openssl/include, branch OpenSSL_1_1_1f

Prepare for 1.1.1f release

2020-03-31T12:17:45Z

Reviewed-by: Richard Levitte

Update copyright year

2020-03-31T12:09:37Z

Reviewed-by: Paul Dale Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/11445)

Partially revert "Detect EOF while reading in libssl"

2020-03-25T13:17:22Z

This partially reverts commit db943f43a60d1b5b1277e4b5317e8f288e7a0a3a. Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/11400)

Prepare for 1.1.1f-dev

2020-03-17T14:32:46Z

Reviewed-by: Paul Yang

Prepare for 1.1.1e release

2020-03-17T14:31:17Z

Reviewed-by: Paul Yang

Update copyright year

2020-03-17T13:59:29Z

Reviewed-by: Paul Yang (Merged from https://github.com/openssl/openssl/pull/11344)

Code to thread-safety in ChangeCipherState

2020-03-13T23:11:45Z

The server-side ChangeCipherState processing stores the new cipher in the SSL_SESSION object, so that the new state can be used if this session gets resumed. However, writing to the session is only thread-safe for initial handshakes, as at other times the session object may be in a shared cache and in use by another thread at the same time. Reflect this invariant in the code by only writing to s->session->cipher when it is currently NULL (we do not cache sessions with no cipher). The code prior to this change would never actually change the (non-NULL) cipher value in a session object, since our server enforces that (pre-TLS-1.3) resumptions use the exact same cipher as the initial connection, and non-abbreviated renegotiations have produced a new session object before we get to this point. Regardless, include logic to detect such a condition and abort the handshake if it occurs, to avoid any risk of inadvertently using the wrong cipher on a connection. Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/10943) (cherry picked from commit 2e3ec2e1578977fca830a47fd7f521e290540e6d)

VMS: mitigate for the C++ compiler that doesn't understand certain pragmas

2020-02-27T00:21:50Z

This only affects __DECC_INCLUDE_EPILOGUE.H and __DECC_INCLUDE_PROLOGUE.H, which are used automatically by HP and VSI C/C++ compilers. Reviewed-by: Tim Hudson Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/11159)

Detect EOF while reading in libssl

2020-02-20T17:02:30Z

If we hit an EOF while reading in libssl then we will report an error back to the application (SSL_ERROR_SYSCALL) but errno will be 0. We add an error to the stack (which means we instead return SSL_ERROR_SSL) and therefore give a hint as to what went wrong. Contains a partial fix for #10880 Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/10882)

VMS: Correct error reporting in crypto/rand/rand_vms.c

2020-02-15T05:48:04Z

The future style that's coming with OpenSSL 3.0 was used, we need to revert that back to "traditional" style. Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/11088)