openbsd/src/lib/libssl, branch libressl-v2.5.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.5.2 2017-03-25T14:15:11+00:00 Update RFC reference for TLSEXT_TYPE_padding. 2017-03-25T14:15:11+00:00 jsing 2017-03-25T14:15:11+00:00 urn:sha1:d0b1250ee44d9aa30fca043cb7e60ad9ae230bd6 Check tls1_PRF() return value in tls1_generate_master_secret(). 2017-03-25T13:42:29+00:00 jsing 2017-03-25T13:42:29+00:00 urn:sha1:575422e50be96435269d5ec45262963a5aa50a97 More cleanup for tls1_PRF()/tls1_P_hash() - change the argument order of 2017-03-25T13:36:56+00:00 jsing 2017-03-25T13:36:56+00:00 urn:sha1:6046430e35e488ca3bd1c18f3189c27c070527cc tls1_PRF() so that it matches tls1_P_hash(), use more explicit argument names and change lengths to size_t. ok inoguchi@ Fewer magic numbers. 2017-03-18T13:04:30+00:00 jsing 2017-03-18T13:04:30+00:00 urn:sha1:515da2cdc879182cffc5d378d1112ca0807d5df2 t1_enc.c 2017-03-18T13:01:55+00:00 jsing 2017-03-18T13:01:55+00:00 urn:sha1:c437861be75788bd6eb34d4950224fc1d6e986f7 Currently tls1_PRF() requires that a temporary buffer be provided, that 2017-03-18T12:58:18+00:00 jsing 2017-03-18T12:58:18+00:00 urn:sha1:def63193c2b83eaf0fcd62a1c4d85970ea9f15ed matches the size of the output buffer. This is used in the case where there are multiple hashes - tls_P_hash() is called with the temporary buffer and the result is then xored into the output buffer. Avoid this by simply using a local buffer in tls_P_hash() and then xoring the result into the output buffer. Overall this makes the code cleaner and simplifies all of the tls_PRF() callers. Similar to BoringSSL. ok inoguchi@ Remove the handshake digests and related code, replacing remaining uses 2017-03-10T16:03:27+00:00 jsing 2017-03-10T16:03:27+00:00 urn:sha1:a4d074bf7284629ac9919a3fb2aeea504c0ee429 with the handshake hash. For now tls1_digest_cached_records() is retained to release the handshake buffer. ok beck@ inoguchi@ Switch CBB to use recallocarray() - this ensures that we do not leak 2017-03-10T15:16:20+00:00 jsing 2017-03-10T15:16:20+00:00 urn:sha1:80ffcb28d3d130a0e90e846f64c44e610b999acf secrets via realloc(). ok inoguchi@ First pass at cleaning up the tls1_P_hash() function - remove a pointless 2017-03-10T15:08:49+00:00 jsing 2017-03-10T15:08:49+00:00 urn:sha1:a5041e87c35762785def2bd9fe804052d2a38cfa EVP_DigestSignInit() call and avoid the need for ctx_tmp by reordering the code slightly. ok inoguchi@ Make tls1_PRF() non-static so it can be regress tested. 2017-03-10T15:03:59+00:00 jsing 2017-03-10T15:03:59+00:00 urn:sha1:dd4408d8e9e930e4fb6909b0a958ecb72f0d2953