cryptlib: add default CA path for Android#116

Open

aberaud wants to merge 8192 commits intolibressl:masterfrom

This pull request is big! We're only showing the most recent 250 commits

Commits on Mar 10, 2020

Import openssl-1.1.1d test data to base64test.c
inoguchi
committed
Remove the enc function pointers.
jsing
committed
Add a return value check to tls13_buffer_extend().
jsing
committed
Remove some unnecessary handshake enums/functions.
jsing
committed
Update to follow handshake enum removal.
jsing
committed
Use ctx->hs->secrets rather than the S3I(s) version.
jsing
committed

Commits on Mar 12, 2020

Commits on Mar 13, 2020

Commits on Mar 16, 2020

Commits on Mar 23, 2020

Add a test program for getopt(3) that is adequate for manual testing
schwarze
committed

Commits on Mar 24, 2020

Fix ASN1 print functions
inoguchi
committed

Commits on Mar 28, 2020

Be concise: do not say that void functions return no values, that's obvious.
schwarze
committed

Commits on Mar 29, 2020

Void functions obviously do not return values; no need to elaborate.
schwarze
committed

Commits on Mar 30, 2020

Void functions obviously do not return values; no need to elaborate.
schwarze
committed
"eventually" came and went back in 2004.
martijn
committed

Commits on Apr 6, 2020

Commits on Apr 8, 2020

Ensure legacy session ID is persistent during client TLS session.
jsing
committed

Commits on Apr 9, 2020

Commits on Apr 10, 2020

Commits on Apr 11, 2020

Document the TLSv1.3 control word, update the description of the
schwarze
committed

Commits on Apr 14, 2020

Delete the three sentences listing the ciphers currently included
schwarze
committed
add the missing sentence "LibreSSL no longer provides any such
schwarze
committed
Update in several respects:
schwarze
committed

Commits on Apr 16, 2020

Commits on Apr 17, 2020

Commits on Apr 18, 2020

Allow more key share groups for TLSv1.3.
jsing
committed
Tweak previous active cipher suite code.
jsing
committed
Expose the peer ephemeral public key used for TLSv1.3 key exchange.
jsing
committed
Fix wrapping/indentation.
jsing
committed

Commits on Apr 19, 2020

Commits on Apr 21, 2020

Consolidate TLSv1.3 constants.
jsing
committed
Handle TLSv1.3 key shares other than X25519 on the server side.
jsing
committed

Commits on Apr 22, 2020

Commits on Apr 25, 2020

tweak the wording to make it clearer under which conditions exactly
schwarze
committed
Move unsupported, obsolete ciphers and deprecated aliases out of
schwarze
committed
Fix RES_USE_INET6 description
jca
committed
Discourage use of RES_USE_INET6
jca
committed
Switch to NEGOTIATED when using WITHOUT_HRR.
jsing
committed
In s_server.c rev. 1.33, jsing added support for "openssl s_server -groups";
schwarze
committed
A comma is not appropriate here, use a semicolon
jca
committed

Commits on Apr 26, 2020

s_client: fix use of possibly uninitialized values
inoguchi
committed
Display TLSv1.3 extension type with openssl(1) -tlsextdebug
inoguchi
committed
fix the description; from andras farkas
jmc
committed
Minimal maintenance to make this mess slightly less confusing:
schwarze
committed

Commits on Apr 27, 2020

Commits on Apr 28, 2020

Commits on Apr 29, 2020

tls13_handshake internal functions to static in libssl
inoguchi
committed
tls13_record_layer internal functions to static in libssl
inoguchi
committed

Commits on Apr 30, 2020

Disallow setting the AES-GCM IV length to 0
tb
committed

Commits on May 2, 2020

Add const to TLS1.3 internal vectors
inoguchi
committed

Commits on May 3, 2020

Accept two ChangeCipherSpec messages during a TLSv1.3 handshake.
jsing
committed

Commits on May 4, 2020

Commits on May 6, 2020

Bump LibreSSL version to 3.1.1
tb
committed

Commits on May 7, 2020

On receiving a handshake or alert record with empty inner plaintext,
tb
committed

Commits on May 9, 2020

Commits on May 10, 2020

Commits on May 11, 2020

Use ssl_get_new_session() in the TLSv1.3 server.
jsing
committed
Move the record layer callbacks into a struct.
jsing
committed
Provide an alert sent record layer callback.
jsing
committed
Set the record layer legacy version from the TLSv1.3 server.
jsing
committed
Add record version checks.
jsing
committed
Propagate record overflows to the record layer and alert.
jsing
committed
Revise regress now that record overflows are propagated.
jsing
committed
Use tls_legacy_server_method() for SSLv2 record tests.
jsing
committed
Enable the TLSv1.3 server.
jsing
committed
Revise regress for TLSv1.3 server being enabled.
jsing
committed

Commits on May 12, 2020

there should only be one i in gratuitous
tb
committed

Commits on May 13, 2020

Commits on May 14, 2020

Commits on May 15, 2020

Add ECDSA certificate test in appstest.sh
inoguchi
committed
Factor out the test for all available ciphers and add TLSv1.3 case
inoguchi
committed
Factor out session reuse test and verification test
inoguchi
committed

Commits on May 16, 2020

document PKCS7_set_type(3);
schwarze
committed
Avoid sending an empty certificate list from the TLSv1.3 server.
jsing
committed
Add TLS13_ERR_NO_CERTIFICATE.
jsing
committed
Ensure that a TLSv1.3 server has provided a certificate.
jsing
committed
Return TLS13_IO_WANT_POLLIN after processing post-handshake messages.
jsing
committed

Commits on May 17, 2020

Commits on May 18, 2020

Rename variables for key, csr, pass, cert
inoguchi
committed
Add client certificate test in appstest.sh
inoguchi
committed

Commits on May 19, 2020

Commits on May 20, 2020

Commits on May 21, 2020

Commits on May 22, 2020

Commits on May 23, 2020

Commits on May 24, 2020

Commits on May 26, 2020

Commits on May 27, 2020

document PKCS7_dataFinal(3);
schwarze
committed
This patch fixes one bug and one instance of undesirable behaviour.
schwarze
committed
more tests after getopt_long.c rev. 1.32;
schwarze
committed

Commits on May 29, 2020

Commits on May 31, 2020

Commits on Jun 2, 2020

Commits on Jun 3, 2020

Commits on Jun 4, 2020

Commits on Jun 5, 2020

One error file per directory is plenty.
jsing
committed
Apply some style(9).
jsing
committed
Remove remaining error *_str_functs[]
jsing
committed
Add support for additional GOST curves.
jsing
committed
Add a few more errors to help debugging.
jsing
committed
Add OIDs for HMAC using Streebog (GOST R 34.11-2012) hash function.
jsing
committed
Allow GOST R 34.11-2012 in PBE/PBKDF2/PKCS#5.
jsing
committed
Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.
jsing
committed
Handle GOST in ssl_cert_dup().
jsing
committed
Stop sending GOST R 34.10-94 as a CertificateType.
jsing
committed
Use IANA allocated GOST ClientCertificateTypes.
jsing
committed
Add a custom copy handler for AES key wrap
tb
committed

Commits on Jun 6, 2020

Implement a rolling hash of the ClientHello message, Enforce RFC 8446
beck
committed

Commits on Jun 9, 2020

The check_includes step is incorrect dependency management model for
deraadt
committed

Commits on Jun 10, 2020

describe six more PKCS7 attribute functions
schwarze
committed
document PKCS7_get_signer_info(3)
schwarze
committed
Add lucky13 and bleichenbacher-timing tests
tb
committed

Commits on Jun 11, 2020

wording tweaks from ross l richardson and tb;
jmc
committed

Commits on Jun 12, 2020

document PEM_ASN1_read(3) and PEM_ASN1_read_bio(3);
schwarze
committed
add a comment saying that name_cmp() is intentionally undocumented;
schwarze
committed
add my Copyright and license, which i forgot when adding a significant
schwarze
committed

Commits on Jun 15, 2020

Document PEM_def_callback(3).
schwarze
committed
Document EVP_read_pw_string_min(3)
tb
committed

Commits on Jun 19, 2020

Merge documentation of X509_get0_serialNumber(3) from OpenSSL-1.1.1
schwarze
committed
document error handling of X509_PUBKEY_get0(3) and X509_PUBKEY_get(3)
schwarze
committed
document X509_get0_pubkey_bitstr(3),
schwarze
committed
mark the functions documented in des_read_pw(3) as deprecated
schwarze
committed
We inherited the constant time CBC padding removal from BoringSSL, but
tb
committed
Enable lucky 13 test.
tb
committed

Commits on Jun 30, 2020

cryptlib: add default CA path for Android
aberaud
committed