b908ec0f | 25-Nov-2022 |
Dr. David von Oheimb |
cmp_client_test.c: add tests for end_time being initialized for RR/GENM To this end, tweak the internal handling of ctx->total_timeout. Reviewed-by: Tomas Mraz <tomas@openssl.org>
cmp_client_test.c: add tests for end_time being initialized for RR/GENM To this end, tweak the internal handling of ctx->total_timeout. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from https://github.com/openssl/openssl/pull/19391)
show more ...
|
5acd4007 | 25-Nov-2022 |
Dr. David von Oheimb |
CMP docs: clarify behavior on message/total timeout values given Clarify behavior of OSSL_CMP_CTX_set_option() when given (negative) values for OSSL_CMP_OPT_MSG_TIMEOUT or OSSL_CMP_OPT_T
CMP docs: clarify behavior on message/total timeout values given Clarify behavior of OSSL_CMP_CTX_set_option() when given (negative) values for OSSL_CMP_OPT_MSG_TIMEOUT or OSSL_CMP_OPT_TOTAL_TIMEOUT. Fix doc of -msg_timeout and -total_timeout in openssl-cmp.pod.in Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from https://github.com/openssl/openssl/pull/19391)
show more ...
|
2bde260a | 20-Jan-2023 |
Thib |
Fixes wrong return type in BIO_do_connect man page. Current man page indicates the function returns an int while it returns a long. Fixes #20096. CLA: trivial
Fixes wrong return type in BIO_do_connect man page. Current man page indicates the function returns an int while it returns a long. Fixes #20096. CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20097)
show more ...
|
a2b01ae1 | 21-Jan-2023 |
Niels Dossche |
Fix incorrect check on RAND_bytes_ex() in generate_q_fips186_4() RAND_bytes_ex() can also return 0 on failure. Other callers do check this correctly. Change the check from <0 to <=0.
Fix incorrect check on RAND_bytes_ex() in generate_q_fips186_4() RAND_bytes_ex() can also return 0 on failure. Other callers do check this correctly. Change the check from <0 to <=0. Fixes: #20100 CLA: trivial Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20106)
show more ...
|
1d857945 | 18-Jan-2023 |
Ingo Franzki |
Allow OSSL_SIGNATURE_PARAM_NONCE_TYPE to be retrieved Context parameter OSSL_SIGNATURE_PARAM_NONCE_TYPE can now also be retrieved for ECDSA and DSA. Signed-off-by: Ingo Franzki
Allow OSSL_SIGNATURE_PARAM_NONCE_TYPE to be retrieved Context parameter OSSL_SIGNATURE_PARAM_NONCE_TYPE can now also be retrieved for ECDSA and DSA. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20070)
show more ...
|
c3bd630d | 19-Dec-2020 |
David Carlier |
Adding a separated build settings for BSD flavors to avoid inheriting Linux's linker flags (ie -Wl,-z,defs) now targetting OpenBSD. Reviewed-by: Hugo Landau <hlandau@openssl.org>
Adding a separated build settings for BSD flavors to avoid inheriting Linux's linker flags (ie -Wl,-z,defs) now targetting OpenBSD. Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13393)
show more ...
|
c9466f38 | 13-Jan-2023 |
Richard Levitte |
bn2bin(): Don't accept len < 0 Test included Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl
bn2bin(): Don't accept len < 0 Test included Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20033)
show more ...
|
15192335 | 12-Jan-2023 |
Richard Levitte |
Add a test for public variants of bn2bin() We test with binary input of length 1, length 0, and NULL input with length 0 Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by:
Add a test for public variants of bn2bin() We test with binary input of length 1, length 0, and NULL input with length 0 Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20033)
show more ...
|
1b24b5a1 | 12-Jan-2023 |
Richard Levitte |
bin2bn(): When len==0, just return a zero BIGNUM This allows calls with s==NULL and len==0 to be safe. It probably already was, but address sanitizers could still complain. Rev
bin2bn(): When len==0, just return a zero BIGNUM This allows calls with s==NULL and len==0 to be safe. It probably already was, but address sanitizers could still complain. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20033)
show more ...
|
7331e7ef | 18-Jan-2023 |
ValdikSS |
Padlock: fix byte swapping assembly for AES-192 and 256 Byte swapping code incorrectly uses the number of AES rounds to swap expanded AES key, while swapping only a single dword in a loo
Padlock: fix byte swapping assembly for AES-192 and 256 Byte swapping code incorrectly uses the number of AES rounds to swap expanded AES key, while swapping only a single dword in a loop, resulting in swapped key and partially swapped expanded keys, breaking AES encryption and decryption on VIA Padlock hardware. This commit correctly sets the number of swapping loops to be done. Fixes #20073 CLA: trivial Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20077)
show more ...
|
69d6ecb7 | 18-Jan-2023 |
Pauli |
Add link to EBNF definition Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Add link to EBNF definition Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/20023)
show more ...
|
543ac2f0 | 15-Jan-2023 |
Pauli |
Add negative test for unquoted property string Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Shane Lontis <shane.lont
Add negative test for unquoted property string Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/20023)
show more ...
|
9866200b | 11-Jan-2023 |
Pauli |
Correct property EBNF for unquoted strings Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@o
Correct property EBNF for unquoted strings Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/20023)
show more ...
|
091f532e | 18-Jan-2023 |
Hugo Landau |
QUIC Test Server: Minor fixups Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734) |
64222fc0 | 30-Nov-2022 |
Hugo Landau |
QUIC DEMUX: Refactor list manipulation Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1
QUIC DEMUX: Refactor list manipulation Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
f42781ad | 22-Nov-2022 |
Hugo Landau |
QUIC Test Server: Basic echo server test Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull
QUIC Test Server: Basic echo server test Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
51a168b8 | 22-Nov-2022 |
Hugo Landau |
QUIC Test Server Implementation Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734) |
b1b06da2 | 22-Nov-2022 |
Hugo Landau |
QUIC CHANNEL: Add basic server support for testing Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/op
QUIC CHANNEL: Add basic server support for testing Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
3c567a52 | 22-Nov-2022 |
Hugo Landau |
QUIC CHANNEL: Transport params: Offer reason text and add server support Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https:/
QUIC CHANNEL: Transport params: Offer reason text and add server support Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
7f9d1249 | 22-Nov-2022 |
Hugo Landau |
QUIC TXP: Fix generation of CONNECTION_CLOSE CONNECTION_CLOSE frames can be generated on multiple ELs, so the TX packetiser was generating it on multiple ELs simultaneously. This fixes
QUIC TXP: Fix generation of CONNECTION_CLOSE CONNECTION_CLOSE frames can be generated on multiple ELs, so the TX packetiser was generating it on multiple ELs simultaneously. This fixes the CONNECTION_CLOSE generation logic so that the lowest non-dropped EL is always used. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
af8b52cf | 22-Nov-2022 |
Hugo Landau |
QUIC Front-End I/O API: Fix WANT_READ signalling for SSL_read Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com
QUIC Front-End I/O API: Fix WANT_READ signalling for SSL_read Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
e30c502a | 22-Nov-2022 |
Hugo Landau |
QUIC Front-End I/O API: Fix implementation of SSL_get_error Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/o
QUIC Front-End I/O API: Fix implementation of SSL_get_error Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
4e392f60 | 22-Nov-2022 |
Hugo Landau |
QUIC QRX: (Server support) Add support for manual URXE injection Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.
QUIC QRX: (Server support) Add support for manual URXE injection Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
b83cf3fc | 22-Nov-2022 |
Hugo Landau |
QUIC DHS: (Server support) Add server state machine for DHS Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/o
QUIC DHS: (Server support) Add server state machine for DHS Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|
93e9b6cc | 22-Nov-2022 |
Hugo Landau |
QUIC DEMUX: (Server support) Add support for default handler Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/
QUIC DEMUX: (Server support) Add support for default handler Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19734)
show more ...
|