openssl/ssl, branch OpenSSL_1_0_2m

Fix weak digest in TLS 1.2 with SNI.

2017-11-01T12:35:19Z

1ce95f19601bbc6bfd24092c76c8f8105124e857 was incomplete and did not handle the case when SSL_set_SSL_CTX was called from the cert_cb callback rather than the SNI callback. The consequence is any server using OpenSSL 1.0.2 and the cert_cb callback for SNI only ever signs a weak digest, SHA-1, even when connecting to clients which use secure ones. Fix this and add regression tests for both this and the original issue. Fixes #4554. Reviewed-by: Emilia Käsper Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/4577)

Use casts for arguments to ctype functions.

2017-08-22T05:16:28Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/4212)

Backport of 5b8fa43 and remove resolved TODO: see PR#3924.

2017-07-16T15:21:03Z

Make RSA key exchange code actually constant-time. Reviewed-by: Andy Polyakov (Merged from https://github.com/openssl/openssl/pull/3935)

Add documentation for the SSL_export_keying_material() function

2017-06-21T15:21:03Z

Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3738)

Fix ex_data memory leak

2017-06-01T20:51:33Z

Code was added in commit 62f488d that overwrite the last ex_data valye using CRYPTO_dup_ex_data() causing a memory leak and potentially confusing the ex_data dup() callback. In ssl_session_dup(), new-up the ex_data before calling CRYPTO_dup_ex_data(); all the other structures that dup ex_data have the destination ex_data new'd before the dup. Reviewed-by: Andy Polyakov Reviewed-by: Matt Caswell Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3568)

Send a protocol version alert

2017-06-01T12:33:54Z

If we fail to negotiate a version then we should send a protocol version alert. Fixes #3595 Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/3598)

Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION (1.0.2)

2017-05-26T09:33:54Z

The check for SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION is inconsistent. Most places check SSL->options, one place is checking SSL_CTX->options; fix that. Reviewed-by: Matt Caswell Reviewed-by: Kurt Roeckx GH: #3521

Ignore -rle and -comp when compiled with OPENSSL_NO_COMP.

2017-05-25T11:36:45Z

Fixes make test when configured with no-comp. Reviewed-by: Kurt Roeckx Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/3545)

Copy custom extension flags in a call to SSL_set_SSL_CTX()

2017-05-10T13:06:58Z

The function SSL_set_SSL_CTX() can be used to swap the SSL_CTX used for a connection as part of an SNI callback. One result of this is that the s->cert structure is replaced. However this structure contains information about any custom extensions that have been loaded. In particular flags are set indicating whether a particular extension has been received in the ClientHello. By replacing the s->cert structure we lose the custom extension flag values, and it appears as if a client has not sent those extensions. SSL_set_SSL_CTX() should copy any flags for custom extensions that appear in both the old and the new cert structure. Fixes #2180 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3427)

Additional check to handle BAD SSL_write retry

2017-04-11T16:17:54Z

Reviewed-by: Matt Caswell Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3122)