openbsd, branch bluhm_20181106 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=bluhm_20181106 2018-11-07T01:08:50+00:00 This commit was manufactured by cvs2git to create tag 'bluhm_20181106'. 2018-11-07T01:08:50+00:00 cvs2svn admin@example.com 2018-11-07T01:08:50+00:00 urn:sha1:2035faf3f8aa95b888d9416c3cc7328c0ea18beb Test TLS interoperability between LibreSSL and OpenSSL. 2018-11-07T01:08:49+00:00 bluhm 2018-11-07T01:08:49+00:00 urn:sha1:be03b61c1b8f59ccdd34dbe5f6c6b30de697d28b Implement simple SSL client and server in C. Create four binaries by linking them with LibreSSL or OpenSSL. This way API compatibility is tested. Connect and accept with netcat to test protocol compatibility with libtls. Currently OpenSSL 1.0.2p from ports is used. Plan is to move to OpenSSL 1.1 and and test TLS 1.3. idea from beck@; help from jsing@ Add TLS extension type values for TLSv1.3 (under guards). 2018-11-06T20:48:08+00:00 jsing 2018-11-06T20:48:08+00:00 urn:sha1:29618fb6c2a365d42aec39a074aba2f6dc4934d9 ok tb@ Use TLS_CA_CERT_FILE instead of a separate define. 2018-11-06T20:41:11+00:00 jsing 2018-11-06T20:41:11+00:00 urn:sha1:5b8cabaeb0bc8cca139fc6efd8423cf50026cd9c ok beck@ bluhm@ tb@ Define TLS_CA_CERT_FILE rather than having every application create their 2018-11-06T20:34:54+00:00 jsing 2018-11-06T20:34:54+00:00 urn:sha1:c572182382f504af52f71f2197c113d5be045376 own define for /etc/ssl/cert.pem. ok beck@ bluhm@ tb@ better failure printing, add more checks 2018-11-06T13:17:42+00:00 tb 2018-11-06T13:17:42+00:00 urn:sha1:d4d488dd1a5260b9f19da50bebc02a443766a680 rm FILES section; prompted by Janne Johansson 2018-11-06T12:02:30+00:00 otto 2018-11-06T12:02:30+00:00 urn:sha1:5d838dc0559b16a793e70b18d3dcfd5333d6f131 Use the new vm.malloc_conf sysctl; ok millert@ deraadt@ 2018-11-06T08:01:43+00:00 otto 2018-11-06T08:01:43+00:00 urn:sha1:52e134b55189ae3ed6f9d641d33333d4ca8df7a4 unrevert the use of bn_rand_interval(). 2018-11-06T07:02:33+00:00 tb 2018-11-06T07:02:33+00:00 urn:sha1:b1f2fa8da88f8be2fe7d6d9d2b8308537fcfb408 ok beck jsing Unset Z_is_zero after applying coordinate blinding and 2018-11-06T06:59:25+00:00 tb 2018-11-06T06:59:25+00:00 urn:sha1:5733d08d40f3af89bccdede48bc95c6b840c337a re-enable coordinate blinding. ok jsing