openbsd/src/lib/libssl, branch libressl-v2.3.1

Sort the obsolete flags.

2015-10-25T16:07:04+00:00

Mark SSL_OP_NO_{COMPRESSION,SSLv2,SSLv3} as obsolete.

2015-10-25T15:58:57+00:00

For backward compatibility, the flags are redefined as 0. ok jsing@

Remove last vestige of SSL_OP_NO_SSLv3 support.

2015-10-25T15:52:49+00:00

No part of LibreSSL checks for this flag any longer. ok jsing@

Simplify ssl23_get_client_hello error handling.

2015-10-25T15:49:04+00:00

ssl23_get_client_hello sets type=1 on error and continues processing. It should return an error immediately to simplify things. This also allows us to start removing the last of SSL_OP_NO_SSL*. Added extra paranoia for s->version to make sure it is set properly. ok jsing@

Another change that is needed to restore the previous behaviour of

2015-10-22T15:38:05+00:00

ASN1_{GENERALIZED,UTC}TIME_set_string(), which allows it to be called with a NULL pointer. ok beck@

Restore previous behaviour and allow

2015-10-22T15:03:19+00:00

ASN1_{GENERALIZED,UTC,}TIME_set_string() to be called with a NULL pointer. Found the hard way by @kinichiro on github. ok beck@

Reject too small bits value in BN_generate_prime_ex(), so that it does not risk

2015-10-21T19:02:22+00:00

becoming negative in probable_prime_dh_safe(). Reported by Franck Denis who noticed `openssl gendh 0' would segfault. Fix adapted from OpenSSL RT#2701. ok beck@ jsing@

In the case where len is not a multiple of sizeof(RC4_CHUNK) the RC4 code

2015-10-21T16:36:50+00:00

will end up doing a read and write of up to 7 bytes beyond the specified length. This is effectively a non-issue since we read and write back the same data and due to alignment it is within a page boundary. Regardless, avoid this by removing the "special" handling for the remaining length and allow the standard (non-chunk) code to process the remaining bytes, which does not result in overrun. Reported by Pascal Cuoq - thanks! ok beck@ miod@

Lob a style(9) grenade in here.

2015-10-20T15:50:13+00:00

free rbio before wbio

2015-10-19T17:59:39+00:00

ok jsing@