openbsd/src/lib/libssl, branch libressl-v3.4.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.4.2 2021-09-16T19:25:30+00:00 Implement flushing for TLSv1.3 handshakes. 2021-09-16T19:25:30+00:00 jsing 2021-09-16T19:25:30+00:00 urn:sha1:30d2e422df85a55715b7f1da39294259d57b2b4f When we finish sending a flight of records, flush the record layer output. This effectively means calling BIO_flush() on the wbio. Some things (such as apache2) have custom BIOs that perform buffering and do not actually send on BIO_write(). Without BIO_flush() the server thinks it has sent data and starts receiving records, however the client never sends records since it never received those that the server should have sent. Joint work with tb@ ok tb@ Avoid typedef redefinition 2021-09-14T23:07:18+00:00 inoguchi 2021-09-14T23:07:18+00:00 urn:sha1:76f3844ea887613e8a6df2ccc1f84d9ac93169b3 "typedef struct ssl_st SSL;" is defined in ossl_typ.h. This reverts part of r1.204. ok tb@ zap trailing white space 2021-09-14T14:35:09+00:00 tb 2021-09-14T14:35:09+00:00 urn:sha1:746c55aa543d6248b92ed473eba70fcb07059390 Call the info cb on connect/accept exit in TLSv1.3 2021-09-14T14:31:21+00:00 tb 2021-09-14T14:31:21+00:00 urn:sha1:2b3f71d6bd6fb2c09b1e9b6022796a88a8ac4f7f The p5-Net-SSLeay test expects the info callback to be called on connect exit. This is the behavior in the legacy stack but wasn't implemented in the TLSv1.3 stack. With this commit, p5-Net-SSLeay tests are happy again after the bump. ok bluhm inoguchi jsing provide a small manual page for the SSL_set_psk_use_session_callback(3) 2021-09-14T14:30:57+00:00 schwarze 2021-09-14T14:30:57+00:00 urn:sha1:893064c29739c4260c6617f7fdd94a8a802ae9cb stub, written from scratch; OK tb@ on SSL_set_psk_use_session_callback.3 Merge the stub SSL_SESSION_is_resumable(3) manual page from the 2021-09-14T14:08:15+00:00 schwarze 2021-09-14T14:08:15+00:00 urn:sha1:1b8306e7e3cdef25c29c63bc651d4ae5597212f8 OpenSSL 1.1.1 branch, which is still under a free license. A few tweaks to wording and structure by me. OK tb@ on SSL_SESSION_is_resumable.3 merge the description of SSL_get_tlsext_status_type(3) 2021-09-11T18:58:41+00:00 schwarze 2021-09-11T18:58:41+00:00 urn:sha1:13dbc996ebccef083673eb0d489a35eda7075e9a from the OpenSSL 1.1.1 branch, which is still under a free license bump major after symbol addition and struct removal, struct visibility 2021-09-10T15:06:12+00:00 tb 2021-09-10T15:06:12+00:00 urn:sha1:e5271647365d6085d8c9f49e7ed94234f61eb57d changes Update Symbols.list after API additions 2021-09-10T15:05:35+00:00 tb 2021-09-10T15:05:35+00:00 urn:sha1:386cee47b19b3b71d0fdf863f7ca2085dd2306f1 Move SSL_set0_rbio() outside of LIBRESSL_HAS_TLS1_3 2021-09-10T14:58:44+00:00 tb 2021-09-10T14:58:44+00:00 urn:sha1:f48da8c6abf121747c0cd0eed3337e0e7440c884 ok inoguchi jsing