openssl/ssl, branch OpenSSL_1_0_2p

Update copyright year

2018-08-14T12:40:34Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6955)

Don't create an invalid CertificateRequest

2018-07-03T10:24:48Z

We should validate that the various fields we put into the CertificateRequest are not too long. Otherwise we will construct an invalid message. Fixes #6609 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6629)

Fix some more gcc-9 warnings [-Wstringop-truncation]

2018-06-25T13:30:28Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6586)

Don't memcpy the contents of an empty fragment

2018-05-12T09:09:59Z

In DTLS if we have buffered a fragment for a zero length message (e.g. ServerHelloDone) then, when we unbuffered the fragment, we were attempting to memcpy the contents of the fragment which is zero length and a NULL pointer. This is undefined behaviour. We should check first whether we have a zero length fragment. Fixes a travis issue. [extended tests] Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6225)

Fix comment in ssl.h

2018-05-02T22:39:23Z

The ciphers field in a session contains the stack of ciphers offered by the client. Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6115)

Fix SSL_get_shared_ciphers()

2018-05-02T22:39:23Z

The function SSL_get_shared_ciphers() is supposed to return ciphers shared by the client and the server. However it only ever returned the client ciphers. Fixes #5317 Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6115)

fix warning unused-but-set-variable 'alg_k' (no-dh and no-ec)

2018-04-27T04:00:10Z

This patch fixes the following warning when OpenSSL is configured with no-dh and no-ec: ./Configure no-ec no-dh linux-x86_64 ... s3_lib.c: In function 'ssl3_get_req_cert_type': s3_lib.c:4234:19: warning: variable 'alg_k' set but not used [-Wunused-but-set-variable] unsigned long alg_k; CLA: trivial Signed-off-by: Cristian Stoica Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6087)

fix warning unused-but-set-variable 'nostrict' (no-dh and no-ec)

2018-04-27T04:00:10Z

This patch fixes the following warning when OpenSSL is configured with no-dh and no-ec: ./Configure no-ec no-dh linux-x86_64 ... s3_lib.c:4231:9: warning: variable 'nostrict' set but not used [-Wunused-but-set-variable] int nostrict = 1; ^ CLA: trivial Signed-off-by: Cristian Stoica Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6087)

Fix the alert sent if no shared sig algs

2018-04-20T10:42:07Z

We were sending illegal parameter. This isn't correct. The parameters are legal, we just don't have an overlap. A more appropriate alert is handshake failure. Fixes #2919 Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6011)

Ignore the status_request extension in a resumption handshake

2018-04-17T15:47:37Z

We cannot provide a certificate status on a resumption so we should ignore this extension in that case. Fixes #1662 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/5898)