Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/crypto/external/bsd/openssl/dist Changes between 1.1.0h and ...



details:   https://anonhg.NetBSD.org/src/rev/e7bcd8679440
branches:  trunk
changeset: 363961:e7bcd8679440
user:      christos <christos%NetBSD.org@localhost>
date:      Sat Aug 18 08:30:43 2018 +0000

description:
Changes between 1.1.0h and 1.1.0i [14 Aug 2018]

  *) Client DoS due to large DH parameter

     During key agreement in a TLS handshake using a DH(E) based ciphersuite a
     malicious server can send a very large prime value to the client. This will
     cause the client to spend an unreasonably long period of time generating a
     key for this prime resulting in a hang until the client has finished. This
     could be exploited in a Denial Of Service attack.

     This issue was reported to OpenSSL on 5th June 2018 by Guido Vranken
     (CVE-2018-0732)
     [Guido Vranken]

  *) Cache timing vulnerability in RSA Key Generation

     The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to
     a cache timing side channel attack. An attacker with sufficient access to
     mount cache timing attacks during the RSA key generation process could
     recover the private key.

     This issue was reported to OpenSSL on 4th April 2018 by Alejandro Cabrera
     Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia.
     (CVE-2018-0737)
     [Billy Brumley]

  *) Make EVP_PKEY_asn1_new() a bit stricter about its input.  A NULL pem_str
     parameter is no longer accepted, as it leads to a corrupt table.  NULL
     pem_str is reserved for alias entries only.
     [Richard Levitte]

  *) Revert blinding in ECDSA sign and instead make problematic addition
     length-invariant. Switch even to fixed-length Montgomery multiplication.
     [Andy Polyakov]

  *) Change generating and checking of primes so that the error rate of not
     being prime depends on the intended use based on the size of the input.
     For larger primes this will result in more rounds of Miller-Rabin.
     The maximal error rate for primes with more than 1080 bits is lowered
     to 2^-128.
     [Kurt Roeckx, Annie Yousar]

  *) Increase the number of Miller-Rabin rounds for DSA key generating to 64.
     [Kurt Roeckx]

  *) Add blinding to ECDSA and DSA signatures to protect against side channel
     attacks discovered by Keegan Ryan (NCC Group).
     [Matt Caswell]

  *) When unlocking a pass phrase protected PEM file or PKCS#8 container, we
     now allow empty (zero character) pass phrases.
     [Richard Levitte]

  *) Certificate time validation (X509_cmp_time) enforces stricter
     compliance with RFC 5280. Fractional seconds and timezone offsets
     are no longer allowed.
     [Emilia K?sper]

  *) Fixed a text canonicalisation bug in CMS

     Where a CMS detached signature is used with text content the text goes
     through a canonicalisation process first prior to signing or verifying a
     signature. This process strips trailing space at the end of lines, converts
     line terminators to CRLF and removes additional trailing line terminators
     at the end of a file. A bug in the canonicalisation process meant that
     some characters, such as form-feed, were incorrectly treated as whitespace
     and removed. This is contrary to the specification (RFC5485). This fix
     could mean that detached text data signed with an earlier version of
     OpenSSL 1.1.0 may fail to verify using the fixed version, or text data
     signed with a fixed OpenSSL may fail to verify with an earlier version of
     OpenSSL 1.1.0. A workaround is to only verify the canonicalised text data
     and use the "-binary" flag (for the "cms" command line application) or set
     the SMIME_BINARY/PKCS7_BINARY/CMS_BINARY flags (if using CMS_verify()).
     [Matt Caswell]

diffstat:

 crypto/external/bsd/openssl/dist/.gitignore                                        |    1 +
 crypto/external/bsd/openssl/dist/.travis.yml                                       |   12 +-
 crypto/external/bsd/openssl/dist/CONTRIBUTING                                      |   69 +-
 crypto/external/bsd/openssl/dist/Configurations/10-main.conf                       |   53 +-
 crypto/external/bsd/openssl/dist/Configurations/dist.conf                          |   12 +
 crypto/external/bsd/openssl/dist/Configurations/unix-Makefile.tmpl                 |    6 +-
 crypto/external/bsd/openssl/dist/Configurations/windows-checker.pm                 |    2 +-
 crypto/external/bsd/openssl/dist/Configurations/windows-makefile.tmpl              |   76 +-
 crypto/external/bsd/openssl/dist/INSTALL                                           |    5 +-
 crypto/external/bsd/openssl/dist/apps/apps.c                                       |    5 +-
 crypto/external/bsd/openssl/dist/apps/asn1pars.c                                   |   22 +-
 crypto/external/bsd/openssl/dist/apps/dhparam.c                                    |   11 +-
 crypto/external/bsd/openssl/dist/apps/dsaparam.c                                   |   29 +-
 crypto/external/bsd/openssl/dist/apps/rehash.c                                     |   20 +-
 crypto/external/bsd/openssl/dist/apps/verify.c                                     |    3 +-
 crypto/external/bsd/openssl/dist/appveyor.yml                                      |    2 +-
 crypto/external/bsd/openssl/dist/crypto/armv4cpuid.pl                              |    4 +-
 crypto/external/bsd/openssl/dist/crypto/asn1/a_object.c                            |   23 +-
 crypto/external/bsd/openssl/dist/crypto/asn1/ameth_lib.c                           |   12 +
 crypto/external/bsd/openssl/dist/crypto/asn1/asn1_err.c                            |    2 +
 crypto/external/bsd/openssl/dist/crypto/asn1/p5_scrypt.c                           |    4 +-
 crypto/external/bsd/openssl/dist/crypto/asn1/tasn_utl.c                            |    4 +-
 crypto/external/bsd/openssl/dist/crypto/async/async.c                              |   76 +-
 crypto/external/bsd/openssl/dist/crypto/bio/b_addr.c                               |   11 +-
 crypto/external/bsd/openssl/dist/crypto/bio/bio_meth.c                             |   17 +-
 crypto/external/bsd/openssl/dist/crypto/bio/bss_mem.c                              |    4 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/alpha-mont.pl                       |   11 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/armv4-mont.pl                       |   17 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/ia64-mont.pl                        |   20 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/mips-mont.pl                        |   14 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/parisc-mont.pl                      |   30 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/ppc-mont.pl                         |   15 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/ppc64-mont.pl                       |   43 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/rsaz-avx2.pl                        |    4 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/s390x-mont.pl                       |   16 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/sparct4-mont.pl                     |   26 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/sparcv9-mont.pl                     |   15 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/via-mont.pl                         |   15 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/vis3-mont.pl                        |   18 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/x86-mont.pl                         |   22 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont.pl                      |   83 +-
 crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont5.pl                     |   21 +-
 crypto/external/bsd/openssl/dist/crypto/bn/bn_div.c                                |    3 +-
 crypto/external/bsd/openssl/dist/crypto/bn/bn_gcd.c                                |   11 +-
 crypto/external/bsd/openssl/dist/crypto/bn/bn_gf2m.c                               |   34 +-
 crypto/external/bsd/openssl/dist/crypto/bn/bn_intern.c                             |   12 +-
 crypto/external/bsd/openssl/dist/crypto/bn/bn_mod.c                                |   69 ++-
 crypto/external/bsd/openssl/dist/crypto/bn/bn_sqr.c                                |   12 +-
 crypto/external/bsd/openssl/dist/crypto/build.info                                 |    1 -
 crypto/external/bsd/openssl/dist/crypto/chacha/asm/chacha-x86.pl                   |    4 +-
 crypto/external/bsd/openssl/dist/crypto/cms/cms_env.c                              |    3 +-
 crypto/external/bsd/openssl/dist/crypto/cms/cms_smime.c                            |    3 +-
 crypto/external/bsd/openssl/dist/crypto/conf/build.info                            |    2 +-
 crypto/external/bsd/openssl/dist/crypto/conf/conf_api.c                            |    6 +-
 crypto/external/bsd/openssl/dist/crypto/conf/conf_err.c                            |    9 +-
 crypto/external/bsd/openssl/dist/crypto/conf/conf_lcl.h                            |   11 +
 crypto/external/bsd/openssl/dist/crypto/conf/conf_mall.c                           |    4 +-
 crypto/external/bsd/openssl/dist/crypto/conf/conf_ssl.c                            |  178 +++++++
 crypto/external/bsd/openssl/dist/crypto/dh/dh_key.c                                |    9 +-
 crypto/external/bsd/openssl/dist/crypto/dh/dh_meth.c                               |    4 +-
 crypto/external/bsd/openssl/dist/crypto/dsa/dsa_err.c                              |    3 +-
 crypto/external/bsd/openssl/dist/crypto/dsa/dsa_gen.c                              |   15 +-
 crypto/external/bsd/openssl/dist/crypto/dsa/dsa_meth.c                             |    4 +-
 crypto/external/bsd/openssl/dist/crypto/dsa/dsa_ossl.c                             |   68 ++-
 crypto/external/bsd/openssl/dist/crypto/dsa/dsa_pmeth.c                            |   28 +-
 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-armv4.pl               |   12 +-
 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-armv8.pl               |   18 +-
 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-avx2.pl                |    4 +-
 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-sparcv9.pl             |   10 +-
 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-x86.pl                 |    4 +-
 crypto/external/bsd/openssl/dist/crypto/ec/ec_curve.c                              |    6 +-
 crypto/external/bsd/openssl/dist/crypto/ec/ec_mult.c                               |  250 +++++++++-
 crypto/external/bsd/openssl/dist/crypto/ec/ec_oct.c                                |   10 +-
 crypto/external/bsd/openssl/dist/crypto/ec/ecdsa_ossl.c                            |   80 +-
 crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistz256.c                          |   34 +-
 crypto/external/bsd/openssl/dist/crypto/engine/tb_asnmth.c                         |    5 +-
 crypto/external/bsd/openssl/dist/crypto/err/err.c                                  |   63 +-
 crypto/external/bsd/openssl/dist/crypto/evp/evp_err.c                              |    3 +
 crypto/external/bsd/openssl/dist/crypto/evp/pmeth_lib.c                            |   46 +-
 crypto/external/bsd/openssl/dist/crypto/evp/scrypt.c                               |   25 +-
 crypto/external/bsd/openssl/dist/crypto/include/internal/__DECC_INCLUDE_EPILOGUE.H |   16 +
 crypto/external/bsd/openssl/dist/crypto/include/internal/__DECC_INCLUDE_PROLOGUE.H |   20 +
 crypto/external/bsd/openssl/dist/crypto/include/internal/asn1_int.h                |    4 +-
 crypto/external/bsd/openssl/dist/crypto/include/internal/async.h                   |    3 +-
 crypto/external/bsd/openssl/dist/crypto/include/internal/bn_int.h                  |   19 +-
 crypto/external/bsd/openssl/dist/crypto/include/internal/cryptlib.h                |    4 +-
 crypto/external/bsd/openssl/dist/crypto/include/internal/cryptlib_int.h            |    3 +-
 crypto/external/bsd/openssl/dist/crypto/include/internal/err_int.h                 |    4 +-
 crypto/external/bsd/openssl/dist/crypto/include/internal/x509_int.h                |    3 +-
 crypto/external/bsd/openssl/dist/crypto/init.c                                     |  136 +++-
 crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-armv4.pl                   |    9 +-
 crypto/external/bsd/openssl/dist/crypto/modes/asm/ghashv8-armx.pl                  |    4 +-
 crypto/external/bsd/openssl/dist/crypto/modes/modes_lcl.h                          |   17 +-
 crypto/external/bsd/openssl/dist/crypto/modes/ocb128.c                             |  133 ++--
 crypto/external/bsd/openssl/dist/crypto/o_fopen.c                                  |   20 +-
 crypto/external/bsd/openssl/dist/crypto/o_time.c                                   |    6 +-
 crypto/external/bsd/openssl/dist/crypto/pem/pem_lib.c                              |   55 +-
 crypto/external/bsd/openssl/dist/crypto/pem/pem_pk8.c                              |    4 +-
 crypto/external/bsd/openssl/dist/crypto/pem/pem_pkey.c                             |    4 +-
 crypto/external/bsd/openssl/dist/crypto/pem/pvkfmt.c                               |    2 +-
 crypto/external/bsd/openssl/dist/crypto/pkcs12/p12_asn.c                           |    4 +-
 crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-armv4.pl             |    5 +-
 crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-x86.pl               |    4 +-
 crypto/external/bsd/openssl/dist/crypto/rsa/rsa_meth.c                             |    4 +-
 crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ossl.c                             |   43 +-
 crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ssl.c                              |   10 +-
 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-586.pl                        |    4 +-
 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-586.pl                      |    4 +-
 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-armv4.pl                    |    4 +-
 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-armv4.pl                    |    6 +-
 crypto/external/bsd/openssl/dist/crypto/threads_win.c                              |   23 +-
 crypto/external/bsd/openssl/dist/crypto/ts/ts_lib.c                                |    5 +-
 crypto/external/bsd/openssl/dist/crypto/ts/ts_rsp_sign.c                           |    7 +-
 crypto/external/bsd/openssl/dist/crypto/x509/build.info                            |    2 +-
 crypto/external/bsd/openssl/dist/crypto/x509/by_dir.c                              |    4 +-
 crypto/external/bsd/openssl/dist/crypto/x509/x509_cmp.c                            |    4 +-
 crypto/external/bsd/openssl/dist/crypto/x509/x509_err.c                            |    3 +-
 crypto/external/bsd/openssl/dist/crypto/x509/x509_lcl.h                            |    6 +-
 crypto/external/bsd/openssl/dist/crypto/x509/x509_lu.c                             |  126 +++-
 crypto/external/bsd/openssl/dist/crypto/x509/x509_meth.c                           |  166 ++++++
 crypto/external/bsd/openssl/dist/crypto/x509/x509_vpm.c                            |    7 +-
 crypto/external/bsd/openssl/dist/crypto/x509/x509name.c                            |   10 +-
 crypto/external/bsd/openssl/dist/crypto/x509/x_name.c                              |    4 +-
 crypto/external/bsd/openssl/dist/crypto/x509v3/v3_ncons.c                          |  137 ++++-
 crypto/external/bsd/openssl/dist/crypto/x509v3/v3_purp.c                           |   34 +-
 crypto/external/bsd/openssl/dist/crypto/x509v3/v3_tlsf.c                           |    9 +-
 crypto/external/bsd/openssl/dist/doc/apps/cms.pod                                  |   18 +-
 crypto/external/bsd/openssl/dist/doc/apps/config.pod                               |    4 +-
 crypto/external/bsd/openssl/dist/doc/apps/rehash.pod                               |    8 +-
 crypto/external/bsd/openssl/dist/doc/apps/s_client.pod                             |   10 +-
 crypto/external/bsd/openssl/dist/doc/crypto/ASN1_INTEGER_get_int64.pod             |    6 +-
 crypto/external/bsd/openssl/dist/doc/crypto/BIO_meth_new.pod                       |   18 +-
 crypto/external/bsd/openssl/dist/doc/crypto/BN_add.pod                             |    6 +-
 crypto/external/bsd/openssl/dist/doc/crypto/BN_bn2bin.pod                          |    6 +-
 crypto/external/bsd/openssl/dist/doc/crypto/BN_generate_prime.pod                  |   14 +-
 crypto/external/bsd/openssl/dist/doc/crypto/CMS_encrypt.pod                        |    7 +-
 crypto/external/bsd/openssl/dist/doc/crypto/CMS_get0_SignerInfos.pod               |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/CMS_get1_ReceiptRequest.pod            |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/DH_meth_new.pod                        |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/DSA_meth_new.pod                       |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/DSA_sign.pod                           |   15 +-
 crypto/external/bsd/openssl/dist/doc/crypto/ECDSA_SIG_new.pod                      |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/EVP_DigestSignInit.pod                 |   45 +-
 crypto/external/bsd/openssl/dist/doc/crypto/EVP_PKEY_CTX_set_hkdf_md.pod           |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/EVP_PKEY_CTX_set_tls1_prf_md.pod       |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/OBJ_nid2obj.pod                        |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/OCSP_resp_find_status.pod              |   32 +-
 crypto/external/bsd/openssl/dist/doc/crypto/OPENSSL_VERSION_NUMBER.pod             |    5 -
 crypto/external/bsd/openssl/dist/doc/crypto/OPENSSL_init_crypto.pod                |   10 +-
 crypto/external/bsd/openssl/dist/doc/crypto/OPENSSL_malloc.pod                     |    6 +-
 crypto/external/bsd/openssl/dist/doc/crypto/PEM_read_bio_PrivateKey.pod            |   15 +-
 crypto/external/bsd/openssl/dist/doc/crypto/RSA_meth_new.pod                       |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/SMIME_read_PKCS7.pod                   |    4 +-
 crypto/external/bsd/openssl/dist/doc/crypto/X509_LOOKUP_hash_dir.pod               |    3 +-
 crypto/external/bsd/openssl/dist/doc/crypto/X509_LOOKUP_meth_new.pod               |  189 +++++++
 crypto/external/bsd/openssl/dist/doc/crypto/X509_VERIFY_PARAM_set_flags.pod        |   33 +-
 crypto/external/bsd/openssl/dist/doc/crypto/X509_check_host.pod                    |    9 +-
 crypto/external/bsd/openssl/dist/doc/crypto/X509_cmp_time.pod                      |   39 +
 crypto/external/bsd/openssl/dist/doc/fingerprints.txt                              |    5 +-
 crypto/external/bsd/openssl/dist/doc/openssl-c-indent.el                           |    1 +
 crypto/external/bsd/openssl/dist/doc/ssl/SSL_CONF_cmd.pod                          |    4 -
 crypto/external/bsd/openssl/dist/doc/ssl/SSL_CTX_use_certificate.pod               |    9 +-
 crypto/external/bsd/openssl/dist/doc/ssl/SSL_get_ciphers.pod                       |   36 +-
 crypto/external/bsd/openssl/dist/doc/ssl/SSL_get_session.pod                       |    7 +-
 crypto/external/bsd/openssl/dist/doc/ssl/SSL_get_version.pod                       |    8 +-
 crypto/external/bsd/openssl/dist/doc/ssl/SSL_set1_host.pod                         |    4 +-
 crypto/external/bsd/openssl/dist/doc/ssl/ssl.pod                                   |    8 +-
 crypto/external/bsd/openssl/dist/external/perl/transfer/Text/Template.pm           |    5 +-
 crypto/external/bsd/openssl/dist/fuzz/test-corpus.c                                |   85 ++-
 crypto/external/bsd/openssl/dist/include/internal/__DECC_INCLUDE_EPILOGUE.H        |   16 +
 crypto/external/bsd/openssl/dist/include/internal/__DECC_INCLUDE_PROLOGUE.H        |   20 +
 crypto/external/bsd/openssl/dist/include/internal/sslconf.h                        |   20 +
 crypto/external/bsd/openssl/dist/include/openssl/asn1.h                            |    2 +
 crypto/external/bsd/openssl/dist/include/openssl/bio.h                             |   16 +-
 crypto/external/bsd/openssl/dist/include/openssl/bn.h                              |   89 ++-
 crypto/external/bsd/openssl/dist/include/openssl/conf.h                            |    7 +-
 crypto/external/bsd/openssl/dist/include/openssl/crypto.h                          |    6 +-
 crypto/external/bsd/openssl/dist/include/openssl/dh.h                              |    4 +-
 crypto/external/bsd/openssl/dist/include/openssl/dsa.h                             |   13 +-
 crypto/external/bsd/openssl/dist/include/openssl/evp.h                             |   31 +-
 crypto/external/bsd/openssl/dist/include/openssl/lhash.h                           |    4 +-
 crypto/external/bsd/openssl/dist/include/openssl/opensslconf.h.in                  |   18 +-
 crypto/external/bsd/openssl/dist/include/openssl/opensslv.h                        |   11 +-
 crypto/external/bsd/openssl/dist/include/openssl/pem.h                             |    5 +-
 crypto/external/bsd/openssl/dist/include/openssl/rsa.h                             |    4 +-
 crypto/external/bsd/openssl/dist/include/openssl/ssl.h                             |    4 +-
 crypto/external/bsd/openssl/dist/include/openssl/ssl3.h                            |   12 +-
 crypto/external/bsd/openssl/dist/include/openssl/tls1.h                            |   10 +-
 crypto/external/bsd/openssl/dist/include/openssl/x509.h                            |    3 +-
 crypto/external/bsd/openssl/dist/include/openssl/x509_vfy.h                        |   78 +++-
 crypto/external/bsd/openssl/dist/ms/uplink-x86.pl                                  |    4 +-
 crypto/external/bsd/openssl/dist/ssl/record/rec_layer_d1.c                         |   64 ++-
 crypto/external/bsd/openssl/dist/ssl/record/ssl3_record.c                          |   14 +-
 crypto/external/bsd/openssl/dist/ssl/ssl_conf.c                                    |    5 +-
 crypto/external/bsd/openssl/dist/ssl/ssl_init.c                                    |   13 +-
 crypto/external/bsd/openssl/dist/ssl/ssl_mcnf.c                                    |  142 +-----
 crypto/external/bsd/openssl/dist/ssl/ssl_txt.c                                     |   16 +-
 crypto/external/bsd/openssl/dist/ssl/statem/statem.c                               |    4 +-
 crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c                          |   17 +-
 crypto/external/bsd/openssl/dist/ssl/statem/statem_dtls.c                          |    3 +-
 crypto/external/bsd/openssl/dist/ssl/statem/statem_lib.c                           |   25 +
 crypto/external/bsd/openssl/dist/ssl/statem/statem_srvr.c                          |   45 +-
 crypto/external/bsd/openssl/dist/ssl/t1_trce.c                                     |   17 +-
 crypto/external/bsd/openssl/dist/test/build.info                                   |   19 +-
 crypto/external/bsd/openssl/dist/test/certs/alt1-cert.pem                          |   39 +-
 crypto/external/bsd/openssl/dist/test/certs/alt1-key.pem                           |   52 +-
 crypto/external/bsd/openssl/dist/test/certs/badalt6-cert.pem                       |   35 +-
 crypto/external/bsd/openssl/dist/test/certs/badalt6-key.pem                        |   52 +-
 crypto/external/bsd/openssl/dist/test/certs/badalt7-cert.pem                       |   33 +-
 crypto/external/bsd/openssl/dist/test/certs/badalt7-key.pem                        |   52 +-
 crypto/external/bsd/openssl/dist/test/certs/badcn1-cert.pem                        |   20 +
 crypto/external/bsd/openssl/dist/test/certs/badcn1-key.pem                         |   28 +
 crypto/external/bsd/openssl/dist/test/certs/goodcn1-cert.pem                       |   22 +
 crypto/external/bsd/openssl/dist/test/certs/goodcn1-key.pem                        |   28 +
 crypto/external/bsd/openssl/dist/test/certs/setup.sh                               |   25 +-
 crypto/external/bsd/openssl/dist/test/errtest.c                                    |   40 +
 crypto/external/bsd/openssl/dist/test/evptests.txt                                 |   31 +-
 crypto/external/bsd/openssl/dist/test/recipes/04-test_err.t                        |   12 +
 crypto/external/bsd/openssl/dist/test/recipes/15-test_genrsa.t                     |   39 +-
 crypto/external/bsd/openssl/dist/test/recipes/25-test_verify.t                     |   10 +-
 crypto/external/bsd/openssl/dist/test/recipes/60-test_x509_dup_cert.t              |   19 +
 crypto/external/bsd/openssl/dist/test/recipes/60-test_x509_time.t                  |   12 +
 crypto/external/bsd/openssl/dist/test/recipes/80-test_cipherlist.t                 |    9 +-
 crypto/external/bsd/openssl/dist/test/recipes/90-test_fuzz.t                       |   12 +-
 crypto/external/bsd/openssl/dist/test/recipes/90-test_shlibload.t                  |    6 +-
 crypto/external/bsd/openssl/dist/test/shlibloadtest.c                              |   58 ++-
 crypto/external/bsd/openssl/dist/test/sslapitest.c                                 |   56 ++
 crypto/external/bsd/openssl/dist/test/verify_extra_test.c                          |   44 +-
 crypto/external/bsd/openssl/dist/test/versions.c                                   |   20 +
 crypto/external/bsd/openssl/dist/test/x509_dup_cert_test.c                         |   70 ++
 crypto/external/bsd/openssl/dist/test/x509_time_test.c                             |  212 ++++++++
 crypto/external/bsd/openssl/dist/util/copy.pl                                      |   12 +-
 crypto/external/bsd/openssl/dist/util/dofile.pl                                    |    6 +-
 crypto/external/bsd/openssl/dist/util/echo.pl                                      |   12 +
 crypto/external/bsd/openssl/dist/util/libcrypto.num                                |   29 +
 crypto/external/bsd/openssl/dist/util/perl/OpenSSL/Test.pm                         |   29 +-
 crypto/external/bsd/openssl/dist/util/perl/with_fallback.pm                        |    8 +-
 crypto/external/bsd/openssl/dist/util/process_docs.pl                              |   32 +-
 238 files changed, 4144 insertions(+), 1510 deletions(-)

diffs (truncated from 11271 to 300 lines):

diff -r 9f31f2385abd -r e7bcd8679440 crypto/external/bsd/openssl/dist/.gitignore
--- a/crypto/external/bsd/openssl/dist/.gitignore       Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/.gitignore       Sat Aug 18 08:30:43 2018 +0000
@@ -51,6 +51,7 @@
 /test/ssltest_old
 /test/x509aux
 /test/v3ext
+/test/versions
 
 # Certain files that get created by tests on the fly
 /test/test-runs
diff -r 9f31f2385abd -r e7bcd8679440 crypto/external/bsd/openssl/dist/.travis.yml
--- a/crypto/external/bsd/openssl/dist/.travis.yml      Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/.travis.yml      Sat Aug 18 08:30:43 2018 +0000
@@ -61,7 +61,7 @@
                   sources:
                       - ubuntu-toolchain-r-test
           compiler: gcc-5
-          env: CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 -DPEDANTIC"
+          env: UBUNTU_GCC_HACK="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 -DPEDANTIC"
         - os: linux
           addons:
               apt:
@@ -69,7 +69,7 @@
                       - binutils-mingw-w64
                       - gcc-mingw-w64
           compiler: i686-w64-mingw32-gcc
-          env: CONFIG_OPTS="no-pic" TESTS="-test_fuzz"
+          env: CONFIG_OPTS="no-pic"
         - os: linux
           addons:
               apt:
@@ -85,7 +85,7 @@
                       - binutils-mingw-w64
                       - gcc-mingw-w64
           compiler: x86_64-w64-mingw32-gcc
-          env: CONFIG_OPTS="no-pic" TESTS="-test_fuzz"
+          env: CONFIG_OPTS="no-pic"
         - os: linux
           addons:
               apt:
@@ -112,6 +112,10 @@
           srcdir=.;
           top=.;
       fi
+    - if [ -n "$UBUNTU_GCC_HACK" ]; then
+          $CC -dumpspecs | sed "s/--push-state//g; s/--pop-state/--as-needed/g" > gcc-specs.txt;
+          CC="$CC -specs=gcc-specs.txt";
+      fi
     - if [ "$CC" == i686-w64-mingw32-gcc ]; then
           export CROSS_COMPILE=${CC%%gcc}; unset CC;
           $srcdir/Configure mingw $CONFIG_OPTS -Wno-pedantic-ms-format;
@@ -186,7 +190,7 @@
       fi
     - if [ -n "$DESTDIR" ]; then
           mkdir "../$DESTDIR";
-          if $make install install_docs DESTDIR="../$DESTDIR"; then
+          if $make install DESTDIR="../$DESTDIR"; then
               echo -e '+\057\057\057\057\057 MAKE INSTALL_DOCS OK';
           else
               echo -e '+\057\057\057\057\057 MAKE INSTALL_DOCS FAILED'; false;
diff -r 9f31f2385abd -r e7bcd8679440 crypto/external/bsd/openssl/dist/CONTRIBUTING
--- a/crypto/external/bsd/openssl/dist/CONTRIBUTING     Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/CONTRIBUTING     Sat Aug 18 08:30:43 2018 +0000
@@ -1,26 +1,26 @@
-HOW TO CONTRIBUTE PATCHES TO OpenSSL
-------------------------------------
+HOW TO CONTRIBUTE TO OpenSSL
+----------------------------
 
 (Please visit https://www.openssl.org/community/getting-started.html for
 other ideas about how to contribute.)
 
-Development is coordinated on the openssl-dev mailing list (see the
-above link or https://mta.openssl.org for information on subscribing).
-If you are unsure as to whether a feature will be useful for the general
-OpenSSL community you might want to discuss it on the openssl-dev mailing
-list first.  Someone may be already working on the same thing or there
-may be a good reason as to why that feature isn't implemented.
+Development is done on GitHub, https://github.com/openssl/openssl.
+
+To request new features or report bugs, please open an issue on GitHub
+
+To submit a patch, please open a pull request on GitHub.  If you are thinking
+of making a large contribution, open an issue for it before starting work,
+to get comments from the community.  Someone may be already working on
+the same thing or there may be reasons why that feature isn't implemented.
 
-To submit a patch, make a pull request on GitHub.  If you think the patch
-could use feedback from the community, please start a thread on openssl-dev
-to discuss it.
+To make it easier to review and accept your pull request, please follow these
+guidelines:
 
-Having addressed the following items before the PR will help make the
-acceptance and review process faster:
-
-    1. Anything other than trivial contributions will require a contributor
-    licensing agreement, giving us permission to use your code. See
-    https://www.openssl.org/policies/cla.html for details.
+    1. Anything other than a trivial contribution requires a Contributor
+    License Agreement (CLA), giving us permission to use your code. See
+    https://www.openssl.org/policies/cla.html for details.  If your
+    contribution is too small to require a CLA, put "CLA: trivial" on a
+    line by itself in your commit message body.
 
     2.  All source files should start with the following text (with
     appropriate comment characters at the start of each line and the
@@ -34,21 +34,38 @@
         https://www.openssl.org/source/license.html
 
     3.  Patches should be as current as possible; expect to have to rebase
-    often. We do not accept merge commits; You will be asked to remove
-    them before a patch is considered acceptable.
+    often. We do not accept merge commits, you will have to remove them
+    (usually by rebasing) before it will be acceptable.
 
     4.  Patches should follow our coding style (see
-    https://www.openssl.org/policies/codingstyle.html) and compile without
-    warnings. Where gcc or clang is available you should use the
+    https://www.openssl.org/policies/codingstyle.html) and compile
+    without warnings. Where gcc or clang is available you should use the
     --strict-warnings Configure option.  OpenSSL compiles on many varied
-    platforms: try to ensure you only use portable features.
-    Clean builds via Travis and AppVeyor are expected, and done whenever
-    a PR is created or updated.
+    platforms: try to ensure you only use portable features.  Clean builds
+    via Travis and AppVeyor are required, and they are started automatically
+    whenever a PR is created or updated.
 
     5.  When at all possible, patches should include tests. These can
     either be added to an existing test, or completely new.  Please see
     test/README for information on the test framework.
 
     6.  New features or changed functionality must include
-    documentation. Please look at the "pod" files in doc/apps, doc/crypto
-    and doc/ssl for examples of our style.
+    documentation. Please look at the "pod" files in doc for
+    examples of our style.
+
+    7.  For user visible changes (API changes, behaviour changes, ...),
+    consider adding a note in CHANGES.  This could be a summarising
+    description of the change, and could explain the grander details.
+    Have a look through existing entries for inspiration. 
+    Please note that this is NOT simply a copy of git-log oneliners.
+    Also note that security fixes get an entry in CHANGES.
+    This file helps users get more in depth information of what comes
+    with a specific release without having to sift through the higher
+    noise ratio in git-log.
+
+    8.  For larger or more important user visible changes, as well as
+    security fixes, please add a line in NEWS.  On exception, it might be
+    worth adding a multi-line entry (such as the entry that announces all
+    the types that became opaque with OpenSSL 1.1.0).
+    This file helps users get a very quick summary of what comes with a
+    specific release, to see if an upgrade is worth the effort.
diff -r 9f31f2385abd -r e7bcd8679440 crypto/external/bsd/openssl/dist/Configurations/10-main.conf
--- a/crypto/external/bsd/openssl/dist/Configurations/10-main.conf      Sat Aug 18 06:52:57 2018 +0000
+++ b/crypto/external/bsd/openssl/dist/Configurations/10-main.conf      Sat Aug 18 08:30:43 2018 +0000
@@ -14,7 +14,7 @@
                                 asflags   => "/c /Cp /Cx /Zi",
                                 asoutflag => "/Fo" };
         } else {
-            $die->("NASM not found - please read INSTALL and NOTES.WIN for further details\n");
+            $die->("NASM not found - make sure it's installed and available on %PATH%\n");
             $vc_win64a_info = { as        => "{unknown}",
                                 asflags   => "",
                                 asoutflag => "" };
@@ -39,7 +39,7 @@
                                asoutflag => "/Fo",
                                perlasm_scheme => "win32" };
         } else {
-            $die->("NASM not found - please read INSTALL and NOTES.WIN for further details\n");
+            $die->("NASM not found - make sure it's installed and available on %PATH%\n");
             $vc_win32_info = { as        => "{unknown}",
                                asflags   => "",
                                asoutflag => "",
@@ -428,8 +428,17 @@
 #   even PA-RISC 2.0-specific code paths, which are chosen at run-time,
 #   thus adequate performance is provided even with PA-RISC 1.1 build.
 #                                      <appro%fy.chalmers.se@localhost>
+    "hpux-common" => {
+        inherit_from     => [ "BASE_unix" ],
+        template         => 1,
+        defines          => add("_XOPEN_SOURCE", "_XOPEN_SOURCE_EXTENDED",
+                                "_HPUX_ALT_XOPEN_SOCKET_API"),
+        thread_scheme    => "pthreads",
+        dso_scheme       => "dlfcn",    # overridden in 32-bit PA-RISC builds
+        shared_target    => "hpux-shared",
+    },
     "hpux-parisc-gcc" => {
-        inherit_from     => [ "BASE_unix" ],
+        inherit_from     => [ "hpux-common" ],
         cc               => "gcc",
         cflags           => combine(picker(default => "-DB_ENDIAN -DBN_DIV2W",
                                            debug   => "-O0 -g",
@@ -437,9 +446,7 @@
                                     threads("-pthread")),
         ex_libs          => add("-Wl,+s -ldld", threads("-pthread")),
         bn_ops           => "BN_LLONG",
-        thread_scheme    => "pthreads",
         dso_scheme       => "dl",
-        shared_target    => "hpux-shared",
         shared_cflag     => "-fPIC",
         shared_ldflag    => "-shared",
         shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -449,7 +456,7 @@
         multilib         => "/pa1.1",
     },
     "hpux64-parisc2-gcc" => {
-        inherit_from     => [ "BASE_unix", asm("parisc20_64_asm") ],
+        inherit_from     => [ "hpux-common", asm("parisc20_64_asm") ],
         cc               => "gcc",
         cflags           => combine(picker(default => "-DB_ENDIAN",
                                            debug   => "-O0 -g",
@@ -457,9 +464,6 @@
                                     threads("-D_REENTRANT")),
         ex_libs          => add("-ldl"),
         bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
-        thread_scheme    => "pthreads",
-        dso_scheme       => "dlfcn",
-        shared_target    => "hpux-shared",
         shared_cflag     => "-fpic",
         shared_ldflag    => "-shared",
         shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -471,7 +475,7 @@
     # Chris Ruemmler <ruemmler%cup.hp.com@localhost>
     # Kevin Steves <ks%hp.se@localhost>
     "hpux-parisc-cc" => {
-        inherit_from     => [ "BASE_unix" ],
+        inherit_from     => [ "hpux-common" ],
         cc               => "cc",
         cflags           => combine(picker(default => "+Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY",
                                            debug   => "+O0 +d -g",
@@ -479,9 +483,7 @@
                                     threads("-D_REENTRANT")),
         ex_libs          => add("-Wl,+s -ldld",threads("-lpthread")),
         bn_ops           => "RC4_CHAR",
-        thread_scheme    => "pthreads",
         dso_scheme       => "dl",
-        shared_target    => "hpux-shared",
         shared_cflag     => "+Z",
         shared_ldflag    => "-b",
         shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -492,7 +494,7 @@
         multilib         => "/pa1.1",
     },
     "hpux64-parisc2-cc" => {
-        inherit_from     => [ "BASE_unix", asm("parisc20_64_asm") ],
+        inherit_from     => [ "hpux-common", asm("parisc20_64_asm") ],
         cc               => "cc",
         cflags           => combine(picker(default => "+DD64 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY",
                                            debug   => "+O0 +d -g",
@@ -500,9 +502,6 @@
                                     threads("-D_REENTRANT")),
         ex_libs          => add("-ldl",threads("-lpthread")),
         bn_ops           => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
-        thread_scheme    => "pthreads",
-        dso_scheme       => "dlfcn",
-        shared_target    => "hpux-shared",
         shared_cflag     => "+Z",
         shared_ldflag    => "+DD64 -b",
         shared_extension => ".sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -511,7 +510,7 @@
 
     # HP/UX IA-64 targets
     "hpux-ia64-cc" => {
-        inherit_from     => [ "BASE_unix", asm("ia64_asm") ],
+        inherit_from     => [ "hpux-common", asm("ia64_asm") ],
         cc               => "cc",
         cflags           => combine(picker(default => "-Ae +DD32 +Olit=all -z -DB_ENDIAN",
                                            debug   => "+O0 +d -g",
@@ -519,9 +518,6 @@
                                     threads("-D_REENTRANT")),
         ex_libs          => add("-ldl",threads("-lpthread")),
         bn_ops           => "SIXTY_FOUR_BIT",
-        thread_scheme    => "pthreads",
-        dso_scheme       => "dlfcn",
-        shared_target    => "hpux-shared",
         shared_cflag     => "+Z",
         shared_ldflag    => "+DD32 -b",
         shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -530,7 +526,7 @@
     # Frank Geurts <frank.geurts%nl.abnamro.com@localhost> has patiently assisted
     # with debugging of the following config.
     "hpux64-ia64-cc" => {
-        inherit_from     => [ "BASE_unix", asm("ia64_asm") ],
+        inherit_from     => [ "hpux-common", asm("ia64_asm") ],
         cc               => "cc",
         cflags           => combine(picker(default => "-Ae +DD64 +Olit=all -z -DB_ENDIAN",
                                            debug   => "+O0 +d -g",
@@ -538,9 +534,6 @@
                                     threads("-D_REENTRANT")),
         ex_libs          => add("-ldl", threads("-lpthread")),
         bn_ops           => "SIXTY_FOUR_BIT_LONG",
-        thread_scheme    => "pthreads",
-        dso_scheme       => "dlfcn",
-        shared_target    => "hpux-shared",
         shared_cflag     => "+Z",
         shared_ldflag    => "+DD64 -b",




Home | Main Index | Thread Index | Old Index