This project is mirrored from https://github.com/openssl/openssl.git.
Pull mirroring failed .
Last successful update .
Last successful update .
- 11 Mar, 2021 5 commits
-
-
Matt Caswell authored
Reviewed-by:Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
-
Vincent Drake authored
Fixes #13914 The "SRWLock" synchronization primitive is available in Windows Vista and later. CRYPTO_THREAD functions now use SRWLock functions when the target operating system supports them. Reviewed-by:
Paul Dale <pauli@openssl.org> Reviewed-by:
Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14381)
-
panda authored
CLA: trivial Reviewed-by:
Shane Lontis <shane.lontis@oracle.com> Reviewed-by:
Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14469)
-
Pedro Monreal authored
Reviewed-by:
-
- 10 Mar, 2021 11 commits
-
-
Pauli authored
Reviewed-by:
-
Pauli authored
Reviewed-by:
-
Pauli authored
Providers (particularly the FIPS provider) needs access to BIOs from libcrypto. Libcrypto is allowed to change the internal format of the BIO structure and it is still expected to work with providers that were already built. This means that the libcrypto BIO must be distinct from and not castable to the provider side OSSL_CORE_BIO. Unfortunately, this requirement was broken in both directions. This fixes things by forcing the two to be different and any casts break loudly. Reviewed-by:
-
Shane Lontis authored
Fixes #13185 Fixes #13352 Removed the existing code in file_store that was trying to figure out the input type. Reviewed-by:
-
Shane Lontis authored
This allows BIO_tell() and BIO_seek() to work for BIO's that do not support these methods. The main use case for this is file/fd BIO's that use stdin. This works for stdin taken from input redirection (command < file), and stdin via pipe (cat file | command). Reviewed-by:
-
Tomas Mraz authored
Reviewed-by:
David von Oheimb <david.von.oheimb@siemens.com> (Merged from https://github.com/openssl/openssl/pull/14450)
-
Tomas Mraz authored
Use the modern defaults as now set in the pkcs12 app. This also allows modifying the application to not override the default values when calling the API. Fixes #14034 Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
Tim Hudson <tjh@openssl.org> Reviewed-by:
-
Matt Caswell authored
As well as SSL 3, TLS 1.0, TLS 1.1 and DTLS 1.0 not working at security level 1 we also document that TLS 1.2 connection will fail if the ClientHello does not have a signature algorithms extension. Fixes #14447 Reviewed-by:
-
Matt Caswell authored
The function OSSL_STORE_INFO_get_type() may now return a new object type. Applications may have to be amended accordingly. Fixes #14446 Reviewed-by:
-
Matt Caswell authored
Numerous ciphers and digests have been moved to the legacy provider. There should be a CHANGES.md entry pointing this out. Fixes #14441 Reviewed-by:
-
- 09 Mar, 2021 9 commits
-
-
Dmitry Belyavskiy authored
Fixes #14466. Reverting the changes of the EVP_PKEY_get0 function. Reviewed-by:
-
Arthur Gautier authored
CLA: trivial Signed-off-by:
Arthur Gautier <baloo@superbaloo.net> Reviewed-by:
-
Alistair Francis authored
This is a fixup for the original commit 5b5e2985 "Add support for io_pgetevents_time64 syscall" that didn't correctly work for 32-bit architecutres with a 64-bit time_t that aren't RISC-V. For a full discussion of the issue see: https://github.com/openssl/openssl/commit/5b5e2985f355c8e99c196d9ce5d02c15bebadfbcSigned-off-by:
Alistair Francis <alistair.francis@wdc.com> Reviewed-by:
-
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
Reviewed-by:
-
Shane Lontis authored
A trivial PR to remove some commonly repeated words. It looks like this is not the first PR to do this. Reviewed-by:
-
Tomas Mraz authored
Just print a warning in that case. Reviewed-by:
-
Tomas Mraz authored
Report error message with hint to use -nomacver if MAC verification is not required. Reviewed-by:
-
Tomas Mraz authored
The MAC requires PKCS12KDF support which is not present in FIPS provider as it is not an approved KDF algorithm. Suggest using -nomac if MAC is not required. Fixes #14057 Reviewed-by:
-
- 08 Mar, 2021 8 commits
-
-
Armin Fuerst authored
Reviewed-by:
-
Matt Caswell authored
If we have TLSv1.3 enabled then we must have at least one TLSv1.3 capable group available. This check was not always working Reviewed-by:
Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/14430)
-
Matt Caswell authored
OTC have decided that the EVP_PKEY_get0* functions should have a const return type. This is a breaking change to emphasise that these values should be considered as immutable. Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Most of these were already deprecated but a few have been missed. This commit corrects that. Fixes #14303 Fixes #14317 Reviewed-by:
-
Matt Caswell authored
If someone calls an EVP_PKEY_get0*() function then we create a legacy key and cache it in the EVP_PKEY - but it doesn't become an "origin" and it doesn't ever get updated. This will be documented as a restriction of the EVP_PKEY_get0*() function with provided keys. Fixes #14020 Reviewed-by:
-
Matt Caswell authored
Make sure we were sucessful in creating an EVP_PKEY Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
- 06 Mar, 2021 7 commits
-
-
Dmitry Belyavskiy authored
Fixes #14440 Before IANA assigned the official codes for the GOST signature algorithms in TLS, the values from the Reserved for Private Use range were in use in Russia. The old values were renamed. Reviewed-by:
-
Dr. David von Oheimb authored
Also because this better reflects that usually also the public portion is used. Retaining the old -signkey as an alias for backward compatibility. Reviewed-by:
-
Dr. David von Oheimb authored
This fixes also failure behavior of OSSL_HTTP_REQ_CTX_sendreq_d2i(), OCSP_sendreq_nbio(), etc. Fixes #14322 Reviewed-by:
-
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
This is a follow-up on #12615. Reviewed-by:
-
Dr. David von Oheimb authored
Supersedes #11877. Also make order in NAME section consistent. Reviewed-by:
-
