openbsd, branch OPENBSD_6_1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_1 2017-07-07T05:28:12+00:00 bump to LibreSSL 2.5.5 2017-07-07T05:28:12+00:00 bcook 2017-07-07T05:28:12+00:00 urn:sha1:7c1ae0c2db0b39e5d90006f24fa25f4604e66ceb MFC: 2017-07-05T15:20:10+00:00 jsing 2017-07-05T15:20:10+00:00 urn:sha1:feb94eff46d1e20e763538e7c90bce84d3f77f0c Distinguish between self-issued certificates and self-signed certificates. The certificate verification code has special cases for self-signed certificates and without this change, self-issued certificates (which it seems are common place with openvpn/easyrsa) were also being included in this category. ok inoguchi@ MFC. 2017-04-29T23:41:32+00:00 jsing 2017-04-29T23:41:32+00:00 urn:sha1:2e2c612066aa993717528a0249c15c51128d61cb Fix a bug caused by the return value being set early to signal successful DTLS cookie validation. This can mask a later failure and result in a positive return value being returned from ssl3_get_client_hello(), when it should return a negative value to propagate the error. ok beck@ bump to 2.5.4 2017-04-29T19:56:13+00:00 bcook 2017-04-29T19:56:13+00:00 urn:sha1:bf2fe265fd160275c9eca0019826aa7429b4307e MFC: Switch Linux getrandom() usage to non-blocking mode, continuing to 2017-04-29T18:57:00+00:00 beck 2017-04-29T18:57:00+00:00 urn:sha1:31ffdd5ba23d21e2b740719d3dac97e688a4b6ba use fallback mechanims if unsuccessful. The design of Linux getrandom is broken. It has an uninitialized phase coupled with blocking behaviour, which is unacceptable from within a library at boot time without possible recovery. ok deraadt@ jsing@ MFC: Revert previous change that forced consistency between return value and 2017-04-28T23:12:04+00:00 beck 2017-04-28T23:12:04+00:00 urn:sha1:cdf4cf08d2e93100e1a22a6692600fd75605c23c error code, since this breaks the documented API. Under certain circumstances this will result in incorrect successful certiticate verification (where a user supplied callback always returns 1, and later code checks the error code to potentially abort post verification) bump version for stable release 2017-04-06T10:36:12+00:00 bcook 2017-04-06T10:36:12+00:00 urn:sha1:64b3abe0b1f8fd17aae1e1c99e9057a72a63be3c This commit was manufactured by cvs2git to create branch 'OPENBSD_6_1'. 2017-03-29T17:38:39+00:00 cvs2svn admin@example.com 2017-03-29T17:38:39+00:00 urn:sha1:2873e303c7fa2e8a6d552f9bcbbf534bdf85a245 rephrase more enumerations of functions 2017-03-29T17:38:37+00:00 otto 2017-03-29T17:38:37+00:00 urn:sha1:9b70fef2d1e89724fe0cef8cc6bf7eb8e8ed4209 tweak previous; 2017-03-29T00:24:42+00:00 jmc 2017-03-29T00:24:42+00:00 urn:sha1:566b15588d1c49bbd944fea3da94fcf285215959