openssl/ssl, branch OpenSSL_1_0_2h

Remove confusing comment.

2016-05-02T16:54:38Z

Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte Reviewed-by: Rich Salz

Issue #719:

2016-05-02T16:54:38Z

If no serverinfo extension is found in some cases, do not abort the handshake, but simply omit/skip that extension. Check for already-registered serverinfo callbacks during serverinfo registration. Update SSL_CTX_use_serverinfo() documentation to mention the need to reload the same serverinfo per certificate, for servers with multiple server certificates. Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte Reviewed-by: Rich Salz

Ensure we check i2d_X509 return val

2016-04-26T13:32:45Z

The i2d_X509() function can return a negative value on error. Therefore we should make sure we check it. Issue reported by Yuan Jochen Kang. Reviewed-by: Emilia Käsper (cherry picked from commit 446ba8de9af9aa4fa3debc7c76a38f4efed47a62)

Fix memory leak on invalid CertificateRequest.

2016-04-07T18:25:48Z

Free up parsed X509_NAME structure if the CertificateRequest message contains excess data. The security impact is considered insignificant. This is a client side only leak and a large number of connections to malicious servers would be needed to have a significant impact. This was found by libFuzzer. Reviewed-by: Emilia Käsper Reviewed-by: Stephen Henson

Fix ALPN

2016-04-04T17:45:09Z

* Perform ALPN after the SNI callback; the SSL_CTX may change due to that processing * Add flags to indicate that we actually sent ALPN, to properly error out if unexpectedly received. * document ALPN functions * unit tests Backport of commit 817cd0d52f0462039d1fe60462150be7f59d2002 Reviewed-by: Emilia Käsper Reviewed-by: Dr. Stephen Henson

Add a check for a failed malloc

2016-03-18T11:56:34Z

Ensure we check for a NULL return from OPENSSL_malloc Issue reported by Guido Vranken. Reviewed-by: Richard Levitte

Ensure that memory allocated for the ticket is freed

2016-03-18T11:56:34Z

If a call to EVP_DecryptUpdate fails then a memory leak could occur. Ensure that the memory is freed appropriately. Issue reported by Guido Vranken. Reviewed-by: Richard Levitte

Add no-ssl2-method

2016-03-14T20:13:59Z

Reviewed-by: Viktor Dukhovni MR: #2341

expose SSLv2 method prototypes

2016-03-09T08:14:24Z

Reviewed-by: Kurt Roeckx

Retain SSLv2 methods as functions that return NULL

2016-03-08T14:07:23Z

This improves ABI compatibility when symbol resolution is not lazy. Reviewed-by: Richard Levitte