openssl/include, branch OpenSSL_1_1_1j

Prepare for 1.1.1j release

2021-02-16T15:24:01Z

Reviewed-by: Richard Levitte

Update copyright year

2021-02-16T15:17:22Z

Reviewed-by: Richard Levitte

Don't overflow the output length in EVP_CipherUpdate calls

2021-02-16T11:42:35Z

CVE-2021-23840 Reviewed-by: Paul Dale

X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert

2021-01-14T13:36:09Z

This is the backport of #13755 to v1.1.1. Fixes #13698 Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/13756)

Update copyright years of auto-generated headers (make update)

2021-01-04T14:06:52Z

This backports #13764. Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/13769)

Prepare for 1.1.1j-dev

2020-12-08T13:21:09Z

Reviewed-by: Richard Levitte

Prepare for 1.1.1i release

2020-12-08T13:20:59Z

Reviewed-by: Richard Levitte

Complain if we are attempting to encode with an invalid ASN.1 template

2020-12-08T10:18:44Z

It never makes sense for multi-string or CHOICE types to have implicit tagging. If we have a template that uses the in this way then we should immediately fail. Thanks to David Benjamin from Google for reporting this issue. Reviewed-by: Tomas Mraz

Check that multi-strings/CHOICE types don't use implicit tagging

2020-12-08T10:18:44Z

It never makes sense for multi-string or CHOICE types to use implicit tagging since the content would be ambiguous. It is an error in the template if this ever happens. If we detect it we should stop parsing. Thanks to David Benjamin from Google for reporting this issue. Reviewed-by: Tomas Mraz

Changing X509at_get0_data_by_OBJ to expect const stack of X509_ATTRIBUTE

2020-10-15T13:47:21Z

CLA: trivial Reviewed-by: Kurt Roeckx Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/13062) (cherry picked from commit 796948cd733d2bd0d8acbaf2354c718bcd4352a6)