openssl/apps, branch OpenSSL_1_1_0f

Fix srp app missing NULL termination with password callback

2017-05-22T08:30:44Z

The password_callback() function does not necessarily NULL terminate the password buffer, the caller must use the returned length but the srp app uses this function as if it was doing NULL termination. This made the -passin and -passout options of "openssl srp" fail inexpicably and randomly or even crash. Fixed by enlarging the buffer by one, so that the maximum password length remains unchanged, and adding NULL termination upon return. [Rearrange code for coding style compliance in process.] Reviewed-by: Matt Caswell Reviewed-by: Andy Polyakov (Merged from https://github.com/openssl/openssl/pull/3475) (cherry picked from commit 0e83981d61fc435f42d4bb4d774272b69556b7bc)

-inkey can be an identifier, not just a file

2017-05-21T22:24:49Z

update pkcs12, smime, ts apps. Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/3507) (cherry picked from commit 48b5352212d8c68f7fd071ca9f38822b7e954c5a)

Fix endless loop on srp app when listing users

2017-05-19T09:44:32Z

With the -list option the srp app loops on the main while() endlessly, whether users were given on the command line or not. The loop should be stopped when in list mode and there are no more users. Reviewed-by: Rich Salz Reviewed-by: Andy Polyakov (Merged from https://github.com/openssl/openssl/pull/3489) (cherry picked from commit 5ec3210fc106ecc6badb48db6cfb1493a7607763)

Fix regression in openssl req -x509 behaviour.

2017-05-11T15:22:38Z

Allow conversion of existing requests to certificates again. Fixes the issue #3396 Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/3437) (cherry picked from commit 888adbe064556ff5ab2f1d16a223b0548696614c)

Convert uses of snprintf to BIO_snprintf

2017-05-02T16:30:09Z

Fixes #2360 Reviewed-by: Matt Caswell Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3366) (cherry picked from commit c41048ffe359ae18cb9c8f840ca970e367d97c37)

Remove (broken) diagnostic print

2017-04-27T15:49:16Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/3336) (cherry picked from commit f2150cd74f45d49545d0787725f99723642b7c2c)

Fix some variable references in init_client

2017-04-25T13:04:13Z

We were incorrectly using "res" when we meant "ai" Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/3287)

openssl enc: Don't unbuffer stdin

2017-04-25T13:03:50Z

- unbuffer causes single-byte reads from stdin and poor performance Fixes #3281 CLA: trivial Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/3299) (cherry picked from commit 65d62488b8c808350f440d2276034f5223b391ad)

e_os.h: omit PRIu64.

2017-04-08T18:35:34Z

PRIu64 is error-prone with BIO_printf, so introduce and stick to custom platform-neutral macro. 'll' allows to print 64-bit values on *all* supported platforms, but it's problematic with -Wformat -Werror. Hence use 'l' in identifiable LP64 cases. Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/3148)

Ensure dhparams can handle X9.42 params in DER

2017-04-03T19:08:12Z

dhparams correctly handles X9.42 params in PEM format. However it failed to correctly processes them when reading/writing DER format. Fixes #3102 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3111) (cherry picked from commit 18d20b5eb66fda0ada2e65c2b19aeae75827bdf8)