- Sep 04, 2018
-
-
Matt Caswell authored
If we have selected a ciphersuite using RSA key exchange then we must not attempt to use an RSA-PSS cert for that. Fixes #7059 Reviewed-by:
Paul Dale <paul.dale@oracle.com> Reviewed-by:
Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7099)
-
Matt Caswell authored
Add a test to check that we create the correct number of tickets after a TLSv1.3 PSK. Reviewed-by:
Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7097)
-
Matt Caswell authored
Treat a connection using an external PSK like we would a resumption and send a single NewSessionTicket afterwards. Fixes #6941 Reviewed-by:
-
Matt Caswell authored
They did not make it clear how the memory management works for the |pctx| parameter. Fixes #7037 Reviewed-by:
-
Matt Caswell authored
If a client sends data to a server and then immediately closes without waiting to read the NewSessionTickets then the server can receive EPIPE when trying to write the tickets and never gets the opportunity to read the data that was sent. Therefore we ignore EPIPE when writing out the tickets in TLSv1.3 Fixes #6904 Reviewed-by:
-
Jakub Wilk authored
The default input format is PEM, so explicit "-inform DER" is needed to read DER-encoded CRL. CLA: trivial Reviewed-by:
Paul Yang <yang.yang@baishancloud.com> Reviewed-by:
Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7094)
-
- Sep 03, 2018
-
-
Alex Gaynor authored
Reviewed-by:
-
Pauli authored
Added NIST test cases for these two as well. Additionally deprecate the public definiton of HMAC_MAX_MD_CBLOCK in 1.2.0. Reviewed-by:
Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6972)
-
Paulo Flabiano Smorigo authored
Add make clean for evp demos and remove whitespace from a line. CLA: trivial Reviewed-by:
-
Pauli authored
Reviewed-by:
-
Shane Lontis authored
Reviewed-by:
Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> Reviewed-by:
-
Billy Brumley authored
Reviewed-by:
-
Billy Brumley authored
Reviewed-by:
-
wzhang authored
Add one more unit test case Reviewed-by:
-
Richard Levitte authored
They add a single item, so the names give a false impression of what they do, making them hard to remember. Better to give them a somewhat better name. Fixes #6930 Reviewed-by:
-
Paul Kehrer authored
Reviewed-by:
-
Paul Kehrer authored
fixes #7081 Reviewed-by:
-
Pauli authored
Reviewed-by:
-
- Sep 02, 2018
-
-
Pauli authored
Reviewed-by:
-
Eric Brown authored
This trivial patch removes a duplicated call to ASN1_INTEGER_set. Fixes Issue #6977 Signed-off-by:
Eric Brown <browne@vmware.com> Reviewed-by:
Andy Polyakov <appro@openssl.org> Reviewed-by:
-
- Sep 01, 2018
-
-
Matt Caswell authored
Fixes #6490 Reviewed-by:
-
Erik Forsberg authored
Fixes #6994 Reviewed-by:
-
Hubert Kario authored
Add or update the documentation of the different man pages in relation to TLSv1.3 behaviour. Reviewed-by:
Ben Kaduk <kaduk@mit.edu> Reviewed-by:
-
- Aug 31, 2018
-
-
Andy Polyakov authored
IBM POWER Open Source Ecosystem division asserts commitment to providing more reliable service. GH#7016. This reverts commit 275bfc56 . Reviewed-by:
-
- Aug 30, 2018
-
-
Matt Caswell authored
Thanks to @fangang190 for reporting this Fixes #7061 Reviewed-by:
-
Matt Caswell authored
Thanks to @fangang190 for reporting this issue. Fixes #7060 Reviewed-by:
-
- Aug 29, 2018
-
-
ymlbright authored
asn1_encode has two form length octets: short form(1 byte), long form(1+n byte). CLA: Trivial Reviewed-by:
Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by:
-
- Aug 26, 2018
-
-
Andy Polyakov authored
Reviewed-by:
Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/6996)
-
Andy Polyakov authored
Reviewed-by:
-
- Aug 24, 2018
-
-
Andy Polyakov authored
-path is non-portable extension, fortunately it's possible to express .git subdirectory exclusion with -prune. Reviewed-by:
-
Paul Yang authored
Reviewed-by:
-
Dmitry Belyavskiy authored
Reviewed-by:
-
- Aug 23, 2018
-
-
Andy Polyakov authored
Reviewed-by:
-
Andy Polyakov authored
Reviewed-by:
-
Andy Polyakov authored
In [most common] case of p and q being of same width, it's possible to replace CRT modulo operations with Montgomery reductions. And those are even fixed-length Montgomery reductions... Reviewed-by:
-
Andy Polyakov authored
Add bn_{mul|sqr}_fixed_top, bn_from_mont_fixed_top, bn_mod_sub_fixed_top. Switch to bn_{mul|sqr}_fixed_top in bn_mul_mont_fixed_top and remove memset in bn_from_montgomery_word. Reviewed-by: -
Kurt Roeckx authored
Reviewed-by: -
parasssh authored
CLA: trivial Reviewed-by:
-
- Aug 22, 2018
-
-
Matthias Kraft authored
The shared libraries are now stored as members of archives, as it is usual on AIX. To correctly address this the custom dladdr()-implementation as well as the dlfcn_load() routine need to be able to cope with such a construct: libname.a(libname.so). Signed-off-by:
Matthias Kraft <Matthias.Kraft@softwareag.com> Reviewed-by:
-
Andy Polyakov authored
It was assumed that CRYPTO_THREAD_LOCAL is universally scalar type, which doesn't appear to hold true. Reviewed-by:
-
