openssl, branch tls1.3-draft-18

Update PR#3925

2017-07-14T10:19:17Z

Reviewed-by: Tim Hudson Reviewed-by: Bernd Edlinger Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/3925)

Retry SSL_read on ERROR_WANT_READ.

2017-07-14T10:19:17Z

This resolves the retry issue in general, but also the specific case where a TLS 1.3 server sends a post-handshake NewSessionTicket message prior to appdata. Reviewed-by: Tim Hudson Reviewed-by: Bernd Edlinger Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/3925)

Add tests for version/ciphersuite sanity checks

2017-05-04T10:49:20Z

The previous commits added sanity checks for where the max enabled protocol version does not have any configured ciphersuites. We should check that we fail in those circumstances. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3334)

Add a ciphersuite config sanity check for servers

2017-05-04T10:49:19Z

Ensure that there are ciphersuites enabled for the maximum supported version we will accept in a ClientHello. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3334)

Add a ciphersuite config sanity check for clients

2017-05-04T10:49:19Z

Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3334)

Add a test for resumption after HRR

2017-03-21T10:09:14Z

Make sure we actually test resumption where an HRR has occurred. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2996) (cherry picked from commit 1763ab10291eec361d8e56519582d710158e1e8e)

Fix resumption after HRR

2017-03-21T10:09:14Z

Commit 6b1bb98fa moved the processing of ClientHello extensions into the state machine post-processing stage. After processing s->init_num is reset to 0, so by post-processing we cannot rely on its value. Unfortunately we were using it to handle the PSK extension. This causes the handshake to fail. We were using init_num to figure out the length of ClientHello2 so we can remove it from the handshake_buffer. The handshake_buffer holds the transcript of all the messages sent so far. For PSK processing though we only want to add in a partial ClientHello2. This commit changes things so we just work out where ClientHello2 starts, working forward from the beginning of handshake_buffer. Fixes #2983 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2996) (cherry picked from commit 77815a026cbedbb7b9a89558612f69e6294fe1ea)

Fix typo in ASYNC_WAIT_CTX_new.pod doc

2017-03-16T13:50:21Z

For the function that get the changed fds, it should be 'ASYNC_WAIT_CTX_get_changed_fds()' instead of 'ASYNC_WAIT_CTX_fds_have_changed()'. CLA: trivial Signed-off-by: Paul Yang Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/2966)

Simplify code around next_proto.len by changing 'len' data type.

2017-03-16T10:43:39Z

clean an useless static qualifier and a dead comment. Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/2278)

Remove documentation of deleted function

2017-03-16T10:39:34Z

It's even removing a BUGS entry! Reviewed-by: Emilia Käsper Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/2797)