Commit Graph

  • d209fc6cce evp_test: add TLS 1.3 KDF test suite Pauli 2021-08-04 10:11:30 +1000
  • 05bd00b8a6 test: add test cases for TLS 1.3 KDF Pauli 2021-08-03 22:42:23 +1000
  • c5f15fb28e update doc/build.info Pauli 2021-08-03 11:33:38 +1000
  • bf7c901160 fips: add power up test for TLS 1.3 KDF Pauli 2021-08-03 11:22:49 +1000
  • 5961aedaa5 doc: add TLS 1.3 KDF to the FIPS provider list of algorithms. Pauli 2021-08-03 15:42:13 +1000
  • e18ceda105 doc: reorder the string and int extract/expand param values Pauli 2021-08-03 22:29:03 +1000
  • 9ff407a1dc doc: add links to new KDF Pauli 2021-08-02 21:44:06 +1000
  • 94eb3cdd34 doc: add documentation for TLS13_KDF Pauli 2021-08-02 21:44:38 +1000
  • 736dba012f provider: add TLS13_KDF to the default and FIPS providers Pauli 2021-08-02 16:19:29 +1000
  • f7d998a206 tls/prov: move the TLS 1.3 KDF code to providers Pauli 2021-08-02 16:16:35 +1000
  • 2cdf7c6a33 doc: add missing link directive in X942 KDF Pauli 2021-08-02 12:18:42 +1000
  • 7587b5fd09 CI: remove spurious blank lines Pauli 2021-08-04 11:06:44 +1000
  • ebe667b464 ci: specific gcc explicitly on the basic-gcc CI build Pauli 2021-07-29 15:24:20 +1000
  • 7b917179d0 ci: separate the config dump from the configuration command Pauli 2021-07-29 13:37:30 +1000
  • 6da0f27483 Document necessary error code processing Dmitry Belyavskiy 2021-07-30 16:03:55 +0200
  • 6b9d3b7c5e Add oid_section to sysdefault.cnf to test adding new oids Tomas Mraz 2021-08-03 18:00:02 +0200
  • b5c4dc6ce5 Prevent recursive call of OPENSSL_INIT_LOAD_CONFIG Tomas Mraz 2021-08-03 17:29:04 +0200
  • 421953effe apps/pkeyutl.c: call ERR_print_errors() on all errors, including Signature Verification Failure Dr. David von Oheimb 2021-08-03 14:40:08 +0200
  • a8f35a5527 Use copy.pl to install the fips module on Windows Tomas Mraz 2021-08-03 12:23:43 +0200
  • 25ab542409 Windows, VMS: Do install_fips on install if fips is enabled Tomas Mraz 2021-08-03 11:35:58 +0200
  • da496bc159 doc: replace markdown backticks with perlpod syntax Beat Bolli 2021-07-30 18:40:27 +0200
  • 2fc02378ff doc: use the documented =item markers Beat Bolli 2021-07-30 18:39:51 +0200
  • 92c03668c0 Add config_diagnostics to our configuration files. Pauli 2021-07-29 09:55:09 +1000
  • 6b38d7dc1b If we have passed the private key, don't copy it implicitly Dmitry Belyavskiy 2021-08-02 17:00:51 +0200
  • 9711c7de5f OS/390: Fixing missing endif David Lanzendörfer 2021-08-03 20:21:13 +0100
  • 7b1217deaa OS/390: Broken detection David Lanzendörfer 2021-08-03 20:10:35 +0100
  • ab98861e91 Redefine getpid() -> _getpid() only for MSVC Tanzinul Islam 2021-07-31 18:28:34 +0100
  • 2625807aff changes: remove duplicate entry Pauli 2021-07-30 10:38:33 +1000
  • 5540855bda doc: document that config_diagnostics is sensible but involves risk Pauli 2021-07-29 11:39:01 +1000
  • 58bd45d86f demo: add GMAC demonstration program Pauli 2021-07-20 15:04:49 +1000
  • b5557666bd Fix dtls timeout dead code yangyangtiantianlonglong 2021-07-25 11:43:16 +0800
  • b5e2b1d844 Prepare for 3.0 beta 3 Matt Caswell 2021-07-29 15:50:46 +0100
  • 9f551541e8 Prepare for release of 3.0 beta 2 Matt Caswell 2021-07-29 15:50:29 +0100
  • 437f101ee0 make update Matt Caswell 2021-07-29 15:50:27 +0100
  • 54b4053130 Update copyright year Matt Caswell 2021-07-29 15:41:35 +0100
  • 0136956dc6 Update fingerprints.txt Matt Caswell 2021-07-29 11:09:05 +0100
  • a65c8d8f73 Add missing session timeout calc Todd Short 2021-07-23 09:25:09 -0400
  • 96d6a4e446 test: add a comment indication that a bad MAC is intentional Pauli 2021-07-28 09:52:23 +1000
  • ca7cac886b Add some testing for the case where the FIPS provider fails to load Matt Caswell 2021-07-27 16:36:41 +0100
  • 589fbc18aa Don't try and load the config file while already loading the config file Matt Caswell 2021-07-27 16:59:59 +0100
  • 123ed33433 Ensure any default_properties still apply even in the event of a provider load failure Matt Caswell 2021-07-27 16:36:24 +0100
  • 09f38299cc Don't leak the OSSL_LIB_CTX in the event of a failure to load the FIPS module Matt Caswell 2021-07-27 16:31:20 +0100
  • 2a7855fb25 ci: disable async for the SH4 build and reenable the associated test Pauli 2021-07-26 12:54:50 +1000
  • 1ad4350393 ci: get rid of no-asm flag to m68k cross compiles Pauli 2021-07-26 11:57:48 +1000
  • cb7055fd5a ci: add the param conversion tests to the cross compiles. Pauli 2021-07-26 11:54:12 +1000
  • 64d9b626aa QEMU: include test runs for most cross compilation targets Pauli 2021-07-23 11:48:32 +1000
  • 09755337d5 test: handle not a number (NaN) values in the param conversion test. Pauli 2021-07-26 11:53:23 +1000
  • 03c2f21b98 Add a test case for EVP_MD_meth_dup() and EVP_CIPHER_meth_dup() Matt Caswell 2021-07-27 10:32:49 +0100
  • bb98a1123b Fix EVP_MD_meth_dup and EVP_CIPHER_meth_dup Matt Caswell 2021-07-26 15:53:25 +0100
  • c6fcd88fa0 Mark the EVP_PKEY_METHOD arg as const on some EVP_PKEY_meth_get_*() funcs Matt Caswell 2021-07-20 16:18:04 +0100
  • 26411bc887 KTLS: AES-CCM in TLS-1.3 is broken on 5.x kernels, disable it Tomas Mraz 2021-07-20 13:08:31 +0200
  • c9eb459870 Test ktls in non-default options CI build Tomas Mraz 2021-07-20 12:23:24 +0200
  • bdb65e2ba6 Drop no-ktls from runchecker daily build as it has no effect Tomas Mraz 2021-07-20 12:22:57 +0200
  • a7e62fbdf8 ECDSA_SIG_set0(): Clarify documentation and fix formatting errors Tomas Mraz 2021-07-22 09:32:56 +0200
  • 9aaf5048b1 ECDSA_SIG_set0: r and s parameters cannot be NULL Tomas Mraz 2021-07-21 16:42:55 +0200
  • 317ed1b417 DOCS: Move the description of EVP_PKEY_get0_description() Richard Levitte 2021-07-13 11:15:29 +0200
  • ad0a2c0110 EVP: Add EVP_PKEY_get0_provider() and EVP_PKEY_CTX_get0_provider() Richard Levitte 2021-07-13 10:40:45 +0200
  • 4d4de19e9c Fix potential problems with EVP_PKEY_CTX_new() with engine set Tomas Mraz 2021-07-22 15:01:53 +0200
  • 4bd60d486c do_sigver_init: Add missing ERR_clear_last_mark() Tomas Mraz 2021-07-22 15:25:32 +0200
  • 034f9f4f6e ci: QEMU based cross compiled testing Pauli 2021-07-22 19:13:41 +1000
  • e6f0c8d3a7 ci: reinstate the passwd tests for the no-cached-fetch run. Pauli 2021-07-22 10:56:29 +1000
  • 74b7f339aa Makefile: Avoid changing LIBDIR based on whether it already exists jenda1 2021-07-20 16:32:49 +0200
  • 40184c9610 DSA/RSA_print(): Fix potential memory leak Tomas Mraz 2021-07-21 18:45:01 +0200
  • a983764e17 Add a test for custom EVP_PKEY_METHODs Matt Caswell 2021-07-20 16:18:58 +0100
  • 929f651eaa Fix custom EVP_PKEY_METHOD implementations where no engine is present Matt Caswell 2021-07-19 16:17:50 +0100
  • 5dc6489bb6 Update our EVP_PKEY_METHODs to get low level keys via public APIs Matt Caswell 2021-07-20 09:58:53 +0100
  • 981a5b7ce3 OSSL_HTTP_open(): Fix memory leak on TLS connect failure via proxy Dr. David von Oheimb 2021-07-20 11:19:39 +0200
  • c74188e86c ci: omit tests that consume too much memory Pauli 2021-07-21 19:25:22 +1000
  • 4672e5de9e tls_process_{client,server}_certificate(): allow verify_callback return > 1 Dr. David von Oheimb 2021-01-27 22:13:30 +0100
  • ee11462d31 SSL_CTX_set_cert_verify_callback.pod: various corrections and clarifications Dr. David von Oheimb 2021-01-22 22:34:56 +0100
  • 0c48fda8d3 Add testcases for SSL_key_update() corner case calls yangyangtiantianlonglong 2021-07-15 20:15:36 +0800
  • fd76ee47b9 test: include all DRBG tests in FIPS mode Pauli 2021-07-16 11:58:46 +1000
  • 9989a746eb docs: update CTR DRBG documentation to not mention the lack of a derivation function in FIPS Pauli 2021-07-16 11:54:14 +1000
  • 4e6fa8014f err: remove the derivation function is mandatory for FIPS error message since it's no longer used and newly introduced Pauli 2021-07-16 11:52:30 +1000
  • 00f5f3cd00 drbg: allow the ctr derivation function to be disabled in FIPS mode Pauli 2021-07-16 11:38:23 +1000
  • c5dc9ab965 Fix a read buffer overrun in X509_aux_print(). Ingo Schwarze 2021-07-18 17:48:06 +0200
  • 718d55f43f doc: fix OPENSSL_VERSION_NUMBER length in the synopsis Petr Gotthard 2021-07-18 14:19:11 +0200
  • b8ffcd8715 demos: update readme file with pbkdf2 and scrypt examples. Pauli 2021-07-19 13:17:02 +1000
  • 9dbb4dac09 demos: add Makefile support for pbkdf2 and scrypt KDF demos Pauli 2021-07-19 13:00:38 +1000
  • 73a3b967e9 demo: add scrypt demonstration program Pauli 2021-07-19 13:00:23 +1000
  • d2f25d5c0a demo: add pbkdf2 demonstration program Pauli 2021-07-19 13:00:06 +1000
  • d9c29baf1a test: fix use after scope problem in ACVP test Pauli 2021-07-18 00:47:09 +1000
  • ca00152497 Fix some minor record layer issues Matt Caswell 2021-07-15 14:08:56 +0100
  • 2cff17fdb8 Fix signed/unsigned comparison warnings in sslapitest Matt Caswell 2021-07-14 15:36:12 +0100
  • c3c00c7acd config: enable ACVP test case if FIPS is enabled. Pauli 2021-07-16 10:31:41 +1000
  • 24f84b4e4d doc: It is not possible to use SSL_OP_* value in preprocessor conditions Tomas Mraz 2021-07-15 13:37:26 +0200
  • 3bec485153 Disallow SSL_key_update() if there are writes pending Matt Caswell 2021-07-13 17:44:44 +0100
  • 21ba77cad6 Don't reset the packet pointer in ssl3_setup_read_buffer Matt Caswell 2021-07-13 17:19:12 +0100
  • e0ad156d22 RSA_public_decrypt is equivalent to a verify recover operation Tomas Mraz 2021-07-15 09:30:23 +0200
  • 02d63fe999 evp_test: Add tests for rsa_padding_mode:none Tomas Mraz 2021-07-14 12:45:30 +0200
  • 07d189cee4 Allow RSA signature operations with RSA_NO_PADDING Tomas Mraz 2021-07-13 15:28:24 +0200
  • ca638147c8 Drop daily run-checker build with just enable-acvp-tests Tomas Mraz 2021-07-14 15:51:29 +0200
  • f096691b91 CI: have enable-acvp-tests in some CI build Tomas Mraz 2021-07-14 15:49:31 +0200
  • 033e987c03 Signature algos: allow having identical digest in params Tomas Mraz 2021-07-14 15:41:22 +0200
  • 59f66d8cf9 acvp_test: Fix incorrect parenthesis Tomas Mraz 2021-07-14 15:41:00 +0200
  • 09c1db3399 apps: Use the first detected address family if IPv6 is not available Daiki Ueno 2021-07-14 11:15:34 +0200
  • 52f7e44ec8 Split bignum code out of the sparcv9cap.c Tomas Mraz 2021-07-07 17:47:06 +0200
  • 8e94c51b32 doc: document the params arguments to the initialisation functions. Pauli 2021-07-14 10:03:45 +1000
  • 56fdb70796 evp: constify some OSSL_PARAM arguments Pauli 2021-07-14 10:03:22 +1000
  • 11f18ef1f5 Make EVP_PKEY_check() be an alias for EVP_PKEY_pairwise_check() Tomas Mraz 2021-07-13 17:41:02 +0200