openssl/apps, branch OpenSSL_1_0_2m

Make sure that a cert with extensions gets version number 2 (v3)

2017-09-26T09:04:01Z

Fixes #4419 Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/4421)

Add missing HTML tag in www_body in s_server.c

2017-08-09T16:02:57Z

In the generated HTML document, the `

` tag is not closed.

Reviewed-by: Richard Levitte 
Reviewed-by: Kurt Roeckx 
Reviewed-by: Rich Salz 
(Merged from https://github.com/openssl/openssl/pull/4088)
(cherry picked from commit 1a9f5cf0d58629ab8972f50e937d8ab78bf27b6f)

schlock global variable needs to be volatile

2017-07-24T23:34:48Z

Reviewed-by: Andy Polyakov Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/4000) (cherry picked from commit e0de4dd5a2b0c0dc27e6a6ab01fabe374d657d23)

Fix apps/s_client.c's XMPP client

2017-07-20T21:26:42Z

When an error occurs during the starttls handskake, s_client gets stuck looping around zero bytes reads, because the server won't sent anything more after its error tag. Shutting down on the first zero byte read fixes this. Fixes #3980 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3981)

tsget: remove call of WWW::Curl::Easy::global_cleanup

2017-06-25T20:17:12Z

This function is undocumented, but similarly named functions (such as 'curl_global_cleanup') are documented as internals that should not be called by scripts. Fixes #3765 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3769)

Fix possible usage of NULL pointers in apps/spkac.c

2017-06-10T19:18:25Z

Check return value of NETSCAPE_SPKI_new() and NETSCAPE_SPKI_b64_encode(), and also clean up coding style incidentally. Signed-off-by: Paul Yang Reviewed-by: Kurt Roeckx Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3647) (cherry picked from commit f2582f08d5167ee84b7b313fd1435fe91ee44880)

Fix speed command for alternation of ciphers and digests.

2017-06-09T16:55:48Z

CLA: trivial Reviewed-by: Tim Hudson Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3487) (cherry picked from commit 9ae4e664da0692f27bfe0d1a34db29ed815203c8)

Fix srp app missing NULL termination with password callback

2017-06-01T20:22:24Z

The password_callback() function does not necessarily NULL terminate the password buffer, the caller must use the returned length but the srp app uses this function as if it was doing NULL termination. This made the -passin and -passout options of "openssl srp" fail inexpicably and randomly or even crash. Fixed by enlarging the buffer by one, so that the maximum password length remains unchanged, and adding NULL termination upon return. [Rearrange code for coding style compliance in process.] This backport of 0e83981d61fc435f42d4bb4d774272b69556b7bc. Reviewed-by: Matt Caswell Reviewed-by: Andy Polyakov (Merged from https://github.com/openssl/openssl/pull/3579)

Fix regression in openssl req -x509 behaviour.

2017-05-17T13:37:39Z

Allow conversion of existing requests to certificates again. Fixes the issue #3396 Reviewed-by: Matt Caswell Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3485)

pkeyutl exit with 0 if the verification succeeded

2017-04-13T11:25:54Z

If exiting non-zero, which not consistent with shell conventions, the shells/scripts treat the cmd as failed. CLA: trivial Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/3213)