openssl, branch OpenSSL_1_0_2l

Prepare for 1.0.2l release

2017-05-25T12:55:36Z

Reviewed-by: Stephen Henson

make update

2017-05-25T12:55:36Z

Reviewed-by: Stephen Henson

Update CHANGES and NEWS for new release

2017-05-25T11:44:30Z

Reviewed-by: Kurt Roeckx (Merged from https://github.com/openssl/openssl/pull/3548)

Ignore -rle and -comp when compiled with OPENSSL_NO_COMP.

2017-05-25T11:36:45Z

Fixes make test when configured with no-comp. Reviewed-by: Kurt Roeckx Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/3545)

Fix regression in openssl req -x509 behaviour.

2017-05-17T13:37:39Z

Allow conversion of existing requests to certificates again. Fixes the issue #3396 Reviewed-by: Matt Caswell Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3485)

Remove notification settings from appveyor.yml

2017-05-17T10:38:09Z

Notifications can be (and should be) configured on account basis on the CI web site. This avoids getting emails to openssl-commits for personal accounts that also build OpenSSL stuff. Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/3484) (cherry picked from commit 7a94f5b0f7c878b1056a08f659ce23aa97bfa3ad)

Remove dead code.

2017-05-11T15:13:12Z

The second BN_is_zero test can never be true. Reviewed-by: Andy Polyakov Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3434) (cherry picked from commit 3f97052392cb10fca5309212bf720685262ad4a6)

Copy custom extension flags in a call to SSL_set_SSL_CTX()

2017-05-10T13:06:58Z

The function SSL_set_SSL_CTX() can be used to swap the SSL_CTX used for a connection as part of an SNI callback. One result of this is that the s->cert structure is replaced. However this structure contains information about any custom extensions that have been loaded. In particular flags are set indicating whether a particular extension has been received in the ClientHello. By replacing the s->cert structure we lose the custom extension flag values, and it appears as if a client has not sent those extensions. SSL_set_SSL_CTX() should copy any flags for custom extensions that appear in both the old and the new cert structure. Fixes #2180 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3427)

perlasm/x86_64-xlate.pl: work around problem with hex constants in masm.

2017-05-05T14:57:18Z

Perl, multiple versions, for some reason occasionally takes issue with letter b[?] in ox([0-9a-f]+) regex. As result some constants, such as 0xb1 came out wrong when generating code for MASM. Fixes GH#3241. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3385) (cherry picked from commit c47aea8af1e28e46e1ad5e2e7468b49fec3f4f29)

Fix some error path logic in i2v_AUTHORITY_INFO_ACCESS and i2v_GENERAL_NAME

2017-05-02T16:24:24Z

Fixes #1653 reported by Guido Vranken Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3362) (cherry picked from commit 75a3e39288feeeefde5ed1f96ff9faeba0d2b233)