Ech draft 13a#1

Open

peacey wants to merge 1351 commits intopeacey:openssl-3.0.7+quicfrom

sftcd:ECH-draft-13a

This pull request is big! We're only showing the most recent 250 commits

Commits on Apr 12, 2022

Commits on Apr 13, 2022

Check the return of EVP_KDF_fetch()

0x9527-zhou
authored and
t8m
committed

Commits on Apr 19, 2022

fix some typos

cuishuang
authored and
t8m
committed
doc: Clarify that calling SSL_set_session(ssl, NULL) is a correct use case.

EasySec
authored and
t8m
committed
evp_test: Try computing MACs twice with reinitialization of EVP_MAC_CTX
t8m
committed
Avoid undefined behavior of provided macs on EVP_MAC reinitialization
t8m
committed
Do a prelimary check for numbers in openssl prime command.

faramir-dev
authored and
t8m
committed
Fix small typo in X509v3_get_ext_by_NID() man page

EasySec
authored and
t8m
committed

Commits on Apr 21, 2022

Fix wild pointer dereference in make_ocsp_response()

zhou1615
authored and
t8m
committed
Fix a possible NULL pointer dereference in create_cert_store()

zhou1615
authored and
t8m
committed
Clear incorrectly reported errors in cms_io.

faramir-dev
authored and
t8m
committed
Fix gcc 6.3 builds of aarch64 BSAES

tom-cosgrove-arm
authored and
t8m
committed

Commits on Apr 25, 2022

Add support for new release commit review requirement bypass

hlandau
authored and
t8m
committed
Fix bug in OPENSSL_LH_flush

hlandau
authored and
t8m
committed
Use .s extension for ia64 assembler

jon-oracle
authored and
t8m
committed

Commits on Apr 26, 2022

Clear unused variables in X509_print_ex()

kyrie-z
authored and
t8m
committed
pem_password_cb(3): References to other man pages

EasySec
authored and
t8m
committed
Move ossl_deinit_casecmp to the end of OPENSSL_cleanup()

matbech
authored and
t8m
committed

Commits on May 3, 2022

md5: add assembly implementation for aarch64

AWSjswinney
authored and
paulidale
committed
Acceleration of chacha20 on aarch64 by SVE

daniel-hu-arm
authored and
paulidale
committed
Fix OCSP_basic_verify signer certificate validation
mattcaswell
committed
Test ocsp with invalid responses and the "-no_cert_checks" option
mattcaswell
committed
Fix the RC4-MD5 cipher
mattcaswell
committed
c_rehash: Do not use shell to invoke openssl

t8m
authored and
mattcaswell
committed
Update Paul's pgp key signature

paulidale
authored and
mattcaswell
committed
Update CHANGES and NEWS for new release
mattcaswell
committed
Update copyright year
mattcaswell
committed
CHANGES.md: Attribute the OPENSSL_LH_flush() fix properly

t8m
authored and
mattcaswell
committed

Commits on May 5, 2022

Commits on May 6, 2022

Commits on May 9, 2022

Header file cleanup for C++20 header-units

urnathan
authored and
paulidale
committed
Exclude IPv6 code using OPENSSL_USE_IPV6 instead of AF_INET6

maxbachmann
authored and
paulidale
committed
Add documentation for key validation that indicates the difference between the

slontis
authored and
paulidale
committed
Add a testcase for OSSL_PROVIDER_unload() being fully effective

t8m
authored and
paulidale
committed
doc: Fix RSA public key parameters

jeljeli
authored and
paulidale
committed
Correct padding mode flag name for EVP_PKEY_decrypt/encrypt() examples

dimitry-unified-streaming
authored and
paulidale
committed
EVP_PKEY_Q_keygen: Call OPENSSL_init_crypto to init strcasecmp
t8m
committed
evp_md: assert digest is provided for algctx reuse
kaduk
committed
remove legacy VxWorks workaround

maxbachmann
authored and
t8m
committed
Fix leakage when the cacheline is 32-bytes in CBC_MAC_ROTATE_IN_PLACE

basavesh
authored and
t8m
committed

Commits on May 10, 2022

Commits on May 11, 2022

Add riscv64 asm_arch to linux64-riscv64 target

henrybrausen
authored and
paulidale
committed
Make IV/buf in prov_cipher_ctx_st aligned

ZenithalHourlyRate
authored and
t8m
committed
Add quotes around perl scripts

keithc-ca
authored and
t8m
committed

Commits on May 12, 2022

Commits on May 13, 2022

Commits on May 16, 2022

Commits on May 17, 2022

Commits on May 18, 2022

add support for SHA-3 based PRF to PBES2

tomato42
authored and
beldmit
committed
add tests for PBKDF2 with SHA-3

tomato42
authored and
beldmit
committed
Documentation: X509_V_ERR_CERT_CHAIN_TOO_LONG is not unused

bellebaum
authored and
t8m
committed
Use --release in dev/release.sh

hlandau
authored and
t8m
committed

Commits on May 19, 2022

Fix coverity 1504433: unchecked return value
paulidale
committed
Prepare NonStop for fixed-size integer types.

rsbeckerca
authored and
paulidale
committed
Add AES implementation in generic riscv64 asm

henrybrausen
authored and
paulidale
committed
Add basic RISC-V cpuid and OPENSSL_riscvcap

henrybrausen
authored and
paulidale
committed
Add clmul-based gmult for riscv64 with Zbb, Zbc

henrybrausen
authored and
paulidale
committed
Add BSWAP4/BSWAP8 routines for riscv64 with Zbb

henrybrausen
authored and
paulidale
committed
mdl: Don't enforce one space after list markers
levitte
committed
openssl-ca.pod.in: Minor grammar fix

snorfalorpagus
authored and
t8m
committed

Commits on May 21, 2022

ossl_namemap_name2_num: Avoid unnecessary OPENSSL_strndup().

t8m
authored and
beldmit
committed
Drop ossl_namemap_add_name_n() and simplify ossl_namemap_add_names()

t8m
authored and
beldmit
committed
performance: improve ossl_lh_strcasehash

paulidale
authored and
beldmit
committed

Commits on May 23, 2022

Avoid potential OOB if width > sizeof(start)

BenBE
authored and
paulidale
committed
Avoid unchecked string concatenation

BenBE
authored and
paulidale
committed
Disable 82-test_tfo_cli if tfo is not enabled.

rsbeckerca
authored and
paulidale
committed
Apply the AES-GCM unroll8 optimization patch to Neoverse N2

xkqian
authored and
paulidale
committed
Fix a crash in asn1_item_embed_new
bernd-edlinger
committed
Fix regression in default key length for Blowfish CFB and OFB ciphers
t8m
committed
Test the default key length of the Blowfish ciphers
t8m
committed
Add more SRTP protection profiles

Syracusa
authored and
t8m
committed

Commits on May 24, 2022

Commits on May 26, 2022

Fix check of dtls1_process_record

PeiweiHu
authored and
paulidale
committed
Fix the defective check of EVP_PKEY_get_params

PeiweiHu
authored and
paulidale
committed

Commits on May 27, 2022

Fix the incorrect checks of EVP_CIPHER_CTX_set_key_length

PeiweiHu
authored and
t8m
committed
Fix the incorrect checks of EVP_CIPHER_CTX_rand_key

PeiweiHu
authored and
t8m
committed
Fix the check of UI_method_set_ex_data

PeiweiHu
authored and
t8m
committed
QUIC wire format support

hlandau
authored and
t8m
committed
Don't include sys/select.h on HP-UX as it doesn't exist

tomhughes
authored and
t8m
committed
Revert "Use .s extension for ia64 assembler"
t8m
committed
Generate the preprocessed .s files for chacha and poly 1305 on ia64
t8m
committed
Configurations/gentemplate.pm: Generate generators too, when necessary

levitte
authored and
t8m
committed
Actually implement UnsafeLegacyServerConnect as documented
t8m
committed
The -no_legacy_server_connect option applies to client
t8m
committed
Check that UnsafeLegacyServerConnect option exists
t8m
committed
Make running individual ssl-test easier
tmshort
committed

Commits on May 28, 2022

Fix visual glitch in non-verbose test output
bernd-edlinger
committed

Commits on May 31, 2022

noting squash future and agiletest.sh ok
sftcd
committed

Commits on Jun 2, 2022

Fix code format: BLOCK_CIPHER_custom

jiuhaizhang
authored and
paulidale
committed
Fix the erroneous checks of EVP_PKEY_CTX_set_group_name

PeiweiHu
authored and
t8m
committed
Fix the checks of EVP_PKEY_CTX_get/set_rsa_pss_saltlen

PeiweiHu
authored and
t8m
committed
Fix the check of evp_pkey_ctx_set_params_strict

PeiweiHu
authored and
t8m
committed
Fix the checks of EVP_PKEY_CTX_set/get_* functions

PeiweiHu
authored and
t8m
committed
Fix a decoder mem leak on an error path
mattcaswell
committed
Fix another decoder mem leak on an error path
mattcaswell
committed
Fix a memory leak is ossl_provider_doall_activated
mattcaswell
committed
Don't call ossl_provider_free() without first setting refcnt
mattcaswell
committed
Fix possible null pointer dereference of evp_pkey_get_legacy()

zhou1615
authored and
t8m
committed
CTLOG_new_ex: Fix copy&paste error when setting propq
t8m
committed
Fix the checks of RAND_bytes

PeiweiHu
authored and
tmshort
committed
Fix the checks of EVP_PKEY_check

PeiweiHu
authored and
tmshort
committed
Fix the checks of EVP_PKEY_pairwise_check

PeiweiHu
authored and
tmshort
committed
Fix the checks of EVP_PKEY_public_check

PeiweiHu
authored and
tmshort
committed
Fix the checks of EVP_PKEY_private_check

PeiweiHu
authored and
tmshort
committed
Fix the checks of UI_add_input_string

PeiweiHu
authored and
tmshort
committed
Fix the checks of EVP_PKEY_param_check

PeiweiHu
authored and
tmshort
committed
Fix the checks of BIO_get_cipher_status

PeiweiHu
authored and
tmshort
committed
Add Windows VERSIONINFO resource to fips provider dll.

slontis
authored and
tmshort
committed
Add VERSIONINFO resource to legacy provider if it is not builtin

slontis
authored and
tmshort
committed
Revert unnecessary PKCS7_verify() performance optimization

nyx191
authored and
t8m
committed

Commits on Jun 3, 2022

Configure: Add disablable for QUIC, disabled by default

t8m
authored and
paulidale
committed
Add OSSL_QUIC methods to headers and manual pages

t8m
authored and
paulidale
committed
Add empty implementations of quic method functions

t8m
authored and
paulidale
committed
First working empty protocol test

t8m
authored and
paulidale
committed
Add a test_ssl_new testcase

t8m
authored and
paulidale
committed
CI: Add enable-quic to some of the builds

t8m
authored and
paulidale
committed
Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config

t8m
authored and
paulidale
committed
Fix strict client chain check with TLS-1.3
t8m
committed
Change the SCT issuer key to RSA 2048
bernd-edlinger
committed
rename from hpke_kg -> OSSL_HPKE_kg etc.
sftcd
committed
remerged with upstream
sftcd
committed
fix missing static
sftcd
committed
document API name changes
sftcd
committed

Commits on Jun 8, 2022

Commits on Jun 10, 2022

many tweaks to make check-formal.pl (almost entirely) happy
sftcd
committed

Commits on Jul 9, 2022

Commits on Jul 11, 2022

change guard
sftcd
committed

Commits on Jul 14, 2022

Commits on Jul 15, 2022

Commits on Jul 16, 2022

Commits on Jul 23, 2022

Commits on Aug 3, 2022

fix case of only one input
sftcd
committed

Commits on Aug 10, 2022

force test scripts to IPv4 temporarily
sftcd
committed

Commits on Aug 11, 2022

tidy up HTTPS RR TargetName parsing a bit
sftcd
committed

Commits on Aug 18, 2022

note rebasing of lighttpd
sftcd
committed

Commits on Aug 26, 2022

part way through late aug PR comments
sftcd
committed

Commits on Aug 27, 2022

moar progress on late aug PR comments
sftcd
committed

Commits on Aug 28, 2022

moved to WPACKET for extract/expand
sftcd
committed

Commits on Sep 2, 2022

updated hpke with new api (though not yet using new apis)
sftcd
committed

Commits on Sep 5, 2022

end of night
sftcd
committed

Commits on Sep 6, 2022

new HPKE API (not yet used her) and moved test code to it's own test case
sftcd
committed

Commits on Nov 11, 2022