Click house/openssl 3.0.10#7

Closed

rschu1ze wants to merge 6451 commits intomasterfrom

ClickHouse/openssl-3.0.10

This pull request is big! We're only showing the most recent 250 commits

Commits on Feb 8, 2023

des: prevent error when using two key triple DES with a random key
paulidale
committed
Fix incomplete error check on BIO_set_accept_name()

ndossche
authored and
tmshort
committed
Fix a potential memory leak in apps/s_server.c

akai54
authored and
tmshort
committed
Document limits on static and dynamic linking for HPE NonStop platforms.

rsbeckerca
authored and
t8m
committed
Fix incomplete error check on BIO_set_md()

ndossche
authored and
tmshort
committed
Fix error check on default_check() helper function

ndossche
authored and
t8m
committed
Fix incomplete check on CMS_SharedInfo_encode

ndossche
authored and
t8m
committed
Fix BIO_set_indent() check

ndossche
authored and
t8m
committed
Fix incomplete BIO_dup_state() error check

ndossche
authored and
tmshort
committed

Commits on Feb 11, 2023

rsa: add msvc intrinsic for non x64 platforms

tomato42
authored and
t8m
committed
Correct a copy&paste error in a link URL
t8m
committed

Commits on Feb 13, 2023

OSSL_CMP_certConf_cb(): fix regression on checking newly enrolled cert
DDvO
committed

Commits on Feb 14, 2023

Use of sparse_array.c only in the shared libssl
levitte
committed

Commits on Feb 20, 2023

Fix failing cms test when no-des is used
bernd-edlinger
committed
Fix incorrect error branch in ossl_bn_rsa_fips186_4_derive_prime()

ndossche
authored and
tmshort
committed
Document return value of OSSL_DECODER_from_data

Benno Evers
authored and
paulidale
committed

Commits on Feb 21, 2023

openssl-3.0#20290: Fixed typo in "config" man page

Jeeban Sethi
authored and
paulidale
committed
Only call OPENSSL_init_crypto on fetch if using the default libctx

mattcaswell
authored and
paulidale
committed
Add a test for no initialisation of the default config file

mattcaswell
authored and
paulidale
committed

Commits on Feb 22, 2023

Fix potential NULL pointer dereference in function evp_pkey_asn1_ctrl

xiaoxiaoafeifei
authored and
paulidale
committed

Commits on Feb 23, 2023

Fixes #20278: Fixed double free bug in crypto/http/http_client.c

Jeeban Sethi
authored and
paulidale
committed
Skip subdirectories in SSL_add_dir_cert_subjects_to_stack()

olszomal
authored and
paulidale
committed
Add a test for TLS pipelining

mattcaswell
authored and
paulidale
committed
Pipeline output/input buf arrays must live until the EVP_Cipher is called

mattcaswell
authored and
paulidale
committed

Commits on Feb 24, 2023

Commits on Feb 28, 2023

Add documentation for "NULL" cipher and digest algorithms.

slontis
authored and
paulidale
committed
Add provider pre-fetching documentation

slontis
authored and
paulidale
committed
Document the list of RAND algorithms in the default and fips providers.

slontis
authored and
paulidale
committed
Fix incomplete error check on ASN1_item_i2d()

ndossche
authored and
paulidale
committed
Fix incomplete error check on RSA_public_decrypt()

ndossche
authored and
paulidale
committed
Disable atomic refcounts with no-threads

jwt27
authored and
paulidale
committed
ec: Use .machine "any" explicitly in ecp_nistp521-ppc64

cheese
authored and
paulidale
committed
Fix infinite loops in DSA sign code.

slontis
authored and
paulidale
committed
Fix potential infinite loops in ECDSA signing.

slontis
authored and
paulidale
committed
Fix FFC mdprop setting bugs.

slontis
authored and
paulidale
committed

Commits on Mar 1, 2023

Add sections that were missing
paulidale
committed

Commits on Mar 2, 2023

Coverity 1521557: Error handling issues
paulidale
committed
Fix typo in base provider example code

HansHoogerwerf
authored and
paulidale
committed

Commits on Mar 5, 2023

Fix cast.
paulidale
committed

Commits on Mar 6, 2023

Fix a bad merge in sslapitest
mattcaswell
committed

Commits on Mar 7, 2023

DOCS: provider-keymgmt(7) - params for EVP_PKEY_get_default_digest_{name,nid}()
levitte
committed

Commits on Mar 14, 2023

Commits on Mar 15, 2023

cms_ec.c: Fix broken backport of size_t fix in ecdh_cms_encrypt
t8m
committed

Commits on Mar 16, 2023

Fix documented function return types

bitrotlink
authored and
paulidale
committed
Fix copyright disclaimer.

paulidale
authored and
t8m
committed

Commits on Mar 19, 2023

Commits on Mar 20, 2023

cmp_msg.c: free memory of certStatus before goto err

JAVAID Mohammad-Habib
authored and
t8m
committed

Commits on Mar 21, 2023

nit: tidy-up code, and fix a typo.

FdaSilvaYY
authored and
t8m
committed
cmp: fix --strict-warnings windows builds

FdaSilvaYY
authored and
t8m
committed

Commits on Mar 23, 2023

Disable the policy tree exponential growth test conditionally
paulidale
committed

Commits on Mar 24, 2023

tls1_set_groups_list: freeing *pext before overwriting

Peter Kaestle
authored and
levitte
committed

Commits on Mar 27, 2023

`EVP_PKEY_CTX_dup` segmentation fault fix

afshinpir
authored and
t8m
committed

Commits on Mar 28, 2023

Commits on Mar 31, 2023

Commits on Apr 4, 2023

Erase temporary buffer in EVP_PKEY_get_bn_param()

iamnotacake
authored and
t8m
committed
Revert "Fix Timing Oracle in RSA decryption"

bernd-edlinger
authored and
t8m
committed
Alternative fix for CVE-2022-4304

bernd-edlinger
authored and
t8m
committed

Commits on Apr 11, 2023

Updated return value of PEM_write_TYPE() and PEM_write_bio_TYPE() in man-pages.

blazmonster
authored and
t8m
committed

Commits on Apr 12, 2023

Fixes #19580 ECX keygen

ShuaiYuan21
authored and
paulidale
committed

Commits on Apr 13, 2023

doc: Fix misleading stucture info

Lipovlan
authored and
paulidale
committed
doc: Fix incorrect pairing of functions

Lipovlan
authored and
paulidale
committed
Fix the LCM computation in the RSA multiprime key check
t8m
committed

Commits on Apr 14, 2023

List also non-fetchable hashes in openssl dgst -list

GauriSpears
authored and
t8m
committed

Commits on Apr 16, 2023

adding provider_unload functions for cmp_ tests

dcarpente
authored and
paulidale
committed

Commits on Apr 17, 2023

bn_nist: replace pointer bit-fiddling with ternary

aloisklink
authored and
paulidale
committed
bn_nist: remove unused type-punning union `u`

aloisklink
authored and
paulidale
committed
bn_local: remove unused `PTR_SIZE_INT` definition

aloisklink
authored and
paulidale
committed

Commits on Apr 18, 2023

Commits on Apr 20, 2023

aesv8-armx.pl: Avoid buffer overrread in AES-XTS decryption
t8m
committed

Commits on Apr 21, 2023

Fix checking return code of EVP_PKEY_get_int_param at check_curve

lo1ol
authored and
t8m
committed
Bump actions/setup-python from 4.5.0 to 4.6.0

dependabot[bot]
authored and
t8m
committed

Commits on Apr 25, 2023

Fix regression of no-posix-io builds
t8m
committed

Commits on Apr 26, 2023

Correct the CHANGES entry for CVE-2023-1255
t8m
committed

Commits on Apr 28, 2023

APPS/cmp: prevent HTTP client failure on -rspin option with too few filenames
DDvO
committed
fix aes-xts bug on aarch64 big-endian env.

Liu-ErMeng
authored and
t8m
committed
ASN1_OCTET_STRING_new() calls ASN1_STRING_type_new(V_ASN1_OCTET_STRING)

vladak
authored and
t8m
committed
http proxy handling: Use ossl_safe_getenv() instead of getenv()

bharsaklemukesh975
authored and
t8m
committed
Improve documentation of -no_ssl3, -no_tls1, -no_tls1_1, -no_tls1_2, -no_tls1_3 options

rkarmaka98
authored and
t8m
committed
Avoid generating RSA keys with p < q

rkarmaka98
authored and
t8m
committed

Commits on May 1, 2023

param->ctrl translation: Fix fix_ec_paramgen_curve_nid()

levitte
authored and
mattcaswell
committed
param->ctrl translation: Fix evp_pkey_ctx_setget_params_to_ctrl()

levitte
authored and
mattcaswell
committed

Commits on May 2, 2023

rand: trust user supplied entropy when configured without a random source
paulidale
committed

Commits on May 3, 2023

Add negative integer check when using ASN1_BIT_STRING

mlitre
authored and
paulidale
committed
Fix broken links on asym_cipher manpages

Lipovlan
authored and
paulidale
committed

Commits on May 5, 2023

Fix the padlock engine

bernd-edlinger
authored and
hlandau
committed

Commits on May 8, 2023

Prevent a fuzzing timeout in the conf fuzzer
mattcaswell
committed

Commits on May 9, 2023

aes-gcm-armv8_64 asm support bigdian

JerryDevis
authored and
t8m
committed
Fix memory leak in engine_cleanup_add_first()

KovalevVasiliy
authored and
t8m
committed

Commits on May 10, 2023

DLTS → DTLS

DimitriPapadopoulos
authored and
hlandau
committed
Fix a typo found by codespell in a Makefile variable

DimitriPapadopoulos
authored and
hlandau
committed
CMP app and app_http_tls_cb(): pick the right TLS hostname (also without port)

DDvO
authored and
hlandau
committed
CMP app: fix deallocated host/port fields in APP_HTTP_TLS_INFO

DDvO
authored and
hlandau
committed

Commits on May 11, 2023

Fixed TLS1.3 handshake issue for legacy engine API.

ShuaiYuan21
authored and
t8m
committed

Commits on May 12, 2023

Clear ownership when duplicating sessions

wbl
authored and
t8m
committed
Clarify documentation of SSL_SESSION_dup

wbl
authored and
t8m
committed
Fix typos found by codespell

DimitriPapadopoulos
authored and
t8m
committed
provider: return error if buf too small when getting ec pubkey param

liyi77
authored and
t8m
committed
apps/openssl.cnf: fix reference to insta.ca.crt
DDvO
committed
CMP client: fix error response on -csr without private key, also in docs
DDvO
committed
CMP client: fix checking new cert enrolled with oldcert and without private key
DDvO
committed

Commits on May 15, 2023

Fixed EVP_PKEY_CTX_set_ec_paramgen_curve_nid() for SM2 in ENGINEs

ShuaiYuan21
authored and
t8m
committed

Commits on May 17, 2023

Fix stack corruption in ui_read

bernd-edlinger
authored and
t8m
committed

Commits on May 19, 2023

Update hkdf.c to avoid potentially vulnerable code pattern

nmouha
authored and
t8m
committed

Commits on May 22, 2023

Commits on May 23, 2023

If oaep_md is not initialized, correctly initialize it

beldmit
authored and
t8m
committed
doc/fingerprints.txt: Add the OpenSSL OMC PGP key fingerprint

levitte
authored and
t8m
committed

Commits on May 24, 2023

Fix incorrect parameter verification in EVP_MD_CTX_get_params

lan1120
authored and
paulidale
committed

Commits on May 25, 2023

Fix a bug where the result of rehash is unstable

hmy102
authored and
t8m
committed
Clarify how to return string data

wbl
authored and
t8m
committed

Commits on May 29, 2023

x509: Fix possible use-after-free when OOM

neverpanic
authored and
t8m
committed
x509: Handle ossl_policy_level_add_node errors

neverpanic
authored and
t8m
committed
Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate

levitte
authored and
t8m
committed

Commits on May 30, 2023

Commits on Jun 2, 2023

Fix documentation where openssl-genrsa is listed as deprecated since OpenSSL 3.0

Abdullah-03
authored and
t8m
committed

Commits on Jun 6, 2023

Commits on Jun 9, 2023

Cast the argument to unsigned char when calling isspace()

baentsch
authored and
t8m
committed

Commits on Jun 10, 2023

Set RC4 defines on libcrypto/liblegacy
t8m
committed

Commits on Jun 12, 2023

Fix incorrect ERR_raise() calls

botovq
authored and
t8m
committed
INSTALL: document shared library pinning for static builds

mspncp
authored and
t8m
committed
X509_NAME_cmp fix for empty name

wimdec
authored and
t8m
committed

Commits on Jun 13, 2023

rand_lib: RAND_poll: Reseed in non-"no-deprecated" builds.

mkasick
authored and
paulidale
committed

Commits on Jun 15, 2023

apps/ca.c: Handle EVP_PKEY_get_default_digest_name() returning 1 with "UNDEF"

levitte
authored and
t8m
committed

Commits on Jun 16, 2023

Fix new typos found by codespell

DimitriPapadopoulos
authored and
paulidale
committed

Commits on Jun 18, 2023

return immediately if namemap is NULL

vladak
authored and
paulidale
committed

Commits on Jun 23, 2023

Commits on Jun 25, 2023

OSSL_STORE and PKCS#12: Check if there is a MAC to verify before prompting

levitte
authored and
paulidale
committed
Add a test case for the password prompt on garbage PKCS#12 file

levitte
authored and
paulidale
committed
Fix typos found by codespell in branch 3.0

DimitriPapadopoulos
authored and
paulidale
committed
add note about retrieving error stack

vladak
authored and
paulidale
committed
Check for 0 modulus in BN_RECP_CTX_set.

fullwaywang
authored and
paulidale
committed

Commits on Jun 26, 2023

Commits on Jun 27, 2023

CONF_modules_load_file_ex(): Do not try to load an empty file name
t8m
committed

Commits on Jun 28, 2023

openssl speed -multi -evp prints wrong algorithm name

jo-so
authored and
t8m
committed

Commits on Jun 29, 2023

Commits on Jun 30, 2023

openssl-rsautl.pod: Add missing comma

jwilk
authored and
paulidale
committed
Fix typos newly found by codespell in branch 3.0

DimitriPapadopoulos
authored and
paulidale
committed
Fix OSSL_PROVIDER_try_load() retain_fallbacks doc

duncanthomson
authored and
paulidale
committed
conf/conf_sap.c: correct return of ossl_config_int() in UEFI system

liyi77
authored and
t8m
committed

Commits on Jul 13, 2023

EVP_PKEY_{en,de}capsulate.pod: fix glitches and add some detail and hints
DDvO
committed

Commits on Jul 14, 2023

Move Keccak rhotates tables to rodata

aaupov
authored and
paulidale
committed
Add FIPS build instructions

slontis
authored and
paulidale
committed
Bump actions/setup-python from 4.6.1 to 4.7.0

dependabot[bot]
authored and
t8m
committed
Modified OSSL_parse_url to initialize pport_num to 0.

rsbeckerca
authored and
t8m
committed
Do not ignore empty associated data with AES-SIV mode
t8m
committed
Add testcases for empty associated data entries with AES-SIV
t8m
committed
Add CHANGES.md and NEWS.md entries for CVE-2023-2975
t8m
committed

Commits on Jul 16, 2023

Fix RSA OAEP set/get label for legacy engine

ljuzwiuk
authored and
paulidale
committed
no-module should not imply disabling DSO loading support

t8m
authored and
paulidale
committed
Add a test for a retry during the handshake

mattcaswell
authored and
paulidale
committed
Fix ssl3_do_write() to correctly handle retries

mattcaswell
authored and
paulidale
committed

Commits on Jul 17, 2023

Remove duplicated values

ljuzwiuk
authored and
t8m
committed

Commits on Jul 18, 2023

Fix int_ctx_new() error when use 1.1.1n sm2 key and ec method engine

lan1120
authored and
paulidale
committed
Fix typos found by codespell

DimitriPapadopoulos
authored and
paulidale
committed

Commits on Jul 19, 2023

EVP_KDF.pod: extend text on 'salt' and 'info' parameters

DDvO
authored and
paulidale
committed
openssl-kdf.pod.in: add text on 'salt' and 'info' parameters; small further improvements

DDvO
authored and
paulidale
committed
Fix DH_check() excessive time with over sized modulus

mattcaswell
authored and
t8m
committed
Add a test for CVE-2023-3446

mattcaswell
authored and
t8m
committed
Update CHANGES/NEWS for CVE-2023-3446

mattcaswell
authored and
t8m
committed
apps/cms.c: Fix unreachable code in cms_main()

atishkov
authored and
t8m
committed

Commits on Jul 21, 2023

Fix documentation around AAD and return values in EVP_Cipher*

samuel-lee-msft
authored and
paulidale
committed
speed: Fix memory leak

ifranzki
authored and
paulidale
committed
speed: Fix execution of EdDSA measurement

ifranzki
authored and
paulidale
committed

Commits on Jul 24, 2023

fix: reject adding a duplicity into STACK_OF(X509_ATTRIBUTE)

xsulca00
authored and
paulidale
committed
Fix error handling in pipelining test

bernd-edlinger
authored and
t8m
committed

Commits on Jul 25, 2023

x509: add ASN1_STRING_set() check result

atishkov
authored and
paulidale
committed
get_cert_by_subject_ex(): Check result of X509_STORE_lock()

atishkov
authored and
t8m
committed

Commits on Jul 26, 2023

Make DH_check set some error bits in recently added error
bernd-edlinger
committed

Commits on Jul 27, 2023

DH_check(): Do not try checking q properties if it is obviously invalid

t8m
authored and
tmshort
committed
dhtest.c: Add test of DH_check() with q = p + 1

t8m
authored and
tmshort
committed
Add CHANGES.md and NEWS.md entries for CVE-2023-3817

t8m
authored and
tmshort
committed
Correct spelling of database

fthrslntgy
authored and
tmshort
committed

Commits on Jul 31, 2023

Fix a regression in X509_VERIFY_PARAM_add0_policy()
mattcaswell
committed

Commits on Aug 1, 2023