Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/netbsd-9]: src/doc Pull up the following revisions, requested by kim in ...
details: https://anonhg.NetBSD.org/src/rev/0392805789b2
branches: netbsd-9
changeset: 373697:0392805789b2
user: martin <martin%NetBSD.org@localhost>
date: Fri Feb 24 14:07:45 2023 +0000
description:
Pull up the following revisions, requested by kim in ticket #1608:
crypto/external/bsd/openssl/dist/apps/vms_decc_argv.c up to 1.1.1.1
crypto/external/bsd/openssl/dist/crypto/bn/rsa_sup_mul.c up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/certs/cross-key.pem up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/certs/cross-root.pem up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/certs/root-cross-cert.pem up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1_issuer-key.pem up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/smime-certs/badrsa.pem up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/ssl-tests/30-supported-groups.conf up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/ssl-tests/30-supported-groups.conf.in up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/dane-cross.in up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/data.bin up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/testrsa_withattrs.der up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/testrsa_withattrs.pem up to 1.1.1.1
crypto/external/bsd/openssl/dist/util/perl/OpenSSL/copyright.pm up to 1.1.1.1
crypto/external/bsd/openssl/dist/test/ssl-tests/16-certstatus.conf delete
crypto/external/bsd/openssl/dist/CHANGES up to 1.30
crypto/external/bsd/openssl/dist/Configure up to 1.31
crypto/external/bsd/openssl/dist/NEWS up to 1.30
crypto/external/bsd/openssl/dist/README up to 1.30
crypto/external/bsd/openssl/dist/config up to 1.1.1.14
crypto/external/bsd/openssl/dist/Configurations/10-main.conf up to 1.1.1.12
crypto/external/bsd/openssl/dist/Configurations/15-android.conf up to 1.1.1.5
crypto/external/bsd/openssl/dist/Configurations/descrip.mms.tmpl up to 1.1.1.8
crypto/external/bsd/openssl/dist/Configurations/unix-Makefile.tmpl up to 1.1.1.12
crypto/external/bsd/openssl/dist/Configurations/windows-makefile.tmpl up to 1.1.1.8
crypto/external/bsd/openssl/dist/apps/apps.c up to 1.1.1.23
crypto/external/bsd/openssl/dist/apps/apps.h up to 1.1.1.16
crypto/external/bsd/openssl/dist/apps/ca.c up to 1.22
crypto/external/bsd/openssl/dist/apps/ciphers.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/apps/crl2p7.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/apps/dgst.c up to 1.1.1.16
crypto/external/bsd/openssl/dist/apps/enc.c up to 1.1.1.17
crypto/external/bsd/openssl/dist/apps/ocsp.c up to 1.23
crypto/external/bsd/openssl/dist/apps/openssl.c up to 1.7
crypto/external/bsd/openssl/dist/apps/openssl.cnf up to 1.9
crypto/external/bsd/openssl/dist/apps/passwd.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/apps/s_cb.c up to 1.1.1.21
crypto/external/bsd/openssl/dist/apps/s_client.c up to 1.25
crypto/external/bsd/openssl/dist/apps/s_server.c up to 1.25
crypto/external/bsd/openssl/dist/apps/s_socket.c up to 1.1.1.11
crypto/external/bsd/openssl/dist/apps/speed.c up to 1.21
crypto/external/bsd/openssl/dist/apps/vms_decc_init.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/apps/x509.c up to 1.1.1.17
crypto/external/bsd/openssl/dist/crypto/armcap.c up to 1.14
crypto/external/bsd/openssl/dist/crypto/init.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/ppccap.c up to 1.20
crypto/external/bsd/openssl/dist/crypto/s390x_arch.h up to 1.1.1.3
crypto/external/bsd/openssl/dist/crypto/s390xcap.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/sparcv9cap.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/uid.c up to 1.8
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-x86.pl up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesv8-armx.pl up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/asn1/a_object.c up to 1.1.1.13
crypto/external/bsd/openssl/dist/crypto/asn1/a_print.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/asn1/a_strex.c up to 1.10
crypto/external/bsd/openssl/dist/crypto/asn1/asn1_lib.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/asn1/asn_mime.c up to 1.13
crypto/external/bsd/openssl/dist/crypto/asn1/bio_asn1.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/asn1/bio_ndef.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/asn1/charmap.h up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/asn1/charmap.pl up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/asn1/d2i_pr.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/asn1/t_spki.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/crypto/bio/b_addr.c up to 1.1.1.11
crypto/external/bsd/openssl/dist/crypto/bio/b_print.c up to 1.1.1.11
crypto/external/bsd/openssl/dist/crypto/bio/b_sock2.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/bio/bss_dgram.c up to 1.1.1.19
crypto/external/bsd/openssl/dist/crypto/bio/bss_mem.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/bn/bn_blind.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/bn/bn_div.c up to 1.1.1.15
crypto/external/bsd/openssl/dist/crypto/bn/bn_err.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/bn/bn_exp.c up to 1.21
crypto/external/bsd/openssl/dist/crypto/bn/bn_exp2.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/bn/bn_gcd.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/bn/bn_local.h up to 1.1.1.3
crypto/external/bsd/openssl/dist/crypto/bn/bn_mont.c up to 1.13
crypto/external/bsd/openssl/dist/crypto/bn/bn_nist.c up to 1.7
crypto/external/bsd/openssl/dist/crypto/bn/bn_prime.h up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/bn/bn_prime.pl up to 1.1.1.5
crypto/external/bsd/openssl/dist/crypto/bn/bn_print.c up to 1.4
crypto/external/bsd/openssl/dist/crypto/bn/bn_sqrt.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/bn/build.info up to 1.1.1.4
crypto/external/bsd/openssl/dist/crypto/bn/rsaz_exp.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/crypto/bn/rsaz_exp.h up to 1.1.1.5
crypto/external/bsd/openssl/dist/crypto/bn/asm/mips.pl up to 1.9
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont5.pl up to 1.1.1.14
crypto/external/bsd/openssl/dist/crypto/chacha/asm/chacha-x86_64.pl up to 1.1.1.5
crypto/external/bsd/openssl/dist/crypto/cms/cms_enc.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/cms/cms_env.c up to 1.1.1.13
crypto/external/bsd/openssl/dist/crypto/cms/cms_err.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/conf/conf_def.h up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/conf/keysets.pl up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/dh/dh_ameth.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_prn.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/crypto/ec/ec2_oct.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/ec/ec_asn1.c up to 1.13
crypto/external/bsd/openssl/dist/crypto/ec/ec_curve.c up to 1.1.1.11
crypto/external/bsd/openssl/dist/crypto/ec/ec_key.c up to 1.7
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistz256.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/ec/curve448/curve448.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/crypto/ec/curve448/field.h up to 1.1.1.3
crypto/external/bsd/openssl/dist/crypto/engine/eng_all.c up to 1.14
crypto/external/bsd/openssl/dist/crypto/engine/eng_dyn.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/engine/eng_lib.c up to 1.9
crypto/external/bsd/openssl/dist/crypto/engine/eng_list.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/engine/eng_local.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/crypto/err/err.c up to 1.1.1.14
crypto/external/bsd/openssl/dist/crypto/err/openssl.txt up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/evp/bio_enc.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/evp/digest.c up to 1.1.1.13
crypto/external/bsd/openssl/dist/crypto/evp/e_aes.c up to 1.25
crypto/external/bsd/openssl/dist/crypto/evp/e_camellia.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/evp/evp_enc.c up to 1.15
crypto/external/bsd/openssl/dist/crypto/evp/evp_local.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/crypto/evp/p_lib.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/hmac/hm_ameth.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/lhash/lhash.c up to 1.10
crypto/external/bsd/openssl/dist/crypto/objects/o_names.c up to 1.10
crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.h up to 1.1.1.13
crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.pl up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/objects/obj_xref.h up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/objects/objects.pl up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/objects/objxref.pl up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/pem/pem_lib.c up to 1.1.1.16
crypto/external/bsd/openssl/dist/crypto/pkcs12/p12_key.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/poly1305/poly1305_ameth.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/crypto/rand/drbg_lib.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/rand/rand_lib.c up to 1.1.1.16
crypto/external/bsd/openssl/dist/crypto/rand/rand_unix.c up to 1.18
crypto/external/bsd/openssl/dist/crypto/rand/rand_vms.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/rand/rand_win.c up to 1.1.1.14
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ameth.c up to 1.1.1.16
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ossl.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_prn.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/crypto/siphash/siphash_ameth.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/crypto/sm2/sm2_crypt.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/crypto/sm2/sm2_pmeth.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/crypto/srp/srp_vfy.c up to 1.1.1.13
crypto/external/bsd/openssl/dist/crypto/store/loader_file.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/crypto/ts/ts_rsp_verify.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/ts/ts_verify_ctx.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/txt_db/txt_db.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/ui/ui_openssl.c up to 1.18
crypto/external/bsd/openssl/dist/crypto/x509/by_dir.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/x509/t_x509.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/crypto/x509/x509_cmp.c up to 1.1.1.17
crypto/external/bsd/openssl/dist/crypto/x509/x509_req.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/x509/x509_vfy.c up to 1.26
crypto/external/bsd/openssl/dist/crypto/x509/x509_vpm.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/crypto/x509/x_all.c up to 1.1.1.13
crypto/external/bsd/openssl/dist/crypto/x509/x_crl.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/x509/x_name.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_addr.c up to 1.9
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_akey.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_alt.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_asid.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_cpols.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_genn.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_lib.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_ncons.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_pci.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_sxnet.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_utl.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/crypto/x509v3/v3err.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/demos/bio/client-arg.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/demos/bio/client-conf.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/fingerprints.txt up to 1.1.1.7
crypto/external/bsd/openssl/dist/doc/man1/cms.pod up to 1.1.1.4
crypto/external/bsd/openssl/dist/doc/man1/enc.pod up to 1.1.1.7
crypto/external/bsd/openssl/dist/doc/man1/passwd.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man1/pkeyutl.pod up to 1.1.1.5
crypto/external/bsd/openssl/dist/doc/man1/s_client.pod up to 1.1.1.8
crypto/external/bsd/openssl/dist/doc/man1/s_server.pod up to 1.1.1.8
crypto/external/bsd/openssl/dist/doc/man1/x509.pod up to 1.1.1.7
crypto/external/bsd/openssl/dist/doc/man3/BIO_ctrl.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/BIO_f_base64.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/BIO_f_ssl.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/BIO_push.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/BN_add.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/BN_cmp.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man3/BN_rand.pod up to 1.1.1.4
crypto/external/bsd/openssl/dist/doc/man3/CMS_add0_cert.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man3/CMS_verify.pod up to 1.1.1.4
crypto/external/bsd/openssl/dist/doc/man3/DEFINE_STACK_OF.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man3/EC_KEY_new.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/ENGINE_add.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/ERR_load_strings.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man3/EVP_EncryptInit.pod up to 1.1.1.7
crypto/external/bsd/openssl/dist/doc/man3/OBJ_nid2obj.pod up to 1.1.1.4
crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_LH_COMPFUNC.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_init_crypto.pod up to 1.1.1.4
crypto/external/bsd/openssl/dist/doc/man3/PKCS7_sign.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/PKCS7_sign_add_signer.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/PKCS7_verify.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/SSL_CONF_cmd.pod up to 1.1.1.5
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set1_verify_cert_store.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_num_tickets.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_timeout.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_tlsext_ticket_key_cb.pod up to 1.1.1.5
crypto/external/bsd/openssl/dist/doc/man3/SSL_get_current_cipher.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man3/SSL_get_session.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/doc/man3/SSL_set_fd.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/X509_STORE_CTX_new.pod up to 1.1.1.6
crypto/external/bsd/openssl/dist/doc/man3/d2i_PrivateKey.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man3/d2i_X509.pod up to 1.1.1.6
crypto/external/bsd/openssl/dist/doc/man7/ossl_store.pod up to 1.1.1.3
crypto/external/bsd/openssl/dist/doc/man7/x509.pod up to 1.1.1.2
crypto/external/bsd/openssl/dist/engines/e_afalg.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/engines/e_dasync.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/engines/asm/e_padlock-x86.pl up to 1.1.1.3
crypto/external/bsd/openssl/dist/engines/asm/e_padlock-x86_64.pl up to 1.1.1.3
crypto/external/bsd/openssl/dist/include/crypto/bn.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/include/crypto/rand.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/include/crypto/sm2.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/include/crypto/x509.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/include/internal/sockets.h up to 1.1.1.4
crypto/external/bsd/openssl/dist/include/openssl/bnerr.h up to 1.1.1.3
crypto/external/bsd/openssl/dist/include/openssl/cmserr.h up to 1.1.1.3
crypto/external/bsd/openssl/dist/include/openssl/e_os2.h up to 1.1.1.6
crypto/external/bsd/openssl/dist/include/openssl/ec.h up to 1.1.1.6
crypto/external/bsd/openssl/dist/include/openssl/engine.h up to 1.1.1.3
crypto/external/bsd/openssl/dist/include/openssl/obj_mac.h up to 1.1.1.7
crypto/external/bsd/openssl/dist/include/openssl/opensslv.h up to 1.1.1.17
crypto/external/bsd/openssl/dist/include/openssl/ssl.h up to 1.1.1.10
crypto/external/bsd/openssl/dist/include/openssl/sslerr.h up to 1.1.1.6
crypto/external/bsd/openssl/dist/include/openssl/x509v3.h up to 1.1.1.7
crypto/external/bsd/openssl/dist/include/openssl/x509v3err.h up to 1.1.1.3
crypto/external/bsd/openssl/dist/ssl/bio_ssl.c up to 1.1.1.11
crypto/external/bsd/openssl/dist/ssl/d1_lib.c up to 1.12
crypto/external/bsd/openssl/dist/ssl/packet.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/ssl/packet_local.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/ssl/s3_cbc.c up to 1.11
crypto/external/bsd/openssl/dist/ssl/s3_enc.c up to 1.17
crypto/external/bsd/openssl/dist/ssl/s3_lib.c up to 1.30
crypto/external/bsd/openssl/dist/ssl/s3_msg.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/ssl/ssl_asn1.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/ssl/ssl_cert.c up to 1.1.1.17
crypto/external/bsd/openssl/dist/ssl/ssl_ciph.c up to 1.23
crypto/external/bsd/openssl/dist/ssl/ssl_err.c up to 1.19
crypto/external/bsd/openssl/dist/ssl/ssl_init.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/ssl/ssl_lib.c up to 1.22
crypto/external/bsd/openssl/dist/ssl/ssl_local.h up to 1.1.1.4
crypto/external/bsd/openssl/dist/ssl/ssl_rsa.c up to 1.1.1.11
crypto/external/bsd/openssl/dist/ssl/ssl_txt.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/ssl/t1_enc.c up to 1.22
crypto/external/bsd/openssl/dist/ssl/t1_lib.c up to 1.35
crypto/external/bsd/openssl/dist/ssl/tls13_enc.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/ssl/record/rec_layer_s3.c up to 1.1.1.9
crypto/external/bsd/openssl/dist/ssl/record/ssl3_buffer.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/ssl/record/ssl3_record.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/ssl/statem/README up to 1.1.1.3
crypto/external/bsd/openssl/dist/ssl/statem/extensions.c up to 1.1.1.10
crypto/external/bsd/openssl/dist/ssl/statem/extensions_clnt.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/ssl/statem/extensions_cust.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/ssl/statem/extensions_srvr.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c up to 1.1.1.14
crypto/external/bsd/openssl/dist/ssl/statem/statem_dtls.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/ssl/statem/statem_lib.c up to 1.1.1.11
crypto/external/bsd/openssl/dist/ssl/statem/statem_local.h up to 1.1.1.2
crypto/external/bsd/openssl/dist/ssl/statem/statem_srvr.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/test/afalgtest.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/asn1_decode_test.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/asn1_internal_test.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/bio_memleak_test.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/test/bntest.c up to 1.10
crypto/external/bsd/openssl/dist/test/build.info up to 1.1.1.13
crypto/external/bsd/openssl/dist/test/clienthellotest.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/test/ct_test.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/test/danetest.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/dtls_mtu_test.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/dtlstest.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/test/ec_internal_test.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/test/ectest.c up to 1.9
crypto/external/bsd/openssl/dist/test/evp_extra_test.c up to 1.11
crypto/external/bsd/openssl/dist/test/evp_test.c up to 1.9
crypto/external/bsd/openssl/dist/test/exptest.c up to 1.5
crypto/external/bsd/openssl/dist/test/packettest.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/test/pemtest.c up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/rsa_test.c up to 1.9
crypto/external/bsd/openssl/dist/test/sm2_internal_test.c up to 1.1.1.4
crypto/external/bsd/openssl/dist/test/sslapitest.c up to 1.1.1.12
crypto/external/bsd/openssl/dist/test/ssltest_old.c up to 1.1.1.7
crypto/external/bsd/openssl/dist/test/ssltestlib.c up to 1.1.1.8
crypto/external/bsd/openssl/dist/test/ssltestlib.h up to 1.1.1.9
crypto/external/bsd/openssl/dist/test/test_test.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/v3ext.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/v3nametest.c up to 1.1.1.5
crypto/external/bsd/openssl/dist/test/verify_extra_test.c up to 1.1.1.6
crypto/external/bsd/openssl/dist/test/x509_internal_test.c up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/x509_time_test.c up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/certs/ee-ed25519.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/ee-self-signed.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1-key.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1.sct up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1_issuer.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/root-ed25519.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/rootCA.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/certs/setup.sh up to 1.1.1.10
crypto/external/bsd/openssl/dist/test/recipes/01-test_symbol_presence.t up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/recipes/15-test_genrsa.t up to 1.1.1.4
crypto/external/bsd/openssl/dist/test/recipes/20-test_dgst.t up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/recipes/25-test_req.t up to 1.1.1.5
crypto/external/bsd/openssl/dist/test/recipes/25-test_verify.t up to 1.1.1.8
crypto/external/bsd/openssl/dist/test/recipes/25-test_x509.t up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/recipes/70-test_tls13hrr.t up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/recipes/70-test_tls13kexmodes.t up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/recipes/70-test_verify_extra.t up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/recipes/80-test_cms.t up to 1.1.1.4
crypto/external/bsd/openssl/dist/test/recipes/80-test_dane.t up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/recipes/80-test_ssl_new.t up to 1.1.1.6
crypto/external/bsd/openssl/dist/test/recipes/80-test_ssl_old.t up to 1.1.1.5
crypto/external/bsd/openssl/dist/test/recipes/10-test_bn_data/bnmod.txt up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/recipes/30-test_evp_data/evpciph.txt up to 1.1.1.5
crypto/external/bsd/openssl/dist/test/recipes/30-test_evp_data/evpkdf.txt up to 1.3
crypto/external/bsd/openssl/dist/test/recipes/30-test_evp_data/evppkey.txt up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/recipes/95-test_external_pyca_data/cryptography.sh up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/smime-certs/mksmime-certs.sh up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/smime-certs/smdh.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/smime-certs/smdsa1.pem up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/smime-certs/smdsa2.pem up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/smime-certs/smdsa3.pem up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/smime-certs/smec1.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/smime-certs/smec2.pem up to 1.1.1.2
crypto/external/bsd/openssl/dist/test/smime-certs/smroot.pem up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/smime-certs/smrsa1.pem up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/smime-certs/smrsa2.pem up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/smime-certs/smrsa3.pem up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/ssl-tests/10-resumption.conf up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/ssl-tests/11-dtls_resumption.conf up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/ssl-tests/protocol_version.pm up to 1.1.1.3
crypto/external/bsd/openssl/dist/test/testutil/driver.c up to 1.4
crypto/external/bsd/openssl/dist/test/testutil/format_output.c up to 1.6
crypto/external/bsd/openssl/dist/test/testutil/tests.c up to 1.6
crypto/external/bsd/openssl/dist/tools/c_rehash.in up to 1.1.1.7
crypto/external/bsd/openssl/dist/util/mkdir-p.pl up to 1.1.1.3
crypto/external/bsd/openssl/dist/util/private.num up to 1.1.1.4
crypto/external/bsd/openssl/lib/libcrypto/shlib_version up to 1.15
crypto/external/bsd/openssl/lib/libcrypto/bn.inc up to 1.8 (patch)
distrib/sets/lists/base/shl.mi 1.944 (patch)
distrib/sets/lists/debug/shl.mi 1.302 (patch)
doc/3RDPARTY 1.1912 (manual edit)
Import OpenSSL 1.1.1t.
diffstat:
crypto/external/bsd/openssl/dist/CHANGES | 294 +++
crypto/external/bsd/openssl/dist/Configurations/10-main.conf | 32 +-
crypto/external/bsd/openssl/dist/Configurations/15-android.conf | 84 +-
crypto/external/bsd/openssl/dist/Configurations/descrip.mms.tmpl | 3 +-
crypto/external/bsd/openssl/dist/Configurations/unix-Makefile.tmpl | 1 -
crypto/external/bsd/openssl/dist/Configurations/windows-makefile.tmpl | 26 +-
crypto/external/bsd/openssl/dist/Configure | 43 +-
crypto/external/bsd/openssl/dist/NEWS | 47 +
crypto/external/bsd/openssl/dist/README | 4 +-
crypto/external/bsd/openssl/dist/apps/apps.c | 27 +-
crypto/external/bsd/openssl/dist/apps/apps.h | 11 +-
crypto/external/bsd/openssl/dist/apps/ca.c | 8 +-
crypto/external/bsd/openssl/dist/apps/ciphers.c | 3 +-
crypto/external/bsd/openssl/dist/apps/crl2p7.c | 18 +-
crypto/external/bsd/openssl/dist/apps/dgst.c | 6 +-
crypto/external/bsd/openssl/dist/apps/enc.c | 4 +-
crypto/external/bsd/openssl/dist/apps/ocsp.c | 4 +-
crypto/external/bsd/openssl/dist/apps/openssl.c | 6 +-
crypto/external/bsd/openssl/dist/apps/openssl.cnf | 1 -
crypto/external/bsd/openssl/dist/apps/passwd.c | 10 +-
crypto/external/bsd/openssl/dist/apps/s_cb.c | 32 +-
crypto/external/bsd/openssl/dist/apps/s_client.c | 15 +-
crypto/external/bsd/openssl/dist/apps/s_server.c | 60 +-
crypto/external/bsd/openssl/dist/apps/s_socket.c | 14 +-
crypto/external/bsd/openssl/dist/apps/speed.c | 10 +-
crypto/external/bsd/openssl/dist/apps/vms_decc_argv.c | 66 +
crypto/external/bsd/openssl/dist/apps/vms_decc_init.c | 40 +-
crypto/external/bsd/openssl/dist/apps/x509.c | 16 +-
crypto/external/bsd/openssl/dist/config | 4 +-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-x86.pl | 6 +-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesv8-armx.pl | 64 +-
crypto/external/bsd/openssl/dist/crypto/armcap.c | 30 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_object.c | 15 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_print.c | 9 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_strex.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/asn1/asn1_lib.c | 21 +-
crypto/external/bsd/openssl/dist/crypto/asn1/asn_mime.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/asn1/bio_asn1.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/asn1/bio_ndef.c | 44 +-
crypto/external/bsd/openssl/dist/crypto/asn1/charmap.h | 2 +-
crypto/external/bsd/openssl/dist/crypto/asn1/charmap.pl | 9 +-
crypto/external/bsd/openssl/dist/crypto/asn1/d2i_pr.c | 73 +-
crypto/external/bsd/openssl/dist/crypto/asn1/t_spki.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/bio/b_addr.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/bio/b_print.c | 22 +-
crypto/external/bsd/openssl/dist/crypto/bio/b_sock2.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/bio/bss_dgram.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/bio/bss_mem.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/mips.pl | 6 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont5.pl | 198 +--
crypto/external/bsd/openssl/dist/crypto/bn/bn_blind.c | 16 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_div.c | 15 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_err.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_exp.c | 83 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_exp2.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_gcd.c | 8 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_local.h | 36 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_mont.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_nist.c | 35 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_prime.h | 2 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_prime.pl | 9 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_print.c | 2 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_sqrt.c | 32 +-
crypto/external/bsd/openssl/dist/crypto/bn/build.info | 3 +-
crypto/external/bsd/openssl/dist/crypto/bn/rsa_sup_mul.c | 614 +++++++
crypto/external/bsd/openssl/dist/crypto/bn/rsaz_exp.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/bn/rsaz_exp.h | 25 +-
crypto/external/bsd/openssl/dist/crypto/chacha/asm/chacha-x86_64.pl | 54 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms_enc.c | 5 +
crypto/external/bsd/openssl/dist/crypto/cms/cms_env.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms_err.c | 2 +
crypto/external/bsd/openssl/dist/crypto/conf/conf_def.h | 2 +-
crypto/external/bsd/openssl/dist/crypto/conf/keysets.pl | 10 +-
crypto/external/bsd/openssl/dist/crypto/dh/dh_ameth.c | 13 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_prn.c | 14 +-
crypto/external/bsd/openssl/dist/crypto/ec/curve448/curve448.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/ec/curve448/field.h | 4 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec2_oct.c | 43 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_asn1.c | 23 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_curve.c | 29 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_key.c | 15 +-
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistz256.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/engine/eng_all.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/engine/eng_dyn.c | 30 +-
crypto/external/bsd/openssl/dist/crypto/engine/eng_lib.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/engine/eng_list.c | 89 +-
crypto/external/bsd/openssl/dist/crypto/engine/eng_local.h | 11 +-
crypto/external/bsd/openssl/dist/crypto/err/err.c | 46 +-
crypto/external/bsd/openssl/dist/crypto/err/openssl.txt | 10 +-
crypto/external/bsd/openssl/dist/crypto/evp/bio_enc.c | 9 +-
crypto/external/bsd/openssl/dist/crypto/evp/digest.c | 34 +-
crypto/external/bsd/openssl/dist/crypto/evp/e_aes.c | 204 +-
crypto/external/bsd/openssl/dist/crypto/evp/e_camellia.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/evp/evp_enc.c | 22 +-
crypto/external/bsd/openssl/dist/crypto/evp/evp_local.h | 4 +-
crypto/external/bsd/openssl/dist/crypto/evp/p_lib.c | 13 +-
crypto/external/bsd/openssl/dist/crypto/hmac/hm_ameth.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/init.c | 13 +-
crypto/external/bsd/openssl/dist/crypto/lhash/lhash.c | 8 +-
crypto/external/bsd/openssl/dist/crypto/objects/o_names.c | 16 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.c | 7 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.h | 2 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.pl | 11 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_xref.h | 2 +-
crypto/external/bsd/openssl/dist/crypto/objects/objects.pl | 13 +-
crypto/external/bsd/openssl/dist/crypto/objects/objxref.pl | 13 +-
crypto/external/bsd/openssl/dist/crypto/pem/pem_lib.c | 33 +-
crypto/external/bsd/openssl/dist/crypto/pkcs12/p12_key.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/poly1305/poly1305_ameth.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/ppccap.c | 6 +
crypto/external/bsd/openssl/dist/crypto/rand/drbg_lib.c | 20 +-
crypto/external/bsd/openssl/dist/crypto/rand/rand_lib.c | 8 +-
crypto/external/bsd/openssl/dist/crypto/rand/rand_unix.c | 7 +-
crypto/external/bsd/openssl/dist/crypto/rand/rand_vms.c | 92 +-
crypto/external/bsd/openssl/dist/crypto/rand/rand_win.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ameth.c | 1 +
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ossl.c | 19 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_prn.c | 8 +-
crypto/external/bsd/openssl/dist/crypto/s390x_arch.h | 5 +-
crypto/external/bsd/openssl/dist/crypto/s390xcap.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/siphash/siphash_ameth.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/sm2/sm2_crypt.c | 29 +-
crypto/external/bsd/openssl/dist/crypto/sm2/sm2_pmeth.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/sparcv9cap.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/srp/srp_vfy.c | 13 +-
crypto/external/bsd/openssl/dist/crypto/store/loader_file.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/ts/ts_rsp_verify.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/ts/ts_verify_ctx.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/txt_db/txt_db.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/ui/ui_openssl.c | 8 +-
crypto/external/bsd/openssl/dist/crypto/uid.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/x509/by_dir.c | 18 +-
crypto/external/bsd/openssl/dist/crypto/x509/t_x509.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_cmp.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_req.c | 46 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_vfy.c | 79 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_vpm.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/x509/x_all.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/x509/x_crl.c | 14 +-
crypto/external/bsd/openssl/dist/crypto/x509/x_name.c | 12 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_addr.c | 33 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_akey.c | 40 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_alt.c | 12 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_asid.c | 33 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_cpols.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_genn.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_lib.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_ncons.c | 82 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_pci.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_sxnet.c | 22 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_utl.c | 84 +-
crypto/external/bsd/openssl/dist/crypto/x509v3/v3err.c | 6 +-
crypto/external/bsd/openssl/dist/demos/bio/client-arg.c | 8 +-
crypto/external/bsd/openssl/dist/demos/bio/client-conf.c | 8 +-
crypto/external/bsd/openssl/dist/doc/fingerprints.txt | 10 +
crypto/external/bsd/openssl/dist/doc/man1/cms.pod | 5 +-
crypto/external/bsd/openssl/dist/doc/man1/enc.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man1/passwd.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man1/pkeyutl.pod | 10 +
crypto/external/bsd/openssl/dist/doc/man1/s_client.pod | 2 +-
crypto/external/bsd/openssl/dist/doc/man1/s_server.pod | 2 +-
crypto/external/bsd/openssl/dist/doc/man1/x509.pod | 24 +-
crypto/external/bsd/openssl/dist/doc/man3/BIO_ctrl.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man3/BIO_f_base64.pod | 20 +-
crypto/external/bsd/openssl/dist/doc/man3/BIO_f_ssl.pod | 24 +-
crypto/external/bsd/openssl/dist/doc/man3/BIO_push.pod | 55 +-
crypto/external/bsd/openssl/dist/doc/man3/BN_add.pod | 17 +-
crypto/external/bsd/openssl/dist/doc/man3/BN_cmp.pod | 41 +-
crypto/external/bsd/openssl/dist/doc/man3/BN_rand.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man3/CMS_add0_cert.pod | 32 +-
crypto/external/bsd/openssl/dist/doc/man3/CMS_verify.pod | 81 +-
crypto/external/bsd/openssl/dist/doc/man3/DEFINE_STACK_OF.pod | 3 +-
crypto/external/bsd/openssl/dist/doc/man3/EC_KEY_new.pod | 20 +-
crypto/external/bsd/openssl/dist/doc/man3/ENGINE_add.pod | 7 +-
crypto/external/bsd/openssl/dist/doc/man3/ERR_load_strings.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/man3/EVP_EncryptInit.pod | 18 +-
crypto/external/bsd/openssl/dist/doc/man3/OBJ_nid2obj.pod | 62 +-
crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_LH_COMPFUNC.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_init_crypto.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man3/PKCS7_sign.pod | 47 +-
crypto/external/bsd/openssl/dist/doc/man3/PKCS7_sign_add_signer.pod | 55 +-
crypto/external/bsd/openssl/dist/doc/man3/PKCS7_verify.pod | 104 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_CONF_cmd.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set1_verify_cert_store.pod | 15 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_num_tickets.pod | 10 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_timeout.pod | 12 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_tlsext_ticket_key_cb.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_get_current_cipher.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_get_session.pod | 9 +-
crypto/external/bsd/openssl/dist/doc/man3/SSL_set_fd.pod | 13 +-
crypto/external/bsd/openssl/dist/doc/man3/X509_STORE_CTX_new.pod | 75 +-
crypto/external/bsd/openssl/dist/doc/man3/d2i_PrivateKey.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/man3/d2i_X509.pod | 6 +-
crypto/external/bsd/openssl/dist/doc/man7/ossl_store.pod | 4 +-
crypto/external/bsd/openssl/dist/doc/man7/x509.pod | 6 +-
crypto/external/bsd/openssl/dist/engines/asm/e_padlock-x86.pl | 4 +-
crypto/external/bsd/openssl/dist/engines/asm/e_padlock-x86_64.pl | 4 +-
crypto/external/bsd/openssl/dist/engines/e_afalg.c | 9 +-
crypto/external/bsd/openssl/dist/engines/e_dasync.c | 30 +-
crypto/external/bsd/openssl/dist/include/crypto/bn.h | 7 +-
crypto/external/bsd/openssl/dist/include/crypto/rand.h | 12 +-
crypto/external/bsd/openssl/dist/include/crypto/sm2.h | 5 +-
crypto/external/bsd/openssl/dist/include/crypto/x509.h | 7 +-
crypto/external/bsd/openssl/dist/include/internal/sockets.h | 4 +-
crypto/external/bsd/openssl/dist/include/openssl/bnerr.h | 3 +-
crypto/external/bsd/openssl/dist/include/openssl/cmserr.h | 1 +
crypto/external/bsd/openssl/dist/include/openssl/e_os2.h | 5 +-
crypto/external/bsd/openssl/dist/include/openssl/ec.h | 17 +-
crypto/external/bsd/openssl/dist/include/openssl/engine.h | 3 +-
crypto/external/bsd/openssl/dist/include/openssl/obj_mac.h | 2 +-
crypto/external/bsd/openssl/dist/include/openssl/opensslv.h | 6 +-
crypto/external/bsd/openssl/dist/include/openssl/ssl.h | 12 +-
crypto/external/bsd/openssl/dist/include/openssl/sslerr.h | 5 +-
crypto/external/bsd/openssl/dist/include/openssl/x509v3.h | 4 +-
crypto/external/bsd/openssl/dist/include/openssl/x509v3err.h | 4 +-
crypto/external/bsd/openssl/dist/ssl/bio_ssl.c | 10 +-
crypto/external/bsd/openssl/dist/ssl/d1_lib.c | 3 +-
crypto/external/bsd/openssl/dist/ssl/packet.c | 8 +-
crypto/external/bsd/openssl/dist/ssl/packet_local.h | 39 +-
crypto/external/bsd/openssl/dist/ssl/record/rec_layer_s3.c | 39 +-
crypto/external/bsd/openssl/dist/ssl/record/ssl3_buffer.c | 10 +-
crypto/external/bsd/openssl/dist/ssl/record/ssl3_record.c | 52 +-
crypto/external/bsd/openssl/dist/ssl/s3_cbc.c | 4 +-
crypto/external/bsd/openssl/dist/ssl/s3_enc.c | 4 +-
crypto/external/bsd/openssl/dist/ssl/s3_lib.c | 26 +-
crypto/external/bsd/openssl/dist/ssl/s3_msg.c | 4 +-
crypto/external/bsd/openssl/dist/ssl/ssl_asn1.c | 4 +-
crypto/external/bsd/openssl/dist/ssl/ssl_cert.c | 46 +-
crypto/external/bsd/openssl/dist/ssl/ssl_ciph.c | 7 +-
crypto/external/bsd/openssl/dist/ssl/ssl_err.c | 7 +-
crypto/external/bsd/openssl/dist/ssl/ssl_init.c | 19 +-
crypto/external/bsd/openssl/dist/ssl/ssl_lib.c | 89 +-
crypto/external/bsd/openssl/dist/ssl/ssl_local.h | 7 +-
crypto/external/bsd/openssl/dist/ssl/ssl_rsa.c | 83 +-
crypto/external/bsd/openssl/dist/ssl/ssl_txt.c | 6 +-
crypto/external/bsd/openssl/dist/ssl/statem/README | 2 +-
crypto/external/bsd/openssl/dist/ssl/statem/extensions.c | 31 +-
crypto/external/bsd/openssl/dist/ssl/statem/extensions_clnt.c | 28 +-
crypto/external/bsd/openssl/dist/ssl/statem/extensions_cust.c | 13 +-
crypto/external/bsd/openssl/dist/ssl/statem/extensions_srvr.c | 28 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c | 12 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_dtls.c | 8 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_lib.c | 4 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_local.h | 4 +-
crypto/external/bsd/openssl/dist/ssl/statem/statem_srvr.c | 32 +-
crypto/external/bsd/openssl/dist/ssl/t1_enc.c | 4 +-
crypto/external/bsd/openssl/dist/ssl/t1_lib.c | 27 +-
crypto/external/bsd/openssl/dist/ssl/tls13_enc.c | 3 +-
crypto/external/bsd/openssl/dist/test/afalgtest.c | 44 +-
crypto/external/bsd/openssl/dist/test/asn1_decode_test.c | 28 +-
crypto/external/bsd/openssl/dist/test/asn1_internal_test.c | 29 +-
crypto/external/bsd/openssl/dist/test/bio_memleak_test.c | 78 +-
crypto/external/bsd/openssl/dist/test/bntest.c | 214 ++-
crypto/external/bsd/openssl/dist/test/build.info | 4 +-
crypto/external/bsd/openssl/dist/test/certs/cross-key.pem | 28 +
crypto/external/bsd/openssl/dist/test/certs/cross-root.pem | 18 +
crypto/external/bsd/openssl/dist/test/certs/ee-ed25519.pem | 43 +-
crypto/external/bsd/openssl/dist/test/certs/ee-self-signed.pem | 33 +-
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1-key.pem | 38 +-
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1.pem | 35 +-
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1.sct | 12 +-
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1_issuer-key.pem | 15 +
crypto/external/bsd/openssl/dist/test/certs/embeddedSCTs1_issuer.pem | 30 +-
crypto/external/bsd/openssl/dist/test/certs/root-cross-cert.pem | 18 +
crypto/external/bsd/openssl/dist/test/certs/root-ed25519.pem | 45 +-
crypto/external/bsd/openssl/dist/test/certs/rootCA.pem | 94 +-
crypto/external/bsd/openssl/dist/test/certs/setup.sh | 2 +
crypto/external/bsd/openssl/dist/test/clienthellotest.c | 14 +-
crypto/external/bsd/openssl/dist/test/ct_test.c | 4 +-
crypto/external/bsd/openssl/dist/test/dane-cross.in | 113 +
crypto/external/bsd/openssl/dist/test/danetest.c | 4 +-
crypto/external/bsd/openssl/dist/test/data.bin | 4 +
crypto/external/bsd/openssl/dist/test/dtls_mtu_test.c | 50 +-
crypto/external/bsd/openssl/dist/test/dtlstest.c | 90 +-
crypto/external/bsd/openssl/dist/test/ec_internal_test.c | 79 +-
crypto/external/bsd/openssl/dist/test/ectest.c | 54 +-
crypto/external/bsd/openssl/dist/test/evp_extra_test.c | 849 +++++++++-
crypto/external/bsd/openssl/dist/test/evp_test.c | 4 +-
crypto/external/bsd/openssl/dist/test/exptest.c | 33 +-
crypto/external/bsd/openssl/dist/test/packettest.c | 4 +-
crypto/external/bsd/openssl/dist/test/pemtest.c | 32 +-
crypto/external/bsd/openssl/dist/test/recipes/01-test_symbol_presence.t | 18 +-
crypto/external/bsd/openssl/dist/test/recipes/10-test_bn_data/bnmod.txt | 79 +-
crypto/external/bsd/openssl/dist/test/recipes/15-test_genrsa.t | 9 +-
crypto/external/bsd/openssl/dist/test/recipes/20-test_dgst.t | 25 +-
crypto/external/bsd/openssl/dist/test/recipes/25-test_req.t | 29 +-
crypto/external/bsd/openssl/dist/test/recipes/25-test_verify.t | 3 +-
crypto/external/bsd/openssl/dist/test/recipes/25-test_x509.t | 63 +-
crypto/external/bsd/openssl/dist/test/recipes/30-test_evp_data/evpciph.txt | 52 +-
crypto/external/bsd/openssl/dist/test/recipes/30-test_evp_data/evpkdf.txt | 20 +-
crypto/external/bsd/openssl/dist/test/recipes/30-test_evp_data/evppkey.txt | 12 +-
crypto/external/bsd/openssl/dist/test/recipes/70-test_tls13hrr.t | 53 +-
crypto/external/bsd/openssl/dist/test/recipes/70-test_tls13kexmodes.t | 14 +-
crypto/external/bsd/openssl/dist/test/recipes/70-test_verify_extra.t | 9 +-
crypto/external/bsd/openssl/dist/test/recipes/80-test_cms.t | 17 +-
crypto/external/bsd/openssl/dist/test/recipes/80-test_dane.t | 8 +-
crypto/external/bsd/openssl/dist/test/recipes/80-test_ssl_new.t | 6 +-
crypto/external/bsd/openssl/dist/test/recipes/80-test_ssl_old.t | 51 +-
crypto/external/bsd/openssl/dist/test/recipes/95-test_external_pyca_data/cryptography.sh | 20 +-
crypto/external/bsd/openssl/dist/test/rsa_test.c | 9 +-
crypto/external/bsd/openssl/dist/test/sm2_internal_test.c | 45 +-
crypto/external/bsd/openssl/dist/test/smime-certs/badrsa.pem | 18 +
crypto/external/bsd/openssl/dist/test/smime-certs/mksmime-certs.sh | 24 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smdh.pem | 72 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smdsa1.pem | 86 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smdsa2.pem | 86 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smdsa3.pem | 86 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smec1.pem | 36 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smec2.pem | 38 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smroot.pem | 90 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smrsa1.pem | 90 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smrsa2.pem | 90 +-
crypto/external/bsd/openssl/dist/test/smime-certs/smrsa3.pem | 90 +-
crypto/external/bsd/openssl/dist/test/ssl-tests/10-resumption.conf | 121 +-
crypto/external/bsd/openssl/dist/test/ssl-tests/11-dtls_resumption.conf | 124 +-
crypto/external/bsd/openssl/dist/test/ssl-tests/30-supported-groups.conf | 54 +
crypto/external/bsd/openssl/dist/test/ssl-tests/30-supported-groups.conf.in | 45 +
crypto/external/bsd/openssl/dist/test/ssl-tests/protocol_version.pm | 65 +-
crypto/external/bsd/openssl/dist/test/sslapitest.c | 722 +++++++-
crypto/external/bsd/openssl/dist/test/ssltest_old.c | 113 +-
crypto/external/bsd/openssl/dist/test/ssltestlib.c | 35 +-
crypto/external/bsd/openssl/dist/test/ssltestlib.h | 3 +-
crypto/external/bsd/openssl/dist/test/test_test.c | 398 ++--
crypto/external/bsd/openssl/dist/test/testrsa_withattrs.der | Bin
crypto/external/bsd/openssl/dist/test/testrsa_withattrs.pem | 29 +
crypto/external/bsd/openssl/dist/test/testutil/driver.c | 2 +-
crypto/external/bsd/openssl/dist/test/testutil/format_output.c | 14 +-
crypto/external/bsd/openssl/dist/test/testutil/tests.c | 14 +-
crypto/external/bsd/openssl/dist/test/v3ext.c | 295 +++-
crypto/external/bsd/openssl/dist/test/v3nametest.c | 10 +-
crypto/external/bsd/openssl/dist/test/verify_extra_test.c | 116 +-
crypto/external/bsd/openssl/dist/test/x509_internal_test.c | 57 +-
crypto/external/bsd/openssl/dist/test/x509_time_test.c | 12 +-
crypto/external/bsd/openssl/dist/tools/c_rehash.in | 231 +-
crypto/external/bsd/openssl/dist/util/mkdir-p.pl | 5 +-
crypto/external/bsd/openssl/dist/util/perl/OpenSSL/copyright.pm | 41 +
crypto/external/bsd/openssl/dist/util/private.num | 4 +
crypto/external/bsd/openssl/lib/libcrypto/bn.inc | 3 +-
crypto/external/bsd/openssl/lib/libcrypto/shlib_version | 4 +-
distrib/sets/lists/base/shl.mi | 6 +-
distrib/sets/lists/debug/shl.mi | 6 +-
doc/3RDPARTY | 8 +-
342 files changed, 8960 insertions(+), 2709 deletions(-)
diffs (truncated from 20476 to 300 lines):
diff -r 9bee083be6b1 -r 0392805789b2 crypto/external/bsd/openssl/dist/CHANGES
--- a/crypto/external/bsd/openssl/dist/CHANGES Fri Feb 24 13:51:43 2023 +0000
+++ b/crypto/external/bsd/openssl/dist/CHANGES Fri Feb 24 14:07:45 2023 +0000
@@ -7,6 +7,300 @@
https://github.com/openssl/openssl/commits/ and pick the appropriate
release branch.
+ Changes between 1.1.1s and 1.1.1t [7 Feb 2023]
+
+ *) Fixed X.400 address type confusion in X.509 GeneralName.
+
+ There is a type confusion vulnerability relating to X.400 address processing
+ inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
+ but subsequently interpreted by GENERAL_NAME_cmp as an ASN1_TYPE. This
+ vulnerability may allow an attacker who can provide a certificate chain and
+ CRL (neither of which need have a valid signature) to pass arbitrary
+ pointers to a memcmp call, creating a possible read primitive, subject to
+ some constraints. Refer to the advisory for more information. Thanks to
+ David Benjamin for discovering this issue. (CVE-2023-0286)
+
+ This issue has been fixed by changing the public header file definition of
+ GENERAL_NAME so that x400Address reflects the implementation. It was not
+ possible for any existing application to successfully use the existing
+ definition; however, if any application references the x400Address field
+ (e.g. in dead code), note that the type of this field has changed. There is
+ no ABI change.
+ [Hugo Landau]
+
+ *) Fixed Use-after-free following BIO_new_NDEF.
+
+ The public API function BIO_new_NDEF is a helper function used for
+ streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
+ to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
+ be called directly by end user applications.
+
+ The function receives a BIO from the caller, prepends a new BIO_f_asn1
+ filter BIO onto the front of it to form a BIO chain, and then returns
+ the new head of the BIO chain to the caller. Under certain conditions,
+ for example if a CMS recipient public key is invalid, the new filter BIO
+ is freed and the function returns a NULL result indicating a failure.
+ However, in this case, the BIO chain is not properly cleaned up and the
+ BIO passed by the caller still retains internal pointers to the previously
+ freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
+ then a use-after-free will occur. This will most likely result in a crash.
+ (CVE-2023-0215)
+ [Viktor Dukhovni, Matt Caswell]
+
+ *) Fixed Double free after calling PEM_read_bio_ex.
+
+ The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
+ decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
+ data. If the function succeeds then the "name_out", "header" and "data"
+ arguments are populated with pointers to buffers containing the relevant
+ decoded data. The caller is responsible for freeing those buffers. It is
+ possible to construct a PEM file that results in 0 bytes of payload data.
+ In this case PEM_read_bio_ex() will return a failure code but will populate
+ the header argument with a pointer to a buffer that has already been freed.
+ If the caller also frees this buffer then a double free will occur. This
+ will most likely lead to a crash.
+
+ The functions PEM_read_bio() and PEM_read() are simple wrappers around
+ PEM_read_bio_ex() and therefore these functions are also directly affected.
+
+ These functions are also called indirectly by a number of other OpenSSL
+ functions including PEM_X509_INFO_read_bio_ex() and
+ SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
+ internal uses of these functions are not vulnerable because the caller does
+ not free the header argument if PEM_read_bio_ex() returns a failure code.
+ (CVE-2022-4450)
+ [Kurt Roeckx, Matt Caswell]
+
+ *) Fixed Timing Oracle in RSA Decryption.
+
+ A timing based side channel exists in the OpenSSL RSA Decryption
+ implementation which could be sufficient to recover a plaintext across
+ a network in a Bleichenbacher style attack. To achieve a successful
+ decryption an attacker would have to be able to send a very large number
+ of trial messages for decryption. The vulnerability affects all RSA padding
+ modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
+ (CVE-2022-4304)
+ [Dmitry Belyavsky, Hubert Kario]
+
+ Changes between 1.1.1r and 1.1.1s [1 Nov 2022]
+
+ *) Fixed a regression introduced in 1.1.1r version not refreshing the
+ certificate data to be signed before signing the certificate.
+ [Gibeom Gwon]
+
+ Changes between 1.1.1q and 1.1.1r [11 Oct 2022]
+
+ *) Fixed the linux-mips64 Configure target which was missing the
+ SIXTY_FOUR_BIT bn_ops flag. This was causing heap corruption on that
+ platform.
+ [Adam Joseph]
+
+ *) Fixed a strict aliasing problem in bn_nist. Clang-14 optimisation was
+ causing incorrect results in some cases as a result.
+ [Paul Dale]
+
+ *) Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
+ report correct results in some cases
+ [Matt Caswell]
+
+ *) Fixed a regression introduced in 1.1.1o for re-signing certificates with
+ different key sizes
+ [Todd Short]
+
+ *) Added the loongarch64 target
+ [Shi Pujin]
+
+ *) Fixed a DRBG seed propagation thread safety issue
+ [Bernd Edlinger]
+
+ *) Fixed a memory leak in tls13_generate_secret
+ [Bernd Edlinger]
+
+ *) Fixed reported performance degradation on aarch64. Restored the
+ implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid
+ 32-bit lane assignment in CTR mode") for 64bit targets only, since it is
+ reportedly 2-17% slower and the silicon errata only affects 32bit targets.
+ The new algorithm is still used for 32 bit targets.
+ [Bernd Edlinger]
+
+ *) Added a missing header for memcmp that caused compilation failure on some
+ platforms
+ [Gregor Jasny]
+
+ Changes between 1.1.1p and 1.1.1q [5 Jul 2022]
+
+ *) AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
+ implementation would not encrypt the entirety of the data under some
+ circumstances. This could reveal sixteen bytes of data that was
+ preexisting in the memory that wasn't written. In the special case of
+ "in place" encryption, sixteen bytes of the plaintext would be revealed.
+
+ Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
+ they are both unaffected.
+ (CVE-2022-2097)
+ [Alex Chernyakhovsky, David Benjamin, Alejandro Sedeño]
+
+ Changes between 1.1.1o and 1.1.1p [21 Jun 2022]
+
+ *) In addition to the c_rehash shell command injection identified in
+ CVE-2022-1292, further bugs where the c_rehash script does not
+ properly sanitise shell metacharacters to prevent command injection have been
+ fixed.
+
+ When the CVE-2022-1292 was fixed it was not discovered that there
+ are other places in the script where the file names of certificates
+ being hashed were possibly passed to a command executed through the shell.
+
+ This script is distributed by some operating systems in a manner where
+ it is automatically executed. On such operating systems, an attacker
+ could execute arbitrary commands with the privileges of the script.
+
+ Use of the c_rehash script is considered obsolete and should be replaced
+ by the OpenSSL rehash command line tool.
+ (CVE-2022-2068)
+ [Daniel Fiala, Tomáš Mráz]
+
+ *) When OpenSSL TLS client is connecting without any supported elliptic
+ curves and TLS-1.3 protocol is disabled the connection will no longer fail
+ if a ciphersuite that does not use a key exchange based on elliptic
+ curves can be negotiated.
+ [Tomáš Mráz]
+
+ Changes between 1.1.1n and 1.1.1o [3 May 2022]
+
+ *) Fixed a bug in the c_rehash script which was not properly sanitising shell
+ metacharacters to prevent command injection. This script is distributed
+ by some operating systems in a manner where it is automatically executed.
+ On such operating systems, an attacker could execute arbitrary commands
+ with the privileges of the script.
+
+ Use of the c_rehash script is considered obsolete and should be replaced
+ by the OpenSSL rehash command line tool.
+ (CVE-2022-1292)
+ [Tomáš Mráz]
+
+ Changes between 1.1.1m and 1.1.1n [15 Mar 2022]
+
+ *) Fixed a bug in the BN_mod_sqrt() function that can cause it to loop forever
+ for non-prime moduli.
+
+ Internally this function is used when parsing certificates that contain
+ elliptic curve public keys in compressed form or explicit elliptic curve
+ parameters with a base point encoded in compressed form.
+
+ It is possible to trigger the infinite loop by crafting a certificate that
+ has invalid explicit curve parameters.
+
+ Since certificate parsing happens prior to verification of the certificate
+ signature, any process that parses an externally supplied certificate may
+ thus be subject to a denial of service attack. The infinite loop can also
+ be reached when parsing crafted private keys as they can contain explicit
+ elliptic curve parameters.
+
+ Thus vulnerable situations include:
+
+ - TLS clients consuming server certificates
+ - TLS servers consuming client certificates
+ - Hosting providers taking certificates or private keys from customers
+ - Certificate authorities parsing certification requests from subscribers
+ - Anything else which parses ASN.1 elliptic curve parameters
+
+ Also any other applications that use the BN_mod_sqrt() where the attacker
+ can control the parameter values are vulnerable to this DoS issue.
+ (CVE-2022-0778)
+ [Tomáš Mráz]
+
+ *) Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
+ to the list of ciphersuites providing Perfect Forward Secrecy as
+ required by SECLEVEL >= 3.
+
+ [Dmitry Belyavskiy, Nicola Tuveri]
+
+ Changes between 1.1.1l and 1.1.1m [14 Dec 2021]
+
+ *) Avoid loading of a dynamic engine twice.
+
+ [Bernd Edlinger]
+
+ *) Fixed building on Debian with kfreebsd kernels
+
+ [Mattias Ellert]
+
+ *) Prioritise DANE TLSA issuer certs over peer certs
+
+ [Viktor Dukhovni]
+
+ *) Fixed random API for MacOS prior to 10.12
+
+ These MacOS versions don't support the CommonCrypto APIs
+
+ [Lenny Primak]
+
+ Changes between 1.1.1k and 1.1.1l [24 Aug 2021]
+
+ *) Fixed an SM2 Decryption Buffer Overflow.
+
+ In order to decrypt SM2 encrypted data an application is expected to call the
+ API function EVP_PKEY_decrypt(). Typically an application will call this
+ function twice. The first time, on entry, the "out" parameter can be NULL and,
+ on exit, the "outlen" parameter is populated with the buffer size required to
+ hold the decrypted plaintext. The application can then allocate a sufficiently
+ sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL
+ value for the "out" parameter.
+
+ A bug in the implementation of the SM2 decryption code means that the
+ calculation of the buffer size required to hold the plaintext returned by the
+ first call to EVP_PKEY_decrypt() can be smaller than the actual size required by
+ the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is
+ called by the application a second time with a buffer that is too small.
+
+ A malicious attacker who is able present SM2 content for decryption to an
+ application could cause attacker chosen data to overflow the buffer by up to a
+ maximum of 62 bytes altering the contents of other data held after the
+ buffer, possibly changing application behaviour or causing the application to
+ crash. The location of the buffer is application dependent but is typically
+ heap allocated.
+ (CVE-2021-3711)
+ [Matt Caswell]
+
+ *) Fixed various read buffer overruns processing ASN.1 strings
+
+ ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING
+ structure which contains a buffer holding the string data and a field holding
+ the buffer length. This contrasts with normal C strings which are repesented as
+ a buffer for the string data which is terminated with a NUL (0) byte.
+
+ Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's
+ own "d2i" functions (and other similar parsing functions) as well as any string
+ whose value has been set with the ASN1_STRING_set() function will additionally
+ NUL terminate the byte array in the ASN1_STRING structure.
+
+ However, it is possible for applications to directly construct valid ASN1_STRING
+ structures which do not NUL terminate the byte array by directly setting the
+ "data" and "length" fields in the ASN1_STRING array. This can also happen by
+ using the ASN1_STRING_set0() function.
+
+ Numerous OpenSSL functions that print ASN.1 data have been found to assume that
+ the ASN1_STRING byte array will be NUL terminated, even though this is not
+ guaranteed for strings that have been directly constructed. Where an application
+ requests an ASN.1 structure to be printed, and where that ASN.1 structure
+ contains ASN1_STRINGs that have been directly constructed by the application
+ without NUL terminating the "data" field, then a read buffer overrun can occur.
+
+ The same thing can also occur during name constraints processing of certificates
+ (for example if a certificate has been directly constructed by the application
+ instead of loading it via the OpenSSL parsing functions, and the certificate
+ contains non NUL terminated ASN1_STRING structures). It can also occur in the
+ X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions.
+
+ If a malicious actor can cause an application to directly construct an
+ ASN1_STRING and then process it through one of the affected OpenSSL functions
+ then this issue could be hit. This might result in a crash (causing a Denial of
+ Service attack). It could also result in the disclosure of private memory
+ contents (such as private keys, or sensitive plaintext).
+ (CVE-2021-3712)
+ [Matt Caswell]
Home |
Main Index |
Thread Index |
Old Index