openssl/ssl, branch OpenSSL_1_0_2t

Update copyright year

2019-05-28T12:41:38Z

Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/9032)

Go into the error state if a fatal alert is sent or received

2019-02-26T14:13:05Z

If an application calls SSL_shutdown after a fatal alert has occured and then behaves different based on error codes from that function then the application may be vulnerable to a padding oracle. CVE-2019-1559 Reviewed-by: Richard Levitte

Honour mandatory digest on private key in tls1_process_sigalgs()

2018-11-24T07:01:07Z

If the private key says it can only support one specific digest, then don't ask it to perform a different one. Fixes: #7348 (cherry picked from commit 2d263a4a73f852005b16359873475d48755999ad and reworked for 1.0.2) Reviewed-by: Matt Caswell Reviewed-by: Nicola Tuveri (Merged from https://github.com/openssl/openssl/pull/7610)

Update copyright year

2018-11-20T13:29:53Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/7671)

Fix 'no-ecdh' build

2018-11-09T23:45:24Z

Fixes #3302 Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/7606)

Properly handle duplicated messages from the next epoch

2018-11-02T10:00:14Z

Since 3884b47b7c we may attempt to buffer a record from the next epoch that has already been buffered. Prior to that this never occurred. We simply ignore a failure to buffer a duplicated record. Fixes #6902 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/7415)

Update copyright year

2018-08-14T12:40:34Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6955)

Don't create an invalid CertificateRequest

2018-07-03T10:24:48Z

We should validate that the various fields we put into the CertificateRequest are not too long. Otherwise we will construct an invalid message. Fixes #6609 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6629)

Fix some more gcc-9 warnings [-Wstringop-truncation]

2018-06-25T13:30:28Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6586)

Don't memcpy the contents of an empty fragment

2018-05-12T09:09:59Z

In DTLS if we have buffered a fragment for a zero length message (e.g. ServerHelloDone) then, when we unbuffered the fragment, we were attempting to memcpy the contents of the fragment which is zero length and a NULL pointer. This is undefined behaviour. We should check first whether we have a zero length fragment. Fixes a travis issue. [extended tests] Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6225)