openssl/apps, branch OpenSSL_1_0_2p

Update copyright year

2018-08-14T12:40:34Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6955)

Fix some more gcc-9 warnings [-Wstringop-truncation]

2018-06-25T13:30:28Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6586)

apps: when the 'compat' nameopt has been set, leave it be

2018-05-31T09:02:21Z

XN_FLAG_COMPAT has a unique property, its zero for value. This means it needs special treatment; if it has been set (which can only be determined indirectly) and set alone (*), no other flags should be set. (*) if any other nameopt flag has been set by the user, compatibility mode is blown away. Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/6382) (cherry picked from commit 3190d1dca43ecfd748c06aa06752de06af3768b9)

Fix memory leaks in CA related functions.

2018-05-12T22:40:54Z

(cherry picked from commit aebd0e5ca12d1ba0b229a4121a54afa5ea2d8aa1) Reviewed-by: Andy Polyakov Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6238)

s_server: fix warnings unused-but-set-variable (no-dh)

2018-04-27T04:00:10Z

This patch fixes the following two warnings when OpenSSL is built with no-dh option: s_server.c: In function 's_server_main': s_server.c:1105:25: warning: variable 'no_dhe' set but not used [-Wunused-but-set-variable] int no_tmp_rsa = 0, no_dhe = 0, no_ecdhe = 0, nocert = 0; ^ s_server.c:1101:11: warning: variable 'dhfile' set but not used [-Wunused-but-set-variable] char *dhfile = NULL; ^ CLA: trivial Signed-off-by: Cristian Stoica Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6087)

Fix documentation for the -showcerts s_client option

2018-04-25T09:56:02Z

This option shows the certificates as sent by the server. It is not the full verified chain. Fixes #4933 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6069)

apps/s_socket.c: Fix do_accept

2018-04-19T19:08:00Z

do_accept() checked that the peer IP address had a PTR record, and would fail if not. The retrieved named was then never used, even though passed around. All this is unnecessary, so we remove it. Fixes #3407 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6018)

Fix ocsp app exit code

2018-04-19T07:46:48Z

If we run the ocsp command line app and the responder returns a non-successful status code then the app should exit with a failure code. Based on an original patch by Tatsuhiro Tsujikawa. Fixes #2387 Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/5999) (cherry picked from commit 2add645dfc364cfc609e6138de1bf43c217bb557)

Change the "offset too large" message to more generic wording

2018-04-03T14:11:31Z

Reviewed-by: Rich Salz Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/5826) (cherry picked from commit 1518c55a796b058eff01f3cbf177f4b726c01d7c)

Fix range checks with -offset and -length in asn1parse

2018-04-03T14:08:44Z

Reviewed-by: Rich Salz Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/5826) (cherry picked from commit 16e1eea6a67c85c9d786f3c4448182b1aca101b8)