openbsd/src/lib/libssl, branch libressl-v3.2.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.2.1 2020-08-11T19:25:40+00:00 Send an unexpected message alert if no valid content type is found. 2020-08-11T19:25:40+00:00 jsing 2020-08-11T19:25:40+00:00 urn:sha1:857ee82ee896857becfb34ea428f8e8688eb3a13 When record protection is engaged, the plaintext must be followed by a non-zero content type and optional zero padding. If the plaintext is zero length or only consists of zero bytes then it is not a valid message, since the content type is unspecified. ok tb@ Increment the epoch in the same place for both read and write. 2020-08-11T19:21:54+00:00 jsing 2020-08-11T19:21:54+00:00 urn:sha1:e23c9530025614330ca45a2ef2a17eb2d4ab874e ok inoguchi@ tb@ Use 0 instead of 0x00 for memset() calls. 2020-08-11T19:13:35+00:00 jsing 2020-08-11T19:13:35+00:00 urn:sha1:885110ef90d6077c936a51758ce6aaf4aa445b03 ok inoguchi@ tb@ Use SSL3_SEQUENCE_SIZE for last_write_sequence[] rather than hardcoding. 2020-08-11T18:40:24+00:00 jsing 2020-08-11T18:40:24+00:00 urn:sha1:fb152356934459b31bbf9e224880648db97b170b ok inoguchi@ tb@ In SSL_new() just 'goto err' on allocation failure. 2020-08-11T18:39:40+00:00 jsing 2020-08-11T18:39:40+00:00 urn:sha1:a9a24d95d08e9eae3c6899a00a9826b3bfdfdc8b The error path does the same as the currently duplicated code. ok inoguchi@ tb@ Avoid passing -1 to freezero. 2020-08-10T18:54:45+00:00 tb 2020-08-10T18:54:45+00:00 urn:sha1:55b6a21da868aab452ada812637f6ab4e1dc8974 If a peer sends a bogus record consisting of all-zero plaintext, the content_len would be decremented to -1 and cause a crash in freezero. ok inoguchi jsing Fix some wrapping/indent. 2020-08-09T16:54:16+00:00 jsing 2020-08-09T16:54:16+00:00 urn:sha1:f7a3bcd050b34ddcb4d801a9c00fb913f5266db3 Add P-521 to the list of curves supported by default in the client. 2020-08-09T16:25:54+00:00 jsing 2020-08-09T16:25:54+00:00 urn:sha1:610461717d9e11c24c70d266730243bd58f7c8ac A certain VPN provider appears to have configured their servers to only accept P-521 for TLSv1.3 key exchange. The particular VPN software in use also does not currently allow for the TLSv1.3 key share groups to be configured, which means that there is no way to easily use LibreSSL in this situation. Include P-521 in the list of curves that are supported by default in the client, in order to increase interoperability. Discussed at length with beck@, inoguchi@ and tb@. ok tb@ Use CBB more correctly when writing SSL3/DTLS records. 2020-08-09T16:02:58+00:00 jsing 2020-08-09T16:02:58+00:00 urn:sha1:e8a20f5bda4b54bf67bf267175b38eb299dfafa9 Previously we used CBB to build the record headers, but not the entire record. Use CBB_init_fixed() upfront, then build the record header and add space for the record content. However, in order to do this we need to determine the length of the record upfront. This simplifies the code, removes a number of manual bounds checks and makes way for further improvements. ok inoguchi@ tb@ Make the explicit IV length handling in DTLS the same as SSL3/TLS. 2020-08-09T15:46:28+00:00 jsing 2020-08-09T15:46:28+00:00 urn:sha1:3445e90a58f62efa57a22b689bcec14a3195a35a ok inoguchi@ tb@