openbsd/src/lib/libcrypto, branch OPENBSD_6_7_BASE

Bump LibreSSL version to 3.1.1

2020-05-06T15:45:22+00:00

ok bcook inoguchi deraadt

Disallow setting the AES-GCM IV length to 0

2020-04-30T18:43:11+00:00

It is possible to do this by abusing the EVP_CTRL_INIT API. Pointed out by jsing. ok inoguchi jsing (as part of a larger diff)

Disallow the use of zero length IVs in AES-GCM via

2020-04-27T19:31:02+00:00

EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key. Issue reported and fix tested by Guido Vranken. ok beck, jsing This commit adds a constant to a public header despite library lock, as discussed with deraadt and sthen.

sync cert.pem with Mozilla's root ca list, ok beck@

2020-04-10T12:13:17+00:00

When printing the serialNumber, fall back to the colon separated hex

2020-04-10T07:05:24+00:00

bytes in case ASN1_INTEGER_get() failed. This happens more often since asn1/a_int.c -r1.34. Matches OpenSSL behavior. Issue in openssl x509 -text output reported by sthen ok jsing sthen

Void functions obviously do not return values; no need to elaborate.

2020-03-29T17:05:02+00:00

Patch from Martin Vahlensieck .

Be concise: do not say that void functions return no values, that's obvious.

2020-03-28T22:40:58+00:00

Useless text reported by Martin Vahlensieck (academicsolutions.ch) on tech@.

Fix ASN1 print functions

2020-03-24T10:46:38+00:00

Check and print out boolean type properly. Based on OpenSSL commit ad72d9fdf7709ddb97a58d7d45d755e6e0504b96. Reduced unneeded parentheses from if condition. Check return value from i2s_ASN1_INTEGER. Based on OpenSSL commit 5e3553c2de9a365479324b8ba8b998f0cce3e527. Added if condition expression and return 0 if NULL is returned. ok tb@

Check high bit for base64 decode

2020-03-04T11:53:21+00:00

Referred to this OpenSSL commit and adopted to the codebase. b785504a10310cb2872270eb409b70971be5e76e suggest and ok tb@

Fix base64 processing of long lines

2020-03-03T15:03:14+00:00

Fix the problem that long unbroken line of base64 text is not decoded. Referred to this OpenSSL commit and adapted to the codebase. 3cdd1e94b1d71f2ce3002738f9506da91fe2af45 Reported by john.a.passaro gmail.com to the LibreSSL ML. ok tb@