openssl/apps, branch OpenSSL_1_0_2g

CVE-2016-0798: avoid memory leak in SRP

2016-02-24T17:39:13Z

The SRP user database lookup method SRP_VBASE_get_by_user had confusing memory management semantics; the returned pointer was sometimes newly allocated, and sometimes owned by the callee. The calling code has no way of distinguishing these two cases. Specifically, SRP servers that configure a secret seed to hide valid login information are vulnerable to a memory leak: an attacker connecting with an invalid username can cause a memory leak of around 300 bytes per connection. Servers that do not configure SRP, or configure SRP but do not configure a seed are not vulnerable. In Apache, the seed directive is known as SSLSRPUnknownUserSeed. To mitigate the memory leak, the seed handling in SRP_VBASE_get_by_user is now disabled even if the user has configured a seed. Applications are advised to migrate to SRP_VBASE_get1_by_user. However, note that OpenSSL makes no strong guarantees about the indistinguishability of valid and invalid logins. In particular, computations are currently not carried out in constant time. Reviewed-by: Rich Salz

RT 3854: Update apps/req

2016-02-12T13:17:57Z

Change the default keysize to 2048 bits, and the minimum to 512 bits. Reviewed-by: Rich Salz (cherry picked from commit a76265574398944d686d2d0de9bacca162f555ca)

Fix pkeyutl/rsautl empty encrypt-input/decrypt-output handling

2016-02-02T17:41:33Z

Also fix option processing in pkeyutl to allow use of (formerly) "out-of-order" switches that were needless implementation limitations. RT2018 Reviewed-by: Rich Salz

GH611: s_client help message bug

2016-02-02T17:16:10Z

Reviewed-by: Emilia Käsper

pkeyutl: allow peerkey for EC_DERIVE to reside on a hardware token (public key for now)

2016-01-22T19:13:31Z

Reviewed-by: Rich Salz Reviewed-by: Richard Levitte

GH issue 572: Error in help message

2016-01-20T23:52:18Z

Reviewed-by: Tim Hudson Reviewed-by: Viktor Dukhovni

To avoid possible time_t overflow use X509_time_adj_ex()

2016-01-14T03:02:27Z

Reviewed-by: Viktor Dukhovni (cherry picked from commit 9aa00b187a65b1f30789d6274ec31ea86efe7973) Conflicts: apps/x509.c

Changed help output

2016-01-13T00:23:34Z

Reviewed-by: Rich Salz Reviewed-by: Richard Levitte

Pass engine=NULL to EVP_PKEY_CTX_new(), unless "-engine_impl" was given

2016-01-13T00:23:34Z

Reviewed-by: Rich Salz Reviewed-by: Richard Levitte

Remove unnecessary debugging fprintf

2016-01-13T00:23:34Z

Reviewed-by: Rich Salz Reviewed-by: Richard Levitte