openssl/crypto/engine, branch openssl-3.2TLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.22024-09-03T12:50:21ZCopyright year updates2024-09-03T12:50:21ZTomas Mraztomas@openssl.org2024-09-03T12:50:21Zurn:sha1:5fca53d7bad456bfebb771029cc329d28f4f97a5
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
Unlock only when lock was successful2024-07-03T20:11:44Zcchincholecpchinchole@gmail.com2024-07-02T01:16:03Zurn:sha1:e0d4526c427bc65fd1114467f1e5c88f6ceadd58
Addressing issue (#24517):
Updated the example in CRYPTO_THREAD_run_once.pod to reflect that an unlock call should not be made if a write_lock failed.
Updated BIO_lookup_ex in bio_addr.c and ossl_engine_table_select in eng_table.c to not call unlock if the lock failed.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/24779)
(cherry picked from commit 3f4da93678497fe64d262d03c388932f7ecfe74e)
Fixes for potential deadlock2024-07-03T14:05:52Zcchincholecpchinchole@gmail.com2024-07-02T07:56:22Zurn:sha1:cfb0b41bf87de07cd8a325677d01c403a83234e8
Fixes (#24517):
(3/3) Addresses the potential deadlock if an error occurs from up_ref
in functions ENGINE_get_first, ENGINE_get_last, ENGINE_get_next, and
ENGINE_get_prev in file crypto/engine/eng_list.c
CLA: trivial
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24780)
(cherry picked from commit e6174ca4d48f6f4f954dd87f2cdf3718af14f064)
Copyright year updates2024-06-04T12:58:30ZTomas Mraztomas@openssl.org2024-06-04T12:58:30Zurn:sha1:91bcb1668d8aa80aaf68fa1130139f63375da0fd
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
Revert "Improved detection of engine-provided private "classic" keys"2024-01-31T17:40:57ZTomas Mraztomas@openssl.org2023-12-15T12:45:50Zurn:sha1:934943281267259fa928f4a5814b176525461a65
This reverts commit 2b74e75331a27fc89cad9c8ea6a26c70019300b5.
The commit was wrong. With 3.x versions the engines must be themselves
responsible for creating their EVP_PKEYs in a way that they are treated
as legacy - either by using the respective set1 calls or by setting
non-default EVP_PKEY_METHOD.
The workaround has caused more problems than it solved.
Fixes #22945
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23063)
(cherry picked from commit 39ea78379826fa98e8dc8c0d2b07e2c17cd68380)
Copyright year updates2023-10-26T13:21:19ZMatt Caswellmatt@openssl.org2023-10-26T13:21:19Zurn:sha1:2699ffe5fa686c35e1ea1c176817a6bbc2dbcd86
Reviewed-by: Richard Levitte <levitte@openssl.org>
Release: yes
Improved detection of engine-provided private "classic" keys2023-10-04T00:02:00ZDmitry Belyavskiybeldmit@gmail.com2022-12-26T19:38:44Zurn:sha1:2b74e75331a27fc89cad9c8ea6a26c70019300b5
Resolves #17092 (?)
Resolves #17286 (?)
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19965)
coverity: NULL dereference2023-09-20T03:31:20ZPaulipauli@openssl.org2023-09-19T01:07:21Zurn:sha1:be01f609f98a8930f2c91b813715e515a88f4d54
Fixes coverity 1544699.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/22138)
Fix engine cleanup error handling2023-09-15T06:11:53ZBernd Edlingerbernd.edlinger@hotmail.de2023-09-05T14:59:45Zurn:sha1:00f2efccf5b9671a7af2b12571068258e9c255a5
Error handling in engine_cleanup_add_first/last was
broken and caused memory leaks.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21971)
Copyright year updates2023-09-07T08:59:15ZMatt Caswellmatt@openssl.org2023-09-07T08:59:15Zurn:sha1:da1c088f599af3755aaeed1c447a39621ef12e1f
Reviewed-by: Richard Levitte <levitte@openssl.org>
Release: yes