openbsd/src/regress/lib/libssl/tlsext, branch OPENBSD_6_7A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_6_72020-08-10T18:59:47+00:00LibreSSL 3.1.4 - Interoperability and bug fixes for the TLSv1.3 client:2020-08-10T18:59:47+00:00tb2020-08-10T18:59:47+00:00urn:sha1:529117a25958fa6a044d9cf79057817756c9e16a
* Improve client certificate selection to allow EC certificates
instead of only RSA certificates.
* Do not error out if a TLSv1.3 server requests an OCSP response as
part of a certificate request.
* Fix SSL_shutdown behavior to match the legacy stack. The previous
behaviour could cause a hang.
* Fix a memory leak and add a missing error check in the handling of
the key update message.
* Fix a memory leak in tls13_record_layer_set_traffic_key.
* Avoid calling freezero with a negative size if a server sends a
malformed plaintext of all zeroes.
* Ensure that only PSS may be used with RSA in TLSv1.3 in order
to avoid using PKCS1-based signatures.
* Add the P-521 curve to the list of curves supported by default
in the client.
This is errata/6.7/019_libssl.patch.sig
Update key share regress to match previous change.2020-04-17T17:24:03+00:00jsing2020-04-17T17:24:03+00:00urn:sha1:383a58ef4684ca206e1a4c221a3ce12518340d46Reset the key share so that we do not have an existing peer public key.2020-02-05T18:06:42+00:00jsing2020-02-05T18:06:42+00:00urn:sha1:d44bcbbb773422ccb0c6900d4d4773576fcc1300Tweak regress to match change made to tls13_key_share_peer_public().2020-02-01T12:42:39+00:00jsing2020-02-01T12:42:39+00:00urn:sha1:353487ddf36ec7463b726956e6afae257ff3b97eRevise for TLSv1.3 key share changes.2020-01-30T17:10:04+00:00jsing2020-01-30T17:10:04+00:00urn:sha1:84bba62b590d6c515fc1a570c0990610dc16ca2aserver sigalgs test is now bogus, disable for now2020-01-26T03:24:36+00:00beck2020-01-26T03:24:36+00:00urn:sha1:945b94be616337c686c03b7ff9fe97065f1c9d43It has been called to my attention that the cookie monster ascii art2019-11-10T17:32:47+00:00beck2019-11-10T17:32:47+00:00urn:sha1:ded8273c2e30995cb226491bc62d5375ad3763cc
in this test which I had obtained from a site purporting it to be
free for use with artist attribtion might not be.
After looking at at some other muppett ascii art for inspiration I am
replacing this with my own ascii art muppet to replace the previously
used cookie monster. The copyright for the art is the same as my code.
Update regress following sigalgs changes.2019-03-25T18:12:05+00:00jsing2019-03-25T18:12:05+00:00urn:sha1:856201ba7fab9705348ec37aaf27977f053300e0Use malloc() and memcpy() the test X25519 x25519_peer_public value.2019-02-03T14:03:46+00:00jsing2019-02-03T14:03:46+00:00urn:sha1:9f38d897227cb5fcb751777593a0744c0b2cd53b
Otherwise, if tlsext_keyshare_server_build() fails we call free with a
pointer to static memory and bad things happen.
Reported by bcook@
Add server side of versions, keyshare, and client and server of cookie2019-01-24T02:56:41+00:00beck2019-01-24T02:56:41+00:00urn:sha1:0e0dded0edfa8150131664aa928c1c890377082d
extensions for tls1.3.
versions is currently defanged to ignore its result until tls13 server
side wired in full, so that server side code still works today when
we only support tls 1.2
ok bcook@ tb@ jsing@