openssl/ssl, branch openssl-3.4.0

Fix memory leak in tls_parse_ctos_psk()

2024-10-11T12:54:19Z

`sess` is not NULL at this point, and is freed on the success path, but not on the error path. Fix this by going to the `err` label such that `SSL_SESSION_free(sess)` is called. CLA: trivial Reviewed-by: Saša Nedvědický Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25643) (cherry picked from commit b2474b287fbc7a24f0aa15e6808c6e3ef8287f23)

Copyright year updates

2024-10-07T13:13:27Z

Reviewed-by: Richard Levitte Release: yes

Rename list macros

2024-09-26T08:02:48Z

The quic implementation defined a set of LIST_* macros for list manipulation, which conflicts with the generally support BSD api found in the queue.h system header. While this isn't normally a problem, A report arrived indicating that MacOSX appears to implicitly include queue.h from another system header which causes definition conflicts. As the openssl macros are internal only, it seems the most sensible thing to do is place them in a well known namespace for our library to avoid the conflict, so add an OSSL_ prefix to all our macros Fixes #25516 Reviewed-by: Paul Dale Reviewed-by: Tim Hudson Reviewed-by: Tom Cosgrove Reviewed-by: Saša Nedvědický Reviewed-by: David von Oheimb (Merged from https://github.com/openssl/openssl/pull/25519) (cherry picked from commit c4ec708bd58715fab10b8a6085ac89d79615b250)

Copyright year updates

2024-09-05T07:35:49Z

Reviewed-by: Neil Horman Release: yes

Check for excess data in CertificateVerify

2024-08-29T17:32:00Z

As reported by Alicja Kario, we ignored excess bytes after the signature payload in TLS CertificateVerify Messages. These should not be present. Fixes: #25298 Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25302)

Correct Alert Handling for Missing Compression Methods

2024-08-29T17:16:38Z

Fixes #7940: Updated the compression check logic to improve protocol compliance. The code now returns `SSL_AD_DECODE_ERROR` when no compression method is provided in the ClientHello message. It returns `SSL_AD_ILLEGAL_PARAMETER` if the “null” compression method (0x00) is missing. Additionally, refactored the related test code for enhanced readability and maintainability. Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25255)

EVP_MD_size() updates

2024-08-29T08:29:53Z

For SHAKE algorithms we now return 0 from EVP_MD_size(). So all the places that check for < 0 needed to change to <= 0 (Otherwise the behaviour will be to digest nothing in most cases). Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25285)

Return SSL_AD_UNEXPECTED_MESSAGE alert when receiving any other change_cipher_spec value(RFC 8446)

2024-08-26T09:58:10Z

Fixes: #25086 CLA: trivial Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/25257)

Fix the alert used on a missing key_share

2024-08-21T13:35:51Z

RFC8446 requires we send an illegal_parameter alert if we don't get a key_share back from the server and our kex_modes require one. We were instead reporting this as missing_extension. Fixes #25040 Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25059)

Ensure the msg_callback is called on CCS receipt in TLSv1.3

2024-08-15T18:17:39Z

CCS records are ignore in TLSv1.3. But we should still call the msg_callback anyway. Fixes #25166 Reviewed-by: Neil Horman Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25169)