A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE 2025-06-07T10:25:12+00:00 2025-06-07T10:25:12+00:00 tb 2025-06-07T10:25:12+00:00 urn:sha1:f6c762005417446e1edfa34ec8e864d3ac71a588 Switch argument order and use sizeof(*ctx) rather than sizeof(struct ...). ok jsg 2024-01-27T14:23:51+00:00 jsing 2024-01-27T14:23:51+00:00 urn:sha1:9f10df8c2961b5d22fbb67942ef04e74ea843ece This will make it easier to regress test shutdown behaviour in the TLSv1.3 stack. Additionally, `openssl -msg` now shows alerts for TLSv1.3 connections. ok tb@ 2022-11-26T16:08:57+00:00 tb 2022-11-26T16:08:57+00:00 urn:sha1:81d98bf600a381a625eb11b39a725b08c0ba547f Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook 2022-11-07T11:53:39+00:00 jsing 2022-11-07T11:53:39+00:00 urn:sha1:e36eecc7ffab11a2e657085c0dd914fcc96f359b It makes more sense to have tls13_exporter() in tls13_key_schedule.c, rather than tls13_lib.c ok tb@ 2022-10-20T15:26:25+00:00 tb 2022-10-20T15:26:25+00:00 urn:sha1:a8ea0315a91ac4805740889d8f6de75535578297 TLSv1.3 introduces a New Session Ticket post-handshake handshake message that allows a unique association between a ticket value and a pre-shared key derived from the resumption master secret. Servers may send this message arbitrarily often at any time after receiving the client's Finished message. Implement tls13_new_session_ticket_recv() which parses the contents of the NewSessionTicket message into a fresh session derived from the current session so as to avoid modifying sessions that are already in the session cache. This uses tls13_new_session_ticket_recv() in tls13_phh_received_cb(). We currently rely on the general rate limiting of 100 PHH messages per connection and hour to avoid problems from connecting to a misbehaving or malicious server. ok jsing 2022-10-20T15:23:43+00:00 tb 2022-10-20T15:23:43+00:00 urn:sha1:6b9a69b566bfb5818fb2b5c49b739ecf2b633c14 TLSv1.3 servers must not indicate a lifetime longer than 7 days and clients must not cache sessions for longer than 7 days. Encode this in a macro internal to tls13_lib.c for now. ok jsing 2022-10-02T16:36:42+00:00 jsing 2022-10-02T16:36:42+00:00 urn:sha1:efde998d3821e41e124a4bfcdf103e506055fc52 These are no longer necessary due to SSL_CTX and SSL now being fully opaque. Merge SSL_CTX_INTERNAL back into SSL_CTX and SSL_INTERNAL back into SSL. Prompted by tb@ 2022-09-10T15:29:33+00:00 jsing 2022-09-10T15:29:33+00:00 urn:sha1:4b29141debc01aa9f32cdf626ad531b857e4ecb6 Use this from the TLSv1.3 code. ok tb@ 2022-07-24T14:28:16+00:00 jsing 2022-07-24T14:28:16+00:00 urn:sha1:2c5937ccb88658c18243c49fc57c58b62e344235 QUIC uses TLS to complete the handshake, however unlike normal TLS it does not use the TLS record layer, rather it provides its own transport. This means that we need to intercept all communication between the TLS handshake and the record layer. This allows TLS handshake message writes to be directed to QUIC, likewise for TLS handshake message reads. Alerts also need to be sent via QUIC, plus it needs to be provided with the traffic keys that are derived by TLS. ok tb@ 2022-07-24T14:19:45+00:00 jsing 2022-07-24T14:19:45+00:00 urn:sha1:c96bebf0508a7dbba50ee184ca854bbcf8d94873 This is the order that they're called/run in.