openbsd/src/regress/lib/libssl/client, branch libressl-v3.1.4 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.1.4 2020-08-10T18:59:47+00:00 LibreSSL 3.1.4 - Interoperability and bug fixes for the TLSv1.3 client: 2020-08-10T18:59:47+00:00 tb 2020-08-10T18:59:47+00:00 urn:sha1:529117a25958fa6a044d9cf79057817756c9e16a * Improve client certificate selection to allow EC certificates instead of only RSA certificates. * Do not error out if a TLSv1.3 server requests an OCSP response as part of a certificate request. * Fix SSL_shutdown behavior to match the legacy stack. The previous behaviour could cause a hang. * Fix a memory leak and add a missing error check in the handling of the key update message. * Fix a memory leak in tls13_record_layer_set_traffic_key. * Avoid calling freezero with a negative size if a server sends a malformed plaintext of all zeroes. * Ensure that only PSS may be used with RSA in TLSv1.3 in order to avoid using PKCS1-based signatures. * Add the P-521 curve to the list of curves supported by default in the client. This is errata/6.7/019_libssl.patch.sig Minor code improvements. 2020-04-06T16:53:09+00:00 jsing 2020-04-06T16:53:09+00:00 urn:sha1:dcf3abfaf99f1ee2dd47359a1944c479eaddf9bd Add tests that cover TLSv1.2 and disable those that trigger TLSv1.3. 2020-04-06T16:52:26+00:00 jsing 2020-04-06T16:52:26+00:00 urn:sha1:32add134e786bd06a44666190d83a55085bd24a8 This allows the test to pass again. Zero the client random field in the TLSv1.2 golden value. 2020-04-06T16:50:27+00:00 jsing 2020-04-06T16:50:27+00:00 urn:sha1:be9d7e67c4931d1e39f372a02d1cd242ac0c81a9 Improve comparision with test data. 2020-04-06T16:49:42+00:00 jsing 2020-04-06T16:49:42+00:00 urn:sha1:8eff3ba970ca459d172046c749e4763f0dc50174 First check the client random against the zeroed value, then zero the client random in the client hello, before comparing with the golden value. This makes failures more obvious and the test code more readable. Dump the test data when the lengths differ in order to aid debugging. 2020-04-06T16:45:50+00:00 jsing 2020-04-06T16:45:50+00:00 urn:sha1:ff51012cdb035df195da4b0adb5d561d6827be09 Use errx() if we fail to build the client hello. 2020-04-06T16:44:15+00:00 jsing 2020-04-06T16:44:15+00:00 urn:sha1:bbd3055db371e102d601fe2187cf1b66bdbbdd76 Nuke trailing whitespace that is annoying before changing things in here 2019-11-26T18:21:50+00:00 beck 2019-11-26T18:21:50+00:00 urn:sha1:349a283c7b3697fdbf9caeff84b857f04a5483f4 Remove SHA224 based sigalgs from use in TLS 1.2 as SHA224 is deprecated. 2019-01-24T00:07:58+00:00 beck 2019-01-24T00:07:58+00:00 urn:sha1:0c4d3f4e4b1febe6578a3147f00c5604cbbba167 Remove GOST based sigalgs from TLS 1.2 since they don't work with TLS 1.2. ok jsing@ Modify sigalgs extension processing to accomodate TLS 1.3. 2019-01-23T18:39:28+00:00 beck 2019-01-23T18:39:28+00:00 urn:sha1:5b044ab96482aee07d5182930013d4e606d4740d - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2. - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 from a 1.3 handshake. ok jsing@ tb@