openbsd/src/lib, branch libressl-v3.5.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.5.1 2022-03-13T17:23:02+00:00 Relax the check of x509_constraints_dirname() 2022-03-13T17:23:02+00:00 tb 2022-03-13T17:23:02+00:00 urn:sha1:80a47514c89065d34f61afd4698b0f8182c45d60 The dirname constraint must be a prefix in DER format, so relax the check from requiring equal-length strings to allow shorter names also. From Alex Wilson ok jsing Add x509_constraints_validate() to x509_internal.h 2022-03-13T17:08:04+00:00 tb 2022-03-13T17:08:04+00:00 urn:sha1:cd66e82e3090c8e0b602600f92762eec03e1f998 From Alex Wilson ok jsing Check name constraints using the proper API 2022-03-13T16:48:49+00:00 tb 2022-03-13T16:48:49+00:00 urn:sha1:7bdf8508440bb6ad889ebb6210b36e2e45db8c79 The previous versions were too strict and disallowed leading dots. From Alex Wilson ok jsing style tweak 2022-03-13T16:30:31+00:00 tb 2022-03-13T16:30:31+00:00 urn:sha1:6a05251669a841118ef2afb995c9fdf4ec6f7abf Add missing error check after strdup() 2022-03-13T16:25:58+00:00 tb 2022-03-13T16:25:58+00:00 urn:sha1:eb5306b751b98d33dc4833a353cd77e6e3a9d3ad From Alex Wilson ok jsing Remove free_cont from asn1_d2i_ex_primitive()/asn1_ex_c2i(). 2022-03-13T14:58:14+00:00 jsing 2022-03-13T14:58:14+00:00 urn:sha1:fa2518a98adbc41d019ee1af4e3eb7fd994861b2 The constructed ASN.1 handling in asn1_d2i_ex_primitive() and asn1_ex_c2i() currently has code to potentially avoid a malloc/memcpy - this is a less common code path and it introduces a bunch of complexity for minimal gain. In particular, we're manually adding a trailing NUL when ASN1_STRING_set() would already do that for us, plus we currently manually free() the data on an ASN1_STRING, rather than using freezero(). ok inoguchi@ tb@ Factor out change cipher spec handing code in the legacy stack. 2022-03-12T12:53:03+00:00 jsing 2022-03-12T12:53:03+00:00 urn:sha1:8eb1efc13e25a74ea09b172249b5103c0855f2ee Factor out the code that handles the processing of a change cipher spec message that has been read in the legacy stack, deduplicating code in the DTLS stack. ok inoguchi@ tb@ unsusual -> unusual 2022-03-10T00:55:50+00:00 jsg 2022-03-10T00:55:50+00:00 urn:sha1:fb5a8fa7eb25d37be97f96c08a86d2eef631572c bump for LibreSSL 3.5.1 2022-03-07T04:11:24+00:00 bcook 2022-03-07T04:11:24+00:00 urn:sha1:13cc531429ceef5b1ef0ff5689487563e62e3776 Fix typo in comment 2022-03-05T07:13:48+00:00 bket 2022-03-05T07:13:48+00:00 urn:sha1:757aacbb6a94c933057b1b4dd9e98987590f29c4 OK tb@