openssl
大约 1 年前同步成功