openbsd/src/regress/lib/libssl, branch libressl-v3.1.4 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.1.4 2020-08-10T18:59:47+00:00 LibreSSL 3.1.4 - Interoperability and bug fixes for the TLSv1.3 client: 2020-08-10T18:59:47+00:00 tb 2020-08-10T18:59:47+00:00 urn:sha1:529117a25958fa6a044d9cf79057817756c9e16a * Improve client certificate selection to allow EC certificates instead of only RSA certificates. * Do not error out if a TLSv1.3 server requests an OCSP response as part of a certificate request. * Fix SSL_shutdown behavior to match the legacy stack. The previous behaviour could cause a hang. * Fix a memory leak and add a missing error check in the handling of the key update message. * Fix a memory leak in tls13_record_layer_set_traffic_key. * Avoid calling freezero with a negative size if a server sends a malformed plaintext of all zeroes. * Ensure that only PSS may be used with RSA in TLSv1.3 in order to avoid using PKCS1-based signatures. * Add the P-521 curve to the list of curves supported by default in the client. This is errata/6.7/019_libssl.patch.sig Fix out-of-bounds access in tables[][] that was exposed in bluhm's 2020-05-04T14:20:36+00:00 tb 2020-05-04T14:20:36+00:00 urn:sha1:2f51014ac0adf8681f1764313a33eab2c8e9bd11 regress on i386 after inoguchi moved some symbols to const. ok inoguchi jsing deraadt Revise regress to match state transition changes. 2020-04-22T17:05:53+00:00 jsing 2020-04-22T17:05:53+00:00 urn:sha1:9bcda669aab5b24846f4fdcc80d0dde9585ce078 Update key share regress to match previous change. 2020-04-17T17:24:03+00:00 jsing 2020-04-17T17:24:03+00:00 urn:sha1:383a58ef4684ca206e1a4c221a3ce12518340d46 Revise test to handle the fact that TLSv1.3 cipher suites are now being 2020-04-09T17:55:45+00:00 jsing 2020-04-09T17:55:45+00:00 urn:sha1:02f91bf85c93ea810a5debf412591a16e609bd61 included in the output from `openssl ciphers`. Test both SSLv3 (aka pre-TLSv1.2) and TLSv1.2 cipher suites with TLS. 2020-04-09T17:27:11+00:00 jsing 2020-04-09T17:27:11+00:00 urn:sha1:5e806785eb03c3eea79c60e13b7eb743e022b13b Re-enable the client test now that it passes again. 2020-04-06T16:53:45+00:00 jsing 2020-04-06T16:53:45+00:00 urn:sha1:45824837216b6908592e42945b8372aba29c9641 Minor code improvements. 2020-04-06T16:53:09+00:00 jsing 2020-04-06T16:53:09+00:00 urn:sha1:dcf3abfaf99f1ee2dd47359a1944c479eaddf9bd Add tests that cover TLSv1.2 and disable those that trigger TLSv1.3. 2020-04-06T16:52:26+00:00 jsing 2020-04-06T16:52:26+00:00 urn:sha1:32add134e786bd06a44666190d83a55085bd24a8 This allows the test to pass again. Zero the client random field in the TLSv1.2 golden value. 2020-04-06T16:50:27+00:00 jsing 2020-04-06T16:50:27+00:00 urn:sha1:be9d7e67c4931d1e39f372a02d1cd242ac0c81a9