openssl, branch OpenSSL_1_1_1s

Prepare for 1.1.1s release

2022-11-01T12:36:10Z

Reviewed-by: Richard Levitte Release: yes

Update copyright year

2022-11-01T12:28:05Z

Reviewed-by: Richard Levitte Release: yes (Merged from https://github.com/openssl/openssl/pull/19560)

Update CHANGES and NEWS for new release

2022-11-01T10:52:01Z

Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/19558)

Make openVMS seeding less dependent of OpenVMS version

2022-10-27T10:32:13Z

SYS$GETTIM_PREC is a very new function, only available on OpenVMS v8.4. OpenSSL binaries built on OpenVMS v8.4 become unusable on older OpenVM versions, but building for the older CRTL version will make the high precision time functions unavailable. Tests have shown that on Alpha and Itanium, the time update granularity between SYS$GETTIM and SYS$GETTIM_PREC is marginal, so the former plus a sequence number turns out to be better to guarantee a unique nonce. Fixes #18727 Reviewed-by: Tomas Mraz Reviewed-by: Hugo Landau (Merged from https://github.com/openssl/openssl/pull/18730)

ssl_cipher_process_rulestr: don't read outside rule_str buffer

2022-10-26T10:52:23Z

If rule_str ended in a "-", "l" was incremented one byte past the end of the buffer. This resulted in an out-of-bounds read when "l" is dereferenced at the end of the loop. It is safest to just return early in this case since the condition occurs inside a nested loop. CLA: trivial Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/19166) (cherry picked from commit 428511ca66670e169a0e1b12e7540714b0be4cf8)

doc: fix copy/paste error

2022-10-23T22:52:46Z

Fixes #19460 Reviewed-by: Tim Hudson Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/19461) (cherry picked from commit 5b9480fc1e814bf8fa2dce0dbbede147f04d477c)

Fix many inconsistencies in doc of CMS_verify() and PKC7_verify() etc.

2022-10-19T18:31:22Z

Also change B< to I< in {CMS,PKCS7}_verify.pod, PKCS7_sign{,_add_signer}.pod Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: David von Oheimb (Merged from https://github.com/openssl/openssl/pull/19108) (cherry picked from commit 312a6b3a0327a986344c85aa6bc43e135d70bc6c)

Fix no longer implicitly refresh the cached TBSCertificate

2022-10-13T13:54:29Z

This reverts commit 748df1874f0488ce0c86b6d2d083921abb34b1e3. Fixes #19388 Reviewed-by: Bernd Edlinger Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/19392)

Prepare for 1.1.1s-dev

2022-10-11T12:46:07Z

Reviewed-by: Richard Levitte Release: yes

Prepare for 1.1.1r release

2022-10-11T12:45:58Z

Reviewed-by: Richard Levitte Release: yes