commit aa2a7ebeb1580ac4174b4ed2b120185ee1230c67
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Nov 1 21:39:09 2022 +0100
Prepare 3.0.7-1
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 2af582f8e6232435b8c6c0fb7eec45a23fe03e54
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Nov 1 21:19:26 2022 +0100
debian: Close the CVE bug.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit af125786b91926a67a3852620f0b2eee967e2417
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Nov 1 21:12:06 2022 +0100
Import 3.0.7
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 4d03f88bfa7f15c687352d2988b8574dcdcfc5ae
Merge: 4400c7f43 2d32091f9
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Nov 1 20:17:39 2022 +0100
Update upstream source from tag 'upstream/3.0.7'
Update to upstream version '3.0.7'
with Debian dir 89f09d8c130a54a1ea8680b3805d51db1d1d2b3b
commit 2d32091f9c5df3ef3605ce9130e8d52dcfb44342
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Nov 1 20:17:39 2022 +0100
New upstream version 3.0.7
commit 4400c7f4337d0eb6c838f2dbdc14b67594580d7c
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Oct 11 21:33:18 2022 +0200
Disable rdrand and update changelog.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 8d202c921eb9b7dad7d4ec662843e45e1cafea99
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Sep 27 22:01:53 2022 +0200
Backport batch from upstream for the default sec level.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 5fa66026304f7458871b67d11146384d304880f8
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Sep 27 21:56:16 2022 +0200
targets: Remove MIPS R6 support.
According to YunQiang Su the current openssl works well with the
linux64-mips64 target and the special R6 target is no longer needed.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 90e5fbb2155c4958b85148adc3b8a0ef2e869fd1
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon Sep 19 21:59:24 2022 +0200
Prepare 3.0.5-4.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit d03f03cb8bf85cbc94029f9a902a03e545ed87eb
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon Sep 19 21:59:13 2022 +0200
Add ssl_conf() serialisation (Closes: #1020308)
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit d07b0443bf4e28669a8514ab3788db9b1a896e94
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon Sep 19 14:22:00 2022 +0200
Prepare 3.0.5-3
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit a6dedc7949a128200c30a416782bb28023cbdbe6
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat Sep 17 22:33:03 2022 +0200
Compile with OPENSSL_TLS_SECURITY_LEVEL=2
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 9d33f6e02081adcaa5ec549451c481b1d243edd9
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat Sep 17 16:33:27 2022 +0200
Add a symlink pointing to ca-certificates.crt
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 43e68277b540988631a85c3328874b35c111bcf1
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Aug 14 21:57:09 2022 +0200
Prepare -2
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit b26dbea9774525fbec9ba1a880e5207850a6c81e
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Aug 14 21:56:48 2022 +0200
Add a forgotten CVE entry to the changelog.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit b641d16d10cc5b9aa4adb7dd46fe2f29862848e9
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Aug 14 21:55:23 2022 +0200
Update to new 3.0 HEAD to stuff a s390x bug.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 1a80ac95ca2129d6b2d65622edcb9a5cd633af8c
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Jul 24 16:30:38 2022 +0200
Prepare 3.0.5-1
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 3c85c15f58e2ee6e2f7ae0adfe75ddbcdf59af82
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Jul 24 16:59:11 2022 +0200
Update signing-key.asc.
Update they signing key based on
https://www.openssl.org/community/otc.html
which
- adds they key of Paul Dale and Tomáš Mráz.
- removes the key of Rich Salz which also expired.
Signed-off-by: Sebastian Andrzej Spewer <sebastian@breakpoint.cc>
commit b0fadabae64adfc08a434c34b1a392d2c072d1aa
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Jul 24 16:28:56 2022 +0200
Use -latomic on arc,nios2 and sparc.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 1dc4ab4e6ed2e367cfbb04b878d5e911007f9496
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Jul 24 15:55:05 2022 +0200
Update to current of the 3.0 branch.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit e1eb698e433b348afc66ce2ac1d1f428da65a643
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Jul 24 14:48:10 2022 +0200
Add #1013309.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 3af7b61372aa343a08506713d4684320204665c6
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Jul 24 14:16:16 2022 +0200
Import 3.0.5
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 8b1c5171613c6990caf14157dec111014b2324a6
Merge: 237f04a5d f9e86a862
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun Jul 24 13:37:00 2022 +0200
Update upstream source from tag 'upstream/3.0.5'
Update to upstream version '3.0.5'
with Debian dir da6d129c5b0378d8b9eb0ef70e520ed150804c39
commit 237f04a5db1ff43a24aa427f905a9454081a00a6
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri Jun 24 19:40:23 2022 +0200
Prepare 3.0.4-2
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 19ee9c798866eb2fa7c7b4f687a1422dc67f50df
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri Jun 24 19:22:53 2022 +0200
AVX2 related memory corruption.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit d6a672ab657ebc9db1c5dcbd96733370ce8d6485
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Wed Jun 22 08:04:11 2022 +0200
Prepare 3.0.4-1
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit e4beefc99f1e5880f26500ccbae52c9789865431
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Jun 21 19:37:03 2022 +0200
Import 3.0.4
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 2f8785c82b219e0844cd6d223c8bc0021e64d216
Merge: 1735d6514 64c27edc7
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Jun 21 18:57:55 2022 +0200
Update upstream source from tag 'upstream/3.0.4'
Update to upstream version '3.0.4'
with Debian dir 31eaafc03ccc4653304060a7bca721f9203d78b8
commit 1735d6514d60893eddfb3cd4839b213c62972e31
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon Jun 13 22:16:51 2022 +0200
Prepare 3.0.3-8.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 2bd95f65daf182542d27669b0f7c369474b40a0f
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon Jun 13 21:54:54 2022 +0200
Update to HEAD and cherry pick a patch the nodejs issue on mipsel.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 7ab03f3bc6e6c03d94612b014c4673b591d1c1b2
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Wed Jun 8 23:10:34 2022 +0200
Prepare 3.0.3-7
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 7b6c2b28b2163121b3db5a4781db05b468c2b173
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Wed Jun 8 22:04:30 2022 +0200
Remove the provider section.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 0e0330a4a89e22b50ec29b809a55e686e29ad603
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat Jun 4 15:26:04 2022 +0200
Prepare 3.0.3-6.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 07b443600e11f72429ead7e549b9c326acf9cfe0
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat Jun 4 13:03:52 2022 +0200
Update to openssl-3.0 head
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit fed51a09292ed9f5ec29ef9e4008c98344a72885
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun May 22 21:01:10 2022 +0200
Prepare 3.0.3-5
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 29cfb817d0dba3642e8b8fd4a8922782c853fef8
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 20 21:59:46 2022 +0200
Backport more case compare commits from upstream.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 2fe1c2a23e1026444d2bbde5442b92cc3f2b07c0
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue May 17 14:54:14 2022 +0200
Disable endbr32 on i386.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit f346cefb9e3fb02b5d537e8a141e643ae2f52eea
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon May 16 23:20:35 2022 +0200
Prepare 3.0.3-4.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit ebf1494db20822acf7ae058dca90eef144e74ae2
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon May 16 23:20:00 2022 +0200
Backport upstream's pull 18247.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 675c4cc6652c46d16c00e447178c91dfbb0ed6d6
Merge: 76687a5fe fce07dc61
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Mon May 16 22:59:07 2022 +0200
Merge branch 'debian/unstable' into debian/experimental
commit 76687a5fe5815393a29705cfdaa6692cba00baa9
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat May 14 22:26:02 2022 +0200
Prepare 3.0.3-3
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit f55cef1035fc3dc4e1b90783cbb567937143856b
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat May 14 21:50:22 2022 +0200
Record the ia64 bug.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 4d5ae11ef44e4a449ee4aaae6576e0174611c991
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat May 14 19:40:40 2022 +0200
Don't build ev4/ev5 binaries on alpha.
Due to a mistake on my side, the ev4/ev5 libraries were built but never
actually on alpha. This has been noticed because newer dh_install 13 now
complains about built but not installed files.
I have no idea how to quickly get this done and these were missing since
I rewrote rules files.
Disable the build for now and maybe figure it out later.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 74633b81566a68de67f045eecab21f35e6f89fde
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat May 14 19:28:24 2022 +0200
Don't zero registers on ia64.
The produced .s file fails to be assemled.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 3d6e17a648f4624f8142f6513449e011e3e5781f
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sat May 14 19:21:35 2022 +0200
Revert the .s for the ia64 assembler.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit c7f855aa77c3ef66f6c46cf246e4f8b41babd060
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 13 23:25:11 2022 +0200
Prepare 3.0.3-2.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 665fb29c9b1d6728e4da369ea3e53e8a21a9556d
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 13 23:24:34 2022 +0200
Make the upload to unstable.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 4be53bca5ec9fcccd42acd0a57032a9a0846b004
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 13 23:12:31 2022 +0200
Use dh commpat 13.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 4b63ee42214ca7bf16db27e28ba2e4c6c426bcf5
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 13 23:08:44 2022 +0200
Use version 4 for the debian/watch file.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 02d54f7ab2d30b7052a33731ab18b06290b5f11c
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 13 22:52:44 2022 +0200
Add a list files which are not installed.
dh complains and the html documentation is currently not packaged. Also
the dist files are ignored.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit cdc804c901b60a497295c7f69c1719a4c5580b5c
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 13 22:37:42 2022 +0200
Update Standards-Version version.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit d4c179edb5baa0a51bb1f1d6b1c0dd5e506307a7
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 22:22:01 2022 +0200
Prepare 3.0.3-1.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit fce07dc61662596fd6d8dee0cf3d1c44383179f1
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 22:21:05 2022 +0200
Prepare 1.1.1o-1.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 3563904750256b1d7a4ac97009921ddf48e0a0bf
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 22:16:59 2022 +0200
Close another one with the script removal.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 754077029d34bc6baaf041deed1ae20f9bbc587a
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 22:06:56 2022 +0200
Remove the postist script its template and translations.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit d19f4895bd2790b872470f3e7edd9e9c0354aa0c
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 21:54:01 2022 +0200
Use a separator.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit fd3bcbc010322c7d21dbf6e9405438af33bbd0cd
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 22:06:56 2022 +0200
Remove the postist script its template and translations.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 87e769f0a7204ab02f424c9d102997125ecb867f
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 21:49:52 2022 +0200
Use a separator.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 5433bf1ddbbbf91d767340b46fa36710caebfb78
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri May 6 21:44:18 2022 +0200
Orig tar is signed with sha256
Hope it stays.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 11cab71f7dcc813ac337babfab6335b70cb806a2
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Thu May 5 23:42:32 2022 +0200
Add new symbols.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 04ecf0757a7a866e65e8575230ad6a8a42e0198b
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Thu May 5 23:27:17 2022 +0200
Import 3.0.3
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit c1def31d2ddec80999f626187fe38fde3c2130f0
Merge: b507914c4 5784ad8a8
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Thu May 5 23:19:28 2022 +0200
Update upstream source from tag 'upstream/3.0.3'
Update to upstream version '3.0.3'
with Debian dir 9bf21019ef6814893f905bda21978a842b2b1cee
commit 5784ad8a8636392efc081a78e04ae7d897f28f79
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Thu May 5 23:19:28 2022 +0200
New upstream version 3.0.3
commit adedec52eaf55254a2aa53d9bf5676749fdb3cdf
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Thu May 5 07:34:36 2022 +0200
Import 1.1.1n
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 51481524d23783e09ade68eafa62c5c00bfc0d89
Merge: 82d5b721c 3696544aa
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Wed May 4 20:41:06 2022 +0200
Update upstream source from tag 'upstream/1.1.1o'
Update to upstream version '1.1.1o'
with Debian dir 668362d0ef4fc2f5b06c40ab9939ff6b137df2d3
commit 3696544aa5b7b3c80c7893d428a74534c6dcd1ca
Merge: e567245f4 ca2e0784d
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Wed May 4 20:41:06 2022 +0200
New upstream version 1.1.1o
commit ca2e0784d2c38edcefd5d68028f4d954bd8faddb
Author: Matt Caswell <matt@openssl.org>
Date: Tue May 3 14:41:15 2022 +0100
Prepare for 1.1.1o release
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Release: yes
commit b5b37553bcf9b90a5be5d8ed573b377d1766bd95
Author: Matt Caswell <matt@openssl.org>
Date: Tue May 3 11:54:12 2022 +0100
Update copyright year
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Release: yes
commit 58d24ad926e3ccb30be9254cd1c7acbfac35a568
Author: Matt Caswell <matt@openssl.org>
Date: Tue Apr 26 14:39:34 2022 +0100
Update CHANGES and NEWS for new release
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Release: yes
commit 76eb96b656f742be4c2e6d83d621af22031953cb
Author: Tomas Mraz <tomas@openssl.org>
Date: Fri Apr 22 16:34:53 2022 +0200
Add additional keys to release key fingerprints
Added keys for Paul Dale and Tomáš Mráz.
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18156)
commit e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23
Author: Tomas Mraz <tomas@openssl.org>
Date: Tue Apr 26 12:40:24 2022 +0200
c_rehash: Do not use shell to invoke openssl
Except on VMS where it is safe.
This fixes CVE-2022-1292.
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
commit b507914c40270e32cde6afcc8af93707c225e7f4
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Sun May 1 09:22:48 2022 +0200
Correct the openssl.cnf to provide proper default configuration.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
commit 982fad3ec4107684a6cb442f593193972b06c41a
Author: Paul Kehrer <paul.l.kehrer@gmail.com>
Date: Sat Apr 24 15:55:08 2021 -0500
add wycheproof submodule
This is used with the pyca/cryptography test suite
(cherry picked from commit a09fb26ba90e46c4f731b5a597051b4d4b9aea3e)
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16340)
commit 2cf22024e82d59280616a16ef9b5c264cb1d70e1
Author: Nicola Tuveri <nic.tuv@gmail.com>
Date: Tue Apr 26 12:49:31 2022 +0300
[github-ci] Sync pyca workflow with master
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16340)
commit 25f4bf08c71a81d0a8a50f89a344d8013b55716c
Author: Nicola Tuveri <nic.tuv@gmail.com>
Date: Tue Aug 17 13:03:56 2021 +0300
Revert "[github-ci][ci.yml] Disable pyca external tests"
This reverts commit 850ed18505631286abbd23d355d4b48f28ad89a9.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16340)
commit 91db522f31981b3fafdec4120de1027e8bc4d792
Author: Daniel Fiala <daniel@openssl.org>
Date: Mon Apr 18 11:30:13 2022 +0200
x509: use actual issuer name if a CA is used
Fixes openssl#16080.
Reviewed-by: Ben Kaduk <kaduk@mit.edu>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18129)
commit 564a8d442cbd8ce68d452ff2e8a58c0aea6b0632
Author: Bernd Edlinger <bernd.edlinger@hotmail.de>
Date: Mon Apr 11 10:12:48 2022 +0200
Fix an assertion in the DTLS server code
This fixes an internal error alert from the server and
an unexpected connection failure in the release version,
but a failed assertion and a server crash in the
debug version.
Reproduce this issue with a DTLS server/client like that:
./openssl s_server -dtls -mtu 1500
./openssl s_client -dtls -maxfraglen 512
In the debug version a crash happens in the Server now:
./openssl s_server -dtls -mtu 1500
Using default temp DH parameters
ACCEPT
ssl/statem/statem_dtls.c:269: OpenSSL internal error: Assertion failed: len == written
Aborted (core dumped)
While in the release version the handshake exceeds the
negotiated max fragment size, and fails because of this:
$ ./openssl s_server -dtls -mtu 1500
Using default temp DH parameters
ACCEPT
ERROR
4057152ADA7F0000:error:0A0000C2:SSL routines:do_dtls1_write:exceeds max fragment size:ssl/record/rec_layer_d1.c:826:
shutting down SSL
CONNECTION CLOSED
From the client's point of view the connection fails
with an Internal Error Alert:
$ ./openssl s_client -dtls -maxfraglen 512
Connecting to ::1
CONNECTED(00000003)
40B76343377F0000:error:0A000438:SSL routines:dtls1_read_bytes:tlsv1 alert internal error:ssl/record/rec_layer_d1.c:613:SSL alert number 80
and now the connection attempt fails unexpectedly.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18093)
(cherry picked from commit e915c3f5381cd38ebdc1824c3ba9896ea7160103)
commit 6e73a0a0bd608daecb8e2c1e46de9d1014194c84
Author: Bernd Edlinger <bernd.edlinger@hotmail.de>
Date: Tue Apr 12 08:27:21 2022 +0200
Fix a DTLS server hangup due to TLS13_AD_MISSING_EXTENSION
This causes the DTLS server to enter an error state:
./openssl s_server -dtls
./openssl s_client -dtls -maxfraglen 512 -sess_out s1.txt
[...]
Q
./openssl s_client -dtls -sess_in s1.txt
CONNECTED(00000003)
^C
./openssl s_client -dtls
CONNECTED(00000003)
140335537067840:error:14102410:SSL routines:dtls1_read_bytes:sslv3 alert handshake failure:ssl/record/rec_layer_d1.c:614:SSL alert number 40
At this point the dtls server needs to be restarted,
because verify_cookie_callback always fails, because
the previous cookie is checked against the current one.
The reason for this is not fully understood.
In wireshark we see the following each time:
c->s Client Hello (without cookie)
s->c Hello Verify Request (with new cookie)
s->c Alert (Level: Fatal, Description: Handshake Failure)
c->s Client Hello (echoes new cookie)
The client gives up when the Alert arrives.
The Alert is triggered because the server calls
verify_cookie_callback with the previous cookie,
although it just sent the current cookie in the
Hello Verify Request.
However this does only happen because no Alert message
is sent when the client re-connects the session with
the missing -maxfraglen option.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18094)
commit a1d3ecd7adf9f17ba20b061106088d13f8b77c03
Author: Todd Short <todd.short@me.com>
Date: Fri Apr 1 10:54:45 2022 -0400
Fix -no-tls1_2 in tests
This is specific for OpenSSL_1_1_1-stable branch
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/18080)
commit c1c7004e7fcddcbb767c47f8dc1831c4637d1b74
Author: Dr. Matthias St. Pierre <matthias.st.pierre@ncp-e.com>
Date: Tue Mar 29 21:50:21 2022 +0200
err: get rid of err_free_strings_int()
Even though the function is not part of the public api, it is not
entirely removed, in order to minimize the chance of breakage,
because it is exported from libcrypto. Instead, we keep a dummy
implementation.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17975)
commit 2b6617511e424e5a0e8b841918ad2cae864e2699
Author: Dr. Matthias St. Pierre <matthias.st.pierre@ncp-e.com>
Date: Mon Mar 28 19:26:46 2022 +0200
err: fix indentation of preprocessor directive
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17975)
commit fdc4646d5eb03e9e3d14ed496bf655671240193a
Author: Dr. Matthias St. Pierre <matthias.st.pierre@ncp-e.com>
Date: Mon Mar 28 11:47:55 2022 +0200
err: fix crash in ERR_load_strings() when configured with no-err
This commit removes the entire initialization and cleanup of the
error string hash table (`int_error_hash`) if `no-err` is configured.
The only operative function remaining is `ERR_get_next_error_library()`.
That is the reason why the `err_string_lock` and hence the
`do_err_strings_init()` function can't be removed entirely.
Fixes #17971
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17975)
commit 93ac3b8dd1cc49b27c402278cbe73a1c4ac91f9b
Author: Hugo Landau <hlandau@openssl.org>
Date: Mon Apr 4 12:25:16 2022 +0100
Fix failure to check result of bn_rshift_fixed_top
Fixes #18010.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18034)
(cherry picked from commit bc6bac8561ead83d6135f376ffcbbb0b657e64fe)
commit 3e8f70c30d84861fcd257a6e280dc49e104eb145
Author: Matt Caswell <matt@openssl.org>
Date: Wed Mar 30 14:49:24 2022 +0100
Fix usage of SSLfatal
A cherry-pick from the master branch incorrectly introduced a usage of
3 argument SSLfatal. In 1.1.1 the function code is also required.
Fixes #17999
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18000)
commit f29ec6563ddf81db46c464d14f2bb29a3fa5592f
Author: Tomas Mraz <tomas@openssl.org>
Date: Tue Mar 22 16:33:52 2022 +0100
Test processing of a duplicated HRR
Reviewed-by: Todd Short <todd.short@me.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17936)
(cherry picked from commit db44b55aaa42141921217183667800425227b658)
commit fb67978a9eb076b23ddf17f6b95f697ed526c584
Author: Tomas Mraz <tomas@openssl.org>
Date: Tue Mar 22 12:34:07 2022 +0100
tls_process_server_hello: Disallow repeated HRR
Repeated HRR must be rejected.
Fixes #17934
Reviewed-by: Todd Short <todd.short@me.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17936)
(cherry picked from commit d204a50b898435fbf937316d5693008cebf62eef)
commit 739d2bdfba536ff59e8444eb4295b53288ac5caf
Author: Todd Short <todd.short@me.com>
Date: Fri Mar 25 13:34:11 2022 -0400
Fix: ticket_lifetime_hint may exceed 1 week in TLSv1.3
libctx was left in cherry-pick from master/3.0 cherry-pick
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/17970)
commit 79dbd85fe27ebabc278417af64ab8e3eb43d2d40
Author: Todd Short <todd.short@me.com>
Date: Wed Mar 23 18:55:10 2022 -0400
ticket_lifetime_hint may exceed 1 week in TLSv1.3
For TLSv1.3, limit ticket lifetime hint to 1 week per RFC8446
Fixes #17948
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17952)
(cherry picked from commit 0089cc7f9d42f6e39872161199fb8b6a99da2492)
commit 04a768fc5968fa463cf9624a67accdef35bce0e4
Author: Juergen Christ <jchrist@linux.ibm.com>
Date: Wed Mar 23 13:26:13 2022 +0100
s390x: Hide internal cpuid symbol and function
The symbol OPENSSL_s390xcap_P and the OPENSSL_cpuid_setup function are not
exported by the version script of OpenSSL. However, if someone uses the
static library without the version script, these symbols all of a sudden
become global symbols and their usage in assembler code does not correctly
reflect that for PIC. Since these symbols should never be used outside of
OpenSSL, hide them inside the binary.
Signed-off-by: Juergen Christ <jchrist@linux.ibm.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17946)
(cherry picked from commit 37816ef5757e458be9648481e56bf698ee3bfbb1)
commit 00e5603de13e4f436a0f07abed28b7ea8e3a236e
Author: Pauli <pauli@openssl.org>
Date: Wed Mar 16 14:13:25 2022 +1100
Fix Coverity 1498612: integer overflow
The assert added cannot ever fail because (current & 0xFFFF) != 0 from the
while loop and the trailing zero bit count therefore cannot be as large as 32.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/17892)
(cherry picked from commit 81487b65b9eb8148471e729b8c1959521d62c69e)
commit eed53b9addd097a5d39f896b05aa857d6f29b245
Author: Hugo Landau <hlandau@openssl.org>
Date: Fri Mar 11 08:36:11 2022 +0000
Fix integer overflow in evp_EncryptDecryptUpdate
Fixes #17871.
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17872)
commit ad24941228eafe59fe3807d1659585c4d98eac97
Author: Pauli <pauli@openssl.org>
Date: Wed Mar 16 13:48:27 2022 +1100
Fix Coverity 1201763 uninitialised pointer read
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17890)
(cherry picked from commit a0238b7ed87998c48b1c92bad7fa82dcbba507f9)
commit cd2471cd797ae5a6355814bb14a176af6a7d883f
Author: Pauli <pauli@openssl.org>
Date: Wed Mar 16 14:21:01 2022 +1100
Fix Coverity 1498611 & 1498608: uninitialised read
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17893)
(cherry picked from commit 09134f183f76539aa1294adfef10fcc694e90267)
commit 2f1c42553dbaac97d38657cd1ac1209ef4c11e78
Author: Pauli <pauli@openssl.org>
Date: Wed Mar 16 14:45:44 2022 +1100
Fix coverity 1498607: uninitialised value
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17897)
(cherry picked from commit 70cd9a51911e9a4e2f24e29ddd84fa9fcb778b63)
commit e567245f45e276a5b0dde456f485e8c505c2a1be
Merge: 364d9696f d82e959e6
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri Mar 18 19:28:05 2022 +0100
New upstream version 1.1.1n
commit 364d9696f1628fb751828c8905a4646d1813ab83
Merge: 1f2241541 d82e959e6
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Fri Mar 18 18:55:20 2022 +0100
New upstream version 1.1.1n
commit 0d9f48d079cbbe85c684c2215955c2a70b2d1c6b
Author: David Carlier <devnexen@gmail.com>
Date: Wed Mar 16 23:21:58 2022 +0000
print SSL session, fix build warnings on OpenBSD.
time_t is a 64 bits type on this platform.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17917)
(cherry picked from commit 9362638b080e328ccab43f89048bed27bcf2f11d)
commit d6bf4a2218aeb246ba7d34f02e895c37569c8265
Author: Tomas Mraz <tomas@openssl.org>
Date: Wed Mar 16 12:09:52 2022 +0100
eng_dyn: Avoid spurious errors when checking for 3.x engine
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17902)
commit 0a9bb445893b4a98ad1588aef2d14c29e6c4c5e3
Author: Daniel Fiala <daniel@openssl.org>
Date: Wed Mar 16 07:42:55 2022 +0100
Check password length only when verify is enabled.
Fixes #16231.
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17899)
commit 0dfacc00afec4bfc15b5b0066fe24e91f6cb5371
Author: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Date: Tue Mar 15 20:55:04 2022 +0100
Releasea 3.0.2-1.
Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
There is 1 open security issue in bullseye.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/o/openssl.png){kind=link}