openssl - OpenGrok history log for /openssl

Revision (<<< Hide revision tags) (Show revision tags >>>)	Date	Author	Comments (<<< Hide modified files) (Show modified files >>>)
fd0d5932	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: RFC 9000 s. 17.2.2: Enforce no initial token from server Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul QUIC CONFORMANCE: RFC 9000 s. 17.2.2: Enforce no initial token from server Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_channel.c
08cb9a83	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: Enforce packet header reserved bits Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.o QUIC CONFORMANCE: Enforce packet header reserved bits Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_channel.c
5b9452e0	06-Jun-2023	Hugo Landau	QUIC WIRE: Allow encoding/decoding of reserved header bits Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@open QUIC WIRE: Allow encoding/decoding of reserved header bits Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/quic_wire_pkt.h ssl/quic/quic_txp.c ssl/quic/quic_wire_pkt.c test/quic_record_test.c test/quic_record_test_util.h
22f21fbd	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: RFC 9000 s. 13.3: MAX_STREAM_DATA generation Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@ QUIC CONFORMANCE: RFC 9000 s. 13.3: MAX_STREAM_DATA generation Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_stream_map.c ssl/quic/quic_txp.c
96fa10f3	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: RFC 9000 s. 12.5: Application CONNECTION_CLOSE frame masking Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: P QUIC CONFORMANCE: RFC 9000 s. 12.5: Application CONNECTION_CLOSE frame masking Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_txp.c
8d2e353d	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: RFC 9000 s. 12.5: Ensure CFQ can not be used to send disallowed frame types in a given PN space Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <m QUIC CONFORMANCE: RFC 9000 s. 12.5: Ensure CFQ can not be used to send disallowed frame types in a given PN space Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_txp.c
5a1b1d2b	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: RFC 9000 s. 12.3: PN Limit Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> ( QUIC CONFORMANCE: RFC 9000 s. 12.3: PN Limit Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_channel.c
dfe5e7fa	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: RFC 9000 s. 12.3: PN duplicate suppression Make sure PN duplicate suppression is side-channel safe by doing the duplicate test after AEAD verification. Reviewe QUIC CONFORMANCE: RFC 9000 s. 12.3: PN duplicate suppression Make sure PN duplicate suppression is side-channel safe by doing the duplicate test after AEAD verification. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/quic_record_rx.h ssl/quic/quic_channel.c ssl/quic/quic_record_rx.c
85bbef27	06-Jun-2023	Hugo Landau	QUIC ACKM: Clarify the role of is_inflight Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Me QUIC ACKM: Clarify the role of is_inflight Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/quic_ackm.h ssl/quic/quic_ackm.c
6c1d0e28	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: Enforce minimal frame type encoding Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.o QUIC CONFORMANCE: Enforce minimal frame type encoding Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/packet_quic.h include/internal/quic_wire.h ssl/quic/quic_rx_depack.c ssl/quic/quic_trace.c ssl/quic/quic_txp.c ssl/quic/quic_wire.c test/helpers/quictestlib.c test/helpers/quictestlib.h test/quic_txp_test.c test/quic_wire_test.c test/quicfaultstest.c
0911cb4a	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: Packet handling fixes Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merge QUIC CONFORMANCE: Packet handling fixes Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/quic_wire_pkt.h ssl/quic/quic_channel.c ssl/quic/quic_rx_depack.c
7e3fa44f	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: Handle RESET_STREAM final size correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@open QUIC CONFORMANCE: Handle RESET_STREAM final size correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_stream_map.c ssl/quic/quic_txp.c
2cc0e2dd	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: Validate RESET_STREAM final sizes correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@o QUIC CONFORMANCE: Validate RESET_STREAM final sizes correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/quic_stream_map.h ssl/quic/quic_rx_depack.c ssl/quic/quic_stream_map.c
c407d5e5	06-Jun-2023	Hugo Landau	QUIC: Note that we do not retransmit stream data for retransmitted streams Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul QUIC: Note that we do not retransmit stream data for retransmitted streams Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_fifd.c
28d0e35c	06-Jun-2023	Hugo Landau	QUIC QSM: Free unneeded stream buffers, calculate RESET_STREAM final size correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed- QUIC QSM: Free unneeded stream buffers, calculate RESET_STREAM final size correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_stream_map.c ssl/quic/quic_txp.c test/quic_txp_test.c
418e122c	06-Jun-2023	Hugo Landau	QUIC QSM: Model final sizes and handle STOP_SENDING correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@o QUIC QSM: Model final sizes and handle STOP_SENDING correctly Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/quic_fc.h include/internal/quic_stream_map.h ssl/quic/quic_fc.c ssl/quic/quic_rx_depack.c ssl/quic/quic_stream_map.c ssl/quic/quic_txp.c
01715f2b	06-Jun-2023	Hugo Landau	QUIC CONFORMANCE: RFC 9000 s. 3.3: Stream States — Permitted Frame Types — STREAM Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by QUIC CONFORMANCE: RFC 9000 s. 3.3: Stream States — Permitted Frame Types — STREAM Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... ssl/quic/quic_txp.c
2f018d14	06-Jun-2023	Hugo Landau	QUIC QSM/STREAM: Refactor to use RFC stream states Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> QUIC QSM/STREAM: Refactor to use RFC stream states Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21135) show more ... include/internal/quic_stream_map.h ssl/quic/quic_channel.c ssl/quic/quic_impl.c ssl/quic/quic_rx_depack.c ssl/quic/quic_stream_map.c ssl/quic/quic_tserver.c ssl/quic/quic_txp.c test/quic_multistream_test.c test/quic_txp_test.c
64b1d2fb	13-Jul-2023	ljuzwiuk	Fix RSA OAEP set/get label for legacy engine Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Paul Dale <pauli@openssl.org> (M Fix RSA OAEP set/get label for legacy engine Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21401) show more ... crypto/evp/ctrl_params_translate.c crypto/rsa/rsa_pmeth.c
f1b7243c	11-Jul-2023	ljuzwiuk	Remove duplicated values Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://g Remove duplicated values Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21401) show more ... test/build.info
29f25a10	11-Jul-2023	Matt Caswell	Test loading a PEM file from multiple threads The new decoder optimisation has some locking involved so we confirm that reading a PEM file from multiple threads works as expected. Test loading a PEM file from multiple threads The new decoder optimisation has some locking involved so we confirm that reading a PEM file from multiple threads works as expected. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21426) show more ... test/threadstest.c
32d3c3ab	10-Jul-2023	Matt Caswell	Optimise PKEY decoders The most expensive part of using a PKEY decoder is the OSSL_DECODER_CTX_new_for_pkey() call. This builds up all of the decoder chains, which is a complex and t Optimise PKEY decoders The most expensive part of using a PKEY decoder is the OSSL_DECODER_CTX_new_for_pkey() call. This builds up all of the decoder chains, which is a complex and time consuming operation. However, if no new providers have been loaded/unloaded since the last time it was called we can expect the same results for the same parameters. Note that this operation takes place before we event parse the data for decoding so it is not dependent on the parsed data at all. We introduce a cache for OSSL_DECODER_CTX objects. If we have been called with the same parameters then we just duplicate an existing OSSL_DECODER_CTX. This should be significantly faster than creating a new one every time. Partially addressed the issue in #15199 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21426) show more ... crypto/context.c crypto/encode_decode/decoder_lib.c crypto/encode_decode/decoder_pkey.c crypto/evp/evp_fetch.c crypto/provider_core.c include/crypto/decoder.h include/internal/cryptlib.h include/internal/decoder.h providers/implementations/storemgmt/file_store.c
1e398bec	07-Jul-2023	Tomas Mraz	Add CHANGES.md and NEWS.md entries for CVE-2023-2975 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/o Add CHANGES.md and NEWS.md entries for CVE-2023-2975 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21384) show more ... CHANGES.md NEWS.md
3993bb0c	04-Jul-2023	Tomas Mraz	Add testcases for empty associated data entries with AES-SIV Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/o Add testcases for empty associated data entries with AES-SIV Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21384) show more ... test/recipes/30-test_evp_data/evpciph_aes_siv.txt
c426c281	04-Jul-2023	Tomas Mraz	Do not ignore empty associated data with AES-SIV mode The AES-SIV mode allows for multiple associated data items authenticated separately with any of these being 0 length. The p Do not ignore empty associated data with AES-SIV mode The AES-SIV mode allows for multiple associated data items authenticated separately with any of these being 0 length. The provided implementation ignores such empty associated data which is incorrect in regards to the RFC 5297 and is also a security issue because such empty associated data then become unauthenticated if an application expects to authenticate them. Fixes CVE-2023-2975 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21384) show more ... providers/implementations/ciphers/cipher_aes_siv.c
1...<<101 102 103 104 105106107 108 109 110 >>...1443