openssl, branch openssl-3.0.4

Prepare for release of 3.0.4

2022-06-21T13:30:58Z

Reviewed-by: Richard Levitte Release: yes

make update

2022-06-21T13:30:57Z

Reviewed-by: Richard Levitte Release: yes

Use --release in dev/release.sh

2022-06-21T13:28:33Z

Fixes #18243. Fixes #18242. Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/18305)

Update copyright year

2022-06-21T13:03:39Z

Reviewed-by: Richard Levitte Release: yes

Update CHANGES.md and NEWS.md for new release

2022-06-21T12:35:59Z

Reviewed-by: Tomas Mraz Release: yes

c_rehash: Drop the issuer_name_hash= prefix from the CRL hash

2022-06-20T10:45:57Z

Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell

Fix file operations in c_rehash.

2022-06-20T10:45:48Z

CVE-2022-2068 Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell

providers/implementations/exchange/kdf_exch.c: fix unavailable SIZE_MAX

2022-06-20T09:03:17Z

SIZE_MAX is used in a recent fix of this file, but without including internal/numbers.h, so that macro ends up not existing on some platforms, resulting in build failures. Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/18605)

Clarify use of EGD for HPNS in rand/rand_egd.c comments.

2022-06-16T23:29:09Z

Signed-off-by: Randall S. Becker Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/18565)

Fix documentation of BIO_FLAGS_BASE64_NO_NL

2022-06-16T14:08:51Z

Commit 8bfb7506d210841f2ee4eda8afe96441a0e33fa5 updated `BIO_f_base64(3)` to improve the documentation of the `BIO_FLAGS_BASE64_NO_NL` flag. In particular, the updated text states that when this flag is used, all newlines in the input are ignored. This is incorrect, as the following program proves: ```c unsigned char *in_buf = "IlRoZSBxdWljayBicm93biBmb3gganVt\ncHMgb3ZlciBhIGxhenkgZG9nLiI=\n"; int main(int argc, char **argv) { BIO *b64 = BIO_new(BIO_f_base64()); if (b64 == NULL) return 1; BIO_set_flags(b64, BIO_get_flags(b64) | BIO_FLAGS_BASE64_NO_NL); int in_len = strlen(in_buf); BIO *in = BIO_new_mem_buf(in_buf, in_len); if (in == NULL) return 2; in = BIO_push(b64, in); unsigned char *out_buf = calloc(in_len, sizeof(unsigned char)); if (out_buf == NULL) return 3; size_t out_len; int r = BIO_read_ex(in, out_buf, in_len, &out_len); printf("rv = %d\n", r); printf("decoded = %s\n", out_buf); return 0; } ``` Update the text of `BIO_f_base64(3)` to clarify that when the flag is set, the data must be all on one line (with or without a trailing newline character). Signed-off-by: Fraser Tweedale Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/18568) (cherry picked from commit 0edcbacca99ab2b716da395f204610fc2775ea83)