openbsd/src/lib/libssl/ssl_cert.c, branch OPENBSD_6_8_BASE

Handle GOST in ssl_cert_dup().

2020-06-05T17:55:24+00:00

Add missing case entry for SSL_PKEY_GOST01. Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.

2020-05-19T16:35:21+00:00

Some time prior to SSLeay 0.8.1b, SSL_PKEY_RSA_SIGN got added with the intention of handling RSA sign only certificates... this incomplete code had the following comment: /* check to see if this is a signing only certificate */ /* EAY EAY EAY EAY */ And while the comment was removed in 2005, the incomplete RSA sign-only handling has remained ever since. Remove SSL_PKEY_RSA_SIGN and rename SSL_PKEY_RSA_ENC to SSL_PKEY_RSA. While here also remove the unused SSL_PKEY_DH_RSA. ok tb@

s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there is

2019-05-15T09:13:16+00:00

no need to check for it. Fixes COV-165788, identified with help from Alex Bumstead. ok jsing@

Avoid leak in SSL_dup_CA_list()

2019-04-13T18:04:05+00:00

In the case that X509_NAME_dup() succeeds, but sk_X509_NAME_push() fails, name is leaked. The entire function is trying to be clever and therefore hard to follow. Let's do it the stupid but safe way. ok jsing

Strip out all of the pkey to sigalg and sigalg to pkey linkages.

2019-03-25T17:33:26+00:00

These are no longer used now that we defer signature algorithm selection. ok beck@

Add a chain member to CERT_PKEY and provide functions for manipulating it.

2019-03-25T16:24:57+00:00

Note that this is not the full chain, as the leaf certificate currently remains in the x509 member of CERT_PKEY. Unfortunately we've got to contend with the fact that some OpenSSL *_chain_* APIs exclude the leaf certificate while others include it... ok beck@ tb@

Revert previous - the default sigalg for RSA key exchange is {sha1,rsa}.

2018-11-19T14:42:01+00:00

In TLSv1.2, if the client does not send a signature algorithms extension then for RSA key exchange a signature algorithm of {sha1,rsa} is implied. The MD5+SHA1 hash only applies to older versions of TLS, which do not support sigalgs.

Unbreak legacy ciphers for prior to 1.1 by setting having a legacy

2018-11-16T02:41:16+00:00

sigalg for MD5_SHA1 and using it as the non sigalgs default ok jsing@

Stop keeping track of sigalgs by guessing it from digest and pkey,

2018-11-10T01:19:09+00:00

just keep the sigalg around so we can remember what we actually decided to use. ok jsing@

Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.

2018-11-08T20:55:18+00:00

ok beck@ tb@