openssl/fuzz, branch openssl-3.4.0TLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.4.02024-09-05T07:35:49ZCopyright year updates2024-09-05T07:35:49ZTomas Mraztomas@openssl.org2024-09-05T07:35:49Zurn:sha1:7ed6de997f62466271ef7ff6016026e1fdc76963
Reviewed-by: Neil Horman <nhorman@openssl.org>
Release: yes
fix: alias auditEntity OID2024-08-26T09:38:44ZJonathan M. Wilburjonathan@wilbur.space2024-08-01T17:45:54Zurn:sha1:91432b9ea040a0b11e85875a555dc1f4dcfc02dc
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24754)
feat: support auditIdentity X.509v3 extension2024-08-26T09:38:44ZJonathan M. Wilburjonathan@wilbur.space2024-06-27T20:29:49Zurn:sha1:9216859f7b2d68f819d9b8a8ad53c2f59f3e263f
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24754)
fix: wrong name for OID -> auditIdentity2024-08-26T09:25:23ZJonathan M. Wilburjonathan@wilbur.space2024-06-27T20:29:26Zurn:sha1:bce3a8d57e7512abb217cfab0c7671396fe0dae1
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24754)
fuzz/hashtable.c: rc == -1 on insert is OK when fuzzing2024-08-22T12:52:43ZTomas Mraztomas@openssl.org2024-08-22T12:49:05Zurn:sha1:3c1713aeed4dc7d1ac25e9e365b8bd98afead638
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25273)
core_namemap.c: 2048 hashtable buckets should be sufficient2024-08-21T13:21:26ZTomas Mraztomas@openssl.org2024-08-16T13:54:15Zurn:sha1:f0b1d4d1b055bc87b26bb9bbfee437b12f0a4c89
It is unlikely we would need more than 4000 names and even
with more names (up to 8192) it would still work, just
the performance fo the namemap would degrade.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/24504)
hashtable: Support lockless reads2024-08-21T13:21:25ZTomas Mraztomas@openssl.org2024-05-27T14:49:15Zurn:sha1:71fe7f09831682e0dafe49e927da195792cff385
Also build it in the FIPS provider too and properly
report error on insert when hashtable cannot be grown.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/24504)
alternate collision checking support2024-08-21T13:21:25ZNeil Hormannhorman@openssl.org2024-05-15T13:20:30Zurn:sha1:435531ec24ecdf00a5904f277bf3d2d9c6d63dd9
Add full key matching to hashtable
the idea is that on a hash value match we do a full memory comparison of
the unhashed key to validate that its actually the key we're looking for
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24504)
limit bignums to 128 bytes2024-08-09T11:59:03ZNeil Hormannhorman@openssl.org2024-07-26T15:01:05Zurn:sha1:f0768376e1639d12a328745ef69c90d584138074
Keep us from spinning forever doing huge amounts of math in the fuzzer
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/25013)
Add OIDs id-kp-wisun-fan-device and id-on-hardwareModule2024-08-07T17:53:19ZMathis Marionmathis.marion@silabs.com2024-01-12T15:48:15Zurn:sha1:387491d53744384317806168668f3febb739a117
Sub-OIDs for {iso(1) identified-organization(3) dod(6) internet(1)
private(4) enterprise(1) 45605} are recorded in the document "Wi-SUN
Assigned Value Registry" (WAVR).
OID id-on-hardwareModule is defined in RFC 4108.
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23428)