openbsd, branch libressl-v3.4.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.4.2 2021-11-24T09:28:56+00:00 In some situations, the verifier would discard the error on an unvalidated 2021-11-24T09:28:56+00:00 tb 2021-11-24T09:28:56+00:00 urn:sha1:0f0b16dc977f6ca499f0f4540078d992c96da597 certificate chain. This would happen when the verification callback was in use, instructing the verifier to continue unconditionally. This could lead to incorrect decisions being made in software. This is patches/common/006_x509.patch.sig This commit was manufactured by cvs2git to create branch 'OPENBSD_7_0'. 2021-09-30T18:16:13+00:00 cvs2svn admin@example.com 2021-09-30T18:16:13+00:00 urn:sha1:d7513e7d4daf94905fd4cb0a5e5c89109d2874f7 Fix appstest.sh for testing with OpenSSL 3.0 2021-09-20T10:45:01+00:00 inoguchi 2021-09-20T10:45:01+00:00 urn:sha1:cf3478857e894a95e502f01cb78a2e36749b72e8 - Fix 'Server Temp Key' check to work with both words "P-384" and "secp384r1". - Test TLSv1 and TLSv1.1 only if OpenSSL version is 1.x. Switch two calls from memset() to explicit_bzero() 2021-09-19T09:15:22+00:00 tb 2021-09-19T09:15:22+00:00 urn:sha1:f7454b8bede1be416adc77267c65bdcb40ee9f98 This matches the documented behavior more obviously and ensures that these aren't optimized away, although this is unlikely. Discussed with deraadt and otto At least t_fork and t_vfork tests need coredumps enabled to succeed. 2021-09-19T08:20:04+00:00 claudio 2021-09-19T08:20:04+00:00 urn:sha1:1377a15fedcd957ed14732db959a3c76892b80a6 Add ulimit -c unlimited before running the tests like it is done in other places in regress. OK bluhm@ Implement flushing for TLSv1.3 handshakes. 2021-09-16T19:25:30+00:00 jsing 2021-09-16T19:25:30+00:00 urn:sha1:30d2e422df85a55715b7f1da39294259d57b2b4f When we finish sending a flight of records, flush the record layer output. This effectively means calling BIO_flush() on the wbio. Some things (such as apache2) have custom BIOs that perform buffering and do not actually send on BIO_write(). Without BIO_flush() the server thinks it has sent data and starts receiving records, however the client never sends records since it never received those that the server should have sent. Joint work with tb@ ok tb@ bump to LibreSSL 3.4.1 2021-09-15T17:14:26+00:00 tb 2021-09-15T17:14:26+00:00 urn:sha1:87ad048671e38be9ceea42ed9e24726a49a0167b Avoid typedef redefinition 2021-09-14T23:07:18+00:00 inoguchi 2021-09-14T23:07:18+00:00 urn:sha1:76f3844ea887613e8a6df2ccc1f84d9ac93169b3 "typedef struct ssl_st SSL;" is defined in ossl_typ.h. This reverts part of r1.204. ok tb@ Add missing void to definition of http_init(). 2021-09-14T16:37:20+00:00 tb 2021-09-14T16:37:20+00:00 urn:sha1:754c6031403524bc1e6720ad57276c759275f554 ok deraadt florian zap trailing white space 2021-09-14T14:35:09+00:00 tb 2021-09-14T14:35:09+00:00 urn:sha1:746c55aa543d6248b92ed473eba70fcb07059390