Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/crypto/external/bsd/openssl/dist Changes between 1.1.0h and ...
details: https://anonhg.NetBSD.org/src/rev/febeb7ca48bd
branches: trunk
changeset: 365493:febeb7ca48bd
user: christos <christos%NetBSD.org@localhost>
date: Sat Aug 18 08:30:43 2018 +0000
description:
Changes between 1.1.0h and 1.1.0i [14 Aug 2018]
*) Client DoS due to large DH parameter
During key agreement in a TLS handshake using a DH(E) based ciphersuite a
malicious server can send a very large prime value to the client. This will
cause the client to spend an unreasonably long period of time generating a
key for this prime resulting in a hang until the client has finished. This
could be exploited in a Denial Of Service attack.
This issue was reported to OpenSSL on 5th June 2018 by Guido Vranken
(CVE-2018-0732)
[Guido Vranken]
*) Cache timing vulnerability in RSA Key Generation
The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to
a cache timing side channel attack. An attacker with sufficient access to
mount cache timing attacks during the RSA key generation process could
recover the private key.
This issue was reported to OpenSSL on 4th April 2018 by Alejandro Cabrera
Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia.
(CVE-2018-0737)
[Billy Brumley]
*) Make EVP_PKEY_asn1_new() a bit stricter about its input. A NULL pem_str
parameter is no longer accepted, as it leads to a corrupt table. NULL
pem_str is reserved for alias entries only.
[Richard Levitte]
*) Revert blinding in ECDSA sign and instead make problematic addition
length-invariant. Switch even to fixed-length Montgomery multiplication.
[Andy Polyakov]
*) Change generating and checking of primes so that the error rate of not
being prime depends on the intended use based on the size of the input.
For larger primes this will result in more rounds of Miller-Rabin.
The maximal error rate for primes with more than 1080 bits is lowered
to 2^-128.
[Kurt Roeckx, Annie Yousar]
*) Increase the number of Miller-Rabin rounds for DSA key generating to 64.
[Kurt Roeckx]
*) Add blinding to ECDSA and DSA signatures to protect against side channel
attacks discovered by Keegan Ryan (NCC Group).
[Matt Caswell]
*) When unlocking a pass phrase protected PEM file or PKCS#8 container, we
now allow empty (zero character) pass phrases.
[Richard Levitte]
*) Certificate time validation (X509_cmp_time) enforces stricter
compliance with RFC 5280. Fractional seconds and timezone offsets
are no longer allowed.
[Emilia K?sper]
*) Fixed a text canonicalisation bug in CMS
Where a CMS detached signature is used with text content the text goes
through a canonicalisation process first prior to signing or verifying a
signature. This process strips trailing space at the end of lines, converts
line terminators to CRLF and removes additional trailing line terminators
at the end of a file. A bug in the canonicalisation process meant that
some characters, such as form-feed, were incorrectly treated as whitespace
and removed. This is contrary to the specification (RFC5485). This fix
could mean that detached text data signed with an earlier version of
OpenSSL 1.1.0 may fail to verify using the fixed version, or text data
signed with a fixed OpenSSL may fail to verify with an earlier version of
OpenSSL 1.1.0. A workaround is to only verify the canonicalised text data
and use the "-binary" flag (for the "cms" command line application) or set
the SMIME_BINARY/PKCS7_BINARY/CMS_BINARY flags (if using CMS_verify()).
[Matt Caswell]
diffstat:
crypto/external/bsd/openssl/dist/.gitignore | 1 +
crypto/external/bsd/openssl/dist/.travis.yml | 12 +-
crypto/external/bsd/openssl/dist/CONTRIBUTING | 69 +-
crypto/external/bsd/openssl/dist/Configurations/10-main.conf | 53 +-
crypto/external/bsd/openssl/dist/Configurations/dist.conf | 12 +
crypto/external/bsd/openssl/dist/Configurations/unix-Makefile.tmpl | 6 +-
crypto/external/bsd/openssl/dist/Configurations/windows-checker.pm | 2 +-
crypto/external/bsd/openssl/dist/Configurations/windows-makefile.tmpl | 76 +-
crypto/external/bsd/openssl/dist/INSTALL | 5 +-
crypto/external/bsd/openssl/dist/apps/apps.c | 5 +-
crypto/external/bsd/openssl/dist/apps/asn1pars.c | 22 +-
crypto/external/bsd/openssl/dist/apps/dhparam.c | 11 +-
crypto/external/bsd/openssl/dist/apps/dsaparam.c | 29 +-
crypto/external/bsd/openssl/dist/apps/rehash.c | 20 +-
crypto/external/bsd/openssl/dist/apps/verify.c | 3 +-
crypto/external/bsd/openssl/dist/appveyor.yml | 2 +-
crypto/external/bsd/openssl/dist/crypto/armv4cpuid.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_object.c | 23 +-
crypto/external/bsd/openssl/dist/crypto/asn1/ameth_lib.c | 12 +
crypto/external/bsd/openssl/dist/crypto/asn1/asn1_err.c | 2 +
crypto/external/bsd/openssl/dist/crypto/asn1/p5_scrypt.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/asn1/tasn_utl.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/async/async.c | 76 +-
crypto/external/bsd/openssl/dist/crypto/bio/b_addr.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/bio/bio_meth.c | 17 +-
crypto/external/bsd/openssl/dist/crypto/bio/bss_mem.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/alpha-mont.pl | 11 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/armv4-mont.pl | 17 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/ia64-mont.pl | 20 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/mips-mont.pl | 14 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/parisc-mont.pl | 30 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/ppc-mont.pl | 15 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/ppc64-mont.pl | 43 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/rsaz-avx2.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/s390x-mont.pl | 16 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/sparct4-mont.pl | 26 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/sparcv9-mont.pl | 15 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/via-mont.pl | 15 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/vis3-mont.pl | 18 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86-mont.pl | 22 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont.pl | 83 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont5.pl | 21 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_div.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_gcd.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_gf2m.c | 34 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_intern.c | 12 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_mod.c | 69 ++-
crypto/external/bsd/openssl/dist/crypto/bn/bn_sqr.c | 12 +-
crypto/external/bsd/openssl/dist/crypto/build.info | 1 -
crypto/external/bsd/openssl/dist/crypto/chacha/asm/chacha-x86.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms_env.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms_smime.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/conf/build.info | 2 +-
crypto/external/bsd/openssl/dist/crypto/conf/conf_api.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/conf/conf_err.c | 9 +-
crypto/external/bsd/openssl/dist/crypto/conf/conf_lcl.h | 11 +
crypto/external/bsd/openssl/dist/crypto/conf/conf_mall.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/conf/conf_ssl.c | 178 +++++++
crypto/external/bsd/openssl/dist/crypto/dh/dh_key.c | 9 +-
crypto/external/bsd/openssl/dist/crypto/dh/dh_meth.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_err.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_gen.c | 15 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_meth.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_ossl.c | 68 ++-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_pmeth.c | 28 +-
crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-armv4.pl | 12 +-
crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-armv8.pl | 18 +-
crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-avx2.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-sparcv9.pl | 10 +-
crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-x86.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_curve.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_mult.c | 250 +++++++++-
crypto/external/bsd/openssl/dist/crypto/ec/ec_oct.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/ec/ecdsa_ossl.c | 80 +-
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistz256.c | 34 +-
crypto/external/bsd/openssl/dist/crypto/engine/tb_asnmth.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/err/err.c | 63 +-
crypto/external/bsd/openssl/dist/crypto/evp/evp_err.c | 3 +
crypto/external/bsd/openssl/dist/crypto/evp/pmeth_lib.c | 46 +-
crypto/external/bsd/openssl/dist/crypto/evp/scrypt.c | 25 +-
crypto/external/bsd/openssl/dist/crypto/include/internal/__DECC_INCLUDE_EPILOGUE.H | 16 +
crypto/external/bsd/openssl/dist/crypto/include/internal/__DECC_INCLUDE_PROLOGUE.H | 20 +
crypto/external/bsd/openssl/dist/crypto/include/internal/asn1_int.h | 4 +-
crypto/external/bsd/openssl/dist/crypto/include/internal/async.h | 3 +-
crypto/external/bsd/openssl/dist/crypto/include/internal/bn_int.h | 19 +-
crypto/external/bsd/openssl/dist/crypto/include/internal/cryptlib.h | 4 +-
crypto/external/bsd/openssl/dist/crypto/include/internal/cryptlib_int.h | 3 +-
crypto/external/bsd/openssl/dist/crypto/include/internal/err_int.h | 4 +-
crypto/external/bsd/openssl/dist/crypto/include/internal/x509_int.h | 3 +-
crypto/external/bsd/openssl/dist/crypto/init.c | 136 +++-
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-armv4.pl | 9 +-
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghashv8-armx.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/modes/modes_lcl.h | 17 +-
crypto/external/bsd/openssl/dist/crypto/modes/ocb128.c | 133 ++--
crypto/external/bsd/openssl/dist/crypto/o_fopen.c | 20 +-
crypto/external/bsd/openssl/dist/crypto/o_time.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/pem/pem_lib.c | 55 +-
crypto/external/bsd/openssl/dist/crypto/pem/pem_pk8.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/pem/pem_pkey.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/pem/pvkfmt.c | 2 +-
crypto/external/bsd/openssl/dist/crypto/pkcs12/p12_asn.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-armv4.pl | 5 +-
crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-x86.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_meth.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ossl.c | 43 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ssl.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-586.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-586.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-armv4.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-armv4.pl | 6 +-
crypto/external/bsd/openssl/dist/crypto/threads_win.c | 23 +-
crypto/external/bsd/openssl/dist/crypto/ts/ts_lib.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/ts/ts_rsp_sign.c | 7 +-
crypto/external/bsd/openssl/dist/crypto/x509/build.info | 2 +-
crypto/external/bsd/openssl/dist/crypto/x509/by_dir.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_cmp.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_err.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_lcl.h | 6 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_lu.c | 126 +++-
crypto/external/bsd/openssl/dist/crypto/x509/x509_meth.c | 166 ++++++
crypto/external/bsd/openssl/dist/crypto/x509/x509_vpm.c | 7 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509name.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/x509/x_name.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_ncons.c | 137 ++++-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_purp.c | 34 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_tlsf.c | 9 +-
crypto/external/bsd/openssl/dist/doc/apps/cms.pod | 18 +-
crypto/external/bsd/openssl/dist/doc/apps/config.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/apps/rehash.pod | 8 +-
crypto/external/bsd/openssl/dist/doc/apps/s_client.pod | 10 +-
crypto/external/bsd/openssl/dist/doc/crypto/ASN1_INTEGER_get_int64.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/crypto/BIO_meth_new.pod | 18 +-
crypto/external/bsd/openssl/dist/doc/crypto/BN_add.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/crypto/BN_bn2bin.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/crypto/BN_generate_prime.pod | 14 +-
crypto/external/bsd/openssl/dist/doc/crypto/CMS_encrypt.pod | 7 +-
crypto/external/bsd/openssl/dist/doc/crypto/CMS_get0_SignerInfos.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/CMS_get1_ReceiptRequest.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/DH_meth_new.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/DSA_meth_new.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/DSA_sign.pod | 15 +-
crypto/external/bsd/openssl/dist/doc/crypto/ECDSA_SIG_new.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/EVP_DigestSignInit.pod | 45 +-
crypto/external/bsd/openssl/dist/doc/crypto/EVP_PKEY_CTX_set_hkdf_md.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/EVP_PKEY_CTX_set_tls1_prf_md.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/OBJ_nid2obj.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/OCSP_resp_find_status.pod | 32 +-
crypto/external/bsd/openssl/dist/doc/crypto/OPENSSL_VERSION_NUMBER.pod | 5 -
crypto/external/bsd/openssl/dist/doc/crypto/OPENSSL_init_crypto.pod | 10 +-
crypto/external/bsd/openssl/dist/doc/crypto/OPENSSL_malloc.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/crypto/PEM_read_bio_PrivateKey.pod | 15 +-
crypto/external/bsd/openssl/dist/doc/crypto/RSA_meth_new.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/SMIME_read_PKCS7.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/crypto/X509_LOOKUP_hash_dir.pod | 3 +-
crypto/external/bsd/openssl/dist/doc/crypto/X509_LOOKUP_meth_new.pod | 189 +++++++
crypto/external/bsd/openssl/dist/doc/crypto/X509_VERIFY_PARAM_set_flags.pod | 33 +-
crypto/external/bsd/openssl/dist/doc/crypto/X509_check_host.pod | 9 +-
crypto/external/bsd/openssl/dist/doc/crypto/X509_cmp_time.pod | 39 +
crypto/external/bsd/openssl/dist/doc/fingerprints.txt | 5 +-
crypto/external/bsd/openssl/dist/doc/openssl-c-indent.el | 1 +
crypto/external/bsd/openssl/dist/doc/ssl/SSL_CONF_cmd.pod | 4 -
crypto/external/bsd/openssl/dist/doc/ssl/SSL_CTX_use_certificate.pod | 9 +-
crypto/external/bsd/openssl/dist/doc/ssl/SSL_get_ciphers.pod | 36 +-
crypto/external/bsd/openssl/dist/doc/ssl/SSL_get_session.pod | 7 +-
crypto/external/bsd/openssl/dist/doc/ssl/SSL_get_version.pod | 8 +-
crypto/external/bsd/openssl/dist/doc/ssl/SSL_set1_host.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/ssl/ssl.pod | 8 +-
crypto/external/bsd/openssl/dist/external/perl/transfer/Text/Template.pm | 5 +-
crypto/external/bsd/openssl/dist/fuzz/test-corpus.c | 85 ++-
crypto/external/bsd/openssl/dist/include/internal/__DECC_INCLUDE_EPILOGUE.H | 16 +
crypto/external/bsd/openssl/dist/include/internal/__DECC_INCLUDE_PROLOGUE.H | 20 +
crypto/external/bsd/openssl/dist/include/internal/sslconf.h | 20 +
crypto/external/bsd/openssl/dist/include/openssl/asn1.h | 2 +
crypto/external/bsd/openssl/dist/include/openssl/bio.h | 16 +-
crypto/external/bsd/openssl/dist/include/openssl/bn.h | 89 ++-
crypto/external/bsd/openssl/dist/include/openssl/conf.h | 7 +-
crypto/external/bsd/openssl/dist/include/openssl/crypto.h | 6 +-
crypto/external/bsd/openssl/dist/include/openssl/dh.h | 4 +-
crypto/external/bsd/openssl/dist/include/openssl/dsa.h | 13 +-
crypto/external/bsd/openssl/dist/include/openssl/evp.h | 31 +-
crypto/external/bsd/openssl/dist/include/openssl/lhash.h | 4 +-
crypto/external/bsd/openssl/dist/include/openssl/opensslconf.h.in | 18 +-
crypto/external/bsd/openssl/dist/include/openssl/opensslv.h | 11 +-
crypto/external/bsd/openssl/dist/include/openssl/pem.h | 5 +-
crypto/external/bsd/openssl/dist/include/openssl/rsa.h | 4 +-
crypto/external/bsd/openssl/dist/include/openssl/ssl.h | 4 +-
crypto/external/bsd/openssl/dist/include/openssl/ssl3.h | 12 +-
crypto/external/bsd/openssl/dist/include/openssl/tls1.h | 10 +-
crypto/external/bsd/openssl/dist/include/openssl/x509.h | 3 +-
crypto/external/bsd/openssl/dist/include/openssl/x509_vfy.h | 78 +++-
crypto/external/bsd/openssl/dist/ms/uplink-x86.pl | 4 +-
crypto/external/bsd/openssl/dist/ssl/record/rec_layer_d1.c | 64 ++-
crypto/external/bsd/openssl/dist/ssl/record/ssl3_record.c | 14 +-
crypto/external/bsd/openssl/dist/ssl/ssl_conf.c | 5 +-
crypto/external/bsd/openssl/dist/ssl/ssl_init.c | 13 +-
crypto/external/bsd/openssl/dist/ssl/ssl_mcnf.c | 142 +-----
crypto/external/bsd/openssl/dist/ssl/ssl_txt.c | 16 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem.c | 4 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c | 17 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_dtls.c | 3 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_lib.c | 25 +
crypto/external/bsd/openssl/dist/ssl/statem/statem_srvr.c | 45 +-
crypto/external/bsd/openssl/dist/ssl/t1_trce.c | 17 +-
crypto/external/bsd/openssl/dist/test/build.info | 19 +-
crypto/external/bsd/openssl/dist/test/certs/alt1-cert.pem | 39 +-
crypto/external/bsd/openssl/dist/test/certs/alt1-key.pem | 52 +-
crypto/external/bsd/openssl/dist/test/certs/badalt6-cert.pem | 35 +-
crypto/external/bsd/openssl/dist/test/certs/badalt6-key.pem | 52 +-
crypto/external/bsd/openssl/dist/test/certs/badalt7-cert.pem | 33 +-
crypto/external/bsd/openssl/dist/test/certs/badalt7-key.pem | 52 +-
crypto/external/bsd/openssl/dist/test/certs/badcn1-cert.pem | 20 +
crypto/external/bsd/openssl/dist/test/certs/badcn1-key.pem | 28 +
crypto/external/bsd/openssl/dist/test/certs/goodcn1-cert.pem | 22 +
crypto/external/bsd/openssl/dist/test/certs/goodcn1-key.pem | 28 +
crypto/external/bsd/openssl/dist/test/certs/setup.sh | 25 +-
crypto/external/bsd/openssl/dist/test/errtest.c | 40 +
crypto/external/bsd/openssl/dist/test/evptests.txt | 31 +-
crypto/external/bsd/openssl/dist/test/recipes/04-test_err.t | 12 +
crypto/external/bsd/openssl/dist/test/recipes/15-test_genrsa.t | 39 +-
crypto/external/bsd/openssl/dist/test/recipes/25-test_verify.t | 10 +-
crypto/external/bsd/openssl/dist/test/recipes/60-test_x509_dup_cert.t | 19 +
crypto/external/bsd/openssl/dist/test/recipes/60-test_x509_time.t | 12 +
crypto/external/bsd/openssl/dist/test/recipes/80-test_cipherlist.t | 9 +-
crypto/external/bsd/openssl/dist/test/recipes/90-test_fuzz.t | 12 +-
crypto/external/bsd/openssl/dist/test/recipes/90-test_shlibload.t | 6 +-
crypto/external/bsd/openssl/dist/test/shlibloadtest.c | 58 ++-
crypto/external/bsd/openssl/dist/test/sslapitest.c | 56 ++
crypto/external/bsd/openssl/dist/test/verify_extra_test.c | 44 +-
crypto/external/bsd/openssl/dist/test/versions.c | 20 +
crypto/external/bsd/openssl/dist/test/x509_dup_cert_test.c | 70 ++
crypto/external/bsd/openssl/dist/test/x509_time_test.c | 212 ++++++++
crypto/external/bsd/openssl/dist/util/copy.pl | 12 +-
crypto/external/bsd/openssl/dist/util/dofile.pl | 6 +-
crypto/external/bsd/openssl/dist/util/echo.pl | 12 +
crypto/external/bsd/openssl/dist/util/libcrypto.num | 29 +
crypto/external/bsd/openssl/dist/util/perl/OpenSSL/Test.pm | 29 +-
crypto/external/bsd/openssl/dist/util/perl/with_fallback.pm | 8 +-
crypto/external/bsd/openssl/dist/util/process_docs.pl | 32 +-
238 files changed, 4144 insertions(+), 1510 deletions(-)
diffs (truncated from 11271 to 300 lines):
diff -r 55584985be60 -r febeb7ca48bd crypto/external/bsd/openssl/dist/.gitignore
--- a/crypto/external/bsd/openssl/dist/.gitignore Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/.gitignore Sat Aug 18 08:30:43 2018 +0000
@@ -51,6 +51,7 @@
/test/ssltest_old
/test/x509aux
/test/v3ext
+/test/versions
# Certain files that get created by tests on the fly
/test/test-runs
diff -r 55584985be60 -r febeb7ca48bd crypto/external/bsd/openssl/dist/.travis.yml
--- a/crypto/external/bsd/openssl/dist/.travis.yml Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/.travis.yml Sat Aug 18 08:30:43 2018 +0000
@@ -61,7 +61,7 @@
sources:
- ubuntu-toolchain-r-test
compiler: gcc-5
- env: CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 -DPEDANTIC"
+ env: UBUNTU_GCC_HACK="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 -DPEDANTIC"
- os: linux
addons:
apt:
@@ -69,7 +69,7 @@
- binutils-mingw-w64
- gcc-mingw-w64
compiler: i686-w64-mingw32-gcc
- env: CONFIG_OPTS="no-pic" TESTS="-test_fuzz"
+ env: CONFIG_OPTS="no-pic"
- os: linux
addons:
apt:
@@ -85,7 +85,7 @@
- binutils-mingw-w64
- gcc-mingw-w64
compiler: x86_64-w64-mingw32-gcc
- env: CONFIG_OPTS="no-pic" TESTS="-test_fuzz"
+ env: CONFIG_OPTS="no-pic"
- os: linux
addons:
apt:
@@ -112,6 +112,10 @@
srcdir=.;
top=.;
fi
+ - if [ -n "$UBUNTU_GCC_HACK" ]; then
+ $CC -dumpspecs | sed "s/--push-state//g; s/--pop-state/--as-needed/g" > gcc-specs.txt;
+ CC="$CC -specs=gcc-specs.txt";
+ fi
- if [ "$CC" == i686-w64-mingw32-gcc ]; then
export CROSS_COMPILE=${CC%%gcc}; unset CC;
$srcdir/Configure mingw $CONFIG_OPTS -Wno-pedantic-ms-format;
@@ -186,7 +190,7 @@
fi
- if [ -n "$DESTDIR" ]; then
mkdir "../$DESTDIR";
- if $make install install_docs DESTDIR="../$DESTDIR"; then
+ if $make install DESTDIR="../$DESTDIR"; then
echo -e '+\057\057\057\057\057 MAKE INSTALL_DOCS OK';
else
echo -e '+\057\057\057\057\057 MAKE INSTALL_DOCS FAILED'; false;
diff -r 55584985be60 -r febeb7ca48bd crypto/external/bsd/openssl/dist/CONTRIBUTING
--- a/crypto/external/bsd/openssl/dist/CONTRIBUTING Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/CONTRIBUTING Sat Aug 18 08:30:43 2018 +0000
@@ -1,26 +1,26 @@
-HOW TO CONTRIBUTE PATCHES TO OpenSSL
-------------------------------------
+HOW TO CONTRIBUTE TO OpenSSL
+----------------------------
(Please visit https://www.openssl.org/community/getting-started.html for
other ideas about how to contribute.)
-Development is coordinated on the openssl-dev mailing list (see the
-above link or https://mta.openssl.org for information on subscribing).
-If you are unsure as to whether a feature will be useful for the general
-OpenSSL community you might want to discuss it on the openssl-dev mailing
-list first. Someone may be already working on the same thing or there
-may be a good reason as to why that feature isn't implemented.
+Development is done on GitHub, https://github.com/openssl/openssl.
+
+To request new features or report bugs, please open an issue on GitHub
+
+To submit a patch, please open a pull request on GitHub. If you are thinking
+of making a large contribution, open an issue for it before starting work,
+to get comments from the community. Someone may be already working on
+the same thing or there may be reasons why that feature isn't implemented.
-To submit a patch, make a pull request on GitHub. If you think the patch
-could use feedback from the community, please start a thread on openssl-dev
-to discuss it.
+To make it easier to review and accept your pull request, please follow these
+guidelines:
-Having addressed the following items before the PR will help make the
-acceptance and review process faster:
-
- 1. Anything other than trivial contributions will require a contributor
- licensing agreement, giving us permission to use your code. See
- https://www.openssl.org/policies/cla.html for details.
+ 1. Anything other than a trivial contribution requires a Contributor
+ License Agreement (CLA), giving us permission to use your code. See
+ https://www.openssl.org/policies/cla.html for details. If your
+ contribution is too small to require a CLA, put "CLA: trivial" on a
+ line by itself in your commit message body.
2. All source files should start with the following text (with
appropriate comment characters at the start of each line and the
@@ -34,21 +34,38 @@
https://www.openssl.org/source/license.html
3. Patches should be as current as possible; expect to have to rebase
- often. We do not accept merge commits; You will be asked to remove
- them before a patch is considered acceptable.
+ often. We do not accept merge commits, you will have to remove them
+ (usually by rebasing) before it will be acceptable.
4. Patches should follow our coding style (see
- https://www.openssl.org/policies/codingstyle.html) and compile without
- warnings. Where gcc or clang is available you should use the
+ https://www.openssl.org/policies/codingstyle.html) and compile
+ without warnings. Where gcc or clang is available you should use the
--strict-warnings Configure option. OpenSSL compiles on many varied
- platforms: try to ensure you only use portable features.
- Clean builds via Travis and AppVeyor are expected, and done whenever
- a PR is created or updated.
+ platforms: try to ensure you only use portable features. Clean builds
+ via Travis and AppVeyor are required, and they are started automatically
+ whenever a PR is created or updated.
5. When at all possible, patches should include tests. These can
either be added to an existing test, or completely new. Please see
test/README for information on the test framework.
6. New features or changed functionality must include
- documentation. Please look at the "pod" files in doc/apps, doc/crypto
- and doc/ssl for examples of our style.
+ documentation. Please look at the "pod" files in doc for
+ examples of our style.
+
+ 7. For user visible changes (API changes, behaviour changes, ...),
+ consider adding a note in CHANGES. This could be a summarising
+ description of the change, and could explain the grander details.
+ Have a look through existing entries for inspiration.
+ Please note that this is NOT simply a copy of git-log oneliners.
+ Also note that security fixes get an entry in CHANGES.
+ This file helps users get more in depth information of what comes
+ with a specific release without having to sift through the higher
+ noise ratio in git-log.
+
+ 8. For larger or more important user visible changes, as well as
+ security fixes, please add a line in NEWS. On exception, it might be
+ worth adding a multi-line entry (such as the entry that announces all
+ the types that became opaque with OpenSSL 1.1.0).
+ This file helps users get a very quick summary of what comes with a
+ specific release, to see if an upgrade is worth the effort.
diff -r 55584985be60 -r febeb7ca48bd crypto/external/bsd/openssl/dist/Configurations/10-main.conf
--- a/crypto/external/bsd/openssl/dist/Configurations/10-main.conf Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/Configurations/10-main.conf Sat Aug 18 08:30:43 2018 +0000
@@ -14,7 +14,7 @@
asflags => "/c /Cp /Cx /Zi",
asoutflag => "/Fo" };
} else {
- $die->("NASM not found - please read INSTALL and NOTES.WIN for further details\n");
+ $die->("NASM not found - make sure it's installed and available on %PATH%\n");
$vc_win64a_info = { as => "{unknown}",
asflags => "",
asoutflag => "" };
@@ -39,7 +39,7 @@
asoutflag => "/Fo",
perlasm_scheme => "win32" };
} else {
- $die->("NASM not found - please read INSTALL and NOTES.WIN for further details\n");
+ $die->("NASM not found - make sure it's installed and available on %PATH%\n");
$vc_win32_info = { as => "{unknown}",
asflags => "",
asoutflag => "",
@@ -428,8 +428,17 @@
# even PA-RISC 2.0-specific code paths, which are chosen at run-time,
# thus adequate performance is provided even with PA-RISC 1.1 build.
# <appro%fy.chalmers.se@localhost>
+ "hpux-common" => {
+ inherit_from => [ "BASE_unix" ],
+ template => 1,
+ defines => add("_XOPEN_SOURCE", "_XOPEN_SOURCE_EXTENDED",
+ "_HPUX_ALT_XOPEN_SOCKET_API"),
+ thread_scheme => "pthreads",
+ dso_scheme => "dlfcn", # overridden in 32-bit PA-RISC builds
+ shared_target => "hpux-shared",
+ },
"hpux-parisc-gcc" => {
- inherit_from => [ "BASE_unix" ],
+ inherit_from => [ "hpux-common" ],
cc => "gcc",
cflags => combine(picker(default => "-DB_ENDIAN -DBN_DIV2W",
debug => "-O0 -g",
@@ -437,9 +446,7 @@
threads("-pthread")),
ex_libs => add("-Wl,+s -ldld", threads("-pthread")),
bn_ops => "BN_LLONG",
- thread_scheme => "pthreads",
dso_scheme => "dl",
- shared_target => "hpux-shared",
shared_cflag => "-fPIC",
shared_ldflag => "-shared",
shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -449,7 +456,7 @@
multilib => "/pa1.1",
},
"hpux64-parisc2-gcc" => {
- inherit_from => [ "BASE_unix", asm("parisc20_64_asm") ],
+ inherit_from => [ "hpux-common", asm("parisc20_64_asm") ],
cc => "gcc",
cflags => combine(picker(default => "-DB_ENDIAN",
debug => "-O0 -g",
@@ -457,9 +464,6 @@
threads("-D_REENTRANT")),
ex_libs => add("-ldl"),
bn_ops => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
- thread_scheme => "pthreads",
- dso_scheme => "dlfcn",
- shared_target => "hpux-shared",
shared_cflag => "-fpic",
shared_ldflag => "-shared",
shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -471,7 +475,7 @@
# Chris Ruemmler <ruemmler%cup.hp.com@localhost>
# Kevin Steves <ks%hp.se@localhost>
"hpux-parisc-cc" => {
- inherit_from => [ "BASE_unix" ],
+ inherit_from => [ "hpux-common" ],
cc => "cc",
cflags => combine(picker(default => "+Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY",
debug => "+O0 +d -g",
@@ -479,9 +483,7 @@
threads("-D_REENTRANT")),
ex_libs => add("-Wl,+s -ldld",threads("-lpthread")),
bn_ops => "RC4_CHAR",
- thread_scheme => "pthreads",
dso_scheme => "dl",
- shared_target => "hpux-shared",
shared_cflag => "+Z",
shared_ldflag => "-b",
shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -492,7 +494,7 @@
multilib => "/pa1.1",
},
"hpux64-parisc2-cc" => {
- inherit_from => [ "BASE_unix", asm("parisc20_64_asm") ],
+ inherit_from => [ "hpux-common", asm("parisc20_64_asm") ],
cc => "cc",
cflags => combine(picker(default => "+DD64 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY",
debug => "+O0 +d -g",
@@ -500,9 +502,6 @@
threads("-D_REENTRANT")),
ex_libs => add("-ldl",threads("-lpthread")),
bn_ops => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
- thread_scheme => "pthreads",
- dso_scheme => "dlfcn",
- shared_target => "hpux-shared",
shared_cflag => "+Z",
shared_ldflag => "+DD64 -b",
shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -511,7 +510,7 @@
# HP/UX IA-64 targets
"hpux-ia64-cc" => {
- inherit_from => [ "BASE_unix", asm("ia64_asm") ],
+ inherit_from => [ "hpux-common", asm("ia64_asm") ],
cc => "cc",
cflags => combine(picker(default => "-Ae +DD32 +Olit=all -z -DB_ENDIAN",
debug => "+O0 +d -g",
@@ -519,9 +518,6 @@
threads("-D_REENTRANT")),
ex_libs => add("-ldl",threads("-lpthread")),
bn_ops => "SIXTY_FOUR_BIT",
- thread_scheme => "pthreads",
- dso_scheme => "dlfcn",
- shared_target => "hpux-shared",
shared_cflag => "+Z",
shared_ldflag => "+DD32 -b",
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -530,7 +526,7 @@
# Frank Geurts <frank.geurts%nl.abnamro.com@localhost> has patiently assisted
# with debugging of the following config.
"hpux64-ia64-cc" => {
- inherit_from => [ "BASE_unix", asm("ia64_asm") ],
+ inherit_from => [ "hpux-common", asm("ia64_asm") ],
cc => "cc",
cflags => combine(picker(default => "-Ae +DD64 +Olit=all -z -DB_ENDIAN",
debug => "+O0 +d -g",
@@ -538,9 +534,6 @@
threads("-D_REENTRANT")),
ex_libs => add("-ldl", threads("-lpthread")),
bn_ops => "SIXTY_FOUR_BIT_LONG",
- thread_scheme => "pthreads",
- dso_scheme => "dlfcn",
- shared_target => "hpux-shared",
shared_cflag => "+Z",
shared_ldflag => "+DD64 -b",
Home |
Main Index |
Thread Index |
Old Index