From no-reply at appveyor.com  Thu Feb  1 03:06:19 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 01 Feb 2018 03:06:19 +0000
Subject: [openssl-commits] Build failed: openssl master.15309
Message-ID: <20180201030619.1.2FC1019E484A7181@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/40356add/attachment.html>

From levitte at openssl.org  Thu Feb  1 06:12:47 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 01 Feb 2018 06:12:47 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517465567.548516.18086.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4e525a0b4db2b11bee15a485b6ed6622ca8948f1 (commit)
       via  71bb86f0dc72c49d9efc098a71a6654004a2035a (commit)
       via  39556e63ef6c079d144b07d7f492152abf9efe77 (commit)
      from  3cb413da197c26c4520cbf08e5d4542637a90a4e (commit)


- Log -----------------------------------------------------------------
commit 4e525a0b4db2b11bee15a485b6ed6622ca8948f1
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Jan 31 22:08:12 2018 +0100

    ocsp.c doesn't free the whole output chain, maybe causing a memory leak
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5224)

commit 71bb86f0dc72c49d9efc098a71a6654004a2035a
Author: Richard Levitte <levitte at openssl.org>
Date:   Sun Jan 28 09:49:46 2018 +0100

    Make sure that apps/openssl prefixes its output with '# ' during tests
    
    The reason to do this is that some output might start with an 'ok',
    which TAP catches and takes for TAP output.  The TAP compatible way is
    to make all output it shouldn't catch look like comments.
    
    We do this by setting the environment variable HARNESS_OSSL_PREFIX
    during tests.  When that is set, apps/openssl uses BIO_f_linebuffer
    and sets its prefix to the content of that environment variable.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5224)

commit 39556e63ef6c079d144b07d7f492152abf9efe77
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Jan 30 22:03:27 2018 +0100

    Add an apps internal BIO filter for prefixing output lines
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5224)

-----------------------------------------------------------------------

Summary of changes:
 apps/apps.c               |  20 +++++-
 apps/apps.h               |  16 ++++-
 apps/bf_prefix.c          | 176 ++++++++++++++++++++++++++++++++++++++++++++++
 apps/build.info           |   2 +-
 apps/ocsp.c               |   2 +-
 apps/openssl.c            |   1 +
 util/perl/OpenSSL/Test.pm |   4 +-
 7 files changed, 216 insertions(+), 5 deletions(-)
 create mode 100644 apps/bf_prefix.c

diff --git a/apps/apps.c b/apps/apps.c
index 834cedd..0438bdb 100644
--- a/apps/apps.c
+++ b/apps/apps.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -2428,14 +2428,26 @@ BIO *dup_bio_in(int format)
                       BIO_NOCLOSE | (istext(format) ? BIO_FP_TEXT : 0));
 }
 
+static BIO_METHOD *prefix_method = NULL;
+
 BIO *dup_bio_out(int format)
 {
     BIO *b = BIO_new_fp(stdout,
                         BIO_NOCLOSE | (istext(format) ? BIO_FP_TEXT : 0));
+    void *prefix = NULL;
+
 #ifdef OPENSSL_SYS_VMS
     if (istext(format))
         b = BIO_push(BIO_new(BIO_f_linebuffer()), b);
 #endif
+
+    if (istext(format) && (prefix = getenv("HARNESS_OSSL_PREFIX")) != NULL) {
+        if (prefix_method == NULL)
+            prefix_method = apps_bf_prefix();
+        b = BIO_push(BIO_new(prefix_method), b);
+        BIO_ctrl(b, PREFIX_CTRL_SET_PREFIX, 0, prefix);
+    }
+
     return b;
 }
 
@@ -2450,6 +2462,12 @@ BIO *dup_bio_err(int format)
     return b;
 }
 
+void destroy_prefix_method()
+{
+    BIO_meth_free(prefix_method);
+    prefix_method = NULL;
+}
+
 void unbuffer(FILE *fp)
 {
 /*
diff --git a/apps/apps.h b/apps/apps.h
index a740ad4..daaef36 100644
--- a/apps/apps.h
+++ b/apps/apps.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -48,6 +48,20 @@ extern const unsigned char tls13_aes128gcmsha256_id[];
 extern const unsigned char tls13_aes256gcmsha384_id[];
 extern BIO_ADDR *ourpeer;
 
+BIO_METHOD *apps_bf_prefix(void);
+/*
+ * The control used to set the prefix with BIO_ctrl()
+ * We make it high enough so the chance of ever clashing with the BIO library
+ * remains unlikely for the foreseeable future and beyond.
+ */
+#define PREFIX_CTRL_SET_PREFIX  (1 << 15)
+/*
+ * apps_bf_prefix() returns a dynamically created BIO_METHOD, which we
+ * need to destroy at some point.  When created internally, it's stored
+ * in an internal pointer which can be freed with the following function
+ */
+void destroy_prefix_method(void);
+
 BIO *dup_bio_in(int format);
 BIO *dup_bio_out(int format);
 BIO *dup_bio_err(int format);
diff --git a/apps/bf_prefix.c b/apps/bf_prefix.c
new file mode 100644
index 0000000..4d5e3a3
--- /dev/null
+++ b/apps/bf_prefix.c
@@ -0,0 +1,176 @@
+/*
+ * Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+
+#include <stdio.h>
+#include <string.h>
+#include <errno.h>
+#include <openssl/bio.h>
+#include "apps.h"
+
+static int prefix_write(BIO *b, const char *out, size_t outl,
+                        size_t *numwritten);
+static int prefix_read(BIO *b, char *buf, size_t size, size_t *numread);
+static int prefix_puts(BIO *b, const char *str);
+static int prefix_gets(BIO *b, char *str, int size);
+static long prefix_ctrl(BIO *b, int cmd, long arg1, void *arg2);
+static int prefix_create(BIO *b);
+static int prefix_destroy(BIO *b);
+static long prefix_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp);
+
+static BIO_METHOD *prefix_meth = NULL;
+
+BIO_METHOD *apps_bf_prefix(void)
+{
+    if (prefix_meth == NULL) {
+        if ((prefix_meth =
+             BIO_meth_new(BIO_TYPE_FILTER, "Prefix filter")) == NULL
+            || !BIO_meth_set_create(prefix_meth, prefix_create)
+            || !BIO_meth_set_destroy(prefix_meth, prefix_destroy)
+            || !BIO_meth_set_write_ex(prefix_meth, prefix_write)
+            || !BIO_meth_set_read_ex(prefix_meth, prefix_read)
+            || !BIO_meth_set_puts(prefix_meth, prefix_puts)
+            || !BIO_meth_set_gets(prefix_meth, prefix_gets)
+            || !BIO_meth_set_ctrl(prefix_meth, prefix_ctrl)
+            || !BIO_meth_set_callback_ctrl(prefix_meth, prefix_callback_ctrl)) {
+            BIO_meth_free(prefix_meth);
+            prefix_meth = NULL;
+        }
+    }
+    return prefix_meth;
+}
+
+typedef struct prefix_ctx_st {
+    char *prefix;
+    int linestart;               /* flag to indicate we're at the line start */
+} PREFIX_CTX;
+
+static int prefix_create(BIO *b)
+{
+    PREFIX_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
+
+    if (ctx == NULL)
+        return 0;
+
+    ctx->prefix = NULL;
+    ctx->linestart = 1;
+    BIO_set_data(b, ctx);
+    BIO_set_init(b, 1);
+    return 1;
+}
+
+static int prefix_destroy(BIO *b)
+{
+    PREFIX_CTX *ctx = BIO_get_data(b);
+
+    OPENSSL_free(ctx->prefix);
+    OPENSSL_free(ctx);
+    return 1;
+}
+
+static int prefix_read(BIO *b, char *in, size_t size, size_t *numread)
+{
+    return BIO_read_ex(BIO_next(b), in, size, numread);
+}
+
+static int prefix_write(BIO *b, const char *out, size_t outl,
+                        size_t *numwritten)
+{
+    PREFIX_CTX *ctx = BIO_get_data(b);
+
+    if (ctx == NULL)
+        return 0;
+
+    /* If no prefix is set or if it's empty, we've got nothing to do here */
+    if (ctx->prefix == NULL || *ctx->prefix == '\0') {
+        /* We do note if what comes next will be a new line, though */
+        if (outl > 0)
+            ctx->linestart = (out[outl-1] == '\n');
+        return BIO_write_ex(BIO_next(b), out, outl, numwritten);
+    }
+
+    *numwritten = 0;
+
+    while (*out != '\0') {
+        size_t i;
+        char c;
+
+        /* If we know that we're at the start of the line, output the prefix */
+        if (ctx->linestart) {
+            size_t dontcare;
+
+            if (!BIO_write_ex(BIO_next(b), ctx->prefix, strlen(ctx->prefix),
+                              &dontcare))
+                return 0;
+            ctx->linestart = 0;
+        }
+
+        /* Now, go look for the next LF, or the end of the string */
+        for (i = 0; (c = out[i]) != '\n' && c != '\0'; i++)
+            continue;
+        if (c == '\n')
+            i++;
+
+        /* Output what we found so far */
+        while (i > 0) {
+            size_t num = 0;
+
+            if (!BIO_write_ex(BIO_next(b), out, i, &num))
+                return 0;
+            out += num;
+            *numwritten += num;
+            i -= num;
+        }
+
+        /* If we found a LF, what follows is a new line, so take note */
+        if (c == '\n')
+            ctx->linestart = 1;
+    }
+
+    return 1;
+}
+
+static long prefix_ctrl(BIO *b, int cmd, long num, void *ptr)
+{
+    long ret = 0;
+
+    switch (cmd) {
+    case PREFIX_CTRL_SET_PREFIX:
+        {
+            PREFIX_CTX *ctx = BIO_get_data(b);
+
+            if (ctx == NULL)
+                break;
+
+            OPENSSL_free(ctx->prefix);
+            ctx->prefix = OPENSSL_strdup((const char *)ptr);
+            ret = ctx->prefix != NULL;
+        }
+        break;
+    default:
+        if (BIO_next(b) != NULL)
+            ret = BIO_ctrl(BIO_next(b), cmd, num, ptr);
+        break;
+    }
+    return ret;
+}
+
+static long prefix_callback_ctrl(BIO *b, int cmd, BIO_info_cb *fp)
+{
+    return BIO_callback_ctrl(BIO_next(b), cmd, fp);
+}
+
+static int prefix_gets(BIO *b, char *buf, int size)
+{
+    return BIO_gets(BIO_next(b), buf, size);
+}
+
+static int prefix_puts(BIO *b, const char *str)
+{
+    return BIO_write(b, str, strlen(str));
+}
diff --git a/apps/build.info b/apps/build.info
index 4a36ab5..e724373 100644
--- a/apps/build.info
+++ b/apps/build.info
@@ -8,7 +8,7 @@
           s_client.c s_server.c s_time.c sess_id.c smime.c speed.c spkac.c
           srp.c ts.c verify.c version.c x509.c rehash.c storeutl.c);
    our @apps_lib_src =
-       ( qw(apps.c opt.c s_cb.c s_socket.c app_rand.c),
+       ( qw(apps.c opt.c s_cb.c s_socket.c app_rand.c bf_prefix.c),
          split(/\s+/, $target{apps_aux_src}) );
    our @apps_init_src = split(/\s+/, $target{apps_init_src});
    "" -}
diff --git a/apps/ocsp.c b/apps/ocsp.c
index 122aee6..bd16a5b 100644
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -730,7 +730,7 @@ redo_accept:
     free_index(rdb);
     BIO_free_all(cbio);
     BIO_free_all(acbio);
-    BIO_free(out);
+    BIO_free_all(out);
     OCSP_REQUEST_free(req);
     OCSP_RESPONSE_free(resp);
     OCSP_BASICRESP_free(bs);
diff --git a/apps/openssl.c b/apps/openssl.c
index fe1eabd..fffa05e 100644
--- a/apps/openssl.c
+++ b/apps/openssl.c
@@ -93,6 +93,7 @@ static int apps_startup()
 static void apps_shutdown()
 {
     destroy_ui_method();
+    destroy_prefix_method();
 }
 
 static char *make_config_name()
diff --git a/util/perl/OpenSSL/Test.pm b/util/perl/OpenSSL/Test.pm
index 4afbf85..e363a48 100644
--- a/util/perl/OpenSSL/Test.pm
+++ b/util/perl/OpenSSL/Test.pm
@@ -1,4 +1,4 @@
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
@@ -476,7 +476,9 @@ sub run {
 	}
 	close $pipe;
     } else {
+	$ENV{HARNESS_OSSL_PREFIX} = "# ";
 	system("$prefix$cmd");
+	delete $ENV{HARNESS_OSSL_PREFIX};
     }
     $e = ($? & 0x7f) ? ($? & 0x7f)|0x80 : ($? >> 8);
     $r = $hooks{exit_checker}->($e);

From builds at travis-ci.org  Thu Feb  1 06:46:17 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 06:46:17 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16019 (master - 4e525a0)
In-Reply-To: <openssl/openssl+335965776+broken@travis-ci.org>
Message-ID: <5a72b7b96a71c_43fc6302ba56c772945@9cde2705-86f2-43ab-a9e0-15a89b8526cf.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16019
Status: Broken

Duration: 32 minutes and 42 seconds
Commit: 4e525a0 (master)
Author: Richard Levitte
Message: ocsp.c doesn't free the whole output chain, maybe causing a memory leak

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5224)

View the changeset: https://github.com/openssl/openssl/compare/3cb413da197c...4e525a0b4db2

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/335965776?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/0413ef95/attachment-0001.html>

From osslsanity at gmail.com  Thu Feb  1 09:19:45 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Thu, 1 Feb 2018 09:19:45 +0000 (UTC)
Subject: [openssl-commits] Jenkins build is back to normal : master_mips #365
In-Reply-To: <124278280.317.1517390295998.JavaMail.jenkins@ip-172-31-34-99>
References: <124278280.317.1517390295998.JavaMail.jenkins@ip-172-31-34-99>
Message-ID: <581252309.319.1517476785348.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/365/display/redirect?page=changes>


From osslsanity at gmail.com  Thu Feb  1 09:23:45 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Thu, 1 Feb 2018 09:23:45 +0000 (UTC)
Subject: [openssl-commits] Jenkins build is back to normal :
	master_mips_noasm #365
In-Reply-To: <212967360.318.1517390488998.JavaMail.jenkins@ip-172-31-34-99>
References: <212967360.318.1517390488998.JavaMail.jenkins@ip-172-31-34-99>
Message-ID: <1379815588.320.1517477025737.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips_noasm/365/display/redirect?page=changes>


From matt at openssl.org  Thu Feb  1 10:43:58 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 01 Feb 2018 10:43:58 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517481838.084825.18118.nullmailer@dev.openssl.org>

The branch master has been updated
       via  848a950b715fa73070a9d1638e7630acfb0dfa4d (commit)
      from  4e525a0b4db2b11bee15a485b6ed6622ca8948f1 (commit)


- Log -----------------------------------------------------------------
commit 848a950b715fa73070a9d1638e7630acfb0dfa4d
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Jan 31 09:53:51 2018 +0000

    Fix some instances of the wrong alert type being sent
    
    In a few places we sent an internal_error alert instead of a decode_error.
    
    Fixes #5213
    Fixes #5214
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5219)

-----------------------------------------------------------------------

Summary of changes:
 ssl/statem/extensions_clnt.c | 9 +++++++--
 ssl/statem/statem_clnt.c     | 4 ++--
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/ssl/statem/extensions_clnt.c b/ssl/statem/extensions_clnt.c
index dbb8812..5441e98 100644
--- a/ssl/statem/extensions_clnt.c
+++ b/ssl/statem/extensions_clnt.c
@@ -1273,7 +1273,7 @@ int tls_parse_stoc_server_name(SSL *s, PACKET *pkt, unsigned int context,
 int tls_parse_stoc_ec_pt_formats(SSL *s, PACKET *pkt, unsigned int context,
                                  X509 *x, size_t chainidx)
 {
-    unsigned int ecpointformats_len;
+    size_t ecpointformats_len;
     PACKET ecptformatlist;
 
     if (!PACKET_as_length_prefixed_1(pkt, &ecptformatlist)) {
@@ -1283,8 +1283,13 @@ int tls_parse_stoc_ec_pt_formats(SSL *s, PACKET *pkt, unsigned int context,
     }
     if (!s->hit) {
         ecpointformats_len = PACKET_remaining(&ecptformatlist);
-        s->session->ext.ecpointformats_len = 0;
+        if (ecpointformats_len == 0) {
+            SSLfatal(s, SSL_AD_DECODE_ERROR,
+                     SSL_F_TLS_PARSE_STOC_EC_PT_FORMATS, SSL_R_BAD_LENGTH);
+            return 0;
+        }
 
+        s->session->ext.ecpointformats_len = 0;
         OPENSSL_free(s->session->ext.ecpointformats);
         s->session->ext.ecpointformats = OPENSSL_malloc(ecpointformats_len);
         if (s->session->ext.ecpointformats == NULL) {
diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c
index 8a33386..e79bd7b 100644
--- a/ssl/statem/statem_clnt.c
+++ b/ssl/statem/statem_clnt.c
@@ -2452,7 +2452,7 @@ MSG_PROCESS_RETURN tls_process_certificate_request(SSL *s, PACKET *pkt)
             PACKET sigalgs;
 
             if (!PACKET_get_length_prefixed_2(pkt, &sigalgs)) {
-                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                SSLfatal(s, SSL_AD_DECODE_ERROR,
                          SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
                          SSL_R_LENGTH_MISMATCH);
                 return MSG_PROCESS_ERROR;
@@ -2484,7 +2484,7 @@ MSG_PROCESS_RETURN tls_process_certificate_request(SSL *s, PACKET *pkt)
     }
 
     if (PACKET_remaining(pkt) != 0) {
-        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+        SSLfatal(s, SSL_AD_DECODE_ERROR,
                  SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
                  SSL_R_LENGTH_MISMATCH);
         return MSG_PROCESS_ERROR;

From builds at travis-ci.org  Thu Feb  1 11:19:25 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 11:19:25 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16021 (master -
	848a950)
In-Reply-To: <openssl/openssl+336041110+still failing@travis-ci.org>
Message-ID: <5a72f7bd92296_43f99fdf20f7c88176d@6f1e7807-ba31-4302-beba-07cf17cd0e30.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16021
Status: Still Failing

Duration: 34 minutes and 36 seconds
Commit: 848a950 (master)
Author: Matt Caswell
Message: Fix some instances of the wrong alert type being sent

In a few places we sent an internal_error alert instead of a decode_error.

Fixes #5213
Fixes #5214

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5219)

View the changeset: https://github.com/openssl/openssl/compare/4e525a0b4db2...848a950b715f

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336041110?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/bd0e006c/attachment.html>

From no-reply at appveyor.com  Thu Feb  1 16:39:35 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 01 Feb 2018 16:39:35 +0000
Subject: [openssl-commits] Build failed: openssl master.15316
Message-ID: <20180201163935.1.D594E03B6E8DA49F@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/39ced6b1/attachment-0001.html>

From matt at openssl.org  Thu Feb  1 17:19:33 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 01 Feb 2018 17:19:33 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517505573.209120.19402.nullmailer@dev.openssl.org>

The branch master has been updated
       via  e43e6b1951de931ca500c6964496e76651332f5e (commit)
       via  658e4879c50dff23c040c681656843a50002e403 (commit)
       via  88834998dda00a713abe3a17d6caebba2f70318d (commit)
       via  9d75dce3e1f94be6006500089491cb3284f70d06 (commit)
       via  633a8829ffc01952aed1f5040d481a5eeef1670c (commit)
      from  848a950b715fa73070a9d1638e7630acfb0dfa4d (commit)


- Log -----------------------------------------------------------------
commit e43e6b1951de931ca500c6964496e76651332f5e
Author: Todd Short <tshort at akamai.com>
Date:   Wed Jan 31 16:36:27 2018 -0500

    Fix some minor code nits
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4964)

commit 658e4879c50dff23c040c681656843a50002e403
Author: Todd Short <tshort at akamai.com>
Date:   Wed Jan 31 16:34:20 2018 -0500

    Fix doc nits
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4964)

commit 88834998dda00a713abe3a17d6caebba2f70318d
Author: Todd Short <tshort at akamai.com>
Date:   Wed Jan 31 16:20:52 2018 -0500

    Free pha_dgst in SSL_clear()
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4964)

commit 9d75dce3e1f94be6006500089491cb3284f70d06
Author: Todd Short <tshort at akamai.com>
Date:   Mon Dec 18 16:52:28 2017 -0500

    Add TLSv1.3 post-handshake authentication (PHA)
    
    Add SSL_verify_client_post_handshake() for servers to initiate PHA
    
    Add SSL_force_post_handshake_auth() for clients that don't have certificates
    initially configured, but use a certificate callback.
    
    Update SSL_CTX_set_verify()/SSL_set_verify() mode:
    
    * Add SSL_VERIFY_POST_HANDSHAKE to postpone client authentication until after
    the initial handshake.
    
    * Update SSL_VERIFY_CLIENT_ONCE now only sends out one CertRequest regardless
    of when the certificate authentication takes place; either initial handshake,
    re-negotiation, or post-handshake authentication.
    
    Add 'RequestPostHandshake' and 'RequirePostHandshake' SSL_CONF options that
    add the SSL_VERIFY_POST_HANDSHAKE to the 'Request' and 'Require' options
    
    Add support to s_client:
    * Enabled automatically when cert is configured
    * Can be forced enabled via -force_pha
    
    Add support to s_server:
    * Use 'c' to invoke PHA in s_server
    * Remove some dead code
    
    Update documentation
    
    Update unit tests:
    * Illegal use of PHA extension
    * TLSv1.3 certificate tests
    
    DTLS and TLS behave ever-so-slightly differently. So, when DTLS1.3 is
    implemented, it's PHA support state machine may need to be different.
    Add a TODO and a #error
    
    Update handshake context to deal with PHA.
    
    The handshake context for TLSv1.3 post-handshake auth is up through the
    ClientFinish message, plus the CertificateRequest message. Subsequent
    Certificate, CertificateVerify, and Finish messages are based on this
    handshake context (not the Certificate message per se, but it's included
    after the hash). KeyUpdate, NewSessionTicket, and prior Certificate
    Request messages are not included in post-handshake authentication.
    
    After the ClientFinished message is processed, save off the digest state
    for future post-handshake authentication. When post-handshake auth occurs,
    copy over the saved handshake context into the "main" handshake digest.
    This effectively discards the any KeyUpdate or NewSessionTicket messages
    and any prior post-handshake authentication.
    
    This, of course, assumes that the ID-22 did not mean to include any
    previous post-handshake authentication into the new handshake transcript.
    This is implied by section 4.4.1 that lists messages only up to the
    first ClientFinished.
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4964)

commit 633a8829ffc01952aed1f5040d481a5eeef1670c
Author: Todd Short <tshort at akamai.com>
Date:   Fri Jan 19 10:43:19 2018 -0500

    Remove bad comments
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4964)

-----------------------------------------------------------------------

Summary of changes:
 apps/s_cb.c                                 |   1 +
 apps/s_client.c                             |   9 +
 apps/s_server.c                             |  24 +-
 crypto/err/openssl.txt                      |  17 +-
 doc/man1/s_client.pod                       |   6 +
 doc/man3/SSL_CONF_cmd.pod                   |  12 +
 doc/man3/SSL_CTX_set_verify.pod             |  67 +++-
 include/openssl/ssl.h                       |   5 +-
 include/openssl/sslerr.h                    |  12 +
 include/openssl/tls1.h                      |   1 +
 ssl/ssl_conf.c                              |   7 +-
 ssl/ssl_err.c                               |  19 ++
 ssl/ssl_lib.c                               |  57 ++++
 ssl/ssl_locl.h                              |  22 ++
 ssl/statem/extensions.c                     |  16 +
 ssl/statem/extensions_clnt.c                |  42 +++
 ssl/statem/extensions_cust.c                |   1 +
 ssl/statem/extensions_srvr.c                |  14 +
 ssl/statem/statem_clnt.c                    |  78 ++++-
 ssl/statem/statem_lib.c                     | 111 +++++--
 ssl/statem/statem_locl.h                    |  10 +-
 ssl/statem/statem_srvr.c                    | 121 ++++++-
 ssl/t1_trce.c                               |   3 +-
 test/build.info                             |   2 +-
 test/handshake_helper.c                     |  60 +++-
 test/recipes/70-test_tls13messages.t        |   7 +-
 test/recipes/80-test_ssl_new.t              |   3 +-
 test/ssl-tests/26-tls13_client_auth.conf    | 476 ++++++++++++++++++++++++++++
 test/ssl-tests/26-tls13_client_auth.conf.in | 293 +++++++++++++++++
 test/ssl_test_ctx.c                         |   8 +
 test/ssl_test_ctx.h                         |   7 +-
 test/sslapitest.c                           |  60 ++++
 util/libssl.num                             |   2 +
 util/perl/TLSProxy/Message.pm               |   1 +
 util/perl/checkhandshake.pm                 |   3 +-
 35 files changed, 1489 insertions(+), 88 deletions(-)
 create mode 100644 test/ssl-tests/26-tls13_client_auth.conf
 create mode 100644 test/ssl-tests/26-tls13_client_auth.conf.in

diff --git a/apps/s_cb.c b/apps/s_cb.c
index 575fb04..8d51d74 100644
--- a/apps/s_cb.c
+++ b/apps/s_cb.c
@@ -666,6 +666,7 @@ static STRINT_PAIR tlsext_types[] = {
     {"psk", TLSEXT_TYPE_psk},
     {"psk kex modes", TLSEXT_TYPE_psk_kex_modes},
     {"certificate authorities", TLSEXT_TYPE_certificate_authorities},
+    {"post handshake auth", TLSEXT_TYPE_post_handshake_auth},
     {NULL}
 };
 
diff --git a/apps/s_client.c b/apps/s_client.c
index 774345e..ca2bd0d 100644
--- a/apps/s_client.c
+++ b/apps/s_client.c
@@ -602,6 +602,7 @@ typedef enum OPTION_choice {
     OPT_CT, OPT_NOCT, OPT_CTLOG_FILE,
 #endif
     OPT_DANE_TLSA_RRDATA, OPT_DANE_EE_NO_NAME,
+    OPT_FORCE_PHA,
     OPT_R_ENUM
 } OPTION_CHOICE;
 
@@ -788,6 +789,7 @@ const OPTIONS s_client_options[] = {
 #endif
     {"keylogfile", OPT_KEYLOG_FILE, '>', "Write TLS secrets to file"},
     {"early_data", OPT_EARLY_DATA, '<', "File to send as early data"},
+    {"force_pha", OPT_FORCE_PHA, '-', "Force-enable post-handshake-authentication"},
     {NULL, OPT_EOF, 0x00, NULL}
 };
 
@@ -958,6 +960,7 @@ int s_client_main(int argc, char **argv)
     int isdtls = 0;
 #endif
     char *psksessf = NULL;
+    int force_pha = 0;
 
     FD_ZERO(&readfds);
     FD_ZERO(&writefds);
@@ -1469,6 +1472,9 @@ int s_client_main(int argc, char **argv)
         case OPT_EARLY_DATA:
             early_data_file = opt_arg();
             break;
+        case OPT_FORCE_PHA:
+            force_pha = 1;
+            break;
         }
     }
     if (count4or6 >= 2) {
@@ -1904,6 +1910,9 @@ int s_client_main(int argc, char **argv)
     if (con == NULL)
         goto end;
 
+    if (force_pha)
+        SSL_force_post_handshake_auth(con);
+
     if (sess_in != NULL) {
         SSL_SESSION *sess;
         BIO *stmp = BIO_new_file(sess_in, "r");
diff --git a/apps/s_server.c b/apps/s_server.c
index f124b12..a0e72b3 100644
--- a/apps/s_server.c
+++ b/apps/s_server.c
@@ -2480,9 +2480,6 @@ static int sv_body(int s, int stype, int prot, unsigned char *context)
                     printf("SSL_do_handshake -> %d\n", i);
                     i = 0;      /* 13; */
                     continue;
-                    /*
-                     * strcpy(buf,"server side RE-NEGOTIATE\n");
-                     */
                 }
                 if ((buf[0] == 'R') && ((buf[1] == '\n') || (buf[1] == '\r'))) {
                     SSL_set_verify(con,
@@ -2493,10 +2490,6 @@ static int sv_body(int s, int stype, int prot, unsigned char *context)
                     printf("SSL_do_handshake -> %d\n", i);
                     i = 0;      /* 13; */
                     continue;
-                    /*
-                     * strcpy(buf,"server side RE-NEGOTIATE asking for client
-                     * cert\n");
-                     */
                 }
                 if ((buf[0] == 'K' || buf[0] == 'k')
                         && ((buf[1] == '\n') || (buf[1] == '\r'))) {
@@ -2507,10 +2500,19 @@ static int sv_body(int s, int stype, int prot, unsigned char *context)
                     printf("SSL_do_handshake -> %d\n", i);
                     i = 0;
                     continue;
-                    /*
-                     * strcpy(buf,"server side RE-NEGOTIATE asking for client
-                     * cert\n");
-                     */
+                }
+                if (buf[0] == 'c' && ((buf[1] == '\n') || (buf[1] == '\r'))) {
+                    SSL_set_verify(con, SSL_VERIFY_PEER, NULL);
+                    i = SSL_verify_client_post_handshake(con);
+                    if (i == 0) {
+                        printf("Failed to initiate request\n");
+                        ERR_print_errors(bio_err);
+                    } else {
+                        i = SSL_do_handshake(con);
+                        printf("SSL_do_handshake -> %d\n", i);
+                        i = 0;
+                    }
+                    continue;
                 }
                 if (buf[0] == 'P') {
                     static const char *str = "Lets print some clear text\n";
diff --git a/crypto/err/openssl.txt b/crypto/err/openssl.txt
index ed706da..fb3be57 100644
--- a/crypto/err/openssl.txt
+++ b/crypto/err/openssl.txt
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
@@ -1192,6 +1192,7 @@ SSL_F_SSL_USE_RSAPRIVATEKEY_ASN1:205:SSL_use_RSAPrivateKey_ASN1
 SSL_F_SSL_USE_RSAPRIVATEKEY_FILE:206:SSL_use_RSAPrivateKey_file
 SSL_F_SSL_VALIDATE_CT:400:ssl_validate_ct
 SSL_F_SSL_VERIFY_CERT_CHAIN:207:ssl_verify_cert_chain
+SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE:616:SSL_verify_client_post_handshake
 SSL_F_SSL_WRITE:208:SSL_write
 SSL_F_SSL_WRITE_EARLY_DATA:526:SSL_write_early_data
 SSL_F_SSL_WRITE_EARLY_FINISH:527:*
@@ -1205,6 +1206,10 @@ SSL_F_TLS13_ENC:609:tls13_enc
 SSL_F_TLS13_FINAL_FINISH_MAC:605:tls13_final_finish_mac
 SSL_F_TLS13_GENERATE_SECRET:591:tls13_generate_secret
 SSL_F_TLS13_HKDF_EXPAND:561:tls13_hkdf_expand
+SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA:617:\
+	tls13_restore_handshake_digest_for_pha
+SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA:618:\
+	tls13_save_handshake_digest_for_pha
 SSL_F_TLS13_SETUP_KEY_BLOCK:441:tls13_setup_key_block
 SSL_F_TLS1_CHANGE_CIPHER_STATE:209:tls1_change_cipher_state
 SSL_F_TLS1_CHECK_DUPLICATE_EXTENSIONS:341:*
@@ -1247,6 +1252,8 @@ SSL_F_TLS_CONSTRUCT_CTOS_KEY_SHARE:470:tls_construct_ctos_key_share
 SSL_F_TLS_CONSTRUCT_CTOS_MAXFRAGMENTLEN:549:tls_construct_ctos_maxfragmentlen
 SSL_F_TLS_CONSTRUCT_CTOS_NPN:471:tls_construct_ctos_npn
 SSL_F_TLS_CONSTRUCT_CTOS_PADDING:472:tls_construct_ctos_padding
+SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH:619:\
+	tls_construct_ctos_post_handshake_auth
 SSL_F_TLS_CONSTRUCT_CTOS_PSK:501:tls_construct_ctos_psk
 SSL_F_TLS_CONSTRUCT_CTOS_PSK_KEX_MODES:509:tls_construct_ctos_psk_kex_modes
 SSL_F_TLS_CONSTRUCT_CTOS_RENEGOTIATE:473:tls_construct_ctos_renegotiate
@@ -1315,6 +1322,7 @@ SSL_F_TLS_PARSE_CTOS_EC_PT_FORMATS:569:tls_parse_ctos_ec_pt_formats
 SSL_F_TLS_PARSE_CTOS_EMS:570:tls_parse_ctos_ems
 SSL_F_TLS_PARSE_CTOS_KEY_SHARE:463:tls_parse_ctos_key_share
 SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN:571:tls_parse_ctos_maxfragmentlen
+SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH:620:tls_parse_ctos_post_handshake_auth
 SSL_F_TLS_PARSE_CTOS_PSK:505:tls_parse_ctos_psk
 SSL_F_TLS_PARSE_CTOS_PSK_KEX_MODES:572:tls_parse_ctos_psk_kex_modes
 SSL_F_TLS_PARSE_CTOS_RENEGOTIATE:464:tls_parse_ctos_renegotiate
@@ -2446,6 +2454,7 @@ SSL_R_ERROR_IN_RECEIVED_CIPHER_LIST:151:error in received cipher list
 SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN:204:error setting tlsa base domain
 SSL_R_EXCEEDS_MAX_FRAGMENT_SIZE:194:exceeds max fragment size
 SSL_R_EXCESSIVE_MESSAGE_SIZE:152:excessive message size
+SSL_R_EXTENSION_NOT_RECEIVED:279:extension not received
 SSL_R_EXTRA_DATA_IN_MESSAGE:153:extra data in message
 SSL_R_EXT_LENGTH_MISMATCH:163:ext length mismatch
 SSL_R_FAILED_TO_INIT_ASYNC:405:failed to init async
@@ -2466,7 +2475,9 @@ SSL_R_INVALID_CCS_MESSAGE:260:invalid ccs message
 SSL_R_INVALID_CERTIFICATE_OR_ALG:238:invalid certificate or alg
 SSL_R_INVALID_COMMAND:280:invalid command
 SSL_R_INVALID_COMPRESSION_ALGORITHM:341:invalid compression algorithm
+SSL_R_INVALID_CONFIG:283:invalid config
 SSL_R_INVALID_CONFIGURATION_NAME:113:invalid configuration name
+SSL_R_INVALID_CONTEXT:282:invalid context
 SSL_R_INVALID_CT_VALIDATION_TYPE:212:invalid ct validation type
 SSL_R_INVALID_KEY_UPDATE_TYPE:120:invalid key update type
 SSL_R_INVALID_MAX_EARLY_DATA:174:invalid max early data
@@ -2495,6 +2506,7 @@ SSL_R_MISSING_SUPPORTED_GROUPS_EXTENSION:209:missing supported groups extension
 SSL_R_MISSING_TMP_DH_KEY:171:missing tmp dh key
 SSL_R_MISSING_TMP_ECDH_KEY:311:missing tmp ecdh key
 SSL_R_NOT_ON_RECORD_BOUNDARY:182:not on record boundary
+SSL_R_NOT_SERVER:284:not server
 SSL_R_NO_APPLICATION_PROTOCOL:235:no application protocol
 SSL_R_NO_CERTIFICATES_RETURNED:176:no certificates returned
 SSL_R_NO_CERTIFICATE_ASSIGNED:177:no certificate assigned
@@ -2534,6 +2546,7 @@ SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE:199:peer did not return a certificate
 SSL_R_PEM_NAME_BAD_PREFIX:391:pem name bad prefix
 SSL_R_PEM_NAME_TOO_SHORT:392:pem name too short
 SSL_R_PIPELINE_FAILURE:406:pipeline failure
+SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR:278:post handshake auth encoding err
 SSL_R_PROTOCOL_IS_SHUTDOWN:207:protocol is shutdown
 SSL_R_PSK_IDENTITY_NOT_FOUND:223:psk identity not found
 SSL_R_PSK_NO_CLIENT_CB:224:psk no client cb
@@ -2545,6 +2558,8 @@ SSL_R_RECORD_TOO_SMALL:298:record too small
 SSL_R_RENEGOTIATE_EXT_TOO_LONG:335:renegotiate ext too long
 SSL_R_RENEGOTIATION_ENCODING_ERR:336:renegotiation encoding err
 SSL_R_RENEGOTIATION_MISMATCH:337:renegotiation mismatch
+SSL_R_REQUEST_PENDING:285:request pending
+SSL_R_REQUEST_SENT:286:request sent
 SSL_R_REQUIRED_CIPHER_MISSING:215:required cipher missing
 SSL_R_REQUIRED_COMPRESSION_ALGORITHM_MISSING:342:\
 	required compression algorithm missing
diff --git a/doc/man1/s_client.pod b/doc/man1/s_client.pod
index 1d9dd39..4f0f01c 100644
--- a/doc/man1/s_client.pod
+++ b/doc/man1/s_client.pod
@@ -118,6 +118,7 @@ B<openssl> B<s_client>
 [B<-ctlogfile>]
 [B<-keylogfile file>]
 [B<-early_data file>]
+[B<-force_pha>]
 [B<target>]
 
 =head1 DESCRIPTION
@@ -621,6 +622,11 @@ Reads the contents of the specified file and attempts to send it as early data
 to the server. This will only work with resumed sessions that support early
 data and when the server accepts the early data.
 
+=item B<-force_pha>
+
+For TLSv1.3 only, always send the Post-Handshake Authentication extension,
+whether or not a certificate has been provided via B<-cert>.
+
 =item B<[target]>
 
 Rather than providing B<-connect>, the target hostname and optional port may
diff --git a/doc/man3/SSL_CONF_cmd.pod b/doc/man3/SSL_CONF_cmd.pod
index 06b98bd..27317e0 100644
--- a/doc/man3/SSL_CONF_cmd.pod
+++ b/doc/man3/SSL_CONF_cmd.pod
@@ -435,6 +435,18 @@ occurs if the client does not present a certificate. Servers only.
 B<Once> requests a certificate from a client only on the initial connection:
 not when renegotiating. Servers only.
 
+B<RequestPostHandshake> configures the connection to support requests but does
+not require a certificate from the client post-handshake. A certificate will
+not be requested during the initial handshake. The server application must
+provide a mechanism to request a certificate post-handshake. Servers only.
+TLSv1.3 only.
+
+B<RequiresPostHandshake> configures the connection to support requests and
+requires a certificate from the client post-handshake: an error occurs if the
+client does not present a certificate. A certificate will not be requested
+during the initial handshake. The server application must provide a mechanism
+to request a certificate post-handshake. Servers only. TLSv1.3 only.
+
 =item B<ClientCAFile>, B<ClientCAPath>
 
 A file or directory of certificates in PEM format whose names are used as the
diff --git a/doc/man3/SSL_CTX_set_verify.pod b/doc/man3/SSL_CTX_set_verify.pod
index 9e634dd..89760f4 100644
--- a/doc/man3/SSL_CTX_set_verify.pod
+++ b/doc/man3/SSL_CTX_set_verify.pod
@@ -5,7 +5,9 @@
 SSL_get_ex_data_X509_STORE_CTX_idx,
 SSL_CTX_set_verify, SSL_set_verify,
 SSL_CTX_set_verify_depth, SSL_set_verify_depth,
-SSL_verify_cb
+SSL_verify_cb,
+SSL_verify_client_post_handshake,
+SSL_force_post_handshake_auth
 - set peer certificate verification parameters
 
 =head1 SYNOPSIS
@@ -15,11 +17,14 @@ SSL_verify_cb
  typedef int (*SSL_verify_cb)(int preverify_ok, X509_STORE_CTX *x509_ctx);
 
  void SSL_CTX_set_verify(SSL_CTX *ctx, int mode, SSL_verify_cb verify_callback);
- void SSL_set_verify(SSL *s, int mode, SSL_verify_cb verify_callback);
+ void SSL_set_verify(SSL *ssl, int mode, SSL_verify_cb verify_callback);
  SSL_get_ex_data_X509_STORE_CTX_idx(void);
 
  void SSL_CTX_set_verify_depth(SSL_CTX *ctx, int depth);
- void SSL_set_verify_depth(SSL *s, int depth);
+ void SSL_set_verify_depth(SSL *ssl, int depth);
+
+ int SSL_verify_client_post_handshake(SSL *ssl);
+ void SSL_force_post_handshake_auth(SSL *ssl);
 
 =head1 DESCRIPTION
 
@@ -43,6 +48,16 @@ verification that shall be allowed for B<ctx>.
 SSL_set_verify_depth() sets the maximum B<depth> for the certificate chain
 verification that shall be allowed for B<ssl>.
 
+SSL_force_post_handshake_auth() forces the Post-Handshake Authentication
+extension to be added to the ClientHello regardless of certificate configuration
+at the time of the initial handshake, such that post-handshake authentication
+can be requested by the server. A certificate callback will need to be set via
+SSL_CTX_set_client_cert_cb() if no certificate is provided at initialization.
+
+SSL_verify_client_post_handshake() causes a CertificateRequest message to be
+sent by a server on the given B<ssl> connection. The SSL_VERIFY_PEER flag must
+be set; the SSL_VERIFY_POST_HANDSHAKE flag is optional.
+
 =head1 NOTES
 
 The verification of certificates can be controlled by a set of logically
@@ -69,7 +84,8 @@ fails, the TLS/SSL handshake is
 immediately terminated with an alert message containing the reason for
 the verification failure.
 The behaviour can be controlled by the additional
-SSL_VERIFY_FAIL_IF_NO_PEER_CERT and SSL_VERIFY_CLIENT_ONCE flags.
+SSL_VERIFY_FAIL_IF_NO_PEER_CERT, SSL_VERIFY_CLIENT_ONCE and
+SSL_VERIFY_POST_HANDSHAKE flags.
 
 B<Client mode:> the server certificate is verified. If the verification process
 fails, the TLS/SSL handshake is
@@ -87,9 +103,22 @@ B<Client mode:> ignored
 
 =item SSL_VERIFY_CLIENT_ONCE
 
-B<Server mode:> only request a client certificate on the initial TLS/SSL
-handshake. Do not ask for a client certificate again in case of a
-renegotiation. This flag must be used together with SSL_VERIFY_PEER.
+B<Server mode:> only request a client certificate once during the
+connection. Do not ask for a client certificate again during
+renegotiation or post-authentication if a certificate was requested
+during the initial handshake. This flag must be used together with
+SSL_VERIFY_PEER.
+
+B<Client mode:> ignored
+
+=item SSL_VERIFY_POST_HANDSHAKE
+
+B<Server mode:> the server will not send a client certificate request
+during the initial handshake, but will send the request via
+SSL_verify_client_post_handshake(). This allows the SSL_CTX or SSL
+to be configured for post-handshake peer verification before the
+handshake occurs. This flag must be used together with
+SSL_VERIFY_PEER. TLSv1.3 only; no effect on pre-TLSv1.3 connections.
 
 B<Client mode:> ignored
 
@@ -154,6 +183,20 @@ Its return value is identical to B<preverify_ok>, so that any verification
 failure will lead to a termination of the TLS/SSL handshake with an
 alert message, if SSL_VERIFY_PEER is set.
 
+After calling SSL_force_post_handshake_auth(), the client will need to add a
+certificate or certificate callback to its configuration before it can
+successfully authenticate. This must be called before SSL_connect().
+
+SSL_verify_client_post_handshake() requires that verify flags have been
+previously set, and that a client sent the post-handshake authentication
+extension. When the client returns a certificate the verify callback will be
+invoked. A write operation must take place for the Certificate Request to be
+sent to the client, this can be done with SSL_do_handshake() or SSL_write_ex().
+Only one certificate request may be outstanding at any time.
+
+When post-handshake authentication occurs, a refreshed NewSessionTicket
+message is sent to the client.
+
 =head1 BUGS
 
 In client mode, it is not checked whether the SSL_VERIFY_PEER flag
@@ -165,6 +208,10 @@ required.
 
 The SSL*_set_verify*() functions do not provide diagnostic information.
 
+The SSL_verify_client_post_handshake() function returns 1 if the request
+succeeded, and 0 if the request failed. The error stack can be examined
+to determine the failure reason.
+
 =head1 EXAMPLES
 
 The following code sequence realizes an example B<verify_callback> function
@@ -288,8 +335,14 @@ L<SSL_CTX_load_verify_locations(3)>,
 L<SSL_get_peer_certificate(3)>,
 L<SSL_CTX_set_cert_verify_callback(3)>,
 L<SSL_get_ex_data_X509_STORE_CTX_idx(3)>,
+L<SSL_CTX_set_client_cert_cb(3)>,
 L<CRYPTO_get_ex_new_index(3)>
 
+=head1 HISTORY
+
+The SSL_VERIFY_POST_HANDSHAKE option, and the SSL_verify_client_post_handshake()
+and SSL_force_post_handshake_auth() functions were added in OpenSSL 1.1.1.
+
 =head1 COPYRIGHT
 
 Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h
index 97d2e46..9c45b90 100644
--- a/include/openssl/ssl.h
+++ b/include/openssl/ssl.h
@@ -1052,13 +1052,14 @@ size_t SSL_get_finished(const SSL *s, void *buf, size_t count);
 size_t SSL_get_peer_finished(const SSL *s, void *buf, size_t count);
 
 /*
- * use either SSL_VERIFY_NONE or SSL_VERIFY_PEER, the last 2 options are
+ * use either SSL_VERIFY_NONE or SSL_VERIFY_PEER, the last 3 options are
  * 'ored' with SSL_VERIFY_PEER if they are desired
  */
 # define SSL_VERIFY_NONE                 0x00
 # define SSL_VERIFY_PEER                 0x01
 # define SSL_VERIFY_FAIL_IF_NO_PEER_CERT 0x02
 # define SSL_VERIFY_CLIENT_ONCE          0x04
+# define SSL_VERIFY_POST_HANDSHAKE       0x08
 
 # define OpenSSL_add_ssl_algorithms()    SSL_library_init()
 # if OPENSSL_API_COMPAT < 0x10100000L
@@ -1850,6 +1851,8 @@ int SSL_renegotiate(SSL *s);
 int SSL_renegotiate_abbreviated(SSL *s);
 __owur int SSL_renegotiate_pending(SSL *s);
 int SSL_shutdown(SSL *s);
+__owur int SSL_verify_client_post_handshake(SSL *s);
+void SSL_force_post_handshake_auth(SSL *s);
 
 __owur const SSL_METHOD *SSL_CTX_get_ssl_method(SSL_CTX *ctx);
 __owur const SSL_METHOD *SSL_get_ssl_method(SSL *s);
diff --git a/include/openssl/sslerr.h b/include/openssl/sslerr.h
index ec81ba3..a84a62d 100644
--- a/include/openssl/sslerr.h
+++ b/include/openssl/sslerr.h
@@ -241,6 +241,7 @@ int ERR_load_SSL_strings(void);
 # define SSL_F_SSL_USE_RSAPRIVATEKEY_FILE                 206
 # define SSL_F_SSL_VALIDATE_CT                            400
 # define SSL_F_SSL_VERIFY_CERT_CHAIN                      207
+# define SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE           616
 # define SSL_F_SSL_WRITE                                  208
 # define SSL_F_SSL_WRITE_EARLY_DATA                       526
 # define SSL_F_SSL_WRITE_EARLY_FINISH                     527
@@ -254,6 +255,8 @@ int ERR_load_SSL_strings(void);
 # define SSL_F_TLS13_FINAL_FINISH_MAC                     605
 # define SSL_F_TLS13_GENERATE_SECRET                      591
 # define SSL_F_TLS13_HKDF_EXPAND                          561
+# define SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA     617
+# define SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA        618
 # define SSL_F_TLS13_SETUP_KEY_BLOCK                      441
 # define SSL_F_TLS1_CHANGE_CIPHER_STATE                   209
 # define SSL_F_TLS1_CHECK_DUPLICATE_EXTENSIONS            341
@@ -295,6 +298,7 @@ int ERR_load_SSL_strings(void);
 # define SSL_F_TLS_CONSTRUCT_CTOS_MAXFRAGMENTLEN          549
 # define SSL_F_TLS_CONSTRUCT_CTOS_NPN                     471
 # define SSL_F_TLS_CONSTRUCT_CTOS_PADDING                 472
+# define SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH     619
 # define SSL_F_TLS_CONSTRUCT_CTOS_PSK                     501
 # define SSL_F_TLS_CONSTRUCT_CTOS_PSK_KEX_MODES           509
 # define SSL_F_TLS_CONSTRUCT_CTOS_RENEGOTIATE             473
@@ -358,6 +362,7 @@ int ERR_load_SSL_strings(void);
 # define SSL_F_TLS_PARSE_CTOS_EMS                         570
 # define SSL_F_TLS_PARSE_CTOS_KEY_SHARE                   463
 # define SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN              571
+# define SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH         620
 # define SSL_F_TLS_PARSE_CTOS_PSK                         505
 # define SSL_F_TLS_PARSE_CTOS_PSK_KEX_MODES               572
 # define SSL_F_TLS_PARSE_CTOS_RENEGOTIATE                 464
@@ -522,6 +527,7 @@ int ERR_load_SSL_strings(void);
 # define SSL_R_ERROR_SETTING_TLSA_BASE_DOMAIN             204
 # define SSL_R_EXCEEDS_MAX_FRAGMENT_SIZE                  194
 # define SSL_R_EXCESSIVE_MESSAGE_SIZE                     152
+# define SSL_R_EXTENSION_NOT_RECEIVED                     279
 # define SSL_R_EXTRA_DATA_IN_MESSAGE                      153
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
@@ -542,7 +548,9 @@ int ERR_load_SSL_strings(void);
 # define SSL_R_INVALID_CERTIFICATE_OR_ALG                 238
 # define SSL_R_INVALID_COMMAND                            280
 # define SSL_R_INVALID_COMPRESSION_ALGORITHM              341
+# define SSL_R_INVALID_CONFIG                             283
 # define SSL_R_INVALID_CONFIGURATION_NAME                 113
+# define SSL_R_INVALID_CONTEXT                            282
 # define SSL_R_INVALID_CT_VALIDATION_TYPE                 212
 # define SSL_R_INVALID_KEY_UPDATE_TYPE                    120
 # define SSL_R_INVALID_MAX_EARLY_DATA                     174
@@ -571,6 +579,7 @@ int ERR_load_SSL_strings(void);
 # define SSL_R_MISSING_TMP_DH_KEY                         171
 # define SSL_R_MISSING_TMP_ECDH_KEY                       311
 # define SSL_R_NOT_ON_RECORD_BOUNDARY                     182
+# define SSL_R_NOT_SERVER                                 284
 # define SSL_R_NO_APPLICATION_PROTOCOL                    235
 # define SSL_R_NO_CERTIFICATES_RETURNED                   176
 # define SSL_R_NO_CERTIFICATE_ASSIGNED                    177
@@ -608,6 +617,7 @@ int ERR_load_SSL_strings(void);
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
 # define SSL_R_PSK_IDENTITY_NOT_FOUND                     223
 # define SSL_R_PSK_NO_CLIENT_CB                           224
@@ -619,6 +629,8 @@ int ERR_load_SSL_strings(void);
 # define SSL_R_RENEGOTIATE_EXT_TOO_LONG                   335
 # define SSL_R_RENEGOTIATION_ENCODING_ERR                 336
 # define SSL_R_RENEGOTIATION_MISMATCH                     337
+# define SSL_R_REQUEST_PENDING                            285
+# define SSL_R_REQUEST_SENT                               286
 # define SSL_R_REQUIRED_CIPHER_MISSING                    215
 # define SSL_R_REQUIRED_COMPRESSION_ALGORITHM_MISSING     342
 # define SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING           345
diff --git a/include/openssl/tls1.h b/include/openssl/tls1.h
index 434e327..1253352 100644
--- a/include/openssl/tls1.h
+++ b/include/openssl/tls1.h
@@ -146,6 +146,7 @@ extern "C" {
 # define TLSEXT_TYPE_cookie                      44
 # define TLSEXT_TYPE_psk_kex_modes               45
 # define TLSEXT_TYPE_certificate_authorities     47
+# define TLSEXT_TYPE_post_handshake_auth         49
 # define TLSEXT_TYPE_signature_algorithms_cert   50
 # define TLSEXT_TYPE_key_share                   51
 
diff --git a/ssl/ssl_conf.c b/ssl/ssl_conf.c
index 0cd8ace..cb4ff8d 100644
--- a/ssl/ssl_conf.c
+++ b/ssl/ssl_conf.c
@@ -386,7 +386,12 @@ static int cmd_VerifyMode(SSL_CONF_CTX *cctx, const char *value)
         SSL_FLAG_VFY_SRV("Request", SSL_VERIFY_PEER),
         SSL_FLAG_VFY_SRV("Require",
                          SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT),
-        SSL_FLAG_VFY_SRV("Once", SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE)
+        SSL_FLAG_VFY_SRV("Once", SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE),
+        SSL_FLAG_VFY_SRV("RequestPostHandshake",
+                         SSL_VERIFY_PEER | SSL_VERIFY_POST_HANDSHAKE),
+        SSL_FLAG_VFY_SRV("RequirePostHandshake",
+                         SSL_VERIFY_PEER | SSL_VERIFY_POST_HANDSHAKE |
+                         SSL_VERIFY_FAIL_IF_NO_PEER_CERT),
     };
     if (value == NULL)
         return -3;
diff --git a/ssl/ssl_err.c b/ssl/ssl_err.c
index 746678c..f0bde60 100644
--- a/ssl/ssl_err.c
+++ b/ssl/ssl_err.c
@@ -351,6 +351,8 @@ static const ERR_STRING_DATA SSL_str_functs[] = {
     {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_VALIDATE_CT, 0), "ssl_validate_ct"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_VERIFY_CERT_CHAIN, 0),
      "ssl_verify_cert_chain"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, 0),
+     "SSL_verify_client_post_handshake"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_WRITE, 0), "SSL_write"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_SSL_WRITE_EARLY_DATA, 0),
      "SSL_write_early_data"},
@@ -369,6 +371,10 @@ static const ERR_STRING_DATA SSL_str_functs[] = {
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_GENERATE_SECRET, 0),
      "tls13_generate_secret"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_HKDF_EXPAND, 0), "tls13_hkdf_expand"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA, 0),
+     "tls13_restore_handshake_digest_for_pha"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA, 0),
+     "tls13_save_handshake_digest_for_pha"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS13_SETUP_KEY_BLOCK, 0),
      "tls13_setup_key_block"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS1_CHANGE_CIPHER_STATE, 0),
@@ -441,6 +447,8 @@ static const ERR_STRING_DATA SSL_str_functs[] = {
      "tls_construct_ctos_npn"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_PADDING, 0),
      "tls_construct_ctos_padding"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH, 0),
+     "tls_construct_ctos_post_handshake_auth"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_PSK, 0),
      "tls_construct_ctos_psk"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_CONSTRUCT_CTOS_PSK_KEX_MODES, 0),
@@ -557,6 +565,8 @@ static const ERR_STRING_DATA SSL_str_functs[] = {
      "tls_parse_ctos_key_share"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_MAXFRAGMENTLEN, 0),
      "tls_parse_ctos_maxfragmentlen"},
+    {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH, 0),
+     "tls_parse_ctos_post_handshake_auth"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_PSK, 0), "tls_parse_ctos_psk"},
     {ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_PARSE_CTOS_PSK_KEX_MODES, 0),
      "tls_parse_ctos_psk_kex_modes"},
@@ -832,6 +842,8 @@ static const ERR_STRING_DATA SSL_str_reasons[] = {
     "exceeds max fragment size"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXCESSIVE_MESSAGE_SIZE),
     "excessive message size"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXTENSION_NOT_RECEIVED),
+    "extension not received"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXTRA_DATA_IN_MESSAGE),
     "extra data in message"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_EXT_LENGTH_MISMATCH),
@@ -868,8 +880,10 @@ static const ERR_STRING_DATA SSL_str_reasons[] = {
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_COMMAND), "invalid command"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_COMPRESSION_ALGORITHM),
     "invalid compression algorithm"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CONFIG), "invalid config"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CONFIGURATION_NAME),
     "invalid configuration name"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CONTEXT), "invalid context"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_CT_VALIDATION_TYPE),
     "invalid ct validation type"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_INVALID_KEY_UPDATE_TYPE),
@@ -919,6 +933,7 @@ static const ERR_STRING_DATA SSL_str_reasons[] = {
     "missing tmp ecdh key"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NOT_ON_RECORD_BOUNDARY),
     "not on record boundary"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NOT_SERVER), "not server"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_APPLICATION_PROTOCOL),
     "no application protocol"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_NO_CERTIFICATES_RETURNED),
@@ -978,6 +993,8 @@ static const ERR_STRING_DATA SSL_str_reasons[] = {
     "pem name bad prefix"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PEM_NAME_TOO_SHORT), "pem name too short"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PIPELINE_FAILURE), "pipeline failure"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR),
+    "post handshake auth encoding err"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PROTOCOL_IS_SHUTDOWN),
     "protocol is shutdown"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_PSK_IDENTITY_NOT_FOUND),
@@ -996,6 +1013,8 @@ static const ERR_STRING_DATA SSL_str_reasons[] = {
     "renegotiation encoding err"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_RENEGOTIATION_MISMATCH),
     "renegotiation mismatch"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUEST_PENDING), "request pending"},
+    {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUEST_SENT), "request sent"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUIRED_CIPHER_MISSING),
     "required cipher missing"},
     {ERR_PACK(ERR_LIB_SSL, 0, SSL_R_REQUIRED_COMPRESSION_ALGORITHM_MISSING),
diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 270d4de..68a9b19 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -614,6 +614,9 @@ int SSL_clear(SSL *s)
 
     s->key_update = SSL_KEY_UPDATE_NONE;
 
+    EVP_MD_CTX_free(s->pha_dgst);
+    s->pha_dgst = NULL;
+
     /* Reset DANE verification result state */
     s->dane.mdpth = -1;
     s->dane.pdpth = -1;
@@ -1186,6 +1189,8 @@ void SSL_free(SSL *s)
     OPENSSL_free(s->ext.alpn);
     OPENSSL_free(s->ext.tls13_cookie);
     OPENSSL_free(s->clienthello);
+    OPENSSL_free(s->pha_context);
+    EVP_MD_CTX_free(s->pha_dgst);
 
     sk_X509_NAME_pop_free(s->ca_names, X509_NAME_free);
 
@@ -5318,3 +5323,55 @@ int SSL_stateless(SSL *s)
 
     return 0;
 }
+
+void SSL_force_post_handshake_auth(SSL *ssl)
+{
+    ssl->pha_forced = 1;
+}
+
+int SSL_verify_client_post_handshake(SSL *ssl)
+{
+    if (!SSL_IS_TLS13(ssl)) {
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_WRONG_SSL_VERSION);
+        return 0;
+    }
+    if (!ssl->server) {
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_NOT_SERVER);
+        return 0;
+    }
+
+    if (!SSL_is_init_finished(ssl)) {
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_STILL_IN_INIT);
+        return 0;
+    }
+
+    switch (ssl->post_handshake_auth) {
+    case SSL_PHA_NONE:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_EXTENSION_NOT_RECEIVED);
+        return 0;
+    default:
+    case SSL_PHA_EXT_SENT:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, ERR_R_INTERNAL_ERROR);
+        return 0;
+    case SSL_PHA_EXT_RECEIVED:
+        break;
+    case SSL_PHA_REQUEST_PENDING:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_REQUEST_PENDING);
+        return 0;
+    case SSL_PHA_REQUESTED:
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_REQUEST_SENT);
+        return 0;
+    }
+
+    ssl->post_handshake_auth = SSL_PHA_REQUEST_PENDING;
+
+    /* checks verify_mode and algorithm_auth */
+    if (!send_certificate_request(ssl)) {
+        ssl->post_handshake_auth = SSL_PHA_EXT_RECEIVED; /* restore on error */
+        SSLerr(SSL_F_SSL_VERIFY_CLIENT_POST_HANDSHAKE, SSL_R_INVALID_CONFIG);
+        return 0;
+    }
+
+    ossl_statem_set_in_init(ssl, 1);
+    return 1;
+}
diff --git a/ssl/ssl_locl.h b/ssl/ssl_locl.h
index 6afd009..221d5b9 100644
--- a/ssl/ssl_locl.h
+++ b/ssl/ssl_locl.h
@@ -402,6 +402,15 @@
 #define CERT_PRIVATE_KEY        2
 */
 
+/* Post-Handshake Authentication state */
+typedef enum {
+    SSL_PHA_NONE = 0,
+    SSL_PHA_EXT_SENT,        /* client-side only: extension sent */
+    SSL_PHA_EXT_RECEIVED,    /* server-side only: extension received */
+    SSL_PHA_REQUEST_PENDING, /* server-side only: request pending */
+    SSL_PHA_REQUESTED        /* request received by client, or sent by server */
+} SSL_PHA_STATE;
+
 /* CipherSuite length. SSLv3 and all TLS versions. */
 # define TLS_CIPHER_LEN 2
 /* used to hold info on the particular ciphers used */
@@ -702,6 +711,7 @@ typedef enum tlsext_index_en {
     TLSEXT_IDX_signed_certificate_timestamp,
     TLSEXT_IDX_extended_master_secret,
     TLSEXT_IDX_signature_algorithms_cert,
+    TLSEXT_IDX_post_handshake_auth,
     TLSEXT_IDX_signature_algorithms,
     TLSEXT_IDX_supported_versions,
     TLSEXT_IDX_psk_kex_modes,
@@ -1334,6 +1344,14 @@ struct ssl_st {
     int renegotiate;
     /* If sending a KeyUpdate is pending */
     int key_update;
+    /* Post-handshake authentication state */
+    SSL_PHA_STATE post_handshake_auth;
+    int pha_forced;
+    uint8_t* pha_context;
+    size_t pha_context_len;
+    int certreqs_sent;
+    EVP_MD_CTX *pha_dgst; /* this is just the digest through ClientFinished */
+
 # ifndef OPENSSL_NO_SRP
     /* ctx for SRP authentication */
     SRP_CTX srp_ctx;
@@ -2535,6 +2553,10 @@ __owur int srp_generate_server_master_secret(SSL *s);
 __owur int srp_generate_client_master_secret(SSL *s);
 __owur int srp_verify_server_param(SSL *s);
 
+/* statem/statem_srvr.c */
+
+__owur int send_certificate_request(SSL *s);
+
 /* statem/extensions_cust.c */
 
 custom_ext_method *custom_ext_find(const custom_ext_methods *exts,
diff --git a/ssl/statem/extensions.c b/ssl/statem/extensions.c
index 5ad86f2..daf43c6 100644
--- a/ssl/statem/extensions.c
+++ b/ssl/statem/extensions.c
@@ -55,6 +55,7 @@ static int init_srtp(SSL *s, unsigned int context);
 static int final_sig_algs(SSL *s, unsigned int context, int sent);
 static int final_early_data(SSL *s, unsigned int context, int sent);
 static int final_maxfragmentlen(SSL *s, unsigned int context, int sent);
+static int init_post_handshake_auth(SSL *s, unsigned int context);
 
 /* Structure to define a built-in extension */
 typedef struct extensions_definition_st {
@@ -290,6 +291,14 @@ static const EXTENSION_DEFINITION ext_defs[] = {
         NULL, NULL, NULL
     },
     {
+        TLSEXT_TYPE_post_handshake_auth,
+        SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_ONLY,
+        init_post_handshake_auth,
+        tls_parse_ctos_post_handshake_auth, NULL,
+        NULL, tls_construct_ctos_post_handshake_auth,
+        NULL,
+    },
+    {
         TLSEXT_TYPE_signature_algorithms,
         SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_CERTIFICATE_REQUEST,
         init_sig_algs, tls_parse_ctos_sig_algs,
@@ -1653,3 +1662,10 @@ static int final_maxfragmentlen(SSL *s, unsigned int context, int sent)
 
     return 1;
 }
+
+static int init_post_handshake_auth(SSL *s, unsigned int context)
+{
+    s->post_handshake_auth = SSL_PHA_NONE;
+
+    return 1;
+}
diff --git a/ssl/statem/extensions_clnt.c b/ssl/statem/extensions_clnt.c
index 5441e98..6286242 100644
--- a/ssl/statem/extensions_clnt.c
+++ b/ssl/statem/extensions_clnt.c
@@ -1133,6 +1133,48 @@ EXT_RETURN tls_construct_ctos_psk(SSL *s, WPACKET *pkt, unsigned int context,
 #endif
 }
 
+EXT_RETURN tls_construct_ctos_post_handshake_auth(SSL *s, WPACKET *pkt,
+                                                  unsigned int context,
+                                                  X509 *x, size_t chainidx)
+{
+#ifndef OPENSSL_NO_TLS1_3
+    if (!s->pha_forced) {
+        int i, n = 0;
+
+        /* check for cert, if present, we can do post-handshake auth */
+        if (s->cert == NULL)
+            return EXT_RETURN_NOT_SENT;
+
+        for (i = 0; i < SSL_PKEY_NUM; i++) {
+            if (s->cert->pkeys[i].x509 != NULL
+                    && s->cert->pkeys[i].privatekey != NULL)
+                n++;
+        }
+
+        /* no identity certificates, so no extension */
+        if (n == 0)
+            return EXT_RETURN_NOT_SENT;
+    }
+
+    /* construct extension - 0 length, no contents */
+    if (!WPACKET_put_bytes_u16(pkt, TLSEXT_TYPE_post_handshake_auth)
+            || !WPACKET_start_sub_packet_u16(pkt)
+            || !WPACKET_close(pkt)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS_CONSTRUCT_CTOS_POST_HANDSHAKE_AUTH,
+                 ERR_R_INTERNAL_ERROR);
+        return EXT_RETURN_FAIL;
+    }
+
+    s->post_handshake_auth = SSL_PHA_EXT_SENT;
+
+    return EXT_RETURN_SENT;
+#else
+    return EXT_RETURN_NOT_SENT;
+#endif
+}
+
+
 /*
  * Parse the server's renegotiation binding and abort if it's not right
  */
diff --git a/ssl/statem/extensions_cust.c b/ssl/statem/extensions_cust.c
index 0a23630..60a7c37 100644
--- a/ssl/statem/extensions_cust.c
+++ b/ssl/statem/extensions_cust.c
@@ -525,6 +525,7 @@ int SSL_extension_supported(unsigned int ext_type)
     case TLSEXT_TYPE_early_data:
     case TLSEXT_TYPE_certificate_authorities:
     case TLSEXT_TYPE_psk:
+    case TLSEXT_TYPE_post_handshake_auth:
         return 1;
     default:
         return 0;
diff --git a/ssl/statem/extensions_srvr.c b/ssl/statem/extensions_srvr.c
index 0a7bac4..27ff5a5 100644
--- a/ssl/statem/extensions_srvr.c
+++ b/ssl/statem/extensions_srvr.c
@@ -1161,6 +1161,20 @@ err:
     return 0;
 }
 
+int tls_parse_ctos_post_handshake_auth(SSL *s, PACKET *pkt, unsigned int context,
+                                       X509 *x, size_t chainidx)
+{
+    if (PACKET_remaining(pkt) != 0) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PARSE_CTOS_POST_HANDSHAKE_AUTH,
+                 SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR);
+        return 0;
+    }
+
+    s->post_handshake_auth = SSL_PHA_EXT_RECEIVED;
+
+    return 1;
+}
+
 /*
  * Add the server's renegotiation binding
  */
diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c
index e79bd7b..f224da6 100644
--- a/ssl/statem/statem_clnt.c
+++ b/ssl/statem/statem_clnt.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -160,6 +160,26 @@ static int ossl_statem_client13_read_transition(SSL *s, int mt)
             st->hand_state = TLS_ST_CR_KEY_UPDATE;
             return 1;
         }
+        if (mt == SSL3_MT_CERTIFICATE_REQUEST) {
+#if DTLS_MAX_VERSION != DTLS1_2_VERSION
+# error TODO(DTLS1.3): Restore digest for PHA before adding message.
+#endif
+            if (!SSL_IS_DTLS(s) && s->post_handshake_auth == SSL_PHA_EXT_SENT) {
+                s->post_handshake_auth = SSL_PHA_REQUESTED;
+                /*
+                 * In TLS, this is called before the message is added to the
+                 * digest. In DTLS, this is expected to be called after adding
+                 * to the digest. Either move the digest restore, or add the
+                 * message here after the swap, or do it after the clientFinished?
+                 */
+                if (!tls13_restore_handshake_digest_for_pha(s)) {
+                    /* SSLfatal() already called */
+                    return 0;
+                }
+                st->hand_state = TLS_ST_CR_CERT_REQ;
+                return 1;
+            }
+        }
         break;
     }
 
@@ -382,6 +402,17 @@ static WRITE_TRAN ossl_statem_client13_write_transition(SSL *s)
                  ERR_R_INTERNAL_ERROR);
         return WRITE_TRAN_ERROR;
 
+    case TLS_ST_CR_CERT_REQ:
+        if (s->post_handshake_auth == SSL_PHA_REQUESTED) {
+            st->hand_state = TLS_ST_CW_CERT;
+            return WRITE_TRAN_CONTINUE;
+        }
+        /* Shouldn't happen - same as default case */
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_OSSL_STATEM_CLIENT13_WRITE_TRANSITION,
+                 ERR_R_INTERNAL_ERROR);
+        return WRITE_TRAN_ERROR;
+
     case TLS_ST_CR_FINISHED:
         if (s->early_data_state == SSL_EARLY_DATA_WRITE_RETRY
                 || s->early_data_state == SSL_EARLY_DATA_FINISHED_WRITING)
@@ -798,11 +829,17 @@ WORK_STATE ossl_statem_client_post_work(SSL *s, WORK_STATE wst)
             return WORK_MORE_B;
 
         if (SSL_IS_TLS13(s)) {
-            if (!s->method->ssl3_enc->change_cipher_state(s,
-                        SSL3_CC_APPLICATION | SSL3_CHANGE_CIPHER_CLIENT_WRITE)) {
+            if (!tls13_save_handshake_digest_for_pha(s)) {
                 /* SSLfatal() already called */
                 return WORK_ERROR;
             }
+            if (s->post_handshake_auth != SSL_PHA_REQUESTED) {
+                if (!s->method->ssl3_enc->change_cipher_state(s,
+                        SSL3_CC_APPLICATION | SSL3_CHANGE_CIPHER_CLIENT_WRITE)) {
+                    /* SSLfatal() already called */
+                    return WORK_ERROR;
+                }
+            }
         }
         break;
 
@@ -2399,9 +2436,11 @@ MSG_PROCESS_RETURN tls_process_certificate_request(SSL *s, PACKET *pkt)
         OPENSSL_free(s->s3->tmp.ctype);
         s->s3->tmp.ctype = NULL;
         s->s3->tmp.ctype_len = 0;
+        OPENSSL_free(s->pha_context);
+        s->pha_context = NULL;
 
-        /* TODO(TLS1.3) need to process request context, for now ignore */
-        if (!PACKET_get_length_prefixed_1(pkt, &reqctx)) {
+        if (!PACKET_get_length_prefixed_1(pkt, &reqctx) ||
+            !PACKET_memdup(&reqctx, &s->pha_context, &s->pha_context_len)) {
             SSLfatal(s, SSL_AD_DECODE_ERROR,
                      SSL_F_TLS_PROCESS_CERTIFICATE_REQUEST,
                      SSL_R_LENGTH_MISMATCH);
@@ -3357,8 +3396,12 @@ WORK_STATE tls_prepare_client_certificate(SSL *s, WORK_STATE wst)
             }
             s->rwstate = SSL_NOTHING;
         }
-        if (ssl3_check_client_certificate(s))
+        if (ssl3_check_client_certificate(s)) {
+            if (s->post_handshake_auth == SSL_PHA_REQUESTED) {
+                return WORK_FINISHED_STOP;
+            }
             return WORK_FINISHED_CONTINUE;
+        }
 
         /* Fall through to WORK_MORE_B */
         wst = WORK_MORE_B;
@@ -3403,6 +3446,8 @@ WORK_STATE tls_prepare_client_certificate(SSL *s, WORK_STATE wst)
             }
         }
 
+        if (s->post_handshake_auth == SSL_PHA_REQUESTED)
+            return WORK_FINISHED_STOP;
         return WORK_FINISHED_CONTINUE;
     }
 
@@ -3414,14 +3459,19 @@ WORK_STATE tls_prepare_client_certificate(SSL *s, WORK_STATE wst)
 
 int tls_construct_client_certificate(SSL *s, WPACKET *pkt)
 {
-    /*
-     * TODO(TLS1.3): For now we must put an empty context. Needs to be filled in
-     * later
-     */
-    if (SSL_IS_TLS13(s) && !WPACKET_put_bytes_u8(pkt, 0)) {
-        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
-                 SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE, ERR_R_INTERNAL_ERROR);
-        return 0;
+    if (SSL_IS_TLS13(s)) {
+        if (s->pha_context == NULL) {
+            /* no context available, add 0-length context */
+            if (!WPACKET_put_bytes_u8(pkt, 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE, ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+        } else if (!WPACKET_sub_memcpy_u8(pkt, s->pha_context, s->pha_context_len)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_CONSTRUCT_CLIENT_CERTIFICATE, ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
     }
     if (!ssl3_output_cert_chain(s, pkt,
                                 (s->s3->tmp.cert_req == 2) ? NULL
diff --git a/ssl/statem/statem_lib.c b/ssl/statem/statem_lib.c
index 87ce280..f57f33c 100644
--- a/ssl/statem/statem_lib.c
+++ b/ssl/statem/statem_lib.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
@@ -43,12 +43,15 @@ int ssl3_do_write(SSL *s, int type)
         /*
          * should not be done for 'Hello Request's, but in that case we'll
          * ignore the result anyway
+         * TLS1.3 KeyUpdate and NewSessionTicket do not need to be added
          */
-        if (!ssl3_finish_mac(s,
-                             (unsigned char *)&s->init_buf->data[s->init_off],
-                             written))
-            return -1;
-
+        if (!SSL_IS_TLS13(s) || (s->statem.hand_state != TLS_ST_SW_SESSION_TICKET
+                                 && s->statem.hand_state != TLS_ST_CW_KEY_UPDATE
+                                 && s->statem.hand_state != TLS_ST_SW_KEY_UPDATE))
+            if (!ssl3_finish_mac(s,
+                                 (unsigned char *)&s->init_buf->data[s->init_off],
+                                 written))
+                return -1;
     if (written == s->init_num) {
         if (s->msg_callback)
             s->msg_callback(1, s->version, type, s->init_buf->data,
@@ -504,7 +507,7 @@ int tls_construct_finished(SSL *s, WPACKET *pkt)
     size_t slen;
 
     /* This is a real handshake so make sure we clean it up at the end */
-    if (!s->server)
+    if (!s->server && s->post_handshake_auth != SSL_PHA_REQUESTED)
         s->statem.cleanuphand = 1;
 
     /*
@@ -741,8 +744,14 @@ MSG_PROCESS_RETURN tls_process_finished(SSL *s, PACKET *pkt)
 
 
     /* This is a real handshake so make sure we clean it up at the end */
-    if (s->server)
-        s->statem.cleanuphand = 1;
+    if (s->server) {
+        if (s->post_handshake_auth != SSL_PHA_REQUESTED)
+            s->statem.cleanuphand = 1;
+        if (SSL_IS_TLS13(s) && !tls13_save_handshake_digest_for_pha(s)) {
+                /* SSLfatal() already called */
+                return MSG_PROCESS_ERROR;
+        }
+    }
 
     /*
      * In TLSv1.3 a Finished message signals a key change so the end of the
@@ -801,7 +810,8 @@ MSG_PROCESS_RETURN tls_process_finished(SSL *s, PACKET *pkt)
      */
     if (SSL_IS_TLS13(s)) {
         if (s->server) {
-            if (!s->method->ssl3_enc->change_cipher_state(s,
+            if (s->post_handshake_auth != SSL_PHA_REQUESTED &&
+                    !s->method->ssl3_enc->change_cipher_state(s,
                     SSL3_CC_APPLICATION | SSL3_CHANGE_CIPHER_SERVER_READ)) {
                 /* SSLfatal() already called */
                 return MSG_PROCESS_ERROR;
@@ -1021,6 +1031,10 @@ WORK_STATE tls_finish_handshake(SSL *s, WORK_STATE wst, int clearbufs, int stop)
         s->init_num = 0;
     }
 
+    if (SSL_IS_TLS13(s) && !s->server
+            && s->post_handshake_auth == SSL_PHA_REQUESTED)
+        s->post_handshake_auth = SSL_PHA_EXT_SENT;
+
     if (s->statem.cleanuphand) {
         /* skipped if we just sent a HelloRequest */
         s->renegotiate = 0;
@@ -1237,18 +1251,24 @@ int tls_get_message_body(SSL *s, size_t *len)
         /*
          * We defer feeding in the HRR until later. We'll do it as part of
          * processing the message
+         * The TLsv1.3 handshake transcript stops at the ClientFinished
+         * message.
          */
 #define SERVER_HELLO_RANDOM_OFFSET  (SSL3_HM_HEADER_LENGTH + 2)
-        if (s->s3->tmp.message_type != SSL3_MT_SERVER_HELLO
-                || s->init_num < SERVER_HELLO_RANDOM_OFFSET + SSL3_RANDOM_SIZE
-                || memcmp(hrrrandom,
-                          s->init_buf->data + SERVER_HELLO_RANDOM_OFFSET,
-                          SSL3_RANDOM_SIZE) != 0) {
-            if (!ssl3_finish_mac(s, (unsigned char *)s->init_buf->data,
-                                 s->init_num + SSL3_HM_HEADER_LENGTH)) {
-                /* SSLfatal() already called */
-                *len = 0;
-                return 0;
+        /* KeyUpdate and NewSessionTicket do not need to be added */
+        if (!SSL_IS_TLS13(s) || (s->s3->tmp.message_type != SSL3_MT_NEWSESSION_TICKET
+                                 && s->s3->tmp.message_type != SSL3_MT_KEY_UPDATE)) {
+            if (s->s3->tmp.message_type != SSL3_MT_SERVER_HELLO
+                    || s->init_num < SERVER_HELLO_RANDOM_OFFSET + SSL3_RANDOM_SIZE
+                    || memcmp(hrrrandom,
+                              s->init_buf->data + SERVER_HELLO_RANDOM_OFFSET,
+                              SSL3_RANDOM_SIZE) != 0) {
+                if (!ssl3_finish_mac(s, (unsigned char *)s->init_buf->data,
+                                     s->init_num + SSL3_HM_HEADER_LENGTH)) {
+                    /* SSLfatal() already called */
+                    *len = 0;
+                    return 0;
+                }
             }
         }
         if (s->msg_callback)
@@ -2208,3 +2228,54 @@ size_t construct_key_exchange_tbs(SSL *s, unsigned char **ptbs,
     *ptbs = tbs;
     return tbslen;
 }
+
+/*
+ * Saves the current handshake digest for Post-Handshake Auth,
+ * Done after ClientFinished is processed, done exactly once
+ */
+int tls13_save_handshake_digest_for_pha(SSL *s)
+{
+    if (s->pha_dgst == NULL) {
+        if (!ssl3_digest_cached_records(s, 1))
+            /* SSLfatal() already called */
+            return 0;
+
+        s->pha_dgst = EVP_MD_CTX_new();
+        if (s->pha_dgst == NULL) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+        if (!EVP_MD_CTX_copy_ex(s->pha_dgst,
+                                s->s3->handshake_dgst)) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS13_SAVE_HANDSHAKE_DIGEST_FOR_PHA,
+                     ERR_R_INTERNAL_ERROR);
+            return 0;
+        }
+    }
+    return 1;
+}
+
+/*
+ * Restores the Post-Handshake Auth handshake digest
+ * Done just before sending/processing the Cert Request
+ */
+int tls13_restore_handshake_digest_for_pha(SSL *s)
+{
+    if (s->pha_dgst == NULL) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    if (!EVP_MD_CTX_copy_ex(s->s3->handshake_dgst,
+                            s->pha_dgst)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                 SSL_F_TLS13_RESTORE_HANDSHAKE_DIGEST_FOR_PHA,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+    return 1;
+}
diff --git a/ssl/statem/statem_locl.h b/ssl/statem/statem_locl.h
index f16d3cb..af081eb 100644
--- a/ssl/statem/statem_locl.h
+++ b/ssl/statem/statem_locl.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -235,6 +235,8 @@ int tls_parse_ctos_psk_kex_modes(SSL *s, PACKET *pkt, unsigned int context,
                                  X509 *x, size_t chainidx);
 int tls_parse_ctos_psk(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
                        size_t chainidx);
+int tls_parse_ctos_post_handshake_auth(SSL *, PACKET *pkt, unsigned int context,
+                                       X509 *x, size_t chainidx);
 
 EXT_RETURN tls_construct_stoc_renegotiate(SSL *s, WPACKET *pkt,
                                           unsigned int context, X509 *x,
@@ -365,6 +367,9 @@ EXT_RETURN tls_construct_ctos_padding(SSL *s, WPACKET *pkt,
                                       size_t chainidx);
 EXT_RETURN tls_construct_ctos_psk(SSL *s, WPACKET *pkt, unsigned int context,
                                   X509 *x, size_t chainidx);
+EXT_RETURN tls_construct_ctos_post_handshake_auth(SSL *s, WPACKET *pkt, unsigned int context,
+                                                  X509 *x, size_t chainidx);
+
 int tls_parse_stoc_renegotiate(SSL *s, PACKET *pkt, unsigned int context,
                                X509 *x, size_t chainidx);
 int tls_parse_stoc_server_name(SSL *s, PACKET *pkt, unsigned int context,
@@ -411,3 +416,6 @@ int tls_parse_stoc_psk(SSL *s, PACKET *pkt, unsigned int context, X509 *x,
                        size_t chainidx);
 
 int tls_handle_alpn(SSL *s);
+
+int tls13_save_handshake_digest_for_pha(SSL *s);
+int tls13_restore_handshake_digest_for_pha(SSL *s);
diff --git a/ssl/statem/statem_srvr.c b/ssl/statem/statem_srvr.c
index 51b6ce9..812780a 100644
--- a/ssl/statem/statem_srvr.c
+++ b/ssl/statem/statem_srvr.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -107,6 +107,13 @@ static int ossl_statem_server13_read_transition(SSL *s, int mt)
          */
         if (s->early_data_state == SSL_EARLY_DATA_READING)
             break;
+
+        if (mt == SSL3_MT_CERTIFICATE
+                && s->post_handshake_auth == SSL_PHA_REQUESTED) {
+            st->hand_state = TLS_ST_SR_CERT;
+            return 1;
+        }
+
         if (mt == SSL3_MT_KEY_UPDATE) {
             st->hand_state = TLS_ST_SR_KEY_UPDATE;
             return 1;
@@ -325,16 +332,22 @@ static int send_server_key_exchange(SSL *s)
  *   1: Yes
  *   0: No
  */
-static int send_certificate_request(SSL *s)
+int send_certificate_request(SSL *s)
 {
     if (
            /* don't request cert unless asked for it: */
            s->verify_mode & SSL_VERIFY_PEER
            /*
+            * don't request if post-handshake-only unless doing
+            * post-handshake in TLSv1.3:
+            */
+           && (!SSL_IS_TLS13(s) || !(s->verify_mode & SSL_VERIFY_POST_HANDSHAKE)
+               || s->post_handshake_auth == SSL_PHA_REQUEST_PENDING)
+           /*
             * if SSL_VERIFY_CLIENT_ONCE is set, don't request cert
-            * during re-negotiation:
+            * a second time:
             */
-           && (s->s3->tmp.finish_md_len == 0 ||
+           && (s->certreqs_sent < 1 ||
                !(s->verify_mode & SSL_VERIFY_CLIENT_ONCE))
            /*
             * never request cert in anonymous ciphersuites (see
@@ -388,6 +401,10 @@ static WRITE_TRAN ossl_statem_server13_write_transition(SSL *s)
             st->hand_state = TLS_ST_SW_KEY_UPDATE;
             return WRITE_TRAN_CONTINUE;
         }
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            st->hand_state = TLS_ST_SW_CERT_REQ;
+            return WRITE_TRAN_CONTINUE;
+        }
         /* Try to read from the client instead */
         return WRITE_TRAN_FINISHED;
 
@@ -423,7 +440,12 @@ static WRITE_TRAN ossl_statem_server13_write_transition(SSL *s)
         return WRITE_TRAN_CONTINUE;
 
     case TLS_ST_SW_CERT_REQ:
-        st->hand_state = TLS_ST_SW_CERT;
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            s->post_handshake_auth = SSL_PHA_REQUESTED;
+            st->hand_state = TLS_ST_OK;
+        } else {
+            st->hand_state = TLS_ST_SW_CERT;
+        }
         return WRITE_TRAN_CONTINUE;
 
     case TLS_ST_SW_CERT:
@@ -450,6 +472,8 @@ static WRITE_TRAN ossl_statem_server13_write_transition(SSL *s)
          * and give the application the opportunity to delay sending the
          * session ticket?
          */
+        if (s->post_handshake_auth == SSL_PHA_REQUESTED)
+            s->post_handshake_auth = SSL_PHA_EXT_RECEIVED;
         st->hand_state = TLS_ST_SW_SESSION_TICKET;
         return WRITE_TRAN_CONTINUE;
 
@@ -863,6 +887,13 @@ WORK_STATE ossl_statem_server_post_work(SSL *s, WORK_STATE wst)
         }
         break;
 
+    case TLS_ST_SW_CERT_REQ:
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            if (statem_flush(s) != 1)
+                return WORK_MORE_A;
+        }
+        break;
+
     case TLS_ST_SW_KEY_UPDATE:
         if (statem_flush(s) != 1)
             return WORK_MORE_A;
@@ -2702,12 +2733,30 @@ int tls_construct_server_key_exchange(SSL *s, WPACKET *pkt)
 int tls_construct_certificate_request(SSL *s, WPACKET *pkt)
 {
     if (SSL_IS_TLS13(s)) {
-        /* TODO(TLS1.3) for now send empty request context */
-        if (!WPACKET_put_bytes_u8(pkt, 0)) {
-            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
-                     SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST,
-                     ERR_R_INTERNAL_ERROR);
-            return 0;
+        /* Send random context when doing post-handshake auth */
+        if (s->post_handshake_auth == SSL_PHA_REQUEST_PENDING) {
+            OPENSSL_free(s->pha_context);
+            s->pha_context_len = 32;
+            if ((s->pha_context = OPENSSL_malloc(s->pha_context_len)) == NULL
+                    || ssl_randbytes(s, s->pha_context, s->pha_context_len) <= 0
+                    || !WPACKET_sub_memcpy_u8(pkt, s->pha_context, s->pha_context_len)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
+            /* reset the handshake hash back to just after the ClientFinished */
+            if (!tls13_restore_handshake_digest_for_pha(s)) {
+                /* SSLfatal() already called */
+                return 0;
+            }
+        } else {
+            if (!WPACKET_put_bytes_u8(pkt, 0)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS_CONSTRUCT_CERTIFICATE_REQUEST,
+                         ERR_R_INTERNAL_ERROR);
+                return 0;
+            }
         }
 
         if (!tls_construct_extensions(s, pkt,
@@ -2748,6 +2797,7 @@ int tls_construct_certificate_request(SSL *s, WPACKET *pkt)
     }
 
  done:
+    s->certreqs_sent++;
     s->s3->tmp.cert_request = 1;
     return 1;
 }
@@ -3396,11 +3446,12 @@ MSG_PROCESS_RETURN tls_process_client_certificate(SSL *s, PACKET *pkt)
     int i;
     MSG_PROCESS_RETURN ret = MSG_PROCESS_ERROR;
     X509 *x = NULL;
-    unsigned long l, llen;
+    unsigned long l;
     const unsigned char *certstart, *certbytes;
     STACK_OF(X509) *sk = NULL;
     PACKET spkt, context;
     size_t chainidx;
+    SSL_SESSION *new_sess = NULL;
 
     if ((sk = sk_X509_new_null()) == NULL) {
         SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
@@ -3408,10 +3459,16 @@ MSG_PROCESS_RETURN tls_process_client_certificate(SSL *s, PACKET *pkt)
         goto err;
     }
 
-    /* TODO(TLS1.3): For now we ignore the context. We need to verify this */
-    if ((SSL_IS_TLS13(s) && !PACKET_get_length_prefixed_1(pkt, &context))
-            || !PACKET_get_net_3(pkt, &llen)
-            || !PACKET_get_sub_packet(pkt, &spkt, llen)
+    if (SSL_IS_TLS13(s) && (!PACKET_get_length_prefixed_1(pkt, &context)
+                            || (s->pha_context == NULL && PACKET_remaining(&context) != 0)
+                            || (s->pha_context != NULL &&
+                                !PACKET_equal(&context, s->pha_context, s->pha_context_len)))) {
+        SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                 SSL_R_INVALID_CONTEXT);
+        goto err;
+    }
+
+    if (!PACKET_get_length_prefixed_3(pkt, &spkt)
             || PACKET_remaining(pkt) != 0) {
         SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
                  SSL_R_LENGTH_MISMATCH);
@@ -3516,6 +3573,35 @@ MSG_PROCESS_RETURN tls_process_client_certificate(SSL *s, PACKET *pkt)
         }
     }
 
+    /*
+     * Sessions must be immutable once they go into the session cache. Otherwise
+     * we can get multi-thread problems. Therefore we don't "update" sessions,
+     * we replace them with a duplicate. Here, we need to do this every time
+     * a new certificate is received via post-handshake authentication, as the
+     * session may have already gone into the session cache.
+     */
+
+    if (s->post_handshake_auth == SSL_PHA_REQUESTED) {
+        int m = s->session_ctx->session_cache_mode;
+
+        if ((new_sess = ssl_session_dup(s->session, 0)) == 0) {
+            SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                     SSL_F_TLS_PROCESS_CLIENT_CERTIFICATE,
+                     ERR_R_MALLOC_FAILURE);
+            goto err;
+        }
+
+        if (m & SSL_SESS_CACHE_SERVER) {
+            /*
+             * Remove the old session from the cache. We carry on if this fails
+             */
+            SSL_CTX_remove_session(s->session_ctx, s->session);
+        }
+
+        SSL_SESSION_free(s->session);
+        s->session = new_sess;
+    }
+
     X509_free(s->session->peer);
     s->session->peer = sk_X509_shift(sk);
     s->session->verify_result = s->verify_result;
@@ -3523,6 +3609,9 @@ MSG_PROCESS_RETURN tls_process_client_certificate(SSL *s, PACKET *pkt)
     sk_X509_pop_free(s->session->peer_chain, X509_free);
     s->session->peer_chain = sk;
 
+    if (new_sess != NULL)
+        ssl_update_cache(s, SSL_SESS_CACHE_SERVER);
+
     /*
      * Freeze the handshake buffer. For <TLS1.3 we do this after the CKE
      * message
diff --git a/ssl/t1_trce.c b/ssl/t1_trce.c
index b998765..fa975be 100644
--- a/ssl/t1_trce.c
+++ b/ssl/t1_trce.c
@@ -481,7 +481,8 @@ static const ssl_trace_tbl ssl_exts_tbl[] = {
     {TLSEXT_TYPE_padding, "padding"},
     {TLSEXT_TYPE_encrypt_then_mac, "encrypt_then_mac"},
     {TLSEXT_TYPE_extended_master_secret, "extended_master_secret"},
-    {TLSEXT_TYPE_early_data, "early_data"}
+    {TLSEXT_TYPE_early_data, "early_data"},
+    {TLSEXT_TYPE_post_handshake_auth, "post_handshake_auth"}
 };
 
 static const ssl_trace_tbl ssl_groups_tbl[] = {
diff --git a/test/build.info b/test/build.info
index c3c7f1e..7811f04 100644
--- a/test/build.info
+++ b/test/build.info
@@ -268,7 +268,7 @@ INCLUDE_MAIN___test_libtestutil_OLB = /INCLUDE=MAIN
   DEPEND[cipherlist_test]=../libcrypto ../libssl libtestutil.a
 
   INCLUDE[ssl_test_ctx.o]=../include
-  INCLUDE[handshake_helper.o]=../include
+  INCLUDE[handshake_helper.o]=.. ../include
   INCLUDE[ssltestlib.o]=.. ../include
 
   SOURCE[x509aux]=x509aux.c
diff --git a/test/handshake_helper.c b/test/handshake_helper.c
index 0add973..48392a4 100644
--- a/test/handshake_helper.c
+++ b/test/handshake_helper.c
@@ -16,6 +16,7 @@
 #include <openssl/srp.h>
 #endif
 
+#include "../ssl/ssl_locl.h"
 #include "internal/sockets.h"
 #include "internal/nelem.h"
 #include "handshake_helper.h"
@@ -674,6 +675,8 @@ static void configure_handshake_ssl(SSL *server, SSL *client,
     if (extra->client.servername != SSL_TEST_SERVERNAME_NONE)
         SSL_set_tlsext_host_name(client,
                                  ssl_servername_name(extra->client.servername));
+    if (extra->client.force_pha)
+        SSL_force_post_handshake_auth(client);
 }
 
 /* The status for each connection phase. */
@@ -848,7 +851,9 @@ static void do_reneg_setup_step(const SSL_TEST_CTX *test_ctx, PEER *peer)
                           || test_ctx->handshake_mode
                               == SSL_TEST_HANDSHAKE_KEY_UPDATE_SERVER
                           || test_ctx->handshake_mode
-                              == SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT)) {
+                              == SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT
+                          || test_ctx->handshake_mode
+                              == SSL_TEST_HANDSHAKE_POST_HANDSHAKE_AUTH)) {
         peer->status = PEER_TEST_FAILURE;
         return;
     }
@@ -929,6 +934,25 @@ static void do_reneg_setup_step(const SSL_TEST_CTX *test_ctx, PEER *peer)
         if (peer->status != PEER_SUCCESS)
             peer->status = PEER_ERROR;
         return;
+    } else if (test_ctx->handshake_mode == SSL_TEST_HANDSHAKE_POST_HANDSHAKE_AUTH) {
+        if (SSL_is_server(peer->ssl)) {
+            /* Make the server believe it's received the extension */
+            if (test_ctx->extra.server.force_pha)
+                peer->ssl->post_handshake_auth = SSL_PHA_EXT_RECEIVED;
+            ret = SSL_verify_client_post_handshake(peer->ssl);
+            if (!ret) {
+                peer->status = PEER_ERROR;
+                return;
+            }
+        }
+        do_handshake_step(peer);
+        /*
+         * This is a one step handshake. We shouldn't get anything other than
+         * PEER_SUCCESS
+         */
+        if (peer->status != PEER_SUCCESS)
+            peer->status = PEER_ERROR;
+        return;
     }
 
     /*
@@ -1004,25 +1028,41 @@ typedef enum {
     CONNECTION_DONE
 } connect_phase_t;
 
+
+static int renegotiate_op(const SSL_TEST_CTX *test_ctx)
+{
+    switch (test_ctx->handshake_mode) {
+    case SSL_TEST_HANDSHAKE_RENEG_SERVER:
+    case SSL_TEST_HANDSHAKE_RENEG_CLIENT:
+        return 1;
+    default:
+        return 0;
+    }
+}
+static int post_handshake_op(const SSL_TEST_CTX *test_ctx)
+{
+    switch (test_ctx->handshake_mode) {
+    case SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT:
+    case SSL_TEST_HANDSHAKE_KEY_UPDATE_SERVER:
+    case SSL_TEST_HANDSHAKE_POST_HANDSHAKE_AUTH:
+        return 1;
+    default:
+        return 0;
+    }
+}
+
 static connect_phase_t next_phase(const SSL_TEST_CTX *test_ctx,
                                   connect_phase_t phase)
 {
     switch (phase) {
     case HANDSHAKE:
-        if (test_ctx->handshake_mode == SSL_TEST_HANDSHAKE_RENEG_SERVER
-                || test_ctx->handshake_mode == SSL_TEST_HANDSHAKE_RENEG_CLIENT
-                || test_ctx->handshake_mode
-                   == SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT
-                || test_ctx->handshake_mode
-                   == SSL_TEST_HANDSHAKE_KEY_UPDATE_SERVER)
+        if (renegotiate_op(test_ctx) || post_handshake_op(test_ctx))
             return RENEG_APPLICATION_DATA;
         return APPLICATION_DATA;
     case RENEG_APPLICATION_DATA:
         return RENEG_SETUP;
     case RENEG_SETUP:
-        if (test_ctx->handshake_mode == SSL_TEST_HANDSHAKE_KEY_UPDATE_SERVER
-                || test_ctx->handshake_mode
-                   == SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT)
+        if (post_handshake_op(test_ctx))
             return APPLICATION_DATA;
         return RENEG_HANDSHAKE;
     case RENEG_HANDSHAKE:
diff --git a/test/recipes/70-test_tls13messages.t b/test/recipes/70-test_tls13messages.t
index fc70b4f..4190ab5 100644
--- a/test/recipes/70-test_tls13messages.t
+++ b/test/recipes/70-test_tls13messages.t
@@ -89,6 +89,8 @@ $ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.conf");
         checkhandshake::DEFAULT_EXTENSIONS],
     [TLSProxy::Message::MT_CLIENT_HELLO, TLSProxy::Message::EXT_PSK,
         checkhandshake::PSK_CLI_EXTENSION],
+    [TLSProxy::Message::MT_CLIENT_HELLO, TLSProxy::Message::EXT_POST_HANDSHAKE_AUTH,
+        checkhandshake::POST_HANDSHAKE_AUTH_CLI_EXTENSION],
 
     [TLSProxy::Message::MT_SERVER_HELLO, TLSProxy::Message::EXT_SUPPORTED_VERSIONS,
         checkhandshake::DEFAULT_EXTENSIONS],
@@ -123,6 +125,8 @@ $ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.conf");
         checkhandshake::DEFAULT_EXTENSIONS],
     [TLSProxy::Message::MT_CLIENT_HELLO, TLSProxy::Message::EXT_PSK,
         checkhandshake::PSK_CLI_EXTENSION],
+    [TLSProxy::Message::MT_CLIENT_HELLO, TLSProxy::Message::EXT_POST_HANDSHAKE_AUTH,
+        checkhandshake::POST_HANDSHAKE_AUTH_CLI_EXTENSION],
 
     [TLSProxy::Message::MT_SERVER_HELLO, TLSProxy::Message::EXT_SUPPORTED_VERSIONS,
         checkhandshake::DEFAULT_EXTENSIONS],
@@ -214,7 +218,8 @@ $proxy->clientflags("-cert ".srctop_file("apps", "server.pem"));
 $proxy->serverflags("-Verify 5");
 $proxy->start();
 checkhandshake($proxy, checkhandshake::CLIENT_AUTH_HANDSHAKE,
-               checkhandshake::DEFAULT_EXTENSIONS,
+               checkhandshake::DEFAULT_EXTENSIONS |
+               checkhandshake::POST_HANDSHAKE_AUTH_CLI_EXTENSION,
                "Client auth handshake test");
 
 #Test 7: Server name handshake (no client request)
diff --git a/test/recipes/80-test_ssl_new.t b/test/recipes/80-test_ssl_new.t
index d1388d9..be03388 100644
--- a/test/recipes/80-test_ssl_new.t
+++ b/test/recipes/80-test_ssl_new.t
@@ -28,7 +28,7 @@ map { s/\^// } @conf_files if $^O eq "VMS";
 
 # We hard-code the number of tests to double-check that the globbing above
 # finds all files as expected.
-plan tests => 25;  # = scalar @conf_srcs
+plan tests => 26;  # = scalar @conf_srcs
 
 # Some test results depend on the configuration of enabled protocols. We only
 # verify generated sources in the default configuration.
@@ -96,6 +96,7 @@ my %skip = (
                     && disabled("tls1_2")) || disabled("srp"),
   "24-padding.conf" => disabled("tls1_3"),
   "25-cipher.conf" => disabled("ec") || disabled("tls1_2"),
+  "26-tls13_client_auth.conf" => disabled("tls1_3"),
 );
 
 foreach my $conf (@conf_files) {
diff --git a/test/ssl-tests/26-tls13_client_auth.conf b/test/ssl-tests/26-tls13_client_auth.conf
new file mode 100644
index 0000000..f769b12
--- /dev/null
+++ b/test/ssl-tests/26-tls13_client_auth.conf
@@ -0,0 +1,476 @@
+# Generated with generate_ssl_tests.pl
+
+num_tests = 14
+
+test-0 = 0-server-auth-TLSv1.3
+test-1 = 1-client-auth-TLSv1.3-request
+test-2 = 2-client-auth-TLSv1.3-require-fail
+test-3 = 3-client-auth-TLSv1.3-require
+test-4 = 4-client-auth-TLSv1.3-require-non-empty-names
+test-5 = 5-client-auth-TLSv1.3-noroot
+test-6 = 6-client-auth-TLSv1.3-request-post-handshake
+test-7 = 7-client-auth-TLSv1.3-require-fail-post-handshake
+test-8 = 8-client-auth-TLSv1.3-require-post-handshake
+test-9 = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake
+test-10 = 10-client-auth-TLSv1.3-noroot-post-handshake
+test-11 = 11-client-auth-TLSv1.3-request-force-client-post-handshake
+test-12 = 12-client-auth-TLSv1.3-request-force-server-post-handshake
+test-13 = 13-client-auth-TLSv1.3-request-force-both-post-handshake
+# ===========================================================
+
+[0-server-auth-TLSv1.3]
+ssl_conf = 0-server-auth-TLSv1.3-ssl
+
+[0-server-auth-TLSv1.3-ssl]
+server = 0-server-auth-TLSv1.3-server
+client = 0-server-auth-TLSv1.3-client
+
+[0-server-auth-TLSv1.3-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[0-server-auth-TLSv1.3-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-0]
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[1-client-auth-TLSv1.3-request]
+ssl_conf = 1-client-auth-TLSv1.3-request-ssl
+
+[1-client-auth-TLSv1.3-request-ssl]
+server = 1-client-auth-TLSv1.3-request-server
+client = 1-client-auth-TLSv1.3-request-client
+
+[1-client-auth-TLSv1.3-request-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyMode = Request
+
+[1-client-auth-TLSv1.3-request-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-1]
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[2-client-auth-TLSv1.3-require-fail]
+ssl_conf = 2-client-auth-TLSv1.3-require-fail-ssl
+
+[2-client-auth-TLSv1.3-require-fail-ssl]
+server = 2-client-auth-TLSv1.3-require-fail-server
+client = 2-client-auth-TLSv1.3-require-fail-client
+
+[2-client-auth-TLSv1.3-require-fail-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Require
+
+[2-client-auth-TLSv1.3-require-fail-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-2]
+ExpectedResult = ServerFail
+ExpectedServerAlert = HandshakeFailure
+
+
+# ===========================================================
+
+[3-client-auth-TLSv1.3-require]
+ssl_conf = 3-client-auth-TLSv1.3-require-ssl
+
+[3-client-auth-TLSv1.3-require-ssl]
+server = 3-client-auth-TLSv1.3-require-server
+client = 3-client-auth-TLSv1.3-require-client
+
+[3-client-auth-TLSv1.3-require-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientSignatureAlgorithms = PSS+SHA256
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Request
+
+[3-client-auth-TLSv1.3-require-client]
+Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-3]
+ExpectedClientCANames = empty
+ExpectedClientCertType = RSA
+ExpectedClientSignHash = SHA256
+ExpectedClientSignType = RSA-PSS
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[4-client-auth-TLSv1.3-require-non-empty-names]
+ssl_conf = 4-client-auth-TLSv1.3-require-non-empty-names-ssl
+
+[4-client-auth-TLSv1.3-require-non-empty-names-ssl]
+server = 4-client-auth-TLSv1.3-require-non-empty-names-server
+client = 4-client-auth-TLSv1.3-require-non-empty-names-client
+
+[4-client-auth-TLSv1.3-require-non-empty-names-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+ClientSignatureAlgorithms = PSS+SHA256
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Request
+
+[4-client-auth-TLSv1.3-require-non-empty-names-client]
+Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-4]
+ExpectedClientCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+ExpectedClientCertType = RSA
+ExpectedClientSignHash = SHA256
+ExpectedClientSignType = RSA-PSS
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[5-client-auth-TLSv1.3-noroot]
+ssl_conf = 5-client-auth-TLSv1.3-noroot-ssl
+
+[5-client-auth-TLSv1.3-noroot-ssl]
+server = 5-client-auth-TLSv1.3-noroot-server
+client = 5-client-auth-TLSv1.3-noroot-client
+
+[5-client-auth-TLSv1.3-noroot-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyMode = Require
+
+[5-client-auth-TLSv1.3-noroot-client]
+Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-5]
+ExpectedResult = ServerFail
+ExpectedServerAlert = UnknownCA
+
+
+# ===========================================================
+
+[6-client-auth-TLSv1.3-request-post-handshake]
+ssl_conf = 6-client-auth-TLSv1.3-request-post-handshake-ssl
+
+[6-client-auth-TLSv1.3-request-post-handshake-ssl]
+server = 6-client-auth-TLSv1.3-request-post-handshake-server
+client = 6-client-auth-TLSv1.3-request-post-handshake-client
+
+[6-client-auth-TLSv1.3-request-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyMode = RequestPostHandshake
+
+[6-client-auth-TLSv1.3-request-post-handshake-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-6]
+ExpectedResult = ServerFail
+HandshakeMode = PostHandshakeAuth
+
+
+# ===========================================================
+
+[7-client-auth-TLSv1.3-require-fail-post-handshake]
+ssl_conf = 7-client-auth-TLSv1.3-require-fail-post-handshake-ssl
+
+[7-client-auth-TLSv1.3-require-fail-post-handshake-ssl]
+server = 7-client-auth-TLSv1.3-require-fail-post-handshake-server
+client = 7-client-auth-TLSv1.3-require-fail-post-handshake-client
+
+[7-client-auth-TLSv1.3-require-fail-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = RequirePostHandshake
+
+[7-client-auth-TLSv1.3-require-fail-post-handshake-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-7]
+ExpectedResult = ServerFail
+HandshakeMode = PostHandshakeAuth
+
+
+# ===========================================================
+
+[8-client-auth-TLSv1.3-require-post-handshake]
+ssl_conf = 8-client-auth-TLSv1.3-require-post-handshake-ssl
+
+[8-client-auth-TLSv1.3-require-post-handshake-ssl]
+server = 8-client-auth-TLSv1.3-require-post-handshake-server
+client = 8-client-auth-TLSv1.3-require-post-handshake-client
+
+[8-client-auth-TLSv1.3-require-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientSignatureAlgorithms = PSS+SHA256
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = RequestPostHandshake
+
+[8-client-auth-TLSv1.3-require-post-handshake-client]
+Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-8]
+ExpectedClientCANames = empty
+ExpectedClientCertType = RSA
+ExpectedClientSignHash = SHA256
+ExpectedClientSignType = RSA-PSS
+ExpectedResult = Success
+HandshakeMode = PostHandshakeAuth
+
+
+# ===========================================================
+
+[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake]
+ssl_conf = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-ssl
+
+[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-ssl]
+server = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-server
+client = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-client
+
+[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+ClientSignatureAlgorithms = PSS+SHA256
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = RequestPostHandshake
+
+[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-client]
+Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-9]
+ExpectedClientCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+ExpectedClientCertType = RSA
+ExpectedClientSignHash = SHA256
+ExpectedClientSignType = RSA-PSS
+ExpectedResult = Success
+HandshakeMode = PostHandshakeAuth
+
+
+# ===========================================================
+
+[10-client-auth-TLSv1.3-noroot-post-handshake]
+ssl_conf = 10-client-auth-TLSv1.3-noroot-post-handshake-ssl
+
+[10-client-auth-TLSv1.3-noroot-post-handshake-ssl]
+server = 10-client-auth-TLSv1.3-noroot-post-handshake-server
+client = 10-client-auth-TLSv1.3-noroot-post-handshake-client
+
+[10-client-auth-TLSv1.3-noroot-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyMode = RequirePostHandshake
+
+[10-client-auth-TLSv1.3-noroot-post-handshake-client]
+Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-10]
+ExpectedResult = ServerFail
+ExpectedServerAlert = UnknownCA
+HandshakeMode = PostHandshakeAuth
+
+
+# ===========================================================
+
+[11-client-auth-TLSv1.3-request-force-client-post-handshake]
+ssl_conf = 11-client-auth-TLSv1.3-request-force-client-post-handshake-ssl
+
+[11-client-auth-TLSv1.3-request-force-client-post-handshake-ssl]
+server = 11-client-auth-TLSv1.3-request-force-client-post-handshake-server
+client = 11-client-auth-TLSv1.3-request-force-client-post-handshake-client
+
+[11-client-auth-TLSv1.3-request-force-client-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyMode = RequestPostHandshake
+
+[11-client-auth-TLSv1.3-request-force-client-post-handshake-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-11]
+ExpectedResult = Success
+HandshakeMode = PostHandshakeAuth
+client = 11-client-auth-TLSv1.3-request-force-client-post-handshake-client-extra
+
+[11-client-auth-TLSv1.3-request-force-client-post-handshake-client-extra]
+ForcePHA = Yes
+
+
+# ===========================================================
+
+[12-client-auth-TLSv1.3-request-force-server-post-handshake]
+ssl_conf = 12-client-auth-TLSv1.3-request-force-server-post-handshake-ssl
+
+[12-client-auth-TLSv1.3-request-force-server-post-handshake-ssl]
+server = 12-client-auth-TLSv1.3-request-force-server-post-handshake-server
+client = 12-client-auth-TLSv1.3-request-force-server-post-handshake-client
+
+[12-client-auth-TLSv1.3-request-force-server-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyMode = RequestPostHandshake
+
+[12-client-auth-TLSv1.3-request-force-server-post-handshake-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-12]
+ExpectedResult = ClientFail
+HandshakeMode = PostHandshakeAuth
+server = 12-client-auth-TLSv1.3-request-force-server-post-handshake-server-extra
+
+[12-client-auth-TLSv1.3-request-force-server-post-handshake-server-extra]
+ForcePHA = Yes
+
+
+# ===========================================================
+
+[13-client-auth-TLSv1.3-request-force-both-post-handshake]
+ssl_conf = 13-client-auth-TLSv1.3-request-force-both-post-handshake-ssl
+
+[13-client-auth-TLSv1.3-request-force-both-post-handshake-ssl]
+server = 13-client-auth-TLSv1.3-request-force-both-post-handshake-server
+client = 13-client-auth-TLSv1.3-request-force-both-post-handshake-client
+
+[13-client-auth-TLSv1.3-request-force-both-post-handshake-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyMode = RequestPostHandshake
+
+[13-client-auth-TLSv1.3-request-force-both-post-handshake-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-13]
+ExpectedResult = Success
+HandshakeMode = PostHandshakeAuth
+server = 13-client-auth-TLSv1.3-request-force-both-post-handshake-server-extra
+client = 13-client-auth-TLSv1.3-request-force-both-post-handshake-client-extra
+
+[13-client-auth-TLSv1.3-request-force-both-post-handshake-server-extra]
+ForcePHA = Yes
+
+[13-client-auth-TLSv1.3-request-force-both-post-handshake-client-extra]
+ForcePHA = Yes
+
+
diff --git a/test/ssl-tests/26-tls13_client_auth.conf.in b/test/ssl-tests/26-tls13_client_auth.conf.in
new file mode 100644
index 0000000..6da4168
--- /dev/null
+++ b/test/ssl-tests/26-tls13_client_auth.conf.in
@@ -0,0 +1,293 @@
+# -*- mode: perl; -*-
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+## Test TLSv1.3 certificate authentication
+## Similar to 04-client_auth.conf.in output, but specific for
+## TLSv1.3 and post-handshake authentication
+
+use strict;
+use warnings;
+
+package ssltests;
+use OpenSSL::Test::Utils;
+
+our @tests = (
+    {
+        name => "server-auth-TLSv1.3",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+        },
+        test => {
+            "ExpectedResult" => "Success",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-request",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyMode" => "Request",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+        },
+        test => {
+            "ExpectedResult" => "Success",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-require-fail",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyCAFile" => test_pem("root-cert.pem"),
+            "VerifyMode" => "Require",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+        },
+        test => {
+            "ExpectedResult" => "ServerFail",
+            "ExpectedServerAlert" => "HandshakeFailure",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-require",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "ClientSignatureAlgorithms" => "PSS+SHA256",
+            "VerifyCAFile" => test_pem("root-cert.pem"),
+            "VerifyMode" => "Request",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "Certificate" => test_pem("ee-client-chain.pem"),
+            "PrivateKey" => test_pem("ee-key.pem"),
+        },
+        test => {
+            "ExpectedResult" => "Success",
+            "ExpectedClientCertType" => "RSA",
+            "ExpectedClientSignType" => "RSA-PSS",
+            "ExpectedClientSignHash" => "SHA256",
+            "ExpectedClientCANames" => "empty"
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-require-non-empty-names",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "ClientSignatureAlgorithms" => "PSS+SHA256",
+            "ClientCAFile" => test_pem("root-cert.pem"),
+            "VerifyCAFile" => test_pem("root-cert.pem"),
+            "VerifyMode" => "Request",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "Certificate" => test_pem("ee-client-chain.pem"),
+            "PrivateKey" => test_pem("ee-key.pem"),
+        },
+        test => {
+            "ExpectedResult" => "Success",
+            "ExpectedClientCertType" => "RSA",
+            "ExpectedClientSignType" => "RSA-PSS",
+            "ExpectedClientSignHash" => "SHA256",
+            "ExpectedClientCANames" => test_pem("root-cert.pem"),
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-noroot",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyMode" => "Require",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "Certificate" => test_pem("ee-client-chain.pem"),
+            "PrivateKey" => test_pem("ee-key.pem"),
+        },
+        test => {
+            "ExpectedResult" => "ServerFail",
+            "ExpectedServerAlert" => "UnknownCA",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-request-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyMode" => "RequestPostHandshake",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+        },
+        test => {
+            "ExpectedResult" => "ServerFail",
+            "HandshakeMode" => "PostHandshakeAuth",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-require-fail-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyCAFile" => test_pem("root-cert.pem"),
+            "VerifyMode" => "RequirePostHandshake",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+        },
+        test => {
+            "ExpectedResult" => "ServerFail",
+            "HandshakeMode" => "PostHandshakeAuth",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-require-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "ClientSignatureAlgorithms" => "PSS+SHA256",
+            "VerifyCAFile" => test_pem("root-cert.pem"),
+            "VerifyMode" => "RequestPostHandshake",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "Certificate" => test_pem("ee-client-chain.pem"),
+            "PrivateKey" => test_pem("ee-key.pem"),
+        },
+        test => {
+            "ExpectedResult" => "Success",
+            "HandshakeMode" => "PostHandshakeAuth",
+            "ExpectedClientCertType" => "RSA",
+            "ExpectedClientSignType" => "RSA-PSS",
+            "ExpectedClientSignHash" => "SHA256",
+            "ExpectedClientCANames" => "empty"
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-require-non-empty-names-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "ClientSignatureAlgorithms" => "PSS+SHA256",
+            "ClientCAFile" => test_pem("root-cert.pem"),
+            "VerifyCAFile" => test_pem("root-cert.pem"),
+            "VerifyMode" => "RequestPostHandshake",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "Certificate" => test_pem("ee-client-chain.pem"),
+            "PrivateKey" => test_pem("ee-key.pem"),
+        },
+        test => {
+            "ExpectedResult" => "Success",
+            "HandshakeMode" => "PostHandshakeAuth",
+            "ExpectedClientCertType" => "RSA",
+            "ExpectedClientSignType" => "RSA-PSS",
+            "ExpectedClientSignHash" => "SHA256",
+            "ExpectedClientCANames" => test_pem("root-cert.pem"),
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-noroot-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyMode" => "RequirePostHandshake",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "Certificate" => test_pem("ee-client-chain.pem"),
+            "PrivateKey" => test_pem("ee-key.pem"),
+        },
+        test => {
+            "ExpectedResult" => "ServerFail",
+            "HandshakeMode" => "PostHandshakeAuth",
+            "ExpectedServerAlert" => "UnknownCA",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-request-force-client-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyMode" => "RequestPostHandshake",
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+	    extra => {
+		"ForcePHA" => "Yes",
+	    },
+        },
+        test => {
+            "ExpectedResult" => "Success",
+            "HandshakeMode" => "PostHandshakeAuth",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-request-force-server-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyMode" => "RequestPostHandshake",
+	    extra => {
+		"ForcePHA" => "Yes",
+	    },
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+        },
+        test => {
+            "ExpectedResult" => "ClientFail",
+            "HandshakeMode" => "PostHandshakeAuth",
+        },
+    },
+    {
+        name => "client-auth-TLSv1.3-request-force-both-post-handshake",
+        server => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+            "VerifyMode" => "RequestPostHandshake",
+	    extra => {
+		"ForcePHA" => "Yes",
+	    },
+        },
+        client => {
+            "MinProtocol" => "TLSv1.3",
+            "MaxProtocol" => "TLSv1.3",
+	    extra => {
+		"ForcePHA" => "Yes",
+	    },
+        },
+        test => {
+            "ExpectedResult" => "Success",
+            "HandshakeMode" => "PostHandshakeAuth",
+        },
+    },
+);
diff --git a/test/ssl_test_ctx.c b/test/ssl_test_ctx.c
index 897b31e..1f7db2e 100644
--- a/test/ssl_test_ctx.c
+++ b/test/ssl_test_ctx.c
@@ -369,6 +369,7 @@ static const test_enum ssl_handshake_modes[] = {
     {"RenegotiateClient", SSL_TEST_HANDSHAKE_RENEG_CLIENT},
     {"KeyUpdateServer", SSL_TEST_HANDSHAKE_KEY_UPDATE_SERVER},
     {"KeyUpdateClient", SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT},
+    {"PostHandshakeAuth", SSL_TEST_HANDSHAKE_POST_HANDSHAKE_AUTH},
 };
 
 __owur static int parse_handshake_mode(SSL_TEST_CTX *test_ctx, const char *value)
@@ -622,6 +623,11 @@ __owur static int parse_expected_client_ca_names(SSL_TEST_CTX *test_ctx,
 
 IMPLEMENT_SSL_TEST_STRING_OPTION(SSL_TEST_CTX, test, expected_cipher)
 
+/* Client and Server ForcePHA */
+
+IMPLEMENT_SSL_TEST_BOOL_OPTION(SSL_TEST_CLIENT_CONF, client, force_pha)
+IMPLEMENT_SSL_TEST_BOOL_OPTION(SSL_TEST_SERVER_CONF, server, force_pha)
+
 /* Known test options and their corresponding parse methods. */
 
 /* Top-level options. */
@@ -676,6 +682,7 @@ static const ssl_test_client_option ssl_test_client_options[] = {
     { "SRPUser", &parse_client_srp_user },
     { "SRPPassword", &parse_client_srp_password },
     { "MaxFragmentLenExt", &parse_max_fragment_len_mode },
+    { "ForcePHA", &parse_client_force_pha },
 };
 
 /* Nested server options. */
@@ -692,6 +699,7 @@ static const ssl_test_server_option ssl_test_server_options[] = {
     { "CertStatus", &parse_certstatus },
     { "SRPUser", &parse_server_srp_user },
     { "SRPPassword", &parse_server_srp_password },
+    { "ForcePHA", &parse_server_force_pha },
 };
 
 SSL_TEST_CTX *SSL_TEST_CTX_new()
diff --git a/test/ssl_test_ctx.h b/test/ssl_test_ctx.h
index 2d7b0c2..0ec87ce 100644
--- a/test/ssl_test_ctx.h
+++ b/test/ssl_test_ctx.h
@@ -73,7 +73,8 @@ typedef enum {
     SSL_TEST_HANDSHAKE_RENEG_SERVER,
     SSL_TEST_HANDSHAKE_RENEG_CLIENT,
     SSL_TEST_HANDSHAKE_KEY_UPDATE_SERVER,
-    SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT
+    SSL_TEST_HANDSHAKE_KEY_UPDATE_CLIENT,
+    SSL_TEST_HANDSHAKE_POST_HANDSHAKE_AUTH
 } ssl_handshake_mode_t;
 
 typedef enum {
@@ -107,6 +108,8 @@ typedef struct {
     char *reneg_ciphers;
     char *srp_user;
     char *srp_password;
+    /* Forced PHA */
+    int force_pha;
 } SSL_TEST_CLIENT_CONF;
 
 typedef struct {
@@ -122,6 +125,8 @@ typedef struct {
     /* An SRP user known to the server. */
     char *srp_user;
     char *srp_password;
+    /* Forced PHA */
+    int force_pha;
 } SSL_TEST_SERVER_CONF;
 
 typedef struct {
diff --git a/test/sslapitest.c b/test/sslapitest.c
index a338578..b655fe7 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -3306,6 +3306,65 @@ end:
     return testresult;
 }
 
+#ifndef OPENSSL_NO_TLS1_3
+static int test_pha_key_update(void)
+{
+    SSL_CTX *cctx = NULL, *sctx = NULL;
+    SSL *clientssl = NULL, *serverssl = NULL;
+    int testresult = 0;
+
+    if (!TEST_true(create_ssl_ctx_pair(TLS_server_method(),
+                                       TLS_client_method(),
+                                       &sctx, &cctx, cert, privkey)))
+        return 0;
+
+    if (!TEST_true(SSL_CTX_set_min_proto_version(sctx, TLS1_3_VERSION))
+        || !TEST_true(SSL_CTX_set_max_proto_version(sctx, TLS1_3_VERSION))
+        || !TEST_true(SSL_CTX_set_min_proto_version(cctx, TLS1_3_VERSION))
+        || !TEST_true(SSL_CTX_set_max_proto_version(cctx, TLS1_3_VERSION)))
+        goto end;
+
+
+    if (!TEST_true(create_ssl_objects(sctx, cctx, &serverssl, &clientssl,
+                                      NULL, NULL)))
+        goto end;
+
+    SSL_force_post_handshake_auth(clientssl);
+
+    if (!TEST_true(create_ssl_connection(serverssl, clientssl,
+                                         SSL_ERROR_NONE)))
+        goto end;
+
+    SSL_set_verify(serverssl, SSL_VERIFY_PEER, NULL);
+    if (!TEST_true(SSL_verify_client_post_handshake(serverssl)))
+        goto end;
+
+    if (!TEST_true(SSL_key_update(clientssl, SSL_KEY_UPDATE_NOT_REQUESTED)))
+        goto end;
+
+    /* Start handshake on the server */
+    if (!TEST_int_eq(SSL_do_handshake(serverssl), 1))
+        goto end;
+
+    /* Starts with SSL_connect(), but it's really just SSL_do_handshake() */
+    if (!TEST_true(create_ssl_connection(serverssl, clientssl,
+                                         SSL_ERROR_NONE)))
+        goto end;
+
+    SSL_shutdown(clientssl);
+    SSL_shutdown(serverssl);
+
+    testresult = 1;
+
+ end:
+    SSL_free(serverssl);
+    SSL_free(clientssl);
+    SSL_CTX_free(sctx);
+    SSL_CTX_free(cctx);
+    return testresult;
+}
+#endif
+
 int setup_tests(void)
 {
     if (!TEST_ptr(cert = test_get_argument(0))
@@ -3352,6 +3411,7 @@ int setup_tests(void)
     ADD_TEST(test_tls13_psk);
     ADD_ALL_TESTS(test_custom_exts, 5);
     ADD_TEST(test_stateless);
+    ADD_TEST(test_pha_key_update);
 #else
     ADD_ALL_TESTS(test_custom_exts, 3);
 #endif
diff --git a/util/libssl.num b/util/libssl.num
index abaa5bf..866ff53 100644
--- a/util/libssl.num
+++ b/util/libssl.num
@@ -474,3 +474,5 @@ SSL_CTX_set_tlsext_max_fragment_length  474	1_1_1	EXIST::FUNCTION:
 SSL_set_tlsext_max_fragment_length      475	1_1_1	EXIST::FUNCTION:
 SSL_SESSION_get_max_fragment_length     476	1_1_1	EXIST::FUNCTION:
 SSL_stateless                           477	1_1_1	EXIST::FUNCTION:
+SSL_verify_client_post_handshake        478	1_1_1	EXIST::FUNCTION:
+SSL_force_post_handshake_auth           479	1_1_1	EXIST::FUNCTION:
diff --git a/util/perl/TLSProxy/Message.pm b/util/perl/TLSProxy/Message.pm
index eea272f..0311490 100644
--- a/util/perl/TLSProxy/Message.pm
+++ b/util/perl/TLSProxy/Message.pm
@@ -79,6 +79,7 @@ use constant {
     EXT_SUPPORTED_VERSIONS => 43,
     EXT_COOKIE => 44,
     EXT_PSK_KEX_MODES => 45,
+    EXT_POST_HANDSHAKE_AUTH => 49,
     EXT_SIG_ALGS_CERT => 50,
     EXT_RENEGOTIATE => 65281,
     EXT_NPN => 13172,
diff --git a/util/perl/checkhandshake.pm b/util/perl/checkhandshake.pm
index e1667d5..2f4a296 100644
--- a/util/perl/checkhandshake.pm
+++ b/util/perl/checkhandshake.pm
@@ -53,7 +53,8 @@ use constant {
     KEY_SHARE_SRV_EXTENSION => 0x00020000,
     PSK_KEX_MODES_EXTENSION => 0x00040000,
     KEY_SHARE_HRR_EXTENSION => 0x00080000,
-    SUPPORTED_GROUPS_SRV_EXTENSION => 0x00100000
+    SUPPORTED_GROUPS_SRV_EXTENSION => 0x00100000,
+    POST_HANDSHAKE_AUTH_CLI_EXTENSION => 0x00200000
 };
 
 our @handmessages = ();

From no-reply at appveyor.com  Thu Feb  1 18:15:57 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 01 Feb 2018 18:15:57 +0000
Subject: [openssl-commits] Build completed: openssl master.15317
Message-ID: <20180201181557.1.331CCF3C25E4847F@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/a7c22f58/attachment.html>

From levitte at openssl.org  Thu Feb  1 18:17:31 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 01 Feb 2018 18:17:31 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517509051.246215.10490.nullmailer@dev.openssl.org>

The branch master has been updated
       via  34544072e9bccd4dad958ebeb3caadbb5c5106d0 (commit)
      from  e43e6b1951de931ca500c6964496e76651332f5e (commit)


- Log -----------------------------------------------------------------
commit 34544072e9bccd4dad958ebeb3caadbb5c5106d0
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 1 10:35:59 2018 +0100

    VMS: MMS wants a space before the target / dependecies separator
    
    So as not to be mixed up with a device specification...
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5234)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/descrip.mms.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index 7d8b348..bfeee77 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -553,7 +553,7 @@ configdata.pm : $(SRCDIR)Configure $(SRCDIR)config.com {- join(" ", @{$config{bu
         @ WRITE SYS$OUTPUT "*************************************************"
         @ PIPE ( EXIT %X10000000 )
 
-reconfigure reconf:
+reconfigure reconf :
 	perl configdata.pm -r -v
 
 {-

From rsalz at openssl.org  Thu Feb  1 18:18:51 2018
From: rsalz at openssl.org (Rich Salz)
Date: Thu, 01 Feb 2018 18:18:51 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517509131.425188.12569.nullmailer@dev.openssl.org>

The branch master has been updated
       via  67c836e860c735cf1b039ef52973237fd26b74d6 (commit)
      from  34544072e9bccd4dad958ebeb3caadbb5c5106d0 (commit)


- Log -----------------------------------------------------------------
commit 67c836e860c735cf1b039ef52973237fd26b74d6
Author: Rich Salz <rsalz at openssl.org>
Date:   Thu Feb 1 13:18:32 2018 -0500

    Shorten output by a line
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5238)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Configure b/Configure
index cad25bb..a994876 100755
--- a/Configure
+++ b/Configure
@@ -939,7 +939,7 @@ if ($target eq "HASH") {
     exit 0;
 }
 
-print "Configuring OpenSSL version $config{version} ($config{version_num})\n";
+print "Configuring OpenSSL version $config{version} ($config{version_num}) ";
 print "for $target\n";
 
 # Backward compatibility?

From rsalz at openssl.org  Thu Feb  1 18:23:21 2018
From: rsalz at openssl.org (Rich Salz)
Date: Thu, 01 Feb 2018 18:23:21 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517509401.196692.17544.nullmailer@dev.openssl.org>

The branch master has been updated
       via  3c5a61dd0f9d9a9eac098419bcaf47d1c296ca81 (commit)
      from  67c836e860c735cf1b039ef52973237fd26b74d6 (commit)


- Log -----------------------------------------------------------------
commit 3c5a61dd0f9d9a9eac098419bcaf47d1c296ca81
Author: Michael Richardson <mcr at sandelman.ca>
Date:   Thu Feb 1 13:22:48 2018 -0500

    Add OPENSSL_VERSION_AT_LEAST
    
    added macro to create version number
    use the macro to build OPENSSL_VERSION_AT_LEAST(maj,min,fix) so that
    customers of libssl (such as ruby-openssl) do not need to be so aware of
    openssl version numbers.
    includes updates to ssl(7) and OPENSSL_VERSION_NUMBER(3) man page
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5212)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/OPENSSL_VERSION_NUMBER.pod | 5 +++++
 doc/man7/ssl.pod                    | 6 ++++++
 include/openssl/opensslv.h          | 5 +++++
 3 files changed, 16 insertions(+)

diff --git a/doc/man3/OPENSSL_VERSION_NUMBER.pod b/doc/man3/OPENSSL_VERSION_NUMBER.pod
index 6eca113..d5842c0 100644
--- a/doc/man3/OPENSSL_VERSION_NUMBER.pod
+++ b/doc/man3/OPENSSL_VERSION_NUMBER.pod
@@ -47,6 +47,11 @@ number was therefore 0x0090581f.
 
 OpenSSL_version_num() returns the version number.
 
+The macro OPENSSL_VERSION_AT_LEAST(major,minor) can be used at compile
+time test if the current version is at least as new as the version provided.
+The arguments major, minor and fix correspond to the version information
+as given above.
+
 OpenSSL_version() returns different strings depending on B<t>:
 
 =over 4
diff --git a/doc/man7/ssl.pod b/doc/man7/ssl.pod
index 724fc78..066b325 100644
--- a/doc/man7/ssl.pod
+++ b/doc/man7/ssl.pod
@@ -89,6 +89,12 @@ includes both more private SSL headers and headers from the B<crypto> library.
 Whenever you need hard-core details on the internals of the SSL API, look
 inside this header file.
 
+OPENSSL_VERSION_AT_LEAST(major,minor) can be
+used in C<#if> statements in order to determine which version of the library is
+being used. This can be used to either enable optional features at compile
+time, or work around issues with a previous version.
+See L<OPENSSL_VERSION_NUMBER(3)>.
+
 =item B<ssl2.h>
 
 Unused. Present for backwards compatibility only.
diff --git a/include/openssl/opensslv.h b/include/openssl/opensslv.h
index c6e15a5..420a1c9 100644
--- a/include/openssl/opensslv.h
+++ b/include/openssl/opensslv.h
@@ -42,6 +42,11 @@ extern "C" {
 # define OPENSSL_VERSION_NUMBER  0x10101000L
 # define OPENSSL_VERSION_TEXT    "OpenSSL 1.1.1-dev  xx XXX xxxx"
 
+#define OPENSSL_MAKE_VERSION(maj,min,fix,patch) ((0x10000000L)+((maj&0xff)<<20)+((min&0xff)<<12)+((fix&0xff)<<4)+patch)
+
+/* use this for #if tests, should never depend upon fix/patch */
+#define OPENSSL_VERSION_AT_LEAST(maj,min) (OPENSSL_MAKE_VERSION(maj,min, 0, 0) >= OPENSSL_VERSION_NUMBER)
+
 /*-
  * The macros below are to be used for shared library (.so, .dll, ...)
  * versioning.  That kind of versioning works a bit differently between

From builds at travis-ci.org  Thu Feb  1 17:53:47 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 17:53:47 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16024 (master -
	e43e6b1)
In-Reply-To: <openssl/openssl+336201545+still failing@travis-ci.org>
Message-ID: <5a73542b210cf_43f99ee3fba70146079@6f1e7807-ba31-4302-beba-07cf17cd0e30.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16024
Status: Still Failing

Duration: 33 minutes and 21 seconds
Commit: e43e6b1 (master)
Author: Todd Short
Message: Fix some minor code nits

Reviewed-by: Ben Kaduk <kaduk at mit.edu>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4964)

View the changeset: https://github.com/openssl/openssl/compare/848a950b715f...e43e6b1951de

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336201545?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/f0500030/attachment.html>

From rsalz at openssl.org  Thu Feb  1 18:27:43 2018
From: rsalz at openssl.org (Rich Salz)
Date: Thu, 01 Feb 2018 18:27:43 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1517509663.057882.22619.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  d8adfdcd2e5de23f3e1d1a1d10c2fda6f4a65c4a (commit)
      from  d4577a1474cd67afbfa5a48729c979180144b9d6 (commit)


- Log -----------------------------------------------------------------
commit d8adfdcd2e5de23f3e1d1a1d10c2fda6f4a65c4a
Author: Michael Richardson <mcr at sandelman.ca>
Date:   Thu Feb 1 13:22:48 2018 -0500

    Add OPENSSL_VERSION_AT_LEAST
    
    added macro to create version number
    use the macro to build OPENSSL_VERSION_AT_LEAST(maj,min,fix) so that
    customers of libssl (such as ruby-openssl) do not need to be so aware of
    openssl version numbers.
    includes updates to ssl(7) and OPENSSL_VERSION_NUMBER(3) man page
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5212)
    (cherry picked from commit 3c5a61dd0f9d9a9eac098419bcaf47d1c296ca81)

-----------------------------------------------------------------------

Summary of changes:
 doc/crypto/OPENSSL_VERSION_NUMBER.pod | 5 +++++
 doc/ssl/ssl.pod                       | 6 ++++++
 include/openssl/opensslv.h            | 5 +++++
 3 files changed, 16 insertions(+)

diff --git a/doc/crypto/OPENSSL_VERSION_NUMBER.pod b/doc/crypto/OPENSSL_VERSION_NUMBER.pod
index 9cc1ed1..6e23abf 100644
--- a/doc/crypto/OPENSSL_VERSION_NUMBER.pod
+++ b/doc/crypto/OPENSSL_VERSION_NUMBER.pod
@@ -47,6 +47,11 @@ number was therefore 0x0090581f.
 
 OpenSSL_version_num() returns the version number.
 
+The macro OPENSSL_VERSION_AT_LEAST(major,minor) can be used at compile
+time test if the current version is at least as new as the version provided.
+The arguments major, minor and fix correspond to the version information
+as given above.
+
 OpenSSL_version() returns different strings depending on B<t>:
 
 =over 4
diff --git a/doc/ssl/ssl.pod b/doc/ssl/ssl.pod
index daee30d..3b17ec1 100644
--- a/doc/ssl/ssl.pod
+++ b/doc/ssl/ssl.pod
@@ -91,6 +91,12 @@ includes both more private SSL headers and headers from the B<crypto> library.
 Whenever you need hard-core details on the internals of the SSL API, look
 inside this header file.
 
+OPENSSL_VERSION_AT_LEAST(major,minor) can be
+used in C<#if> statements in order to determine which version of the library is
+being used. This can be used to either enable optional features at compile
+time, or work around issues with a previous version.
+See L<OPENSSL_VERSION_NUMBER(3)>.
+
 =item B<ssl2.h>
 
 Unused. Present for backwards compatibility only.
diff --git a/include/openssl/opensslv.h b/include/openssl/opensslv.h
index 47cb0bf..a7a0136 100644
--- a/include/openssl/opensslv.h
+++ b/include/openssl/opensslv.h
@@ -46,6 +46,11 @@ extern "C" {
 #  define OPENSSL_VERSION_TEXT    "OpenSSL 1.1.0h-dev  xx XXX xxxx"
 # endif
 
+#define OPENSSL_MAKE_VERSION(maj,min,fix,patch) ((0x10000000L)+((maj&0xff)<<20)+((min&0xff)<<12)+((fix&0xff)<<4)+patch)
+
+/* use this for #if tests, should never depend upon fix/patch */
+#define OPENSSL_VERSION_AT_LEAST(maj,min) (OPENSSL_MAKE_VERSION(maj,min, 0, 0) >= OPENSSL_VERSION_NUMBER)
+
 /*-
  * The macros below are to be used for shared library (.so, .dll, ...)
  * versioning.  That kind of versioning works a bit differently between

From builds at travis-ci.org  Thu Feb  1 18:48:26 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 18:48:26 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16027 (master -
	3454407)
In-Reply-To: <openssl/openssl+336224446+still failing@travis-ci.org>
Message-ID: <5a7360fa7a8be_43f99ee3fba701544139@6f1e7807-ba31-4302-beba-07cf17cd0e30.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16027
Status: Still Failing

Duration: 30 minutes and 3 seconds
Commit: 3454407 (master)
Author: Richard Levitte
Message: VMS: MMS wants a space before the target / dependecies separator

So as not to be mixed up with a device specification...

Reviewed-by: Tim Hudson <tjh at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5234)

View the changeset: https://github.com/openssl/openssl/compare/e43e6b1951de...34544072e9bc

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336224446?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/78834762/attachment.html>

From builds at travis-ci.org  Thu Feb  1 19:03:12 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 19:03:12 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16028 (master -
	67c836e)
In-Reply-To: <openssl/openssl+336224843+still failing@travis-ci.org>
Message-ID: <5a73647067208_43f99f0a24468156613e@6f1e7807-ba31-4302-beba-07cf17cd0e30.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16028
Status: Still Failing

Duration: 38 minutes and 36 seconds
Commit: 67c836e (master)
Author: Rich Salz
Message: Shorten output by a line

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5238)

View the changeset: https://github.com/openssl/openssl/compare/34544072e9bc...67c836e860c7

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336224843?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/448bed47/attachment.html>

From builds at travis-ci.org  Thu Feb  1 19:17:05 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 19:17:05 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16029 (master -
	3c5a61d)
In-Reply-To: <openssl/openssl+336226632+still failing@travis-ci.org>
Message-ID: <5a7367b1c4b72_43fc62c152070182417@9cde2705-86f2-43ab-a9e0-15a89b8526cf.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16029
Status: Still Failing

Duration: 37 minutes and 32 seconds
Commit: 3c5a61d (master)
Author: Michael Richardson
Message: Add OPENSSL_VERSION_AT_LEAST

added macro to create version number
use the macro to build OPENSSL_VERSION_AT_LEAST(maj,min,fix) so that
customers of libssl (such as ruby-openssl) do not need to be so aware of
openssl version numbers.
includes updates to ssl(7) and OPENSSL_VERSION_NUMBER(3) man page

Reviewed-by: Richard Levitte <levitte at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5212)

View the changeset: https://github.com/openssl/openssl/compare/67c836e860c7...3c5a61dd0f9d

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336226632?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/9251013d/attachment-0001.html>

From appro at openssl.org  Thu Feb  1 20:46:11 2018
From: appro at openssl.org (Andy Polyakov)
Date: Thu, 01 Feb 2018 20:46:11 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1517517971.036272.31057.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  723183b5640e9b047acac189c7c7fb78575522d4 (commit)
       via  0b9373ce3c2d39d9a88634913b8191ad4f7a453c (commit)
      from  d8adfdcd2e5de23f3e1d1a1d10c2fda6f4a65c4a (commit)


- Log -----------------------------------------------------------------
commit 723183b5640e9b047acac189c7c7fb78575522d4
Author: David Benjamin <davidben at google.com>
Date:   Tue Jan 23 13:57:10 2018 -0500

    Don't leak the exponent bit width in BN_mod_exp_mont_consttime.
    
    The exponent here is one of d, dmp1, or dmq1 for RSA. This value and its
    bit length are both secret. The only public upper bound is the bit width
    of the corresponding modulus (RSA n, p, and q, respectively).
    
    Although BN_num_bits is constant-time (sort of; see bn_correct_top notes
    in preceding patch), this does not fix the root problem, which is that
    the windows are based on the minimal bit width, not the upper bound. We
    could use BN_num_bits(m), but BN_mod_exp_mont_consttime is public API
    and may be called with larger exponents. Instead, use all top*BN_BITS2
    bits in the BIGNUM. This is still sensitive to the long-standing
    bn_correct_top leak, but we need to fix that regardless.
    
    This may cause us to do a handful of extra multiplications for RSA keys
    which are just above a whole number of words, but that is not a standard
    RSA key size.
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5154)
    
    (cherry picked from commit 39eeb64f59ff838f976ad305de7d15747d47a41c)

commit 0b9373ce3c2d39d9a88634913b8191ad4f7a453c
Author: David Benjamin <davidben at google.com>
Date:   Tue Jan 23 13:46:53 2018 -0500

    Make BN_num_bits_word constant-time.
    
    (This patch was written by Andy Polyakov. I only wrote the commit
    message. Mistakes in the analysis are my fault.)
    
    BN_num_bits, by way of BN_num_bits_word, currently leaks the
    most-significant word of its argument via branching and memory access
    pattern.
    
    BN_num_bits is called on RSA prime factors in various places. These have
    public bit lengths, but all bits beyond the high bit are secret. This
    fully resolves those cases.
    
    There are a few places where BN_num_bits is called on an input where the
    bit length is also secret. This does *not* fully resolve those cases as
    we still only look at the top word. Today, that is guaranteed to be
    non-zero, but only because of the long-standing bn_correct_top timing
    leak. Once that is fixed, a constant-time BN_num_bits on such inputs
    must count bits on each word.
    
    Instead, those cases should not call BN_num_bits at all. In particular,
    BN_mod_exp_mont_consttime uses the exponent bit width to pick windows,
    but it should be using the maximum bit width. The next patch will fix
    this.
    
    Thanks to Dinghao Wu, Danfeng Zhang, Shuai Wang, Pei Wang, and Xiao Liu
    for reporting this issue.
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5154)
    
    (cherry picked from commit 972c87dfc7e765bd28a4964519c362f0d3a58ca4)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/bn_exp.c |   6 ++-
 crypto/bn/bn_lib.c | 107 ++++++++++++++++++++---------------------------------
 2 files changed, 45 insertions(+), 68 deletions(-)

diff --git a/crypto/bn/bn_exp.c b/crypto/bn/bn_exp.c
index 7ebaeb0..8073368 100644
--- a/crypto/bn/bn_exp.c
+++ b/crypto/bn/bn_exp.c
@@ -633,7 +633,11 @@ int BN_mod_exp_mont_consttime(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
 
     top = m->top;
 
-    bits = BN_num_bits(p);
+    /*
+     * Use all bits stored in |p|, rather than |BN_num_bits|, so we do not leak
+     * whether the top bits are zero.
+     */
+    bits = p->top * BN_BITS2;
     if (bits == 0) {
         /* x**0 mod 1 is still zero. */
         if (BN_is_one(m)) {
diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c
index b8d4468..6081e88 100644
--- a/crypto/bn/bn_lib.c
+++ b/crypto/bn/bn_lib.c
@@ -88,74 +88,47 @@ const BIGNUM *BN_value_one(void)
 
 int BN_num_bits_word(BN_ULONG l)
 {
-    static const unsigned char bits[256] = {
-        0, 1, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 4, 4, 4, 4,
-        5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5,
-        6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
-        6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-    };
-
-#if defined(SIXTY_FOUR_BIT_LONG)
-    if (l & 0xffffffff00000000L) {
-        if (l & 0xffff000000000000L) {
-            if (l & 0xff00000000000000L) {
-                return (bits[(int)(l >> 56)] + 56);
-            } else
-                return (bits[(int)(l >> 48)] + 48);
-        } else {
-            if (l & 0x0000ff0000000000L) {
-                return (bits[(int)(l >> 40)] + 40);
-            } else
-                return (bits[(int)(l >> 32)] + 32);
-        }
-    } else
-#else
-# ifdef SIXTY_FOUR_BIT
-    if (l & 0xffffffff00000000LL) {
-        if (l & 0xffff000000000000LL) {
-            if (l & 0xff00000000000000LL) {
-                return (bits[(int)(l >> 56)] + 56);
-            } else
-                return (bits[(int)(l >> 48)] + 48);
-        } else {
-            if (l & 0x0000ff0000000000LL) {
-                return (bits[(int)(l >> 40)] + 40);
-            } else
-                return (bits[(int)(l >> 32)] + 32);
-        }
-    } else
-# endif
-#endif
-    {
-#if defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
-        if (l & 0xffff0000L) {
-            if (l & 0xff000000L)
-                return (bits[(int)(l >> 24L)] + 24);
-            else
-                return (bits[(int)(l >> 16L)] + 16);
-        } else
+    BN_ULONG x, mask;
+    int bits = (l != 0);
+
+#if BN_BITS2 > 32
+    x = l >> 32;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 32 & mask;
+    l ^= (x ^ l) & mask;
 #endif
-        {
-#if defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
-            if (l & 0xff00L)
-                return (bits[(int)(l >> 8)] + 8);
-            else
-#endif
-                return (bits[(int)(l)]);
-        }
-    }
+
+    x = l >> 16;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 16 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 8;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 8 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 4;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 4 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 2;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 2 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 1;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 1 & mask;
+
+    return bits;
 }
 
 int BN_num_bits(const BIGNUM *a)

From appro at openssl.org  Thu Feb  1 20:46:11 2018
From: appro at openssl.org (Andy Polyakov)
Date: Thu, 01 Feb 2018 20:46:11 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517517971.131544.31080.nullmailer@dev.openssl.org>

The branch master has been updated
       via  39eeb64f59ff838f976ad305de7d15747d47a41c (commit)
       via  972c87dfc7e765bd28a4964519c362f0d3a58ca4 (commit)
      from  3c5a61dd0f9d9a9eac098419bcaf47d1c296ca81 (commit)


- Log -----------------------------------------------------------------
commit 39eeb64f59ff838f976ad305de7d15747d47a41c
Author: David Benjamin <davidben at google.com>
Date:   Tue Jan 23 13:57:10 2018 -0500

    Don't leak the exponent bit width in BN_mod_exp_mont_consttime.
    
    The exponent here is one of d, dmp1, or dmq1 for RSA. This value and its
    bit length are both secret. The only public upper bound is the bit width
    of the corresponding modulus (RSA n, p, and q, respectively).
    
    Although BN_num_bits is constant-time (sort of; see bn_correct_top notes
    in preceding patch), this does not fix the root problem, which is that
    the windows are based on the minimal bit width, not the upper bound. We
    could use BN_num_bits(m), but BN_mod_exp_mont_consttime is public API
    and may be called with larger exponents. Instead, use all top*BN_BITS2
    bits in the BIGNUM. This is still sensitive to the long-standing
    bn_correct_top leak, but we need to fix that regardless.
    
    This may cause us to do a handful of extra multiplications for RSA keys
    which are just above a whole number of words, but that is not a standard
    RSA key size.
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5154)

commit 972c87dfc7e765bd28a4964519c362f0d3a58ca4
Author: David Benjamin <davidben at google.com>
Date:   Tue Jan 23 13:46:53 2018 -0500

    Make BN_num_bits_word constant-time.
    
    (This patch was written by Andy Polyakov. I only wrote the commit
    message. Mistakes in the analysis are my fault.)
    
    BN_num_bits, by way of BN_num_bits_word, currently leaks the
    most-significant word of its argument via branching and memory access
    pattern.
    
    BN_num_bits is called on RSA prime factors in various places. These have
    public bit lengths, but all bits beyond the high bit are secret. This
    fully resolves those cases.
    
    There are a few places where BN_num_bits is called on an input where the
    bit length is also secret. This does *not* fully resolve those cases as
    we still only look at the top word. Today, that is guaranteed to be
    non-zero, but only because of the long-standing bn_correct_top timing
    leak. Once that is fixed, a constant-time BN_num_bits on such inputs
    must count bits on each word.
    
    Instead, those cases should not call BN_num_bits at all. In particular,
    BN_mod_exp_mont_consttime uses the exponent bit width to pick windows,
    but it should be using the maximum bit width. The next patch will fix
    this.
    
    Thanks to Dinghao Wu, Danfeng Zhang, Shuai Wang, Pei Wang, and Xiao Liu
    for reporting this issue.
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5154)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/bn_exp.c |   6 ++-
 crypto/bn/bn_lib.c | 107 ++++++++++++++++++++---------------------------------
 2 files changed, 45 insertions(+), 68 deletions(-)

diff --git a/crypto/bn/bn_exp.c b/crypto/bn/bn_exp.c
index 69970e6..b786bf0 100644
--- a/crypto/bn/bn_exp.c
+++ b/crypto/bn/bn_exp.c
@@ -623,7 +623,11 @@ int BN_mod_exp_mont_consttime(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
 
     top = m->top;
 
-    bits = BN_num_bits(p);
+    /*
+     * Use all bits stored in |p|, rather than |BN_num_bits|, so we do not leak
+     * whether the top bits are zero.
+     */
+    bits = p->top * BN_BITS2;
     if (bits == 0) {
         /* x**0 mod 1 is still zero. */
         if (BN_is_one(m)) {
diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c
index b9f19d8..57fe452 100644
--- a/crypto/bn/bn_lib.c
+++ b/crypto/bn/bn_lib.c
@@ -88,74 +88,47 @@ const BIGNUM *BN_value_one(void)
 
 int BN_num_bits_word(BN_ULONG l)
 {
-    static const unsigned char bits[256] = {
-        0, 1, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 4, 4, 4, 4,
-        5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5,
-        6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
-        6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-    };
-
-#if defined(SIXTY_FOUR_BIT_LONG)
-    if (l & 0xffffffff00000000L) {
-        if (l & 0xffff000000000000L) {
-            if (l & 0xff00000000000000L) {
-                return (bits[(int)(l >> 56)] + 56);
-            } else
-                return (bits[(int)(l >> 48)] + 48);
-        } else {
-            if (l & 0x0000ff0000000000L) {
-                return (bits[(int)(l >> 40)] + 40);
-            } else
-                return (bits[(int)(l >> 32)] + 32);
-        }
-    } else
-#else
-# ifdef SIXTY_FOUR_BIT
-    if (l & 0xffffffff00000000LL) {
-        if (l & 0xffff000000000000LL) {
-            if (l & 0xff00000000000000LL) {
-                return (bits[(int)(l >> 56)] + 56);
-            } else
-                return (bits[(int)(l >> 48)] + 48);
-        } else {
-            if (l & 0x0000ff0000000000LL) {
-                return (bits[(int)(l >> 40)] + 40);
-            } else
-                return (bits[(int)(l >> 32)] + 32);
-        }
-    } else
-# endif
-#endif
-    {
-#if defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
-        if (l & 0xffff0000L) {
-            if (l & 0xff000000L)
-                return (bits[(int)(l >> 24L)] + 24);
-            else
-                return (bits[(int)(l >> 16L)] + 16);
-        } else
-#endif
-        {
-#if defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
-            if (l & 0xff00L)
-                return (bits[(int)(l >> 8)] + 8);
-            else
+    BN_ULONG x, mask;
+    int bits = (l != 0);
+
+#if BN_BITS2 > 32
+    x = l >> 32;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 32 & mask;
+    l ^= (x ^ l) & mask;
 #endif
-                return (bits[(int)(l)]);
-        }
-    }
+
+    x = l >> 16;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 16 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 8;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 8 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 4;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 4 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 2;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 2 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 1;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 1 & mask;
+
+    return bits;
 }
 
 int BN_num_bits(const BIGNUM *a)

From appro at openssl.org  Thu Feb  1 20:48:11 2018
From: appro at openssl.org (Andy Polyakov)
Date: Thu, 01 Feb 2018 20:48:11 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1517518091.502376.2105.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  4981e6fc1da4aec6775fc248643c91dd1e87e0b7 (commit)
       via  66509ddbd00179e8be58d54cf5576fb6b74d0131 (commit)
      from  d498e526832bd6c50238f3dc0bcac9375179926e (commit)


- Log -----------------------------------------------------------------
commit 4981e6fc1da4aec6775fc248643c91dd1e87e0b7
Author: David Benjamin <davidben at google.com>
Date:   Tue Jan 23 13:57:10 2018 -0500

    Don't leak the exponent bit width in BN_mod_exp_mont_consttime.
    
    The exponent here is one of d, dmp1, or dmq1 for RSA. This value and its
    bit length are both secret. The only public upper bound is the bit width
    of the corresponding modulus (RSA n, p, and q, respectively).
    
    Although BN_num_bits is constant-time (sort of; see bn_correct_top notes
    in preceding patch), this does not fix the root problem, which is that
    the windows are based on the minimal bit width, not the upper bound. We
    could use BN_num_bits(m), but BN_mod_exp_mont_consttime is public API
    and may be called with larger exponents. Instead, use all top*BN_BITS2
    bits in the BIGNUM. This is still sensitive to the long-standing
    bn_correct_top leak, but we need to fix that regardless.
    
    This may cause us to do a handful of extra multiplications for RSA keys
    which are just above a whole number of words, but that is not a standard
    RSA key size.
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5154)
    
    (cherry picked from commit 39eeb64f59ff838f976ad305de7d15747d47a41c)

commit 66509ddbd00179e8be58d54cf5576fb6b74d0131
Author: David Benjamin <davidben at google.com>
Date:   Tue Jan 23 13:46:53 2018 -0500

    Make BN_num_bits_word constant-time.
    
    (This patch was written by Andy Polyakov. I only wrote the commit
    message. Mistakes in the analysis are my fault.)
    
    BN_num_bits, by way of BN_num_bits_word, currently leaks the
    most-significant word of its argument via branching and memory access
    pattern.
    
    BN_num_bits is called on RSA prime factors in various places. These have
    public bit lengths, but all bits beyond the high bit are secret. This
    fully resolves those cases.
    
    There are a few places where BN_num_bits is called on an input where the
    bit length is also secret. This does *not* fully resolve those cases as
    we still only look at the top word. Today, that is guaranteed to be
    non-zero, but only because of the long-standing bn_correct_top timing
    leak. Once that is fixed, a constant-time BN_num_bits on such inputs
    must count bits on each word.
    
    Instead, those cases should not call BN_num_bits at all. In particular,
    BN_mod_exp_mont_consttime uses the exponent bit width to pick windows,
    but it should be using the maximum bit width. The next patch will fix
    this.
    
    Thanks to Dinghao Wu, Danfeng Zhang, Shuai Wang, Pei Wang, and Xiao Liu
    for reporting this issue.
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5154)
    
    (cherry picked from commit 972c87dfc7e765bd28a4964519c362f0d3a58ca4)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/bn_exp.c |   6 ++-
 crypto/bn/bn_lib.c | 107 ++++++++++++++++++++---------------------------------
 2 files changed, 45 insertions(+), 68 deletions(-)

diff --git a/crypto/bn/bn_exp.c b/crypto/bn/bn_exp.c
index c4b63e4..9fc545a 100644
--- a/crypto/bn/bn_exp.c
+++ b/crypto/bn/bn_exp.c
@@ -727,7 +727,11 @@ int BN_mod_exp_mont_consttime(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
 
     top = m->top;
 
-    bits = BN_num_bits(p);
+    /*
+     * Use all bits stored in |p|, rather than |BN_num_bits|, so we do not leak
+     * whether the top bits are zero.
+     */
+    bits = p->top * BN_BITS2;
     if (bits == 0) {
         /* x**0 mod 1 is still zero. */
         if (BN_is_one(m)) {
diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c
index 10b78f5..27b9bdb 100644
--- a/crypto/bn/bn_lib.c
+++ b/crypto/bn/bn_lib.c
@@ -144,74 +144,47 @@ const BIGNUM *BN_value_one(void)
 
 int BN_num_bits_word(BN_ULONG l)
 {
-    static const unsigned char bits[256] = {
-        0, 1, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 4, 4, 4, 4,
-        5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5,
-        6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
-        6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-        8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8,
-    };
-
-#if defined(SIXTY_FOUR_BIT_LONG)
-    if (l & 0xffffffff00000000L) {
-        if (l & 0xffff000000000000L) {
-            if (l & 0xff00000000000000L) {
-                return (bits[(int)(l >> 56)] + 56);
-            } else
-                return (bits[(int)(l >> 48)] + 48);
-        } else {
-            if (l & 0x0000ff0000000000L) {
-                return (bits[(int)(l >> 40)] + 40);
-            } else
-                return (bits[(int)(l >> 32)] + 32);
-        }
-    } else
-#else
-# ifdef SIXTY_FOUR_BIT
-    if (l & 0xffffffff00000000LL) {
-        if (l & 0xffff000000000000LL) {
-            if (l & 0xff00000000000000LL) {
-                return (bits[(int)(l >> 56)] + 56);
-            } else
-                return (bits[(int)(l >> 48)] + 48);
-        } else {
-            if (l & 0x0000ff0000000000LL) {
-                return (bits[(int)(l >> 40)] + 40);
-            } else
-                return (bits[(int)(l >> 32)] + 32);
-        }
-    } else
-# endif
-#endif
-    {
-#if defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
-        if (l & 0xffff0000L) {
-            if (l & 0xff000000L)
-                return (bits[(int)(l >> 24L)] + 24);
-            else
-                return (bits[(int)(l >> 16L)] + 16);
-        } else
+    BN_ULONG x, mask;
+    int bits = (l != 0);
+
+#if BN_BITS2 > 32
+    x = l >> 32;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 32 & mask;
+    l ^= (x ^ l) & mask;
 #endif
-        {
-#if defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
-            if (l & 0xff00L)
-                return (bits[(int)(l >> 8)] + 8);
-            else
-#endif
-                return (bits[(int)(l)]);
-        }
-    }
+
+    x = l >> 16;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 16 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 8;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 8 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 4;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 4 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 2;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 2 & mask;
+    l ^= (x ^ l) & mask;
+
+    x = l >> 1;
+    mask = (0 - x) & BN_MASK2;
+    mask = (0 - (mask >> (BN_BITS2 - 1)));
+    bits += 1 & mask;
+
+    return bits;
 }
 
 int BN_num_bits(const BIGNUM *a)

From appro at openssl.org  Thu Feb  1 20:53:10 2018
From: appro at openssl.org (Andy Polyakov)
Date: Thu, 01 Feb 2018 20:53:10 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517518390.319396.7805.nullmailer@dev.openssl.org>

The branch master has been updated
       via  f345b1f39d9b4e4c9ef07e7522e9b2a870c9ca09 (commit)
      from  39eeb64f59ff838f976ad305de7d15747d47a41c (commit)


- Log -----------------------------------------------------------------
commit f345b1f39d9b4e4c9ef07e7522e9b2a870c9ca09
Author: David Benjamin <davidben at google.com>
Date:   Wed Jan 31 14:47:41 2018 -0500

    Fix timing leak in BN_from_montgomery_word.
    
    BN_from_montgomery_word doesn't have a constant memory access pattern.
    Replace the pointer trick with a constant-time select. There is, of
    course, still the bn_correct_top leak pervasive in BIGNUM itself.
    
    See also https://boringssl-review.googlesource.com/22904 from BoringSSL.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5228)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/bn_mont.c | 57 +++++++++++++++++++----------------------------------
 1 file changed, 20 insertions(+), 37 deletions(-)

diff --git a/crypto/bn/bn_mont.c b/crypto/bn/bn_mont.c
index 2119bfa..6357c60 100644
--- a/crypto/bn/bn_mont.c
+++ b/crypto/bn/bn_mont.c
@@ -101,6 +101,11 @@ static int BN_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont)
     r->top = max;
     n0 = mont->n0[0];
 
+    /*
+     * Add multiples of |n| to |r| until R = 2^(nl * BN_BITS2) divides it. On
+     * input, we had |r| < |n| * R, so now |r| < 2 * |n| * R. Note that |r|
+     * includes |carry| which is stored separately.
+     */
     for (carry = 0, i = 0; i < nl; i++, rp++) {
         v = bn_mul_add_words(rp, np, nl, (rp[0] * n0) & BN_MASK2);
         v = (v + carry + rp[nl]) & BN_MASK2;
@@ -115,46 +120,24 @@ static int BN_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont)
     ret->neg = r->neg;
 
     rp = ret->d;
-    ap = &(r->d[nl]);
 
-# define BRANCH_FREE 1
-# if BRANCH_FREE
-    {
-        BN_ULONG *nrp;
-        size_t m;
+    /*
+     * Shift |nl| words to divide by R. We have |ap| < 2 * |n|. Note that |ap|
+     * includes |carry| which is stored separately.
+     */
+    ap = &(r->d[nl]);
 
-        v = bn_sub_words(rp, ap, np, nl) - carry;
-        /*
-         * if subtraction result is real, then trick unconditional memcpy
-         * below to perform in-place "refresh" instead of actual copy.
-         */
-        m = (0 - (size_t)v);
-        nrp =
-            (BN_ULONG *)(((PTR_SIZE_INT) rp & ~m) | ((PTR_SIZE_INT) ap & m));
-
-        for (i = 0, nl -= 4; i < nl; i += 4) {
-            BN_ULONG t1, t2, t3, t4;
-
-            t1 = nrp[i + 0];
-            t2 = nrp[i + 1];
-            t3 = nrp[i + 2];
-            ap[i + 0] = 0;
-            t4 = nrp[i + 3];
-            ap[i + 1] = 0;
-            rp[i + 0] = t1;
-            ap[i + 2] = 0;
-            rp[i + 1] = t2;
-            ap[i + 3] = 0;
-            rp[i + 2] = t3;
-            rp[i + 3] = t4;
-        }
-        for (nl += 4; i < nl; i++)
-            rp[i] = nrp[i], ap[i] = 0;
+    /*
+     * |v| is one if |ap| - |np| underflowed or zero if it did not. Note |v|
+     * cannot be -1. That would imply the subtraction did not fit in |nl| words,
+     * and we know at most one subtraction is needed.
+     */
+    v = bn_sub_words(rp, ap, np, nl) - carry;
+    v = 0 - v;
+    for (i = 0; i < nl; i++) {
+        rp[i] = (v & ap[i]) | (~v & rp[i]);
+        ap[i] = 0;
     }
-# else
-    if (bn_sub_words(rp, ap, np, nl) - carry)
-        memcpy(rp, ap, nl * sizeof(BN_ULONG));
-# endif
     bn_correct_top(r);
     bn_correct_top(ret);
     bn_check_top(ret);

From appro at openssl.org  Thu Feb  1 20:54:06 2018
From: appro at openssl.org (Andy Polyakov)
Date: Thu, 01 Feb 2018 20:54:06 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1517518446.382803.9324.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  db91094a49b370acf03cf6adfcacf2256b8bd153 (commit)
      from  723183b5640e9b047acac189c7c7fb78575522d4 (commit)


- Log -----------------------------------------------------------------
commit db91094a49b370acf03cf6adfcacf2256b8bd153
Author: David Benjamin <davidben at google.com>
Date:   Wed Jan 31 14:47:41 2018 -0500

    Fix timing leak in BN_from_montgomery_word.
    
    BN_from_montgomery_word doesn't have a constant memory access pattern.
    Replace the pointer trick with a constant-time select. There is, of
    course, still the bn_correct_top leak pervasive in BIGNUM itself.
    
    See also https://boringssl-review.googlesource.com/22904 from BoringSSL.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5228)
    
    (cherry picked from commit f345b1f39d9b4e4c9ef07e7522e9b2a870c9ca09)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/bn_mont.c | 57 +++++++++++++++++++----------------------------------
 1 file changed, 20 insertions(+), 37 deletions(-)

diff --git a/crypto/bn/bn_mont.c b/crypto/bn/bn_mont.c
index 90e1ba2..65889bf 100644
--- a/crypto/bn/bn_mont.c
+++ b/crypto/bn/bn_mont.c
@@ -101,6 +101,11 @@ static int BN_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont)
     r->top = max;
     n0 = mont->n0[0];
 
+    /*
+     * Add multiples of |n| to |r| until R = 2^(nl * BN_BITS2) divides it. On
+     * input, we had |r| < |n| * R, so now |r| < 2 * |n| * R. Note that |r|
+     * includes |carry| which is stored separately.
+     */
     for (carry = 0, i = 0; i < nl; i++, rp++) {
         v = bn_mul_add_words(rp, np, nl, (rp[0] * n0) & BN_MASK2);
         v = (v + carry + rp[nl]) & BN_MASK2;
@@ -115,46 +120,24 @@ static int BN_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont)
     ret->neg = r->neg;
 
     rp = ret->d;
-    ap = &(r->d[nl]);
 
-# define BRANCH_FREE 1
-# if BRANCH_FREE
-    {
-        BN_ULONG *nrp;
-        size_t m;
+    /*
+     * Shift |nl| words to divide by R. We have |ap| < 2 * |n|. Note that |ap|
+     * includes |carry| which is stored separately.
+     */
+    ap = &(r->d[nl]);
 
-        v = bn_sub_words(rp, ap, np, nl) - carry;
-        /*
-         * if subtraction result is real, then trick unconditional memcpy
-         * below to perform in-place "refresh" instead of actual copy.
-         */
-        m = (0 - (size_t)v);
-        nrp =
-            (BN_ULONG *)(((PTR_SIZE_INT) rp & ~m) | ((PTR_SIZE_INT) ap & m));
-
-        for (i = 0, nl -= 4; i < nl; i += 4) {
-            BN_ULONG t1, t2, t3, t4;
-
-            t1 = nrp[i + 0];
-            t2 = nrp[i + 1];
-            t3 = nrp[i + 2];
-            ap[i + 0] = 0;
-            t4 = nrp[i + 3];
-            ap[i + 1] = 0;
-            rp[i + 0] = t1;
-            ap[i + 2] = 0;
-            rp[i + 1] = t2;
-            ap[i + 3] = 0;
-            rp[i + 2] = t3;
-            rp[i + 3] = t4;
-        }
-        for (nl += 4; i < nl; i++)
-            rp[i] = nrp[i], ap[i] = 0;
+    /*
+     * |v| is one if |ap| - |np| underflowed or zero if it did not. Note |v|
+     * cannot be -1. That would imply the subtraction did not fit in |nl| words,
+     * and we know at most one subtraction is needed.
+     */
+    v = bn_sub_words(rp, ap, np, nl) - carry;
+    v = 0 - v;
+    for (i = 0; i < nl; i++) {
+        rp[i] = (v & ap[i]) | (~v & rp[i]);
+        ap[i] = 0;
     }
-# else
-    if (bn_sub_words(rp, ap, np, nl) - carry)
-        memcpy(rp, ap, nl * sizeof(BN_ULONG));
-# endif
     bn_correct_top(r);
     bn_correct_top(ret);
     bn_check_top(ret);

From levitte at openssl.org  Thu Feb  1 21:09:45 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 01 Feb 2018 21:09:45 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517519385.037469.25934.nullmailer@dev.openssl.org>

The branch master has been updated
       via  03cb2cc9e53f7ca7539069a388d2767fffa7cf66 (commit)
      from  f345b1f39d9b4e4c9ef07e7522e9b2a870c9ca09 (commit)


- Log -----------------------------------------------------------------
commit 03cb2cc9e53f7ca7539069a388d2767fffa7cf66
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 1 21:28:59 2018 +0100

    Fix of prefix bio filter (bf_prefix.c): rely on the given length
    
    The assumption that the received buffer has to be NUL-terminated was
    faulty.
    
    Fault found in #5224
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5239)

-----------------------------------------------------------------------

Summary of changes:
 apps/bf_prefix.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/apps/bf_prefix.c b/apps/bf_prefix.c
index 4d5e3a3..bae3c91 100644
--- a/apps/bf_prefix.c
+++ b/apps/bf_prefix.c
@@ -96,7 +96,7 @@ static int prefix_write(BIO *b, const char *out, size_t outl,
 
     *numwritten = 0;
 
-    while (*out != '\0') {
+    while (outl > 0) {
         size_t i;
         char c;
 
@@ -111,7 +111,7 @@ static int prefix_write(BIO *b, const char *out, size_t outl,
         }
 
         /* Now, go look for the next LF, or the end of the string */
-        for (i = 0; (c = out[i]) != '\n' && c != '\0'; i++)
+        for (i = 0, c = '\0'; i < outl && (c = out[i]) != '\n'; i++)
             continue;
         if (c == '\n')
             i++;
@@ -123,6 +123,7 @@ static int prefix_write(BIO *b, const char *out, size_t outl,
             if (!BIO_write_ex(BIO_next(b), out, i, &num))
                 return 0;
             out += num;
+            outl -= num;
             *numwritten += num;
             i -= num;
         }

From builds at travis-ci.org  Thu Feb  1 21:17:58 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 21:17:58 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16033 (master - 39eeb64)
In-Reply-To: <openssl/openssl+336282420+errored@travis-ci.org>
Message-ID: <5a738404abf0a_43f99f4c6d1f81777512@6f1e7807-ba31-4302-beba-07cf17cd0e30.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16033
Status: Errored

Duration: 24 minutes and 13 seconds
Commit: 39eeb64 (master)
Author: David Benjamin
Message: Don't leak the exponent bit width in BN_mod_exp_mont_consttime.

The exponent here is one of d, dmp1, or dmq1 for RSA. This value and its
bit length are both secret. The only public upper bound is the bit width
of the corresponding modulus (RSA n, p, and q, respectively).

Although BN_num_bits is constant-time (sort of; see bn_correct_top notes
in preceding patch), this does not fix the root problem, which is that
the windows are based on the minimal bit width, not the upper bound. We
could use BN_num_bits(m), but BN_mod_exp_mont_consttime is public API
and may be called with larger exponents. Instead, use all top*BN_BITS2
bits in the BIGNUM. This is still sensitive to the long-standing
bn_correct_top leak, but we need to fix that regardless.

This may cause us to do a handful of extra multiplications for RSA keys
which are just above a whole number of words, but that is not a standard
RSA key size.

Reviewed-by: Paul Dale <paul.dale at oracle.com>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5154)

View the changeset: https://github.com/openssl/openssl/compare/3c5a61dd0f9d...39eeb64f59ff

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336282420?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/c450db66/attachment.html>

From builds at travis-ci.org  Thu Feb  1 21:34:37 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 21:34:37 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16036
	(OpenSSL_1_1_0-stable - db91094)
In-Reply-To: <openssl/openssl+336285391+errored@travis-ci.org>
Message-ID: <5a73887ade5e4_43f89e30efeb41801074@e51d55cc-c6be-4a36-be0f-ddf49f2909b7.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16036
Status: Errored

Duration: 19 minutes and 18 seconds
Commit: db91094 (OpenSSL_1_1_0-stable)
Author: David Benjamin
Message: Fix timing leak in BN_from_montgomery_word.

BN_from_montgomery_word doesn't have a constant memory access pattern.
Replace the pointer trick with a constant-time select. There is, of
course, still the bn_correct_top leak pervasive in BIGNUM itself.

See also https://boringssl-review.googlesource.com/22904 from BoringSSL.

Reviewed-by: Andy Polyakov <appro at openssl.org>
Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/5228)

(cherry picked from commit f345b1f39d9b4e4c9ef07e7522e9b2a870c9ca09)

View the changeset: https://github.com/openssl/openssl/compare/723183b5640e...db91094a49b3

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336285391?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/6fe83c83/attachment-0001.html>

From builds at travis-ci.org  Thu Feb  1 21:40:37 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 21:40:37 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16035 (master -
	f345b1f)
In-Reply-To: <openssl/openssl+336285052+still failing@travis-ci.org>
Message-ID: <5a7389e2d8d68_43f89ed5174101811263@e51d55cc-c6be-4a36-be0f-ddf49f2909b7.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16035
Status: Still Failing

Duration: 34 minutes and 25 seconds
Commit: f345b1f (master)
Author: David Benjamin
Message: Fix timing leak in BN_from_montgomery_word.

BN_from_montgomery_word doesn't have a constant memory access pattern.
Replace the pointer trick with a constant-time select. There is, of
course, still the bn_correct_top leak pervasive in BIGNUM itself.

See also https://boringssl-review.googlesource.com/22904 from BoringSSL.

Reviewed-by: Andy Polyakov <appro at openssl.org>
Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/5228)

View the changeset: https://github.com/openssl/openssl/compare/39eeb64f59ff...f345b1f39d9b

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336285052?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/c2085216/attachment.html>

From builds at travis-ci.org  Thu Feb  1 22:18:23 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 01 Feb 2018 22:18:23 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16038 (master - 03cb2cc)
In-Reply-To: <openssl/openssl+336291165+errored@travis-ci.org>
Message-ID: <5a73922f2af99_43fcf7691c064114080@ddecd48c-d6f6-40cf-986a-99b8fb90cde8.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16038
Status: Errored

Duration: 39 minutes and 30 seconds
Commit: 03cb2cc (master)
Author: Richard Levitte
Message: Fix of prefix bio filter (bf_prefix.c): rely on the given length

The assumption that the received buffer has to be NUL-terminated was
faulty.

Fault found in #5224

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5239)

View the changeset: https://github.com/openssl/openssl/compare/f345b1f39d9b...03cb2cc9e53f

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336291165?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180201/9213ba9b/attachment.html>

From matt at openssl.org  Fri Feb  2 10:06:37 2018
From: matt at openssl.org (Matt Caswell)
Date: Fri, 02 Feb 2018 10:06:37 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517565997.863123.30763.nullmailer@dev.openssl.org>

The branch master has been updated
       via  22da44fce9ca198d9115e2852e6f9a0183e56886 (commit)
      from  03cb2cc9e53f7ca7539069a388d2767fffa7cf66 (commit)


- Log -----------------------------------------------------------------
commit 22da44fce9ca198d9115e2852e6f9a0183e56886
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 1 17:40:17 2018 +0000

    Document SSL_OP_ENABLE_MIDDLEBOX_COMPAT
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5237)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/SSL_CTX_set_options.pod | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/doc/man3/SSL_CTX_set_options.pod b/doc/man3/SSL_CTX_set_options.pod
index ba9a95f..0d51077 100644
--- a/doc/man3/SSL_CTX_set_options.pod
+++ b/doc/man3/SSL_CTX_set_options.pod
@@ -189,6 +189,15 @@ those clients (e.g. mobile) use ChaCha20-Poly1305 if that cipher is anywhere
 in the server cipher list; but still allows other clients to use AES and other
 ciphers. Requires B<SSL_OP_CIPHER_SERVER_PREFERENCE>.
 
+=item SSL_OP_ENABLE_MIDDLEBOX_COMPAT
+
+If set then dummy Change Cipher Spec (CCS) messages are sent in TLSv1.3. This
+has the effect of making TLSv1.3 look more like TLSv1.2 so that middleboxes that
+do not understand TLSv1.3 will not drop the connection. Regardless of whether
+this option is set or not CCS messages received from the peer will always be
+ignored in TLSv1.3. This option is set by default. To switch it off use
+SSL_clear_options(). A future version of OpenSSL may not set this by default.
+
 =back
 
 The following options no longer have any effect but their identifiers are

From builds at travis-ci.org  Fri Feb  2 10:39:01 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 02 Feb 2018 10:39:01 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16047 (master - 22da44f)
In-Reply-To: <openssl/openssl+336485681+passed@travis-ci.org>
Message-ID: <5a743fc44317e_43fa28f04b6606897b2@e3a217df-7e6b-497f-9547-ac4ea8da33a1.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16047
Status: Passed

Duration: 31 minutes and 27 seconds
Commit: 22da44f (master)
Author: Matt Caswell
Message: Document SSL_OP_ENABLE_MIDDLEBOX_COMPAT

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5237)

View the changeset: https://github.com/openssl/openssl/compare/03cb2cc9e53f...22da44fce9ca

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/336485681?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180202/5d761284/attachment.html>

From levitte at openssl.org  Fri Feb  2 11:43:40 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 02 Feb 2018 11:43:40 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517571820.789431.20831.nullmailer@dev.openssl.org>

The branch master has been updated
       via  50ea9d2b3521467a11559be41dcf05ee05feabd6 (commit)
      from  22da44fce9ca198d9115e2852e6f9a0183e56886 (commit)


- Log -----------------------------------------------------------------
commit 50ea9d2b3521467a11559be41dcf05ee05feabd6
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 10:33:41 2018 +0100

    Have configdata.pm also display the contents of %target
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5243)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 26 ++++++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

diff --git a/Configure b/Configure
index a994876..22d42fb 100755
--- a/Configure
+++ b/Configure
@@ -2331,6 +2331,7 @@ unless (caller) {
     my $dump = undef;
     my $cmdline = undef;
     my $options = undef;
+    my $target = undef;
     my $envvars = undef;
     my $makevars = undef;
     my $buildparams = undef;
@@ -2341,6 +2342,7 @@ unless (caller) {
     GetOptions('dump|d'                 => \$dump,
                'command-line|c'         => \$cmdline,
                'options|o'              => \$options,
+               'target|t'               => \$target,
                'environment|e'          => \$envvars,
                'make-variables|m'       => \$makevars,
                'build-parameters|b'     => \$buildparams,
@@ -2350,7 +2352,7 @@ unless (caller) {
                'man'                    => \$man)
         or die "Errors in command line arguments\n";
 
-    unless ($dump || $cmdline || $options || $envvars || $makevars
+    unless ($dump || $cmdline || $options || $target || $envvars || $makevars
             || $buildparams || $reconf || $verbose || $help || $man) {
         print STDERR <<"_____";
 You must give at least one option.
@@ -2399,6 +2401,21 @@ _____
             }
         }
     }
+    if ($dump || $target) {
+        print "\nConfig target attributes:\n\n";
+        foreach (sort keys %target) {
+            next if $_ =~ m|^_| || $_ eq 'template';
+            my $quotify = sub {
+                map { (my $x = $_) =~ s|([\\\$\@"])|\\$1|g; "\"$x\""} @_;
+            };
+            print '    ', $_, ' => ';
+            if (ref($target{$_}) eq "ARRAY") {
+                print '[ ', join(', ', $quotify->(@{$target{$_}})), " ],\n";
+            } else {
+                print $quotify->($target{$_}), ",\n"
+            }
+        }
+    }
     if ($dump || $envvars) {
         print "\nRecorded environment:\n\n";
         foreach (sort keys %{$config{perlenv}}) {
@@ -2509,7 +2526,8 @@ Print the manual page and exit.
 =item B<--dump> | B<-d>
 
 Print all relevant configuration data.  This is equivalent to B<--command-line>
-B<--options> B<--environment> B<--make-variables> B<--build-parameters>.
+B<--options> B<--target> B<--environment> B<--make-variables>
+B<--build-parameters>.
 
 =item B<--command-line> | B<-c>
 
@@ -2520,6 +2538,10 @@ Print the current configuration command line.
 Print the features, both enabled and disabled, and display defined macro and
 skipped directories where applicable.
 
+=item B<--target> | B<-t>
+
+Print the config attributes for this config target.
+
 =item B<--environment> | B<-e>
 
 Print the environment variables and their values at the time of configuration.

From appro at openssl.org  Fri Feb  2 22:15:41 2018
From: appro at openssl.org (Andy Polyakov)
Date: Fri, 02 Feb 2018 22:15:41 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1517609741.295032.12721.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  48081cf988fc8f50215a2b18babd6a7859defd36 (commit)
      from  4981e6fc1da4aec6775fc248643c91dd1e87e0b7 (commit)


- Log -----------------------------------------------------------------
commit 48081cf988fc8f50215a2b18babd6a7859defd36
Author: Andy Polyakov <appro at openssl.org>
Date:   Thu Feb 1 22:03:59 2018 +0100

    Fix timing leak in BN_from_montgomery_word.
    
    BN_from_montgomery_word doesn't have a constant memory access pattern.
    Replace the pointer trick with a constant-time select. There is, of
    course, still the bn_correct_top leak pervasive in BIGNUM itself.
    
    See also https://boringssl-review.googlesource.com/22904 from BoringSSL.
    
    (backport from f345b1f39d9b4e4c9ef07e7522e9b2a870c9ca09 signed off by
    David Benjamin <davidben at google.com>)
    
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/bn_mont.c | 75 ++++++++++++++---------------------------------------
 1 file changed, 20 insertions(+), 55 deletions(-)

diff --git a/crypto/bn/bn_mont.c b/crypto/bn/bn_mont.c
index 94e7a8f..49cf51a 100644
--- a/crypto/bn/bn_mont.c
+++ b/crypto/bn/bn_mont.c
@@ -207,26 +207,13 @@ static int BN_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont)
     r->top = max;
     n0 = mont->n0[0];
 
-# ifdef BN_COUNT
-    fprintf(stderr, "word BN_from_montgomery_word %d * %d\n", nl, nl);
-# endif
+    /*
+     * Add multiples of |n| to |r| until R = 2^(nl * BN_BITS2) divides it. On
+     * input, we had |r| < |n| * R, so now |r| < 2 * |n| * R. Note that |r|
+     * includes |carry| which is stored separately.
+     */
     for (carry = 0, i = 0; i < nl; i++, rp++) {
-# ifdef __TANDEM
-        {
-            long long t1;
-            long long t2;
-            long long t3;
-            t1 = rp[0] * (n0 & 0177777);
-            t2 = 037777600000l;
-            t2 = n0 & t2;
-            t3 = rp[0] & 0177777;
-            t2 = (t3 * t2) & BN_MASK2;
-            t1 = t1 + t2;
-            v = bn_mul_add_words(rp, np, nl, (BN_ULONG)t1);
-        }
-# else
         v = bn_mul_add_words(rp, np, nl, (rp[0] * n0) & BN_MASK2);
-# endif
         v = (v + carry + rp[nl]) & BN_MASK2;
         carry |= (v != rp[nl]);
         carry &= (v <= rp[nl]);
@@ -239,46 +226,24 @@ static int BN_from_montgomery_word(BIGNUM *ret, BIGNUM *r, BN_MONT_CTX *mont)
     ret->neg = r->neg;
 
     rp = ret->d;
-    ap = &(r->d[nl]);
 
-# define BRANCH_FREE 1
-# if BRANCH_FREE
-    {
-        BN_ULONG *nrp;
-        size_t m;
+    /*
+     * Shift |nl| words to divide by R. We have |ap| < 2 * |n|. Note that |ap|
+     * includes |carry| which is stored separately.
+     */
+    ap = &(r->d[nl]);
 
-        v = bn_sub_words(rp, ap, np, nl) - carry;
-        /*
-         * if subtraction result is real, then trick unconditional memcpy
-         * below to perform in-place "refresh" instead of actual copy.
-         */
-        m = (0 - (size_t)v);
-        nrp =
-            (BN_ULONG *)(((PTR_SIZE_INT) rp & ~m) | ((PTR_SIZE_INT) ap & m));
-
-        for (i = 0, nl -= 4; i < nl; i += 4) {
-            BN_ULONG t1, t2, t3, t4;
-
-            t1 = nrp[i + 0];
-            t2 = nrp[i + 1];
-            t3 = nrp[i + 2];
-            ap[i + 0] = 0;
-            t4 = nrp[i + 3];
-            ap[i + 1] = 0;
-            rp[i + 0] = t1;
-            ap[i + 2] = 0;
-            rp[i + 1] = t2;
-            ap[i + 3] = 0;
-            rp[i + 2] = t3;
-            rp[i + 3] = t4;
-        }
-        for (nl += 4; i < nl; i++)
-            rp[i] = nrp[i], ap[i] = 0;
+    /*
+     * |v| is one if |ap| - |np| underflowed or zero if it did not. Note |v|
+     * cannot be -1. That would imply the subtraction did not fit in |nl| words,
+     * and we know at most one subtraction is needed.
+     */
+    v = bn_sub_words(rp, ap, np, nl) - carry;
+    v = 0 - v;
+    for (i = 0; i < nl; i++) {
+        rp[i] = (v & ap[i]) | (~v & rp[i]);
+        ap[i] = 0;
     }
-# else
-    if (bn_sub_words(rp, ap, np, nl) - carry)
-        memcpy(rp, ap, nl * sizeof(BN_ULONG));
-# endif
     bn_correct_top(r);
     bn_correct_top(ret);
     bn_check_top(ret);

From matt at openssl.org  Sat Feb  3 00:01:38 2018
From: matt at openssl.org (Matt Caswell)
Date: Sat, 03 Feb 2018 00:01:38 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517616098.230569.17667.nullmailer@dev.openssl.org>

The branch master has been updated
       via  1f5878b8e25a785dde330bf485e6ed5a6ae09a1a (commit)
       via  b1a51abb935163cbb0b0089ad9ee8ff174341bbd (commit)
       via  2221ec10ab2771d7effad839392c88f35cde04a3 (commit)
      from  50ea9d2b3521467a11559be41dcf05ee05feabd6 (commit)


- Log -----------------------------------------------------------------
commit 1f5878b8e25a785dde330bf485e6ed5a6ae09a1a
Author: Tatsuhiro Tsujikawa <tatsuhiro.t at gmail.com>
Date:   Sun Jan 21 11:30:36 2018 +0900

    Make sure that exporting keying material is allowed
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4944)

commit b1a51abb935163cbb0b0089ad9ee8ff174341bbd
Author: Tatsuhiro Tsujikawa <tatsuhiro.t at gmail.com>
Date:   Thu Jan 18 15:39:45 2018 +0900

    Remove generation of exporter master secret on client application traffic
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4944)

commit 2221ec10ab2771d7effad839392c88f35cde04a3
Author: Tatsuhiro Tsujikawa <tatsuhiro.t at gmail.com>
Date:   Sat Dec 16 16:46:18 2017 +0900

    Generate exporter_master_secret after server Finished
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4944)

-----------------------------------------------------------------------

Summary of changes:
 ssl/statem/statem.c     | 10 ++++++++++
 ssl/statem/statem.h     |  1 +
 ssl/tls13_enc.c         | 25 ++++++++++++-------------
 test/tls13secretstest.c |  5 +++++
 4 files changed, 28 insertions(+), 13 deletions(-)

diff --git a/ssl/statem/statem.c b/ssl/statem/statem.c
index 45cb9ab..95c369a 100644
--- a/ssl/statem/statem.c
+++ b/ssl/statem/statem.c
@@ -941,3 +941,13 @@ int ossl_statem_app_data_allowed(SSL *s)
 
     return 0;
 }
+
+/*
+ * This function returns 1 if TLS exporter is ready to export keying
+ * material, or 0 if otherwise.
+ */
+int ossl_statem_export_allowed(SSL *s)
+{
+    return s->s3->previous_server_finished_len != 0
+           && s->statem.hand_state != TLS_ST_SW_FINISHED;
+}
diff --git a/ssl/statem/statem.h b/ssl/statem/statem.h
index e8d9174..3242c78 100644
--- a/ssl/statem/statem.h
+++ b/ssl/statem/statem.h
@@ -132,6 +132,7 @@ __owur int ossl_statem_skip_early_data(SSL *s);
 void ossl_statem_check_finish_init(SSL *s, int send);
 void ossl_statem_set_hello_verify_done(SSL *s);
 __owur int ossl_statem_app_data_allowed(SSL *s);
+__owur int ossl_statem_export_allowed(SSL *s);
 
 /* Flush the write BIO */
 int statem_flush(SSL *s);
diff --git a/ssl/tls13_enc.c b/ssl/tls13_enc.c
index fe817f8..05355fb 100644
--- a/ssl/tls13_enc.c
+++ b/ssl/tls13_enc.c
@@ -562,16 +562,6 @@ int tls13_change_cipher_state(SSL *s, int which)
             goto err;
         }
         s->session->master_key_length = hashlen;
-
-        /* Now we create the exporter master secret */
-        if (!tls13_hkdf_expand(s, ssl_handshake_md(s), insecret,
-                               exporter_master_secret,
-                               sizeof(exporter_master_secret) - 1,
-                               hash, hashlen, s->exporter_master_secret,
-                               hashlen)) {
-            /* SSLfatal() already called */
-            goto err;
-        }
     }
 
     if (!derive_secret_key_and_iv(s, which & SSL3_CC_WRITE, md, cipher,
@@ -581,9 +571,18 @@ int tls13_change_cipher_state(SSL *s, int which)
         goto err;
     }
 
-    if (label == server_application_traffic)
+    if (label == server_application_traffic) {
         memcpy(s->server_app_traffic_secret, secret, hashlen);
-    else if (label == client_application_traffic)
+        /* Now we create the exporter master secret */
+        if (!tls13_hkdf_expand(s, ssl_handshake_md(s), insecret,
+                               exporter_master_secret,
+                               sizeof(exporter_master_secret) - 1,
+                               hash, hashlen, s->exporter_master_secret,
+                               hashlen)) {
+            /* SSLfatal() already called */
+            goto err;
+        }
+    } else if (label == client_application_traffic)
         memcpy(s->client_app_traffic_secret, secret, hashlen);
 
     if (!ssl_log_secret(s, log_label, secret, hashlen)) {
@@ -667,7 +666,7 @@ int tls13_export_keying_material(SSL *s, unsigned char *out, size_t olen,
     unsigned int hashsize, datalen;
     int ret = 0;
 
-    if (ctx == NULL || !SSL_is_init_finished(s))
+    if (ctx == NULL || !ossl_statem_export_allowed(s))
         goto err;
 
     if (!use_context)
diff --git a/test/tls13secretstest.c b/test/tls13secretstest.c
index 16542c4..f08b5d3 100644
--- a/test/tls13secretstest.c
+++ b/test/tls13secretstest.c
@@ -212,6 +212,11 @@ void ossl_statem_fatal(SSL *s, int al, int func, int reason, const char *file,
 {
 }
 
+int ossl_statem_export_allowed(SSL *s)
+{
+    return 1;
+}
+
 /* End of mocked out code */
 
 static int test_secret(SSL *s, unsigned char *prk,

From rsalz at openssl.org  Sat Feb  3 23:24:09 2018
From: rsalz at openssl.org (Rich Salz)
Date: Sat, 03 Feb 2018 23:24:09 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1517700249.074535.13354.nullmailer@dev.openssl.org>

The branch master has been updated
       via  27296557068a17464f17533d89d4fa6f3555b909 (commit)
      from  bb40e3e6bcd68b3ba9ba4e71751d9f8e630f63cf (commit)


- Log -----------------------------------------------------------------
commit 27296557068a17464f17533d89d4fa6f3555b909
Author: Rich Salz <rsalz at akamai.com>
Date:   Sat Feb 3 18:23:50 2018 -0500

    Add our release tools

-----------------------------------------------------------------------

Summary of changes:
 release-tools/MKRELEASE.md       | 168 +++++++++++++++
 release-tools/README.md          | 320 +++++++++++++++++++++++++++++
 release-tools/do-copyright-year  |  40 ++++
 release-tools/do-release.pl      | 209 +++++++++++++++++++
 release-tools/mkrelease.pl       | 427 +++++++++++++++++++++++++++++++++++++++
 release-tools/release-check.pl   | 215 ++++++++++++++++++++
 release-tools/release-date.pl    |  64 ++++++
 release-tools/release-git.pl     | 164 +++++++++++++++
 release-tools/release-update.pl  | 153 ++++++++++++++
 release-tools/release-version.pl | 179 ++++++++++++++++
 10 files changed, 1939 insertions(+)
 create mode 100644 release-tools/MKRELEASE.md
 create mode 100644 release-tools/README.md
 create mode 100755 release-tools/do-copyright-year
 create mode 100644 release-tools/do-release.pl
 create mode 100644 release-tools/mkrelease.pl
 create mode 100644 release-tools/release-check.pl
 create mode 100644 release-tools/release-date.pl
 create mode 100644 release-tools/release-git.pl
 create mode 100644 release-tools/release-update.pl
 create mode 100644 release-tools/release-version.pl

diff --git a/release-tools/MKRELEASE.md b/release-tools/MKRELEASE.md
new file mode 100644
index 0000000..04d6dc7
--- /dev/null
+++ b/release-tools/MKRELEASE.md
@@ -0,0 +1,168 @@
+# Documentation on the mkrelease.pl script
+
+This file provides an overview of the mkrelease.pl script, and how to
+configure some of its parameters (by setting environment variables).
+It is normally run by following the process in README.md and should be
+run in a pristine directgory of the branch to be released, which must
+be a stable branch.
+
+The script handles most of the processes involved in making a release
+including:
+
+1. Doing `make update`
+2. Changing version numbers in various files
+3. Tagging release
+4. Making the tarballs, .md5, .sha1, .sha256 and .gpg files
+5. Creating the signed email announcement, including hashes of release
+6. Uploading files to dev.openssl.org
+7. Updating the version for next release
+
+If you plan to make an actual release make sure your GPG key is included
+in the [OMC list](https://www.openssl.org/community/omc.html) on the website
+and in the file doc/fingerprints.txt of *all* active branches.
+
+The script mkrelease.pl calls the files release-check.pl, release-date.pl,
+release-git.pl, release-update.pl and release-version.pl, which are expected
+to all be in the same directory.
+
+You are advised to clone a fresh repository. Unless you specify `--no-clean`
+the release process will run `git clean -x -d -f`
+*WARNING* this will delete ALL untracked files from the current branch.
+
+From the branch directory if you run:
+
+        perl /path/to/mkrelease.pl --reviewer=name
+
+It should perform all of the above steps and commit changes locally. You can
+then sanity check these with `git log` before pushing them to the public repo.
+
+## Environment Variables
+
+- OPENSSL<br>
+  Path to openssl utility to use. Default is `openssl`.
+
+- OPENSSL_TAR<br>
+  The tar command to use when creating the tarball. Default is `tar`.
+
+- OPENSSL_GPG<br>
+  The gpg command to use when signing a tarball or announcement.
+  The default is `gpg` which will use gpg with the default key.
+  If you wish to use a different, key set OPENSSL_GPG to include
+  appropriate options.
+
+- OPENSSL_GPG_TAR<br>
+  Command to use to sign a tarball.
+  The default is: `$OPENSSL_GPG --use-agent -sba`
+
+- OPENSSL_GPG_ANNOUNCE<br>
+  The command to use to sign a tarball.
+  The default is: `$OPENSSL_GPG --use-agent -sta --clearsign`
+
+- OPENSSL_SCP<br>
+  The command to use to upload files.
+  The default is `scp`
+
+- OPENSSL_SCP_HOST<br>
+  The host (and optional username) needed to upload files.
+  The default is `dev.openssl.org`, but you might want to change this to
+  `username at dev.openssl.org`
+
+- OPENSSL_SCP_DIR<br>
+  The directory to upload files to.
+  Normally this wont be changed from the default which is
+  `$OPENSSL_SCP_HOST:~openssl/dist/new`
+  This is a holding area on dev.openssl.org where distributions are uploaded
+  temporarily before being moved to the web and ftp directories.
+
+For local testing, you can do something like this:
+
+        export OPENSSL_SCP=cp
+        export OPENSSL_SCP_DIR="$HOME/testdir"
+
+## Options
+
+- `--revert`<br>
+  Remove all local changes from repository and delete any release tag. This
+  returns the local tree to the same state as before a release attempt was
+  made.
+
+- `--reviewer=name`<br>
+  Add reviewer `name` to list of reviewers in commit message. Any valid
+  name for checking OMC membership will work.
+  This option may be used multiple times; at least one is required.
+
+- `--enter-pre`<br>
+  Instead of making a full release enter pre-release state. This by itself
+  will not produce a release it will just change version numbers and commit
+  the changes. Subsequent releases on this branch will be pre-release
+  versions. This option should NOT be used if the branch is already in
+  pre-release state.
+
+- `--leave-pre`<br>
+  For a branch in pre-release state, leave pre-release and make a full release.
+
+- `--label=label`<br>
+   Add the textual label `label` to the version string, where `label` must be
+   one of `alpha` or `beta`. While in pre-release state a label *must* be
+   provided.
+
+- `--no-upload`<br>
+  Do not attempt to upload release files to dev.openssl.org
+
+- `--no-clean`<br>
+  Do not clean untracked files from directory. Warning: if you use this option
+  you can end up with extraneous files in the distribution tarball.
+
+- `--no-update`<br>
+  Do not perform a `make update`.
+
+- `--verbose`<br>
+  Be more verbose at what is going on
+
+- `--debug`<br>
+  Include debug output to describe all actions in detail
+
+- `--git-info`<br>
+  Just print out details of all git branch information and exit
+
+- `--git-branch-info`<br>
+  Print out details of the currently detected branch and exit
+
+- `--branch-version=version`<br>
+  Use branch `version` instead of the one autodetected for the current branch.
+  This option is not normally needed.
+
+# The do-release script
+
+The do-release.pl script copies distributions from the temporary holding area
+to the http and ftp areas. It it intended to be run as the `openssl` user on
+dev.openssl.org.
+
+It does the following:
+
+1. Copy OpenSSL release files from the holding area to the http and ftp
+   locations: currently /v/openssl/www/source and /v/openssl/ftp/source
+2. Move OpenSSL release files from holding area to ~openssl/dist/old By
+   doing this the script wont try and make a release again with old files.
+3. Mail the release message. This is sent to openssl-dev openssl-users and
+   openssl-announce (it needs to be approved in openssl-announce). The
+   subject line is `OpenSSL version xxx released`.
+
+## do-release options
+
+- `--copy`<br>
+  Copy files to http and ftp directories.  **You will have to manually move
+  the OLD files to old/<SUBDIR> directories.**
+
+- `--move`<br>
+  Move files from holding area to ~openssl/dist/old
+
+- `--mail`<br>
+  Send out announcement email: if this option is not given, the command you
+  need to call to send the release mail will be printed out.
+
+- `--full-release`<br>
+  Perform all operations for a release (copy, move and mail).
+
+Note: because several of these options are irreversible they have to be
+explicitly included.
diff --git a/release-tools/README.md b/release-tools/README.md
new file mode 100644
index 0000000..7b3767e
--- /dev/null
+++ b/release-tools/README.md
@@ -0,0 +1,320 @@
+# HOW TO MAKE A RELEASE
+
+This file documents how to make an OpenSSL release.  Please fix any
+errors you find while doing, or just after, your next release!
+
+Releases are done by one person, with a second person acting as the
+reviewer and additional tester.
+
+## Pre-requisites
+
+Have a local clone of the website repo:
+
+        openssl-git at git.openssl.org:openssl-web.git
+
+Make sure you can sudo to the openssl user on dev.openssl.org; this is
+usually done by being in the openssl group.  For example, ssh to the
+server and run this command:
+
+        sudo -u openssl id
+
+## Setup
+
+The day before the release, freeze the main repository.  This locks out
+everyone but the named user, who is doing the release, from doing any pushes.
+Someone other than the person doing the release should run the command.
+For example:
+
+        ssh openssl-git at git.openssl.org freeze openssl NAME
+
+## Making the tarball and announcements
+
+This section generates the tarball and announcements locally.  It makes
+no changes which cannot be easily undone.  You will have to repeat this
+section for each version being released, so it is often easier to have
+separate copies:
+
+        git clone openssl-git at git.openssl.org:openssl.git rel-102
+        cd rel-102
+        git branch --track OpenSSL_1_0_2-stable origin/OpenSSL_1_0_2-stable
+        git checkout OpenSSL_1_0_2-stable
+
+Make sure that the CHANGES and NEWS files have been updated and reviewed.
+NEWS should contain a summary of any changes for the release, and for a
+security release is (often just a list of the CVEs addressed. You should also
+update NEWS in the master branch to include details of all releases. Just
+update the NEWS bullet points - do not change the release date, keep it as
+**under development**.
+
+Add any security fixes to the tree. Commit them but *do not push*.
+
+Make sure that the copyrights are updated.  This script will update
+the copyright markers and commit the changes (where $HERE stands for
+the directory where this README is):
+
+        $HERE/do-copyright-year
+
+Perform the local automated release steps. This can normally be done with:
+
+        perl $HERE/mkrelease.pl --reviewer=NAME
+
+Alternatively, to use the openssl-team PGP key:
+
+        export OPENSSL_GPG_KEYID=8B3D79F5
+        perl $HERE/mkrelease.pl --reviewer=NAME
+
+See $HERE/MKRELEASE.md for details of the options to mkrelease.pl.
+This will leave a handful of files in the parent directory of where
+you extracted the release.
+See below for details of how to do perform this step manually if you want
+to or have to.
+
+Verify that the results of the script are sensible. Check
+the commits the automated release process has performed, using for example
+`git log`. Check the signed announcement RELEASE.asc file. Maybe check
+that the tarball length and hashes match in the .md5, .sha1, and review
+the announcment file. *Do not push* changes to the public repo at this stage.
+
+Both the person doing the release and the reviewer should sanity-check the
+release at this point. Checks to consider include the following:
+
+- Builds and make test passes on multiple plaforms - Linux, Windows, etc.
+- Builds from tarball
+
+Send the auto-generated commits to the reviewer and await their +1.
+Repeat from the begining of this section if you need to release
+multiple versions.
+
+## Website updates
+
+The changes in this section should be made in your copy of the web repo.
+
+Update the news/newsflash.txt file. This normally is one or two lines. Just
+copy and paste existing announcements making minor changes for the date and
+version number as necessary.
+
+Update the news/vulnerabilities.xml file if appropriate.
+
+If there is a Security Advisory then copy it into the news/secadv directory.
+
+Commit your changes, but *do not push* them to the website.
+
+## Publishing the release
+
+*BE CAREFUL*  This section makes everything visible and is therefore
+largely irreversible. If you are performing a dry run then DO NOT
+perform any steps in this section.
+
+Check that release has been uploaded properly. The release tarballs and
+associated files should be in ~openssl/dist/new.  They should be owned by the
+openssl userid and world-readable.
+
+Copy the tarballs to appropriate directories. This can be
+done using the do-release.pl script.  See MKRELEASE.md for a description of
+the options. For example:
+
+        sudo -u openssl perl ~openssl/do-release.pl --copy --move
+
+This will copy the relevant files to the website and move them from
+~openssl/dist/new to ~openssl/dist/old so they will not seen by a subsequent
+release. Alternatively if you want to perform one release at a time or copy/move
+the files manually, see below.
+
+The do-release.pl script will display the commands you will need to issue to
+send the announcement emails later. Keep a note of those commands for future
+reference.
+
+Verify that the tarballs are available via FTP:
+
+        ftp://ftp.openssl.org/source/
+
+And that they are ready for the website:
+
+        ls /var/www/openssl/source
+
+Push your local changes made above to the public repo. You will
+typically want to sanity check this with:
+
+        git push -n
+
+Push new tags to public repo. Again sanity check with:
+
+        git push --tags -n
+
+to make sure no local tags were pushed.
+
+##  Updating the website
+
+Push the website changes you made earlier to the OpenSSL website repo.  When
+you do this, the website will get updated and a script to flush the Akamai CDN
+cache will be run.  You can look at things on www-origin.openssl.org; the
+CDN-hosted www.openssl.org should only be a few minutes delayed.
+
+Verify that the release notes, which are built from the CHANGES file in the
+release, have been updated. This is done automatically by the commit-hook, but
+if you see a problem, try the following steps:
+
+        cd /var/www/openssl
+        sudo -u openssl -H make relupd
+        sudo -u openssl ./bin/purge-one-hour
+
+Wait for a while for the Akamai flush to work (normally within a few minutes).
+Have a look at the website and news announcement at:
+
+        https://www.openssl.org/
+        https://www.openssl.org/news/
+
+Check the download page has updated properly:
+
+        https://www.openssl.org/source/
+
+Check the notes look sensible at:
+
+        https://www.openssl.org/news/news.html
+
+Also check the notes here:
+
+        https://www.openssl.org/news/openssl-1.0.2-notes.html
+        https://www.openssl.org/news/openssl-1.1.0-notes.html
+
+## Send the announcement mail
+
+Send out the announcements. Generic release announcement messages will be
+created automatically by the build script and the commands you need to use to
+send them were displayed when you executed do-release.pl above.
+These should normally be sent from the openssl account. These are sent to
+openssl-users, openssl-project, and openssl-announce.
+
+If do-release.pl was used with `--move` be sure to move the
+announcement text files away from the staging directory after they have been
+sent.  This is done as follows (with VERSION replaced with the version of
+OpenSSL to announce):
+
+        sudo -u openssl \
+            mv ~openssl/dist/new/openssl-VERSION.txt.asc ~openssl/dist/old
+
+Send out the Security Advisory if there is one. Copy the file to the
+openssl user home directory, and then do the following
+
+        sudo -u openssl gpg -u 8B3D79F5 --clearsign secadv_FILENAME
+        sudo -u openssl mutt -s "OpenSSL Security Advisory" \
+                openssl-project openssl-users openssl-announce
+                <~openssl/secadv_FILENAME.txt.asc
+
+Approve the openssl-announce email.  Go to
+<https://mta.openssl.org/mailman/admindb/openssl-announce>
+and approve the messages.
+The administration password needed for approval is held in /opt/mailman/README
+on mta.openssl.org
+
+Check the mailing list messages have arrived.
+
+## Finish
+
+Unfreeze the repository.
+
+        ssh openssl-git at git.openssl.org unfreeze openssl
+
+If this release includes security fixes with a CVE then you should inform
+MITRE about them. See the instructions at the top of cvepool.txt in bureau.
+
+Check mailing lists over the next few hours for reports of any success
+or failure. If necessary fix these and in the worst case make another
+release.
+
+# MANUAL PROCESS
+
+If for some reason you cannot use, or do not trust, release script
+mkrelease.pl then you can perform the release manually.  This is difficult to
+get right so you should avoid it if possible.
+
+Check what the automated release did for previous releases. This is the best
+way to get a feel for what happens. You can do this by checking the commit
+logs before a release tag for example:
+
+        git log --reverse 0d7717f..ebe2219
+
+The first two commits are security fixes. The third commit is (as the log
+message implies) an update of the NEWS file. The next commit which has the
+automated log message "Prepare for 1.0.1g release" includes the steps
+necessary to make the release.
+
+## Manually building the release files
+
+Do a `make update`. If necessary commit. You can push this commit to
+the repo so you have as few local changes as possible. Note that even if
+"make update" does not make any visible changes it can still update timestamps
+on some files which avoid some problems with builds (e.g. if the source files
+are all made read only).
+
+Update NEWS, README and CHANGES. These should contain the date and
+the correct version in the appropriate format.
+
+Update crypto/opensslv.h which contains the version. This contains the
+version number in the appropriate formats. For OPENSSL_VERSION_NUMBER and
+normal (not pre) releases you change the last digit from 0 (meaning -dev)
+to f (meaning release). Change the text forms in OPENSSL_VERSION_TEXT for
+normal and FIPS builds.
+
+Double-check that the version is right. If you mess up the syntax you can end
+up with the wrong release number or worse break compilation.
+
+Commit the changes you made so far, and check that the logs look sensible.
+
+Make a local tag; the public repo requires annotated tags:
+
+        git tag -s -m "OpenSSL 1.0.2L release tag" OpenSSL_1_0_2L
+
+or if you want to use the openssl-team key:
+
+        git tag -u 8B3D79F5 -m "OpenSSL 1.0.2L release tag" OpenSSL_1_0_2L
+
+Make the release tarball. You do this with:
+
+        make dist
+
+Create .sha1, .sha256 and .asc files manually. You can use:
+
+        openssl sha1
+        openssl sha256
+
+Create .sha1, .sha256 and .asc files manually. You can use the openssl sha1 and
+sha256 commands, obviously. Sign the tarball:
+
+        gpg -sba opensslversion.tar.gz
+
+or if you want to use the openssl-team key:
+
+        gpg -u 8B3D79F5 -sba opensslversion.tar.gz
+
+Create an announcement file. You can use an existing one as a
+template for example something in ~openssl/dist/old/ update the version
+numbers, tarball size and hashes. Sign announcement with:
+
+        gpg -sta --clearsign announce.txt
+
+or if you want to use the openssl-team key:
+
+        gpg -u 8B3D79F5 -sta --clearsign announce.txt
+
+Prepare for next development version by updating CHANGES, NEWS, README
+crypto/opensslv.h and openssl.spec. The automated scripts use the comment
+message `Prepare for 1.0.1h-dev`.
+
+Be absolutely *certain* you did not make any mistakes, so check
+several times preferably by different people.
+
+Upload tarballs to dev.openssl.org
+
+## Manually releasing the files
+
+If you do not want to use do-release.pl, you can manually perform
+the steps necessary for the release. This is (fortunately) much simpler
+than the manual release process above.
+
+Copy release files to web source directory. The four files (tarball,
+sha1, .sha256 and .asc) need to be manually copied to /var/www/openssl/source
+Also move any outdated releases to /var/www/openssl/source/old/SUBDIR
+
+Copy files to ftp source directory, /srv/ftp/source.
+Also move any oudated releases to /srv/ftp/source/old/SUBDIR
diff --git a/release-tools/do-copyright-year b/release-tools/do-copyright-year
new file mode 100755
index 0000000..59b9235
--- /dev/null
+++ b/release-tools/do-copyright-year
@@ -0,0 +1,40 @@
+#!/usr/bin/env bash
+#
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+this_year=`date +%Y`
+some_year="[12][0-9][0-9][0-9]"
+year_range="(${some_year})(-${some_year})?"
+
+copyright_owner="The OpenSSL Project"
+copyright="Copyright .*${year_range} .*${copyright_owner}"
+
+# sed_script:
+#   for all lines that contain ${copyright} : {
+#     replace years yyyy-zzzz (or year yyyy) by yyyy-${this_year}
+#     replace repeated years yyyy-yyyy by yyyy
+#   }
+ss=/tmp/sed$$
+cat <<EOF >$ss
+/${copyright}/ {
+s|${year_range}|\1-${this_year}|
+s|(${some_year})-\1|\1|
+}
+EOF
+
+NYD=`date +%Y-01-01`
+echo Updating copryight
+git diff-tree -r --name-only `git rev-list -1 --before=$NYD HEAD`..HEAD \
+	| while read FILE ; do
+    sed -E -f /tmp/sed$$ "$FILE" >/tmp/$$
+    mv /tmp/$$ "$FILE"
+    git add "$FILE"
+done
+echo Committing change locally.
+git commit -m 'Update copyright year'
+rm -f $ss
diff --git a/release-tools/do-release.pl b/release-tools/do-release.pl
new file mode 100644
index 0000000..1725055
--- /dev/null
+++ b/release-tools/do-release.pl
@@ -0,0 +1,209 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+my $homedir = glob("~openssl");
+my $tmpdir  = $ENV{"OPENSSL_TMP_DIR"} // $homedir . "/dist/new";
+my $olddir  = $ENV{"OPENSSL_OLD_DIR"} // $homedir . "/dist/old";
+my $srcdir  = $ENV{"OPENSSL_SRC_DIR"} // "/var/www/openssl/source";
+my $ftpdir  = $ENV{"OPENSSL_FTP_DIR"} // "/srv/ftp/source";
+my $mail    = $ENV{"OPENSSL_MAIL"} // "mutt -s SUBJECT RECIP < BODY";
+
+my $do_mail   = 0;
+my $do_copy   = 0;
+my $do_move   = 0;
+my $mail_only = 0;
+
+foreach (@ARGV) {
+    if (/--tmpdir=(.*)$/) {
+        $tmpdir = $1;
+    } elsif (/^--copy$/) {
+        $do_copy = 1;
+    }
+    elsif (/^--move$/) {
+        $do_move = 1;
+    } elsif (/^--mail$/) {
+        $do_mail = 1;
+    } elsif (/^--mail-only$/) {
+        $mail_only = 1;
+        $do_mail   = 1;
+    } elsif (/^--full-release$/) {
+        $do_mail = 1;
+        $do_copy = 1;
+        $do_move = 1;
+    } else {
+        print STDERR "Unknown command line argument $_";
+        exit 1;
+    }
+}
+
+if ( getpwuid($<) ne "openssl" && !exists $ENV{"OPENSSL_RELEASE_TEST"} ) {
+    print "This script must be run as the \"openssl\" user\n";
+    exit 1;
+}
+
+die "Can't find distribution directory $tmpdir"     unless -d $tmpdir;
+die "Can't find old distribution directory $olddir" unless -d $olddir;
+die "Can't find source directory $srcdir"           unless -d $srcdir;
+die "Can't find ftp directory $ftpdir"              unless -d $ftpdir;
+
+my @versions;
+my @series;
+my @files = glob("$tmpdir/*.txt.asc");
+
+foreach (@files) {
+    if (/^.*\/openssl-(\d+\.\d+\.\d+[a-z]*-pre\d+)\..*$/) {
+        push @versions, $1;
+    } elsif (/^.*\/openssl-(\d+\.\d+\.\d+[a-z]*)\..*$/) {
+        push @versions, $1;
+    } else {
+        die "Unexpected filename $_";
+    }
+}
+foreach (@versions) {
+    if (/^(\d+\.\d+\.\d+)[a-z]*$/) {
+        my $serie = $1;
+        push @series, $serie unless grep /^$serie/, @series;
+    }
+}
+die "No distribution in temp directory!" if ( scalar @versions == 0 );
+print "OpenSSL versions to be released:\n";
+foreach (@versions) {
+    print "$_\n";
+}
+print "OK? (y/n)\n";
+$_ = <STDIN>;
+exit 1 unless /^y/i;
+
+my @distfiles;
+my @announce;
+
+foreach (@versions) {
+    push @distfiles, "openssl-$_.tar.gz";
+    push @distfiles, "openssl-$_.tar.gz.sha1";
+    push @distfiles, "openssl-$_.tar.gz.sha256";
+    push @distfiles, "openssl-$_.tar.gz.asc";
+    push @announce,  "openssl-$_.txt.asc";
+}
+
+$do_copy = 0 if $mail_only;
+
+my $bad = 0;
+if ($do_copy) {
+    foreach (@distfiles) {
+        if ( !-f "$tmpdir/$_" ) {
+            print STDERR "File $_ not found in temp directory!\n";
+            $bad = 1;
+        }
+        if ( -e "$srcdir/$_" ) {
+            print STDERR "File $_ already present in source directory!\n";
+            $bad = 1;
+        }
+        if ( -e "$ftpdir/$_" ) {
+            print STDERR "File $_ already present in ftp directory!\n";
+            $bad = 1;
+        }
+        if ( -e "$olddir/$_" ) {
+            print STDERR
+              "File $_ already present in old distributions directory!\n";
+            $bad = 1;
+        }
+    }
+}
+
+exit 1 if $bad;
+
+print "Directory sanity check OK\n";
+
+print "Starting release for OpenSSL @versions\n";
+
+if ($do_copy) {
+    foreach (@distfiles) {
+        system("cp $tmpdir/$_ $srcdir/$_");
+        die "Error copying $_ to source directory!" if $?;
+        system("cp $tmpdir/$_ $ftpdir/$_");
+        die "Error copying $_ to ftp directory!" if $?;
+    }
+    print "Copied distributions files to source and ftp directories\n";
+    foreach my $serie (@series) {
+        my $tomove_oldsrc = "$srcdir/old/$serie";
+        my @tomove_src =
+          map {
+            my $x = $_;
+            $x =~ s|.*/||g;
+            grep( /^$x$/, @distfiles ) ? () : $x
+          }
+          grep { -f $_ }
+          glob("$srcdir/openssl-$serie.tar.gz $srcdir/openssl-$serie?.tar.gz");
+        my $tomove_oldftp = "$ftpdir/old/$serie";
+        my @tomove_ftp =
+          map {
+            my $x = $_;
+            $x =~ s|.*/||g;
+            grep( /^$x$/, @distfiles ) ? () : $x
+          }
+          grep { -f $_ }
+          glob("$ftpdir/openssl-$serie.tar.gz $ftpdir/openssl-$serie?.tar.gz");
+
+        mkdir $tomove_oldsrc
+          or die "Couldn't mkdir $tomove_oldsrc : $!"
+          if !-d $tomove_oldsrc;
+        mkdir $tomove_oldftp
+          or die "Couldn't mkdir $tomove_oldftp : $!"
+          if !-d $tomove_oldftp;
+        foreach (@tomove_src) {
+            system("mv $srcdir/$_* $tomove_oldsrc/");
+            die "Error moving $_* to old source directory!" if $?;
+        }
+        foreach (@tomove_ftp) {
+            system("mv $ftpdir/$_* $tomove_oldftp/");
+            die "Error moving $_* to old ftp directory!" if $?;
+        }
+    }
+    print
+      "Moved old distributions files to source/old and ftp/old directories\n";
+}
+else {
+    print "Test mode: no files copied\n";
+}
+
+foreach (@versions) {
+    my $announce   = "openssl-$_.txt.asc";
+    my $annversion = $_;
+    $annversion =~ s/-pre(\d+$)/ pre release $1/;
+    my $annmail = $mail;
+    $annmail =~ s/SUBJECT/"OpenSSL version $annversion published"/;
+    $annmail =~ s/RECIP/openssl-project openssl-users openssl-announce/;
+    $annmail =~ s|BODY|$tmpdir/$announce|;
+
+    if ($do_mail) {
+        print "Sending announcement email for OpenSSL $_...\n";
+        system("$annmail");
+        die "Error sending announcement email!" if $?;
+        print "Don't forget to authorise the openssl-announce email.\n";
+        push @distfiles, $announce if $do_move;
+    } else {
+        print "Announcement email not sent automatically\n";
+        print "\nSend announcement mail manually with command:\n\n$annmail\n\n";
+        print
+"When done, move the announcement file away with command:\n\nmv $tmpdir/$announce $olddir/$announce\n\n"
+          if $do_move;
+    }
+}
+
+if ($do_move) {
+    foreach (@distfiles) {
+        rename( "$tmpdir/$_", "$olddir/$_" ) || die "Can't move $_: $!";
+    }
+    print "Moved distribution files to old directory\n";
+}
+
+print "Successful!\n";
+
diff --git a/release-tools/mkrelease.pl b/release-tools/mkrelease.pl
new file mode 100644
index 0000000..4012e4d
--- /dev/null
+++ b/release-tools/mkrelease.pl
@@ -0,0 +1,427 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# OpenSSL release generation script.
+
+use strict;
+use warnings;
+use File::Basename;
+use lib dirname(__FILE__);
+use Module::Load::Conditional qw(can_load);
+can_load(modules => { 'OpenSSL::Query::DB' => undef });
+use OpenSSL::Query::REST;
+
+require "release-check.pl";
+require "release-date.pl";
+require "release-git.pl";
+require "release-update.pl";
+require "release-version.pl";
+
+our $debug   = 0;
+our $verbose = 0;
+my @reviewers;
+my @openssl_branches;
+my $revert;
+my $pre;
+my $info_only;
+my $branch_info_only;
+my $no_clean;
+my $no_update;
+my $no_release;
+my $no_upload;
+my $bversion;
+my $ok;
+my $label;
+
+#Determine include path
+our $includepath;
+if ( -e "crypto/opensslv.h" ) {
+    $includepath = "crypto";
+}
+else {
+    $includepath = "include/openssl";
+}
+
+sub print_git_info {
+    my ( $rinfo, $branch, $s ) = @_;
+    my $version = openssl_git_expected_version( $rinfo, $branch );
+    my $last = openssl_git_last_release( $rinfo, $branch );
+    my $last_full = openssl_git_last_release( $rinfo, $branch, 1, 1 );
+
+    # Auto detect pre release if we haven't forced it.
+    $pre = $version =~ /-pre/ unless defined $pre;
+    my $next = openssl_version_next( $version, $pre );
+
+    print "${s}Branch version:    $branch\n";
+    print "${s}Last release:      $last\n";
+    print "${s}Last full release: $last_full\n";
+    print "${s}Current version:   $version\n";
+    print "${s}Next release:      $next\n";
+}
+
+sub print_branch_info {
+    my ($rinfo) = @_;
+    my ( $rtags, $rbranches ) = @$rinfo;
+    print "All Branch details:\n";
+    foreach (@$rbranches) {
+        print "\n";
+        print_git_info( $rinfo, $_, "\t" );
+    }
+    print "\n";
+}
+
+# Initialise git version tables, OMC database.
+my $gitinfo = openssl_git_init();
+my $query = OpenSSL::Query->new();
+
+foreach (@ARGV) {
+    if (/^--git-info$/) {
+        $info_only = 1;
+    } elsif (/^--branch-version=(.*)$/) {
+        $bversion = $1;
+    } elsif (/^--git-branch-info/) {
+        $branch_info_only = 1;
+    } elsif (/^--no-clean/) {
+        $no_clean = 1;
+    } elsif (/^--no-release/) {
+        $no_release = 1;
+    } elsif (/^--no-update/) {
+        $no_update = 1;
+    } elsif (/^--no-upload/) {
+        $no_upload = 1;
+    } elsif (/^--revert/) {
+        $revert = 1;
+    } elsif (/^--leave-pre/) {
+        $pre = 0;
+    } elsif (/^--enter-pre/) {
+        $pre = 1;
+    } elsif (/^--debug/) {
+        $debug   = 1;
+        $verbose = 1;
+    } elsif (/^--verbose/) {
+        $verbose = 1;
+    } elsif (/^--reviewer=(.*)$/) {
+	my $r = $1;
+	my $rname = $query->find_person_tag($r, 'rev');
+        die "Unknown reviewer $1" unless $rname;
+        push @reviewers, $rname;
+    } elsif (/^--label=(.*)$/) {
+        $label = $1;
+        if ( $label ne "alpha" && $label ne "beta" ) {
+            die "Invalid label";
+        }
+    } else {
+        print "Uknown option $_\n";
+        exit 1;
+    }
+}
+
+if ($revert) {
+    $_ = openssl_git_current_branch();
+    print "Reverting to repository version for $_\n";
+    system("git reset --hard origin/$_");
+    die "Error reverting!!" if $?;
+    openssl_git_delete_local_tags($_);
+    exit 0;
+}
+
+$bversion = openssl_git_branch_version() unless defined $bversion;
+
+if ($info_only) {
+    print_git_info( $gitinfo, $bversion, "" );
+    exit 0;
+}
+
+if ($branch_info_only) {
+    print_branch_info($gitinfo);
+    exit 0;
+}
+
+die "No reviewer set!" unless @reviewers;
+
+print "Current branch version is $bversion\n";
+
+if ( openssl_git_check_changes() ) {
+    print "ERROR: unstaged changes in current branch!\n";
+    exit 1;
+}
+
+my $expected_version = openssl_git_expected_version( $gitinfo, $bversion );
+
+# If this is first pre release there will be no releases from this branch
+# So set expected version to pre1-dev as we can't detect this from
+# tags.
+
+if ( $expected_version !~ /-pre/ && openssl_check_first_pre() ) {
+    $expected_version =~ s/-dev/-pre1-dev/;
+}
+
+# Auto detect pre release if we haven't forced it.
+$pre = $expected_version =~ /-pre/ unless defined $pre;
+
+if ( !$pre && defined $label ) {
+    die "Not a pre-release but a label has been defined";
+}
+if ( $pre && !defined $label ) {
+    die "This is a pre-release but a label has not been defined";
+}
+
+my $last_version = openssl_git_last_release( $gitinfo, $bversion, 1, 1 );
+my $last_branch_release = openssl_git_last_release( $gitinfo, $bversion, 1 );
+my $next_version = openssl_version_next( $expected_version, $pre );
+
+print "Branch feature version:      $bversion\n";
+print "Last release on this branch: $last_branch_release\n";
+print "Current branch version       $expected_version\n";
+print "Next release version         $next_version\n";
+print "Last full release version    $last_version\n";
+
+$ok = openssl_check_all( $expected_version, $last_version );
+
+print "Branch sanity check: " . ( $ok ? "OK" : "NOT OK" ) . "\n";
+
+if ( $ok == 0 ) {
+    print "Sanity check failed, cannot continue\n";
+    exit 1;
+}
+
+if ( !$no_clean ) {
+    print "Cleaning directory\n";
+    system("git clean -x -d -f");
+    die "Error cleaning directory" if $?;
+}
+
+openssl_git_make_update(@reviewers) unless $no_update;
+
+$expected_version = openssl_version_next( $expected_version, $pre );
+
+my $date = openssl_current_date() unless $expected_version =~ /-pre1-dev/;
+
+print "Updating versions to $expected_version\n";
+
+openssl_update_all( $expected_version, $date, $label );
+
+$ok = openssl_check_all( $expected_version, $last_version, $date );
+
+print "Changes sanity check: " . ( $ok ? "OK" : "NOT OK" ) . "\n";
+
+if ( $ok == 0 ) {
+    print "Release sanity check failed, cannot continue\n";
+    exit 1;
+}
+
+print "Committing changes:\n";
+
+# If we changed from -dev to -pre1-dev a dev version is
+# entering pre release. Just commit changes without a release.
+
+if ( $expected_version =~ /pre1-dev/ ) {
+    my $main_version = $expected_version;
+    $main_version =~ s/-pre1-dev//;
+    openssl_git_commit( "OpenSSL $main_version is now in pre release",
+        @reviewers );
+    die "Error comitting changes!" if $?;
+    print "Version set to $expected_version, exiting\n";
+    exit 0;
+}
+
+openssl_git_commit( "Prepare for $expected_version release", @reviewers );
+die "Error comitting release changes!" if $?;
+
+my $tag = "OpenSSL_$expected_version";
+my $tagkey =
+  defined( $ENV{OPENSSL_GPG_KEYID} ) ? " -u $ENV{OPENSSL_GPG_KEYID}" : " -s";
+
+$tag =~ tr/\./_/;
+
+print
+  "Tagging release with tag $tag (you will need to provide a pass phrase)\n";
+
+system("git tag$tagkey -m \"OpenSSL $expected_version release tag\" $tag");
+die "Error tagging release!" if $?;
+
+my $TAR = defined( $ENV{OPENSSL_TAR} ) ? "TAR=$ENV{OPENSSL_TAR}" : "";
+
+if ( !$no_release ) {
+    print "Generating release tarball.\n";
+    my $openssl = $ENV{"OPENSSL"} // "openssl";
+    my $gpgkeyid =
+      defined( $ENV{OPENSSL_GPG_KEYID} ) ? " -u $ENV{OPENSSL_GPG_KEYID}" : "";
+    my $gpg    = $ENV{"OPENSSL_GPG"}     // "gpg$gpgkeyid";
+    my $gpgtar = $ENV{"OPENSSL_GPG_TAR"} // "$gpg --use-agent -sba";
+    my $gpgann = $ENV{"OPENSSL_GPG_ANNOUNCE"}
+      // "$gpg --use-agent -sta --clearsign";
+    my $tarfile = "openssl-${expected_version}.tar.gz";
+    system("(./config; make $TAR dist) >../$tarfile.log 2>&1");
+    die "Error generating release!" if $?;
+    die "Can't find tarball!!" unless -f "../$tarfile";
+
+    my $length = -s "../$tarfile";
+    print "Creating hash files\n";
+    my $sha1hash = `$openssl sha1 < ../$tarfile`;
+    chomp $sha1hash;
+    $sha1hash =~ s/^.*=\s//;
+    die "invalid hash" unless $sha1hash =~ /[0-9a-f]{20}/;
+    my $sha256hash = `$openssl sha256 < ../$tarfile`;
+    chomp $sha256hash;
+    $sha256hash =~ s/^.*=\s//;
+    die "invalid hash" unless $sha256hash =~ /[0-9a-f]{20}/;
+    open OUT, ">../$tarfile.sha1";
+    print OUT $sha1hash . "\n";
+    close OUT;
+    open OUT, ">../$tarfile.sha256";
+    print OUT $sha256hash . "\n";
+    close OUT;
+    print "Creating PGP signature:\n";
+    unlink("../${tarfile}.asc");
+    system("$gpgtar ../$tarfile");
+    die "Error creating signature" if $?;
+
+    my $anntxt = "../openssl-${expected_version}.txt";
+
+    open OUT, ">$anntxt";
+    if ( $expected_version =~ /-pre/ ) {
+
+        # Note the variable name is the same length as the real
+        # version so the announcement can be made to look pretty.
+        # If we ever go to pre10 it will be one character longer...
+        my $openssl_ver = $expected_version;
+        $openssl_ver =~ s/^(.*)-pre(\d+)$/$1 pre release $2/;
+        my $fvers = $expected_version;
+        $fvers =~ s/-pre\d+//;
+        print OUT <<EOF;
+
+   OpenSSL version $openssl_ver ($label)
+   ===========================================
+
+   OpenSSL - The Open Source toolkit for SSL/TLS
+   https://www.openssl.org/
+
+   OpenSSL $fvers is currently in $label. OpenSSL $openssl_ver has now
+   been made available. For details of changes and known issues see the
+   release notes at:
+
+        https://www.openssl.org/news/openssl-$bversion-notes.html
+
+   Note: This OpenSSL pre-release has been provided for testing ONLY.
+   It should NOT be used for security critical purposes.
+
+   The $label release is available for download via HTTP and FTP from the
+   following master locations (you can find the various FTP mirrors under
+   https://www.openssl.org/source/mirror.html):
+
+     * https://www.openssl.org/source/
+     * ftp://ftp.openssl.org/source/
+
+   The distribution file name is:
+
+    o $tarfile
+      Size: $length
+      SHA1 checksum: $sha1hash
+      SHA256 checksum: $sha256hash
+
+   The checksums were calculated using the following commands:
+
+    openssl sha1 $tarfile
+    openssl sha256 $tarfile
+
+   Please download and check this $label release as soon as possible.
+   To report a bug, open an issue on GitHub:
+
+    ttps://github.com/openssl/openssl/issues
+
+   Please check the release notes and mailing lists to avoid duplicate
+   reports of known issues.
+
+   Yours,
+
+   The OpenSSL Project Team.
+
+EOF
+    } else {
+        # Using $avers so its length is similar to a real version
+        # length so it's easier to make the announcement look pretty.
+        my $avers = $expected_version;
+        print OUT <<EOF;
+
+   OpenSSL version $avers released
+   ===============================
+
+   OpenSSL - The Open Source toolkit for SSL/TLS
+   https://www.openssl.org/
+
+   The OpenSSL project team is pleased to announce the release of
+   version $avers of our open source toolkit for SSL/TLS. For details
+   of changes and known issues see the release notes at:
+
+        https://www.openssl.org/news/openssl-$bversion-notes.html
+
+   OpenSSL $avers is available for download via HTTP and FTP from the
+   following master locations (you can find the various FTP mirrors under
+   https://www.openssl.org/source/mirror.html):
+
+     * https://www.openssl.org/source/
+     * ftp://ftp.openssl.org/source/
+
+   The distribution file name is:
+
+    o $tarfile
+      Size: $length
+      SHA1 checksum: $sha1hash
+      SHA256 checksum: $sha256hash
+
+   The checksums were calculated using the following commands:
+
+    openssl sha1 $tarfile
+    openssl sha256 $tarfile
+
+   Yours,
+
+   The OpenSSL Project Team.
+
+EOF
+
+    }
+
+    close OUT;
+    unlink("${anntxt}.asc");
+    system("$gpgann $anntxt");
+    die "Cannot sign announcement file!" if $?;
+    die "Signature file not found!" unless -f "$anntxt.asc";
+
+    if ( !$no_upload ) {
+        my $scp     = $ENV{OPENSSL_SCP}      // "scp";
+        my $scphost = $ENV{OPENSSL_SCP_HOST} // "dev.openssl.org";
+        my $scpdir  = $ENV{OPENSSL_SCP_DIR}  // "$scphost:~openssl/dist/new";
+        print "Uploading release files\n";
+        system(
+"$scp ../$tarfile ../$tarfile.sha1 ../$tarfile.sha256 ../$tarfile.asc $anntxt.asc ${scpdir}"
+        );
+        die "Error uploading release files" if $?;
+    }
+
+}
+
+$last_version = $expected_version unless $pre;
+$expected_version = openssl_version_next( $expected_version, $pre );
+
+print "Updating versions to $expected_version\n";
+
+openssl_update_all($expected_version);
+
+$ok = openssl_check_all( $expected_version, $last_version );
+
+print "Sanity check: " . ( $ok ? "OK" : "NOT OK" ) . "\n";
+
+if ( $ok == 0 ) {
+    print "Sanity check failed, cannot continue\n";
+    exit 1;
+}
+
+openssl_git_commit( "Prepare for $expected_version", @reviewers );
+die "Error comitting release changes!" if $?;
diff --git a/release-tools/release-check.pl b/release-tools/release-check.pl
new file mode 100644
index 0000000..91ee7c0
--- /dev/null
+++ b/release-tools/release-check.pl
@@ -0,0 +1,215 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+
+sub check_str {
+    my ( $message, $expected, $value, $pok ) = @_;
+    die "Bad checkstr values for $message"
+      if !defined $value || !defined $expected;
+    if ( $value ne $expected ) {
+        print
+          "$message: check failed, expecting \"$expected\", got \"$value\"!!\n";
+        $$pok = 0;
+    } elsif ($main::debug) {
+        print "$message: checking \"$value\" against \"$expected\"\n";
+    }
+}
+
+# Check syntax of README file.
+
+sub openssl_check_README {
+    my ( $version, $indate ) = @_;
+    my $ok   = 1;
+    my $date = openssl_date($indate);
+    open( IN, "README" ) || die "Can't open README";
+    while (<IN>) {
+        if (/^.*OpenSSL\s+(\S+)\s+(\([[:alpha:]]+\)\s+)?(.*)$/) {
+            check_str( "README version", $version, $1, \$ok );
+            if ( defined $indate ) {
+                check_str( "README date", $date, $3, \$ok );
+            }
+            close IN;
+            return $ok;
+        }
+    }
+    close IN;
+    print STDERR "Invalid syntax in README\n";
+    return 0;
+}
+
+sub openssl_check_NEWS {
+    my ( $version, $prev, $indate ) = @_;
+    my $date = openssl_date( $version =~ /-pre/ ? undef : $indate );
+    my $ok = 1;
+    if ( $date =~ /XXX/ ) {
+        if ( $version =~ /-pre/ ) {
+            $date = "in pre-release";
+        } else {
+            $date = "under development";
+        }
+    }
+    $version =~ s/-dev$//;
+    $version =~ s/-pre.*$//;
+    open( IN, "NEWS" ) || die "Can't open NEWS";
+
+    while (<IN>) {
+        if (
+/^  Major changes between OpenSSL (\S+) and OpenSSL (\S+)\s+\[0?(.*)\]/
+          )
+        {
+            check_str( "NEWS previous version", $prev,    $1, \$ok );
+            check_str( "NEWS version",          $version, $2, \$ok );
+            check_str( "NEWS date",             $date,    $3, \$ok );
+            close IN;
+            return $ok;
+        }
+    }
+    close IN;
+    print STDERR "Invalid syntax in NEWS\n";
+    return 0;
+}
+
+sub openssl_check_CHANGES {
+    my ( $version, $prev, $indate ) = @_;
+    my $date = openssl_date( $version =~ /-pre/ ? undef : $indate );
+    my $ok = 1;
+    $version =~ s/-dev$//;
+    $version =~ s/-pre.*$//;
+    open( IN, "CHANGES" ) || die "Can't open CHANGES";
+
+    while (<IN>) {
+        if (/^ Changes between (\S+) and (\S+)\s+\[0?(.*)\]/) {
+            check_str( "CHANGES previous version", $prev,    $1, \$ok );
+            check_str( "CHANGES version",          $version, $2, \$ok );
+            check_str( "CHANGES date",             $date,    $3, \$ok );
+            close IN;
+            return $ok;
+        }
+    }
+    close IN;
+    print STDERR "Invalid syntax in CHANGES\n";
+    return 0;
+}
+
+sub openssl_check_version_h {
+    my ( $version, $indate ) = @_;
+    my ( $hex_done, $fips_done, $version_done );
+    my $hexversion   = openssl_version_hex($version);
+    my $ok           = 1;
+    my $version_fips = $version . "-fips";
+    $version_fips =~ s/-dev-fips/-fips-dev/;
+    my $date = openssl_date($indate);
+    open( IN, "$main::includepath/opensslv.h" ) || die "Can't open opensslv.h";
+
+    while (<IN>) {
+        if (/OPENSSL_VERSION_NUMBER\s+(0x[0-9a-f]+)L/) {
+            check_str( "opensslv.h: HEX version", $hexversion, $1, \$ok );
+            $hex_done = 1;
+        } elsif (
+/OPENSSL_VERSION_TEXT\s+\"OpenSSL (\S*fips\S*)\s+(\([[:alpha:]]+\)\s+)?(.*)\"/
+          )
+        {
+            check_str( "opensslv.h: FIPS version", $version_fips, $1, \$ok );
+            check_str( "opensslv.h: FIPS date",    $date,         $3, \$ok );
+            $fips_done = 1;
+        } elsif (
+/OPENSSL_VERSION_TEXT\s+\"OpenSSL (\S*)\s+(\([[:alpha:]]+\)\s+)?(.*)\"/
+          )
+        {
+            check_str( "opensslv.h: version", $version, $1, \$ok );
+            check_str( "opensslv.h: date",    $date,    $3, \$ok );
+            $version_done = 1;
+        }
+        if ( $hex_done && $fips_done && $version_done ) {
+            close IN;
+            return $ok;
+        }
+    }
+    print STDERR "Invalid syntax in opensslv.h\n";
+    close IN;
+    return 0;
+}
+
+sub openssl_check_spec {
+    my ($version) = @_;
+    my $ok = 1;
+    $version =~ s/-dev$//;
+    $version =~ s/-pre.*$//;
+    open( IN, "openssl.spec" ) || die "Can't open openssl.spec";
+    while (<IN>) {
+        if (/^Version:\s+(\S+)$/) {
+            check_str( "openssl.spec version", $version, $1, \$ok );
+            close IN;
+            return $ok;
+        }
+    }
+    close IN;
+    print STDERR "Invalid syntax in README\n";
+    return 0;
+}
+
+sub print_ok {
+    my ( $file, $ok ) = @_;
+    print "File: $file " . ( $ok ? "OK" : "NOT OK!!" ) . "\n"
+      if ($main::verbose);
+}
+
+sub openssl_check_all {
+    my ( $version, $last_version, $date ) = @_;
+
+    my $readme_ok = openssl_check_README( $version, $date );
+
+    print_ok( "README", $readme_ok );
+
+    my $changes_ok = openssl_check_CHANGES( $version, $last_version, $date );
+
+    print_ok( "CHANGES", $changes_ok );
+
+    my $news_ok = openssl_check_NEWS( $version, $last_version, $date );
+
+    print_ok( "NEWS", $news_ok );
+
+    my $v_h_ok = openssl_check_version_h( $version, $date );
+
+    print_ok( "opensslv.h", $v_h_ok );
+
+    # Newer versions don't have openssl.spec
+    my $spec_ok = 1;
+    if ( -f "openssl.spec" ) {
+        $spec_ok = openssl_check_spec($version);
+
+        print_ok( "openssl.spec", $spec_ok );
+    }
+
+    return $readme_ok && $changes_ok && $news_ok && $v_h_ok && $spec_ok;
+}
+
+# If there are no tagged releases for the current version
+# and we are in pre release mode then either we are just entering
+# pre release and the next version will be pre1-dev or we are already
+# at pre1-dev and we need to do a release of pre1.
+# Check opensslv.h to determine which
+
+sub openssl_check_first_pre {
+    open( IN, "$main::includepath/opensslv.h" ) || die "Can't open opensslv.h";
+
+    while (<IN>) {
+        if (/OPENSSL_VERSION_TEXT\s+\"OpenSSL \S*\s+.*\"/) {
+            close IN;
+
+            # Ignore -fips in string
+            s/-fips//;
+            return /pre1-dev/;
+        }
+    }
+    close IN;
+    die "Invalid sysntax in opensslv.h";
+}
+
+return 1;
diff --git a/release-tools/release-date.pl b/release-tools/release-date.pl
new file mode 100644
index 0000000..c5b5c38
--- /dev/null
+++ b/release-tools/release-date.pl
@@ -0,0 +1,64 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+# Return date into a form suitable for the FAQ, version file and
+# CHANGES file entries. Optionally can be passed date in the form
+# mm/dd/yyyy
+
+sub openssl_date {
+    my ($datestr) = @_;
+    my ( $mday, $mon, $year );
+
+    if ( defined $datestr ) {
+        if ( $datestr =~ /(\d+)\/(\d+)\/(\d+)/ ) {
+            $mday = $1;
+            $mon  = $2;
+            $year = $3;
+            $mon--;
+        } else {
+            die "Invalid date syntax $datestr, expecting mm/dd/yyyy";
+        }
+    } else {
+        return ( "xx XXX xxxx", undef, undef ) if wantarray;
+        return "xx XXX xxxx";
+    }
+
+    my $mdsuff;
+    if ( $mday % 10 > 0 && $mday % 10 <= 3 && ( $mday < 10 || $mday > 20 ) ) {
+        my @mday_ord = qw(st nd rd);
+        $mdsuff = $mday_ord[ $mday % 10 - 1 ];
+    } else {
+        $mdsuff = "th";
+    }
+
+    my @mnames =
+      qw(January February March April May June July August September October November December);
+
+    my $mname = $mnames[$mon];
+    my $mname_short = substr $mname, 0, 3;
+
+    my $date_ch = sprintf "%d %s %d", $mday, $mname_short, $year;
+    return $date_ch unless wantarray;
+    my $date_ab = sprintf "%s %d%s, %d", $mname_short, $mday, $mdsuff, $year;
+    my $date_full = sprintf "%-9s %2d%s, %d", $mname, $mday, $mdsuff, $year;
+
+    return ( $date_ch, $date_ab, $date_full );
+
+}
+
+# Return current date in dd/mm/yyyy format suitable to passing into
+# openssl_date().
+
+sub openssl_current_date {
+    my ( $mday, $mon, $year ) = (localtime)[ 3 .. 5 ];
+    $year += 1900;
+    $mon++;
+    return "$mday/$mon/$year";
+}
+
+return 1;
diff --git a/release-tools/release-git.pl b/release-tools/release-git.pl
new file mode 100644
index 0000000..2b6ac1a
--- /dev/null
+++ b/release-tools/release-git.pl
@@ -0,0 +1,164 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+# OpenSSL git version utilities.
+
+# Retrieve list of branches and release tags in a reference usable by other
+# functions.
+
+sub openssl_git_init {
+    my @tmpbranches =
+      grep { chomp; s|^\s+origin/OpenSSL_(\w*\d)-stable$|$1|; } `git branch -r`;
+    die "Error retrieving branch details!" if $?;
+
+    # Create initial dev version entry: lowest possible version for
+    # branch which will be accurate if no releases have take place.
+    my @branches;
+    foreach ( sort @tmpbranches ) {
+        tr/_/\./;
+        next if /^0/ && $_ ne "0.9.8";
+        push @branches, $_;
+    }
+
+    # Create list of tags
+    my @rtags = grep { chomp; s/OpenSSL_(\d.*)$/$1/; } `git tag`;
+    die "Error retrieving tag details!" if $?;
+    my @tags;
+    foreach (@rtags) {
+
+        # Skip if tag has - and it isn't pre
+        next if ( /-/ && !/-pre\d+$/ );
+        tr/_/\./;
+        next if /^0/ && !/^0.9.8/;
+        push @tags, $_;
+    }
+    my $aref = [ \@tags, \@branches ];
+    return $aref;
+}
+
+# Return last release number on supplied branch.
+# If $nopre is set, skip pre releases, if $prev set
+# return last release on previous branch if no release
+# on current branch.
+
+sub openssl_git_last_release {
+    my ( $rinfo, $branch, $nopre, $prev ) = @_;
+    my ( $rtag, $rbranch ) = @$rinfo;
+    my $brhex = openssl_version_branch_hex($branch);
+    my $rv    = "";
+    my $rvhex = "";
+    foreach (@$rtag) {
+        next if ( $nopre && /-pre/ );
+        my $taghex  = openssl_version_hex($_);
+        my $tagbhex = openssl_version_branch_hex($_);
+
+        # Is tag for current branch?
+        if ( $tagbhex ne $brhex ) {
+
+            # Discard if only want current branch or greater
+            # than current branch
+            next if ( !$prev || $tagbhex gt $brhex );
+        }
+
+        # If release is later than last value replace.
+        if ( $taghex gt $rvhex ) {
+            $rv    = $_;
+            $rvhex = openssl_version_hex($rv);
+        }
+    }
+    return $rv eq "" ? "none" : $rv;
+}
+
+sub openssl_git_current_branch {
+
+    # Current branch
+    $_ = `git rev-parse --abbrev-ref HEAD`;
+    die "Can't get current branch!" if $?;
+    chomp;
+    return $_;
+}
+
+sub openssl_git_branch_version {
+    ($_) = @_;
+    $_ = openssl_git_current_branch() unless defined $_;
+    die "Unexpected  branch name $_" unless s/OpenSSL_//;
+    tr /_/\./;
+    die "Unexpected  branch name $_" unless s/-stable$//;
+    return $_;
+}
+
+sub openssl_git_expected_version {
+    my ( $rinfo, $branch ) = @_;
+    $branch = openssl_git_major_version() unless defined $branch;
+    my $rv = openssl_git_last_release( $rinfo, $branch );
+    return $branch .= "-dev" if $rv eq "none";
+    return openssl_version_next($rv);
+}
+
+sub openssl_git_check_changes {
+
+    # For some reason this is unreliable if you use --quiet ...
+    system("git diff --exit-code >/dev/null");
+    return 0 if $? == 0;
+    return 1 if $? == 256;
+    die "Unexpected status $?";
+}
+
+sub openssl_git_make_update {
+    print "Configuring system\n";
+    system("perl Configure gcc >/dev/null 2>&1");
+    die "Error configuring system" if $?;
+
+    print "Doing make update\n";
+    system("make update >/dev/null 2>&1");
+    die "make update error" if $?;
+    if ( openssl_git_check_changes() ) {
+        print "Source modified, committing changes\n";
+        openssl_git_commit( "make update", @_ );
+        die "Error committing update" if $?;
+    } else {
+        print "No changes\n";
+    }
+    system("find . -name Makefile.save -exec rm \\\{\\\} \\\;");
+    die "Error removing Makefile.save files" if $?;
+}
+
+sub openssl_git_delete_local_tags {
+    my ($branch) = @_;
+    $branch =~ s/-stable//;
+    my @tags = grep { chomp; } `git tag -l $branch\*`;
+    my @rtags =
+      grep { chomp; s|^.*refs/tags/||; } `git ls-remote --tags origin`;
+    my %rtaghash;
+    foreach (@rtags) {
+        $rtaghash{$_} = 1;
+    }
+    foreach (@tags) {
+        if ( !defined $rtaghash{$_} ) {
+            print "Deleting local tag $_\n" if $main::verbose;
+            system("git tag -d $_");
+        }
+    }
+}
+
+sub openssl_git_commit {
+    my @args = ( "git", "commit", "-a" );
+    my ( $message, @reviewers ) = @_;
+    $message .= "\n\n";
+    foreach (@reviewers) {
+        $message .= "Reviewed-by: $_\n";
+    }
+    push @args, "-m", "$message";
+    system(@args);
+    die "Error committing update" if $?;
+}
+
+return 1;
diff --git a/release-tools/release-update.pl b/release-tools/release-update.pl
new file mode 100644
index 0000000..a8d5687
--- /dev/null
+++ b/release-tools/release-update.pl
@@ -0,0 +1,153 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+sub openssl_update_file {
+    my $fref     = pop @_;
+    my $file     = pop @_;
+    my $file_new = $file . ".new";
+    my $finished = 0;
+    open( IN,  "$file" )      || die "Can't open $file";
+    open( OUT, ">$file_new" ) || die "Can't open $file_new";
+    while (<IN>) {
+        $finished = &$fref(@_) unless $finished;
+        print OUT;
+    }
+    close IN;
+    close OUT;
+    unlink $file;
+    rename $file_new, $file;
+    print "Updated $file\n" if $main::verbose;
+}
+
+sub openssl_update_README {
+    my ( $version, $indate, $label ) = @_;
+    my $date   = openssl_date($indate);
+    my $update = sub {
+        if (/^.*OpenSSL/) {
+            $_ = " OpenSSL $version";
+            $_ .= " $label" if ( defined $label );
+            $_ .= " $date"  if ( defined $indate );
+            $_ .= "\n";
+            return 1;
+        }
+        return 0;
+    };
+    openssl_update_file( @_, "README", $update );
+}
+
+sub openssl_update_CHANGES {
+    my ( $version, $indate ) = @_;
+    my $date = openssl_date($indate);
+    $version =~ s/-dev//;
+    my $update = sub {
+        if (/^ Changes between \S+ and (\S+)\s+\[0?(.*)\]/) {
+            my $chversion = $1;
+            my $chdate    = $2;
+            if ( defined $indate ) {
+                s/$chdate/$date/;
+            } else {
+                my $newchanges = <<END;
+ Changes between $chversion and $version [xx XXX xxxx]
+
+  *)
+
+END
+                $_ = $newchanges . $_;
+            }
+            return 1;
+        }
+        return 0;
+    };
+    openssl_update_file( @_, "CHANGES", $update );
+}
+
+sub openssl_update_NEWS {
+    my ( $version, $indate ) = @_;
+    my $date;
+    if ( $version =~ /-pre1-dev/ ) {
+        $date   = "in pre-release";
+        $indate = "";
+    } elsif ( $version =~ /-pre/ ) {
+        return 1;
+    } else {
+        $date = openssl_date($indate);
+    }
+    $version =~ s/-dev//;
+    my $update = sub {
+        if (
+/^  Major changes between OpenSSL \S+ and OpenSSL (\S+)\s+\[0?(.*)\]/
+          )
+        {
+            my $chversion = $1;
+            my $chdate    = $2;
+            if ( defined $indate ) {
+                s/$chdate/$date/;
+            } else {
+                my $newchanges = <<END;
+  Major changes between OpenSSL $chversion and OpenSSL $version [under development]
+
+      o
+
+END
+                $_ = $newchanges . $_;
+            }
+            return 1;
+        }
+        return 0;
+    };
+    openssl_update_file( @_, "NEWS", $update );
+}
+
+sub openssl_update_version_h {
+    my ( $version, $indate, $label ) = @_;
+    my $hexversion   = openssl_version_hex($version);
+    my $date         = openssl_date($indate);
+    my $version_fips = $version . "-fips";
+    $version_fips =~ s/-dev-fips/-fips-dev/;
+    if ( !defined $label ) {
+        $label = "";
+    }
+    my $update = sub {
+        if (/(#\s*define\s+OPENSSL_VERSION_NUMBER\s+)/) {
+            $_ = "${1}${hexversion}L\n";
+        } elsif (/(#\s*define\s+OPENSSL_VERSION_TEXT\s+).*fips/) {
+            $_ = "${1}\"OpenSSL $version_fips $label $date\"\n";
+        } elsif (/(#\s*define\s+OPENSSL_VERSION_TEXT\s+)/) {
+            $_ = "${1}\"OpenSSL $version $label $date\"\n";
+        }
+        return 0;
+    };
+    openssl_update_file( @_, "$main::includepath/opensslv.h", $update );
+}
+
+sub openssl_update_spec {
+    my ($version) = @_;
+    $version =~ s/-dev$//;
+    my $update = sub {
+        s/^Version:\s+(\S+)$/Version: $version/;
+    };
+    openssl_update_file( @_, "openssl.spec", $update );
+}
+
+sub openssl_update_all {
+    my ( $version, $date, $label ) = @_;
+    my $ispre = $version =~ /-pre/;
+    if ( defined $label ) {
+        $label = "($label)";
+    }
+    openssl_update_version_h( $version, $date, $label );
+    openssl_update_spec($version) if ( !$ispre && -f "openssl.spec" );
+    openssl_update_README( $version, $date, $label );
+    openssl_update_CHANGES( $version, $date ) unless $ispre;
+    openssl_update_NEWS( $version, $date );
+}
+
+return 1;
diff --git a/release-tools/release-version.pl b/release-tools/release-version.pl
new file mode 100644
index 0000000..3e163b0
--- /dev/null
+++ b/release-tools/release-version.pl
@@ -0,0 +1,179 @@
+#! /usr/bin/env perl
+# Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use warnings;
+
+# OpenSSL version utility functions.
+
+# Convert string version to hex format
+# usage is version_hex($version_string, $tag)
+# where "tag" is 1 if the version comes from a git tag.
+# Return version in hex format.
+
+sub openssl_version_hex {
+    my ( $version, $tag ) = @_;
+    my $ov = $version;
+    $tag = $version =~ /_/ unless defined $tag;
+    $version =~ tr/_/\./ if $tag;
+
+    # Separate version string into fields and convert each one.
+
+    if ( !( $version =~ /([\d])\.([\d]+).([\d]+)(.*)$/ ) ) {
+        die "Invalid version syntax \"$version\"";
+    }
+    my $M    = $1;
+    my $NN   = sprintf "%02x", $2;
+    my $FF   = sprintf "%02x", $3;
+    my $rest = $4;
+
+    if ( length $M > 1 || length $NN > 2 || length $FF > 2 ) {
+        die "Invalid version syntax";
+    }
+
+    my ( $PP, $S );
+
+    if ( $rest eq "" ) {
+        $PP = "00";
+        $S  = "f";
+    } else {
+        $S = "";
+        if ( $rest =~ s/-dev$// ) {
+            $S = "0";
+        }
+
+        # Note pre release development versions of the form -preX-dev
+        # version is same for pre release and development versions
+        # So check for -preX after we have stripped off any
+        # -dev above.
+        if ( $rest =~ s/-pre([\d]+)$// ) {
+            $S = sprintf "%x", $1;
+        }
+
+        # No -dev or -pre, must be release
+        $S = "f" if $S eq "";
+
+        if ( $rest eq "" ) {
+            $PP = "00";
+        } elsif ( $rest =~ /^z([a-z]$)/ ) {
+            $PP = sprintf "%02x", ord($1) - ord("a") + 26;
+        } elsif ( $rest =~ /(^[a-z]$)/ ) {
+            $PP = sprintf "%02x", ord($1) - ord("a") + 1;
+        } else {
+            die "Invalid version syntax: \"$ov\"";
+        }
+    }
+
+    if ( length $S > 1 || length $PP > 2 ) {
+        die "Invalid version syntax";
+    }
+
+    return "0x$M$NN$FF$PP$S";
+
+}
+
+# Convert hex format to string
+# Usage is version_str($hex_version), returns version as a string.
+
+sub openssl_version_str {
+    my ($hexversion) = @_;
+    my ( $chk, $M, $NN, $FF, $PP, $S ) = unpack "A2AA2A2A2A", $hexversion;
+    die "Bad hex version $hexversion" if $chk ne "0x" || $S eq "";
+    my $version_str = hex($M) . "." . hex($NN) . "." . hex($FF);
+
+    if ( $PP ne "00" ) {
+        my $hex_PP = hex($PP);
+        if ( $hex_PP > 25 ) {
+            $version_str .= "z";
+            $hex_PP -= 25;
+        }
+        $version_str .= chr( $hex_PP + ord("a") - 1 );
+    }
+
+    if ( $S eq "0" ) {
+        $version_str .= "-dev";
+    } elsif ( $S ne "f" ) {
+        $version_str .= "-pre" . hex($S);
+    }
+
+    return $version_str;
+
+}
+
+# Given a hex number work out the next version.
+# Usage is openssl_next_version($version, $pre, $dev)
+# $pre indicates whether we should use pre releases
+# $dev indicates we should use a development version.
+
+sub openssl_version_next {
+    my ( $version, $pre, $dev ) = @_;
+    my $hexversion = openssl_version_hex($version);
+    my ( $chk, $M, $NN, $FF, $PP, $S ) = unpack "A2AA2A2A2A", $hexversion;
+    die "Invalid syntax $version" if $S eq "";
+
+    # If $pre or $dev not set work out what we want.
+    $dev = $version !~ /-dev/ unless defined $dev;
+    $pre = $version =~ /-pre/ unless defined $pre;
+
+    # If we want a release then just need to get rid of "-dev" part.
+    #
+    if ( $dev == 0 ) {
+        die "Expecting a development version!!" if $version !~ /-dev/;
+
+        # NB version number is identical for pre and pre development.
+        # So just strip out "-dev" part.
+        $version =~ s/-dev//;
+
+        # Special case: if we are going from X.Y.Z-dev and using pre releases
+        # next version is X.Y.Z-pre1-dev and this wont be a release,
+        # just changing version numbers for beginning of pre releases.
+        $version .= "-pre1-dev" if $pre && $S eq "0";
+
+        # If moving out of pre release return full release
+        $version =~ s/-pre.*$// unless $pre;
+        return $version;
+    }
+    die "Not expecting a development version!!" if $version =~ /-dev/;
+
+    # If a pre release we need to increment the pre release portion
+    if ( $pre != 0 ) {
+
+        # Hex version can only handle 14 pre releases.
+        die "Can't go past pre release 14!!" if ( $S eq "e" );
+
+        # Must be a pre release or development version.
+        die "Can't go from release to pre release!!" if $S eq "f";
+        $S = sprintf "%x", hex($S) + 1;
+        $hexversion =~ s/.$/$S/;
+        $version = openssl_version_str($hexversion);
+        $version .= "-dev" if $dev;
+        return $version;
+    }
+
+   # If last version pre release and not doing pre releases any more then switch
+   # to full release.
+    return openssl_version_str("0x$M$NN$FF${PP}f") if ( $version =~ /pre/ );
+
+    # Otherwise need to increment letter value if not a pre release.
+    $PP = sprintf "%02x", hex($PP) + 1;
+    die "Invalid letter version!!" if ( length $PP > 2 );
+    return openssl_version_str("0x$M$NN$FF${PP}0");
+}
+
+# Return hex branch version belongs to.
+# So "1.0.1a-pre2-dev" returns hex of "1.0.1" for example.
+
+sub openssl_version_branch_hex {
+    my ($version) = @_;
+    my $hexversion = openssl_version_hex($version);
+    my ( $chk, $M, $NN, $FF, $PP, $S ) = unpack "A2AA2A2A2A", $hexversion;
+    die "Invalid syntax $version" if $S eq "";
+    return "0x$M$NN${FF}00F";
+}
+
+return 1;

From scan-admin at coverity.com  Sun Feb  4 07:19:07 2018
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Sun, 04 Feb 2018 07:19:07 +0000 (UTC)
Subject: [openssl-commits] Coverity Scan: Analysis completed for
	openssl/openssl
Message-ID: <5a76b3eac0e58_24b4eed4f1898287@node1.mail>


    Your request for analysis of openssl/openssl has been completed successfully.
    The results are available at https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRakUl6QyjujEohY7rPpoYUEcf-2B75FkFkxwwFKGZV8c1xA-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I3xqTV-2FmJ0QLslqpaRYLBAT1W7vvWtl5tODhabX6C7NaR7tTQAIK-2BbNsWEjbIF2CQjiOl1VwDRVsdE16NH-2BlF2myNiFWe8TbHA2yAwz5H-2BcEmGc451voUb0GPWFUTj0V0s09j1z-2FigzJcQ7V36kIKk9JaxOa2EYAPAUslw9PTt3SRBnj7ByBqqBROoLnLaY-2BzY-3D

    Build ID: 198977

    Analysis Summary:
       New defects found: 0
       Defects eliminated: 0


From scan-admin at coverity.com  Sun Feb  4 07:46:00 2018
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Sun, 04 Feb 2018 07:46:00 +0000 (UTC)
Subject: [openssl-commits] Coverity Scan: Analysis completed for
	OpenSSL-1.0.2
Message-ID: <5a76ba37cd704_25a07ed4f18982a5@node1.mail>


    Your request for analysis of OpenSSL-1.0.2 has been completed successfully.
    The results are available at https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRakUl6QyjujEohY7rPpoYUEeuRTZVWU4ku8PUBnVPw8PQ-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I2yRVzD6q7CfeDpKdxq0kyGp9zeN-2Bp1P2tla476FyCX5K1iS-2FUSx-2BYg67N0bBTFP7OlIW1NVyxZAR1jtEe9U1vN6BvcArqKgcTPvwGCSy4ZR57hpjB5FlYMrtDvAfxMwWEkJzxfXO-2FxSraJvmngb-2BKOsO9zWFVpgkJ8lG-2BpLgBc6KHXekWu82SWxGvQvKNGdCM-3D

    Build ID: 198982

    Analysis Summary:
       New defects found: 0
       Defects eliminated: 0


From no-reply at appveyor.com  Sun Feb  4 10:28:52 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 04 Feb 2018 10:28:52 +0000
Subject: [openssl-commits] Build failed: openssl master.15362
Message-ID: <20180204102852.1.69C36AAA1620DDFF@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180204/3ad2717e/attachment.html>

From no-reply at appveyor.com  Sun Feb  4 14:59:15 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 04 Feb 2018 14:59:15 +0000
Subject: [openssl-commits] Build completed: openssl master.15363
Message-ID: <20180204145915.1.A5506B04FD5E11D2@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180204/7dd6f6e0/attachment.html>

From no-reply at appveyor.com  Sun Feb  4 19:17:45 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 04 Feb 2018 19:17:45 +0000
Subject: [openssl-commits] Build failed: openssl master.15370
Message-ID: <20180204191745.1.7D909CB181DF89E1@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180204/c31a4d34/attachment.html>

From no-reply at appveyor.com  Sun Feb  4 19:50:57 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 04 Feb 2018 19:50:57 +0000
Subject: [openssl-commits] Build completed: openssl master.15371
Message-ID: <20180204195057.1.1B6D6122C221DD61@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180204/cebcdd79/attachment.html>

From no-reply at appveyor.com  Mon Feb  5 06:16:13 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 06:16:13 +0000
Subject: [openssl-commits] Build failed: openssl master.15375
Message-ID: <20180205061613.1.F0CD97C635B9C615@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/4f70d8d8/attachment.html>

From no-reply at appveyor.com  Mon Feb  5 09:33:34 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 09:33:34 +0000
Subject: [openssl-commits] Build failed: openssl master.15376
Message-ID: <20180205093334.1.D1EC5552B2439AF3@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/6ac6f60d/attachment.html>

From matt at openssl.org  Mon Feb  5 10:10:56 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 05 Feb 2018 10:10:56 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1517825456.039972.31067.nullmailer@dev.openssl.org>

The branch master has been updated
       via  7823d374c6841eac48a7baf1f2955eb962b5305d (commit)
      from  27296557068a17464f17533d89d4fa6f3555b909 (commit)


- Log -----------------------------------------------------------------
commit 7823d374c6841eac48a7baf1f2955eb962b5305d
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Dec 8 10:13:21 2017 +0000

    Add an option to not add yourself as a reviewer
    
    Every now and then I need to merge a commit that I did not author or
    review (someone else has done those things). This adds an option to addrev
    to enable you to add the "Reviewed by" headers without also adding
    yourself.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/6)

-----------------------------------------------------------------------

Summary of changes:
 review-tools/addrev | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/review-tools/addrev b/review-tools/addrev
index 6b3d64a..fdf2aa5 100755
--- a/review-tools/addrev
+++ b/review-tools/addrev
@@ -9,6 +9,7 @@ my $list_reviewers = 0;
 my $help = 0;
 my $haveprnum = 0;
 my $trivial = 0;
+my $useself = 1;
 
 my $my_email;
 
@@ -23,6 +24,8 @@ foreach (@ARGV) {
         $args .= "--trivial ";
     } elsif (/^--verbose$/) {
         $args .= "--verbose ";
+    } elsif (/^--noself$/) {
+        $useself = 0;
     } elsif (/^--myemail=(.+)$/) {
         $my_email = $1;
     } elsif (/^--nopr$/) {
@@ -56,11 +59,13 @@ if ($help) {
 
 die "Need either --prnum or --nopr flag" unless $haveprnum;
 
-if (!defined $my_email) {
-    $my_email = `git config --get user.email`;
-}
+if ($useself) {
+    if (!defined $my_email) {
+        $my_email = `git config --get user.email`;
+    }
 
-$args .= "--myemail=$my_email ";
+    $args .= "--myemail=$my_email ";
+}
 
 system("git filter-branch -f --tag-name-filter cat --msg-filter \"gitaddrev $args\" $filterargs");
 

From matt at openssl.org  Mon Feb  5 10:57:32 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 05 Feb 2018 10:57:32 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517828252.679241.3214.nullmailer@dev.openssl.org>

The branch master has been updated
       via  1c4b15458670aea5d3849d4b57b8c0ce34a54fbe (commit)
      from  1f5878b8e25a785dde330bf485e6ed5a6ae09a1a (commit)


- Log -----------------------------------------------------------------
commit 1c4b15458670aea5d3849d4b57b8c0ce34a54fbe
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Feb 2 10:17:06 2018 +0000

    Add MiddleboxCompat option to SSL_CONF_cmd man page
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5244)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/SSL_CONF_cmd.pod | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/doc/man3/SSL_CONF_cmd.pod b/doc/man3/SSL_CONF_cmd.pod
index 27317e0..5179e29 100644
--- a/doc/man3/SSL_CONF_cmd.pod
+++ b/doc/man3/SSL_CONF_cmd.pod
@@ -420,6 +420,12 @@ B<AllowNoDHEKEX>: In TLSv1.3 allow a non-(ec)dhe based key exchange mode on
 resumption. This means that there will be no forward secrecy for the resumed
 session. Equivalent to B<SSL_OP_ALLOW_NO_DHE_KEX>.
 
+B<MiddleboxCompat>: If set then dummy Change Cipher Spec (CCS) messages are sent
+in TLSv1.3. This has the effect of making TLSv1.3 look more like TLSv1.2 so that
+middleboxes that do not understand TLSv1.3 will not drop the connection. This
+option is set by default. A future version of OpenSSL may not set this by
+default. Equivalent to B<SSL_OP_ENABLE_MIDDLEBOX_COMPAT>.
+
 =item B<VerifyMode>
 
 The B<value> argument is a comma separated list of flags to set.

From no-reply at appveyor.com  Mon Feb  5 11:54:26 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 11:54:26 +0000
Subject: [openssl-commits] Build completed: openssl master.15377
Message-ID: <20180205115426.1.4A82B649A0AE5A09@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/31af11e2/attachment.html>

From no-reply at appveyor.com  Mon Feb  5 13:14:28 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 13:14:28 +0000
Subject: [openssl-commits] Build failed: openssl master.15379
Message-ID: <20180205131428.1.908951674F5CDE5B@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/180d8b69/attachment.html>

From no-reply at appveyor.com  Mon Feb  5 14:21:19 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 14:21:19 +0000
Subject: [openssl-commits] Build completed: openssl master.15380
Message-ID: <20180205142119.1.895793A33B863565@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/2db7c54b/attachment.html>

From no-reply at appveyor.com  Mon Feb  5 14:45:24 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 14:45:24 +0000
Subject: [openssl-commits] Build failed: openssl master.15381
Message-ID: <20180205144524.1.7BB37C6D9FED2049@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/15893b6f/attachment.html>

From mark at openssl.org  Mon Feb  5 15:01:34 2018
From: mark at openssl.org (Mark J. Cox)
Date: Mon, 05 Feb 2018 15:01:34 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1517842894.308333.3284.nullmailer@dev.openssl.org>

The branch master has been updated
       via  8ba74cf7cecf400ff776874e4165e5c66653095a (commit)
       via  11b53fcc49c27a3adaa5282fb2567d084fae8f09 (commit)
      from  f7d3fb4dbadf9235d05d806b974b21b5a8f96487 (commit)


- Log -----------------------------------------------------------------
commit 8ba74cf7cecf400ff776874e4165e5c66653095a
Author: Mark J. Cox <mark at awe.com>
Date:   Mon Feb 5 15:00:47 2018 +0000

    Based on discussions with Mitre, over this field that isn't yet defined, but is unlikely
    to be machine parsable (looking at all the published ones to date).  They'd like "Fixed in"
    and "Affects", so let's give that both in a nice text format for the description and the
    vulnerability affects sections.

commit 11b53fcc49c27a3adaa5282fb2567d084fae8f09
Author: Mark J. Cox <mark at awe.com>
Date:   Mon Feb 5 14:57:10 2018 +0000

    CVE-2004-0081 was missing the 'fixed in 0.9.6d' line, causing it to not get included on the list of 0.9.6 issues
    and fail json validation.

-----------------------------------------------------------------------

Summary of changes:
 bin/vulnxml2json.py      | 23 ++++++++++++-----------
 news/vulnerabilities.xml |  2 ++
 2 files changed, 14 insertions(+), 11 deletions(-)

diff --git a/bin/vulnxml2json.py b/bin/vulnxml2json.py
index 41afbf8..b905da1 100755
--- a/bin/vulnxml2json.py
+++ b/bin/vulnxml2json.py
@@ -23,14 +23,16 @@ neverreleased = "1.0.0h,";
 # Location of CVE JSON schema (default, can use local file etc)
 default_cve_schema = "https://raw.githubusercontent.com/CVEProject/automation-working-group/master/cve_json_schema/CVE_JSON_4.0_min_public.schema"
 
-def merge_affects(issue):
+def merge_affects(issue,base):
     # let's merge the affects into a nice list which is better for Mitre text but we have to take into account our stange lettering scheme
     prev = ""
     anext = ""
     alist = list()
     vlist = list()
     for affects in issue.getElementsByTagName('affects'): # so we can sort them
-       vlist.append(affects.getAttribute("version"))
+       version = affects.getAttribute("version")
+       if (not base or base in version):
+           vlist.append(version)
     for ver in sorted(vlist):
        # print "version %s (last was %s, next was %s)" %(ver,prev,anext)
        if (ver != anext):
@@ -110,18 +112,17 @@ for issue in issues:
     if refs:
         cve['references'] = { "reference_data": refs  }
 
-    allaffects = list()
-    for affects in issue.getElementsByTagName('affects'):
-        allaffects.append({ "version_value":"openssl-"+affects.getAttribute("version")})
+    vv = list()
+    for affects in issue.getElementsByTagName('fixed'):
+        text = "Fixed in OpenSSL %s (Affected %s)" %(affects.getAttribute('version'),merge_affects(issue,affects.getAttribute("base")))
+        # Let's condense into a list form since the format of this field is 'free text' at the moment, not machine readable (as per mail with George Theall)
+        vv.append({"version_value":text})
+        # Mitre want the fixed/affected versions in the text too
+        desc += " "+text+"."
 
-    cve['affects'] = { "vendor" : { "vendor_data" : [ { "vendor_name": "OpenSSL", "product": { "product_data" : [ { "product_name": "OpenSSL", "version": { "version_data" : allaffects}}]}}]}}
-
-    # Mitre want the fixed/affected versions in the text too
-    
-    desc += " (Affects "+merge_affects(issue)+")."
+    cve['affects'] = { "vendor" : { "vendor_data" : [ { "vendor_name": "OpenSSL", "product": { "product_data" : [ { "product_name": "OpenSSL", "version": { "version_data" : vv}}]}}]}}
         
     # Mitre want newlines and excess spaces stripped
-
     desc = re.sub('[\n ]+',' ', desc)
         
     cve['description'] = { "description_data": [ { "lang":"eng", "value": desc} ] }
diff --git a/news/vulnerabilities.xml b/news/vulnerabilities.xml
index 80786e1..6e4c717 100644
--- a/news/vulnerabilities.xml
+++ b/news/vulnerabilities.xml
@@ -4638,6 +4638,8 @@ OpenSSL library in such a way as to cause a crash.
     <affects base="0.9.6" version="0.9.6a"/>
     <affects base="0.9.6" version="0.9.6b"/>
     <affects base="0.9.6" version="0.9.6c"/>
+    <fixed base="0.9.6" version="0.9.6d" date="20020603"/> <!-- guessed date -->
+    
     <advisory url="/news/secadv/20030317.txt"/>
     <reported source="OpenSSL group"/>
     <description>

From no-reply at appveyor.com  Mon Feb  5 16:30:42 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 16:30:42 +0000
Subject: [openssl-commits] Build failed: openssl OpenSSL_1_1_0-stable.15382
Message-ID: <20180205163042.1.84CB08C361BDB9C8@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/7ae212fd/attachment.html>

From rsalz at openssl.org  Mon Feb  5 16:38:02 2018
From: rsalz at openssl.org (Rich Salz)
Date: Mon, 05 Feb 2018 16:38:02 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1517848682.997083.17849.nullmailer@dev.openssl.org>

The branch master has been updated
       via  2cef09be2a43e95dcd9f35695716a797e12cce3b (commit)
      from  8ba74cf7cecf400ff776874e4165e5c66653095a (commit)


- Log -----------------------------------------------------------------
commit 2cef09be2a43e95dcd9f35695716a797e12cce3b
Author: Rich Salz <rsalz at akamai.com>
Date:   Mon Feb 5 11:37:59 2018 -0500

    Typo in directory name

-----------------------------------------------------------------------

Summary of changes:
 {.well_known => .well-known}/security.txt     | 0
 {.well_known => .well-known}/security.txt.asc | 0
 2 files changed, 0 insertions(+), 0 deletions(-)
 rename {.well_known => .well-known}/security.txt (100%)
 rename {.well_known => .well-known}/security.txt.asc (100%)

diff --git a/.well_known/security.txt b/.well-known/security.txt
similarity index 100%
rename from .well_known/security.txt
rename to .well-known/security.txt
diff --git a/.well_known/security.txt.asc b/.well-known/security.txt.asc
similarity index 100%
rename from .well_known/security.txt.asc
rename to .well-known/security.txt.asc

From no-reply at appveyor.com  Mon Feb  5 16:54:32 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 05 Feb 2018 16:54:32 +0000
Subject: [openssl-commits] Build completed: openssl master.15383
Message-ID: <20180205165432.1.76F0D3D02130A647@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180205/69d72553/attachment.html>

From matthias.st.pierre at ncp-e.com  Mon Feb  5 19:06:27 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Mon, 05 Feb 2018 19:06:27 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517857587.830646.5928.nullmailer@dev.openssl.org>

The branch master has been updated
       via  f61f62ea13470a00ae8be691d62abec97f94f0ee (commit)
       via  1648338ba1a63c19c7bae32170cd1d825b48eaee (commit)
       via  58351fbd02e9960af199df99f6f003419c1487a4 (commit)
      from  1c4b15458670aea5d3849d4b57b8c0ce34a54fbe (commit)


- Log -----------------------------------------------------------------
commit f61f62ea13470a00ae8be691d62abec97f94f0ee
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Sat Feb 3 22:33:19 2018 +0100

    Use RAND_DRBG_bytes() for RAND_bytes() and RAND_priv_bytes()
    
    The functions RAND_bytes() and RAND_priv_bytes() are now both based
    on a common implementation using RAND_DRBG_bytes() (if the default
    OpenSSL rand method is active). This not only simplifies the code
    but also has the advantage that additional input from a high precision
    timer is added on every generate call if the timer is available.
    
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5251)

commit 1648338ba1a63c19c7bae32170cd1d825b48eaee
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Sat Feb 3 22:32:47 2018 +0100

    Fix size limitation of RAND_DRBG_bytes()
    
    When comparing the implementations of drbg_bytes() and RAND_DRBG_bytes(),
    it was noticed that the former split the buffer into chunks when calling
    RAND_DRBG_generate() to circumvent the size limitation of the buffer
    to outlen <= drb->max_request. This loop was missing in RAND_DRBG_bytes(),
    so it was adopted from drbg_bytes().
    
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5251)

commit 58351fbd02e9960af199df99f6f003419c1487a4
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Sat Feb 3 21:13:19 2018 +0100

    drbg_bytes: remove check for DRBG_UNINITIALIZED state
    
    This check not only prevented the automatic reinstantiation of the
    DRBG, which is implemented in RAND_DRBG_generate(), but also prevented
    an error message from being generated in the case of failure.
    
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5251)

-----------------------------------------------------------------------

Summary of changes:
 crypto/rand/drbg_lib.c | 33 ++++++++++++++++-----------------
 crypto/rand/rand_lib.c |  4 ++--
 2 files changed, 18 insertions(+), 19 deletions(-)

diff --git a/crypto/rand/drbg_lib.c b/crypto/rand/drbg_lib.c
index cb2f9e8..4404e4f 100644
--- a/crypto/rand/drbg_lib.c
+++ b/crypto/rand/drbg_lib.c
@@ -546,10 +546,22 @@ int RAND_DRBG_bytes(RAND_DRBG *drbg, unsigned char *out, size_t outlen)
 {
     unsigned char *additional = NULL;
     size_t additional_len;
+    size_t chunk;
     size_t ret;
 
     additional_len = rand_drbg_get_additional_data(&additional, drbg->max_adinlen);
-    ret = RAND_DRBG_generate(drbg, out, outlen, 0, additional, additional_len);
+
+    for ( ; outlen > 0; outlen -= chunk, out += chunk) {
+        chunk = outlen;
+        if (chunk > drbg->max_request)
+            chunk = drbg->max_request;
+        ret = RAND_DRBG_generate(drbg, out, chunk, 0, additional, additional_len);
+        if (!ret)
+            goto err;
+    }
+    ret = 1;
+
+err:
     if (additional_len != 0)
         OPENSSL_secure_clear_free(additional, additional_len);
 
@@ -764,29 +776,16 @@ void rand_drbg_cleanup_int(void)
 /* Implements the default OpenSSL RAND_bytes() method */
 static int drbg_bytes(unsigned char *out, int count)
 {
-    int ret = 0;
-    size_t chunk;
+    int ret;
     RAND_DRBG *drbg = RAND_DRBG_get0_public();
 
     if (drbg == NULL)
         return 0;
 
     CRYPTO_THREAD_write_lock(drbg->lock);
-    if (drbg->state == DRBG_UNINITIALISED)
-        goto err;
-
-    for ( ; count > 0; count -= chunk, out += chunk) {
-        chunk = count;
-        if (chunk > drbg->max_request)
-            chunk = drbg->max_request;
-        ret = RAND_DRBG_generate(drbg, out, chunk, 0, NULL, 0);
-        if (!ret)
-            goto err;
-    }
-    ret = 1;
-
-err:
+    ret = RAND_DRBG_bytes(drbg, out, count);
     CRYPTO_THREAD_unlock(drbg->lock);
+
     return ret;
 }
 
diff --git a/crypto/rand/rand_lib.c b/crypto/rand/rand_lib.c
index 20ac583..e82a63e 100644
--- a/crypto/rand/rand_lib.c
+++ b/crypto/rand/rand_lib.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -719,7 +719,7 @@ int RAND_priv_bytes(unsigned char *buf, int num)
 
     /* We have to lock the DRBG before generating bits from it. */
     CRYPTO_THREAD_write_lock(drbg->lock);
-    ret = RAND_DRBG_generate(drbg, buf, num, 0, NULL, 0);
+    ret = RAND_DRBG_bytes(drbg, buf, num);
     CRYPTO_THREAD_unlock(drbg->lock);
     return ret;
 }

From no-reply at appveyor.com  Tue Feb  6 01:53:48 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 06 Feb 2018 01:53:48 +0000
Subject: [openssl-commits] Build failed: openssl master.15389
Message-ID: <20180206015348.1.DE293A829AED39C5@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/be372915/attachment.html>

From mark at openssl.org  Tue Feb  6 09:01:34 2018
From: mark at openssl.org (Mark J. Cox)
Date: Tue, 06 Feb 2018 09:01:34 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1517907694.623038.24207.nullmailer@dev.openssl.org>

The branch master has been updated
       via  93624a912c2c58b247062aed08492ef988df292e (commit)
       via  e18f270d1a141d407f43cc6eea82d860210180e7 (commit)
      from  2cef09be2a43e95dcd9f35695716a797e12cce3b (commit)


- Log -----------------------------------------------------------------
commit 93624a912c2c58b247062aed08492ef988df292e
Merge: e18f270 2cef09b
Author: Mark J. Cox <mark at awe.com>
Date:   Tue Feb 6 09:01:10 2018 +0000

    Merge branch 'master' of git.openssl.org:openssl-web

commit e18f270d1a141d407f43cc6eea82d860210180e7
Author: Mark J. Cox <mark at awe.com>
Date:   Tue Feb 6 09:00:32 2018 +0000

    When an issue affects more than one release list the releases latest first

-----------------------------------------------------------------------

Summary of changes:
 bin/mk-cvepage | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/mk-cvepage b/bin/mk-cvepage
index 4a6f942..8dbb864 100755
--- a/bin/mk-cvepage
+++ b/bin/mk-cvepage
@@ -115,7 +115,7 @@ for issue in sorted(issues, key=lambda x: (x.getAttribute('public'), x.getElemen
     allissues += "<ul>"
 
     also = []
-    for affects in issue.getElementsByTagName('fixed'):
+    for affects in sorted(issue.getElementsByTagName('fixed'), key=lambda x: (x.getAttribute("base")), reverse=True):
         if options.base:
             if (affects.getAttribute("base") not in options.base):
                 also.append("OpenSSL <a href=\"vulnerabilities-%s.html#CVE-%s\">%s</a>" %( affects.getAttribute('base'), cve, affects.getAttribute('version')))

From mark at openssl.org  Tue Feb  6 09:40:06 2018
From: mark at openssl.org (Mark J. Cox)
Date: Tue, 06 Feb 2018 09:40:06 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1517910006.399866.28477.nullmailer@dev.openssl.org>

The branch master has been updated
       via  2e6c180201d8859df3dd8c303894963030b3121a (commit)
      from  93624a912c2c58b247062aed08492ef988df292e (commit)


- Log -----------------------------------------------------------------
commit 2e6c180201d8859df3dd8c303894963030b3121a
Author: Mark J. Cox <mark at awe.com>
Date:   Tue Feb 6 09:39:00 2018 +0000

    Update the git commit links to use the right trees and add some missing
    commit links (20160819 to date is complete)

-----------------------------------------------------------------------

Summary of changes:
 news/vulnerabilities.xml | 61 +++++++++++++++++++++++++++++++++++-------------
 1 file changed, 45 insertions(+), 16 deletions(-)

diff --git a/news/vulnerabilities.xml b/news/vulnerabilities.xml
index 6e4c717..c81332c 100644
--- a/news/vulnerabilities.xml
+++ b/news/vulnerabilities.xml
@@ -73,7 +73,9 @@
     <affects base="1.0.2" version="1.0.2k"/>
     <affects base="1.0.2" version="1.0.2l"/>
     <affects base="1.0.2" version="1.0.2m"/>
-    <fixed base="1.0.2" version="1.0.2n" date="20171207"/>
+    <fixed base="1.0.2" version="1.0.2n" date="20171207">
+      <git hash="ca51bafc1a88d8b8348f5fd97adc5d6ca93f8e76"/>
+    </fixed>
     <fixed base="1.1.0" version="1.1.0h-dev" date="20171207">
       <git hash="e502cc86df9dafded1694fceb3228ee34d11c11a"/>
     </fixed>
@@ -128,7 +130,9 @@
     <affects base="1.0.2" version="1.0.2j"/>
     <affects base="1.0.2" version="1.0.2k"/>
     <affects base="1.0.2" version="1.0.2l"/>
-    <fixed base="1.0.2" version="1.0.2m" date="20171102"/>
+    <fixed base="1.0.2" version="1.0.2m" date="20171102">
+      <git hash="38d600147331d36e74174ebbd4008b63188b321b"/>
+    </fixed>
     <fixed base="1.1.0" version="1.1.0g" date="20171102">
       <git hash="4443cf7aa0099e5ce615c18cee249fff77fb0871"/>
     </fixed>
@@ -176,7 +180,9 @@
     <affects base="1.0.2" version="1.0.2j"/>
     <affects base="1.0.2" version="1.0.2k"/>
     <affects base="1.0.2" version="1.0.2l"/>
-    <fixed base="1.0.2" version="1.0.2m" date="20171102"/>
+    <fixed base="1.0.2" version="1.0.2m" date="20171102">
+      <git hash="31c8b265591a0aaa462a1f3eb5770661aaac67db"/>
+    </fixed>
     <fixed base="1.1.0" version="1.1.0g" date="20171102">
       <git hash="068b963bb7afc57f5bdd723de0dd15e7795d5822"/>
     </fixed>
@@ -234,7 +240,7 @@
       <git hash="00d965474b22b54e4275232bc71ee0c699c5cd21"/>
     </fixed>
     <fixed base="1.0.2" version="1.0.2k" date="20170126">
-      <git hash="8e20499629b6bcf868d0072c7011e590b5c2294d"/>
+      <git hash="51d009043670a627d6abe66894126851cf3690e9"/>
     </fixed>
     <problemtype>out-of-bounds read</problemtype>
     <title>Truncated packet could crash via OOB read</title>
@@ -294,7 +300,9 @@
     <fixed base="1.1.0" version="1.1.0d" date="20170126">
       <git hash="a59b90bf491410f1f2bc4540cc21f1980fd14c5b"/>
     </fixed>
-    <fixed base="1.0.2" version="1.0.2k" date="20170126"/>
+    <fixed base="1.0.2" version="1.0.2k" date="20170126">
+      <git hash="760d04342a495ee86bf5adc71a91d126af64397f"/>
+    </fixed>
     <problemtype>carry-propagating bug</problemtype>
     <title>BN_mod_exp may produce incorrect results on x86_64</title>
     <description>
@@ -377,7 +385,9 @@
     <fixed base="1.1.0" version="1.1.0c" date="20161110">
       <git hash="2a7dd548a6f5d6f7f84a89c98323b70a2822406e"/>
     </fixed>
-    <fixed base="1.0.2" version="1.0.2k" date="20170126"/>
+    <fixed base="1.0.2" version="1.0.2k" date="20170126">
+      <git hash="57c4b9f6a2f800b41ce2836986fe33640f6c3f8a"/>
+    </fixed>
     <problemtype>carry propagating bug</problemtype>
     <title>Montgomery multiplication may produce incorrect results</title>
     <description>
@@ -427,7 +437,7 @@
     <cve name="2016-7052"/>
     <affects base="1.0.2" version="1.0.2i"/>
     <fixed base="1.0.2" version="1.0.2j" date="20160926">
-      <git hash="8b7c51a0e4a03895a657cf2eb8d5c2aa1ca3586f"/>
+      <git hash="6e629b5be45face20b4ca71c4fcbfed78b864a2e"/>
     </fixed>
     <problemtype>NULL pointer exception</problemtype>                        
     <description>
@@ -474,8 +484,12 @@
     <affects base="1.0.2" version="1.0.2g"/>
     <affects base="1.0.2" version="1.0.2h"/>
     <affects base="1.1.0" version="1.1.0"/>
-    <fixed base="1.0.1" version="1.0.1u" date="20160922"/>
-    <fixed base="1.0.2" version="1.0.2i" date="20160922"/>
+    <fixed base="1.0.1" version="1.0.1u" date="20160922">
+      <git hash="2c0d295e26306e15a92eb23a84a1802005c1c137"/>
+    </fixed>
+    <fixed base="1.0.2" version="1.0.2i" date="20160922">
+      <git hash="ea39b16b71e4e72a228a4535bd6d6a02c5edbc1f"/>
+    </fixed>
     <fixed base="1.1.0" version="1.1.0a" date="20160922">
       <git hash="a59ab1c4dd27a4c7c6e88f3c33747532fd144412"/>
     </fixed>
@@ -545,7 +559,9 @@
     <affects base="1.0.2" version="1.0.2f"/>
     <affects base="1.0.2" version="1.0.2g"/>
     <affects base="1.0.2" version="1.0.2h"/>
-    <fixed base="1.0.1" version="1.0.1u" date="20160922"/>
+    <fixed base="1.0.1" version="1.0.1u" date="20160922">
+      <git hash="2b4029e68fd7002d2307e6c3cde0f3784eef9c83"/>
+    </fixed>
     <fixed base="1.0.2" version="1.0.2i" date="20160922">
       <git hash="1027ad4f34c30b8585592764b9a670ba36888269"/>
     </fixed>
@@ -596,8 +612,12 @@
     <affects base="1.0.2" version="1.0.2f"/>
     <affects base="1.0.2" version="1.0.2g"/>
     <affects base="1.0.2" version="1.0.2h"/>
-    <fixed base="1.0.1" version="1.0.1u" date="20160922"/>
-    <fixed base="1.0.2" version="1.0.2i" date="20160922"/>
+    <fixed base="1.0.1" version="1.0.1u" date="20160922">
+      <git hash="1bbe48ab149893a78bf99c8eb8895c928900a16f"/>
+    </fixed>
+    <fixed base="1.0.2" version="1.0.2i" date="20160922">
+      <git hash="baaabfd8fdcec04a691695fad9a664bea43202b6"/>
+    </fixed>
 
     <description>
       If a server uses SHA512 for TLS session ticket HMAC it is vulnerable to a
@@ -838,7 +858,9 @@
     <affects base="1.0.2" version="1.0.2f"/>
     <affects base="1.0.2" version="1.0.2g"/>
     <affects base="1.0.2" version="1.0.2h"/>
-    <fixed base="1.0.1" version="1.0.1u" date="20160922"/>
+    <fixed base="1.0.1" version="1.0.1u" date="20160922">
+      <git hash="00a4c1421407b6ac796688871b0a49a179c694d9"/>
+    </fixed>
     <fixed base="1.0.2" version="1.0.2i" date="20160922">
       <git hash="26f2c5774f117aea588e8f31fad38bcf14e83bec"/>
     </fixed>
@@ -891,8 +913,13 @@
     <affects base="1.0.2" version="1.0.2f"/>
     <affects base="1.0.2" version="1.0.2g"/>
     <affects base="1.0.2" version="1.0.2h"/>
-    <fixed base="1.0.1" version="1.0.1u" date="20160922"/>
-    <fixed base="1.0.2" version="1.0.2i" date="20160922"/>
+    <fixed base="1.0.1" version="1.0.1u" date="20160922">
+      <git hash="b77ab018b79a00f789b0fb85596b446b08be4c9d"/>
+    </fixed>
+    <fixed base="1.0.2" version="1.0.2i" date="20160922">
+      <git hash="3884b47b7c255c2e94d9b387ee83c7e8bb981258"/>
+    </fixed>
+    
 
     <description>
       A flaw in the DTLS replay attack protection mechanism means that records that
@@ -939,7 +966,9 @@
     <affects base="1.0.2" version="1.0.2f"/>
     <affects base="1.0.2" version="1.0.2g"/>
     <affects base="1.0.2" version="1.0.2h"/>
-    <fixed base="1.0.1" version="1.0.1u" date="20160922"/>
+    <fixed base="1.0.1" version="1.0.1u" date="20160922">
+      <git hash="bb1a4866034255749ac578adb06a76335fc117b1"/>
+    </fixed>
     <fixed base="1.0.2" version="1.0.2i" date="20160922">
       <git hash="006a788c84e541c8920dd2ad85fb62b52185c519"/>
     </fixed>

From matt at openssl.org  Tue Feb  6 10:31:51 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 06 Feb 2018 10:31:51 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1517913111.081928.3741.nullmailer@dev.openssl.org>

The branch master has been updated
       via  367e9e231647cde13f9c37d65b2e28bbf85d3a84 (commit)
      from  2e6c180201d8859df3dd8c303894963030b3121a (commit)


- Log -----------------------------------------------------------------
commit 367e9e231647cde13f9c37d65b2e28bbf85d3a84
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Jan 25 18:59:48 2018 +0000

    Update release strategy for 1.1.1
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/41)

-----------------------------------------------------------------------

Summary of changes:
 policies/releasestrat.html | 61 ++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 59 insertions(+), 2 deletions(-)

diff --git a/policies/releasestrat.html b/policies/releasestrat.html
index 13cd0e9..36eb4b2 100644
--- a/policies/releasestrat.html
+++ b/policies/releasestrat.html
@@ -13,7 +13,7 @@
 	  <h2>Release Strategy</h2>
 	  <h5>
 	    First issued 23rd December 2014<br/>
-	    Last modified 6th September 2016
+	    Last modified 6th February 2018
 	  </h5>
 	</header>
 
@@ -52,7 +52,7 @@
 	  project has adopted the following policy:</p>
 
 	  <ul>
-	    <li>Version 1.1.0 will be supported until 2018-08-31.</li>
+	    <li>Version 1.1.0 will be supported until one year after the release of 1.1.1</li>
 	    <li>Version 1.0.2 will be supported until 2019-12-31 (LTS).</li>
             <li>Version 1.0.1 is no longer supported.</li>
 	    <li>Version 1.0.0 is no longer supported.</li>
@@ -69,6 +69,63 @@
 	  fixes. Before that, bug and security fixes will be applied
 	  as appropriate.</p>
 
+	  <p>The next version of OpenSSL will be 1.1.1. This is currently in
+	  development and has a primary focus of implementing TLSv1.3. The
+	  RFC for TLSv1.3 has not yet been published by the IETF. OpenSSL 1.1.1
+	  will not have its final release until that has happened.</p>
+
+	  <p>The draft release timetable for 1.1.1 is as follows. This may be
+          amended at any time as the need arises.</p>
+
+	  <ul>
+	    <li>13th February 2018, alpha release 1 (pre1)</li>
+	    <li>27th February 2018, alpha release 2 (pre2)</li>
+	    <li>13th March 2018, beta release 1 (pre3)
+              <ul>
+	        <li>OpenSSL_1_1_1-stable created (feature freeze)</li>
+	        <li>master becomes basis for 1.1.2 or 1.2.0 (TBD)</li>
+	      </ul>
+	    <li>27th March 2018, beta release 2 (pre4)</li>
+	    <li>10th April 2018, beta release 3 (pre5)</li>
+	    <li>24th April 2018, beta release 4 (pre6)</li>
+	    <li>1st May 2018, release readiness check (new release cycles added if
+	        required, first possible final release date: 8th May 2018)</li>
+	  </ul>
+
+	  <p>An alpha release means:</p>
+	  <ul>
+	    <li>Not (necessarily) feature complete</li>
+	    <li>Not necessarily all new APIs in place yet</li>
+	  </ul>
+
+	  <p>A beta release means:</p>
+	  <ul>
+	    <li>Feature complete/Feature freeze (but may include a non-final implementation of the TLSv1.3 specification)</li>
+	    <li>Bug fixes only</li>
+	  </ul>
+
+	  <p>We have defined the following release criteria for 1.1.1:</p>
+	  <ul>
+	    <li>All open github issues/PRs older than 2 weeks at the time of release
+	    to be assessed for relevance to 1.1.1. Any flagged with the 1.1.1
+	    milestone to be closed (see below)</li>
+	    <li>Clean builds in Travis and Appveyor for two days</li>
+	    <li>run-checker.sh to be showing as clean 2 days before release</li>
+	    <li>No open Coverity issues (not flagged as "False Positive" or "Ignore")</li>
+	    <li>TLSv1.3 RFC published</li>
+	  </ul>
+
+	  <p>Valid reasons for closing an issue/PR with a 1.1.1 milestone might be:</p>
+	  <ul>
+	    <li>We have just now or sometime in the past fixed the issue</li>
+	    <li>Unable to reproduce (following discussion with original reporter if
+	    possible)</li>
+	    <li>Working as intended</li>
+	    <li>Deliberate decision not to fix until a later release (this wouldn't
+	    actually close the issue/PR but change the milestone instead)</li>
+	    <li>Not enough information and unable to contact reporter</li>
+	    <li>etc</li>
+	  </ul>
 	</div>
 	<footer>
 	  You are here: <a href="/">Home</a>

From levitte at openssl.org  Tue Feb  6 12:31:43 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 06 Feb 2018 12:31:43 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517920303.923859.17700.nullmailer@dev.openssl.org>

The branch master has been updated
       via  54f3b7d2f5a313e5c702f75ee030f8a08e6bf6aa (commit)
      from  f61f62ea13470a00ae8be691d62abec97f94f0ee (commit)


- Log -----------------------------------------------------------------
commit 54f3b7d2f5a313e5c702f75ee030f8a08e6bf6aa
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Jan 24 14:17:39 2018 +0100

    util/mkdef.pl: Trust configdata.pm
    
    This script kept its own database of disablable algorithms, which is a
    maintenance problem, as it's not always perfectly in sync with what
    Configure does.  However, we do have all the data in configdata.pm,
    produced by Configure, so let's use that instead.
    
    Also, make sure to parse the *err.h header files, as they contain
    function declarations that might not be present elsewhere.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5157)

-----------------------------------------------------------------------

Summary of changes:
 util/mkdef.pl | 84 +++++++++--------------------------------------------------
 1 file changed, 13 insertions(+), 71 deletions(-)

diff --git a/util/mkdef.pl b/util/mkdef.pl
index 98cdae5..72d1c8f 100755
--- a/util/mkdef.pl
+++ b/util/mkdef.pl
@@ -133,73 +133,23 @@ my @known_platforms = ( "__FreeBSD__", "PERL5",
 			"EXPORT_VAR_AS_FUNCTION", "ZLIB", "_WIN32"
 			);
 my @known_ossl_platforms = ( "UNIX", "VMS", "WIN32", "WINNT", "OS2" );
-my @known_algorithms = ( "RC2", "RC4", "RC5", "IDEA", "DES", "BF",
-			 "CAST", "MD2", "MD4", "MD5", "SHA", "SHA0", "SHA1",
-			 "SHA256", "SHA512", "RMD160",
-			 "MDC2", "WHIRLPOOL", "RSA", "DSA", "DH", "EC", "EC2M",
-			 "HMAC", "AES", "CAMELLIA", "SEED", "GOST", "ARIA", "SM4",
-                         "SCRYPT", "CHACHA", "POLY1305", "BLAKE2",
-			 "SIPHASH", "SM3",
-			 # EC_NISTP_64_GCC_128
-			 "EC_NISTP_64_GCC_128",
-			 # Envelope "algorithms"
-			 "EVP", "X509", "ASN1_TYPEDEFS",
-			 # Helper "algorithms"
-			 "BIO", "COMP", "BUFFER", "LHASH", "STACK", "ERR",
-			 "LOCKING",
-			 # External "algorithms"
-			 "FP_API", "STDIO", "SOCK", "DGRAM",
-                         "CRYPTO_MDEBUG",
-			 # Engines
-                         "STATIC_ENGINE", "ENGINE", "HW", "GMP",
-			 # Entropy Gathering
-			 "EGD",
-			 # Certificate Transparency
-			 "CT",
-			 # RFC3779
-			 "RFC3779",
-			 # TLS
-			 "PSK", "SRP", "HEARTBEATS",
-			 # CMS
-			 "CMS",
-                         "OCSP",
-			 # CryptoAPI Engine
-			 "CAPIENG",
-			 # SSL methods
-			 "SSL3_METHOD", "TLS1_METHOD", "TLS1_1_METHOD", "TLS1_2_METHOD", "DTLS1_METHOD", "DTLS1_2_METHOD",
-			 # NEXTPROTONEG
-			 "NEXTPROTONEG",
-			 # Deprecated functions
+my @known_algorithms = ( # These are algorithms we know are guarded in relevant
+			 # header files, but aren't actually disablable.
+			 # Without these, this script will warn a lot.
+			 "RSA", "MD5",
+			 # @disablables comes from configdata.pm
+			 map { (my $x = uc $_) =~ s|-|_|g; $x; } @disablables,
+			 # Deprecated functions.  Not really algorithmss, but
+			 # treated as such here for the sake of simplicity
 			 "DEPRECATEDIN_0_9_8",
 			 "DEPRECATEDIN_1_0_0",
 			 "DEPRECATEDIN_1_1_0",
 			 "DEPRECATEDIN_1_2_0",
-			 # SCTP
-		 	 "SCTP",
-			 # SRTP
-			 "SRTP",
-			 # SSL TRACE
-		 	 "SSL_TRACE",
-			 # Unit testing
-		 	 "UNIT_TEST",
-			 # User Interface
-			 "UI_CONSOLE",
-			 #
-			 "TS",
-			 # OCB mode
-			 "OCB",
-			 "CMAC",
-                         # APPLINK (win build feature?)
-                         "APPLINK"
                      );
 
-my %disabled_algorithms;
-
-foreach (@known_algorithms) {
-    $disabled_algorithms{$_} = 0;
-}
-# disabled by default
-$disabled_algorithms{"STATIC_ENGINE"} = 1;
+# %disabled comes from configdata.pm
+my %disabled_algorithms =
+    map { (my $x = uc $_) =~ s|-|_|g; $x => 1; } keys %disabled;
 
 my $apiv = sprintf "%x%02x%02x", split(/\./, $config{api});
 foreach (keys %disabled_algorithms) {
@@ -240,14 +190,6 @@ foreach (@ARGV, split(/ /, $config{options}))
 	$do_ctest=1 if $_ eq "ctest";
 	$do_ctestall=1 if $_ eq "ctestall";
 	$do_checkexist=1 if $_ eq "exist";
-	if (/^(enable|disable|no)-(.*)$/) {
-		my $alg = uc $2;
-		$alg =~ tr/-/_/;
-		if (exists $disabled_algorithms{$alg}) {
-			$disabled_algorithms{$alg} = $1 eq "enable" ? 0 : 1;
-		}
-	}
-
 	}
 $libname = $unified_info{sharednames}->{libcrypto} if $do_crypto;
 $libname = $unified_info{sharednames}->{libssl} if $do_ssl;
@@ -302,7 +244,7 @@ $crypto.=" include/internal/err.h";
 $crypto.=" include/internal/rand.h";
 foreach my $f ( glob(catfile($config{sourcedir},'include/openssl/*.h')) ) {
     my $fn = "include/openssl/" . lc(basename($f));
-    $crypto .= " $fn" if !defined $skipthese{$fn} && $f !~ m@/[a-z]+err\.h$@;
+    $crypto .= " $fn" if !defined $skipthese{$fn};
 }
 
 my $symhacks="include/openssl/symhacks.h";
@@ -1138,7 +1080,7 @@ sub is_valid
 			return 0;
 		} else {
 			# algorithms
-			if ($disabled_algorithms{$keyword} == 1) { return 0;}
+			if ($disabled_algorithms{$keyword}) { return 0;}
 
 			# Nothing recognise as true
 			return 1;

From no-reply at appveyor.com  Tue Feb  6 13:25:24 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 06 Feb 2018 13:25:24 +0000
Subject: [openssl-commits] Build completed: openssl master.15390
Message-ID: <20180206132524.1.EF60DF722E5B0F61@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/d0f33dce/attachment-0001.html>

From no-reply at appveyor.com  Tue Feb  6 16:39:57 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 06 Feb 2018 16:39:57 +0000
Subject: [openssl-commits] Build failed: openssl master.15394
Message-ID: <20180206163957.1.C5AA20AEC50D7708@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/70a28cb4/attachment.html>

From levitte at openssl.org  Tue Feb  6 18:35:31 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 06 Feb 2018 18:35:31 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1517942131.153200.28307.nullmailer@dev.openssl.org>

The branch master has been updated
       via  39fcb89f6c9c55b9c5862451ea111c1888e88c14 (commit)
      from  367e9e231647cde13f9c37d65b2e28bbf85d3a84 (commit)


- Log -----------------------------------------------------------------
commit 39fcb89f6c9c55b9c5862451ea111c1888e88c14
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 6 19:34:48 2018 +0100

    Correct signature file name

-----------------------------------------------------------------------

Summary of changes:
 .well-known/security.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.well-known/security.txt b/.well-known/security.txt
index 714a431..d56daa5 100644
--- a/.well-known/security.txt
+++ b/.well-known/security.txt
@@ -2,4 +2,4 @@ Contact: openssl-security at openssl.org
 Encryption: https://www.openssl.org/news/openssl-security.asc
 Acknowledgement: https://www.openssl.org/news/vulnerabilities.html
 Policy: https://www.openssl.org/policies/secpolicy.html
-signature: https://www.openssl.org/.well-known/security.txt.sig
+Signature: https://www.openssl.org/.well-known/security.txt.asc

From no-reply at appveyor.com  Tue Feb  6 18:39:07 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 06 Feb 2018 18:39:07 +0000
Subject: [openssl-commits] Build failed: openssl master.15396
Message-ID: <20180206183907.1.3D09D366C1665CFE@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/ec7e31b2/attachment.html>

From appro at openssl.org  Tue Feb  6 18:41:45 2018
From: appro at openssl.org (Andy Polyakov)
Date: Tue, 06 Feb 2018 18:41:45 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517942505.721670.29396.nullmailer@dev.openssl.org>

The branch master has been updated
       via  5d2a6f4b71769e45d9c65ae071dc8221590cf14e (commit)
       via  39f5b069ac4b0ccd953f2237b7a6c2018230726d (commit)
      from  54f3b7d2f5a313e5c702f75ee030f8a08e6bf6aa (commit)


- Log -----------------------------------------------------------------
commit 5d2a6f4b71769e45d9c65ae071dc8221590cf14e
Author: Patrick Steuer <patrick.steuer at de.ibm.com>
Date:   Sat Feb 3 17:46:34 2018 +0100

    crypto/evp/e_aes.c: add comments to s390x aes gcm implementation
    
    Signed-off-by: Patrick Steuer <patrick.steuer at de.ibm.com>
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5230)

commit 39f5b069ac4b0ccd953f2237b7a6c2018230726d
Author: Patrick Steuer <patrick.steuer at de.ibm.com>
Date:   Thu Jan 18 10:14:30 2018 +0100

    s390x assembly pack: add KMAC code path for aes-ccm
    
    Signed-off-by: Patrick Steuer <patrick.steuer at de.ibm.com>
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5230)

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/e_aes.c   | 570 +++++++++++++++++++++++++++++++++++++++++++++++++--
 crypto/s390x_arch.h  |   2 +
 crypto/s390xcpuid.pl |  21 ++
 3 files changed, 581 insertions(+), 12 deletions(-)

diff --git a/crypto/evp/e_aes.c b/crypto/evp/e_aes.c
index 0c717a8..e56be16 100644
--- a/crypto/evp/e_aes.c
+++ b/crypto/evp/e_aes.c
@@ -960,8 +960,8 @@ typedef struct {
     union {
         double align;
         /*-
-         * KMA-GCM-AES parameter block
-         * (see z/Architecture Principles of Operation SA22-7832-11)
+         * KMA-GCM-AES parameter block - begin
+         * (see z/Architecture Principles of Operation >= SA22-7832-11)
          */
         struct {
             unsigned char reserved[12];
@@ -982,6 +982,7 @@ typedef struct {
             } j0;
             unsigned char k[32];
         } param;
+        /* KMA-GCM-AES parameter block - end */
     } kma;
     unsigned int fc;
     int key_set;
@@ -1003,6 +1004,58 @@ typedef struct {
     int tls_aad_len;
 } S390X_AES_GCM_CTX;
 
+typedef struct {
+    union {
+        double align;
+        /*-
+         * Padding is chosen so that ccm.kmac_param.k overlaps with key.k and
+         * ccm.fc with key.k.rounds. Remember that on s390x, an AES_KEY's
+         * rounds field is used to store the function code and that the key
+         * schedule is not stored (if aes hardware support is detected).
+         */
+        struct {
+            unsigned char pad[16];
+            AES_KEY k;
+        } key;
+
+        struct {
+            /*-
+             * KMAC-AES parameter block - begin
+             * (see z/Architecture Principles of Operation >= SA22-7832-08)
+             */
+            struct {
+                union {
+                    unsigned long long g[2];
+                    unsigned char b[16];
+                } icv;
+                unsigned char k[32];
+            } kmac_param;
+            /* KMAC-AES paramater block - end */
+
+            union {
+                unsigned long long g[2];
+                unsigned char b[16];
+            } nonce;
+            union {
+                unsigned long long g[2];
+                unsigned char b[16];
+            } buf;
+
+            unsigned long long blocks;
+            int l;
+            int m;
+            int tls_aad_len;
+            int iv_set;
+            int tag_set;
+            int len_set;
+            int key_set;
+
+            unsigned char pad[140];
+            unsigned int fc;
+        } ccm;
+    } aes;
+} S390X_AES_CCM_CTX;
+
 # define S390X_aes_128_CAPABLE ((OPENSSL_s390xcap_P.km[0] &	\
                                  S390X_CAPBIT(S390X_AES_128)) &&\
                                 (OPENSSL_s390xcap_P.kmc[0] &	\
@@ -1089,6 +1142,10 @@ static int s390x_aes_ctr_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
 /* iv + padding length for iv lenghts != 12 */
 # define S390X_gcm_ivpadlen(i)	((((i) + 15) >> 4 << 4) + 16)
 
+/*-
+ * Process additional authenticated data. Returns 0 on success. Code is
+ * big-endian.
+ */
 static int s390x_aes_gcm_aad(S390X_AES_GCM_CTX *ctx, const unsigned char *aad,
                              size_t len)
 {
@@ -1139,6 +1196,10 @@ static int s390x_aes_gcm_aad(S390X_AES_GCM_CTX *ctx, const unsigned char *aad,
     return 0;
 }
 
+/*-
+ * En/de-crypt plain/cipher-text and authenticate ciphertext. Returns 0 for
+ * success. Code is big-endian.
+ */
 static int s390x_aes_gcm(S390X_AES_GCM_CTX *ctx, const unsigned char *in,
                          unsigned char *out, size_t len)
 {
@@ -1224,6 +1285,9 @@ static int s390x_aes_gcm(S390X_AES_GCM_CTX *ctx, const unsigned char *in,
     return 0;
 }
 
+/*-
+ * Initialize context structure. Code is big-endian.
+ */
 static void s390x_aes_gcm_setiv(S390X_AES_GCM_CTX *ctx,
                                 const unsigned char *iv)
 {
@@ -1254,6 +1318,11 @@ static void s390x_aes_gcm_setiv(S390X_AES_GCM_CTX *ctx,
     }
 }
 
+/*-
+ * Performs various operations on the context structure depending on control
+ * type. Returns 1 for success, 0 for failure and -1 for unknown control type.
+ * Code is big-endian.
+ */
 static int s390x_aes_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
 {
     S390X_AES_GCM_CTX *gctx = EVP_C_DATA(S390X_AES_GCM_CTX, c);
@@ -1419,6 +1488,9 @@ static int s390x_aes_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
     }
 }
 
+/*-
+ * Set key and/or iv. Returns 1 on success. Otherwise 0 is returned.
+ */
 static int s390x_aes_gcm_init_key(EVP_CIPHER_CTX *ctx,
                                   const unsigned char *key,
                                   const unsigned char *iv, int enc)
@@ -1458,6 +1530,10 @@ static int s390x_aes_gcm_init_key(EVP_CIPHER_CTX *ctx,
     return 1;
 }
 
+/*-
+ * En/de-crypt and authenticate TLS packet. Returns the number of bytes written
+ * if successful. Otherwise -1 is returned. Code is big-endian.
+ */
 static int s390x_aes_gcm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
                                     const unsigned char *in, size_t len)
 {
@@ -1500,6 +1576,12 @@ err:
     return rv;
 }
 
+/*-
+ * Called from EVP layer to initialize context, process additional
+ * authenticated data, en/de-crypt plain/cipher-text and authenticate
+ * ciphertext or process a TLS packet, depending on context. Returns bytes
+ * written on success. Otherwise -1 is returned. Code is big-endian.
+ */
 static int s390x_aes_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
                                 const unsigned char *in, size_t len)
 {
@@ -1581,20 +1663,484 @@ static int s390x_aes_xts_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
 static int s390x_aes_xts_ctrl(EVP_CIPHER_CTX *, int type, int arg, void *ptr);
 # define s390x_aes_xts_cleanup aes_xts_cleanup
 
-# define S390X_AES_CCM_CTX		EVP_AES_CCM_CTX
-# define S390X_aes_128_ccm_CAPABLE	0
-# define S390X_aes_192_ccm_CAPABLE	0
-# define S390X_aes_256_ccm_CAPABLE	0
+# define S390X_aes_128_ccm_CAPABLE (S390X_aes_128_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmac[0] &	\
+                                     S390X_CAPBIT(S390X_AES_128)))
+# define S390X_aes_192_ccm_CAPABLE (S390X_aes_192_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmac[0] &	\
+                                     S390X_CAPBIT(S390X_AES_192)))
+# define S390X_aes_256_ccm_CAPABLE (S390X_aes_256_CAPABLE &&		\
+                                    (OPENSSL_s390xcap_P.kmac[0] &	\
+                                     S390X_CAPBIT(S390X_AES_256)))
+
+# define S390X_CCM_AAD_FLAG	0x40
+
+/*-
+ * Set nonce and length fields. Code is big-endian.
+ */
+static inline void s390x_aes_ccm_setiv(S390X_AES_CCM_CTX *ctx,
+                                          const unsigned char *nonce,
+                                          size_t mlen)
+{
+    ctx->aes.ccm.nonce.b[0] &= ~S390X_CCM_AAD_FLAG;
+    ctx->aes.ccm.nonce.g[1] = mlen;
+    memcpy(ctx->aes.ccm.nonce.b + 1, nonce, 15 - ctx->aes.ccm.l);
+}
+
+/*-
+ * Process additional authenticated data. Code is big-endian.
+ */
+static void s390x_aes_ccm_aad(S390X_AES_CCM_CTX *ctx, const unsigned char *aad,
+                              size_t alen)
+{
+    unsigned char *ptr;
+    int i, rem;
+
+    if (!alen)
+        return;
+
+    ctx->aes.ccm.nonce.b[0] |= S390X_CCM_AAD_FLAG;
+
+    /* Suppress 'type-punned pointer dereference' warning. */
+    ptr = ctx->aes.ccm.buf.b;
+
+    if (alen < ((1 << 16) - (1 << 8))) {
+        *(uint16_t *)ptr = alen;
+        i = 2;
+    } else if (sizeof(alen) == 8
+               && alen >= (size_t)1 << (32 % (sizeof(alen) * 8))) {
+        *(uint16_t *)ptr = 0xffff;
+        *(uint64_t *)(ptr + 2) = alen;
+        i = 10;
+    } else {
+        *(uint16_t *)ptr = 0xfffe;
+        *(uint32_t *)(ptr + 2) = alen;
+        i = 6;
+    }
+
+    while (i < 16 && alen) {
+        ctx->aes.ccm.buf.b[i] = *aad;
+        ++aad;
+        --alen;
+        ++i;
+    }
+    while (i < 16) {
+        ctx->aes.ccm.buf.b[i] = 0;
+        ++i;
+    }
+
+    ctx->aes.ccm.kmac_param.icv.g[0] = 0;
+    ctx->aes.ccm.kmac_param.icv.g[1] = 0;
+    s390x_kmac(ctx->aes.ccm.nonce.b, 32, ctx->aes.ccm.fc,
+               &ctx->aes.ccm.kmac_param);
+    ctx->aes.ccm.blocks += 2;
+
+    rem = alen & 0xf;
+    alen &= ~0xf;
+    if (alen) {
+        s390x_kmac(aad, alen, ctx->aes.ccm.fc, &ctx->aes.ccm.kmac_param);
+        ctx->aes.ccm.blocks += alen >> 4;
+        aad += alen;
+    }
+    if (rem) {
+        for (i = 0; i < rem; i++)
+            ctx->aes.ccm.kmac_param.icv.b[i] ^= aad[i];
+
+        s390x_km(ctx->aes.ccm.kmac_param.icv.b, 16,
+                 ctx->aes.ccm.kmac_param.icv.b, ctx->aes.ccm.fc,
+                 ctx->aes.ccm.kmac_param.k);
+        ctx->aes.ccm.blocks++;
+    }
+}
+
+/*-
+ * En/de-crypt plain/cipher-text. Compute tag from plaintext. Returns 0 for
+ * success.
+ */
+static int s390x_aes_ccm(S390X_AES_CCM_CTX *ctx, const unsigned char *in,
+                         unsigned char *out, size_t len, int enc)
+{
+    size_t n, rem;
+    unsigned int i, l, num;
+    unsigned char flags;
+
+    flags = ctx->aes.ccm.nonce.b[0];
+    if (!(flags & S390X_CCM_AAD_FLAG)) {
+        s390x_km(ctx->aes.ccm.nonce.b, 16, ctx->aes.ccm.kmac_param.icv.b,
+                 ctx->aes.ccm.fc, ctx->aes.ccm.kmac_param.k);
+        ctx->aes.ccm.blocks++;
+    }
+    l = flags & 0x7;
+    ctx->aes.ccm.nonce.b[0] = l;
+
+    /*-
+     * Reconstruct length from encoded length field
+     * and initialize it with counter value.
+     */
+    n = 0;
+    for (i = 15 - l; i < 15; i++) {
+        n |= ctx->aes.ccm.nonce.b[i];
+        ctx->aes.ccm.nonce.b[i] = 0;
+        n <<= 8;
+    }
+    n |= ctx->aes.ccm.nonce.b[15];
+    ctx->aes.ccm.nonce.b[15] = 1;
+
+    if (n != len)
+        return -1;		/* length mismatch */
+
+    if (enc) {
+        /* Two operations per block plus one for tag encryption */
+        ctx->aes.ccm.blocks += (((len + 15) >> 4) << 1) + 1;
+        if (ctx->aes.ccm.blocks > (1ULL << 61))
+            return -2;		/* too much data */
+    }
+
+    num = 0;
+    rem = len & 0xf;
+    len &= ~0xf;
+
+    if (enc) {
+        /* mac-then-encrypt */
+        if (len)
+            s390x_kmac(in, len, ctx->aes.ccm.fc, &ctx->aes.ccm.kmac_param);
+        if (rem) {
+            for (i = 0; i < rem; i++)
+                ctx->aes.ccm.kmac_param.icv.b[i] ^= in[len + i];
+
+            s390x_km(ctx->aes.ccm.kmac_param.icv.b, 16,
+                     ctx->aes.ccm.kmac_param.icv.b, ctx->aes.ccm.fc,
+                     ctx->aes.ccm.kmac_param.k);
+        }
+
+        CRYPTO_ctr128_encrypt_ctr32(in, out, len + rem, &ctx->aes.key.k,
+                                    ctx->aes.ccm.nonce.b, ctx->aes.ccm.buf.b,
+                                    &num, (ctr128_f)AES_ctr32_encrypt);
+    } else {
+        /* decrypt-then-mac */
+        CRYPTO_ctr128_encrypt_ctr32(in, out, len + rem, &ctx->aes.key.k,
+                                    ctx->aes.ccm.nonce.b, ctx->aes.ccm.buf.b,
+                                    &num, (ctr128_f)AES_ctr32_encrypt);
+
+        if (len)
+            s390x_kmac(out, len, ctx->aes.ccm.fc, &ctx->aes.ccm.kmac_param);
+        if (rem) {
+            for (i = 0; i < rem; i++)
+                ctx->aes.ccm.kmac_param.icv.b[i] ^= out[len + i];
+
+            s390x_km(ctx->aes.ccm.kmac_param.icv.b, 16,
+                     ctx->aes.ccm.kmac_param.icv.b, ctx->aes.ccm.fc,
+                     ctx->aes.ccm.kmac_param.k);
+        }
+    }
+    /* encrypt tag */
+    for (i = 15 - l; i < 16; i++)
+        ctx->aes.ccm.nonce.b[i] = 0;
+
+    s390x_km(ctx->aes.ccm.nonce.b, 16, ctx->aes.ccm.buf.b, ctx->aes.ccm.fc,
+             ctx->aes.ccm.kmac_param.k);
+    ctx->aes.ccm.kmac_param.icv.g[0] ^= ctx->aes.ccm.buf.g[0];
+    ctx->aes.ccm.kmac_param.icv.g[1] ^= ctx->aes.ccm.buf.g[1];
+
+    ctx->aes.ccm.nonce.b[0] = flags;	/* restore flags field */
+    return 0;
+}
+
+/*-
+ * En/de-crypt and authenticate TLS packet. Returns the number of bytes written
+ * if successful. Otherwise -1 is returned.
+ */
+static int s390x_aes_ccm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
+                                    const unsigned char *in, size_t len)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, ctx);
+    unsigned char *ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+    unsigned char *buf = EVP_CIPHER_CTX_buf_noconst(ctx);
+    const int enc = EVP_CIPHER_CTX_encrypting(ctx);
+
+    if (out != in
+            || len < (EVP_CCM_TLS_EXPLICIT_IV_LEN + (size_t)cctx->aes.ccm.m))
+        return -1;
+
+    if (enc) {
+        /* Set explicit iv (sequence number). */
+        memcpy(out, buf, EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    }
+
+    len -= EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->aes.ccm.m;
+    /*-
+     * Get explicit iv (sequence number). We already have fixed iv
+     * (server/client_write_iv) here.
+     */
+    memcpy(ivec + EVP_CCM_TLS_FIXED_IV_LEN, in, EVP_CCM_TLS_EXPLICIT_IV_LEN);
+    s390x_aes_ccm_setiv(cctx, ivec, len);
+
+    /* Process aad (sequence number|type|version|length) */
+    s390x_aes_ccm_aad(cctx, buf, cctx->aes.ccm.tls_aad_len);
+
+    in += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+    out += EVP_CCM_TLS_EXPLICIT_IV_LEN;
+
+    if (enc) {
+        if (s390x_aes_ccm(cctx, in, out, len, enc))
+            return -1;
+
+        memcpy(out + len, cctx->aes.ccm.kmac_param.icv.b, cctx->aes.ccm.m);
+        return len + EVP_CCM_TLS_EXPLICIT_IV_LEN + cctx->aes.ccm.m;
+    } else {
+        if (!s390x_aes_ccm(cctx, in, out, len, enc)) {
+            if (!CRYPTO_memcmp(cctx->aes.ccm.kmac_param.icv.b, in + len,
+                               cctx->aes.ccm.m))
+                return len;
+        }
+
+        OPENSSL_cleanse(out, len);
+        return -1;
+    }
+}
 
-# define s390x_aes_ccm_init_key aes_ccm_init_key
+/*-
+ * Set key and flag field and/or iv. Returns 1 if successful. Otherwise 0 is
+ * returned.
+ */
 static int s390x_aes_ccm_init_key(EVP_CIPHER_CTX *ctx,
                                   const unsigned char *key,
-                                  const unsigned char *iv, int enc);
-# define s390x_aes_ccm_cipher aes_ccm_cipher
+                                  const unsigned char *iv, int enc)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, ctx);
+    unsigned char *ivec;
+    int keylen;
+
+    if (iv == NULL && key == NULL)
+        return 1;
+
+    if (key != NULL) {
+        keylen = EVP_CIPHER_CTX_key_length(ctx);
+        /* Convert key size to function code. */
+        cctx->aes.ccm.fc = S390X_AES_128 + (((keylen << 3) - 128) >> 6);
+        memcpy(cctx->aes.ccm.kmac_param.k, key, keylen);
+
+        /* Store encoded m and l. */
+        cctx->aes.ccm.nonce.b[0] = ((cctx->aes.ccm.l - 1) & 0x7)
+                                 | (((cctx->aes.ccm.m - 2) >> 1) & 0x7) << 3;
+        memset(cctx->aes.ccm.nonce.b + 1, 0,
+               sizeof(cctx->aes.ccm.nonce.b));
+        cctx->aes.ccm.blocks = 0;
+
+        cctx->aes.ccm.key_set = 1;
+    }
+
+    if (iv != NULL) {
+        ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+        memcpy(ivec, iv, 15 - cctx->aes.ccm.l);
+
+        cctx->aes.ccm.iv_set = 1;
+    }
+
+    return 1;
+}
+
+/*-
+ * Called from EVP layer to initialize context, process additional
+ * authenticated data, en/de-crypt plain/cipher-text and authenticate
+ * plaintext or process a TLS packet, depending on context. Returns bytes
+ * written on success. Otherwise -1 is returned.
+ */
 static int s390x_aes_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
-                                const unsigned char *in, size_t len);
-# define s390x_aes_ccm_ctrl aes_ccm_ctrl
-static int s390x_aes_ccm_ctrl(EVP_CIPHER_CTX *, int type, int arg, void *ptr);
+                                const unsigned char *in, size_t len)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, ctx);
+    const int enc = EVP_CIPHER_CTX_encrypting(ctx);
+    int rv;
+    unsigned char *buf, *ivec;
+
+    if (!cctx->aes.ccm.key_set)
+        return -1;
+
+    if (cctx->aes.ccm.tls_aad_len >= 0)
+        return s390x_aes_ccm_tls_cipher(ctx, out, in, len);
+
+    /*-
+     * Final(): Does not return any data. Recall that ccm is mac-then-encrypt
+     * so integrity must be checked already at Update() i.e., before
+     * potentially corrupted data is output.
+     */
+    if (in == NULL && out != NULL)
+        return 0;
+
+    if (!cctx->aes.ccm.iv_set)
+        return -1;
+
+    if (!enc && !cctx->aes.ccm.tag_set)
+        return -1;
+
+    if (out == NULL) {
+        /* Update(): Pass message length. */
+        if (in == NULL) {
+            ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+            s390x_aes_ccm_setiv(cctx, ivec, len);
+
+            cctx->aes.ccm.len_set = 1;
+            return len;
+        }
+
+        /* Update(): Process aad. */
+        if (!cctx->aes.ccm.len_set && len)
+            return -1;
+
+        s390x_aes_ccm_aad(cctx, in, len);
+        return len;
+    }
+
+    /* Update(): Process message. */
+
+    if (!cctx->aes.ccm.len_set) {
+        /*-
+         * In case message length was not previously set explicitely via
+         * Update(), set it now.
+         */
+        ivec = EVP_CIPHER_CTX_iv_noconst(ctx);
+        s390x_aes_ccm_setiv(cctx, ivec, len);
+
+        cctx->aes.ccm.len_set = 1;
+    }
+
+    if (enc) {
+        if (s390x_aes_ccm(cctx, in, out, len, enc))
+            return -1;
+
+        cctx->aes.ccm.tag_set = 1;
+        return len;
+    } else {
+        rv = -1;
+
+        if (!s390x_aes_ccm(cctx, in, out, len, enc)) {
+            buf = EVP_CIPHER_CTX_buf_noconst(ctx);
+            if (!CRYPTO_memcmp(cctx->aes.ccm.kmac_param.icv.b, buf,
+                               cctx->aes.ccm.m))
+                rv = len;
+        }
+
+        if (rv == -1)
+            OPENSSL_cleanse(out, len);
+
+        cctx->aes.ccm.iv_set = 0;
+        cctx->aes.ccm.tag_set = 0;
+        cctx->aes.ccm.len_set = 0;
+        return rv;
+    }
+}
+
+/*-
+ * Performs various operations on the context structure depending on control
+ * type. Returns 1 for success, 0 for failure and -1 for unknown control type.
+ * Code is big-endian.
+ */
+static int s390x_aes_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
+{
+    S390X_AES_CCM_CTX *cctx = EVP_C_DATA(S390X_AES_CCM_CTX, c);
+    unsigned char *buf, *iv;
+    int enc, len;
+
+    switch (type) {
+    case EVP_CTRL_INIT:
+        cctx->aes.ccm.key_set = 0;
+        cctx->aes.ccm.iv_set = 0;
+        cctx->aes.ccm.l = 8;
+        cctx->aes.ccm.m = 12;
+        cctx->aes.ccm.tag_set = 0;
+        cctx->aes.ccm.len_set = 0;
+        cctx->aes.ccm.tls_aad_len = -1;
+        return 1;
+
+    case EVP_CTRL_AEAD_TLS1_AAD:
+        if (arg != EVP_AEAD_TLS1_AAD_LEN)
+            return 0;
+
+        /* Save the aad for later use. */
+        buf = EVP_CIPHER_CTX_buf_noconst(c);
+        memcpy(buf, ptr, arg);
+        cctx->aes.ccm.tls_aad_len = arg;
+
+        len = *(uint16_t *)(buf + arg - 2);
+        if (len < EVP_CCM_TLS_EXPLICIT_IV_LEN)
+            return 0;
+
+        /* Correct length for explicit iv. */
+        len -= EVP_CCM_TLS_EXPLICIT_IV_LEN;
+
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (!enc) {
+            if (len < cctx->aes.ccm.m)
+                return 0;
+
+            /* Correct length for tag. */
+            len -= cctx->aes.ccm.m;
+        }
+
+        *(uint16_t *)(buf + arg - 2) = len;
+        /* Extra padding: tag appended to record. */
+        return cctx->aes.ccm.m;
+
+    case EVP_CTRL_CCM_SET_IV_FIXED:
+        if (arg != EVP_CCM_TLS_FIXED_IV_LEN)
+            return 0;
+
+        /* Copy to first part of the iv. */
+        iv = EVP_CIPHER_CTX_iv_noconst(c);
+        memcpy(iv, ptr, arg);
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_IVLEN:
+        arg = 15 - arg;
+        /* fall-through */
+
+    case EVP_CTRL_CCM_SET_L:
+        if (arg < 2 || arg > 8)
+            return 0;
+
+        cctx->aes.ccm.l = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_SET_TAG:
+        if ((arg & 1) || arg < 4 || arg > 16)
+            return 0;
+
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (enc && ptr)
+            return 0;
+
+        if (ptr) {
+            cctx->aes.ccm.tag_set = 1;
+            buf = EVP_CIPHER_CTX_buf_noconst(c);
+            memcpy(buf, ptr, arg);
+        }
+
+        cctx->aes.ccm.m = arg;
+        return 1;
+
+    case EVP_CTRL_AEAD_GET_TAG:
+        enc = EVP_CIPHER_CTX_encrypting(c);
+        if (!enc || !cctx->aes.ccm.tag_set)
+            return 0;
+
+        if(arg < cctx->aes.ccm.m)
+            return 0;
+
+        memcpy(ptr, cctx->aes.ccm.kmac_param.icv.b, cctx->aes.ccm.m);
+        cctx->aes.ccm.tag_set = 0;
+        cctx->aes.ccm.iv_set = 0;
+        cctx->aes.ccm.len_set = 0;
+        return 1;
+
+    case EVP_CTRL_COPY:
+        return 1;
+
+    default:
+        return -1;
+    }
+}
+
 # define s390x_aes_ccm_cleanup aes_ccm_cleanup
 
 # ifndef OPENSSL_NO_OCB
diff --git a/crypto/s390x_arch.h b/crypto/s390x_arch.h
index a5a9dee..5744318 100644
--- a/crypto/s390x_arch.h
+++ b/crypto/s390x_arch.h
@@ -14,6 +14,8 @@
 
 void s390x_km(const unsigned char *in, size_t len, unsigned char *out,
               unsigned int fc, void *param);
+void s390x_kmac(const unsigned char *in, size_t len, unsigned int fc,
+                void *param);
 void s390x_kma(const unsigned char *aad, size_t alen, const unsigned char *in,
                size_t len, unsigned char *out, unsigned int fc, void *param);
 
diff --git a/crypto/s390xcpuid.pl b/crypto/s390xcpuid.pl
index ea95dd2..5f6ffc6 100755
--- a/crypto/s390xcpuid.pl
+++ b/crypto/s390xcpuid.pl
@@ -276,6 +276,27 @@ ___
 }
 
 ################
+# void s390x_kmac(const unsigned char *in, size_t len, unsigned int fc,
+#                 void *param)
+{
+my ($in,$len,$fc,$param) = map("%r$_",(2..5));
+$code.=<<___;
+.globl	s390x_kmac
+.type	s390x_kmac,\@function
+.align	16
+s390x_kmac:
+	lr	%r0,$fc
+	l${g}r	%r1,$param
+
+	.long	0xb91e0002	# kmac %r0,$in
+	brc	1,.-4		# pay attention to "partial completion"
+
+	br	$ra
+.size	s390x_kmac,.-s390x_kmac
+___
+}
+
+################
 # void s390x_kma(const unsigned char *aad, size_t alen,
 #                const unsigned char *in, size_t len,
 #                unsigned char *out, unsigned int fc, void *param)

From builds at travis-ci.org  Tue Feb  6 19:13:10 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 06 Feb 2018 19:13:10 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16104 (master - 5d2a6f4)
In-Reply-To: <openssl/openssl+338142959+errored@travis-ci.org>
Message-ID: <5a79fe464e57f_43fc1cc797570192099e@8987a2b8-bc46-4e39-94ff-dcf75b205098.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16104
Status: Errored

Duration: 30 minutes and 35 seconds
Commit: 5d2a6f4 (master)
Author: Patrick Steuer
Message: crypto/evp/e_aes.c: add comments to s390x aes gcm implementation

Signed-off-by: Patrick Steuer <patrick.steuer at de.ibm.com>

Reviewed-by: Andy Polyakov <appro at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5230)

View the changeset: https://github.com/openssl/openssl/compare/54f3b7d2f5a3...5d2a6f4b7176

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/338142959?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/61cd4ccb/attachment.html>

From no-reply at appveyor.com  Tue Feb  6 19:37:26 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 06 Feb 2018 19:37:26 +0000
Subject: [openssl-commits] Build completed: openssl master.15397
Message-ID: <20180206193726.1.B0D2CDFE141326ED@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/aeefa8bd/attachment.html>

From rsalz at openssl.org  Tue Feb  6 20:27:29 2018
From: rsalz at openssl.org (Rich Salz)
Date: Tue, 06 Feb 2018 20:27:29 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517948849.226167.10093.nullmailer@dev.openssl.org>

The branch master has been updated
       via  a3a5d1b73db46274e2cdedaad42fda5ce5cfb2da (commit)
      from  5d2a6f4b71769e45d9c65ae071dc8221590cf14e (commit)


- Log -----------------------------------------------------------------
commit a3a5d1b73db46274e2cdedaad42fda5ce5cfb2da
Author: Rich Salz <rsalz at openssl.org>
Date:   Tue Feb 6 15:27:03 2018 -0500

    Remove unused file
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5267)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/asm/x86.pl | 38 --------------------------------------
 1 file changed, 38 deletions(-)
 delete mode 100644 crypto/bn/asm/x86.pl

diff --git a/crypto/bn/asm/x86.pl b/crypto/bn/asm/x86.pl
deleted file mode 100644
index 274099f..0000000
--- a/crypto/bn/asm/x86.pl
+++ /dev/null
@@ -1,38 +0,0 @@
-#! /usr/bin/env perl
-# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
-#
-# Licensed under the OpenSSL license (the "License").  You may not use
-# this file except in compliance with the License.  You can obtain a copy
-# in the file LICENSE in the source distribution or at
-# https://www.openssl.org/source/license.html
-
-push(@INC,"perlasm","../../perlasm");
-require "x86asm.pl";
-
-require("x86/mul_add.pl");
-require("x86/mul.pl");
-require("x86/sqr.pl");
-require("x86/div.pl");
-require("x86/add.pl");
-require("x86/sub.pl");
-require("x86/comba.pl");
-
-$output = pop;
-open STDOUT,">$output";
-
-&asm_init($ARGV[0]);
-
-&bn_mul_add_words("bn_mul_add_words");
-&bn_mul_words("bn_mul_words");
-&bn_sqr_words("bn_sqr_words");
-&bn_div_words("bn_div_words");
-&bn_add_words("bn_add_words");
-&bn_sub_words("bn_sub_words");
-&bn_mul_comba("bn_mul_comba8",8);
-&bn_mul_comba("bn_mul_comba4",4);
-&bn_sqr_comba("bn_sqr_comba8",8);
-&bn_sqr_comba("bn_sqr_comba4",4);
-
-&asm_finish();
-
-close STDOUT;

From rsalz at openssl.org  Tue Feb  6 20:28:08 2018
From: rsalz at openssl.org (Rich Salz)
Date: Tue, 06 Feb 2018 20:28:08 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1517948888.586288.10840.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  4bcc6a1f5557ceb1e335d39bac308b9cd64f40cd (commit)
      from  db91094a49b370acf03cf6adfcacf2256b8bd153 (commit)


- Log -----------------------------------------------------------------
commit 4bcc6a1f5557ceb1e335d39bac308b9cd64f40cd
Author: Rich Salz <rsalz at openssl.org>
Date:   Tue Feb 6 15:27:03 2018 -0500

    Remove unused file
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5267)
    (cherry picked from commit a3a5d1b73db46274e2cdedaad42fda5ce5cfb2da)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bn/asm/x86.pl | 38 --------------------------------------
 1 file changed, 38 deletions(-)
 delete mode 100644 crypto/bn/asm/x86.pl

diff --git a/crypto/bn/asm/x86.pl b/crypto/bn/asm/x86.pl
deleted file mode 100644
index d57571d..0000000
--- a/crypto/bn/asm/x86.pl
+++ /dev/null
@@ -1,38 +0,0 @@
-#! /usr/bin/env perl
-# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
-#
-# Licensed under the OpenSSL license (the "License").  You may not use
-# this file except in compliance with the License.  You can obtain a copy
-# in the file LICENSE in the source distribution or at
-# https://www.openssl.org/source/license.html
-
-push(@INC,"perlasm","../../perlasm");
-require "x86asm.pl";
-
-require("x86/mul_add.pl");
-require("x86/mul.pl");
-require("x86/sqr.pl");
-require("x86/div.pl");
-require("x86/add.pl");
-require("x86/sub.pl");
-require("x86/comba.pl");
-
-$output = pop;
-open STDOUT,">$output";
-
-&asm_init($ARGV[0],$0);
-
-&bn_mul_add_words("bn_mul_add_words");
-&bn_mul_words("bn_mul_words");
-&bn_sqr_words("bn_sqr_words");
-&bn_div_words("bn_div_words");
-&bn_add_words("bn_add_words");
-&bn_sub_words("bn_sub_words");
-&bn_mul_comba("bn_mul_comba8",8);
-&bn_mul_comba("bn_mul_comba4",4);
-&bn_sqr_comba("bn_sqr_comba8",8);
-&bn_sqr_comba("bn_sqr_comba4",4);
-
-&asm_finish();
-
-close STDOUT;

From builds at travis-ci.org  Tue Feb  6 20:52:54 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 06 Feb 2018 20:52:54 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16109
	(OpenSSL_1_1_0-stable - 4bcc6a1)
In-Reply-To: <openssl/openssl+338189853+passed@travis-ci.org>
Message-ID: <5a7a163e97786_43ffbfdc55d08125398b@6bc52b31-db87-4128-9313-917376cb4e0b.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16109
Status: Passed

Duration: 20 minutes and 59 seconds
Commit: 4bcc6a1 (OpenSSL_1_1_0-stable)
Author: Rich Salz
Message: Remove unused file

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5267)
(cherry picked from commit a3a5d1b73db46274e2cdedaad42fda5ce5cfb2da)

View the changeset: https://github.com/openssl/openssl/compare/db91094a49b3...4bcc6a1f5557

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/338189853?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/fed4c5b1/attachment-0001.html>

From builds at travis-ci.org  Tue Feb  6 20:54:34 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 06 Feb 2018 20:54:34 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16108 (master - a3a5d1b)
In-Reply-To: <openssl/openssl+338189593+passed@travis-ci.org>
Message-ID: <5a7a16a347d61_43ffbfddac530125556c@6bc52b31-db87-4128-9313-917376cb4e0b.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16108
Status: Passed

Duration: 28 minutes and 54 seconds
Commit: a3a5d1b (master)
Author: Rich Salz
Message: Remove unused file

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5267)

View the changeset: https://github.com/openssl/openssl/compare/5d2a6f4b7176...a3a5d1b73db4

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/338189593?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180206/ed184934/attachment.html>

From levitte at openssl.org  Tue Feb  6 21:54:22 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 06 Feb 2018 21:54:22 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517954062.844500.21878.nullmailer@dev.openssl.org>

The branch master has been updated
       via  7ff3a3b9e98104e3d080e652712c42b0dff915dd (commit)
      from  a3a5d1b73db46274e2cdedaad42fda5ce5cfb2da (commit)


- Log -----------------------------------------------------------------
commit 7ff3a3b9e98104e3d080e652712c42b0dff915dd
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 6 20:01:19 2018 +0100

    Code cleanup: remove benchmark code from internal tests
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/5268)

-----------------------------------------------------------------------

Summary of changes:
 test/modes_internal_test.c    | 66 -------------------------------------------
 test/poly1305_internal_test.c | 52 ----------------------------------
 test/siphash_internal_test.c  | 65 ------------------------------------------
 3 files changed, 183 deletions(-)

diff --git a/test/modes_internal_test.c b/test/modes_internal_test.c
index 6b02fd0..5f48bc1 100644
--- a/test/modes_internal_test.c
+++ b/test/modes_internal_test.c
@@ -17,7 +17,6 @@
 #include "../crypto/modes/modes_lcl.h"
 #include "testutil.h"
 #include "internal/nelem.h"
-#include "internal/cryptlib.h"
 
 typedef struct {
     size_t size;
@@ -884,75 +883,10 @@ static int test_gcm128(int idx)
     return 1;
 }
 
-static void benchmark_gcm128(const unsigned char *K, size_t Klen,
-                             const unsigned char *IV, size_t IVlen)
-{
-#ifdef OPENSSL_CPUID_OBJ
-    GCM128_CONTEXT ctx;
-    AES_KEY key;
-    uint32_t start, gcm_t, ctr_t;
-    union {
-        u64 u;
-        u8 c[1024];
-    } buf;
-
-    AES_set_encrypt_key(K, Klen * 8, &key);
-    CRYPTO_gcm128_init(&ctx, &key, (block128_f) AES_encrypt);
-    CRYPTO_gcm128_setiv(&ctx, IV, IVlen);
-
-    CRYPTO_gcm128_encrypt(&ctx, buf.c, buf.c, sizeof(buf));
-    start = OPENSSL_rdtsc();
-    CRYPTO_gcm128_encrypt(&ctx, buf.c, buf.c, sizeof(buf));
-    gcm_t = OPENSSL_rdtsc() - start;
-
-    CRYPTO_ctr128_encrypt(buf.c, buf.c, sizeof(buf),
-                          &key, ctx.Yi.c, ctx.EKi.c, &ctx.mres,
-                          (block128_f) AES_encrypt);
-    start = OPENSSL_rdtsc();
-    CRYPTO_ctr128_encrypt(buf.c, buf.c, sizeof(buf),
-                          &key, ctx.Yi.c, ctx.EKi.c, &ctx.mres,
-                          (block128_f) AES_encrypt);
-    ctr_t = OPENSSL_rdtsc() - start;
-
-    printf("%.2f-%.2f=%.2f\n",
-           gcm_t / (double)sizeof(buf),
-           ctr_t / (double)sizeof(buf),
-           (gcm_t - ctr_t) / (double)sizeof(buf));
-# ifdef GHASH
-    {
-        void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
-                             const u8 *inp, size_t len) = ctx.ghash;
-
-        GHASH((&ctx), buf.c, sizeof(buf));
-        start = OPENSSL_rdtsc();
-        for (i = 0; i < 100; ++i)
-            GHASH((&ctx), buf.c, sizeof(buf));
-        gcm_t = OPENSSL_rdtsc() - start;
-        printf("%.2f\n", gcm_t / (double)sizeof(buf) / (double)i);
-    }
-# endif
-#else
-    fprintf(stderr,
-            "Benchmarking of modes isn't available on this platform\n");
-#endif
-}
-
 int setup_tests(void)
 {
-    if (test_has_option("-h")) {
-        printf("-h\tThis help\n");
-        printf("-b\tBenchmark gcm128 in addition to the tests\n");
-        return 1;
-    }
-
     ADD_ALL_TESTS(test_aes_cts128, OSSL_NELEM(aes_cts128_vectors));
     ADD_ALL_TESTS(test_aes_cts128_nist, OSSL_NELEM(aes_cts128_vectors));
     ADD_ALL_TESTS(test_gcm128, OSSL_NELEM(gcm128_vectors));
     return 1;
 }
-
-void cleanup_tests(void)
-{
-    if (test_has_option("-b"))
-        benchmark_gcm128(K1, sizeof(K1), IV1, sizeof(IV1));
-}
diff --git a/test/poly1305_internal_test.c b/test/poly1305_internal_test.c
index 3631f34..106e108 100644
--- a/test/poly1305_internal_test.c
+++ b/test/poly1305_internal_test.c
@@ -16,7 +16,6 @@
 #include "internal/poly1305.h"
 #include "../crypto/poly1305/poly1305_local.h"
 #include "internal/nelem.h"
-#include "internal/cryptlib.h"
 
 typedef struct {
     size_t size;
@@ -35,45 +34,6 @@ typedef struct {
  *
  ***/
 
-static void benchmark_poly1305()
-{
-# ifdef OPENSSL_CPUID_OBJ
-    POLY1305 poly1305;
-    unsigned char key[32];
-    unsigned char buf[8192];
-    uint32_t stopwatch;
-    unsigned int i;
-
-    memset (buf,0x55,sizeof(buf));
-    memset (key,0xAA,sizeof(key));
-
-    Poly1305_Init(&poly1305, key);
-
-    for (i=0;i<100000;i++)
-        Poly1305_Update(&poly1305,buf,sizeof(buf));
-
-    stopwatch = OPENSSL_rdtsc();
-    for (i=0;i<10000;i++)
-        Poly1305_Update(&poly1305,buf,sizeof(buf));
-    stopwatch = OPENSSL_rdtsc() - stopwatch;
-
-    printf("%g\n",stopwatch/(double)(i*sizeof(buf)));
-
-    stopwatch = OPENSSL_rdtsc();
-    for (i=0;i<10000;i++) {
-        Poly1305_Init(&poly1305, key);
-        Poly1305_Update(&poly1305,buf,16);
-        Poly1305_Final(&poly1305,buf);
-    }
-    stopwatch = OPENSSL_rdtsc() - stopwatch;
-
-    printf("%g\n",stopwatch/(double)(i));
-# else
-    fprintf(stderr,
-            "Benchmarking of poly1305 isn't available on this platform\n");
-# endif
-}
-
 static TESTDATA tests[] = {
     /*
      * RFC7539
@@ -1611,18 +1571,6 @@ static int test_poly1305(int idx)
 
 int setup_tests(void)
 {
-    if (test_has_option("-h")) {
-        printf("-h\tThis help\n");
-        printf("-b\tBenchmark in addition to the tests\n");
-        return 1;
-    }
-
     ADD_ALL_TESTS(test_poly1305, OSSL_NELEM(tests));
     return 1;
 }
-
-void cleanup_tests(void)
-{
-    if (test_has_option("-b"))
-        benchmark_poly1305();
-}
diff --git a/test/siphash_internal_test.c b/test/siphash_internal_test.c
index fe20762..d5602d9 100644
--- a/test/siphash_internal_test.c
+++ b/test/siphash_internal_test.c
@@ -17,10 +17,6 @@
 #include "internal/siphash.h"
 #include "../crypto/siphash/siphash_local.h"
 #include "internal/nelem.h"
-#include "internal/cryptlib.h"
-
-static BIO* b_stderr = NULL;
-static BIO* b_stdout = NULL;
 
 typedef struct {
     size_t size;
@@ -38,46 +34,6 @@ typedef struct {
  *
  ***/
 
-static int benchmark_siphash(void)
-{
-# ifdef OPENSSL_CPUID_OBJ
-    SIPHASH siphash;
-    unsigned char key[SIPHASH_KEY_SIZE];
-    unsigned char buf[8192];
-    uint32_t stopwatch;
-    unsigned int i;
-
-    memset (buf,0x55,sizeof(buf));
-    memset (key,0xAA,sizeof(key));
-
-    (void)SipHash_Init(&siphash, key, 0, 0, 0);
-
-    for (i=0;i<100000;i++)
-        SipHash_Update(&siphash, buf, sizeof(buf));
-
-    stopwatch = OPENSSL_rdtsc();
-    for (i=0;i<10000;i++)
-        SipHash_Update(&siphash, buf, sizeof(buf));
-    stopwatch = OPENSSL_rdtsc() - stopwatch;
-
-    BIO_printf(b_stdout, "%g\n",stopwatch/(double)(i*sizeof(buf)));
-
-    stopwatch = OPENSSL_rdtsc();
-    for (i=0;i<10000;i++) {
-        (void)SipHash_Init(&siphash, key, 0, 0, 0);
-        SipHash_Update(&siphash, buf, 16);
-        (void)SipHash_Final(&siphash, buf, SIPHASH_MAX_DIGEST_SIZE);
-    }
-    stopwatch = OPENSSL_rdtsc() - stopwatch;
-
-    BIO_printf(b_stdout, "%g\n",stopwatch/(double)(i));
-# else
-    BIO_printf(b_stderr,
-               "Benchmarking of siphash isn't available on this platform\n");
-# endif
-    return 1;
-}
-
 /* From C reference: https://131002.net/siphash/ */
 
 static TESTDATA tests[] = {
@@ -321,28 +277,7 @@ static int test_siphash_basic(void)
 
 int setup_tests(void)
 {
-    if (test_has_option("-h")) {
-        BIO_printf(bio_out, "-h\tThis help\n");
-        BIO_printf(bio_out, "-b\tBenchmark in addition to the tests\n");
-        return 1;
-    }
-
-    b_stderr = BIO_new_fp(stderr, BIO_NOCLOSE | BIO_FP_TEXT);
-    b_stdout = BIO_new_fp(stdout, BIO_NOCLOSE | BIO_FP_TEXT);
-#ifdef OPENSSL_SYS_VMS
-    b_stderr = BIO_push(BIO_new(BIO_f_linebuffer()), b_stderr);
-    b_stdout = BIO_push(BIO_new(BIO_f_linebuffer()), b_stdout);
-#endif
-
     ADD_TEST(test_siphash_basic);
     ADD_ALL_TESTS(test_siphash, OSSL_NELEM(tests));
-    if (test_has_option("-b"))
-        ADD_TEST(benchmark_siphash);
     return 1;
 }
-
-void cleanup_tests(void)
-{
-    BIO_free(b_stdout);
-    BIO_free(b_stderr);
-}

From paul.dale at oracle.com  Wed Feb  7 00:09:48 2018
From: paul.dale at oracle.com (paul.dale at oracle.com)
Date: Wed, 07 Feb 2018 00:09:48 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517962188.655769.6042.nullmailer@dev.openssl.org>

The branch master has been updated
       via  2b66fd5720c38c6e89f9cd00d36d2c828ed4cd4b (commit)
       via  360fc9f412f1f60a4644228d9b6d386161aad406 (commit)
       via  2ad2281a8005dbc9046059693995c78a04ed9e37 (commit)
      from  7ff3a3b9e98104e3d080e652712c42b0dff915dd (commit)


- Log -----------------------------------------------------------------
commit 2b66fd5720c38c6e89f9cd00d36d2c828ed4cd4b
Author: Pauli <paul.dale at oracle.com>
Date:   Tue Feb 6 07:17:31 2018 +1000

    Unify timer code
    
    Remove the timer and TSC additional input code and instead provide a single
    routine that attempts to use the "best" timer/counter available on the
    system.  It attempts to use TSC, then various OS dependent resources and
    finally several tries to obtain the date.  If any of these timer/counters
    is successful, the rest are skipped.
    
    No randomness is credited for this.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    (Merged from https://github.com/openssl/openssl/pull/5231)

commit 360fc9f412f1f60a4644228d9b6d386161aad406
Author: Pauli <paul.dale at oracle.com>
Date:   Tue Feb 6 07:16:26 2018 +1000

    Make OPENSSL_rdtsc universally available.
    
    If such a timer/counter register is not available, the return value is always
    zero.  This matches the assembly implementations' behaviour.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    (Merged from https://github.com/openssl/openssl/pull/5231)

commit 2ad2281a8005dbc9046059693995c78a04ed9e37
Author: Pauli <paul.dale at oracle.com>
Date:   Tue Feb 6 07:15:53 2018 +1000

    Make the OPENSSL_CPUID_OBJ define internal.
    Patch by @levitte.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    (Merged from https://github.com/openssl/openssl/pull/5231)

-----------------------------------------------------------------------

Summary of changes:
 Configure                        |  2 +
 crypto/cryptlib.c                |  8 ++++
 crypto/rand/rand_lib.c           | 92 +++++++++++++++++++++++++++++++---------
 include/internal/cryptlib.h      |  6 +--
 include/openssl/opensslconf.h.in |  4 +-
 5 files changed, 84 insertions(+), 28 deletions(-)

diff --git a/Configure b/Configure
index 22d42fb..a6f5a31 100755
--- a/Configure
+++ b/Configure
@@ -1292,6 +1292,8 @@ if ($target{sys_id} ne "")
 
 unless ($disabled{asm}) {
     $target{cpuid_asm_src}=$table{DEFAULTS}->{cpuid_asm_src} if ($config{processor} eq "386");
+    push @{$config{defines}}, "OPENSSL_CPUID_OBJ" if ($target{cpuid_asm_src} ne "mem_clr.o");
+
     $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
 
     # bn-586 is the only one implementing bn_*_part_words
diff --git a/crypto/cryptlib.c b/crypto/cryptlib.c
index a4f2fb8..a4d96d8 100644
--- a/crypto/cryptlib.c
+++ b/crypto/cryptlib.c
@@ -355,4 +355,12 @@ int CRYPTO_memcmp(const void * in_a, const void * in_b, size_t len)
 
     return x;
 }
+
+/*
+ * For systems that don't provide an instruction counter register or equivalent.
+ */
+uint32_t OPENSSL_rdtsc(void)
+{
+    return 0;
+}
 #endif
diff --git a/crypto/rand/rand_lib.c b/crypto/rand/rand_lib.c
index e82a63e..810677b 100644
--- a/crypto/rand/rand_lib.c
+++ b/crypto/rand/rand_lib.c
@@ -22,6 +22,9 @@
 #endif
 #include "e_os.h"
 
+/* Macro to convert two thirty two bit values into a sixty four bit one */
+#define TWO32TO64(a, b) ((((uint64_t)(a)) << 32) + (b))
+
 #ifndef OPENSSL_NO_ENGINE
 /* non-NULL if default_RAND_meth is ENGINE-provided */
 static ENGINE *funct_ref;
@@ -194,6 +197,71 @@ size_t rand_drbg_get_entropy(RAND_DRBG *drbg,
 }
 
 /*
+ * Find a suitable system time.  Start with the highest resolution source
+ * and work down to the slower ones.  This is added as additional data and
+ * isn't counted as randomness, so any result is acceptable.
+ */
+static uint64_t get_timer_bits(void)
+{
+    uint64_t res = OPENSSL_rdtsc();
+
+    if (res != 0)
+        return res;
+#if defined(_WIN32)
+    {
+        LARGE_INTEGER t;
+        FILETIME ft;
+
+        if (QueryPerformanceCounter(&t) != 0)
+            return t.QuadPart;
+        GetSystemTimeAsFileTime(&ft);
+        return TWO32TO64(ft.dwHighDateTime, ft.dwLowDateTime);
+    }
+#elif defined(__sun) || defined(__hpux)
+    return gethrtime();
+#elif defined(_AIX)
+    {
+        timebasestruct_t t;
+
+        read_wall_time(&t, TIMEBASE_SZ);
+        return TWO32TO64(t.tb_high, t.tb_low);
+    }
+#else
+
+# if defined(_POSIX_C_SOURCE) \
+     && defined(_POSIX_TIMERS) \
+     && _POSIX_C_SOURCE >= 199309L \
+     && (!defined(__GLIBC__) || __GLIBC_PREREQ(2, 17))
+    {
+        struct timespec ts;
+        clockid_t cid;
+
+#  ifdef CLOCK_BOOTTIME
+        cid = CLOCK_BOOTTIME;
+#  elif defined(_POSIX_MONOTONIC_CLOCK)
+        cid = CLOCK_MONOTONIC;
+#  else
+        cid = CLOCK_REALTIME;
+#  endif
+
+        if (clock_gettime(cid, &ts) == 0)
+            return TWO32TO64(ts.tv_sec, ts.tv_nsec);
+    }
+# endif
+# if defined(__unix__) \
+     || (defined(_POSIX_C_SOURCE) && _POSIX_C_SOURCE >= 200112L)
+    {
+        struct timeval tv;
+
+        if (gettimeofday(&tv, NULL) == 0)
+            return TWO32TO64(tv.tv_sec, tv.tv_usec);
+    }
+# endif
+    return time(NULL);
+#endif
+}
+
+/*
  * Generate additional data that can be used for the drbg. The data does
  * not need to contain entropy, but it's useful if it contains at least
  * some bits that are unpredictable.
@@ -210,15 +278,10 @@ size_t rand_drbg_get_additional_data(unsigned char **pout, size_t max_len)
     size_t len;
 #ifdef OPENSSL_SYS_UNIX
     pid_t pid;
-    struct timeval tv;
 #elif defined(OPENSSL_SYS_WIN32)
     DWORD pid;
-    FILETIME ft;
-    LARGE_INTEGER pc;
-#endif
-#ifdef OPENSSL_CPUID_OBJ
-    uint32_t tsc = 0;
 #endif
+    uint64_t tbits;
 
     pool = RAND_POOL_new(0, 0, max_len);
     if (pool == NULL)
@@ -236,21 +299,8 @@ size_t rand_drbg_get_additional_data(unsigned char **pout, size_t max_len)
     if (thread_id != 0)
         RAND_POOL_add(pool, (unsigned char *)&thread_id, sizeof(thread_id), 0);
 
-#ifdef OPENSSL_CPUID_OBJ
-    tsc = OPENSSL_rdtsc();
-    if (tsc != 0)
-        RAND_POOL_add(pool, (unsigned char *)&tsc, sizeof(tsc), 0);
-#endif
-
-#ifdef OPENSSL_SYS_UNIX
-    if (gettimeofday(&tv, NULL) == 0)
-        RAND_POOL_add(pool, (unsigned char *)&tv, sizeof(tv), 0);
-#elif defined(OPENSSL_SYS_WIN32)
-    if (QueryPerformanceCounter(&pc) != 0)
-        RAND_POOL_add(pool, (unsigned char *)&pc, sizeof(pc), 0);
-    GetSystemTimeAsFileTime(&ft);
-    RAND_POOL_add(pool, (unsigned char *)&ft, sizeof(ft), 0);
-#endif
+    tbits = get_timer_bits();
+    RAND_POOL_add(pool, (unsigned char *)&tbits, sizeof(tbits), 0);
 
     /* TODO: Use RDSEED? */
 
diff --git a/include/internal/cryptlib.h b/include/internal/cryptlib.h
index 25ccdb1..8a96de9 100644
--- a/include/internal/cryptlib.h
+++ b/include/internal/cryptlib.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -94,9 +94,7 @@ FILE *openssl_fopen(const char *filename, const char *mode);
 void *openssl_fopen(const char *filename, const char *mode);
 # endif
 
-#ifdef OPENSSL_CPUID_OBJ
-uint32_t OPENSSL_rdtsc();
-#endif
+uint32_t OPENSSL_rdtsc(void);
 
 #ifdef  __cplusplus
 }
diff --git a/include/openssl/opensslconf.h.in b/include/openssl/opensslconf.h.in
index 2603247..16aa82e 100644
--- a/include/openssl/opensslconf.h.in
+++ b/include/openssl/opensslconf.h.in
@@ -1,7 +1,7 @@
 /*
  * {- join("\n * ", @autowarntext) -}
  *
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -119,8 +119,6 @@ extern "C" {
 # define DEPRECATEDIN_0_9_8(f)
 #endif
 
-{- $target{cpuid_obj} ne "mem_clr.o" ? "#define OPENSSL_CPUID_OBJ" : "" -}
-
 /* Generate 80386 code? */
 {- $config{processor} eq "386" ? "#define" : "#undef" -} I386_ONLY
 

From openssl at openssl.org  Wed Feb  7 01:03:03 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Wed, 07 Feb 2018 01:03:03 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-deprecated
Message-ID: <1517965383.163315.23825.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-deprecated

Commit log since last time:

7ff3a3b Code cleanup: remove benchmark code from internal tests
a3a5d1b Remove unused file
5d2a6f4 crypto/evp/e_aes.c: add comments to s390x aes gcm implementation
39f5b06 s390x assembly pack: add KMAC code path for aes-ccm
54f3b7d util/mkdef.pl: Trust configdata.pm

Build log ended with (last 100 lines):

../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. ok
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ skipped: test_key_share needs TLS1.3 enabled
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ ok
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ ok
../../openssl/test/recipes/70-test_sslcertstatus.t ............ ok
../../openssl/test/recipes/70-test_sslextension.t ............. ok
../../openssl/test/recipes/70-test_sslmessages.t .............. ok
../../openssl/test/recipes/70-test_sslrecords.t ............... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ........... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ............... ok
../../openssl/test/recipes/70-test_sslsignature.t ............. ok
../../openssl/test/recipes/70-test_sslskewith0p.t ............. ok
../../openssl/test/recipes/70-test_sslversions.t .............. skipped: test_sslversions needs TLS1.3, TLS1.2 and TLS1.1 enabled
../../openssl/test/recipes/70-test_sslvertol.t ................ ok
../../openssl/test/recipes/70-test_tls13cookie.t .............. skipped: test_tls13cookie needs TLS1.3 enabled
../../openssl/test/recipes/70-test_tls13downgrade.t ........... skipped: test_tls13downgrade needs TLS1.3 and TLS1.2 enabled
../../openssl/test/recipes/70-test_tls13hrr.t ................. skipped: test_tls13hrr needs TLS1.3 enabled
../../openssl/test/recipes/70-test_tls13kexmodes.t ............ skipped: test_tls13kexmodes needs TLSv1.3 enabled
../../openssl/test/recipes/70-test_tls13messages.t ............ skipped: test_tls13messages needs TLSv1.3 enabled
../../openssl/test/recipes/70-test_tls13psk.t ................. skipped: test_tls13psk needs TLSv1.3 enabled
../../openssl/test/recipes/70-test_tlsextms.t ................. ok
../../openssl/test/recipes/70-test_verify_extra.t ............. ok
../../openssl/test/recipes/70-test_wpacket.t .................. ok
../../openssl/test/recipes/80-test_ca.t ....................... ok
../../openssl/test/recipes/80-test_cipherbytes.t .............. ok
../../openssl/test/recipes/80-test_cipherlist.t ............... ok
../../openssl/test/recipes/80-test_ciphername.t ............... ok
../../openssl/test/recipes/80-test_cms.t ...................... ok
../../openssl/test/recipes/80-test_ct.t ....................... ok
../../openssl/test/recipes/80-test_dane.t ..................... ok
../../openssl/test/recipes/80-test_dtls.t ..................... ok
../../openssl/test/recipes/80-test_dtls_mtu.t ................. ok
../../openssl/test/recipes/80-test_dtlsv1listen.t ............. ok
../../openssl/test/recipes/80-test_ocsp.t ..................... ok
../../openssl/test/recipes/80-test_pkcs12.t ................... ok
../../openssl/test/recipes/80-test_ssl_new.t .................. ok
../../openssl/test/recipes/80-test_ssl_old.t .................. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t ............. ok
../../openssl/test/recipes/80-test_sslcorrupt.t ............... ok
../../openssl/test/recipes/80-test_tsa.t ...................... ok
../../openssl/test/recipes/80-test_x509aux.t .................. ok
../../openssl/test/recipes/90-test_asn1_time.t ................ ok
../../openssl/test/recipes/90-test_async.t .................... ok
../../openssl/test/recipes/90-test_bio_enc.t .................. ok
../../openssl/test/recipes/90-test_constant_time.t ............ ok
../../openssl/test/recipes/90-test_fatalerr.t ................. ok
../../openssl/test/recipes/90-test_gmdiff.t ................... ok
../../openssl/test/recipes/90-test_ige.t ...................... ok
../../openssl/test/recipes/90-test_memleak.t .................. ok
../../openssl/test/recipes/90-test_overhead.t ................. skipped: Only supported in no-shared builds
../../openssl/test/recipes/90-test_secmem.t ................... ok
../../openssl/test/recipes/90-test_shlibload.t ................ ok
../../openssl/test/recipes/90-test_srp.t ...................... ok
../../openssl/test/recipes/90-test_sslapi.t ................... ok
../../openssl/test/recipes/90-test_sslbuffers.t ............... ok
../../openssl/test/recipes/90-test_store.t .................... ok
../../openssl/test/recipes/90-test_threads.t .................. ok
../../openssl/test/recipes/90-test_time_offset.t .............. ok
../../openssl/test/recipes/90-test_tls13ccs.t ................. skipped: test_tls13ccs is not supported in this build
../../openssl/test/recipes/90-test_tls13encryption.t .......... skipped: tls13encryption is not supported in this build
../../openssl/test/recipes/90-test_tls13secrets.t ............. skipped: tls13secrets is not supported in this build
../../openssl/test/recipes/90-test_v3name.t ................... ok
../../openssl/test/recipes/95-test_external_boringssl.t ....... skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_krb5.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_pyca.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/99-test_ecstress.t ................. ok
../../openssl/test/recipes/99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
../../openssl/test/recipes/01-test_symbol_presence.t        (Wstat: 512 Tests: 4 Failed: 2)
  Failed tests:  2, 4
  Non-zero exit status: 2
Files=140, Tests=1243, 361 wallclock secs ( 2.90 usr  0.36 sys + 174.14 cusr 23.83 csys = 201.23 CPU)
Result: FAIL
Makefile:171: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-deprecated'
Makefile:169: recipe for target 'tests' failed
make: *** [tests] Error 2

From paul.dale at oracle.com  Wed Feb  7 04:14:21 2018
From: paul.dale at oracle.com (paul.dale at oracle.com)
Date: Wed, 07 Feb 2018 04:14:21 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1517976861.111902.32403.nullmailer@dev.openssl.org>

The branch master has been updated
       via  bed4afa81b9c94596cae44226e7506d9b07fe5a5 (commit)
      from  2b66fd5720c38c6e89f9cd00d36d2c828ed4cd4b (commit)


- Log -----------------------------------------------------------------
commit bed4afa81b9c94596cae44226e7506d9b07fe5a5
Author: Pauli <paul.dale at oracle.com>
Date:   Wed Feb 7 11:46:15 2018 +1000

    Fix glibc specific conditional for Mac OS/X
    
    MacOS seems to define __GLIBC__ but not __GLIBC_PREREQ.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5269)

-----------------------------------------------------------------------

Summary of changes:
 crypto/rand/rand_lib.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/crypto/rand/rand_lib.c b/crypto/rand/rand_lib.c
index 810677b..69c3c79 100644
--- a/crypto/rand/rand_lib.c
+++ b/crypto/rand/rand_lib.c
@@ -231,7 +231,8 @@ static uint64_t get_timer_bits(void)
 # if defined(_POSIX_C_SOURCE) \
      && defined(_POSIX_TIMERS) \
      && _POSIX_C_SOURCE >= 199309L \
-     && (!defined(__GLIBC__) || __GLIBC_PREREQ(2, 17))
+     && (!defined(__GLIBC__) \
+         || (defined(__GLIBC_PREREQ) && __GLIBC_PREREQ(2, 17)))
     {
         struct timespec ts;
         clockid_t cid;

From osslsanity at gmail.com  Wed Feb  7 09:18:22 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Wed, 7 Feb 2018 09:18:22 +0000 (UTC)
Subject: [openssl-commits] Build failed in Jenkins: master_mips #374
Message-ID: <1037560288.321.1517995102352.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/374/display/redirect?page=changes>

Changes:

[appro] s390x assembly pack: add KMAC code path for aes-ccm

[appro] crypto/evp/e_aes.c: add comments to s390x aes gcm implementation

[rsalz] Remove unused file

[levitte] Code cleanup: remove benchmark code from internal tests

[paul.dale] Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

[paul.dale] Make OPENSSL_rdtsc universally available.

[paul.dale] Unify timer code

[paul.dale] Fix glibc specific conditional for Mac OS/X

------------------------------------------
[...truncated 281.85 KB...]
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_err.d.tmp -MT crypto/ui/ui_err.o -c -o crypto/ui/ui_err.o crypto/ui/ui_err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_lib.d.tmp -MT crypto/ui/ui_lib.o -c -o crypto/ui/ui_lib.o crypto/ui/ui_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_null.d.tmp -MT crypto/ui/ui_null.o -c -o crypto/ui/ui_null.o crypto/ui/ui_null.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_openssl.d.tmp -MT crypto/ui/ui_openssl.o -c -o crypto/ui/ui_openssl.o crypto/ui/ui_openssl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_util.d.tmp -MT crypto/ui/ui_util.o -c -o crypto/ui/ui_util.o crypto/ui/ui_util.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/uid.d.tmp -MT crypto/uid.o -c -o crypto/uid.o crypto/uid.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/whrlpool/wp_block.d.tmp -MT crypto/whrlpool/wp_block.o -c -o crypto/whrlpool/wp_block.o crypto/whrlpool/wp_block.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/whrlpool/wp_dgst.d.tmp -MT crypto/whrlpool/wp_dgst.o -c -o crypto/whrlpool/wp_dgst.o crypto/whrlpool/wp_dgst.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/by_dir.d.tmp -MT crypto/x509/by_dir.o -c -o crypto/x509/by_dir.o crypto/x509/by_dir.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/by_file.d.tmp -MT crypto/x509/by_file.o -c -o crypto/x509/by_file.o crypto/x509/by_file.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_crl.d.tmp -MT crypto/x509/t_crl.o -c -o crypto/x509/t_crl.o crypto/x509/t_crl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_req.d.tmp -MT crypto/x509/t_req.o -c -o crypto/x509/t_req.o crypto/x509/t_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_x509.d.tmp -MT crypto/x509/t_x509.o -c -o crypto/x509/t_x509.o crypto/x509/t_x509.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_att.d.tmp -MT crypto/x509/x509_att.o -c -o crypto/x509/x509_att.o crypto/x509/x509_att.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_cmp.d.tmp -MT crypto/x509/x509_cmp.o -c -o crypto/x509/x509_cmp.o crypto/x509/x509_cmp.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_d2.d.tmp -MT crypto/x509/x509_d2.o -c -o crypto/x509/x509_d2.o crypto/x509/x509_d2.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_def.d.tmp -MT crypto/x509/x509_def.o -c -o crypto/x509/x509_def.o crypto/x509/x509_def.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_err.d.tmp -MT crypto/x509/x509_err.o -c -o crypto/x509/x509_err.o crypto/x509/x509_err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_ext.d.tmp -MT crypto/x509/x509_ext.o -c -o crypto/x509/x509_ext.o crypto/x509/x509_ext.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_lu.d.tmp -MT crypto/x509/x509_lu.o -c -o crypto/x509/x509_lu.o crypto/x509/x509_lu.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_obj.d.tmp -MT crypto/x509/x509_obj.o -c -o crypto/x509/x509_obj.o crypto/x509/x509_obj.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_r2x.d.tmp -MT crypto/x509/x509_r2x.o -c -o crypto/x509/x509_r2x.o crypto/x509/x509_r2x.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_req.d.tmp -MT crypto/x509/x509_req.o -c -o crypto/x509/x509_req.o crypto/x509/x509_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_set.d.tmp -MT crypto/x509/x509_set.o -c -o crypto/x509/x509_set.o crypto/x509/x509_set.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_trs.d.tmp -MT crypto/x509/x509_trs.o -c -o crypto/x509/x509_trs.o crypto/x509/x509_trs.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_txt.d.tmp -MT crypto/x509/x509_txt.o -c -o crypto/x509/x509_txt.o crypto/x509/x509_txt.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_v3.d.tmp -MT crypto/x509/x509_v3.o -c -o crypto/x509/x509_v3.o crypto/x509/x509_v3.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_vfy.d.tmp -MT crypto/x509/x509_vfy.o -c -o crypto/x509/x509_vfy.o crypto/x509/x509_vfy.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_vpm.d.tmp -MT crypto/x509/x509_vpm.o -c -o crypto/x509/x509_vpm.o crypto/x509/x509_vpm.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509cset.d.tmp -MT crypto/x509/x509cset.o -c -o crypto/x509/x509cset.o crypto/x509/x509cset.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509name.d.tmp -MT crypto/x509/x509name.o -c -o crypto/x509/x509name.o crypto/x509/x509name.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509rset.d.tmp -MT crypto/x509/x509rset.o -c -o crypto/x509/x509rset.o crypto/x509/x509rset.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509spki.d.tmp -MT crypto/x509/x509spki.o -c -o crypto/x509/x509spki.o crypto/x509/x509spki.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509type.d.tmp -MT crypto/x509/x509type.o -c -o crypto/x509/x509type.o crypto/x509/x509type.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_all.d.tmp -MT crypto/x509/x_all.o -c -o crypto/x509/x_all.o crypto/x509/x_all.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_attrib.d.tmp -MT crypto/x509/x_attrib.o -c -o crypto/x509/x_attrib.o crypto/x509/x_attrib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_crl.d.tmp -MT crypto/x509/x_crl.o -c -o crypto/x509/x_crl.o crypto/x509/x_crl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_exten.d.tmp -MT crypto/x509/x_exten.o -c -o crypto/x509/x_exten.o crypto/x509/x_exten.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_name.d.tmp -MT crypto/x509/x_name.o -c -o crypto/x509/x_name.o crypto/x509/x_name.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_pubkey.d.tmp -MT crypto/x509/x_pubkey.o -c -o crypto/x509/x_pubkey.o crypto/x509/x_pubkey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_req.d.tmp -MT crypto/x509/x_req.o -c -o crypto/x509/x_req.o crypto/x509/x_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_x509.d.tmp -MT crypto/x509/x_x509.o -c -o crypto/x509/x_x509.o crypto/x509/x_x509.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_x509a.d.tmp -MT crypto/x509/x_x509a.o -c -o crypto/x509/x_x509a.o crypto/x509/x_x509a.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_cache.d.tmp -MT crypto/x509v3/pcy_cache.o -c -o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_cache.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_data.d.tmp -MT crypto/x509v3/pcy_data.o -c -o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_data.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_lib.d.tmp -MT crypto/x509v3/pcy_lib.o -c -o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_map.d.tmp -MT crypto/x509v3/pcy_map.o -c -o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_map.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_node.d.tmp -MT crypto/x509v3/pcy_node.o -c -o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_node.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_tree.d.tmp -MT crypto/x509v3/pcy_tree.o -c -o crypto/x509v3/pcy_tree.o crypto/x509v3/pcy_tree.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_addr.d.tmp -MT crypto/x509v3/v3_addr.o -c -o crypto/x509v3/v3_addr.o crypto/x509v3/v3_addr.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_admis.d.tmp -MT crypto/x509v3/v3_admis.o -c -o crypto/x509v3/v3_admis.o crypto/x509v3/v3_admis.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_akey.d.tmp -MT crypto/x509v3/v3_akey.o -c -o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_akeya.d.tmp -MT crypto/x509v3/v3_akeya.o -c -o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_akeya.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_alt.d.tmp -MT crypto/x509v3/v3_alt.o -c -o crypto/x509v3/v3_alt.o crypto/x509v3/v3_alt.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_asid.d.tmp -MT crypto/x509v3/v3_asid.o -c -o crypto/x509v3/v3_asid.o crypto/x509v3/v3_asid.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_bcons.d.tmp -MT crypto/x509v3/v3_bcons.o -c -o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bcons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_bitst.d.tmp -MT crypto/x509v3/v3_bitst.o -c -o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_bitst.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_conf.d.tmp -MT crypto/x509v3/v3_conf.o -c -o crypto/x509v3/v3_conf.o crypto/x509v3/v3_conf.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_cpols.d.tmp -MT crypto/x509v3/v3_cpols.o -c -o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_cpols.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_crld.d.tmp -MT crypto/x509v3/v3_crld.o -c -o crypto/x509v3/v3_crld.o crypto/x509v3/v3_crld.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_enum.d.tmp -MT crypto/x509v3/v3_enum.o -c -o crypto/x509v3/v3_enum.o crypto/x509v3/v3_enum.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_extku.d.tmp -MT crypto/x509v3/v3_extku.o -c -o crypto/x509v3/v3_extku.o crypto/x509v3/v3_extku.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_genn.d.tmp -MT crypto/x509v3/v3_genn.o -c -o crypto/x509v3/v3_genn.o crypto/x509v3/v3_genn.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_ia5.d.tmp -MT crypto/x509v3/v3_ia5.o -c -o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_ia5.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_info.d.tmp -MT crypto/x509v3/v3_info.o -c -o crypto/x509v3/v3_info.o crypto/x509v3/v3_info.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_int.d.tmp -MT crypto/x509v3/v3_int.o -c -o crypto/x509v3/v3_int.o crypto/x509v3/v3_int.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_lib.d.tmp -MT crypto/x509v3/v3_lib.o -c -o crypto/x509v3/v3_lib.o crypto/x509v3/v3_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_ncons.d.tmp -MT crypto/x509v3/v3_ncons.o -c -o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_ncons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pci.d.tmp -MT crypto/x509v3/v3_pci.o -c -o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pci.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pcia.d.tmp -MT crypto/x509v3/v3_pcia.o -c -o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcia.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pcons.d.tmp -MT crypto/x509v3/v3_pcons.o -c -o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pcons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pku.d.tmp -MT crypto/x509v3/v3_pku.o -c -o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pku.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pmaps.d.tmp -MT crypto/x509v3/v3_pmaps.o -c -o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_pmaps.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_prn.d.tmp -MT crypto/x509v3/v3_prn.o -c -o crypto/x509v3/v3_prn.o crypto/x509v3/v3_prn.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_purp.d.tmp -MT crypto/x509v3/v3_purp.o -c -o crypto/x509v3/v3_purp.o crypto/x509v3/v3_purp.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_skey.d.tmp -MT crypto/x509v3/v3_skey.o -c -o crypto/x509v3/v3_skey.o crypto/x509v3/v3_skey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_sxnet.d.tmp -MT crypto/x509v3/v3_sxnet.o -c -o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_sxnet.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_tlsf.d.tmp -MT crypto/x509v3/v3_tlsf.o -c -o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_tlsf.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_utl.d.tmp -MT crypto/x509v3/v3_utl.o -c -o crypto/x509v3/v3_utl.o crypto/x509v3/v3_utl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3err.d.tmp -MT crypto/x509v3/v3err.o -c -o crypto/x509v3/v3err.o crypto/x509v3/v3err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF engines/e_capi.d.tmp -MT engines/e_capi.o -c -o engines/e_capi.o engines/e_capi.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF engines/e_padlock.d.tmp -MT engines/e_padlock.o -c -o engines/e_padlock.o engines/e_padlock.c
mips64-octeon-linux-gnu-ar r libcrypto.a crypto/aes/aes-mips.o crypto/aes/aes_cbc.o crypto/aes/aes_cfb.o crypto/aes/aes_ecb.o crypto/aes/aes_ige.o crypto/aes/aes_misc.o crypto/aes/aes_ofb.o crypto/aes/aes_wrap.o crypto/aria/aria.o crypto/asn1/a_bitstr.o crypto/asn1/a_d2i_fp.o crypto/asn1/a_digest.o crypto/asn1/a_dup.o crypto/asn1/a_gentm.o crypto/asn1/a_i2d_fp.o crypto/asn1/a_int.o crypto/asn1/a_mbstr.o crypto/asn1/a_object.o crypto/asn1/a_octet.o crypto/asn1/a_print.o crypto/asn1/a_sign.o crypto/asn1/a_strex.o crypto/asn1/a_strnid.o crypto/asn1/a_time.o crypto/asn1/a_type.o crypto/asn1/a_utctm.o crypto/asn1/a_utf8.o crypto/asn1/a_verify.o crypto/asn1/ameth_lib.o crypto/asn1/asn1_err.o crypto/asn1/asn1_gen.o crypto/asn1/asn1_item_list.o crypto/asn1/asn1_lib.o crypto/asn1/asn1_par.o crypto/asn1/asn_mime.o crypto/asn1/asn_moid.o crypto/asn1/asn_mstbl.o crypto/asn1/asn_pack.o crypto/asn1/bio_asn1.o crypto/asn1/bio_ndef.o crypto/asn1/d2i_pr.o crypto/asn1/d2i_pu.o crypto/asn1/evp_asn1.o crypto/asn1/f_int.o crypto/asn1/f_string.o crypto/asn1/i2d_pr.o crypto/asn1/i2d_pu.o crypto/asn1/n_pkey.o crypto/asn1/nsseq.o crypto/asn1/p5_pbe.o crypto/asn1/p5_pbev2.o crypto/asn1/p5_scrypt.o crypto/asn1/p8_pkey.o crypto/asn1/t_bitst.o crypto/asn1/t_pkey.o crypto/asn1/t_spki.o crypto/asn1/tasn_dec.o crypto/asn1/tasn_enc.o crypto/asn1/tasn_fre.o crypto/asn1/tasn_new.o crypto/asn1/tasn_prn.o crypto/asn1/tasn_scn.o crypto/asn1/tasn_typ.o crypto/asn1/tasn_utl.o crypto/asn1/x_algor.o crypto/asn1/x_bignum.o crypto/asn1/x_info.o crypto/asn1/x_int64.o crypto/asn1/x_long.o crypto/asn1/x_pkey.o crypto/asn1/x_sig.o crypto/asn1/x_spki.o crypto/asn1/x_val.o crypto/async/arch/async_null.o crypto/async/arch/async_posix.o crypto/async/arch/async_win.o crypto/async/async.o crypto/async/async_err.o crypto/async/async_wait.o crypto/bf/bf_cfb64.o crypto/bf/bf_ecb.o crypto/bf/bf_enc.o crypto/bf/bf_ofb64.o crypto/bf/bf_skey.o crypto/bio/b_addr.o crypto/bio/b_dump.o crypto/bio/b_print.o crypto/bio/b_sock.o crypto/bio/b_sock2.o crypto/bio/bf_buff.o crypto/bio/bf_lbuf.o crypto/bio/bf_nbio.o crypto/bio/bf_null.o crypto/bio/bio_cb.o crypto/bio/bio_err.o crypto/bio/bio_lib.o crypto/bio/bio_meth.o crypto/bio/bss_acpt.o crypto/bio/bss_bio.o crypto/bio/bss_conn.o crypto/bio/bss_dgram.o crypto/bio/bss_fd.o crypto/bio/bss_file.o crypto/bio/bss_log.o crypto/bio/bss_mem.o crypto/bio/bss_null.o crypto/bio/bss_sock.o crypto/blake2/blake2b.o crypto/blake2/blake2s.o crypto/blake2/m_blake2b.o crypto/blake2/m_blake2s.o crypto/bn/bn-mips.o crypto/bn/bn_add.o crypto/bn/bn_blind.o crypto/bn/bn_const.o crypto/bn/bn_ctx.o crypto/bn/bn_depr.o crypto/bn/bn_dh.o crypto/bn/bn_div.o crypto/bn/bn_err.o crypto/bn/bn_exp.o crypto/bn/bn_exp2.o crypto/bn/bn_gcd.o crypto/bn/bn_gf2m.o crypto/bn/bn_intern.o crypto/bn/bn_kron.o crypto/bn/bn_lib.o crypto/bn/bn_mod.o crypto/bn/bn_mont.o crypto/bn/bn_mpi.o crypto/bn/bn_mul.o crypto/bn/bn_nist.o crypto/bn/bn_prime.o crypto/bn/bn_print.o crypto/bn/bn_rand.o crypto/bn/bn_recp.o crypto/bn/bn_shift.o crypto/bn/bn_sqr.o crypto/bn/bn_sqrt.o crypto/bn/bn_srp.o crypto/bn/bn_word.o crypto/bn/bn_x931p.o crypto/bn/mips-mont.o crypto/buffer/buf_err.o crypto/buffer/buffer.o crypto/camellia/camellia.o crypto/camellia/cmll_cbc.o crypto/camellia/cmll_cfb.o crypto/camellia/cmll_ctr.o crypto/camellia/cmll_ecb.o crypto/camellia/cmll_misc.o crypto/camellia/cmll_ofb.o crypto/cast/c_cfb64.o crypto/cast/c_ecb.o crypto/cast/c_enc.o crypto/cast/c_ofb64.o crypto/cast/c_skey.o crypto/chacha/chacha_enc.o crypto/cmac/cm_ameth.o crypto/cmac/cm_pmeth.o crypto/cmac/cmac.o crypto/cms/cms_asn1.o crypto/cms/cms_att.o crypto/cms/cms_cd.o crypto/cms/cms_dd.o crypto/cms/cms_enc.o crypto/cms/cms_env.o crypto/cms/cms_err.o crypto/cms/cms_ess.o crypto/cms/cms_io.o crypto/cms/cms_kari.o crypto/cms/cms_lib.o crypto/cms/cms_pwri.o crypto/cms/cms_sd.o crypto/cms/cms_smime.o crypto/comp/c_zlib.o crypto/comp/comp_err.o crypto/comp/comp_lib.o crypto/conf/conf_api.o crypto/conf/conf_def.o crypto/conf/conf_err.o crypto/conf/conf_lib.o crypto/conf/conf_mall.o crypto/conf/conf_mod.o crypto/conf/conf_sap.o crypto/cpt_err.o crypto/cryptlib.o crypto/ct/ct_b64.o crypto/ct/ct_err.o crypto/ct/ct_log.o crypto/ct/ct_oct.o crypto/ct/ct_policy.o crypto/ct/ct_prn.o crypto/ct/ct_sct.o crypto/ct/ct_sct_ctx.o crypto/ct/ct_vfy.o crypto/ct/ct_x509v3.o crypto/ctype.o crypto/cversion.o crypto/des/cbc_cksm.o crypto/des/cbc_enc.o crypto/des/cfb64ede.o crypto/des/cfb64enc.o crypto/des/cfb_enc.o crypto/des/des_enc.o crypto/des/ecb3_enc.o crypto/des/ecb_enc.o crypto/des/fcrypt.o crypto/des/fcrypt_b.o crypto/des/ofb64ede.o crypto/des/ofb64enc.o crypto/des/ofb_enc.o crypto/des/pcbc_enc.o crypto/des/qud_cksm.o crypto/des/rand_key.o crypto/des/set_key.o crypto/des/str2key.o crypto/des/xcbc_enc.o crypto/dh/dh_ameth.o crypto/dh/dh_asn1.o crypto/dh/dh_check.o crypto/dh/dh_depr.o crypto/dh/dh_err.o crypto/dh/dh_gen.o crypto/dh/dh_kdf.o crypto/dh/dh_key.o crypto/dh/dh_lib.o crypto/dh/dh_meth.o crypto/dh/dh_pmeth.o crypto/dh/dh_prn.o crypto/dh/dh_rfc5114.o crypto/dh/dh_rfc7919.o crypto/dsa/dsa_ameth.o crypto/dsa/dsa_asn1.o crypto/dsa/dsa_depr.o crypto/dsa/dsa_err.o crypto/dsa/dsa_gen.o crypto/dsa/dsa_key.o crypto/dsa/dsa_lib.o crypto/dsa/dsa_meth.o crypto/dsa/dsa_ossl.o crypto/dsa/dsa_pmeth.o crypto/dsa/dsa_prn.o crypto/dsa/dsa_sign.o crypto/dsa/dsa_vrf.o crypto/dso/dso_dl.o crypto/dso/dso_dlfcn.o crypto/dso/dso_err.o crypto/dso/dso_lib.o crypto/dso/dso_openssl.o crypto/dso/dso_vms.o crypto/dso/dso_win32.o crypto/ebcdic.o crypto/ec/curve25519.o crypto/ec/ec2_mult.o crypto/ec/ec2_oct.o crypto/ec/ec2_smpl.o crypto/ec/ec_ameth.o crypto/ec/ec_asn1.o crypto/ec/ec_check.o crypto/ec/ec_curve.o crypto/ec/ec_cvt.o crypto/ec/ec_err.o crypto/ec/ec_key.o crypto/ec/ec_kmeth.o crypto/ec/ec_lib.o crypto/ec/ec_mult.o crypto/ec/ec_oct.o crypto/ec/ec_pmeth.o crypto/ec/ec_print.o crypto/ec/ecdh_kdf.o crypto/ec/ecdh_ossl.o crypto/ec/ecdsa_ossl.o crypto/ec/ecdsa_sign.o crypto/ec/ecdsa_vrf.o crypto/ec/eck_prn.o crypto/ec/ecp_mont.o crypto/ec/ecp_nist.o crypto/ec/ecp_nistp224.o crypto/ec/ecp_nistp256.o crypto/ec/ecp_nistp521.o crypto/ec/ecp_nistputil.o crypto/ec/ecp_oct.o crypto/ec/ecp_smpl.o crypto/ec/ecx_meth.o crypto/engine/eng_all.o crypto/engine/eng_cnf.o crypto/engine/eng_ctrl.o crypto/engine/eng_dyn.o crypto/engine/eng_err.o crypto/engine/eng_fat.o crypto/engine/eng_init.o crypto/engine/eng_lib.o crypto/engine/eng_list.o crypto/engine/eng_openssl.o crypto/engine/eng_pkey.o crypto/engine/eng_rdrand.o crypto/engine/eng_table.o crypto/engine/tb_asnmth.o crypto/engine/tb_cipher.o crypto/engine/tb_dh.o crypto/engine/tb_digest.o crypto/engine/tb_dsa.o crypto/engine/tb_eckey.o crypto/engine/tb_pkmeth.o crypto/engine/tb_rand.o crypto/engine/tb_rsa.o crypto/err/err.o crypto/err/err_all.o crypto/err/err_prn.o crypto/evp/bio_b64.o crypto/evp/bio_enc.o crypto/evp/bio_md.o crypto/evp/bio_ok.o crypto/evp/c_allc.o crypto/evp/c_alld.o crypto/evp/cmeth_lib.o crypto/evp/digest.o crypto/evp/e_aes.o crypto/evp/e_aes_cbc_hmac_sha1.o crypto/evp/e_aes_cbc_hmac_sha256.o crypto/evp/e_aria.o crypto/evp/e_bf.o crypto/evp/e_camellia.o crypto/evp/e_cast.o crypto/evp/e_chacha20_poly1305.o crypto/evp/e_des.o crypto/evp/e_des3.o crypto/evp/e_idea.o crypto/evp/e_null.o crypto/evp/e_old.o crypto/evp/e_rc2.o crypto/evp/e_rc4.o crypto/evp/e_rc4_hmac_md5.o crypto/evp/e_rc5.o crypto/evp/e_seed.o crypto/evp/e_sm4.o crypto/evp/e_xcbc_d.o crypto/evp/encode.o crypto/evp/evp_cnf.o crypto/evp/evp_enc.o crypto/evp/evp_err.o crypto/evp/evp_key.o crypto/evp/evp_lib.o crypto/evp/evp_pbe.o crypto/evp/evp_pkey.o crypto/evp/m_md2.o crypto/evp/m_md4.o crypto/evp/m_md5.o crypto/evp/m_md5_sha1.o crypto/evp/m_mdc2.o crypto/evp/m_null.o crypto/evp/m_ripemd.o crypto/evp/m_sha1.o crypto/evp/m_sha3.o crypto/evp/m_sigver.o crypto/evp/m_wp.o crypto/evp/names.o crypto/evp/p5_crpt.o crypto/evp/p5_crpt2.o crypto/evp/p_dec.o crypto/evp/p_enc.o crypto/evp/p_lib.o crypto/evp/p_open.o crypto/evp/p_seal.o crypto/evp/p_sign.o crypto/evp/p_verify.o crypto/evp/pbe_scrypt.o crypto/evp/pmeth_fn.o crypto/evp/pmeth_gn.o crypto/evp/pmeth_lib.o crypto/ex_data.o crypto/hmac/hm_ameth.o crypto/hmac/hm_pmeth.o crypto/hmac/hmac.o crypto/idea/i_cbc.o crypto/idea/i_cfb64.o crypto/idea/i_ecb.o crypto/idea/i_ofb64.o crypto/idea/i_skey.o crypto/init.o crypto/kdf/hkdf.o crypto/kdf/kdf_err.o crypto/kdf/scrypt.o crypto/kdf/tls1_prf.o crypto/lhash/lh_stats.o crypto/lhash/lhash.o crypto/md4/md4_dgst.o crypto/md4/md4_one.o crypto/md5/md5_dgst.o crypto/md5/md5_one.o crypto/mdc2/mdc2_one.o crypto/mdc2/mdc2dgst.o crypto/mem.o crypto/mem_clr.o crypto/mem_dbg.o crypto/mem_sec.o crypto/modes/cbc128.o crypto/modes/ccm128.o crypto/modes/cfb128.o crypto/modes/ctr128.o crypto/modes/cts128.o crypto/modes/gcm128.o crypto/modes/ocb128.o crypto/modes/ofb128.o crypto/modes/wrap128.o crypto/modes/xts128.o crypto/o_dir.o crypto/o_fips.o crypto/o_fopen.o crypto/o_init.o crypto/o_str.o crypto/o_time.o crypto/objects/o_names.o crypto/objects/obj_dat.o crypto/objects/obj_err.o crypto/objects/obj_lib.o crypto/objects/obj_xref.o crypto/ocsp/ocsp_asn.o crypto/ocsp/ocsp_cl.o crypto/ocsp/ocsp_err.o crypto/ocsp/ocsp_ext.o crypto/ocsp/ocsp_ht.o crypto/ocsp/ocsp_lib.o crypto/ocsp/ocsp_prn.o crypto/ocsp/ocsp_srv.o crypto/ocsp/ocsp_vfy.o crypto/ocsp/v3_ocsp.o crypto/pem/pem_all.o crypto/pem/pem_err.o crypto/pem/pem_info.o crypto/pem/pem_lib.o crypto/pem/pem_oth.o crypto/pem/pem_pk8.o crypto/pem/pem_pkey.o crypto/pem/pem_sign.o crypto/pem/pem_x509.o crypto/pem/pem_xaux.o crypto/pem/pvkfmt.o crypto/pkcs12/p12_add.o crypto/pkcs12/p12_asn.o crypto/pkcs12/p12_attr.o crypto/pkcs12/p12_crpt.o crypto/pkcs12/p12_crt.o crypto/pkcs12/p12_decr.o crypto/pkcs12/p12_init.o crypto/pkcs12/p12_key.o crypto/pkcs12/p12_kiss.o crypto/pkcs12/p12_mutl.o crypto/pkcs12/p12_npas.o crypto/pkcs12/p12_p8d.o crypto/pkcs12/p12_p8e.o crypto/pkcs12/p12_sbag.o crypto/pkcs12/p12_utl.o crypto/pkcs12/pk12err.o crypto/pkcs7/bio_pk7.o crypto/pkcs7/pk7_asn1.o crypto/pkcs7/pk7_attr.o crypto/pkcs7/pk7_doit.o crypto/pkcs7/pk7_lib.o crypto/pkcs7/pk7_mime.o crypto/pkcs7/pk7_smime.o crypto/pkcs7/pkcs7err.o crypto/poly1305/poly1305-mips.o crypto/poly1305/poly1305.o crypto/poly1305/poly1305_ameth.o crypto/poly1305/poly1305_pmeth.o crypto/rand/drbg_ctr.o crypto/rand/drbg_lib.o crypto/rand/rand_egd.o crypto/rand/rand_err.o crypto/rand/rand_lib.o crypto/rand/rand_unix.o crypto/rand/rand_vms.o crypto/rand/rand_win.o crypto/rand/randfile.o crypto/rc2/rc2_cbc.o crypto/rc2/rc2_ecb.o crypto/rc2/rc2_skey.o crypto/rc2/rc2cfb64.o crypto/rc2/rc2ofb64.o crypto/rc4/rc4_enc.o crypto/rc4/rc4_skey.o crypto/ripemd/rmd_dgst.o crypto/ripemd/rmd_one.o crypto/rsa/rsa_ameth.o crypto/rsa/rsa_asn1.o crypto/rsa/rsa_chk.o crypto/rsa/rsa_crpt.o crypto/rsa/rsa_depr.o crypto/rsa/rsa_err.o crypto/rsa/rsa_gen.o crypto/rsa/rsa_lib.o crypto/rsa/rsa_meth.o crypto/rsa/rsa_mp.o crypto/rsa/rsa_none.o crypto/rsa/rsa_oaep.o crypto/rsa/rsa_ossl.o crypto/rsa/rsa_pk1.o crypto/rsa/rsa_pmeth.o crypto/rsa/rsa_prn.o crypto/rsa/rsa_pss.o crypto/rsa/rsa_saos.o crypto/rsa/rsa_sign.o crypto/rsa/rsa_ssl.o crypto/rsa/rsa_x931.o crypto/rsa/rsa_x931g.o crypto/seed/seed.o crypto/seed/seed_cbc.o crypto/seed/seed_cfb.o crypto/seed/seed_ecb.o crypto/seed/seed_ofb.o crypto/sha/keccak1600.o crypto/sha/sha1-mips.o crypto/sha/sha1_one.o crypto/sha/sha1dgst.o crypto/sha/sha256-mips.o crypto/sha/sha256.o crypto/sha/sha512-mips.o crypto/sha/sha512.o crypto/siphash/siphash.o crypto/siphash/siphash_ameth.o crypto/siphash/siphash_pmeth.o crypto/sm3/m_sm3.o crypto/sm3/sm3.o crypto/sm4/sm4.o crypto/srp/srp_lib.o crypto/srp/srp_vfy.o crypto/stack/stack.o crypto/store/loader_file.o crypto/store/store_err.o crypto/store/store_init.o crypto/store/store_lib.o crypto/store/store_register.o crypto/store/store_strings.o crypto/threads_none.o crypto/threads_pthread.o crypto/threads_win.o crypto/ts/ts_asn1.o crypto/ts/ts_conf.o crypto/ts/ts_err.o crypto/ts/ts_lib.o crypto/ts/ts_req_print.o crypto/ts/ts_req_utils.o crypto/ts/ts_rsp_print.o crypto/ts/ts_rsp_sign.o crypto/ts/ts_rsp_utils.o crypto/ts/ts_rsp_verify.o crypto/ts/ts_verify_ctx.o crypto/txt_db/txt_db.o crypto/ui/ui_err.o crypto/ui/ui_lib.o crypto/ui/ui_null.o crypto/ui/ui_openssl.o crypto/ui/ui_util.o crypto/uid.o crypto/whrlpool/wp_block.o crypto/whrlpool/wp_dgst.o crypto/x509/by_dir.o crypto/x509/by_file.o crypto/x509/t_crl.o crypto/x509/t_req.o crypto/x509/t_x509.o crypto/x509/x509_att.o crypto/x509/x509_cmp.o crypto/x509/x509_d2.o crypto/x509/x509_def.o crypto/x509/x509_err.o crypto/x509/x509_ext.o crypto/x509/x509_lu.o crypto/x509/x509_obj.o crypto/x509/x509_r2x.o crypto/x509/x509_req.o crypto/x509/x509_set.o crypto/x509/x509_trs.o crypto/x509/x509_txt.o crypto/x509/x509_v3.o crypto/x509/x509_vfy.o crypto/x509/x509_vpm.o crypto/x509/x509cset.o crypto/x509/x509name.o crypto/x509/x509rset.o crypto/x509/x509spki.o crypto/x509/x509type.o crypto/x509/x_all.o crypto/x509/x_attrib.o crypto/x509/x_crl.o crypto/x509/x_exten.o crypto/x509/x_name.o crypto/x509/x_pubkey.o crypto/x509/x_req.o crypto/x509/x_x509.o crypto/x509/x_x509a.o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_tree.o crypto/x509v3/v3_addr.o crypto/x509v3/v3_admis.o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_alt.o crypto/x509v3/v3_asid.o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_conf.o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_crld.o crypto/x509v3/v3_enum.o crypto/x509v3/v3_extku.o crypto/x509v3/v3_genn.o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_info.o crypto/x509v3/v3_int.o crypto/x509v3/v3_lib.o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_prn.o crypto/x509v3/v3_purp.o crypto/x509v3/v3_skey.o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_utl.o crypto/x509v3/v3err.o engines/e_capi.o engines/e_padlock.o
mips64-octeon-linux-gnu-ar: creating libcrypto.a
mips64-octeon-linux-gnu-ranlib libcrypto.a || echo Never mind.
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/bio_ssl.d.tmp -MT ssl/bio_ssl.o -c -o ssl/bio_ssl.o ssl/bio_ssl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_lib.d.tmp -MT ssl/d1_lib.o -c -o ssl/d1_lib.o ssl/d1_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_msg.d.tmp -MT ssl/d1_msg.o -c -o ssl/d1_msg.o ssl/d1_msg.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_srtp.d.tmp -MT ssl/d1_srtp.o -c -o ssl/d1_srtp.o ssl/d1_srtp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/methods.d.tmp -MT ssl/methods.o -c -o ssl/methods.o ssl/methods.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/packet.d.tmp -MT ssl/packet.o -c -o ssl/packet.o ssl/packet.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/pqueue.d.tmp -MT ssl/pqueue.o -c -o ssl/pqueue.o ssl/pqueue.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/dtls1_bitmap.d.tmp -MT ssl/record/dtls1_bitmap.o -c -o ssl/record/dtls1_bitmap.o ssl/record/dtls1_bitmap.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/rec_layer_d1.d.tmp -MT ssl/record/rec_layer_d1.o -c -o ssl/record/rec_layer_d1.o ssl/record/rec_layer_d1.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/rec_layer_s3.d.tmp -MT ssl/record/rec_layer_s3.o -c -o ssl/record/rec_layer_s3.o ssl/record/rec_layer_s3.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_buffer.d.tmp -MT ssl/record/ssl3_buffer.o -c -o ssl/record/ssl3_buffer.o ssl/record/ssl3_buffer.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_record.d.tmp -MT ssl/record/ssl3_record.o -c -o ssl/record/ssl3_record.o ssl/record/ssl3_record.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_record_tls13.d.tmp -MT ssl/record/ssl3_record_tls13.o -c -o ssl/record/ssl3_record_tls13.o ssl/record/ssl3_record_tls13.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_cbc.d.tmp -MT ssl/s3_cbc.o -c -o ssl/s3_cbc.o ssl/s3_cbc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_enc.d.tmp -MT ssl/s3_enc.o -c -o ssl/s3_enc.o ssl/s3_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_lib.d.tmp -MT ssl/s3_lib.o -c -o ssl/s3_lib.o ssl/s3_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_msg.d.tmp -MT ssl/s3_msg.o -c -o ssl/s3_msg.o ssl/s3_msg.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_asn1.d.tmp -MT ssl/ssl_asn1.o -c -o ssl/ssl_asn1.o ssl/ssl_asn1.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_cert.d.tmp -MT ssl/ssl_cert.o -c -o ssl/ssl_cert.o ssl/ssl_cert.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_ciph.d.tmp -MT ssl/ssl_ciph.o -c -o ssl/ssl_ciph.o ssl/ssl_ciph.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_conf.d.tmp -MT ssl/ssl_conf.o -c -o ssl/ssl_conf.o ssl/ssl_conf.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_err.d.tmp -MT ssl/ssl_err.o -c -o ssl/ssl_err.o ssl/ssl_err.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_init.d.tmp -MT ssl/ssl_init.o -c -o ssl/ssl_init.o ssl/ssl_init.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_lib.d.tmp -MT ssl/ssl_lib.o -c -o ssl/ssl_lib.o ssl/ssl_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_mcnf.d.tmp -MT ssl/ssl_mcnf.o -c -o ssl/ssl_mcnf.o ssl/ssl_mcnf.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_rsa.d.tmp -MT ssl/ssl_rsa.o -c -o ssl/ssl_rsa.o ssl/ssl_rsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_sess.d.tmp -MT ssl/ssl_sess.o -c -o ssl/ssl_sess.o ssl/ssl_sess.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_stat.d.tmp -MT ssl/ssl_stat.o -c -o ssl/ssl_stat.o ssl/ssl_stat.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_txt.d.tmp -MT ssl/ssl_txt.o -c -o ssl/ssl_txt.o ssl/ssl_txt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_utst.d.tmp -MT ssl/ssl_utst.o -c -o ssl/ssl_utst.o ssl/ssl_utst.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions.d.tmp -MT ssl/statem/extensions.o -c -o ssl/statem/extensions.o ssl/statem/extensions.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_clnt.d.tmp -MT ssl/statem/extensions_clnt.o -c -o ssl/statem/extensions_clnt.o ssl/statem/extensions_clnt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_cust.d.tmp -MT ssl/statem/extensions_cust.o -c -o ssl/statem/extensions_cust.o ssl/statem/extensions_cust.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_srvr.d.tmp -MT ssl/statem/extensions_srvr.o -c -o ssl/statem/extensions_srvr.o ssl/statem/extensions_srvr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem.d.tmp -MT ssl/statem/statem.o -c -o ssl/statem/statem.o ssl/statem/statem.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_clnt.d.tmp -MT ssl/statem/statem_clnt.o -c -o ssl/statem/statem_clnt.o ssl/statem/statem_clnt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_dtls.d.tmp -MT ssl/statem/statem_dtls.o -c -o ssl/statem/statem_dtls.o ssl/statem/statem_dtls.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_lib.d.tmp -MT ssl/statem/statem_lib.o -c -o ssl/statem/statem_lib.o ssl/statem/statem_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_srvr.d.tmp -MT ssl/statem/statem_srvr.o -c -o ssl/statem/statem_srvr.o ssl/statem/statem_srvr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_enc.d.tmp -MT ssl/t1_enc.o -c -o ssl/t1_enc.o ssl/t1_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_lib.d.tmp -MT ssl/t1_lib.o -c -o ssl/t1_lib.o ssl/t1_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_trce.d.tmp -MT ssl/t1_trce.o -c -o ssl/t1_trce.o ssl/t1_trce.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/tls13_enc.d.tmp -MT ssl/tls13_enc.o -c -o ssl/tls13_enc.o ssl/tls13_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/tls_srp.d.tmp -MT ssl/tls_srp.o -c -o ssl/tls_srp.o ssl/tls_srp.c
mips64-octeon-linux-gnu-ar r libssl.a ssl/bio_ssl.o ssl/d1_lib.o ssl/d1_msg.o ssl/d1_srtp.o ssl/methods.o ssl/packet.o ssl/pqueue.o ssl/record/dtls1_bitmap.o ssl/record/rec_layer_d1.o ssl/record/rec_layer_s3.o ssl/record/ssl3_buffer.o ssl/record/ssl3_record.o ssl/record/ssl3_record_tls13.o ssl/s3_cbc.o ssl/s3_enc.o ssl/s3_lib.o ssl/s3_msg.o ssl/ssl_asn1.o ssl/ssl_cert.o ssl/ssl_ciph.o ssl/ssl_conf.o ssl/ssl_err.o ssl/ssl_init.o ssl/ssl_lib.o ssl/ssl_mcnf.o ssl/ssl_rsa.o ssl/ssl_sess.o ssl/ssl_stat.o ssl/ssl_txt.o ssl/ssl_utst.o ssl/statem/extensions.o ssl/statem/extensions_clnt.o ssl/statem/extensions_cust.o ssl/statem/extensions_srvr.o ssl/statem/statem.o ssl/statem/statem_clnt.o ssl/statem/statem_dtls.o ssl/statem/statem_lib.o ssl/statem/statem_srvr.o ssl/t1_enc.o ssl/t1_lib.o ssl/t1_trce.o ssl/tls13_enc.o ssl/tls_srp.o
mips64-octeon-linux-gnu-ar: creating libssl.a
mips64-octeon-linux-gnu-ranlib libssl.a || echo Never mind.
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/basic_output.d.tmp -MT test/testutil/basic_output.o -c -o test/testutil/basic_output.o test/testutil/basic_output.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/cb.d.tmp -MT test/testutil/cb.o -c -o test/testutil/cb.o test/testutil/cb.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/driver.d.tmp -MT test/testutil/driver.o -c -o test/testutil/driver.o test/testutil/driver.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/format_output.d.tmp -MT test/testutil/format_output.o -c -o test/testutil/format_output.o test/testutil/format_output.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/init.d.tmp -MT test/testutil/init.o -c -o test/testutil/init.o test/testutil/init.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/main.d.tmp -MT test/testutil/main.o -c -o test/testutil/main.o test/testutil/main.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/output_helpers.d.tmp -MT test/testutil/output_helpers.o -c -o test/testutil/output_helpers.o test/testutil/output_helpers.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/stanza.d.tmp -MT test/testutil/stanza.o -c -o test/testutil/stanza.o test/testutil/stanza.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/tap_bio.d.tmp -MT test/testutil/tap_bio.o -c -o test/testutil/tap_bio.o test/testutil/tap_bio.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/test_cleanup.d.tmp -MT test/testutil/test_cleanup.o -c -o test/testutil/test_cleanup.o test/testutil/test_cleanup.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/tests.d.tmp -MT test/testutil/tests.o -c -o test/testutil/tests.o test/testutil/tests.c
mips64-octeon-linux-gnu-ar r test/libtestutil.a test/testutil/basic_output.o test/testutil/cb.o test/testutil/driver.o test/testutil/format_output.o test/testutil/init.o test/testutil/main.o test/testutil/output_helpers.o test/testutil/stanza.o test/testutil/tap_bio.o test/testutil/test_cleanup.o test/testutil/tests.o
mips64-octeon-linux-gnu-ar: creating test/libtestutil.a
mips64-octeon-linux-gnu-ranlib test/libtestutil.a || echo Never mind.
/usr/bin/perl apps/progs.pl apps/openssl > apps/progs.h
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/asn1pars.d.tmp -MT apps/asn1pars.o -c -o apps/asn1pars.o apps/asn1pars.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ca.d.tmp -MT apps/ca.o -c -o apps/ca.o apps/ca.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ciphers.d.tmp -MT apps/ciphers.o -c -o apps/ciphers.o apps/ciphers.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/cms.d.tmp -MT apps/cms.o -c -o apps/cms.o apps/cms.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/crl.d.tmp -MT apps/crl.o -c -o apps/crl.o apps/crl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/crl2p7.d.tmp -MT apps/crl2p7.o -c -o apps/crl2p7.o apps/crl2p7.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dgst.d.tmp -MT apps/dgst.o -c -o apps/dgst.o apps/dgst.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dhparam.d.tmp -MT apps/dhparam.o -c -o apps/dhparam.o apps/dhparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dsa.d.tmp -MT apps/dsa.o -c -o apps/dsa.o apps/dsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dsaparam.d.tmp -MT apps/dsaparam.o -c -o apps/dsaparam.o apps/dsaparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ec.d.tmp -MT apps/ec.o -c -o apps/ec.o apps/ec.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ecparam.d.tmp -MT apps/ecparam.o -c -o apps/ecparam.o apps/ecparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/enc.d.tmp -MT apps/enc.o -c -o apps/enc.o apps/enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/engine.d.tmp -MT apps/engine.o -c -o apps/engine.o apps/engine.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/errstr.d.tmp -MT apps/errstr.o -c -o apps/errstr.o apps/errstr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/gendsa.d.tmp -MT apps/gendsa.o -c -o apps/gendsa.o apps/gendsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/genpkey.d.tmp -MT apps/genpkey.o -c -o apps/genpkey.o apps/genpkey.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/genrsa.d.tmp -MT apps/genrsa.o -c -o apps/genrsa.o apps/genrsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/nseq.d.tmp -MT apps/nseq.o -c -o apps/nseq.o apps/nseq.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ocsp.d.tmp -MT apps/ocsp.o -c -o apps/ocsp.o apps/ocsp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/openssl.d.tmp -MT apps/openssl.o -c -o apps/openssl.o apps/openssl.c
apps/openssl.c: In function 'list_type':
apps/openssl.c:523: warning: 'dc.width' may be used uninitialized in this function
apps/openssl.c:523: warning: 'dc.columns' may be used uninitialized in this function
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/passwd.d.tmp -MT apps/passwd.o -c -o apps/passwd.o apps/passwd.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs12.d.tmp -MT apps/pkcs12.o -c -o apps/pkcs12.o apps/pkcs12.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs7.d.tmp -MT apps/pkcs7.o -c -o apps/pkcs7.o apps/pkcs7.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs8.d.tmp -MT apps/pkcs8.o -c -o apps/pkcs8.o apps/pkcs8.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkey.d.tmp -MT apps/pkey.o -c -o apps/pkey.o apps/pkey.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkeyparam.d.tmp -MT apps/pkeyparam.o -c -o apps/pkeyparam.o apps/pkeyparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkeyutl.d.tmp -MT apps/pkeyutl.o -c -o apps/pkeyutl.o apps/pkeyutl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/prime.d.tmp -MT apps/prime.o -c -o apps/prime.o apps/prime.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rand.d.tmp -MT apps/rand.o -c -o apps/rand.o apps/rand.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rehash.d.tmp -MT apps/rehash.o -c -o apps/rehash.o apps/rehash.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/req.d.tmp -MT apps/req.o -c -o apps/req.o apps/req.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rsa.d.tmp -MT apps/rsa.o -c -o apps/rsa.o apps/rsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rsautl.d.tmp -MT apps/rsautl.o -c -o apps/rsautl.o apps/rsautl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_client.d.tmp -MT apps/s_client.o -c -o apps/s_client.o apps/s_client.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_server.d.tmp -MT apps/s_server.o -c -o apps/s_server.o apps/s_server.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_time.d.tmp -MT apps/s_time.o -c -o apps/s_time.o apps/s_time.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/sess_id.d.tmp -MT apps/sess_id.o -c -o apps/sess_id.o apps/sess_id.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/smime.d.tmp -MT apps/smime.o -c -o apps/smime.o apps/smime.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/speed.d.tmp -MT apps/speed.o -c -o apps/speed.o apps/speed.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/spkac.d.tmp -MT apps/spkac.o -c -o apps/spkac.o apps/spkac.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/srp.d.tmp -MT apps/srp.o -c -o apps/srp.o apps/srp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/storeutl.d.tmp -MT apps/storeutl.o -c -o apps/storeutl.o apps/storeutl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ts.d.tmp -MT apps/ts.o -c -o apps/ts.o apps/ts.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/verify.d.tmp -MT apps/verify.o -c -o apps/verify.o apps/verify.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/version.d.tmp -MT apps/version.o -c -o apps/version.o apps/version.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/x509.d.tmp -MT apps/x509.o -c -o apps/x509.o apps/x509.c
rm -f apps/openssl
${LDCMD:-mips64-octeon-linux-gnu-gcc} -mips3 -Wall -O3 -pthread -mabi=n32  -L.   \
		-o apps/openssl apps/asn1pars.o apps/ca.o apps/ciphers.o apps/cms.o apps/crl.o apps/crl2p7.o apps/dgst.o apps/dhparam.o apps/dsa.o apps/dsaparam.o apps/ec.o apps/ecparam.o apps/enc.o apps/engine.o apps/errstr.o apps/gendsa.o apps/genpkey.o apps/genrsa.o apps/nseq.o apps/ocsp.o apps/openssl.o apps/passwd.o apps/pkcs12.o apps/pkcs7.o apps/pkcs8.o apps/pkey.o apps/pkeyparam.o apps/pkeyutl.o apps/prime.o apps/rand.o apps/rehash.o apps/req.o apps/rsa.o apps/rsautl.o apps/s_client.o apps/s_server.o apps/s_time.o apps/sess_id.o apps/smime.o apps/speed.o apps/spkac.o apps/srp.o apps/storeutl.o apps/ts.o apps/verify.o apps/version.o apps/x509.o \
		  apps/libapps.a -lssl -lcrypto -ldl -pthread
./libcrypto.a(async_posix.o): In function `ASYNC_is_capable':
async_posix.c:(.text+0x6c): warning: warning: getcontext is not implemented and will always fail
./libcrypto.a(async.o): In function `async_fibre_swapcontext':
async.c:(.text+0x2fc): warning: warning: setcontext is not implemented and will always fail
./libcrypto.a(async_posix.o): In function `async_fibre_makecontext':
async_posix.c:(.text+0x10c): warning: warning: makecontext is not implemented and will always fail
apps/speed.o: In function `speed_main':
speed.c:(.text+0x74bc): undefined reference to `CRYPTO_memcmp'
speed.c:(.text+0x74bc): relocation truncated to fit: R_MIPS_26 against `CRYPTO_memcmp'
./libssl.a(ssl3_record.o): In function `dtls1_process_record':
ssl3_record.c:(.text+0x1e14): undefined reference to `CRYPTO_memcmp'
ssl3_record.c:(.text+0x1f7c): undefined reference to `CRYPTO_memcmp'
./libssl.a(ssl3_record.o): In function `ssl3_get_record':
ssl3_record.c:(.text+0x2a88): undefined reference to `CRYPTO_memcmp'
ssl3_record.c:(.text+0x3210): undefined reference to `CRYPTO_memcmp'
./libssl.a(extensions.o):extensions.c:(.text+0xa84): more undefined references to `CRYPTO_memcmp' follow
./libcrypto.a(init.o): In function `ossl_init_base_ossl_':
init.c:(.text+0x8e0): undefined reference to `OPENSSL_cpuid_setup'
./libcrypto.a(gcm128.o): In function `CRYPTO_gcm128_finish':
gcm128.c:(.text+0x23cc): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(ocb128.o): In function `CRYPTO_ocb128_finish':
ocb128.c:(.text+0x144): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(wrap128.o): In function `CRYPTO_128_unwrap_pad':
wrap128.c:(.text+0x494): undefined reference to `CRYPTO_memcmp'
wrap128.c:(.text+0x588): undefined reference to `CRYPTO_memcmp'
wrap128.c:(.text+0x5b0): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(wrap128.o):wrap128.c:(.text+0x624): more undefined references to `CRYPTO_memcmp' follow
./libcrypto.a(rand_lib.o): In function `rand_drbg_get_additional_data':
rand_lib.c:(.text+0xedc): undefined reference to `OPENSSL_rdtsc'
rand_lib.c:(.text+0xf70): undefined reference to `OPENSSL_rdtsc'
./libcrypto.a(curve25519.o): In function `X25519':
curve25519.c:(.text+0x4e58): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(curve25519.o): In function `ge_frombytes_vartime':
curve25519.c:(.text+0x559c): undefined reference to `CRYPTO_memcmp'
curve25519.c:(.text+0x5754): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(curve25519.o): In function `ED25519_verify':
curve25519.c:(.text+0xdea8): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
eng_all.c:(.text+0x14): undefined reference to `OPENSSL_cpuid_setup'
./libcrypto.a(rsa_oaep.o): In function `RSA_padding_check_PKCS1_OAEP_mgf1':
rsa_oaep.c:(.text+0x4e0): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(dh_kdf.o): In function `DH_KDF_X9_42':
dh_kdf.c:(.text+0x35c): undefined reference to `CRYPTO_memcmp'
collect2: ld returned 1 exit status
make[1]: *** [apps/openssl] Error 1
make[1]: Leaving directory `<http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/ws/'>
make: *** [all] Error 2
Build step 'Execute shell' marked build as failure

From no-reply at appveyor.com  Wed Feb  7 10:56:01 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 07 Feb 2018 10:56:01 +0000
Subject: [openssl-commits] Build failed: openssl master.15410
Message-ID: <20180207105601.1.6FE0CE9115979AA1@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/69879353/attachment.html>

From no-reply at appveyor.com  Wed Feb  7 12:06:21 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 07 Feb 2018 12:06:21 +0000
Subject: [openssl-commits] Build failed: openssl master.15411
Message-ID: <20180207120621.1.77B336A353AD17D2@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/159491c8/attachment.html>

From no-reply at appveyor.com  Wed Feb  7 12:27:07 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 07 Feb 2018 12:27:07 +0000
Subject: [openssl-commits] Build failed: openssl master.15412
Message-ID: <20180207122707.1.2CC3A6CB6ACEFD93@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/6189a718/attachment.html>

From no-reply at appveyor.com  Wed Feb  7 13:43:52 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 07 Feb 2018 13:43:52 +0000
Subject: [openssl-commits] Build completed: openssl master.15413
Message-ID: <20180207134352.1.C383B0D9C6B05FFE@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/f74b7bb3/attachment.html>

From no-reply at appveyor.com  Wed Feb  7 14:24:02 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 07 Feb 2018 14:24:02 +0000
Subject: [openssl-commits] Build failed: openssl master.15416
Message-ID: <20180207142402.1.7D151858225F7C65@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/f690939c/attachment.html>

From levitte at openssl.org  Wed Feb  7 15:16:16 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 07 Feb 2018 15:16:16 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518016576.323391.5615.nullmailer@dev.openssl.org>

The branch master has been updated
       via  3a7141df8768e797f42ed14027e974ea845aa20f (commit)
       via  7d3901f6dbaace18c0307b1f6a20f38fe6a91807 (commit)
       via  227a1e3f45bf06fdb00f2bdfb922f6f0d1f1d1de (commit)
      from  bed4afa81b9c94596cae44226e7506d9b07fe5a5 (commit)


- Log -----------------------------------------------------------------
commit 3a7141df8768e797f42ed14027e974ea845aa20f
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 14:05:20 2018 +0100

    Make all private functions in e_afalg.c static
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5270)

commit 7d3901f6dbaace18c0307b1f6a20f38fe6a91807
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 14:02:49 2018 +0100

    test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
    
    The afalg engine was moved down from engines/afalg/ to engines/, but
    the test wasn't changed accordingly.  This was undetected because the
    test program didn't fail when it couldn't load the engine.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5270)

commit 227a1e3f45bf06fdb00f2bdfb922f6f0d1f1d1de
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 14:01:13 2018 +0100

    Modify test/afalgtest to fail if the afalg engine couldn't be loaded
    
    If you know that there's no afalg engine, don't run this test.
    test/recipes/30-test_afalg.t checks this correctly.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5270)

-----------------------------------------------------------------------

Summary of changes:
 engines/e_afalg.c            | 10 +++++-----
 test/afalgtest.c             | 10 +++++-----
 test/recipes/30-test_afalg.t |  2 +-
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/engines/e_afalg.c b/engines/e_afalg.c
index 49b0173..da035b5 100644
--- a/engines/e_afalg.c
+++ b/engines/e_afalg.c
@@ -79,7 +79,7 @@ static int afalg_create_sk(afalg_ctx *actx, const char *ciphertype,
 static int afalg_destroy(ENGINE *e);
 static int afalg_init(ENGINE *e);
 static int afalg_finish(ENGINE *e);
-const EVP_CIPHER *afalg_aes_cbc(int nid);
+static const EVP_CIPHER *afalg_aes_cbc(int nid);
 static cbc_handles *get_cipher_handle(int nid);
 static int afalg_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
                          const int **nids, int nid);
@@ -195,7 +195,7 @@ static int afalg_setup_async_event_notification(afalg_aio *aio)
     return 1;
 }
 
-int afalg_init_aio(afalg_aio *aio)
+static int afalg_init_aio(afalg_aio *aio)
 {
     int r = -1;
 
@@ -215,8 +215,8 @@ int afalg_init_aio(afalg_aio *aio)
     return 1;
 }
 
-int afalg_fin_cipher_aio(afalg_aio *aio, int sfd, unsigned char *buf,
-                         size_t len)
+static int afalg_fin_cipher_aio(afalg_aio *aio, int sfd, unsigned char *buf,
+                                size_t len)
 {
     int r;
     int retry = 0;
@@ -658,7 +658,7 @@ static cbc_handles *get_cipher_handle(int nid)
     }
 }
 
-const EVP_CIPHER *afalg_aes_cbc(int nid)
+static const EVP_CIPHER *afalg_aes_cbc(int nid)
 {
     cbc_handles *cipher_handle = get_cipher_handle(nid);
     if (cipher_handle->_hidden == NULL
diff --git a/test/afalgtest.c b/test/afalgtest.c
index adb2977..bf90545 100644
--- a/test/afalgtest.c
+++ b/test/afalgtest.c
@@ -128,14 +128,14 @@ int global_init(void)
 int setup_tests(void)
 {
 #ifndef OPENSSL_NO_ENGINE
-    if ((e = ENGINE_by_id("afalg")) == NULL) {
+    if (!TEST_ptr(e = ENGINE_by_id("afalg"))) {
         /* Probably a platform env issue, not a test failure. */
-        TEST_info("Can't load AFALG engine");
-    } else {
+        TEST_info("Can't load AFALG engine, you might want to check $OPENSSL_ENGINES");
+        return 0;
+    }
 # ifndef OPENSSL_NO_AFALGENG
-        ADD_ALL_TESTS(test_afalg_aes_cbc, 3);
+    ADD_ALL_TESTS(test_afalg_aes_cbc, 3);
 # endif
-    }
 #endif
 
     return 1;
diff --git a/test/recipes/30-test_afalg.t b/test/recipes/30-test_afalg.t
index c8cb67b..cf8a68f 100644
--- a/test/recipes/30-test_afalg.t
+++ b/test/recipes/30-test_afalg.t
@@ -18,6 +18,6 @@ plan skip_all => "$test_name not supported for this build"
 
 plan tests => 1;
 
-$ENV{OPENSSL_ENGINES} = bldtop_dir("engines/afalg");
+$ENV{OPENSSL_ENGINES} = bldtop_dir("engines");
 
 ok(run(test(["afalgtest"])), "running afalgtest");

From no-reply at appveyor.com  Wed Feb  7 15:24:46 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 07 Feb 2018 15:24:46 +0000
Subject: [openssl-commits] Build failed: openssl master.15420
Message-ID: <20180207152446.1.CCE12A6DDB06795B@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/c6a67ba2/attachment.html>

From builds at travis-ci.org  Wed Feb  7 15:48:34 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 07 Feb 2018 15:48:34 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16130 (master - 3a7141d)
In-Reply-To: <openssl/openssl+338544691+broken@travis-ci.org>
Message-ID: <5a7b1fd244c6_43fcab5981e98925118@2f9f8493-5923-4fd4-9822-27587e4bd149.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16130
Status: Broken

Duration: 31 minutes and 10 seconds
Commit: 3a7141d (master)
Author: Richard Levitte
Message: Make all private functions in e_afalg.c static

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5270)

View the changeset: https://github.com/openssl/openssl/compare/bed4afa81b9c...3a7141df8768

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/338544691?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/59b2e723/attachment-0001.html>

From levitte at openssl.org  Wed Feb  7 21:17:16 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 07 Feb 2018 21:17:16 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518038236.237500.29882.nullmailer@dev.openssl.org>

The branch master has been updated
       via  048ebccb8840f7abd90adc59654d959feb25715b (commit)
       via  cb7b7275683655537c63e42b5e3ef3d7045e4104 (commit)
      from  3a7141df8768e797f42ed14027e974ea845aa20f (commit)


- Log -----------------------------------------------------------------
commit 048ebccb8840f7abd90adc59654d959feb25715b
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 19:40:19 2018 +0100

    make update ERROR_REBUILD=-rebuild
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5275)

commit cb7b7275683655537c63e42b5e3ef3d7045e4104
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 19:23:39 2018 +0100

    mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
    
    If a module is disablable (i.e. can be configured with 'no-FOO'), the
    resulting header file needs to be guarded with a check of the
    corresponding OPENSSL_NO_FOO.  While this seem fairly innocuous, it
    has an impact on the information in util/*.num, generated by mkdef.pl.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5275)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/unix-Makefile.tmpl |   7 +-
 include/internal/dsoerr.h         | 117 +++++-----
 include/openssl/cmserr.h          | 339 ++++++++++++++---------------
 include/openssl/comperr.h         |  29 +--
 include/openssl/cterr.h           | 103 ++++-----
 include/openssl/dherr.h           | 117 +++++-----
 include/openssl/dsaerr.h          |  83 ++++----
 include/openssl/ecerr.h           | 433 +++++++++++++++++++-------------------
 include/openssl/engineerr.h       | 161 +++++++-------
 include/openssl/ocsperr.h         |  99 ++++-----
 include/openssl/tserr.h           | 207 +++++++++---------
 util/mkerr.pl                     |  33 ++-
 12 files changed, 899 insertions(+), 829 deletions(-)

diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index 3dd66b8..9e05fd1 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -674,10 +674,11 @@ generate_fuzz_oids:
 ERROR_REBUILD=
 errors:
 	( cd $(SRCDIR); $(PERL) util/ck_errf.pl -strict */*.c */*/*.c )
-	( cd $(SRCDIR); $(PERL) util/mkerr.pl $(ERROR_REBUILD) -internal )
-	( cd $(SRCDIR)/engines; \
+	( b=`pwd`; cd $(SRCDIR); \
+          $(PERL) -I$$b util/mkerr.pl $(ERROR_REBUILD) -internal )
+	( b=`pwd`; cd $(SRCDIR)/engines; \
           for E in *.ec ; do \
-              $(PERL) ../util/mkerr.pl $(ERROR_REBUILD) -static \
+              $(PERL) -I$$b ../util/mkerr.pl $(ERROR_REBUILD) -static \
                 -conf $$E `basename $$E .ec`.c ; \
           done )
 
diff --git a/include/internal/dsoerr.h b/include/internal/dsoerr.h
index 9f1ebf6..7017990 100644
--- a/include/internal/dsoerr.h
+++ b/include/internal/dsoerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,71 +11,76 @@
 #ifndef HEADER_DSOERR_H
 # define HEADER_DSOERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DSO
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_DSO_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * DSO function codes.
  */
-# define DSO_F_DLFCN_BIND_FUNC                            100
-# define DSO_F_DLFCN_LOAD                                 102
-# define DSO_F_DLFCN_MERGER                               130
-# define DSO_F_DLFCN_NAME_CONVERTER                       123
-# define DSO_F_DLFCN_UNLOAD                               103
-# define DSO_F_DL_BIND_FUNC                               104
-# define DSO_F_DL_LOAD                                    106
-# define DSO_F_DL_MERGER                                  131
-# define DSO_F_DL_NAME_CONVERTER                          124
-# define DSO_F_DL_UNLOAD                                  107
-# define DSO_F_DSO_BIND_FUNC                              108
-# define DSO_F_DSO_CONVERT_FILENAME                       126
-# define DSO_F_DSO_CTRL                                   110
-# define DSO_F_DSO_FREE                                   111
-# define DSO_F_DSO_GET_FILENAME                           127
-# define DSO_F_DSO_GLOBAL_LOOKUP                          139
-# define DSO_F_DSO_LOAD                                   112
-# define DSO_F_DSO_MERGE                                  132
-# define DSO_F_DSO_NEW_METHOD                             113
-# define DSO_F_DSO_PATHBYADDR                             105
-# define DSO_F_DSO_SET_FILENAME                           129
-# define DSO_F_DSO_UP_REF                                 114
-# define DSO_F_VMS_BIND_SYM                               115
-# define DSO_F_VMS_LOAD                                   116
-# define DSO_F_VMS_MERGER                                 133
-# define DSO_F_VMS_UNLOAD                                 117
-# define DSO_F_WIN32_BIND_FUNC                            101
-# define DSO_F_WIN32_GLOBALLOOKUP                         142
-# define DSO_F_WIN32_JOINER                               135
-# define DSO_F_WIN32_LOAD                                 120
-# define DSO_F_WIN32_MERGER                               134
-# define DSO_F_WIN32_NAME_CONVERTER                       125
-# define DSO_F_WIN32_PATHBYADDR                           109
-# define DSO_F_WIN32_SPLITTER                             136
-# define DSO_F_WIN32_UNLOAD                               121
+#  define DSO_F_DLFCN_BIND_FUNC                            100
+#  define DSO_F_DLFCN_LOAD                                 102
+#  define DSO_F_DLFCN_MERGER                               130
+#  define DSO_F_DLFCN_NAME_CONVERTER                       123
+#  define DSO_F_DLFCN_UNLOAD                               103
+#  define DSO_F_DL_BIND_FUNC                               104
+#  define DSO_F_DL_LOAD                                    106
+#  define DSO_F_DL_MERGER                                  131
+#  define DSO_F_DL_NAME_CONVERTER                          124
+#  define DSO_F_DL_UNLOAD                                  107
+#  define DSO_F_DSO_BIND_FUNC                              108
+#  define DSO_F_DSO_CONVERT_FILENAME                       126
+#  define DSO_F_DSO_CTRL                                   110
+#  define DSO_F_DSO_FREE                                   111
+#  define DSO_F_DSO_GET_FILENAME                           127
+#  define DSO_F_DSO_GLOBAL_LOOKUP                          139
+#  define DSO_F_DSO_LOAD                                   112
+#  define DSO_F_DSO_MERGE                                  132
+#  define DSO_F_DSO_NEW_METHOD                             113
+#  define DSO_F_DSO_PATHBYADDR                             105
+#  define DSO_F_DSO_SET_FILENAME                           129
+#  define DSO_F_DSO_UP_REF                                 114
+#  define DSO_F_VMS_BIND_SYM                               115
+#  define DSO_F_VMS_LOAD                                   116
+#  define DSO_F_VMS_MERGER                                 133
+#  define DSO_F_VMS_UNLOAD                                 117
+#  define DSO_F_WIN32_BIND_FUNC                            101
+#  define DSO_F_WIN32_GLOBALLOOKUP                         142
+#  define DSO_F_WIN32_JOINER                               135
+#  define DSO_F_WIN32_LOAD                                 120
+#  define DSO_F_WIN32_MERGER                               134
+#  define DSO_F_WIN32_NAME_CONVERTER                       125
+#  define DSO_F_WIN32_PATHBYADDR                           109
+#  define DSO_F_WIN32_SPLITTER                             136
+#  define DSO_F_WIN32_UNLOAD                               121
 
 /*
  * DSO reason codes.
  */
-# define DSO_R_CTRL_FAILED                                100
-# define DSO_R_DSO_ALREADY_LOADED                         110
-# define DSO_R_EMPTY_FILE_STRUCTURE                       113
-# define DSO_R_FAILURE                                    114
-# define DSO_R_FILENAME_TOO_BIG                           101
-# define DSO_R_FINISH_FAILED                              102
-# define DSO_R_INCORRECT_FILE_SYNTAX                      115
-# define DSO_R_LOAD_FAILED                                103
-# define DSO_R_NAME_TRANSLATION_FAILED                    109
-# define DSO_R_NO_FILENAME                                111
-# define DSO_R_NULL_HANDLE                                104
-# define DSO_R_SET_FILENAME_FAILED                        112
-# define DSO_R_STACK_ERROR                                105
-# define DSO_R_SYM_FAILURE                                106
-# define DSO_R_UNLOAD_FAILED                              107
-# define DSO_R_UNSUPPORTED                                108
+#  define DSO_R_CTRL_FAILED                                100
+#  define DSO_R_DSO_ALREADY_LOADED                         110
+#  define DSO_R_EMPTY_FILE_STRUCTURE                       113
+#  define DSO_R_FAILURE                                    114
+#  define DSO_R_FILENAME_TOO_BIG                           101
+#  define DSO_R_FINISH_FAILED                              102
+#  define DSO_R_INCORRECT_FILE_SYNTAX                      115
+#  define DSO_R_LOAD_FAILED                                103
+#  define DSO_R_NAME_TRANSLATION_FAILED                    109
+#  define DSO_R_NO_FILENAME                                111
+#  define DSO_R_NULL_HANDLE                                104
+#  define DSO_R_SET_FILENAME_FAILED                        112
+#  define DSO_R_STACK_ERROR                                105
+#  define DSO_R_SYM_FAILURE                                106
+#  define DSO_R_UNLOAD_FAILED                              107
+#  define DSO_R_UNSUPPORTED                                108
 
+# endif
 #endif
diff --git a/include/openssl/cmserr.h b/include/openssl/cmserr.h
index a599590..7cb2242 100644
--- a/include/openssl/cmserr.h
+++ b/include/openssl/cmserr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,182 +11,187 @@
 #ifndef HEADER_CMSERR_H
 # define HEADER_CMSERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CMS
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_CMS_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * CMS function codes.
  */
-# define CMS_F_CHECK_CONTENT                              99
-# define CMS_F_CMS_ADD0_CERT                              164
-# define CMS_F_CMS_ADD0_RECIPIENT_KEY                     100
-# define CMS_F_CMS_ADD0_RECIPIENT_PASSWORD                165
-# define CMS_F_CMS_ADD1_RECEIPTREQUEST                    158
-# define CMS_F_CMS_ADD1_RECIPIENT_CERT                    101
-# define CMS_F_CMS_ADD1_SIGNER                            102
-# define CMS_F_CMS_ADD1_SIGNINGTIME                       103
-# define CMS_F_CMS_COMPRESS                               104
-# define CMS_F_CMS_COMPRESSEDDATA_CREATE                  105
-# define CMS_F_CMS_COMPRESSEDDATA_INIT_BIO                106
-# define CMS_F_CMS_COPY_CONTENT                           107
-# define CMS_F_CMS_COPY_MESSAGEDIGEST                     108
-# define CMS_F_CMS_DATA                                   109
-# define CMS_F_CMS_DATAFINAL                              110
-# define CMS_F_CMS_DATAINIT                               111
-# define CMS_F_CMS_DECRYPT                                112
-# define CMS_F_CMS_DECRYPT_SET1_KEY                       113
-# define CMS_F_CMS_DECRYPT_SET1_PASSWORD                  166
-# define CMS_F_CMS_DECRYPT_SET1_PKEY                      114
-# define CMS_F_CMS_DIGESTALGORITHM_FIND_CTX               115
-# define CMS_F_CMS_DIGESTALGORITHM_INIT_BIO               116
-# define CMS_F_CMS_DIGESTEDDATA_DO_FINAL                  117
-# define CMS_F_CMS_DIGEST_VERIFY                          118
-# define CMS_F_CMS_ENCODE_RECEIPT                         161
-# define CMS_F_CMS_ENCRYPT                                119
-# define CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO              120
-# define CMS_F_CMS_ENCRYPTEDDATA_DECRYPT                  121
-# define CMS_F_CMS_ENCRYPTEDDATA_ENCRYPT                  122
-# define CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY                 123
-# define CMS_F_CMS_ENVELOPEDDATA_CREATE                   124
-# define CMS_F_CMS_ENVELOPEDDATA_INIT_BIO                 125
-# define CMS_F_CMS_ENVELOPED_DATA_INIT                    126
-# define CMS_F_CMS_ENV_ASN1_CTRL                          171
-# define CMS_F_CMS_FINAL                                  127
-# define CMS_F_CMS_GET0_CERTIFICATE_CHOICES               128
-# define CMS_F_CMS_GET0_CONTENT                           129
-# define CMS_F_CMS_GET0_ECONTENT_TYPE                     130
-# define CMS_F_CMS_GET0_ENVELOPED                         131
-# define CMS_F_CMS_GET0_REVOCATION_CHOICES                132
-# define CMS_F_CMS_GET0_SIGNED                            133
-# define CMS_F_CMS_MSGSIGDIGEST_ADD1                      162
-# define CMS_F_CMS_RECEIPTREQUEST_CREATE0                 159
-# define CMS_F_CMS_RECEIPT_VERIFY                         160
-# define CMS_F_CMS_RECIPIENTINFO_DECRYPT                  134
-# define CMS_F_CMS_RECIPIENTINFO_ENCRYPT                  169
-# define CMS_F_CMS_RECIPIENTINFO_KARI_ENCRYPT             178
-# define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ALG            175
-# define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ORIG_ID        173
-# define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_REKS           172
-# define CMS_F_CMS_RECIPIENTINFO_KARI_ORIG_ID_CMP         174
-# define CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT            135
-# define CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT            136
-# define CMS_F_CMS_RECIPIENTINFO_KEKRI_GET0_ID            137
-# define CMS_F_CMS_RECIPIENTINFO_KEKRI_ID_CMP             138
-# define CMS_F_CMS_RECIPIENTINFO_KTRI_CERT_CMP            139
-# define CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT             140
-# define CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT             141
-# define CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_ALGS           142
-# define CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_SIGNER_ID      143
-# define CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT               167
-# define CMS_F_CMS_RECIPIENTINFO_SET0_KEY                 144
-# define CMS_F_CMS_RECIPIENTINFO_SET0_PASSWORD            168
-# define CMS_F_CMS_RECIPIENTINFO_SET0_PKEY                145
-# define CMS_F_CMS_SD_ASN1_CTRL                           170
-# define CMS_F_CMS_SET1_IAS                               176
-# define CMS_F_CMS_SET1_KEYID                             177
-# define CMS_F_CMS_SET1_SIGNERIDENTIFIER                  146
-# define CMS_F_CMS_SET_DETACHED                           147
-# define CMS_F_CMS_SIGN                                   148
-# define CMS_F_CMS_SIGNED_DATA_INIT                       149
-# define CMS_F_CMS_SIGNERINFO_CONTENT_SIGN                150
-# define CMS_F_CMS_SIGNERINFO_SIGN                        151
-# define CMS_F_CMS_SIGNERINFO_VERIFY                      152
-# define CMS_F_CMS_SIGNERINFO_VERIFY_CERT                 153
-# define CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT              154
-# define CMS_F_CMS_SIGN_RECEIPT                           163
-# define CMS_F_CMS_STREAM                                 155
-# define CMS_F_CMS_UNCOMPRESS                             156
-# define CMS_F_CMS_VERIFY                                 157
+#  define CMS_F_CHECK_CONTENT                              99
+#  define CMS_F_CMS_ADD0_CERT                              164
+#  define CMS_F_CMS_ADD0_RECIPIENT_KEY                     100
+#  define CMS_F_CMS_ADD0_RECIPIENT_PASSWORD                165
+#  define CMS_F_CMS_ADD1_RECEIPTREQUEST                    158
+#  define CMS_F_CMS_ADD1_RECIPIENT_CERT                    101
+#  define CMS_F_CMS_ADD1_SIGNER                            102
+#  define CMS_F_CMS_ADD1_SIGNINGTIME                       103
+#  define CMS_F_CMS_COMPRESS                               104
+#  define CMS_F_CMS_COMPRESSEDDATA_CREATE                  105
+#  define CMS_F_CMS_COMPRESSEDDATA_INIT_BIO                106
+#  define CMS_F_CMS_COPY_CONTENT                           107
+#  define CMS_F_CMS_COPY_MESSAGEDIGEST                     108
+#  define CMS_F_CMS_DATA                                   109
+#  define CMS_F_CMS_DATAFINAL                              110
+#  define CMS_F_CMS_DATAINIT                               111
+#  define CMS_F_CMS_DECRYPT                                112
+#  define CMS_F_CMS_DECRYPT_SET1_KEY                       113
+#  define CMS_F_CMS_DECRYPT_SET1_PASSWORD                  166
+#  define CMS_F_CMS_DECRYPT_SET1_PKEY                      114
+#  define CMS_F_CMS_DIGESTALGORITHM_FIND_CTX               115
+#  define CMS_F_CMS_DIGESTALGORITHM_INIT_BIO               116
+#  define CMS_F_CMS_DIGESTEDDATA_DO_FINAL                  117
+#  define CMS_F_CMS_DIGEST_VERIFY                          118
+#  define CMS_F_CMS_ENCODE_RECEIPT                         161
+#  define CMS_F_CMS_ENCRYPT                                119
+#  define CMS_F_CMS_ENCRYPTEDCONTENT_INIT_BIO              120
+#  define CMS_F_CMS_ENCRYPTEDDATA_DECRYPT                  121
+#  define CMS_F_CMS_ENCRYPTEDDATA_ENCRYPT                  122
+#  define CMS_F_CMS_ENCRYPTEDDATA_SET1_KEY                 123
+#  define CMS_F_CMS_ENVELOPEDDATA_CREATE                   124
+#  define CMS_F_CMS_ENVELOPEDDATA_INIT_BIO                 125
+#  define CMS_F_CMS_ENVELOPED_DATA_INIT                    126
+#  define CMS_F_CMS_ENV_ASN1_CTRL                          171
+#  define CMS_F_CMS_FINAL                                  127
+#  define CMS_F_CMS_GET0_CERTIFICATE_CHOICES               128
+#  define CMS_F_CMS_GET0_CONTENT                           129
+#  define CMS_F_CMS_GET0_ECONTENT_TYPE                     130
+#  define CMS_F_CMS_GET0_ENVELOPED                         131
+#  define CMS_F_CMS_GET0_REVOCATION_CHOICES                132
+#  define CMS_F_CMS_GET0_SIGNED                            133
+#  define CMS_F_CMS_MSGSIGDIGEST_ADD1                      162
+#  define CMS_F_CMS_RECEIPTREQUEST_CREATE0                 159
+#  define CMS_F_CMS_RECEIPT_VERIFY                         160
+#  define CMS_F_CMS_RECIPIENTINFO_DECRYPT                  134
+#  define CMS_F_CMS_RECIPIENTINFO_ENCRYPT                  169
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_ENCRYPT             178
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ALG            175
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_ORIG_ID        173
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_GET0_REKS           172
+#  define CMS_F_CMS_RECIPIENTINFO_KARI_ORIG_ID_CMP         174
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT            135
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT            136
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_GET0_ID            137
+#  define CMS_F_CMS_RECIPIENTINFO_KEKRI_ID_CMP             138
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_CERT_CMP            139
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT             140
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT             141
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_ALGS           142
+#  define CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_SIGNER_ID      143
+#  define CMS_F_CMS_RECIPIENTINFO_PWRI_CRYPT               167
+#  define CMS_F_CMS_RECIPIENTINFO_SET0_KEY                 144
+#  define CMS_F_CMS_RECIPIENTINFO_SET0_PASSWORD            168
+#  define CMS_F_CMS_RECIPIENTINFO_SET0_PKEY                145
+#  define CMS_F_CMS_SD_ASN1_CTRL                           170
+#  define CMS_F_CMS_SET1_IAS                               176
+#  define CMS_F_CMS_SET1_KEYID                             177
+#  define CMS_F_CMS_SET1_SIGNERIDENTIFIER                  146
+#  define CMS_F_CMS_SET_DETACHED                           147
+#  define CMS_F_CMS_SIGN                                   148
+#  define CMS_F_CMS_SIGNED_DATA_INIT                       149
+#  define CMS_F_CMS_SIGNERINFO_CONTENT_SIGN                150
+#  define CMS_F_CMS_SIGNERINFO_SIGN                        151
+#  define CMS_F_CMS_SIGNERINFO_VERIFY                      152
+#  define CMS_F_CMS_SIGNERINFO_VERIFY_CERT                 153
+#  define CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT              154
+#  define CMS_F_CMS_SIGN_RECEIPT                           163
+#  define CMS_F_CMS_STREAM                                 155
+#  define CMS_F_CMS_UNCOMPRESS                             156
+#  define CMS_F_CMS_VERIFY                                 157
 
 /*
  * CMS reason codes.
  */
-# define CMS_R_ADD_SIGNER_ERROR                           99
-# define CMS_R_CERTIFICATE_ALREADY_PRESENT                175
-# define CMS_R_CERTIFICATE_HAS_NO_KEYID                   160
-# define CMS_R_CERTIFICATE_VERIFY_ERROR                   100
-# define CMS_R_CIPHER_INITIALISATION_ERROR                101
-# define CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR      102
-# define CMS_R_CMS_DATAFINAL_ERROR                        103
-# define CMS_R_CMS_LIB                                    104
-# define CMS_R_CONTENTIDENTIFIER_MISMATCH                 170
-# define CMS_R_CONTENT_NOT_FOUND                          105
-# define CMS_R_CONTENT_TYPE_MISMATCH                      171
-# define CMS_R_CONTENT_TYPE_NOT_COMPRESSED_DATA           106
-# define CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA            107
-# define CMS_R_CONTENT_TYPE_NOT_SIGNED_DATA               108
-# define CMS_R_CONTENT_VERIFY_ERROR                       109
-# define CMS_R_CTRL_ERROR                                 110
-# define CMS_R_CTRL_FAILURE                               111
-# define CMS_R_DECRYPT_ERROR                              112
-# define CMS_R_ERROR_GETTING_PUBLIC_KEY                   113
-# define CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE      114
-# define CMS_R_ERROR_SETTING_KEY                          115
-# define CMS_R_ERROR_SETTING_RECIPIENTINFO                116
-# define CMS_R_INVALID_ENCRYPTED_KEY_LENGTH               117
-# define CMS_R_INVALID_KEY_ENCRYPTION_PARAMETER           176
-# define CMS_R_INVALID_KEY_LENGTH                         118
-# define CMS_R_MD_BIO_INIT_ERROR                          119
-# define CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH       120
-# define CMS_R_MESSAGEDIGEST_WRONG_LENGTH                 121
-# define CMS_R_MSGSIGDIGEST_ERROR                         172
-# define CMS_R_MSGSIGDIGEST_VERIFICATION_FAILURE          162
-# define CMS_R_MSGSIGDIGEST_WRONG_LENGTH                  163
-# define CMS_R_NEED_ONE_SIGNER                            164
-# define CMS_R_NOT_A_SIGNED_RECEIPT                       165
-# define CMS_R_NOT_ENCRYPTED_DATA                         122
-# define CMS_R_NOT_KEK                                    123
-# define CMS_R_NOT_KEY_AGREEMENT                          181
-# define CMS_R_NOT_KEY_TRANSPORT                          124
-# define CMS_R_NOT_PWRI                                   177
-# define CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE            125
-# define CMS_R_NO_CIPHER                                  126
-# define CMS_R_NO_CONTENT                                 127
-# define CMS_R_NO_CONTENT_TYPE                            173
-# define CMS_R_NO_DEFAULT_DIGEST                          128
-# define CMS_R_NO_DIGEST_SET                              129
-# define CMS_R_NO_KEY                                     130
-# define CMS_R_NO_KEY_OR_CERT                             174
-# define CMS_R_NO_MATCHING_DIGEST                         131
-# define CMS_R_NO_MATCHING_RECIPIENT                      132
-# define CMS_R_NO_MATCHING_SIGNATURE                      166
-# define CMS_R_NO_MSGSIGDIGEST                            167
-# define CMS_R_NO_PASSWORD                                178
-# define CMS_R_NO_PRIVATE_KEY                             133
-# define CMS_R_NO_PUBLIC_KEY                              134
-# define CMS_R_NO_RECEIPT_REQUEST                         168
-# define CMS_R_NO_SIGNERS                                 135
-# define CMS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE     136
-# define CMS_R_RECEIPT_DECODE_ERROR                       169
-# define CMS_R_RECIPIENT_ERROR                            137
-# define CMS_R_SIGNER_CERTIFICATE_NOT_FOUND               138
-# define CMS_R_SIGNFINAL_ERROR                            139
-# define CMS_R_SMIME_TEXT_ERROR                           140
-# define CMS_R_STORE_INIT_ERROR                           141
-# define CMS_R_TYPE_NOT_COMPRESSED_DATA                   142
-# define CMS_R_TYPE_NOT_DATA                              143
-# define CMS_R_TYPE_NOT_DIGESTED_DATA                     144
-# define CMS_R_TYPE_NOT_ENCRYPTED_DATA                    145
-# define CMS_R_TYPE_NOT_ENVELOPED_DATA                    146
-# define CMS_R_UNABLE_TO_FINALIZE_CONTEXT                 147
-# define CMS_R_UNKNOWN_CIPHER                             148
-# define CMS_R_UNKNOWN_DIGEST_ALGORITHM                   149
-# define CMS_R_UNKNOWN_ID                                 150
-# define CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM          151
-# define CMS_R_UNSUPPORTED_CONTENT_TYPE                   152
-# define CMS_R_UNSUPPORTED_KEK_ALGORITHM                  153
-# define CMS_R_UNSUPPORTED_KEY_ENCRYPTION_ALGORITHM       179
-# define CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE             155
-# define CMS_R_UNSUPPORTED_RECIPIENT_TYPE                 154
-# define CMS_R_UNSUPPORTED_TYPE                           156
-# define CMS_R_UNWRAP_ERROR                               157
-# define CMS_R_UNWRAP_FAILURE                             180
-# define CMS_R_VERIFICATION_FAILURE                       158
-# define CMS_R_WRAP_ERROR                                 159
+#  define CMS_R_ADD_SIGNER_ERROR                           99
+#  define CMS_R_CERTIFICATE_ALREADY_PRESENT                175
+#  define CMS_R_CERTIFICATE_HAS_NO_KEYID                   160
+#  define CMS_R_CERTIFICATE_VERIFY_ERROR                   100
+#  define CMS_R_CIPHER_INITIALISATION_ERROR                101
+#  define CMS_R_CIPHER_PARAMETER_INITIALISATION_ERROR      102
+#  define CMS_R_CMS_DATAFINAL_ERROR                        103
+#  define CMS_R_CMS_LIB                                    104
+#  define CMS_R_CONTENTIDENTIFIER_MISMATCH                 170
+#  define CMS_R_CONTENT_NOT_FOUND                          105
+#  define CMS_R_CONTENT_TYPE_MISMATCH                      171
+#  define CMS_R_CONTENT_TYPE_NOT_COMPRESSED_DATA           106
+#  define CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA            107
+#  define CMS_R_CONTENT_TYPE_NOT_SIGNED_DATA               108
+#  define CMS_R_CONTENT_VERIFY_ERROR                       109
+#  define CMS_R_CTRL_ERROR                                 110
+#  define CMS_R_CTRL_FAILURE                               111
+#  define CMS_R_DECRYPT_ERROR                              112
+#  define CMS_R_ERROR_GETTING_PUBLIC_KEY                   113
+#  define CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE      114
+#  define CMS_R_ERROR_SETTING_KEY                          115
+#  define CMS_R_ERROR_SETTING_RECIPIENTINFO                116
+#  define CMS_R_INVALID_ENCRYPTED_KEY_LENGTH               117
+#  define CMS_R_INVALID_KEY_ENCRYPTION_PARAMETER           176
+#  define CMS_R_INVALID_KEY_LENGTH                         118
+#  define CMS_R_MD_BIO_INIT_ERROR                          119
+#  define CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH       120
+#  define CMS_R_MESSAGEDIGEST_WRONG_LENGTH                 121
+#  define CMS_R_MSGSIGDIGEST_ERROR                         172
+#  define CMS_R_MSGSIGDIGEST_VERIFICATION_FAILURE          162
+#  define CMS_R_MSGSIGDIGEST_WRONG_LENGTH                  163
+#  define CMS_R_NEED_ONE_SIGNER                            164
+#  define CMS_R_NOT_A_SIGNED_RECEIPT                       165
+#  define CMS_R_NOT_ENCRYPTED_DATA                         122
+#  define CMS_R_NOT_KEK                                    123
+#  define CMS_R_NOT_KEY_AGREEMENT                          181
+#  define CMS_R_NOT_KEY_TRANSPORT                          124
+#  define CMS_R_NOT_PWRI                                   177
+#  define CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE            125
+#  define CMS_R_NO_CIPHER                                  126
+#  define CMS_R_NO_CONTENT                                 127
+#  define CMS_R_NO_CONTENT_TYPE                            173
+#  define CMS_R_NO_DEFAULT_DIGEST                          128
+#  define CMS_R_NO_DIGEST_SET                              129
+#  define CMS_R_NO_KEY                                     130
+#  define CMS_R_NO_KEY_OR_CERT                             174
+#  define CMS_R_NO_MATCHING_DIGEST                         131
+#  define CMS_R_NO_MATCHING_RECIPIENT                      132
+#  define CMS_R_NO_MATCHING_SIGNATURE                      166
+#  define CMS_R_NO_MSGSIGDIGEST                            167
+#  define CMS_R_NO_PASSWORD                                178
+#  define CMS_R_NO_PRIVATE_KEY                             133
+#  define CMS_R_NO_PUBLIC_KEY                              134
+#  define CMS_R_NO_RECEIPT_REQUEST                         168
+#  define CMS_R_NO_SIGNERS                                 135
+#  define CMS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE     136
+#  define CMS_R_RECEIPT_DECODE_ERROR                       169
+#  define CMS_R_RECIPIENT_ERROR                            137
+#  define CMS_R_SIGNER_CERTIFICATE_NOT_FOUND               138
+#  define CMS_R_SIGNFINAL_ERROR                            139
+#  define CMS_R_SMIME_TEXT_ERROR                           140
+#  define CMS_R_STORE_INIT_ERROR                           141
+#  define CMS_R_TYPE_NOT_COMPRESSED_DATA                   142
+#  define CMS_R_TYPE_NOT_DATA                              143
+#  define CMS_R_TYPE_NOT_DIGESTED_DATA                     144
+#  define CMS_R_TYPE_NOT_ENCRYPTED_DATA                    145
+#  define CMS_R_TYPE_NOT_ENVELOPED_DATA                    146
+#  define CMS_R_UNABLE_TO_FINALIZE_CONTEXT                 147
+#  define CMS_R_UNKNOWN_CIPHER                             148
+#  define CMS_R_UNKNOWN_DIGEST_ALGORITHM                   149
+#  define CMS_R_UNKNOWN_ID                                 150
+#  define CMS_R_UNSUPPORTED_COMPRESSION_ALGORITHM          151
+#  define CMS_R_UNSUPPORTED_CONTENT_TYPE                   152
+#  define CMS_R_UNSUPPORTED_KEK_ALGORITHM                  153
+#  define CMS_R_UNSUPPORTED_KEY_ENCRYPTION_ALGORITHM       179
+#  define CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE             155
+#  define CMS_R_UNSUPPORTED_RECIPIENT_TYPE                 154
+#  define CMS_R_UNSUPPORTED_TYPE                           156
+#  define CMS_R_UNWRAP_ERROR                               157
+#  define CMS_R_UNWRAP_FAILURE                             180
+#  define CMS_R_VERIFICATION_FAILURE                       158
+#  define CMS_R_WRAP_ERROR                                 159
 
+# endif
 #endif
diff --git a/include/openssl/comperr.h b/include/openssl/comperr.h
index e6fe3f0..96a4ce6 100644
--- a/include/openssl/comperr.h
+++ b/include/openssl/comperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,27 +11,32 @@
 #ifndef HEADER_COMPERR_H
 # define HEADER_COMPERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_COMP
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_COMP_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * COMP function codes.
  */
-# define COMP_F_BIO_ZLIB_FLUSH                            99
-# define COMP_F_BIO_ZLIB_NEW                              100
-# define COMP_F_BIO_ZLIB_READ                             101
-# define COMP_F_BIO_ZLIB_WRITE                            102
+#  define COMP_F_BIO_ZLIB_FLUSH                            99
+#  define COMP_F_BIO_ZLIB_NEW                              100
+#  define COMP_F_BIO_ZLIB_READ                             101
+#  define COMP_F_BIO_ZLIB_WRITE                            102
 
 /*
  * COMP reason codes.
  */
-# define COMP_R_ZLIB_DEFLATE_ERROR                        99
-# define COMP_R_ZLIB_INFLATE_ERROR                        100
-# define COMP_R_ZLIB_NOT_SUPPORTED                        101
+#  define COMP_R_ZLIB_DEFLATE_ERROR                        99
+#  define COMP_R_ZLIB_INFLATE_ERROR                        100
+#  define COMP_R_ZLIB_NOT_SUPPORTED                        101
 
+# endif
 #endif
diff --git a/include/openssl/cterr.h b/include/openssl/cterr.h
index fc014cb..7f0a7d8 100644
--- a/include/openssl/cterr.h
+++ b/include/openssl/cterr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,64 +11,69 @@
 #ifndef HEADER_CTERR_H
 # define HEADER_CTERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_CT
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_CT_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * CT function codes.
  */
-# define CT_F_CTLOG_NEW                                   117
-# define CT_F_CTLOG_NEW_FROM_BASE64                       118
-# define CT_F_CTLOG_NEW_FROM_CONF                         119
-# define CT_F_CTLOG_STORE_LOAD_CTX_NEW                    122
-# define CT_F_CTLOG_STORE_LOAD_FILE                       123
-# define CT_F_CTLOG_STORE_LOAD_LOG                        130
-# define CT_F_CTLOG_STORE_NEW                             131
-# define CT_F_CT_BASE64_DECODE                            124
-# define CT_F_CT_POLICY_EVAL_CTX_NEW                      133
-# define CT_F_CT_V1_LOG_ID_FROM_PKEY                      125
-# define CT_F_I2O_SCT                                     107
-# define CT_F_I2O_SCT_LIST                                108
-# define CT_F_I2O_SCT_SIGNATURE                           109
-# define CT_F_O2I_SCT                                     110
-# define CT_F_O2I_SCT_LIST                                111
-# define CT_F_O2I_SCT_SIGNATURE                           112
-# define CT_F_SCT_CTX_NEW                                 126
-# define CT_F_SCT_CTX_VERIFY                              128
-# define CT_F_SCT_NEW                                     100
-# define CT_F_SCT_NEW_FROM_BASE64                         127
-# define CT_F_SCT_SET0_LOG_ID                             101
-# define CT_F_SCT_SET1_EXTENSIONS                         114
-# define CT_F_SCT_SET1_LOG_ID                             115
-# define CT_F_SCT_SET1_SIGNATURE                          116
-# define CT_F_SCT_SET_LOG_ENTRY_TYPE                      102
-# define CT_F_SCT_SET_SIGNATURE_NID                       103
-# define CT_F_SCT_SET_VERSION                             104
+#  define CT_F_CTLOG_NEW                                   117
+#  define CT_F_CTLOG_NEW_FROM_BASE64                       118
+#  define CT_F_CTLOG_NEW_FROM_CONF                         119
+#  define CT_F_CTLOG_STORE_LOAD_CTX_NEW                    122
+#  define CT_F_CTLOG_STORE_LOAD_FILE                       123
+#  define CT_F_CTLOG_STORE_LOAD_LOG                        130
+#  define CT_F_CTLOG_STORE_NEW                             131
+#  define CT_F_CT_BASE64_DECODE                            124
+#  define CT_F_CT_POLICY_EVAL_CTX_NEW                      133
+#  define CT_F_CT_V1_LOG_ID_FROM_PKEY                      125
+#  define CT_F_I2O_SCT                                     107
+#  define CT_F_I2O_SCT_LIST                                108
+#  define CT_F_I2O_SCT_SIGNATURE                           109
+#  define CT_F_O2I_SCT                                     110
+#  define CT_F_O2I_SCT_LIST                                111
+#  define CT_F_O2I_SCT_SIGNATURE                           112
+#  define CT_F_SCT_CTX_NEW                                 126
+#  define CT_F_SCT_CTX_VERIFY                              128
+#  define CT_F_SCT_NEW                                     100
+#  define CT_F_SCT_NEW_FROM_BASE64                         127
+#  define CT_F_SCT_SET0_LOG_ID                             101
+#  define CT_F_SCT_SET1_EXTENSIONS                         114
+#  define CT_F_SCT_SET1_LOG_ID                             115
+#  define CT_F_SCT_SET1_SIGNATURE                          116
+#  define CT_F_SCT_SET_LOG_ENTRY_TYPE                      102
+#  define CT_F_SCT_SET_SIGNATURE_NID                       103
+#  define CT_F_SCT_SET_VERSION                             104
 
 /*
  * CT reason codes.
  */
-# define CT_R_BASE64_DECODE_ERROR                         108
-# define CT_R_INVALID_LOG_ID_LENGTH                       100
-# define CT_R_LOG_CONF_INVALID                            109
-# define CT_R_LOG_CONF_INVALID_KEY                        110
-# define CT_R_LOG_CONF_MISSING_DESCRIPTION                111
-# define CT_R_LOG_CONF_MISSING_KEY                        112
-# define CT_R_LOG_KEY_INVALID                             113
-# define CT_R_SCT_FUTURE_TIMESTAMP                        116
-# define CT_R_SCT_INVALID                                 104
-# define CT_R_SCT_INVALID_SIGNATURE                       107
-# define CT_R_SCT_LIST_INVALID                            105
-# define CT_R_SCT_LOG_ID_MISMATCH                         114
-# define CT_R_SCT_NOT_SET                                 106
-# define CT_R_SCT_UNSUPPORTED_VERSION                     115
-# define CT_R_UNRECOGNIZED_SIGNATURE_NID                  101
-# define CT_R_UNSUPPORTED_ENTRY_TYPE                      102
-# define CT_R_UNSUPPORTED_VERSION                         103
+#  define CT_R_BASE64_DECODE_ERROR                         108
+#  define CT_R_INVALID_LOG_ID_LENGTH                       100
+#  define CT_R_LOG_CONF_INVALID                            109
+#  define CT_R_LOG_CONF_INVALID_KEY                        110
+#  define CT_R_LOG_CONF_MISSING_DESCRIPTION                111
+#  define CT_R_LOG_CONF_MISSING_KEY                        112
+#  define CT_R_LOG_KEY_INVALID                             113
+#  define CT_R_SCT_FUTURE_TIMESTAMP                        116
+#  define CT_R_SCT_INVALID                                 104
+#  define CT_R_SCT_INVALID_SIGNATURE                       107
+#  define CT_R_SCT_LIST_INVALID                            105
+#  define CT_R_SCT_LOG_ID_MISMATCH                         114
+#  define CT_R_SCT_NOT_SET                                 106
+#  define CT_R_SCT_UNSUPPORTED_VERSION                     115
+#  define CT_R_UNRECOGNIZED_SIGNATURE_NID                  101
+#  define CT_R_UNSUPPORTED_ENTRY_TYPE                      102
+#  define CT_R_UNSUPPORTED_VERSION                         103
 
+# endif
 #endif
diff --git a/include/openssl/dherr.h b/include/openssl/dherr.h
index ddec341..f225cc3 100644
--- a/include/openssl/dherr.h
+++ b/include/openssl/dherr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,71 +11,76 @@
 #ifndef HEADER_DHERR_H
 # define HEADER_DHERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DH
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_DH_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * DH function codes.
  */
-# define DH_F_COMPUTE_KEY                                 102
-# define DH_F_DHPARAMS_PRINT_FP                           101
-# define DH_F_DH_BUILTIN_GENPARAMS                        106
-# define DH_F_DH_CHECK_EX                                 121
-# define DH_F_DH_CHECK_PARAMS_EX                          122
-# define DH_F_DH_CHECK_PUB_KEY_EX                         123
-# define DH_F_DH_CMS_DECRYPT                              114
-# define DH_F_DH_CMS_SET_PEERKEY                          115
-# define DH_F_DH_CMS_SET_SHARED_INFO                      116
-# define DH_F_DH_METH_DUP                                 117
-# define DH_F_DH_METH_NEW                                 118
-# define DH_F_DH_METH_SET1_NAME                           119
-# define DH_F_DH_NEW_BY_NID                               104
-# define DH_F_DH_NEW_METHOD                               105
-# define DH_F_DH_PARAM_DECODE                             107
-# define DH_F_DH_PKEY_PUBLIC_CHECK                        124
-# define DH_F_DH_PRIV_DECODE                              110
-# define DH_F_DH_PRIV_ENCODE                              111
-# define DH_F_DH_PUB_DECODE                               108
-# define DH_F_DH_PUB_ENCODE                               109
-# define DH_F_DO_DH_PRINT                                 100
-# define DH_F_GENERATE_KEY                                103
-# define DH_F_PKEY_DH_CTRL_STR                            120
-# define DH_F_PKEY_DH_DERIVE                              112
-# define DH_F_PKEY_DH_KEYGEN                              113
+#  define DH_F_COMPUTE_KEY                                 102
+#  define DH_F_DHPARAMS_PRINT_FP                           101
+#  define DH_F_DH_BUILTIN_GENPARAMS                        106
+#  define DH_F_DH_CHECK_EX                                 121
+#  define DH_F_DH_CHECK_PARAMS_EX                          122
+#  define DH_F_DH_CHECK_PUB_KEY_EX                         123
+#  define DH_F_DH_CMS_DECRYPT                              114
+#  define DH_F_DH_CMS_SET_PEERKEY                          115
+#  define DH_F_DH_CMS_SET_SHARED_INFO                      116
+#  define DH_F_DH_METH_DUP                                 117
+#  define DH_F_DH_METH_NEW                                 118
+#  define DH_F_DH_METH_SET1_NAME                           119
+#  define DH_F_DH_NEW_BY_NID                               104
+#  define DH_F_DH_NEW_METHOD                               105
+#  define DH_F_DH_PARAM_DECODE                             107
+#  define DH_F_DH_PKEY_PUBLIC_CHECK                        124
+#  define DH_F_DH_PRIV_DECODE                              110
+#  define DH_F_DH_PRIV_ENCODE                              111
+#  define DH_F_DH_PUB_DECODE                               108
+#  define DH_F_DH_PUB_ENCODE                               109
+#  define DH_F_DO_DH_PRINT                                 100
+#  define DH_F_GENERATE_KEY                                103
+#  define DH_F_PKEY_DH_CTRL_STR                            120
+#  define DH_F_PKEY_DH_DERIVE                              112
+#  define DH_F_PKEY_DH_KEYGEN                              113
 
 /*
  * DH reason codes.
  */
-# define DH_R_BAD_GENERATOR                               101
-# define DH_R_BN_DECODE_ERROR                             109
-# define DH_R_BN_ERROR                                    106
-# define DH_R_CHECK_INVALID_J_VALUE                       115
-# define DH_R_CHECK_INVALID_Q_VALUE                       116
-# define DH_R_CHECK_PUBKEY_INVALID                        122
-# define DH_R_CHECK_PUBKEY_TOO_LARGE                      123
-# define DH_R_CHECK_PUBKEY_TOO_SMALL                      124
-# define DH_R_CHECK_P_NOT_PRIME                           117
-# define DH_R_CHECK_P_NOT_SAFE_PRIME                      118
-# define DH_R_CHECK_Q_NOT_PRIME                           119
-# define DH_R_DECODE_ERROR                                104
-# define DH_R_INVALID_PARAMETER_NAME                      110
-# define DH_R_INVALID_PARAMETER_NID                       114
-# define DH_R_INVALID_PUBKEY                              102
-# define DH_R_KDF_PARAMETER_ERROR                         112
-# define DH_R_KEYS_NOT_SET                                108
-# define DH_R_MISSING_PUBKEY                              125
-# define DH_R_MODULUS_TOO_LARGE                           103
-# define DH_R_NOT_SUITABLE_GENERATOR                      120
-# define DH_R_NO_PARAMETERS_SET                           107
-# define DH_R_NO_PRIVATE_VALUE                            100
-# define DH_R_PARAMETER_ENCODING_ERROR                    105
-# define DH_R_PEER_KEY_ERROR                              111
-# define DH_R_SHARED_INFO_ERROR                           113
-# define DH_R_UNABLE_TO_CHECK_GENERATOR                   121
+#  define DH_R_BAD_GENERATOR                               101
+#  define DH_R_BN_DECODE_ERROR                             109
+#  define DH_R_BN_ERROR                                    106
+#  define DH_R_CHECK_INVALID_J_VALUE                       115
+#  define DH_R_CHECK_INVALID_Q_VALUE                       116
+#  define DH_R_CHECK_PUBKEY_INVALID                        122
+#  define DH_R_CHECK_PUBKEY_TOO_LARGE                      123
+#  define DH_R_CHECK_PUBKEY_TOO_SMALL                      124
+#  define DH_R_CHECK_P_NOT_PRIME                           117
+#  define DH_R_CHECK_P_NOT_SAFE_PRIME                      118
+#  define DH_R_CHECK_Q_NOT_PRIME                           119
+#  define DH_R_DECODE_ERROR                                104
+#  define DH_R_INVALID_PARAMETER_NAME                      110
+#  define DH_R_INVALID_PARAMETER_NID                       114
+#  define DH_R_INVALID_PUBKEY                              102
+#  define DH_R_KDF_PARAMETER_ERROR                         112
+#  define DH_R_KEYS_NOT_SET                                108
+#  define DH_R_MISSING_PUBKEY                              125
+#  define DH_R_MODULUS_TOO_LARGE                           103
+#  define DH_R_NOT_SUITABLE_GENERATOR                      120
+#  define DH_R_NO_PARAMETERS_SET                           107
+#  define DH_R_NO_PRIVATE_VALUE                            100
+#  define DH_R_PARAMETER_ENCODING_ERROR                    105
+#  define DH_R_PEER_KEY_ERROR                              111
+#  define DH_R_SHARED_INFO_ERROR                           113
+#  define DH_R_UNABLE_TO_CHECK_GENERATOR                   121
 
+# endif
 #endif
diff --git a/include/openssl/dsaerr.h b/include/openssl/dsaerr.h
index 357c226..d54642f 100644
--- a/include/openssl/dsaerr.h
+++ b/include/openssl/dsaerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,54 +11,59 @@
 #ifndef HEADER_DSAERR_H
 # define HEADER_DSAERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_DSA
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_DSA_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * DSA function codes.
  */
-# define DSA_F_DSAPARAMS_PRINT                            100
-# define DSA_F_DSAPARAMS_PRINT_FP                         101
-# define DSA_F_DSA_BUILTIN_PARAMGEN                       125
-# define DSA_F_DSA_BUILTIN_PARAMGEN2                      126
-# define DSA_F_DSA_DO_SIGN                                112
-# define DSA_F_DSA_DO_VERIFY                              113
-# define DSA_F_DSA_METH_DUP                               127
-# define DSA_F_DSA_METH_NEW                               128
-# define DSA_F_DSA_METH_SET1_NAME                         129
-# define DSA_F_DSA_NEW_METHOD                             103
-# define DSA_F_DSA_PARAM_DECODE                           119
-# define DSA_F_DSA_PRINT_FP                               105
-# define DSA_F_DSA_PRIV_DECODE                            115
-# define DSA_F_DSA_PRIV_ENCODE                            116
-# define DSA_F_DSA_PUB_DECODE                             117
-# define DSA_F_DSA_PUB_ENCODE                             118
-# define DSA_F_DSA_SIGN                                   106
-# define DSA_F_DSA_SIGN_SETUP                             107
-# define DSA_F_DSA_SIG_NEW                                102
-# define DSA_F_OLD_DSA_PRIV_DECODE                        122
-# define DSA_F_PKEY_DSA_CTRL                              120
-# define DSA_F_PKEY_DSA_KEYGEN                            121
+#  define DSA_F_DSAPARAMS_PRINT                            100
+#  define DSA_F_DSAPARAMS_PRINT_FP                         101
+#  define DSA_F_DSA_BUILTIN_PARAMGEN                       125
+#  define DSA_F_DSA_BUILTIN_PARAMGEN2                      126
+#  define DSA_F_DSA_DO_SIGN                                112
+#  define DSA_F_DSA_DO_VERIFY                              113
+#  define DSA_F_DSA_METH_DUP                               127
+#  define DSA_F_DSA_METH_NEW                               128
+#  define DSA_F_DSA_METH_SET1_NAME                         129
+#  define DSA_F_DSA_NEW_METHOD                             103
+#  define DSA_F_DSA_PARAM_DECODE                           119
+#  define DSA_F_DSA_PRINT_FP                               105
+#  define DSA_F_DSA_PRIV_DECODE                            115
+#  define DSA_F_DSA_PRIV_ENCODE                            116
+#  define DSA_F_DSA_PUB_DECODE                             117
+#  define DSA_F_DSA_PUB_ENCODE                             118
+#  define DSA_F_DSA_SIGN                                   106
+#  define DSA_F_DSA_SIGN_SETUP                             107
+#  define DSA_F_DSA_SIG_NEW                                102
+#  define DSA_F_OLD_DSA_PRIV_DECODE                        122
+#  define DSA_F_PKEY_DSA_CTRL                              120
+#  define DSA_F_PKEY_DSA_KEYGEN                            121
 
 /*
  * DSA reason codes.
  */
-# define DSA_R_BAD_Q_VALUE                                102
-# define DSA_R_BN_DECODE_ERROR                            108
-# define DSA_R_BN_ERROR                                   109
-# define DSA_R_DECODE_ERROR                               104
-# define DSA_R_INVALID_DIGEST_TYPE                        106
-# define DSA_R_INVALID_PARAMETERS                         112
-# define DSA_R_MISSING_PARAMETERS                         101
-# define DSA_R_MODULUS_TOO_LARGE                          103
-# define DSA_R_NO_PARAMETERS_SET                          107
-# define DSA_R_PARAMETER_ENCODING_ERROR                   105
-# define DSA_R_Q_NOT_PRIME                                113
-# define DSA_R_SEED_LEN_SMALL                             110
+#  define DSA_R_BAD_Q_VALUE                                102
+#  define DSA_R_BN_DECODE_ERROR                            108
+#  define DSA_R_BN_ERROR                                   109
+#  define DSA_R_DECODE_ERROR                               104
+#  define DSA_R_INVALID_DIGEST_TYPE                        106
+#  define DSA_R_INVALID_PARAMETERS                         112
+#  define DSA_R_MISSING_PARAMETERS                         101
+#  define DSA_R_MODULUS_TOO_LARGE                          103
+#  define DSA_R_NO_PARAMETERS_SET                          107
+#  define DSA_R_PARAMETER_ENCODING_ERROR                   105
+#  define DSA_R_Q_NOT_PRIME                                113
+#  define DSA_R_SEED_LEN_SMALL                             110
 
+# endif
 #endif
diff --git a/include/openssl/ecerr.h b/include/openssl/ecerr.h
index ae48439..6dc16c0 100644
--- a/include/openssl/ecerr.h
+++ b/include/openssl/ecerr.h
@@ -11,230 +11,235 @@
 #ifndef HEADER_ECERR_H
 # define HEADER_ECERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_EC
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_EC_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * EC function codes.
  */
-# define EC_F_BN_TO_FELEM                                 224
-# define EC_F_D2I_ECPARAMETERS                            144
-# define EC_F_D2I_ECPKPARAMETERS                          145
-# define EC_F_D2I_ECPRIVATEKEY                            146
-# define EC_F_DO_EC_KEY_PRINT                             221
-# define EC_F_ECDH_CMS_DECRYPT                            238
-# define EC_F_ECDH_CMS_SET_SHARED_INFO                    239
-# define EC_F_ECDH_COMPUTE_KEY                            246
-# define EC_F_ECDH_SIMPLE_COMPUTE_KEY                     257
-# define EC_F_ECDSA_DO_SIGN_EX                            251
-# define EC_F_ECDSA_DO_VERIFY                             252
-# define EC_F_ECDSA_SIGN_EX                               254
-# define EC_F_ECDSA_SIGN_SETUP                            248
-# define EC_F_ECDSA_SIG_NEW                               265
-# define EC_F_ECDSA_VERIFY                                253
-# define EC_F_ECD_ITEM_VERIFY                             270
-# define EC_F_ECKEY_PARAM2TYPE                            223
-# define EC_F_ECKEY_PARAM_DECODE                          212
-# define EC_F_ECKEY_PRIV_DECODE                           213
-# define EC_F_ECKEY_PRIV_ENCODE                           214
-# define EC_F_ECKEY_PUB_DECODE                            215
-# define EC_F_ECKEY_PUB_ENCODE                            216
-# define EC_F_ECKEY_TYPE2PARAM                            220
-# define EC_F_ECPARAMETERS_PRINT                          147
-# define EC_F_ECPARAMETERS_PRINT_FP                       148
-# define EC_F_ECPKPARAMETERS_PRINT                        149
-# define EC_F_ECPKPARAMETERS_PRINT_FP                     150
-# define EC_F_ECP_NISTZ256_GET_AFFINE                     240
-# define EC_F_ECP_NISTZ256_INV_MOD_ORD                    275
-# define EC_F_ECP_NISTZ256_MULT_PRECOMPUTE                243
-# define EC_F_ECP_NISTZ256_POINTS_MUL                     241
-# define EC_F_ECP_NISTZ256_PRE_COMP_NEW                   244
-# define EC_F_ECP_NISTZ256_WINDOWED_MUL                   242
-# define EC_F_ECX_KEY_OP                                  266
-# define EC_F_ECX_PRIV_ENCODE                             267
-# define EC_F_ECX_PUB_ENCODE                              268
-# define EC_F_EC_ASN1_GROUP2CURVE                         153
-# define EC_F_EC_ASN1_GROUP2FIELDID                       154
-# define EC_F_EC_GF2M_MONTGOMERY_POINT_MULTIPLY           208
-# define EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT     159
-# define EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE              195
-# define EC_F_EC_GF2M_SIMPLE_OCT2POINT                    160
-# define EC_F_EC_GF2M_SIMPLE_POINT2OCT                    161
-# define EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES 162
-# define EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES 163
-# define EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES   164
-# define EC_F_EC_GFP_MONT_FIELD_DECODE                    133
-# define EC_F_EC_GFP_MONT_FIELD_ENCODE                    134
-# define EC_F_EC_GFP_MONT_FIELD_MUL                       131
-# define EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE                209
-# define EC_F_EC_GFP_MONT_FIELD_SQR                       132
-# define EC_F_EC_GFP_MONT_GROUP_SET_CURVE                 189
-# define EC_F_EC_GFP_NISTP224_GROUP_SET_CURVE             225
-# define EC_F_EC_GFP_NISTP224_POINTS_MUL                  228
-# define EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES 226
-# define EC_F_EC_GFP_NISTP256_GROUP_SET_CURVE             230
-# define EC_F_EC_GFP_NISTP256_POINTS_MUL                  231
-# define EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES 232
-# define EC_F_EC_GFP_NISTP521_GROUP_SET_CURVE             233
-# define EC_F_EC_GFP_NISTP521_POINTS_MUL                  234
-# define EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES 235
-# define EC_F_EC_GFP_NIST_FIELD_MUL                       200
-# define EC_F_EC_GFP_NIST_FIELD_SQR                       201
-# define EC_F_EC_GFP_NIST_GROUP_SET_CURVE                 202
-# define EC_F_EC_GFP_SIMPLE_GROUP_CHECK_DISCRIMINANT      165
-# define EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE               166
-# define EC_F_EC_GFP_SIMPLE_MAKE_AFFINE                   102
-# define EC_F_EC_GFP_SIMPLE_OCT2POINT                     103
-# define EC_F_EC_GFP_SIMPLE_POINT2OCT                     104
-# define EC_F_EC_GFP_SIMPLE_POINTS_MAKE_AFFINE            137
-# define EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES  167
-# define EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES  168
-# define EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES    169
-# define EC_F_EC_GROUP_CHECK                              170
-# define EC_F_EC_GROUP_CHECK_DISCRIMINANT                 171
-# define EC_F_EC_GROUP_COPY                               106
-# define EC_F_EC_GROUP_GET_CURVE_GF2M                     172
-# define EC_F_EC_GROUP_GET_CURVE_GFP                      130
-# define EC_F_EC_GROUP_GET_DEGREE                         173
-# define EC_F_EC_GROUP_GET_ECPARAMETERS                   261
-# define EC_F_EC_GROUP_GET_ECPKPARAMETERS                 262
-# define EC_F_EC_GROUP_GET_PENTANOMIAL_BASIS              193
-# define EC_F_EC_GROUP_GET_TRINOMIAL_BASIS                194
-# define EC_F_EC_GROUP_NEW                                108
-# define EC_F_EC_GROUP_NEW_BY_CURVE_NAME                  174
-# define EC_F_EC_GROUP_NEW_FROM_DATA                      175
-# define EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS              263
-# define EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS            264
-# define EC_F_EC_GROUP_SET_CURVE_GF2M                     176
-# define EC_F_EC_GROUP_SET_CURVE_GFP                      109
-# define EC_F_EC_GROUP_SET_GENERATOR                      111
-# define EC_F_EC_KEY_CHECK_KEY                            177
-# define EC_F_EC_KEY_COPY                                 178
-# define EC_F_EC_KEY_GENERATE_KEY                         179
-# define EC_F_EC_KEY_NEW                                  182
-# define EC_F_EC_KEY_NEW_METHOD                           245
-# define EC_F_EC_KEY_OCT2PRIV                             255
-# define EC_F_EC_KEY_PRINT                                180
-# define EC_F_EC_KEY_PRINT_FP                             181
-# define EC_F_EC_KEY_PRIV2OCT                             256
-# define EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES    229
-# define EC_F_EC_KEY_SIMPLE_CHECK_KEY                     258
-# define EC_F_EC_KEY_SIMPLE_OCT2PRIV                      259
-# define EC_F_EC_KEY_SIMPLE_PRIV2OCT                      260
-# define EC_F_EC_PKEY_CHECK                               273
-# define EC_F_EC_PKEY_PARAM_CHECK                         274
-# define EC_F_EC_POINTS_MAKE_AFFINE                       136
-# define EC_F_EC_POINT_ADD                                112
-# define EC_F_EC_POINT_CMP                                113
-# define EC_F_EC_POINT_COPY                               114
-# define EC_F_EC_POINT_DBL                                115
-# define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M        183
-# define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP         116
-# define EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP    117
-# define EC_F_EC_POINT_INVERT                             210
-# define EC_F_EC_POINT_IS_AT_INFINITY                     118
-# define EC_F_EC_POINT_IS_ON_CURVE                        119
-# define EC_F_EC_POINT_MAKE_AFFINE                        120
-# define EC_F_EC_POINT_NEW                                121
-# define EC_F_EC_POINT_OCT2POINT                          122
-# define EC_F_EC_POINT_POINT2OCT                          123
-# define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M        185
-# define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP         124
-# define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M    186
-# define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP     125
-# define EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP    126
-# define EC_F_EC_POINT_SET_TO_INFINITY                    127
-# define EC_F_EC_PRE_COMP_NEW                             196
-# define EC_F_EC_WNAF_MUL                                 187
-# define EC_F_EC_WNAF_PRECOMPUTE_MULT                     188
-# define EC_F_I2D_ECPARAMETERS                            190
-# define EC_F_I2D_ECPKPARAMETERS                          191
-# define EC_F_I2D_ECPRIVATEKEY                            192
-# define EC_F_I2O_ECPUBLICKEY                             151
-# define EC_F_NISTP224_PRE_COMP_NEW                       227
-# define EC_F_NISTP256_PRE_COMP_NEW                       236
-# define EC_F_NISTP521_PRE_COMP_NEW                       237
-# define EC_F_O2I_ECPUBLICKEY                             152
-# define EC_F_OLD_EC_PRIV_DECODE                          222
-# define EC_F_OSSL_ECDH_COMPUTE_KEY                       247
-# define EC_F_OSSL_ECDSA_SIGN_SIG                         249
-# define EC_F_OSSL_ECDSA_VERIFY_SIG                       250
-# define EC_F_PKEY_ECD_CTRL                               271
-# define EC_F_PKEY_ECD_DIGESTSIGN                         272
-# define EC_F_PKEY_ECX_DERIVE                             269
-# define EC_F_PKEY_EC_CTRL                                197
-# define EC_F_PKEY_EC_CTRL_STR                            198
-# define EC_F_PKEY_EC_DERIVE                              217
-# define EC_F_PKEY_EC_KEYGEN                              199
-# define EC_F_PKEY_EC_PARAMGEN                            219
-# define EC_F_PKEY_EC_SIGN                                218
+#  define EC_F_BN_TO_FELEM                                 224
+#  define EC_F_D2I_ECPARAMETERS                            144
+#  define EC_F_D2I_ECPKPARAMETERS                          145
+#  define EC_F_D2I_ECPRIVATEKEY                            146
+#  define EC_F_DO_EC_KEY_PRINT                             221
+#  define EC_F_ECDH_CMS_DECRYPT                            238
+#  define EC_F_ECDH_CMS_SET_SHARED_INFO                    239
+#  define EC_F_ECDH_COMPUTE_KEY                            246
+#  define EC_F_ECDH_SIMPLE_COMPUTE_KEY                     257
+#  define EC_F_ECDSA_DO_SIGN_EX                            251
+#  define EC_F_ECDSA_DO_VERIFY                             252
+#  define EC_F_ECDSA_SIGN_EX                               254
+#  define EC_F_ECDSA_SIGN_SETUP                            248
+#  define EC_F_ECDSA_SIG_NEW                               265
+#  define EC_F_ECDSA_VERIFY                                253
+#  define EC_F_ECD_ITEM_VERIFY                             270
+#  define EC_F_ECKEY_PARAM2TYPE                            223
+#  define EC_F_ECKEY_PARAM_DECODE                          212
+#  define EC_F_ECKEY_PRIV_DECODE                           213
+#  define EC_F_ECKEY_PRIV_ENCODE                           214
+#  define EC_F_ECKEY_PUB_DECODE                            215
+#  define EC_F_ECKEY_PUB_ENCODE                            216
+#  define EC_F_ECKEY_TYPE2PARAM                            220
+#  define EC_F_ECPARAMETERS_PRINT                          147
+#  define EC_F_ECPARAMETERS_PRINT_FP                       148
+#  define EC_F_ECPKPARAMETERS_PRINT                        149
+#  define EC_F_ECPKPARAMETERS_PRINT_FP                     150
+#  define EC_F_ECP_NISTZ256_GET_AFFINE                     240
+#  define EC_F_ECP_NISTZ256_INV_MOD_ORD                    275
+#  define EC_F_ECP_NISTZ256_MULT_PRECOMPUTE                243
+#  define EC_F_ECP_NISTZ256_POINTS_MUL                     241
+#  define EC_F_ECP_NISTZ256_PRE_COMP_NEW                   244
+#  define EC_F_ECP_NISTZ256_WINDOWED_MUL                   242
+#  define EC_F_ECX_KEY_OP                                  266
+#  define EC_F_ECX_PRIV_ENCODE                             267
+#  define EC_F_ECX_PUB_ENCODE                              268
+#  define EC_F_EC_ASN1_GROUP2CURVE                         153
+#  define EC_F_EC_ASN1_GROUP2FIELDID                       154
+#  define EC_F_EC_GF2M_MONTGOMERY_POINT_MULTIPLY           208
+#  define EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT     159
+#  define EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE              195
+#  define EC_F_EC_GF2M_SIMPLE_OCT2POINT                    160
+#  define EC_F_EC_GF2M_SIMPLE_POINT2OCT                    161
+#  define EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES 162
+#  define EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES 163
+#  define EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES   164
+#  define EC_F_EC_GFP_MONT_FIELD_DECODE                    133
+#  define EC_F_EC_GFP_MONT_FIELD_ENCODE                    134
+#  define EC_F_EC_GFP_MONT_FIELD_MUL                       131
+#  define EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE                209
+#  define EC_F_EC_GFP_MONT_FIELD_SQR                       132
+#  define EC_F_EC_GFP_MONT_GROUP_SET_CURVE                 189
+#  define EC_F_EC_GFP_NISTP224_GROUP_SET_CURVE             225
+#  define EC_F_EC_GFP_NISTP224_POINTS_MUL                  228
+#  define EC_F_EC_GFP_NISTP224_POINT_GET_AFFINE_COORDINATES 226
+#  define EC_F_EC_GFP_NISTP256_GROUP_SET_CURVE             230
+#  define EC_F_EC_GFP_NISTP256_POINTS_MUL                  231
+#  define EC_F_EC_GFP_NISTP256_POINT_GET_AFFINE_COORDINATES 232
+#  define EC_F_EC_GFP_NISTP521_GROUP_SET_CURVE             233
+#  define EC_F_EC_GFP_NISTP521_POINTS_MUL                  234
+#  define EC_F_EC_GFP_NISTP521_POINT_GET_AFFINE_COORDINATES 235
+#  define EC_F_EC_GFP_NIST_FIELD_MUL                       200
+#  define EC_F_EC_GFP_NIST_FIELD_SQR                       201
+#  define EC_F_EC_GFP_NIST_GROUP_SET_CURVE                 202
+#  define EC_F_EC_GFP_SIMPLE_GROUP_CHECK_DISCRIMINANT      165
+#  define EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE               166
+#  define EC_F_EC_GFP_SIMPLE_MAKE_AFFINE                   102
+#  define EC_F_EC_GFP_SIMPLE_OCT2POINT                     103
+#  define EC_F_EC_GFP_SIMPLE_POINT2OCT                     104
+#  define EC_F_EC_GFP_SIMPLE_POINTS_MAKE_AFFINE            137
+#  define EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES  167
+#  define EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES  168
+#  define EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES    169
+#  define EC_F_EC_GROUP_CHECK                              170
+#  define EC_F_EC_GROUP_CHECK_DISCRIMINANT                 171
+#  define EC_F_EC_GROUP_COPY                               106
+#  define EC_F_EC_GROUP_GET_CURVE_GF2M                     172
+#  define EC_F_EC_GROUP_GET_CURVE_GFP                      130
+#  define EC_F_EC_GROUP_GET_DEGREE                         173
+#  define EC_F_EC_GROUP_GET_ECPARAMETERS                   261
+#  define EC_F_EC_GROUP_GET_ECPKPARAMETERS                 262
+#  define EC_F_EC_GROUP_GET_PENTANOMIAL_BASIS              193
+#  define EC_F_EC_GROUP_GET_TRINOMIAL_BASIS                194
+#  define EC_F_EC_GROUP_NEW                                108
+#  define EC_F_EC_GROUP_NEW_BY_CURVE_NAME                  174
+#  define EC_F_EC_GROUP_NEW_FROM_DATA                      175
+#  define EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS              263
+#  define EC_F_EC_GROUP_NEW_FROM_ECPKPARAMETERS            264
+#  define EC_F_EC_GROUP_SET_CURVE_GF2M                     176
+#  define EC_F_EC_GROUP_SET_CURVE_GFP                      109
+#  define EC_F_EC_GROUP_SET_GENERATOR                      111
+#  define EC_F_EC_KEY_CHECK_KEY                            177
+#  define EC_F_EC_KEY_COPY                                 178
+#  define EC_F_EC_KEY_GENERATE_KEY                         179
+#  define EC_F_EC_KEY_NEW                                  182
+#  define EC_F_EC_KEY_NEW_METHOD                           245
+#  define EC_F_EC_KEY_OCT2PRIV                             255
+#  define EC_F_EC_KEY_PRINT                                180
+#  define EC_F_EC_KEY_PRINT_FP                             181
+#  define EC_F_EC_KEY_PRIV2OCT                             256
+#  define EC_F_EC_KEY_SET_PUBLIC_KEY_AFFINE_COORDINATES    229
+#  define EC_F_EC_KEY_SIMPLE_CHECK_KEY                     258
+#  define EC_F_EC_KEY_SIMPLE_OCT2PRIV                      259
+#  define EC_F_EC_KEY_SIMPLE_PRIV2OCT                      260
+#  define EC_F_EC_PKEY_CHECK                               273
+#  define EC_F_EC_PKEY_PARAM_CHECK                         274
+#  define EC_F_EC_POINTS_MAKE_AFFINE                       136
+#  define EC_F_EC_POINT_ADD                                112
+#  define EC_F_EC_POINT_CMP                                113
+#  define EC_F_EC_POINT_COPY                               114
+#  define EC_F_EC_POINT_DBL                                115
+#  define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M        183
+#  define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP         116
+#  define EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP    117
+#  define EC_F_EC_POINT_INVERT                             210
+#  define EC_F_EC_POINT_IS_AT_INFINITY                     118
+#  define EC_F_EC_POINT_IS_ON_CURVE                        119
+#  define EC_F_EC_POINT_MAKE_AFFINE                        120
+#  define EC_F_EC_POINT_NEW                                121
+#  define EC_F_EC_POINT_OCT2POINT                          122
+#  define EC_F_EC_POINT_POINT2OCT                          123
+#  define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M        185
+#  define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP         124
+#  define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M    186
+#  define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP     125
+#  define EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP    126
+#  define EC_F_EC_POINT_SET_TO_INFINITY                    127
+#  define EC_F_EC_PRE_COMP_NEW                             196
+#  define EC_F_EC_WNAF_MUL                                 187
+#  define EC_F_EC_WNAF_PRECOMPUTE_MULT                     188
+#  define EC_F_I2D_ECPARAMETERS                            190
+#  define EC_F_I2D_ECPKPARAMETERS                          191
+#  define EC_F_I2D_ECPRIVATEKEY                            192
+#  define EC_F_I2O_ECPUBLICKEY                             151
+#  define EC_F_NISTP224_PRE_COMP_NEW                       227
+#  define EC_F_NISTP256_PRE_COMP_NEW                       236
+#  define EC_F_NISTP521_PRE_COMP_NEW                       237
+#  define EC_F_O2I_ECPUBLICKEY                             152
+#  define EC_F_OLD_EC_PRIV_DECODE                          222
+#  define EC_F_OSSL_ECDH_COMPUTE_KEY                       247
+#  define EC_F_OSSL_ECDSA_SIGN_SIG                         249
+#  define EC_F_OSSL_ECDSA_VERIFY_SIG                       250
+#  define EC_F_PKEY_ECD_CTRL                               271
+#  define EC_F_PKEY_ECD_DIGESTSIGN                         272
+#  define EC_F_PKEY_ECX_DERIVE                             269
+#  define EC_F_PKEY_EC_CTRL                                197
+#  define EC_F_PKEY_EC_CTRL_STR                            198
+#  define EC_F_PKEY_EC_DERIVE                              217
+#  define EC_F_PKEY_EC_KEYGEN                              199
+#  define EC_F_PKEY_EC_PARAMGEN                            219
+#  define EC_F_PKEY_EC_SIGN                                218
 
 /*
  * EC reason codes.
  */
-# define EC_R_ASN1_ERROR                                  115
-# define EC_R_BAD_SIGNATURE                               156
-# define EC_R_BIGNUM_OUT_OF_RANGE                         144
-# define EC_R_BUFFER_TOO_SMALL                            100
-# define EC_R_COORDINATES_OUT_OF_RANGE                    146
-# define EC_R_CURVE_DOES_NOT_SUPPORT_ECDH                 160
-# define EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING              159
-# define EC_R_D2I_ECPKPARAMETERS_FAILURE                  117
-# define EC_R_DECODE_ERROR                                142
-# define EC_R_DISCRIMINANT_IS_ZERO                        118
-# define EC_R_EC_GROUP_NEW_BY_NAME_FAILURE                119
-# define EC_R_FIELD_TOO_LARGE                             143
-# define EC_R_GF2M_NOT_SUPPORTED                          147
-# define EC_R_GROUP2PKPARAMETERS_FAILURE                  120
-# define EC_R_I2D_ECPKPARAMETERS_FAILURE                  121
-# define EC_R_INCOMPATIBLE_OBJECTS                        101
-# define EC_R_INVALID_ARGUMENT                            112
-# define EC_R_INVALID_COMPRESSED_POINT                    110
-# define EC_R_INVALID_COMPRESSION_BIT                     109
-# define EC_R_INVALID_CURVE                               141
-# define EC_R_INVALID_DIGEST                              151
-# define EC_R_INVALID_DIGEST_TYPE                         138
-# define EC_R_INVALID_ENCODING                            102
-# define EC_R_INVALID_FIELD                               103
-# define EC_R_INVALID_FORM                                104
-# define EC_R_INVALID_GROUP_ORDER                         122
-# define EC_R_INVALID_KEY                                 116
-# define EC_R_INVALID_OUTPUT_LENGTH                       161
-# define EC_R_INVALID_PEER_KEY                            133
-# define EC_R_INVALID_PENTANOMIAL_BASIS                   132
-# define EC_R_INVALID_PRIVATE_KEY                         123
-# define EC_R_INVALID_TRINOMIAL_BASIS                     137
-# define EC_R_KDF_PARAMETER_ERROR                         148
-# define EC_R_KEYS_NOT_SET                                140
-# define EC_R_MISSING_PARAMETERS                          124
-# define EC_R_MISSING_PRIVATE_KEY                         125
-# define EC_R_NEED_NEW_SETUP_VALUES                       157
-# define EC_R_NOT_A_NIST_PRIME                            135
-# define EC_R_NOT_IMPLEMENTED                             126
-# define EC_R_NOT_INITIALIZED                             111
-# define EC_R_NO_PARAMETERS_SET                           139
-# define EC_R_NO_PRIVATE_VALUE                            154
-# define EC_R_OPERATION_NOT_SUPPORTED                     152
-# define EC_R_PASSED_NULL_PARAMETER                       134
-# define EC_R_PEER_KEY_ERROR                              149
-# define EC_R_PKPARAMETERS2GROUP_FAILURE                  127
-# define EC_R_POINT_ARITHMETIC_FAILURE                    155
-# define EC_R_POINT_AT_INFINITY                           106
-# define EC_R_POINT_IS_NOT_ON_CURVE                       107
-# define EC_R_RANDOM_NUMBER_GENERATION_FAILED             158
-# define EC_R_SHARED_INFO_ERROR                           150
-# define EC_R_SLOT_FULL                                   108
-# define EC_R_UNDEFINED_GENERATOR                         113
-# define EC_R_UNDEFINED_ORDER                             128
-# define EC_R_UNKNOWN_GROUP                               129
-# define EC_R_UNKNOWN_ORDER                               114
-# define EC_R_UNSUPPORTED_FIELD                           131
-# define EC_R_WRONG_CURVE_PARAMETERS                      145
-# define EC_R_WRONG_ORDER                                 130
+#  define EC_R_ASN1_ERROR                                  115
+#  define EC_R_BAD_SIGNATURE                               156
+#  define EC_R_BIGNUM_OUT_OF_RANGE                         144
+#  define EC_R_BUFFER_TOO_SMALL                            100
+#  define EC_R_COORDINATES_OUT_OF_RANGE                    146
+#  define EC_R_CURVE_DOES_NOT_SUPPORT_ECDH                 160
+#  define EC_R_CURVE_DOES_NOT_SUPPORT_SIGNING              159
+#  define EC_R_D2I_ECPKPARAMETERS_FAILURE                  117
+#  define EC_R_DECODE_ERROR                                142
+#  define EC_R_DISCRIMINANT_IS_ZERO                        118
+#  define EC_R_EC_GROUP_NEW_BY_NAME_FAILURE                119
+#  define EC_R_FIELD_TOO_LARGE                             143
+#  define EC_R_GF2M_NOT_SUPPORTED                          147
+#  define EC_R_GROUP2PKPARAMETERS_FAILURE                  120
+#  define EC_R_I2D_ECPKPARAMETERS_FAILURE                  121
+#  define EC_R_INCOMPATIBLE_OBJECTS                        101
+#  define EC_R_INVALID_ARGUMENT                            112
+#  define EC_R_INVALID_COMPRESSED_POINT                    110
+#  define EC_R_INVALID_COMPRESSION_BIT                     109
+#  define EC_R_INVALID_CURVE                               141
+#  define EC_R_INVALID_DIGEST                              151
+#  define EC_R_INVALID_DIGEST_TYPE                         138
+#  define EC_R_INVALID_ENCODING                            102
+#  define EC_R_INVALID_FIELD                               103
+#  define EC_R_INVALID_FORM                                104
+#  define EC_R_INVALID_GROUP_ORDER                         122
+#  define EC_R_INVALID_KEY                                 116
+#  define EC_R_INVALID_OUTPUT_LENGTH                       161
+#  define EC_R_INVALID_PEER_KEY                            133
+#  define EC_R_INVALID_PENTANOMIAL_BASIS                   132
+#  define EC_R_INVALID_PRIVATE_KEY                         123
+#  define EC_R_INVALID_TRINOMIAL_BASIS                     137
+#  define EC_R_KDF_PARAMETER_ERROR                         148
+#  define EC_R_KEYS_NOT_SET                                140
+#  define EC_R_MISSING_PARAMETERS                          124
+#  define EC_R_MISSING_PRIVATE_KEY                         125
+#  define EC_R_NEED_NEW_SETUP_VALUES                       157
+#  define EC_R_NOT_A_NIST_PRIME                            135
+#  define EC_R_NOT_IMPLEMENTED                             126
+#  define EC_R_NOT_INITIALIZED                             111
+#  define EC_R_NO_PARAMETERS_SET                           139
+#  define EC_R_NO_PRIVATE_VALUE                            154
+#  define EC_R_OPERATION_NOT_SUPPORTED                     152
+#  define EC_R_PASSED_NULL_PARAMETER                       134
+#  define EC_R_PEER_KEY_ERROR                              149
+#  define EC_R_PKPARAMETERS2GROUP_FAILURE                  127
+#  define EC_R_POINT_ARITHMETIC_FAILURE                    155
+#  define EC_R_POINT_AT_INFINITY                           106
+#  define EC_R_POINT_IS_NOT_ON_CURVE                       107
+#  define EC_R_RANDOM_NUMBER_GENERATION_FAILED             158
+#  define EC_R_SHARED_INFO_ERROR                           150
+#  define EC_R_SLOT_FULL                                   108
+#  define EC_R_UNDEFINED_GENERATOR                         113
+#  define EC_R_UNDEFINED_ORDER                             128
+#  define EC_R_UNKNOWN_GROUP                               129
+#  define EC_R_UNKNOWN_ORDER                               114
+#  define EC_R_UNSUPPORTED_FIELD                           131
+#  define EC_R_WRONG_CURVE_PARAMETERS                      145
+#  define EC_R_WRONG_ORDER                                 130
 
+# endif
 #endif
diff --git a/include/openssl/engineerr.h b/include/openssl/engineerr.h
index c3e3844..f6025f6 100644
--- a/include/openssl/engineerr.h
+++ b/include/openssl/engineerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,93 +11,98 @@
 #ifndef HEADER_ENGINEERR_H
 # define HEADER_ENGINEERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_ENGINE
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_ENGINE_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * ENGINE function codes.
  */
-# define ENGINE_F_DIGEST_UPDATE                           198
-# define ENGINE_F_DYNAMIC_CTRL                            180
-# define ENGINE_F_DYNAMIC_GET_DATA_CTX                    181
-# define ENGINE_F_DYNAMIC_LOAD                            182
-# define ENGINE_F_DYNAMIC_SET_DATA_CTX                    183
-# define ENGINE_F_ENGINE_ADD                              105
-# define ENGINE_F_ENGINE_BY_ID                            106
-# define ENGINE_F_ENGINE_CMD_IS_EXECUTABLE                170
-# define ENGINE_F_ENGINE_CTRL                             142
-# define ENGINE_F_ENGINE_CTRL_CMD                         178
-# define ENGINE_F_ENGINE_CTRL_CMD_STRING                  171
-# define ENGINE_F_ENGINE_FINISH                           107
-# define ENGINE_F_ENGINE_GET_CIPHER                       185
-# define ENGINE_F_ENGINE_GET_DIGEST                       186
-# define ENGINE_F_ENGINE_GET_FIRST                        195
-# define ENGINE_F_ENGINE_GET_LAST                         196
-# define ENGINE_F_ENGINE_GET_NEXT                         115
-# define ENGINE_F_ENGINE_GET_PKEY_ASN1_METH               193
-# define ENGINE_F_ENGINE_GET_PKEY_METH                    192
-# define ENGINE_F_ENGINE_GET_PREV                         116
-# define ENGINE_F_ENGINE_INIT                             119
-# define ENGINE_F_ENGINE_LIST_ADD                         120
-# define ENGINE_F_ENGINE_LIST_REMOVE                      121
-# define ENGINE_F_ENGINE_LOAD_PRIVATE_KEY                 150
-# define ENGINE_F_ENGINE_LOAD_PUBLIC_KEY                  151
-# define ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT             194
-# define ENGINE_F_ENGINE_NEW                              122
-# define ENGINE_F_ENGINE_PKEY_ASN1_FIND_STR               197
-# define ENGINE_F_ENGINE_REMOVE                           123
-# define ENGINE_F_ENGINE_SET_DEFAULT_STRING               189
-# define ENGINE_F_ENGINE_SET_ID                           129
-# define ENGINE_F_ENGINE_SET_NAME                         130
-# define ENGINE_F_ENGINE_TABLE_REGISTER                   184
-# define ENGINE_F_ENGINE_UNLOCKED_FINISH                  191
-# define ENGINE_F_ENGINE_UP_REF                           190
-# define ENGINE_F_INT_CTRL_HELPER                         172
-# define ENGINE_F_INT_ENGINE_CONFIGURE                    188
-# define ENGINE_F_INT_ENGINE_MODULE_INIT                  187
+#  define ENGINE_F_DIGEST_UPDATE                           198
+#  define ENGINE_F_DYNAMIC_CTRL                            180
+#  define ENGINE_F_DYNAMIC_GET_DATA_CTX                    181
+#  define ENGINE_F_DYNAMIC_LOAD                            182
+#  define ENGINE_F_DYNAMIC_SET_DATA_CTX                    183
+#  define ENGINE_F_ENGINE_ADD                              105
+#  define ENGINE_F_ENGINE_BY_ID                            106
+#  define ENGINE_F_ENGINE_CMD_IS_EXECUTABLE                170
+#  define ENGINE_F_ENGINE_CTRL                             142
+#  define ENGINE_F_ENGINE_CTRL_CMD                         178
+#  define ENGINE_F_ENGINE_CTRL_CMD_STRING                  171
+#  define ENGINE_F_ENGINE_FINISH                           107
+#  define ENGINE_F_ENGINE_GET_CIPHER                       185
+#  define ENGINE_F_ENGINE_GET_DIGEST                       186
+#  define ENGINE_F_ENGINE_GET_FIRST                        195
+#  define ENGINE_F_ENGINE_GET_LAST                         196
+#  define ENGINE_F_ENGINE_GET_NEXT                         115
+#  define ENGINE_F_ENGINE_GET_PKEY_ASN1_METH               193
+#  define ENGINE_F_ENGINE_GET_PKEY_METH                    192
+#  define ENGINE_F_ENGINE_GET_PREV                         116
+#  define ENGINE_F_ENGINE_INIT                             119
+#  define ENGINE_F_ENGINE_LIST_ADD                         120
+#  define ENGINE_F_ENGINE_LIST_REMOVE                      121
+#  define ENGINE_F_ENGINE_LOAD_PRIVATE_KEY                 150
+#  define ENGINE_F_ENGINE_LOAD_PUBLIC_KEY                  151
+#  define ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT             194
+#  define ENGINE_F_ENGINE_NEW                              122
+#  define ENGINE_F_ENGINE_PKEY_ASN1_FIND_STR               197
+#  define ENGINE_F_ENGINE_REMOVE                           123
+#  define ENGINE_F_ENGINE_SET_DEFAULT_STRING               189
+#  define ENGINE_F_ENGINE_SET_ID                           129
+#  define ENGINE_F_ENGINE_SET_NAME                         130
+#  define ENGINE_F_ENGINE_TABLE_REGISTER                   184
+#  define ENGINE_F_ENGINE_UNLOCKED_FINISH                  191
+#  define ENGINE_F_ENGINE_UP_REF                           190
+#  define ENGINE_F_INT_CTRL_HELPER                         172
+#  define ENGINE_F_INT_ENGINE_CONFIGURE                    188
+#  define ENGINE_F_INT_ENGINE_MODULE_INIT                  187
 
 /*
  * ENGINE reason codes.
  */
-# define ENGINE_R_ALREADY_LOADED                          100
-# define ENGINE_R_ARGUMENT_IS_NOT_A_NUMBER                133
-# define ENGINE_R_CMD_NOT_EXECUTABLE                      134
-# define ENGINE_R_COMMAND_TAKES_INPUT                     135
-# define ENGINE_R_COMMAND_TAKES_NO_INPUT                  136
-# define ENGINE_R_CONFLICTING_ENGINE_ID                   103
-# define ENGINE_R_CTRL_COMMAND_NOT_IMPLEMENTED            119
-# define ENGINE_R_DSO_FAILURE                             104
-# define ENGINE_R_DSO_NOT_FOUND                           132
-# define ENGINE_R_ENGINES_SECTION_ERROR                   148
-# define ENGINE_R_ENGINE_CONFIGURATION_ERROR              102
-# define ENGINE_R_ENGINE_IS_NOT_IN_LIST                   105
-# define ENGINE_R_ENGINE_SECTION_ERROR                    149
-# define ENGINE_R_FAILED_LOADING_PRIVATE_KEY              128
-# define ENGINE_R_FAILED_LOADING_PUBLIC_KEY               129
-# define ENGINE_R_FINISH_FAILED                           106
-# define ENGINE_R_ID_OR_NAME_MISSING                      108
-# define ENGINE_R_INIT_FAILED                             109
-# define ENGINE_R_INTERNAL_LIST_ERROR                     110
-# define ENGINE_R_INVALID_ARGUMENT                        143
-# define ENGINE_R_INVALID_CMD_NAME                        137
-# define ENGINE_R_INVALID_CMD_NUMBER                      138
-# define ENGINE_R_INVALID_INIT_VALUE                      151
-# define ENGINE_R_INVALID_STRING                          150
-# define ENGINE_R_NOT_INITIALISED                         117
-# define ENGINE_R_NOT_LOADED                              112
-# define ENGINE_R_NO_CONTROL_FUNCTION                     120
-# define ENGINE_R_NO_INDEX                                144
-# define ENGINE_R_NO_LOAD_FUNCTION                        125
-# define ENGINE_R_NO_REFERENCE                            130
-# define ENGINE_R_NO_SUCH_ENGINE                          116
-# define ENGINE_R_UNIMPLEMENTED_CIPHER                    146
-# define ENGINE_R_UNIMPLEMENTED_DIGEST                    147
-# define ENGINE_R_UNIMPLEMENTED_PUBLIC_KEY_METHOD         101
-# define ENGINE_R_VERSION_INCOMPATIBILITY                 145
+#  define ENGINE_R_ALREADY_LOADED                          100
+#  define ENGINE_R_ARGUMENT_IS_NOT_A_NUMBER                133
+#  define ENGINE_R_CMD_NOT_EXECUTABLE                      134
+#  define ENGINE_R_COMMAND_TAKES_INPUT                     135
+#  define ENGINE_R_COMMAND_TAKES_NO_INPUT                  136
+#  define ENGINE_R_CONFLICTING_ENGINE_ID                   103
+#  define ENGINE_R_CTRL_COMMAND_NOT_IMPLEMENTED            119
+#  define ENGINE_R_DSO_FAILURE                             104
+#  define ENGINE_R_DSO_NOT_FOUND                           132
+#  define ENGINE_R_ENGINES_SECTION_ERROR                   148
+#  define ENGINE_R_ENGINE_CONFIGURATION_ERROR              102
+#  define ENGINE_R_ENGINE_IS_NOT_IN_LIST                   105
+#  define ENGINE_R_ENGINE_SECTION_ERROR                    149
+#  define ENGINE_R_FAILED_LOADING_PRIVATE_KEY              128
+#  define ENGINE_R_FAILED_LOADING_PUBLIC_KEY               129
+#  define ENGINE_R_FINISH_FAILED                           106
+#  define ENGINE_R_ID_OR_NAME_MISSING                      108
+#  define ENGINE_R_INIT_FAILED                             109
+#  define ENGINE_R_INTERNAL_LIST_ERROR                     110
+#  define ENGINE_R_INVALID_ARGUMENT                        143
+#  define ENGINE_R_INVALID_CMD_NAME                        137
+#  define ENGINE_R_INVALID_CMD_NUMBER                      138
+#  define ENGINE_R_INVALID_INIT_VALUE                      151
+#  define ENGINE_R_INVALID_STRING                          150
+#  define ENGINE_R_NOT_INITIALISED                         117
+#  define ENGINE_R_NOT_LOADED                              112
+#  define ENGINE_R_NO_CONTROL_FUNCTION                     120
+#  define ENGINE_R_NO_INDEX                                144
+#  define ENGINE_R_NO_LOAD_FUNCTION                        125
+#  define ENGINE_R_NO_REFERENCE                            130
+#  define ENGINE_R_NO_SUCH_ENGINE                          116
+#  define ENGINE_R_UNIMPLEMENTED_CIPHER                    146
+#  define ENGINE_R_UNIMPLEMENTED_DIGEST                    147
+#  define ENGINE_R_UNIMPLEMENTED_PUBLIC_KEY_METHOD         101
+#  define ENGINE_R_VERSION_INCOMPATIBILITY                 145
 
+# endif
 #endif
diff --git a/include/openssl/ocsperr.h b/include/openssl/ocsperr.h
index 08800d1..f78f232 100644
--- a/include/openssl/ocsperr.h
+++ b/include/openssl/ocsperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,62 +11,67 @@
 #ifndef HEADER_OCSPERR_H
 # define HEADER_OCSPERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_OCSP
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_OCSP_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * OCSP function codes.
  */
-# define OCSP_F_D2I_OCSP_NONCE                            102
-# define OCSP_F_OCSP_BASIC_ADD1_STATUS                    103
-# define OCSP_F_OCSP_BASIC_SIGN                           104
-# define OCSP_F_OCSP_BASIC_SIGN_CTX                       119
-# define OCSP_F_OCSP_BASIC_VERIFY                         105
-# define OCSP_F_OCSP_CERT_ID_NEW                          101
-# define OCSP_F_OCSP_CHECK_DELEGATED                      106
-# define OCSP_F_OCSP_CHECK_IDS                            107
-# define OCSP_F_OCSP_CHECK_ISSUER                         108
-# define OCSP_F_OCSP_CHECK_VALIDITY                       115
-# define OCSP_F_OCSP_MATCH_ISSUERID                       109
-# define OCSP_F_OCSP_PARSE_URL                            114
-# define OCSP_F_OCSP_REQUEST_SIGN                         110
-# define OCSP_F_OCSP_REQUEST_VERIFY                       116
-# define OCSP_F_OCSP_RESPONSE_GET1_BASIC                  111
-# define OCSP_F_PARSE_HTTP_LINE1                          118
+#  define OCSP_F_D2I_OCSP_NONCE                            102
+#  define OCSP_F_OCSP_BASIC_ADD1_STATUS                    103
+#  define OCSP_F_OCSP_BASIC_SIGN                           104
+#  define OCSP_F_OCSP_BASIC_SIGN_CTX                       119
+#  define OCSP_F_OCSP_BASIC_VERIFY                         105
+#  define OCSP_F_OCSP_CERT_ID_NEW                          101
+#  define OCSP_F_OCSP_CHECK_DELEGATED                      106
+#  define OCSP_F_OCSP_CHECK_IDS                            107
+#  define OCSP_F_OCSP_CHECK_ISSUER                         108
+#  define OCSP_F_OCSP_CHECK_VALIDITY                       115
+#  define OCSP_F_OCSP_MATCH_ISSUERID                       109
+#  define OCSP_F_OCSP_PARSE_URL                            114
+#  define OCSP_F_OCSP_REQUEST_SIGN                         110
+#  define OCSP_F_OCSP_REQUEST_VERIFY                       116
+#  define OCSP_F_OCSP_RESPONSE_GET1_BASIC                  111
+#  define OCSP_F_PARSE_HTTP_LINE1                          118
 
 /*
  * OCSP reason codes.
  */
-# define OCSP_R_CERTIFICATE_VERIFY_ERROR                  101
-# define OCSP_R_DIGEST_ERR                                102
-# define OCSP_R_ERROR_IN_NEXTUPDATE_FIELD                 122
-# define OCSP_R_ERROR_IN_THISUPDATE_FIELD                 123
-# define OCSP_R_ERROR_PARSING_URL                         121
-# define OCSP_R_MISSING_OCSPSIGNING_USAGE                 103
-# define OCSP_R_NEXTUPDATE_BEFORE_THISUPDATE              124
-# define OCSP_R_NOT_BASIC_RESPONSE                        104
-# define OCSP_R_NO_CERTIFICATES_IN_CHAIN                  105
-# define OCSP_R_NO_RESPONSE_DATA                          108
-# define OCSP_R_NO_REVOKED_TIME                           109
-# define OCSP_R_NO_SIGNER_KEY                             130
-# define OCSP_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE    110
-# define OCSP_R_REQUEST_NOT_SIGNED                        128
-# define OCSP_R_RESPONSE_CONTAINS_NO_REVOCATION_DATA      111
-# define OCSP_R_ROOT_CA_NOT_TRUSTED                       112
-# define OCSP_R_SERVER_RESPONSE_ERROR                     114
-# define OCSP_R_SERVER_RESPONSE_PARSE_ERROR               115
-# define OCSP_R_SIGNATURE_FAILURE                         117
-# define OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND              118
-# define OCSP_R_STATUS_EXPIRED                            125
-# define OCSP_R_STATUS_NOT_YET_VALID                      126
-# define OCSP_R_STATUS_TOO_OLD                            127
-# define OCSP_R_UNKNOWN_MESSAGE_DIGEST                    119
-# define OCSP_R_UNKNOWN_NID                               120
-# define OCSP_R_UNSUPPORTED_REQUESTORNAME_TYPE            129
+#  define OCSP_R_CERTIFICATE_VERIFY_ERROR                  101
+#  define OCSP_R_DIGEST_ERR                                102
+#  define OCSP_R_ERROR_IN_NEXTUPDATE_FIELD                 122
+#  define OCSP_R_ERROR_IN_THISUPDATE_FIELD                 123
+#  define OCSP_R_ERROR_PARSING_URL                         121
+#  define OCSP_R_MISSING_OCSPSIGNING_USAGE                 103
+#  define OCSP_R_NEXTUPDATE_BEFORE_THISUPDATE              124
+#  define OCSP_R_NOT_BASIC_RESPONSE                        104
+#  define OCSP_R_NO_CERTIFICATES_IN_CHAIN                  105
+#  define OCSP_R_NO_RESPONSE_DATA                          108
+#  define OCSP_R_NO_REVOKED_TIME                           109
+#  define OCSP_R_NO_SIGNER_KEY                             130
+#  define OCSP_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE    110
+#  define OCSP_R_REQUEST_NOT_SIGNED                        128
+#  define OCSP_R_RESPONSE_CONTAINS_NO_REVOCATION_DATA      111
+#  define OCSP_R_ROOT_CA_NOT_TRUSTED                       112
+#  define OCSP_R_SERVER_RESPONSE_ERROR                     114
+#  define OCSP_R_SERVER_RESPONSE_PARSE_ERROR               115
+#  define OCSP_R_SIGNATURE_FAILURE                         117
+#  define OCSP_R_SIGNER_CERTIFICATE_NOT_FOUND              118
+#  define OCSP_R_STATUS_EXPIRED                            125
+#  define OCSP_R_STATUS_NOT_YET_VALID                      126
+#  define OCSP_R_STATUS_TOO_OLD                            127
+#  define OCSP_R_UNKNOWN_MESSAGE_DIGEST                    119
+#  define OCSP_R_UNKNOWN_NID                               120
+#  define OCSP_R_UNSUPPORTED_REQUESTORNAME_TYPE            129
 
+# endif
 #endif
diff --git a/include/openssl/tserr.h b/include/openssl/tserr.h
index 233438a..01ebfef 100644
--- a/include/openssl/tserr.h
+++ b/include/openssl/tserr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -11,116 +11,121 @@
 #ifndef HEADER_TSERR_H
 # define HEADER_TSERR_H
 
-# ifdef  __cplusplus
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_TS
+
+#  ifdef  __cplusplus
 extern "C" {
-# endif
+#  endif
 int ERR_load_TS_strings(void);
-# ifdef  __cplusplus
+#  ifdef  __cplusplus
 }
-# endif
+#  endif
 
 /*
  * TS function codes.
  */
-# define TS_F_DEF_SERIAL_CB                               110
-# define TS_F_DEF_TIME_CB                                 111
-# define TS_F_ESS_ADD_SIGNING_CERT                        112
-# define TS_F_ESS_ADD_SIGNING_CERT_V2                     147
-# define TS_F_ESS_CERT_ID_NEW_INIT                        113
-# define TS_F_ESS_CERT_ID_V2_NEW_INIT                     156
-# define TS_F_ESS_SIGNING_CERT_NEW_INIT                   114
-# define TS_F_ESS_SIGNING_CERT_V2_NEW_INIT                157
-# define TS_F_INT_TS_RESP_VERIFY_TOKEN                    149
-# define TS_F_PKCS7_TO_TS_TST_INFO                        148
-# define TS_F_TS_ACCURACY_SET_MICROS                      115
-# define TS_F_TS_ACCURACY_SET_MILLIS                      116
-# define TS_F_TS_ACCURACY_SET_SECONDS                     117
-# define TS_F_TS_CHECK_IMPRINTS                           100
-# define TS_F_TS_CHECK_NONCES                             101
-# define TS_F_TS_CHECK_POLICY                             102
-# define TS_F_TS_CHECK_SIGNING_CERTS                      103
-# define TS_F_TS_CHECK_STATUS_INFO                        104
-# define TS_F_TS_COMPUTE_IMPRINT                          145
-# define TS_F_TS_CONF_INVALID                             151
-# define TS_F_TS_CONF_LOAD_CERT                           153
-# define TS_F_TS_CONF_LOAD_CERTS                          154
-# define TS_F_TS_CONF_LOAD_KEY                            155
-# define TS_F_TS_CONF_LOOKUP_FAIL                         152
-# define TS_F_TS_CONF_SET_DEFAULT_ENGINE                  146
-# define TS_F_TS_GET_STATUS_TEXT                          105
-# define TS_F_TS_MSG_IMPRINT_SET_ALGO                     118
-# define TS_F_TS_REQ_SET_MSG_IMPRINT                      119
-# define TS_F_TS_REQ_SET_NONCE                            120
-# define TS_F_TS_REQ_SET_POLICY_ID                        121
-# define TS_F_TS_RESP_CREATE_RESPONSE                     122
-# define TS_F_TS_RESP_CREATE_TST_INFO                     123
-# define TS_F_TS_RESP_CTX_ADD_FAILURE_INFO                124
-# define TS_F_TS_RESP_CTX_ADD_MD                          125
-# define TS_F_TS_RESP_CTX_ADD_POLICY                      126
-# define TS_F_TS_RESP_CTX_NEW                             127
-# define TS_F_TS_RESP_CTX_SET_ACCURACY                    128
-# define TS_F_TS_RESP_CTX_SET_CERTS                       129
-# define TS_F_TS_RESP_CTX_SET_DEF_POLICY                  130
-# define TS_F_TS_RESP_CTX_SET_SIGNER_CERT                 131
-# define TS_F_TS_RESP_CTX_SET_STATUS_INFO                 132
-# define TS_F_TS_RESP_GET_POLICY                          133
-# define TS_F_TS_RESP_SET_GENTIME_WITH_PRECISION          134
-# define TS_F_TS_RESP_SET_STATUS_INFO                     135
-# define TS_F_TS_RESP_SET_TST_INFO                        150
-# define TS_F_TS_RESP_SIGN                                136
-# define TS_F_TS_RESP_VERIFY_SIGNATURE                    106
-# define TS_F_TS_TST_INFO_SET_ACCURACY                    137
-# define TS_F_TS_TST_INFO_SET_MSG_IMPRINT                 138
-# define TS_F_TS_TST_INFO_SET_NONCE                       139
-# define TS_F_TS_TST_INFO_SET_POLICY_ID                   140
-# define TS_F_TS_TST_INFO_SET_SERIAL                      141
-# define TS_F_TS_TST_INFO_SET_TIME                        142
-# define TS_F_TS_TST_INFO_SET_TSA                         143
-# define TS_F_TS_VERIFY                                   108
-# define TS_F_TS_VERIFY_CERT                              109
-# define TS_F_TS_VERIFY_CTX_NEW                           144
+#  define TS_F_DEF_SERIAL_CB                               110
+#  define TS_F_DEF_TIME_CB                                 111
+#  define TS_F_ESS_ADD_SIGNING_CERT                        112
+#  define TS_F_ESS_ADD_SIGNING_CERT_V2                     147
+#  define TS_F_ESS_CERT_ID_NEW_INIT                        113
+#  define TS_F_ESS_CERT_ID_V2_NEW_INIT                     156
+#  define TS_F_ESS_SIGNING_CERT_NEW_INIT                   114
+#  define TS_F_ESS_SIGNING_CERT_V2_NEW_INIT                157
+#  define TS_F_INT_TS_RESP_VERIFY_TOKEN                    149
+#  define TS_F_PKCS7_TO_TS_TST_INFO                        148
+#  define TS_F_TS_ACCURACY_SET_MICROS                      115
+#  define TS_F_TS_ACCURACY_SET_MILLIS                      116
+#  define TS_F_TS_ACCURACY_SET_SECONDS                     117
+#  define TS_F_TS_CHECK_IMPRINTS                           100
+#  define TS_F_TS_CHECK_NONCES                             101
+#  define TS_F_TS_CHECK_POLICY                             102
+#  define TS_F_TS_CHECK_SIGNING_CERTS                      103
+#  define TS_F_TS_CHECK_STATUS_INFO                        104
+#  define TS_F_TS_COMPUTE_IMPRINT                          145
+#  define TS_F_TS_CONF_INVALID                             151
+#  define TS_F_TS_CONF_LOAD_CERT                           153
+#  define TS_F_TS_CONF_LOAD_CERTS                          154
+#  define TS_F_TS_CONF_LOAD_KEY                            155
+#  define TS_F_TS_CONF_LOOKUP_FAIL                         152
+#  define TS_F_TS_CONF_SET_DEFAULT_ENGINE                  146
+#  define TS_F_TS_GET_STATUS_TEXT                          105
+#  define TS_F_TS_MSG_IMPRINT_SET_ALGO                     118
+#  define TS_F_TS_REQ_SET_MSG_IMPRINT                      119
+#  define TS_F_TS_REQ_SET_NONCE                            120
+#  define TS_F_TS_REQ_SET_POLICY_ID                        121
+#  define TS_F_TS_RESP_CREATE_RESPONSE                     122
+#  define TS_F_TS_RESP_CREATE_TST_INFO                     123
+#  define TS_F_TS_RESP_CTX_ADD_FAILURE_INFO                124
+#  define TS_F_TS_RESP_CTX_ADD_MD                          125
+#  define TS_F_TS_RESP_CTX_ADD_POLICY                      126
+#  define TS_F_TS_RESP_CTX_NEW                             127
+#  define TS_F_TS_RESP_CTX_SET_ACCURACY                    128
+#  define TS_F_TS_RESP_CTX_SET_CERTS                       129
+#  define TS_F_TS_RESP_CTX_SET_DEF_POLICY                  130
+#  define TS_F_TS_RESP_CTX_SET_SIGNER_CERT                 131
+#  define TS_F_TS_RESP_CTX_SET_STATUS_INFO                 132
+#  define TS_F_TS_RESP_GET_POLICY                          133
+#  define TS_F_TS_RESP_SET_GENTIME_WITH_PRECISION          134
+#  define TS_F_TS_RESP_SET_STATUS_INFO                     135
+#  define TS_F_TS_RESP_SET_TST_INFO                        150
+#  define TS_F_TS_RESP_SIGN                                136
+#  define TS_F_TS_RESP_VERIFY_SIGNATURE                    106
+#  define TS_F_TS_TST_INFO_SET_ACCURACY                    137
+#  define TS_F_TS_TST_INFO_SET_MSG_IMPRINT                 138
+#  define TS_F_TS_TST_INFO_SET_NONCE                       139
+#  define TS_F_TS_TST_INFO_SET_POLICY_ID                   140
+#  define TS_F_TS_TST_INFO_SET_SERIAL                      141
+#  define TS_F_TS_TST_INFO_SET_TIME                        142
+#  define TS_F_TS_TST_INFO_SET_TSA                         143
+#  define TS_F_TS_VERIFY                                   108
+#  define TS_F_TS_VERIFY_CERT                              109
+#  define TS_F_TS_VERIFY_CTX_NEW                           144
 
 /*
  * TS reason codes.
  */
-# define TS_R_BAD_PKCS7_TYPE                              132
-# define TS_R_BAD_TYPE                                    133
-# define TS_R_CANNOT_LOAD_CERT                            137
-# define TS_R_CANNOT_LOAD_KEY                             138
-# define TS_R_CERTIFICATE_VERIFY_ERROR                    100
-# define TS_R_COULD_NOT_SET_ENGINE                        127
-# define TS_R_COULD_NOT_SET_TIME                          115
-# define TS_R_DETACHED_CONTENT                            134
-# define TS_R_ESS_ADD_SIGNING_CERT_ERROR                  116
-# define TS_R_ESS_ADD_SIGNING_CERT_V2_ERROR               139
-# define TS_R_ESS_SIGNING_CERTIFICATE_ERROR               101
-# define TS_R_INVALID_NULL_POINTER                        102
-# define TS_R_INVALID_SIGNER_CERTIFICATE_PURPOSE          117
-# define TS_R_MESSAGE_IMPRINT_MISMATCH                    103
-# define TS_R_NONCE_MISMATCH                              104
-# define TS_R_NONCE_NOT_RETURNED                          105
-# define TS_R_NO_CONTENT                                  106
-# define TS_R_NO_TIME_STAMP_TOKEN                         107
-# define TS_R_PKCS7_ADD_SIGNATURE_ERROR                   118
-# define TS_R_PKCS7_ADD_SIGNED_ATTR_ERROR                 119
-# define TS_R_PKCS7_TO_TS_TST_INFO_FAILED                 129
-# define TS_R_POLICY_MISMATCH                             108
-# define TS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE      120
-# define TS_R_RESPONSE_SETUP_ERROR                        121
-# define TS_R_SIGNATURE_FAILURE                           109
-# define TS_R_THERE_MUST_BE_ONE_SIGNER                    110
-# define TS_R_TIME_SYSCALL_ERROR                          122
-# define TS_R_TOKEN_NOT_PRESENT                           130
-# define TS_R_TOKEN_PRESENT                               131
-# define TS_R_TSA_NAME_MISMATCH                           111
-# define TS_R_TSA_UNTRUSTED                               112
-# define TS_R_TST_INFO_SETUP_ERROR                        123
-# define TS_R_TS_DATASIGN                                 124
-# define TS_R_UNACCEPTABLE_POLICY                         125
-# define TS_R_UNSUPPORTED_MD_ALGORITHM                    126
-# define TS_R_UNSUPPORTED_VERSION                         113
-# define TS_R_VAR_BAD_VALUE                               135
-# define TS_R_VAR_LOOKUP_FAILURE                          136
-# define TS_R_WRONG_CONTENT_TYPE                          114
+#  define TS_R_BAD_PKCS7_TYPE                              132
+#  define TS_R_BAD_TYPE                                    133
+#  define TS_R_CANNOT_LOAD_CERT                            137
+#  define TS_R_CANNOT_LOAD_KEY                             138
+#  define TS_R_CERTIFICATE_VERIFY_ERROR                    100
+#  define TS_R_COULD_NOT_SET_ENGINE                        127
+#  define TS_R_COULD_NOT_SET_TIME                          115
+#  define TS_R_DETACHED_CONTENT                            134
+#  define TS_R_ESS_ADD_SIGNING_CERT_ERROR                  116
+#  define TS_R_ESS_ADD_SIGNING_CERT_V2_ERROR               139
+#  define TS_R_ESS_SIGNING_CERTIFICATE_ERROR               101
+#  define TS_R_INVALID_NULL_POINTER                        102
+#  define TS_R_INVALID_SIGNER_CERTIFICATE_PURPOSE          117
+#  define TS_R_MESSAGE_IMPRINT_MISMATCH                    103
+#  define TS_R_NONCE_MISMATCH                              104
+#  define TS_R_NONCE_NOT_RETURNED                          105
+#  define TS_R_NO_CONTENT                                  106
+#  define TS_R_NO_TIME_STAMP_TOKEN                         107
+#  define TS_R_PKCS7_ADD_SIGNATURE_ERROR                   118
+#  define TS_R_PKCS7_ADD_SIGNED_ATTR_ERROR                 119
+#  define TS_R_PKCS7_TO_TS_TST_INFO_FAILED                 129
+#  define TS_R_POLICY_MISMATCH                             108
+#  define TS_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE      120
+#  define TS_R_RESPONSE_SETUP_ERROR                        121
+#  define TS_R_SIGNATURE_FAILURE                           109
+#  define TS_R_THERE_MUST_BE_ONE_SIGNER                    110
+#  define TS_R_TIME_SYSCALL_ERROR                          122
+#  define TS_R_TOKEN_NOT_PRESENT                           130
+#  define TS_R_TOKEN_PRESENT                               131
+#  define TS_R_TSA_NAME_MISMATCH                           111
+#  define TS_R_TSA_UNTRUSTED                               112
+#  define TS_R_TST_INFO_SETUP_ERROR                        123
+#  define TS_R_TS_DATASIGN                                 124
+#  define TS_R_UNACCEPTABLE_POLICY                         125
+#  define TS_R_UNSUPPORTED_MD_ALGORITHM                    126
+#  define TS_R_UNSUPPORTED_VERSION                         113
+#  define TS_R_VAR_BAD_VALUE                               135
+#  define TS_R_VAR_LOOKUP_FAILURE                          136
+#  define TS_R_WRONG_CONTENT_TYPE                          114
 
+# endif
 #endif
diff --git a/util/mkerr.pl b/util/mkerr.pl
index 52a44c9..1740e40 100755
--- a/util/mkerr.pl
+++ b/util/mkerr.pl
@@ -9,6 +9,9 @@
 use strict;
 use warnings;
 
+use lib ".";
+use configdata;
+
 my $config       = "crypto/err/openssl.ec";
 my $debug        = 0;
 my $internal     = 0;
@@ -430,6 +433,9 @@ foreach my $lib ( keys %errorfile ) {
     my @function = sort grep( /^${lib}_/, keys %fcodes );
     my @reasons  = sort grep( /^${lib}_/, keys %rcodes );
 
+    # indent level for innermost preprocessor lines
+    my $indent = " ";
+
     # Rewrite the header file
 
     my $hfile = $hinc{$lib};
@@ -453,14 +459,24 @@ EOF
     if ( $internal ) {
         # Declare the load function because the generate C file
         # includes "fooerr.h" not "foo.h"
+        if ($lib ne "SSL" && $lib ne "ASYNC"
+                && grep { $lib eq uc $_ } @disablables) {
+            print OUT <<"EOF";
+# include <openssl/opensslconf.h>
+
+# ifndef OPENSSL_NO_${lib}
+
+EOF
+            $indent = "  ";
+        }
         print OUT <<"EOF";
-# ifdef  __cplusplus
+#${indent}ifdef  __cplusplus
 extern \"C\" {
-# endif
+#${indent}endif
 int ERR_load_${lib}_strings(void);
-# ifdef  __cplusplus
+#${indent}ifdef  __cplusplus
 }
-# endif
+#${indent}endif
 EOF
     } else {
         print OUT <<"EOF";
@@ -498,7 +514,7 @@ EOF
             $fassigned{$lib} .= "$findcode:";
             print STDERR "New Function code $i\n" if $debug;
         }
-        printf OUT "# define $i%s $fcodes{$i}\n", " " x $z;
+        printf OUT "#${indent}define $i%s $fcodes{$i}\n", " " x $z;
     }
 
     print OUT "\n/*\n * $lib reason codes.\n */\n";
@@ -516,11 +532,14 @@ EOF
             $rassigned{$lib} .= "$findcode:";
             print STDERR "New Reason code $i\n" if $debug;
         }
-        printf OUT "# define $i%s $rcodes{$i}\n", " " x $z;
+        printf OUT "#${indent}define $i%s $rcodes{$i}\n", " " x $z;
     }
     print OUT "\n";
 
-    print OUT "#endif\n";
+    while (length($indent) > 0) {
+        $indent = substr $indent, 0, -1;
+        print OUT "#${indent}endif\n";
+    }
 
     # Rewrite the C source file containing the error details.
 

From levitte at openssl.org  Wed Feb  7 21:24:20 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 07 Feb 2018 21:24:20 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518038660.850046.32046.nullmailer@dev.openssl.org>

The branch master has been updated
       via  c517ac4c3f6d48cf35b75f148515ce7f3677a03b (commit)
      from  048ebccb8840f7abd90adc59654d959feb25715b (commit)


- Log -----------------------------------------------------------------
commit c517ac4c3f6d48cf35b75f148515ce7f3677a03b
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 22:18:44 2018 +0100

    Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
    
    It turns out that even if you successfully build the engine, it might
    not load properly, so we cannot make the test program fail for it.
    
    See the message in commit 25b9d11c002e5c71840c2a6733c5009d78f2c9db
    
    This reverts commit 227a1e3f45bf06fdb00f2bdfb922f6f0d1f1d1de.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5276)

-----------------------------------------------------------------------

Summary of changes:
 test/afalgtest.c | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/test/afalgtest.c b/test/afalgtest.c
index bf90545..adb2977 100644
--- a/test/afalgtest.c
+++ b/test/afalgtest.c
@@ -128,14 +128,14 @@ int global_init(void)
 int setup_tests(void)
 {
 #ifndef OPENSSL_NO_ENGINE
-    if (!TEST_ptr(e = ENGINE_by_id("afalg"))) {
+    if ((e = ENGINE_by_id("afalg")) == NULL) {
         /* Probably a platform env issue, not a test failure. */
-        TEST_info("Can't load AFALG engine, you might want to check $OPENSSL_ENGINES");
-        return 0;
-    }
+        TEST_info("Can't load AFALG engine");
+    } else {
 # ifndef OPENSSL_NO_AFALGENG
-    ADD_ALL_TESTS(test_afalg_aes_cbc, 3);
+        ADD_ALL_TESTS(test_afalg_aes_cbc, 3);
 # endif
+    }
 #endif
 
     return 1;

From levitte at openssl.org  Wed Feb  7 21:32:54 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 07 Feb 2018 21:32:54 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518039174.108531.1103.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  db5ec96acd4e65bca886f2ef09316a7fb0aa8cac (commit)
      from  4bcc6a1f5557ceb1e335d39bac308b9cd64f40cd (commit)


- Log -----------------------------------------------------------------
commit db5ec96acd4e65bca886f2ef09316a7fb0aa8cac
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 19:56:57 2018 +0100

    Make all private functions in e_afalg.c static
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5273)

-----------------------------------------------------------------------

Summary of changes:
 engines/afalg/e_afalg.c | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/engines/afalg/e_afalg.c b/engines/afalg/e_afalg.c
index 20ac978..05ad905 100644
--- a/engines/afalg/e_afalg.c
+++ b/engines/afalg/e_afalg.c
@@ -80,7 +80,7 @@ static int afalg_create_sk(afalg_ctx *actx, const char *ciphertype,
 static int afalg_destroy(ENGINE *e);
 static int afalg_init(ENGINE *e);
 static int afalg_finish(ENGINE *e);
-const EVP_CIPHER *afalg_aes_128_cbc(void);
+static const EVP_CIPHER *afalg_aes_128_cbc(void);
 static int afalg_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
                          const int **nids, int nid);
 static int afalg_cipher_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
@@ -191,7 +191,7 @@ static int afalg_setup_async_event_notification(afalg_aio *aio)
     return 1;
 }
 
-int afalg_init_aio(afalg_aio *aio)
+static int afalg_init_aio(afalg_aio *aio)
 {
     int r = -1;
 
@@ -211,8 +211,8 @@ int afalg_init_aio(afalg_aio *aio)
     return 1;
 }
 
-int afalg_fin_cipher_aio(afalg_aio *aio, int sfd, unsigned char *buf,
-                         size_t len)
+static int afalg_fin_cipher_aio(afalg_aio *aio, int sfd, unsigned char *buf,
+                                size_t len)
 {
     int r;
     int retry = 0;
@@ -639,7 +639,7 @@ static int afalg_cipher_cleanup(EVP_CIPHER_CTX *ctx)
     return 1;
 }
 
-const EVP_CIPHER *afalg_aes_128_cbc(void)
+static const EVP_CIPHER *afalg_aes_128_cbc(void)
 {
     if (_hidden_aes_128_cbc == NULL
         && ((_hidden_aes_128_cbc =

From matt at openssl.org  Wed Feb  7 21:41:49 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 07 Feb 2018 21:41:49 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518039709.850345.3740.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4af26979480a42e267ff686210bb63b1ebdd0eab (commit)
       via  04e3bb045f9b407d1ec681cfbeab4da8e53d750a (commit)
       via  0f41dc0e9e9e6a8c2a43fa6af5fdf5359283e2ba (commit)
       via  f518cef40c431188b4910ca9bd8ef3778f599bb5 (commit)
      from  c517ac4c3f6d48cf35b75f148515ce7f3677a03b (commit)


- Log -----------------------------------------------------------------
commit 4af26979480a42e267ff686210bb63b1ebdd0eab
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 14:53:31 2018 +0000

    Don't run tls13encryptiontest on a shared Windows build
    
    tls13encryptiontest is an "internal" test. As with all the other internal
    tests it should not be run on a shared native Windows build.
    
    [extended tests]
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5266)

commit 04e3bb045f9b407d1ec681cfbeab4da8e53d750a
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 14:20:31 2018 +0000

    Fix some undefined behaviour in ossltest engine
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5266)

commit 0f41dc0e9e9e6a8c2a43fa6af5fdf5359283e2ba
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 10:55:02 2018 +0000

    Fix clienthellotest with TLSv1.3
    
    If TLSv1.3 is enabled and combined with other options that extend the
    size of the ClientHello, then the clienthello test can sometimes fail
    because the ClientHello has grown too large. Part of the purpose of the
    test is to check that the padding extension works properly. This requires
    the ClientHello size to be kept within certain bounds.
    
    By restricting the number of ciphersuites sent we can reduce the size of
    the ClientHello.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5266)

commit f518cef40c431188b4910ca9bd8ef3778f599bb5
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 6 17:27:25 2018 +0000

    Enable TLSv1.3 by default
    
    [extended tests]
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5266)

-----------------------------------------------------------------------

Summary of changes:
 .travis.yml                             |    2 +-
 CHANGES                                 |   20 +
 Configure                               |    2 -
 INSTALL                                 |   27 +-
 NEWS                                    |    1 +
 engines/e_ossltest.c                    |   16 +-
 test/clienthellotest.c                  |    9 +
 test/recipes/80-test_ssl_new.t          |    2 +-
 test/recipes/90-test_tls13encryption.t  |    3 +
 test/ssl-tests/02-protocol-version.conf |  478 ++++++----
 test/ssl-tests/10-resumption.conf       | 1473 ++++++++++++++++++++++++++-----
 test/ssl-tests/20-cert-select.conf      |  543 +++++++++++-
 test/ssl-tests/22-compression.conf      |  178 +++-
 13 files changed, 2290 insertions(+), 464 deletions(-)

diff --git a/.travis.yml b/.travis.yml
index b361059..cfc11b6 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -43,7 +43,7 @@ matrix:
                   sources:
                       - ubuntu-toolchain-r-test
           compiler: gcc-5
-          env: CONFIG_OPTS="--strict-warnings enable-tls1_3" TESTS="-test_fuzz" COMMENT="Move to the BORINGTEST build when interoperable"
+          env: CONFIG_OPTS="--strict-warnings" TESTS="-test_fuzz" COMMENT="Move to the BORINGTEST build when interoperable"
         - os: linux
           compiler: clang-3.9
           env: CONFIG_OPTS="--strict-warnings no-deprecated" BUILDONLY="yes"
diff --git a/CHANGES b/CHANGES
index f0807c6..178c6c4 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,26 @@
 
  Changes between 1.1.0f and 1.1.1 [xx XXX xxxx]
 
+  *) Support for TLSv1.3 added. Note that users upgrading from an earlier
+     version of OpenSSL should review their configuration settings to ensure
+     that they are still appropriate for TLSv1.3. In particular if no TLSv1.3
+     ciphersuites are enabled then OpenSSL will refuse to make a connection
+     unless (1) TLSv1.3 is explicitly disabled or (2) the ciphersuite
+     configuration is updated to include suitable ciphersuites. The DEFAULT
+     ciphersuite configuration does include TLSv1.3 ciphersuites. For further
+     information on this and other related issues please see:
+     https://www.openssl.org/blog/blog/2017/05/04/tlsv1.3/
+
+     NOTE: In this pre-release of OpenSSL a draft version of the
+     TLSv1.3 standard has been implemented. Implementations of different draft
+     versions of the standard do not inter-operate, and this version will not
+     inter-operate with an implementation of the final standard when it is
+     eventually published. Different pre-release versions may implement
+     different versions of the draft. The final version of OpenSSL 1.1.1 will
+     implement the final version of the standard.
+     TODO(TLS1.3): Remove the above note before final release
+     [Matt Caswell]
+
   *) Changed Configure so it only says what it does and doesn't dump
      so much data.  Instead, ./configdata.pm should be used as a script
      to display all sorts of configuration data.
diff --git a/Configure b/Configure
index a6f5a31..c90a66c 100755
--- a/Configure
+++ b/Configure
@@ -435,8 +435,6 @@ our %disabled = ( # "what"         => "comment"
 		  "ssl3"                => "default",
 		  "ssl3-method"         => "default",
                   "ubsan"		=> "default",
-          #TODO(TLS1.3): Temporarily disabled while this is a WIP
-		  "tls1_3"              => "default",
 		  "tls13downgrade"      => "default",
 		  "unit-test"           => "default",
 		  "weak-ssl-ciphers"    => "default",
diff --git a/INSTALL b/INSTALL
index 48c25e6..9d1f90d 100644
--- a/INSTALL
+++ b/INSTALL
@@ -482,27 +482,24 @@
                    likely to complement configuration command line with
                    suitable compiler-specific option.
 
-  enable-tls1_3
-                   TODO(TLS1.3): Make this enabled by default
-                   Build support for TLS1.3. Note: This is a WIP feature and
-                   only a single draft version is supported.  Implementations
-                   of different draft versions will negotiate TLS 1.2 instead
-                   of (draft) TLS 1.3.  Use with caution!!
-
   no-<prot>
                    Don't build support for negotiating the specified SSL/TLS
-                   protocol (one of ssl, ssl3, tls, tls1, tls1_1, tls1_2, dtls,
-                   dtls1 or dtls1_2). If "no-tls" is selected then all of tls1,
-                   tls1_1 and tls1_2 are disabled. Similarly "no-dtls" will
-                   disable dtls1 and dtls1_2. The "no-ssl" option is synonymous
-                   with "no-ssl3". Note this only affects version negotiation.
-                   OpenSSL will still provide the methods for applications to
-                   explicitly select the individual protocol versions.
+                   protocol (one of ssl, ssl3, tls, tls1, tls1_1, tls1_2,
+                   tls1_3, dtls, dtls1 or dtls1_2). If "no-tls" is selected then
+                   all of tls1, tls1_1, tls1_2 and tls1_3 are disabled.
+                   Similarly "no-dtls" will disable dtls1 and dtls1_2. The
+                   "no-ssl" option is synonymous with "no-ssl3". Note this only
+                   affects version negotiation. OpenSSL will still provide the
+                   methods for applications to explicitly select the individual
+                   protocol versions.
 
   no-<prot>-method
                    As for no-<prot> but in addition do not build the methods for
                    applications to explicitly select individual protocol
-                   versions.
+                   versions. Note that there is no "no-tls1_3-method" option
+                   because there is no application method for TLSv1.3. Using
+                   invidivial protocol methods directly is deprecated.
+                   Applications should use TLS_method() instead.
 
   enable-<alg>
                    Build with support for the specified algorithm, where <alg>
diff --git a/NEWS b/NEWS
index 0fb5314..425fbd5 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,7 @@
 
   Major changes between OpenSSL 1.1.0f and OpenSSL 1.1.1 [under development]
 
+      o Support for TLSv1.3 added
       o Move the display of configuration data to configdata.pm.
       o Allow GNU style "make variables" to be used with Configure.
       o Add a STORE module (OSSL_STORE)
diff --git a/engines/e_ossltest.c b/engines/e_ossltest.c
index d3d6998..8fc056a 100644
--- a/engines/e_ossltest.c
+++ b/engines/e_ossltest.c
@@ -593,17 +593,21 @@ int ossltest_aes128_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
     int ret;
 
     tmpbuf = OPENSSL_malloc(inl);
-    if (tmpbuf == NULL)
+
+    /* OPENSSL_malloc will return NULL if inl == 0 */
+    if (tmpbuf == NULL && inl > 0)
         return -1;
 
     /* Remember what we were asked to encrypt */
-    memcpy(tmpbuf, in, inl);
+    if (tmpbuf != NULL)
+        memcpy(tmpbuf, in, inl);
 
     /* Go through the motions of encrypting it */
     ret = EVP_CIPHER_meth_get_do_cipher(EVP_aes_128_cbc())(ctx, out, in, inl);
 
     /* Throw it all away and just use the plaintext as the output */
-    memcpy(out, tmpbuf, inl);
+    if (tmpbuf != NULL)
+        memcpy(out, tmpbuf, inl);
     OPENSSL_free(tmpbuf);
 
     return ret;
@@ -626,13 +630,15 @@ int ossltest_aes128_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
         return -1;
 
     /* Remember what we were asked to encrypt */
-    memcpy(tmpbuf, in, inl);
+    if (tmpbuf != NULL)
+        memcpy(tmpbuf, in, inl);
 
     /* Go through the motions of encrypting it */
     EVP_CIPHER_meth_get_do_cipher(EVP_aes_128_gcm())(ctx, out, in, inl);
 
     /* Throw it all away and just use the plaintext as the output */
-    memcpy(out, tmpbuf, inl);
+    if (tmpbuf != NULL)
+        memcpy(out, tmpbuf, inl);
     OPENSSL_free(tmpbuf);
 
     return inl;
diff --git a/test/clienthellotest.c b/test/clienthellotest.c
index 88e0a1c..f3e9588 100644
--- a/test/clienthellotest.c
+++ b/test/clienthellotest.c
@@ -87,6 +87,15 @@ static int test_client_hello(int currtest)
         break;
 
     case TEST_ADD_PADDING_AND_PSK:
+        /*
+         * In this case we're doing TLSv1.3 and we're sending a PSK so the
+         * ClientHello is already going to be quite long. To avoid getting one
+         * that is too long for this test we use a restricted ciphersuite list
+         */
+        if (!TEST_true(SSL_CTX_set_cipher_list(ctx,
+                                               "TLS13-AES-128-GCM-SHA256")))
+            goto end;
+         /* Fall through */
     case TEST_ADD_PADDING:
     case TEST_PADDING_NOT_NEEDED:
         SSL_CTX_set_options(ctx, SSL_OP_TLSEXT_PADDING);
diff --git a/test/recipes/80-test_ssl_new.t b/test/recipes/80-test_ssl_new.t
index be03388..26bcb39 100644
--- a/test/recipes/80-test_ssl_new.t
+++ b/test/recipes/80-test_ssl_new.t
@@ -34,7 +34,7 @@ plan tests => 26;  # = scalar @conf_srcs
 # verify generated sources in the default configuration.
 my $is_default_tls = (disabled("ssl3") && !disabled("tls1") &&
                       !disabled("tls1_1") && !disabled("tls1_2") &&
-                      disabled("tls1_3"));
+                      !disabled("tls1_3"));
 
 my $is_default_dtls = (!disabled("dtls1") && !disabled("dtls1_2"));
 
diff --git a/test/recipes/90-test_tls13encryption.t b/test/recipes/90-test_tls13encryption.t
index 63e62db..3fb4810 100644
--- a/test/recipes/90-test_tls13encryption.t
+++ b/test/recipes/90-test_tls13encryption.t
@@ -15,6 +15,9 @@ setup($test_name);
 plan skip_all => "$test_name is not supported in this build"
     if disabled("tls1_3");
 
+plan skip_all => "This test is unsupported in a shared library build on Windows"
+    if $^O eq 'MSWin32' && !disabled("shared");
+
 plan tests => 1;
 
 ok(run(test(["tls13encryptiontest"])), "running tls13encryptiontest");
diff --git a/test/ssl-tests/02-protocol-version.conf b/test/ssl-tests/02-protocol-version.conf
index f18d6a3..d0a64cd 100644
--- a/test/ssl-tests/02-protocol-version.conf
+++ b/test/ssl-tests/02-protocol-version.conf
@@ -1,6 +1,6 @@
 # Generated with generate_ssl_tests.pl
 
-num_tests = 676
+num_tests = 678
 
 test-0 = 0-version-negotiation
 test-1 = 1-version-negotiation
@@ -678,6 +678,8 @@ test-672 = 672-version-negotiation
 test-673 = 673-version-negotiation
 test-674 = 674-version-negotiation
 test-675 = 675-version-negotiation
+test-676 = 676-ciphersuite-sanity-check-client
+test-677 = 677-ciphersuite-sanity-check-server
 # ===========================================================
 
 [0-version-negotiation]
@@ -3515,7 +3517,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-108]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3540,7 +3542,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-109]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3674,7 +3676,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-114]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3700,7 +3702,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-115]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3808,7 +3810,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-119]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3834,7 +3836,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-120]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3915,7 +3917,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-123]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3941,7 +3943,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-124]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -3995,7 +3997,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-126]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4021,7 +4023,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-127]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4048,7 +4050,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-128]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -4073,7 +4076,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-129]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -4196,7 +4200,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-134]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4220,7 +4224,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-135]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4349,7 +4353,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-140]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4374,7 +4378,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-141]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4478,7 +4482,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-145]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4503,7 +4507,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-146]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4581,7 +4585,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-149]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4606,7 +4610,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-150]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4658,7 +4662,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-152]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4683,7 +4687,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-153]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -4709,7 +4713,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-154]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -4733,7 +4738,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-155]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -7682,7 +7688,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-264]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -7708,7 +7714,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-265]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -7847,7 +7853,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-270]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -7874,7 +7880,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-271]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -7986,7 +7992,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-275]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8013,7 +8019,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-276]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8097,7 +8103,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-279]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8124,7 +8130,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-280]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8180,7 +8186,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-282]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8207,7 +8213,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-283]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8235,7 +8241,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-284]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -8261,7 +8268,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-285]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -8389,7 +8397,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-290]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8414,7 +8422,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-291]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8548,7 +8556,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-296]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8574,7 +8582,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-297]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8682,7 +8690,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-301]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8708,7 +8716,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-302]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8789,7 +8797,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-305]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8815,7 +8823,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-306]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8869,7 +8877,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-308]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8895,7 +8903,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-309]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -8922,7 +8930,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-310]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -8947,7 +8956,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-311]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -11206,7 +11216,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-394]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11232,7 +11242,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-395]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11371,7 +11381,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-400]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11398,7 +11408,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-401]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11510,7 +11520,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-405]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11537,7 +11547,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-406]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11621,7 +11631,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-409]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11648,7 +11658,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-410]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11704,7 +11714,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-412]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11731,7 +11741,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-413]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11759,7 +11769,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-414]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -11785,7 +11796,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-415]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -11913,7 +11925,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-420]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -11938,7 +11950,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-421]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12072,7 +12084,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-426]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12098,7 +12110,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-427]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12206,7 +12218,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-431]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12232,7 +12244,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-432]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12313,7 +12325,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-435]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12339,7 +12351,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-436]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12393,7 +12405,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-438]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12419,7 +12431,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-439]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -12446,7 +12458,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-440]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -12471,7 +12484,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-441]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -13938,7 +13952,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-495]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -14018,7 +14032,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-498]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14044,7 +14058,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-499]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14099,7 +14113,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-501]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -14182,7 +14196,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-504]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14209,7 +14223,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-505]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14237,7 +14251,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-506]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -14320,7 +14334,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-509]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14347,7 +14361,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-510]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14431,7 +14445,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-513]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14458,7 +14472,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-514]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14514,7 +14528,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-516]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14541,7 +14555,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-517]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14569,7 +14583,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-518]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -14595,7 +14610,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-519]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -14645,7 +14661,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-521]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -14722,7 +14738,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-524]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14747,7 +14763,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-525]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14800,7 +14816,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-527]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -14880,7 +14896,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-530]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14906,7 +14922,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-531]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -14933,7 +14949,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-532]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -15013,7 +15029,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-535]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -15039,7 +15055,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-536]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -15120,7 +15136,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-539]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -15146,7 +15162,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-540]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -15200,7 +15216,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-542]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -15226,7 +15242,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-543]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -15253,7 +15269,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-544]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -15278,7 +15295,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-545]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -16035,7 +16053,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-573]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16061,7 +16079,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-574]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16114,7 +16132,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-576]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16140,7 +16158,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-577]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16195,7 +16213,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-579]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16222,7 +16240,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-580]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16277,7 +16295,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-582]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16304,7 +16322,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-583]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16332,7 +16350,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-584]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16359,7 +16377,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-585]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16414,7 +16432,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-587]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16441,7 +16459,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-588]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16469,7 +16487,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-589]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16524,7 +16542,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-591]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16551,7 +16569,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-592]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16607,7 +16625,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-594]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16634,7 +16652,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-595]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16662,7 +16680,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-596]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -16688,7 +16707,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-597]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -16738,7 +16758,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-599]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16763,7 +16783,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-600]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16814,7 +16834,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-602]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16839,7 +16859,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-603]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16892,7 +16912,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-605]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16918,7 +16938,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-606]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -16971,7 +16991,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-608]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -16997,7 +17017,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-609]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -17024,7 +17044,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-610]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17050,7 +17070,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-611]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17103,7 +17123,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-613]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -17129,7 +17149,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-614]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -17156,7 +17176,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-615]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17209,7 +17229,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-617]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -17235,7 +17255,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-618]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -17289,7 +17309,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-620]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -17315,7 +17335,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-621]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 ExpectedResult = Success
 
 
@@ -17342,7 +17362,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-622]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17367,7 +17388,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-623]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17393,7 +17415,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-624]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17419,7 +17441,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-625]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17445,7 +17467,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-626]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17471,7 +17493,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-627]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17497,7 +17519,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-628]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17522,7 +17545,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-629]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17549,7 +17573,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-630]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17576,7 +17600,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-631]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17603,7 +17627,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-632]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17630,7 +17654,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-633]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17657,7 +17681,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-634]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17683,7 +17708,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-635]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17710,7 +17736,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-636]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17737,7 +17763,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-637]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17764,7 +17790,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-638]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17791,7 +17817,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-639]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17817,7 +17844,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-640]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17844,7 +17872,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-641]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17871,7 +17899,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-642]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17898,7 +17926,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-643]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17924,7 +17953,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-644]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -17951,7 +17981,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-645]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -17978,7 +18008,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-646]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18004,7 +18035,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-647]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18031,7 +18063,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-648]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18057,7 +18090,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-649]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18082,7 +18116,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-650]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18107,7 +18141,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-651]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18132,7 +18166,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-652]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18157,7 +18191,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-653]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18182,7 +18216,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-654]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18206,7 +18241,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-655]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18232,7 +18268,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-656]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18258,7 +18294,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-657]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18284,7 +18320,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-658]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18310,7 +18346,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-659]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18336,7 +18372,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-660]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18361,7 +18398,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-661]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18387,7 +18425,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-662]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18413,7 +18451,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-663]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18439,7 +18477,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-664]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18465,7 +18503,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-665]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18490,7 +18529,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-666]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18516,7 +18556,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-667]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18542,7 +18582,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-668]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18568,7 +18608,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-669]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18593,7 +18634,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-670]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18619,7 +18661,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-671]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
 
 
 # ===========================================================
@@ -18645,7 +18687,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-672]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18670,7 +18713,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-673]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18696,7 +18740,8 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-674]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
 
 
 # ===========================================================
@@ -18721,6 +18766,55 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-675]
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[676-ciphersuite-sanity-check-client]
+ssl_conf = 676-ciphersuite-sanity-check-client-ssl
+
+[676-ciphersuite-sanity-check-client-ssl]
+server = 676-ciphersuite-sanity-check-client-server
+client = 676-ciphersuite-sanity-check-client-client
+
+[676-ciphersuite-sanity-check-client-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[676-ciphersuite-sanity-check-client-client]
+CipherString = AES128-SHA
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-676]
 ExpectedResult = ClientFail
 
 
+# ===========================================================
+
+[677-ciphersuite-sanity-check-server]
+ssl_conf = 677-ciphersuite-sanity-check-server-ssl
+
+[677-ciphersuite-sanity-check-server-ssl]
+server = 677-ciphersuite-sanity-check-server-server
+client = 677-ciphersuite-sanity-check-server-client
+
+[677-ciphersuite-sanity-check-server-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = AES128-SHA
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[677-ciphersuite-sanity-check-server-client]
+CipherString = AES128-SHA
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-677]
+ExpectedResult = ServerFail
+
+
diff --git a/test/ssl-tests/10-resumption.conf b/test/ssl-tests/10-resumption.conf
index b2deee4..73955de 100644
--- a/test/ssl-tests/10-resumption.conf
+++ b/test/ssl-tests/10-resumption.conf
@@ -1,6 +1,6 @@
 # Generated with generate_ssl_tests.pl
 
-num_tests = 36
+num_tests = 65
 
 test-0 = 0-resumption
 test-1 = 1-resumption
@@ -38,6 +38,35 @@ test-32 = 32-resumption
 test-33 = 33-resumption
 test-34 = 34-resumption
 test-35 = 35-resumption
+test-36 = 36-resumption
+test-37 = 37-resumption
+test-38 = 38-resumption
+test-39 = 39-resumption
+test-40 = 40-resumption
+test-41 = 41-resumption
+test-42 = 42-resumption
+test-43 = 43-resumption
+test-44 = 44-resumption
+test-45 = 45-resumption
+test-46 = 46-resumption
+test-47 = 47-resumption
+test-48 = 48-resumption
+test-49 = 49-resumption
+test-50 = 50-resumption
+test-51 = 51-resumption
+test-52 = 52-resumption
+test-53 = 53-resumption
+test-54 = 54-resumption
+test-55 = 55-resumption
+test-56 = 56-resumption
+test-57 = 57-resumption
+test-58 = 58-resumption
+test-59 = 59-resumption
+test-60 = 60-resumption
+test-61 = 61-resumption
+test-62 = 62-resumption
+test-63 = 63-resumption
+test-64 = 64-resumption-with-hrr
 # ===========================================================
 
 [0-resumption]
@@ -268,15 +297,15 @@ resume-client = 6-resumption-client
 [6-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [6-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
+MaxProtocol = TLSv1.3
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [6-resumption-client]
@@ -285,7 +314,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-6]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -304,15 +333,15 @@ resume-client = 7-resumption-client
 [7-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [7-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
+MaxProtocol = TLSv1.3
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [7-resumption-client]
@@ -321,7 +350,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-7]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -348,7 +377,7 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 [8-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
+MaxProtocol = TLSv1
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [8-resumption-client]
@@ -357,9 +386,9 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-8]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -384,7 +413,7 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 [9-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
+MaxProtocol = TLSv1
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [9-resumption-client]
@@ -393,9 +422,9 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-9]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -420,7 +449,7 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 [10-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [10-resumption-client]
@@ -429,9 +458,9 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-10]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.1
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -456,7 +485,7 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 [11-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [11-resumption-client]
@@ -465,9 +494,9 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-11]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.1
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -484,15 +513,15 @@ resume-client = 12-resumption-client
 [12-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [12-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
+MaxProtocol = TLSv1.2
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [12-resumption-client]
@@ -501,7 +530,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-12]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.2
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -520,15 +549,15 @@ resume-client = 13-resumption-client
 [13-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [13-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
+MaxProtocol = TLSv1.2
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [13-resumption-client]
@@ -537,7 +566,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-13]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.2
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -556,15 +585,15 @@ resume-client = 14-resumption-client
 [14-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [14-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
+MaxProtocol = TLSv1.3
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [14-resumption-client]
@@ -573,7 +602,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-14]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -592,15 +621,15 @@ resume-client = 15-resumption-client
 [15-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [15-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
+MaxProtocol = TLSv1.3
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [15-resumption-client]
@@ -609,7 +638,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-15]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -636,7 +665,7 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 [16-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
+MaxProtocol = TLSv1
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [16-resumption-client]
@@ -645,9 +674,9 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-16]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -672,7 +701,7 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 [17-resumption-resume-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
+MaxProtocol = TLSv1
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [17-resumption-client]
@@ -681,9 +710,9 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-17]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -694,32 +723,32 @@ ssl_conf = 18-resumption-ssl
 [18-resumption-ssl]
 server = 18-resumption-server
 client = 18-resumption-client
-resume-server = 18-resumption-server
-resume-client = 18-resumption-resume-client
+resume-server = 18-resumption-resume-server
+resume-client = 18-resumption-client
 
 [18-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[18-resumption-client]
+[18-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
-MinProtocol = TLSv1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.1
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[18-resumption-resume-client]
+[18-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-18]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -730,32 +759,32 @@ ssl_conf = 19-resumption-ssl
 [19-resumption-ssl]
 server = 19-resumption-server
 client = 19-resumption-client
-resume-server = 19-resumption-server
-resume-client = 19-resumption-resume-client
+resume-server = 19-resumption-resume-server
+resume-client = 19-resumption-client
 
 [19-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[19-resumption-client]
+[19-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
-MinProtocol = TLSv1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.1
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[19-resumption-resume-client]
+[19-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-19]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -766,32 +795,32 @@ ssl_conf = 20-resumption-ssl
 [20-resumption-ssl]
 server = 20-resumption-server
 client = 20-resumption-client
-resume-server = 20-resumption-server
-resume-client = 20-resumption-resume-client
+resume-server = 20-resumption-resume-server
+resume-client = 20-resumption-client
 
 [20-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[20-resumption-client]
+[20-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
-MinProtocol = TLSv1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.2
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[20-resumption-resume-client]
+[20-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-20]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1.2
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -802,32 +831,32 @@ ssl_conf = 21-resumption-ssl
 [21-resumption-ssl]
 server = 21-resumption-server
 client = 21-resumption-client
-resume-server = 21-resumption-server
-resume-client = 21-resumption-resume-client
+resume-server = 21-resumption-resume-server
+resume-client = 21-resumption-client
 
 [21-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[21-resumption-client]
+[21-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
-MinProtocol = TLSv1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.2
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[21-resumption-resume-client]
+[21-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-21]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1.2
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -838,30 +867,30 @@ ssl_conf = 22-resumption-ssl
 [22-resumption-ssl]
 server = 22-resumption-server
 client = 22-resumption-client
-resume-server = 22-resumption-server
-resume-client = 22-resumption-resume-client
+resume-server = 22-resumption-resume-server
+resume-client = 22-resumption-client
 
 [22-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[22-resumption-client]
+[22-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
-MinProtocol = TLSv1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[22-resumption-resume-client]
+[22-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-22]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -874,30 +903,30 @@ ssl_conf = 23-resumption-ssl
 [23-resumption-ssl]
 server = 23-resumption-server
 client = 23-resumption-client
-resume-server = 23-resumption-server
-resume-client = 23-resumption-resume-client
+resume-server = 23-resumption-resume-server
+resume-client = 23-resumption-client
 
 [23-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[23-resumption-client]
+[23-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1
-MinProtocol = TLSv1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[23-resumption-resume-client]
+[23-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-23]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
 ResumptionExpected = No
 
@@ -910,25 +939,25 @@ ssl_conf = 24-resumption-ssl
 [24-resumption-ssl]
 server = 24-resumption-server
 client = 24-resumption-client
-resume-server = 24-resumption-server
-resume-client = 24-resumption-resume-client
+resume-server = 24-resumption-resume-server
+resume-client = 24-resumption-client
 
 [24-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[24-resumption-client]
+[24-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[24-resumption-resume-client]
+[24-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
@@ -946,25 +975,25 @@ ssl_conf = 25-resumption-ssl
 [25-resumption-ssl]
 server = 25-resumption-server
 client = 25-resumption-client
-resume-server = 25-resumption-server
-resume-client = 25-resumption-resume-client
+resume-server = 25-resumption-resume-server
+resume-client = 25-resumption-client
 
 [25-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[25-resumption-client]
+[25-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[25-resumption-resume-client]
+[25-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
@@ -982,32 +1011,32 @@ ssl_conf = 26-resumption-ssl
 [26-resumption-ssl]
 server = 26-resumption-server
 client = 26-resumption-client
-resume-server = 26-resumption-server
-resume-client = 26-resumption-resume-client
+resume-server = 26-resumption-resume-server
+resume-client = 26-resumption-client
 
 [26-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[26-resumption-client]
+[26-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
 MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[26-resumption-resume-client]
+[26-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-26]
 ExpectedProtocol = TLSv1.1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -1018,32 +1047,32 @@ ssl_conf = 27-resumption-ssl
 [27-resumption-ssl]
 server = 27-resumption-server
 client = 27-resumption-client
-resume-server = 27-resumption-server
-resume-client = 27-resumption-resume-client
+resume-server = 27-resumption-resume-server
+resume-client = 27-resumption-client
 
 [27-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[27-resumption-client]
+[27-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
 MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[27-resumption-resume-client]
+[27-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-27]
 ExpectedProtocol = TLSv1.1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -1054,25 +1083,25 @@ ssl_conf = 28-resumption-ssl
 [28-resumption-ssl]
 server = 28-resumption-server
 client = 28-resumption-client
-resume-server = 28-resumption-server
-resume-client = 28-resumption-resume-client
+resume-server = 28-resumption-resume-server
+resume-client = 28-resumption-client
 
 [28-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[28-resumption-client]
+[28-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.2
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[28-resumption-resume-client]
+[28-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
@@ -1090,25 +1119,25 @@ ssl_conf = 29-resumption-ssl
 [29-resumption-ssl]
 server = 29-resumption-server
 client = 29-resumption-client
-resume-server = 29-resumption-server
-resume-client = 29-resumption-resume-client
+resume-server = 29-resumption-resume-server
+resume-client = 29-resumption-client
 
 [29-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[29-resumption-client]
+[29-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
-MinProtocol = TLSv1.1
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.2
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[29-resumption-resume-client]
+[29-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
@@ -1126,32 +1155,32 @@ ssl_conf = 30-resumption-ssl
 [30-resumption-ssl]
 server = 30-resumption-server
 client = 30-resumption-client
-resume-server = 30-resumption-server
-resume-client = 30-resumption-resume-client
+resume-server = 30-resumption-resume-server
+resume-client = 30-resumption-client
 
 [30-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[30-resumption-client]
+[30-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[30-resumption-resume-client]
+[30-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-30]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -1162,32 +1191,32 @@ ssl_conf = 31-resumption-ssl
 [31-resumption-ssl]
 server = 31-resumption-server
 client = 31-resumption-client
-resume-server = 31-resumption-server
-resume-client = 31-resumption-resume-client
+resume-server = 31-resumption-resume-server
+resume-client = 31-resumption-client
 
 [31-resumption-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
 Options = -SessionTicket
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[31-resumption-client]
+[31-resumption-resume-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
-VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
-VerifyMode = Peer
+MaxProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[31-resumption-resume-client]
+[31-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-31]
-ExpectedProtocol = TLSv1
+ExpectedProtocol = TLSv1.3
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -1209,21 +1238,21 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [32-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [32-resumption-resume-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
+MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-32]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -1245,21 +1274,21 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [33-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [33-resumption-resume-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.1
+MaxProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-33]
-ExpectedProtocol = TLSv1.1
+ExpectedProtocol = TLSv1
 HandshakeMode = Resume
-ResumptionExpected = No
+ResumptionExpected = Yes
 
 
 # ===========================================================
@@ -1281,21 +1310,21 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [34-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [34-resumption-resume-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-34]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.1
 HandshakeMode = Resume
-ResumptionExpected = Yes
+ResumptionExpected = No
 
 
 # ===========================================================
@@ -1317,20 +1346,1062 @@ PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
 [35-resumption-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
-MinProtocol = TLSv1.2
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [35-resumption-resume-client]
 CipherString = DEFAULT
-MaxProtocol = TLSv1.2
+MaxProtocol = TLSv1.1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
 [test-35]
+ExpectedProtocol = TLSv1.1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[36-resumption]
+ssl_conf = 36-resumption-ssl
+
+[36-resumption-ssl]
+server = 36-resumption-server
+client = 36-resumption-client
+resume-server = 36-resumption-server
+resume-client = 36-resumption-resume-client
+
+[36-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[36-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[36-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-36]
+ExpectedProtocol = TLSv1.2
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[37-resumption]
+ssl_conf = 37-resumption-ssl
+
+[37-resumption-ssl]
+server = 37-resumption-server
+client = 37-resumption-client
+resume-server = 37-resumption-server
+resume-client = 37-resumption-resume-client
+
+[37-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[37-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[37-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-37]
+ExpectedProtocol = TLSv1.2
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[38-resumption]
+ssl_conf = 38-resumption-ssl
+
+[38-resumption-ssl]
+server = 38-resumption-server
+client = 38-resumption-client
+resume-server = 38-resumption-server
+resume-client = 38-resumption-resume-client
+
+[38-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[38-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[38-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-38]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[39-resumption]
+ssl_conf = 39-resumption-ssl
+
+[39-resumption-ssl]
+server = 39-resumption-server
+client = 39-resumption-client
+resume-server = 39-resumption-server
+resume-client = 39-resumption-resume-client
+
+[39-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[39-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+MinProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[39-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-39]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[40-resumption]
+ssl_conf = 40-resumption-ssl
+
+[40-resumption-ssl]
+server = 40-resumption-server
+client = 40-resumption-client
+resume-server = 40-resumption-server
+resume-client = 40-resumption-resume-client
+
+[40-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[40-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[40-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-40]
+ExpectedProtocol = TLSv1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[41-resumption]
+ssl_conf = 41-resumption-ssl
+
+[41-resumption-ssl]
+server = 41-resumption-server
+client = 41-resumption-client
+resume-server = 41-resumption-server
+resume-client = 41-resumption-resume-client
+
+[41-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[41-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[41-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-41]
+ExpectedProtocol = TLSv1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[42-resumption]
+ssl_conf = 42-resumption-ssl
+
+[42-resumption-ssl]
+server = 42-resumption-server
+client = 42-resumption-client
+resume-server = 42-resumption-server
+resume-client = 42-resumption-resume-client
+
+[42-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[42-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[42-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-42]
+ExpectedProtocol = TLSv1.1
+HandshakeMode = Resume
+ResumptionExpected = Yes
+
+
+# ===========================================================
+
+[43-resumption]
+ssl_conf = 43-resumption-ssl
+
+[43-resumption-ssl]
+server = 43-resumption-server
+client = 43-resumption-client
+resume-server = 43-resumption-server
+resume-client = 43-resumption-resume-client
+
+[43-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[43-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[43-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-43]
+ExpectedProtocol = TLSv1.1
+HandshakeMode = Resume
+ResumptionExpected = Yes
+
+
+# ===========================================================
+
+[44-resumption]
+ssl_conf = 44-resumption-ssl
+
+[44-resumption-ssl]
+server = 44-resumption-server
+client = 44-resumption-client
+resume-server = 44-resumption-server
+resume-client = 44-resumption-resume-client
+
+[44-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[44-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[44-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-44]
 ExpectedProtocol = TLSv1.2
 HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[45-resumption]
+ssl_conf = 45-resumption-ssl
+
+[45-resumption-ssl]
+server = 45-resumption-server
+client = 45-resumption-client
+resume-server = 45-resumption-server
+resume-client = 45-resumption-resume-client
+
+[45-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[45-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[45-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-45]
+ExpectedProtocol = TLSv1.2
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[46-resumption]
+ssl_conf = 46-resumption-ssl
+
+[46-resumption-ssl]
+server = 46-resumption-server
+client = 46-resumption-client
+resume-server = 46-resumption-server
+resume-client = 46-resumption-resume-client
+
+[46-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[46-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[46-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-46]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[47-resumption]
+ssl_conf = 47-resumption-ssl
+
+[47-resumption-ssl]
+server = 47-resumption-server
+client = 47-resumption-client
+resume-server = 47-resumption-server
+resume-client = 47-resumption-resume-client
+
+[47-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[47-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+MinProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[47-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-47]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[48-resumption]
+ssl_conf = 48-resumption-ssl
+
+[48-resumption-ssl]
+server = 48-resumption-server
+client = 48-resumption-client
+resume-server = 48-resumption-server
+resume-client = 48-resumption-resume-client
+
+[48-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[48-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[48-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-48]
+ExpectedProtocol = TLSv1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[49-resumption]
+ssl_conf = 49-resumption-ssl
+
+[49-resumption-ssl]
+server = 49-resumption-server
+client = 49-resumption-client
+resume-server = 49-resumption-server
+resume-client = 49-resumption-resume-client
+
+[49-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[49-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[49-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-49]
+ExpectedProtocol = TLSv1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[50-resumption]
+ssl_conf = 50-resumption-ssl
+
+[50-resumption-ssl]
+server = 50-resumption-server
+client = 50-resumption-client
+resume-server = 50-resumption-server
+resume-client = 50-resumption-resume-client
+
+[50-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[50-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[50-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-50]
+ExpectedProtocol = TLSv1.1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[51-resumption]
+ssl_conf = 51-resumption-ssl
+
+[51-resumption-ssl]
+server = 51-resumption-server
+client = 51-resumption-client
+resume-server = 51-resumption-server
+resume-client = 51-resumption-resume-client
+
+[51-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[51-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[51-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-51]
+ExpectedProtocol = TLSv1.1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[52-resumption]
+ssl_conf = 52-resumption-ssl
+
+[52-resumption-ssl]
+server = 52-resumption-server
+client = 52-resumption-client
+resume-server = 52-resumption-server
+resume-client = 52-resumption-resume-client
+
+[52-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[52-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[52-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-52]
+ExpectedProtocol = TLSv1.2
+HandshakeMode = Resume
+ResumptionExpected = Yes
+
+
+# ===========================================================
+
+[53-resumption]
+ssl_conf = 53-resumption-ssl
+
+[53-resumption-ssl]
+server = 53-resumption-server
+client = 53-resumption-client
+resume-server = 53-resumption-server
+resume-client = 53-resumption-resume-client
+
+[53-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[53-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[53-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-53]
+ExpectedProtocol = TLSv1.2
+HandshakeMode = Resume
+ResumptionExpected = Yes
+
+
+# ===========================================================
+
+[54-resumption]
+ssl_conf = 54-resumption-ssl
+
+[54-resumption-ssl]
+server = 54-resumption-server
+client = 54-resumption-client
+resume-server = 54-resumption-server
+resume-client = 54-resumption-resume-client
+
+[54-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[54-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[54-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-54]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[55-resumption]
+ssl_conf = 55-resumption-ssl
+
+[55-resumption-ssl]
+server = 55-resumption-server
+client = 55-resumption-client
+resume-server = 55-resumption-server
+resume-client = 55-resumption-resume-client
+
+[55-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[55-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+MinProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[55-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-55]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[56-resumption]
+ssl_conf = 56-resumption-ssl
+
+[56-resumption-ssl]
+server = 56-resumption-server
+client = 56-resumption-client
+resume-server = 56-resumption-server
+resume-client = 56-resumption-resume-client
+
+[56-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[56-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[56-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-56]
+ExpectedProtocol = TLSv1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[57-resumption]
+ssl_conf = 57-resumption-ssl
+
+[57-resumption-ssl]
+server = 57-resumption-server
+client = 57-resumption-client
+resume-server = 57-resumption-server
+resume-client = 57-resumption-resume-client
+
+[57-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[57-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[57-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-57]
+ExpectedProtocol = TLSv1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[58-resumption]
+ssl_conf = 58-resumption-ssl
+
+[58-resumption-ssl]
+server = 58-resumption-server
+client = 58-resumption-client
+resume-server = 58-resumption-server
+resume-client = 58-resumption-resume-client
+
+[58-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[58-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[58-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-58]
+ExpectedProtocol = TLSv1.1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[59-resumption]
+ssl_conf = 59-resumption-ssl
+
+[59-resumption-ssl]
+server = 59-resumption-server
+client = 59-resumption-client
+resume-server = 59-resumption-server
+resume-client = 59-resumption-resume-client
+
+[59-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[59-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[59-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-59]
+ExpectedProtocol = TLSv1.1
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[60-resumption]
+ssl_conf = 60-resumption-ssl
+
+[60-resumption-ssl]
+server = 60-resumption-server
+client = 60-resumption-client
+resume-server = 60-resumption-server
+resume-client = 60-resumption-resume-client
+
+[60-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[60-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[60-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-60]
+ExpectedProtocol = TLSv1.2
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[61-resumption]
+ssl_conf = 61-resumption-ssl
+
+[61-resumption-ssl]
+server = 61-resumption-server
+client = 61-resumption-client
+resume-server = 61-resumption-server
+resume-client = 61-resumption-resume-client
+
+[61-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[61-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[61-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-61]
+ExpectedProtocol = TLSv1.2
+HandshakeMode = Resume
+ResumptionExpected = No
+
+
+# ===========================================================
+
+[62-resumption]
+ssl_conf = 62-resumption-ssl
+
+[62-resumption-ssl]
+server = 62-resumption-server
+client = 62-resumption-client
+resume-server = 62-resumption-server
+resume-client = 62-resumption-resume-client
+
+[62-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[62-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[62-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-62]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = Yes
+
+
+# ===========================================================
+
+[63-resumption]
+ssl_conf = 63-resumption-ssl
+
+[63-resumption-ssl]
+server = 63-resumption-server
+client = 63-resumption-client
+resume-server = 63-resumption-server
+resume-client = 63-resumption-resume-client
+
+[63-resumption-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = -SessionTicket
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[63-resumption-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[63-resumption-resume-client]
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-63]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+ResumptionExpected = Yes
+
+
+# ===========================================================
+
+[64-resumption-with-hrr]
+ssl_conf = 64-resumption-with-hrr-ssl
+
+[64-resumption-with-hrr-ssl]
+server = 64-resumption-with-hrr-server
+client = 64-resumption-with-hrr-client
+resume-server = 64-resumption-with-hrr-server
+resume-client = 64-resumption-with-hrr-resume-client
+
+[64-resumption-with-hrr-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Curves = P-256
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[64-resumption-with-hrr-client]
+CipherString = DEFAULT
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[64-resumption-with-hrr-resume-client]
+CipherString = DEFAULT
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-64]
+ExpectedProtocol = TLSv1.3
+HandshakeMode = Resume
+Method = TLS
 ResumptionExpected = Yes
 
 
diff --git a/test/ssl-tests/20-cert-select.conf b/test/ssl-tests/20-cert-select.conf
index 47ff667..609e216 100644
--- a/test/ssl-tests/20-cert-select.conf
+++ b/test/ssl-tests/20-cert-select.conf
@@ -1,6 +1,6 @@
 # Generated with generate_ssl_tests.pl
 
-num_tests = 23
+num_tests = 39
 
 test-0 = 0-ECDSA CipherString Selection
 test-1 = 1-Ed25519 CipherString and Signature Algorithm Selection
@@ -24,7 +24,23 @@ test-18 = 18-Suite B P-256 Hash Algorithm Selection
 test-19 = 19-Suite B P-384 Hash Algorithm Selection
 test-20 = 20-TLS 1.2 Ed25519 Client Auth
 test-21 = 21-Only RSA-PSS Certificate, TLS v1.1
-test-22 = 22-TLS 1.2 DSA Certificate Test
+test-22 = 22-TLS 1.3 ECDSA Signature Algorithm Selection
+test-23 = 23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point
+test-24 = 24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1
+test-25 = 25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS
+test-26 = 26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS
+test-27 = 27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate
+test-28 = 28-TLS 1.3 RSA Signature Algorithm Selection, no PSS
+test-29 = 29-TLS 1.3 RSA-PSS Signature Algorithm Selection
+test-30 = 30-TLS 1.3 Ed25519 Signature Algorithm Selection
+test-31 = 31-TLS 1.3 Ed25519 CipherString and Groups Selection
+test-32 = 32-TLS 1.3 RSA Client Auth Signature Algorithm Selection
+test-33 = 33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names
+test-34 = 34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection
+test-35 = 35-TLS 1.3 Ed25519 Client Auth
+test-36 = 36-TLS 1.2 DSA Certificate Test
+test-37 = 37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms
+test-38 = 38-TLS 1.3 DSA Certificate Test
 # ===========================================================
 
 [0-ECDSA CipherString Selection]
@@ -697,14 +713,467 @@ ExpectedResult = ServerFail
 
 # ===========================================================
 
-[22-TLS 1.2 DSA Certificate Test]
-ssl_conf = 22-TLS 1.2 DSA Certificate Test-ssl
+[22-TLS 1.3 ECDSA Signature Algorithm Selection]
+ssl_conf = 22-TLS 1.3 ECDSA Signature Algorithm Selection-ssl
 
-[22-TLS 1.2 DSA Certificate Test-ssl]
-server = 22-TLS 1.2 DSA Certificate Test-server
-client = 22-TLS 1.2 DSA Certificate Test-client
+[22-TLS 1.3 ECDSA Signature Algorithm Selection-ssl]
+server = 22-TLS 1.3 ECDSA Signature Algorithm Selection-server
+client = 22-TLS 1.3 ECDSA Signature Algorithm Selection-client
 
-[22-TLS 1.2 DSA Certificate Test-server]
+[22-TLS 1.3 ECDSA Signature Algorithm Selection-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[22-TLS 1.3 ECDSA Signature Algorithm Selection-client]
+CipherString = DEFAULT
+SignatureAlgorithms = ECDSA+SHA256
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-22]
+ExpectedResult = Success
+ExpectedServerCANames = empty
+ExpectedServerCertType = P-256
+ExpectedServerSignHash = SHA256
+ExpectedServerSignType = EC
+
+
+# ===========================================================
+
+[23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point]
+ssl_conf = 23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-ssl
+
+[23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-ssl]
+server = 23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-server
+client = 23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-client
+
+[23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-cecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-cecdsa-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[23-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-client]
+CipherString = DEFAULT
+SignatureAlgorithms = ECDSA+SHA256
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-23]
+ExpectedResult = ServerFail
+
+
+# ===========================================================
+
+[24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1]
+ssl_conf = 24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-ssl
+
+[24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-ssl]
+server = 24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-server
+client = 24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-client
+
+[24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[24-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-client]
+CipherString = DEFAULT
+SignatureAlgorithms = ECDSA+SHA1
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-24]
+ExpectedResult = ServerFail
+
+
+# ===========================================================
+
+[25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS]
+ssl_conf = 25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-ssl
+
+[25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-ssl]
+server = 25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-server
+client = 25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-client
+
+[25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[25-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-client]
+CipherString = DEFAULT
+RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+SignatureAlgorithms = ECDSA+SHA256:RSA-PSS+SHA256
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-25]
+ExpectedResult = Success
+ExpectedServerCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+ExpectedServerCertType = P-256
+ExpectedServerSignHash = SHA256
+ExpectedServerSignType = EC
+
+
+# ===========================================================
+
+[26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS]
+ssl_conf = 26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-ssl
+
+[26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-ssl]
+server = 26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-server
+client = 26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-client
+
+[26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[26-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-client]
+CipherString = DEFAULT
+SignatureAlgorithms = ECDSA+SHA384:RSA-PSS+SHA384
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-26]
+ExpectedResult = Success
+ExpectedServerCertType = RSA
+ExpectedServerSignHash = SHA384
+ExpectedServerSignType = RSA-PSS
+
+
+# ===========================================================
+
+[27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate]
+ssl_conf = 27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-ssl
+
+[27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-ssl]
+server = 27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-server
+client = 27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-client
+
+[27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[27-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-client]
+CipherString = DEFAULT
+SignatureAlgorithms = ECDSA+SHA256
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-27]
+ExpectedResult = ServerFail
+
+
+# ===========================================================
+
+[28-TLS 1.3 RSA Signature Algorithm Selection, no PSS]
+ssl_conf = 28-TLS 1.3 RSA Signature Algorithm Selection, no PSS-ssl
+
+[28-TLS 1.3 RSA Signature Algorithm Selection, no PSS-ssl]
+server = 28-TLS 1.3 RSA Signature Algorithm Selection, no PSS-server
+client = 28-TLS 1.3 RSA Signature Algorithm Selection, no PSS-client
+
+[28-TLS 1.3 RSA Signature Algorithm Selection, no PSS-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[28-TLS 1.3 RSA Signature Algorithm Selection, no PSS-client]
+CipherString = DEFAULT
+SignatureAlgorithms = RSA+SHA256
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-28]
+ExpectedResult = ServerFail
+
+
+# ===========================================================
+
+[29-TLS 1.3 RSA-PSS Signature Algorithm Selection]
+ssl_conf = 29-TLS 1.3 RSA-PSS Signature Algorithm Selection-ssl
+
+[29-TLS 1.3 RSA-PSS Signature Algorithm Selection-ssl]
+server = 29-TLS 1.3 RSA-PSS Signature Algorithm Selection-server
+client = 29-TLS 1.3 RSA-PSS Signature Algorithm Selection-client
+
+[29-TLS 1.3 RSA-PSS Signature Algorithm Selection-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[29-TLS 1.3 RSA-PSS Signature Algorithm Selection-client]
+CipherString = DEFAULT
+SignatureAlgorithms = RSA-PSS+SHA256
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-29]
+ExpectedResult = Success
+ExpectedServerCertType = RSA
+ExpectedServerSignHash = SHA256
+ExpectedServerSignType = RSA-PSS
+
+
+# ===========================================================
+
+[30-TLS 1.3 Ed25519 Signature Algorithm Selection]
+ssl_conf = 30-TLS 1.3 Ed25519 Signature Algorithm Selection-ssl
+
+[30-TLS 1.3 Ed25519 Signature Algorithm Selection-ssl]
+server = 30-TLS 1.3 Ed25519 Signature Algorithm Selection-server
+client = 30-TLS 1.3 Ed25519 Signature Algorithm Selection-client
+
+[30-TLS 1.3 Ed25519 Signature Algorithm Selection-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[30-TLS 1.3 Ed25519 Signature Algorithm Selection-client]
+CipherString = DEFAULT
+SignatureAlgorithms = ed25519
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-30]
+ExpectedResult = Success
+ExpectedServerCertType = Ed25519
+ExpectedServerSignType = Ed25519
+
+
+# ===========================================================
+
+[31-TLS 1.3 Ed25519 CipherString and Groups Selection]
+ssl_conf = 31-TLS 1.3 Ed25519 CipherString and Groups Selection-ssl
+
+[31-TLS 1.3 Ed25519 CipherString and Groups Selection-ssl]
+server = 31-TLS 1.3 Ed25519 CipherString and Groups Selection-server
+client = 31-TLS 1.3 Ed25519 CipherString and Groups Selection-client
+
+[31-TLS 1.3 Ed25519 CipherString and Groups Selection-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[31-TLS 1.3 Ed25519 CipherString and Groups Selection-client]
+CipherString = DEFAULT
+Groups = X25519
+SignatureAlgorithms = ECDSA+SHA256:ed25519
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-31]
+ExpectedResult = Success
+ExpectedServerCertType = P-256
+ExpectedServerSignType = EC
+
+
+# ===========================================================
+
+[32-TLS 1.3 RSA Client Auth Signature Algorithm Selection]
+ssl_conf = 32-TLS 1.3 RSA Client Auth Signature Algorithm Selection-ssl
+
+[32-TLS 1.3 RSA Client Auth Signature Algorithm Selection-ssl]
+server = 32-TLS 1.3 RSA Client Auth Signature Algorithm Selection-server
+client = 32-TLS 1.3 RSA Client Auth Signature Algorithm Selection-client
+
+[32-TLS 1.3 RSA Client Auth Signature Algorithm Selection-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientSignatureAlgorithms = PSS+SHA256
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Require
+
+[32-TLS 1.3 RSA Client Auth Signature Algorithm Selection-client]
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-client-chain.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+RSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+RSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-32]
+ExpectedClientCANames = empty
+ExpectedClientCertType = RSA
+ExpectedClientSignHash = SHA256
+ExpectedClientSignType = RSA-PSS
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names]
+ssl_conf = 33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-ssl
+
+[33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-ssl]
+server = 33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-server
+client = 33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-client
+
+[33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientSignatureAlgorithms = PSS+SHA256
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Require
+
+[33-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-client]
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-client-chain.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+RSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+RSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-33]
+ExpectedClientCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+ExpectedClientCertType = RSA
+ExpectedClientSignHash = SHA256
+ExpectedClientSignType = RSA-PSS
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection]
+ssl_conf = 34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-ssl
+
+[34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-ssl]
+server = 34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-server
+client = 34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-client
+
+[34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientSignatureAlgorithms = ECDSA+SHA256
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Require
+
+[34-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-client]
+CipherString = DEFAULT
+ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-client-chain.pem
+ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+RSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
+RSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-34]
+ExpectedClientCertType = P-256
+ExpectedClientSignHash = SHA256
+ExpectedClientSignType = EC
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[35-TLS 1.3 Ed25519 Client Auth]
+ssl_conf = 35-TLS 1.3 Ed25519 Client Auth-ssl
+
+[35-TLS 1.3 Ed25519 Client Auth-ssl]
+server = 35-TLS 1.3 Ed25519 Client Auth-server
+client = 35-TLS 1.3 Ed25519 Client Auth-client
+
+[35-TLS 1.3 Ed25519 Client Auth-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Require
+
+[35-TLS 1.3 Ed25519 Client Auth-client]
+CipherString = DEFAULT
+EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/client-ed25519-cert.pem
+EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/client-ed25519-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-35]
+ExpectedClientCertType = Ed25519
+ExpectedClientSignType = Ed25519
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[36-TLS 1.2 DSA Certificate Test]
+ssl_conf = 36-TLS 1.2 DSA Certificate Test-ssl
+
+[36-TLS 1.2 DSA Certificate Test-ssl]
+server = 36-TLS 1.2 DSA Certificate Test-server
+client = 36-TLS 1.2 DSA Certificate Test-client
+
+[36-TLS 1.2 DSA Certificate Test-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = ALL
 DHParameters = ${ENV::TEST_CERTS_DIR}/dhp2048.pem
@@ -714,13 +1183,67 @@ MaxProtocol = TLSv1.2
 MinProtocol = TLSv1.2
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[22-TLS 1.2 DSA Certificate Test-client]
+[36-TLS 1.2 DSA Certificate Test-client]
 CipherString = ALL
 SignatureAlgorithms = DSA+SHA256:DSA+SHA1
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
-[test-22]
+[test-36]
 ExpectedResult = Success
 
 
+# ===========================================================
+
+[37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms]
+ssl_conf = 37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-ssl
+
+[37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-ssl]
+server = 37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-server
+client = 37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-client
+
+[37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+ClientSignatureAlgorithms = ECDSA+SHA1:DSA+SHA256:RSA+SHA256
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
+VerifyMode = Request
+
+[37-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-client]
+CipherString = DEFAULT
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-37]
+ExpectedResult = ServerFail
+
+
+# ===========================================================
+
+[38-TLS 1.3 DSA Certificate Test]
+ssl_conf = 38-TLS 1.3 DSA Certificate Test-ssl
+
+[38-TLS 1.3 DSA Certificate Test-ssl]
+server = 38-TLS 1.3 DSA Certificate Test-server
+client = 38-TLS 1.3 DSA Certificate Test-client
+
+[38-TLS 1.3 DSA Certificate Test-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = ALL
+DSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-dsa-cert.pem
+DSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-dsa-key.pem
+MaxProtocol = TLSv1.3
+MinProtocol = TLSv1.3
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[38-TLS 1.3 DSA Certificate Test-client]
+CipherString = ALL
+SignatureAlgorithms = DSA+SHA1:DSA+SHA256:ECDSA+SHA256
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-38]
+ExpectedResult = ServerFail
+
+
diff --git a/test/ssl-tests/22-compression.conf b/test/ssl-tests/22-compression.conf
index 999b008..c85d312 100644
--- a/test/ssl-tests/22-compression.conf
+++ b/test/ssl-tests/22-compression.conf
@@ -1,111 +1,215 @@
 # Generated with generate_ssl_tests.pl
 
-num_tests = 4
+num_tests = 8
+
+test-0 = 0-tlsv1_3-both-compress
+test-1 = 1-tlsv1_3-client-compress
+test-2 = 2-tlsv1_3-server-compress
+test-3 = 3-tlsv1_3-neither-compress
+test-4 = 4-tlsv1_2-both-compress
+test-5 = 5-tlsv1_2-client-compress
+test-6 = 6-tlsv1_2-server-compress
+test-7 = 7-tlsv1_2-neither-compress
+# ===========================================================
+
+[0-tlsv1_3-both-compress]
+ssl_conf = 0-tlsv1_3-both-compress-ssl
+
+[0-tlsv1_3-both-compress-ssl]
+server = 0-tlsv1_3-both-compress-server
+client = 0-tlsv1_3-both-compress-client
+
+[0-tlsv1_3-both-compress-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = Compression
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[0-tlsv1_3-both-compress-client]
+CipherString = DEFAULT
+Options = Compression
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-0]
+CompressionExpected = No
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[1-tlsv1_3-client-compress]
+ssl_conf = 1-tlsv1_3-client-compress-ssl
+
+[1-tlsv1_3-client-compress-ssl]
+server = 1-tlsv1_3-client-compress-server
+client = 1-tlsv1_3-client-compress-client
+
+[1-tlsv1_3-client-compress-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[1-tlsv1_3-client-compress-client]
+CipherString = DEFAULT
+Options = Compression
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-1]
+CompressionExpected = No
+ExpectedResult = Success
+
 
-test-0 = 0-tlsv1_2-both-compress
-test-1 = 1-tlsv1_2-client-compress
-test-2 = 2-tlsv1_2-server-compress
-test-3 = 3-tlsv1_2-neither-compress
 # ===========================================================
 
-[0-tlsv1_2-both-compress]
-ssl_conf = 0-tlsv1_2-both-compress-ssl
+[2-tlsv1_3-server-compress]
+ssl_conf = 2-tlsv1_3-server-compress-ssl
 
-[0-tlsv1_2-both-compress-ssl]
-server = 0-tlsv1_2-both-compress-server
-client = 0-tlsv1_2-both-compress-client
+[2-tlsv1_3-server-compress-ssl]
+server = 2-tlsv1_3-server-compress-server
+client = 2-tlsv1_3-server-compress-client
 
-[0-tlsv1_2-both-compress-server]
+[2-tlsv1_3-server-compress-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
 Options = Compression
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[0-tlsv1_2-both-compress-client]
+[2-tlsv1_3-server-compress-client]
+CipherString = DEFAULT
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-2]
+CompressionExpected = No
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[3-tlsv1_3-neither-compress]
+ssl_conf = 3-tlsv1_3-neither-compress-ssl
+
+[3-tlsv1_3-neither-compress-ssl]
+server = 3-tlsv1_3-neither-compress-server
+client = 3-tlsv1_3-neither-compress-client
+
+[3-tlsv1_3-neither-compress-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[3-tlsv1_3-neither-compress-client]
+CipherString = DEFAULT
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-3]
+CompressionExpected = No
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[4-tlsv1_2-both-compress]
+ssl_conf = 4-tlsv1_2-both-compress-ssl
+
+[4-tlsv1_2-both-compress-ssl]
+server = 4-tlsv1_2-both-compress-server
+client = 4-tlsv1_2-both-compress-client
+
+[4-tlsv1_2-both-compress-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+Options = Compression
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[4-tlsv1_2-both-compress-client]
 CipherString = DEFAULT
 MaxProtocol = TLSv1.2
 Options = Compression
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
-[test-0]
+[test-4]
 CompressionExpected = Yes
 ExpectedResult = Success
 
 
 # ===========================================================
 
-[1-tlsv1_2-client-compress]
-ssl_conf = 1-tlsv1_2-client-compress-ssl
+[5-tlsv1_2-client-compress]
+ssl_conf = 5-tlsv1_2-client-compress-ssl
 
-[1-tlsv1_2-client-compress-ssl]
-server = 1-tlsv1_2-client-compress-server
-client = 1-tlsv1_2-client-compress-client
+[5-tlsv1_2-client-compress-ssl]
+server = 5-tlsv1_2-client-compress-server
+client = 5-tlsv1_2-client-compress-client
 
-[1-tlsv1_2-client-compress-server]
+[5-tlsv1_2-client-compress-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[1-tlsv1_2-client-compress-client]
+[5-tlsv1_2-client-compress-client]
 CipherString = DEFAULT
 MaxProtocol = TLSv1.2
 Options = Compression
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
-[test-1]
+[test-5]
 CompressionExpected = No
 ExpectedResult = Success
 
 
 # ===========================================================
 
-[2-tlsv1_2-server-compress]
-ssl_conf = 2-tlsv1_2-server-compress-ssl
+[6-tlsv1_2-server-compress]
+ssl_conf = 6-tlsv1_2-server-compress-ssl
 
-[2-tlsv1_2-server-compress-ssl]
-server = 2-tlsv1_2-server-compress-server
-client = 2-tlsv1_2-server-compress-client
+[6-tlsv1_2-server-compress-ssl]
+server = 6-tlsv1_2-server-compress-server
+client = 6-tlsv1_2-server-compress-client
 
-[2-tlsv1_2-server-compress-server]
+[6-tlsv1_2-server-compress-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
 Options = Compression
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[2-tlsv1_2-server-compress-client]
+[6-tlsv1_2-server-compress-client]
 CipherString = DEFAULT
 MaxProtocol = TLSv1.2
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
-[test-2]
+[test-6]
 CompressionExpected = No
 ExpectedResult = Success
 
 
 # ===========================================================
 
-[3-tlsv1_2-neither-compress]
-ssl_conf = 3-tlsv1_2-neither-compress-ssl
+[7-tlsv1_2-neither-compress]
+ssl_conf = 7-tlsv1_2-neither-compress-ssl
 
-[3-tlsv1_2-neither-compress-ssl]
-server = 3-tlsv1_2-neither-compress-server
-client = 3-tlsv1_2-neither-compress-client
+[7-tlsv1_2-neither-compress-ssl]
+server = 7-tlsv1_2-neither-compress-server
+client = 7-tlsv1_2-neither-compress-client
 
-[3-tlsv1_2-neither-compress-server]
+[7-tlsv1_2-neither-compress-server]
 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 CipherString = DEFAULT
 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 
-[3-tlsv1_2-neither-compress-client]
+[7-tlsv1_2-neither-compress-client]
 CipherString = DEFAULT
 MaxProtocol = TLSv1.2
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 VerifyMode = Peer
 
-[test-3]
+[test-7]
 CompressionExpected = No
 ExpectedResult = Success
 

From builds at travis-ci.org  Wed Feb  7 21:47:03 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 07 Feb 2018 21:47:03 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16148 (master -
	048ebcc)
In-Reply-To: <openssl/openssl+338709907+still failing@travis-ci.org>
Message-ID: <5a7b73d6cb77c_43fcaa5bc8b8014245b3@2f9f8493-5923-4fd4-9822-27587e4bd149.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16148
Status: Still Failing

Duration: 28 minutes and 48 seconds
Commit: 048ebcc (master)
Author: Richard Levitte
Message: make update ERROR_REBUILD=-rebuild

Reviewed-by: Rich Salz <rsalz at openssl.org>
Reviewed-by: Tim Hudson <tjh at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5275)

View the changeset: https://github.com/openssl/openssl/compare/3a7141df8768...048ebccb8840

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/338709907?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/ff650989/attachment.html>

From builds at travis-ci.org  Wed Feb  7 22:21:59 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 07 Feb 2018 22:21:59 +0000
Subject: [openssl-commits] Fixed: openssl/openssl#16151 (master - c517ac4)
In-Reply-To: <openssl/openssl+338712886+fixed@travis-ci.org>
Message-ID: <5a7b7c06c597a_43f82f8109cd424232e1@6325923d-0d1f-4d60-8695-f5815b2c890e.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16151
Status: Fixed

Duration: 33 minutes and 51 seconds
Commit: c517ac4 (master)
Author: Richard Levitte
Message: Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"

It turns out that even if you successfully build the engine, it might
not load properly, so we cannot make the test program fail for it.

See the message in commit 25b9d11c002e5c71840c2a6733c5009d78f2c9db

This reverts commit 227a1e3f45bf06fdb00f2bdfb922f6f0d1f1d1de.

Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5276)

View the changeset: https://github.com/openssl/openssl/compare/048ebccb8840...c517ac4c3f6d

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/338712886?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/ca177d8f/attachment.html>

From builds at travis-ci.org  Wed Feb  7 22:46:34 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 07 Feb 2018 22:46:34 +0000
Subject: [openssl-commits] Fixed: openssl/openssl#16153 (master - 4af2697)
In-Reply-To: <openssl/openssl+338719850+fixed@travis-ci.org>
Message-ID: <5a7b81ca60f86_43fcab9999db415031d0@2f9f8493-5923-4fd4-9822-27587e4bd149.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16153
Status: Fixed

Duration: 32 minutes and 43 seconds
Commit: 4af2697 (master)
Author: Matt Caswell
Message: Don't run tls13encryptiontest on a shared Windows build

tls13encryptiontest is an "internal" test. As with all the other internal
tests it should not be run on a shared native Windows build.

[extended tests]

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5266)

View the changeset: https://github.com/openssl/openssl/compare/c517ac4c3f6d...4af26979480a

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/338719850?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180207/46cf8e10/attachment-0001.html>

From openssl at openssl.org  Thu Feb  8 00:16:28 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 08 Feb 2018 00:16:28 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-chacha
Message-ID: <1518048988.534103.16239.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-chacha

Commit log since last time:

4af2697 Don't run tls13encryptiontest on a shared Windows build
04e3bb0 Fix some undefined behaviour in ossltest engine
0f41dc0 Fix clienthellotest with TLSv1.3
f518cef Enable TLSv1.3 by default
c517ac4 Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
048ebcc make update ERROR_REBUILD=-rebuild
cb7b727 mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
3a7141d Make all private functions in e_afalg.c static
7d3901f test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
227a1e3 Modify test/afalgtest to fail if the afalg engine couldn't be loaded
bed4afa Fix glibc specific conditional for Mac OS/X
2b66fd5 Unify timer code
360fc9f Make OPENSSL_rdtsc universally available.
2ad2281 Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

Build log ended with (last 100 lines):

../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. ok
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ ok
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ ok
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ ok
../../openssl/test/recipes/70-test_sslcertstatus.t ............ ok
../../openssl/test/recipes/70-test_sslextension.t ............. ok
../../openssl/test/recipes/70-test_sslmessages.t .............. ok
../../openssl/test/recipes/70-test_sslrecords.t ............... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ........... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ............... ok
../../openssl/test/recipes/70-test_sslsignature.t ............. ok
../../openssl/test/recipes/70-test_sslskewith0p.t ............. ok
../../openssl/test/recipes/70-test_sslversions.t .............. ok
../../openssl/test/recipes/70-test_sslvertol.t ................ ok
../../openssl/test/recipes/70-test_tls13cookie.t .............. ok
../../openssl/test/recipes/70-test_tls13downgrade.t ........... skipped: test_tls13downgrade not run in pre TLSv1.3 RFC implementation
../../openssl/test/recipes/70-test_tls13hrr.t ................. ok
../../openssl/test/recipes/70-test_tls13kexmodes.t ............ ok
../../openssl/test/recipes/70-test_tls13messages.t ............ ok
../../openssl/test/recipes/70-test_tls13psk.t ................. ok
../../openssl/test/recipes/70-test_tlsextms.t ................. ok
../../openssl/test/recipes/70-test_verify_extra.t ............. ok
../../openssl/test/recipes/70-test_wpacket.t .................. ok
../../openssl/test/recipes/80-test_ca.t ....................... ok
../../openssl/test/recipes/80-test_cipherbytes.t .............. ok
../../openssl/test/recipes/80-test_cipherlist.t ............... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/80-test_ciphername.t ............... ok
../../openssl/test/recipes/80-test_cms.t ...................... ok
../../openssl/test/recipes/80-test_ct.t ....................... ok
../../openssl/test/recipes/80-test_dane.t ..................... ok
../../openssl/test/recipes/80-test_dtls.t ..................... ok
../../openssl/test/recipes/80-test_dtls_mtu.t ................. ok
../../openssl/test/recipes/80-test_dtlsv1listen.t ............. ok
../../openssl/test/recipes/80-test_ocsp.t ..................... ok
../../openssl/test/recipes/80-test_pkcs12.t ................... ok
../../openssl/test/recipes/80-test_ssl_new.t .................. ok
../../openssl/test/recipes/80-test_ssl_old.t .................. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t ............. ok
../../openssl/test/recipes/80-test_sslcorrupt.t ............... ok
../../openssl/test/recipes/80-test_tsa.t ...................... ok
../../openssl/test/recipes/80-test_x509aux.t .................. ok
../../openssl/test/recipes/90-test_asn1_time.t ................ ok
../../openssl/test/recipes/90-test_async.t .................... ok
../../openssl/test/recipes/90-test_bio_enc.t .................. ok
../../openssl/test/recipes/90-test_constant_time.t ............ ok
../../openssl/test/recipes/90-test_fatalerr.t ................. ok
../../openssl/test/recipes/90-test_gmdiff.t ................... ok
../../openssl/test/recipes/90-test_ige.t ...................... ok
../../openssl/test/recipes/90-test_memleak.t .................. ok
../../openssl/test/recipes/90-test_overhead.t ................. skipped: Only supported in no-shared builds
../../openssl/test/recipes/90-test_secmem.t ................... ok
../../openssl/test/recipes/90-test_shlibload.t ................ ok
../../openssl/test/recipes/90-test_srp.t ...................... ok
../../openssl/test/recipes/90-test_sslapi.t ................... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/90-test_sslbuffers.t ............... ok
../../openssl/test/recipes/90-test_store.t .................... ok
../../openssl/test/recipes/90-test_threads.t .................. ok
../../openssl/test/recipes/90-test_time_offset.t .............. ok
../../openssl/test/recipes/90-test_tls13ccs.t ................. ok
../../openssl/test/recipes/90-test_tls13encryption.t .......... ok
../../openssl/test/recipes/90-test_tls13secrets.t ............. ok
../../openssl/test/recipes/90-test_v3name.t ................... ok
../../openssl/test/recipes/95-test_external_boringssl.t ....... skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_krb5.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_pyca.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/99-test_ecstress.t ................. ok
../../openssl/test/recipes/99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
../../openssl/test/recipes/80-test_cipherlist.t             (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
../../openssl/test/recipes/90-test_sslapi.t                 (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
Files=140, Tests=1310, 383 wallclock secs ( 3.78 usr  0.35 sys + 190.82 cusr 24.28 csys = 219.23 CPU)
Result: FAIL
Makefile:171: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-chacha'
Makefile:169: recipe for target 'tests' failed
make: *** [tests] Error 2

From openssl at openssl.org  Thu Feb  8 01:14:10 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 08 Feb 2018 01:14:10 +0000
Subject: [openssl-commits] Still FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-deprecated
Message-ID: <1518052450.798695.21687.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-deprecated

Commit log since last time:

4af2697 Don't run tls13encryptiontest on a shared Windows build
04e3bb0 Fix some undefined behaviour in ossltest engine
0f41dc0 Fix clienthellotest with TLSv1.3
f518cef Enable TLSv1.3 by default
c517ac4 Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
048ebcc make update ERROR_REBUILD=-rebuild
cb7b727 mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
3a7141d Make all private functions in e_afalg.c static
7d3901f test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
227a1e3 Modify test/afalgtest to fail if the afalg engine couldn't be loaded
bed4afa Fix glibc specific conditional for Mac OS/X
2b66fd5 Unify timer code
360fc9f Make OPENSSL_rdtsc universally available.
2ad2281 Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

Build log ended with (last 100 lines):

../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. ok
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ ok
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ ok
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ ok
../../openssl/test/recipes/70-test_sslcertstatus.t ............ ok
../../openssl/test/recipes/70-test_sslextension.t ............. ok
../../openssl/test/recipes/70-test_sslmessages.t .............. ok
../../openssl/test/recipes/70-test_sslrecords.t ............... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ........... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ............... ok
../../openssl/test/recipes/70-test_sslsignature.t ............. ok
../../openssl/test/recipes/70-test_sslskewith0p.t ............. ok
../../openssl/test/recipes/70-test_sslversions.t .............. ok
../../openssl/test/recipes/70-test_sslvertol.t ................ ok
../../openssl/test/recipes/70-test_tls13cookie.t .............. ok
../../openssl/test/recipes/70-test_tls13downgrade.t ........... skipped: test_tls13downgrade not run in pre TLSv1.3 RFC implementation
../../openssl/test/recipes/70-test_tls13hrr.t ................. ok
../../openssl/test/recipes/70-test_tls13kexmodes.t ............ ok
../../openssl/test/recipes/70-test_tls13messages.t ............ ok
../../openssl/test/recipes/70-test_tls13psk.t ................. ok
../../openssl/test/recipes/70-test_tlsextms.t ................. ok
../../openssl/test/recipes/70-test_verify_extra.t ............. ok
../../openssl/test/recipes/70-test_wpacket.t .................. ok
../../openssl/test/recipes/80-test_ca.t ....................... ok
../../openssl/test/recipes/80-test_cipherbytes.t .............. ok
../../openssl/test/recipes/80-test_cipherlist.t ............... ok
../../openssl/test/recipes/80-test_ciphername.t ............... ok
../../openssl/test/recipes/80-test_cms.t ...................... ok
../../openssl/test/recipes/80-test_ct.t ....................... ok
../../openssl/test/recipes/80-test_dane.t ..................... ok
../../openssl/test/recipes/80-test_dtls.t ..................... ok
../../openssl/test/recipes/80-test_dtls_mtu.t ................. ok
../../openssl/test/recipes/80-test_dtlsv1listen.t ............. ok
../../openssl/test/recipes/80-test_ocsp.t ..................... ok
../../openssl/test/recipes/80-test_pkcs12.t ................... ok
../../openssl/test/recipes/80-test_ssl_new.t .................. ok
../../openssl/test/recipes/80-test_ssl_old.t .................. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t ............. ok
../../openssl/test/recipes/80-test_sslcorrupt.t ............... ok
../../openssl/test/recipes/80-test_tsa.t ...................... ok
../../openssl/test/recipes/80-test_x509aux.t .................. ok
../../openssl/test/recipes/90-test_asn1_time.t ................ ok
../../openssl/test/recipes/90-test_async.t .................... ok
../../openssl/test/recipes/90-test_bio_enc.t .................. ok
../../openssl/test/recipes/90-test_constant_time.t ............ ok
../../openssl/test/recipes/90-test_fatalerr.t ................. ok
../../openssl/test/recipes/90-test_gmdiff.t ................... ok
../../openssl/test/recipes/90-test_ige.t ...................... ok
../../openssl/test/recipes/90-test_memleak.t .................. ok
../../openssl/test/recipes/90-test_overhead.t ................. skipped: Only supported in no-shared builds
../../openssl/test/recipes/90-test_secmem.t ................... ok
../../openssl/test/recipes/90-test_shlibload.t ................ ok
../../openssl/test/recipes/90-test_srp.t ...................... ok
../../openssl/test/recipes/90-test_sslapi.t ................... ok
../../openssl/test/recipes/90-test_sslbuffers.t ............... ok
../../openssl/test/recipes/90-test_store.t .................... ok
../../openssl/test/recipes/90-test_threads.t .................. ok
../../openssl/test/recipes/90-test_time_offset.t .............. ok
../../openssl/test/recipes/90-test_tls13ccs.t ................. ok
../../openssl/test/recipes/90-test_tls13encryption.t .......... ok
../../openssl/test/recipes/90-test_tls13secrets.t ............. ok
../../openssl/test/recipes/90-test_v3name.t ................... ok
../../openssl/test/recipes/95-test_external_boringssl.t ....... skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_krb5.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_pyca.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/99-test_ecstress.t ................. ok
../../openssl/test/recipes/99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
../../openssl/test/recipes/01-test_symbol_presence.t        (Wstat: 512 Tests: 4 Failed: 2)
  Failed tests:  2, 4
  Non-zero exit status: 2
Files=140, Tests=1312, 365 wallclock secs ( 3.64 usr  0.36 sys + 174.64 cusr 23.72 csys = 202.36 CPU)
Result: FAIL
Makefile:171: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-deprecated'
Makefile:169: recipe for target 'tests' failed
make: *** [tests] Error 2

From levitte at openssl.org  Thu Feb  8 04:10:54 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 08 Feb 2018 04:10:54 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518063054.022604.5655.nullmailer@dev.openssl.org>

The branch master has been updated
       via  22626b972c024d5ae9922e4a9d710a5f9e51f753 (commit)
      from  4af26979480a42e267ff686210bb63b1ebdd0eab (commit)


- Log -----------------------------------------------------------------
commit 22626b972c024d5ae9922e4a9d710a5f9e51f753
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 7 22:40:32 2018 +0100

    With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)
    
    The slash should be there according to Microsoft documentation,
    see https://msdn.microsoft.com/en-us/library/7cafx990.aspx
    
    Fixes #5277
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5278)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/windows-makefile.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index b135502..0abe6ea 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -59,7 +59,7 @@
  sub dependmagic {
      my $target = shift;
 
-     return "$target: build_generated\n\t\$(MAKE) depend && \$(MAKE) _$target\n_$target";
+     return "$target: build_generated\n\t\$(MAKE) /\$(MAKEFLAGS) depend && \$(MAKE) /\$(MAKEFLAGS) _$target\n_$target";
  }
  '';
 -}

From osslsanity at gmail.com  Thu Feb  8 09:18:27 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Thu, 8 Feb 2018 09:18:27 +0000 (UTC)
Subject: [openssl-commits] Build failed in Jenkins: master_mips #375
In-Reply-To: <1037560288.321.1517995102352.JavaMail.jenkins@ip-172-31-34-99>
References: <1037560288.321.1517995102352.JavaMail.jenkins@ip-172-31-34-99>
Message-ID: <321265509.322.1518081507484.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/375/display/redirect?page=changes>

Changes:

[levitte] Modify test/afalgtest to fail if the afalg engine couldn't be loaded

[levitte] test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly

[levitte] Make all private functions in e_afalg.c static

[levitte] mkerr.pl: When writing internal FOOerr.h, pay attention to disablable

[levitte] make update ERROR_REBUILD=-rebuild

[levitte] Revert "Modify test/afalgtest to fail if the afalg engine couldn't be

[matt] Enable TLSv1.3 by default

[matt] Fix clienthellotest with TLSv1.3

[matt] Fix some undefined behaviour in ossltest engine

[matt] Don't run tls13encryptiontest on a shared Windows build

[levitte] With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

------------------------------------------
[...truncated 281.85 KB...]
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_err.d.tmp -MT crypto/ui/ui_err.o -c -o crypto/ui/ui_err.o crypto/ui/ui_err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_lib.d.tmp -MT crypto/ui/ui_lib.o -c -o crypto/ui/ui_lib.o crypto/ui/ui_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_null.d.tmp -MT crypto/ui/ui_null.o -c -o crypto/ui/ui_null.o crypto/ui/ui_null.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_openssl.d.tmp -MT crypto/ui/ui_openssl.o -c -o crypto/ui/ui_openssl.o crypto/ui/ui_openssl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_util.d.tmp -MT crypto/ui/ui_util.o -c -o crypto/ui/ui_util.o crypto/ui/ui_util.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/uid.d.tmp -MT crypto/uid.o -c -o crypto/uid.o crypto/uid.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/whrlpool/wp_block.d.tmp -MT crypto/whrlpool/wp_block.o -c -o crypto/whrlpool/wp_block.o crypto/whrlpool/wp_block.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/whrlpool/wp_dgst.d.tmp -MT crypto/whrlpool/wp_dgst.o -c -o crypto/whrlpool/wp_dgst.o crypto/whrlpool/wp_dgst.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/by_dir.d.tmp -MT crypto/x509/by_dir.o -c -o crypto/x509/by_dir.o crypto/x509/by_dir.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/by_file.d.tmp -MT crypto/x509/by_file.o -c -o crypto/x509/by_file.o crypto/x509/by_file.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_crl.d.tmp -MT crypto/x509/t_crl.o -c -o crypto/x509/t_crl.o crypto/x509/t_crl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_req.d.tmp -MT crypto/x509/t_req.o -c -o crypto/x509/t_req.o crypto/x509/t_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_x509.d.tmp -MT crypto/x509/t_x509.o -c -o crypto/x509/t_x509.o crypto/x509/t_x509.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_att.d.tmp -MT crypto/x509/x509_att.o -c -o crypto/x509/x509_att.o crypto/x509/x509_att.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_cmp.d.tmp -MT crypto/x509/x509_cmp.o -c -o crypto/x509/x509_cmp.o crypto/x509/x509_cmp.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_d2.d.tmp -MT crypto/x509/x509_d2.o -c -o crypto/x509/x509_d2.o crypto/x509/x509_d2.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_def.d.tmp -MT crypto/x509/x509_def.o -c -o crypto/x509/x509_def.o crypto/x509/x509_def.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_err.d.tmp -MT crypto/x509/x509_err.o -c -o crypto/x509/x509_err.o crypto/x509/x509_err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_ext.d.tmp -MT crypto/x509/x509_ext.o -c -o crypto/x509/x509_ext.o crypto/x509/x509_ext.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_lu.d.tmp -MT crypto/x509/x509_lu.o -c -o crypto/x509/x509_lu.o crypto/x509/x509_lu.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_obj.d.tmp -MT crypto/x509/x509_obj.o -c -o crypto/x509/x509_obj.o crypto/x509/x509_obj.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_r2x.d.tmp -MT crypto/x509/x509_r2x.o -c -o crypto/x509/x509_r2x.o crypto/x509/x509_r2x.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_req.d.tmp -MT crypto/x509/x509_req.o -c -o crypto/x509/x509_req.o crypto/x509/x509_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_set.d.tmp -MT crypto/x509/x509_set.o -c -o crypto/x509/x509_set.o crypto/x509/x509_set.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_trs.d.tmp -MT crypto/x509/x509_trs.o -c -o crypto/x509/x509_trs.o crypto/x509/x509_trs.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_txt.d.tmp -MT crypto/x509/x509_txt.o -c -o crypto/x509/x509_txt.o crypto/x509/x509_txt.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_v3.d.tmp -MT crypto/x509/x509_v3.o -c -o crypto/x509/x509_v3.o crypto/x509/x509_v3.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_vfy.d.tmp -MT crypto/x509/x509_vfy.o -c -o crypto/x509/x509_vfy.o crypto/x509/x509_vfy.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_vpm.d.tmp -MT crypto/x509/x509_vpm.o -c -o crypto/x509/x509_vpm.o crypto/x509/x509_vpm.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509cset.d.tmp -MT crypto/x509/x509cset.o -c -o crypto/x509/x509cset.o crypto/x509/x509cset.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509name.d.tmp -MT crypto/x509/x509name.o -c -o crypto/x509/x509name.o crypto/x509/x509name.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509rset.d.tmp -MT crypto/x509/x509rset.o -c -o crypto/x509/x509rset.o crypto/x509/x509rset.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509spki.d.tmp -MT crypto/x509/x509spki.o -c -o crypto/x509/x509spki.o crypto/x509/x509spki.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509type.d.tmp -MT crypto/x509/x509type.o -c -o crypto/x509/x509type.o crypto/x509/x509type.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_all.d.tmp -MT crypto/x509/x_all.o -c -o crypto/x509/x_all.o crypto/x509/x_all.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_attrib.d.tmp -MT crypto/x509/x_attrib.o -c -o crypto/x509/x_attrib.o crypto/x509/x_attrib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_crl.d.tmp -MT crypto/x509/x_crl.o -c -o crypto/x509/x_crl.o crypto/x509/x_crl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_exten.d.tmp -MT crypto/x509/x_exten.o -c -o crypto/x509/x_exten.o crypto/x509/x_exten.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_name.d.tmp -MT crypto/x509/x_name.o -c -o crypto/x509/x_name.o crypto/x509/x_name.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_pubkey.d.tmp -MT crypto/x509/x_pubkey.o -c -o crypto/x509/x_pubkey.o crypto/x509/x_pubkey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_req.d.tmp -MT crypto/x509/x_req.o -c -o crypto/x509/x_req.o crypto/x509/x_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_x509.d.tmp -MT crypto/x509/x_x509.o -c -o crypto/x509/x_x509.o crypto/x509/x_x509.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_x509a.d.tmp -MT crypto/x509/x_x509a.o -c -o crypto/x509/x_x509a.o crypto/x509/x_x509a.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_cache.d.tmp -MT crypto/x509v3/pcy_cache.o -c -o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_cache.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_data.d.tmp -MT crypto/x509v3/pcy_data.o -c -o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_data.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_lib.d.tmp -MT crypto/x509v3/pcy_lib.o -c -o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_map.d.tmp -MT crypto/x509v3/pcy_map.o -c -o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_map.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_node.d.tmp -MT crypto/x509v3/pcy_node.o -c -o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_node.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_tree.d.tmp -MT crypto/x509v3/pcy_tree.o -c -o crypto/x509v3/pcy_tree.o crypto/x509v3/pcy_tree.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_addr.d.tmp -MT crypto/x509v3/v3_addr.o -c -o crypto/x509v3/v3_addr.o crypto/x509v3/v3_addr.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_admis.d.tmp -MT crypto/x509v3/v3_admis.o -c -o crypto/x509v3/v3_admis.o crypto/x509v3/v3_admis.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_akey.d.tmp -MT crypto/x509v3/v3_akey.o -c -o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_akeya.d.tmp -MT crypto/x509v3/v3_akeya.o -c -o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_akeya.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_alt.d.tmp -MT crypto/x509v3/v3_alt.o -c -o crypto/x509v3/v3_alt.o crypto/x509v3/v3_alt.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_asid.d.tmp -MT crypto/x509v3/v3_asid.o -c -o crypto/x509v3/v3_asid.o crypto/x509v3/v3_asid.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_bcons.d.tmp -MT crypto/x509v3/v3_bcons.o -c -o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bcons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_bitst.d.tmp -MT crypto/x509v3/v3_bitst.o -c -o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_bitst.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_conf.d.tmp -MT crypto/x509v3/v3_conf.o -c -o crypto/x509v3/v3_conf.o crypto/x509v3/v3_conf.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_cpols.d.tmp -MT crypto/x509v3/v3_cpols.o -c -o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_cpols.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_crld.d.tmp -MT crypto/x509v3/v3_crld.o -c -o crypto/x509v3/v3_crld.o crypto/x509v3/v3_crld.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_enum.d.tmp -MT crypto/x509v3/v3_enum.o -c -o crypto/x509v3/v3_enum.o crypto/x509v3/v3_enum.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_extku.d.tmp -MT crypto/x509v3/v3_extku.o -c -o crypto/x509v3/v3_extku.o crypto/x509v3/v3_extku.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_genn.d.tmp -MT crypto/x509v3/v3_genn.o -c -o crypto/x509v3/v3_genn.o crypto/x509v3/v3_genn.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_ia5.d.tmp -MT crypto/x509v3/v3_ia5.o -c -o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_ia5.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_info.d.tmp -MT crypto/x509v3/v3_info.o -c -o crypto/x509v3/v3_info.o crypto/x509v3/v3_info.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_int.d.tmp -MT crypto/x509v3/v3_int.o -c -o crypto/x509v3/v3_int.o crypto/x509v3/v3_int.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_lib.d.tmp -MT crypto/x509v3/v3_lib.o -c -o crypto/x509v3/v3_lib.o crypto/x509v3/v3_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_ncons.d.tmp -MT crypto/x509v3/v3_ncons.o -c -o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_ncons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pci.d.tmp -MT crypto/x509v3/v3_pci.o -c -o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pci.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pcia.d.tmp -MT crypto/x509v3/v3_pcia.o -c -o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcia.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pcons.d.tmp -MT crypto/x509v3/v3_pcons.o -c -o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pcons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pku.d.tmp -MT crypto/x509v3/v3_pku.o -c -o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pku.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pmaps.d.tmp -MT crypto/x509v3/v3_pmaps.o -c -o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_pmaps.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_prn.d.tmp -MT crypto/x509v3/v3_prn.o -c -o crypto/x509v3/v3_prn.o crypto/x509v3/v3_prn.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_purp.d.tmp -MT crypto/x509v3/v3_purp.o -c -o crypto/x509v3/v3_purp.o crypto/x509v3/v3_purp.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_skey.d.tmp -MT crypto/x509v3/v3_skey.o -c -o crypto/x509v3/v3_skey.o crypto/x509v3/v3_skey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_sxnet.d.tmp -MT crypto/x509v3/v3_sxnet.o -c -o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_sxnet.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_tlsf.d.tmp -MT crypto/x509v3/v3_tlsf.o -c -o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_tlsf.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_utl.d.tmp -MT crypto/x509v3/v3_utl.o -c -o crypto/x509v3/v3_utl.o crypto/x509v3/v3_utl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3err.d.tmp -MT crypto/x509v3/v3err.o -c -o crypto/x509v3/v3err.o crypto/x509v3/v3err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF engines/e_capi.d.tmp -MT engines/e_capi.o -c -o engines/e_capi.o engines/e_capi.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF engines/e_padlock.d.tmp -MT engines/e_padlock.o -c -o engines/e_padlock.o engines/e_padlock.c
mips64-octeon-linux-gnu-ar r libcrypto.a crypto/aes/aes-mips.o crypto/aes/aes_cbc.o crypto/aes/aes_cfb.o crypto/aes/aes_ecb.o crypto/aes/aes_ige.o crypto/aes/aes_misc.o crypto/aes/aes_ofb.o crypto/aes/aes_wrap.o crypto/aria/aria.o crypto/asn1/a_bitstr.o crypto/asn1/a_d2i_fp.o crypto/asn1/a_digest.o crypto/asn1/a_dup.o crypto/asn1/a_gentm.o crypto/asn1/a_i2d_fp.o crypto/asn1/a_int.o crypto/asn1/a_mbstr.o crypto/asn1/a_object.o crypto/asn1/a_octet.o crypto/asn1/a_print.o crypto/asn1/a_sign.o crypto/asn1/a_strex.o crypto/asn1/a_strnid.o crypto/asn1/a_time.o crypto/asn1/a_type.o crypto/asn1/a_utctm.o crypto/asn1/a_utf8.o crypto/asn1/a_verify.o crypto/asn1/ameth_lib.o crypto/asn1/asn1_err.o crypto/asn1/asn1_gen.o crypto/asn1/asn1_item_list.o crypto/asn1/asn1_lib.o crypto/asn1/asn1_par.o crypto/asn1/asn_mime.o crypto/asn1/asn_moid.o crypto/asn1/asn_mstbl.o crypto/asn1/asn_pack.o crypto/asn1/bio_asn1.o crypto/asn1/bio_ndef.o crypto/asn1/d2i_pr.o crypto/asn1/d2i_pu.o crypto/asn1/evp_asn1.o crypto/asn1/f_int.o crypto/asn1/f_string.o crypto/asn1/i2d_pr.o crypto/asn1/i2d_pu.o crypto/asn1/n_pkey.o crypto/asn1/nsseq.o crypto/asn1/p5_pbe.o crypto/asn1/p5_pbev2.o crypto/asn1/p5_scrypt.o crypto/asn1/p8_pkey.o crypto/asn1/t_bitst.o crypto/asn1/t_pkey.o crypto/asn1/t_spki.o crypto/asn1/tasn_dec.o crypto/asn1/tasn_enc.o crypto/asn1/tasn_fre.o crypto/asn1/tasn_new.o crypto/asn1/tasn_prn.o crypto/asn1/tasn_scn.o crypto/asn1/tasn_typ.o crypto/asn1/tasn_utl.o crypto/asn1/x_algor.o crypto/asn1/x_bignum.o crypto/asn1/x_info.o crypto/asn1/x_int64.o crypto/asn1/x_long.o crypto/asn1/x_pkey.o crypto/asn1/x_sig.o crypto/asn1/x_spki.o crypto/asn1/x_val.o crypto/async/arch/async_null.o crypto/async/arch/async_posix.o crypto/async/arch/async_win.o crypto/async/async.o crypto/async/async_err.o crypto/async/async_wait.o crypto/bf/bf_cfb64.o crypto/bf/bf_ecb.o crypto/bf/bf_enc.o crypto/bf/bf_ofb64.o crypto/bf/bf_skey.o crypto/bio/b_addr.o crypto/bio/b_dump.o crypto/bio/b_print.o crypto/bio/b_sock.o crypto/bio/b_sock2.o crypto/bio/bf_buff.o crypto/bio/bf_lbuf.o crypto/bio/bf_nbio.o crypto/bio/bf_null.o crypto/bio/bio_cb.o crypto/bio/bio_err.o crypto/bio/bio_lib.o crypto/bio/bio_meth.o crypto/bio/bss_acpt.o crypto/bio/bss_bio.o crypto/bio/bss_conn.o crypto/bio/bss_dgram.o crypto/bio/bss_fd.o crypto/bio/bss_file.o crypto/bio/bss_log.o crypto/bio/bss_mem.o crypto/bio/bss_null.o crypto/bio/bss_sock.o crypto/blake2/blake2b.o crypto/blake2/blake2s.o crypto/blake2/m_blake2b.o crypto/blake2/m_blake2s.o crypto/bn/bn-mips.o crypto/bn/bn_add.o crypto/bn/bn_blind.o crypto/bn/bn_const.o crypto/bn/bn_ctx.o crypto/bn/bn_depr.o crypto/bn/bn_dh.o crypto/bn/bn_div.o crypto/bn/bn_err.o crypto/bn/bn_exp.o crypto/bn/bn_exp2.o crypto/bn/bn_gcd.o crypto/bn/bn_gf2m.o crypto/bn/bn_intern.o crypto/bn/bn_kron.o crypto/bn/bn_lib.o crypto/bn/bn_mod.o crypto/bn/bn_mont.o crypto/bn/bn_mpi.o crypto/bn/bn_mul.o crypto/bn/bn_nist.o crypto/bn/bn_prime.o crypto/bn/bn_print.o crypto/bn/bn_rand.o crypto/bn/bn_recp.o crypto/bn/bn_shift.o crypto/bn/bn_sqr.o crypto/bn/bn_sqrt.o crypto/bn/bn_srp.o crypto/bn/bn_word.o crypto/bn/bn_x931p.o crypto/bn/mips-mont.o crypto/buffer/buf_err.o crypto/buffer/buffer.o crypto/camellia/camellia.o crypto/camellia/cmll_cbc.o crypto/camellia/cmll_cfb.o crypto/camellia/cmll_ctr.o crypto/camellia/cmll_ecb.o crypto/camellia/cmll_misc.o crypto/camellia/cmll_ofb.o crypto/cast/c_cfb64.o crypto/cast/c_ecb.o crypto/cast/c_enc.o crypto/cast/c_ofb64.o crypto/cast/c_skey.o crypto/chacha/chacha_enc.o crypto/cmac/cm_ameth.o crypto/cmac/cm_pmeth.o crypto/cmac/cmac.o crypto/cms/cms_asn1.o crypto/cms/cms_att.o crypto/cms/cms_cd.o crypto/cms/cms_dd.o crypto/cms/cms_enc.o crypto/cms/cms_env.o crypto/cms/cms_err.o crypto/cms/cms_ess.o crypto/cms/cms_io.o crypto/cms/cms_kari.o crypto/cms/cms_lib.o crypto/cms/cms_pwri.o crypto/cms/cms_sd.o crypto/cms/cms_smime.o crypto/comp/c_zlib.o crypto/comp/comp_err.o crypto/comp/comp_lib.o crypto/conf/conf_api.o crypto/conf/conf_def.o crypto/conf/conf_err.o crypto/conf/conf_lib.o crypto/conf/conf_mall.o crypto/conf/conf_mod.o crypto/conf/conf_sap.o crypto/cpt_err.o crypto/cryptlib.o crypto/ct/ct_b64.o crypto/ct/ct_err.o crypto/ct/ct_log.o crypto/ct/ct_oct.o crypto/ct/ct_policy.o crypto/ct/ct_prn.o crypto/ct/ct_sct.o crypto/ct/ct_sct_ctx.o crypto/ct/ct_vfy.o crypto/ct/ct_x509v3.o crypto/ctype.o crypto/cversion.o crypto/des/cbc_cksm.o crypto/des/cbc_enc.o crypto/des/cfb64ede.o crypto/des/cfb64enc.o crypto/des/cfb_enc.o crypto/des/des_enc.o crypto/des/ecb3_enc.o crypto/des/ecb_enc.o crypto/des/fcrypt.o crypto/des/fcrypt_b.o crypto/des/ofb64ede.o crypto/des/ofb64enc.o crypto/des/ofb_enc.o crypto/des/pcbc_enc.o crypto/des/qud_cksm.o crypto/des/rand_key.o crypto/des/set_key.o crypto/des/str2key.o crypto/des/xcbc_enc.o crypto/dh/dh_ameth.o crypto/dh/dh_asn1.o crypto/dh/dh_check.o crypto/dh/dh_depr.o crypto/dh/dh_err.o crypto/dh/dh_gen.o crypto/dh/dh_kdf.o crypto/dh/dh_key.o crypto/dh/dh_lib.o crypto/dh/dh_meth.o crypto/dh/dh_pmeth.o crypto/dh/dh_prn.o crypto/dh/dh_rfc5114.o crypto/dh/dh_rfc7919.o crypto/dsa/dsa_ameth.o crypto/dsa/dsa_asn1.o crypto/dsa/dsa_depr.o crypto/dsa/dsa_err.o crypto/dsa/dsa_gen.o crypto/dsa/dsa_key.o crypto/dsa/dsa_lib.o crypto/dsa/dsa_meth.o crypto/dsa/dsa_ossl.o crypto/dsa/dsa_pmeth.o crypto/dsa/dsa_prn.o crypto/dsa/dsa_sign.o crypto/dsa/dsa_vrf.o crypto/dso/dso_dl.o crypto/dso/dso_dlfcn.o crypto/dso/dso_err.o crypto/dso/dso_lib.o crypto/dso/dso_openssl.o crypto/dso/dso_vms.o crypto/dso/dso_win32.o crypto/ebcdic.o crypto/ec/curve25519.o crypto/ec/ec2_mult.o crypto/ec/ec2_oct.o crypto/ec/ec2_smpl.o crypto/ec/ec_ameth.o crypto/ec/ec_asn1.o crypto/ec/ec_check.o crypto/ec/ec_curve.o crypto/ec/ec_cvt.o crypto/ec/ec_err.o crypto/ec/ec_key.o crypto/ec/ec_kmeth.o crypto/ec/ec_lib.o crypto/ec/ec_mult.o crypto/ec/ec_oct.o crypto/ec/ec_pmeth.o crypto/ec/ec_print.o crypto/ec/ecdh_kdf.o crypto/ec/ecdh_ossl.o crypto/ec/ecdsa_ossl.o crypto/ec/ecdsa_sign.o crypto/ec/ecdsa_vrf.o crypto/ec/eck_prn.o crypto/ec/ecp_mont.o crypto/ec/ecp_nist.o crypto/ec/ecp_nistp224.o crypto/ec/ecp_nistp256.o crypto/ec/ecp_nistp521.o crypto/ec/ecp_nistputil.o crypto/ec/ecp_oct.o crypto/ec/ecp_smpl.o crypto/ec/ecx_meth.o crypto/engine/eng_all.o crypto/engine/eng_cnf.o crypto/engine/eng_ctrl.o crypto/engine/eng_dyn.o crypto/engine/eng_err.o crypto/engine/eng_fat.o crypto/engine/eng_init.o crypto/engine/eng_lib.o crypto/engine/eng_list.o crypto/engine/eng_openssl.o crypto/engine/eng_pkey.o crypto/engine/eng_rdrand.o crypto/engine/eng_table.o crypto/engine/tb_asnmth.o crypto/engine/tb_cipher.o crypto/engine/tb_dh.o crypto/engine/tb_digest.o crypto/engine/tb_dsa.o crypto/engine/tb_eckey.o crypto/engine/tb_pkmeth.o crypto/engine/tb_rand.o crypto/engine/tb_rsa.o crypto/err/err.o crypto/err/err_all.o crypto/err/err_prn.o crypto/evp/bio_b64.o crypto/evp/bio_enc.o crypto/evp/bio_md.o crypto/evp/bio_ok.o crypto/evp/c_allc.o crypto/evp/c_alld.o crypto/evp/cmeth_lib.o crypto/evp/digest.o crypto/evp/e_aes.o crypto/evp/e_aes_cbc_hmac_sha1.o crypto/evp/e_aes_cbc_hmac_sha256.o crypto/evp/e_aria.o crypto/evp/e_bf.o crypto/evp/e_camellia.o crypto/evp/e_cast.o crypto/evp/e_chacha20_poly1305.o crypto/evp/e_des.o crypto/evp/e_des3.o crypto/evp/e_idea.o crypto/evp/e_null.o crypto/evp/e_old.o crypto/evp/e_rc2.o crypto/evp/e_rc4.o crypto/evp/e_rc4_hmac_md5.o crypto/evp/e_rc5.o crypto/evp/e_seed.o crypto/evp/e_sm4.o crypto/evp/e_xcbc_d.o crypto/evp/encode.o crypto/evp/evp_cnf.o crypto/evp/evp_enc.o crypto/evp/evp_err.o crypto/evp/evp_key.o crypto/evp/evp_lib.o crypto/evp/evp_pbe.o crypto/evp/evp_pkey.o crypto/evp/m_md2.o crypto/evp/m_md4.o crypto/evp/m_md5.o crypto/evp/m_md5_sha1.o crypto/evp/m_mdc2.o crypto/evp/m_null.o crypto/evp/m_ripemd.o crypto/evp/m_sha1.o crypto/evp/m_sha3.o crypto/evp/m_sigver.o crypto/evp/m_wp.o crypto/evp/names.o crypto/evp/p5_crpt.o crypto/evp/p5_crpt2.o crypto/evp/p_dec.o crypto/evp/p_enc.o crypto/evp/p_lib.o crypto/evp/p_open.o crypto/evp/p_seal.o crypto/evp/p_sign.o crypto/evp/p_verify.o crypto/evp/pbe_scrypt.o crypto/evp/pmeth_fn.o crypto/evp/pmeth_gn.o crypto/evp/pmeth_lib.o crypto/ex_data.o crypto/hmac/hm_ameth.o crypto/hmac/hm_pmeth.o crypto/hmac/hmac.o crypto/idea/i_cbc.o crypto/idea/i_cfb64.o crypto/idea/i_ecb.o crypto/idea/i_ofb64.o crypto/idea/i_skey.o crypto/init.o crypto/kdf/hkdf.o crypto/kdf/kdf_err.o crypto/kdf/scrypt.o crypto/kdf/tls1_prf.o crypto/lhash/lh_stats.o crypto/lhash/lhash.o crypto/md4/md4_dgst.o crypto/md4/md4_one.o crypto/md5/md5_dgst.o crypto/md5/md5_one.o crypto/mdc2/mdc2_one.o crypto/mdc2/mdc2dgst.o crypto/mem.o crypto/mem_clr.o crypto/mem_dbg.o crypto/mem_sec.o crypto/modes/cbc128.o crypto/modes/ccm128.o crypto/modes/cfb128.o crypto/modes/ctr128.o crypto/modes/cts128.o crypto/modes/gcm128.o crypto/modes/ocb128.o crypto/modes/ofb128.o crypto/modes/wrap128.o crypto/modes/xts128.o crypto/o_dir.o crypto/o_fips.o crypto/o_fopen.o crypto/o_init.o crypto/o_str.o crypto/o_time.o crypto/objects/o_names.o crypto/objects/obj_dat.o crypto/objects/obj_err.o crypto/objects/obj_lib.o crypto/objects/obj_xref.o crypto/ocsp/ocsp_asn.o crypto/ocsp/ocsp_cl.o crypto/ocsp/ocsp_err.o crypto/ocsp/ocsp_ext.o crypto/ocsp/ocsp_ht.o crypto/ocsp/ocsp_lib.o crypto/ocsp/ocsp_prn.o crypto/ocsp/ocsp_srv.o crypto/ocsp/ocsp_vfy.o crypto/ocsp/v3_ocsp.o crypto/pem/pem_all.o crypto/pem/pem_err.o crypto/pem/pem_info.o crypto/pem/pem_lib.o crypto/pem/pem_oth.o crypto/pem/pem_pk8.o crypto/pem/pem_pkey.o crypto/pem/pem_sign.o crypto/pem/pem_x509.o crypto/pem/pem_xaux.o crypto/pem/pvkfmt.o crypto/pkcs12/p12_add.o crypto/pkcs12/p12_asn.o crypto/pkcs12/p12_attr.o crypto/pkcs12/p12_crpt.o crypto/pkcs12/p12_crt.o crypto/pkcs12/p12_decr.o crypto/pkcs12/p12_init.o crypto/pkcs12/p12_key.o crypto/pkcs12/p12_kiss.o crypto/pkcs12/p12_mutl.o crypto/pkcs12/p12_npas.o crypto/pkcs12/p12_p8d.o crypto/pkcs12/p12_p8e.o crypto/pkcs12/p12_sbag.o crypto/pkcs12/p12_utl.o crypto/pkcs12/pk12err.o crypto/pkcs7/bio_pk7.o crypto/pkcs7/pk7_asn1.o crypto/pkcs7/pk7_attr.o crypto/pkcs7/pk7_doit.o crypto/pkcs7/pk7_lib.o crypto/pkcs7/pk7_mime.o crypto/pkcs7/pk7_smime.o crypto/pkcs7/pkcs7err.o crypto/poly1305/poly1305-mips.o crypto/poly1305/poly1305.o crypto/poly1305/poly1305_ameth.o crypto/poly1305/poly1305_pmeth.o crypto/rand/drbg_ctr.o crypto/rand/drbg_lib.o crypto/rand/rand_egd.o crypto/rand/rand_err.o crypto/rand/rand_lib.o crypto/rand/rand_unix.o crypto/rand/rand_vms.o crypto/rand/rand_win.o crypto/rand/randfile.o crypto/rc2/rc2_cbc.o crypto/rc2/rc2_ecb.o crypto/rc2/rc2_skey.o crypto/rc2/rc2cfb64.o crypto/rc2/rc2ofb64.o crypto/rc4/rc4_enc.o crypto/rc4/rc4_skey.o crypto/ripemd/rmd_dgst.o crypto/ripemd/rmd_one.o crypto/rsa/rsa_ameth.o crypto/rsa/rsa_asn1.o crypto/rsa/rsa_chk.o crypto/rsa/rsa_crpt.o crypto/rsa/rsa_depr.o crypto/rsa/rsa_err.o crypto/rsa/rsa_gen.o crypto/rsa/rsa_lib.o crypto/rsa/rsa_meth.o crypto/rsa/rsa_mp.o crypto/rsa/rsa_none.o crypto/rsa/rsa_oaep.o crypto/rsa/rsa_ossl.o crypto/rsa/rsa_pk1.o crypto/rsa/rsa_pmeth.o crypto/rsa/rsa_prn.o crypto/rsa/rsa_pss.o crypto/rsa/rsa_saos.o crypto/rsa/rsa_sign.o crypto/rsa/rsa_ssl.o crypto/rsa/rsa_x931.o crypto/rsa/rsa_x931g.o crypto/seed/seed.o crypto/seed/seed_cbc.o crypto/seed/seed_cfb.o crypto/seed/seed_ecb.o crypto/seed/seed_ofb.o crypto/sha/keccak1600.o crypto/sha/sha1-mips.o crypto/sha/sha1_one.o crypto/sha/sha1dgst.o crypto/sha/sha256-mips.o crypto/sha/sha256.o crypto/sha/sha512-mips.o crypto/sha/sha512.o crypto/siphash/siphash.o crypto/siphash/siphash_ameth.o crypto/siphash/siphash_pmeth.o crypto/sm3/m_sm3.o crypto/sm3/sm3.o crypto/sm4/sm4.o crypto/srp/srp_lib.o crypto/srp/srp_vfy.o crypto/stack/stack.o crypto/store/loader_file.o crypto/store/store_err.o crypto/store/store_init.o crypto/store/store_lib.o crypto/store/store_register.o crypto/store/store_strings.o crypto/threads_none.o crypto/threads_pthread.o crypto/threads_win.o crypto/ts/ts_asn1.o crypto/ts/ts_conf.o crypto/ts/ts_err.o crypto/ts/ts_lib.o crypto/ts/ts_req_print.o crypto/ts/ts_req_utils.o crypto/ts/ts_rsp_print.o crypto/ts/ts_rsp_sign.o crypto/ts/ts_rsp_utils.o crypto/ts/ts_rsp_verify.o crypto/ts/ts_verify_ctx.o crypto/txt_db/txt_db.o crypto/ui/ui_err.o crypto/ui/ui_lib.o crypto/ui/ui_null.o crypto/ui/ui_openssl.o crypto/ui/ui_util.o crypto/uid.o crypto/whrlpool/wp_block.o crypto/whrlpool/wp_dgst.o crypto/x509/by_dir.o crypto/x509/by_file.o crypto/x509/t_crl.o crypto/x509/t_req.o crypto/x509/t_x509.o crypto/x509/x509_att.o crypto/x509/x509_cmp.o crypto/x509/x509_d2.o crypto/x509/x509_def.o crypto/x509/x509_err.o crypto/x509/x509_ext.o crypto/x509/x509_lu.o crypto/x509/x509_obj.o crypto/x509/x509_r2x.o crypto/x509/x509_req.o crypto/x509/x509_set.o crypto/x509/x509_trs.o crypto/x509/x509_txt.o crypto/x509/x509_v3.o crypto/x509/x509_vfy.o crypto/x509/x509_vpm.o crypto/x509/x509cset.o crypto/x509/x509name.o crypto/x509/x509rset.o crypto/x509/x509spki.o crypto/x509/x509type.o crypto/x509/x_all.o crypto/x509/x_attrib.o crypto/x509/x_crl.o crypto/x509/x_exten.o crypto/x509/x_name.o crypto/x509/x_pubkey.o crypto/x509/x_req.o crypto/x509/x_x509.o crypto/x509/x_x509a.o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_tree.o crypto/x509v3/v3_addr.o crypto/x509v3/v3_admis.o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_alt.o crypto/x509v3/v3_asid.o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_conf.o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_crld.o crypto/x509v3/v3_enum.o crypto/x509v3/v3_extku.o crypto/x509v3/v3_genn.o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_info.o crypto/x509v3/v3_int.o crypto/x509v3/v3_lib.o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_prn.o crypto/x509v3/v3_purp.o crypto/x509v3/v3_skey.o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_utl.o crypto/x509v3/v3err.o engines/e_capi.o engines/e_padlock.o
mips64-octeon-linux-gnu-ar: creating libcrypto.a
mips64-octeon-linux-gnu-ranlib libcrypto.a || echo Never mind.
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/bio_ssl.d.tmp -MT ssl/bio_ssl.o -c -o ssl/bio_ssl.o ssl/bio_ssl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_lib.d.tmp -MT ssl/d1_lib.o -c -o ssl/d1_lib.o ssl/d1_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_msg.d.tmp -MT ssl/d1_msg.o -c -o ssl/d1_msg.o ssl/d1_msg.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_srtp.d.tmp -MT ssl/d1_srtp.o -c -o ssl/d1_srtp.o ssl/d1_srtp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/methods.d.tmp -MT ssl/methods.o -c -o ssl/methods.o ssl/methods.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/packet.d.tmp -MT ssl/packet.o -c -o ssl/packet.o ssl/packet.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/pqueue.d.tmp -MT ssl/pqueue.o -c -o ssl/pqueue.o ssl/pqueue.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/dtls1_bitmap.d.tmp -MT ssl/record/dtls1_bitmap.o -c -o ssl/record/dtls1_bitmap.o ssl/record/dtls1_bitmap.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/rec_layer_d1.d.tmp -MT ssl/record/rec_layer_d1.o -c -o ssl/record/rec_layer_d1.o ssl/record/rec_layer_d1.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/rec_layer_s3.d.tmp -MT ssl/record/rec_layer_s3.o -c -o ssl/record/rec_layer_s3.o ssl/record/rec_layer_s3.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_buffer.d.tmp -MT ssl/record/ssl3_buffer.o -c -o ssl/record/ssl3_buffer.o ssl/record/ssl3_buffer.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_record.d.tmp -MT ssl/record/ssl3_record.o -c -o ssl/record/ssl3_record.o ssl/record/ssl3_record.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_record_tls13.d.tmp -MT ssl/record/ssl3_record_tls13.o -c -o ssl/record/ssl3_record_tls13.o ssl/record/ssl3_record_tls13.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_cbc.d.tmp -MT ssl/s3_cbc.o -c -o ssl/s3_cbc.o ssl/s3_cbc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_enc.d.tmp -MT ssl/s3_enc.o -c -o ssl/s3_enc.o ssl/s3_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_lib.d.tmp -MT ssl/s3_lib.o -c -o ssl/s3_lib.o ssl/s3_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_msg.d.tmp -MT ssl/s3_msg.o -c -o ssl/s3_msg.o ssl/s3_msg.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_asn1.d.tmp -MT ssl/ssl_asn1.o -c -o ssl/ssl_asn1.o ssl/ssl_asn1.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_cert.d.tmp -MT ssl/ssl_cert.o -c -o ssl/ssl_cert.o ssl/ssl_cert.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_ciph.d.tmp -MT ssl/ssl_ciph.o -c -o ssl/ssl_ciph.o ssl/ssl_ciph.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_conf.d.tmp -MT ssl/ssl_conf.o -c -o ssl/ssl_conf.o ssl/ssl_conf.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_err.d.tmp -MT ssl/ssl_err.o -c -o ssl/ssl_err.o ssl/ssl_err.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_init.d.tmp -MT ssl/ssl_init.o -c -o ssl/ssl_init.o ssl/ssl_init.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_lib.d.tmp -MT ssl/ssl_lib.o -c -o ssl/ssl_lib.o ssl/ssl_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_mcnf.d.tmp -MT ssl/ssl_mcnf.o -c -o ssl/ssl_mcnf.o ssl/ssl_mcnf.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_rsa.d.tmp -MT ssl/ssl_rsa.o -c -o ssl/ssl_rsa.o ssl/ssl_rsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_sess.d.tmp -MT ssl/ssl_sess.o -c -o ssl/ssl_sess.o ssl/ssl_sess.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_stat.d.tmp -MT ssl/ssl_stat.o -c -o ssl/ssl_stat.o ssl/ssl_stat.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_txt.d.tmp -MT ssl/ssl_txt.o -c -o ssl/ssl_txt.o ssl/ssl_txt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_utst.d.tmp -MT ssl/ssl_utst.o -c -o ssl/ssl_utst.o ssl/ssl_utst.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions.d.tmp -MT ssl/statem/extensions.o -c -o ssl/statem/extensions.o ssl/statem/extensions.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_clnt.d.tmp -MT ssl/statem/extensions_clnt.o -c -o ssl/statem/extensions_clnt.o ssl/statem/extensions_clnt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_cust.d.tmp -MT ssl/statem/extensions_cust.o -c -o ssl/statem/extensions_cust.o ssl/statem/extensions_cust.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_srvr.d.tmp -MT ssl/statem/extensions_srvr.o -c -o ssl/statem/extensions_srvr.o ssl/statem/extensions_srvr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem.d.tmp -MT ssl/statem/statem.o -c -o ssl/statem/statem.o ssl/statem/statem.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_clnt.d.tmp -MT ssl/statem/statem_clnt.o -c -o ssl/statem/statem_clnt.o ssl/statem/statem_clnt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_dtls.d.tmp -MT ssl/statem/statem_dtls.o -c -o ssl/statem/statem_dtls.o ssl/statem/statem_dtls.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_lib.d.tmp -MT ssl/statem/statem_lib.o -c -o ssl/statem/statem_lib.o ssl/statem/statem_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_srvr.d.tmp -MT ssl/statem/statem_srvr.o -c -o ssl/statem/statem_srvr.o ssl/statem/statem_srvr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_enc.d.tmp -MT ssl/t1_enc.o -c -o ssl/t1_enc.o ssl/t1_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_lib.d.tmp -MT ssl/t1_lib.o -c -o ssl/t1_lib.o ssl/t1_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_trce.d.tmp -MT ssl/t1_trce.o -c -o ssl/t1_trce.o ssl/t1_trce.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/tls13_enc.d.tmp -MT ssl/tls13_enc.o -c -o ssl/tls13_enc.o ssl/tls13_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/tls_srp.d.tmp -MT ssl/tls_srp.o -c -o ssl/tls_srp.o ssl/tls_srp.c
mips64-octeon-linux-gnu-ar r libssl.a ssl/bio_ssl.o ssl/d1_lib.o ssl/d1_msg.o ssl/d1_srtp.o ssl/methods.o ssl/packet.o ssl/pqueue.o ssl/record/dtls1_bitmap.o ssl/record/rec_layer_d1.o ssl/record/rec_layer_s3.o ssl/record/ssl3_buffer.o ssl/record/ssl3_record.o ssl/record/ssl3_record_tls13.o ssl/s3_cbc.o ssl/s3_enc.o ssl/s3_lib.o ssl/s3_msg.o ssl/ssl_asn1.o ssl/ssl_cert.o ssl/ssl_ciph.o ssl/ssl_conf.o ssl/ssl_err.o ssl/ssl_init.o ssl/ssl_lib.o ssl/ssl_mcnf.o ssl/ssl_rsa.o ssl/ssl_sess.o ssl/ssl_stat.o ssl/ssl_txt.o ssl/ssl_utst.o ssl/statem/extensions.o ssl/statem/extensions_clnt.o ssl/statem/extensions_cust.o ssl/statem/extensions_srvr.o ssl/statem/statem.o ssl/statem/statem_clnt.o ssl/statem/statem_dtls.o ssl/statem/statem_lib.o ssl/statem/statem_srvr.o ssl/t1_enc.o ssl/t1_lib.o ssl/t1_trce.o ssl/tls13_enc.o ssl/tls_srp.o
mips64-octeon-linux-gnu-ar: creating libssl.a
mips64-octeon-linux-gnu-ranlib libssl.a || echo Never mind.
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/basic_output.d.tmp -MT test/testutil/basic_output.o -c -o test/testutil/basic_output.o test/testutil/basic_output.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/cb.d.tmp -MT test/testutil/cb.o -c -o test/testutil/cb.o test/testutil/cb.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/driver.d.tmp -MT test/testutil/driver.o -c -o test/testutil/driver.o test/testutil/driver.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/format_output.d.tmp -MT test/testutil/format_output.o -c -o test/testutil/format_output.o test/testutil/format_output.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/init.d.tmp -MT test/testutil/init.o -c -o test/testutil/init.o test/testutil/init.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/main.d.tmp -MT test/testutil/main.o -c -o test/testutil/main.o test/testutil/main.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/output_helpers.d.tmp -MT test/testutil/output_helpers.o -c -o test/testutil/output_helpers.o test/testutil/output_helpers.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/stanza.d.tmp -MT test/testutil/stanza.o -c -o test/testutil/stanza.o test/testutil/stanza.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/tap_bio.d.tmp -MT test/testutil/tap_bio.o -c -o test/testutil/tap_bio.o test/testutil/tap_bio.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/test_cleanup.d.tmp -MT test/testutil/test_cleanup.o -c -o test/testutil/test_cleanup.o test/testutil/test_cleanup.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/tests.d.tmp -MT test/testutil/tests.o -c -o test/testutil/tests.o test/testutil/tests.c
mips64-octeon-linux-gnu-ar r test/libtestutil.a test/testutil/basic_output.o test/testutil/cb.o test/testutil/driver.o test/testutil/format_output.o test/testutil/init.o test/testutil/main.o test/testutil/output_helpers.o test/testutil/stanza.o test/testutil/tap_bio.o test/testutil/test_cleanup.o test/testutil/tests.o
mips64-octeon-linux-gnu-ar: creating test/libtestutil.a
mips64-octeon-linux-gnu-ranlib test/libtestutil.a || echo Never mind.
/usr/bin/perl apps/progs.pl apps/openssl > apps/progs.h
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/asn1pars.d.tmp -MT apps/asn1pars.o -c -o apps/asn1pars.o apps/asn1pars.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ca.d.tmp -MT apps/ca.o -c -o apps/ca.o apps/ca.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ciphers.d.tmp -MT apps/ciphers.o -c -o apps/ciphers.o apps/ciphers.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/cms.d.tmp -MT apps/cms.o -c -o apps/cms.o apps/cms.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/crl.d.tmp -MT apps/crl.o -c -o apps/crl.o apps/crl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/crl2p7.d.tmp -MT apps/crl2p7.o -c -o apps/crl2p7.o apps/crl2p7.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dgst.d.tmp -MT apps/dgst.o -c -o apps/dgst.o apps/dgst.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dhparam.d.tmp -MT apps/dhparam.o -c -o apps/dhparam.o apps/dhparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dsa.d.tmp -MT apps/dsa.o -c -o apps/dsa.o apps/dsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dsaparam.d.tmp -MT apps/dsaparam.o -c -o apps/dsaparam.o apps/dsaparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ec.d.tmp -MT apps/ec.o -c -o apps/ec.o apps/ec.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ecparam.d.tmp -MT apps/ecparam.o -c -o apps/ecparam.o apps/ecparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/enc.d.tmp -MT apps/enc.o -c -o apps/enc.o apps/enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/engine.d.tmp -MT apps/engine.o -c -o apps/engine.o apps/engine.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/errstr.d.tmp -MT apps/errstr.o -c -o apps/errstr.o apps/errstr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/gendsa.d.tmp -MT apps/gendsa.o -c -o apps/gendsa.o apps/gendsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/genpkey.d.tmp -MT apps/genpkey.o -c -o apps/genpkey.o apps/genpkey.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/genrsa.d.tmp -MT apps/genrsa.o -c -o apps/genrsa.o apps/genrsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/nseq.d.tmp -MT apps/nseq.o -c -o apps/nseq.o apps/nseq.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ocsp.d.tmp -MT apps/ocsp.o -c -o apps/ocsp.o apps/ocsp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/openssl.d.tmp -MT apps/openssl.o -c -o apps/openssl.o apps/openssl.c
apps/openssl.c: In function 'list_type':
apps/openssl.c:523: warning: 'dc.width' may be used uninitialized in this function
apps/openssl.c:523: warning: 'dc.columns' may be used uninitialized in this function
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/passwd.d.tmp -MT apps/passwd.o -c -o apps/passwd.o apps/passwd.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs12.d.tmp -MT apps/pkcs12.o -c -o apps/pkcs12.o apps/pkcs12.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs7.d.tmp -MT apps/pkcs7.o -c -o apps/pkcs7.o apps/pkcs7.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs8.d.tmp -MT apps/pkcs8.o -c -o apps/pkcs8.o apps/pkcs8.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkey.d.tmp -MT apps/pkey.o -c -o apps/pkey.o apps/pkey.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkeyparam.d.tmp -MT apps/pkeyparam.o -c -o apps/pkeyparam.o apps/pkeyparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkeyutl.d.tmp -MT apps/pkeyutl.o -c -o apps/pkeyutl.o apps/pkeyutl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/prime.d.tmp -MT apps/prime.o -c -o apps/prime.o apps/prime.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rand.d.tmp -MT apps/rand.o -c -o apps/rand.o apps/rand.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rehash.d.tmp -MT apps/rehash.o -c -o apps/rehash.o apps/rehash.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/req.d.tmp -MT apps/req.o -c -o apps/req.o apps/req.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rsa.d.tmp -MT apps/rsa.o -c -o apps/rsa.o apps/rsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rsautl.d.tmp -MT apps/rsautl.o -c -o apps/rsautl.o apps/rsautl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_client.d.tmp -MT apps/s_client.o -c -o apps/s_client.o apps/s_client.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_server.d.tmp -MT apps/s_server.o -c -o apps/s_server.o apps/s_server.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_time.d.tmp -MT apps/s_time.o -c -o apps/s_time.o apps/s_time.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/sess_id.d.tmp -MT apps/sess_id.o -c -o apps/sess_id.o apps/sess_id.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/smime.d.tmp -MT apps/smime.o -c -o apps/smime.o apps/smime.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/speed.d.tmp -MT apps/speed.o -c -o apps/speed.o apps/speed.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/spkac.d.tmp -MT apps/spkac.o -c -o apps/spkac.o apps/spkac.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/srp.d.tmp -MT apps/srp.o -c -o apps/srp.o apps/srp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/storeutl.d.tmp -MT apps/storeutl.o -c -o apps/storeutl.o apps/storeutl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ts.d.tmp -MT apps/ts.o -c -o apps/ts.o apps/ts.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/verify.d.tmp -MT apps/verify.o -c -o apps/verify.o apps/verify.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/version.d.tmp -MT apps/version.o -c -o apps/version.o apps/version.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/x509.d.tmp -MT apps/x509.o -c -o apps/x509.o apps/x509.c
rm -f apps/openssl
${LDCMD:-mips64-octeon-linux-gnu-gcc} -mips3 -Wall -O3 -pthread -mabi=n32  -L.   \
		-o apps/openssl apps/asn1pars.o apps/ca.o apps/ciphers.o apps/cms.o apps/crl.o apps/crl2p7.o apps/dgst.o apps/dhparam.o apps/dsa.o apps/dsaparam.o apps/ec.o apps/ecparam.o apps/enc.o apps/engine.o apps/errstr.o apps/gendsa.o apps/genpkey.o apps/genrsa.o apps/nseq.o apps/ocsp.o apps/openssl.o apps/passwd.o apps/pkcs12.o apps/pkcs7.o apps/pkcs8.o apps/pkey.o apps/pkeyparam.o apps/pkeyutl.o apps/prime.o apps/rand.o apps/rehash.o apps/req.o apps/rsa.o apps/rsautl.o apps/s_client.o apps/s_server.o apps/s_time.o apps/sess_id.o apps/smime.o apps/speed.o apps/spkac.o apps/srp.o apps/storeutl.o apps/ts.o apps/verify.o apps/version.o apps/x509.o \
		  apps/libapps.a -lssl -lcrypto -ldl -pthread
./libcrypto.a(async_posix.o): In function `ASYNC_is_capable':
async_posix.c:(.text+0x6c): warning: warning: getcontext is not implemented and will always fail
./libcrypto.a(async.o): In function `async_fibre_swapcontext':
async.c:(.text+0x2fc): warning: warning: setcontext is not implemented and will always fail
./libcrypto.a(async_posix.o): In function `async_fibre_makecontext':
async_posix.c:(.text+0x10c): warning: warning: makecontext is not implemented and will always fail
apps/speed.o: In function `speed_main':
speed.c:(.text+0x74bc): undefined reference to `CRYPTO_memcmp'
speed.c:(.text+0x74bc): relocation truncated to fit: R_MIPS_26 against `CRYPTO_memcmp'
./libssl.a(ssl3_record.o): In function `dtls1_process_record':
ssl3_record.c:(.text+0x1e14): undefined reference to `CRYPTO_memcmp'
ssl3_record.c:(.text+0x1f7c): undefined reference to `CRYPTO_memcmp'
./libssl.a(ssl3_record.o): In function `ssl3_get_record':
ssl3_record.c:(.text+0x2a88): undefined reference to `CRYPTO_memcmp'
ssl3_record.c:(.text+0x3210): undefined reference to `CRYPTO_memcmp'
./libssl.a(extensions.o):extensions.c:(.text+0xa84): more undefined references to `CRYPTO_memcmp' follow
./libcrypto.a(init.o): In function `ossl_init_base_ossl_':
init.c:(.text+0x8e0): undefined reference to `OPENSSL_cpuid_setup'
./libcrypto.a(gcm128.o): In function `CRYPTO_gcm128_finish':
gcm128.c:(.text+0x23cc): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(ocb128.o): In function `CRYPTO_ocb128_finish':
ocb128.c:(.text+0x144): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(wrap128.o): In function `CRYPTO_128_unwrap_pad':
wrap128.c:(.text+0x494): undefined reference to `CRYPTO_memcmp'
wrap128.c:(.text+0x588): undefined reference to `CRYPTO_memcmp'
wrap128.c:(.text+0x5b0): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(wrap128.o):wrap128.c:(.text+0x624): more undefined references to `CRYPTO_memcmp' follow
./libcrypto.a(rand_lib.o): In function `rand_drbg_get_additional_data':
rand_lib.c:(.text+0xedc): undefined reference to `OPENSSL_rdtsc'
rand_lib.c:(.text+0xf70): undefined reference to `OPENSSL_rdtsc'
./libcrypto.a(curve25519.o): In function `X25519':
curve25519.c:(.text+0x4e58): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(curve25519.o): In function `ge_frombytes_vartime':
curve25519.c:(.text+0x559c): undefined reference to `CRYPTO_memcmp'
curve25519.c:(.text+0x5754): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(curve25519.o): In function `ED25519_verify':
curve25519.c:(.text+0xdea8): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
eng_all.c:(.text+0x14): undefined reference to `OPENSSL_cpuid_setup'
./libcrypto.a(rsa_oaep.o): In function `RSA_padding_check_PKCS1_OAEP_mgf1':
rsa_oaep.c:(.text+0x4e0): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(dh_kdf.o): In function `DH_KDF_X9_42':
dh_kdf.c:(.text+0x35c): undefined reference to `CRYPTO_memcmp'
collect2: ld returned 1 exit status
make[1]: *** [apps/openssl] Error 1
make[1]: Leaving directory `<http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/ws/'>
make: *** [all] Error 2
Build step 'Execute shell' marked build as failure

From openssl at openssl.org  Thu Feb  8 09:28:14 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 08 Feb 2018 09:28:14 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-nextprotoneg
Message-ID: <1518082094.819977.16530.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-nextprotoneg

Commit log since last time:

4af2697 Don't run tls13encryptiontest on a shared Windows build
04e3bb0 Fix some undefined behaviour in ossltest engine
0f41dc0 Fix clienthellotest with TLSv1.3
f518cef Enable TLSv1.3 by default
c517ac4 Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
048ebcc make update ERROR_REBUILD=-rebuild
cb7b727 mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
3a7141d Make all private functions in e_afalg.c static
7d3901f test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
227a1e3 Modify test/afalgtest to fail if the afalg engine couldn't be loaded
bed4afa Fix glibc specific conditional for Mac OS/X
2b66fd5 Unify timer code
360fc9f Make OPENSSL_rdtsc universally available.
2ad2281 Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

Build log ended with (last 100 lines):

../../openssl/test/recipes/03-test_internal_asn1.t ............ ok
../../openssl/test/recipes/03-test_internal_chacha.t .......... ok
../../openssl/test/recipes/03-test_internal_mdc2.t ............ ok
../../openssl/test/recipes/03-test_internal_modes.t ........... ok
../../openssl/test/recipes/03-test_internal_poly1305.t ........ ok
../../openssl/test/recipes/03-test_internal_siphash.t ......... ok
../../openssl/test/recipes/03-test_internal_sm4.t ............. ok
../../openssl/test/recipes/03-test_internal_ssl_cert_table.t .. ok
../../openssl/test/recipes/03-test_internal_x509.t ............ ok
../../openssl/test/recipes/03-test_ui.t ....................... ok
../../openssl/test/recipes/04-test_asn1_encode.t .............. ok
../../openssl/test/recipes/04-test_asn1_string_table.t ........ ok
../../openssl/test/recipes/04-test_bioprint.t ................. ok
../../openssl/test/recipes/04-test_pem.t ...................... ok
../../openssl/test/recipes/05-test_bf.t ....................... ok
../../openssl/test/recipes/05-test_cast.t ..................... ok
../../openssl/test/recipes/05-test_des.t ...................... ok
../../openssl/test/recipes/05-test_hmac.t ..................... ok
../../openssl/test/recipes/05-test_idea.t ..................... ok
../../openssl/test/recipes/05-test_md2.t ...................... skipped: md2 is not supported by this OpenSSL build
../../openssl/test/recipes/05-test_mdc2.t ..................... ok
../../openssl/test/recipes/05-test_rand.t ..................... ok
../../openssl/test/recipes/05-test_rc2.t ...................... ok
../../openssl/test/recipes/05-test_rc4.t ...................... ok
../../openssl/test/recipes/05-test_rc5.t ...................... skipped: rc5 is not supported by this OpenSSL build
../../openssl/test/recipes/10-test_bn.t ....................... ok
../../openssl/test/recipes/10-test_exp.t ...................... ok
../../openssl/test/recipes/15-test_dh.t ....................... ok
../../openssl/test/recipes/15-test_dsa.t ...................... ok
../../openssl/test/recipes/15-test_ec.t ....................... ok
../../openssl/test/recipes/15-test_ecdsa.t .................... ok
../../openssl/test/recipes/15-test_ecparam.t .................. ok
../../openssl/test/recipes/15-test_genrsa.t ................... ok
../../openssl/test/recipes/15-test_mp_rsa.t ................... ok
../../openssl/test/recipes/15-test_rsa.t ...................... ok
../../openssl/test/recipes/15-test_rsapss.t ................... ok
../../openssl/test/recipes/20-test_enc.t ...................... ok
../../openssl/test/recipes/20-test_enc_more.t ................. ok
../../openssl/test/recipes/20-test_passwd.t ................... ok
../../openssl/test/recipes/25-test_crl.t ...................... ok
../../openssl/test/recipes/25-test_d2i.t ...................... ok
../../openssl/test/recipes/25-test_pkcs7.t .................... ok
../../openssl/test/recipes/25-test_req.t ...................... ok
../../openssl/test/recipes/25-test_sid.t ...................... ok
../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. ok
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ 
Dubious, test returned 6 (wstat 1536, 0x600)
Failed 6/22 subtests 
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_renegotiation.t ............ ok
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ ok
../../openssl/test/recipes/70-test_sslcertstatus.t ............ ok
../../openssl/test/recipes/70-test_sslextension.t ............. ok
../../openssl/test/recipes/70-test_sslmessages.t .............. ok
../../openssl/test/recipes/70-test_sslrecords.t ............... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/18 subtests 
../../openssl/test/recipes/70-test_sslsessiontick.t ........... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ............... 
Dubious, test returned 4 (wstat 1024, 0x400)
Failed 4/21 subtests 
../../openssl/test/recipes/70-test_sslsignature.t ............. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/4 subtests 
../../openssl/test/recipes/70-test_sslskewith0p.t ............. ok
../../openssl/test/recipes/70-test_sslversions.t .............. 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/7 subtests 
../../openssl/test/recipes/70-test_sslvertol.t ................ ok
../../openssl/test/recipes/70-test_tls13cookie.t .............. 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/2 subtests 
../../openssl/test/recipes/70-test_tls13downgrade.t ........... skipped: test_tls13downgrade not run in pre TLSv1.3 RFC implementation
../../openssl/test/recipes/70-test_tls13hrr.t ................. ok
make[1]: *** wait: No child processes.  Stop.
make[1]: *** Waiting for unfinished jobs....
make[1]: *** wait: No child processes.  Stop.

From openssl at openssl.org  Thu Feb  8 10:03:31 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 08 Feb 2018 10:03:31 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-poly1305
Message-ID: <1518084211.912409.28675.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-poly1305

Commit log since last time:

4af2697 Don't run tls13encryptiontest on a shared Windows build
04e3bb0 Fix some undefined behaviour in ossltest engine
0f41dc0 Fix clienthellotest with TLSv1.3
f518cef Enable TLSv1.3 by default
c517ac4 Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
048ebcc make update ERROR_REBUILD=-rebuild
cb7b727 mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
3a7141d Make all private functions in e_afalg.c static
7d3901f test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
227a1e3 Modify test/afalgtest to fail if the afalg engine couldn't be loaded
bed4afa Fix glibc specific conditional for Mac OS/X
2b66fd5 Unify timer code
360fc9f Make OPENSSL_rdtsc universally available.
2ad2281 Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

Build log ended with (last 100 lines):

../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. ok
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ ok
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ ok
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ ok
../../openssl/test/recipes/70-test_sslcertstatus.t ............ ok
../../openssl/test/recipes/70-test_sslextension.t ............. ok
../../openssl/test/recipes/70-test_sslmessages.t .............. ok
../../openssl/test/recipes/70-test_sslrecords.t ............... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ........... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ............... ok
../../openssl/test/recipes/70-test_sslsignature.t ............. ok
../../openssl/test/recipes/70-test_sslskewith0p.t ............. ok
../../openssl/test/recipes/70-test_sslversions.t .............. ok
../../openssl/test/recipes/70-test_sslvertol.t ................ ok
../../openssl/test/recipes/70-test_tls13cookie.t .............. ok
../../openssl/test/recipes/70-test_tls13downgrade.t ........... skipped: test_tls13downgrade not run in pre TLSv1.3 RFC implementation
../../openssl/test/recipes/70-test_tls13hrr.t ................. ok
../../openssl/test/recipes/70-test_tls13kexmodes.t ............ ok
../../openssl/test/recipes/70-test_tls13messages.t ............ ok
../../openssl/test/recipes/70-test_tls13psk.t ................. ok
../../openssl/test/recipes/70-test_tlsextms.t ................. ok
../../openssl/test/recipes/70-test_verify_extra.t ............. ok
../../openssl/test/recipes/70-test_wpacket.t .................. ok
../../openssl/test/recipes/80-test_ca.t ....................... ok
../../openssl/test/recipes/80-test_cipherbytes.t .............. ok
../../openssl/test/recipes/80-test_cipherlist.t ............... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/80-test_ciphername.t ............... ok
../../openssl/test/recipes/80-test_cms.t ...................... ok
../../openssl/test/recipes/80-test_ct.t ....................... ok
../../openssl/test/recipes/80-test_dane.t ..................... ok
../../openssl/test/recipes/80-test_dtls.t ..................... ok
../../openssl/test/recipes/80-test_dtls_mtu.t ................. ok
../../openssl/test/recipes/80-test_dtlsv1listen.t ............. ok
../../openssl/test/recipes/80-test_ocsp.t ..................... ok
../../openssl/test/recipes/80-test_pkcs12.t ................... ok
../../openssl/test/recipes/80-test_ssl_new.t .................. ok
../../openssl/test/recipes/80-test_ssl_old.t .................. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t ............. ok
../../openssl/test/recipes/80-test_sslcorrupt.t ............... ok
../../openssl/test/recipes/80-test_tsa.t ...................... ok
../../openssl/test/recipes/80-test_x509aux.t .................. ok
../../openssl/test/recipes/90-test_asn1_time.t ................ ok
../../openssl/test/recipes/90-test_async.t .................... ok
../../openssl/test/recipes/90-test_bio_enc.t .................. ok
../../openssl/test/recipes/90-test_constant_time.t ............ ok
../../openssl/test/recipes/90-test_fatalerr.t ................. ok
../../openssl/test/recipes/90-test_gmdiff.t ................... ok
../../openssl/test/recipes/90-test_ige.t ...................... ok
../../openssl/test/recipes/90-test_memleak.t .................. ok
../../openssl/test/recipes/90-test_overhead.t ................. skipped: Only supported in no-shared builds
../../openssl/test/recipes/90-test_secmem.t ................... ok
../../openssl/test/recipes/90-test_shlibload.t ................ ok
../../openssl/test/recipes/90-test_srp.t ...................... ok
../../openssl/test/recipes/90-test_sslapi.t ................... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/90-test_sslbuffers.t ............... ok
../../openssl/test/recipes/90-test_store.t .................... ok
../../openssl/test/recipes/90-test_threads.t .................. ok
../../openssl/test/recipes/90-test_time_offset.t .............. ok
../../openssl/test/recipes/90-test_tls13ccs.t ................. ok
../../openssl/test/recipes/90-test_tls13encryption.t .......... ok
../../openssl/test/recipes/90-test_tls13secrets.t ............. ok
../../openssl/test/recipes/90-test_v3name.t ................... ok
../../openssl/test/recipes/95-test_external_boringssl.t ....... skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_krb5.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_pyca.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/99-test_ecstress.t ................. ok
../../openssl/test/recipes/99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
../../openssl/test/recipes/80-test_cipherlist.t             (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
../../openssl/test/recipes/90-test_sslapi.t                 (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
Files=140, Tests=1311, 375 wallclock secs ( 3.79 usr  0.32 sys + 180.04 cusr 24.55 csys = 208.70 CPU)
Result: FAIL
Makefile:171: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-poly1305'
Makefile:169: recipe for target 'tests' failed
make: *** [tests] Error 2

From levitte at openssl.org  Thu Feb  8 11:45:03 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 08 Feb 2018 11:45:03 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518090303.688062.24758.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b53fdad0e4350ba49812c50305686ee5a6239111 (commit)
      from  22626b972c024d5ae9922e4a9d710a5f9e51f753 (commit)


- Log -----------------------------------------------------------------
commit b53fdad0e4350ba49812c50305686ee5a6239111
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 8 12:31:05 2018 +0100

    util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
    
    %disabled_algorithms isn't necessarily initialised with the "algos"
    'DEPRECATEDIN_1_1_0' etc.  However, we know that @known_algorithms has
    them all, so use that to find them instead.
    
    Fixes #5157
    (where this was reported)
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5282)

-----------------------------------------------------------------------

Summary of changes:
 util/mkdef.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/util/mkdef.pl b/util/mkdef.pl
index 72d1c8f..fac911a 100755
--- a/util/mkdef.pl
+++ b/util/mkdef.pl
@@ -152,7 +152,7 @@ my %disabled_algorithms =
     map { (my $x = uc $_) =~ s|-|_|g; $x => 1; } keys %disabled;
 
 my $apiv = sprintf "%x%02x%02x", split(/\./, $config{api});
-foreach (keys %disabled_algorithms) {
+foreach (@known_algorithms) {
 	if (/^DEPRECATEDIN_(\d+)_(\d+)_(\d+)$/) {
 		my $depv = sprintf "%x%02x%02x", $1, $2, $3;
 		$disabled_algorithms{$_} = 1 if $apiv ge $depv;

From levitte at openssl.org  Thu Feb  8 11:46:51 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 08 Feb 2018 11:46:51 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518090411.550397.25639.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  65de3f1657d8a3bdb7c48063931a3c619817c921 (commit)
       via  d8ba72c9f7e397942aabe1a0a3ad7019e774884a (commit)
      from  db5ec96acd4e65bca886f2ef09316a7fb0aa8cac (commit)


- Log -----------------------------------------------------------------
commit 65de3f1657d8a3bdb7c48063931a3c619817c921
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 8 12:31:05 2018 +0100

    util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
    
    %disabled_algorithms isn't necessarily initialised with the "algos"
    'DEPRECATEDIN_1_1_0' etc.  However, we know that @known_algorithms has
    them all, so use that to find them instead.
    
    Fixes #5157
    (where this was reported)
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5282)
    
    (cherry picked from commit b53fdad0e4350ba49812c50305686ee5a6239111)

commit d8ba72c9f7e397942aabe1a0a3ad7019e774884a
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Jan 24 14:17:39 2018 +0100

    util/mkdef.pl: Trust configdata.pm
    
    This script kept its own database of disablable algorithms, which is a
    maintenance problem, as it's not always perfectly in sync with what
    Configure does.  However, we do have all the data in configdata.pm,
    produced by Configure, so let's use that instead.
    
    Also, make sure to parse the *err.h header files, as they contain
    function declarations that might not be present elsewhere.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5157)
    
    (cherry picked from commit 54f3b7d2f5a313e5c702f75ee030f8a08e6bf6aa)

-----------------------------------------------------------------------

Summary of changes:
 util/mkdef.pl | 73 ++++++++++-------------------------------------------------
 1 file changed, 12 insertions(+), 61 deletions(-)

diff --git a/util/mkdef.pl b/util/mkdef.pl
index 3067fbe..3775b70 100755
--- a/util/mkdef.pl
+++ b/util/mkdef.pl
@@ -133,71 +133,22 @@ my @known_platforms = ( "__FreeBSD__", "PERL5",
 			"EXPORT_VAR_AS_FUNCTION", "ZLIB", "_WIN32"
 			);
 my @known_ossl_platforms = ( "UNIX", "VMS", "WIN32", "WINNT", "OS2" );
-my @known_algorithms = ( "RC2", "RC4", "RC5", "IDEA", "DES", "BF",
-			 "CAST", "MD2", "MD4", "MD5", "SHA", "SHA0", "SHA1",
-			 "SHA256", "SHA512", "RMD160",
-			 "MDC2", "WHIRLPOOL", "RSA", "DSA", "DH", "EC", "EC2M",
-			 "HMAC", "AES", "CAMELLIA", "SEED", "GOST",
-                         "SCRYPT", "CHACHA", "POLY1305", "BLAKE2",
-			 # EC_NISTP_64_GCC_128
-			 "EC_NISTP_64_GCC_128",
-			 # Envelope "algorithms"
-			 "EVP", "X509", "ASN1_TYPEDEFS",
-			 # Helper "algorithms"
-			 "BIO", "COMP", "BUFFER", "LHASH", "STACK", "ERR",
-			 "LOCKING",
-			 # External "algorithms"
-			 "FP_API", "STDIO", "SOCK", "DGRAM",
-                         "CRYPTO_MDEBUG",
-			 # Engines
-                         "STATIC_ENGINE", "ENGINE", "HW", "GMP",
-			 # Entropy Gathering
-			 "EGD",
-			 # Certificate Transparency
-			 "CT",
-			 # RFC3779
-			 "RFC3779",
-			 # TLS
-			 "PSK", "SRP", "HEARTBEATS",
-			 # CMS
-			 "CMS",
-                         "OCSP",
-			 # CryptoAPI Engine
-			 "CAPIENG",
-			 # SSL methods
-			 "SSL3_METHOD", "TLS1_METHOD", "TLS1_1_METHOD", "TLS1_2_METHOD", "DTLS1_METHOD", "DTLS1_2_METHOD",
-			 # NEXTPROTONEG
-			 "NEXTPROTONEG",
-			 # Deprecated functions
+my @known_algorithms = ( # These are algorithms we know are guarded in relevant
+			 # header files, but aren't actually disablable.
+			 # Without these, this script will warn a lot.
+			 "RSA", "MD5",
+			 # @disablables comes from configdata.pm
+			 map { (my $x = uc $_) =~ s|-|_|g; $x; } @disablables,
+			 # Deprecated functions.  Not really algorithmss, but
+			 # treated as such here for the sake of simplicity
 			 "DEPRECATEDIN_0_9_8",
 			 "DEPRECATEDIN_1_0_0",
 			 "DEPRECATEDIN_1_1_0",
-			 # SCTP
-		 	 "SCTP",
-			 # SRTP
-			 "SRTP",
-			 # SSL TRACE
-		 	 "SSL_TRACE",
-			 # Unit testing
-		 	 "UNIT_TEST",
-			 # User Interface
-			 "UI",
-			 #
-			 "TS",
-			 # OCB mode
-			 "OCB",
-			 "CMAC",
-                         # APPLINK (win build feature?)
-                         "APPLINK"
                      );
 
-my %disabled_algorithms;
-
-foreach (@known_algorithms) {
-    $disabled_algorithms{$_} = 0;
-}
-# disabled by default
-$disabled_algorithms{"STATIC_ENGINE"} = 1;
+# %disabled comes from configdata.pm
+my %disabled_algorithms =
+    map { (my $x = uc $_) =~ s|-|_|g; $x => 1; } keys %disabled;
 
 my $zlib;
 
@@ -239,7 +190,7 @@ foreach (@ARGV, split(/ /, $config{options}))
 	$do_checkexist=1 if $_ eq "exist";
 	if (/^--api=(\d+)\.(\d+)\.(\d+)$/) {
 		my $apiv = sprintf "%x%02x%02x", $1, $2, $3;
-		foreach (keys %disabled_algorithms) {
+		foreach (@known_algorithms) {
 			if (/^DEPRECATEDIN_(\d+)_(\d+)_(\d+)$/) {
 				my $depv = sprintf "%x%02x%02x", $1, $2, $3;
 				$disabled_algorithms{$_} = 1 if $apiv ge $depv;

From levitte at openssl.org  Thu Feb  8 12:01:01 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 08 Feb 2018 12:01:01 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518091261.395994.28438.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  30562caa34de5f23dead9b246aaf284748e184bf (commit)
      from  65de3f1657d8a3bdb7c48063931a3c619817c921 (commit)


- Log -----------------------------------------------------------------
commit 30562caa34de5f23dead9b246aaf284748e184bf
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 8 12:54:25 2018 +0100

    util/mkdef.pl: Fix incomplete cherry-pick
    
    The cherry pick that resulted in 65de3f1657d8a3bdb7c48063931a3c619817c921
    was incomplete.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5283)

-----------------------------------------------------------------------

Summary of changes:
 util/mkdef.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/util/mkdef.pl b/util/mkdef.pl
index 3775b70..66db26c 100755
--- a/util/mkdef.pl
+++ b/util/mkdef.pl
@@ -198,7 +198,7 @@ foreach (@ARGV, split(/ /, $config{options}))
 		}
 	}
 	if (/^no-deprecated$/) {
-		foreach (keys %disabled_algorithms) {
+		foreach (@known_algorithms) {
 			if (/^DEPRECATEDIN_/) {
 				$disabled_algorithms{$_} = 1;
 			}

From osslsanity at gmail.com  Thu Feb  8 13:18:23 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Thu, 8 Feb 2018 13:18:23 +0000 (UTC)
Subject: [openssl-commits] Build failed in Jenkins: master_mips #376
In-Reply-To: <321265509.322.1518081507484.JavaMail.jenkins@ip-172-31-34-99>
References: <321265509.322.1518081507484.JavaMail.jenkins@ip-172-31-34-99>
Message-ID: <64333004.323.1518095903486.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/376/display/redirect?page=changes>

Changes:

[levitte] util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'

------------------------------------------
[...truncated 281.85 KB...]
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_err.d.tmp -MT crypto/ui/ui_err.o -c -o crypto/ui/ui_err.o crypto/ui/ui_err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_lib.d.tmp -MT crypto/ui/ui_lib.o -c -o crypto/ui/ui_lib.o crypto/ui/ui_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_null.d.tmp -MT crypto/ui/ui_null.o -c -o crypto/ui/ui_null.o crypto/ui/ui_null.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_openssl.d.tmp -MT crypto/ui/ui_openssl.o -c -o crypto/ui/ui_openssl.o crypto/ui/ui_openssl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/ui/ui_util.d.tmp -MT crypto/ui/ui_util.o -c -o crypto/ui/ui_util.o crypto/ui/ui_util.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/uid.d.tmp -MT crypto/uid.o -c -o crypto/uid.o crypto/uid.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/whrlpool/wp_block.d.tmp -MT crypto/whrlpool/wp_block.o -c -o crypto/whrlpool/wp_block.o crypto/whrlpool/wp_block.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/whrlpool/wp_dgst.d.tmp -MT crypto/whrlpool/wp_dgst.o -c -o crypto/whrlpool/wp_dgst.o crypto/whrlpool/wp_dgst.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/by_dir.d.tmp -MT crypto/x509/by_dir.o -c -o crypto/x509/by_dir.o crypto/x509/by_dir.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/by_file.d.tmp -MT crypto/x509/by_file.o -c -o crypto/x509/by_file.o crypto/x509/by_file.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_crl.d.tmp -MT crypto/x509/t_crl.o -c -o crypto/x509/t_crl.o crypto/x509/t_crl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_req.d.tmp -MT crypto/x509/t_req.o -c -o crypto/x509/t_req.o crypto/x509/t_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/t_x509.d.tmp -MT crypto/x509/t_x509.o -c -o crypto/x509/t_x509.o crypto/x509/t_x509.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_att.d.tmp -MT crypto/x509/x509_att.o -c -o crypto/x509/x509_att.o crypto/x509/x509_att.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_cmp.d.tmp -MT crypto/x509/x509_cmp.o -c -o crypto/x509/x509_cmp.o crypto/x509/x509_cmp.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_d2.d.tmp -MT crypto/x509/x509_d2.o -c -o crypto/x509/x509_d2.o crypto/x509/x509_d2.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_def.d.tmp -MT crypto/x509/x509_def.o -c -o crypto/x509/x509_def.o crypto/x509/x509_def.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_err.d.tmp -MT crypto/x509/x509_err.o -c -o crypto/x509/x509_err.o crypto/x509/x509_err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_ext.d.tmp -MT crypto/x509/x509_ext.o -c -o crypto/x509/x509_ext.o crypto/x509/x509_ext.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_lu.d.tmp -MT crypto/x509/x509_lu.o -c -o crypto/x509/x509_lu.o crypto/x509/x509_lu.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_obj.d.tmp -MT crypto/x509/x509_obj.o -c -o crypto/x509/x509_obj.o crypto/x509/x509_obj.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_r2x.d.tmp -MT crypto/x509/x509_r2x.o -c -o crypto/x509/x509_r2x.o crypto/x509/x509_r2x.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_req.d.tmp -MT crypto/x509/x509_req.o -c -o crypto/x509/x509_req.o crypto/x509/x509_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_set.d.tmp -MT crypto/x509/x509_set.o -c -o crypto/x509/x509_set.o crypto/x509/x509_set.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_trs.d.tmp -MT crypto/x509/x509_trs.o -c -o crypto/x509/x509_trs.o crypto/x509/x509_trs.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_txt.d.tmp -MT crypto/x509/x509_txt.o -c -o crypto/x509/x509_txt.o crypto/x509/x509_txt.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_v3.d.tmp -MT crypto/x509/x509_v3.o -c -o crypto/x509/x509_v3.o crypto/x509/x509_v3.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_vfy.d.tmp -MT crypto/x509/x509_vfy.o -c -o crypto/x509/x509_vfy.o crypto/x509/x509_vfy.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509_vpm.d.tmp -MT crypto/x509/x509_vpm.o -c -o crypto/x509/x509_vpm.o crypto/x509/x509_vpm.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509cset.d.tmp -MT crypto/x509/x509cset.o -c -o crypto/x509/x509cset.o crypto/x509/x509cset.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509name.d.tmp -MT crypto/x509/x509name.o -c -o crypto/x509/x509name.o crypto/x509/x509name.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509rset.d.tmp -MT crypto/x509/x509rset.o -c -o crypto/x509/x509rset.o crypto/x509/x509rset.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509spki.d.tmp -MT crypto/x509/x509spki.o -c -o crypto/x509/x509spki.o crypto/x509/x509spki.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x509type.d.tmp -MT crypto/x509/x509type.o -c -o crypto/x509/x509type.o crypto/x509/x509type.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_all.d.tmp -MT crypto/x509/x_all.o -c -o crypto/x509/x_all.o crypto/x509/x_all.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_attrib.d.tmp -MT crypto/x509/x_attrib.o -c -o crypto/x509/x_attrib.o crypto/x509/x_attrib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_crl.d.tmp -MT crypto/x509/x_crl.o -c -o crypto/x509/x_crl.o crypto/x509/x_crl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_exten.d.tmp -MT crypto/x509/x_exten.o -c -o crypto/x509/x_exten.o crypto/x509/x_exten.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_name.d.tmp -MT crypto/x509/x_name.o -c -o crypto/x509/x_name.o crypto/x509/x_name.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_pubkey.d.tmp -MT crypto/x509/x_pubkey.o -c -o crypto/x509/x_pubkey.o crypto/x509/x_pubkey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_req.d.tmp -MT crypto/x509/x_req.o -c -o crypto/x509/x_req.o crypto/x509/x_req.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_x509.d.tmp -MT crypto/x509/x_x509.o -c -o crypto/x509/x_x509.o crypto/x509/x_x509.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509/x_x509a.d.tmp -MT crypto/x509/x_x509a.o -c -o crypto/x509/x_x509a.o crypto/x509/x_x509a.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_cache.d.tmp -MT crypto/x509v3/pcy_cache.o -c -o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_cache.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_data.d.tmp -MT crypto/x509v3/pcy_data.o -c -o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_data.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_lib.d.tmp -MT crypto/x509v3/pcy_lib.o -c -o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_map.d.tmp -MT crypto/x509v3/pcy_map.o -c -o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_map.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_node.d.tmp -MT crypto/x509v3/pcy_node.o -c -o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_node.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/pcy_tree.d.tmp -MT crypto/x509v3/pcy_tree.o -c -o crypto/x509v3/pcy_tree.o crypto/x509v3/pcy_tree.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_addr.d.tmp -MT crypto/x509v3/v3_addr.o -c -o crypto/x509v3/v3_addr.o crypto/x509v3/v3_addr.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_admis.d.tmp -MT crypto/x509v3/v3_admis.o -c -o crypto/x509v3/v3_admis.o crypto/x509v3/v3_admis.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_akey.d.tmp -MT crypto/x509v3/v3_akey.o -c -o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_akeya.d.tmp -MT crypto/x509v3/v3_akeya.o -c -o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_akeya.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_alt.d.tmp -MT crypto/x509v3/v3_alt.o -c -o crypto/x509v3/v3_alt.o crypto/x509v3/v3_alt.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_asid.d.tmp -MT crypto/x509v3/v3_asid.o -c -o crypto/x509v3/v3_asid.o crypto/x509v3/v3_asid.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_bcons.d.tmp -MT crypto/x509v3/v3_bcons.o -c -o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bcons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_bitst.d.tmp -MT crypto/x509v3/v3_bitst.o -c -o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_bitst.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_conf.d.tmp -MT crypto/x509v3/v3_conf.o -c -o crypto/x509v3/v3_conf.o crypto/x509v3/v3_conf.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_cpols.d.tmp -MT crypto/x509v3/v3_cpols.o -c -o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_cpols.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_crld.d.tmp -MT crypto/x509v3/v3_crld.o -c -o crypto/x509v3/v3_crld.o crypto/x509v3/v3_crld.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_enum.d.tmp -MT crypto/x509v3/v3_enum.o -c -o crypto/x509v3/v3_enum.o crypto/x509v3/v3_enum.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_extku.d.tmp -MT crypto/x509v3/v3_extku.o -c -o crypto/x509v3/v3_extku.o crypto/x509v3/v3_extku.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_genn.d.tmp -MT crypto/x509v3/v3_genn.o -c -o crypto/x509v3/v3_genn.o crypto/x509v3/v3_genn.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_ia5.d.tmp -MT crypto/x509v3/v3_ia5.o -c -o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_ia5.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_info.d.tmp -MT crypto/x509v3/v3_info.o -c -o crypto/x509v3/v3_info.o crypto/x509v3/v3_info.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_int.d.tmp -MT crypto/x509v3/v3_int.o -c -o crypto/x509v3/v3_int.o crypto/x509v3/v3_int.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_lib.d.tmp -MT crypto/x509v3/v3_lib.o -c -o crypto/x509v3/v3_lib.o crypto/x509v3/v3_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_ncons.d.tmp -MT crypto/x509v3/v3_ncons.o -c -o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_ncons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pci.d.tmp -MT crypto/x509v3/v3_pci.o -c -o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pci.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pcia.d.tmp -MT crypto/x509v3/v3_pcia.o -c -o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcia.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pcons.d.tmp -MT crypto/x509v3/v3_pcons.o -c -o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pcons.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pku.d.tmp -MT crypto/x509v3/v3_pku.o -c -o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pku.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_pmaps.d.tmp -MT crypto/x509v3/v3_pmaps.o -c -o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_pmaps.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_prn.d.tmp -MT crypto/x509v3/v3_prn.o -c -o crypto/x509v3/v3_prn.o crypto/x509v3/v3_prn.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_purp.d.tmp -MT crypto/x509v3/v3_purp.o -c -o crypto/x509v3/v3_purp.o crypto/x509v3/v3_purp.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_skey.d.tmp -MT crypto/x509v3/v3_skey.o -c -o crypto/x509v3/v3_skey.o crypto/x509v3/v3_skey.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_sxnet.d.tmp -MT crypto/x509v3/v3_sxnet.o -c -o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_sxnet.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_tlsf.d.tmp -MT crypto/x509v3/v3_tlsf.o -c -o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_tlsf.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3_utl.d.tmp -MT crypto/x509v3/v3_utl.o -c -o crypto/x509v3/v3_utl.o crypto/x509v3/v3_utl.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF crypto/x509v3/v3err.d.tmp -MT crypto/x509v3/v3err.o -c -o crypto/x509v3/v3err.o crypto/x509v3/v3err.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF engines/e_capi.d.tmp -MT engines/e_capi.o -c -o engines/e_capi.o engines/e_capi.c
mips64-octeon-linux-gnu-gcc  -I. -Icrypto/include -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF engines/e_padlock.d.tmp -MT engines/e_padlock.o -c -o engines/e_padlock.o engines/e_padlock.c
mips64-octeon-linux-gnu-ar r libcrypto.a crypto/aes/aes-mips.o crypto/aes/aes_cbc.o crypto/aes/aes_cfb.o crypto/aes/aes_ecb.o crypto/aes/aes_ige.o crypto/aes/aes_misc.o crypto/aes/aes_ofb.o crypto/aes/aes_wrap.o crypto/aria/aria.o crypto/asn1/a_bitstr.o crypto/asn1/a_d2i_fp.o crypto/asn1/a_digest.o crypto/asn1/a_dup.o crypto/asn1/a_gentm.o crypto/asn1/a_i2d_fp.o crypto/asn1/a_int.o crypto/asn1/a_mbstr.o crypto/asn1/a_object.o crypto/asn1/a_octet.o crypto/asn1/a_print.o crypto/asn1/a_sign.o crypto/asn1/a_strex.o crypto/asn1/a_strnid.o crypto/asn1/a_time.o crypto/asn1/a_type.o crypto/asn1/a_utctm.o crypto/asn1/a_utf8.o crypto/asn1/a_verify.o crypto/asn1/ameth_lib.o crypto/asn1/asn1_err.o crypto/asn1/asn1_gen.o crypto/asn1/asn1_item_list.o crypto/asn1/asn1_lib.o crypto/asn1/asn1_par.o crypto/asn1/asn_mime.o crypto/asn1/asn_moid.o crypto/asn1/asn_mstbl.o crypto/asn1/asn_pack.o crypto/asn1/bio_asn1.o crypto/asn1/bio_ndef.o crypto/asn1/d2i_pr.o crypto/asn1/d2i_pu.o crypto/asn1/evp_asn1.o crypto/asn1/f_int.o crypto/asn1/f_string.o crypto/asn1/i2d_pr.o crypto/asn1/i2d_pu.o crypto/asn1/n_pkey.o crypto/asn1/nsseq.o crypto/asn1/p5_pbe.o crypto/asn1/p5_pbev2.o crypto/asn1/p5_scrypt.o crypto/asn1/p8_pkey.o crypto/asn1/t_bitst.o crypto/asn1/t_pkey.o crypto/asn1/t_spki.o crypto/asn1/tasn_dec.o crypto/asn1/tasn_enc.o crypto/asn1/tasn_fre.o crypto/asn1/tasn_new.o crypto/asn1/tasn_prn.o crypto/asn1/tasn_scn.o crypto/asn1/tasn_typ.o crypto/asn1/tasn_utl.o crypto/asn1/x_algor.o crypto/asn1/x_bignum.o crypto/asn1/x_info.o crypto/asn1/x_int64.o crypto/asn1/x_long.o crypto/asn1/x_pkey.o crypto/asn1/x_sig.o crypto/asn1/x_spki.o crypto/asn1/x_val.o crypto/async/arch/async_null.o crypto/async/arch/async_posix.o crypto/async/arch/async_win.o crypto/async/async.o crypto/async/async_err.o crypto/async/async_wait.o crypto/bf/bf_cfb64.o crypto/bf/bf_ecb.o crypto/bf/bf_enc.o crypto/bf/bf_ofb64.o crypto/bf/bf_skey.o crypto/bio/b_addr.o crypto/bio/b_dump.o crypto/bio/b_print.o crypto/bio/b_sock.o crypto/bio/b_sock2.o crypto/bio/bf_buff.o crypto/bio/bf_lbuf.o crypto/bio/bf_nbio.o crypto/bio/bf_null.o crypto/bio/bio_cb.o crypto/bio/bio_err.o crypto/bio/bio_lib.o crypto/bio/bio_meth.o crypto/bio/bss_acpt.o crypto/bio/bss_bio.o crypto/bio/bss_conn.o crypto/bio/bss_dgram.o crypto/bio/bss_fd.o crypto/bio/bss_file.o crypto/bio/bss_log.o crypto/bio/bss_mem.o crypto/bio/bss_null.o crypto/bio/bss_sock.o crypto/blake2/blake2b.o crypto/blake2/blake2s.o crypto/blake2/m_blake2b.o crypto/blake2/m_blake2s.o crypto/bn/bn-mips.o crypto/bn/bn_add.o crypto/bn/bn_blind.o crypto/bn/bn_const.o crypto/bn/bn_ctx.o crypto/bn/bn_depr.o crypto/bn/bn_dh.o crypto/bn/bn_div.o crypto/bn/bn_err.o crypto/bn/bn_exp.o crypto/bn/bn_exp2.o crypto/bn/bn_gcd.o crypto/bn/bn_gf2m.o crypto/bn/bn_intern.o crypto/bn/bn_kron.o crypto/bn/bn_lib.o crypto/bn/bn_mod.o crypto/bn/bn_mont.o crypto/bn/bn_mpi.o crypto/bn/bn_mul.o crypto/bn/bn_nist.o crypto/bn/bn_prime.o crypto/bn/bn_print.o crypto/bn/bn_rand.o crypto/bn/bn_recp.o crypto/bn/bn_shift.o crypto/bn/bn_sqr.o crypto/bn/bn_sqrt.o crypto/bn/bn_srp.o crypto/bn/bn_word.o crypto/bn/bn_x931p.o crypto/bn/mips-mont.o crypto/buffer/buf_err.o crypto/buffer/buffer.o crypto/camellia/camellia.o crypto/camellia/cmll_cbc.o crypto/camellia/cmll_cfb.o crypto/camellia/cmll_ctr.o crypto/camellia/cmll_ecb.o crypto/camellia/cmll_misc.o crypto/camellia/cmll_ofb.o crypto/cast/c_cfb64.o crypto/cast/c_ecb.o crypto/cast/c_enc.o crypto/cast/c_ofb64.o crypto/cast/c_skey.o crypto/chacha/chacha_enc.o crypto/cmac/cm_ameth.o crypto/cmac/cm_pmeth.o crypto/cmac/cmac.o crypto/cms/cms_asn1.o crypto/cms/cms_att.o crypto/cms/cms_cd.o crypto/cms/cms_dd.o crypto/cms/cms_enc.o crypto/cms/cms_env.o crypto/cms/cms_err.o crypto/cms/cms_ess.o crypto/cms/cms_io.o crypto/cms/cms_kari.o crypto/cms/cms_lib.o crypto/cms/cms_pwri.o crypto/cms/cms_sd.o crypto/cms/cms_smime.o crypto/comp/c_zlib.o crypto/comp/comp_err.o crypto/comp/comp_lib.o crypto/conf/conf_api.o crypto/conf/conf_def.o crypto/conf/conf_err.o crypto/conf/conf_lib.o crypto/conf/conf_mall.o crypto/conf/conf_mod.o crypto/conf/conf_sap.o crypto/cpt_err.o crypto/cryptlib.o crypto/ct/ct_b64.o crypto/ct/ct_err.o crypto/ct/ct_log.o crypto/ct/ct_oct.o crypto/ct/ct_policy.o crypto/ct/ct_prn.o crypto/ct/ct_sct.o crypto/ct/ct_sct_ctx.o crypto/ct/ct_vfy.o crypto/ct/ct_x509v3.o crypto/ctype.o crypto/cversion.o crypto/des/cbc_cksm.o crypto/des/cbc_enc.o crypto/des/cfb64ede.o crypto/des/cfb64enc.o crypto/des/cfb_enc.o crypto/des/des_enc.o crypto/des/ecb3_enc.o crypto/des/ecb_enc.o crypto/des/fcrypt.o crypto/des/fcrypt_b.o crypto/des/ofb64ede.o crypto/des/ofb64enc.o crypto/des/ofb_enc.o crypto/des/pcbc_enc.o crypto/des/qud_cksm.o crypto/des/rand_key.o crypto/des/set_key.o crypto/des/str2key.o crypto/des/xcbc_enc.o crypto/dh/dh_ameth.o crypto/dh/dh_asn1.o crypto/dh/dh_check.o crypto/dh/dh_depr.o crypto/dh/dh_err.o crypto/dh/dh_gen.o crypto/dh/dh_kdf.o crypto/dh/dh_key.o crypto/dh/dh_lib.o crypto/dh/dh_meth.o crypto/dh/dh_pmeth.o crypto/dh/dh_prn.o crypto/dh/dh_rfc5114.o crypto/dh/dh_rfc7919.o crypto/dsa/dsa_ameth.o crypto/dsa/dsa_asn1.o crypto/dsa/dsa_depr.o crypto/dsa/dsa_err.o crypto/dsa/dsa_gen.o crypto/dsa/dsa_key.o crypto/dsa/dsa_lib.o crypto/dsa/dsa_meth.o crypto/dsa/dsa_ossl.o crypto/dsa/dsa_pmeth.o crypto/dsa/dsa_prn.o crypto/dsa/dsa_sign.o crypto/dsa/dsa_vrf.o crypto/dso/dso_dl.o crypto/dso/dso_dlfcn.o crypto/dso/dso_err.o crypto/dso/dso_lib.o crypto/dso/dso_openssl.o crypto/dso/dso_vms.o crypto/dso/dso_win32.o crypto/ebcdic.o crypto/ec/curve25519.o crypto/ec/ec2_mult.o crypto/ec/ec2_oct.o crypto/ec/ec2_smpl.o crypto/ec/ec_ameth.o crypto/ec/ec_asn1.o crypto/ec/ec_check.o crypto/ec/ec_curve.o crypto/ec/ec_cvt.o crypto/ec/ec_err.o crypto/ec/ec_key.o crypto/ec/ec_kmeth.o crypto/ec/ec_lib.o crypto/ec/ec_mult.o crypto/ec/ec_oct.o crypto/ec/ec_pmeth.o crypto/ec/ec_print.o crypto/ec/ecdh_kdf.o crypto/ec/ecdh_ossl.o crypto/ec/ecdsa_ossl.o crypto/ec/ecdsa_sign.o crypto/ec/ecdsa_vrf.o crypto/ec/eck_prn.o crypto/ec/ecp_mont.o crypto/ec/ecp_nist.o crypto/ec/ecp_nistp224.o crypto/ec/ecp_nistp256.o crypto/ec/ecp_nistp521.o crypto/ec/ecp_nistputil.o crypto/ec/ecp_oct.o crypto/ec/ecp_smpl.o crypto/ec/ecx_meth.o crypto/engine/eng_all.o crypto/engine/eng_cnf.o crypto/engine/eng_ctrl.o crypto/engine/eng_dyn.o crypto/engine/eng_err.o crypto/engine/eng_fat.o crypto/engine/eng_init.o crypto/engine/eng_lib.o crypto/engine/eng_list.o crypto/engine/eng_openssl.o crypto/engine/eng_pkey.o crypto/engine/eng_rdrand.o crypto/engine/eng_table.o crypto/engine/tb_asnmth.o crypto/engine/tb_cipher.o crypto/engine/tb_dh.o crypto/engine/tb_digest.o crypto/engine/tb_dsa.o crypto/engine/tb_eckey.o crypto/engine/tb_pkmeth.o crypto/engine/tb_rand.o crypto/engine/tb_rsa.o crypto/err/err.o crypto/err/err_all.o crypto/err/err_prn.o crypto/evp/bio_b64.o crypto/evp/bio_enc.o crypto/evp/bio_md.o crypto/evp/bio_ok.o crypto/evp/c_allc.o crypto/evp/c_alld.o crypto/evp/cmeth_lib.o crypto/evp/digest.o crypto/evp/e_aes.o crypto/evp/e_aes_cbc_hmac_sha1.o crypto/evp/e_aes_cbc_hmac_sha256.o crypto/evp/e_aria.o crypto/evp/e_bf.o crypto/evp/e_camellia.o crypto/evp/e_cast.o crypto/evp/e_chacha20_poly1305.o crypto/evp/e_des.o crypto/evp/e_des3.o crypto/evp/e_idea.o crypto/evp/e_null.o crypto/evp/e_old.o crypto/evp/e_rc2.o crypto/evp/e_rc4.o crypto/evp/e_rc4_hmac_md5.o crypto/evp/e_rc5.o crypto/evp/e_seed.o crypto/evp/e_sm4.o crypto/evp/e_xcbc_d.o crypto/evp/encode.o crypto/evp/evp_cnf.o crypto/evp/evp_enc.o crypto/evp/evp_err.o crypto/evp/evp_key.o crypto/evp/evp_lib.o crypto/evp/evp_pbe.o crypto/evp/evp_pkey.o crypto/evp/m_md2.o crypto/evp/m_md4.o crypto/evp/m_md5.o crypto/evp/m_md5_sha1.o crypto/evp/m_mdc2.o crypto/evp/m_null.o crypto/evp/m_ripemd.o crypto/evp/m_sha1.o crypto/evp/m_sha3.o crypto/evp/m_sigver.o crypto/evp/m_wp.o crypto/evp/names.o crypto/evp/p5_crpt.o crypto/evp/p5_crpt2.o crypto/evp/p_dec.o crypto/evp/p_enc.o crypto/evp/p_lib.o crypto/evp/p_open.o crypto/evp/p_seal.o crypto/evp/p_sign.o crypto/evp/p_verify.o crypto/evp/pbe_scrypt.o crypto/evp/pmeth_fn.o crypto/evp/pmeth_gn.o crypto/evp/pmeth_lib.o crypto/ex_data.o crypto/hmac/hm_ameth.o crypto/hmac/hm_pmeth.o crypto/hmac/hmac.o crypto/idea/i_cbc.o crypto/idea/i_cfb64.o crypto/idea/i_ecb.o crypto/idea/i_ofb64.o crypto/idea/i_skey.o crypto/init.o crypto/kdf/hkdf.o crypto/kdf/kdf_err.o crypto/kdf/scrypt.o crypto/kdf/tls1_prf.o crypto/lhash/lh_stats.o crypto/lhash/lhash.o crypto/md4/md4_dgst.o crypto/md4/md4_one.o crypto/md5/md5_dgst.o crypto/md5/md5_one.o crypto/mdc2/mdc2_one.o crypto/mdc2/mdc2dgst.o crypto/mem.o crypto/mem_clr.o crypto/mem_dbg.o crypto/mem_sec.o crypto/modes/cbc128.o crypto/modes/ccm128.o crypto/modes/cfb128.o crypto/modes/ctr128.o crypto/modes/cts128.o crypto/modes/gcm128.o crypto/modes/ocb128.o crypto/modes/ofb128.o crypto/modes/wrap128.o crypto/modes/xts128.o crypto/o_dir.o crypto/o_fips.o crypto/o_fopen.o crypto/o_init.o crypto/o_str.o crypto/o_time.o crypto/objects/o_names.o crypto/objects/obj_dat.o crypto/objects/obj_err.o crypto/objects/obj_lib.o crypto/objects/obj_xref.o crypto/ocsp/ocsp_asn.o crypto/ocsp/ocsp_cl.o crypto/ocsp/ocsp_err.o crypto/ocsp/ocsp_ext.o crypto/ocsp/ocsp_ht.o crypto/ocsp/ocsp_lib.o crypto/ocsp/ocsp_prn.o crypto/ocsp/ocsp_srv.o crypto/ocsp/ocsp_vfy.o crypto/ocsp/v3_ocsp.o crypto/pem/pem_all.o crypto/pem/pem_err.o crypto/pem/pem_info.o crypto/pem/pem_lib.o crypto/pem/pem_oth.o crypto/pem/pem_pk8.o crypto/pem/pem_pkey.o crypto/pem/pem_sign.o crypto/pem/pem_x509.o crypto/pem/pem_xaux.o crypto/pem/pvkfmt.o crypto/pkcs12/p12_add.o crypto/pkcs12/p12_asn.o crypto/pkcs12/p12_attr.o crypto/pkcs12/p12_crpt.o crypto/pkcs12/p12_crt.o crypto/pkcs12/p12_decr.o crypto/pkcs12/p12_init.o crypto/pkcs12/p12_key.o crypto/pkcs12/p12_kiss.o crypto/pkcs12/p12_mutl.o crypto/pkcs12/p12_npas.o crypto/pkcs12/p12_p8d.o crypto/pkcs12/p12_p8e.o crypto/pkcs12/p12_sbag.o crypto/pkcs12/p12_utl.o crypto/pkcs12/pk12err.o crypto/pkcs7/bio_pk7.o crypto/pkcs7/pk7_asn1.o crypto/pkcs7/pk7_attr.o crypto/pkcs7/pk7_doit.o crypto/pkcs7/pk7_lib.o crypto/pkcs7/pk7_mime.o crypto/pkcs7/pk7_smime.o crypto/pkcs7/pkcs7err.o crypto/poly1305/poly1305-mips.o crypto/poly1305/poly1305.o crypto/poly1305/poly1305_ameth.o crypto/poly1305/poly1305_pmeth.o crypto/rand/drbg_ctr.o crypto/rand/drbg_lib.o crypto/rand/rand_egd.o crypto/rand/rand_err.o crypto/rand/rand_lib.o crypto/rand/rand_unix.o crypto/rand/rand_vms.o crypto/rand/rand_win.o crypto/rand/randfile.o crypto/rc2/rc2_cbc.o crypto/rc2/rc2_ecb.o crypto/rc2/rc2_skey.o crypto/rc2/rc2cfb64.o crypto/rc2/rc2ofb64.o crypto/rc4/rc4_enc.o crypto/rc4/rc4_skey.o crypto/ripemd/rmd_dgst.o crypto/ripemd/rmd_one.o crypto/rsa/rsa_ameth.o crypto/rsa/rsa_asn1.o crypto/rsa/rsa_chk.o crypto/rsa/rsa_crpt.o crypto/rsa/rsa_depr.o crypto/rsa/rsa_err.o crypto/rsa/rsa_gen.o crypto/rsa/rsa_lib.o crypto/rsa/rsa_meth.o crypto/rsa/rsa_mp.o crypto/rsa/rsa_none.o crypto/rsa/rsa_oaep.o crypto/rsa/rsa_ossl.o crypto/rsa/rsa_pk1.o crypto/rsa/rsa_pmeth.o crypto/rsa/rsa_prn.o crypto/rsa/rsa_pss.o crypto/rsa/rsa_saos.o crypto/rsa/rsa_sign.o crypto/rsa/rsa_ssl.o crypto/rsa/rsa_x931.o crypto/rsa/rsa_x931g.o crypto/seed/seed.o crypto/seed/seed_cbc.o crypto/seed/seed_cfb.o crypto/seed/seed_ecb.o crypto/seed/seed_ofb.o crypto/sha/keccak1600.o crypto/sha/sha1-mips.o crypto/sha/sha1_one.o crypto/sha/sha1dgst.o crypto/sha/sha256-mips.o crypto/sha/sha256.o crypto/sha/sha512-mips.o crypto/sha/sha512.o crypto/siphash/siphash.o crypto/siphash/siphash_ameth.o crypto/siphash/siphash_pmeth.o crypto/sm3/m_sm3.o crypto/sm3/sm3.o crypto/sm4/sm4.o crypto/srp/srp_lib.o crypto/srp/srp_vfy.o crypto/stack/stack.o crypto/store/loader_file.o crypto/store/store_err.o crypto/store/store_init.o crypto/store/store_lib.o crypto/store/store_register.o crypto/store/store_strings.o crypto/threads_none.o crypto/threads_pthread.o crypto/threads_win.o crypto/ts/ts_asn1.o crypto/ts/ts_conf.o crypto/ts/ts_err.o crypto/ts/ts_lib.o crypto/ts/ts_req_print.o crypto/ts/ts_req_utils.o crypto/ts/ts_rsp_print.o crypto/ts/ts_rsp_sign.o crypto/ts/ts_rsp_utils.o crypto/ts/ts_rsp_verify.o crypto/ts/ts_verify_ctx.o crypto/txt_db/txt_db.o crypto/ui/ui_err.o crypto/ui/ui_lib.o crypto/ui/ui_null.o crypto/ui/ui_openssl.o crypto/ui/ui_util.o crypto/uid.o crypto/whrlpool/wp_block.o crypto/whrlpool/wp_dgst.o crypto/x509/by_dir.o crypto/x509/by_file.o crypto/x509/t_crl.o crypto/x509/t_req.o crypto/x509/t_x509.o crypto/x509/x509_att.o crypto/x509/x509_cmp.o crypto/x509/x509_d2.o crypto/x509/x509_def.o crypto/x509/x509_err.o crypto/x509/x509_ext.o crypto/x509/x509_lu.o crypto/x509/x509_obj.o crypto/x509/x509_r2x.o crypto/x509/x509_req.o crypto/x509/x509_set.o crypto/x509/x509_trs.o crypto/x509/x509_txt.o crypto/x509/x509_v3.o crypto/x509/x509_vfy.o crypto/x509/x509_vpm.o crypto/x509/x509cset.o crypto/x509/x509name.o crypto/x509/x509rset.o crypto/x509/x509spki.o crypto/x509/x509type.o crypto/x509/x_all.o crypto/x509/x_attrib.o crypto/x509/x_crl.o crypto/x509/x_exten.o crypto/x509/x_name.o crypto/x509/x_pubkey.o crypto/x509/x_req.o crypto/x509/x_x509.o crypto/x509/x_x509a.o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_tree.o crypto/x509v3/v3_addr.o crypto/x509v3/v3_admis.o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_alt.o crypto/x509v3/v3_asid.o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_conf.o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_crld.o crypto/x509v3/v3_enum.o crypto/x509v3/v3_extku.o crypto/x509v3/v3_genn.o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_info.o crypto/x509v3/v3_int.o crypto/x509v3/v3_lib.o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_prn.o crypto/x509v3/v3_purp.o crypto/x509v3/v3_skey.o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_utl.o crypto/x509v3/v3err.o engines/e_capi.o engines/e_padlock.o
mips64-octeon-linux-gnu-ar: creating libcrypto.a
mips64-octeon-linux-gnu-ranlib libcrypto.a || echo Never mind.
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/bio_ssl.d.tmp -MT ssl/bio_ssl.o -c -o ssl/bio_ssl.o ssl/bio_ssl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_lib.d.tmp -MT ssl/d1_lib.o -c -o ssl/d1_lib.o ssl/d1_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_msg.d.tmp -MT ssl/d1_msg.o -c -o ssl/d1_msg.o ssl/d1_msg.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/d1_srtp.d.tmp -MT ssl/d1_srtp.o -c -o ssl/d1_srtp.o ssl/d1_srtp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/methods.d.tmp -MT ssl/methods.o -c -o ssl/methods.o ssl/methods.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/packet.d.tmp -MT ssl/packet.o -c -o ssl/packet.o ssl/packet.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/pqueue.d.tmp -MT ssl/pqueue.o -c -o ssl/pqueue.o ssl/pqueue.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/dtls1_bitmap.d.tmp -MT ssl/record/dtls1_bitmap.o -c -o ssl/record/dtls1_bitmap.o ssl/record/dtls1_bitmap.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/rec_layer_d1.d.tmp -MT ssl/record/rec_layer_d1.o -c -o ssl/record/rec_layer_d1.o ssl/record/rec_layer_d1.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/rec_layer_s3.d.tmp -MT ssl/record/rec_layer_s3.o -c -o ssl/record/rec_layer_s3.o ssl/record/rec_layer_s3.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_buffer.d.tmp -MT ssl/record/ssl3_buffer.o -c -o ssl/record/ssl3_buffer.o ssl/record/ssl3_buffer.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_record.d.tmp -MT ssl/record/ssl3_record.o -c -o ssl/record/ssl3_record.o ssl/record/ssl3_record.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/record/ssl3_record_tls13.d.tmp -MT ssl/record/ssl3_record_tls13.o -c -o ssl/record/ssl3_record_tls13.o ssl/record/ssl3_record_tls13.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_cbc.d.tmp -MT ssl/s3_cbc.o -c -o ssl/s3_cbc.o ssl/s3_cbc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_enc.d.tmp -MT ssl/s3_enc.o -c -o ssl/s3_enc.o ssl/s3_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_lib.d.tmp -MT ssl/s3_lib.o -c -o ssl/s3_lib.o ssl/s3_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/s3_msg.d.tmp -MT ssl/s3_msg.o -c -o ssl/s3_msg.o ssl/s3_msg.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_asn1.d.tmp -MT ssl/ssl_asn1.o -c -o ssl/ssl_asn1.o ssl/ssl_asn1.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_cert.d.tmp -MT ssl/ssl_cert.o -c -o ssl/ssl_cert.o ssl/ssl_cert.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_ciph.d.tmp -MT ssl/ssl_ciph.o -c -o ssl/ssl_ciph.o ssl/ssl_ciph.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_conf.d.tmp -MT ssl/ssl_conf.o -c -o ssl/ssl_conf.o ssl/ssl_conf.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_err.d.tmp -MT ssl/ssl_err.o -c -o ssl/ssl_err.o ssl/ssl_err.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_init.d.tmp -MT ssl/ssl_init.o -c -o ssl/ssl_init.o ssl/ssl_init.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_lib.d.tmp -MT ssl/ssl_lib.o -c -o ssl/ssl_lib.o ssl/ssl_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_mcnf.d.tmp -MT ssl/ssl_mcnf.o -c -o ssl/ssl_mcnf.o ssl/ssl_mcnf.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_rsa.d.tmp -MT ssl/ssl_rsa.o -c -o ssl/ssl_rsa.o ssl/ssl_rsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_sess.d.tmp -MT ssl/ssl_sess.o -c -o ssl/ssl_sess.o ssl/ssl_sess.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_stat.d.tmp -MT ssl/ssl_stat.o -c -o ssl/ssl_stat.o ssl/ssl_stat.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_txt.d.tmp -MT ssl/ssl_txt.o -c -o ssl/ssl_txt.o ssl/ssl_txt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/ssl_utst.d.tmp -MT ssl/ssl_utst.o -c -o ssl/ssl_utst.o ssl/ssl_utst.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions.d.tmp -MT ssl/statem/extensions.o -c -o ssl/statem/extensions.o ssl/statem/extensions.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_clnt.d.tmp -MT ssl/statem/extensions_clnt.o -c -o ssl/statem/extensions_clnt.o ssl/statem/extensions_clnt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_cust.d.tmp -MT ssl/statem/extensions_cust.o -c -o ssl/statem/extensions_cust.o ssl/statem/extensions_cust.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/extensions_srvr.d.tmp -MT ssl/statem/extensions_srvr.o -c -o ssl/statem/extensions_srvr.o ssl/statem/extensions_srvr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem.d.tmp -MT ssl/statem/statem.o -c -o ssl/statem/statem.o ssl/statem/statem.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_clnt.d.tmp -MT ssl/statem/statem_clnt.o -c -o ssl/statem/statem_clnt.o ssl/statem/statem_clnt.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_dtls.d.tmp -MT ssl/statem/statem_dtls.o -c -o ssl/statem/statem_dtls.o ssl/statem/statem_dtls.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_lib.d.tmp -MT ssl/statem/statem_lib.o -c -o ssl/statem/statem_lib.o ssl/statem/statem_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/statem/statem_srvr.d.tmp -MT ssl/statem/statem_srvr.o -c -o ssl/statem/statem_srvr.o ssl/statem/statem_srvr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_enc.d.tmp -MT ssl/t1_enc.o -c -o ssl/t1_enc.o ssl/t1_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_lib.d.tmp -MT ssl/t1_lib.o -c -o ssl/t1_lib.o ssl/t1_lib.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/t1_trce.d.tmp -MT ssl/t1_trce.o -c -o ssl/t1_trce.o ssl/t1_trce.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/tls13_enc.d.tmp -MT ssl/tls13_enc.o -c -o ssl/tls13_enc.o ssl/tls13_enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF ssl/tls_srp.d.tmp -MT ssl/tls_srp.o -c -o ssl/tls_srp.o ssl/tls_srp.c
mips64-octeon-linux-gnu-ar r libssl.a ssl/bio_ssl.o ssl/d1_lib.o ssl/d1_msg.o ssl/d1_srtp.o ssl/methods.o ssl/packet.o ssl/pqueue.o ssl/record/dtls1_bitmap.o ssl/record/rec_layer_d1.o ssl/record/rec_layer_s3.o ssl/record/ssl3_buffer.o ssl/record/ssl3_record.o ssl/record/ssl3_record_tls13.o ssl/s3_cbc.o ssl/s3_enc.o ssl/s3_lib.o ssl/s3_msg.o ssl/ssl_asn1.o ssl/ssl_cert.o ssl/ssl_ciph.o ssl/ssl_conf.o ssl/ssl_err.o ssl/ssl_init.o ssl/ssl_lib.o ssl/ssl_mcnf.o ssl/ssl_rsa.o ssl/ssl_sess.o ssl/ssl_stat.o ssl/ssl_txt.o ssl/ssl_utst.o ssl/statem/extensions.o ssl/statem/extensions_clnt.o ssl/statem/extensions_cust.o ssl/statem/extensions_srvr.o ssl/statem/statem.o ssl/statem/statem_clnt.o ssl/statem/statem_dtls.o ssl/statem/statem_lib.o ssl/statem/statem_srvr.o ssl/t1_enc.o ssl/t1_lib.o ssl/t1_trce.o ssl/tls13_enc.o ssl/tls_srp.o
mips64-octeon-linux-gnu-ar: creating libssl.a
mips64-octeon-linux-gnu-ranlib libssl.a || echo Never mind.
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/basic_output.d.tmp -MT test/testutil/basic_output.o -c -o test/testutil/basic_output.o test/testutil/basic_output.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/cb.d.tmp -MT test/testutil/cb.o -c -o test/testutil/cb.o test/testutil/cb.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/driver.d.tmp -MT test/testutil/driver.o -c -o test/testutil/driver.o test/testutil/driver.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/format_output.d.tmp -MT test/testutil/format_output.o -c -o test/testutil/format_output.o test/testutil/format_output.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/init.d.tmp -MT test/testutil/init.o -c -o test/testutil/init.o test/testutil/init.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/main.d.tmp -MT test/testutil/main.o -c -o test/testutil/main.o test/testutil/main.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/output_helpers.d.tmp -MT test/testutil/output_helpers.o -c -o test/testutil/output_helpers.o test/testutil/output_helpers.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/stanza.d.tmp -MT test/testutil/stanza.o -c -o test/testutil/stanza.o test/testutil/stanza.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/tap_bio.d.tmp -MT test/testutil/tap_bio.o -c -o test/testutil/tap_bio.o test/testutil/tap_bio.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/test_cleanup.d.tmp -MT test/testutil/test_cleanup.o -c -o test/testutil/test_cleanup.o test/testutil/test_cleanup.c
mips64-octeon-linux-gnu-gcc  -Iinclude -mips3 -Wall -O3 -pthread -mabi=n32 -fPIC -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\""  -c -MMD -MF test/testutil/tests.d.tmp -MT test/testutil/tests.o -c -o test/testutil/tests.o test/testutil/tests.c
mips64-octeon-linux-gnu-ar r test/libtestutil.a test/testutil/basic_output.o test/testutil/cb.o test/testutil/driver.o test/testutil/format_output.o test/testutil/init.o test/testutil/main.o test/testutil/output_helpers.o test/testutil/stanza.o test/testutil/tap_bio.o test/testutil/test_cleanup.o test/testutil/tests.o
mips64-octeon-linux-gnu-ar: creating test/libtestutil.a
mips64-octeon-linux-gnu-ranlib test/libtestutil.a || echo Never mind.
/usr/bin/perl apps/progs.pl apps/openssl > apps/progs.h
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/asn1pars.d.tmp -MT apps/asn1pars.o -c -o apps/asn1pars.o apps/asn1pars.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ca.d.tmp -MT apps/ca.o -c -o apps/ca.o apps/ca.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ciphers.d.tmp -MT apps/ciphers.o -c -o apps/ciphers.o apps/ciphers.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/cms.d.tmp -MT apps/cms.o -c -o apps/cms.o apps/cms.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/crl.d.tmp -MT apps/crl.o -c -o apps/crl.o apps/crl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/crl2p7.d.tmp -MT apps/crl2p7.o -c -o apps/crl2p7.o apps/crl2p7.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dgst.d.tmp -MT apps/dgst.o -c -o apps/dgst.o apps/dgst.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dhparam.d.tmp -MT apps/dhparam.o -c -o apps/dhparam.o apps/dhparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dsa.d.tmp -MT apps/dsa.o -c -o apps/dsa.o apps/dsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/dsaparam.d.tmp -MT apps/dsaparam.o -c -o apps/dsaparam.o apps/dsaparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ec.d.tmp -MT apps/ec.o -c -o apps/ec.o apps/ec.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ecparam.d.tmp -MT apps/ecparam.o -c -o apps/ecparam.o apps/ecparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/enc.d.tmp -MT apps/enc.o -c -o apps/enc.o apps/enc.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/engine.d.tmp -MT apps/engine.o -c -o apps/engine.o apps/engine.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/errstr.d.tmp -MT apps/errstr.o -c -o apps/errstr.o apps/errstr.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/gendsa.d.tmp -MT apps/gendsa.o -c -o apps/gendsa.o apps/gendsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/genpkey.d.tmp -MT apps/genpkey.o -c -o apps/genpkey.o apps/genpkey.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/genrsa.d.tmp -MT apps/genrsa.o -c -o apps/genrsa.o apps/genrsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/nseq.d.tmp -MT apps/nseq.o -c -o apps/nseq.o apps/nseq.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ocsp.d.tmp -MT apps/ocsp.o -c -o apps/ocsp.o apps/ocsp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/openssl.d.tmp -MT apps/openssl.o -c -o apps/openssl.o apps/openssl.c
apps/openssl.c: In function 'list_type':
apps/openssl.c:523: warning: 'dc.width' may be used uninitialized in this function
apps/openssl.c:523: warning: 'dc.columns' may be used uninitialized in this function
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/passwd.d.tmp -MT apps/passwd.o -c -o apps/passwd.o apps/passwd.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs12.d.tmp -MT apps/pkcs12.o -c -o apps/pkcs12.o apps/pkcs12.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs7.d.tmp -MT apps/pkcs7.o -c -o apps/pkcs7.o apps/pkcs7.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkcs8.d.tmp -MT apps/pkcs8.o -c -o apps/pkcs8.o apps/pkcs8.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkey.d.tmp -MT apps/pkey.o -c -o apps/pkey.o apps/pkey.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkeyparam.d.tmp -MT apps/pkeyparam.o -c -o apps/pkeyparam.o apps/pkeyparam.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/pkeyutl.d.tmp -MT apps/pkeyutl.o -c -o apps/pkeyutl.o apps/pkeyutl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/prime.d.tmp -MT apps/prime.o -c -o apps/prime.o apps/prime.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rand.d.tmp -MT apps/rand.o -c -o apps/rand.o apps/rand.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rehash.d.tmp -MT apps/rehash.o -c -o apps/rehash.o apps/rehash.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/req.d.tmp -MT apps/req.o -c -o apps/req.o apps/req.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rsa.d.tmp -MT apps/rsa.o -c -o apps/rsa.o apps/rsa.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/rsautl.d.tmp -MT apps/rsautl.o -c -o apps/rsautl.o apps/rsautl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_client.d.tmp -MT apps/s_client.o -c -o apps/s_client.o apps/s_client.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_server.d.tmp -MT apps/s_server.o -c -o apps/s_server.o apps/s_server.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/s_time.d.tmp -MT apps/s_time.o -c -o apps/s_time.o apps/s_time.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/sess_id.d.tmp -MT apps/sess_id.o -c -o apps/sess_id.o apps/sess_id.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/smime.d.tmp -MT apps/smime.o -c -o apps/smime.o apps/smime.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/speed.d.tmp -MT apps/speed.o -c -o apps/speed.o apps/speed.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/spkac.d.tmp -MT apps/spkac.o -c -o apps/spkac.o apps/spkac.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/srp.d.tmp -MT apps/srp.o -c -o apps/srp.o apps/srp.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/storeutl.d.tmp -MT apps/storeutl.o -c -o apps/storeutl.o apps/storeutl.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/ts.d.tmp -MT apps/ts.o -c -o apps/ts.o apps/ts.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/verify.d.tmp -MT apps/verify.o -c -o apps/verify.o apps/verify.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/version.d.tmp -MT apps/version.o -c -o apps/version.o apps/version.c
mips64-octeon-linux-gnu-gcc  -I. -Iinclude -Iapps -mips3 -Wall -O3 -pthread -mabi=n32  -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DBN_DIV3W  -c -MMD -MF apps/x509.d.tmp -MT apps/x509.o -c -o apps/x509.o apps/x509.c
rm -f apps/openssl
${LDCMD:-mips64-octeon-linux-gnu-gcc} -mips3 -Wall -O3 -pthread -mabi=n32  -L.   \
		-o apps/openssl apps/asn1pars.o apps/ca.o apps/ciphers.o apps/cms.o apps/crl.o apps/crl2p7.o apps/dgst.o apps/dhparam.o apps/dsa.o apps/dsaparam.o apps/ec.o apps/ecparam.o apps/enc.o apps/engine.o apps/errstr.o apps/gendsa.o apps/genpkey.o apps/genrsa.o apps/nseq.o apps/ocsp.o apps/openssl.o apps/passwd.o apps/pkcs12.o apps/pkcs7.o apps/pkcs8.o apps/pkey.o apps/pkeyparam.o apps/pkeyutl.o apps/prime.o apps/rand.o apps/rehash.o apps/req.o apps/rsa.o apps/rsautl.o apps/s_client.o apps/s_server.o apps/s_time.o apps/sess_id.o apps/smime.o apps/speed.o apps/spkac.o apps/srp.o apps/storeutl.o apps/ts.o apps/verify.o apps/version.o apps/x509.o \
		  apps/libapps.a -lssl -lcrypto -ldl -pthread
./libcrypto.a(async_posix.o): In function `ASYNC_is_capable':
async_posix.c:(.text+0x6c): warning: warning: getcontext is not implemented and will always fail
./libcrypto.a(async.o): In function `async_fibre_swapcontext':
async.c:(.text+0x2fc): warning: warning: setcontext is not implemented and will always fail
./libcrypto.a(async_posix.o): In function `async_fibre_makecontext':
async_posix.c:(.text+0x10c): warning: warning: makecontext is not implemented and will always fail
apps/speed.o: In function `speed_main':
speed.c:(.text+0x74bc): undefined reference to `CRYPTO_memcmp'
speed.c:(.text+0x74bc): relocation truncated to fit: R_MIPS_26 against `CRYPTO_memcmp'
./libssl.a(ssl3_record.o): In function `dtls1_process_record':
ssl3_record.c:(.text+0x1e14): undefined reference to `CRYPTO_memcmp'
ssl3_record.c:(.text+0x1f7c): undefined reference to `CRYPTO_memcmp'
./libssl.a(ssl3_record.o): In function `ssl3_get_record':
ssl3_record.c:(.text+0x2a88): undefined reference to `CRYPTO_memcmp'
ssl3_record.c:(.text+0x3210): undefined reference to `CRYPTO_memcmp'
./libssl.a(extensions.o):extensions.c:(.text+0xa84): more undefined references to `CRYPTO_memcmp' follow
./libcrypto.a(init.o): In function `ossl_init_base_ossl_':
init.c:(.text+0x8e0): undefined reference to `OPENSSL_cpuid_setup'
./libcrypto.a(gcm128.o): In function `CRYPTO_gcm128_finish':
gcm128.c:(.text+0x23cc): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(ocb128.o): In function `CRYPTO_ocb128_finish':
ocb128.c:(.text+0x144): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(wrap128.o): In function `CRYPTO_128_unwrap_pad':
wrap128.c:(.text+0x494): undefined reference to `CRYPTO_memcmp'
wrap128.c:(.text+0x588): undefined reference to `CRYPTO_memcmp'
wrap128.c:(.text+0x5b0): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(wrap128.o):wrap128.c:(.text+0x624): more undefined references to `CRYPTO_memcmp' follow
./libcrypto.a(rand_lib.o): In function `rand_drbg_get_additional_data':
rand_lib.c:(.text+0xedc): undefined reference to `OPENSSL_rdtsc'
rand_lib.c:(.text+0xf70): undefined reference to `OPENSSL_rdtsc'
./libcrypto.a(curve25519.o): In function `X25519':
curve25519.c:(.text+0x4e58): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(curve25519.o): In function `ge_frombytes_vartime':
curve25519.c:(.text+0x559c): undefined reference to `CRYPTO_memcmp'
curve25519.c:(.text+0x5754): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(curve25519.o): In function `ED25519_verify':
curve25519.c:(.text+0xdea8): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
eng_all.c:(.text+0x14): undefined reference to `OPENSSL_cpuid_setup'
./libcrypto.a(rsa_oaep.o): In function `RSA_padding_check_PKCS1_OAEP_mgf1':
rsa_oaep.c:(.text+0x4e0): undefined reference to `CRYPTO_memcmp'
./libcrypto.a(dh_kdf.o): In function `DH_KDF_X9_42':
dh_kdf.c:(.text+0x35c): undefined reference to `CRYPTO_memcmp'
collect2: ld returned 1 exit status
make[1]: *** [apps/openssl] Error 1
make[1]: Leaving directory `<http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/ws/'>
make: *** [all] Error 2
Build step 'Execute shell' marked build as failure

From openssl at openssl.org  Thu Feb  8 14:11:20 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 08 Feb 2018 14:11:20 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings 386
Message-ID: <1518099080.610921.2537.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings 386

Commit log since last time:

4af2697 Don't run tls13encryptiontest on a shared Windows build
04e3bb0 Fix some undefined behaviour in ossltest engine
0f41dc0 Fix clienthellotest with TLSv1.3
f518cef Enable TLSv1.3 by default
c517ac4 Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
048ebcc make update ERROR_REBUILD=-rebuild
cb7b727 mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
3a7141d Make all private functions in e_afalg.c static
7d3901f test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
227a1e3 Modify test/afalgtest to fail if the afalg engine couldn't be loaded
bed4afa Fix glibc specific conditional for Mac OS/X
2b66fd5 Unify timer code
360fc9f Make OPENSSL_rdtsc universally available.
2ad2281 Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

Build log ended with (last 100 lines):

/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:38: undefined reference to `OPENSSL_ia32_rdrand'
libcrypto.a(e_aes.o): In function `aes_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:2906: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3458: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3393: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:428: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:713: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o):/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:648: more undefined references to `CRYPTO_memcmp' follow
libcrypto.a(curve25519.o): In function `ED25519_verify':
/home/openssl/run-checker/386/../openssl/crypto/ec/curve25519.c:5149: undefined reference to `CRYPTO_memcmp'
libcrypto.a(curve25519.o): In function `X25519':
/home/openssl/run-checker/386/../openssl/crypto/ec/curve25519.c:5174: undefined reference to `CRYPTO_memcmp'
libcrypto.a(curve25519.o): In function `fe_isnonzero':
/home/openssl/run-checker/386/../openssl/crypto/ec/curve25519.c:1235: undefined reference to `CRYPTO_memcmp'
libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_all.c:16: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(eng_rdrand.o): In function `get_random_bytes':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:30: undefined reference to `OPENSSL_ia32_rdrand'
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:38: undefined reference to `OPENSSL_ia32_rdrand'
libcrypto.a(e_aes.o): In function `aes_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:2906: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3458: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3393: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:428: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:713: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o):/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:648: more undefined references to `CRYPTO_memcmp' follow
if [ 'libcrypto.so' != 'libcrypto.so.1.1' ]; then \
	rm -f libcrypto.so; \
	ln -s libcrypto.so.1.1 libcrypto.so; \
fi
clang: error: linker command failed with exit code 1 (use -v to see invocation)
rm -f test/modes_internal_test
Makefile:7074: recipe for target 'test/asn1_internal_test' failed
make[1]: *** [test/asn1_internal_test] Error 1
make[1]: *** Waiting for unfinished jobs....
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option  -L.   \
	-o test/modes_internal_test test/modes_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:8695: recipe for target 'test/chacha_internal_test' failed
make[1]: *** [test/chacha_internal_test] Error 1
libcrypto.a(init.o): In function `ossl_init_base':
/home/openssl/run-checker/386/../openssl/crypto/init.c:89: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(rand_lib.o): In function `get_timer_bits':
/home/openssl/run-checker/386/../openssl/crypto/rand/rand_lib.c:206: undefined reference to `OPENSSL_rdtsc'
libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_all.c:16: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(eng_rdrand.o): In function `get_random_bytes':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:30: undefined reference to `OPENSSL_ia32_rdrand'
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:38: undefined reference to `OPENSSL_ia32_rdrand'
libcrypto.a(e_aes.o): In function `aes_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:2906: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3458: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3393: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:428: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:713: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o):/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:648: more undefined references to `CRYPTO_memcmp' follow
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:8799: recipe for target 'test/ctype_internal_test' failed
make[1]: *** [test/ctype_internal_test] Error 1
libcrypto.a(init.o): In function `ossl_init_base':
/home/openssl/run-checker/386/../openssl/crypto/init.c:89: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(gcm128.o): In function `CRYPTO_gcm128_finish':
/home/openssl/run-checker/386/../openssl/crypto/modes/gcm128.c:1651: undefined reference to `CRYPTO_memcmp'
libcrypto.a(rand_lib.o): In function `get_timer_bits':
/home/openssl/run-checker/386/../openssl/crypto/rand/rand_lib.c:206: undefined reference to `OPENSSL_rdtsc'
libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_all.c:16: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(eng_rdrand.o): In function `get_random_bytes':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:30: undefined reference to `OPENSSL_ia32_rdrand'
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:38: undefined reference to `OPENSSL_ia32_rdrand'
libcrypto.a(e_aes.o): In function `aes_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:2906: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3458: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3393: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:428: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:713: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o):/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:648: more undefined references to `CRYPTO_memcmp' follow
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:9163: recipe for target 'test/modes_internal_test' failed
make[1]: *** [test/modes_internal_test] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/386'
Makefile:143: recipe for target 'all' failed
make: *** [all] Error 2

From openssl at openssl.org  Thu Feb  8 15:53:15 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 08 Feb 2018 15:53:15 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-tls1_2
Message-ID: <1518105195.962919.13369.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_2

Commit log since last time:

4af2697 Don't run tls13encryptiontest on a shared Windows build
04e3bb0 Fix some undefined behaviour in ossltest engine
0f41dc0 Fix clienthellotest with TLSv1.3
f518cef Enable TLSv1.3 by default
c517ac4 Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
048ebcc make update ERROR_REBUILD=-rebuild
cb7b727 mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
3a7141d Make all private functions in e_afalg.c static
7d3901f test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
227a1e3 Modify test/afalgtest to fail if the afalg engine couldn't be loaded
bed4afa Fix glibc specific conditional for Mac OS/X
2b66fd5 Unify timer code
360fc9f Make OPENSSL_rdtsc universally available.
2ad2281 Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

Build log ended with (last 100 lines):

( cd test; \
  mkdir -p test-runs; \
  SRCTOP=../../openssl \
  BLDTOP=../. \
  RESULT_D=test-runs \
  PERL="/usr/bin/perl" \
  EXE_EXT= \
  OPENSSL_ENGINES=`cd .././engines; pwd` \
  OPENSSL_DEBUG_MEMORY=on \
    /usr/bin/perl ../../openssl/test/run_tests.pl  )
../../openssl/test/recipes/01-test_abort.t .................... ok
../../openssl/test/recipes/01-test_sanity.t ................... ok
../../openssl/test/recipes/01-test_symbol_presence.t .......... ok
../../openssl/test/recipes/01-test_test.t ..................... ok
../../openssl/test/recipes/02-test_internal_ctype.t ........... ok
../../openssl/test/recipes/02-test_lhash.t .................... ok
../../openssl/test/recipes/02-test_ordinals.t ................. ok
../../openssl/test/recipes/02-test_stack.t .................... ok
../../openssl/test/recipes/03-test_exdata.t ................... ok
../../openssl/test/recipes/03-test_internal_asn1.t ............ ok
../../openssl/test/recipes/03-test_internal_chacha.t .......... ok
../../openssl/test/recipes/03-test_internal_mdc2.t ............ ok
../../openssl/test/recipes/03-test_internal_modes.t ........... ok
../../openssl/test/recipes/03-test_internal_poly1305.t ........ ok
../../openssl/test/recipes/03-test_internal_siphash.t ......... ok
../../openssl/test/recipes/03-test_internal_sm4.t ............. ok
../../openssl/test/recipes/03-test_internal_ssl_cert_table.t .. ok
../../openssl/test/recipes/03-test_internal_x509.t ............ ok
../../openssl/test/recipes/03-test_ui.t ....................... ok
../../openssl/test/recipes/04-test_asn1_encode.t .............. ok
../../openssl/test/recipes/04-test_asn1_string_table.t ........ ok
../../openssl/test/recipes/04-test_bioprint.t ................. ok
../../openssl/test/recipes/04-test_pem.t ...................... ok
../../openssl/test/recipes/05-test_bf.t ....................... ok
../../openssl/test/recipes/05-test_cast.t ..................... ok
../../openssl/test/recipes/05-test_des.t ...................... ok
../../openssl/test/recipes/05-test_hmac.t ..................... ok
../../openssl/test/recipes/05-test_idea.t ..................... ok
../../openssl/test/recipes/05-test_md2.t ...................... skipped: md2 is not supported by this OpenSSL build
../../openssl/test/recipes/05-test_mdc2.t ..................... ok
../../openssl/test/recipes/05-test_rand.t ..................... ok
../../openssl/test/recipes/05-test_rc2.t ...................... ok
../../openssl/test/recipes/05-test_rc4.t ...................... ok
../../openssl/test/recipes/05-test_rc5.t ...................... skipped: rc5 is not supported by this OpenSSL build
../../openssl/test/recipes/10-test_bn.t ....................... ok
../../openssl/test/recipes/10-test_exp.t ...................... ok
../../openssl/test/recipes/15-test_dh.t ....................... ok
../../openssl/test/recipes/15-test_dsa.t ...................... ok
../../openssl/test/recipes/15-test_ec.t ....................... ok
../../openssl/test/recipes/15-test_ecdsa.t .................... ok
../../openssl/test/recipes/15-test_ecparam.t .................. ok
../../openssl/test/recipes/15-test_genrsa.t ................... ok
../../openssl/test/recipes/15-test_mp_rsa.t ................... ok
../../openssl/test/recipes/15-test_rsa.t ...................... ok
../../openssl/test/recipes/15-test_rsapss.t ................... ok
../../openssl/test/recipes/20-test_enc.t ...................... ok
../../openssl/test/recipes/20-test_enc_more.t ................. ok
../../openssl/test/recipes/20-test_passwd.t ................... ok
../../openssl/test/recipes/25-test_crl.t ...................... ok
../../openssl/test/recipes/25-test_d2i.t ...................... ok
../../openssl/test/recipes/25-test_pkcs7.t .................... ok
../../openssl/test/recipes/25-test_req.t ...................... ok
../../openssl/test/recipes/25-test_sid.t ...................... ok
../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/22 subtests 
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ skipped: test_renegotiation needs TLS <= 1.2 enabled
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ skipped: test_sslcbcpadding needs TLSv1.2 enabled
../../openssl/test/recipes/70-test_sslcertstatus.t ............ 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_sslextension.t ............. 
Dubious, test returned 255 (wstat 65280, 0xff00)
No subtests run 
make[1]: *** wait: No child processes.  Stop.
make[1]: *** Waiting for unfinished jobs....
make[1]: *** wait: No child processes.  Stop.

From matt at openssl.org  Thu Feb  8 17:27:29 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 08 Feb 2018 17:27:29 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518110849.360805.5463.nullmailer@dev.openssl.org>

The branch master has been updated
       via  71cff963b4b3f8432e7fea4c94c138ca61b07d95 (commit)
      from  b53fdad0e4350ba49812c50305686ee5a6239111 (commit)


- Log -----------------------------------------------------------------
commit 71cff963b4b3f8432e7fea4c94c138ca61b07d95
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 8 15:45:35 2018 +0000

    Fix no-chacha and no-poly1305
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5287)

-----------------------------------------------------------------------

Summary of changes:
 test/cipherlist_test.c | 4 +++-
 test/sslapitest.c      | 2 ++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/test/cipherlist_test.c b/test/cipherlist_test.c
index 2d8288d..336bdb0 100644
--- a/test/cipherlist_test.c
+++ b/test/cipherlist_test.c
@@ -72,7 +72,7 @@ static const uint32_t default_ciphers_in_order[] = {
     TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384,
 # endif
 
-# if !defined OPENSSL_NO_CHACHA && !defined OPENSSL_NO_POLY1305
+# if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
 #  ifndef OPENSSL_NO_EC
     TLS1_CK_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
     TLS1_CK_ECDHE_RSA_WITH_CHACHA20_POLY1305,
@@ -126,7 +126,9 @@ static const uint32_t default_ciphers_in_order[] = {
 #endif
 #ifndef OPENSSL_NO_TLS1_3
     TLS1_3_CK_AES_256_GCM_SHA384,
+# if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
     TLS1_3_CK_CHACHA20_POLY1305_SHA256,
+# endif
     TLS1_3_CK_AES_128_GCM_SHA256,
 #endif
 #ifndef OPENSSL_NO_TLS1_2
diff --git a/test/sslapitest.c b/test/sslapitest.c
index b655fe7..483941a 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -2332,6 +2332,7 @@ static int test_ciphersuite_change(void)
     SSL_free(clientssl);
     serverssl = clientssl = NULL;
 
+# if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
     /* Check we can resume a session with a different SHA-256 ciphersuite */
     if (!TEST_true(SSL_CTX_set_cipher_list(cctx,
                                            "TLS13-CHACHA20-POLY1305-SHA256"))
@@ -2350,6 +2351,7 @@ static int test_ciphersuite_change(void)
     SSL_free(serverssl);
     SSL_free(clientssl);
     serverssl = clientssl = NULL;
+# endif
 
     /*
      * Check attempting to resume a SHA-256 session with no SHA-256 ciphersuites

From openssl at openssl.org  Thu Feb  8 17:36:03 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 08 Feb 2018 17:36:03 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-tls1_2-method
Message-ID: <1518111363.335586.31189.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_2-method

Commit log since last time:

4af2697 Don't run tls13encryptiontest on a shared Windows build
04e3bb0 Fix some undefined behaviour in ossltest engine
0f41dc0 Fix clienthellotest with TLSv1.3
f518cef Enable TLSv1.3 by default
c517ac4 Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
048ebcc make update ERROR_REBUILD=-rebuild
cb7b727 mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
3a7141d Make all private functions in e_afalg.c static
7d3901f test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
227a1e3 Modify test/afalgtest to fail if the afalg engine couldn't be loaded
bed4afa Fix glibc specific conditional for Mac OS/X
2b66fd5 Unify timer code
360fc9f Make OPENSSL_rdtsc universally available.
2ad2281 Make the OPENSSL_CPUID_OBJ define internal. Patch by @levitte.

Build log ended with (last 100 lines):

( cd test; \
  mkdir -p test-runs; \
  SRCTOP=../../openssl \
  BLDTOP=../. \
  RESULT_D=test-runs \
  PERL="/usr/bin/perl" \
  EXE_EXT= \
  OPENSSL_ENGINES=`cd .././engines; pwd` \
  OPENSSL_DEBUG_MEMORY=on \
    /usr/bin/perl ../../openssl/test/run_tests.pl  )
../../openssl/test/recipes/01-test_abort.t .................... ok
../../openssl/test/recipes/01-test_sanity.t ................... ok
../../openssl/test/recipes/01-test_symbol_presence.t .......... ok
../../openssl/test/recipes/01-test_test.t ..................... ok
../../openssl/test/recipes/02-test_internal_ctype.t ........... ok
../../openssl/test/recipes/02-test_lhash.t .................... ok
../../openssl/test/recipes/02-test_ordinals.t ................. ok
../../openssl/test/recipes/02-test_stack.t .................... ok
../../openssl/test/recipes/03-test_exdata.t ................... ok
../../openssl/test/recipes/03-test_internal_asn1.t ............ ok
../../openssl/test/recipes/03-test_internal_chacha.t .......... ok
../../openssl/test/recipes/03-test_internal_mdc2.t ............ ok
../../openssl/test/recipes/03-test_internal_modes.t ........... ok
../../openssl/test/recipes/03-test_internal_poly1305.t ........ ok
../../openssl/test/recipes/03-test_internal_siphash.t ......... ok
../../openssl/test/recipes/03-test_internal_sm4.t ............. ok
../../openssl/test/recipes/03-test_internal_ssl_cert_table.t .. ok
../../openssl/test/recipes/03-test_internal_x509.t ............ ok
../../openssl/test/recipes/03-test_ui.t ....................... ok
../../openssl/test/recipes/04-test_asn1_encode.t .............. ok
../../openssl/test/recipes/04-test_asn1_string_table.t ........ ok
../../openssl/test/recipes/04-test_bioprint.t ................. ok
../../openssl/test/recipes/04-test_pem.t ...................... ok
../../openssl/test/recipes/05-test_bf.t ....................... ok
../../openssl/test/recipes/05-test_cast.t ..................... ok
../../openssl/test/recipes/05-test_des.t ...................... ok
../../openssl/test/recipes/05-test_hmac.t ..................... ok
../../openssl/test/recipes/05-test_idea.t ..................... ok
../../openssl/test/recipes/05-test_md2.t ...................... skipped: md2 is not supported by this OpenSSL build
../../openssl/test/recipes/05-test_mdc2.t ..................... ok
../../openssl/test/recipes/05-test_rand.t ..................... ok
../../openssl/test/recipes/05-test_rc2.t ...................... ok
../../openssl/test/recipes/05-test_rc4.t ...................... ok
../../openssl/test/recipes/05-test_rc5.t ...................... skipped: rc5 is not supported by this OpenSSL build
../../openssl/test/recipes/10-test_bn.t ....................... ok
../../openssl/test/recipes/10-test_exp.t ...................... ok
../../openssl/test/recipes/15-test_dh.t ....................... ok
../../openssl/test/recipes/15-test_dsa.t ...................... ok
../../openssl/test/recipes/15-test_ec.t ....................... ok
../../openssl/test/recipes/15-test_ecdsa.t .................... ok
../../openssl/test/recipes/15-test_ecparam.t .................. ok
../../openssl/test/recipes/15-test_genrsa.t ................... ok
../../openssl/test/recipes/15-test_mp_rsa.t ................... ok
../../openssl/test/recipes/15-test_rsa.t ...................... ok
../../openssl/test/recipes/15-test_rsapss.t ................... ok
../../openssl/test/recipes/20-test_enc.t ...................... ok
../../openssl/test/recipes/20-test_enc_more.t ................. ok
../../openssl/test/recipes/20-test_passwd.t ................... ok
../../openssl/test/recipes/25-test_crl.t ...................... ok
../../openssl/test/recipes/25-test_d2i.t ...................... ok
../../openssl/test/recipes/25-test_pkcs7.t .................... ok
../../openssl/test/recipes/25-test_req.t ...................... ok
../../openssl/test/recipes/25-test_sid.t ...................... ok
../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/22 subtests 
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ skipped: test_renegotiation needs TLS <= 1.2 enabled
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ skipped: test_sslcbcpadding needs TLSv1.2 enabled
../../openssl/test/recipes/70-test_sslcertstatus.t ............ 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_sslextension.t ............. 
Dubious, test returned 255 (wstat 65280, 0xff00)
No subtests run 
make[1]: *** wait: No child processes.  Stop.
make[1]: *** Waiting for unfinished jobs....
make[1]: *** wait: No child processes.  Stop.

From levitte at openssl.org  Thu Feb  8 18:42:30 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 08 Feb 2018 18:42:30 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1518115350.633083.16528.nullmailer@dev.openssl.org>

The branch master has been updated
       via  da7d7b372dc15d739df3ba7aff2c1a4292148515 (commit)
      from  7823d374c6841eac48a7baf1f2955eb962b5305d (commit)


- Log -----------------------------------------------------------------
commit da7d7b372dc15d739df3ba7aff2c1a4292148515
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 8 19:25:20 2018 +0100

    run-checker: enhance README
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/8)

-----------------------------------------------------------------------

Summary of changes:
 run-checker/README | 90 ++++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 88 insertions(+), 2 deletions(-)

diff --git a/run-checker/README b/run-checker/README
index cc589b6..b9540a0 100644
--- a/run-checker/README
+++ b/run-checker/README
@@ -1,2 +1,88 @@
-This tool is used to build various config options of openssl
-and generate okay/fail reports.
+This tool is used to build various predefined config options of
+openssl and generate okay/fail reports.  The array of config options
+is found in run-checker.sh, assigned to 'opts'.
+
+Quick manual run
+----------------
+
+To run a check on the master branch:
+
+    git clone git://git.openssl.org/openssl.git openssl
+    /path/to/run-checker.sh
+
+To run a check on a release branch:
+
+    git clone -b OpenSSL_1_1_0-stable git://git.openssl.org/openssl.git openssl
+    /path/to/run-checker.sh
+
+
+Hooks
+-----
+
+run-checker supports a few hooks, in form of scripts that are
+executed:
+
+hook-prepare		This script is run once, when run-checker is
+			starting.  If it exits with a status other
+			than zero, run-checker.sh will stop.  It gets
+			no arguments.
+
+hook-start		This script is run before each option build.
+			If it exits with a status other than zero,
+			run-checker.sh will skip the current build.
+			It gets the following arguments:
+
+			$1	The build directory.
+			$2	The option being checked.
+			$3...	Configure options and arguments.
+
+hook-end		This script is run after each option build.
+			If gets the following arguments:
+
+			$1	The build directory.
+			$2	"pass" or "fail", depending on the
+				build result.
+
+hook-takedown		This script is run once, just before
+			run-checker terminates.  It gets no arguments.
+
+
+The hooks and documentation in run-checker-autohooks are an advanced
+example, and what the OpenSSL Team runs daily (automatically).
+
+
+Example hooks 1
+---------------
+
+The run-checker script uses disk space by leaving every build tree
+behind!  It may be that you want to clear the build tree after each
+build.  This little hook can help:
+
+hook-end:
+
+    #! /bin/sh
+    builddir="$1"
+    mv "$builddir"/build.log "$builddir".log && rm -rf "$builddir"
+
+Example hook 2
+--------------
+
+This is a variant of Example hook 1 that saves away the build dir into
+a tarball:
+
+hook-end:
+
+    #! /bin/sh
+    builddir="$1"
+    tar --remove-files -cJf "$builddir.tar.xz" "./$builddir"
+
+Example hook 3
+--------------
+
+You might want to avoid some builds, based on the options.  For
+example, all the fuzz builds may require installations that you're not
+willing to do.  hook-start is the perfect place for this:
+
+    #! /bin/sh
+    if [ echo "$2" | grep -E '.*fuzz.*' ]; then exit 1; fi
+    exit 0

From levitte at openssl.org  Thu Feb  8 18:44:31 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 08 Feb 2018 18:44:31 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1518115471.337930.17297.nullmailer@dev.openssl.org>

The branch master has been updated
       via  9d9fdc1727e3ff90d25dbccb4c530312b897536f (commit)
       via  7723f7c116e2024e727648fe369133b0fc8f70e5 (commit)
      from  da7d7b372dc15d739df3ba7aff2c1a4292148515 (commit)


- Log -----------------------------------------------------------------
commit 9d9fdc1727e3ff90d25dbccb4c530312b897536f
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 8 19:39:21 2018 +0100

    run-checker-autohooks: make some variables mandatory
    
    REPORT_FROM and REPORT_RECIPIENT *must* be assigned something to
    be useful.  The defaults are removed, as they are internal for the
    OpenSSL Team machinery
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/9)

commit 7723f7c116e2024e727648fe369133b0fc8f70e5
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 8 19:37:59 2018 +0100

    run-checker-autohooks: update README for accuracy
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/9)

-----------------------------------------------------------------------

Summary of changes:
 run-checker/run-checker-autohooks/README   | 14 ++++----
 run-checker/run-checker-autohooks/hook-end | 56 ++++++++++++++++--------------
 2 files changed, 36 insertions(+), 34 deletions(-)

diff --git a/run-checker/run-checker-autohooks/README b/run-checker/run-checker-autohooks/README
index a4039b7..87e4be4 100644
--- a/run-checker/run-checker-autohooks/README
+++ b/run-checker/run-checker-autohooks/README
@@ -9,11 +9,11 @@ repeatedly, for example as a cron job.
 
 Example setup:
 
-    $ git clone openssl-git at git.openssl.org:bureau.git bureau
+    $ git clone git://git.openssl.org/tools.git tools
     $ mkdir ~/run-checker
     $ cd ~/run-checker
-    $ ln -s ../bureau/run-checker.sh \
-      	    ../bureau/run-checker-autohooks/hook-{prepare,start,end,takedown} \
+    $ ln -s ../tools/run-checker/run-checker.sh \
+            ../tools/run-checker/run-checker-autohooks/hook-{prepare,start,end,takedown} \
 	    .
     $ git clone openssl-git at git.openssl.org:openssl.git openssl
 
@@ -30,13 +30,13 @@ In addition to the hooks, one can also have a shell script called
 
 - REPORT_FROM
 
-  The email address used in the report From: header.  Defaults to
-  'OpenSSL run-checker <openssl at openssl.org>'
+  The email address used in the report From: header.  This MUST be
+  assigned a value or reports will not be posted.
 
 - REPORT_RECIPIENT
 
-  The email address reports will get sent to.  Defaults to
-  '<openssl-commits at openssl.org>'
+  The email address reports will get sent to.  This MUST be assigned a
+  value or reports will not be posted.
 
 - SKIP_OPTS
 
diff --git a/run-checker/run-checker-autohooks/hook-end b/run-checker/run-checker-autohooks/hook-end
index 70c51b9..c95051b 100755
--- a/run-checker/run-checker-autohooks/hook-end
+++ b/run-checker/run-checker-autohooks/hook-end
@@ -3,8 +3,8 @@
 here=$(cd $(dirname $0); pwd)
 rcd=$here/.run-checker-data
 
-REPORT_RECIPIENT='<openssl-commits at openssl.org>'
-REPORT_FROM='OpenSSL run-checker <openssl at openssl.org>'
+REPORT_RECIPIENT=
+REPORT_FROM=
 if [ -f $rcd/new/hook-config ]; then
     . $rcd/new/hook-config
 fi
@@ -38,47 +38,49 @@ if (
 
     # If the build failed or the status changed since last time, report
     if [ "$newstatus" == "fail" -o "$newstatus" != "$curstatus" ]; then
-        (
-            statusword=FAILED
-            if [ "$newstatus" == "pass" ]; then
-                statusword=SUCCESSFUL
-            elif [ "$curstatus" == "fail" ]; then
-                statusword="Still FAILED"
-            fi
-            echo "From: $REPORT_FROM"
-            echo "To: $REPORT_RECIPIENT"
-            echo "Subject: $statusword build of OpenSSL branch $gitbranch with options $expandedopts"
-            cat <<EOF
+	if [ -n "$REPORT_FROM" -a -n "$REPORT_RECIPIENT" ]; then
+            (
+		statusword=FAILED
+		if [ "$newstatus" == "pass" ]; then
+                    statusword=SUCCESSFUL
+		elif [ "$curstatus" == "fail" ]; then
+                    statusword="Still FAILED"
+		fi
+		echo "From: $REPORT_FROM"
+		echo "To: $REPORT_RECIPIENT"
+		echo "Subject: $statusword build of OpenSSL branch $gitbranch with options $expandedopts"
+		cat <<EOF
 
 Platform and configuration command:
 
 EOF
-            echo "\$ uname -a"
-            uname -a
-            head -1 "$newoptdir/build.log"
-            if [ -f $rcd/new/rc-force-build ]; then
-                cat <<EOF
+		echo "\$ uname -a"
+		uname -a
+		head -1 "$newoptdir/build.log"
+		if [ -f $rcd/new/rc-force-build ]; then
+                    cat <<EOF
 
 Forced build, latest commit is:
 
 EOF
-            else
-                cat <<EOF
+		else
+                    cat <<EOF
 
 Commit log since last time:
 
 EOF
-            fi
-            cat "$newoptdir/log"
-	    if [ "$newstatus" == "fail" ]; then
-		cat <<EOF
+		fi
+		cat "$newoptdir/log"
+		if [ "$newstatus" == "fail" ]; then
+		    cat <<EOF
 
 Build log ended with (last 100 lines):
 
 EOF
-		tail -100 "$newoptdir/build.log"
-	    fi
-        ) | /usr/lib/sendmail -it
+		    tail -100 "$newoptdir/build.log"
+		fi
+            ) | /usr/lib/sendmail -it
+	fi
     fi
 
     if [ -d "$curoptdir" ]; then

From no-reply at appveyor.com  Thu Feb  8 21:24:13 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 08 Feb 2018 21:24:13 +0000
Subject: [openssl-commits] Build failed: openssl master.15470
Message-ID: <20180208212413.1.6699BAA957659158@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180208/ec198276/attachment.html>

From no-reply at appveyor.com  Thu Feb  8 22:03:54 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 08 Feb 2018 22:03:54 +0000
Subject: [openssl-commits] Build completed: openssl master.15471
Message-ID: <20180208220354.1.74736A5055A448D0@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180208/40ef5819/attachment.html>

From openssl at openssl.org  Fri Feb  9 00:17:46 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Fri, 09 Feb 2018 00:17:46 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings no-chacha
Message-ID: <1518135466.590919.23031.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-chacha

Commit log since last time:

71cff96 Fix no-chacha and no-poly1305
b53fdad util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
22626b9 With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

From openssl at openssl.org  Fri Feb  9 01:15:52 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Fri, 09 Feb 2018 01:15:52 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings no-deprecated
Message-ID: <1518138952.149211.28487.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-deprecated

Commit log since last time:

71cff96 Fix no-chacha and no-poly1305
b53fdad util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
22626b9 With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

From matthias.st.pierre at ncp-e.com  Fri Feb  9 08:50:02 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Fri, 09 Feb 2018 08:50:02 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518166202.702883.23529.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b9ed9ab38e492fa070c3d7ed63233e3debc36528 (commit)
      from  71cff963b4b3f8432e7fea4c94c138ca61b07d95 (commit)


- Log -----------------------------------------------------------------
commit b9ed9ab38e492fa070c3d7ed63233e3debc36528
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Fri Feb 9 08:52:56 2018 +0100

    CRYPTO_THREAD_run_once.pod: fix typo and punktuation
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5293)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/CRYPTO_THREAD_run_once.pod | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/man3/CRYPTO_THREAD_run_once.pod b/doc/man3/CRYPTO_THREAD_run_once.pod
index 734d2d8..e57ae83 100644
--- a/doc/man3/CRYPTO_THREAD_run_once.pod
+++ b/doc/man3/CRYPTO_THREAD_run_once.pod
@@ -67,7 +67,7 @@ CRYPTO_THREAD_unlock() unlocks the previously locked B<lock>.
 
 =item *
 
-CRYPTO_THREAD_lock_frees() frees the provided B<lock>.
+CRYPTO_THREAD_lock_free() frees the provided B<lock>.
 
 =item *
 
@@ -96,9 +96,9 @@ CRYPTO_THREAD_run_once() returns 1 on success, or 0 on error.
 
 CRYPTO_THREAD_lock_new() returns the allocated lock, or NULL on error.
 
-CRYPTO_THREAD_lock_frees() returns no value.
+CRYPTO_THREAD_lock_free() returns no value.
 
-The other functions return 1 on success or 0 on error.
+The other functions return 1 on success, or 0 on error.
 
 =head1 NOTES
 

From levitte at openssl.org  Fri Feb  9 09:03:45 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 09 Feb 2018 09:03:45 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518167025.633657.25892.nullmailer@dev.openssl.org>

The branch master has been updated
       via  a6da6b73ca480cfa6fe8d0a882f4ff549d46fcff (commit)
      from  b9ed9ab38e492fa070c3d7ed63233e3debc36528 (commit)


- Log -----------------------------------------------------------------
commit a6da6b73ca480cfa6fe8d0a882f4ff549d46fcff
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 9 09:12:47 2018 +0100

    Revert ".travis.yml: remove osx from build matrix."
    
    Recent changes seem to have gotten OS X back on track, so we should be
    able to run our tests there again.
    
    This reverts commit e12e903e9ac675d08f9dd0db1f0c1a2049232c21.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5292)

-----------------------------------------------------------------------

Summary of changes:
 .travis.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.travis.yml b/.travis.yml
index cfc11b6..0586fb3 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -22,6 +22,7 @@ addons:
 
 os:
     - linux
+    - osx
 
 compiler:
     - clang

From levitte at openssl.org  Fri Feb  9 09:06:50 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 09 Feb 2018 09:06:50 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518167210.038769.26855.nullmailer@dev.openssl.org>

The branch master has been updated
       via  fd87700995a65d54e78630f1f8f960e258a7977a (commit)
      from  a6da6b73ca480cfa6fe8d0a882f4ff549d46fcff (commit)


- Log -----------------------------------------------------------------
commit fd87700995a65d54e78630f1f8f960e258a7977a
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 9 09:03:05 2018 +0100

    Fix check of cpuid_asm_src config attribute
    
    The contents of that attribute is C file names, not object file names.
    This went undetected because quite a lot of systems have assembler
    implementations anyway, so setting OPENSSL_CPUID_OBJ was correct for
    them.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5291)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Configure b/Configure
index c90a66c..e3d8d70 100755
--- a/Configure
+++ b/Configure
@@ -1290,7 +1290,7 @@ if ($target{sys_id} ne "")
 
 unless ($disabled{asm}) {
     $target{cpuid_asm_src}=$table{DEFAULTS}->{cpuid_asm_src} if ($config{processor} eq "386");
-    push @{$config{defines}}, "OPENSSL_CPUID_OBJ" if ($target{cpuid_asm_src} ne "mem_clr.o");
+    push @{$config{defines}}, "OPENSSL_CPUID_OBJ" if ($target{cpuid_asm_src} ne "mem_clr.c");
 
     $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
 

From levitte at openssl.org  Fri Feb  9 09:12:09 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 09 Feb 2018 09:12:09 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518167529.746307.27843.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4cd58771d8387c6bfbd0fd9936aaeb3ba63a6fe6 (commit)
      from  fd87700995a65d54e78630f1f8f960e258a7977a (commit)


- Log -----------------------------------------------------------------
commit 4cd58771d8387c6bfbd0fd9936aaeb3ba63a6fe6
Author: Pauli <paul.dale at oracle.com>
Date:   Thu Feb 8 11:04:30 2018 +1000

    Fix glibc version detection.
    Simplify Posix timer detection.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5279)

-----------------------------------------------------------------------

Summary of changes:
 crypto/rand/rand_lib.c | 39 ++++++++++++++++++++++++++++++++++-----
 1 file changed, 34 insertions(+), 5 deletions(-)

diff --git a/crypto/rand/rand_lib.c b/crypto/rand/rand_lib.c
index 69c3c79..faec18d 100644
--- a/crypto/rand/rand_lib.c
+++ b/crypto/rand/rand_lib.c
@@ -25,6 +25,39 @@
 /* Macro to convert two thirty two bit values into a sixty four bit one */
 #define TWO32TO64(a, b) ((((uint64_t)(a)) << 32) + (b))
 
+/*
+ * Check for the existence and support of POSIX timers.  The standard
+ * says that the _POSIX_TIMERS macro will have a positive value if they
+ * are available.
+ *
+ * However, we want an additional constraint: that the timer support does
+ * not require an extra library dependency.  Early versions of glibc
+ * require -lrt to be specified on the link line to access the timers,
+ * so this needs to be checked for.
+ *
+ * It is worse because some libraries define __GLIBC__ but don't
+ * support the version testing macro (e.g. uClibc).  This means
+ * an extra check is needed.
+ *
+ * The final condition is:
+ *      "have posix timers and either not glibc or glibc without -lrt"
+ *
+ * The nested #if sequences are required to avoid using a parameterised
+ * macro that might be undefined.
+ */
+#undef OSSL_POSIX_TIMER_OKAY
+#if defined(_POSIX_TIMERS) && _POSIX_TIMERS > 0
+# if defined(__GLIBC__)
+#  if defined(__GLIBC_PREREQ)
+#   if __GLIBC_PREREQ(2, 17)
+#    define OSSL_POSIX_TIMER_OKAY
+#   endif
+#  endif
+# else
+#  define OSSL_POSIX_TIMER_OKAY
+# endif
+#endif
+
 #ifndef OPENSSL_NO_ENGINE
 /* non-NULL if default_RAND_meth is ENGINE-provided */
 static ENGINE *funct_ref;
@@ -228,11 +261,7 @@ static uint64_t get_timer_bits(void)
     }
 #else
 
-# if defined(_POSIX_C_SOURCE) \
-     && defined(_POSIX_TIMERS) \
-     && _POSIX_C_SOURCE >= 199309L \
-     && (!defined(__GLIBC__) \
-         || (defined(__GLIBC_PREREQ) && __GLIBC_PREREQ(2, 17)))
+#if defined(OSSL_POSIX_TIMER_OKAY)
     {
         struct timespec ts;
         clockid_t cid;

From osslsanity at gmail.com  Fri Feb  9 09:19:36 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Fri, 9 Feb 2018 09:19:36 +0000 (UTC)
Subject: [openssl-commits] Jenkins build is back to normal : master_mips #377
In-Reply-To: <64333004.323.1518095903486.JavaMail.jenkins@ip-172-31-34-99>
References: <64333004.323.1518095903486.JavaMail.jenkins@ip-172-31-34-99>
Message-ID: <1986068287.325.1518167976139.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_mips/377/display/redirect?page=changes>


From levitte at openssl.org  Fri Feb  9 09:32:11 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 09 Feb 2018 09:32:11 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518168731.771285.29791.nullmailer@dev.openssl.org>

The branch master has been updated
       via  2e8b0ef8f4d4b5498f3ffd1fc9f24e52ede8555f (commit)
      from  4cd58771d8387c6bfbd0fd9936aaeb3ba63a6fe6 (commit)


- Log -----------------------------------------------------------------
commit 2e8b0ef8f4d4b5498f3ffd1fc9f24e52ede8555f
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 9 09:55:36 2018 +0100

    VMS: take care of includes
    
    Configurations/descrip.mms.tmpl didn't treat the includes config
    attribute very well.  In fact, it didn't treat it at all!
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5295)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/descrip.mms.tmpl | 43 +++++++++++++++++++++++++++++++----------
 1 file changed, 33 insertions(+), 10 deletions(-)

diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index bfeee77..2b2e4d0 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -175,9 +175,12 @@ CC= {- $config{cc} -}
 DEFINES={- our $defines = join(",",
                                '__dummy', # To make comma processing easier
                                @{$config{defines}}) -}
+INCLUDES={- our $includes = join(',', @{$config{includes}}) -}
 CPPFLAGS={- our $cppflags = join('', @{$config{cppflags}}) -}
-CPPFLAGS_Q={- $cppflags =~ s|"|""|g; $defines =~ s|"|""|g;
-              $cppflags."/DEFINE($defines)" -}
+CPPFLAGS_Q={- (my $x = $cppflags) =~ s|"|""|g; $defines =~ s|"|""|g;
+              $x .= "/DEFINE=($defines)";
+              $x .= "/INCLUDE=($includes)" if $includes;
+              $x; -}
 CFLAGS={- join('', @{$config{cflags}}) -}
 LDFLAGS= {- join('', @{$config{lflags}}) -}
 EX_LIBS= {- join('', map { ','.$_ } @{$config{ex_libs}}) -}
@@ -635,10 +638,8 @@ EOF
 		    dso => '$(DSO_DEFINES)',
 		    bin => '$(BIN_DEFINES)' } -> {$args{intent}};
       $cflags .= '/DEFINE=('.$defines.')';
+      $cflags .= "/INCLUDE=('tmp_includes')";
       
-      my $incs_on = "\@ !";
-      my $incs_off = "\@ !";
-      my $incs = "";
       my @incs = ();
       push @incs, @{$args{incs}} if @{$args{incs}};
       unless ($disabled{zlib}) {
@@ -646,15 +647,37 @@ EOF
           # incarnations.
           push @incs, ($withargs{zlib_include} || 'GNV$ZLIB_INCLUDE:');
       }
+      # We create a logical name TMP_INCLUDES: to hold the list of internal
+      # includes.  However, we cannot use it directly, as logical names can't
+      # hold zero entries, so we also create a symbol with the same name and
+      # use that instead, see the '/INCLUDE=' assignment above.  If there are
+      # no internal include directories, it will simply be the empty string,
+      # but if there are, it will be assigned "TMP_DEFINES:,"
+      my $xtraincludes = { lib => '$(LIB_INCLUDES)',
+                           dso => '$(DSO_INCLUDES)',
+                           bin => '$(BIN_INCLUDES)' } -> {$args{intent}};
+      my $incs_add =
+          'IF tmp_add .NES. "" .AND. tmp_includes .NES. "" THEN tmp_includes = "," + tmp_includes'
+          ."\n\t".'tmp_includes = tmp_add + tmp_includes';
+      my $incs_on = 'tmp_includes := '
+          ."\n\t"."tmp_add := $xtraincludes"
+          ."\n\t".$incs_add
+          ."\n\t".'tmp_add := $(INCLUDES)'
+          ."\n\t".$incs_add;
+      my $incs_off = 'DELETE/SYMBOL/LOCAL tmp_includes'
+          ."\n\t".'DELETE/SYMBOL/LOCAL tmp_add';
       if (@incs) {
           $incs_on =
-              "DEFINE tmp_includes "
+              'DEFINE tmp_includes '
               .join(",-\n\t\t\t", map {
                                       file_name_is_absolute($_)
                                       ? $_ : catdir($backward,$_)
-                                  } @incs);
-          $incs_off = "DEASSIGN tmp_includes";
-          $incs = " /INCLUDE=(tmp_includes:)";
+                                  } @incs)
+              ."\n\t".$incs_on
+              ."\n\t".'IF tmp_includes .NES. "" THEN tmp_includes = "," + tmp_includes'
+              ."\n\t".'tmp_includes = "tmp_includes:" + tmp_includes';
+          $incs_off .=
+              "\n\t".'DEASSIGN tmp_includes';
       }
       my $before = $unified_info{before}->{$obj.".OBJ"} || "\@ !";
       my $after = $unified_info{after}->{$obj.".OBJ"} || "\@ !";
@@ -666,7 +689,7 @@ $obj.OBJ : $deps
         ${before}
         SET DEFAULT $forward
         $incs_on
-        \$(CC) ${cflags}${incs}${depbuild} /OBJECT=${objd}${objn}.OBJ /REPOSITORY=$backward $srcs
+        \$(CC) ${cflags}${depbuild} /OBJECT=${objd}${objn}.OBJ /REPOSITORY=$backward $srcs
         $incs_off
         SET DEFAULT $backward
         ${after}

From openssl at openssl.org  Fri Feb  9 09:32:56 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Fri, 09 Feb 2018 09:32:56 +0000
Subject: [openssl-commits] Still FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-nextprotoneg
Message-ID: <1518168776.609406.24173.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-nextprotoneg

Commit log since last time:

71cff96 Fix no-chacha and no-poly1305
b53fdad util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
22626b9 With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

Build log ended with (last 100 lines):

../../openssl/test/recipes/03-test_internal_asn1.t ............ ok
../../openssl/test/recipes/03-test_internal_chacha.t .......... ok
../../openssl/test/recipes/03-test_internal_mdc2.t ............ ok
../../openssl/test/recipes/03-test_internal_modes.t ........... ok
../../openssl/test/recipes/03-test_internal_poly1305.t ........ ok
../../openssl/test/recipes/03-test_internal_siphash.t ......... ok
../../openssl/test/recipes/03-test_internal_sm4.t ............. ok
../../openssl/test/recipes/03-test_internal_ssl_cert_table.t .. ok
../../openssl/test/recipes/03-test_internal_x509.t ............ ok
../../openssl/test/recipes/03-test_ui.t ....................... ok
../../openssl/test/recipes/04-test_asn1_encode.t .............. ok
../../openssl/test/recipes/04-test_asn1_string_table.t ........ ok
../../openssl/test/recipes/04-test_bioprint.t ................. ok
../../openssl/test/recipes/04-test_pem.t ...................... ok
../../openssl/test/recipes/05-test_bf.t ....................... ok
../../openssl/test/recipes/05-test_cast.t ..................... ok
../../openssl/test/recipes/05-test_des.t ...................... ok
../../openssl/test/recipes/05-test_hmac.t ..................... ok
../../openssl/test/recipes/05-test_idea.t ..................... ok
../../openssl/test/recipes/05-test_md2.t ...................... skipped: md2 is not supported by this OpenSSL build
../../openssl/test/recipes/05-test_mdc2.t ..................... ok
../../openssl/test/recipes/05-test_rand.t ..................... ok
../../openssl/test/recipes/05-test_rc2.t ...................... ok
../../openssl/test/recipes/05-test_rc4.t ...................... ok
../../openssl/test/recipes/05-test_rc5.t ...................... skipped: rc5 is not supported by this OpenSSL build
../../openssl/test/recipes/10-test_bn.t ....................... ok
../../openssl/test/recipes/10-test_exp.t ...................... ok
../../openssl/test/recipes/15-test_dh.t ....................... ok
../../openssl/test/recipes/15-test_dsa.t ...................... ok
../../openssl/test/recipes/15-test_ec.t ....................... ok
../../openssl/test/recipes/15-test_ecdsa.t .................... ok
../../openssl/test/recipes/15-test_ecparam.t .................. ok
../../openssl/test/recipes/15-test_genrsa.t ................... ok
../../openssl/test/recipes/15-test_mp_rsa.t ................... ok
../../openssl/test/recipes/15-test_rsa.t ...................... ok
../../openssl/test/recipes/15-test_rsapss.t ................... ok
../../openssl/test/recipes/20-test_enc.t ...................... ok
../../openssl/test/recipes/20-test_enc_more.t ................. ok
../../openssl/test/recipes/20-test_passwd.t ................... ok
../../openssl/test/recipes/25-test_crl.t ...................... ok
../../openssl/test/recipes/25-test_d2i.t ...................... ok
../../openssl/test/recipes/25-test_pkcs7.t .................... ok
../../openssl/test/recipes/25-test_req.t ...................... ok
../../openssl/test/recipes/25-test_sid.t ...................... ok
../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. ok
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ 
Dubious, test returned 6 (wstat 1536, 0x600)
Failed 6/22 subtests 
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_renegotiation.t ............ ok
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ ok
../../openssl/test/recipes/70-test_sslcertstatus.t ............ ok
../../openssl/test/recipes/70-test_sslextension.t ............. ok
../../openssl/test/recipes/70-test_sslmessages.t .............. ok
../../openssl/test/recipes/70-test_sslrecords.t ............... 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/18 subtests 
../../openssl/test/recipes/70-test_sslsessiontick.t ........... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ............... 
Dubious, test returned 4 (wstat 1024, 0x400)
Failed 4/21 subtests 
../../openssl/test/recipes/70-test_sslsignature.t ............. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/4 subtests 
../../openssl/test/recipes/70-test_sslskewith0p.t ............. ok
../../openssl/test/recipes/70-test_sslversions.t .............. 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/7 subtests 
../../openssl/test/recipes/70-test_sslvertol.t ................ ok
../../openssl/test/recipes/70-test_tls13cookie.t .............. 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/2 subtests 
../../openssl/test/recipes/70-test_tls13downgrade.t ........... skipped: test_tls13downgrade not run in pre TLSv1.3 RFC implementation
../../openssl/test/recipes/70-test_tls13hrr.t ................. ok
make[1]: *** wait: No child processes.  Stop.
make[1]: *** Waiting for unfinished jobs....
make[1]: *** wait: No child processes.  Stop.

From builds at travis-ci.org  Fri Feb  9 09:43:53 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 09:43:53 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16189 (master - a6da6b7)
In-Reply-To: <openssl/openssl+339365594+broken@travis-ci.org>
Message-ID: <5a7d6dbfb698b_43fc56637b9083864d8@6d40c516-40fe-402c-a43b-6e583071f2f2.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16189
Status: Broken

Duration: 37 minutes and 31 seconds
Commit: a6da6b7 (master)
Author: Richard Levitte
Message: Revert ".travis.yml: remove osx from build matrix."

Recent changes seem to have gotten OS X back on track, so we should be
able to run our tests there again.

This reverts commit e12e903e9ac675d08f9dd0db1f0c1a2049232c21.

Reviewed-by: Andy Polyakov <appro at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5292)

View the changeset: https://github.com/openssl/openssl/compare/b9ed9ab38e49...a6da6b73ca48

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339365594?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/bf7bc8e4/attachment-0001.html>

From openssl at openssl.org  Fri Feb  9 10:08:12 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Fri, 09 Feb 2018 10:08:12 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings no-poly1305
Message-ID: <1518170892.902919.3909.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-poly1305

Commit log since last time:

71cff96 Fix no-chacha and no-poly1305
b53fdad util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
22626b9 With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

From builds at travis-ci.org  Fri Feb  9 09:55:26 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 09:55:26 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16190 (master - fd87700)
In-Reply-To: <openssl/openssl+339366809+broken@travis-ci.org>
Message-ID: <5a7d700e34dc5_43f9e7d53df6c69314c@f0ddcd00-8376-4938-bd0e-d7bf1c278eb1.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16190
Status: Broken

Duration: 37 minutes and 57 seconds
Commit: fd87700 (master)
Author: Richard Levitte
Message: Fix check of cpuid_asm_src config attribute

The contents of that attribute is C file names, not object file names.
This went undetected because quite a lot of systems have assembler
implementations anyway, so setting OPENSSL_CPUID_OBJ was correct for
them.

Reviewed-by: Andy Polyakov <appro at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5291)

View the changeset: https://github.com/openssl/openssl/compare/a6da6b73ca48...fd87700995a6

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339366809?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/3c3826f5/attachment.html>

From builds at travis-ci.org  Fri Feb  9 10:16:40 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 10:16:40 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16191 (master - 4cd5877)
In-Reply-To: <openssl/openssl+339368727+broken@travis-ci.org>
Message-ID: <5a7d74ec7aa68_43f9eba1bd6847237e5@f0ddcd00-8376-4938-bd0e-d7bf1c278eb1.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16191
Status: Broken

Duration: 42 minutes and 1 second
Commit: 4cd5877 (master)
Author: Pauli
Message: Fix glibc version detection.
Simplify Posix timer detection.

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5279)

View the changeset: https://github.com/openssl/openssl/compare/fd87700995a6...4cd58771d838

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339368727?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/b9e54d97/attachment.html>

From builds at travis-ci.org  Fri Feb  9 10:30:52 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 10:30:52 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16192 (master - 2e8b0ef)
In-Reply-To: <openssl/openssl+339374656+broken@travis-ci.org>
Message-ID: <5a7d785c269a9_43fe5c0529af06014bb@ff28422c-dfe0-47cc-bb4b-8ee261a4ff5c.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16192
Status: Broken

Duration: 39 minutes and 23 seconds
Commit: 2e8b0ef (master)
Author: Richard Levitte
Message: VMS: take care of includes

Configurations/descrip.mms.tmpl didn't treat the includes config
attribute very well.  In fact, it didn't treat it at all!

Reviewed-by: Andy Polyakov <appro at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5295)

View the changeset: https://github.com/openssl/openssl/compare/4cd58771d838...2e8b0ef8f4d4

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339374656?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/112bcfb6/attachment-0001.html>

From rsalz at openssl.org  Fri Feb  9 12:05:13 2018
From: rsalz at openssl.org (Rich Salz)
Date: Fri, 09 Feb 2018 12:05:13 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518177913.455991.10673.nullmailer@dev.openssl.org>

The branch master has been updated
       via  a699b8e4ca106a1aade0cc741eca63a61d44b90f (commit)
      from  2e8b0ef8f4d4b5498f3ffd1fc9f24e52ede8555f (commit)


- Log -----------------------------------------------------------------
commit a699b8e4ca106a1aade0cc741eca63a61d44b90f
Author: FdaSilvaYY <fdasilvayy at gmail.com>
Date:   Thu Feb 8 18:47:30 2018 -0500

    Small simplification in mkerr.pl
    
    As suggested in https://github.com/openssl/openssl/pull/5275
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5288)

-----------------------------------------------------------------------

Summary of changes:
 crypto/ocsp/ocsp_err.c       | 5 +++--
 include/internal/dsoerr.h    | 5 +----
 include/openssl/asn1err.h    | 7 ++-----
 include/openssl/asyncerr.h   | 7 ++-----
 include/openssl/bioerr.h     | 7 ++-----
 include/openssl/bnerr.h      | 7 ++-----
 include/openssl/buffererr.h  | 7 ++-----
 include/openssl/cmserr.h     | 5 +----
 include/openssl/comperr.h    | 5 +----
 include/openssl/conferr.h    | 7 ++-----
 include/openssl/cryptoerr.h  | 7 ++-----
 include/openssl/cterr.h      | 5 +----
 include/openssl/dherr.h      | 5 +----
 include/openssl/dsaerr.h     | 5 +----
 include/openssl/ecerr.h      | 5 +----
 include/openssl/engineerr.h  | 5 +----
 include/openssl/evperr.h     | 5 +----
 include/openssl/kdferr.h     | 7 ++-----
 include/openssl/objectserr.h | 7 ++-----
 include/openssl/ocsperr.h    | 5 +----
 include/openssl/pemerr.h     | 7 ++-----
 include/openssl/pkcs12err.h  | 7 ++-----
 include/openssl/pkcs7err.h   | 7 ++-----
 include/openssl/randerr.h    | 5 +----
 include/openssl/rsaerr.h     | 7 ++-----
 include/openssl/sslerr.h     | 5 +----
 include/openssl/storeerr.h   | 7 ++-----
 include/openssl/tserr.h      | 5 +----
 include/openssl/uierr.h      | 7 ++-----
 include/openssl/x509err.h    | 7 ++-----
 include/openssl/x509v3err.h  | 7 ++-----
 util/mkerr.pl                | 5 +----
 32 files changed, 51 insertions(+), 143 deletions(-)

diff --git a/crypto/ocsp/ocsp_err.c b/crypto/ocsp/ocsp_err.c
index a97177e..660e193 100644
--- a/crypto/ocsp/ocsp_err.c
+++ b/crypto/ocsp/ocsp_err.c
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -18,7 +18,8 @@ static const ERR_STRING_DATA OCSP_str_functs[] = {
     {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_ADD1_STATUS, 0),
      "OCSP_basic_add1_status"},
     {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_SIGN, 0), "OCSP_basic_sign"},
-    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_SIGN_CTX, 0), "OCSP_basic_sign_ctx"},
+    {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_SIGN_CTX, 0),
+     "OCSP_basic_sign_ctx"},
     {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_BASIC_VERIFY, 0), "OCSP_basic_verify"},
     {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_CERT_ID_NEW, 0), "OCSP_cert_id_new"},
     {ERR_PACK(ERR_LIB_OCSP, OCSP_F_OCSP_CHECK_DELEGATED, 0),
diff --git a/include/internal/dsoerr.h b/include/internal/dsoerr.h
index 7017990..a54a185 100644
--- a/include/internal/dsoerr.h
+++ b/include/internal/dsoerr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_DSO
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_DSO_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * DSO function codes.
diff --git a/include/openssl/asn1err.h b/include/openssl/asn1err.h
index c02bb0f..7da927f 100644
--- a/include/openssl/asn1err.h
+++ b/include/openssl/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_ASN1ERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_ASN1_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * ASN1 function codes.
diff --git a/include/openssl/asyncerr.h b/include/openssl/asyncerr.h
index a9bb86e..5fcddaf 100644
--- a/include/openssl/asyncerr.h
+++ b/include/openssl/asyncerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_ASYNCERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_ASYNC_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * ASYNC function codes.
diff --git a/include/openssl/bioerr.h b/include/openssl/bioerr.h
index 2510230..b0dee2b 100644
--- a/include/openssl/bioerr.h
+++ b/include/openssl/bioerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_BIOERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_BIO_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * BIO function codes.
diff --git a/include/openssl/bnerr.h b/include/openssl/bnerr.h
index b63af9d..c9a21c7 100644
--- a/include/openssl/bnerr.h
+++ b/include/openssl/bnerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_BNERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_BN_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * BN function codes.
diff --git a/include/openssl/buffererr.h b/include/openssl/buffererr.h
index 9007586..3aee132 100644
--- a/include/openssl/buffererr.h
+++ b/include/openssl/buffererr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_BUFERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_BUF_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * BUF function codes.
diff --git a/include/openssl/cmserr.h b/include/openssl/cmserr.h
index 7cb2242..7b9daed 100644
--- a/include/openssl/cmserr.h
+++ b/include/openssl/cmserr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_CMS
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_CMS_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * CMS function codes.
diff --git a/include/openssl/comperr.h b/include/openssl/comperr.h
index 96a4ce6..5a1c8df 100644
--- a/include/openssl/comperr.h
+++ b/include/openssl/comperr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_COMP
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_COMP_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * COMP function codes.
diff --git a/include/openssl/conferr.h b/include/openssl/conferr.h
index 4348e62..d623cea 100644
--- a/include/openssl/conferr.h
+++ b/include/openssl/conferr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_CONFERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_CONF_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * CONF function codes.
diff --git a/include/openssl/cryptoerr.h b/include/openssl/cryptoerr.h
index 98fc278..12684ea 100644
--- a/include/openssl/cryptoerr.h
+++ b/include/openssl/cryptoerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_CRYPTOERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_CRYPTO_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * CRYPTO function codes.
diff --git a/include/openssl/cterr.h b/include/openssl/cterr.h
index 7f0a7d8..764e1a2 100644
--- a/include/openssl/cterr.h
+++ b/include/openssl/cterr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_CT
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_CT_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * CT function codes.
diff --git a/include/openssl/dherr.h b/include/openssl/dherr.h
index f225cc3..0a071b6 100644
--- a/include/openssl/dherr.h
+++ b/include/openssl/dherr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_DH
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_DH_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * DH function codes.
diff --git a/include/openssl/dsaerr.h b/include/openssl/dsaerr.h
index d54642f..a5248ab 100644
--- a/include/openssl/dsaerr.h
+++ b/include/openssl/dsaerr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_DSA
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_DSA_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * DSA function codes.
diff --git a/include/openssl/ecerr.h b/include/openssl/ecerr.h
index 6dc16c0..289cd8c 100644
--- a/include/openssl/ecerr.h
+++ b/include/openssl/ecerr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_EC
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_EC_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * EC function codes.
diff --git a/include/openssl/engineerr.h b/include/openssl/engineerr.h
index f6025f6..64efc2f 100644
--- a/include/openssl/engineerr.h
+++ b/include/openssl/engineerr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_ENGINE
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_ENGINE_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * ENGINE function codes.
diff --git a/include/openssl/evperr.h b/include/openssl/evperr.h
index ff46657..45e9fcf 100644
--- a/include/openssl/evperr.h
+++ b/include/openssl/evperr.h
@@ -12,12 +12,9 @@
 # define HEADER_EVPERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_EVP_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * EVP function codes.
diff --git a/include/openssl/kdferr.h b/include/openssl/kdferr.h
index 8f045f0..ea30fb9 100644
--- a/include/openssl/kdferr.h
+++ b/include/openssl/kdferr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_KDFERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_KDF_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * KDF function codes.
diff --git a/include/openssl/objectserr.h b/include/openssl/objectserr.h
index a6051c8..4f3156e 100644
--- a/include/openssl/objectserr.h
+++ b/include/openssl/objectserr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_OBJERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_OBJ_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * OBJ function codes.
diff --git a/include/openssl/ocsperr.h b/include/openssl/ocsperr.h
index f78f232..7d93b12 100644
--- a/include/openssl/ocsperr.h
+++ b/include/openssl/ocsperr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_OCSP
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_OCSP_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * OCSP function codes.
diff --git a/include/openssl/pemerr.h b/include/openssl/pemerr.h
index 12eb5cb..d0b8a9c 100644
--- a/include/openssl/pemerr.h
+++ b/include/openssl/pemerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_PEMERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_PEM_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * PEM function codes.
diff --git a/include/openssl/pkcs12err.h b/include/openssl/pkcs12err.h
index 6bbd232..ba82043 100644
--- a/include/openssl/pkcs12err.h
+++ b/include/openssl/pkcs12err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_PKCS12ERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_PKCS12_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * PKCS12 function codes.
diff --git a/include/openssl/pkcs7err.h b/include/openssl/pkcs7err.h
index 5e5f708..0ba418d 100644
--- a/include/openssl/pkcs7err.h
+++ b/include/openssl/pkcs7err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_PKCS7ERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_PKCS7_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * PKCS7 function codes.
diff --git a/include/openssl/randerr.h b/include/openssl/randerr.h
index 50c1a38..ae5a2ea 100644
--- a/include/openssl/randerr.h
+++ b/include/openssl/randerr.h
@@ -12,12 +12,9 @@
 # define HEADER_RANDERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_RAND_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * RAND function codes.
diff --git a/include/openssl/rsaerr.h b/include/openssl/rsaerr.h
index 94bfd93..c1b826a 100644
--- a/include/openssl/rsaerr.h
+++ b/include/openssl/rsaerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_RSAERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_RSA_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * RSA function codes.
diff --git a/include/openssl/sslerr.h b/include/openssl/sslerr.h
index a84a62d..1a02268 100644
--- a/include/openssl/sslerr.h
+++ b/include/openssl/sslerr.h
@@ -12,12 +12,9 @@
 # define HEADER_SSLERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_SSL_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * SSL function codes.
diff --git a/include/openssl/storeerr.h b/include/openssl/storeerr.h
index cffe8de..5476d00 100644
--- a/include/openssl/storeerr.h
+++ b/include/openssl/storeerr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_OSSL_STOREERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_OSSL_STORE_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * OSSL_STORE function codes.
diff --git a/include/openssl/tserr.h b/include/openssl/tserr.h
index 01ebfef..3e04925 100644
--- a/include/openssl/tserr.h
+++ b/include/openssl/tserr.h
@@ -16,12 +16,9 @@
 # ifndef OPENSSL_NO_TS
 
 #  ifdef  __cplusplus
-extern "C" {
+extern "C"
 #  endif
 int ERR_load_TS_strings(void);
-#  ifdef  __cplusplus
-}
-#  endif
 
 /*
  * TS function codes.
diff --git a/include/openssl/uierr.h b/include/openssl/uierr.h
index f7c77f2..3e4b297 100644
--- a/include/openssl/uierr.h
+++ b/include/openssl/uierr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_UIERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_UI_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * UI function codes.
diff --git a/include/openssl/x509err.h b/include/openssl/x509err.h
index 4b57c3d..08692a5 100644
--- a/include/openssl/x509err.h
+++ b/include/openssl/x509err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_X509ERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_X509_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * X509 function codes.
diff --git a/include/openssl/x509v3err.h b/include/openssl/x509v3err.h
index 5349d9d..e8308ef 100644
--- a/include/openssl/x509v3err.h
+++ b/include/openssl/x509v3err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -12,12 +12,9 @@
 # define HEADER_X509V3ERR_H
 
 # ifdef  __cplusplus
-extern "C" {
+extern "C"
 # endif
 int ERR_load_X509V3_strings(void);
-# ifdef  __cplusplus
-}
-# endif
 
 /*
  * X509V3 function codes.
diff --git a/util/mkerr.pl b/util/mkerr.pl
index 1740e40..0ea0296 100755
--- a/util/mkerr.pl
+++ b/util/mkerr.pl
@@ -471,12 +471,9 @@ EOF
         }
         print OUT <<"EOF";
 #${indent}ifdef  __cplusplus
-extern \"C\" {
+extern \"C\"
 #${indent}endif
 int ERR_load_${lib}_strings(void);
-#${indent}ifdef  __cplusplus
-}
-#${indent}endif
 EOF
     } else {
         print OUT <<"EOF";

From builds at travis-ci.org  Fri Feb  9 12:37:15 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 12:37:15 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16200 (master -
	a699b8e)
In-Reply-To: <openssl/openssl+339425247+still failing@travis-ci.org>
Message-ID: <5a7d968dbc2fc_43f9e98599b58924127@f0ddcd00-8376-4938-bd0e-d7bf1c278eb1.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16200
Status: Still Failing

Duration: 33 minutes and 29 seconds
Commit: a699b8e (master)
Author: FdaSilvaYY
Message: Small simplification in mkerr.pl

As suggested in https://github.com/openssl/openssl/pull/5275

Reviewed-by: Richard Levitte <levitte at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5288)

View the changeset: https://github.com/openssl/openssl/compare/2e8b0ef8f4d4...a699b8e4ca10

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339425247?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/b6146031/attachment-0001.html>

From levitte at openssl.org  Fri Feb  9 13:06:57 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 09 Feb 2018 13:06:57 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518181617.629081.15968.nullmailer@dev.openssl.org>

The branch master has been updated
       via  f3ac964ba431c91b3a8b47f2ad2e82ee52fcc5ff (commit)
      from  a699b8e4ca106a1aade0cc741eca63a61d44b90f (commit)


- Log -----------------------------------------------------------------
commit f3ac964ba431c91b3a8b47f2ad2e82ee52fcc5ff
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 9 13:45:58 2018 +0100

    Turn off printf format checking for BIO_printf et al on Mac OS/X
    
    Mac OS/X has a type for %j that doesn't agree with how we define it,
    which gives incorrect warnings.  The easiest way out of that situation
    is simply to turn off that check on Mac OS/X.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5302)

-----------------------------------------------------------------------

Summary of changes:
 include/openssl/bio.h | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/include/openssl/bio.h b/include/openssl/bio.h
index 54a833c..d8d8ac4 100644
--- a/include/openssl/bio.h
+++ b/include/openssl/bio.h
@@ -735,7 +735,8 @@ void BIO_copy_next_retry(BIO *b);
  */
 
 # define __bio_h__attr__(x)
-# if defined(__GNUC__) && defined(__STDC_VERSION__)
+# if defined(__GNUC__) && defined(__STDC_VERSION__) \
+    && !defined(__APPLE__)
     /*
      * Because we support the 'z' modifier, which made its appearance in C99,
      * we can't use __attribute__ with pre C99 dialects.

From levitte at openssl.org  Fri Feb  9 13:28:07 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 09 Feb 2018 13:28:07 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518182887.583377.19307.nullmailer@dev.openssl.org>

The branch master has been updated
       via  368297d17352c7eb30efff443509caf7cf59f65f (commit)
      from  f3ac964ba431c91b3a8b47f2ad2e82ee52fcc5ff (commit)


- Log -----------------------------------------------------------------
commit 368297d17352c7eb30efff443509caf7cf59f65f
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 8 23:26:22 2018 +0100

    Configuration: move the handling of zlib_include to config files
    
    It was a bit absurd to have this being specially handled in the build
    file templates, especially that we have the 'includes' attribute.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5296)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/00-base-templates.conf | 18 ++++++++++++++++++
 Configurations/10-main.conf           | 11 ++++++-----
 Configurations/descrip.mms.tmpl       | 11 ++---------
 Configurations/unix-Makefile.tmpl     |  5 -----
 Configurations/windows-makefile.tmpl  |  5 -----
 5 files changed, 26 insertions(+), 24 deletions(-)

diff --git a/Configurations/00-base-templates.conf b/Configurations/00-base-templates.conf
index 0d0f8b8..951aeaa 100644
--- a/Configurations/00-base-templates.conf
+++ b/Configurations/00-base-templates.conf
@@ -7,6 +7,7 @@ my %targets=(
 	cppflags	=> "",
 	lflags		=> "",
 	defines		=> [],
+	includes	=> [],
 	thread_scheme	=> "(unknown)", # Assume we don't know
 	thread_defines	=> [],
 
@@ -70,6 +71,13 @@ my %targets=(
                 push @defs, "ZLIB_SHARED" unless $disabled{"zlib-dynamic"};
                 return [ @defs ];
             },
+        includes        =>
+            sub {
+                my @incs = ();
+                push @incs, $withargs{zlib_include}
+                    if !$disabled{zlib} && $withargs{zlib_include};
+                return [ @incs ];
+            },
     },
 
     BASE_unix => {
@@ -129,6 +137,16 @@ my %targets=(
         inherit_from    => [ "BASE_common" ],
         template        => 1,
 
+        includes        =>
+            add(sub {
+                    my @incs = ();
+                    # GNV$ZLIB_INCLUDE is the standard logical name for later
+                    # zlib incarnations.
+                    push @incs, 'GNV$ZLIB_INCLUDE:'
+                        if !$disabled{zlib} && !$withargs{zlib_include};
+                    return [ @incs ];
+                }),
+
         build_file       => "descrip.mms",
         build_scheme     => [ "unified", "VMS" ],
     },
diff --git a/Configurations/10-main.conf b/Configurations/10-main.conf
index 70b0104..b17a780 100644
--- a/Configurations/10-main.conf
+++ b/Configurations/10-main.conf
@@ -580,7 +580,7 @@ my %targets = (
         cc               => "gcc",
         cflags           => "-O3",
         cppflags         => "-D_ENDIAN -DBN_DIV2W -D_POSIX_SOURCE -D_SOCKET_SOURCE",
-        includes         => [ "/SYSLOG/PUB" ],
+        includes         => add("/SYSLOG/PUB"),
         sys_id           => "MPE",
         lflags           => add("-L/SYSLOG/PUB"),
         ex_libs          => add("-lsyslog -lsocket -lcurses"),
@@ -1444,10 +1444,11 @@ my %targets = (
                                 "NO_CHMOD", "OPENSSL_SMALL_FOOTPRINT" ],
                    debug   => [ "DEBUG", "_DEBUG" ]),
         includes         =>
-            combine(sub { defined(env('WCECOMPAT'))
-                          ? '$(WCECOMPAT)/include' : (); },
-                    sub { defined(env('PORTSDK_LIBPATH'))
-                          ? '$(PORTSDK_LIBPATH)/../../include' : (); }),
+            add(combine(sub { defined(env('WCECOMPAT'))
+                              ? '$(WCECOMPAT)/include' : (); },
+                        sub { defined(env('PORTSDK_LIBPATH'))
+                                  ? '$(PORTSDK_LIBPATH)/../../include'
+                                  : (); })),
         lflags           => add(combine("/nologo /opt:ref",
                                         sub { vc_wince_info()->{lflags}; },
                                         sub { defined(env('PORTSDK_LIBPATH'))
diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index 2b2e4d0..e3b1700 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -640,13 +640,6 @@ EOF
       $cflags .= '/DEFINE=('.$defines.')';
       $cflags .= "/INCLUDE=('tmp_includes')";
       
-      my @incs = ();
-      push @incs, @{$args{incs}} if @{$args{incs}};
-      unless ($disabled{zlib}) {
-          # GNV$ZLIB_INCLUDE is the standard logical name for later zlib
-          # incarnations.
-          push @incs, ($withargs{zlib_include} || 'GNV$ZLIB_INCLUDE:');
-      }
       # We create a logical name TMP_INCLUDES: to hold the list of internal
       # includes.  However, we cannot use it directly, as logical names can't
       # hold zero entries, so we also create a symbol with the same name and
@@ -666,13 +659,13 @@ EOF
           ."\n\t".$incs_add;
       my $incs_off = 'DELETE/SYMBOL/LOCAL tmp_includes'
           ."\n\t".'DELETE/SYMBOL/LOCAL tmp_add';
-      if (@incs) {
+      if (@{$args{incs}}) {
           $incs_on =
               'DEFINE tmp_includes '
               .join(",-\n\t\t\t", map {
                                       file_name_is_absolute($_)
                                       ? $_ : catdir($backward,$_)
-                                  } @incs)
+                                  } @{$args{incs}})
               ."\n\t".$incs_on
               ."\n\t".'IF tmp_includes .NES. "" THEN tmp_includes = "," + tmp_includes'
               ."\n\t".'tmp_includes = "tmp_includes:" + tmp_includes';
diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index 9e05fd1..3c80fec 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -891,11 +891,6 @@ EOF
       my $srcs = join(" ",  @srcs);
       my $deps = join(" ", @srcs, @{$args{deps}});
       my $incs = join("", map { " -I".$_ } @{$args{incs}});
-      unless ($disabled{zlib}) {
-          if ($withargs{zlib_include}) {
-              $incs .= " -I".$withargs{zlib_include};
-          }
-      }
       my $cmd = '$(CC)';
       my $cmdflags = '$(CFLAGS)';
       my $cmdcompile = ' -c';
diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index 0abe6ea..86bc086 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -466,11 +466,6 @@ EOF
      my $srcs = '"'.join('" "',  @srcs).'"';
      my $deps = '"'.join('" "', @srcs, @{$args{deps}}).'"';
      my $incs = join("", map { ' /I "'.$_.'"' } @{$args{incs}});
-     unless ($disabled{zlib}) {
-         if ($withargs{zlib_include}) {
-             $incs .= ' /I "'.$withargs{zlib_include}.'"';
-         }
-     }
      my $cflags = '$(CFLAGS)';
      $cflags .= { lib => ' $(LIB_CFLAGS)',
 		  dso => ' $(DSO_CFLAGS)',

From builds at travis-ci.org  Fri Feb  9 13:42:32 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 13:42:32 +0000
Subject: [openssl-commits] Fixed: openssl/openssl#16205 (master - f3ac964)
In-Reply-To: <openssl/openssl+339446605+fixed@travis-ci.org>
Message-ID: <5a7da548a6466_43fc59aefdc70655298@6d40c516-40fe-402c-a43b-6e583071f2f2.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16205
Status: Fixed

Duration: 34 minutes and 49 seconds
Commit: f3ac964 (master)
Author: Richard Levitte
Message: Turn off printf format checking for BIO_printf et al on Mac OS/X

Mac OS/X has a type for %j that doesn't agree with how we define it,
which gives incorrect warnings.  The easiest way out of that situation
is simply to turn off that check on Mac OS/X.

Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5302)

View the changeset: https://github.com/openssl/openssl/compare/a699b8e4ca10...f3ac964ba431

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339446605?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/3b816fc6/attachment.html>

From openssl at openssl.org  Fri Feb  9 14:16:29 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Fri, 09 Feb 2018 14:16:29 +0000
Subject: [openssl-commits] Still FAILED build of OpenSSL branch master with
	options -d --strict-warnings 386
Message-ID: <1518185789.958423.10740.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings 386

Commit log since last time:

71cff96 Fix no-chacha and no-poly1305
b53fdad util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
22626b9 With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

Build log ended with (last 100 lines):

                  -ldl -pthread
ar: creating libcrypto.a
ranlib libcrypto.a || echo Never mind.
rm -f test/asn1_internal_test
rm -f test/chacha_internal_test
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option  -L.   \
	-o test/chacha_internal_test test/chacha_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option  -L.   \
	-o test/asn1_internal_test test/asn1_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
rm -f test/ctype_internal_test
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option  -L.   \
	-o test/ctype_internal_test test/ctype_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
libcrypto.a(init.o): In function `ossl_init_base':
/home/openssl/run-checker/386/../openssl/crypto/init.c:89: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(rand_lib.o): In function `get_timer_bits':
/home/openssl/run-checker/386/../openssl/crypto/rand/rand_lib.c:206: undefined reference to `OPENSSL_rdtsc'
libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_all.c:16: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(eng_rdrand.o): In function `get_random_bytes':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:30: undefined reference to `OPENSSL_ia32_rdrand'
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:38: undefined reference to `OPENSSL_ia32_rdrand'
libcrypto.a(e_aes.o): In function `aes_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:2906: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3458: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3393: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:428: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:713: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o):/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:648: more undefined references to `CRYPTO_memcmp' follow
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:8695: recipe for target 'test/chacha_internal_test' failed
make[1]: *** [test/chacha_internal_test] Error 1
make[1]: *** Waiting for unfinished jobs....
libcrypto.a(ecx_meth.o): In function `ecx_pub_cmp':
/home/openssl/run-checker/386/../openssl/crypto/ec/ecx_meth.c:143: undefined reference to `CRYPTO_memcmp'
libcrypto.a(init.o): In function `ossl_init_base':
/home/openssl/run-checker/386/../openssl/crypto/init.c:89: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(rand_lib.o): In function `get_timer_bits':
/home/openssl/run-checker/386/../openssl/crypto/rand/rand_lib.c:206: undefined reference to `OPENSSL_rdtsc'
libcrypto.a(curve25519.o): In function `ED25519_verify':
/home/openssl/run-checker/386/../openssl/crypto/ec/curve25519.c:5149: undefined reference to `CRYPTO_memcmp'
libcrypto.a(curve25519.o): In function `X25519':
/home/openssl/run-checker/386/../openssl/crypto/ec/curve25519.c:5174: undefined reference to `CRYPTO_memcmp'
libcrypto.a(curve25519.o): In function `fe_isnonzero':
/home/openssl/run-checker/386/../openssl/crypto/ec/curve25519.c:1235: undefined reference to `CRYPTO_memcmp'
libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_all.c:16: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(eng_rdrand.o): In function `get_random_bytes':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:30: undefined reference to `OPENSSL_ia32_rdrand'
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:38: undefined reference to `OPENSSL_ia32_rdrand'
libcrypto.a(e_aes.o): In function `aes_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:2906: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3458: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3393: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:428: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:713: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o):/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:648: more undefined references to `CRYPTO_memcmp' follow
if [ 'libcrypto.so' != 'libcrypto.so.1.1' ]; then \
	rm -f libcrypto.so; \
	ln -s libcrypto.so.1.1 libcrypto.so; \
fi
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:7074: recipe for target 'test/asn1_internal_test' failed
make[1]: *** [test/asn1_internal_test] Error 1
libcrypto.a(init.o): In function `ossl_init_base':
/home/openssl/run-checker/386/../openssl/crypto/init.c:89: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(rand_lib.o): In function `get_timer_bits':
/home/openssl/run-checker/386/../openssl/crypto/rand/rand_lib.c:206: undefined reference to `OPENSSL_rdtsc'
libcrypto.a(eng_all.o): In function `ENGINE_load_builtin_engines':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_all.c:16: undefined reference to `OPENSSL_cpuid_setup'
libcrypto.a(eng_rdrand.o): In function `get_random_bytes':
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:30: undefined reference to `OPENSSL_ia32_rdrand'
/home/openssl/run-checker/386/../openssl/crypto/engine/eng_rdrand.c:38: undefined reference to `OPENSSL_ia32_rdrand'
libcrypto.a(e_aes.o): In function `aes_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:2906: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3458: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aes.o): In function `aes_ccm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aes.c:3393: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_gcm_tls_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:428: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o): In function `aria_ccm_cipher':
/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:713: undefined reference to `CRYPTO_memcmp'
libcrypto.a(e_aria.o):/home/openssl/run-checker/386/../openssl/crypto/evp/e_aria.c:648: more undefined references to `CRYPTO_memcmp' follow
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:8799: recipe for target 'test/ctype_internal_test' failed
make[1]: *** [test/ctype_internal_test] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/386'
Makefile:143: recipe for target 'all' failed
make: *** [all] Error 2

From builds at travis-ci.org  Fri Feb  9 14:27:40 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 14:27:40 +0000
Subject: [openssl-commits] Fixed: openssl/openssl#16209 (master - 368297d)
In-Reply-To: <openssl/openssl+339454253+fixed@travis-ci.org>
Message-ID: <5a7dafdc18cb0_43fc5720c13287120f1@6d40c516-40fe-402c-a43b-6e583071f2f2.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16209
Status: Fixed

Duration: 34 minutes and 37 seconds
Commit: 368297d (master)
Author: Richard Levitte
Message: Configuration: move the handling of zlib_include to config files

It was a bit absurd to have this being specially handled in the build
file templates, especially that we have the 'includes' attribute.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5296)

View the changeset: https://github.com/openssl/openssl/compare/f3ac964ba431...368297d17352

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339454253?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/9fb42683/attachment.html>

From matt at openssl.org  Fri Feb  9 15:36:37 2018
From: matt at openssl.org (Matt Caswell)
Date: Fri, 09 Feb 2018 15:36:37 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518190597.857088.683.nullmailer@dev.openssl.org>

The branch master has been updated
       via  5d671101739f9e9b259126375a9e8b2fa42ac45f (commit)
      from  368297d17352c7eb30efff443509caf7cf59f65f (commit)


- Log -----------------------------------------------------------------
commit 5d671101739f9e9b259126375a9e8b2fa42ac45f
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 8 14:48:51 2018 +0000

    Don't calculate the Finished MAC twice
    
    In <= TLSv1.2 a Finished message always comes immediately after a CCS
    except in the case of NPN where there is an additional message between
    the CCS and Finished. Historically we always calculated the Finished MAC
    when we processed the CCS. However to deal with NPN we also calculated it
    when we receive the Finished message. Really this should only have been
    done if we hand negotiated NPN.
    
    This simplifies the code to only calculate the MAC when we receive the
    Finished. In 1.1.1 we need to do it this way anyway because there is no
    CCS (except in middlebox compat mode) in TLSv1.3.
    
    Coincidentally, this commit also fixes the fact that no-nextprotoneg does
    not currently work in master.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5285)

-----------------------------------------------------------------------

Summary of changes:
 ssl/s3_msg.c             | 23 -----------------------
 ssl/statem/statem_dtls.c |  9 +++++++++
 ssl/statem/statem_lib.c  | 34 +++++++++++++++++-----------------
 ssl/statem/statem_locl.h |  1 +
 4 files changed, 27 insertions(+), 40 deletions(-)

diff --git a/ssl/s3_msg.c b/ssl/s3_msg.c
index 5e6e7c4..6e102a1 100644
--- a/ssl/s3_msg.c
+++ b/ssl/s3_msg.c
@@ -12,9 +12,6 @@
 int ssl3_do_change_cipher_spec(SSL *s)
 {
     int i;
-    size_t finish_md_len;
-    const char *sender;
-    size_t slen;
 
     if (s->server)
         i = SSL3_CHANGE_CIPHER_SERVER_READ;
@@ -36,26 +33,6 @@ int ssl3_do_change_cipher_spec(SSL *s)
     if (!s->method->ssl3_enc->change_cipher_state(s, i))
         return 0;
 
-    /*
-     * we have to record the message digest at this point so we can get it
-     * before we read the finished message
-     */
-    if (!s->server) {
-        sender = s->method->ssl3_enc->server_finished_label;
-        slen = s->method->ssl3_enc->server_finished_label_len;
-    } else {
-        sender = s->method->ssl3_enc->client_finished_label;
-        slen = s->method->ssl3_enc->client_finished_label_len;
-    }
-
-    finish_md_len = s->method->ssl3_enc->final_finish_mac(s, sender, slen,
-                                            s->s3->tmp.peer_finish_md);
-    if (finish_md_len == 0) {
-        SSLerr(SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC, ERR_R_INTERNAL_ERROR);
-        return 0;
-    }
-    s->s3->tmp.peer_finish_md_len = finish_md_len;
-
     return 1;
 }
 
diff --git a/ssl/statem/statem_dtls.c b/ssl/statem/statem_dtls.c
index 8604d5b..0ac60cb 100644
--- a/ssl/statem/statem_dtls.c
+++ b/ssl/statem/statem_dtls.c
@@ -376,6 +376,15 @@ int dtls_get_message(SSL *s, int *mt, size_t *len)
         msg_len += DTLS1_HM_HEADER_LENGTH;
     }
 
+    /*
+     * If receiving Finished, record MAC of prior handshake messages for
+     * Finished verification.
+     */
+    if (*mt == SSL3_MT_FINISHED && !ssl3_take_mac(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
     if (!ssl3_finish_mac(s, p, msg_len))
         return 0;
     if (s->msg_callback)
diff --git a/ssl/statem/statem_lib.c b/ssl/statem/statem_lib.c
index f57f33c..82a7119 100644
--- a/ssl/statem/statem_lib.c
+++ b/ssl/statem/statem_lib.c
@@ -646,21 +646,15 @@ MSG_PROCESS_RETURN tls_process_key_update(SSL *s, PACKET *pkt)
     return MSG_PROCESS_FINISHED_READING;
 }
 
-#ifndef OPENSSL_NO_NEXTPROTONEG
 /*
  * ssl3_take_mac calculates the Finished MAC for the handshakes messages seen
  * to far.
  */
-static void ssl3_take_mac(SSL *s)
+int ssl3_take_mac(SSL *s)
 {
     const char *sender;
     size_t slen;
-    /*
-     * If no new cipher setup return immediately: other functions will set
-     * the appropriate error.
-     */
-    if (s->s3->tmp.new_cipher == NULL)
-        return;
+
     if (!s->server) {
         sender = s->method->ssl3_enc->server_finished_label;
         slen = s->method->ssl3_enc->server_finished_label_len;
@@ -669,12 +663,17 @@ static void ssl3_take_mac(SSL *s)
         slen = s->method->ssl3_enc->client_finished_label_len;
     }
 
-    s->s3->tmp.peer_finish_md_len = s->method->ssl3_enc->final_finish_mac(s,
-                                                                          sender,
-                                                                          slen,
-                                                                          s->s3->tmp.peer_finish_md);
+    s->s3->tmp.peer_finish_md_len =
+        s->method->ssl3_enc->final_finish_mac(s, sender, slen,
+                                              s->s3->tmp.peer_finish_md);
+
+    if (s->s3->tmp.peer_finish_md_len == 0) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
+    return 1;
 }
-#endif
 
 MSG_PROCESS_RETURN tls_process_change_cipher_spec(SSL *s, PACKET *pkt)
 {
@@ -1227,14 +1226,15 @@ int tls_get_message_body(SSL *s, size_t *len)
         n -= readbytes;
     }
 
-#ifndef OPENSSL_NO_NEXTPROTONEG
     /*
      * If receiving Finished, record MAC of prior handshake messages for
      * Finished verification.
      */
-    if (*s->init_buf->data == SSL3_MT_FINISHED)
-        ssl3_take_mac(s);
-#endif
+    if (*(s->init_buf->data) == SSL3_MT_FINISHED && !ssl3_take_mac(s)) {
+        /* SSLfatal() already called */
+        *len = 0;
+        return 0;
+    }
 
     /* Feed this message into MAC computation. */
     if (RECORD_LAYER_is_sslv2_record(&s->rlayer)) {
diff --git a/ssl/statem/statem_locl.h b/ssl/statem/statem_locl.h
index af081eb..25e56e4 100644
--- a/ssl/statem/statem_locl.h
+++ b/ssl/statem/statem_locl.h
@@ -54,6 +54,7 @@ typedef enum {
 
 typedef int (*confunc_f) (SSL *s, WPACKET *pkt);
 
+int ssl3_take_mac(SSL *s);
 int check_in_list(SSL *s, uint16_t group_id, const uint16_t *groups,
                   size_t num_groups, int checkallow);
 int create_synthetic_message_hash(SSL *s, const unsigned char *hashval,

From matt at openssl.org  Fri Feb  9 15:37:01 2018
From: matt at openssl.org (Matt Caswell)
Date: Fri, 09 Feb 2018 15:37:01 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518190621.709751.1446.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  622ddb57798bb5c895b0fe40e3fd89fdb4cdbc65 (commit)
      from  30562caa34de5f23dead9b246aaf284748e184bf (commit)


- Log -----------------------------------------------------------------
commit 622ddb57798bb5c895b0fe40e3fd89fdb4cdbc65
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 8 14:48:51 2018 +0000

    Don't calculate the Finished MAC twice
    
    In <= TLSv1.2 a Finished message always comes immediately after a CCS
    except in the case of NPN where there is an additional message between
    the CCS and Finished. Historically we always calculated the Finished MAC
    when we processed the CCS. However to deal with NPN we also calculated it
    when we receive the Finished message. Really this should only have been
    done if we hand negotiated NPN.
    
    This simplifies the code to only calculate the MAC when we receive the
    Finished. In 1.1.1 we need to do it this way anyway because there is no
    CCS (except in middlebox compat mode) in TLSv1.3.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5286)

-----------------------------------------------------------------------

Summary of changes:
 include/openssl/ssl.h    |  1 +
 ssl/s3_msg.c             | 25 +------------------------
 ssl/ssl_err.c            |  3 ++-
 ssl/statem/statem_dtls.c |  9 +++++++++
 ssl/statem/statem_lib.c  | 34 +++++++++++++++++-----------------
 ssl/statem/statem_locl.h |  1 +
 6 files changed, 31 insertions(+), 42 deletions(-)

diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h
index 9ff9b60..abe4406 100644
--- a/include/openssl/ssl.h
+++ b/include/openssl/ssl.h
@@ -2131,6 +2131,7 @@ int ERR_load_SSL_strings(void);
 # define SSL_F_SSL3_SETUP_KEY_BLOCK                       157
 # define SSL_F_SSL3_SETUP_READ_BUFFER                     156
 # define SSL_F_SSL3_SETUP_WRITE_BUFFER                    291
+# define SSL_F_SSL3_TAKE_MAC                              425
 # define SSL_F_SSL3_WRITE_BYTES                           158
 # define SSL_F_SSL3_WRITE_PENDING                         159
 # define SSL_F_SSL_ADD_CERT_CHAIN                         316
diff --git a/ssl/s3_msg.c b/ssl/s3_msg.c
index 82513d2..8b08ba0 100644
--- a/ssl/s3_msg.c
+++ b/ssl/s3_msg.c
@@ -13,8 +13,6 @@
 int ssl3_do_change_cipher_spec(SSL *s)
 {
     int i;
-    const char *sender;
-    int slen;
 
     if (s->server)
         i = SSL3_CHANGE_CIPHER_SERVER_READ;
@@ -36,28 +34,7 @@ int ssl3_do_change_cipher_spec(SSL *s)
     if (!s->method->ssl3_enc->change_cipher_state(s, i))
         return (0);
 
-    /*
-     * we have to record the message digest at this point so we can get it
-     * before we read the finished message
-     */
-    if (!s->server) {
-        sender = s->method->ssl3_enc->server_finished_label;
-        slen = s->method->ssl3_enc->server_finished_label_len;
-    } else {
-        sender = s->method->ssl3_enc->client_finished_label;
-        slen = s->method->ssl3_enc->client_finished_label_len;
-    }
-
-    i = s->method->ssl3_enc->final_finish_mac(s,
-                                              sender, slen,
-                                              s->s3->tmp.peer_finish_md);
-    if (i == 0) {
-        SSLerr(SSL_F_SSL3_DO_CHANGE_CIPHER_SPEC, ERR_R_INTERNAL_ERROR);
-        return 0;
-    }
-    s->s3->tmp.peer_finish_md_len = i;
-
-    return (1);
+    return 1;
 }
 
 int ssl3_send_alert(SSL *s, int level, int desc)
diff --git a/ssl/ssl_err.c b/ssl/ssl_err.c
index 96edd96..3c2ebe1 100644
--- a/ssl/ssl_err.c
+++ b/ssl/ssl_err.c
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -75,6 +75,7 @@ static ERR_STRING_DATA SSL_str_functs[] = {
     {ERR_FUNC(SSL_F_SSL3_SETUP_KEY_BLOCK), "ssl3_setup_key_block"},
     {ERR_FUNC(SSL_F_SSL3_SETUP_READ_BUFFER), "ssl3_setup_read_buffer"},
     {ERR_FUNC(SSL_F_SSL3_SETUP_WRITE_BUFFER), "ssl3_setup_write_buffer"},
+    {ERR_FUNC(SSL_F_SSL3_TAKE_MAC), "ssl3_take_mac"},
     {ERR_FUNC(SSL_F_SSL3_WRITE_BYTES), "ssl3_write_bytes"},
     {ERR_FUNC(SSL_F_SSL3_WRITE_PENDING), "ssl3_write_pending"},
     {ERR_FUNC(SSL_F_SSL_ADD_CERT_CHAIN), "ssl_add_cert_chain"},
diff --git a/ssl/statem/statem_dtls.c b/ssl/statem/statem_dtls.c
index 37e7fea..22be871 100644
--- a/ssl/statem/statem_dtls.c
+++ b/ssl/statem/statem_dtls.c
@@ -371,6 +371,15 @@ int dtls_get_message(SSL *s, int *mt, unsigned long *len)
         msg_len += DTLS1_HM_HEADER_LENGTH;
     }
 
+    /*
+     * If receiving Finished, record MAC of prior handshake messages for
+     * Finished verification.
+     */
+    if (*mt == SSL3_MT_FINISHED && !ssl3_take_mac(s)) {
+        /* SSLfatal() already called */
+        return 0;
+    }
+
     if (!ssl3_finish_mac(s, p, msg_len))
         return 0;
     if (s->msg_callback)
diff --git a/ssl/statem/statem_lib.c b/ssl/statem/statem_lib.c
index 637c610..5702145 100644
--- a/ssl/statem/statem_lib.c
+++ b/ssl/statem/statem_lib.c
@@ -95,21 +95,15 @@ int tls_construct_finished(SSL *s, const char *sender, int slen)
     return 1;
 }
 
-#ifndef OPENSSL_NO_NEXTPROTONEG
 /*
  * ssl3_take_mac calculates the Finished MAC for the handshakes messages seen
  * to far.
  */
-static void ssl3_take_mac(SSL *s)
+int ssl3_take_mac(SSL *s)
 {
     const char *sender;
     int slen;
-    /*
-     * If no new cipher setup return immediately: other functions will set
-     * the appropriate error.
-     */
-    if (s->s3->tmp.new_cipher == NULL)
-        return;
+
     if (!s->server) {
         sender = s->method->ssl3_enc->server_finished_label;
         slen = s->method->ssl3_enc->server_finished_label_len;
@@ -118,12 +112,17 @@ static void ssl3_take_mac(SSL *s)
         slen = s->method->ssl3_enc->client_finished_label_len;
     }
 
-    s->s3->tmp.peer_finish_md_len = s->method->ssl3_enc->final_finish_mac(s,
-                                                                          sender,
-                                                                          slen,
-                                                                          s->s3->tmp.peer_finish_md);
+    s->s3->tmp.peer_finish_md_len =
+        s->method->ssl3_enc->final_finish_mac(s, sender, slen,
+                                              s->s3->tmp.peer_finish_md);
+
+    if (s->s3->tmp.peer_finish_md_len == 0) {
+        SSLerr(SSL_F_SSL3_TAKE_MAC, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    return 1;
 }
-#endif
 
 MSG_PROCESS_RETURN tls_process_change_cipher_spec(SSL *s, PACKET *pkt)
 {
@@ -465,14 +464,15 @@ int tls_get_message_body(SSL *s, unsigned long *len)
         n -= i;
     }
 
-#ifndef OPENSSL_NO_NEXTPROTONEG
     /*
      * If receiving Finished, record MAC of prior handshake messages for
      * Finished verification.
      */
-    if (*s->init_buf->data == SSL3_MT_FINISHED)
-        ssl3_take_mac(s);
-#endif
+    if (*(s->init_buf->data) == SSL3_MT_FINISHED && !ssl3_take_mac(s)) {
+        /* SSLfatal() already called */
+        *len = 0;
+        return 0;
+    }
 
     /* Feed this message into MAC computation. */
     if (RECORD_LAYER_is_sslv2_record(&s->rlayer)) {
diff --git a/ssl/statem/statem_locl.h b/ssl/statem/statem_locl.h
index a46e6c7..98e41fe 100644
--- a/ssl/statem/statem_locl.h
+++ b/ssl/statem/statem_locl.h
@@ -42,6 +42,7 @@ typedef enum {
 
 /* Flush the write BIO */
 int statem_flush(SSL *s);
+int ssl3_take_mac(SSL *s);
 
 /*
  * TLS/DTLS client state machine functions

From openssl at openssl.org  Fri Feb  9 15:59:10 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Fri, 09 Feb 2018 15:59:10 +0000
Subject: [openssl-commits] Still FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-tls1_2
Message-ID: <1518191950.080866.10321.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_2

Commit log since last time:

71cff96 Fix no-chacha and no-poly1305
b53fdad util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
22626b9 With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

Build log ended with (last 100 lines):

  SRCTOP=../../openssl \
  BLDTOP=../. \
  RESULT_D=test-runs \
  PERL="/usr/bin/perl" \
  EXE_EXT= \
  OPENSSL_ENGINES=`cd .././engines; pwd` \
  OPENSSL_DEBUG_MEMORY=on \
    /usr/bin/perl ../../openssl/test/run_tests.pl  )
../../openssl/test/recipes/01-test_abort.t .................... ok
../../openssl/test/recipes/01-test_sanity.t ................... ok
../../openssl/test/recipes/01-test_symbol_presence.t .......... ok
../../openssl/test/recipes/01-test_test.t ..................... ok
../../openssl/test/recipes/02-test_internal_ctype.t ........... ok
../../openssl/test/recipes/02-test_lhash.t .................... ok
../../openssl/test/recipes/02-test_ordinals.t ................. ok
../../openssl/test/recipes/02-test_stack.t .................... ok
../../openssl/test/recipes/03-test_exdata.t ................... ok
../../openssl/test/recipes/03-test_internal_asn1.t ............ ok
../../openssl/test/recipes/03-test_internal_chacha.t .......... ok
../../openssl/test/recipes/03-test_internal_mdc2.t ............ ok
../../openssl/test/recipes/03-test_internal_modes.t ........... ok
../../openssl/test/recipes/03-test_internal_poly1305.t ........ ok
../../openssl/test/recipes/03-test_internal_siphash.t ......... ok
../../openssl/test/recipes/03-test_internal_sm4.t ............. ok
../../openssl/test/recipes/03-test_internal_ssl_cert_table.t .. ok
../../openssl/test/recipes/03-test_internal_x509.t ............ ok
../../openssl/test/recipes/03-test_ui.t ....................... ok
../../openssl/test/recipes/04-test_asn1_encode.t .............. ok
../../openssl/test/recipes/04-test_asn1_string_table.t ........ ok
../../openssl/test/recipes/04-test_bioprint.t ................. ok
../../openssl/test/recipes/04-test_pem.t ...................... ok
../../openssl/test/recipes/05-test_bf.t ....................... ok
../../openssl/test/recipes/05-test_cast.t ..................... ok
../../openssl/test/recipes/05-test_des.t ...................... ok
../../openssl/test/recipes/05-test_hmac.t ..................... ok
../../openssl/test/recipes/05-test_idea.t ..................... ok
../../openssl/test/recipes/05-test_md2.t ...................... skipped: md2 is not supported by this OpenSSL build
../../openssl/test/recipes/05-test_mdc2.t ..................... ok
../../openssl/test/recipes/05-test_rand.t ..................... ok
../../openssl/test/recipes/05-test_rc2.t ...................... ok
../../openssl/test/recipes/05-test_rc4.t ...................... ok
../../openssl/test/recipes/05-test_rc5.t ...................... skipped: rc5 is not supported by this OpenSSL build
../../openssl/test/recipes/10-test_bn.t ....................... ok
../../openssl/test/recipes/10-test_exp.t ...................... ok
../../openssl/test/recipes/15-test_dh.t ....................... ok
../../openssl/test/recipes/15-test_dsa.t ...................... ok
../../openssl/test/recipes/15-test_ec.t ....................... ok
../../openssl/test/recipes/15-test_ecdsa.t .................... ok
../../openssl/test/recipes/15-test_ecparam.t .................. ok
../../openssl/test/recipes/15-test_genrsa.t ................... ok
../../openssl/test/recipes/15-test_mp_rsa.t ................... ok
../../openssl/test/recipes/15-test_rsa.t ...................... ok
../../openssl/test/recipes/15-test_rsapss.t ................... ok
../../openssl/test/recipes/20-test_enc.t ...................... ok
../../openssl/test/recipes/20-test_enc_more.t ................. ok
../../openssl/test/recipes/20-test_passwd.t ................... ok
../../openssl/test/recipes/25-test_crl.t ...................... ok
../../openssl/test/recipes/25-test_d2i.t ...................... ok
../../openssl/test/recipes/25-test_pkcs7.t .................... ok
../../openssl/test/recipes/25-test_req.t ...................... ok
../../openssl/test/recipes/25-test_sid.t ...................... ok
../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/22 subtests 
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ skipped: test_renegotiation needs TLS <= 1.2 enabled
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ skipped: test_sslcbcpadding needs TLSv1.2 enabled
../../openssl/test/recipes/70-test_sslcertstatus.t ............ 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_sslextension.t ............. 
Dubious, test returned 255 (wstat 65280, 0xff00)
No subtests run 
make[1]: *** wait: No child processes.  Stop.
make[1]: *** Waiting for unfinished jobs....
make[1]: *** wait: No child processes.  Stop.
Makefile:169: recipe for target 'tests' failed
make: *** [tests] Terminated

From builds at travis-ci.org  Fri Feb  9 16:05:27 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 16:05:27 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16216 (master - 5d67110)
In-Reply-To: <openssl/openssl+339511350+errored@travis-ci.org>
Message-ID: <5a7dc72ce49cc_43fc58c5cce988702b8@6d40c516-40fe-402c-a43b-6e583071f2f2.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16216
Status: Errored

Duration: 29 minutes and 41 seconds
Commit: 5d67110 (master)
Author: Matt Caswell
Message: Don't calculate the Finished MAC twice

In <= TLSv1.2 a Finished message always comes immediately after a CCS
except in the case of NPN where there is an additional message between
the CCS and Finished. Historically we always calculated the Finished MAC
when we processed the CCS. However to deal with NPN we also calculated it
when we receive the Finished message. Really this should only have been
done if we hand negotiated NPN.

This simplifies the code to only calculate the MAC when we receive the
Finished. In 1.1.1 we need to do it this way anyway because there is no
CCS (except in middlebox compat mode) in TLSv1.3.

Coincidentally, this commit also fixes the fact that no-nextprotoneg does
not currently work in master.

Reviewed-by: Andy Polyakov <appro at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5285)

View the changeset: https://github.com/openssl/openssl/compare/368297d17352...5d671101739f

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339511350?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/f6396d31/attachment.html>

From levitte at openssl.org  Fri Feb  9 16:49:32 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 09 Feb 2018 16:49:32 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518194972.371256.10006.nullmailer@dev.openssl.org>

The branch master has been updated
       via  83739b39e55fcdd9dd395bc619b1b7fafcc32f5c (commit)
       via  41e9afa9452407f5e0a651d1058ae5c73c7d1fd6 (commit)
       via  5773f7bee4a12774977acba47ad89779c7a89bcd (commit)
       via  a5d0d6b8fd1645c150e1b276863157bb29f0f598 (commit)
      from  5d671101739f9e9b259126375a9e8b2fa42ac45f (commit)


- Log -----------------------------------------------------------------
commit 83739b39e55fcdd9dd395bc619b1b7fafcc32f5c
Author: Nick Mathewson <nickm at torproject.org>
Date:   Fri Feb 9 09:03:07 2018 -0500

    Run "make update"
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5150)

commit 41e9afa9452407f5e0a651d1058ae5c73c7d1fd6
Author: Nick Mathewson <nickm at torproject.org>
Date:   Tue Jan 23 10:49:53 2018 -0500

    In err_all.c, include the *err.h headers.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5150)

commit 5773f7bee4a12774977acba47ad89779c7a89bcd
Author: Nick Mathewson <nickm at torproject.org>
Date:   Tue Jan 23 10:48:35 2018 -0500

    Improve #include structure of pem{,2}.h
    
      - pem2.h is empty, so pem.h doesn't need to include it.
      - pem2.h once declared ERR_load_PEM_strings(), so it should now
        include pemerr.h
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5150)

commit a5d0d6b8fd1645c150e1b276863157bb29f0f598
Author: Nick Mathewson <nickm at torproject.org>
Date:   Tue Jan 23 09:46:13 2018 -0500

    Remove redundant declarations of ERR_load_*_strings()
    
    In commit 52df25cf2e656146cb3b206d8220124f0417d03f, the
    ERR_load_FOO_strings() functions were moved from their original
    location in foo.h into new headers called fooerr.h.  But they were
    never removed from their original locations.  This duplication
    causes redundant-declaration warnings on programs that use OpenSSL's
    headers with such warnings enabled.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5150)

-----------------------------------------------------------------------

Summary of changes:
 crypto/err/err_all.c      | 53 ++++++++++++++++++++++++-----------------------
 include/openssl/async.h   |  1 -
 include/openssl/bio.h     |  1 -
 include/openssl/bn.h      |  1 -
 include/openssl/buffer.h  |  1 -
 include/openssl/cms.h     |  1 -
 include/openssl/comp.h    |  1 -
 include/openssl/conf.h    |  1 -
 include/openssl/crypto.h  |  1 -
 include/openssl/ct.h      |  1 -
 include/openssl/dh.h      |  1 -
 include/openssl/dsa.h     |  1 -
 include/openssl/ec.h      |  1 -
 include/openssl/engine.h  |  1 -
 include/openssl/evp.h     |  1 -
 include/openssl/kdf.h     |  1 -
 include/openssl/objects.h |  1 -
 include/openssl/ocsp.h    |  1 -
 include/openssl/pem.h     |  2 --
 include/openssl/pem2.h    | 13 +++---------
 include/openssl/rand.h    |  1 -
 include/openssl/rsa.h     |  1 -
 include/openssl/ssl.h     |  1 -
 include/openssl/store.h   |  6 ------
 include/openssl/ts.h      |  1 -
 include/openssl/ui.h      |  1 -
 util/libcrypto.num        |  2 +-
 27 files changed, 31 insertions(+), 67 deletions(-)

diff --git a/crypto/err/err_all.c b/crypto/err/err_all.c
index a2759f4..6f03886 100644
--- a/crypto/err/err_all.c
+++ b/crypto/err/err_all.c
@@ -9,34 +9,35 @@
 
 #include <stdio.h>
 #include "internal/err_int.h"
-#include <openssl/asn1.h>
-#include <openssl/bn.h>
-#include <openssl/ec.h>
-#include <openssl/buffer.h>
-#include <openssl/bio.h>
-#include <openssl/comp.h>
-#include <openssl/rsa.h>
-#include <openssl/dh.h>
-#include <openssl/dsa.h>
-#include <openssl/evp.h>
-#include <openssl/objects.h>
-#include <openssl/pem2.h>
-#include <openssl/x509.h>
-#include <openssl/x509v3.h>
-#include <openssl/conf.h>
-#include <openssl/pkcs12.h>
-#include <openssl/rand.h>
+#include <openssl/asn1err.h>
+#include <openssl/bnerr.h>
+#include <openssl/ecerr.h>
+#include <openssl/buffererr.h>
+#include <openssl/bioerr.h>
+#include <openssl/comperr.h>
+#include <openssl/rsaerr.h>
+#include <openssl/dherr.h>
+#include <openssl/dsaerr.h>
+#include <openssl/evperr.h>
+#include <openssl/objectserr.h>
+#include <openssl/pemerr.h>
+#include <openssl/pkcs7err.h>
+#include <openssl/x509err.h>
+#include <openssl/x509v3err.h>
+#include <openssl/conferr.h>
+#include <openssl/pkcs12err.h>
+#include <openssl/randerr.h>
 #include "internal/dso.h"
-#include <openssl/engine.h>
-#include <openssl/ui.h>
-#include <openssl/ocsp.h>
+#include <openssl/engineerr.h>
+#include <openssl/uierr.h>
+#include <openssl/ocsperr.h>
 #include <openssl/err.h>
-#include <openssl/ts.h>
-#include <openssl/cms.h>
-#include <openssl/ct.h>
-#include <openssl/async.h>
-#include <openssl/kdf.h>
-#include <openssl/store.h>
+#include <openssl/tserr.h>
+#include <openssl/cmserr.h>
+#include <openssl/cterr.h>
+#include <openssl/asyncerr.h>
+#include <openssl/kdferr.h>
+#include <openssl/storeerr.h>
 
 int err_load_crypto_strings_int(void)
 {
diff --git a/include/openssl/async.h b/include/openssl/async.h
index 45ff30a..4db02c3 100644
--- a/include/openssl/async.h
+++ b/include/openssl/async.h
@@ -69,7 +69,6 @@ ASYNC_WAIT_CTX *ASYNC_get_wait_ctx(ASYNC_JOB *job);
 void ASYNC_block_pause(void);
 void ASYNC_unblock_pause(void);
 
-int ERR_load_ASYNC_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/bio.h b/include/openssl/bio.h
index d8d8ac4..4a32a0d 100644
--- a/include/openssl/bio.h
+++ b/include/openssl/bio.h
@@ -790,7 +790,6 @@ long (*BIO_meth_get_callback_ctrl(BIO_METHOD *biom))
 int BIO_meth_set_callback_ctrl(BIO_METHOD *biom,
                                long (*callback_ctrl) (BIO *, int,
                                                       BIO_info_cb *));
-int ERR_load_BIO_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/bn.h b/include/openssl/bn.h
index 93c8fe9..ebca6f9 100644
--- a/include/openssl/bn.h
+++ b/include/openssl/bn.h
@@ -481,7 +481,6 @@ BIGNUM *BN_get_rfc3526_prime_8192(BIGNUM *bn);
 
 int BN_bntest_rand(BIGNUM *rnd, int bits, int top, int bottom);
 
-int ERR_load_BN_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/buffer.h b/include/openssl/buffer.h
index 6f243ba..8868e85 100644
--- a/include/openssl/buffer.h
+++ b/include/openssl/buffer.h
@@ -51,7 +51,6 @@ size_t BUF_MEM_grow(BUF_MEM *str, size_t len);
 size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len);
 void BUF_reverse(unsigned char *out, const unsigned char *in, size_t siz);
 
-int ERR_load_BUF_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/cms.h b/include/openssl/cms.h
index c9294e5..7910127 100644
--- a/include/openssl/cms.h
+++ b/include/openssl/cms.h
@@ -335,7 +335,6 @@ int CMS_SharedInfo_encode(unsigned char **pder, X509_ALGOR *kekalg,
 # define CMS_R_UNSUPPORTED_RECPIENTINFO_TYPE \
     CMS_R_UNSUPPORTED_RECIPIENTINFO_TYPE
 
-int ERR_load_CMS_strings(void);
 #  ifdef  __cplusplus
 }
 #  endif
diff --git a/include/openssl/comp.h b/include/openssl/comp.h
index 27ff659..6b20aac 100644
--- a/include/openssl/comp.h
+++ b/include/openssl/comp.h
@@ -45,7 +45,6 @@ const BIO_METHOD *BIO_f_zlib(void);
 #  endif
 # endif
 
-int ERR_load_COMP_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/conf.h b/include/openssl/conf.h
index 702dceb..bca8a05 100644
--- a/include/openssl/conf.h
+++ b/include/openssl/conf.h
@@ -161,7 +161,6 @@ int CONF_parse_list(const char *list, int sep, int nospc,
 
 void OPENSSL_load_builtin_modules(void);
 
-int ERR_load_CONF_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/crypto.h b/include/openssl/crypto.h
index 478f9e2..4daf0c7 100644
--- a/include/openssl/crypto.h
+++ b/include/openssl/crypto.h
@@ -439,7 +439,6 @@ int CRYPTO_THREAD_cleanup_local(CRYPTO_THREAD_LOCAL *key);
 CRYPTO_THREAD_ID CRYPTO_THREAD_get_current_id(void);
 int CRYPTO_THREAD_compare_id(CRYPTO_THREAD_ID a, CRYPTO_THREAD_ID b);
 
-int ERR_load_CRYPTO_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/ct.h b/include/openssl/ct.h
index 96f3b7c..68c5d41 100644
--- a/include/openssl/ct.h
+++ b/include/openssl/ct.h
@@ -469,7 +469,6 @@ __owur int CTLOG_STORE_load_file(CTLOG_STORE *store, const char *file);
  */
 __owur int CTLOG_STORE_load_default_file(CTLOG_STORE *store);
 
-int ERR_load_CT_strings(void);
 #  ifdef  __cplusplus
 }
 #  endif
diff --git a/include/openssl/dh.h b/include/openssl/dh.h
index 0085824..2a12b9d 100644
--- a/include/openssl/dh.h
+++ b/include/openssl/dh.h
@@ -327,7 +327,6 @@ int DH_meth_set_generate_params(DH_METHOD *dhm,
 # define EVP_PKEY_DH_KDF_X9_42                           2
 # endif
 
-int ERR_load_DH_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/dsa.h b/include/openssl/dsa.h
index d8e680c..39f0f57 100644
--- a/include/openssl/dsa.h
+++ b/include/openssl/dsa.h
@@ -224,7 +224,6 @@ int DSA_meth_set_paramgen(DSA_METHOD *dsam,
 int (*DSA_meth_get_keygen(const DSA_METHOD *dsam)) (DSA *);
 int DSA_meth_set_keygen(DSA_METHOD *dsam, int (*keygen) (DSA *));
 
-int ERR_load_DSA_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/ec.h b/include/openssl/ec.h
index 65800dd..a8627cf 100644
--- a/include/openssl/ec.h
+++ b/include/openssl/ec.h
@@ -1346,7 +1346,6 @@ void EC_KEY_METHOD_get_verify(const EC_KEY_METHOD *meth,
 # define EVP_PKEY_ECDH_KDF_NONE                          1
 # define EVP_PKEY_ECDH_KDF_X9_62                         2
 
-int ERR_load_EC_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/engine.h b/include/openssl/engine.h
index 9f59757..89722b0 100644
--- a/include/openssl/engine.h
+++ b/include/openssl/engine.h
@@ -743,7 +743,6 @@ void *ENGINE_get_static_state(void);
 DEPRECATEDIN_1_1_0(void ENGINE_setup_bsd_cryptodev(void))
 # endif
 
-int ERR_load_ENGINE_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/evp.h b/include/openssl/evp.h
index 4a3fee1..268e90f 100644
--- a/include/openssl/evp.h
+++ b/include/openssl/evp.h
@@ -1587,7 +1587,6 @@ void EVP_PKEY_meth_get_param_check(EVP_PKEY_METHOD *pmeth,
 
 void EVP_add_alg_module(void);
 
-int ERR_load_EVP_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/kdf.h b/include/openssl/kdf.h
index 26380ca..c1733a5 100644
--- a/include/openssl/kdf.h
+++ b/include/openssl/kdf.h
@@ -90,7 +90,6 @@ extern "C" {
             EVP_PKEY_CTX_ctrl_uint64(pctx, -1, EVP_PKEY_OP_DERIVE, \
                             EVP_PKEY_CTRL_SCRYPT_MAXMEM_BYTES, maxmem_bytes)
 
-int ERR_load_KDF_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/objects.h b/include/openssl/objects.h
index 54b42ee..484562d 100644
--- a/include/openssl/objects.h
+++ b/include/openssl/objects.h
@@ -168,7 +168,6 @@ int OBJ_find_sigid_by_algs(int *psignid, int dig_nid, int pkey_nid);
 int OBJ_add_sigid(int signid, int dig_id, int pkey_id);
 void OBJ_sigid_free(void);
 
-int ERR_load_OBJ_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/include/openssl/ocsp.h b/include/openssl/ocsp.h
index 0b89a64..a5c4476 100644
--- a/include/openssl/ocsp.h
+++ b/include/openssl/ocsp.h
@@ -345,7 +345,6 @@ int OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE *o, unsigned long flags);
 int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
                       X509_STORE *st, unsigned long flags);
 
-int ERR_load_OCSP_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/pem.h b/include/openssl/pem.h
index 10b19a5..55bcd71 100644
--- a/include/openssl/pem.h
+++ b/include/openssl/pem.h
@@ -15,7 +15,6 @@
 # include <openssl/safestack.h>
 # include <openssl/evp.h>
 # include <openssl/x509.h>
-# include <openssl/pem2.h>
 # include <openssl/pemerr.h>
 
 #ifdef  __cplusplus
@@ -372,7 +371,6 @@ int i2b_PVK_bio(BIO *out, EVP_PKEY *pk, int enclevel,
 #  endif
 # endif
 
-int ERR_load_PEM_strings(void);
 # ifdef  __cplusplus
 }
 # endif
diff --git a/include/openssl/pem2.h b/include/openssl/pem2.h
index cfe73f1..bad7ac8 100644
--- a/include/openssl/pem2.h
+++ b/include/openssl/pem2.h
@@ -7,14 +7,7 @@
  * https://www.openssl.org/source/license.html
  */
 
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-#ifndef HEADER_PEM_H
-int ERR_load_PEM_strings(void);
-#endif
-
-#ifdef __cplusplus
-}
+#ifndef HEADER_PEM2_H
+# define HEADER_PEM2_H
+# include <openssl/pemerr.h>
 #endif
diff --git a/include/openssl/rand.h b/include/openssl/rand.h
index 2dec35e..cfccd71 100644
--- a/include/openssl/rand.h
+++ b/include/openssl/rand.h
@@ -71,7 +71,6 @@ DEPRECATEDIN_1_1_0(void RAND_screen(void))
 DEPRECATEDIN_1_1_0(int RAND_event(UINT, WPARAM, LPARAM))
 # endif
 
-int ERR_load_RAND_strings(void);
 
 #ifdef  __cplusplus
 }
diff --git a/include/openssl/rsa.h b/include/openssl/rsa.h
index 8985219..38d9f01 100644
--- a/include/openssl/rsa.h
+++ b/include/openssl/rsa.h
@@ -496,7 +496,6 @@ int RSA_meth_set_multi_prime_keygen(RSA_METHOD *meth,
                                     int (*keygen) (RSA *rsa, int bits,
                                                    int primes, BIGNUM *e,
                                                    BN_GENCB *cb));
-int ERR_load_RSA_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h
index 9c45b90..825490b 100644
--- a/include/openssl/ssl.h
+++ b/include/openssl/ssl.h
@@ -2292,7 +2292,6 @@ __owur int SSL_alloc_buffers(SSL *ssl);
 
 extern const char SSL_version_str[];
 
-int ERR_load_SSL_strings(void);
 
 
 typedef unsigned int (*DTLS_timer_cb)(SSL *s, unsigned int timer_us);
diff --git a/include/openssl/store.h b/include/openssl/store.h
index 43cf203..dff9d1e 100644
--- a/include/openssl/store.h
+++ b/include/openssl/store.h
@@ -203,12 +203,6 @@ int OSSL_STORE_do_all_loaders(void (*do_function) (const OSSL_STORE_LOADER
                                                    *loader, void *do_arg),
                               void *do_arg);
 
-
-/*
- * Error strings
- */
-int ERR_load_OSSL_STORE_strings(void);
-
 # ifdef  __cplusplus
 }
 # endif
diff --git a/include/openssl/ts.h b/include/openssl/ts.h
index 5d56c96..3317e8f 100644
--- a/include/openssl/ts.h
+++ b/include/openssl/ts.h
@@ -551,7 +551,6 @@ int TS_CONF_set_ess_cert_id_chain(CONF *conf, const char *section,
                                   TS_RESP_CTX *ctx);
 int TS_CONF_set_ess_cert_id_digest(CONF *conf, const char *section,
                                       TS_RESP_CTX *ctx);
-int ERR_load_TS_strings(void);
 
 #  ifdef  __cplusplus
 }
diff --git a/include/openssl/ui.h b/include/openssl/ui.h
index 1da1ccb..ab1d7e3 100644
--- a/include/openssl/ui.h
+++ b/include/openssl/ui.h
@@ -361,7 +361,6 @@ int UI_UTIL_read_pw(char *buf, char *buff, int size, const char *prompt,
                     int verify);
 UI_METHOD *UI_UTIL_wrap_read_pem_callback(pem_password_cb *cb, int rwflag);
 
-int ERR_load_UI_strings(void);
 
 # ifdef  __cplusplus
 }
diff --git a/util/libcrypto.num b/util/libcrypto.num
index a2d03c6..5005d9a 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -621,7 +621,7 @@ DES_ede3_ofb64_encrypt                  620	1_1_0	EXIST::FUNCTION:DES
 EC_KEY_METHOD_get_compute_key           621	1_1_0	EXIST::FUNCTION:EC
 RC2_cfb64_encrypt                       622	1_1_0	EXIST::FUNCTION:RC2
 EVP_EncryptFinal_ex                     623	1_1_0	EXIST::FUNCTION:
-ERR_load_RSA_strings                    624	1_1_0	EXIST::FUNCTION:RSA
+ERR_load_RSA_strings                    624	1_1_0	EXIST::FUNCTION:
 CRYPTO_secure_malloc_done               625	1_1_0	EXIST::FUNCTION:
 RSA_OAEP_PARAMS_new                     626	1_1_0	EXIST::FUNCTION:RSA
 X509_NAME_free                          627	1_1_0	EXIST::FUNCTION:

From builds at travis-ci.org  Fri Feb  9 17:21:30 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 17:21:30 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16219 (master - 83739b3)
In-Reply-To: <openssl/openssl+339546736+errored@travis-ci.org>
Message-ID: <5a7dd90171b22_43fc59aefdc709950ee@6d40c516-40fe-402c-a43b-6e583071f2f2.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16219
Status: Errored

Duration: 32 minutes and 46 seconds
Commit: 83739b3 (master)
Author: Nick Mathewson
Message: Run "make update"

Reviewed-by: Rich Salz <rsalz at openssl.org>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5150)

View the changeset: https://github.com/openssl/openssl/compare/5d671101739f...83739b39e55f

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339546736?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/ef7181dd/attachment.html>

From openssl at openssl.org  Fri Feb  9 17:41:42 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Fri, 09 Feb 2018 17:41:42 +0000
Subject: [openssl-commits] Still FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-tls1_2-method
Message-ID: <1518198102.638008.28162.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_2-method

Commit log since last time:

71cff96 Fix no-chacha and no-poly1305
b53fdad util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
22626b9 With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)

Build log ended with (last 100 lines):

make[1]: Entering directory '/home/openssl/run-checker/no-tls1_2-method'
( cd test; \
  mkdir -p test-runs; \
  SRCTOP=../../openssl \
  BLDTOP=../. \
  RESULT_D=test-runs \
  PERL="/usr/bin/perl" \
  EXE_EXT= \
  OPENSSL_ENGINES=`cd .././engines; pwd` \
  OPENSSL_DEBUG_MEMORY=on \
    /usr/bin/perl ../../openssl/test/run_tests.pl  )
../../openssl/test/recipes/01-test_abort.t .................... ok
../../openssl/test/recipes/01-test_sanity.t ................... ok
../../openssl/test/recipes/01-test_symbol_presence.t .......... ok
../../openssl/test/recipes/01-test_test.t ..................... ok
../../openssl/test/recipes/02-test_internal_ctype.t ........... ok
../../openssl/test/recipes/02-test_lhash.t .................... ok
../../openssl/test/recipes/02-test_ordinals.t ................. ok
../../openssl/test/recipes/02-test_stack.t .................... ok
../../openssl/test/recipes/03-test_exdata.t ................... ok
../../openssl/test/recipes/03-test_internal_asn1.t ............ ok
../../openssl/test/recipes/03-test_internal_chacha.t .......... ok
../../openssl/test/recipes/03-test_internal_mdc2.t ............ ok
../../openssl/test/recipes/03-test_internal_modes.t ........... ok
../../openssl/test/recipes/03-test_internal_poly1305.t ........ ok
../../openssl/test/recipes/03-test_internal_siphash.t ......... ok
../../openssl/test/recipes/03-test_internal_sm4.t ............. ok
../../openssl/test/recipes/03-test_internal_ssl_cert_table.t .. ok
../../openssl/test/recipes/03-test_internal_x509.t ............ ok
../../openssl/test/recipes/03-test_ui.t ....................... ok
../../openssl/test/recipes/04-test_asn1_encode.t .............. ok
../../openssl/test/recipes/04-test_asn1_string_table.t ........ ok
../../openssl/test/recipes/04-test_bioprint.t ................. ok
../../openssl/test/recipes/04-test_pem.t ...................... ok
../../openssl/test/recipes/05-test_bf.t ....................... ok
../../openssl/test/recipes/05-test_cast.t ..................... ok
../../openssl/test/recipes/05-test_des.t ...................... ok
../../openssl/test/recipes/05-test_hmac.t ..................... ok
../../openssl/test/recipes/05-test_idea.t ..................... ok
../../openssl/test/recipes/05-test_md2.t ...................... skipped: md2 is not supported by this OpenSSL build
../../openssl/test/recipes/05-test_mdc2.t ..................... ok
../../openssl/test/recipes/05-test_rand.t ..................... ok
../../openssl/test/recipes/05-test_rc2.t ...................... ok
../../openssl/test/recipes/05-test_rc4.t ...................... ok
../../openssl/test/recipes/05-test_rc5.t ...................... skipped: rc5 is not supported by this OpenSSL build
../../openssl/test/recipes/10-test_bn.t ....................... ok
../../openssl/test/recipes/10-test_exp.t ...................... ok
../../openssl/test/recipes/15-test_dh.t ....................... ok
../../openssl/test/recipes/15-test_dsa.t ...................... ok
../../openssl/test/recipes/15-test_ec.t ....................... ok
../../openssl/test/recipes/15-test_ecdsa.t .................... ok
../../openssl/test/recipes/15-test_ecparam.t .................. ok
../../openssl/test/recipes/15-test_genrsa.t ................... ok
../../openssl/test/recipes/15-test_mp_rsa.t ................... ok
../../openssl/test/recipes/15-test_rsa.t ...................... ok
../../openssl/test/recipes/15-test_rsapss.t ................... ok
../../openssl/test/recipes/20-test_enc.t ...................... ok
../../openssl/test/recipes/20-test_enc_more.t ................. ok
../../openssl/test/recipes/20-test_passwd.t ................... ok
../../openssl/test/recipes/25-test_crl.t ...................... ok
../../openssl/test/recipes/25-test_d2i.t ...................... ok
../../openssl/test/recipes/25-test_pkcs7.t .................... ok
../../openssl/test/recipes/25-test_req.t ...................... ok
../../openssl/test/recipes/25-test_sid.t ...................... ok
../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/22 subtests 
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ skipped: test_renegotiation needs TLS <= 1.2 enabled
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ skipped: test_sslcbcpadding needs TLSv1.2 enabled
../../openssl/test/recipes/70-test_sslcertstatus.t ............ 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/70-test_sslextension.t ............. 
Dubious, test returned 255 (wstat 65280, 0xff00)
No subtests run 
Makefile:171: recipe for target '_tests' failed
make[1]: *** [_tests] Terminated

From matt at openssl.org  Fri Feb  9 17:51:17 2018
From: matt at openssl.org (Matt Caswell)
Date: Fri, 09 Feb 2018 17:51:17 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518198677.666159.16474.nullmailer@dev.openssl.org>

The branch master has been updated
       via  c423ecaa7f6d0cc77c4f121c6de7d585439bca8f (commit)
      from  83739b39e55fcdd9dd395bc619b1b7fafcc32f5c (commit)


- Log -----------------------------------------------------------------
commit c423ecaa7f6d0cc77c4f121c6de7d585439bca8f
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Feb 9 10:19:14 2018 +0000

    Fixes for no-tls1_2 and no-tls1_2-method
    
    The no-tls1_2 option does not work properly in conjunction with TLSv1.3
    being enabled (which is now the default). This commit fixes the issues.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5301)

-----------------------------------------------------------------------

Summary of changes:
 test/cipherlist_test.c               | 22 +++++++++++-------
 test/clienthellotest.c               |  5 ++++
 test/recipes/70-test_key_share.t     | 44 ++++++++++++++++++++----------------
 test/recipes/70-test_sslcertstatus.t |  3 ++-
 test/recipes/70-test_sslextension.t  | 41 ++++++++++++++++++---------------
 test/recipes/70-test_sslmessages.t   |  3 ++-
 test/recipes/70-test_sslsigalgs.t    | 17 ++++++++------
 test/recipes/80-test_ssl_new.t       |  3 +++
 test/sslapitest.c                    | 24 +++++++++++++++-----
 9 files changed, 101 insertions(+), 61 deletions(-)

diff --git a/test/cipherlist_test.c b/test/cipherlist_test.c
index 336bdb0..b4e6ea2 100644
--- a/test/cipherlist_test.c
+++ b/test/cipherlist_test.c
@@ -105,20 +105,23 @@ static const uint32_t default_ciphers_in_order[] = {
 # endif
 #endif  /* !OPENSSL_NO_TLS1_2 */
 
-#ifndef OPENSSL_NO_EC
+#if !defined(OPENSSL_NO_TLS1_2) || defined(OPENSSL_NO_TLS1_3)
+    /* These won't be usable if TLSv1.3 is available but TLSv1.2 isn't */
+# ifndef OPENSSL_NO_EC
     TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
     TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA,
-#endif
-#ifndef OPENSSL_NO_DH
+# endif
+ #ifndef OPENSSL_NO_DH
     TLS1_CK_DHE_RSA_WITH_AES_256_SHA,
-#endif
-#ifndef OPENSSL_NO_EC
+# endif
+# ifndef OPENSSL_NO_EC
     TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
     TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA,
-#endif
-#ifndef OPENSSL_NO_DH
+# endif
+# ifndef OPENSSL_NO_DH
     TLS1_CK_DHE_RSA_WITH_AES_128_SHA,
-#endif
+# endif
+#endif /* !defined(OPENSSL_NO_TLS1_2) || defined(OPENSSL_NO_TLS1_3) */
 
 #ifndef OPENSSL_NO_TLS1_2
     TLS1_CK_RSA_WITH_AES_256_GCM_SHA384,
@@ -135,8 +138,11 @@ static const uint32_t default_ciphers_in_order[] = {
     TLS1_CK_RSA_WITH_AES_256_SHA256,
     TLS1_CK_RSA_WITH_AES_128_SHA256,
 #endif
+#if !defined(OPENSSL_NO_TLS1_2) || defined(OPENSSL_NO_TLS1_3)
+    /* These won't be usable if TLSv1.3 is available but TLSv1.2 isn't */
     TLS1_CK_RSA_WITH_AES_256_SHA,
     TLS1_CK_RSA_WITH_AES_128_SHA,
+#endif
 };
 
 static int test_default_cipherlist(SSL_CTX *ctx)
diff --git a/test/clienthellotest.c b/test/clienthellotest.c
index f3e9588..32103d0 100644
--- a/test/clienthellotest.c
+++ b/test/clienthellotest.c
@@ -81,9 +81,14 @@ static int test_client_hello(int currtest)
 
     switch(currtest) {
     case TEST_SET_SESSION_TICK_DATA_VER_NEG:
+#if !defined(OPENSSL_NO_TLS1_3) && defined(OPENSSL_NO_TLS1_2)
+        /* TLSv1.3 is enabled and TLSv1.2 is disabled so can't do this test */
+        return 1;
+#else
         /* Testing for session tickets <= TLS1.2; not relevant for 1.3 */
         if (!TEST_true(SSL_CTX_set_max_proto_version(ctx, TLS1_2_VERSION)))
             goto end;
+#endif
         break;
 
     case TEST_ADD_PADDING_AND_PSK:
diff --git a/test/recipes/70-test_key_share.t b/test/recipes/70-test_key_share.t
index f4cc764..512a3bc 100644
--- a/test/recipes/70-test_key_share.t
+++ b/test/recipes/70-test_key_share.t
@@ -199,26 +199,30 @@ $testtype = TRAILING_DATA;
 $proxy->start();
 ok(TLSProxy::Message->fail(), "key_share trailing data in ServerHello");
 
-#Test 20: key_share should not be sent if the client is not capable of
-#         negotiating TLSv1.3
-$proxy->clear();
-$proxy->filter(undef);
-$proxy->clientflags("-no_tls1_3");
-$proxy->start();
-my $clienthello = $proxy->message_list->[0];
-ok(TLSProxy::Message->success()
-   && !defined $clienthello->extension_data->{TLSProxy::Message::EXT_KEY_SHARE},
-   "No key_share for TLS<=1.2 client");
-$proxy->filter(\&modify_key_shares_filter);
-
-#Test 21: A server not capable of negotiating TLSv1.3 should not attempt to
-#         process a key_share
-$proxy->clear();
-$direction = CLIENT_TO_SERVER;
-$testtype = NO_ACCEPTABLE_KEY_SHARES;
-$proxy->serverflags("-no_tls1_3");
-$proxy->start();
-ok(TLSProxy::Message->success(), "Ignore key_share for TLS<=1.2 server");
+SKIP: {
+    skip "No TLSv1.2 support in this OpenSSL build", 2 if disabled("tls1_2");
+
+    #Test 20: key_share should not be sent if the client is not capable of
+    #         negotiating TLSv1.3
+    $proxy->clear();
+    $proxy->filter(undef);
+    $proxy->clientflags("-no_tls1_3");
+    $proxy->start();
+    my $clienthello = $proxy->message_list->[0];
+    ok(TLSProxy::Message->success()
+       && !defined $clienthello->extension_data->{TLSProxy::Message::EXT_KEY_SHARE},
+       "No key_share for TLS<=1.2 client");
+    $proxy->filter(\&modify_key_shares_filter);
+
+    #Test 21: A server not capable of negotiating TLSv1.3 should not attempt to
+    #         process a key_share
+    $proxy->clear();
+    $direction = CLIENT_TO_SERVER;
+    $testtype = NO_ACCEPTABLE_KEY_SHARES;
+    $proxy->serverflags("-no_tls1_3");
+    $proxy->start();
+    ok(TLSProxy::Message->success(), "Ignore key_share for TLS<=1.2 server");
+}
 
 #Test 22: The server sending an HRR but not requesting a new key_share should
 #         fail
diff --git a/test/recipes/70-test_sslcertstatus.t b/test/recipes/70-test_sslcertstatus.t
index da8a3e5..96a46ce 100644
--- a/test/recipes/70-test_sslcertstatus.t
+++ b/test/recipes/70-test_sslcertstatus.t
@@ -27,7 +27,8 @@ plan skip_all => "$test_name needs the ocsp feature enabled"
     if disabled("ocsp");
 
 plan skip_all => "$test_name needs TLS enabled"
-    if alldisabled(available_protocols("tls"));
+    if alldisabled(available_protocols("tls"))
+       || (!disabled("tls1_3") && disabled("tls1_2"));
 
 $ENV{OPENSSL_ia32cap} = '~0x200000200000000';
 my $proxy = TLSProxy::Proxy->new(
diff --git a/test/recipes/70-test_sslextension.t b/test/recipes/70-test_sslextension.t
index d185bda..142ce0e 100644
--- a/test/recipes/70-test_sslextension.t
+++ b/test/recipes/70-test_sslextension.t
@@ -26,6 +26,9 @@ plan skip_all => "$test_name needs the sock feature enabled"
 plan skip_all => "$test_name needs TLS enabled"
     if alldisabled(available_protocols("tls"));
 
+my $no_below_tls13 = alldisabled(("tls1", "tls1_1", "tls1_2"))
+                     || (!disabled("tls1_3") && disabled("tls1_2"));
+
 use constant {
     UNSOLICITED_SERVER_NAME => 0,
     UNSOLICITED_SERVER_NAME_TLS13 => 1,
@@ -37,16 +40,12 @@ my $testtype;
 
 $ENV{OPENSSL_ia32cap} = '~0x200000200000000';
 my $proxy = TLSProxy::Proxy->new(
-    \&extension_filter,
+    \&inject_duplicate_extension_clienthello,
     cmdstr(app(["openssl"]), display => 1),
     srctop_file("apps", "server.pem"),
     (!$ENV{HARNESS_ACTIVE} || $ENV{HARNESS_VERBOSE})
 );
 
-# Test 1: Sending a zero length extension block should pass
-$proxy->start() or plan skip_all => "Unable to start up Proxy for tests";
-plan tests => 7;
-ok(TLSProxy::Message->success, "Zero extension length test");
 
 sub extension_filter
 {
@@ -79,7 +78,6 @@ sub extension_filter
     }
 }
 
-# Test 2-3: Sending a duplicate extension should fail.
 sub inject_duplicate_extension
 {
   my ($proxy, $message_type) = @_;
@@ -119,16 +117,6 @@ sub inject_duplicate_extension_serverhello
     inject_duplicate_extension($proxy, TLSProxy::Message::MT_SERVER_HELLO);
 }
 
-$proxy->clear();
-$proxy->filter(\&inject_duplicate_extension_clienthello);
-$proxy->start();
-ok(TLSProxy::Message->fail(), "Duplicate ClientHello extension");
-
-$proxy->clear();
-$proxy->filter(\&inject_duplicate_extension_serverhello);
-$proxy->start();
-ok(TLSProxy::Message->fail(), "Duplicate ServerHello extension");
-
 sub inject_unsolicited_extension
 {
     my $proxy = shift;
@@ -162,8 +150,25 @@ sub inject_unsolicited_extension
     $message->repack();
 }
 
+# Test 1-2: Sending a duplicate extension should fail.
+$proxy->start() or plan skip_all => "Unable to start up Proxy for tests";
+plan tests => 7;
+ok(TLSProxy::Message->fail(), "Duplicate ClientHello extension");
+
+$proxy->clear();
+$proxy->filter(\&inject_duplicate_extension_serverhello);
+$proxy->start();
+ok(TLSProxy::Message->fail(), "Duplicate ServerHello extension");
+
 SKIP: {
-    skip "TLS <= 1.2 disabled", 2 if alldisabled(("tls1", "tls1_1", "tls1_2"));
+    skip "TLS <= 1.2 disabled", 3 if $no_below_tls13;
+
+    #Test 3: Sending a zero length extension block should pass
+    $proxy->clear();
+    $proxy->filter(\&extension_filter);
+    $proxy->start();
+    ok(TLSProxy::Message->success, "Zero extension length test");
+
     #Test 4: Inject an unsolicited extension (<= TLSv1.2)
     $proxy->clear();
     $proxy->filter(\&inject_unsolicited_extension);
@@ -183,7 +188,7 @@ SKIP: {
 
 SKIP: {
     skip "TLS <= 1.2 or CT disabled", 1
-        if alldisabled(("tls1", "tls1_1", "tls1_2")) || disabled("ct");
+        if $no_below_tls13 || disabled("ct");
     #Test 6: Same as above for the SCT extension which has special handling
     $proxy->clear();
     $testtype = UNSOLICITED_SCT;
diff --git a/test/recipes/70-test_sslmessages.t b/test/recipes/70-test_sslmessages.t
index abd6cc7..78d9737 100644
--- a/test/recipes/70-test_sslmessages.t
+++ b/test/recipes/70-test_sslmessages.t
@@ -26,7 +26,8 @@ plan skip_all => "$test_name needs the sock feature enabled"
     if disabled("sock");
 
 plan skip_all => "$test_name needs TLS enabled"
-    if alldisabled(available_protocols("tls"));
+    if alldisabled(available_protocols("tls"))
+       || (!disabled("tls1_3") && disabled("tls1_2"));
 
 $ENV{OPENSSL_ia32cap} = '~0x200000200000000';
 $ENV{CTLOG_FILE} = srctop_file("test", "ct", "log_list.conf");
diff --git a/test/recipes/70-test_sslsigalgs.t b/test/recipes/70-test_sslsigalgs.t
index 35531c6..fca53ac 100644
--- a/test/recipes/70-test_sslsigalgs.t
+++ b/test/recipes/70-test_sslsigalgs.t
@@ -216,13 +216,16 @@ SKIP: {
        "DSA/SHA2 sigalg sent for 1.3-only ClientHello");
 
     #Test 18: signature_algorithms with backwards compatible ClientHello
-    $testtype = COMPAT_SIGALGS;
-    $dsa_status = $sha1_status = $sha224_status = 0;
-    $proxy->clear();
-    $proxy->filter(\&modify_sigalgs_filter);
-    $proxy->start();
-    ok($dsa_status && $sha1_status && $sha224_status,
-       "DSA sigalg not sent for compat ClientHello");
+    SKIP: {
+        skip "TLSv1.2 disabled", 1 if disabled("tls1_2");
+        $testtype = COMPAT_SIGALGS;
+        $dsa_status = $sha1_status = $sha224_status = 0;
+        $proxy->clear();
+        $proxy->filter(\&modify_sigalgs_filter);
+        $proxy->start();
+        ok($dsa_status && $sha1_status && $sha224_status,
+           "DSA sigalg not sent for compat ClientHello");
+   }
 }
 
 SKIP: {
diff --git a/test/recipes/80-test_ssl_new.t b/test/recipes/80-test_ssl_new.t
index 26bcb39..bb60168 100644
--- a/test/recipes/80-test_ssl_new.t
+++ b/test/recipes/80-test_ssl_new.t
@@ -40,6 +40,7 @@ my $is_default_dtls = (!disabled("dtls1") && !disabled("dtls1_2"));
 
 my @all_pre_tls1_3 = ("ssl3", "tls1", "tls1_1", "tls1_2");
 my $no_tls = alldisabled(available_protocols("tls"));
+my $no_tls_below1_3 = $no_tls || (disabled("tls1_2") && !disabled("tls1_3"));
 my $no_pre_tls1_3 = alldisabled(@all_pre_tls1_3);
 my $no_dtls = alldisabled(available_protocols("dtls"));
 my $no_npn = disabled("nextprotoneg");
@@ -73,6 +74,7 @@ my %conf_dependent_tests = (
 # configurations. Default is $no_tls but some tests have different skip
 # conditions.
 my %skip = (
+  "06-sni-ticket.conf" => $no_tls_below1_3,
   "07-dtls-protocol-version.conf" => $no_dtls,
   "08-npn.conf" => (disabled("tls1") && disabled("tls1_1")
                     && disabled("tls1_2")) || $no_npn,
@@ -87,6 +89,7 @@ my %skip = (
   "14-curves.conf" => disabled("tls1_2") || $no_ec || $no_ec2m,
   "15-certstatus.conf" => $no_tls || $no_ocsp,
   "16-dtls-certstatus.conf" => $no_dtls || $no_ocsp,
+  "17-renegotiate.conf" => $no_tls_below1_3,
   "18-dtls-renegotiate.conf" => $no_dtls,
   "19-mac-then-encrypt.conf" => $no_pre_tls1_3,
   "20-cert-select.conf" => disabled("tls1_2") || $no_ec,
diff --git a/test/sslapitest.c b/test/sslapitest.c
index 483941a..c7b06e0 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -254,6 +254,7 @@ static int test_keylog_output(char *buffer, const SSL *ssl,
     return 1;
 }
 
+#if !defined(OPENSSL_NO_TLS1_2) || defined(OPENSSL_NO_TLS1_3)
 static int test_keylog(void)
 {
     SSL_CTX *cctx = NULL, *sctx = NULL;
@@ -330,6 +331,7 @@ end:
 
     return testresult;
 }
+#endif
 
 #ifndef OPENSSL_NO_TLS1_3
 static int test_keylog_no_master_key(void)
@@ -1273,6 +1275,7 @@ static int test_ssl_bio_change_wbio(void)
     return execute_test_ssl_bio(0, CHANGE_WBIO);
 }
 
+#if !defined(OPENSSL_NO_TLS1_2) || defined(OPENSSL_NO_TLS1_3)
 typedef struct {
     /* The list of sig algs */
     const int *list;
@@ -1287,25 +1290,25 @@ typedef struct {
 } sigalgs_list;
 
 static const int validlist1[] = {NID_sha256, EVP_PKEY_RSA};
-#ifndef OPENSSL_NO_EC
+# ifndef OPENSSL_NO_EC
 static const int validlist2[] = {NID_sha256, EVP_PKEY_RSA, NID_sha512, EVP_PKEY_EC};
 static const int validlist3[] = {NID_sha512, EVP_PKEY_EC};
-#endif
+# endif
 static const int invalidlist1[] = {NID_undef, EVP_PKEY_RSA};
 static const int invalidlist2[] = {NID_sha256, NID_undef};
 static const int invalidlist3[] = {NID_sha256, EVP_PKEY_RSA, NID_sha256};
 static const int invalidlist4[] = {NID_sha256};
 static const sigalgs_list testsigalgs[] = {
     {validlist1, OSSL_NELEM(validlist1), NULL, 1, 1},
-#ifndef OPENSSL_NO_EC
+# ifndef OPENSSL_NO_EC
     {validlist2, OSSL_NELEM(validlist2), NULL, 1, 1},
     {validlist3, OSSL_NELEM(validlist3), NULL, 1, 0},
-#endif
+# endif
     {NULL, 0, "RSA+SHA256", 1, 1},
-#ifndef OPENSSL_NO_EC
+# ifndef OPENSSL_NO_EC
     {NULL, 0, "RSA+SHA256:ECDSA+SHA512", 1, 1},
     {NULL, 0, "ECDSA+SHA512", 1, 0},
-#endif
+# endif
     {invalidlist1, OSSL_NELEM(invalidlist1), NULL, 0, 0},
     {invalidlist2, OSSL_NELEM(invalidlist2), NULL, 0, 0},
     {invalidlist3, OSSL_NELEM(invalidlist3), NULL, 0, 0},
@@ -1401,6 +1404,7 @@ static int test_set_sigalgs(int idx)
 
     return testresult;
 }
+#endif
 
 #ifndef OPENSSL_NO_TLS1_3
 
@@ -2778,6 +2782,12 @@ static int test_custom_exts(int tst)
     SSL_SESSION *sess = NULL;
     unsigned int context;
 
+#if defined(OPENSSL_NO_TLS1_2) && !defined(OPENSSL_NO_TLS1_3)
+    /* Skip tests for TLSv1.2 and below in this case */
+    if (tst < 3)
+        return 1;
+#endif
+
     /* Reset callback counters */
     clntaddoldcb = clntparseoldcb = srvaddoldcb = srvparseoldcb = 0;
     clntaddnewcb = clntparsenewcb = srvaddnewcb = srvparsenewcb = 0;
@@ -3389,8 +3399,10 @@ int setup_tests(void)
     ADD_TEST(test_ssl_bio_pop_ssl_bio);
     ADD_TEST(test_ssl_bio_change_rbio);
     ADD_TEST(test_ssl_bio_change_wbio);
+#if !defined(OPENSSL_NO_TLS1_2) || defined(OPENSSL_NO_TLS1_3)
     ADD_ALL_TESTS(test_set_sigalgs, OSSL_NELEM(testsigalgs) * 2);
     ADD_TEST(test_keylog);
+#endif
 #ifndef OPENSSL_NO_TLS1_3
     ADD_TEST(test_keylog_no_master_key);
 #endif

From no-reply at appveyor.com  Fri Feb  9 18:35:53 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 09 Feb 2018 18:35:53 +0000
Subject: [openssl-commits] Build failed: openssl master.15513
Message-ID: <20180209183553.1.C27237879742E3C6@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/70113413/attachment.html>

From builds at travis-ci.org  Fri Feb  9 18:22:51 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 09 Feb 2018 18:22:51 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16223 (master - c423eca)
In-Reply-To: <openssl/openssl+339573815+passed@travis-ci.org>
Message-ID: <5a7de760e92c3_43f9eb56081f8150652d@f0ddcd00-8376-4938-bd0e-d7bf1c278eb1.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16223
Status: Passed

Duration: 32 minutes and 20 seconds
Commit: c423eca (master)
Author: Matt Caswell
Message: Fixes for no-tls1_2 and no-tls1_2-method

The no-tls1_2 option does not work properly in conjunction with TLSv1.3
being enabled (which is now the default). This commit fixes the issues.

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5301)

View the changeset: https://github.com/openssl/openssl/compare/83739b39e55f...c423ecaa7f6d

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339573815?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180209/4e168516/attachment.html>

From bernd.edlinger at hotmail.de  Fri Feb  9 18:53:06 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Fri, 09 Feb 2018 18:53:06 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518202386.728355.24428.nullmailer@dev.openssl.org>

The branch master has been updated
       via  ebc20cfa746cb7dec91aff1e241063d785644fe3 (commit)
      from  c423ecaa7f6d0cc77c4f121c6de7d585439bca8f (commit)


- Log -----------------------------------------------------------------
commit ebc20cfa746cb7dec91aff1e241063d785644fe3
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Fri Feb 9 17:19:50 2018 +0100

    Swap the check in ssl3_write_pending to avoid using
    the possibly indeterminate pointer value in wpend_buf.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5305)

-----------------------------------------------------------------------

Summary of changes:
 ssl/record/rec_layer_s3.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ssl/record/rec_layer_s3.c b/ssl/record/rec_layer_s3.c
index 24e260e..fbb7461 100644
--- a/ssl/record/rec_layer_s3.c
+++ b/ssl/record/rec_layer_s3.c
@@ -1115,8 +1115,8 @@ int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
     size_t tmpwrit = 0;
 
     if ((s->rlayer.wpend_tot > len)
-        || ((s->rlayer.wpend_buf != buf) &&
-            !(s->mode & SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER))
+        || (!(s->mode & SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER)
+            && (s->rlayer.wpend_buf != buf))
         || (s->rlayer.wpend_type != type)) {
         SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_WRITE_PENDING,
                  SSL_R_BAD_WRITE_RETRY);

From bernd.edlinger at hotmail.de  Fri Feb  9 18:55:17 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Fri, 09 Feb 2018 18:55:17 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518202517.767847.25932.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  5a91d3888832d96400630e76a15121ead56aeeec (commit)
      from  622ddb57798bb5c895b0fe40e3fd89fdb4cdbc65 (commit)


- Log -----------------------------------------------------------------
commit 5a91d3888832d96400630e76a15121ead56aeeec
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Fri Feb 9 18:09:59 2018 +0100

    Swap the check in ssl3_write_pending to avoid using
    the possibly indeterminate pointer value in wpend_buf.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5307)

-----------------------------------------------------------------------

Summary of changes:
 ssl/record/rec_layer_s3.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/ssl/record/rec_layer_s3.c b/ssl/record/rec_layer_s3.c
index 3a0ed74..3cfefb3 100644
--- a/ssl/record/rec_layer_s3.c
+++ b/ssl/record/rec_layer_s3.c
@@ -894,10 +894,9 @@ int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
     SSL3_BUFFER *wb = s->rlayer.wbuf;
     unsigned int currbuf = 0;
 
-/* XXXX */
     if ((s->rlayer.wpend_tot > (int)len)
-        || ((s->rlayer.wpend_buf != buf) &&
-            !(s->mode & SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER))
+        || (!(s->mode & SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER)
+            && (s->rlayer.wpend_buf != buf))
         || (s->rlayer.wpend_type != type)) {
         SSLerr(SSL_F_SSL3_WRITE_PENDING, SSL_R_BAD_WRITE_RETRY);
         return (-1);

From bernd.edlinger at hotmail.de  Fri Feb  9 18:56:04 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Fri, 09 Feb 2018 18:56:04 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1518202564.918492.26701.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  575c69f97ca7c8cfaf2a448272f7a1615308acdd (commit)
      from  48081cf988fc8f50215a2b18babd6a7859defd36 (commit)


- Log -----------------------------------------------------------------
commit 575c69f97ca7c8cfaf2a448272f7a1615308acdd
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Fri Feb 9 19:31:36 2018 +0100

    Swap the check in ssl3_write_pending to avoid using
    the possibly indeterminate pointer value in wpend_buf.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5309)

-----------------------------------------------------------------------

Summary of changes:
 ssl/s3_pkt.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/ssl/s3_pkt.c b/ssl/s3_pkt.c
index d74a91d..c79a507 100644
--- a/ssl/s3_pkt.c
+++ b/ssl/s3_pkt.c
@@ -1096,10 +1096,9 @@ int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
     int i;
     SSL3_BUFFER *wb = &(s->s3->wbuf);
 
-/* XXXX */
     if ((s->s3->wpend_tot > (int)len)
-        || ((s->s3->wpend_buf != buf) &&
-            !(s->mode & SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER))
+        || (!(s->mode & SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER)
+            && (s->s3->wpend_buf != buf))
         || (s->s3->wpend_type != type)) {
         SSLerr(SSL_F_SSL3_WRITE_PENDING, SSL_R_BAD_WRITE_RETRY);
         return (-1);

From viktor at openssl.org  Sat Feb 10 02:08:14 2018
From: viktor at openssl.org (Viktor Dukhovni)
Date: Sat, 10 Feb 2018 02:08:14 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518228494.664477.3441.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4e0752535eb87b9aab4cf193f4422b5801ab7b32 (commit)
      from  ebc20cfa746cb7dec91aff1e241063d785644fe3 (commit)


- Log -----------------------------------------------------------------
commit 4e0752535eb87b9aab4cf193f4422b5801ab7b32
Author: Viktor Dukhovni <openssl-users at dukhovni.org>
Date:   Fri Feb 9 18:34:33 2018 -0500

    Avoid leaking peername data via accept BIOs
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/bss_acpt.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/crypto/bio/bss_acpt.c b/crypto/bio/bss_acpt.c
index e426ecd..72ad6a1 100644
--- a/crypto/bio/bss_acpt.c
+++ b/crypto/bio/bss_acpt.c
@@ -275,6 +275,11 @@ static int acpt_state(BIO *b, BIO_ACCEPT *c)
             BIO_clear_retry_flags(b);
             b->retry_reason = 0;
 
+            OPENSSL_free(c->cache_peer_name);
+            c->cache_peer_name = NULL;
+            OPENSSL_free(c->cache_peer_serv);
+            c->cache_peer_serv = NULL;
+
             s = BIO_accept_ex(c->accept_sock, &c->cache_peer_addr,
                               c->accepted_mode);
 

From viktor at openssl.org  Sat Feb 10 02:09:48 2018
From: viktor at openssl.org (Viktor Dukhovni)
Date: Sat, 10 Feb 2018 02:09:48 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518228588.476336.4262.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  04f53be990f9d1d7c5f7b8f10568df6ebafccf65 (commit)
      from  5a91d3888832d96400630e76a15121ead56aeeec (commit)


- Log -----------------------------------------------------------------
commit 04f53be990f9d1d7c5f7b8f10568df6ebafccf65
Author: Viktor Dukhovni <openssl-users at dukhovni.org>
Date:   Fri Feb 9 18:34:33 2018 -0500

    Avoid leaking peername data via accept BIOs
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (cherry picked from commit 4e0752535eb87b9aab4cf193f4422b5801ab7b32)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/bss_acpt.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/crypto/bio/bss_acpt.c b/crypto/bio/bss_acpt.c
index f0fe7f0..4be4781 100644
--- a/crypto/bio/bss_acpt.c
+++ b/crypto/bio/bss_acpt.c
@@ -271,6 +271,11 @@ static int acpt_state(BIO *b, BIO_ACCEPT *c)
             BIO_clear_retry_flags(b);
             b->retry_reason = 0;
 
+            OPENSSL_free(c->cache_peer_name);
+            c->cache_peer_name = NULL;
+            OPENSSL_free(c->cache_peer_serv);
+            c->cache_peer_serv = NULL;
+
             s = BIO_accept_ex(c->accept_sock, &c->cache_peer_addr,
                               c->accepted_mode);
 

From no-reply at appveyor.com  Sat Feb 10 18:09:11 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sat, 10 Feb 2018 18:09:11 +0000
Subject: [openssl-commits] Build failed: openssl master.15531
Message-ID: <20180210180911.1.CE4E1E09889239CF@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180210/143736f9/attachment.html>

From no-reply at appveyor.com  Sat Feb 10 18:35:41 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sat, 10 Feb 2018 18:35:41 +0000
Subject: [openssl-commits] Build completed: openssl master.15532
Message-ID: <20180210183541.1.7C3777A7B296B0B9@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180210/936dc038/attachment.html>

From rsalz at openssl.org  Sat Feb 10 19:11:46 2018
From: rsalz at openssl.org (Rich Salz)
Date: Sat, 10 Feb 2018 19:11:46 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518289906.369257.2848.nullmailer@dev.openssl.org>

The branch master has been updated
       via  6dbe4dc4752484e1628e854dce46ef48faaf3384 (commit)
      from  4e0752535eb87b9aab4cf193f4422b5801ab7b32 (commit)


- Log -----------------------------------------------------------------
commit 6dbe4dc4752484e1628e854dce46ef48faaf3384
Author: Rich Salz <rsalz at openssl.org>
Date:   Sat Feb 10 13:36:47 2018 -0500

    Copy name string in BIO_meth_new
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5318)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/bio_err.c     |  3 ++-
 crypto/bio/bio_meth.c    | 14 ++++++++++----
 crypto/err/openssl.txt   |  1 +
 include/internal/bio.h   |  2 +-
 include/openssl/bioerr.h |  1 +
 5 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/crypto/bio/bio_err.c b/crypto/bio/bio_err.c
index 50fc74b..20f3aa1 100644
--- a/crypto/bio/bio_err.c
+++ b/crypto/bio/bio_err.c
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -30,6 +30,7 @@ static const ERR_STRING_DATA BIO_str_functs[] = {
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_LOOKUP, 0), "BIO_lookup"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_LOOKUP_EX, 0), "BIO_lookup_ex"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_MAKE_PAIR, 0), "bio_make_pair"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_METH_NEW, 0), "BIO_meth_new"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NEW, 0), "BIO_new"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NEW_DGRAM_SCTP, 0), "BIO_new_dgram_sctp"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_NEW_FILE, 0), "BIO_new_file"},
diff --git a/crypto/bio/bio_meth.c b/crypto/bio/bio_meth.c
index 1c5d196..a1fff14 100644
--- a/crypto/bio/bio_meth.c
+++ b/crypto/bio/bio_meth.c
@@ -37,16 +37,22 @@ BIO_METHOD *BIO_meth_new(int type, const char *name)
 {
     BIO_METHOD *biom = OPENSSL_zalloc(sizeof(BIO_METHOD));
 
-    if (biom != NULL) {
-        biom->type = type;
-        biom->name = name;
+    if (biom == NULL
+            || (biom->name = OPENSSL_strdup(name)) == NULL) {
+        OPENSSL_free(biom);
+        BIOerr(BIO_F_BIO_METH_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
     }
+    biom->type = type;
     return biom;
 }
 
 void BIO_meth_free(BIO_METHOD *biom)
 {
-    OPENSSL_free(biom);
+    if (biom != NULL) {
+        OPENSSL_free(biom->name);
+        OPENSSL_free(biom);
+    }
 }
 
 int (*BIO_meth_get_write(BIO_METHOD *biom)) (BIO *, const char *, int)
diff --git a/crypto/err/openssl.txt b/crypto/err/openssl.txt
index fb3be57..3ed71fe 100644
--- a/crypto/err/openssl.txt
+++ b/crypto/err/openssl.txt
@@ -127,6 +127,7 @@ BIO_F_BIO_LISTEN:139:BIO_listen
 BIO_F_BIO_LOOKUP:135:BIO_lookup
 BIO_F_BIO_LOOKUP_EX:143:BIO_lookup_ex
 BIO_F_BIO_MAKE_PAIR:121:bio_make_pair
+BIO_F_BIO_METH_NEW:146:BIO_meth_new
 BIO_F_BIO_NEW:108:BIO_new
 BIO_F_BIO_NEW_DGRAM_SCTP:145:BIO_new_dgram_sctp
 BIO_F_BIO_NEW_FILE:109:BIO_new_file
diff --git a/include/internal/bio.h b/include/internal/bio.h
index 4428947..5334d48 100644
--- a/include/internal/bio.h
+++ b/include/internal/bio.h
@@ -11,7 +11,7 @@
 
 struct bio_method_st {
     int type;
-    const char *name;
+    char *name;
     int (*bwrite) (BIO *, const char *, size_t, size_t *);
     int (*bwrite_old) (BIO *, const char *, int);
     int (*bread) (BIO *, char *, size_t, size_t *);
diff --git a/include/openssl/bioerr.h b/include/openssl/bioerr.h
index b0dee2b..7a552d6 100644
--- a/include/openssl/bioerr.h
+++ b/include/openssl/bioerr.h
@@ -35,6 +35,7 @@ int ERR_load_BIO_strings(void);
 # define BIO_F_BIO_LOOKUP                                 135
 # define BIO_F_BIO_LOOKUP_EX                              143
 # define BIO_F_BIO_MAKE_PAIR                              121
+# define BIO_F_BIO_METH_NEW                               146
 # define BIO_F_BIO_NEW                                    108
 # define BIO_F_BIO_NEW_DGRAM_SCTP                         145
 # define BIO_F_BIO_NEW_FILE                               109

From builds at travis-ci.org  Sat Feb 10 19:46:47 2018
From: builds at travis-ci.org (Travis CI)
Date: Sat, 10 Feb 2018 19:46:47 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16242 (master - 6dbe4dc)
In-Reply-To: <openssl/openssl+339922163+errored@travis-ci.org>
Message-ID: <5a7f4c0b4ffe2_43fa7f1b576a0909688@a78be352-9cf7-4e6f-8b16-90c5c66429c2.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16242
Status: Errored

Duration: 33 minutes and 42 seconds
Commit: 6dbe4dc (master)
Author: Rich Salz
Message: Copy name string in BIO_meth_new

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5318)

View the changeset: https://github.com/openssl/openssl/compare/4e0752535eb8...6dbe4dc47524

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/339922163?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180210/33010137/attachment.html>

From rsalz at openssl.org  Sat Feb 10 20:15:48 2018
From: rsalz at openssl.org (Rich Salz)
Date: Sat, 10 Feb 2018 20:15:48 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518293748.764833.9981.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  ecd72c0028525f2f476838530e7c32bb191d3659 (commit)
      from  04f53be990f9d1d7c5f7b8f10568df6ebafccf65 (commit)


- Log -----------------------------------------------------------------
commit ecd72c0028525f2f476838530e7c32bb191d3659
Author: Rich Salz <rsalz at openssl.org>
Date:   Sat Feb 10 15:07:39 2018 -0500

    Copy name string in BIO_meth_new
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5319)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/bio_err.c   |  3 ++-
 crypto/bio/bio_meth.c  | 13 +++++++++----
 include/internal/bio.h |  2 +-
 include/openssl/bio.h  |  1 +
 4 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/crypto/bio/bio_err.c b/crypto/bio/bio_err.c
index 98c90d6..c914dcf 100644
--- a/crypto/bio/bio_err.c
+++ b/crypto/bio/bio_err.c
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,6 +34,7 @@ static ERR_STRING_DATA BIO_str_functs[] = {
     {ERR_FUNC(BIO_F_BIO_LISTEN), "BIO_listen"},
     {ERR_FUNC(BIO_F_BIO_LOOKUP), "BIO_lookup"},
     {ERR_FUNC(BIO_F_BIO_MAKE_PAIR), "bio_make_pair"},
+    {ERR_FUNC(BIO_F_BIO_METH_NEW), "BIO_meth_new"},
     {ERR_FUNC(BIO_F_BIO_NEW), "BIO_new"},
     {ERR_FUNC(BIO_F_BIO_NEW_FILE), "BIO_new_file"},
     {ERR_FUNC(BIO_F_BIO_NEW_MEM_BUF), "BIO_new_mem_buf"},
diff --git a/crypto/bio/bio_meth.c b/crypto/bio/bio_meth.c
index 1e2efb8..f89bba8 100644
--- a/crypto/bio/bio_meth.c
+++ b/crypto/bio/bio_meth.c
@@ -37,16 +37,21 @@ BIO_METHOD *BIO_meth_new(int type, const char *name)
 {
     BIO_METHOD *biom = OPENSSL_zalloc(sizeof(BIO_METHOD));
 
-    if (biom != NULL) {
-        biom->type = type;
-        biom->name = name;
+    if (biom == NULL
+            || (biom->name = OPENSSL_strdup(name)) == NULL) {
+        OPENSSL_free(biom);
+        BIOerr(BIO_F_BIO_METH_NEW, ERR_R_MALLOC_FAILURE);
+        return NULL;
     }
     return biom;
 }
 
 void BIO_meth_free(BIO_METHOD *biom)
 {
-    OPENSSL_free(biom);
+    if (biom != NULL) {
+        OPENSSL_free(biom->name);
+        OPENSSL_free(biom);
+    }
 }
 
 int (*BIO_meth_get_write(BIO_METHOD *biom)) (BIO *, const char *, int)
diff --git a/include/internal/bio.h b/include/internal/bio.h
index 2495acb..08ac984 100644
--- a/include/internal/bio.h
+++ b/include/internal/bio.h
@@ -11,7 +11,7 @@
 
 struct bio_method_st {
     int type;
-    const char *name;
+    char *name;
     int (*bwrite) (BIO *, const char *, int);
     int (*bread) (BIO *, char *, int);
     int (*bputs) (BIO *, const char *);
diff --git a/include/openssl/bio.h b/include/openssl/bio.h
index 7b98e9e..83eca77 100644
--- a/include/openssl/bio.h
+++ b/include/openssl/bio.h
@@ -781,6 +781,7 @@ int ERR_load_BIO_strings(void);
 # define BIO_F_BIO_LISTEN                                 139
 # define BIO_F_BIO_LOOKUP                                 135
 # define BIO_F_BIO_MAKE_PAIR                              121
+# define BIO_F_BIO_METH_NEW                               146
 # define BIO_F_BIO_NEW                                    108
 # define BIO_F_BIO_NEW_FILE                               109
 # define BIO_F_BIO_NEW_MEM_BUF                            126

From scan-admin at coverity.com  Sun Feb 11 08:03:13 2018
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Sun, 11 Feb 2018 08:03:13 +0000 (UTC)
Subject: [openssl-commits] Coverity Scan: Analysis completed for
	openssl/openssl
Message-ID: <5a7ff8c134c18_1488e1154f189287b@node1.mail>


    Your request for analysis of openssl/openssl has been completed successfully.
    The results are available at https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRakUl6QyjujEohY7rPpoYUEcf-2B75FkFkxwwFKGZV8c1xA-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I1mGLhmII6TZTXgMewZxilfXvF3AglN4CfwdNbl-2BJAop6U6fGxGBJrITmPCEpVw6NdctJRO8Is8BMMfNaKmetlyJTgdWZHG0BVFsdD6aS-2Fjet2kb4XbUPQm6ZWZeGeQRRwmnIln13HgEOqmQvMyI7qK-2FKA1uXPUvJLEHJr4D5gqL79f4PelKXdegzrwe7wxWK4-3D

    Build ID: 200221

    Analysis Summary:
       New defects found: 1
       Defects eliminated: 2

    If you have difficulty understanding any defects, email us at scan-admin at coverity.com,
    or post your question to StackOverflow
    at https://u2389337.ct.sendgrid.net/wf/click?upn=OgIsEqWzmIl4S-2FzEUMxLXL-2BukuZt9UUdRZhgmgzAKchwAzH1nH3073xDEXNRgHN6q227lMNIWoOb8ZgSjAjKcg-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I1mGLhmII6TZTXgMewZxilfXvF3AglN4CfwdNbl-2BJAopxZR1bz1PY8vmOcaGdVHthAbOnpxbHivAv2ug-2Fmcs36fpHphGk1wchLTz-2F3-2FnNLMGAqerqASzgF6uYOaeaTgOp3XGKgOLZpqjtVKAKqxq-2B2M3KeUh2XCBQUyvGxrIjL2b302MbJyO84fG-2FZnOCyu8Kc-3D

From scan-admin at coverity.com  Sun Feb 11 08:07:22 2018
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Sun, 11 Feb 2018 08:07:22 +0000 (UTC)
Subject: [openssl-commits] Coverity Scan: Analysis completed for
	OpenSSL-1.0.2
Message-ID: <5a7ff9b96bc5f_14c6d1154f18928d9@node1.mail>


    Your request for analysis of OpenSSL-1.0.2 has been completed successfully.
    The results are available at https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRakUl6QyjujEohY7rPpoYUEeuRTZVWU4ku8PUBnVPw8PQ-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I0HQl2XmZcizTIq3KP4A4r-2BE5Xu-2BnJCORWwk5CFAIEfe4-2BmK-2FvfWVlN-2BRZLlk8U3Oh5GQ6WurDPO3E0cyLHnsNdFS9b2UKsUDGkMn0FnCMSl5-2FzKP4s4pBEY6bv-2BmH5pn4fVOMKQVrC2YWSQISH8xBbD02hzO-2B9DIk7xlhwKwaPypsTq9-2BT6Joz0O48gX5NkFc-3D

    Build ID: 200223

    Analysis Summary:
       New defects found: 0
       Defects eliminated: 0


From rsalz at openssl.org  Sun Feb 11 16:31:55 2018
From: rsalz at openssl.org (Rich Salz)
Date: Sun, 11 Feb 2018 16:31:55 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518366715.824862.11521.nullmailer@dev.openssl.org>

The branch master has been updated
       via  c684a2d34d0da6967734bea051843263c5a76f34 (commit)
      from  6dbe4dc4752484e1628e854dce46ef48faaf3384 (commit)


- Log -----------------------------------------------------------------
commit c684a2d34d0da6967734bea051843263c5a76f34
Author: Dani?l van Eeden <git at myname.nl>
Date:   Sun Feb 11 10:55:38 2018 -0500

    Fix include in manpage of X509_check_host
    
    Fixes Issue #5255
    
    CLA: trivial
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5256)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/X509_check_host.pod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/man3/X509_check_host.pod b/doc/man3/X509_check_host.pod
index 9384815..793a8ed 100644
--- a/doc/man3/X509_check_host.pod
+++ b/doc/man3/X509_check_host.pod
@@ -6,7 +6,7 @@ X509_check_host, X509_check_email, X509_check_ip, X509_check_ip_asc - X.509 cert
 
 =head1 SYNOPSIS
 
- #include <openssl/x509.h>
+ #include <openssl/x509v3.h>
 
  int X509_check_host(X509 *, const char *name, size_t namelen,
                      unsigned int flags, char **peername);

From builds at travis-ci.org  Sun Feb 11 17:03:55 2018
From: builds at travis-ci.org (Travis CI)
Date: Sun, 11 Feb 2018 17:03:55 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16253 (master - c684a2d)
In-Reply-To: <openssl/openssl+340170235+errored@travis-ci.org>
Message-ID: <5a80777b1da_43fe591135018740257@b61537db-7af1-43ff-b04c-e774d06038e3.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16253
Status: Errored

Duration: 31 minutes and 13 seconds
Commit: c684a2d (master)
Author: Dani?l van Eeden
Message: Fix include in manpage of X509_check_host

Fixes Issue #5255

CLA: trivial

Reviewed-by: Andy Polyakov <appro at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5256)

View the changeset: https://github.com/openssl/openssl/compare/6dbe4dc47524...c684a2d34d0d

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/340170235?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180211/5a9a0c5b/attachment.html>

From no-reply at appveyor.com  Mon Feb 12 03:12:23 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 12 Feb 2018 03:12:23 +0000
Subject: [openssl-commits] Build failed: openssl master.15550
Message-ID: <20180212031223.1.F1DD655BE7579F72@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180212/4bbac8af/attachment.html>

From openssl at openssl.org  Mon Feb 12 08:33:07 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Mon, 12 Feb 2018 08:33:07 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings no-nextprotoneg
Message-ID: <1518424387.834922.26317.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-nextprotoneg

Commit log since last time:

c684a2d Fix include in manpage of X509_check_host
6dbe4dc Copy name string in BIO_meth_new
4e07525 Avoid leaking peername data via accept BIOs
ebc20cf Swap the check in ssl3_write_pending to avoid using the possibly indeterminate pointer value in wpend_buf.
c423eca Fixes for no-tls1_2 and no-tls1_2-method
83739b3 Run "make update"
41e9afa In err_all.c, include the *err.h headers.
5773f7b Improve #include structure of pem{,2}.h
a5d0d6b Remove redundant declarations of ERR_load_*_strings()
5d67110 Don't calculate the Finished MAC twice
368297d Configuration: move the handling of zlib_include to config files
f3ac964 Turn off printf format checking for BIO_printf et al on Mac OS/X
a699b8e Small simplification in mkerr.pl
2e8b0ef VMS: take care of includes
4cd5877 Fix glibc version detection. Simplify Posix timer detection.
fd87700 Fix check of cpuid_asm_src config attribute
a6da6b7 Revert ".travis.yml: remove osx from build matrix."
b9ed9ab CRYPTO_THREAD_run_once.pod: fix typo and punktuation

From no-reply at appveyor.com  Mon Feb 12 09:02:30 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 12 Feb 2018 09:02:30 +0000
Subject: [openssl-commits] Build completed: openssl master.15551
Message-ID: <20180212090230.1.C43CF11520C3DDAF@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180212/1b64e448/attachment-0001.html>

From matt at openssl.org  Mon Feb 12 10:04:35 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 12 Feb 2018 10:04:35 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518429875.396879.12455.nullmailer@dev.openssl.org>

The branch master has been updated
       via  7e70213fe3c79461ad3d776a8de1a5beff4bea78 (commit)
      from  c684a2d34d0da6967734bea051843263c5a76f34 (commit)


- Log -----------------------------------------------------------------
commit 7e70213fe3c79461ad3d776a8de1a5beff4bea78
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Feb 9 16:39:27 2018 +0000

    Don't overestimate the ticket age
    
    On the client we calculate the age of the ticket in seconds but the server
    may work in ms. Due to rounding errors we could overestimate the age by up
    to 1s. It is better to underestimate it. Otherwise, if the RTT is very
    short, when the server calculates the age reported by the client it could
    be bigger than the age calculated on the server - which should never happen.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5306)

-----------------------------------------------------------------------

Summary of changes:
 ssl/statem/extensions_clnt.c | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/ssl/statem/extensions_clnt.c b/ssl/statem/extensions_clnt.c
index 6286242..477536c 100644
--- a/ssl/statem/extensions_clnt.c
+++ b/ssl/statem/extensions_clnt.c
@@ -998,6 +998,16 @@ EXT_RETURN tls_construct_ctos_psk(SSL *s, WPACKET *pkt, unsigned int context,
          */
         now = (uint32_t)time(NULL);
         agesec = now - (uint32_t)s->session->time;
+        /*
+         * We calculate the age in seconds but the server may work in ms. Due to
+         * rounding errors we could overestimate the age by up to 1s. It is
+         * better to underestimate it. Otherwise, if the RTT is very short, when
+         * the server calculates the age reported by the client it could be
+         * bigger than the age calculated on the server - which should never
+         * happen.
+         */
+        if (agesec > 0)
+            agesec--;
 
         if (s->session->ext.tick_lifetime_hint < agesec) {
             /* Ticket is too old. Ignore it. */

From matt at openssl.org  Mon Feb 12 10:09:17 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 12 Feb 2018 10:09:17 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518430157.341861.14026.nullmailer@dev.openssl.org>

The branch master has been updated
       via  1d0c08b4963f5f7e1d1855e360417a11973d8455 (commit)
      from  7e70213fe3c79461ad3d776a8de1a5beff4bea78 (commit)


- Log -----------------------------------------------------------------
commit 1d0c08b4963f5f7e1d1855e360417a11973d8455
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Feb 9 18:03:08 2018 +0000

    The function ssl_get_min_max_version() can fail
    
    We should always check the return code.
    
    This fixes a coverity issue.
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5308)

-----------------------------------------------------------------------

Summary of changes:
 ssl/ssl_lib.c            | 4 +++-
 ssl/ssl_locl.h           | 5 +++--
 ssl/statem/statem_clnt.c | 7 ++++++-
 ssl/t1_lib.c             | 7 +++++--
 4 files changed, 17 insertions(+), 6 deletions(-)

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 68a9b19..6a5c03d 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -2454,10 +2454,12 @@ STACK_OF(SSL_CIPHER) *SSL_get1_supported_ciphers(SSL *s)
 {
     STACK_OF(SSL_CIPHER) *sk = NULL, *ciphers;
     int i;
+
     ciphers = SSL_get_ciphers(s);
     if (!ciphers)
         return NULL;
-    ssl_set_client_disabled(s);
+    if (!ssl_set_client_disabled(s))
+        return NULL;
     for (i = 0; i < sk_SSL_CIPHER_num(ciphers); i++) {
         const SSL_CIPHER *c = sk_SSL_CIPHER_value(ciphers, i);
         if (!ssl_cipher_disabled(s, c, SSL_SECOP_CIPHER_SUPPORTED, 0)) {
diff --git a/ssl/ssl_locl.h b/ssl/ssl_locl.h
index 221d5b9..b590b53 100644
--- a/ssl/ssl_locl.h
+++ b/ssl/ssl_locl.h
@@ -2310,7 +2310,8 @@ __owur int ssl_choose_server_version(SSL *s, CLIENTHELLO_MSG *hello,
                                      DOWNGRADE *dgrd);
 __owur int ssl_choose_client_version(SSL *s, int version,
                                      RAW_EXTENSION *extensions);
-int ssl_get_min_max_version(const SSL *s, int *min_version, int *max_version);
+__owur int ssl_get_min_max_version(const SSL *s, int *min_version,
+                                   int *max_version);
 
 __owur long tls1_default_timeout(void);
 __owur int dtls1_do_write(SSL *s, int type);
@@ -2501,7 +2502,7 @@ __owur int tls1_set_peer_legacy_sigalg(SSL *s, const EVP_PKEY *pkey);
 __owur int tls1_lookup_md(const SIGALG_LOOKUP *lu, const EVP_MD **pmd);
 __owur size_t tls12_get_psigalgs(SSL *s, int sent, const uint16_t **psigs);
 __owur int tls12_check_peer_sigalg(SSL *s, uint16_t, EVP_PKEY *pkey);
-void ssl_set_client_disabled(SSL *s);
+__owur int ssl_set_client_disabled(SSL *s);
 __owur int ssl_cipher_disabled(SSL *s, const SSL_CIPHER *c, int op, int echde);
 
 __owur int ssl_handshake_hash(SSL *s, unsigned char *out, size_t outlen,
diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c
index f224da6..d770706 100644
--- a/ssl/statem/statem_clnt.c
+++ b/ssl/statem/statem_clnt.c
@@ -3650,8 +3650,13 @@ int ssl_cipher_list_to_bytes(SSL *s, STACK_OF(SSL_CIPHER) *sk, WPACKET *pkt)
     int i;
     size_t totlen = 0, len, maxlen, maxverok = 0;
     int empty_reneg_info_scsv = !s->renegotiate;
+
     /* Set disabled masks for this session */
-    ssl_set_client_disabled(s);
+    if (!ssl_set_client_disabled(s)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CIPHER_LIST_TO_BYTES,
+                 SSL_R_NO_PROTOCOLS_AVAILABLE);
+        return 0;
+    }
 
     if (sk == NULL) {
         SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL_CIPHER_LIST_TO_BYTES,
diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 7109741..3965be9 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1051,12 +1051,14 @@ int SSL_get_peer_signature_type_nid(const SSL *s, int *pnid)
  *
  * Call ssl_cipher_disabled() to check that it's enabled or not.
  */
-void ssl_set_client_disabled(SSL *s)
+int ssl_set_client_disabled(SSL *s)
 {
     s->s3->tmp.mask_a = 0;
     s->s3->tmp.mask_k = 0;
     ssl_set_sig_mask(&s->s3->tmp.mask_a, s, SSL_SECOP_SIGALG_MASK);
-    ssl_get_min_max_version(s, &s->s3->tmp.min_ver, &s->s3->tmp.max_ver);
+    if (ssl_get_min_max_version(s, &s->s3->tmp.min_ver,
+                                &s->s3->tmp.max_ver) != 0)
+        return 0;
 #ifndef OPENSSL_NO_PSK
     /* with PSK there must be client callback set */
     if (!s->psk_client_callback) {
@@ -1070,6 +1072,7 @@ void ssl_set_client_disabled(SSL *s)
         s->s3->tmp.mask_k |= SSL_kSRP;
     }
 #endif
+    return 1;
 }
 
 /*

From appro at openssl.org  Mon Feb 12 13:05:16 2018
From: appro at openssl.org (Andy Polyakov)
Date: Mon, 12 Feb 2018 13:05:16 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518440716.477356.4692.nullmailer@dev.openssl.org>

The branch master has been updated
       via  af0fcf7b4668218b24d9250b95e0b96939ccb4d1 (commit)
       via  77f3612e2bd930b27dcab63fdcca1d7091cb948d (commit)
      from  1d0c08b4963f5f7e1d1855e360417a11973d8455 (commit)


- Log -----------------------------------------------------------------
commit af0fcf7b4668218b24d9250b95e0b96939ccb4d1
Author: Andy Polyakov <appro at openssl.org>
Date:   Sun Feb 11 12:29:47 2018 +0100

    sha/asm/sha512-armv8.pl: add hardware-assisted SHA512 subroutine.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>

commit 77f3612e2bd930b27dcab63fdcca1d7091cb948d
Author: Andy Polyakov <appro at openssl.org>
Date:   Sun Feb 11 12:29:06 2018 +0100

    crypto/armcap.c: detect hardware-assisted SHA512 support.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 crypto/arm64cpuid.pl           |   8 +++
 crypto/arm_arch.h              |   1 +
 crypto/armcap.c                |  15 +++++
 crypto/sha/asm/sha512-armv8.pl | 130 ++++++++++++++++++++++++++++++++++++++++-
 4 files changed, 151 insertions(+), 3 deletions(-)

diff --git a/crypto/arm64cpuid.pl b/crypto/arm64cpuid.pl
index caa3387..68734f5 100755
--- a/crypto/arm64cpuid.pl
+++ b/crypto/arm64cpuid.pl
@@ -63,6 +63,7 @@ _armv8_sha256_probe:
 	sha256su0	v0.4s, v0.4s
 	ret
 .size	_armv8_sha256_probe,.-_armv8_sha256_probe
+
 .globl	_armv8_pmull_probe
 .type	_armv8_pmull_probe,%function
 _armv8_pmull_probe:
@@ -70,6 +71,13 @@ _armv8_pmull_probe:
 	ret
 .size	_armv8_pmull_probe,.-_armv8_pmull_probe
 
+.globl	_armv8_sha512_probe
+.type	_armv8_sha512_probe,%function
+_armv8_sha512_probe:
+	.long	0xcec08000	// sha512su0	v0.2d,v0.2d
+	ret
+.size	_armv8_sha512_probe,.-_armv8_sha512_probe
+
 .globl	OPENSSL_cleanse
 .type	OPENSSL_cleanse,%function
 .align	5
diff --git a/crypto/arm_arch.h b/crypto/arm_arch.h
index 8b41408..395ada6 100644
--- a/crypto/arm_arch.h
+++ b/crypto/arm_arch.h
@@ -79,5 +79,6 @@ extern unsigned int OPENSSL_armcap_P;
 # define ARMV8_SHA1      (1<<3)
 # define ARMV8_SHA256    (1<<4)
 # define ARMV8_PMULL     (1<<5)
+# define ARMV8_SHA512    (1<<6)
 
 #endif
diff --git a/crypto/armcap.c b/crypto/armcap.c
index a1f77fa..deffd93 100644
--- a/crypto/armcap.c
+++ b/crypto/armcap.c
@@ -46,6 +46,9 @@ void _armv8_aes_probe(void);
 void _armv8_sha1_probe(void);
 void _armv8_sha256_probe(void);
 void _armv8_pmull_probe(void);
+# ifdef __aarch64__
+void _armv8_sha512_probe(void);
+# endif
 uint32_t _armv7_tick(void);
 
 uint32_t OPENSSL_rdtsc(void)
@@ -94,6 +97,7 @@ static unsigned long (*getauxval) (unsigned long) = NULL;
 #  define HWCAP_CE_PMULL         (1 << 4)
 #  define HWCAP_CE_SHA1          (1 << 5)
 #  define HWCAP_CE_SHA256        (1 << 6)
+#  define HWCAP_CE_SHA512        (1 << 21)
 # endif
 
 void OPENSSL_cpuid_setup(void)
@@ -163,6 +167,11 @@ void OPENSSL_cpuid_setup(void)
 
             if (hwcap & HWCAP_CE_SHA256)
                 OPENSSL_armcap_P |= ARMV8_SHA256;
+
+# ifdef __aarch64__
+            if (hwcap & HWCAP_CE_SHA512)
+                OPENSSL_armcap_P |= ARMV8_SHA512;
+# endif
         }
     } else if (sigsetjmp(ill_jmp, 1) == 0) {
         _armv7_neon_probe();
@@ -182,6 +191,12 @@ void OPENSSL_cpuid_setup(void)
             _armv8_sha256_probe();
             OPENSSL_armcap_P |= ARMV8_SHA256;
         }
+# ifdef __aarch64__
+        if (sigsetjmp(ill_jmp, 1) == 0) {
+            _armv8_sha512_probe();
+            OPENSSL_armcap_P |= ARMV8_SHA512;
+        }
+# endif
     }
     if (sigsetjmp(ill_jmp, 1) == 0) {
         _armv7_tick();
diff --git a/crypto/sha/asm/sha512-armv8.pl b/crypto/sha/asm/sha512-armv8.pl
index a4755e6..2f8644c 100644
--- a/crypto/sha/asm/sha512-armv8.pl
+++ b/crypto/sha/asm/sha512-armv8.pl
@@ -197,8 +197,6 @@ $code.=<<___;
 .type	$func,%function
 .align	6
 $func:
-___
-$code.=<<___	if ($SZ==4);
 #ifndef	__KERNEL__
 # ifdef	__ILP32__
 	ldrsw	x16,.LOPENSSL_armcap_P
@@ -208,13 +206,19 @@ $code.=<<___	if ($SZ==4);
 	adr	x17,.LOPENSSL_armcap_P
 	add	x16,x16,x17
 	ldr	w16,[x16]
+___
+$code.=<<___	if ($SZ==4);
 	tst	w16,#ARMV8_SHA256
 	b.ne	.Lv8_entry
 	tst	w16,#ARMV7_NEON
 	b.ne	.Lneon_entry
-#endif
+___
+$code.=<<___	if ($SZ==8);
+	tst	w16,#ARMV8_SHA512
+	b.ne	.Lv8_entry
 ___
 $code.=<<___;
+#endif
 	stp	x29,x30,[sp,#-128]!
 	add	x29,sp,#0
 
@@ -732,6 +736,108 @@ $code.=<<___;
 ___
 }
 
+if ($SZ==8) {
+my $Ktbl="x3";
+
+my @H = map("v$_.16b",(0..4));
+my ($fg,$de,$m9_10)=map("v$_.16b",(5..7));
+my @MSG=map("v$_.16b",(16..23));
+my ($W0,$W1)=("v24.2d","v25.2d");
+my ($AB,$CD,$EF,$GH)=map("v$_.16b",(26..29));
+
+$code.=<<___;
+#ifndef	__KERNEL__
+.type	sha512_block_armv8,%function
+.align	6
+sha512_block_armv8:
+.Lv8_entry:
+	stp		x29,x30,[sp,#-16]!
+	add		x29,sp,#0
+
+	ld1		{@MSG[0]- at MSG[3]},[$inp],#64	// load input
+	ld1		{@MSG[4]- at MSG[7]},[$inp],#64
+
+	ld1.64		{@H[0]- at H[3]},[$ctx]		// load context
+	adr		$Ktbl,.LK512
+
+	rev64		@MSG[0], at MSG[0]
+	rev64		@MSG[1], at MSG[1]
+	rev64		@MSG[2], at MSG[2]
+	rev64		@MSG[3], at MSG[3]
+	rev64		@MSG[4], at MSG[4]
+	rev64		@MSG[5], at MSG[5]
+	rev64		@MSG[6], at MSG[6]
+	rev64		@MSG[7], at MSG[7]
+	b		.Loop_hw
+
+.align	4
+.Loop_hw:
+	ld1.64		{$W0},[$Ktbl],#16
+	subs		$num,$num,#1
+	sub		x4,$inp,#128
+	orr		$AB, at H[0], at H[0]			// offload
+	orr		$CD, at H[1], at H[1]
+	orr		$EF, at H[2], at H[2]
+	orr		$GH, at H[3], at H[3]
+	csel		$inp,$inp,x4,ne			// conditional rewind
+___
+for($i=0;$i<32;$i++) {
+$code.=<<___;
+	add.i64		$W0,$W0, at MSG[0]
+	ld1.64		{$W1},[$Ktbl],#16
+	ext		$W0,$W0,$W0,#8
+	ext		$fg, at H[2], at H[3],#8
+	ext		$de, at H[1], at H[2],#8
+	add.i64		@H[3], at H[3],$W0			// "T1 + H + K512[i]"
+	 sha512su0	@MSG[0], at MSG[1]
+	 ext		$m9_10, at MSG[4], at MSG[5],#8
+	sha512h		@H[3],$fg,$de
+	 sha512su1	@MSG[0], at MSG[7],$m9_10
+	add.i64		@H[4], at H[1], at H[3]		// "D + T1"
+	sha512h2	@H[3],$H[1], at H[0]
+___
+	($W0,$W1)=($W1,$W0);	push(@MSG,shift(@MSG));
+	@H = (@H[3], at H[0], at H[4], at H[2], at H[1]);
+}
+for(;$i<40;$i++) {
+$code.=<<___	if ($i<39);
+	ld1.64		{$W1},[$Ktbl],#16
+___
+$code.=<<___	if ($i==39);
+	sub		$Ktbl,$Ktbl,#$rounds*$SZ	// rewind
+___
+$code.=<<___;
+	add.i64		$W0,$W0, at MSG[0]
+	 ld1		{@MSG[0]},[$inp],#16		// load next input
+	ext		$W0,$W0,$W0,#8
+	ext		$fg, at H[2], at H[3],#8
+	ext		$de, at H[1], at H[2],#8
+	add.i64		@H[3], at H[3],$W0			// "T1 + H + K512[i]"
+	sha512h		@H[3],$fg,$de
+	 rev64		@MSG[0], at MSG[0]
+	add.i64		@H[4], at H[1], at H[3]		// "D + T1"
+	sha512h2	@H[3],$H[1], at H[0]
+___
+	($W0,$W1)=($W1,$W0);	push(@MSG,shift(@MSG));
+	@H = (@H[3], at H[0], at H[4], at H[2], at H[1]);
+}
+$code.=<<___;
+	add.i64		@H[0], at H[0],$AB			// accumulate
+	add.i64		@H[1], at H[1],$CD
+	add.i64		@H[2], at H[2],$EF
+	add.i64		@H[3], at H[3],$GH
+
+	cbnz		$num,.Loop_hw
+
+	st1.64		{@H[0]- at H[3]},[$ctx]		// store context
+
+	ldr		x29,[sp],#16
+	ret
+.size	sha512_block_armv8,.-sha512_block_armv8
+#endif
+___
+}
+
 $code.=<<___;
 #ifndef	__KERNEL__
 .comm	OPENSSL_armcap_P,4,4
@@ -753,6 +859,21 @@ ___
     }
 }
 
+{   my  %opcode = (
+	"sha512h"	=> 0xce608000,	"sha512h2"	=> 0xce608400,
+	"sha512su0"	=> 0xcec08000,	"sha512su1"	=> 0xce608800	);
+
+    sub unsha512 {
+	my ($mnemonic,$arg)=@_;
+
+	$arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv]([0-9]+))?/o
+	&&
+	sprintf ".inst\t0x%08x\t//%s %s",
+			$opcode{$mnemonic}|$1|($2<<5)|($3<<16),
+			$mnemonic,$arg;
+    }
+}
+
 open SELF,$0;
 while(<SELF>) {
         next if (/^#!/);
@@ -765,12 +886,15 @@ foreach(split("\n",$code)) {
 
 	s/\`([^\`]*)\`/eval($1)/ge;
 
+	s/\b(sha512\w+)\s+([qv].*)/unsha512($1,$2)/ge	or
 	s/\b(sha256\w+)\s+([qv].*)/unsha256($1,$2)/ge;
 
 	s/\bq([0-9]+)\b/v$1.16b/g;		# old->new registers
 
 	s/\.[ui]?8(\s)/$1/;
+	s/\.\w?64\b//		and s/\.16b/\.2d/g	or
 	s/\.\w?32\b//		and s/\.16b/\.4s/g;
+	m/\bext\b/		and s/\.2d/\.16b/g	or
 	m/(ld|st)1[^\[]+\[0\]/	and s/\.4s/\.s/g;
 
 	print $_,"\n";

From openssl at openssl.org  Mon Feb 12 14:12:07 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Mon, 12 Feb 2018 14:12:07 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings 386
Message-ID: <1518444727.124960.957.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings 386

Commit log since last time:

c684a2d Fix include in manpage of X509_check_host
6dbe4dc Copy name string in BIO_meth_new
4e07525 Avoid leaking peername data via accept BIOs
ebc20cf Swap the check in ssl3_write_pending to avoid using the possibly indeterminate pointer value in wpend_buf.
c423eca Fixes for no-tls1_2 and no-tls1_2-method
83739b3 Run "make update"
41e9afa In err_all.c, include the *err.h headers.
5773f7b Improve #include structure of pem{,2}.h
a5d0d6b Remove redundant declarations of ERR_load_*_strings()
5d67110 Don't calculate the Finished MAC twice
368297d Configuration: move the handling of zlib_include to config files
f3ac964 Turn off printf format checking for BIO_printf et al on Mac OS/X
a699b8e Small simplification in mkerr.pl
2e8b0ef VMS: take care of includes
4cd5877 Fix glibc version detection. Simplify Posix timer detection.
fd87700 Fix check of cpuid_asm_src config attribute
a6da6b7 Revert ".travis.yml: remove osx from build matrix."
b9ed9ab CRYPTO_THREAD_run_once.pod: fix typo and punktuation

From bernd.edlinger at hotmail.de  Mon Feb 12 14:16:22 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Mon, 12 Feb 2018 14:16:22 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518444982.712821.17245.nullmailer@dev.openssl.org>

The branch master has been updated
       via  ada22597ce895c4af1fad824e8da2a86aa9bd5f4 (commit)
      from  af0fcf7b4668218b24d9250b95e0b96939ccb4d1 (commit)


- Log -----------------------------------------------------------------
commit ada22597ce895c4af1fad824e8da2a86aa9bd5f4
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Mon Feb 12 09:28:33 2018 +0100

    Remove code that prints "<SPACES/NULS>" in hexdumps
    when the data block ends with SPACEs or NULs.
    
    The problem is, you can't see if the data ends
    with SPACE or NUL or a combination of both.
    
    This can happen for instance with
    openssl rsautl -decrypt -hexdump
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5328)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/b_dump.c | 17 +----------------
 1 file changed, 1 insertion(+), 16 deletions(-)

diff --git a/crypto/bio/b_dump.c b/crypto/bio/b_dump.c
index f539140..b66b911 100644
--- a/crypto/bio/b_dump.c
+++ b/crypto/bio/b_dump.c
@@ -14,7 +14,6 @@
 #include <stdio.h>
 #include "bio_lcl.h"
 
-#define TRUNCATE
 #define DUMP_WIDTH      16
 #define DUMP_WIDTH_LESS_INDENT(i) (DUMP_WIDTH - ((i - (i > 6 ? 6 : i) + 3) / 4))
 
@@ -31,17 +30,10 @@ int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
 {
     int ret = 0;
     char buf[288 + 1];
-    int i, j, rows, trc, n;
+    int i, j, rows, n;
     unsigned char ch;
     int dump_width;
 
-    trc = 0;
-
-#ifdef TRUNCATE
-    for (; (len > 0) && ((s[len - 1] == ' ') || (s[len - 1] == '\0')); len--)
-        trc++;
-#endif
-
     if (indent < 0)
         indent = 0;
     else if (indent > 128)
@@ -95,13 +87,6 @@ int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
          */
         ret += cb((void *)buf, n, u);
     }
-#ifdef TRUNCATE
-    if (trc > 0) {
-        n = BIO_snprintf(buf, sizeof(buf), "%*s%04x - <SPACES/NULS>\n",
-                         indent, "", len + trc);
-        ret += cb((void *)buf, n, u);
-    }
-#endif
     return ret;
 }
 

From matt at openssl.org  Mon Feb 12 14:56:55 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 12 Feb 2018 14:56:55 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518447415.758139.22970.nullmailer@dev.openssl.org>

The branch master has been updated
       via  034d55cd5c82517418708a0b41b94f20911774c0 (commit)
      from  ada22597ce895c4af1fad824e8da2a86aa9bd5f4 (commit)


- Log -----------------------------------------------------------------
commit 034d55cd5c82517418708a0b41b94f20911774c0
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 09:39:28 2018 +0000

    Some minor tweaks following TLSv1.3 becoming default
    
    Fix a typo in INSTALL and update the link in CHANGES
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5329)

-----------------------------------------------------------------------

Summary of changes:
 CHANGES | 2 +-
 INSTALL | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/CHANGES b/CHANGES
index 178c6c4..b94b8e9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -17,7 +17,7 @@
      configuration is updated to include suitable ciphersuites. The DEFAULT
      ciphersuite configuration does include TLSv1.3 ciphersuites. For further
      information on this and other related issues please see:
-     https://www.openssl.org/blog/blog/2017/05/04/tlsv1.3/
+     https://www.openssl.org/blog/blog/2018/02/08/tlsv1.3/
 
      NOTE: In this pre-release of OpenSSL a draft version of the
      TLSv1.3 standard has been implemented. Implementations of different draft
diff --git a/INSTALL b/INSTALL
index 9d1f90d..3c8548d 100644
--- a/INSTALL
+++ b/INSTALL
@@ -498,7 +498,7 @@
                    applications to explicitly select individual protocol
                    versions. Note that there is no "no-tls1_3-method" option
                    because there is no application method for TLSv1.3. Using
-                   invidivial protocol methods directly is deprecated.
+                   individual protocol methods directly is deprecated.
                    Applications should use TLS_method() instead.
 
   enable-<alg>

From openssl at openssl.org  Mon Feb 12 15:10:33 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Mon, 12 Feb 2018 15:10:33 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings no-tls1_2
Message-ID: <1518448233.450220.12929.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_2

Commit log since last time:

c684a2d Fix include in manpage of X509_check_host
6dbe4dc Copy name string in BIO_meth_new
4e07525 Avoid leaking peername data via accept BIOs
ebc20cf Swap the check in ssl3_write_pending to avoid using the possibly indeterminate pointer value in wpend_buf.
c423eca Fixes for no-tls1_2 and no-tls1_2-method
83739b3 Run "make update"
41e9afa In err_all.c, include the *err.h headers.
5773f7b Improve #include structure of pem{,2}.h
a5d0d6b Remove redundant declarations of ERR_load_*_strings()
5d67110 Don't calculate the Finished MAC twice
368297d Configuration: move the handling of zlib_include to config files
f3ac964 Turn off printf format checking for BIO_printf et al on Mac OS/X
a699b8e Small simplification in mkerr.pl
2e8b0ef VMS: take care of includes
4cd5877 Fix glibc version detection. Simplify Posix timer detection.
fd87700 Fix check of cpuid_asm_src config attribute
a6da6b7 Revert ".travis.yml: remove osx from build matrix."
b9ed9ab CRYPTO_THREAD_run_once.pod: fix typo and punktuation

From openssl at openssl.org  Mon Feb 12 16:09:48 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Mon, 12 Feb 2018 16:09:48 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings no-tls1_2-method
Message-ID: <1518451788.715586.31042.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-tls1_2-method

Commit log since last time:

c684a2d Fix include in manpage of X509_check_host
6dbe4dc Copy name string in BIO_meth_new
4e07525 Avoid leaking peername data via accept BIOs
ebc20cf Swap the check in ssl3_write_pending to avoid using the possibly indeterminate pointer value in wpend_buf.
c423eca Fixes for no-tls1_2 and no-tls1_2-method
83739b3 Run "make update"
41e9afa In err_all.c, include the *err.h headers.
5773f7b Improve #include structure of pem{,2}.h
a5d0d6b Remove redundant declarations of ERR_load_*_strings()
5d67110 Don't calculate the Finished MAC twice
368297d Configuration: move the handling of zlib_include to config files
f3ac964 Turn off printf format checking for BIO_printf et al on Mac OS/X
a699b8e Small simplification in mkerr.pl
2e8b0ef VMS: take care of includes
4cd5877 Fix glibc version detection. Simplify Posix timer detection.
fd87700 Fix check of cpuid_asm_src config attribute
a6da6b7 Revert ".travis.yml: remove osx from build matrix."
b9ed9ab CRYPTO_THREAD_run_once.pod: fix typo and punktuation

From no-reply at appveyor.com  Mon Feb 12 21:38:01 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 12 Feb 2018 21:38:01 +0000
Subject: [openssl-commits] Build failed: openssl master.15574
Message-ID: <20180212213801.1.F77912DA526AAAB3@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180212/62130eb0/attachment.html>

From matt at openssl.org  Mon Feb 12 22:38:39 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 12 Feb 2018 22:38:39 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518475119.576075.21999.nullmailer@dev.openssl.org>

The branch master has been updated
       via  1c5b57bc0ae5e2d0efc245cd8dd227ea4a0a41f2 (commit)
      from  034d55cd5c82517418708a0b41b94f20911774c0 (commit)


- Log -----------------------------------------------------------------
commit 1c5b57bc0ae5e2d0efc245cd8dd227ea4a0a41f2
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 15:16:01 2018 +0000

    Update NEWS file for new release
    
    Updated the NEWS file with the most significant items from CHANGES
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5333)

-----------------------------------------------------------------------

Summary of changes:
 NEWS | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/NEWS b/NEWS
index 425fbd5..7a15e86 100644
--- a/NEWS
+++ b/NEWS
@@ -12,6 +12,14 @@
       o Allow GNU style "make variables" to be used with Configure.
       o Add a STORE module (OSSL_STORE)
       o Claim the namespaces OSSL and OPENSSL, represented as symbol prefixes
+      o Add multi-prime RSA (RFC 8017) support
+      o Add SM3 implemented according to GB/T 32905-2016
+      o Add SM4 implemented according to GB/T 32907-2016.
+      o Add 'Maximum Fragment Length' TLS extension negotiation and support
+      o Add ARIA support
+      o Add SHA3
+      o Rewrite of devcrypto engine
+      o Add support for SipHash
 
   Major changes between OpenSSL 1.1.0g and OpenSSL 1.1.0h [under development]
 

From no-reply at appveyor.com  Mon Feb 12 23:38:13 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 12 Feb 2018 23:38:13 +0000
Subject: [openssl-commits] Build completed: openssl master.15575
Message-ID: <20180212233813.1.19877A050E3C5951@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180212/bf15e8ff/attachment.html>

From matt at openssl.org  Tue Feb 13 09:22:41 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 13 Feb 2018 09:22:41 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518513761.324847.28047.nullmailer@dev.openssl.org>

The branch master has been updated
       via  87411f05953ee22e552d132ad5583dde5286e448 (commit)
       via  53010ea150544a41feb1a62d26b4d321180512e0 (commit)
      from  1c5b57bc0ae5e2d0efc245cd8dd227ea4a0a41f2 (commit)


- Log -----------------------------------------------------------------
commit 87411f05953ee22e552d132ad5583dde5286e448
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Tue Feb 13 02:04:50 2018 +0100

    Fix whitespace issues in CHANGES and NEWS
    
    Removed mixed tabs (converted tabs to eight spaces)
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5344)

commit 53010ea150544a41feb1a62d26b4d321180512e0
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Tue Feb 13 02:02:22 2018 +0100

    Document new random generator in NEWS and CHANGES
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5344)

-----------------------------------------------------------------------

Summary of changes:
 CHANGES | 147 ++++++++++++++++++++++++++++++++++++----------------------------
 NEWS    |  14 +++----
 2 files changed, 90 insertions(+), 71 deletions(-)

diff --git a/CHANGES b/CHANGES
index b94b8e9..76b9f78 100644
--- a/CHANGES
+++ b/CHANGES
@@ -29,6 +29,25 @@
      TODO(TLS1.3): Remove the above note before final release
      [Matt Caswell]
 
+  *) Grand redesign of the OpenSSL random generator
+
+     The default RAND method now utilizes an AES-CTR DRBG according to
+     NIST standard SP 800-90Ar1. The new random generator is essentially
+     a port of the default random generator from the OpenSSL FIPS 2.0
+     object module. It is a hybrid deterministic random bit generator
+     using an AES-CTR bit stream and which seeds and reseeds itself
+     automatically using trusted system entropy sources.
+
+     Some of its new features are:
+      o Support for multiple DRBG instances with seed chaining.
+      o Add a public DRBG instance for the default RAND method.
+      o Add a dedicated DRBG instance for generating long term private keys.
+      o Make the DRBG instances fork-safe.
+      o Keep all global DRBG instances on the secure heap if it is enabled.
+      o Add a DRBG instance to every SSL instance for lock free operation
+        and to increase unpredictability.
+     [Paul Dale, Benjamin Kaduk, Kurt Roeckx, Rich Salz, Matthias St. Pierre]
+
   *) Changed Configure so it only says what it does and doesn't dump
      so much data.  Instead, ./configdata.pm should be used as a script
      to display all sorts of configuration data.
@@ -2965,12 +2984,12 @@
      1. Do not use record version number > TLS 1.0 in initial client
         hello: some (but not all) hanging servers will now work.
      2. If we set OPENSSL_MAX_TLS1_2_CIPHER_LENGTH this will truncate
-	the number of ciphers sent in the client hello. This should be
+        the number of ciphers sent in the client hello. This should be
         set to an even number, such as 50, for example by passing:
         -DOPENSSL_MAX_TLS1_2_CIPHER_LENGTH=50 to config or Configure.
         Most broken servers should now work.
      3. If all else fails setting OPENSSL_NO_TLS1_2_CLIENT will disable
-	TLS 1.2 client support entirely.
+        TLS 1.2 client support entirely.
      [Steve Henson]
 
   *) Fix SEGV in Vector Permutation AES module observed in OpenSSH.
@@ -3007,12 +3026,12 @@
 
   *) Extensive assembler packs updates, most notably:
 
-	- x86[_64]:     AES-NI, PCLMULQDQ, RDRAND support;
-	- x86[_64]:     SSSE3 support (SHA1, vector-permutation AES);
-	- x86_64:       bit-sliced AES implementation;
-	- ARM:          NEON support, contemporary platforms optimizations;
-	- s390x:        z196 support;
-	- *:            GHASH and GF(2^m) multiplication implementations;
+        - x86[_64]:     AES-NI, PCLMULQDQ, RDRAND support;
+        - x86[_64]:     SSSE3 support (SHA1, vector-permutation AES);
+        - x86_64:       bit-sliced AES implementation;
+        - ARM:          NEON support, contemporary platforms optimizations;
+        - s390x:        z196 support;
+        - *:            GHASH and GF(2^m) multiplication implementations;
 
      [Andy Polyakov]
 
@@ -3365,7 +3384,7 @@
   *) Add protection against ECDSA timing attacks as mentioned in the paper
      by Billy Bob Brumley and Nicola Tuveri, see:
 
-	http://eprint.iacr.org/2011/232.pdf
+        http://eprint.iacr.org/2011/232.pdf
 
      [Billy Bob Brumley and Nicola Tuveri]
 
@@ -5438,16 +5457,16 @@
      takes an extra flags argument for optional functionality.  Currently,
      the following flags are defined:
 
-	OBJ_BSEARCH_VALUE_ON_NOMATCH
-	This one gets OBJ_bsearch_ex() to return a pointer to the first
-	element where the comparing function returns a negative or zero
-	number.
+        OBJ_BSEARCH_VALUE_ON_NOMATCH
+        This one gets OBJ_bsearch_ex() to return a pointer to the first
+        element where the comparing function returns a negative or zero
+        number.
 
-	OBJ_BSEARCH_FIRST_VALUE_ON_MATCH
-	This one gets OBJ_bsearch_ex() to return a pointer to the first
-	element where the comparing function returns zero.  This is useful
-	if there are more than one element where the comparing function
-	returns zero.
+        OBJ_BSEARCH_FIRST_VALUE_ON_MATCH
+        This one gets OBJ_bsearch_ex() to return a pointer to the first
+        element where the comparing function returns zero.  This is useful
+        if there are more than one element where the comparing function
+        returns zero.
      [Richard Levitte]
 
   *) Make it possible to create self-signed certificates with 'openssl ca'
@@ -5594,8 +5613,8 @@
      is defined as follows (according to X.509_4thEditionDraftV6.pdf):
 
      CertificatePair ::= SEQUENCE {
-        forward		[0]	Certificate OPTIONAL,
-        reverse		[1]	Certificate OPTIONAL,
+        forward         [0]     Certificate OPTIONAL,
+        reverse         [1]     Certificate OPTIONAL,
         -- at least one of the pair shall be present -- }
 
      Also implement the PEM functions to read and write certificate
@@ -6597,15 +6616,15 @@
      build directory is the following (tested on Linux), maybe with
      some local tweaks:
 
-	# Place yourself outside of the OpenSSL source tree.  In
-	# this example, the environment variable OPENSSL_SOURCE
-	# is assumed to contain the absolute OpenSSL source directory.
-	mkdir -p objtree/"`uname -s`-`uname -r`-`uname -m`"
-	cd objtree/"`uname -s`-`uname -r`-`uname -m`"
-	(cd $OPENSSL_SOURCE; find . -type f) | while read F; do
-		mkdir -p `dirname $F`
-		ln -s $OPENSSL_SOURCE/$F $F
-	done
+        # Place yourself outside of the OpenSSL source tree.  In
+        # this example, the environment variable OPENSSL_SOURCE
+        # is assumed to contain the absolute OpenSSL source directory.
+        mkdir -p objtree/"`uname -s`-`uname -r`-`uname -m`"
+        cd objtree/"`uname -s`-`uname -r`-`uname -m`"
+        (cd $OPENSSL_SOURCE; find . -type f) | while read F; do
+                mkdir -p `dirname $F`
+                ln -s $OPENSSL_SOURCE/$F $F
+        done
 
      To be absolutely sure not to disturb the source tree, a "make clean"
      is a good thing.  If it isn't successful, don't worry about it,
@@ -7100,8 +7119,8 @@
 
          des_key_schedule ks;
 
-	 des_set_key_checked(..., &ks);
-	 des_ncbc_encrypt(..., &ks, ...);
+         des_set_key_checked(..., &ks);
+         des_ncbc_encrypt(..., &ks, ...);
 
      (Note that a later change renames 'des_...' into 'DES_...'.)
      [Ben Laurie]
@@ -7307,7 +7326,7 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
        '-pre' and '-post' switches. '-post' is only used if '-t' is
        specified and the ENGINE is successfully initialised. The syntax for
        the individual commands are colon-separated, for example;
-	 openssl engine chil -pre FORK_CHECK:0 -pre SO_PATH:/lib/test.so
+         openssl engine chil -pre FORK_CHECK:0 -pre SO_PATH:/lib/test.so
      [Geoff]
 
   *) New dynamic control command support for ENGINEs. ENGINEs can now
@@ -7495,16 +7514,16 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
      To implement a global variable, use the macro OPENSSL_IMPLEMENT_GLOBAL
      in the source file (foo.c) like this:
 
-	OPENSSL_IMPLEMENT_GLOBAL(int,foo)=1;
-	OPENSSL_IMPLEMENT_GLOBAL(double,bar);
+        OPENSSL_IMPLEMENT_GLOBAL(int,foo)=1;
+        OPENSSL_IMPLEMENT_GLOBAL(double,bar);
 
      To declare a global variable, use the macros OPENSSL_DECLARE_GLOBAL
      and OPENSSL_GLOBAL_REF in the header file (foo.h) like this:
 
-	OPENSSL_DECLARE_GLOBAL(int,foo);
-	#define foo OPENSSL_GLOBAL_REF(foo)
-	OPENSSL_DECLARE_GLOBAL(double,bar);
-	#define bar OPENSSL_GLOBAL_REF(bar)
+        OPENSSL_DECLARE_GLOBAL(int,foo);
+        #define foo OPENSSL_GLOBAL_REF(foo)
+        OPENSSL_DECLARE_GLOBAL(double,bar);
+        #define bar OPENSSL_GLOBAL_REF(bar)
 
      The #defines are very important, and therefore so is including the
      header file everywhere where the defined globals are used.
@@ -7708,7 +7727,7 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
      to data. This was previously part of the PKCS7 ASN1 code. This
      was causing problems with OpenSSL created PKCS#12 and PKCS#7 structures.
      [Steve Henson, reported by Kenneth R. Robinette
-				<support at securenetterm.com>]
+                                <support at securenetterm.com>]
 
   *) Add CRYPTO_push_info() and CRYPTO_pop_info() calls to new ASN1
      routines: without these tracing memory leaks is very painful.
@@ -7722,7 +7741,7 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
      and use ASN1_TIME_set() if the value is not V_ASN1_UTCTIME or
      V_ASN1_GENERALIZEDTIME, without this it always uses GeneralizedTime.
      [Steve Henson, reported by Kenneth R. Robinette
-				<support at securenetterm.com>]
+                                <support at securenetterm.com>]
 
   *) Fixes to BN_to_ASN1_INTEGER when bn is zero. This would previously
      result in a zero length in the ASN1_INTEGER structure which was
@@ -7807,10 +7826,10 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
      settings for extended allocation functions, the following
      functions are provided:
 
-	CRYPTO_set_mem_ex_functions
-	CRYPTO_set_locked_mem_ex_functions
-	CRYPTO_get_mem_ex_functions
-	CRYPTO_get_locked_mem_ex_functions
+        CRYPTO_set_mem_ex_functions
+        CRYPTO_set_locked_mem_ex_functions
+        CRYPTO_get_mem_ex_functions
+        CRYPTO_get_locked_mem_ex_functions
 
      These work the same way as CRYPTO_set_mem_functions and friends.
      CRYPTO_get_[locked_]mem_functions now writes 0 where such an
@@ -8151,11 +8170,11 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
 
   *) Add the following functions:
 
-	ENGINE_load_cswift()
-	ENGINE_load_chil()
-	ENGINE_load_atalla()
-	ENGINE_load_nuron()
-	ENGINE_load_builtin_engines()
+        ENGINE_load_cswift()
+        ENGINE_load_chil()
+        ENGINE_load_atalla()
+        ENGINE_load_nuron()
+        ENGINE_load_builtin_engines()
 
      That way, an application can itself choose if external engines that
      are built-in in OpenSSL shall ever be used or not.  The benefit is
@@ -8404,8 +8423,8 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
   *) Fix ASN1 checks. Check for overflow by comparing with LONG_MAX
      and get fix the header length calculation.
      [Florian Weimer <Weimer at CERT.Uni-Stuttgart.DE>,
-	Alon Kantor <alonk at checkpoint.com> (and others),
-	Steve Henson]
+        Alon Kantor <alonk at checkpoint.com> (and others),
+        Steve Henson]
 
   *) Use proper error handling instead of 'assertions' in buffer
      overflow checks added in 0.9.6e.  This prevents DoS (the
@@ -9479,23 +9498,23 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
      through a logging bio, to cover all the levels that are available
      through syslog.  The prefixes are now:
 
-	PANIC, EMERG, EMR	=>	LOG_EMERG
-	ALERT, ALR		=>	LOG_ALERT
-	CRIT, CRI		=>	LOG_CRIT
-	ERROR, ERR		=>	LOG_ERR
-	WARNING, WARN, WAR	=>	LOG_WARNING
-	NOTICE, NOTE, NOT	=>	LOG_NOTICE
-	INFO, INF		=>	LOG_INFO
-	DEBUG, DBG		=>	LOG_DEBUG
+        PANIC, EMERG, EMR       =>      LOG_EMERG
+        ALERT, ALR              =>      LOG_ALERT
+        CRIT, CRI               =>      LOG_CRIT
+        ERROR, ERR              =>      LOG_ERR
+        WARNING, WARN, WAR      =>      LOG_WARNING
+        NOTICE, NOTE, NOT       =>      LOG_NOTICE
+        INFO, INF               =>      LOG_INFO
+        DEBUG, DBG              =>      LOG_DEBUG
 
      and as before, if none of those prefixes are present at the
      beginning of the string, LOG_ERR is chosen.
 
      On Win32, the LOG_* levels are mapped according to this:
 
-	LOG_EMERG, LOG_ALERT, LOG_CRIT, LOG_ERR	=> EVENTLOG_ERROR_TYPE
-	LOG_WARNING				=> EVENTLOG_WARNING_TYPE
-	LOG_NOTICE, LOG_INFO, LOG_DEBUG		=> EVENTLOG_INFORMATION_TYPE
+        LOG_EMERG, LOG_ALERT, LOG_CRIT, LOG_ERR => EVENTLOG_ERROR_TYPE
+        LOG_WARNING                             => EVENTLOG_WARNING_TYPE
+        LOG_NOTICE, LOG_INFO, LOG_DEBUG         => EVENTLOG_INFORMATION_TYPE
 
      [Richard Levitte]
 
@@ -10540,9 +10559,9 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
 
      With these changes, a new set of functions and macros have appeared:
 
-       CRYPTO_set_mem_debug_functions()	        [F]
+       CRYPTO_set_mem_debug_functions()         [F]
        CRYPTO_get_mem_debug_functions()         [F]
-       CRYPTO_dbg_set_options()	                [F]
+       CRYPTO_dbg_set_options()                 [F]
        CRYPTO_dbg_get_options()                 [F]
        CRYPTO_malloc_debug_init()               [M]
 
diff --git a/NEWS b/NEWS
index 7a15e86..f47482e 100644
--- a/NEWS
+++ b/NEWS
@@ -20,6 +20,7 @@
       o Add SHA3
       o Rewrite of devcrypto engine
       o Add support for SipHash
+      o Grand redesign of the OpenSSL random generator
 
   Major changes between OpenSSL 1.1.0g and OpenSSL 1.1.0h [under development]
 
@@ -380,7 +381,7 @@
       o Compression memory leak fixed.
       o Compression session resumption fixed.
       o Ticket and SNI coexistence fixes.
-      o Many fixes to DTLS handling. 
+      o Many fixes to DTLS handling.
 
   Major changes between OpenSSL 0.9.8k and OpenSSL 0.9.8l [5 Nov 2009]:
 
@@ -413,7 +414,7 @@
       o Add gcc 4.2 support.
       o Add support for AES and SSE2 assembly language optimization
         for VC++ build.
-      o Support for RFC4507bis and server name extensions if explicitly 
+      o Support for RFC4507bis and server name extensions if explicitly
         selected at compile time.
       o DTLS improvements.
       o RFC4507bis support.
@@ -593,7 +594,7 @@
   Major changes between OpenSSL 0.9.7a and OpenSSL 0.9.7b [10 Apr 2003]:
 
       o Security: counter the Klima-Pokorny-Rosa extension of
-        Bleichbacher's attack 
+        Bleichbacher's attack
       o Security: make RSA blinding default.
       o Configuration: Irix fixes, AIX fixes, better mingw support.
       o Support for new platforms: linux-ia64-ecc.
@@ -653,7 +654,7 @@
       o SSL/TLS: allow optional cipher choice according to server's preference.
       o SSL/TLS: allow server to explicitly set new session ids.
       o SSL/TLS: support Kerberos cipher suites (RFC2712).
-	Only supports MIT Kerberos for now.
+        Only supports MIT Kerberos for now.
       o SSL/TLS: allow more precise control of renegotiations and sessions.
       o SSL/TLS: add callback to retrieve SSL/TLS messages.
       o SSL/TLS: support AES cipher suites (RFC3268).
@@ -666,7 +667,7 @@
   Major changes between OpenSSL 0.9.6i and OpenSSL 0.9.6j [10 Apr 2003]:
 
       o Security: counter the Klima-Pokorny-Rosa extension of
-        Bleichbacher's attack 
+        Bleichbacher's attack
       o Security: make RSA blinding default.
       o Build: shared library support fixes.
 
@@ -778,7 +779,7 @@
 
   Major changes between OpenSSL 0.9.5 and OpenSSL 0.9.5a [1 Apr 2000]:
 
-      o Bug fixes for Win32, SuSE Linux, NeXTSTEP and FreeBSD 2.2.8 
+      o Bug fixes for Win32, SuSE Linux, NeXTSTEP and FreeBSD 2.2.8
       o Shared library support for HPUX and Solaris-gcc
       o Support of Linux/IA64
       o Assembler support for Mingw32
@@ -878,4 +879,3 @@
       o Extended ASN.1 parser routines
       o Adjustments of the source tree for CVS
       o Support for various new platforms
-

From matt at openssl.org  Tue Feb 13 11:07:14 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 13 Feb 2018 11:07:14 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1518520034.702413.4704.nullmailer@dev.openssl.org>

The branch master has been updated
       via  027c9909fca039095fe8c69ebe9bd3ce0bba59cd (commit)
      from  9d9fdc1727e3ff90d25dbccb4c530312b897536f (commit)


- Log -----------------------------------------------------------------
commit 027c9909fca039095fe8c69ebe9bd3ce0bba59cd
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 13 10:34:40 2018 +0000

    Don't sanity check the FIPS version during a release
    
    This is no longer included in the opensslv.h header file for 1.1.1, so
    we should not sanity check it.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/10)

-----------------------------------------------------------------------

Summary of changes:
 release-tools/release-check.pl | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/release-tools/release-check.pl b/release-tools/release-check.pl
index 91ee7c0..cac5918 100644
--- a/release-tools/release-check.pl
+++ b/release-tools/release-check.pl
@@ -112,13 +112,6 @@ sub openssl_check_version_h {
             check_str( "opensslv.h: HEX version", $hexversion, $1, \$ok );
             $hex_done = 1;
         } elsif (
-/OPENSSL_VERSION_TEXT\s+\"OpenSSL (\S*fips\S*)\s+(\([[:alpha:]]+\)\s+)?(.*)\"/
-          )
-        {
-            check_str( "opensslv.h: FIPS version", $version_fips, $1, \$ok );
-            check_str( "opensslv.h: FIPS date",    $date,         $3, \$ok );
-            $fips_done = 1;
-        } elsif (
 /OPENSSL_VERSION_TEXT\s+\"OpenSSL (\S*)\s+(\([[:alpha:]]+\)\s+)?(.*)\"/
           )
         {
@@ -126,7 +119,7 @@ sub openssl_check_version_h {
             check_str( "opensslv.h: date",    $date,    $3, \$ok );
             $version_done = 1;
         }
-        if ( $hex_done && $fips_done && $version_done ) {
+        if ( $hex_done && $version_done ) {
             close IN;
             return $ok;
         }

From matt at openssl.org  Tue Feb 13 13:59:51 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 13 Feb 2018 13:59:51 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518530391.048237.9214.nullmailer@dev.openssl.org>

The branch master has been updated
       via  fcd21502737e96c031bff17fe6b6a432d07e3855 (commit)
       via  dcfa88bb29686f485dbd0e3e3800a7f79b462546 (commit)
       via  6738bf1417289a14758590fca5a26b62c9b2c0be (commit)
       via  abfee348c613ea8037561ee850cac94218f73f64 (commit)
       via  d6d605e32aaf5acc01183e5b4fac7565121a0b4e (commit)
      from  87411f05953ee22e552d132ad5583dde5286e448 (commit)


- Log -----------------------------------------------------------------
commit fcd21502737e96c031bff17fe6b6a432d07e3855
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 13 13:49:49 2018 +0000

    Prepare for 1.1.1-pre2-dev
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

commit dcfa88bb29686f485dbd0e3e3800a7f79b462546
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 13 13:48:07 2018 +0000

    Prepare for 1.1.1-pre1 release
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

commit 6738bf1417289a14758590fca5a26b62c9b2c0be
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 13 12:51:29 2018 +0000

    Update copyright year
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

commit abfee348c613ea8037561ee850cac94218f73f64
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 13 10:17:18 2018 +0000

    OpenSSL 1.1.1 is now in pre release
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

commit d6d605e32aaf5acc01183e5b4fac7565121a0b4e
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 13 10:09:34 2018 +0000

    Update last release letter for CHANGES and NEWS
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 CHANGES                                | 2 +-
 Configurations/shared-info.pl          | 2 +-
 NEWS                                   | 2 +-
 README                                 | 4 ++--
 apps/asn1pars.c                        | 2 +-
 apps/ca.c                              | 2 +-
 apps/ciphers.c                         | 2 +-
 apps/crl.c                             | 2 +-
 apps/crl2p7.c                          | 2 +-
 apps/dgst.c                            | 2 +-
 apps/dhparam.c                         | 2 +-
 apps/dsa.c                             | 2 +-
 apps/dsaparam.c                        | 2 +-
 apps/ec.c                              | 2 +-
 apps/ecparam.c                         | 2 +-
 apps/enc.c                             | 2 +-
 apps/engine.c                          | 2 +-
 apps/errstr.c                          | 2 +-
 apps/gendsa.c                          | 2 +-
 apps/genpkey.c                         | 2 +-
 apps/genrsa.c                          | 2 +-
 apps/nseq.c                            | 2 +-
 apps/passwd.c                          | 2 +-
 apps/pkcs12.c                          | 2 +-
 apps/pkcs7.c                           | 2 +-
 apps/pkcs8.c                           | 2 +-
 apps/pkey.c                            | 2 +-
 apps/pkeyparam.c                       | 2 +-
 apps/pkeyutl.c                         | 2 +-
 apps/prime.c                           | 2 +-
 apps/rand.c                            | 2 +-
 apps/rehash.c                          | 2 +-
 apps/req.c                             | 2 +-
 apps/rsa.c                             | 2 +-
 apps/rsautl.c                          | 2 +-
 apps/s_cb.c                            | 2 +-
 apps/s_server.c                        | 2 +-
 apps/s_time.c                          | 2 +-
 apps/sess_id.c                         | 2 +-
 apps/smime.c                           | 2 +-
 apps/spkac.c                           | 2 +-
 apps/srp.c                             | 2 +-
 apps/storeutl.c                        | 2 +-
 apps/ts.c                              | 2 +-
 apps/verify.c                          | 2 +-
 apps/version.c                         | 2 +-
 apps/x509.c                            | 2 +-
 config.com                             | 2 +-
 crypto/arm64cpuid.pl                   | 2 +-
 crypto/arm_arch.h                      | 2 +-
 crypto/armcap.c                        | 2 +-
 crypto/asn1/ameth_lib.c                | 2 +-
 crypto/asn1/asn_mime.c                 | 2 +-
 crypto/bio/b_addr.c                    | 2 +-
 crypto/bio/b_dump.c                    | 2 +-
 crypto/bio/b_sock2.c                   | 2 +-
 crypto/bio/bf_null.c                   | 2 +-
 crypto/bio/bio_lib.c                   | 2 +-
 crypto/bio/bio_meth.c                  | 2 +-
 crypto/bio/bss_acpt.c                  | 2 +-
 crypto/bio/bss_null.c                  | 2 +-
 crypto/bn/bn_exp.c                     | 2 +-
 crypto/engine/eng_lib.c                | 2 +-
 crypto/err/err.c                       | 2 +-
 crypto/err/err_all.c                   | 2 +-
 crypto/ex_data.c                       | 2 +-
 crypto/mem_dbg.c                       | 2 +-
 crypto/objects/o_names.c               | 2 +-
 crypto/ocsp/ocsp_lcl.h                 | 2 +-
 crypto/sha/asm/sha512-armv8.pl         | 2 +-
 crypto/store/store_register.c          | 2 +-
 crypto/x509v3/v3_admis.c               | 2 +-
 crypto/x509v3/v3_admis.h               | 2 +-
 doc/man1/enc.pod                       | 2 +-
 doc/man1/ocsp.pod                      | 2 +-
 doc/man1/s_client.pod                  | 2 +-
 doc/man3/ADMISSIONS.pod                | 2 +-
 doc/man3/CRYPTO_THREAD_run_once.pod    | 2 +-
 doc/man3/DTLSv1_listen.pod             | 2 +-
 doc/man3/OCSP_response_status.pod      | 2 +-
 doc/man3/SSL_CONF_cmd.pod              | 2 +-
 doc/man3/SSL_CTX_set1_sigalgs.pod      | 2 +-
 doc/man3/SSL_CTX_set_verify.pod        | 2 +-
 doc/man3/X509_check_host.pod           | 2 +-
 doc/man3/X509_dup.pod                  | 2 +-
 doc/man3/d2i_X509.pod                  | 2 +-
 doc/man7/ssl.pod                       | 2 +-
 engines/e_afalg.c                      | 2 +-
 engines/e_ossltest.c                   | 2 +-
 include/internal/bio.h                 | 2 +-
 include/internal/rand.h                | 2 +-
 include/openssl/async.h                | 2 +-
 include/openssl/bio.h                  | 2 +-
 include/openssl/bn.h                   | 2 +-
 include/openssl/buffer.h               | 2 +-
 include/openssl/cms.h                  | 2 +-
 include/openssl/comp.h                 | 2 +-
 include/openssl/conf.h                 | 2 +-
 include/openssl/crypto.h               | 2 +-
 include/openssl/ct.h                   | 2 +-
 include/openssl/dh.h                   | 2 +-
 include/openssl/dsa.h                  | 2 +-
 include/openssl/dtls1.h                | 2 +-
 include/openssl/engine.h               | 2 +-
 include/openssl/kdf.h                  | 2 +-
 include/openssl/objects.h              | 2 +-
 include/openssl/ocsp.h                 | 2 +-
 include/openssl/opensslv.h             | 6 +++---
 include/openssl/pem.h                  | 2 +-
 include/openssl/pem2.h                 | 2 +-
 include/openssl/rand.h                 | 2 +-
 include/openssl/rsa.h                  | 2 +-
 include/openssl/ssl3.h                 | 2 +-
 include/openssl/store.h                | 2 +-
 include/openssl/tls1.h                 | 2 +-
 include/openssl/ts.h                   | 2 +-
 include/openssl/ui.h                   | 2 +-
 include/openssl/x509v3.h               | 2 +-
 ssl/record/rec_layer_s3.c              | 2 +-
 ssl/s3_lib.c                           | 2 +-
 ssl/s3_msg.c                           | 2 +-
 ssl/ssl_conf.c                         | 2 +-
 ssl/statem/extensions_clnt.c           | 2 +-
 ssl/statem/extensions_cust.c           | 2 +-
 ssl/statem/extensions_srvr.c           | 2 +-
 ssl/statem/statem.c                    | 2 +-
 ssl/statem/statem.h                    | 2 +-
 ssl/statem/statem_dtls.c               | 2 +-
 ssl/tls13_enc.c                        | 2 +-
 test/asn1_time_test.c                  | 2 +-
 test/bntest.c                          | 2 +-
 test/cipherlist_test.c                 | 2 +-
 test/clienthellotest.c                 | 2 +-
 test/ct_test.c                         | 2 +-
 test/handshake_helper.c                | 2 +-
 test/modes_internal_test.c             | 2 +-
 test/ossl_shim/ossl_shim.cc            | 2 +-
 test/ossl_shim/packeted_bio.h          | 2 +-
 test/poly1305_internal_test.c          | 2 +-
 test/recipes/30-test_afalg.t           | 2 +-
 test/recipes/40-test_rehash.t          | 2 +-
 test/recipes/70-test_comp.t            | 2 +-
 test/recipes/70-test_key_share.t       | 2 +-
 test/recipes/70-test_renegotiation.t   | 2 +-
 test/recipes/70-test_sslcbcpadding.t   | 2 +-
 test/recipes/70-test_sslcertstatus.t   | 2 +-
 test/recipes/70-test_sslmessages.t     | 2 +-
 test/recipes/70-test_sslrecords.t      | 2 +-
 test/recipes/70-test_sslsessiontick.t  | 2 +-
 test/recipes/70-test_sslsigalgs.t      | 2 +-
 test/recipes/70-test_sslsignature.t    | 2 +-
 test/recipes/70-test_sslskewith0p.t    | 2 +-
 test/recipes/70-test_sslversions.t     | 2 +-
 test/recipes/70-test_sslvertol.t       | 2 +-
 test/recipes/70-test_tls13cookie.t     | 2 +-
 test/recipes/70-test_tls13downgrade.t  | 2 +-
 test/recipes/70-test_tls13hrr.t        | 2 +-
 test/recipes/70-test_tls13kexmodes.t   | 2 +-
 test/recipes/70-test_tls13messages.t   | 2 +-
 test/recipes/70-test_tls13psk.t        | 2 +-
 test/recipes/70-test_tlsextms.t        | 2 +-
 test/recipes/80-test_ssl_new.t         | 2 +-
 test/recipes/90-test_tls13encryption.t | 2 +-
 test/siphash_internal_test.c           | 2 +-
 test/ssl_test_ctx.c                    | 2 +-
 test/ssl_test_ctx.h                    | 2 +-
 test/sslapitest.c                      | 2 +-
 test/testutil/format_output.c          | 2 +-
 test/tls13secretstest.c                | 2 +-
 test/v3nametest.c                      | 2 +-
 util/perl/TLSProxy/Message.pm          | 2 +-
 util/perl/TLSProxy/Record.pm           | 2 +-
 util/perl/checkhandshake.pm            | 2 +-
 173 files changed, 176 insertions(+), 176 deletions(-)

diff --git a/CHANGES b/CHANGES
index 76b9f78..5abfbad 100644
--- a/CHANGES
+++ b/CHANGES
@@ -7,7 +7,7 @@
  https://github.com/openssl/openssl/commits/ and pick the appropriate
  release branch.
 
- Changes between 1.1.0f and 1.1.1 [xx XXX xxxx]
+ Changes between 1.1.0g and 1.1.1 [xx XXX xxxx]
 
   *) Support for TLSv1.3 added. Note that users upgrading from an earlier
      version of OpenSSL should review their configuration settings to ensure
diff --git a/Configurations/shared-info.pl b/Configurations/shared-info.pl
index d3e6941..9716348 100644
--- a/Configurations/shared-info.pl
+++ b/Configurations/shared-info.pl
@@ -1,6 +1,6 @@
 #! /usr/bin/env perl
 # -*- mode: perl; -*-
-# Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/NEWS b/NEWS
index f47482e..c60da87 100644
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,7 @@
   This file gives a brief overview of the major changes between each OpenSSL
   release. For more details please read the CHANGES file.
 
-  Major changes between OpenSSL 1.1.0f and OpenSSL 1.1.1 [under development]
+  Major changes between OpenSSL 1.1.0g and OpenSSL 1.1.1 [in pre-release]
 
       o Support for TLSv1.3 added
       o Move the display of configuration data to configdata.pm.
diff --git a/README b/README
index fb0334b..cc59ad9 100644
--- a/README
+++ b/README
@@ -1,7 +1,7 @@
 
- OpenSSL 1.1.1-dev
+ OpenSSL 1.1.1-pre2-dev
 
- Copyright (c) 1998-2016 The OpenSSL Project
+ Copyright (c) 1998-2018 The OpenSSL Project
  Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
  All rights reserved.
 
diff --git a/apps/asn1pars.c b/apps/asn1pars.c
index f1d3211..a391e0a 100644
--- a/apps/asn1pars.c
+++ b/apps/asn1pars.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/ca.c b/apps/ca.c
index 477d8b4..0c16050 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/ciphers.c b/apps/ciphers.c
index 744589d..4e8ffd1 100644
--- a/apps/ciphers.c
+++ b/apps/ciphers.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/crl.c b/apps/crl.c
index c81c323..031fada 100644
--- a/apps/crl.c
+++ b/apps/crl.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/crl2p7.c b/apps/crl2p7.c
index 282e3cc..88fabcb 100644
--- a/apps/crl2p7.c
+++ b/apps/crl2p7.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/dgst.c b/apps/dgst.c
index 80e8e84..4574550 100644
--- a/apps/dgst.c
+++ b/apps/dgst.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/dhparam.c b/apps/dhparam.c
index 82ecc94..8a3a389 100644
--- a/apps/dhparam.c
+++ b/apps/dhparam.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/dsa.c b/apps/dsa.c
index e9b6f05..6022e64 100644
--- a/apps/dsa.c
+++ b/apps/dsa.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/dsaparam.c b/apps/dsaparam.c
index 69a85aa..2c1cc61 100644
--- a/apps/dsaparam.c
+++ b/apps/dsaparam.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/ec.c b/apps/ec.c
index c9d7ded..03abb00 100644
--- a/apps/ec.c
+++ b/apps/ec.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/ecparam.c b/apps/ecparam.c
index 5e6ee2a..51877f5 100644
--- a/apps/ecparam.c
+++ b/apps/ecparam.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/apps/enc.c b/apps/enc.c
index 5153251..0081ef5 100644
--- a/apps/enc.c
+++ b/apps/enc.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/engine.c b/apps/engine.c
index 328fe1f..83f9588 100644
--- a/apps/engine.c
+++ b/apps/engine.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/errstr.c b/apps/errstr.c
index af33a68..3ef01f0 100644
--- a/apps/errstr.c
+++ b/apps/errstr.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/gendsa.c b/apps/gendsa.c
index 14bfeac..06e3792 100644
--- a/apps/gendsa.c
+++ b/apps/gendsa.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/genpkey.c b/apps/genpkey.c
index 7e7a1cc..ce6de94 100644
--- a/apps/genpkey.c
+++ b/apps/genpkey.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/genrsa.c b/apps/genrsa.c
index 93df823..464657c 100644
--- a/apps/genrsa.c
+++ b/apps/genrsa.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/nseq.c b/apps/nseq.c
index fe6eab8..a067c91 100644
--- a/apps/nseq.c
+++ b/apps/nseq.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/passwd.c b/apps/passwd.c
index a01f1e7..aa516c8 100644
--- a/apps/passwd.c
+++ b/apps/passwd.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/pkcs12.c b/apps/pkcs12.c
index 1a353e1..c8fc452 100644
--- a/apps/pkcs12.c
+++ b/apps/pkcs12.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/pkcs7.c b/apps/pkcs7.c
index afeae64..c3e9f5c 100644
--- a/apps/pkcs7.c
+++ b/apps/pkcs7.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/pkcs8.c b/apps/pkcs8.c
index ca6ab01..2055365 100644
--- a/apps/pkcs8.c
+++ b/apps/pkcs8.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/pkey.c b/apps/pkey.c
index 0e961dd..760fc1b 100644
--- a/apps/pkey.c
+++ b/apps/pkey.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/pkeyparam.c b/apps/pkeyparam.c
index b3c610b..41c3f53 100644
--- a/apps/pkeyparam.c
+++ b/apps/pkeyparam.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/pkeyutl.c b/apps/pkeyutl.c
index e24782f..77926de 100644
--- a/apps/pkeyutl.c
+++ b/apps/pkeyutl.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/prime.c b/apps/prime.c
index 27f4e28..6944797 100644
--- a/apps/prime.c
+++ b/apps/prime.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2004-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/rand.c b/apps/rand.c
index b9f4598..4c61815 100644
--- a/apps/rand.c
+++ b/apps/rand.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/rehash.c b/apps/rehash.c
index e049bfe..d918ac8 100644
--- a/apps/rehash.c
+++ b/apps/rehash.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2013-2014 Timo Ter?s <timo.teras at gmail.com>
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/apps/req.c b/apps/req.c
index f67f93a..ac14fdb 100644
--- a/apps/req.c
+++ b/apps/req.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/rsa.c b/apps/rsa.c
index d7a5ab8..6458b3d 100644
--- a/apps/rsa.c
+++ b/apps/rsa.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/rsautl.c b/apps/rsautl.c
index f146a48..5da8504 100644
--- a/apps/rsautl.c
+++ b/apps/rsautl.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/s_cb.c b/apps/s_cb.c
index 8d51d74..2303109 100644
--- a/apps/s_cb.c
+++ b/apps/s_cb.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/s_server.c b/apps/s_server.c
index a0e72b3..c772069 100644
--- a/apps/s_server.c
+++ b/apps/s_server.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
diff --git a/apps/s_time.c b/apps/s_time.c
index b5c8b63..149107c 100644
--- a/apps/s_time.c
+++ b/apps/s_time.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/sess_id.c b/apps/sess_id.c
index 838a63d..70966de 100644
--- a/apps/sess_id.c
+++ b/apps/sess_id.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/smime.c b/apps/smime.c
index 1c00b0f..6fd4737 100644
--- a/apps/smime.c
+++ b/apps/smime.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/spkac.c b/apps/spkac.c
index eeee6e3..8ed9dd9 100644
--- a/apps/spkac.c
+++ b/apps/spkac.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/srp.c b/apps/srp.c
index 123b557..5e7f3b9 100644
--- a/apps/srp.c
+++ b/apps/srp.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2004-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2004-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/storeutl.c b/apps/storeutl.c
index 55a11e5..326c2af 100644
--- a/apps/storeutl.c
+++ b/apps/storeutl.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/ts.c b/apps/ts.c
index 13cca9e..930c1da 100644
--- a/apps/ts.c
+++ b/apps/ts.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/verify.c b/apps/verify.c
index 765782e..5ad6ef4 100644
--- a/apps/verify.c
+++ b/apps/verify.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/version.c b/apps/version.c
index 5066482..0ff0299 100644
--- a/apps/version.c
+++ b/apps/version.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/apps/x509.c b/apps/x509.c
index 7803124..1bb9cef 100644
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/config.com b/config.com
index 80b764e..46ccaa2 100644
--- a/config.com
+++ b/config.com
@@ -1,5 +1,5 @@
 $	! OpenSSL config: determine the architecture and run Configure
-$	! Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+$	! Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 $	!
 $	! Licensed under the OpenSSL license (the "License").  You may not use
 $	! this file except in compliance with the License.  You can obtain a
diff --git a/crypto/arm64cpuid.pl b/crypto/arm64cpuid.pl
index 68734f5..daa2b17 100755
--- a/crypto/arm64cpuid.pl
+++ b/crypto/arm64cpuid.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/arm_arch.h b/crypto/arm_arch.h
index 395ada6..547ec95 100644
--- a/crypto/arm_arch.h
+++ b/crypto/arm_arch.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/armcap.c b/crypto/armcap.c
index deffd93..d670733 100644
--- a/crypto/armcap.c
+++ b/crypto/armcap.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2011-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/asn1/ameth_lib.c b/crypto/asn1/ameth_lib.c
index 76512c6..f817198 100644
--- a/crypto/asn1/ameth_lib.c
+++ b/crypto/asn1/ameth_lib.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/asn1/asn_mime.c b/crypto/asn1/asn_mime.c
index 2faff45..7f4db6a 100644
--- a/crypto/asn1/asn_mime.c
+++ b/crypto/asn1/asn_mime.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2008-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/b_addr.c b/crypto/bio/b_addr.c
index ab8e7ff..ca9a710 100644
--- a/crypto/bio/b_addr.c
+++ b/crypto/bio/b_addr.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/b_dump.c b/crypto/bio/b_dump.c
index b66b911..0d06414 100644
--- a/crypto/bio/b_dump.c
+++ b/crypto/bio/b_dump.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/b_sock2.c b/crypto/bio/b_sock2.c
index f62c078..12a3b36 100644
--- a/crypto/bio/b_sock2.c
+++ b/crypto/bio/b_sock2.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/bf_null.c b/crypto/bio/bf_null.c
index 8e62832..613fb2e 100644
--- a/crypto/bio/bf_null.c
+++ b/crypto/bio/bf_null.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/bio_lib.c b/crypto/bio/bio_lib.c
index dc4d0a0..557d609 100644
--- a/crypto/bio/bio_lib.c
+++ b/crypto/bio/bio_lib.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/bio_meth.c b/crypto/bio/bio_meth.c
index a1fff14..4c157c0 100644
--- a/crypto/bio/bio_meth.c
+++ b/crypto/bio/bio_meth.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/bss_acpt.c b/crypto/bio/bss_acpt.c
index 72ad6a1..b7ec0c0 100644
--- a/crypto/bio/bss_acpt.c
+++ b/crypto/bio/bss_acpt.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/bss_null.c b/crypto/bio/bss_null.c
index 48164d4..08f1d2b 100644
--- a/crypto/bio/bss_null.c
+++ b/crypto/bio/bss_null.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bn/bn_exp.c b/crypto/bn/bn_exp.c
index b786bf0..9b2042d 100644
--- a/crypto/bn/bn_exp.c
+++ b/crypto/bn/bn_exp.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/engine/eng_lib.c b/crypto/engine/eng_lib.c
index db7717f..48d86b9 100644
--- a/crypto/engine/eng_lib.c
+++ b/crypto/engine/eng_lib.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/err/err.c b/crypto/err/err.c
index a83da9b..d69fbf8 100644
--- a/crypto/err/err.c
+++ b/crypto/err/err.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/err/err_all.c b/crypto/err/err_all.c
index 6f03886..d9ec04b 100644
--- a/crypto/err/err_all.c
+++ b/crypto/err/err_all.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/ex_data.c b/crypto/ex_data.c
index 538fdb1..ed9820c 100644
--- a/crypto/ex_data.c
+++ b/crypto/ex_data.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/mem_dbg.c b/crypto/mem_dbg.c
index e113882..0489e97 100644
--- a/crypto/mem_dbg.c
+++ b/crypto/mem_dbg.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/objects/o_names.c b/crypto/objects/o_names.c
index 7367644..8f7bc79 100644
--- a/crypto/objects/o_names.c
+++ b/crypto/objects/o_names.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/ocsp/ocsp_lcl.h b/crypto/ocsp/ocsp_lcl.h
index 2215a00..36646fd 100644
--- a/crypto/ocsp/ocsp_lcl.h
+++ b/crypto/ocsp/ocsp_lcl.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/sha/asm/sha512-armv8.pl b/crypto/sha/asm/sha512-armv8.pl
index 2f8644c..ac84ebb 100644
--- a/crypto/sha/asm/sha512-armv8.pl
+++ b/crypto/sha/asm/sha512-armv8.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2014-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/store/store_register.c b/crypto/store/store_register.c
index 85c38b8..855c28e 100644
--- a/crypto/store/store_register.c
+++ b/crypto/store/store_register.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/x509v3/v3_admis.c b/crypto/x509v3/v3_admis.c
index 4871cc8..c8e7519 100644
--- a/crypto/x509v3/v3_admis.c
+++ b/crypto/x509v3/v3_admis.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/x509v3/v3_admis.h b/crypto/x509v3/v3_admis.h
index 90099ef..2f1e76d 100644
--- a/crypto/x509v3/v3_admis.h
+++ b/crypto/x509v3/v3_admis.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man1/enc.pod b/doc/man1/enc.pod
index 2a4497b..cbf5cb2 100644
--- a/doc/man1/enc.pod
+++ b/doc/man1/enc.pod
@@ -387,7 +387,7 @@ The default digest was changed from MD5 to SHA256 in Openssl 1.1.0.
 
 =head1 COPYRIGHT
 
-Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man1/ocsp.pod b/doc/man1/ocsp.pod
index 44f1a60..e32a68c 100644
--- a/doc/man1/ocsp.pod
+++ b/doc/man1/ocsp.pod
@@ -474,7 +474,7 @@ The -no_alt_chains options was first added to OpenSSL 1.1.0.
 
 =head1 COPYRIGHT
 
-Copyright 2001-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man1/s_client.pod b/doc/man1/s_client.pod
index 4f0f01c..8d8eac7 100644
--- a/doc/man1/s_client.pod
+++ b/doc/man1/s_client.pod
@@ -709,7 +709,7 @@ The B<-name> option was added in OpenSSL 1.1.1.
 
 =head1 COPYRIGHT
 
-Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/ADMISSIONS.pod b/doc/man3/ADMISSIONS.pod
index 312e300..c38ad04 100644
--- a/doc/man3/ADMISSIONS.pod
+++ b/doc/man3/ADMISSIONS.pod
@@ -169,7 +169,7 @@ L<d2i_X509(3)>,
 
 =head1 COPYRIGHT
 
-Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/CRYPTO_THREAD_run_once.pod b/doc/man3/CRYPTO_THREAD_run_once.pod
index e57ae83..a290278 100644
--- a/doc/man3/CRYPTO_THREAD_run_once.pod
+++ b/doc/man3/CRYPTO_THREAD_run_once.pod
@@ -174,7 +174,7 @@ L<crypto(7)>
 
 =head1 COPYRIGHT
 
-Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/DTLSv1_listen.pod b/doc/man3/DTLSv1_listen.pod
index 062215e..50f16bc 100644
--- a/doc/man3/DTLSv1_listen.pod
+++ b/doc/man3/DTLSv1_listen.pod
@@ -122,7 +122,7 @@ also changed in OpenSSL 1.1.0.
 
 =head1 COPYRIGHT
 
-Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/OCSP_response_status.pod b/doc/man3/OCSP_response_status.pod
index ede2974..82f95b3 100644
--- a/doc/man3/OCSP_response_status.pod
+++ b/doc/man3/OCSP_response_status.pod
@@ -107,7 +107,7 @@ The OCSP_basic_sign_ctx() function was added in OpenSSL 1.1.1.
 
 =head1 COPYRIGHT
 
-Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/SSL_CONF_cmd.pod b/doc/man3/SSL_CONF_cmd.pod
index 5179e29..b4392f4 100644
--- a/doc/man3/SSL_CONF_cmd.pod
+++ b/doc/man3/SSL_CONF_cmd.pod
@@ -629,7 +629,7 @@ B<AllowNoDHEKEX> and B<PrioritizeChaCha> were added in OpenSSL 1.1.1.
 
 =head1 COPYRIGHT
 
-Copyright 2012-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/SSL_CTX_set1_sigalgs.pod b/doc/man3/SSL_CTX_set1_sigalgs.pod
index 74d0698..93d5320 100644
--- a/doc/man3/SSL_CTX_set1_sigalgs.pod
+++ b/doc/man3/SSL_CTX_set1_sigalgs.pod
@@ -108,7 +108,7 @@ L<SSL_CONF_CTX_new(3)>
 
 =head1 COPYRIGHT
 
-Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/SSL_CTX_set_verify.pod b/doc/man3/SSL_CTX_set_verify.pod
index 89760f4..7165547 100644
--- a/doc/man3/SSL_CTX_set_verify.pod
+++ b/doc/man3/SSL_CTX_set_verify.pod
@@ -345,7 +345,7 @@ and SSL_force_post_handshake_auth() functions were added in OpenSSL 1.1.1.
 
 =head1 COPYRIGHT
 
-Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/X509_check_host.pod b/doc/man3/X509_check_host.pod
index 793a8ed..7b96b7c 100644
--- a/doc/man3/X509_check_host.pod
+++ b/doc/man3/X509_check_host.pod
@@ -147,7 +147,7 @@ These functions were added in OpenSSL 1.0.2.
 
 =head1 COPYRIGHT
 
-Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/X509_dup.pod b/doc/man3/X509_dup.pod
index 8f2680f..4f98208 100644
--- a/doc/man3/X509_dup.pod
+++ b/doc/man3/X509_dup.pod
@@ -304,7 +304,7 @@ TYPE_print_ctx() returns 1 on success or zero on failure.
 
 =head1 COPYRIGHT
 
-Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/d2i_X509.pod b/doc/man3/d2i_X509.pod
index 98df029..8096b39 100644
--- a/doc/man3/d2i_X509.pod
+++ b/doc/man3/d2i_X509.pod
@@ -599,7 +599,7 @@ occurs.
 
 =head1 COPYRIGHT
 
-Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man7/ssl.pod b/doc/man7/ssl.pod
index 066b325..f3604bb 100644
--- a/doc/man7/ssl.pod
+++ b/doc/man7/ssl.pod
@@ -833,7 +833,7 @@ OpenSSL 1.1.0.
 
 =head1 COPYRIGHT
 
-Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/engines/e_afalg.c b/engines/e_afalg.c
index da035b5..54cecdd 100644
--- a/engines/e_afalg.c
+++ b/engines/e_afalg.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/engines/e_ossltest.c b/engines/e_ossltest.c
index 8fc056a..2bda610 100644
--- a/engines/e_ossltest.c
+++ b/engines/e_ossltest.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/internal/bio.h b/include/internal/bio.h
index 5334d48..c343b27 100644
--- a/include/internal/bio.h
+++ b/include/internal/bio.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/internal/rand.h b/include/internal/rand.h
index 9fdd097..575e6ca 100644
--- a/include/internal/rand.h
+++ b/include/internal/rand.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/async.h b/include/openssl/async.h
index 4db02c3..7052b89 100644
--- a/include/openssl/async.h
+++ b/include/openssl/async.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/bio.h b/include/openssl/bio.h
index 4a32a0d..cffcd3d 100644
--- a/include/openssl/bio.h
+++ b/include/openssl/bio.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/bn.h b/include/openssl/bn.h
index ebca6f9..4678bb0 100644
--- a/include/openssl/bn.h
+++ b/include/openssl/bn.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/include/openssl/buffer.h b/include/openssl/buffer.h
index 8868e85..d276576 100644
--- a/include/openssl/buffer.h
+++ b/include/openssl/buffer.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/cms.h b/include/openssl/cms.h
index 7910127..ddf37e5 100644
--- a/include/openssl/cms.h
+++ b/include/openssl/cms.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2008-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/comp.h b/include/openssl/comp.h
index 6b20aac..d814d3c 100644
--- a/include/openssl/comp.h
+++ b/include/openssl/comp.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/conf.h b/include/openssl/conf.h
index bca8a05..7336cd2 100644
--- a/include/openssl/conf.h
+++ b/include/openssl/conf.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/crypto.h b/include/openssl/crypto.h
index 4daf0c7..27119ff 100644
--- a/include/openssl/crypto.h
+++ b/include/openssl/crypto.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/include/openssl/ct.h b/include/openssl/ct.h
index 68c5d41..d4262fa 100644
--- a/include/openssl/ct.h
+++ b/include/openssl/ct.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/dh.h b/include/openssl/dh.h
index 2a12b9d..cb93eb1 100644
--- a/include/openssl/dh.h
+++ b/include/openssl/dh.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/dsa.h b/include/openssl/dsa.h
index 39f0f57..3ab3d2a 100644
--- a/include/openssl/dsa.h
+++ b/include/openssl/dsa.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/dtls1.h b/include/openssl/dtls1.h
index aee8cfd..a312e38 100644
--- a/include/openssl/dtls1.h
+++ b/include/openssl/dtls1.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/engine.h b/include/openssl/engine.h
index 89722b0..0780f0f 100644
--- a/include/openssl/engine.h
+++ b/include/openssl/engine.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/include/openssl/kdf.h b/include/openssl/kdf.h
index c1733a5..5abd4c3 100644
--- a/include/openssl/kdf.h
+++ b/include/openssl/kdf.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/objects.h b/include/openssl/objects.h
index 484562d..5e8b576 100644
--- a/include/openssl/objects.h
+++ b/include/openssl/objects.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/ocsp.h b/include/openssl/ocsp.h
index a5c4476..9c2698a 100644
--- a/include/openssl/ocsp.h
+++ b/include/openssl/ocsp.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/opensslv.h b/include/openssl/opensslv.h
index 420a1c9..60c8874 100644
--- a/include/openssl/opensslv.h
+++ b/include/openssl/opensslv.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -39,8 +39,8 @@ extern "C" {
  * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for
  *  major minor fix final patch/beta)
  */
-# define OPENSSL_VERSION_NUMBER  0x10101000L
-# define OPENSSL_VERSION_TEXT    "OpenSSL 1.1.1-dev  xx XXX xxxx"
+# define OPENSSL_VERSION_NUMBER  0x10101002L
+# define OPENSSL_VERSION_TEXT    "OpenSSL 1.1.1-pre2-dev  xx XXX xxxx"
 
 #define OPENSSL_MAKE_VERSION(maj,min,fix,patch) ((0x10000000L)+((maj&0xff)<<20)+((min&0xff)<<12)+((fix&0xff)<<4)+patch)
 
diff --git a/include/openssl/pem.h b/include/openssl/pem.h
index 55bcd71..165544c 100644
--- a/include/openssl/pem.h
+++ b/include/openssl/pem.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/pem2.h b/include/openssl/pem2.h
index bad7ac8..038fe79 100644
--- a/include/openssl/pem2.h
+++ b/include/openssl/pem2.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/rand.h b/include/openssl/rand.h
index cfccd71..40e67c5 100644
--- a/include/openssl/rand.h
+++ b/include/openssl/rand.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/rsa.h b/include/openssl/rsa.h
index 38d9f01..13bdf80 100644
--- a/include/openssl/rsa.h
+++ b/include/openssl/rsa.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/ssl3.h b/include/openssl/ssl3.h
index 6e8ef6b..7518f68 100644
--- a/include/openssl/ssl3.h
+++ b/include/openssl/ssl3.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/include/openssl/store.h b/include/openssl/store.h
index dff9d1e..8ec2edc 100644
--- a/include/openssl/store.h
+++ b/include/openssl/store.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/tls1.h b/include/openssl/tls1.h
index 1253352..ed0380f 100644
--- a/include/openssl/tls1.h
+++ b/include/openssl/tls1.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
diff --git a/include/openssl/ts.h b/include/openssl/ts.h
index 3317e8f..3b58aa5 100644
--- a/include/openssl/ts.h
+++ b/include/openssl/ts.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/ui.h b/include/openssl/ui.h
index ab1d7e3..7c721ec 100644
--- a/include/openssl/ui.h
+++ b/include/openssl/ui.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/x509v3.h b/include/openssl/x509v3.h
index 08344e1..94f5561 100644
--- a/include/openssl/x509v3.h
+++ b/include/openssl/x509v3.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/record/rec_layer_s3.c b/ssl/record/rec_layer_s3.c
index fbb7461..ea70258 100644
--- a/ssl/record/rec_layer_s3.c
+++ b/ssl/record/rec_layer_s3.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c
index 7efffd7..8f0d3e1 100644
--- a/ssl/s3_lib.c
+++ b/ssl/s3_lib.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
diff --git a/ssl/s3_msg.c b/ssl/s3_msg.c
index 6e102a1..4238254 100644
--- a/ssl/s3_msg.c
+++ b/ssl/s3_msg.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/ssl_conf.c b/ssl/ssl_conf.c
index cb4ff8d..2c50d19 100644
--- a/ssl/ssl_conf.c
+++ b/ssl/ssl_conf.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2012-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/statem/extensions_clnt.c b/ssl/statem/extensions_clnt.c
index 477536c..6bc3d0d 100644
--- a/ssl/statem/extensions_clnt.c
+++ b/ssl/statem/extensions_clnt.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/statem/extensions_cust.c b/ssl/statem/extensions_cust.c
index 60a7c37..a4cdc81 100644
--- a/ssl/statem/extensions_cust.c
+++ b/ssl/statem/extensions_cust.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2014-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/statem/extensions_srvr.c b/ssl/statem/extensions_srvr.c
index 27ff5a5..d1be32c 100644
--- a/ssl/statem/extensions_srvr.c
+++ b/ssl/statem/extensions_srvr.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/statem/statem.c b/ssl/statem/statem.c
index 95c369a..818e648 100644
--- a/ssl/statem/statem.c
+++ b/ssl/statem/statem.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/statem/statem.h b/ssl/statem/statem.h
index 3242c78..58cc4f4 100644
--- a/ssl/statem/statem.h
+++ b/ssl/statem/statem.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/statem/statem_dtls.c b/ssl/statem/statem_dtls.c
index 0ac60cb..9bda18b 100644
--- a/ssl/statem/statem_dtls.c
+++ b/ssl/statem/statem_dtls.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/ssl/tls13_enc.c b/ssl/tls13_enc.c
index 05355fb..9311866 100644
--- a/ssl/tls13_enc.c
+++ b/ssl/tls13_enc.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/asn1_time_test.c b/test/asn1_time_test.c
index 9b44b71..25105c6 100644
--- a/test/asn1_time_test.c
+++ b/test/asn1_time_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/bntest.c b/test/bntest.c
index 19880a7..d6696e6 100644
--- a/test/bntest.c
+++ b/test/bntest.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/cipherlist_test.c b/test/cipherlist_test.c
index b4e6ea2..50e3027 100644
--- a/test/cipherlist_test.c
+++ b/test/cipherlist_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL licenses, (the "License");
  * you may not use this file except in compliance with the License.
diff --git a/test/clienthellotest.c b/test/clienthellotest.c
index 32103d0..4f6bd40 100644
--- a/test/clienthellotest.c
+++ b/test/clienthellotest.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/ct_test.c b/test/ct_test.c
index 2d3c053..6c848af 100644
--- a/test/ct_test.c
+++ b/test/ct_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/handshake_helper.c b/test/handshake_helper.c
index 48392a4..16d2d73 100644
--- a/test/handshake_helper.c
+++ b/test/handshake_helper.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/modes_internal_test.c b/test/modes_internal_test.c
index 5f48bc1..18c0977 100644
--- a/test/modes_internal_test.c
+++ b/test/modes_internal_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/ossl_shim/ossl_shim.cc b/test/ossl_shim/ossl_shim.cc
index dec515d..5ef195c 100644
--- a/test/ossl_shim/ossl_shim.cc
+++ b/test/ossl_shim/ossl_shim.cc
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/ossl_shim/packeted_bio.h b/test/ossl_shim/packeted_bio.h
index 0a36b2c..436cf90 100644
--- a/test/ossl_shim/packeted_bio.h
+++ b/test/ossl_shim/packeted_bio.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/poly1305_internal_test.c b/test/poly1305_internal_test.c
index 106e108..7f7a9e3 100644
--- a/test/poly1305_internal_test.c
+++ b/test/poly1305_internal_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/30-test_afalg.t b/test/recipes/30-test_afalg.t
index cf8a68f..7f60ca6 100644
--- a/test/recipes/30-test_afalg.t
+++ b/test/recipes/30-test_afalg.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/40-test_rehash.t b/test/recipes/40-test_rehash.t
index 9e42742..191897e 100644
--- a/test/recipes/40-test_rehash.t
+++ b/test/recipes/40-test_rehash.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_comp.t b/test/recipes/70-test_comp.t
index 4ad566c..d11ba39 100644
--- a/test/recipes/70-test_comp.t
+++ b/test/recipes/70-test_comp.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_key_share.t b/test/recipes/70-test_key_share.t
index 512a3bc..46370c5 100644
--- a/test/recipes/70-test_key_share.t
+++ b/test/recipes/70-test_key_share.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_renegotiation.t b/test/recipes/70-test_renegotiation.t
index 85293a4..0951487 100644
--- a/test/recipes/70-test_renegotiation.t
+++ b/test/recipes/70-test_renegotiation.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslcbcpadding.t b/test/recipes/70-test_sslcbcpadding.t
index e69719e..85b26b8 100644
--- a/test/recipes/70-test_sslcbcpadding.t
+++ b/test/recipes/70-test_sslcbcpadding.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslcertstatus.t b/test/recipes/70-test_sslcertstatus.t
index 96a46ce..f66d343 100644
--- a/test/recipes/70-test_sslcertstatus.t
+++ b/test/recipes/70-test_sslcertstatus.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslmessages.t b/test/recipes/70-test_sslmessages.t
index 78d9737..1e46769 100644
--- a/test/recipes/70-test_sslmessages.t
+++ b/test/recipes/70-test_sslmessages.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslrecords.t b/test/recipes/70-test_sslrecords.t
index c830204..10c559e 100644
--- a/test/recipes/70-test_sslrecords.t
+++ b/test/recipes/70-test_sslrecords.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslsessiontick.t b/test/recipes/70-test_sslsessiontick.t
index 0f8ac81..cbf197d 100644
--- a/test/recipes/70-test_sslsessiontick.t
+++ b/test/recipes/70-test_sslsessiontick.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslsigalgs.t b/test/recipes/70-test_sslsigalgs.t
index fca53ac..c1d8272 100644
--- a/test/recipes/70-test_sslsigalgs.t
+++ b/test/recipes/70-test_sslsigalgs.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslsignature.t b/test/recipes/70-test_sslsignature.t
index 132ed28..034950e 100644
--- a/test/recipes/70-test_sslsignature.t
+++ b/test/recipes/70-test_sslsignature.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslskewith0p.t b/test/recipes/70-test_sslskewith0p.t
index 0d4284b..53a8b51 100644
--- a/test/recipes/70-test_sslskewith0p.t
+++ b/test/recipes/70-test_sslskewith0p.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslversions.t b/test/recipes/70-test_sslversions.t
index ce32df9..ab5a0a2 100644
--- a/test/recipes/70-test_sslversions.t
+++ b/test/recipes/70-test_sslversions.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_sslvertol.t b/test/recipes/70-test_sslvertol.t
index 24c3446..02d8457 100644
--- a/test/recipes/70-test_sslvertol.t
+++ b/test/recipes/70-test_sslvertol.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_tls13cookie.t b/test/recipes/70-test_tls13cookie.t
index dbf8c78..c1afb86 100644
--- a/test/recipes/70-test_tls13cookie.t
+++ b/test/recipes/70-test_tls13cookie.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_tls13downgrade.t b/test/recipes/70-test_tls13downgrade.t
index 967feb5..dbf011c 100644
--- a/test/recipes/70-test_tls13downgrade.t
+++ b/test/recipes/70-test_tls13downgrade.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_tls13hrr.t b/test/recipes/70-test_tls13hrr.t
index 47ef338..56b7faf 100644
--- a/test/recipes/70-test_tls13hrr.t
+++ b/test/recipes/70-test_tls13hrr.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_tls13kexmodes.t b/test/recipes/70-test_tls13kexmodes.t
index cdcfc8f..716e260 100644
--- a/test/recipes/70-test_tls13kexmodes.t
+++ b/test/recipes/70-test_tls13kexmodes.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_tls13messages.t b/test/recipes/70-test_tls13messages.t
index 4190ab5..35f36b6 100644
--- a/test/recipes/70-test_tls13messages.t
+++ b/test/recipes/70-test_tls13messages.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_tls13psk.t b/test/recipes/70-test_tls13psk.t
index 5cdc6fe..bd2508d 100644
--- a/test/recipes/70-test_tls13psk.t
+++ b/test/recipes/70-test_tls13psk.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/70-test_tlsextms.t b/test/recipes/70-test_tlsextms.t
index f31077c..547a2fc 100644
--- a/test/recipes/70-test_tlsextms.t
+++ b/test/recipes/70-test_tlsextms.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/80-test_ssl_new.t b/test/recipes/80-test_ssl_new.t
index bb60168..d5a130f 100644
--- a/test/recipes/80-test_ssl_new.t
+++ b/test/recipes/80-test_ssl_new.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/90-test_tls13encryption.t b/test/recipes/90-test_tls13encryption.t
index 3fb4810..f997b4d 100644
--- a/test/recipes/90-test_tls13encryption.t
+++ b/test/recipes/90-test_tls13encryption.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/siphash_internal_test.c b/test/siphash_internal_test.c
index d5602d9..573c15d 100644
--- a/test/siphash_internal_test.c
+++ b/test/siphash_internal_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/ssl_test_ctx.c b/test/ssl_test_ctx.c
index 1f7db2e..c55b272 100644
--- a/test/ssl_test_ctx.c
+++ b/test/ssl_test_ctx.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/ssl_test_ctx.h b/test/ssl_test_ctx.h
index 0ec87ce..f9b9217 100644
--- a/test/ssl_test_ctx.h
+++ b/test/ssl_test_ctx.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/sslapitest.c b/test/sslapitest.c
index c7b06e0..0b6af66 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/testutil/format_output.c b/test/testutil/format_output.c
index 4707ff7..6ee2a1d 100644
--- a/test/testutil/format_output.c
+++ b/test/testutil/format_output.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/tls13secretstest.c b/test/tls13secretstest.c
index f08b5d3..c19bd2c 100644
--- a/test/tls13secretstest.c
+++ b/test/tls13secretstest.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/v3nametest.c b/test/v3nametest.c
index d6749b7..08684ea 100644
--- a/test/v3nametest.c
+++ b/test/v3nametest.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2012-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2012-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/util/perl/TLSProxy/Message.pm b/util/perl/TLSProxy/Message.pm
index 0311490..68179d9 100644
--- a/util/perl/TLSProxy/Message.pm
+++ b/util/perl/TLSProxy/Message.pm
@@ -1,4 +1,4 @@
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/util/perl/TLSProxy/Record.pm b/util/perl/TLSProxy/Record.pm
index 47daf92..c949287 100644
--- a/util/perl/TLSProxy/Record.pm
+++ b/util/perl/TLSProxy/Record.pm
@@ -1,4 +1,4 @@
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/util/perl/checkhandshake.pm b/util/perl/checkhandshake.pm
index 2f4a296..c53b96d 100644
--- a/util/perl/checkhandshake.pm
+++ b/util/perl/checkhandshake.pm
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy

From matt at openssl.org  Tue Feb 13 14:00:10 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 13 Feb 2018 14:00:10 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_1-pre1 create
Message-ID: <1518530410.701956.10519.nullmailer@dev.openssl.org>

The annotated tag OpenSSL_1_1_1-pre1 has been created
        at  49527e7167812b31cc7116f7ac43ff339a44aaf6 (tag)
   tagging  6aa85b5b611419582dcec8bd8dbe64e90c442e06 (commit)
  replaces  OpenSSL_1_1_0-pre6
 tagged by  Matt Caswell
        on  Tue Feb 13 13:48:07 2018 +0000

- Log -----------------------------------------------------------------
OpenSSL 1.1.1-pre1 release tag
-----BEGIN PGP SIGNATURE-----

iQEuBAABCAAYBQJaguyXERxtYXR0QG9wZW5zc2wub3JnAAoJENnE0m0OYESRO/sI
AJiYooLiT5/7IsjvWoJ8PjKDcmdqySovxcORtzoAfeq8qf0u7p9nBLa4FJAKDYbM
Xy22TVFWzQM85lxfVgodI2c+TXr8ceHJXy1+w7S7eeIdZbXshl2lWnC8AYEVCeUq
bzctY84gfHi6KXxIzLD2Qpty2RJxEFMKBdHjrFhwDvsdkbr3a0A9WZe1eQ4KpKLt
if5grn+Zf+4kaRunMgCmsCi/3R1MPtrsiyA+K/0Fopl5/s9ocARuy1HfyyjpayTU
InV7ev39l+G1gCB6pnOBxTglR6AlpuyFLMm3VBssq1CwudUW9ocprYbPd09tON2O
HhRIvgZnXEauR6sTXN1Y+Fc=
=5gty
-----END PGP SIGNATURE-----

Aashil Patel (1):
      Remove unnecessary if condition from apps.c

Adam Langley (6):
      Fix test of first of 255 CBC padding bytes.
      Fix copy-pasteism in CFI directives.
      perlasm/x86_64-xlate.pl: typo fix in comment.
      sha/asm/sha1-x86_64.pl: add CFI annotations.
      Small primes are primes too.
      nistp521: add a comment to the P+P exceptional case in point_add.

Adrian Vollmer (1):
      Adjust the default value of the private key size

Alessandro Ghedini (1):
      Use switch instead of multiple ifs

Alex Gaynor (9):
      GH1537: Avoid double-free in the EVP_PKEY API
      Annotate ASN.1 attributes of the jurisdictionCountryName NID
      Fixed #3020 -- set entry type on SCTs from X.509 and OCSP extensions
      Don't use a for-loop decleration
      This is an int
      Style fixes and use the source parameter so the OCSP path works
      Update the test to assert that the SCT is from an X.509 extension
      Newlines!
      Fixed merge nonsense

AlexDenisov (1):
      [packettest] Fix misplaced parentheses

Alexey Komnin (1):
      Fix tls1_generate_master_secret

Alfred E. Heggestad (1):
      add callback handler for setting DTLS timer interval

Andrea Grandi (6):
      Add missing .pod extension to EVP_PKEY_CTX_set_tls1_prf_md
      Fix broken link to ASYNC_get_wait_ctx and rewrap the paragraph
      Improve PRF documentation
      Add test to show wrong behavior of ASYNC_WAIT_CTX
      Remove fd from the list when the engine clears the wait context before pause
      Further improvements to ASYNC_WAIT_CTX_clear_fd

Andrew Siplas (1):
      Fixes #4459 "issuserAltName" documentation typo.

Andy (1):
      Code health: ssl/ssl_locl.h unused macros

Andy Grundman (1):
      Remove -xtarget=ultra from solaris(64)-sparcv9-cc builds.

Andy Polyakov (301):
      sha/asm/sha1-x86_64.pl: fix crash in SHAEXT code on Windows.
      crypto/sparcv9cap.c: fix overstep in getisax.
      crypto/ui/ui_openssl.c: let new-line through after query in Windows path.
      crypto/sparcv9cap.c: add missing declaration.
      test/ssl_test.tmpl: make it work with elderly perl.
      Configure: recognize -static as link option and disable incompatible options.
      ARMv8 assembly pack: add Samsung Mongoose results.
      ecp_nistz256.c: get is_one on 32-bit platforms right.
      evp/bio_enc.c: refine non-overlapping logic.
      Add test/bio_enc_test.c.
      crypto/pkcs12: add UTF8 support.
      Add PKCS#12 UTF-8 interoperability test.
      crypto/pkcs12: default to UTF-8.
      crypto/pkcs12: facilitate accessing data with non-interoperable password.
      bn/asm/x86[_64]-mont*.pl: implement slightly alternative page-walking.
      80-test_pkcs12.t: skip the test on Windows with non-Greek locale.
      evp/bio_enc.c: stop using pointer arithmetic for error detection.
      ec/asm/ecp_nistz256-x86_64.pl: addition to perform stricter reduction.
      ec/asm/ecp_nistz256-*.pl: addition to perform stricter reduction.
      ec/ecp_nistz256: harmonize is_infinity with ec_GFp_simple_is_at_infinity.
      ec/ecp_nistz256: harmonize is_infinity with ec_GFp_simple_is_at_infinity.
      ec/asm/ecp_nistz256-x86_64.pl: /cmovb/cmovc/ as nasm doesn't recognize cmovb.
      Configurations/10-main.conf: fix solaris64-*-cc link problems.
      Don't switch password formats using global state.
      Windows: UTF-8 opt-in for command-line arguments and console input.
      CHANGES: mention Windows UTF-8 opt-in option.
      bn/asm/ppc.pl: harmonize .size directive in bn_mul_words.
      perlasm/ppc-xlate.pl: recognize .type directive.
      Add ecp_nistz256-ppc64 module.
      crypto/bn/*: x86[_64] division instruction doesn't handle constants, change constraint from 'g' to 'r'.
      Configurations/10-main.conf: remove solaris-x86-cc target.
      Configurations/10-main.conf: fix omittions in commentary.
      Configurations/10-main.conf: add android64-x86_64 target.
      MIPS assembly pack: adapt it for MIPS[32|64]R6.
      Configurations/10-main.conf: add android64-mips64 target.
      Configure: clarify and refine -static.
      modes/asm/ghash-armv4.pl: improve interoperability with Android NDK.
      chacha/asm/chacha-ppc.pl: add missing .text directive.
      Configurations/10-main.cf: AIX "facelift".
      engines/afalg: make it compile with backward compatibility headers.
      Configure: impose ^X on whole build procedure.
      bn/bn_lcl.h: improve interoperability with clang and Android NDK.
      Configure: detect gcc's dependency generation capability more accurately.
      rand/randfile.c: restore fallback to $HOME for non-setuid programs.
      rand/randfile.c: rationalize __OpenBSD__ code path.
      rand/randfile.c: treat empty string in RAND_file_name as error.
      .travis.yml: install wine on demand.
      .travis.yml: minor optimizations:
      doc/crypto/OPENSSL_ia32cap.pod: update assembler requirements.
      crypto/sha: add Keccak1600 primitives to build SHA-3 upon.
      sha/keccak1600.c: add known answer and verify result with memcmp.
      x86_64 assembly pack: add Goldmont performance results.
      sha/asm/sha512-armv8.pl: adapt for kernel use.
      bn/asm/ppc-mont.pl: prepare for extension.
      bn/asm/ppc-mont.pl: add optimized multiplication and squaring subroutines.
      ppccap.c: engage new multipplication and squaring subroutines.
      sha/keccak1600.c: add couple of soft asserts.
      test/bntest.c: regression test for CVE-2016-7055.
      bn/asm/x86_64-mont.pl: fix for CVE-2016-7055 (Low severity).
      aes/asm/aesp8-ppc.pl: improve [backward] portability.
      test: add TLS application data corruption test.
      test/evptests.txt: add negative tests for AEAD ciphers.
      PPC assembler pack: add some PPC970/G5 performance data.
      chacha/asm/chacha-x86.pl: improve [backward] portability.
      sha/keccak1600.c: add some optimized implementations.
      sha/asm/sha512-armv8.pl: add NEON version of SHA256.
      Configurations/10-main.conf: document GCC for Solaris config constraint.
      Configurations/10-main.conf: remove obsolete flag from solaris-x86-gcc.
      sha/asm/sha512-armv8.pl: fix big-endian support in __KERNEL__ case.
      bn/asm/ppc-mont.pl: signal no-op in 32-bit bit build.
      test/evptests.txt: add regression test for false carry in ctr128.c.
      modes/ctr128.c: fix false carry in counter increment procedure.
      INSTALL: clarify 386 and no-sse2 options.
      poly1305/poly1305_base2_44.c: add reference base 2^44 implementation.
      x86_64 assembly pack: add AVX512 ChaCha20 and Poly1305 code paths.
      perlasm/x86_64-xlate.pl: refine sign extension in ea package.
      man3/OPENSSL_ia32cap.pod: clarify AVX512 support in clang context.
      perlasm/x86_64-xlate.pl: add support for AVX512 OPMASK-ing.
      poly1305/asm/poly1305-x86_64.pl: allow nasm to assemble AVX512 code.     chacha/asm/chacha-x86_64.pl: refine nasm version detection logic.
      x86 assembly pack: update performance results.
      chacha/asm/chacha-x86_64.pl: add AVX512 path optimized for shorter inputs.
      ec/asm/ecp_nistz256-ppc64.pl: minor POWER8-specific optimization.
      poly1305/poly1305_base2_44.c: clarify shift boundary condition.
      Replace div-spoiler hack with simpler code
      crypto/evp: harden RC4_MD5 cipher.
      crypto/evp: harden AEAD ciphers.
      test/bntest.c: regression test for carry bug in bn_sqr8x_internal.
      bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal.
      crypto/x86_64cpuid.pl: detect if kernel preserves %zmm registers.
      perlasm/x86_64-xlate.pl: clarify SEH coding guidelines.
      x86_64 assembly pack: Win64 SEH face-lift.
      Rename 90-test_fuzz.t to 99-test_fuzz.t to ensure that it's executed last.
      bn/asm/rsaz-avx2.pl: refine Win64 SE handler.
      perlasm/x86_64-xlate.pl: minor readability updates.
      perlasm/x86_64-xlate.pl: remove obsolete .picmeup synthetic directive.
      perlasm/x86_64-xlate.pl: recognize DWARF CFI directives.
      bn/asm/x86_64*: add DWARF CFI directives.
      perlasm/x86_64-xlate.pl: fix pair of typo-bugs in the new cfi_directive.
      modes/asm/*-x86_64.pl: add CFI annotations.
      {md5,rc4}/asm/*-x86_64.pl: add CFI annotations.
      ec/asm/ecp_nistz256-x86_64.pl: fix typo-bug in Win64 SE handler.
      ec/asm/ecp_nistz256-x86_64.pl: add CFI directives.
      perlasm/x86_64-xlate.pl: recognize even offset(%reg) in cfa_expression.
      aes/asm/*-x86_64.pl: add CFI annotations.
      sha/asm/*-x86_64.pl: add CFI annotations.
      ARMv4 assembly pack: harmonize Thumb-ification of iOS build.
      crypto/armcap.c: short-circuit processor capability probe in iOS builds.
      test/README: clarify last test number group
      .travis.yml: remove osx from build matrix.
      appveyor.yml: engage VC-WIN64A-masm.
      .travis.yml: make package pulls conditional.
      .travis.yml: introduce concept of "extended tests"
      poly1305/asm/poly1305-x86_64.pl: optimize AVX512 code path.
      poly1305/asm/poly1305-x86_64.pl: switch to vpermdd in table expansion.
      poly1305/asm/poly1305-x86_64.pl: add VPMADD52 code path.
      chacha/asm/chacha-x86_64.pl: add CFI annotations.
      poly1305/asm/poly1305-x86_64.pl: add CFI annotations.
      camellia/asm/cmll-x86_64.pl: add CFI annotations.
      whrlpool/asm/wp-x86_64.pl: add CFI annotations.
      crypto/x86_64cpuid.pl: add CFI annotations.
      poly1305/asm/poly1305-x86_64.pl: minor AVX512 optimization.
      crypto/des: remove unreferenced rcp_enc.c module.
      Configurations/50-masm.conf: add /nologo to ml64 command line.
      appveyor.yml: streamline pull requests.
      des/des_locl.h: clean up unused/irrelevant macros.
      bn/asm: clean up unused PA-RISC modules.
      CHANGES: mention CFI annotations.
      evp/e_aes_cbc_hmac_{sha1|sha256}.c: tag reference code.
      aes/aes_x86core.c: clarify reference implementation status.
      bio/b_addr.c: omit private hstrerror.
      Configurations/10-main.conf: omit redundant -lresolv from Solaris configs.
      apps/s_client.c: harden ldap_ExtendedResponse_parse.
      appveyor.yml: call upon cmd to redirect stderr.
      test: add chacha_internal_test.
      crypto/x86_64cpuid.pl: move extended feature detection upwards.
      crypto/x86*cpuid.pl: move extended feature detection.
      poly1305/asm/poly1305-armv8.pl: ilp32-specific poly1305_init fix.
      poly1305/asm/poly1305-x86_64.pl: add poly1305_blocks_vpmadd52_4x.
      .travis.yml: make git submodule update conditional.
      test/recipes/03-test_internal_*: call setup() first.
      NOTES.WIN: mention Strawberry Perl as option.
      x86_64 assembly pack: add some Ryzen performance results.
      poly1305/asm/poly1305-x86_64.pl: add poly1305_blocks_vpmadd52_8x.
      aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
      modes/ocb128.c: fix misaligned access in ILP32 builds on 64-bit processors.
      bn/asm/sparcv9-mont.pl: fix squaring code path.
      engines/e_capi.c: formatting and styling fixes.
      aes/asm/bsaes-armv7.pl: relax stack alignment requirement.
      apps/passwd.c: 32 bits are sufficient to hold ROUNDS_MAX.
      engine/e_capi.c: more formatting and styling fixes.
      engines/e_capi.c: adhere to CryptAcquireContextW unconditionally.
      engines/e_capi.c: slip in PROV_RSA_AES for interchangable CSP only.
      bio/b_print.c: fix %z failure in 32-bit build.
      bio/b_print.c: recognize even 'j' format modifier.
      apps/*.c: switch to platform-neutral format modifiers in BIO_print calls.
      e_os.h: drop now-redundant PRIu64 [and fix OSSLzu].
      bio/b_print.c: switch to int64_t as "greatest-width integer type".
      e_afalg.[ch]: fix --strict-warnings with gcc 4.x and 32-bit build.
      Configure: use 5.10.0, don't require...
      crypto/ppccap.c: SIGILL-free processor capabilities detection on MacOS X.
      Configure: recognize -framework as linker option [on Apple OSes].
      Configurations/README: reword bn_ops description.
      appveyor.yml: split {build,test}_scripts to avoid exit code masking.
      asn1/x_long.c: remove conditions in inner loops and dependency on BN.
      rand/rand_lib.c: keep fixing no-engine configuration.
      testlib/OpenSSL/Test.pm: keep default input private.
      asn1/a_int.c: remove code duplicate and optimize branches,
      asn1/a_int.c: simplify asn1_put_uint64.
      asn1/a_int.c: don't write result if returning error.
      asn1/a_int.c: clean up asn1_get_int64.
      test: don't make it more complicated than necessary.
      fuzz/{client,server}.c: omit _time64 "overload method".
      asn1/a_int.c: fix "next negative minimum" corner case in c2i_ibuf.
      test/asn1_encode_test.c: test "next negative minimum" corner case.
      perlasm/x86_64-xlate.pl: work around problem with hex constants in masm.
      sha/sha512.c: fix formatting.
      test/test_test.c: fix wrong BN test [and rearrange tests a little bit].
      test/run_tests.pl: don't mask test failures.
      test/secmemtest.c: clarify limitations for huge secure memory arena test.
      aria/aria.c: address undefined behaviour warning in small-footprint path.
      modes/ocb128.c: address undefined behaviour warning.
      test/evp_test.c: improve output in case of errors.
      sha/keccak1600.c: implement bit interleaving optimization.
      sha/keccak1600.c: implement lane complementing transform
      ec/asm/ecp_nistz256-x86_64.pl: minor sqr_montx cleanup.
      sha/keccak1600.c: add ARM-specific "reference" tweaks.
      sha/keccak1600.c: add another 1x variant.
      sha/keccak1600.c: reduce temporary storage utilization even futher.
      sha/keccak1600.c: add #ifdef KECCAK1600_ASM.
      Add sha/asm/keccak1600-armv4.pl.
      sha/asm/keccak1600-armv4.pl: optimization based on profiler feedback.
      sha/asm/keccak1600-armv4.pl: add SHA3_absorb and SHA3_squeeze.
      sha/asm/keccak1600-armv4.pl: add NEON code path.
      sha/keccak1600.c: switch to more efficient bit interleaving algorithm.
      sha/asm/keccak1600-armv4.pl: switch to more efficient bit interleaving algorithm.
      perlasm/ppc-xlate.pl: add PowerISA 3.0B instructions.
      Add sha/asm/keccak1600-armv8.pl.
      Add sha/asm/keccak1600-c64x.pl
      Add Keccak-1600 modules for PPC64 and POWER8.
      sha/asm/sha512p8-ppc.pl: add POWER8 performance data.
      Add sha/asm/keccak1600-mmx.pl, x86 MMX module.
      sha/asm/keccak1600-mmx.pl: optimize for Atom and add comparison data.
      Add sha/asm/keccak1600-x86_64.pl.
      sha/asm/keccak1600-x86_64.pl: remove redundant moves.
      sha/asm/keccak1600-x86_64.pl: optimize by re-ordering instructions.
      sha/asm/keccak1600-x86_64.pl: add CFI directives.
      Add sha/asm/keccak1600-s390x.pl.
      x86_64 assembly pack: fill some blanks in Ryzen results.
      sha/asm/keccak1600-s390x.pl: typo and readability, minor size optimization.
      sha/asm/keccak1600-x86_64.pl: close gap with Keccak Code Package.
      sha/keccak1600.c: internalize KeccakF1600 and simplify SHA3_absorb.
      objects/objects.txt: add SHA3 OIDs.
      'make update' after objects/objects.txt update.
      Add sha/asm/keccak1600-avx512.pl.
      Add sha/asm/keccak1600-avx2.pl.
      Optimize sha/asm/keccak1600-avx2.pl.
      sha/asm/keccak1600-avx2.pl: remodel register usage.
      sha/asm/keccak1600-avx2.pl: optimized remodelled version.
      x86_64 assembly pack: "optimize" for Knights Landing, add AVX-512 results.
      sha/asm/keccak1600-avx512.pl: absorb bug-fix and minor optimization.
      sha/asm/keccak1600-avx512.pl: improve performance by 17%.
      evp/e_aes_cbc_hmac_sha256.c: give SHAEXT right priority.
      aes/asm/aesni-sha*-x86_64.pl: add SHAEXT performance results.
      crypto/x86_64cpuid.pl: fix typo in Knights Landing detection.
      sha/keccak1600.c: build and make it work with strict warnings.
      Add evp/m_sha3.c.
      Wire SHA3 EVPs and add tests.
      bn/bn_lcl.h: improve inline assembly coverage on PPC64.
      bn/bn_lcl.h: use __int128 whenever possible, not only on MIPS.
      bn/bn_lcl.h: restore formatting.
      asn1/a_time.c: make handling of 'fractional point' formally correct.
      sha/keccak1600.c: choose more sensible default parameters.
      sha/asm/keccak1600-armv4.pl: improve non-NEON performance by ~10%.
      recipes/80-test_ca.t: make it work with spaces in pathnames.
      Add EVP_DigestFinalXOF, interface to extendable-output functions, XOFs.
      Wire SHAKE to EVP.
      sha/asm/keccak1600-avx512.pl: fix buglet in SHA3_squeeze tail.
      sha/asm/keccak1600-armv4.pl: optimize for Thumb-2.
      err/err.c: fix "wraparound" bug in ERR_set_error_data.
      err/err.c: improve readability.
      Revert "Allow --strict-warnings with the icc compiler as well"
      Configure: base compiler-specific decisions on pre-defines.
      ssl/statem/*.c: address "enum mixed with another type" warnings.
      ssl/statem/extensions_clnt.c: fix return code buglet.
      crypto/cryptlib.c: mask more capability bits upon FXSR bit flip.
      test/run_tests.pl: don't use Module::Load::Conditional.
      config: get "stty technique" working again on MacOS X.
      sha/asm/keccak1600-armv8.pl: fix return value buglet and ...
      objects/objects.txt: fix RSA-SHA3-284 typo.
      objects/obj_xref.txt: cross-reference SHA3 and rsaEncryption.
      evp/m_sha3.c: wire SHA3 to rsaEncryption.
      rsa/rsa_pmeth.c: recognize SHA3 as supported RSA digest.
      Configure: unify clang's -Qunused-arguments option treatment.
      Configure: add -Wmisleading-indentation to strict warnings flags.
      stack/stack.c: various cleanups.
      crypto/x509v3/v3_utl.c, ssl/ssl_cert.c: fix Coverity problems.
      modes/gcm128.c: harmonize GCM_MUL macro with GHASH.
      x509v3/v3_utl.c: avoid double-free.
      bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqrx8x_internal.
      test/bntest.c: add bn_sqrx8x_internal regression test.
      aes/asm/{aes-armv4|bsaes-armv7}.pl: make it work with binutils-2.29.
      OPENSSL_ia32cap: reserve for new extensions.
      Configurations/unix-Makefile.tmpl: fix HP-UX build.
      00-base-templates.conf: fix ia64 builds.
      util/copy.pl: work around glob quirk in some of earlier 5.1x Perl versions.
      asn1/a_strex.c: fix flags truncation in do_esc_char.
      evp/pbe_scrypt.c: add boundary condition for implicit cast.
      ssl/ssl_asn1.c: resolve warnings in VC-WIN32 build, which allows to add /WX.
      Resolve warnings in VC-WIN32 build, which allows to add /WX.
      Configurations/10-main.conf: add back /WX to VC-WIN32.
      ARMv8 assembly pack: add Qualcomm Kryo results.
      bn/bn_add.c: address performance regression.
      bn/bn_exp.c: harmonize BN_mod_exp_mont_consttime with negative input.
      Iron out /WX errors in VC-WIN32.
      crypto/x86_64cpuid.pl: fix AVX512 capability masking.
      rsa/rsa_gen.c: ensure backward compatibility with external rsa->meth.
      poly1305/asm/poly1305-x86_64.pl: switch to pure AVX512F.
      chacha/asm/chacha-x86_64.pl: fix sporadic crash in AVX512 code path.
      rsa/rsa_lib.c: make RSA_security_bits multi-prime aware.
      rsa/rsa_gen.c: harmonize keygen's ability with RSA_security_bits.
      modes/asm/ghashv8-armx.pl: implement 4x aggregate factor.
      modes/asm/ghashv8-armx.pl: modulo-schedule loop.
      modes/asm/ghashv8-armx.pl: optimize modulo-scheduled loop.
      modes/asm/ghashv8-armx.pl: handle lengths not divisible by 4x.
      bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.
      test/bntest.c: add rsaz_1024_mul_avx2 regression test.
      crypto/x86_64cpuid.pl: suppress AVX512F flag on Skylake-X.
      chacha/asm/chacha-x86_64.pl: add AVX512VL code path.
      Add sha/asm/keccak1600-avx512vl.pl.
      poly1305/asm/poly1305-x86_64.pl: add Knights Landing AVX512 result.
      ec/ecp_nistp*.c: sanitize for undefined/implmentation-specific behaviour.
      ec/curve25519.c: "double" ecdhx25519 performance on 64-bit platforms.
      ec/ecp_nistz256.c: improve ECDSA sign by 30-40%.
      ec/asm/ecp_nistz256-x86_64.pl: add .cfi and SEH handlers to new functions.
      ec/asm/ecp_nistz256-armv8.pl: add optimized inversion.
      ec/ecp_nistz256.c: switch to faster addition chain in scalar inversion.
      ec/curve25519.c: avoid 2^51 radix on SPARC.
      poly1305/poly1305_ieee754.c: add support for MIPS.
      test/asn1_time_test.c: fix pre-C90 warning.
      crypto/armcap.c: detect hardware-assisted SHA512 support.
      sha/asm/sha512-armv8.pl: add hardware-assisted SHA512 subroutine.

Azat Khuzhin (1):
      Remove ENGINE_load_dasync() (no OPENSSL_INIT_ENGINE_DASYNC already)

Balaji Marisetti (1):
      Addressed build failure because of missing #ifdef AF_UNIX guard     CLA: trivial

Baptiste Jonglez (2):
      afalg: Use eventfd2 syscall instead of eventfd
      afalg: Fix kernel version check

Beat Bolli (11):
      Update the location of the pod files
      Use consistent variable names in example
      doc/man3: use the documented coding style in the example code
      doc/man3: remove a duplicate BIO_do_accept() call
      ERR_put_error.pod: fix the name of function ERR_add_error_vdata()
      doc/man3: reformat the function prototypes in the synopses
      doc/man3: unindent a few unintended code blocks
      SSL_CTX_set_verify.pod: move a typedef in front of its first usage
      doc/man3: fix SSL_SESSSION typos
      doc: use /* ... */ comments in code examples
      doc/man3: use the documented coding style in the example code

Ben Kaduk (2):
      make update
      Fix more OCSP_resp_get0_signer() nits

Ben Laurie (5):
      Don't use DES when disabled.
      Make dependencies if Makefile is new.
      Remove untrue comment.
      Remove annoying and pointless pause.
      Remove unused variable.

Benjamin Kaduk (115):
      Remove some unused options from 10-main.conf
      Sort %disabled in Configure
      Wordsmith INSTALL
      Try to unify BIO read/write parameter names
      Fix grammar-o in CONTRIBUTING
      Restore the ERR_FATAL_ERROR() macro
      Do not overallocate for tmp.ciphers_raw
      Use _WIN32 over WIN32 for preprocessor conditional
      output number of exts from tls_collect_extensions()
      Store the number of extensions in CLIENTHELLO_MSG
      Move CLIENTHELLO_MSG up in the header
      Add more first-class support for SCSVS
      Let ssl_get_cipher_by_char yield not-valid ciphers
      Export SSL_bytes_to_cipher_list()
      Refactor SSL_bytes_to_cipher_list()
      Tests for SSL_bytes_to_cipher_list()
      Prepare for WORK_MORE_C
      Add SSL_CTX early callback
      Tests for SSL early callback
      Adopt test to changed behavior
      Use correct variable in test diagnostic
      Let test handshakes stop on certain errors
      Add an sslapitest for early callback
      Add test corpus for PEM reading
      Add AGL's "beer mug" PEM file as another test input
      Don't free in cleanup routine
      Remove OPENSSL_indirect_call()
      Fix some -Wshadow warnings
      Fix a -Wsign-compare warning
      De-obfuscate
      Clear alpn_selected_len for clients, too
      Tighten up client status_request processing
      Remove dead code
      Remove some unused PEM structures
      Remove unused typedefs from indent config
      Remove documentation of deleted function
      Further de-obfuscation
      Allow an ALPN callback to pretend to not exist
      Add -Wextra to gcc devteam warnings
      Address some -Wold-style-declaration warnings
      Remove duplicates from clang_devteam_warnings
      Add PEM_read_bio_ex
      Add PEM_bytes_read_bio_secmem()
      Make PEM_read_{,bio_}PrivateKey use secmem
      Add unit test for PEM_FLAG_ONLY_B64
      Remove stale note from s_server.pod
      Fix memory leaks in CTLOG_new_from_base64
      drop some no-longer-relevant TODO(TLS1.3) entries
      TLS 1.3 client sigalgs test no longer needs TLS 1.2
      Add SSL_early_get1_extensions_present()
      Add sslapitest for SSL_early_get1_extensions_present()
      Fix no-ec
      Disallow DSA/SHA1/etc. for pure TLS 1.3 ClientHellos
      Add constants for TLS 1.3 SignatureScheme values
      Fix no-dsa build
      Add tests for deprecated sigalgs with TLS 1.3 ClientHellos
      Fix no-dsa build again
      Fix return-value checks in OCSP_resp_get1_id()
      Improve BN_CTX documentation
      Error out when forcing an unsupported TLS version
      Remove trailing whitespace from drbgtest.c
      typedef's for RAND_DRBG methods
      Fix out-of-bounds read in ctr_XOR
      Define a value for SYS_F_FCNTL
      Fixups for STORE commit
      Catch up to the removal of OSSL_STORE_open_file()
      Improve style
      Remove trailing whitespace from store-related man pages
      Fix memory leak in session cache test
      Don't modify resumed session objects
      Move ALPN handling from finalizer to delayed call
      Add SSL_get_pending_cipher()
      Tighten up SSL_get1_supported_ciphers() docs
      Fixup include path in ossl_shim test after e_os.h work
      Fix long SNI lengths in test/handshake_helper.c
      Restore historical behavior for absent ServerHello extensions
      Fix test_client_hello with no-tls1_2_method
      Fix typo in comment
      Fix no-ec no-dh build
      Reenable s_server -dhparam option
      Move supportedgroup ext-block fields out of NO_EC
      Appease -Werror=maybe-uninitialized
      Fix memory leak in DH_get_nid()
      Add missing RAND_DRBG locking
      Fix a couple nits in DEFINE_STACK_OF.pod
      Use atomics for SSL_CTX statistics
      Normalize on session_ctx for stats where possible
      Provide SSL_CTX.stats.sess_accept for switched ctxs
      Fix memory leak in crltest error case
      Prevent NULL dereference in async clear-fd code
      Conditionalize fuzz tests on feature macros
      Add an API to get the signer of an OCSP response
      Add OCSP API test executable
      Fix no-ec
      Fix coverity-reported errors in ocspapitest
      Fix coverity nit in handshake_helper.c
      Wrap more of ocspapitest.c in OPENSSL_NO_OCSP
      Fix test_tls13messages with no-ocsp
      Fix typo in comment
      Permit the "supported_groups" extension in ServerHellos
      Test that supported_groups is permitted in ServerHello
      enc(1): document that AEAD is not and will not be supported
      Fix no-ec --strict-warnings builds
      Bump TLS1_3_VERSION_DRAFT for draft-23
      Renumber TLSEXT_TYPE_key_share for draft-23
      Add TLS 1.3 draft-23 PSS signature algorithms
      Propagate TLS 1.3 sigalgs through tls1_set_sigalgs()
      Update documentation for SSL_set1_sigalgs()
      Add support for the TLS 1.3 signature_algorithms_cert extension
      Add TLSProxy tests for signature_algorithms_cert
      Fix uninitialized read in sigalg parsing code
      Fix ssl-trace with TLS 1.3 draft-23 PSS sigalgs
      Catch some more old sigalg names in comments
      Revert the crypto "global lock" implementation
      Restore clearing of init_lock after free

Bernard Spil (1):
      openssl enc: Don't unbuffer stdin

Bernd Edlinger (85):
      Fix a memory leak in RSA_padding_add_PKCS1_OAEP_mgf1
      Check the exit code from the server process
      fix a memory leak in ssl3_generate_key_block fix the error handling in ssl3_change_cipher_state
      Fix a ssl session leak due to OOM in lh_SSL_SESSION_insert
      Fix error handling in compute_key, BN_CTX_get can return NULL
      remove test/.rnd on make clean
      Combined patch against master branch for the following issues:
      Fix a crash with malformed user notice policy numbers
      Fix a crash in EVP_CIPHER_CTX_cleanup due to cipher_data may be NULL     or EVP_CTRL_INIT/EVP_CTRL_COPY was not called or failed.     If that happens in EVP_CipherInit_ex/EVP_CIPHER_CTX_copy set cipher = NULL,     aes_gcm_cleanup should check that gctx != NULL before calling OPENSSL_cleanse.
      Use TLSEXT_KEYNAME_LENGTH in tls_decrypt_ticket.
      Rework error handling of custom_ext_meth_add towards strong exception safety.
      Fix a slightly confusing if condition in a2i_ASN1_INTEGER.
      Fix a few memleaks in TXT_DB.
      Fix some more memory leaks with TXT_DB_insert.
      Fix i2d_SSL_SESSION pp output parameter should point to end of asn1 data.
      Add some more consistency checks in tls_decrypt_ticket.
      Remove -Wno-parentheses-equality from gcc --strict-warnings options.     There has never been any gcc option of that kind.
      Add -Wundef to --strict-warnings options.
      Remove unnecessary memset after PR #2583 avoids accessing     the uninitialized session_id now.
      Fix handling of EVP_PKEY_CTRL_PKCS7_ENCRYPT/DECRYPT with OPENSSL_NO_CMS.
      Check that async_jobs is not negative and not too high.
      Reset executable bits on files where not needed.
      Fixup previous merge.
      Avoid questionable use of the value of a pointer
      Fix a crash or unbounded allocation in RSA_padding_add_PKCS1_PSS_mgf1     and RSA_verify_PKCS1_PSS_mgf1 with 512-bit RSA vs. sha-512.
      Added a test case for RSA_padding_add_PKCS1_PSS_mgf1.
      Fixed a crash in print_notice.
      Fix the error handling in CRYPTO_dup_ex_data.     Fix a strict aliasing issue in ui_dup_method_data.     Add test coverage for CRYPTO_dup_ex_data, use OPENSSL_assert.
      Don't access memory before checking the correct length in aesni_cbc_hmac_sha256_ctrl in case EVP_CTRL_AEAD_TLS1_AAD.
      Remove unnecessary loop in pkey_rsa_decrypt.
      Add parentheses on public macros where appropriate.     Fixes #3063.
      Fix a pedantic gcc-7 warning.
      Fix gcc-7 warnings.     - Mostly missing fall thru comments     - And uninitialized value used in sslapitest.c
      Fix memleak in EVP_DigestSignFinal/VerifyFinal.
      Fix a memleak in tls13_generate_secret.
      Fix a memleak in ec_copy_parameters.
      Fix a possible crash in the error handling.
      Fix crash in ecdh_simple_compute_key.
      Fix a possible crash in dsa_builtin_paramgen2.
      Fix another possible crash in rsa_ossl_mod_exp.
      Fix possible crash in X931 code.
      Fix the comment about default OPENSSLDIR in windows.
      Add a missing break in test/shlibloadtest.c
      Remove a pointless "#if 0" block from BN_mul.
      Fix the error handling in ERR_get_state:     - Ignoring the return code of ossl_init_thread_start created a memory leak.
      Fix the fall-out in 04-test_bioprint.t
      Add parentheses around macro argument of OSSL_NELEM.
      Fix a crash in tls_construct_client_certificate.
      Fix potential crash in tls_construct_finished.
      Fix crash in BUF_MEM_grow_clean.
      Fix error handling in get_header_and_data.
      Fix bogus use of BIO_sock_should_retry.
      Clean password buffer on stack for PEM_read_bio_PrivateKey     and d2i_PKCS8PrivateKey_bio before it goes out of scope.
      Add some test coverage for PEM_read_bio_PrivateKey
      Implement the CRYPTO_secure_clear_free function
      Use OPENSSL_secure_clear_free for secure mem BIOs and X25519 private keys
      Document OPENSSL_secure_clear_free
      Use OPENSSL_secure_clear_free in PEM_read_bio_PrivateKey and PEM_read_bio_ex
      Use OPENSSL_secure_clear_free in STORE file_load
      Add some test coverage for OPENSSL_secure_clear_free
      Fix an information leak in the RSA padding check code.     The memory blocks contain secret data and must be     cleared before returning to the system heap.
      Avoid surpising password dialog in X509 file lookup.
      Clear outputs in PKCS12_parse error handling.
      Clear secret stack values after use in curve25519.c
      Clear secret stack values after use in the ED25519-functions
      Fix the return type of felem_is_zero_int which should be int.     Change argument type of xxxelem_is_zero_int to const void*     to avoid the need of type casts.
      Fix error handling in SSL_new
      Add missing range checks on number of multi primes in rsa_ossl_mod_exp
      Minor cleanup of the rsa mp limits code
      Remove test-runs dir, adjust .gitignore
      Fix invalid function type casts.     Rename bio_info_cb to BIO_info_cb.
      Fix a typo in comment
      Alternate fix for ../test/recipes/80-test_ssl_old.t with no-ec
      Stop using unimplemented cipher classes.     Add comments to no longer usable ciphers.
      Fix error handling in X509_REQ_print_ex
      Catch SIGPIPE in TLSProxy::Proxy::clientstart
      Explicitly shut the socket down in s_client
      Use constant value 1 instead of SHUT_WR in do_server
      Set OPENSSL_ENGINES for Windows
      Add a configure option to opt-out secure memory
      Fix setting of IPV6_V6ONLY on Windows
      Make the s_server command listen on IPv6 only when requested
      Fix some style nits in commit eee8a40
      Swap the check in ssl3_write_pending to avoid using     the possibly indeterminate pointer value in wpend_buf.
      Remove code that prints "<SPACES/NULS>" in hexdumps     when the data block ends with SPACEs or NULs.

Camille Gu?rin (1):
      Fixed typo in X509_STORE_CTX_new description

Christian Heimes (3):
      Provide getters for min/max proto version
      Document SSL_OP_NO_RENEGOTIATION as new in 1.1.1
      Fix signature of min/max proto getter

Claus Assmann (1):
      Fix grammar error in SSL_CTX_set_min_proto_version

Cory Benfield (7):
      Add support for key logging callbacks.
      Add tests for the key logging callbacks.
      Add documentation for the key logging callbacks
      Limit the length of the encrypted premaster key.
      Add support for logging out TLSv1.3 secrets
      Test logging TLSv1.3 secrets.
      s_client accepts host/port as positional argument.

Cristian Stoica (5):
      speed.c: use size_t instead of int to match function signatures
      speed.c: simplify aggregation of rsa --multi results
      speed.c: simplify aggregation of dsa --multi results
      speed.c: simplify aggregation of ecdsa --multi results
      speed.c: simplify aggregation of ecdh --multi results

DK (1):
      Fixed deadlock in CRYPTO_THREAD_run_once for Windows

Daniel Bevenius (9):
      Fix minor typo in comment in rsa_st
      Correct minor typo in ssl_locl.h comment
      Make BIO_METHOD struct definitions consistent
      Minor improvements to ssl.pod
      Fix minor typo in bio.pod
      Add comments to NULL func ptrs in bio_method_st
      Remove extra `the` in SSL_SESSION_set1_id.pod
      Suggestion for improvements to x509.pod
      Fix minor 'the the' typos

Daniel Kahn Gillmor (1):
      Avoid failing s_server when client's psk_identity is unexpected

Dani?l van Eeden (1):
      Fix include in manpage of X509_check_host

Darren Tucker (1):
      DES keys are not 7 days long.

David Benjamin (32):
      Fix math in BN_bn2dec comment.
      Add a basic test for BN_bn2dec.
      Test CBC mode padding.
      Don't test quite so many of them.
      Address review comments.
      Switch back to assuming TLS 1.2.
      Add missing parameter.
      Remove trailing whitespace from some files.
      Fix up bn_prime.pl formatting.
      Implement RSASSA-PKCS1-v1_5 as specified.
      Make RSA_sign.pod less confusing.
      Improve RSA test coverage.
      Don't read uninitialised data for short session IDs.
      Fix typo in x86_64-mont5.pl CFI directives
      Remove duplicate X509_OBJECT free function.
      Numbers greater than 1 are usually non-negative.
      Remove filename argument to x86 asm_init.
      Fix the names of ChaCha20-Poly1305 cipher suites in t1_trce.c.
      Fix comment typo.
      Fix the names of older ciphers.
      Fix some documentation typos.
      Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.
      Fix test documentation.
      Introduce named constants for the ClientHello callback.
      Fix overflow in c2i_ASN1_BIT_STRING.
      Guard against DoS in name constraints handling.
      Allow DH_set0_key with only private key.
      Pretty-print large INTEGERs and ENUMERATEDs in hex.
      Fix chacha-armv4.pl with clang -fno-integrated-as.
      Make BN_num_bits_word constant-time.
      Don't leak the exponent bit width in BN_mod_exp_mont_consttime.
      Fix timing leak in BN_from_montgomery_word.

David Cooper (5):
      Add -rsigopt option to ocsp command
      Make editorial changes suggested by Rich Salz and add the -rsigopt option to the man page for the ocsp command.
      Make editorial changes suggested by Matt Caswell and fixed Travis failures.
      Add documentation for the OCSP_basic_sign() and OCSP_basic_sign_ctx() functions.
      Added "B" tag to all variables.

David Woodhouse (21):
      Fix SSL_export_keying_material() for DTLS1_BAD_VER
      Fix ossl_statem_client_max_message_size() for DTLS1_BAD_VER
      Fix DTLS_VERSION_xx() comparison macros for DTLS1_BAD_VER
      Fix cipher support for DTLS1_BAD_VER
      Make DTLS1_BAD_VER work with DTLS_client_method()
      Fix ubsan 'left shift of negative value -1' error in satsub64be()
      Add basic test for Cisco DTLS1_BAD_VER and record replay handling
      Fix clienthellotest to use PACKET functions
      Kill PACKET_starts() from bad_dtls_test
      Fix satsub64be() to unconditionally use 64-bit integers
      Avoid EVP_PKEY_cmp() crash on EC keys without public component
      Add enginesdir to libcrypto.pc pkg-config file
      Restore '-keyform engine' support for s_client
      Call ENGINE_init() before trying to use keys from engine
      Fix encrypt-then-mac implementation for DTLS
      Add SSL_OP_NO_ENCRYPT_THEN_MAC
      Add DTLS_get_data_mtu() function
      Add unit test for ssl_cipher_get_overhead()
      Add test cases for DTLS_get_data_mtu()
      Add documentation for DTLS_get_data_mtu()
      Document that PKCS#12 functions assume UTF-8 for passwords

David von Oheimb (3):
      Fix minor type warnings and risk of memory leak in testutil/driver.c
      Fix OCSP_basic_verify() cert chain construction in case bs->certs is NULL
      Various small build improvements on mkdef.pl, progs.pl, crypto/init.c, crypto/mem.c

Davide Galassi (1):
      Avoid the call to OPENSSL_malloc with a negative value (then casted to unsigned)

Diego Santa Cruz (4):
      Fix endless loop on srp app when listing users
      Fix srp app missing NULL termination with password callback
      Make SRP_CTX.info ownership and lifetime be the same as SRP_CTX.login.
      Use memset to clear SRP_CTX instead of NULL and zero assignments

Dmitry Belyavskiy (6):
      Typo fixed
      Added '-nameopt' option to the verify command.
      Provided support for the -nameopt flag in s_client, s_server and s_time     commands.
      Fix memory leak in pkcs12 -export
      Switch command-line utils to new nameopt API.
      NUMERICSTRING support

Dmitry Belyavsky (1):
      Avoid KCI attack for GOST

Dmitry Kostjuchenko (4):
      Compile fix on platforms with missing pthread_rwlock_t.
      Corrections according the review comments.
      Removed tab spaces.     Reviewed-by: Rich Salz <rsalz at openssl.org>     Reviewed-by: Richard Levitte <levitte at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/1981)
      Grouped data declarations [skip ci]     Reviewed-by: Rich Salz <rsalz at openssl.org>     Reviewed-by: Richard Levitte <levitte at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/1981)

Dr. Matthias St. Pierre (24):
      DRBG: clarify difference between entropy counts and buffer lengths
      RAND: Rename the RAND_poll_ex() callback and its typedef
      DRBG: Remove 'randomness' buffer from 'RAND_DRBG'
      Cleanup whitespace in ssl_lib.c (tabs to spaces)
      Fix reseeding issues of the public RAND_DRBG
      Remove unnecessary DRBG_RESEED state
      testutil.h: Remove duplicate test macros
      Add master DRBG for reseeding
      Implement automatic reseeding of DRBG after a specified time interval
      Allocate the three shared DRBGs on the secure heap
      Make DRBG uninstantiate() and instantiate() methods inverse to each other
      crypto/rand: rename drbg_rand.c to drbg_ctr.c
      crypto/rand: restore the generic DRBG implementation
      Improve readability of evp.pod
      Add util/openssl-update-copyright shell script
      Enhance util/openssl-update-copyright shell script
      Fix memory leak in do_rand_drbg_init()
      crypto/rand/rand_lib.c: fix undefined reference to `clock_gettime'
      drbg_bytes: remove check for DRBG_UNINITIALIZED state
      Fix size limitation of RAND_DRBG_bytes()
      Use RAND_DRBG_bytes() for RAND_bytes() and RAND_priv_bytes()
      CRYPTO_THREAD_run_once.pod: fix typo and punktuation
      Document new random generator in NEWS and CHANGES
      Fix whitespace issues in CHANGES and NEWS

Dr. Stephen Henson (374):
      Limit status message sisze in ts_get_status_check
      Free buffer in a2i_ASN1_INTEGER() on error path.
      Sanity check input length in OPENSSL_uni2asc().
      Update documentation for DSA_SIG and ECDSA_SIG.
      Use OIDs from draft-ietf-curdle-pkix-02
      Fix type of ptr field.
      X25519 public key methods
      make errors
      add to build.info
      Add X25519 methods to internal tables
      Update X25519 key format in evptests.txt
      Add point ctrls to X25519
      make update
      Add encoded points to other EC curves too.
      Modify TLS support for new X25519 API.
      Remove old EC based X25519 code.
      Print out names of other temp key algorithms.
      add documentation
      update CHANGES
      Fix no-ec
      Check for errors in BN_bn2dec()
      Check for errors in a2d_ASN1_OBJECT()
      Limit reads in do_b2i_bio()
      Add ASN1_STRING_get0_data(), deprecate ASN1_STRING_data().
      make update
      Corrupt signature earlier.
      Constify ASN1_item_unpack().
      constify X509_ALGOR_get0()
      Constify private key decode.
      Corrupt signature in place.
      Convert X509* functions to use const getters
      Constify X509_get0_signature()
      Constify X509_certificate_type()
      Constify ssl_cert_type()
      Constify X509_SIG.
      make update
      Constify i2a*
      constify i2o_ECPublicKey
      constify X509_REQ_get0_signature()
      Add X509_get0_serialNumber() and constify OCSP_cert_to_id()
      make update
      make update
      Avoid duplicated code.
      Set certificate times in one function.
      Constify certificate and CRL time routines.
      rename ordinals
      make update
      fix warning about trailing comma
      Add X509_getm_notBefore, X509_getm_notAfter
      update ordinals
      Sanity check ticket length.
      Avoid overflow in MDC2_Update()
      Support broken PKCS#12 key generation.
      Add ASN1_ITEM lookup and enumerate functions.
      Add -item option to asn1parse
      ASN1_ITEM should use type name not structure name.
      add item list support to d2i_test
      Print <ABSENT> if a STACK is NULL.
      make update
      SRP code tidy.
      Add SRP test vectors from RFC5054
      fix memory leak
      fix memory leak
      Fix X509_NAME decode for malloc failures.
      Add memory leak detection to d2i_test
      Fix embedded string handling.
      Don't set choice selector on parse failure.
      add test for CVE-2016-7053
      Simplify PKCS#12 PBE algorithm.
      Fix MSBLOB format with RSA.
      Make MSBLOB format work with dsa utility.
      Add conversion test for MSBLOB format.
      Support MSBLOB format if RC4 is disabled
      Add test to check EVP_PKEY method ordering.
      Fix ctrl operation for SHA1/MD5SHA1.
      add CMS SHA1 signing test
      Check input length to pkey_rsa_verify()
      Add RSA PSS tests
      Additional error tests in evp_test.c
      Add function and reason checking to evp_test
      evptests.txt is not a shell script
      Add RSA decrypt and OAEP tests.
      Remove BIO_seek/BIO_tell from evp_test.c
      Cache maskHash parameter
      Add pss field to RSA structure and free it.
      add EVP_PKEY_RSA_PSS
      PSS ASN.1 method
      Use method key type instead of EVP_PKEY_RSA
      Split PSS parameter creation.
      PSS parameter encode and decode.
      RSA-PSS key printing.
      PSS EVP_PKEY method
      Support RSA operations in PSS.
      Digest string helper function.
      Set PSS padding mode for PSS keys.
      Key gen param support.
      Support pad mode get/set for PSS keys.
      Add macros to determine if key or ctx is PSS.
      Don't allow PKCS#7/CMS encrypt with PSS.
      Add rsa_pss_get_param.
      Initial parameter restrictions.
      Add PSS parameter restrictions.
      Return errors PKCS#7/CMS enveloped data ctrls and PSS
      Decode parameters properly.
      Only allow PSS padding for PSS keys.
      Set EVP_PKEY_CTX in SignerInfo
      add parameter error
      make errors
      print errors in pkey utility
      add PSS key tests
      document RSA-PSS algorithm options
      add test for invalid key parameters
      make update
      fix various style issues
      clarify comment
      free str on error
      style issues
      Use more desciptive macro name rsa_pss_restricted()
      Add documentation for PSS control operations.
      fix typo and remove duplicate macro
      Remove unnecessary frees and style fixes.
      Documentation clarification and fixes.
      fix a few more style issues
      Add new ssl_test option.
      Add server temp key type checks
      Add options to check certificate types.
      add ECDSA test server certificate
      Add certificate selection tests.
      Add client cert type tests
      Add support for -1, -2 salt lengths for PSS only keys.
      additional PSS tests for -1 and invalid salt length
      Defines and strings for special salt length values, add tests
      Add options to check TLS signing hashes
      Add signing hash tests
      Use correct signature algorithm list when sending or checking.
      Add server signature algorithm bug test.
      use RSA_PSS_SALTLEN_DIGEST constant
      Use uint16_t for signature scheme.
      More complete PSS support.
      Store peer signature type.
      Add SSL_get_peer_signature_type_nid() function.
      Use shared signature algorithm list to find type.
      Extend TLS 1.3 signature table.
      Support TLS 1.3 signature scheme names.
      Replace TLS_SIGALGS with SIGALG_LOOKUP
      make update
      Update documentation
      Add test support for TLS signature types.
      Add tests for client and server signature type
      Use PSS for simple test so TLS 1.3 handhake is successful.
      Fix TLS 1.2 and no sigalgs.
      fix style issues
      Update macros.
      Store table entry to peer signature algorithm.
      Only allow PSS signatures with RSA keys and TLS 1.3
      Add TLS 1.3 signing curve check
      Don't check certificate type against ciphersuite for TLS 1.3
      Add digest and key indices to table.
      Simplify sigalgs code.
      Remove peer_md and use peer_sigalg instead.
      Tidy up Suite B logic
      Cosmetic change
      Add function tls_choose_sigalg().
      Set signature algorithm when choosing cipher
      make errors
      For TLS 1.3 retrieve previously set certificate index
      Remove special case for TLS 1.3.
      Update cipher definition
      Don't filter TLS 1.3 ciphersuites by signing or key exchange algorithm
      Add TLS 1.3 certificate selection tests.
      Add missing MinProtocol/MaxProtocol
      Add SSL_kANY and SSL_aANY
      Add NID_auth_any and NID_kx_any NIDs.
      Add constants to CCM and TLS.
      Add CCM mode support for TLS 1.3
      Use contants for Chacha/Poly, redo algorithm expressions.
      Make EVP_*Final work for CCM ciphers
      Call EVP_CipherFinal in CCM mode for tests.
      Add remaining TLS1.3 ciphersuites
      update test
      Update documentation
      Check index >= 0 as 0 is a valid index.
      Replace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGN
      Make -xcert work again.
      add ssl_has_cert
      Change tls_choose_sigalg so it can set errors and alerts.
      Add sigalg for earlier TLS versions
      Use cert_index and sigalg
      Simplify tls_construct_server_key_exchange
      Use CERT_PKEY pointer instead of index
      Skip curve check if sigalg doesn't specify a curve.
      Set current certificate to selected certificate.
      Fix warning
      Add client side support to tls_choose_sigalg.
      Use tls_choose_sigalg for client auth.
      Add ECDSA client certificates
      Add client auth TLS 1.3 certificate selection tests
      Add and use function test_pem to work out test filenames.
      Add DSA support to mkcert.sh
      Add DH parameters, DSA cert and key
      add DSA cert tests
      Explicitly disallow DSA for TLS 1.3
      remove md array: it is not used any more.
      Set default validity flags.
      Add no siglags test for ECDSA certificate
      Check validity, not just signing for all certificates
      Tidy up certificate type handling.
      Add P-384 root and P-384, P-256 EE certificates.
      Add Suite B tests
      Add SuiteB support to tls_choose_sigalg()
      EC certificate with compression point
      Reject compressed point format with TLS 1.3
      For TLS 1.3 reject SHA1 TLS signatures
      Add tests for SHA1 and EC point compression
      Print signature type to out, not bio_err
      Add trace entries for remaining TLS 1.3 ciphersuites
      Add entry for PSK extension
      Print numerical value of named roups
      Add ffdhe groups to trace output
      print out alpn extension
      TLS 1.3 support for ssl_print_ticket()
      Add missing blank lines and cosmetic improvements
      Initial incomplete TLS 1.3 certificate request support.
      Trace support for TLS 1.3 certificate request message
      Remove ancient demoCA directory
      Remove wp_test.c: exactly the same tests are in evptests.txt
      Remove more redundant tests: md4, md5, rmd, rc4, p5_crpt2
      Revert rc4test removal, it performs additional tests not in evptests.txt
      Don't allow DSA for TLS 1.3
      Disallow zero length signature algorithms
      Signature algorithm enhancement.
      Set specific error is we have no valid signature algorithms set
      Update and add test
      Add additional RSA-PSS and RSA-OAEP tests.
      Remove obsolete version test when returning CA names.
      Add ExpectedClientCANames
      Add Client CA names tests
      Move parsing and construction of CA names to separate functions
      Allow signature algorithms in TLS 1.3 certificate request extensions.
      Support draft-19 TLS certificate request format
      Implement certificate_authorities extension
      fix typo
      Add X25519 doc
      update README
      New certificate_authorities functions
      SSL_CONF support for certificate_authorities
      Add extensions to debug list
      Add requestCAfile option
      Don't use client specific functions to retrieve CA list
      Print CA names in s_server, add -requestCAfile to s_client
      Constify SSL_dup_CA_list()
      Add ExpectedServerCANames
      Add certificate_authorities tests client to server.
      Document new ssl(3) functions and options.
      update ordinals
      Add support for custom signature parameters
      Use X509_get_signature_info() when checking security levels.
      Add custom sig_info setting for RSA-PSS
      Add certificates with PSS signatures
      Add PSS certificate signature tests
      Update documentation
      make update
      Fix no-ec
      Add EVP_DigestSign and EVP_DigesVerify
      make update
      Add support for multiple update calls in evp_test
      Add tests
      remove duplicate tests
      Add tests in evp_test for EVP_Digest{Sign,Verify}{Init,Update,Final}
      Add test support for "oneshot" versions EVP_DigestSign, EVP_DigestVerify.
      Add test data for EVP_DigestSign/EVP_DigestVerify tests.
      move comments to same line as fields
      Don't use one shot API for SSLv3.
      Add support for custom digestsign/digestverify methods.
      Allow NULL md for custom signing methods
      make errors
      Add Ed25519 algorithm.
      Make Ed25519 consistent with X25519
      Add EdDSA algorithm OIDs from draft-ietf-curdle-pkix-04
      Add ED25519 ASN.1 method
      add method
      ED25519 public key method.
      make errors
      Add RFC8032 tests and additional cases
      Add ED25519 as signature OID
      Add custom ASN.1 sign and verify
      make errors
      Add custom sig_info_set for ED25519
      Add Ed25519 verify test.
      no-ec fix
      Add Ed25519 documentation
      Clear sensitive data in ED25519_sign
      Fix define to match documentation
      Move and update RSA-PSS documentation.
      Recognise Ed25519 in X509_certificate_type
      Use X509_get_signature_info to get signature strength.
      Add index for ED25519
      Add Ed25519 to signature algorithm table
      Add Ed25519 signature algorithm
      Handle signature algorithms with no associated digest
      Add Ed25519 to trace output
      Print Ed25519 in s_client/s_server
      Convert key exchange to one shot call
      Allow Ed25519 in TLS 1.2
      Ed25519 support for mkcert.sh
      Add Ed25519 EE certificates
      Add Ed25519 TLS 1.3 and 1.2 tests
      Update test config file
      Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.
      Fix build with no-threads no-ec
      Add certificate properties table.
      Add SSL_aCERT: this is used for any ciphersuite with a certificate.
      Replace tls12_get_pkey_idx
      Use certificate tables instead of ssl_cipher_get_cert_index.
      Use certificate tables instead of ssl_cert_type
      Use cert tables instead of X509_certificate_type
      make errors
      Use cert tables in ssl_set_sig_mask
      Add additional ECDSA/Ed25519 selection tests.
      Move certificate table to header file so it can be tested.
      Add sanity test for certificate table
      Set maskHash when creating parameters.
      Typo: should check mgf1md
      Add keygen test to evp_test
      Add keygen test data
      Add public key method enumeration function.
      Add list -public-key-methods
      make update
      Allow use of long name for KDFs
      Set randomness buffer pointer in get_entropy calls.
      Add entropy sanity check
      Use passed drbg, not global one
      Add predicatable RAND_METHOD to test ENGINE
      Support CMS decrypt without a certificate for all key types
      Add test for ECDH CMS key only
      Fix no-ec
      Add alternative CMS P-256 cert
      no-ec2m fixes
      Correct GCM docs.
      Add RSA-PSS key certificate type.
      Allow RSA certificates to be used for RSA-PSS
      Allow use of RSA-PSS certificates in TLS 1.2
      Add RSA-PSS test certificates
      Add RSA-PSS certificate type TLS tests
      Store groups as uint16_t
      Remove dhparam from SSL_CONF list.
      Return correct Suite B curve, fix comment.
      Return group id in tls1_shared_group
      Rename tls_curve_info to TLS_GROUP_INFO, move to ssl_locl.h
      Replace tls1_ec_curve_id2nid.
      New function ssl_generate_param_group
      Rewrite compression and group checks.
      Rename tls1_get_curvelist.
      Use tls1_group_id_lookup in tls1_curve_allowed
      Add and use function tls1_in_list to avoid code duplication.
      Use separate functions for supported and peer groups lists
      Change curves to groups where relevant
      Merge tls1_check_curve into tls1_check_group_id
      Don't ignore passed ENGINE.
      Fix memory leak on lookup failure
      Add EVP_PKEY_set1_engine() function.
      make update
      Add EVP_PKEY_METHOD redirection test
      Document EVP_PKEY_set1_engine()
      Support constant BN for DH parameters
      Add primes from RFC7919
      DH named parameter support
      Add objects for RFC7919 parameters
      Add RFC7919 support to EVP
      Don't assume shared key length matches expected length
      Add pad support
      Add RFC7919 tests.
      Add RFC7919 documentation.
      make update

D?niel Bakai (1):
      Added appropriate OPENSSL_NO_STDIO to PKCS12 header

EasySec (8):
      dtl_mtu_test doesn't follow BIO_* conventions and make Windows build fail
      When no SRP identity is found, no error was reported server side
      Replace the 'SSL' broken link with SSL_CTX_set_security_level which seems not being referenced from elsewhere
      Update s_client and s_server documentation about some missing arguments
      Fix list -disabled for blake2 alg
      set_hex() behaviour change
      Cleaning secret data after use
      fix compile error 'intrinsic function not declared'

Emeric Brun (1):
      Fix async engine pause dead lock in error case.

Emilia Kasper (42):
      Add a coverage target
      Add --gcov-options '\-lp' to coverage
      Reorganize SSL test structures
      Fix ALPN tests when NPN is off
      NPN and ALPN: test resumption
      SSL test ctx: fix tests
      CT: fix documentation
      SSL tests: port CT tests, add a few more
      Add TEST_check
      Gracefully free a NULL HANDSHAKE_RESULT
      Don't attempt to load the CT log list with no-ec
      SSL tests: send some application data
      Port multi-buffer tests
      Test that the peers send at most one fatal alert
      Indent ssl/
      Add more details on how to add a new SSL test
      TEST_check macro: don't end with semi
      testutil: always print errors on failure
      Don't create fixtures for simple tests
      Simplify tests part 2
      Add main() test methods to reduce test boilerplate.
      Run BoringSSL tests on Travis
      Test mac-then-encrypt
      X509 time: tighten validation per RFC 5280
      Remove methtest.c
      Remove dead code in crypto/pkcs7
      Remove debugging leftovers in apps/opt.c
      Remove BN_DEBUG_TRIX
      Clean up references to FIPS
      More Configure cleanup. Remove     - util/incore     - util/fipslink.pl     - the unused "baseaddr" configure switch
      Remove support for HMAC_TEST_PRIVATE_KEY_FORMAT
      Remove memcpy unrolling in bn_lib.c
      Remove some obsolete/obscure internal define switches:
      Port SRP tests to the new test framework
      Port remaining old DTLS tests
      Update master Travis to Trusty
      Add documentation for X509 time functions
      X509_cmp_time.pod: fix doc nits
      asynctest: don't depend on apps
      cipherbytes_test: remove unused includes
      Remove resolved TODO
      RSA_padding_check_PKCS1_type_2 is not constant time.

Erwann Abalea (1):
      Add some OID's from X.520

FdaSilvaYY (84):
      Constify ASN1_INTEGER_get, ASN1_ENUMERATED_get
      Constify two internal methods     - append_ia5     - old_entry_print
      Constify input buffer
      Constify inputs of two X509_LOOKUP_METHOD methods
      Constify some ASN1_OBJECT *obj input parameters
      Pack globals variables used to control apps/verify_callback()
      Fix doc and help about ca -valid option
      two typo fixes
      Relocalise some globals variables
      Improve error message
      Simplify and add help about OPT_PVK* options
      Constify char* input parameters in apps code
      Small nits and cleanups
      Allow to run all speed test when async_jobs active
      Duplicate includes
      Fix loopargs_t object duplication into ASYNC context
      Closing output file from inside the loop who open it
      Constify ASN1_PCTX_*
      Constify some inputs buffers
      Constify some input parameters.
      Constify some X509_NAME, ASN1 printing code
      Constify a bit X509_NAME_get_entry
      Fix some magic values about revocation info type...
      Remove an useless definition.
      Constify code about X509_VERIFY_PARAM
      Update INSTALL about no-md5 removal
      Fix various missing option help messages ...
      Remove an option related to a deprecated flag
      Add some missing types to indent.pro
      Fix copy-paste test labels
      Constify command options
      Fix style issue
      Fix not-c code
      Add error checking, small nit on ouput
      Allow null in  X509_CRL_METHOD_free
      Missing BN_RECP_CTX field init.
      Simplify and clean X509_VERIFY_PARAM new/free code.
      Simplify and fix usage of three string array variable...
      Introduce PATH_MAX and NAME_MAX
      Missing free item on push failure
      Raise an error on memory alloc failure.
      Clean one unused variable, plus an useless one.
      Clean dead macros and defines
      Fix use before assignment
      Fix some extra or missing whitespaces...
      Few nit's
      Fix some style and indent issue     simplify some code.
      Fix a few misspellings.
      Style
      Typo, fix a comment
      Fix a few double ;
      Fix a few typos     [skip ci]
      Simplify code around next_proto.len by changing 'len' data type.
      Fix a few more typos
      Spelling fixes
      Refomat a few comments on 80 cols
      Fix 0 -> NULL, indentation
      More typo fixes
      Add a 'max_send_frag' option to configure maximum size of send fragments
      Output prog name within error message
      Add checks on return code when applying some settings.     Remove hardcoded bound checkings.
      Declare a new x509v3 extension: x509ExtAdmission
      Fix some Typos and indents
      Fix some typo and comments     [skip ci]
      Fix overzealous cleanup command
      [Win] Fix some test method signatures ...
      Fix two MSVC warnings in apps.c
      fix some typos
      SSL Trace improvements
      Postpone allocation of STACK internal storage ... until a first push(),     insert() or an explicit call to OPENSSL_sk_reserve
      Use more pre-allocation
      Some cleanups to apps/ca.c
      Implement Maximum Fragment Length TLS extension.
      style : fix some if(...
      Various typo
      Fix possible leaks on sk_X509_EXTENSION_push() failure ...
      remove magic number
      Factorise duplicated code.
      Fix AppVeyor/VC build failure
      Fix docs for EVP_EncryptUpdate and EVP_DecryptUpdate
      Fix an incoherent test.
      Address some code-analysis issues.
      Useless conf != NULL test
      Small simplification in mkerr.pl

Finn Hakansson (1):
      Fix typo.

Frank Morgner (1):
      Added error checking for OBJ_create

Ga?tan Njinang (1):
      'openssl passwd' command can now compute AIX MD5-based passwords hashes.

Geoff Thorpe (3):
      bn: fix BN_DEBUG + BN_DEBUG_RAND support
      bn: catch negative zero as an error
      bn: fix occurances of negative zero

Gergely Nagy (2):
      Fix compilation when using MASM on x86
      PBKDF2 computation speedup (15-40%)

Graham Edgecombe (1):
      Return success in custom_ext_parse_old_cb_wrap if parse_cb is NULL

Greg Zaverucha (1):
      Fix sample code

Guido Vranken (4):
      Prevent overflows in stack API
      Prevent allocations of size 0 in sh_init, which are not possible with the default OPENSSL_zalloc, but are possible if the user has installed their own allocator using CRYPTO_set_mem_functions. If the 0-allocations succeeds, the secure heap code will later access (at least) the first byte of that space, which is technically an OOB access. This could lead to problems with some custom allocators that only return a valid pointer for subsequent free()-ing, and do not expect that the pointer is actually dereferenced.
      Prevents that OPENSSL_gmtime incorrectly signals success if gmtime_r fails, and that struct* tm result's possibly uninitialized content is used
      Remove obsolete comment

Hannes Magnusson (1):
      Remove redundant decl of 509_STORE_set_flags

Hikar (1):
      Removed ugly size_t less than zero check.

HorimotoYasuhiro (1):
      CLA: trivial

Hubert Kario (8):
      fix OSSL_STORE man pages
      pkcs12.c better formatting for unsupported params
      more info about PKCS#12 structure MAC
      make scrypt ASN.1 parameter functions public
      nicer formatting for MAC info
      handle scrypt PBKDF in PKCS#12 files info
      add basic references to the new methods in documentation
      doc: note that the BN_new() initialises the BIGNUM

Ian Spence (1):
      Fix function documentation

Iaroslav Gridin (7):
      Add AES-ECB and 3DES-ECB to cryptodev
      Remove non-functional CRYPTO_AES_CTR ifdef disabling AES-CTR in cryptodev
      Remove unused ret variable
      Style the code
      Remove commented-out HMAC code
      fix for BSD cryptodev
      use EVP_CIPHER_CTX_ functions instead of accessing EVP_CIPHER_CTX internals

Jack Lloyd (1):
      SM3: Add SM3 hash function

Jacob Hoffman-Andrews (1):
      Clarify error for unrecognized arguments.

Jakub Jelen (2):
      ECDSA_* is deprecated. EC_KEY_* is used instead
      doc: Bad prototypes of EVP_PKEY_CTX_new()

Jakub Zelenka (1):
      Never return -1 from BN_exp

JimC (3):
      Ignore windows generated manifests
      Fix CIPHER_DEBUG
      Documented BIO_set_accept_port()/BIO_get_accept_port()

JitendraLulla (4):
      extending afalg with aes-cbc-192/256, afalgtest.c also updated accordingly. comments from matt, Stephen considered
      fix  --strict-warnings
      make get_cipher_handle static
      putting the missing static

Johannes Bauer (15):
      Fix const correctness of EC_KEY_METHOD_get_*
      Set error when HKDF used without parameters
      More error handling to HKDF and one more case in TLS1-PRF
      Changed use of EVP_PKEY_CTX_md() and more specific error codes
      Added differentiation between missing secret and missing seed
      Fix indentation
      Fix typo in HKDF example documentation
      Small typo in manpage of x509(1)
      Add interface to the scrypt KDF by means of PKEY_METHOD
      Add PKEY_METHOD macro tests
      Add documentation for the scrypt PKEY_METHOD
      Fix building without scrypt
      Clarify CLI OCSP documentation
      Fix coding style of EVP_PKEY_CTX_ctrl_uint64
      Add PKEY_CTX setter tests for TLS1-PRF

Jon Spillett (27):
      Check for zero records and return immediately
      Exit the loop on failure
      Add Python Cryptography.io external test suite
      Add documentation for SSL version methods
      Add documentation for SSL_*_ex_data() functions
      Typo in SSL_CONF_CTX_set_flags.pod
      Typo in SSL_CONF_CTX_set1_prefix.pod - change SSL_CTX_cmd to SSL_CONF_cmd
      Typo in SSL_CONF_cmd_argv.pod
      SSL_CTX_use_PrivateKey_file uses private key, not certificate
      Tidy up the SSL options in SSL_CTX_set_options.pod
      Typo in SSL_CTX_sess_number.pod - started
      Add documentation for SNI APIs
      Add SSL_dup description
      Fix for #2730. Add CRLDP extension to list of supported extensions
      Convert exdata tests to new test framework
      Convert RSA tests to new framework
      Updates after code review
      Remove seed completely...
      Convert blowfish tests to new framework
      Code review. Split tests up
      Remove unused variable. Thanks @pauli-oracle
      Change 64-bit time type for windows
      Converted the bio_enc tests to use new test framework.
      Update pyca-cryptography to latest commit
      [extended tests] Add steps to update an external test suite
      Fix potential null pointer dereference in ARIA implementation
      Implement Aria GCM/CCM Modes and TLS cipher suites

Jonathan Protzenko (1):
      Fix speed command for alternation of ciphers and digests.

Joseph Birr-Pixton (3):
      TLS1.3: Correct intermediate secret derivation
      Update test vectors in tls13secretstest
      Improve testing of elliptic curve validation

Josh Soref (5):
      Fix spelling errors in CMS.
      mark V_ASN1_PRIMATIVE_TAG as compat
      Fix spelling errors in manpages
      improve comment: use "optimization" for clarity     The previous word was a misspelling of nicety
      Many spelling fixes/typo's corrected.

KaoruToda (5):
      Since return is inconsistent, I removed unnecessary parentheses and     unified them.     - return (0); -> return 0;     - return (1); -> return 1;     - return (-1); -> return -1;
      Remove parentheses of return.
      Various clean-ups
      Remove duplicate assignment.
      apps/s_client.c: add missing null check     apps/s_server.c: remove unnecessary null check

Kazuki Yamaguchi (8):
      Fix overflow check in BN_bn2dec()
      Expose alloc functions for EC{PK,}PARAMETERS
      Fix a memory leak in EC_GROUP_get_ecparameters()
      Add missing flags for EVP_chacha20()
      Properly zero cipher_data for ChaCha20-Poly1305 on cleanup
      Fix a typo in the SSL_get_max_early_data() declarations
      Fix BN_print()
      Do not lookup zero-length session ID

Keigo Tanaka (1):
      Added mysql as starttls protocol.

Ken Goldman (1):
      RSA_get0_ functions permit NULL parameters

Keshav Kini (1):
      Fix typos

Konstantin Shemyak (1):
      Corrected 'cms' exit status when key or certificate cannot be opened

Kurt Roeckx (80):
      Fix spelling of error code
      Fix off by 1 in ASN1_STRING_set()
      Test the support curves in tls
      Update fuzz corpora
      Update fuzz corpora
      Add a github pull request template
      conf fuzzer: also check for an empty file
      Cast to an unsigned type before negating
      Update fuzz corpora
      Add support for reference counting using C11 atomics
      Fix name of "locked" variable
      Make SSL_read and SSL_write return the old behaviour and document it.
      Add missing -zdelete for some linux arches
      coveralls: Use gcov-5 since we build it using gcc-5
      Fix formatting of fuzzers
      FuzzerInitialize always exists
      Add a FuzzerClean() function
      asn1parse: create the out bio during init, free it during cleanup
      bignum fuzzer: move new and free calls to the init and cleanup function.
      bndiv fuzzer: move new and free calls to the init and cleanup function.
      Use 8bit-counters when using libfuzzer
      Make the random number generator predictable when fuzzing.
      CMS fuzzer: also use id2
      Move libfuzzer sanitizer options to README
      Make the fuzzers more reproducible
      Run a some tests with -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
      travis: Use no-shared for the FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION targets
      Also set the CXXFLAG to the user supplied flags
      Make asn1 fuzzer more reproducible
      Make the predictable numbers start from 1
      And client fuzzer
      Fuzz corpora update
      Only call memcpy when the length is larger than 0.
      Update client fuzzer corpus
      Update client fuzz corpus
      Don't call memcpy with NULL as source
      Enable TLS1.3 and PEDANTIC in the coverage target
      Document the recommended parameters for fuzzing
      Make client and server fuzzer support all ciphers
      Fix memory leak in tls_parse_stoc_key_share
      Update fuzz corpora
      server fuzzer: add support for DSA and ECDSA
      Make rand_add predictable when fuzzing
      Update fuzz documentation
      Make the bignum fuzzer reproducible
      Make client and server fuzzer reproducible
      Update fuzz corpora
      Print the X509 version signed, and convert to unsigned for the hex version.
      Fix undefined behaviour when printing the X509 serial
      Fix VC warnings about unary minus to an unsigned type.
      Fix undefined behaviour when printing the X509 and CRL version
      Add missing braces.
      Update client and server corpus
      Use memcmp() instead of CRYPTO_memcmp() when fuzzing
      Revert "Use memcmp() instead of CRYPTO_memcmp() when fuzzing"
      Update client, server and x509 fuzz corpus
      Implement SSL_read_ex() and SSL_write_ex() as documented.
      Fix duplicate error codes
      Fix double free in cookie generation.
      Make the CRYPTO_memcmp() prototype match memcmp()
      Use memcmp() instead of CRYPTO_memcmp() when fuzzing
      Switch libfuzzer to use trace-pc-guard
      Make x509 and asn1 fuzzer reproducible
      Document how to update the corpus.
      Use a fixed time when fuzzing.
      Optionally check for early data
      Add missing commas in pod files
      Update fuzz corpora
      Don't auto-instantiate a DRBG when trying to use it and it's not
      Make the global DRBGs static
      Use curve_id not the nid
      Use size of entries, not size of the pointer.
      Only reset the ctx when a cipher is given
      Update location of the libfuzzer repository
      Don't turn b2 negative
      ASN1 fuzzer: Use d2i_TYPE / i2d_TYPE functions
      Update asn1 and x509 corpora
      Create a prototype for OPENSSL_rdtsc
      Fix comment about undefined behavior of constant_time_msb
      Add RAND_DRBG_bytes

Lingmo Zhu (2):
      Remove the obsolete misleading comment and code related to it.
      remove horrible pragma macro and remove __owur from SSL_CTX_add_session() declaration

Long Qin (1):
      lhash.c: Replace Unicode EN DASH with the ASCII char '-'.

Lukasz Pawelczyk (1):
      Restore EVP_CIPH_FLAG_LENGTH_BITS working properly

Luke Faraone (1):
      Add support for using engine-backed keys in spkac

Marek Klein (3):
      explicitText encoding
      Added support for ESSCertIDv2
      fixing incorrect OID of signingCertificateV2     Reviewed-by: Kurt Roeckx <kurt at openssl.org>     Reviewed-by: Rich Salz <rsalz at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/3538)

Markus Sauermann (1):
      Adjusted Argument Indices     CLA: trivial

Markus Triska (4):
      Fix reference to SSL_set_max_proto_version.
      replace "will lookup up" by "will look up"
      Correct reference to SSL_get_peer_cert_chain().
      correct 3 mistakes

Martin Peylo (1):
      Adding NID_hmac_sha1 and _md5 to builtin_pbe[]

Mat (1):
      Do not set load_crypto_strings_inited when OPENSSL_NO_ERR is defined

Matt Caswell (1054):
      Prepare for 1.1.0-pre7-dev
      Address feedback on SSLv2 ClientHello processing
      Send an alert if we get a non-initial record with the wrong version
      Add some SSLv2 ClientHello tests
      Address feedback on SSLv2 ClientHello processing
      Remove a stray unneeded line in 70-test_sslrecords.t
      Ensure we unpad in constant time for read pipelining
      Provide compat macros for SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_auto()
      Convert TS_STATUS_INFO* functions to use const getters
      Convert PKCS8* functions to use const getters
      Convert SSL_SESSION* functions to use const getters
      Convert OCSP* functions to use const getters
      Make X509_NAME_get0_der() conform to OpenSSL style
      Convert X509_CRL* functions to use const getters
      Convert X509_REVOKED* functions to use const getters
      Add a (D)TLS dumper BIO
      Add a DTLS packet mem BIO
      Split create_ssl_connection()
      Add a DTLS unprocesed records test
      Fix DTLS unprocessed records bug
      Add DTLS replay protection test
      Fix DTLS replay protection
      Fix some clang warnings
      Update function error code
      Convert PKCS12* functions to use const getters
      Fix enable-zlib
      Fix DTLS buffered message DoS attack
      Prevent DTLS Finished message injection
      Choose a ciphersuite for testing that won't be affected by "no-*" options
      Fix no-des
      Fix leak on error in tls_construct_cke_gost
      Ensure CT_POLICY_EVAL_CTX_free behaves properly with a NULL arg
      Ensure the mime_hdr_free function can handle NULLs
      Fix mem leak on error path
      Fix mem leak on error path
      Fix mem leak on error path
      Check for malloc error in bn_x931p.c
      Check for error return from ASN1_object_size
      Sanity check an ASN1_object_size result
      Remove some dead code
      Add some sanity checks when checking CRL scores
      Fix bio_enc_test
      Fix no-sock
      Fix some resource leaks in the apps
      Remove useless assignment
      Remove some dead code from rec_layer_s3.c
      Fix no-ec2m
      Clarify the error messages in 08f6ae5b28
      Fix an uninitialised read on an error path
      Fix uninit read in sslapitest
      Remove note from CHANGES about EC DRBG
      Ensure the CertStatus message adds a DTLS message header where needed
      Add some CertStatus tests
      Ensure trace recognises X25519
      Fix mem leaks during auto-deinit
      util/shlib_wrap.sh is now auto-generated so tell git to ignore it
      First pass at writing a writeable packets API
      Convert tls_construct_client_hello() to use PACKETW
      Rename PACKETW to WPACKET
      Move from explicit sub-packets to implicit ones
      Add WPACKET_sub_memcpy() function
      Various bug fixes and tweaks to WPACKET implementation
      Ensure the WPACKET gets cleaned up in the event of an error
      Add tests for the WPACKET implementation
      Move the WPACKET documentation comments to packet_locl.h
      Simplify the overflow checks in WPACKET_allocate_bytes()
      Address WPACKET review comments
      Add some soft asserts where applicable
      Pull out some common packet code into a function
      Remove else after a return in packet code
      Fix a few style nits in the wpacket code
      Abort on unrecognised warning alerts
      Convert CKE construction to use the WPACKET API
      Add a WPACKET_sub_allocate_bytes() function
      Make wpackettest conform to style rules
      Encourage use of the macros for the various "sub" functions
      Add some sanity checks around usage of t_fromb64()
      Fix OCSP_RESPID processing bug introduced by WPACKET changes
      Revert "Abort on unrecognised warning alerts"
      Convert num_alloc to a size_t in stack.c and tweak style
      Convert ClientVerify Construction to WPACKET
      Convert Certificate message construction to WPACKET
      Convert NextProto message construction to WPACKET
      Style tweaks following review feedback
      Convert Finished construction to WPACKET
      Convert CCS construction to WPACKET
      Convert WPACKET_put_bytes to use convenience macros
      Fix a missing NULL check in dsa_builtin_paramgen
      make update and fix some associated mis-matched error codes
      Don't allow too many consecutive warning alerts
      Don't leak on an OPENSSL_realloc() failure
      Excessive allocation of memory in tls_get_message_header()
      Excessive allocation of memory in dtls1_preprocess_fragment()
      Fix OCSP Status Request extension unbounded memory growth
      Add the ability to set OCSP_RESPID fields
      Add OCSP_RESPID_match()
      Add some more OCSP testing
      Fix a mem leak in NPN handling
      Fix a hang with SSL_peek()
      Updates CHANGES and NEWS for new release
      Add warning about a potential pitfall with WPACKET_allocate_bytes()
      Convert HelloVerifyRequest construction to WPACKET
      Add a test for large messages
      Fix a WPACKET bug
      Fix Use After Free for large message sizes
      Updates CHANGES and NEWS for new release
      Fix HelloVerifyRequest construction
      Fix some mem leaks in sslapitest
      Convert HelloRequest construction to WPACKET
      Fix a bug in Renegotiation extension construction
      Add support for testing renegotiation
      Update README.ssltest.md
      Extend the renegotiation tests
      Add DTLS renegotiation tests
      Fix no-dtls
      Fix an Uninit read in DTLS
      Convert ServerHello construction to WPACKET
      Delete some unneeded code
      Fix heartbeat compilation error
      Fix a bug in the construction of the ClienHello SRTP extension
      Address style feedback comments
      Convert CertificateRequest construction to WPACKET
      Remove tls12_copy_sigalgs_old()
      Add the WPACKET_reserve_bytes() function
      Convert ServerKeyExchange construction to WPACKET
      Fix a bug in CKE construction for PSK
      Address style feedback comments
      Add an example of usage to the WPACKET_reserve_bytes() documentation
      Fix an mis-matched function code so that "make update" doesn't fail
      Fix missing NULL checks in NewSessionTicket construction
      Convert SeverDone construction to WPACKET
      Fix mis-named macro in packet_locl.h
      Convert CertStatus message construction to WPACKET
      Fix an error in packet_locl.h
      Convert NewSessionTicket construction to WPACKET
      Remove the tls12_get_sigandhash_old() function
      Remove ssl_set_handshake_header()
      Rename ssl_set_handshake_header2()
      Move init of the WPACKET into write_state_machine()
      Don't set the handshake header in every message
      Harmonise setting the header and closing construction
      Remove the special case processing for finished construction
      Move setting of the handshake header up one more level
      Add a typedef for the construction function
      Fix linebreaks in the tls_construct_client_certificate function
      Use clang++ for C++ for the linux-x86_64-clang target
      Ensure we handle len == 0 in ERR_err_string_n
      Allow older versions in the *.num files
      Provide a cross-platform format specifier (OSSLzu) for printing size_t
      A zero return from BIO_read()/BIO_write() could be retryable
      Add a test for BIO_read() returning 0 in SSL_read() (and also for write)
      Fix a double free in ca command line
      Create BIO_read_ex() which handles size_t arguments
      Create BIO_write_ex() which handles size_t arguments
      Ensure all BIO functions call the new style callback
      Document the new BIO functions introduced as part of the size_t work
      Fix some bogus uninit variable warnings
      Fix a shadowed variable declaration warning
      Read up to INT_MAX when calling legacy BIO_read() implementations
      Ensure that BIO_read_ex() and BIO_write_ex() only return 0 or 1
      Tweaks based on review feedback of BIO size_t work
      More parameter naming of BIO_read*/BIO_write* related functions
      Add some sanity checks for BIO_read* and BIO_gets
      Fix some feedback issues for BIO size_t-ify
      Fix more shadowed variable warnings
      Fix stdio build following BIO size_t work
      Add the SSL_METHOD for TLSv1.3 and all other base changes required
      Use ciphersuite id when matching if we've got one
      Update Configure to know about tls1_3
      Convert a big "if" into a "switch"
      Make sure ossltest engine works with TLS1.3
      Enable TLSProxy to talk TLS1.3
      Fix some style issues in ossltest
      Fix read_ahead
      Add a read_ahead test
      Fail if an unrecognised record type is received
      Add a test for unrecognised record types
      Add a CHANGES entry for the unrecognised record type change
      Partial revert of 3d8b2ec42 to add back DSO_pathbyaddr
      Add a DSO_dsobyaddr() function
      Ensure that libcrypto and libssl do not unload until the process exits
      Add a test to dynamically load and unload the libraries
      Link using -znodelete
      Implement GET_MODULE_HANDLE_EX_FLAG_PIN for windows
      Integrate BoringSSL shim
      Add a test to call the BoringSSL test suite
      Rebase shim against latest boringssl code
      Add ossl_shim to .gitignore
      Add a shim config file
      Control building of ossl_shim through Configure
      Add a comment to 90-test_external.t to explain why we need filter_run
      Fix some unused variable warnings in ossl_shim
      Add -std=c++11 to CXXFLAGS
      Add documentation on the BoringSSL test suite integration
      Remove test/ossl_shim/Makefile
      Fix argument order in documentation
      Remove some #if 0'd out code
      Remove some unreferenced fields from TestState
      Remove unused BoringSSL specific flags
      Use the -allow-unimplemented feature of the BoringSSL runner
      Remove some flags that are unused in the shim
      Removed scoped_types.h
      Remove some #if 0'd out code
      Fix a code inconsistency
      Rename BoringSSL style OPENSSL_WINDOWS to OPENSSL_SYS_WINDOWS
      Update the BoringSSL suppressions file based on the latest shim
      Add missing bn.h include
      Swap header copyrights to standard OpenSSL
      Add a wildcard exception for TLS13 tests
      Remove an unused field in ossl_shim
      Convert record layer to use size_t
      Further libssl size_t-ify of reading
      Convert libssl writing for size_t
      Convert SSL3_RECORD_clear() and SSL3_RECORD_release() to size_t
      Convert some misc record layer functions for size_t
      Convert ssl3_cbc_digest_record for size_t
      Convert various mac_secret_size usage to size_t
      Convert master_secret_size code to size_t
      Convert session_id_length and sid_ctx_len to size_t
      Update numerous misc libssl fields to be size_t
      Update cookie_len for size_t
      Convert some libssl local functions to size_t
      Update misc function params in libssl for size_t
      Resolve some outstanding size_t related TODOs
      Fix some missed size_t updates
      Convert SSL BIO to use SSL_write_ex().
      Add some PACKET functions for size_t
      Fix some ssl3_record code witch converstion to/from size_t
      Convert the mac functions to just return 1 for success and 0 for failure
      Fix misc size_t issues causing Windows warnings in 64 bit
      Now that we can use size_t in PACKET lets use it
      Ensure HMAC_size() handles errors correctly
      Provide some constant time functions for dealing with size_t values
      Remove a stray TODO that has already been fixed
      Document the newly added SSL functions
      Fix some clashing symbol numbers due to merge conflict
      Fix some bogus warnings about uninitialised variables
      Fix style issues in HMAC_size()
      Updates various man pages based on review feedback received.
      Clarify the return values for the peek functions
      Ensure SSL_DEBUG works following size_t changes
      Test the size_t constant time functions
      Document the HMAC_size() function
      Fix a shadowed variable declaration warning picked up by Travis
      Clarify the return values for SSL_read_ex()/SSL_write_ex()
      Rename all "read" variables with "readbytes"
      Tweak the SSL_read()/SSL_write() text based on feedback received.
      Fix some style issues from libssl size_tify review
      Fix a missed size_t variable declaration
      Always ensure that init_msg is initialised for a CCS
      Correct the Id for the TLS1.3 ciphersuite
      test_sslcbcpadding only makes sense <TLS1.3
      Ignore the record version in TLS1.3
      Add a test for the wrong version number in a record
      Partial revert of "Fix client verify mode to check SSL_VERIFY_PEER"
      Fix zlib BIO_METHOD for latest BIO_METHOD structure changes
      Refactor ClientHello processing so that extensions get parsed earlier
      Handle compression methods correctly with SSLv2 compat ClientHello
      Fix a memory leak in the ClientHello extension parsing
      Use an explicit name for the struct for definition of RAW_EXTENSION
      Fix various style issues in the extension parsing refactor
      Improve some comment documentation following the extensions refactor
      Fix make update following extensions refactor
      Add some function documentation and update some existing comments
      Fix some minor style issues
      Rename clienthello.version to clienthello.legacy_version
      Load the sessionid directly in SSLv2 compat ClientHello
      Move setting the session_id_len until after we filled the session_id
      Swap back to using SSL3_RANDOM_SIZE instead of sizeof(clienthello.random)
      Update a comment
      Make some CLIENTHELLO_MSG function arguments const
      Update HKDF to support separte Extract and Expand steps
      Following the changes to HKDF to accept a mode, add some tests for this
      Add some documentation for the new HKDF modes
      Add support for initialising WPACKETs from a static buffer
      Add support for TLS1.3 secret generation
      Add a test for the TLS1.3 secret generation
      Ensure the key and iv labels are declared as static
      Add the ability to send the supported_versions extension
      Ensure that the -trace option can interpret the supported_versions extension
      Add server side support for supported_versions extension
      Update TLS1.3 draft version numbers for latest draft
      Add a test for the supported_versions extension
      Address some review feedback comments for supported_versions
      Ensure that vent->smeth != NULL before we call vent->smeth()
      Look at the supported_versions extension even if the server <TLS1.3
      A style tweak based on feedback received
      Add some more version tests
      Add a TODO(TLS1.3) about renegotation
      Give the test with only TLS1.1 and TLS1.0 a better name
      Fix some missing checks for TLS1_3_VERSION_DRAFT
      Remove some redundant trace code
      Address some supported_versions review comments
      Fix the no-tls option
      Update CHANGES and NEWS
      Rename the Elliptic Curves extension to supported_groups
      Fix test_sslcorrupt when using TLSv1.3
      Revert "Fixed deadlock in CRYPTO_THREAD_run_once for Windows"
      Generate the key_shares extension on the client side
      Add the key_share processing to the server side
      Update the trace code to know about the key_share extension
      Add key_share info to the ServerHello
      Add processing of the key_share received in the ServerHello
      Add a TLS version consistency check during session resumption
      Start using the key_share data to derive the PMS
      Validate that the provided key_share is in supported_groups
      Ensure the whole key_share extension is well formatted
      Check key_exchange data length is not 0
      Add some tests for the key_share extension
      Fixed various style issues in the key_share code
      Move getting the curvelist for client and server out of the loop
      Fix a typo in a comment
      Add SSL_peek() and SSL_peek_ex() to NAME section
      Remove a hack from ssl_test_old
      Fix a "defined but not used" warning when enabling ssl-trace
      Fix missing SSL_IS_TLS13(s) usage
      Fix EXTMS error introduced by commit 94ed2c6
      Remove old style NewSessionTicket from TLSv1.3
      Implement tls13_change_cipher_state()
      Update state machine to be closer to TLS1.3
      Create the Finished message payload
      Fix the tests following the state machine changes for TLSv1.3
      Ensure the end of first server flight processing is done
      Ensure unexpected messages are handled consistently
      Fix some TLSProxy warnings
      Add a test for the TLSv1.3 state machine
      Add an s_server capability to read an OCSP Response from a file
      Extend test_tls13messages
      Fix SSL_IS_TLS13(s)
      Fix some style issues identified during review
      Fix some style issues with TLSv1.3 state machine PR
      Update tls13secretstest to use the new simpler test framework
      Fix an uninit variable usage
      Fix a double ;; causing a travis failure
      Fix some defines in ossl_shim
      Use ClientHello.legacy_version for the RSA pre-master no matter what
      Fix missing NULL checks in CKE processing
      Fix missing NULL checks in key_share processing
      Fix a missing function prototype in AFALG engine
      Fix a warning about an uninit var
      Fix a bogus uninit var warning
      Ensure we are in accept state in DTLSv1_listen
      Fix mac-then-encrypt test with enable-tls1_3
      Use the TLSv1.3 nonce construction
      Add a test for TLSv1.3 encryption using the new nonce construction
      Fix a travis compilation error
      Fix a double free in tls13encryptiontest
      Fix some style issues in the TLSv1.3 nonce construction code
      Convert tls13encryptiontest so that we pass around a pointer not an index
      Make refdata in tls13encryptest static
      Fix a typo in bio_read_intern
      Add an ability to find out the current write location from a WPACKET
      Convert TLS record construction to use WPACKET
      Convert TLS Record receipt to use PACKET
      Update the record layer to use TLSv1.3 style record construction
      Add more TLS1.3 record tests
      Add a TLS1.3 TODO for the msg callback
      Ensure compressdata is always initialised
      Change various repeated rr[someindex] references to a pointer
      Various style fixes from the TLSv1.3 record changes review
      Change various repeated wr[someindex]/pkt[someindex] references to a pointer
      Send and Receive a TLSv1.3 format ServerHello
      Add EncryptedExtensions message
      Move tls_collect_extensions() into a separate file
      Add some missing extensions to SSL_extension_supported()
      Verify that extensions are used in the correct context
      Refactor ClientHello extension parsing
      Continue the extensions refactor
      Add extensions construction support
      Split extensions code into core extensions and server extensions code
      Move ServerHello extension construction into the new extensions framework
      Rename some functions
      Move client parsing of ServerHello extensions into new framework
      Move client construction of ClientHello extensions into new framework
      Add an extension initilisation and finalisation capability
      Provide server side extension init and finalisation functions
      Move ALPN processing into an extension finalisation function
      Simplify ClientHello extension parsing
      Avoid repeatedly scanning the list of extensions
      Move ServerHello extension parsing into the new extension framework
      Split ServerHello extensions
      Add tests for new extension code
      Support renegotiation in TLSProxy
      Add a test to check messsages sent are the ones we expect
      Fix a bug in TLSProxy where zero length messages were not being recorded
      Enable status_request test in test_sslmessages
      Add extension tests in test_sslmessages
      Merge common code between test_tls13messages and test_sslmessages
      Add more extension tests to test_sslmessages
      Add a renegotiation test
      Remove some spurious whitespace
      Add some extra key_share tests
      Fix a memory leak
      Correct imports for checkhandshake module
      Suppress some BoringSSL test failures
      Fix travis mixed declarations and code error
      Various style updates following extensions refactor
      Change TLSEXT_IDX_* values into an enum
      Introduce TLSEXT_STATUSTYPE_nothing constant
      Fix more style issues following extensions refactor feedback
      Fix make update issues
      Move the checkhandshake.pm module into test/testlib
      Fix various indentation
      Fix a travis failure
      Fix the declaration of tls_parse_extension in statem_locl.h
      Fix a leak in SSL_clear()
      Fix the EC point formats extension
      Add a test to check the EC point formats extension appears when we expect
      Fix extension for various no- options
      Fix compilation with no-ec
      Fix CT test_sslmessages hangs
      Fix the SSL_set1_sigalgs() macro
      Provide some tests for the sig algs API
      Don't run the sigalgs tests over a TLSv1.3 connection
      Extend tls_construct_extensions() to enable passing of a certificate
      Extends extension parsing to take the Certificate
      Create Certificate messages in TLS1.3 format
      Implement TLSv1.3 style CertificateStatus
      Update SSL_trace to understand TLSv1.3 Certificates
      Initialise the al variable
      Fix a double blank line style issue
      Rename the chain variable to chainidx
      Fix various style issues following feedback
      Mark a HelloRequest record as read if we ignore it
      Add a TODO(TLS1.3) around certificate selection
      Move Certificate Verify construction and processing into statem_lib.c
      Make CertificateVerify TLS1.3 aware
      Sign CertificateVerify messages using PSS padding
      Convert Sigalgs processing to use ints
      Remove a redundant function
      Use NIDs instead of the old TLSv1.2 sigalgs hash and sig ids
      Remove some unneeded functions
      Ensure the record sequence number gets incremented
      Use the correct size for TLSv1.3 finished keys
      Temporarily ignore NewSessionTickets for TLS1.3
      Fix client application traffic secret
      Verify that the sig algs extension has been sent for TLSv1.3
      Ignore PKCS1 based sig algs in TLSv1.3
      Add some sig algs tests
      Add a TLS1.3 TODO for setting of sig algs
      Always use TLSv1.0 for record layer version in TLSv1.3
      Fix test_sslversions to know that TLSv1.3 sets record version to TLSv1.0
      Extend PSS signature support to TLSv1.2
      Add a sigalg test to check we only allow sigalgs we sent
      Teach SSL_trace about the new sigalgs
      Teach TLSProxy about the CertificateVerify message
      Extend ServerKeyExchange parsing to work with a signature
      Teach TLSProxy how to re-encrypt a TLSv1.3 message after changes
      Add some signature tests
      Fix a Travis failure
      Fix an uninit read picked up by Travis
      Add some missing sigalgs
      Fix tls1_set_sigalgs() length calculation
      Fix no-ec following sigalgs refactor
      Fix compilation with no-nextprotoneg
      Fix no-dh builds
      Fix SSL_VERIFY_CLIENT_ONCE
      Stop client from sending Certificate message when not requested
      Stop server from expecting Certificate message when not requested
      Extend the test_ssl_new renegotiation tests to include client auth
      Fix SSL_get0_raw_cipherlist()
      Fix memory leaks in the Certificate extensions code
      Don't use magic numbers in aes_ocb_cipher()
      Properly handle a partial block in OCB mode
      Update evp_test to make sure passing partial block to "Update" is ok
      Fix the overlapping check for fragmented "Update" operations
      Adjust in and in_len instead of donelen
      Remove assert from is_partially_overlapping()
      Fix a merge error
      Update CHANGES and NEWS for new release
      ChangeCipherSpec is not allowed in TLSv1.3
      Remove use of the SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS flag
      Move state machine knowledge out of the record layer
      Disable requests for renegotiation in TLSv1.3
      Move TLSv1.3 Session Ticket processing into the state machine
      Add support for the psk_key_exchange_modes extension
      Create the NewSessionTicket message in TLSv1.3
      Process incoming NewSessionTicket messages on the client side
      Add a TODO around handling of SSL_get_session() and SSL_get1_session()
      Never send a session id in TLS1.3
      Update the s_client -sess_out feature to work for TLSv1.3
      Provide a new WPACKET function for filling in all the lengths
      Construct the client side psk extension for TLSv1.3
      Add support for the age_add field
      Add support for client side parsing of the PSK extension
      Provide a key_share extension finaliser
      Make sure we also cleanse the finished key
      Implement Server side of PSK extension parsing
      Implement server side of PSK extension construction
      Set the kex modes on the client too.
      Move session version consistency check
      Use the correct session resumption mechanism
      Tweak a comment
      Always ensure that session->cipher is set
      Re-enable ALPN resumption tests where we are using TLSv1.3
      Update create_ssl_connection() to make sure its gets a session
      Re-enable TLSv1.3 session resumption related tests in sslapitest
      Remove a TLS1.3 TODO that is now completed
      Re-enable test_ssl_new resumption tests for TLSv1.3
      Add a capability for TLSProxy to wait for a session before killing s_client
      Add testing of TLSv1.3 resumption in test_tls13messages
      Re-enable resumption for TLS1.3 CT tests
      Ensure the age_add variable is properly initialised
      Ensure the al variable is properly ininitialised in all code paths
      Miscellaneous style tweaks based on feedback received
      Make the "ticket" function return codes clearer
      Make calls to SSL_renegotiate() error out for TLSv1.3
      Enable wpacket test on shared builds
      Add a test for WPACKET_fill_lengths()
      Fix <= TLS1.2 break
      If we have no suitable PSK kex modes then don't attempt to resume
      Add a test for the PSK kex modes extension
      Move the SSL3_CK_CIPHERSUITE_FLAG out of public header
      Use for loop in WPACKET_fill_lengths instead of do...while
      Remove unneccessary comments
      Various style fixes following review feedback
      Add a TODO around validating the ticket age
      Expand comment in tls_process_hello_req()
      Make sure we free and cleanse the pms value in all code paths
      Free up the memory for the NewSessionTicket extensions
      Fix crash in tls13_enc
      Fix a typo in the X509_get0_subject_key_id() documentation
      Make the context available to the extensions parse and construction funcs
      Add server side support for creating the Hello Retry Request message
      Add client side support for parsing Hello Retry Request
      Implement support for resumption with a HelloRetryRequest
      Add trace support for HelloRetryRequest
      Update the key_share tests for HelloRetryRequest
      Update test counting in checkhandshake.pm
      Update TLSProxy to know about HelloRetryRequest messages
      Update the kex modes tests to check various HRR scenarios
      Update the tls13messages test to add some HRR scenarios
      Various style fixes following review feedback
      Add a bytestogroup macro
      Fix a bogus uninit variable warning
      Remove a double call to ssl3_send_alert()
      Fix no-ec compilation
      Fix merge issue
      Provide a test for the Encrypt-Then-Mac renegotiation crash
      Don't change the state of the ETM flags until CCS processing
      Remove an OPENSSL_assert() and replace with a soft assert and check
      Update CHANGES and NEWS for new release
      Fix a mem leak in ssl_test_ctx.c
      Provide a function to send a KeyUpdate message
      Add a capability to s_server to send KeyUpdate messages
      Add SSL_trace() support for KeyUpdate messages
      Add the ability for a client to receive a KeyUpdate message
      Add the ability for a client to send a KeyUpdate message
      Add a SSL_get_key_update_type() function
      Add the ability for s_client to send a KeyUpdate message
      Add the ability for a server to receive a KeyUpdate message
      If we receive an "update_requested" KeyUpdate then respond with a KeyUpdate
      Actually update the keys when a KeyUpdate message is sent or received
      Limit the number of KeyUpdate messages we can process
      Updates following review feedback
      Fix a shadowed global variable warning
      Add documentation for SSL_key_update() and SSL_get_key_update_type()
      Add some KeyUpdate tests
      Don't use an enum in the return type for a public API function
      Updates following review feedback
      Fix a merge error
      Remove some dead code from libssl
      Remove dead code in bn
      Remove the file r160test.c
      Remove bf_cbc.c
      Remove a pointless "#ifndef" from bf_enc.c
      Remove some commented out code in the apps
      Remove some commented out code in libcrypto
      Remove some commented out code in libssl
      Remove some commented out code in the tests
      Fix sslapitest when compiled with no-tls1_2
      Fix test_ssl_new when compiled with no-tls1_2 or no-dtls1_2
      Ensure that we never select compression in TLSv1.3
      Fix a compression bug
      Add compression tests
      Use the built in boolean type for CompressionExpected
      Construct the ticket_early_data_info extension
      Add a -max_early_data option to s_server
      Teach SSL_trace() about the early_data_info extension
      Parse the ticket_early_data_info extension
      Provide functions to write early data
      Construct the early_data extension
      Parse the early_data extension
      Add an option to s_client to send early_data
      Implement the early data changes required in tls13_change_cipher_state()
      Change the cipher state when sending early data
      Provide an SSL_read_early() function for reading early data
      Construct the server side early_data extension
      Fix changing of the cipher state when dealing with early data
      Add a "-early_data" option to s_server
      Implement client side parsing of the early_data extension
      Get s_client to report on whether early data was accepted or not
      Fix seg fault when sending early_data using CCM ciphersuites
      Disallow handshake messages in the middle of early_data
      Make sure we reset the read sequence when skipping records
      Check max_early_data against the amount of early data we actually receive
      Provide a default value for max_early_data
      Ensure the max_early_data option to s_server can be 0
      Validate the ticket age for resumed sessions
      Remove some TLSv1.3 TODOs that are no longer relevant
      Add extra validation parsing the server-to-client early_data extension
      Don't accept early_data if we are going to issue a HelloRetryRequest
      Skip early_data if appropriate after a HelloRetryRequest
      Only accept early_data if the negotiated ALPN is the same
      Don't attempt to write more early_data than we know the server will accept
      Add a SSL_SESSION_get_max_early_data() function
      Make SSL_get_max_early_data() and SSL_CTX_get_max_early_data() take a const
      Make SSL_get_early_data_status() take a const
      Add documentation for the early data functions
      Tighten sanity checks when calling early data functions
      Add documentation for the new s_client and s_server early_data options
      Improve the early data sanity check in SSL_do_handshake()
      Introduce a new early_data state in the state machine
      Enable the client to call SSL_read() without stopping the ability to call SSL_write_early()
      Enable the server to call SSL_write() without stopping the ability to call SSL_read_early()
      Various fixes required to allow SSL_write/SSL_read during early data
      Add early_data tests
      Make SSL_write_early_finish() an internal only function
      Updates to s_server and s_client for the latest early_data API changes
      Updates to the early data documentation
      Rename SSL_read_early() to SSL_read_early_data()
      Rename SSL_write_early() to SSL_write_early_data()
      Update early data API for writing to unauthenticated clients
      Update the API documentation for the latest early data changes
      More early data documentation updates following feedback
      Silence some clang warnings
      Silence some more clang warnings
      Ensure we don't call memcpy with a NULL pointer
      Fix a memory leak on an error path
      Add basic TLSv1.3 cookie support
      Add a test for TLSv1.3 cookies
      Don't call memcmp with a NULL pointer
      Fix no-psk
      Fix a test failure with no-tls1_1
      Fix no-ec
      Tweak the TLSv1.3 record overflow limits
      Add a test to check that we correctly handle record overflows
      Provide a function to test whether we have unread records pending
      Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundary
      Add a test for records not on the record boundary
      Fix the number of tests to skip if TLSv1.3 is disabled
      Fix no-comp
      Check that the PSK extension is last
      Add a test to check that if a PSK extension is not last then we fail
      Use the new TLSv1.3 certificate_required alert where appropriate
      Fix some RSA documentation
      Fix out-of-memory condition in conf
      Make the Boring tests pass
      Update ossl_config.json for later BoringSSL commit
      Fix 12 Boring tests involving NULL-SHA ciphersuites
      Ensure we set the session id context in ossl_shim
      SSL_get_peer_cert_chain() does not work after a resumption
      Re-enable some BoringSSL tests
      Fix a hang in tests that use sessionfile
      Update the TLSv1.3 version indicator for draft-19
      Update secret generation for draft-19
      Update the TLSv1.3 secrets test vectors for draft-19
      Update end of early data processing for draft-19
      Merge early_data_info extension into early_data
      Check ClientHello boundary as per draft-19
      HelloRetryRequest updates for draft-19
      Ensure after an HRR any PSKs have the right hash
      Fix ciphersuite handling during an HRR
      Add some more PSK tests
      Add some HRR tests
      Updates following review feedback
      Fix the Padding extension
      Add tests for the padding extension
      Handle TLSv1.3 being disabled in clienthello test
      Fix some undefined behaviour in stack test
      Fix no-dtls builds
      Fix resumption after HRR
      Add a test for resumption after HRR
      Add server side support for TLSv1.3 downgrade mechanism
      Add client side support for TLSv1.3 downgrade mechanism
      Make the TLSv1.3 downgrade mechanism a configurable option
      Add a test for the TLSv1.3 downgrade mechanism
      Move the downgrade sentinel declarations to a header file
      Provide documentation for missing SSL_SESSION_* functions
      Provide documentation for some state machine related functions
      Fix bug with SSL_read_early_data()
      Add a test for the bug fixed in the previous commit
      Fix early data bug with pause between EoED and CF
      Provide a test for pause between EoED and CF
      Fix s_client early data indicator
      Update SSL_extension_supported()
      Don't handle handshake messages when writing early data on server
      Update early data test for an even later arrival of CF
      Add a test for the problem fixed by the previous commit
      Tweak a style issue
      Fix calls to SSL_get_server_tmp_key() in TLSv1.3
      Add documentation for SSL_get_server_tmp_key()
      Add missing macros for DHxparams
      Ensure dhparams can handle X9.42 params in DER
      Fix a possible integer overflow in long_c2i
      Move ssl/t1_ext.c to ssl/statem/extensions_cust.c
      Move the extensions context codes into the public API
      Implement a new custom extensions API
      Add some tests for the new custom extensions API
      Add documentation for the new custom extensions API
      Various style tweaks based on feedback
      Prefix custom extension API callback types with SSL_
      Create an ENDPOINT enum type for use internally
      Remove an out of date TODO
      Fix a test failure when configured without TLSv1.3
      Reject decoding of an INT64 with a value >INT64_MAX
      Convert bad_dtls_test for the new test framework
      Convert asynciotest for the new test framework
      Convert clienthellotest for the new test framework
      Don't fail the connection in SSLv3 if server selects ECDHE
      Add a BIO_lookup_ex() function
      Add a -sctp option to s_server
      Add a -sctp option to s_client
      Add better error logging if SCTP AUTH chunks are not enabled
      Ask libssl if we should retry not the socket
      Remove special case code for SCTP reneg handling
      Don't attempt to send fragments > max_send_fragment in DTLS
      Fix problem with SCTP close_notify alerts
      Add support to test_ssl_new for testing with DTLS over SCTP
      Add SCTP testing to 16-dtls-certstatus.conf
      Add SCTP testing to 18-dtls-renegotiate.conf
      Add SCTP testing to 07-dtls-protocol-version.conf
      Add SCTP testing for 11-dtls_resumption.conf
      Add SCTP testing for 04-client_auth.conf
      Fix some variable references in init_client
      Document BIO_lookup_ex()
      Fix issue in 18-dtls-renegotiate.conf.in
      Address review feedback for the SCTP changes
      Fix doc-nits issue
      Add documentation for the -sctp option in command line apps
      Don't overwrite the alert value if there is no alert to send
      Add a ciphersuite config sanity check for clients
      Add a ciphersuite config sanity check for servers
      Add tests for version/ciphersuite sanity checks
      Remove TLS1.3 TODO around testing for session id length
      Add support for SSL_SESSION_is_resumable()
      Documentation updates for TLSv1.3 sessions
      Always duplicate the session on NewSessionTicket in TLSv1.3
      Tweak SSL_get_session.pod wording
      More SSL_SESSION documentation tweaks based on feedback
      Clarify that SSL_CTX_remove_session() marks a session as non-resumable
      Ensure s_client sends an SNI extension by default
      Fix comment around safari fingerprint check
      Fix some error path logic in i2v_AUTHORITY_INFO_ACCESS and i2v_GENERAL_NAME
      Extend the SERVERINFO file format to include an extensions context
      Only send custom extensions where we have received one in the ClientHello
      Add a SERVERINFOV2 format test file
      Add a test for CT in TLSv1.3
      Add an SSL_ prefix to SERVERINFOV2 and SERVERINFOV1
      Document the new SSL_CTX_use_serverinfo_ex() function
      Clarify serverinfo usage with Certificate messages
      Update serverinfo documentation based on feedback received
      Add the -groups option to s_server/s_client
      Update the documentation for "Groups" and "Curves"
      Update the HKDF labels for draft-20
      Update the TLSv1.3 version indicator for draft-20
      Update tls13secretstest test vectors for TLSv1.3 draft-20
      Fix an uninit read in igetest
      Don't leave stale errors on queue if DSO_dsobyaddr() fails
      Revert "Fix clang compile time error"
      Fix SSL_CTX_use_serverinfo_ex() et al to properly handle V1 data
      Add a test for loading serverinfo data from memory
      Updates to serverinfo fix based on review feedback
      Remove some out of date text inadvertently left behind
      Send the supported_groups extension in EE where applicable
      Add a test for supported_groups in the EE message
      Updates to supported_groups following review feedback
      Remove support for OPENSSL_SSL_TRACE_CRYPTO
      Add support to SSL_trace() for inner content types
      Update the message callback documentation
      Fix an s_server infinite loop
      Verify that only NULL compression is sent in TLSv1.3 ClientHello
      Add some badly formatted compression methods tests
      Fix some copy&paste errors and update following review feedback
      Don't do the final key_share checks if we are in an HRR
      Fix HRR bug
      More TLSv1.3 cookie tests
      Verify that if we have an HRR then something will change
      Add test for no change following an HRR
      Copy custom extension flags in a call to SSL_set_SSL_CTX()
      Add a test for SNI in conjunction with custom extensions
      Reject unknown warning alerts in TLSv1.3
      Fix some alert codes
      Verify that there is no trailing data after the extensions block
      Fix more alert codes
      Ensure we fail with a decode error alert if the server sends and empty Cert
      Send an illegal parameter alert if the update type in a KeyUpdate is wrong
      Check that a TLSv1.3 encrypted message has an app data content type
      TLSv1.3 alerts cannot be fragmented and only one per record
      TLSv1.3 alert and handshake messages can never be 0 length
      Send a missing_extension alert if key_share/supported groups not present
      Add some checks for trailing data after extension blocks
      Add some extra comments following alert changes
      Don't allow fragmented alerts
      Fail if we receive a response to an extension that we didn't request
      Add tests for unsolicited extensions
      Add a new unsolicited extension error code and add enum tag
      Allow a missing sig algs extension if resuming
      Add a test for a missing sig algs extension
      Fix EXT_RETURN usage for add_key_share()
      Try to be more consistent about the alerts we send
      Make SSL_is_server() accept a const SSL
      Fix ASN1_TIME_to_generalizedtime to take a const ASN1_TIME
      Fix return code in tls1_mac
      Add a macro for testing assertion in both debug and production builds
      Replace instances of OPENSSL_assert() with soft asserts in libssl
      Fix some style issues in returns
      Convert existing usage of assert() to ossl_assert() in libssl
      Add an error to the stack on failure in dtls1_write_bytes()
      Updates CHANGES and NEWS for new release
      Document that HMAC() with a NULL md is not thread safe
      Fix BoringSSL alert related test failures
      Update the pyca-cryptography version
      Fix a Proxy race condition
      Wait longer for the server in TLSProxy to start
      Left shift of a negative number is undefined behaviour
      Work around Travis "virtual memory exhausted" error
      Add back support for SHA224 based sig algs
      Clean up s_server documentation
      Allow the server to change the ciphersuite on resume
      Add a test for a server changing the ciphersuite
      Move ciphersuite selection before session resumption in TLSv1.3
      Fix an uninitialised variable warning
      Add comments to test_ciphersuite_change()
      Tweak the check that a ciphersuite has not changed since the HRR
      Add TLSv1.3 server side external PSK support
      Add TLSv1.3 client side external PSK support
      Add public API functions for setting TLSv1.3 PSK callbacks
      Add a function to get the handshake digest for an SSL_CIPHER
      Add the ability to use a client side TLSv1.3 external PSK in s_client
      Add the ability to use a server side TLSv1.3 external PSK in s_server
      Add SSL_SESSION_set1_master_key()
      Add SSL_SESSION_set_cipher()
      Add SSL_SESSION_set_protocol_version()
      Add the ability to set a TLSv1.3 PSK via just the key bytes
      Fix no-psk
      Add documentation for SSL_SESSION_set_cipher()
      Document SSL_SESSION_set1_master_key()
      Document SSL_SESSION_set_protocol_version()
      Document SSL_CIPHER_get_handshake_digest()
      Add documentation for SSL_CTX_set_psk_use_session_callback()
      Tweak the client side PSK callback
      Document SSL_set_psk_use_session_callback() and SSL_CTX equivalent
      Document SSL_set_psk_find_session_callback() and SSL_CTX equivalent
      Make the input parameters for SSL_SESSION_set1_master_key const
      Fix some bugs in the TLSv1.3 PSK code
      Add some tests for the new TLSv1.3 PSK code
      Use constants rather than macros for the cipher bytes in the apps
      PSK related tweaks based on review feedback
      Fix DTLS failure when used in a build which has SCTP enabled
      Add documentation for the SSL_export_keying_material() function
      Fix OBJ_create() to tolerate a NULL sn and ln
      Fix the constant time 64 test
      Treat all failures from EVP_DigestVerify() as a bad signature
      Fix another EVP_DigestVerify() instance
      Fix travis clang-3.9 builds
      Fix a memory leak in the new TAP filter BIO
      Update SSL_export_keying_material() for TLSv1.3
      Add an SSL_export_keying_material() test
      Update the SSL_export_keying_material() documentation for TLSv1.3
      Updates following review of SSL_export_key_material() changes
      Drop support for OPENSSL_NO_TLS1_3_METHOD
      Fix TLSv1.3 exporter
      Fix memory leak when using PSK session files
      Update the version number for TLSv1.3 draft 21
      Send and receive the ticket_nonce field in a NewSessionTicket
      The correct key length for a TLSv1.3 SHA384 ciphersuite is 48
      Update tls13_hkdf_expand() to take the length of the data
      Update the test/session.pem to have a tick_nonce value
      Update the early_secret generation to use the new ticket_nonce field
      Update SSL_trace() to know about ticket_nonce
      Updates following review feedback of TLSv1.3 draft-21 code
      Do not allow non-dhe kex_modes by default
      Update the documentation for the new SSL_OP_ALLOW_NO_DHE_KEX option
      Choose a safer value for SSL_OP_ALLOW_NO_DHE_KEX
      Some SSL_OP_ values can't be used in 1.1.x
      Fix s_client crash where the hostname is provided as a positional arg
      Fix early_data with an HRR
      Add a test for early_data when an HRR occurs
      Tolerate a zero length ticket nonce
      Fix SSL_clear() in TLSv1.3
      Add a test for SSL_clear()
      Remove session checks from SSL_clear()
      Add some performance notes about early data
      Fix undefined behaviour in e_aes_cbc_hmac_sha256.c and e_aes_cbc_hmac_sha1.c
      Remove some dead code
      Fix new_session_cb calls in TLSv1.3
      Add a test to check we get a new session even if s->hit is true in TLSv1.3
      Move ossl_assert
      Add an SSL_SESSION_dup() function
      Test server side session caching
      Copy dlls into fuzz directory
      Remove OPENSSL_assert() from crypto/asn1/bio_asn1.c
      Remove OPENSSL_assert() from various crypto/bio files
      Remove OPENSSL_assert() usage from crypto/bn
      Remove OPENSSL_assert() from conf_api.c
      Remove OPENSSL_assert() from crypto/ec
      Remove OPENSSL_assert() from crypto/hmac
      Remove OPENSSL_assert() from crypto/kdf
      Remove OPENSSL_assert() from crypto/pem
      Remove OPENSSL_assert() from crypto/threads_none.c
      Remove OPENSSL_assert() from crypto/x509
      Remove OPENSSL_assert() from crypto/x509v3
      Updates following feedback on OPENSSL_assert() removal
      More updates following review feedback
      Add documentation for SRTP functions
      Fix enable-sctp
      Don't run a CT specifc test if CT is disabled
      Ensure we exchange cookies in s_server even if SCTP is disabled
      Fix no-chacha and no-poly1305
      Clarify the meaning of no-stdio in INSTALL
      Fix description of how to report a bug in INSTALL
      Fix no-scrypt
      Fix no-tls and no-tls1_2
      Enable the ability to use an external PSK for sending early_data
      Add SSL_SESSION_set_max_early_data()
      Add some PSK early_data tests
      Add documentation for SSL_SESSION_set_max_early_data()
      Add HISTORY and SEE ALSO sections for the new TLSv1.3 PSK functions
      Make sure we use the correct cipher when using the early_secret
      If no SNI has been explicitly set use the one from the session
      Update the tests for SNI changes
      Show the error stack if there was an error writing early data in s_client
      Add functions for getting/setting SNI/ALPN info in SSL_SESSION
      Complain if we are writing early data but SNI or ALPN is incorrect
      Make sure we save ALPN data in the session
      Add server side sanity checks of SNI/ALPN for use with early_data
      Add PSK early_data tests
      Add some fixes for Travis failures
      Client side sanity check of ALPN after server has accepted early_data
      Test for late client side detection of ALPN inconsistenties
      Various review fixes for PSK early_data support
      Fix Proxy where a timeout occurs waiting for both client and server
      Don't attempt to add a zero length padding extension
      Don't use ciphersuites for inflating the ClientHello in clienthellotest
      Allow an endpoint to read the alert data before closing the socket
      Remove an incorrect comment
      Remove some commented out code
      Remove an unused file
      Ensure we test all parameters for BN_FLG_CONSTTIME
      Fix bug where early_data does not work if no SNI callback is present
      Add a test for setting initial SNI in CH but not using it with early_data
      Don't do version neg on an HRR
      Sanity check the HRR version field
      Tweak the comment regarding record version check with respect to TLSv1.3
      Correct value for BN_security_bits()
      Don't make any changes to the lhash structure if we are going to fail
      Don't use strcasecmp and strncasecmp for IA5 strings
      Update CHANGES and NEWS for new release
      Remove 4 broken macros from ocsp.h
      Fix race condition in TLSProxy
      Mark a zero length record as read
      Fix an s_client memory leak
      Ignore the session when setting SNI in s_client
      Allow a client to send early_data with SNI if the session has no SNI
      Provide a more information early_data message in s_server
      If a server is not acknowledging SNI then don't reject early_data
      Fix SSL_state_string() and SSL_state_string_long()
      Fix lshift tests
      Provide an SSLfatal() macro
      Replace some usage of SSLerr with SSLfatal()
      Convert the state machine code to use SSLfatal()
      Convert remaining functions in statem_clnt.c to use SSLfatal()
      Convert remaining functions in statem_srvr.c to use SSLfatal()
      Convert more functions in ssl/statem/statem.c to use SSLfatal()
      Convert more functions in ssl/statem/statem_dtls.c to use SSLfatal()
      Fix up a few places in the state machine that got missed with SSLfatal()
      Add some sanity checks for the fatal error condition
      Assert that SSLfatal() only gets called once
      Add some more cleanups
      Fix the Boring tests following the SSLfatal() changes
      Update an error reason code to be ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
      Remove spurious whitespace
      Fix some formatting nits
      Fix bug in TLSv1.3 PSK processing
      Fix the check_fatal macro
      Add a test for CVE-2017-3737
      Update CHANGES and NEWS for new release
      Fix the buffer sizing in the fatalerrtest
      Update ssl3_get_record() to use SSLfatal()
      Convert ssl3_read_bytes() to use SSLfatal()
      More record layer conversions to use SSLfatal()
      Convert dlts1_write_bytes() to use SSLfatal()
      Convert the remaining functions in the record layer to use SSLfatal()
      Fix ssl_test_new with no-tls1_2
      Fix no-tls1_1
      Replace tabs with spaces in 25-cipher.conf.in
      Don't expect a POLY1305 ciphersuite when using no-poly1305
      Fix no-chacha
      Update the TLSv1.3 draft version indicators to draft 22
      Update ServerHello to new draft-22 format
      Implement session id TLSv1.3 middlebox compatibility mode
      Send TLSv1.2 as the record version when using TLSv1.3
      Drop CCS messages received in the TLSv1.3 handshake
      Remove TLSv1.3 specific write transition for ClientHello
      Send a CCS from the client in a non-early_data handshake
      Send a CCS from a client in an early_data handshake
      Send a CCS after ServerHello in TLSv1.3 if using middlebox compat mode
      Merge HRR into ServerHello
      Fix an HRR bug
      Update state machine to send CCS based on whether we did an HRR
      Update TLSProxy to know about new HRR style
      Make sure supported_versions appears in an HRR too
      Send supported_versions in an HRR
      Ensure CCS sent before early_data has the correct record version
      Delay flush until after CCS with early_data
      Fix server side HRR flushing
      Issue a CCS from the client if we received an HRR
      Make sure we treat records written after HRR as TLSv1.3
      Add some TLSv1.3 CCS tests
      Don't run the TLSv1.3 CCS tests if TLSv1.3 is not enabled
      Fix some clang compilation errors
      Don't flush the ClientHello if we're going to send early data
      Disable partial writes for early data
      Update the documentation for SSL_write_early_data()
      Fix trace of TLSv1.3 Certificate Request message
      Tolerate DTLS alerts with an incorrect version number
      Revert BN_copy() flag copy semantics change
      Extend timeout for TLSProxy
      Don't allow an empty Subject when creating a Certificate
      Don't crash on a missing Subject in index.txt
      Don't attempt to use X25519 for ECDSA in speed
      Add support for sending TLSv1.3 cookies
      Enable the cookie callbacks to work even in TLS in the apps
      Add the SSL_stateless() function
      Fix logic around when to send an HRR based on cookies
      Add some tests for the SSL_stateless() capability
      Fix interaction between SSL_stateless() and SSL_clear()
      Fix the SSL_stateless() return code
      Fix the cookie/key_share extensions for use with SSL_stateless()
      Add documentation for SSL_stateless()
      Don't send unexpected_message if we receive CCS while stateless
      Add the ability for s_server to operate statelessly
      Add a timestamp to the cookie
      Updates following review of SSL_stateless() code
      Move decisions about whether to accept reneg into the state machine
      Fix some instances of the wrong alert type being sent
      Document SSL_OP_ENABLE_MIDDLEBOX_COMPAT
      Add MiddleboxCompat option to SSL_CONF_cmd man page
      Enable TLSv1.3 by default
      Fix clienthellotest with TLSv1.3
      Fix some undefined behaviour in ossltest engine
      Don't run tls13encryptiontest on a shared Windows build
      Fix no-chacha and no-poly1305
      Don't calculate the Finished MAC twice
      Fixes for no-tls1_2 and no-tls1_2-method
      Don't overestimate the ticket age
      The function ssl_get_min_max_version() can fail
      Some minor tweaks following TLSv1.3 becoming default
      Update NEWS file for new release
      Update last release letter for CHANGES and NEWS
      OpenSSL 1.1.1 is now in pre release
      Update copyright year
      Prepare for 1.1.1-pre1 release

Matthias Kraft (1):
      Solution proposal for issue #1647.

Meena Vyas (3):
      Added a new Makefile in demos/evp directory     Fixed compilation warning in file aesgcm.c
      passed TARFILE="$(TARFILE)" NAME="$(NAME)" to tar target
      Allow --strict-warnings with the icc compiler as well

MerQGh (1):
      Update eng_fat.c

Michael Richardson (2):
      added cmcCA and cmcRA as per rfc6402, capitalized per RFC7030 author
      Add OPENSSL_VERSION_AT_LEAST

Mike Aizatsky (1):
      [fuzzers] do not fail fuzzers with empty input

Mouse (1):
      Code hygiene; initialize some pointers.

Nick Mathewson (4):
      Remove redundant declarations of ERR_load_*_strings()
      Improve #include structure of pem{,2}.h
      In err_all.c, include the *err.h headers.
      Run "make update"

Nicola Tuveri (19):
      Use EVP interface for ECDH in apps/speed.c
      Fix coding style and remove some stale code/comments
      Handle EVP_PKEY_derive errors and fix coding style issues
      bugfix: calculate outlen for each curve
      Run util/openssl-format-source against apps/speed.c
      More coding style fixes
      Remove ECDH_EVP_derive_key wrapper function
      Reintroduce preliminary sanity check in ECDH speed and remove further checks in the benchmark loop.
      Use CRYPTO_memcmp for comparing derived secrets
      Remove leftover KDF pointer
      Do not handle R_EC_X25519 as a special case
      Handle "int_ctx_new:unsupported algorithm" error
      ecdhtest.c: move NAMED CURVES TESTS to evptests.txt
      Remove stale code in ecdhtest.c
      ecdhtest.c: move KATs to evptests.txt
      Remove more stale code in ecdhtest.c
      ecdhtest.c: move co-factor ECDH KATs to evptests
      Remove ecdhtest.c
      Reformat evptests.txt

Nikos Mavrogiannopoulos (2):
      cryptodev: Fix issue with signature generation
      cryptodev: allow copying EVP contexts

Noah Robbin (2):
      Use size of server key when selecting signature algorithm.
      Use the index that matches the key type (either SSL_PKEY_RSA_PSS_SIGN or SSL_PKEY_RSA).

Patrick Schlangen (1):
      Make data argument const in SSL_dane_tlsa_add

Patrick Steuer (26):
      Fix strict-warnings build
      Fix strict-warnings build
      Fix strict-warnings build
      Fix strict-warnings build
      apps/speed.c: fix ccm performance measurements.
      EVP_EncryptInit.pod: EVP_CIPHER_mode and EVP_CIPHER_CTX_mode update
      apps/speed.c: add 'rand' algo to enable DRBG performance measurements.
      crypto/aes/asm/aes-s390x.pl: fix $softonly=1 code path.
      s390x assembly pack: remove capability double-checking.
      e_os.h: add prandom and hwrng to the list of random devices on s390x.
      s390x assembly pack: extend s390x capability vector.
      apps/speed.c: add -seconds and -bytes options
      apps/speed.c: use 32 byte key material as default
      key_A and key_B had 3 references, only 2 were freed.
      apps/speed.c: detect evp cipher 32-bit ctr overflow and reset iv
      doc/man3/EVP_EncryptInit.pod: add EVP_CIPHER_CTX_rand_key
      apps/speed.c: generate evp_cipher keys implicitly
      apps/speed.c: initialize buffers
      crypto/bio/bss_dgram.c: annotate fallthrough (-Wimplicit-fallthrough)
      s390x assembly pack: add KMA code path for aes-ctr.
      crypto/aes/asm/aes-s390x.pl: replace decrypt flag by macro.
      s390x assembly pack: add KMA code path for aes-gcm.
      crypto/engine/eng_list.c: compare getenv rv to NULL instead of 0
      Document OPENSSL_ENGINES environment variable
      s390x assembly pack: add KMAC code path for aes-ccm
      crypto/evp/e_aes.c: add comments to s390x aes gcm implementation

Paul Hovey (2):
      fix undoes errors introduced by https://github.com/openssl/openssl/commit/fc6076ca272f74eb1364c29e6974ad5da5ef9777?diff=split#diff-1014acebaa2c13d44ca196b9a433ef2eR184
      updated macro spacing for styling purposes

Paul Yang (63):
      Fix typo in ASYNC_WAIT_CTX_new.pod doc
      Fix typo in INSTALL file
      Fix typo in doc/man3/EVP_EncrypInit.pod
      Fix coding style in apps/passwd file
      Document X509_check_private_key and relative
      Add test cases for X509_check_private_key
      Set local variable to 0 to avoid build error
      Fix doc nits in X509_check_private_key.pod
      Fix coding style
      Fix a bundle of trailing spaces in several files
      Fix possible usage of NULL pointers in apps/spkac.c
      Refactor functions in testdsa.h
      Clean up a bundle of codingstyle stuff in apps directory
      Make SNI behavior more clear in s_client doc & help
      Forbid to specify -nextprotoneg if -tls1_3 is enabled
      Remove non-accurate description in Configure script
      Make clear error message if opt_<number> fails
      Avoid compiler complaining
      Fix inaccurate comments in bn_prime.c
      Fix return value checking for BIO_sock_init
      Change to check last return value of BN_CTX_get
      Support converting cipher name to RFC name and vice versa
      Update doc/ca.pod to clarify description for dates
      Update documentation for SSL_is_server()
      Add asn1_time_to_tm function and check days in month
      Add test cases and docs for ASN1_STRING_TABLE_* functions
      Fix a reference nit in doc
      Fix coding style nits in crypto/asn1/a_strnid.c
      Make SSL_set_tlsext_host_name no effect from server side
      Fix rsa -check option
      Update ASN1_TIME_to_tm's documentation
      Refactor ASN1_TIME_print functions
      Add '-ext' option to display extensions in 'x509'
      Add EC key generation paragraph in doc/HOWTO/keys.txt
      Add test case for ASN1_TIME_print
      Add XXX_security_bits documentation
      Fix trivial nits in documentaion
      Use new setup_tests in code of rsa_test
      Document missing EVP_PKEY_method_* items
      Remove useless macros in apps/speed.c
      Fix coding style in crypto/rsa directory
      This part fixes braces around if-else.
      Add two missing SSL_CIPHER_* functions
      Introduce SSL_CIPHER_get_protocol_id
      Support key check in EVP interface
      Support EVP_PKEY_meth_remove and pmeth internal cleanup
      Fix doc nits
      Fix reading heap overflow in a test case
      Fix a bug in ALPN comparation code of a test case
      Make '-name' option of the 's_client' more generic
      Add sk_TYPE_new_reserve() function
      Fix mismatch of function prototype and document
      Fix doc-nits in doc/man3/DEFINE_STACK_OF.pod
      Simplify the stack reservation
      Support public key and param check in EVP interface
      Support multi-prime RSA (RFC 8017)
      Fix some issues in apps/req
      Leave a message in doc to indicate 0 is not acceptable
      Remove spaces at end of line in ssl/statem
      Remove outdated comments
      Add missing 'RETURN VALUES' sections in doc
      Enforce return values section check
      Update all affected files' copyright year to 2018

Pauli (155):
      Remove unused variable
      Implementation of the ARIA cipher as described in RFC 5794.
      fix spelling of Camellia in comment
      Ensure minsize >= sizeof(SH_LIST)
      Add a test case that tests more of the cipher modes.
      Increase the size of the stack buffer to prevent an overflow.
      Avoid buffer underflow in evp_test.
      Update the cipher(1) documentation to explicitly state that the RSA cipher     string means the same a kRSA.
      Increase the password buffer size to APP_PASS_LEN.
      Remove doc reference to non-existant GCM example
      Limit the output of the enc -ciphers command to just the ciphers enc can     process.  This means no AEAD ciphers and no XTS mode.
      Make the output of enc -ciphers identical even if run several times in a session.
      Use the callbacks from the SSL object instead of the SSL_CTX object
      Add the presence of ARIA to the change log.
      Unit tests for crypto/stack.
      Rewrite the documentation for sk_TYPE_find() and sk_TYPE_find_ex() to better     describe the vagaries in their behaviour.
      Rename the test_stack recipe file name to be consistent with the rest of the     tests.
      Add unit tests for the lhash functionality.
      Add enable-aria where rc5 and md2 are built.
      Test infrastructure additions.
      Documentation clean up for man1/list.pod
      Documentation cleanup for man1/nseq.pod
      Documentation cleanup for man1/enc.pod
      Documentation updates
      Make test marcos for true/false checks reliable for all integral types.
      Update rc2test to use the test infrastructure
      Update md2test to use the test infrastructure
      Update dtlstest to use the test infrastructure
      Update sha256t and sha512t to use the test infrastructure
      Update sha1test to use the test infrastructure
      Update mdc2test to use the test infrastructure
      Update rc5test to use the test infrastructure
      Update rc4test to use the test infrastructure
      Update d2i_test to use the test infrastructure
      Update secmemtest and memeleaktest to use the test infrastructure.
      Update gmdifftime to use the test infrastructure
      Update ideatest to use the test infrastructure
      Update sanitytest to use the test infrastructure
      Update the internal chacha test to use the framework     Reviewed-by: Richard Levitte <levitte at openssl.org>     Reviewed-by: Matt Caswell <matt at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/3195)
      Update threadstest to use the test framework
      Remove fprintfs from the poly1305 internal test but keep the test number     information.
      Update destest to use the test infrastructure
      Split the CAST tests up.
      Update the internal siphash tests to use the framework's output.
      Guarantee single argument evaluation for test macros.     Add test case that checks some of them.
      Refactor crltest.c to separate the test cases into individual functions.
      Update igetest to use the test framework.
      Test framework output improvement.
      Conversion of the EC tests to use the framework.     Some refactoring done as well.
      Add BN support to the test infrastructure.
      Add test_test tests for bignums.     Add relative tests for bignums.
      Add a descriptive header to diff output from failed tests.
      Remove dead code.
      Randomise the ordering of the C unit tests.
      Update one CI test to use randomised ordering.
      Reformat the output of BIGNUMS where test cases fail.
      Integration build a small memory image
      Bring the memory output inline with the suggestions in #3465.
      Reformat the string output to be more in line with the decisions made in #3465
      Correct Oracle copyrights & clarify.
      Add output routines to allow consistent formatting of memory, strings     and bignums.  These have been refactored into their own file, along with     their error displays.  The formatting follows the output format used     on error, except that bignums of sixty four bits or less are displayed     in a more compact one line form.
      Fix preprocessor indentation.     Rework main() to be in the style of the other conditional tests.
      Update tests to avoid printf to stdout/stderr when running as test cases.
      Put error output back.
      Address double error and OSSLzu comments.
      Address style issues.     Refactor count -> c which makes the for loop more readable.
      Remove OSSLzu macros and use %zu in the test framework (via BIO_printf).
      Remove duplicate see also reference to BIO_s_mem.
      TAP line filter BIO.
      Remove uses of the TEST_check macro.
      Fix copyright date for the ARIA evp file.
      Use the return value from write(2)     This prevents a warning when building with crypto-mdebug.
      Remove the TEST_check macro.
      Fix compiler warnings
      Avoid buffer overruns in the req command line utility.
      Rework the append_buf function
      Bounds check string functions in apps.     This includes strcat, strcpy and sprintf.
      Memory bounds checking in asn1 code.
      BIO range checking.
      Rearrange link line so the libraries come after the source.     Some linkers like it this way.
      change return (x) to return x
      Address potential buffer overflows.
      Trivial bounds checking.
      Demo style fixes and modernisation.
      Fix some issues raise by coverity in the tests.
      Avoid having an unsigned integer decrement below zero.
      Change return (x) to return x
      Test cleaning and modernisation
      Remove trailing blanks.
      Address Coverity issues.
      Fix some pedantic warnings.
      Improve struct tm population
      Fix potential use-after-free and memory leak
      Update the test framework so that the need for test_main is removed.  Everything     that needed test_main now works using the same infrastructure as tests that used     register_tests.
      Fix the two new tests since approval.
      Fix trivial coding style nits in a_time/a_tm files     Clean up some true/false returns
      OPENSSL_NO_ENGINE defined causes build failures
      Formatting & declaration cleanse.
      Remove EXECUTE_TEST_NO_TEARDOWN.
      Simplify some of the sslapitest code.
      Test fixtures changed to pointers.
      Change SETUP_TEST_FIXTURE so that the fixture structure is passed by     reference not by value.  This allows an error return from the setup function.
      Determine the number of output columns for the list and help commands using     the command names rather than hard coding it (conditionally).
      Remove tests dependence on e_os.h
      Fix windows build after too aggressive e_os.h removal
      Remove double error messages
      Fix ctype arguments.
      This has been added to avoid the situation where some host ctype.h functions     return true for characters > 127.  I.e. they are allowing extended ASCII     characters through which then cause problems.  E.g. marking superscript '2' as     a number then causes the common (ch - '0') conversion to number to fail     miserably.  Likewise letters with diacritical marks can also cause problems.
      Dead code elimination.
      Avoid a self-assignment.
      Improvement the formatting in bn_print.c     Movely removal of unnecessary brackets but some could be bugs addressed too.
      Check for EOF in ASCII conversions.
      Check range of test values using isascii before diving into the full     range of ctype functions.
      e_os.h removal from other headers and source files.
      Move the REF_PRINT support from e_os.h to internal/refcount.h.
      Remove the X_OK define, it is unused.
      Move e_os.h to be the very first include.     cryptilib.h is the second.
      Move OPENSSL_CONF from e_os.h to cryptlib.h
      Add ARIA as an alias for all ARIA based modes.
      Add documentation for ARIA GCM modes.
      Fix potential null problem.
      struct timeval include guards
      Fix an include location problem in the extrended tests.     [extended tests]
      Revert "GH614: Use memcpy()/strdup() when possible"
      Revert "Reuse strndup(), simplify code"
      Manually revert "Ensure allocation size fits into size_t"
      Ensure that the requested memory size cannot exceed the limit imposed by a     size_t variable.
      Remote unrequited casts     Also use strndup instead of a malloc/memcpy pair.
      Add explanatory comment about fitting into a size_t.
      Avoid signed vs unsigned comparison error.     Introduced by #4372
      Null pointer used.     Address coverity report of null pointer being dereferenced.
      Stack sorting safety
      Add a reserve call to the stack data structure.
      Add stack space reservations.
      Use safestack.h exclusively internally.     Remove all stack headers from some includes that don't use them.
      Remove unnecessary #include <openssl/lhash.h> directives.
      Put back the #include <openssl/safestack.h> lines in public headers.     the latter includes the former.
      Document that lhash isn't thread safe under any circumstances and     indicate the level of locking required for various operations.
      Add a CRYPTO_atomic_read call which allows an int variable to be read     in an atomic fashion.
      Add atomic write call
      Return a value from atomic read on Windows.     Use a read lock when reading using pthreads.
      Address a timing side channel whereby it is possible to determine some
      Address a timing side channel whereby it is possible to determine some
      Disabled list doesn't contain SM3 and SM4.
      use size_t tests instead of int ones
      Test support for time_t comparisons.
      A missing semicolon prevents compilation with ENGINE_REF_COUNT_DEBUG enabled.
      Enable the ARIA ciphers by default.
      Change the name of the SEC typedef to openssl_speed_sec_t.
      SHA512/224 and SHA512/256
      Make the OPENSSL_CPUID_OBJ define internal.     Patch by @levitte.
      Make OPENSSL_rdtsc universally available.
      Unify timer code
      Fix glibc specific conditional for Mac OS/X
      Fix glibc version detection.     Simplify Posix timer detection.

Pavel Kopyl (3):
      Fix error handling in i2d* functions.
      Add error handling in dsa_main and ASN1_i2d_bio.
      Check return value of OBJ_nid2obj in dsa_pub_encode.

Peter Meerwald-Stadler (1):
      Configure: Fix configdata.pm shorthand for --dump, should be -d     INSTALL: Mention 'aria' algorithm for no-<alg>

Peter Wu (3):
      apps: Add support for writing a keylog file
      SSL_get_shared_sigalgs: handle negative idx parameter
      doc: fix -keylogfile option

Pichulin Dmitrii (2):
      fix check of broken implementations of GOST ciphersuites
      Fix 'key' option in s_server can be in ENGINE keyform

Piotr Czajka (1):
      Typo fix

P?ter Budai (1):
      Fixed PKCS5_PBKDF2_HMAC() to adhere to the documentation.

Qin Long (3):
      Cleaning UEFI Build with additional OPENSSL_SYS_UEFI flags
      Fix the build warning under OPENSSL_NO_GOST
      e_os2.h: Refine OSSL_SSIZE definition under UEFI environment

Rainer Jung (1):
      Fix use of "can_load()" in run_tests.pl.

Remi Gacogne (1):
      Add missing session id and tlsext_status accessors

Rich Salz (284):
      Remove "lockit" from internal error-hash function
      Remove get_hash completely
      Fix output text to avoid gratuitious git diff
      Make update, etc.
      GH1383: Add casts to ERR_PACK
      Add some const casts
      Add #defines for magic numbers in API.
      Change callers to use the new constants.
      Check for bad filename in evp_test
      GH1446: Add SSL_SESSION_get0_cipher
      Fix some doc nits.
      RT3940: For now, just document the issue.
      Add BIO_get_new_index()
      Move BIO index lock creation
      RT2676: Reject RSA eponent if even or 1
      To avoid SWEET32 attack, move 3DES to weak
      Put DES into "not default" category.
      Remove trailing zeros
      Use uppercase name for PCT_ enum
      Remove comment tags from structs (coding style)
      Code cleanup UI
      Misc BN fixes
      Add missing debug strings.
      Trim config output
      Add --missing-help to list command
      Add -h and -help for c_rehash script and app
      GH1536: Install empty CT log list
      Make reference to other manpage more explicit
      RT3669: dgst can only sign/verify one file.
      Revert "Constify code about X509_VERIFY_PARAM"
      GH1555: Don't bump size on realloc failure
      Dcoument -alpn flag
      Add -Wswitch-enum
      Revert "Call ENGINE_init() before trying to use keys from engine"
      RT is put out to pasture
      GH1546: Fix old names in cryptodev code.
      Add NPN to an SSL3 build
      Fix typo (reported by Matthias St. Pierre)
      Move manpages to man[1357] structure.
      Disable MDC2 by default.
      Revert "Disable MDC2 by default."
      Update CRYPTO_set_mem_debug() doc
      Missed a mention of RT
      Zero stack variable with DSA nonce
      Check return value of some BN functions.
      Merge find-undoc-api into find-doc-nits
      Make bntest be (mostly) file-based.
      Fix various doc nits.
      Add X509_VERIFY_PARAM inheritance flag set/get
      CRL critical extension bugfix
      Doc nits: callback function typedefs
      Rename "verify_cb" to SSL_verify_cb
      Move extension data into sub-structs
      Use typedefs for PSK, NPN, ALPN callback functions
      Review comments
      Fix typo in Blake2 function names
      Review comments; fail build if nits found
      GH2176: Add X509_VERIFY_PARAM_get_time
      Add "random malloc failure" tooling
      Add documentation
      Rename file so "ls" works on 80 columns
      Make X509_Digest,others public
      Fix "failure rate" bugs
      If client doesn't send curves list, don't assume all.
      Skip ECDH tests for SSLv3
      Avoid over-long strings.  Fix a mem leak.
      Don't need the checkbox; the hook does it
      Add -Wno-parentheses-equality to dev-warnings.
      Doc fix
      Fix parsing of serial# in req
      Centralize documentation about config file location
      Add no-ec build
      Don't call memcpy if len is zero.
      Prevent OOB in SRP base64 code.
      Iterate over EC_GROUP's poly array in a safe way
      Update year, wording tweak
      Remove GENCB_TEST compile flag
      Exdata test was never enabled.
      Remove ref to err(7), update copyright.
      sh_malloc & sh_free prototype change to match POSIX
      Fix an endless loop in rsa_builtin_keygen.
      Remove some duplicate manpage entries
      Get pointer type right in BIO_ssl_shutdown()
      Fix many doc L<> errors
      Handle find-doc-nits script rename
      Fix some doc nits
      Add test for -nameout output
      Document BIO_printf family
      Look for comma before - in POD pages
      Move PRIu64, OSSLzu to e_os.h
      Remove duplicate doc
      Make default_method mostly compile-time
      Make default_method mostly compile-time (cont'd)
      Check for L<foo|foo>
      Add missing =back
      Standardize on =over 4 and check for it.
      Use 'over 2' for bullet lists.
      Additional check to handle BAD SSL_write retry
      Convert x509aux, cipherlist, casttest
      Address review feedback (to be squashed)
      WIP: Convert ui,v3ext,verify_extra_test
      Add -f -r flags to find-unused-errs
      Catch EC_R_UNKNOWN_GROUP in check_unsupported()
      Convert afalgtest
      [squash]Build works with/out NO_ENGINE and NO_AFALG
      Convert more tests
      Convert more tests to framework
      Update more tests
      Convert more tests
      Convert dhtest, dsatest, cipherbytes_test
      Document Next Protocol Negotiation APIs
      fix dh_test.
      Convert hmactest to new test framework
      Ignore dups in X509_STORE_add_*
      if log fails, avoid pms getting double free
      check length sanity before correcting in EVP_CTRL_AEAD_TLS1_AAD
      Fix typo in OPENSSL_LH_new compat API
      evp_test.c: Add PrivPubKeyPair tests
      Convert modular exponentiation tests to new framework
      Fix unit-tests when no-srp configured
      Convert dtls_mtu_test, dtlsv1listentest
      Convert bntest to TEST_ framework
      Convert sslapitest to test framework
      Fix ISO C function/object pointer issue
      Remove (broken) diagnostic print
      Ensure blank lines between tests.
      Check fflush on BIO_ctrl call
      Fix a stack smash
      Convert danetest, ssl_test_ctx_test
      Add some man page cross-references
      Fix URL links in comment
      Convert uses of snprintf to BIO_snprintf
      Remove some unused scripts
      Perltidy ck_errf
      Run perltidy, use strict+warnings on mkrc.pl
      Fix curly braces on util/mkrc.pl
      Fix tests of TEST tests, as it were
      Fix pathname errors in errcode file
      Remove outdated and unsupported CHIL engine
      Ignore MSVC warnings (via Gisle Vanem)
      Convert of evp_test to framework
      Address some feedback
      Use compare_mem wrapper
      Split test/evptests.txt into separate files.
      Rename evptests.txt to evppkey.txt
      Use scalar, not length; fixes test_evp
      Add "Title" directive to evp_test
      Convert shlibloadtest to new framework
      Review feedback; use single main, #ifdef ADD_TEST
      Use BIO not FILE for test file
      Move engines/afalg to engines
      -inkey can be an identifier, not just a file
      Revert "Integration build a small memory image"
      Fix line numbering for errors.
      Add titles to groups of EVP tests
      Revise evp_test parser; make like bn_test
      Fix va_arg all in test_error_c90
      Add stricter checking in NAME section
      Only release thread-local key if we created it.
      Add -p (public only) flag to find-doc-nits
      Add text pointing to full change list.
      Use common STANZA for bn and exp tests
      Document default client -psk_identity
      Add a lock around the OBJ_NAME table
      make error tables const and separate header file
      Fix possible memory over-read in apps/s_client.c
      Remove doc of non-existent functions
      Fix a read off the end of the input buffer
      List undocumented macros
      Remove needless type casting.
      If-guard to avoid null ptr deref in statem_srvr.c
      Introduce ASN1_TIME_set_string_X509 API
      Remove leading space-before-tab
      Put message strings in state files
      Update copyright on progs.h
      Remove OLD_STR_TO_KEY compile option
      Standardize Levitte's dual-license
      Remove bsd_cryptodev engine
      Add RAND_UNIMPLEMENTED error code
      Fix typo (note by oneton at users.github)
      Modify Sun copyright to follow OpenSSL style
      Ensure a space after colon in enc -v
      Reformat progs.pl; add ARIA support
      Merge Nokia copyright notice into standard
      Add constant-time 64
      Add ecstress test
      Rename static global "lock" to "obj_lock"
      Use randomness not entropy
      Add fork handlers, based on pthread_atfork
      Add ECHO to makefiles for real silence
      Merge Intel copyright notice into standard
      Fix atfork flag.  Avoid double-negatives :)
      Cleanup some copyright stuff
      Various doc fixes
      BN_pseudo_rand is really BN_rand
      Add echo for end of each build phase
      Undo commit d420ac2
      Undo commit 0755217
      Undo commit de02ec2
      Undo commit 40720ce
      Undo commit cd359b2
      Undo commit dc00fb9
      Fix crash
      Add two trivial fixes from old commits
      Cleanup RAND_load_file,RAND_write_file
      Remove some now-unneeded VMS controls
      Update various RAND podpages
      Rewrite RAND_egd
      Fix bug in err_string_data_cmp
      Start to overhaul RAND API
      Don't use "version" in "OpenSSL Version 1.1.0" etc
      Standardize apps use of -rand, etc.
      Fix use-after-free
      Add DRBG random method
      Add range-checking to RAND_DRBG_set_reseed_interval
      Rename internal rand.h file
      Add --with-rand-seed
      Install custom RAND_METHOD for fuzzing
      Switch from ossl_rand to DRBG rand
      Add a DRBG to each SSL object
      Add RAND_priv_bytes() for private keys
      Add missing include of cryptlib.h
      Make RAND_DRBG fork-safe
      Various RAND improvements
      Add -d flag to list -u details (now normally off)
      Move FuzzerSetRand to separate file.
      Instantiate when RAND_status() checks
      Doc fixes
      Add some casts for %j
      Revert "Add some casts for %j"
      Print pathnames for 'version -r'
      Put thread-fork-init inside a run-once guard
      Check # of arguments for remaining commands.
      Safely display SNI (just in case)
      Add random serial# support.
      Use "" not <> for internal/ includes
      Remove custom base64 code.
      Use "" not <> on e_os.h include
      (Re)move some things from e_os.h
      Move randomness to allocated buffer
      Tweak wording to be more clear.
      Use strcpy instead of sprintf %s
      Remove NO_DIRENT; it isn't used anywhere
      MSC_VER <= 1200 isn't supported; remove dead code
      Avoid out-of-bounds read
      Avoid possible uninitialized variable.
      Add CRYPTO_thread_glock_new
      Address feedback
      Less documentation for deprecated API
      Fix doc-nits from previous commit
      Add checks for alloc failing.
      Fix error handling/cleanup
      Always use $ as shell prompt in example
      Fix function name in ECerr call
      Replace malloc+strcpy with strdup
      Rewrite some code
      Anchor the regexp match
      Fix doc for i2d/d2i private/public key
      Add CRYPTO_get_alloc_counts.
      Remove email addresses from source code.
      Update RAND_load_file return value.
      Additional name for all commands
      Whitespace and indent fixes
      Warn if -days without -x509
      Removre comment with user's name
      Don't NULL check before calling DSO_free.
      Fix typo that cause find-doc-nits failure
      Revert "Add padding spaces before printing algo."
      Fix SOURCE_DATE_EPOCH bug; use UTC
      Check for malloc failure
      Add "friendly name" extractor
      Add link for more SECLEVEL info
      Consistent formatting for sizeof(foo)
      Rewrite RT3513.
      Remove old config that used non-exist util script
      Add fingerprint text, remove MD5
      Remove remaining NETWARE ifdef's
      Fix IPv6 define
      Add accessors for AdmissionSyntax
      Move fprintf after assignment to avoid crash.
      Improve some BN documentation.
      Shorten output by a line
      Remove unused file
      Copy name string in BIO_meth_new

Richard Levitte (658):
      Travis: When testing installation, build in separate dir, otherwise in checkout
      VSI submisson: make better use of item lists in o_time.c
      VSI submission: make the VMS version of RAND_poll() faster and more secure
      Have 'openssl engine' exit with non-zero when some engine fails to load
      VMS: have the IVP verify that a well known engine loads properly
      When tr gets bracketed arguments, they need to be quoted
      VMS: Fix building of bad_dtls_test
      openssl-format-source: no dash marker on *INDENT-(ON|OFF)* comments
      indent: add a couple of types we use in apps
      Move the building of test/buildtest_*. to be done unconditionally
      Travis: add a build with no-stdio
      util/mkdef.pl: mark certain PEM function declarations with STDIO
      make update
      Remove OPENSSL_NO_STDIO guards around certain SSL cert/key functions
      The capi engine uses stdio, so don't build it when configuring 'no-stdio'
      openssl-format-source: A few more (DECLARE|IMPLEMENT) variants to care for
      Add a note about a perl issue on VMS and how to work around it
      Skip the SRP tests in 80-test_ssl_old.t if no TLS versions is enabled
      Make "make" less verbose in Travis, except for the build only case
      Add a "config" for verbosity and use it with Travis
      Remove duplicate ordinals
      VMS: no ENDIF on one line IF statements, in config.com
      dasync is an internal testing engine, so don't install it
      Don't try to init dasync internally
      Simplify indentation of DECLARE_ and IMPLEMENT_ lines
      MEMPACKET is typedef'd in ssltestlib.h, don't do so again in ssltestlib.c
      VMS: Use strict refdef extern model when building library object files
      ssltestlib: Tell compiler we don't care about the value when we don't
      Make 'openssl req -x509' more equivalent to 'openssl req -new'
      Avoid more compiler warnings for use of uninitialised variables
      Configure: Properly cache the configured compiler command
      Trust RSA_check_key() to return correct values
      Check for __GNUC__ to use GNU C atomic buildins
      CRYPTO_atomic_add(): use acquire release memory order rather than relaxed
      CRYPTO_atomic_add(): check that the object is lock free
      NEWS: add a number of the types that were made opaque
      Update CHANGES, NEWS, README and opensslv.h on master
      Improve the definition of STITCHED_CALL in e_rc4_hmac_md5.c
      VMS: honor --openssldir setting
      Make it possible for the user to specify a different default build file
      Configure: clean away temporary section of code
      Configure: Redo the logic for finding build file templates
      Configure: save away the value of OPENSSL_LOCAL_CONFIG_DIR for reconf
      The Perl interpreter might be in a path with spaces, so maybe quote it
      Make it possible to disable fuzz testing
      Configure's print_table_entry printed incorrect information
      Have Configure's HASH or TABLE produce complete lists
      INSTALL: clarify OPENSSL_LOCAL_CONFIG_DIR
      INSTALL: add information on the environment variable BUILDFILE
      INSTALL: add information on option no-fuzz-test
      Add a more versatile test chooser
      Revert "Make it possible to disable fuzz testing"
      Revert "INSTALL: add information on option no-fuzz-test"
      Document the enhanced tests specification
      Move 05-test_fuzz.t to 90-test_fuzz.t
      Unix build: have the makedepend and cc actions in one recipe
      Correct detection of group end in map file when testing symbol presence
      Configure: Reorganise the checking of disabled options
      Allow asan, msan and ubsan to be configured with shared libraries
      Travis: Do asan and msan with shared libraries
      If errno is ENXIO in BSS_new_file(), set BIO_R_NO_SUCH_FILE
      Build file templates: additional information to build file template functions
      VMS: Use different C flags for programs that aren't to be installed
      VMS: be less picky when loading DSOs
      VMS: Don't force symbol mixed case when building DSOs
      Fix 'openssl passwd' with arguments -1 or -apr1
      Add a test for 'openssl passwd'
      Add SHA256 and SHA512 based output for 'openssl passwd'
      Document the new SHA256 and SHA512 password generation options
      Test the new SHA256 and SHA512 based password generation options
      Rather than one variable for each passwd type, use one enum variable
      VMS: Really don't force symbol mixed case when building DSOs
      VSI submission: redirect terminal input through socket
      Add copyright and license on apps/vms_term_sock.[ch]
      Reformat to fit OpenSSL source code standards
      Refactor to avoid unnecessary preprocessor logic
      Finally, make sure vms_term_sock.c is built on VMS
      Register the name of the config file each config target was found in
      Use the registered conf file names as dependencies to build configdata.pm
      Rearrange the storage of build file template names in %config
      Simplify the dependencies for remaking configdata.pm
      Simplify configudata.pm dependency generation
      Have the configuration options 'no-err' and 'no-async' work again
      Fix no-ocsp
      Fixup BIO demos for OpenSSL 1.1.x
      Fixup BIO demos for OpenSSL 1.1.x
      Fixup BIO demos for OpenSSL 1.1.x
      Don't ignore Makefiles in demos/
      Crude Makefile for demos/bio/
      Crude VMS build files for demos/bio/
      Documentation fixup; no more ECDHParameters
      apps/apps.c: include sys/socket.h to declare recv()
      Quiet compiler warning about uninitialised variable
      util/dofile.pl: report if a template couldn't be loaded
      descrip.mms.tmpl: in obj2bin, make sure an empty @deps means no empty lines
      VMS: add [.util]shlib_wrap.exe and its build instructions
      test/x509aux.c: Fix argv loop
      Fix error message typo, wrong function code
      apps/apps.c: initialize and de-initialize engine around key loading
      Add support for C++ in Configure
      Add support for C++ in Configurations/unix-Makefile.tmpl
      Add C++ settings in the Linux config targets
      Remove automatic RPATH
      Remove automatic RPATH - add user rpath support
      Remove automatic RPATH - adapt shlib_wrap.sh
      Remove automatic RPATH - Add a CHANGES entry
      Fix C++ support: set $target{cxx} correctly
      Fix config option 'no-deprecated'
      Make OpenSSL::Test a bit more flexible
      Add documentation of internal OpenSSL::Test functions
      appveyor: make tests verbose
      OpenSSL::Test cleanup - no forward declarations needed
      OpenSSL::Test - small fixup
      If an engine comes up explicitely, it must also come down explicitely
      apps: instead of varying implementation, make setup_engine a function always
      apps: remove some #ifndef clutter
      Correct installation test in appveyor
      Efence is antiquated, remove all traces of using it
      Add some notes on shared library names on different platforms
      Backdated note in CHANGES about shared library names
      VMS: tell the C compiler to use the ISO C94 standard
      Mark VC templates correctly.
      Unix Makefile: Some sed implementation truncate long lines.  Use perl instead.
      HPUX: Add the forgotten $(DSTDIR) when linking DSOs
      Secure our notification email.
      Test recipes: remove duplicate OpenSSL::Test usage
      test/build.info: typo, $ missing
      Convert poly1305 selftest into internal test
      Allow indented comments in build.info
      Explain the deal with internal test programs
      VMS: ignore multiply defined symbols when linking programs
      Convert asn1 selftests (a_strnid and ameth_lib) into internal test
      Convert modes selftests (cts128 and gcm128) to internal test
      Add a HEADER_MODES_H guard in include/openssl/modes.h
      Convert x509 selftests to internal test
      Convert mdc2 test print to internal test
      Finally, add a test recipe for the internal tests
      Clean away remaining 'selftest' code
      Clang doesn't like -znodelete, make it a linker flag instead
      test/shlibloadtest: small fixes
      Enable memory debugging while testing
      Don't assume to know the shared library extension
      Integrate ossl_shim into the build
      Convert 90-test_external.t to using "executable" rather than "system"
      Travis: add a strict build
      VMS: correct the logic around linking executables
      VMS: update the list of files that need some extra treatment
      Correct internal tests sources
      VMS build file template: assign 'arch' to local symbol table
      constant time test: include our internal/numbers.h rather than limits.h
      VMS: pretend to use -znodelete
      Fix the LIBZ macro on VC config targets
      Windows: use default ZLIB1 unless --with-zlib-lib is set
      INSTALL: small typo
      Unix Makefile: Make sure to use $(PERL) when running ./Configure
      Move algorithm specific ppccap code from crypto/ppccap.c
      Fix no-dso (shlibloadtest)
      Fix the evp_test Ctrl keyword processing
      chacha20/poly1305: make sure to clear the buffer at correct position
      Fix no-cms (CVE-2016-7053)
      descrip.mms.tmpl: Simplify fiddling of logical names record and statem
      Fix no-ct in test/ct_test.c
      Building: make it possible to force linking with static OpenSSL libs
      Document how to force linking with static libraries
      Link internal tests with static OpenSSL libraries when needed
      Revert "Move algorithm specific ppccap code from crypto/ppccap.c"
      Small fixups of util/process_docs.pl
      Fix the effect of no-dso in crypto/init.c
      Add util/check-doc-links.pl, to be used to check referenses in manuals
      Fix referenses in section 3 manuals
      Fix referenses in section 1 manuals
      Fix referenses in section 7 manuals
      Fix typo in util/process_docs.pl
      Remove heartbeat support
      Stop init loops
      Add a warning stipulating how things should be coded in ossl_init_base
      Remove heartbeats completely
      Revert "Remove heartbeats completely"
      Make it possible to disable building and running tests
      Only build the body of e_padlock when there are lower level routines
      Add a modern linux-x86 config target
      On x86 machines where the compiler supports -m32, use 'linux-x86'
      Clarify what X509_NAME_online does with the given buffer and size
      UI_process() didn't generate errors
      Add a test for the UI API
      Make sure that password_callback exercises UI
      In UI_OpenSSL's open(), generate an error on unknown errno
      UI_OpenSSL()'s session opener fails on MacOS X
      UI code style cleanup
      Remove extra bang
      Test framework: Add the possibility to have a test specific data dir
      VMS UI_OpenSSL: if the TT device isn't a tty, flag instead of error
      VMS UI_OpenSSL: generate OpenSSL errors when things go wrong.
      HP-UX doesn't have hstrerror(), so make our own for that platform
      evp_test: when function and reason strings aren't available, just skip
      e_afalg: Don't warn about kernel version when pedantic
      Fix no-ct, skip tests recipes that try to test CT
      test/ssl_test: give up if both client and server wait on read
      Fix erroneous goto lable
      Add bwrite_conv and bread_conv values to methods_dgramp_sctp
      M_check_autoarg: sanity check the key
      Reformat M_check_autoarg to match our coding style
      Travis: The TLS 1.3 code isn't interoperable yet, move it to its own build
      70-test_sslmessages.t: Don't check EXT_SIG_ALGS if TLS 1.2 is disabled
      70-test_sslvertol.t: Make sure to check a max TLS version that matches configuration
      80-test_ssl_new.t: Make 19-mac-then-encrypt.conf work without TLSv1.2
      70-test_sslvertol.t: skip test 1 and 2 if too few protocols are enabled
      Don't run NPN tests when NPN is disabled
      Don't test SRP when it's disabled
      Don't build OCSP stuff when OCSP is disabled
      Don't run OCSP tests when OCSP is disabled
      Don't run MSBLOB conversion tests when RSA or DSA are disabled
      Fix build issues with no-dh, no-dsa and no-ec
      Small fixes of cryptodev engine
      Only enable CRYPTO_3DES_ECB if that name is an existing macro
      Enable apps to get a UI_METHOD for the default prompter
      Constify the input parameter to UI_method_get_*
      Add an application data field in the UI_METHOD
      Add a UI utility function with which to wrap pem_callback_cb in a UI_METHOD
      make update
      Document the UI utility functions
      Add a few documentation lines about UI_OpenSSL()
      Add a test "uitest"
      UI: fix uitest for no-ui configuration
      UI: fix uitest for VMS
      UI documentation fixup
      Run find-doc-nits in travis
      UI: Ensure there will be no race condition when getting the UI_METHOD ex_data
      UI: Use RUN_ONCE differently
      Fix no-ocsp
      Clarify what RUN_ONCE returns
      Fix DSA parameter generation control error
      Fix no-tls1_2
      s_client: Better response success check for CONNECT
      Fix small typo
      Better check of DH parameters in TLS data
      Document DH_check_params()
      Correct pointer to be freed
      X509_CRL_digest() - ensure precomputed sha1 hash before returning it
      Document what EXFLAG_SET is for in x509v3.h
      Add a couple of test to check CRL fingerprint
      test/evp_test.c: If no algorithm was specified, don't try to check for DES
      Fix faulty free
      bntest: make sure that equalBN takes note of negative zero
      bntest: make sure file_rshift tests BN_rshift1 as well when appropriate
      bntest: do not stop on first fautl encountered
      bntests.txt: add a couple of checks of possibly negative zero
      bn: fix occurance of negative zero in BN_rshift1()
      Initialise alg_k and alg_a
      Fix "no-ec"
      Because our test sid file contains EC, don't try it when configured no-ec
      Add needed module in 25-test_sid.t
      test_rehash does nothing, have it do something
      test/README: clarify test number groups
      Add a test of the X509_STORE / X509_LOOKUP API
      Fix symbol shadow
      Fix test_x509_store
      If all versions of a proto are disabled, disabled the proto as well
      Fix no-dh and no-dsa
      VMS fix of test/recipes/80-test_ssl_new.t
      Correct the no-dh and no-dsa fix
      Have the directory reader use the Unix API on VMS
      Make "openssl rehash" work on VMS 8.3 and up
      Fix typo, missing ||
      Fix typo, should be && rather than &
      Let the output from 'openssl enc -ciphers' go to stdout
      On VMS, massage the fetch file names to remove the generation number
      In apps/rehash.c, decorate the inclusion of internal/o_dir.h for VMS
      Check for the presence of _WIN32 rather than its value.
      Add a null UI method
      Renumber to avoid a error code clash
      Code cleanup: remove the VMS specific reimplementation of gmtime
      Move the CHIL engine to demos/engines
      Code health: Remove obvious VAX C fixups
      Code health: Stop using timeb.h / ftime() (VMS only)
      Code health: Remove unused VAX transfer vector for engines
      Code health: Remove VAX exceptions in util/mkdef.pl
      Code health: make update
      Code health: Remove another VAX C-ism, globaldef and globalref
      Code health: With the VAX C-ism gone, OPENSSL_GLOBAL can be removed too
      Code health: Quick note in changes and the OPENSSL_GLOBAL et al changes
      Code health: Remove base address setting for mingw
      Don't use deprecated EVP_CIPHER_CTX_cleanup() internally
      VMS: compensate for gmtime_r() parameter pointer size
      Add NOTES.UNIX, with a description on how to deal with runpaths
      Fix the skip numbers in 80-test_ca.t
      -precert doesn't work when configured no-ct, don't try to test it then
      Add a platform specific configuration checker
      Add documentation on platform specific checks
      util/process_docs.pl: make it possible to add a suffix to man docs
      Unix Makefile: Have manual generation use the same perl script as Windows and VMS
      Make it possible to select or deselect test groups by number
      Document how to select / deselect test group numbers
      Split test/recipes/03_test_internal.t into individual tests
      Encourage having external tests in multiple test recipes
      Document UI_METHOD and UI_STRING, both useful for UI_METHOD creators
      Fix UI_get0_action_string()
      UI docs: Rephrase the UI method function return value description
      Recognise mingw64 in config script
      Document in CHANGES that config now recognises 64-bit mingw
      Better way to recognise mingw64 in config script
      Rather use -out parameter than redirect stdout
      VMS: Change debug linking method to generate a separate Debug Symbol File
      VMS: throw away [.util]shareable_image_wrap.c.in and add replacement scripts
      VMS: don't use /DSF, turn off CALL_DEBUG instead
      Add EC_KEY_get0_engine()
      VMS: turning off CALL_DEBUG isn't possible on Alpha
      Forgotten 'make update'
      Improve testing of elliptic curve validation
      Fix a few internals tests
      Fix docs for X509_CRL_get0_by_serial() and X509_CRL_get0_by_cert()
      Fix decoding of ASN.1 LONG and ZLONG items
      Rework how protocol specific ciphers in 80-test_ssl_old.t are picked out
      OpenSSL::Test: add a statusvar option for run with capture => 1
      Adapt 80-test_ssl_old.t to use statusvar
      Adapt 20-test_enc.t and 20-test_enc_more.t to use statusvar
      95-test_external_pyca_data/cryptography.py: only install for testing
      Travis: make a separate job for external tests
      Refuse to run the PYCA external test if configured 'no-shared'
      Change exit_checker comment on returned status
      Fix 80-test_ssl_old.t: only count the ciphers if there are any.
      Fix find-doc-nits: { is significant in regexps
      In err_cleanup(), cleanup the thread local storage too
      Add z modifier parsing to the BIO_printf et all format string
      Use the z modifier instead of OSSLzu with BIO_printf
      Add a simple test for the z modifier
      Fixup the github pull request template
      Remind people to have 'Fixes #XXXX' in the commit message
      Disable 15-test_ecparam.t when configured no-ec2m
      Implement internal ASN.1 types INT32, UINT32, INT64, UINT64
      make update
      Convert SSL_SESSION_ASN1 to use size specific integers
      Add a test of encoding and decoding LONG, INT32, UINT32, INT64 and UINT64
      Fix faulty check of padding in x_long.c
      Fix test/asn1_encode_test.c, ASN1_LONG_DATA used inappropriately
      In rand_cleanup_int(), don't go creating a default method
      Make getting and setting the RAND default method thread safe
      Don't try to clean up RAND from ENGINE
      Fix rand_lib.c for no-engine configuration
      Publish our INT32, UINT32, INT64, UINT64 ASN.1 types and Z variants
      Discourage the use of LONG and ZLONG, and deprecate it in the future
      Act on deprecation of LONG and ZLONG, step 1
      Act on deprecation of LONG and ZLONG, step 2
      Act on deprecation of LONG and ZLONG, step 3
      Add a note in CHANGES
      Fix util/mkdef.pl
      Fix int64 test of t_4bytes_4_neg
      Fix x_int64.c
      In asn1_encode_test.c, add custom DER encoding checks
      Fix definition of i2d_fn in asn1_encode_test.c
      Add tests of custom negative 1
      test/testutil.c: Flush stdout when running tests
      OpenSSL::Test: supported filtered command output
      Correct travis.yml to only build extended tests when explicitely asked to
      Test printing of ASN.1 types INTxx et al
      ASN.1: extend the possibilities to embed data instead of pointers
      ASN.1: change INTxx, UINTxx and Z variants to be embedable
      ASN.1: adapt our use of INTxx et al by making them explicitely embedded
      VMS: Fix the passing of cflags for things not being installed
      VMS: Fix internals test programs
      VMS: Copy DECC inclusion epi- and prologues to internals
      VMS: remove name mangling guards around inclusion of internals
      Fix test/recipes/95-test_external_krb5.t
      Port Ben's parallell Makefile hack to Windows
      Port Ben's parallell Makefile hack to VMS
      Typo fix in Configurations/descrip.mms.tmpl
      Make it possible to build static-only libraries
      Add CRYPTO_mem_leaks_cb
      Refactor the test framework testutil
      VMS: Make sure to include MAIN from static libraries if needed
      Adapt all test programs
      Avoid using BIO streams in bioprinttest.c
      TAPify testutil
      Add guards around one of use of IPPROTO_SCTP where it was missing
      Correct some badly formated preprocessor lines
      Ignore all .a files, not just the top ones
      Add include path '..' for libtestutil
      Tapify libtestutil a bit better
      TLSProxy: When in debug mode, show the exact subprocess commands
      testutil: Move printing function declarations to "internal" header
      testutil: make subtest_level() internal
      testutil: Add commodity printing functions test_printf_std{out,err}
      testutil: Add OpenSSL error stack printing wrapper TEST_openssl_errors
      testutil: Remove test_puts_std{out,err}, they are superfluous
      Update the pyca-cryptography submodule to version 1.8.1
      test/exptest.c: stop marking progress with a period
      Rearrange test/recipes/95-test_*.t to use skip_all
      test/recipes/95-test_*.t : correct skip_all syntax
      Prefer TAP::Harness over Test::Harness
      Fix 'no-ec'
      Clarify that a test failed
      Unclash clashing reason codes in ssl.h
      testutil: add the possibility to set the current test title
      evp_test: use the test file name as the test title
      testutil: Fix non-standard subtest output
      Cleanup - use e_os2.h rather than stdint.h
      Clean away needless VMS check
      INSTALL: clarify a bit more how Configure treats "unknown" options
      INSTALL: Remind people to read more if they added configuration options
      Remove notification settings from appveyor.yml
      Clarify what character encoding is used in the returned UI strings
      Add internal functions to fetch a refcount
      Correct small typo in CRYPTO_GET_REF
      Revert "Add internal functions to fetch a refcount"
      Add UI functionality to duplicate the user data
      Windows: rearrange programs cleanup
      Add -module option to util/mkerr.pl
      Rework writing crypto/err/openssl.txt
      .travis.yml: Detect if 'make update' updated something
      Move bn and evp test programs input data to their respective data dir
      Build apps/progs.h dynamically
      Add the target 'build_all_generated'
      Reorder Configure output
      Fix va_list processing in test_note()
      Configure: give config targets the possibility to enable or disable features
      tsget.in: remove call of WWW::Curl::Easy::global_cleanup
      util/mkerr.pl: allow module names prefixed with OSSL_ or OPENSSL_
      util/mkerr.pl: avoid getting an annoying warning about negative count
      Add the common error ERR_R_OPERATION_FAIL
      Add new /dev/crypto engine
      Adapt for BSD cryptodev.h differences
      Comment on the lack of documentation for asymmetric ciphers
      Document the added devcrypto engine in CHANGES
      UI_UTIL_wrap_read_pem_callback: make sure to terminate the string received
      test/uitest.c's pem_password_cb returned 1 instead of the password length
      Add dependency on apps/progs.h for test/uitest.o
      crypto/mem.c: on Windows, use rand() instead of random()
      Make it possible to refer to ERR_R_UI_LIB
      Add the STORE module
      Make asn1_d2i_read_bio accessible from STORE
      Make it possible to peek at BIO data through BIO_f_buffer()
      Add a STORE loader for the "file" scheme
      Add a simple store utility command
      Add a test that checks the store utility
      STORE 'file' scheme loader: add support for containers
      STORE 'file' scheme loader: add support for the PKCS#12 container
      STORE tests: add PKCS#12 tests
      STORE: Add a OSSL_STORE_INFO type to help support file handler restarts
      STORE 'file' scheme loader: refactor file_load to support decoding restart
      STORE 'file' scheme loader: Add handler for encrypted PKCS#8 data
      STORE 'file' scheme loader: Add directory listing capability
      Test that storeutl with a directory path works as expected
      STORE: add ENGINE information to loaders
      engine app: print out information on STORE loaders and STORE FILE handlers
      Add documentation for STORE functions
      Add documentation for the storeutl app
      STORE test recipe: Remove comment refering to OpenConnect
      STORE: Add an entry in NEWS and CHANGES
      STORE 'file' scheme loader: refactor the treatment of matches
      Make it possible to tell the file loader to use secure memory
      Add internal functions to fetch PEM data from an opened BIO
      util/mkdef.pl: Add UNIX as a platform
      util/mkdef.pl: Make symbol version processing Linux only
      STORE: simplify store_loader_cmp()
      STORE: Make sure the loader to be registered is complete
      When apps_startup() fails, exit with a failure code and a message
      STORE 'file' scheme loader: DNS name in URI is case insensitive
      Make sure OSSL_STORE_load() isn't caught in an endless loop
      Remove the possibility to disable the UI module entirely
      Correct documentation for UI_get0_result_string
      STORE: fix possible memory leak
      Avoid possible memleak in X509_policy_check()
      Fix small UI issues
      STORE 'file' scheme loader: fix try_decode_params() to check ambiguity
      VMS: When running a sub-MMS, make sure to give it the main MMS' qualifiers
      test/recipes/90-test_shlibload.t: Make sure to handle library renames
      test/run_tests.pl: Make sure to exit with a code that's understood universally
      Fix cipher_compare
      Fix style in crypto/store/loader_file.c
      For Windows, use _stat rather than stat
      test/recipes/90-test_store.t: Rename some functions
      test/recipes/90-test_store.t: Test absolute files
      OSSL_STORE: spell error reason correctly
      OSSL_STORE: Treat URIs as files first (with exceptions), then as full URIs
      test/recipes/90-test_store.t: Add a few cases with files starting with 'file:'
      OSSL_STORE "file" scheme loader: check for absolute path in URI later
      OSSL_STORE "file" scheme loader: check that a DOS device is correctly named
      testutil: stanza files are text files, open them as such
      Fix faulty include
      Simplify Makefile.shared
      test/recipes/80-test_tsa.t: Don't trust 'OPENSSL_CONF'
      Makefile.shared: Make link_shlib.linux-shared less verbose again
      Simplify the handling of shared library version numbers
      Perl: Use File::Glob::bsd_glob rather than File::Glob::glob
      Consolidate the locations where we have our internal perl modules
      File::Glob option ':bsd_glob' doesn't work everywhere, replace w/ a wrapper
      Rename crypto/evp/scrypt.c to crypto/evp/pbe_scrypt.c
      Add ERR_clear_last_mark()
      Clear error stack on successful OSSL_STORE_open()
      STORE: Add info on the expected post_process callback behavior
      STORE: Add documentation on the expectations for returned names
      When building a tarball, avoid trying to copy submodules
      test/asn1_time_test.c: Better check of signed time_t
      Turn on error sensitivity in the "tar" target
      Prepare tarball in dist directory
      Add a comment on expectations in the "tar" target
      Fix ui_write in apps/apps.c
      Fix the lack of isblank() with VMS C
      Don't try to test ctype functions for values < 0 or > 255
      Don't try to compare the ctype functions on values > 127
      apps/passwd.c: Don't disable MD5 and SHA when CHARSET_EBCDIC is defined
      apps/passwd.c: Fix code layout
      apps/passwd.c: Make MD5 and SHA password making EBCDIC aware
      NO_SYS_TYPES_H isn't defined anywhere, stop using it as a guard
      Move more socket stuff
      Fix guarding macro in include/internal/sockets.h
      If 'tests' is disabled, then so should 'external-tests'
      util/mkdef.pl: handle line terminators correctly
      OpenSSL::Test::__fixup_prg: don't check program existence
      Fix OpenSSL::Test::Utils::config to actualy load the config data
      OSSL_STORE: Avoid testing with URIs on the mingw command line
      Fix 90-test_store.t: using config() requires OpenSSL::Test::Utils
      Fix OSSL_STORE's 'file' loader: make sure peekbuf is initialised
      Add UI functions to set result with explicit length and to retrieve the length
      Disable the EGD seeding meachanism when stdio is disabled
      Add a recursive option to 'openssl storeutl'
      Document the recursive option
      Make sure that a cert with extensions gets version number 2 (v3)
      Configurations/windows-makefile.tmpl: canonicalise configured paths
      doc/man1/openssl.pod: Add missing commands and links
      Correct some typedef documentation
      Fix util/find-doc-nits to correctly parse function signature typedefs
      Fix util/perl/OpenSSL/Test.pm input variable overwrite
      Use the possibility to have test results in a different directory
      Reduce the things we ignore in test/
      Add branch coverage to coveralls statistics
      asn1_item_embed_new(): don't free an embedded item
      asn1_item_embed_new(): don't free an embedded item
      asn1_item_embed_new(): if locking failed, don't call asn1_item_embed_free()
      doc/man3/d2i_X509.pod: add {d2i,i2d}_DSA_PUBKEY in NAME section
      EVP_PKEY_ASN1_METHOD: add functions to set siginf_set and pkey_check methods
      Document EVP_PKEY_ASN1_METHOD and associated functions
      EVP_PKEY_asn1_add0(): Check that this method isn't already registered
      make update
      Fix EVP_PKEY_ASN1_METHOD manual
      Generate a dictionary of OIDs for fuzzers
      make update
      Fix small but important regression
      Travis: if "make update" created a diff, please show it
      Configure: cleanup @disable_cascade
      Modify expected output of a certificate to match the changed printout
      Add padding spaces before printing signature algorithm for CRLs output
      Modify expected output of a CRL to match the changed printout
      Avoid unnecessary MSYS2 conversion of some arguments
      Correct EVP_CIPHER_meth_new.pod and EVP_MD_meth_new.pod
      Fix EVP_MD_meth_new.pod
      Save away the environment variables we rely on
      Make it possible to add env var assignments as Configure options
      Document the possibility for command line argument env assignments
      Have all relevant config targets use the env() function rather than $ENV
      Make sure ./config passes options to ./Configure correctly
      Configure: die if there are other arguments with 'reconf'
      Document how the configuration option 'reconf' works
      Remove unicode characters from source
      In OPENSSL_init_ssl(), run the base ssl init before OPENSSL_init_crypto()
      In apps_startup(), call OPENSSL_init_ssl() rather than OPENSSL_init_crypto()
      Configure: move the processing of predefined macros to a function
      Configure: Add read_eval_file, a general purpose perl file reader/evaluator
      Configure: Read in extra information to help create shared libraries
      Configure: Recognise .rc and .def / .map / .opt as source files
      Build file templates: Replace the use of Makefile.shared
      build.info: adapt to the new handling of .rc / .def / .map / .opt files
      Configure et al: cleanups
      Remove Makefile.shared, as it's now entirely unused
      Note the removal of Makefile.shared in CHANGES
      Restore makedepend capabilities for Windows and VMS
      VMS build file template: adapt for when someone disabled 'makedepend'
      Fix leak in ERR_get_state() when OPENSSL_init_crypto() isn't called yet
      Fix VMS use of util/mkdef.pl in top build.info
      Restore the use of LDCMD when linking applications
      VMS build.info: uppercase args to perl modules must be quoted
      VMS fix: link shared libs from objects files instead of from static libs
      Add 'openssl req' option to specify extension values on command line
      Ignore ORDINALS in build.info files, and remove its documentation
      apps: make sure prog_init only calculates once
      Add the possibility to do 'openssl help [command]'
      CHANGES: Document the removal of OS390-Unix
      Clean up uClinux targets
      Separate general linking flags from extra libraries
      Update copyright years on all files merged since Jan 1st 2018
      Configure: try to make sure every config target name is unique
      Fix intermittent Cygwin failures in s_client
      Fix Windows build file template to recognise .res files
      Fix intermittent Windows and Cygwin failures in s_server
      TLSProxy::Proxy:  If we don't support IPv6, force IPv4
      TLSProxy::Proxy: don't waste time redirecting STDOUT and STDERR
      TLSProxy::Proxy: Don't use ReuseAddr on Windows
      Cygwin is POSIX, don't say it isn't
      Simplify Cygwin checks, part 1
      The Cygwin gcc doesn't define _WIN32, don't pretend it does
      Only implement secure malloc if _POSIX_VERSION allows
      Create one permanent proxy socket per TLSProxy::Proxy instance
      Copyright update of more files that have changed this year
      Enable TLSProxy tests on Windows
      Update the license end year
      Reduce the use of e_os.h in test programs
      test/ossl_shim/packeted_bio.h: don't include e_os.h
      When building shared libraries, only ln -s when simple and full name differ
      Add anything specifying a threads library to ex_libs
      Don't add $(EX_LIBS) to libssl.pc's Libs.private
      Revert "EVP_PKEY_asn1_add0(): Check that this method isn't already registered"
      Have EVP_PKEY_asn1_find_str() work more like EVP_PKEY_asn1_find()
      Configure: let INCLUDEs set on binaries "trickle down" to the objects
      Configure: ensure that a DEPEND generates the correct inclusion directory
      Small cleanup of some build.info files
      Processing GNU-style "make variables" - separate CPP flags from C flags
      Processing GNU-style "make variables" - implementation
      Stop having Unix defaults in Configure (partial)
      We need Unixly defaults for config targets that don't inherit a BASE
      Make sure all our config targets inherit a BASE template
      Add a note on Configure variable processing in NEWS and CHANGES
      VMS config.com: better handling of arguments
      Fix WinCE config target
      Treat C++ flags more like C flags, and only if C++ compiler specified
      Get rid of a warning about unused results
      Don't break testing when runnins as root
      Fix recent typo.  -DL_ENDIAN / -DB_ENDIAN, not -DL_DEBIAN / -DB_DEBIAN
      Remove $no_sse2, as it's just a 'copy' of $disabled{sse2}
      Don't define OPENSSL_NO_ERR for the command line
      Make configdata.pm runnable and move all display of information there
      Have the build files use the executable configdata.pm
      Move the display of disabled features to configdata.pm as well.
      Document the use of configdata.pm as a script
      Make Travis and Appveyor display the configuration data dump
      To make it less surprising and confusing, leave a message on configdata.pm
      Fix typo in Windows makefile template: quotify, not quotiry
      Restore perl variables for ENGINESDIR and OPENSSLDIR
      Add a 'reconfigure' make target
      Configure: add configure command line C flags after the configured C flags
      Configure: when checking user input, check both %user and %useradd
      Fix small typo (parenthesis missing)
      BIO: at the end of BIO_new, declare the BIO inited if no create method present
      Remove "dummy" BIO create and destroy functions
      apps: Don't include progs.h in apps.h
      Apps: divide the modules in direct command modules, support library and init
      Make test/uitest depend on the private apps support library
      Add missing \n in some testutil output
      Add an apps internal BIO filter for prefixing output lines
      Make sure that apps/openssl prefixes its output with '# ' during tests
      ocsp.c doesn't free the whole output chain, maybe causing a memory leak
      VMS: MMS wants a space before the target / dependecies separator
      Fix of prefix bio filter (bf_prefix.c): rely on the given length
      Have configdata.pm also display the contents of %target
      util/mkdef.pl: Trust configdata.pm
      Code cleanup: remove benchmark code from internal tests
      Modify test/afalgtest to fail if the afalg engine couldn't be loaded
      test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
      Make all private functions in e_afalg.c static
      mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
      make update ERROR_REBUILD=-rebuild
      Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
      With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)
      util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
      Revert ".travis.yml: remove osx from build matrix."
      Fix check of cpuid_asm_src config attribute
      VMS: take care of includes
      Turn off printf format checking for BIO_printf et al on Mac OS/X
      Configuration: move the handling of zlib_include to config files

Rob Percival (57):
      Removes CTLOG_new_null from the CT public API
      Mkae CT_log_new_from_base64 always return 0 on failure
      Improves CTLOG_STORE setters
      Make CT_POLICY_EVAL_CTX_set1_{cert,issuer} into boolean functions
      Replaces CT_POLICY_EVAL_CTX_set0 entries with new setters in libcrypto.num
      Internalizes SCT_verify and removes SCT_verify_v1
      Prevent double-free of CTLOG public key
      Removes {i2o,o2i}_SCT_signature from the CT public API
      Document that o2i_SCT_signature can leave the SCT in an inconsistent state
      SCT_set_source resets validation_status
      First draft of CT documentation
      Fix comment about return value of ct_extract_tls_extension_scts
      Add SSL_get0_peer_scts to ssl.pod
      Fix comment about what SCT_LIST_validate does.
      Add comment about calling CT_POLICY_EVAL_CTX_free
      Remove unnecessary bold tags in CT pods
      Add enum definitions to CT pods
      Adds missing function names to NAME section of PODs
      Adds newline after =cut in PODs
      Adds copyright section to ct.pod
      Renames CT_POLICY_EVAL_CTX.pod to CT_POLICY_EVAL_CTX_new.pod
      Fixes final issue in CT PODs highlighted by util/find-doc-nits.pl
      Adds history section to CT PODs
      Refer to OPENSSLDIR rather than "the OpenSSL install directory"
      Clarifies the format of a log's public key in the CONF file
      Document that SCT_set_source returns 0 on failure.
      Removes d2i_SCT_LIST.pod
      Document the i2o and o2i SCT functions
      Documents the CTLOG functions
      Removes {o2i,i2o}_SCT_signature from PODs
      Documents the SCT validation functions
      Removes the SCT_verify* POD
      Correct documentation about SCT setters resetting validation status
      Updates the CT_POLICY_EVAL_CTX POD
      Typo fixes
      Check that SCT timestamps are not in the future
      Remove obsolete error constant CT_F_CTLOG_NEW_NULL
      Reword documentation for {SCT_CTX/CT_POLICY_EVAL_CTX}_set_time
      Default CT_POLICY_EVAL_CTX.epoch_time_in_ms to time()
      Don't check for time() failing in CT_POLICY_EVAL_CTX_new
      By default, allow SCT timestamps to be up to 5 minutes in the future
      Cast time_t to uint64_t before converting to milliseconds in ct_policy.c
      Convert C++ comments to C-style comments
      Add test for CT_POLICY_EVAL_CTX default time
      Construct SCT from base64 in ct_test
      Subtract padding from outlen in ct_base64_decode
      Pass a temporary pointer to o2i_SCT_signature from SCT_new_from_base64
      Use valid signature in test_decode_tls_sct()
      Make sure things get deleted when test setup fails in ct_test.c
      Move SCT_LIST_free definition into a more logical place
      Adds a "-precert" flag to "openssl req" for creating pre-certificates
      Basic test for "openssl req -precert" via apps/CA.pl
      Documentation for the -precert flag for "openssl req"
      Change CA.pl flag from --newprecert to --precert
      apps/req.c: flag "-new" is implied by "-precert"
      Add SSL tests for certificates with embedded SCTs
      CT_POLICY_EVAL_CTX_set_time expects milliseconds, but given seconds

Robbie Harwood (4):
      Add external krb5 test support
      Update external test README for running krb5
      Fix formatting of PYCA external test instructions
      [extended tests] Enable krb5 tests in Travis

Robert Scheck (7):
      Add LMTP support (RFC 2033) to s_client ("-starttls lmtp")
      Shift inside of switch back one level (code style change, as requested by Rich Salz)
      Avoid warnings like unused enum value (as suggested by Rich Salz)
      Add NNTP support (RFC 4642) to s_client ("-starttls nntp")
      Add Sieve support (RFC 5804) to s_client ("-starttls sieve")
      Handle negative reply for NNTP STARTTLS in s_client
      Add LDAP support (RFC 4511) to s_client ("-starttls ldap")

Robert Swiecki (1):
      Add to fuzz corpora for CVE-2016-6309

Roberto Guimaraes (1):
      this change will prevent undefined behavior when src and dst are equal (memcpy), effectively allowing setting length only in both functions.

Roelof duToit (2):
      Retry SSL_read on ERROR_WANT_READ.     This resolves the retry issue in general, but also the specific case where a TLS 1.3 server sends a post-handshake NewSessionTicket message prior to appdata.
      Update PR#3925

Ronald Tse (6):
      CHANGES: remove empty whitespaces
      SM4: Add SM4 block cipher to EVP
      EVP digest list: one hash algorithm per file, synchronize EVP list, overall cleanup.
      Synchronize man3 EVP cipher list with existing implementations, adding:     * ARIA, SEED, Camellia     * AES-XTS, OCB, CTR     * Key wrap for 3DES, AES     * RC4-MD5 AD     * CFB modes with 1-bit and 8-bit shifts
      SM3: restructure to EVP internal and update doc to right location
      Add SM3/SM4 to openssl command-line tool

Saagar Jha (1):
      Update comments to match function parameter names

Samuel Weiser (3):
      Fixed error in propagating BN_FLG_CONSTTIME flag through BN_MONT_CTX_set, which could lead to information disclosure on RSA primes p and q.
      BN_copy now propagates BN_FLG_CONSTTIME
      Added const-time flag to DSA key decoding to avoid potential leak of privkey

Sascha Steinbiss (1):
      Add OCSP_resp_get1_id() accessor

Sebastian Andrzej Siewior (2):
      dsa/dsa_gen: add error message for seed_len < 0
      rsa: Do not allow less than 512 bit RSA keys

Sergey Bronnikov (1):
      Fix link to LibFuzzer

Steffan Karger (1):
      Fix SSL_CTX_get_{min,max}_proto_version integer conversion warning

Steve Linsell (1):
      Update copyright year in mkerr.pl

Steven Collison (2):
      doc: Add missing options in s_{server,client}
      doc: Add stitched ciphers to EVP_EncryptInit.pod

Steven Danneman (1):
      Fix double array increment in s_client mysql connect

Steven Fackler (1):
      Fix signatures of EVP_Digest{Sign,Verify}Update

Tatsuhiro Tsujikawa (9):
      Restore s->early_data_state with the original value
      Call init and finalization functions per extension message
      Break before && operator
      Don't treat PACKET_remaining() as boolean
      Fix TLSv1.3 exporter secret
      Don't change client random in Client Hello in its second flight
      Generate exporter_master_secret after server Finished
      Remove generation of exporter master secret on client application traffic
      Make sure that exporting keying material is allowed

Thiago Arrais (1):
      update docs because depth refers only to intermediate certs

Thijs Wenker (1):
      Fix certificate version number in test

Tim Hudson (1):
      Fix EC_KEY_print so it prints out private key information     even when the public key is not present in an EC_KEY

Todd Short (53):
      Add SSL_CTX_set1_cert_store()
      Skipping tests in evp_test leaks memory
      Fix EVP_MD_meth_get_flags
      Add support for Poly1305 in EVP_PKEY
      Cleanup EVP_CIPH/EP_CTRL duplicate defines
      Majority rules, use session_ctx vs initial_ctx
      Add support for parameterized SipHash
      Internal siphash tests are not run.
      Fix potential memory leak in ASN1_TIME_to_generalizedtime()
      Remove some #if 0 code in ssl, crypto/bio
      Add some TLS13 values to s_client/s_server
      Add HelloRetryRequest text to s_client/s_server
      Add TLSv1.3 draft-19 messages to trace
      Add support for MLOCK_ONFAULT to secure arena
      Remove ECDH(E) ciphers from SSLv3
      OCSP Updates: error codes and multiple certificates
      Fix unit tests when no-bf configured
      Fix minor compiler issues.
      Fix s_client when no-dtls
      Fix time offset calculation.
      TLS1.3 Padding
      Limit padded record to max plaintext
      Fix clang compile time error
      Fix infinite loops in secure memory allocation.
      Clean up SSL_OP_* a bit
      Fix compile error/warning in packettest.c
      Tweak sec_mem tests
      Fix the mem_sec "small arena"
      Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION
      Fix ex_data and session_dup issues
      Handle the server refusing to reneg in a reneg_setup
      Always flush the BIO when we send any alert
      Fix #2400 Add NO_RENEGOTIATE option
      Fix #340: Parse ASN1_TIME to struct tm
      Add apps/progs.h to gitignore
      ssl_session_dup() missing ext.alpn_session
      Fix #946 Add -preserve_dates to x509 app
      Add support to free/allocate SSL buffers
      Fix SSL_set_tlsext_debug_callback/-tlsextdebug
      Consolidate to a single asn1_time_from_tm() function
      Reorder extensions to put SigAlgs last
      Fix return value of ASN1_TIME_compare
      Session resume broken switching contexts
      Use ChaCha only if prioritized by clnt
      Add sk_new_reserve support
      Fix 'make update'
      Fix --strict-warnings with C90
      Fix error-path memory leak in asn_mime.c
      Remove bad comments
      Add TLSv1.3 post-handshake authentication (PHA)
      Free pha_dgst in SSL_clear()
      Fix doc nits
      Fix some minor code nits

Tomas Mraz (12):
      Fix irregularities in GENERAL_NAME_print().
      Fix af_alg engine failure on 32 bit architectures.
      Add a comment for the added cast with explanation.
      Avoid truncating the pointer on x32 platform.
      Engine afalg: properly set operation type also on big endian.
      Fix regression in openssl req -x509 behaviour.
      Do not eat trailing '\n' in BIO_gets for fd BIO.
      Document that BIO_gets() preserves '\n'.
      Document the history of BIO_gets() on BIO_fd().
      Ignore -named_curve auto value to improve backwards compatibility
      Add missing documentation of the default format for commands.
      Avoid only exact duplicates when creating the accepted CA names list

Valentin Vidic (1):
      Add Postgres support to -starttls

Viktor Dukhovni (8):
      Fix missing dane_tlsa_rrdata option error message
      Add -dane_ee_no_namechecks s_client(1) option
      Un-delete still documented X509_STORE_CTX_set_verify
      Restore last-resort expired untrusted intermediate issuers
      Make possible variant SONAMEs and symbol versions
      Document the X509_V_FLAG_PARTIAL_CHAIN flag
      Add x509(1) reference
      Avoid leaking peername data via accept BIOs

Viktor Szakats (2):
      s_client: avoid warning on Windows/MS-DOS systems
      bio.h: fix number of arguments passed to BIO_ptr_ctrl()     Reviewed-by: Matt Caswell <matt at openssl.org>     Reviewed-by: Rich Salz <rsalz at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/1520)

Vitezslav Cizek (1):
      Configure: remove superfluous 0x

Xiangyu Bu (1):
      Fix memory leak in GENERAL_NAME_set0_othername.

Xiaoyin Liu (15):
      Fix typo
      Remove unused function prototypes
      schlock global variable needs to be volatile
      Various doc fixes.
      Remove redundant declarations in record_locl.h
      Remove redundant declarations in ssl_locl.h
      Update copyright header
      Fix typos in files in ssl directory
      Fix typo in ASN1_TIME_set.pod
      Fix typo in sha1-thumb.pl
      app_isdir() cleanup
      Fix errors in SSL_state_string_long
      Fix typo in documents
      Fix typo in files in crypto folder
      Add missing HTML tag in www_body in s_server.c

Yuchi (1):
      mem leak on error path and error propagation fix

Yutian Li (2):
      Add padding spaces before printing algo.
      Add padding spaces before printing algo.

Zack Williams (1):
      "any" instead of "and"

Zhu Qun-Ying (1):
      Fixed address family test error for AF_UNIX in BIO_ADDR_make

choury (1):
      fix invalid use of incomplete type X509_STORE_CTX

daurnimator (1):
      Fix incorrect function name in BN_bn2bin manpage

edelangh (1):
      use OSSLzu instead of lu format for size_t display

enkore (1):
      EVP docs: chacha20, chacha20-poly1305

ganesh (3):
      Fixed the return code of RAND_query_egd_bytes when connect fails.
      Fixed the return code for RAND_egd_bytes.
      RAND_egd_bytes: No need to check RAND_status on connection error.

gbrl (1):
      bndiv fuzzer: limit the size of the input to avoid timeout

hongliang (1):
      coding style: remove extra whitespace charactor

jamercee (2):
      Adapt BIO_new_accept() to call BIO_set_accept_name()
      Fixed typo

jrmarino (1):
      Fix support for DragonFly BSD

klemens (2):
      spelling fixes, just comments and readme.
      fixing too optimistic typo-fix

komainu8 (1):
      Modify type of variable in OPENSSL_cpuid_setup function

letrhee-nsr (1):
      Add ARIA 32-bit implementation

lolyonok (1):
      Fix nid assignment in ASN1_STRING_TABLE_add

lrns (1):
      Change req_check_len error message, it also accepts 20 bytes, but states 'less than' in the error message

marko asplund (1):
      Allow CA.pl script user to pass extra arguments to openssl command

multics (1):
      Update rsautl.pod for typo

nickthetait (1):
      Create troubleshooting subsection in INSTALL file

pass86 (1):
      Fix spelling: adroideabi -> androideabi

xemdetia (2):
      Fix man3 reference to CRYPTO_secure_used
      Document default section and library configuration

-----------------------------------------------------------------------

From matt at openssl.org  Tue Feb 13 14:00:59 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 13 Feb 2018 14:00:59 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518530459.445082.12220.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b9c013ef1a7a022b6853b40e9331759d596d22e7 (commit)
      from  39fcb89f6c9c55b9c5862451ea111c1888e88c14 (commit)


- Log -----------------------------------------------------------------
commit b9c013ef1a7a022b6853b40e9331759d596d22e7
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 13 13:35:28 2018 +0000

    Update news for new 1.1.1 alpha1 release

-----------------------------------------------------------------------

Summary of changes:
 news/newsflash.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/news/newsflash.txt b/news/newsflash.txt
index 65606ab..2a6e7e3 100644
--- a/news/newsflash.txt
+++ b/news/newsflash.txt
@@ -4,6 +4,7 @@
 # Format is two fields, colon-separated; the first line is the column
 # headings.  URL paths must all be absolute.
 Date: Item
+13-Feb-2018: Alpha 1 of OpenSSL 1.1.1 is now available: please download and test it
 10-Jan-2018: New Blog post: <a href="https://www.openssl.org/blog/blog/2018/01/10/levchin/">OpenSSL wins the Levchin prize</a>
 07-Dec-2017: <a href="/news/secadv/20171207.txt">Security Advisory</a>: one security fix
 07-Dec-2017: OpenSSL 1.0.2n is now available, including bug and security fixes

From levitte at openssl.org  Tue Feb 13 14:17:12 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:17:12 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518531432.332855.30530.nullmailer@dev.openssl.org>

The branch master has been updated
       via  578ef142566c4cff4c0276cb3d38f571a991f8e7 (commit)
      from  b9c013ef1a7a022b6853b40e9331759d596d22e7 (commit)


- Log -----------------------------------------------------------------
commit 578ef142566c4cff4c0276cb3d38f571a991f8e7
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:17:00 2018 +0100

    Add 1.1.1 stuff

-----------------------------------------------------------------------

Summary of changes:
 Makefile | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index 8a41c35..d3295b8 100644
--- a/Makefile
+++ b/Makefile
@@ -19,6 +19,7 @@ SIMPLE = newsflash.inc sitemap.txt \
          news/openssl-1.1.0-notes.inc \
 	 news/newsflash.inc \
 	 news/vulnerabilities.inc \
+	 news/vulnerabilities-1.1.1.inc \
 	 news/vulnerabilities-1.1.0.inc \
 	 news/vulnerabilities-1.0.2.inc \
 	 news/vulnerabilities-1.0.1.inc \
@@ -60,6 +61,7 @@ define makemanpages
 	./bin/mk-filelist -a docs/man$(2)/ssl '' '*.html' >docs/man$(2)/ssl/index.inc
 endef
 manpages: manmaster
+	$(call makemanpages,$(CHECKOUTS)/openssl-1.1.1-stable,1.1.1)
 	$(call makemanpages,$(CHECKOUTS)/openssl-1.1.0-stable,1.1.0)
 	$(call makemanpages,$(CHECKOUTS)/openssl-1.0.2-stable,1.0.2)
 
@@ -104,18 +106,27 @@ news/cl102.txt: $(CHECKOUTS)/openssl-1.0.2-stable/CHANGES
 news/cl110.txt: $(CHECKOUTS)/openssl-1.1.0-stable/CHANGES
 	@rm -f $@
 	cp $? $@
+news/cl111.txt: $(CHECKOUTS)/openssl-1.1.1-stable/CHANGES
+	@rm -f $@
+	cp $? $@
 news/openssl-1.0.2-notes.html: news/openssl-notes.html.in
 	@rm -f $@
 	sed -e 's|@VERSION@|1.0.2|g' < $< > $@
 news/openssl-1.1.0-notes.html: news/openssl-notes.html.in
 	@rm -f $@
 	sed -e 's|@VERSION@|1.1.0|g' < $< > $@
+news/openssl-1.1.1-notes.html: news/openssl-notes.html.in
+	@rm -f $@
+	sed -e 's|@VERSION@|1.1.1|g' < $< > $@
 news/openssl-1.0.2-notes.inc: $(CHECKOUTS)/openssl-1.0.2-stable/NEWS news/openssl-1.0.2-notes.html bin/mk-notes
 	@rm -f $@
 	./bin/mk-notes 1.0.2 < $(CHECKOUTS)/openssl-1.0.2-stable/NEWS > $@
 news/openssl-1.1.0-notes.inc: $(CHECKOUTS)/openssl-1.1.0-stable/NEWS news/openssl-1.1.0-notes.html bin/mk-notes
 	@rm -f $@
 	./bin/mk-notes 1.1.0 < $(CHECKOUTS)/openssl-1.1.0-stable/NEWS > $@
+news/openssl-1.1.1-notes.inc: $(CHECKOUTS)/openssl-1.1.1-stable/NEWS news/openssl-1.1.1-notes.html bin/mk-notes
+	@rm -f $@
+	./bin/mk-notes 1.1.1 < $(CHECKOUTS)/openssl-1.1.1-stable/NEWS > $@
 news/newsflash.inc: news/newsflash.txt
 	sed <$? >$@ \
 	    -e '/^#/d' \
@@ -125,6 +136,9 @@ news/newsflash.inc: news/newsflash.txt
 news/vulnerabilities.inc: bin/mk-cvepage news/vulnerabilities.xml
 	@rm -f $@
 	./bin/mk-cvepage -i news/vulnerabilities.xml > $@
+news/vulnerabilities-1.1.1.inc: bin/mk-cvepage news/vulnerabilities.xml
+	@rm -f $@
+	./bin/mk-cvepage -i news/vulnerabilities.xml -b 1.1.1 > $@
 news/vulnerabilities-1.1.0.inc: bin/mk-cvepage news/vulnerabilities.xml
 	@rm -f $@
 	./bin/mk-cvepage -i news/vulnerabilities.xml -b 1.1.0 > $@
@@ -172,6 +186,9 @@ source/old/1.0.2/index.inc: $(wildcard source/old/1.0.2/*.gz) bin/mk-filelist
 source/old/1.1.0/index.inc: $(wildcard source/old/1.1.0/*.gz) bin/mk-filelist
 	@rm -f $@
 	./bin/mk-filelist source/old/1.1.0 '' '*.gz' >$@
+source/old/1.1.1/index.inc: $(wildcard source/old/1.1.1/*.gz) bin/mk-filelist
+	@rm -f $@
+	./bin/mk-filelist source/old/1.1.1 '' '*.gz' >$@
 source/old/fips/index.inc: $(wildcard source/old/fips/*.gz) bin/mk-filelist
 	@rm -f $@
 	./bin/mk-filelist source/old/fips '' '*.gz' >$@
@@ -182,4 +199,5 @@ source/old/fips/index.inc: $(wildcard source/old/fips/*.gz) bin/mk-filelist
 # they should.
 .PHONY : \
 	 source/old/1.0.1/index.inc source/old/1.0.2/index.inc \
-	 source/old/1.1.0/index.inc source/old/fips/index.inc
+	 source/old/1.1.0/index.inc source/old/1.1.1/index.inc \
+	 source/old/fips/index.inc

From levitte at openssl.org  Tue Feb 13 14:18:06 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:18:06 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518531486.786067.31764.nullmailer@dev.openssl.org>

The branch master has been updated
  discards  578ef142566c4cff4c0276cb3d38f571a991f8e7 (commit)
       via  39375a75ebb1997d79bff3712957fe8362acbbd2 (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (578ef142566c4cff4c0276cb3d38f571a991f8e7)
            \
             N -- N -- N (39375a75ebb1997d79bff3712957fe8362acbbd2)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.


- Log -----------------------------------------------------------------
commit 39375a75ebb1997d79bff3712957fe8362acbbd2
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:17:00 2018 +0100

    Add 1.1.1 stuff

-----------------------------------------------------------------------

Summary of changes:

From no-reply at appveyor.com  Tue Feb 13 14:20:44 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 13 Feb 2018 14:20:44 +0000
Subject: [openssl-commits] Build failed: openssl master.15588
Message-ID: <20180213142044.1.058F5CEB71B1FA3E@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180213/ce3aae30/attachment.html>

From levitte at openssl.org  Tue Feb 13 14:33:12 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:33:12 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518532392.960132.14103.nullmailer@dev.openssl.org>

The branch master has been updated
  discards  39375a75ebb1997d79bff3712957fe8362acbbd2 (commit)
       via  ae0b9d5e0f284758eb8b5998a530ee25c52a6bb4 (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (39375a75ebb1997d79bff3712957fe8362acbbd2)
            \
             N -- N -- N (ae0b9d5e0f284758eb8b5998a530ee25c52a6bb4)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.


- Log -----------------------------------------------------------------
commit ae0b9d5e0f284758eb8b5998a530ee25c52a6bb4
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:17:00 2018 +0100

    Add 1.1.1 stuff

-----------------------------------------------------------------------

Summary of changes:
 Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Makefile b/Makefile
index d3295b8..37b91be 100644
--- a/Makefile
+++ b/Makefile
@@ -17,6 +17,7 @@ SIMPLE = newsflash.inc sitemap.txt \
          news/cl102.txt news/cl110.txt \
          news/openssl-1.0.2-notes.inc \
          news/openssl-1.1.0-notes.inc \
+         news/openssl-1.1.1-notes.inc \
 	 news/newsflash.inc \
 	 news/vulnerabilities.inc \
 	 news/vulnerabilities-1.1.1.inc \

From levitte at openssl.org  Tue Feb 13 14:36:44 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:36:44 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518532604.332632.18349.nullmailer@dev.openssl.org>

The branch master has been updated
  discards  ae0b9d5e0f284758eb8b5998a530ee25c52a6bb4 (commit)
       via  a8cb4667b61d9c91e7fcfb0aa056d3226950ab20 (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (ae0b9d5e0f284758eb8b5998a530ee25c52a6bb4)
            \
             N -- N -- N (a8cb4667b61d9c91e7fcfb0aa056d3226950ab20)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.


- Log -----------------------------------------------------------------
commit a8cb4667b61d9c91e7fcfb0aa056d3226950ab20
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:17:00 2018 +0100

    Add 1.1.1 stuff

-----------------------------------------------------------------------

Summary of changes:
 Makefile | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index 37b91be..55a89c4 100644
--- a/Makefile
+++ b/Makefile
@@ -61,8 +61,15 @@ define makemanpages
 	./bin/mk-filelist -a docs/man$(2)/crypto '' '*.html' >docs/man$(2)/crypto/index.inc
 	./bin/mk-filelist -a docs/man$(2)/ssl '' '*.html' >docs/man$(2)/ssl/index.inc
 endef
+define newmakemanpages
+	./bin/mk-manpages $(1) $(2) docs
+	./bin/mk-filelist -a docs/man$(2)/man1 '' '*.html' >docs/man$(2)/man1/index.inc
+	./bin/mk-filelist -a docs/man$(2)/man3 '' '*.html' >docs/man$(2)/man3/index.inc
+	./bin/mk-filelist -a docs/man$(2)/man5 '' '*.html' >docs/man$(2)/man5/index.inc
+	./bin/mk-filelist -a docs/man$(2)/man7 '' '*.html' >docs/man$(2)/man7/index.inc
+endef
 manpages: manmaster
-	$(call makemanpages,$(CHECKOUTS)/openssl-1.1.1-stable,1.1.1)
+	$(call newmakemanpages,$(CHECKOUTS)/openssl-1.1.1-stable,1.1.1)
 	$(call makemanpages,$(CHECKOUTS)/openssl-1.1.0-stable,1.1.0)
 	$(call makemanpages,$(CHECKOUTS)/openssl-1.0.2-stable,1.0.2)
 

From levitte at openssl.org  Tue Feb 13 14:46:02 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:46:02 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518533162.924670.27596.nullmailer@dev.openssl.org>

The branch master has been updated
  discards  a8cb4667b61d9c91e7fcfb0aa056d3226950ab20 (commit)
       via  774bd55145377e4911dae22055eaea454b617325 (commit)
       via  207f3ec89dda4bc78a40fa12da564a8c7653cd53 (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (a8cb4667b61d9c91e7fcfb0aa056d3226950ab20)
            \
             N -- N -- N (774bd55145377e4911dae22055eaea454b617325)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.


- Log -----------------------------------------------------------------
commit 774bd55145377e4911dae22055eaea454b617325
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:45:58 2018 +0100

    Add 1.1.1 stuff

commit 207f3ec89dda4bc78a40fa12da564a8c7653cd53
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:44:45 2018 +0100

    Remake 'manmaster' into 'newmanpages'
    
    Generalise it with a multi-line macro, as we'll use it for more than
    just master.

-----------------------------------------------------------------------

Summary of changes:
 Makefile                             | 8 ++------
 bin/{mk-manmaster => mk-newmanpages} | 0
 2 files changed, 2 insertions(+), 6 deletions(-)
 rename bin/{mk-manmaster => mk-newmanpages} (100%)

diff --git a/Makefile b/Makefile
index 55a89c4..2ba6f57 100644
--- a/Makefile
+++ b/Makefile
@@ -62,7 +62,7 @@ define makemanpages
 	./bin/mk-filelist -a docs/man$(2)/ssl '' '*.html' >docs/man$(2)/ssl/index.inc
 endef
 define newmakemanpages
-	./bin/mk-manpages $(1) $(2) docs
+	./bin/mk-newmanpages $(1) $(2) docs
 	./bin/mk-filelist -a docs/man$(2)/man1 '' '*.html' >docs/man$(2)/man1/index.inc
 	./bin/mk-filelist -a docs/man$(2)/man3 '' '*.html' >docs/man$(2)/man3/index.inc
 	./bin/mk-filelist -a docs/man$(2)/man5 '' '*.html' >docs/man$(2)/man5/index.inc
@@ -74,11 +74,7 @@ manpages: manmaster
 	$(call makemanpages,$(CHECKOUTS)/openssl-1.0.2-stable,1.0.2)
 
 manmaster:
-	./bin/mk-manmaster $(CHECKOUTS)/openssl master docs
-	./bin/mk-filelist -a docs/manmaster/man1 '' '*.html' >docs/manmaster/man1/index.inc
-	./bin/mk-filelist -a docs/manmaster/man3 '' '*.html' >docs/manmaster/man3/index.inc
-	./bin/mk-filelist -a docs/manmaster/man5 '' '*.html' >docs/manmaster/man5/index.inc
-	./bin/mk-filelist -a docs/manmaster/man7 '' '*.html' >docs/manmaster/man7/index.inc
+	$(call newmakemanpages,$(CHECKOUTS)/openssl,master)
 
 ## $(SIMPLE) -- SIMPLE GENERATED FILES
 .PHONY: sitemap community/committers.inc
diff --git a/bin/mk-manmaster b/bin/mk-newmanpages
similarity index 100%
rename from bin/mk-manmaster
rename to bin/mk-newmanpages

From levitte at openssl.org  Tue Feb 13 14:48:27 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:48:27 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518533307.336474.30989.nullmailer@dev.openssl.org>

The branch master has been updated
  discards  774bd55145377e4911dae22055eaea454b617325 (commit)
       via  281bb29486558342679d3e928972c306325d0d7c (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (774bd55145377e4911dae22055eaea454b617325)
            \
             N -- N -- N (281bb29486558342679d3e928972c306325d0d7c)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.


- Log -----------------------------------------------------------------
commit 281bb29486558342679d3e928972c306325d0d7c
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:45:58 2018 +0100

    Add 1.1.1 stuff

-----------------------------------------------------------------------

Summary of changes:
 bin/mk-newmanpages | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/mk-newmanpages b/bin/mk-newmanpages
index 4055f86..975f176 100755
--- a/bin/mk-newmanpages
+++ b/bin/mk-newmanpages
@@ -12,7 +12,7 @@ use Pod::Simple::XHTML;
 
 __PACKAGE__->run(@ARGV);
 
-sub Releases { return (qw(master)); }
+sub Releases { return (qw(1.1.1 master)); }
 sub Sections { return (qw(man1 man3 man5 man7)); }
 
 sub getRelease {

From levitte at openssl.org  Tue Feb 13 14:56:02 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:56:02 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518533762.328479.6431.nullmailer@dev.openssl.org>

The branch master has been updated
  discards  281bb29486558342679d3e928972c306325d0d7c (commit)
       via  69298c27369f59c4c1cbb4ee34d141aac9adc09e (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (281bb29486558342679d3e928972c306325d0d7c)
            \
             N -- N -- N (69298c27369f59c4c1cbb4ee34d141aac9adc09e)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.


- Log -----------------------------------------------------------------
commit 69298c27369f59c4c1cbb4ee34d141aac9adc09e
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:45:58 2018 +0100

    Add 1.1.1 stuff

-----------------------------------------------------------------------

Summary of changes:
 docs/{manmaster => man1.1.1}/index.html          | 6 +++---
 docs/{man1.1.0/apps => man1.1.1/man1}/index.html | 4 ++--
 docs/{manmaster => man1.1.1}/man3/index.html     | 4 ++--
 docs/{manmaster => man1.1.1}/man5/index.html     | 4 ++--
 docs/{manmaster => man1.1.1}/man7/index.html     | 4 ++--
 5 files changed, 11 insertions(+), 11 deletions(-)
 copy docs/{manmaster => man1.1.1}/index.html (88%)
 copy docs/{man1.1.0/apps => man1.1.1/man1}/index.html (91%)
 copy docs/{manmaster => man1.1.1}/man3/index.html (90%)
 copy docs/{manmaster => man1.1.1}/man5/index.html (90%)
 copy docs/{manmaster => man1.1.1}/man7/index.html (90%)

diff --git a/docs/manmaster/index.html b/docs/man1.1.1/index.html
similarity index 88%
copy from docs/manmaster/index.html
copy to docs/man1.1.1/index.html
index 1cc870f..49d2b6c 100644
--- a/docs/manmaster/index.html
+++ b/docs/man1.1.1/index.html
@@ -7,10 +7,10 @@
     <div id="content">
       <div class="blog-index">
 	<article>
-	  <header><h2>Manpages for master</h2></header>
+	  <header><h2>Manpages for 1.1.1</h2></header>
 	  <div class="entry-content">
 	    <p>
-            The manual pages for the master branch are
+            The manual pages for the 1.1.1 branch are
             available here.
             The OpenSSL documentation is divided into the following
             sections:
@@ -26,7 +26,7 @@
 	    You are here: <a href="/">Home</a>
 	    : <a href="/docs">Documentation</a>
 	    : <a href="/docs/manpages.html">Manpages</a>
-	    : <a href="">master</a>
+	    : <a href="">1.1.1</a>
 	    <br/><a href="/sitemap.txt">Sitemap</a>
 	  </footer>
 	</article>
diff --git a/docs/man1.1.0/apps/index.html b/docs/man1.1.1/man1/index.html
similarity index 91%
copy from docs/man1.1.0/apps/index.html
copy to docs/man1.1.1/man1/index.html
index 1e80193..c0cc99e 100644
--- a/docs/man1.1.0/apps/index.html
+++ b/docs/man1.1.1/man1/index.html
@@ -30,8 +30,8 @@
 	    You are here: <a href="/">Home</a>
 	    : <a href="/docs">Documentation</a>
 	    : <a href="/docs/manpages.html">Manpages</a>
-	    : <a href="/docs/man1.1.0">master</a>
-	    : <a href="/docs/man1.1.0/apps">commands</a>
+	    : <a href="/docs/man1.1.1">1.1.1</a>
+	    : <a href="/docs/man1.1.1/man1">commands</a>
 	    <br/><a href="/sitemap.txt">Sitemap</a>
 	  </footer>
 	</article>
diff --git a/docs/manmaster/man3/index.html b/docs/man1.1.1/man3/index.html
similarity index 90%
copy from docs/manmaster/man3/index.html
copy to docs/man1.1.1/man3/index.html
index 6f46995..d12bda6 100644
--- a/docs/manmaster/man3/index.html
+++ b/docs/man1.1.1/man3/index.html
@@ -29,8 +29,8 @@
 	    You are here: <a href="/">Home</a>
 	    : <a href="/docs">Documentation</a>
 	    : <a href="/docs/manpages.html">Manpages</a>
-	    : <a href="/docs/manmaster">master</a>
-	    : <a href="/docs/manmaster/man3">libraries</a>
+	    : <a href="/docs/man1.1.1">1.1.1</a>
+	    : <a href="/docs/man1.1.1/man3">libraries</a>
 	    <br/><a href="/sitemap.txt">Sitemap</a>
 	  </footer>
 	</article>
diff --git a/docs/manmaster/man5/index.html b/docs/man1.1.1/man5/index.html
similarity index 90%
copy from docs/manmaster/man5/index.html
copy to docs/man1.1.1/man5/index.html
index 64f26a8..a4564ab 100644
--- a/docs/manmaster/man5/index.html
+++ b/docs/man1.1.1/man5/index.html
@@ -29,8 +29,8 @@
 	    You are here: <a href="/">Home</a>
 	    : <a href="/docs">Documentation</a>
 	    : <a href="/docs/manpages.html">Manpages</a>
-	    : <a href="/docs/manmaster">master</a>
-	    : <a href="/docs/manmaster/man5">file formats</a>
+	    : <a href="/docs/man1.1.1">1.1.1</a>
+	    : <a href="/docs/man1.1.1/man5">file formats</a>
 	    <br/><a href="/sitemap.txt">Sitemap</a>
 	  </footer>
 	</article>
diff --git a/docs/manmaster/man7/index.html b/docs/man1.1.1/man7/index.html
similarity index 90%
copy from docs/manmaster/man7/index.html
copy to docs/man1.1.1/man7/index.html
index b1dc49d..49b6a73 100644
--- a/docs/manmaster/man7/index.html
+++ b/docs/man1.1.1/man7/index.html
@@ -29,8 +29,8 @@
 	    You are here: <a href="/">Home</a>
 	    : <a href="/docs">Documentation</a>
 	    : <a href="/docs/manpages.html">Manpages</a>
-	    : <a href="/docs/manmaster">master</a>
-	    : <a href="/docs/manmaster/man7">overviews</a>
+	    : <a href="/docs/man1.1.1">1.1.1</a>
+	    : <a href="/docs/man1.1.1/man7">overviews</a>
 	    <br/><a href="/sitemap.txt">Sitemap</a>
 	  </footer>
 	</article>

From levitte at openssl.org  Tue Feb 13 14:58:15 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 14:58:15 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1518533895.736849.8973.nullmailer@dev.openssl.org>

The branch master has been updated
  discards  69298c27369f59c4c1cbb4ee34d141aac9adc09e (commit)
       via  238ca81834d315ce2874eee155d3268e98d92d94 (commit)

This update added new revisions after undoing existing revisions.  That is
to say, the old revision is not a strict subset of the new revision.  This
situation occurs when you --force push a change and generate a repository
containing something like this:

 * -- * -- B -- O -- O -- O (69298c27369f59c4c1cbb4ee34d141aac9adc09e)
            \
             N -- N -- N (238ca81834d315ce2874eee155d3268e98d92d94)

When this happens we assume that you've already had alert emails for all
of the O revisions, and so we here report only the revisions in the N
branch from the common base, B.


- Log -----------------------------------------------------------------
commit 238ca81834d315ce2874eee155d3268e98d92d94
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:45:58 2018 +0100

    Add 1.1.1 stuff

-----------------------------------------------------------------------

Summary of changes:
 docs/manpages.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/manpages.html b/docs/manpages.html
index 82f6e7d..91623d9 100644
--- a/docs/manpages.html
+++ b/docs/manpages.html
@@ -14,6 +14,7 @@
 	    </p>
             <ul>
               <li><a href="manmaster">master</a></li>
+              <li><a href="man1.1.1">1.1.1 (pre-release)</a></li>
               <li><a href="man1.1.0">1.1.0</a></li>
               <li><a href="man1.0.2">1.0.2</a></li>
             </ul>

From rsalz at openssl.org  Tue Feb 13 15:03:06 2018
From: rsalz at openssl.org (Rich Salz)
Date: Tue, 13 Feb 2018 15:03:06 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1518534186.700693.14770.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4beedb93e58fd4a25c2d4a293dfade202c980633 (commit)
      from  027c9909fca039095fe8c69ebe9bd3ce0bba59cd (commit)


- Log -----------------------------------------------------------------
commit 4beedb93e58fd4a25c2d4a293dfade202c980633
Author: Rich Salz <rsalz at akamai.com>
Date:   Tue Feb 13 10:03:03 2018 -0500

    Fix typo, mention GH source

-----------------------------------------------------------------------

Summary of changes:
 release-tools/mkrelease.pl | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/release-tools/mkrelease.pl b/release-tools/mkrelease.pl
index 4012e4d..69e337f 100644
--- a/release-tools/mkrelease.pl
+++ b/release-tools/mkrelease.pl
@@ -333,10 +333,11 @@ if ( !$no_release ) {
    Please download and check this $label release as soon as possible.
    To report a bug, open an issue on GitHub:
 
-    ttps://github.com/openssl/openssl/issues
+    https://github.com/openssl/openssl/issues
 
    Please check the release notes and mailing lists to avoid duplicate
-   reports of known issues.
+   reports of known issues. (Of course, the source is also available
+   on GitHub.)
 
    Yours,
 

From bernd.edlinger at hotmail.de  Tue Feb 13 15:05:02 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Tue, 13 Feb 2018 15:05:02 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518534302.544650.17218.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  751485c6522f10006ba9f6cf90d719ea190e2201 (commit)
      from  ecd72c0028525f2f476838530e7c32bb191d3659 (commit)


- Log -----------------------------------------------------------------
commit 751485c6522f10006ba9f6cf90d719ea190e2201
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Mon Feb 12 09:28:33 2018 +0100

    Remove code that prints "<SPACES/NULS>" in hexdumps
    when the data block ends with SPACEs or NULs.
    
    The problem is, you can't see if the data ends
    with SPACE or NUL or a combination of both.
    
    This can happen for instance with
    openssl rsautl -decrypt -hexdump
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5332)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/b_dump.c | 19 ++-----------------
 1 file changed, 2 insertions(+), 17 deletions(-)

diff --git a/crypto/bio/b_dump.c b/crypto/bio/b_dump.c
index c8601cb..0bbe17e 100644
--- a/crypto/bio/b_dump.c
+++ b/crypto/bio/b_dump.c
@@ -14,7 +14,6 @@
 #include <stdio.h>
 #include "bio_lcl.h"
 
-#define TRUNCATE
 #define DUMP_WIDTH      16
 #define DUMP_WIDTH_LESS_INDENT(i) (DUMP_WIDTH-((i-(i>6?6:i)+3)/4))
 
@@ -29,17 +28,10 @@ int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
 {
     int ret = 0;
     char buf[288 + 1], tmp[20], str[128 + 1];
-    int i, j, rows, trc;
+    int i, j, rows;
     unsigned char ch;
     int dump_width;
 
-    trc = 0;
-
-#ifdef TRUNCATE
-    for (; (len > 0) && ((s[len - 1] == ' ') || (s[len - 1] == '\0')); len--)
-        trc++;
-#endif
-
     if (indent < 0)
         indent = 0;
     if (indent) {
@@ -90,14 +82,7 @@ int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
          */
         ret += cb((void *)buf, strlen(buf), u);
     }
-#ifdef TRUNCATE
-    if (trc > 0) {
-        BIO_snprintf(buf, sizeof(buf), "%s%04x - <SPACES/NULS>\n", str,
-                     len + trc);
-        ret += cb((void *)buf, strlen(buf), u);
-    }
-#endif
-    return (ret);
+    return ret;
 }
 
 #ifndef OPENSSL_NO_STDIO

From bernd.edlinger at hotmail.de  Tue Feb 13 15:06:04 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Tue, 13 Feb 2018 15:06:04 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1518534364.609467.18900.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  773da093b1b9a63ae9c94cae756848011686caa0 (commit)
      from  575c69f97ca7c8cfaf2a448272f7a1615308acdd (commit)


- Log -----------------------------------------------------------------
commit 773da093b1b9a63ae9c94cae756848011686caa0
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Mon Feb 12 09:28:33 2018 +0100

    Remove code that prints "<SPACES/NULS>" in hexdumps
    when the data block ends with SPACEs or NULs.
    
    The problem is, you can't see if the data ends
    with SPACE or NUL or a combination of both.
    
    This can happen for instance with
    openssl rsautl -decrypt -hexdump
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5332)
    
    (cherry picked from commit 751485c6522f10006ba9f6cf90d719ea190e2201)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/b_dump.c | 19 ++-----------------
 1 file changed, 2 insertions(+), 17 deletions(-)

diff --git a/crypto/bio/b_dump.c b/crypto/bio/b_dump.c
index 86a98e1..fcfd699 100644
--- a/crypto/bio/b_dump.c
+++ b/crypto/bio/b_dump.c
@@ -64,7 +64,6 @@
 #include "cryptlib.h"
 #include "bio_lcl.h"
 
-#define TRUNCATE
 #define DUMP_WIDTH      16
 #define DUMP_WIDTH_LESS_INDENT(i) (DUMP_WIDTH-((i-(i>6?6:i)+3)/4))
 
@@ -79,17 +78,10 @@ int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
 {
     int ret = 0;
     char buf[288 + 1], tmp[20], str[128 + 1];
-    int i, j, rows, trc;
+    int i, j, rows;
     unsigned char ch;
     int dump_width;
 
-    trc = 0;
-
-#ifdef TRUNCATE
-    for (; (len > 0) && ((s[len - 1] == ' ') || (s[len - 1] == '\0')); len--)
-        trc++;
-#endif
-
     if (indent < 0)
         indent = 0;
     if (indent) {
@@ -140,14 +132,7 @@ int BIO_dump_indent_cb(int (*cb) (const void *data, size_t len, void *u),
          */
         ret += cb((void *)buf, strlen(buf), u);
     }
-#ifdef TRUNCATE
-    if (trc > 0) {
-        BIO_snprintf(buf, sizeof(buf), "%s%04x - <SPACES/NULS>\n", str,
-                     len + trc);
-        ret += cb((void *)buf, strlen(buf), u);
-    }
-#endif
-    return (ret);
+    return ret;
 }
 
 #ifndef OPENSSL_NO_FP_API

From levitte at openssl.org  Tue Feb 13 15:20:51 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 15:20:51 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1518535251.017165.1708.nullmailer@dev.openssl.org>

The branch master has been updated
       via  81f14d3c92704e0a1bc18fdc5f47d62cf086812f (commit)
       via  a930f701aee0dc0c4ad61ebc792c2281b1f90cbb (commit)
      from  4beedb93e58fd4a25c2d4a293dfade202c980633 (commit)


- Log -----------------------------------------------------------------
commit 81f14d3c92704e0a1bc18fdc5f47d62cf086812f
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:10:22 2018 +0100

    release-tools/do-copyright-year: in file sed
    
    To make sure we don't lose file permissions, use sed -i
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/12)

commit a930f701aee0dc0c4ad61ebc792c2281b1f90cbb
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 15:08:37 2018 +0100

    release-tools/do-copyright-year: don't resurect deleted files
    
    Use 'git diff-tree --name-status' to get the current status of each
    file.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/12)

-----------------------------------------------------------------------

Summary of changes:
 release-tools/do-copyright-year | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/release-tools/do-copyright-year b/release-tools/do-copyright-year
index 59b9235..6c3d710 100755
--- a/release-tools/do-copyright-year
+++ b/release-tools/do-copyright-year
@@ -29,10 +29,10 @@ EOF
 
 NYD=`date +%Y-01-01`
 echo Updating copryight
-git diff-tree -r --name-only `git rev-list -1 --before=$NYD HEAD`..HEAD \
-	| while read FILE ; do
-    sed -E -f /tmp/sed$$ "$FILE" >/tmp/$$
-    mv /tmp/$$ "$FILE"
+git diff-tree -r --name-status `git rev-list -1 --before=$NYD HEAD`..HEAD \
+	| while read STATUS FILE ; do
+    if [ "$STATUS" = 'D' ]; then continue; fi
+    sed -E -f /tmp/sed$$ -i "$FILE"
     git add "$FILE"
 done
 echo Committing change locally.

From no-reply at appveyor.com  Tue Feb 13 15:22:51 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 13 Feb 2018 15:22:51 +0000
Subject: [openssl-commits] Build completed: openssl master.15589
Message-ID: <20180213152251.1.A67F74B83FA179BF@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180213/c078ce26/attachment.html>

From matthias.st.pierre at ncp-e.com  Tue Feb 13 16:35:35 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Tue, 13 Feb 2018 16:35:35 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518539735.509290.11195.nullmailer@dev.openssl.org>

The branch master has been updated
       via  d7c402c4f2d9c311a91616fd75c24a15afabe2e5 (commit)
       via  8164d91d1802e6173291dee50923cc60fcd3bf72 (commit)
       via  4f9dabbfe30c3539dd6cb0bd861ddb0127c11c20 (commit)
       via  3ce1c27b56fa9856693e5c98331cebaa2a3accfa (commit)
      from  fcd21502737e96c031bff17fe6b6a432d07e3855 (commit)


- Log -----------------------------------------------------------------
commit d7c402c4f2d9c311a91616fd75c24a15afabe2e5
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Mon Feb 12 02:37:27 2018 +0100

    OPENSSL_cleanup: cleanup secure memory
    
    If the global DRBGs are allocated on the secure heap, then calling
    CRYPTO_secure_malloc_done() inside main() will have no effect, unless
    OPENSSL_cleanup() has been called explicitely before that, because
    otherwise the DRBGs will still be allocated. So it is better to cleanup
    the secure heap automatically at the end of OPENSSL_cleanup().
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5294)

commit 8164d91d1802e6173291dee50923cc60fcd3bf72
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Thu Feb 8 23:04:16 2018 +0100

    DRBG: make the derivation function the default for ctr_drbg
    
    The NIST standard presents two alternative ways for seeding the
    CTR DRBG, depending on whether a derivation function is used or not.
    In Section 10.2.1 of NIST SP800-90Ar1 the following is assessed:
    
      The use of the derivation function is optional if either an
      approved RBG or an entropy source provides full entropy output
      when entropy input is requested by the DRBG mechanism.
      Otherwise, the derivation function shall be used.
    
    Since the OpenSSL DRBG supports being reseeded from low entropy random
    sources (using RAND_POOL), the use of a derivation function is mandatory.
    For that reason we change the default and replace the opt-in flag
    RAND_DRBG_FLAG_CTR_USE_DF with an opt-out flag RAND_DRBG_FLAG_CTR_NO_DF.
    This change simplifies the RAND_DRBG_new() calls.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5294)

commit 4f9dabbfe30c3539dd6cb0bd861ddb0127c11c20
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Thu Feb 8 22:46:23 2018 +0100

    DRBG: unify initialization and cleanup code
    
    The functions drbg_setup() and drbg_cleanup() used to duplicate a lot of
    code from RAND_DRBG_new() and RAND_DRBG_free(). This duplication has been
    removed, which simplifies drbg_setup() and makes drbg_cleanup() obsolete.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5294)

commit 3ce1c27b56fa9856693e5c98331cebaa2a3accfa
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Thu Feb 8 16:40:32 2018 +0100

    DRBG: add locking api
    
    This commit adds three new accessors to the internal DRBG lock
    
       int RAND_DRBG_lock(RAND_DRBG *drbg)
       int RAND_DRBG_unlock(RAND_DRBG *drbg)
       int RAND_DRBG_enable_locking(RAND_DRBG *drbg)
    
    The three shared DRBGs are intended to be used concurrently, so they
    have locking enabled by default. It is the callers responsibility to
    guard access to the shared DRBGs by calls to RAND_DRBG_lock() and
    RAND_DRBG_unlock().
    
    All other DRBG instances don't have locking enabled by default, because
    they are intendended to be used by a single thread. If it is desired,
    locking can be enabled by using RAND_DRBG_enable_locking().
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5294)

-----------------------------------------------------------------------

Summary of changes:
 crypto/err/openssl.txt    |   3 +
 crypto/init.c             |   2 +
 crypto/rand/drbg_ctr.c    |   6 +-
 crypto/rand/drbg_lib.c    | 167 +++++++++++++++++++++++++++++++++++-----------
 crypto/rand/rand_err.c    |   6 ++
 crypto/rand/rand_lcl.h    |   1 +
 crypto/rand/rand_lib.c    |  17 +++--
 include/internal/rand.h   |   9 ++-
 include/openssl/randerr.h |   3 +
 ssl/ssl_lib.c             |   3 +-
 test/drbgtest.c           |  19 +++---
 util/libcrypto.num        |   4 ++
 12 files changed, 176 insertions(+), 64 deletions(-)

diff --git a/crypto/err/openssl.txt b/crypto/err/openssl.txt
index 3ed71fe..8d00463 100644
--- a/crypto/err/openssl.txt
+++ b/crypto/err/openssl.txt
@@ -890,6 +890,7 @@ RAND_F_DRBG_GET_ENTROPY:105:drbg_get_entropy
 RAND_F_DRBG_SETUP:117:drbg_setup
 RAND_F_GET_ENTROPY:106:get_entropy
 RAND_F_RAND_BYTES:100:RAND_bytes
+RAND_F_RAND_DRBG_ENABLE_LOCKING:119:RAND_DRBG_enable_locking
 RAND_F_RAND_DRBG_GENERATE:107:RAND_DRBG_generate
 RAND_F_RAND_DRBG_INSTANTIATE:108:RAND_DRBG_instantiate
 RAND_F_RAND_DRBG_NEW:109:RAND_DRBG_new
@@ -2256,6 +2257,7 @@ RAND_R_ADDITIONAL_INPUT_TOO_LONG:102:additional input too long
 RAND_R_ALREADY_INSTANTIATED:103:already instantiated
 RAND_R_ARGUMENT_OUT_OF_RANGE:105:argument out of range
 RAND_R_CANNOT_OPEN_FILE:121:Cannot open file
+RAND_R_DRBG_ALREADY_INITIALIZED:129:drbg already initialized
 RAND_R_DRBG_NOT_INITIALISED:104:drbg not initialised
 RAND_R_ENTROPY_INPUT_TOO_LONG:106:entropy input too long
 RAND_R_ENTROPY_OUT_OF_RANGE:124:entropy out of range
@@ -2274,6 +2276,7 @@ RAND_R_IN_ERROR_STATE:114:in error state
 RAND_R_NOT_A_REGULAR_FILE:122:Not a regular file
 RAND_R_NOT_INSTANTIATED:115:not instantiated
 RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED:128:no drbg implementation selected
+RAND_R_PARENT_LOCKING_NOT_ENABLED:130:parent locking not enabled
 RAND_R_PERSONALISATION_STRING_TOO_LONG:116:personalisation string too long
 RAND_R_PRNG_NOT_SEEDED:100:PRNG not seeded
 RAND_R_RANDOM_POOL_OVERFLOW:125:random pool overflow
diff --git a/crypto/init.c b/crypto/init.c
index 1b94d07..4a88e9c 100644
--- a/crypto/init.c
+++ b/crypto/init.c
@@ -502,6 +502,8 @@ void OPENSSL_cleanup(void)
     obj_cleanup_int();
     err_cleanup();
 
+    CRYPTO_secure_malloc_done();
+
     base_inited = 0;
 }
 
diff --git a/crypto/rand/drbg_ctr.c b/crypto/rand/drbg_ctr.c
index 883c585..99cd997 100644
--- a/crypto/rand/drbg_ctr.c
+++ b/crypto/rand/drbg_ctr.c
@@ -221,7 +221,7 @@ static void ctr_update(RAND_DRBG *drbg,
         memcpy(ctr->V, ctr->K + 24, 8);
     }
 
-    if (drbg->flags & RAND_DRBG_FLAG_CTR_USE_DF) {
+    if ((drbg->flags & RAND_DRBG_FLAG_CTR_NO_DF) == 0) {
         /* If no input reuse existing derived value */
         if (in1 != NULL || nonce != NULL || in2 != NULL)
             ctr_df(ctr, in1, in1len, nonce, noncelen, in2, in2len);
@@ -272,7 +272,7 @@ static int drbg_ctr_generate(RAND_DRBG *drbg,
     if (adin != NULL && adinlen != 0) {
         ctr_update(drbg, adin, adinlen, NULL, 0, NULL, 0);
         /* This means we reuse derived value */
-        if (drbg->flags & RAND_DRBG_FLAG_CTR_USE_DF) {
+        if ((drbg->flags & RAND_DRBG_FLAG_CTR_NO_DF) == 0) {
             adin = NULL;
             adinlen = 1;
         }
@@ -338,7 +338,7 @@ int drbg_ctr_init(RAND_DRBG *drbg)
     drbg->strength = keylen * 8;
     drbg->seedlen = keylen + 16;
 
-    if (drbg->flags & RAND_DRBG_FLAG_CTR_USE_DF) {
+    if ((drbg->flags & RAND_DRBG_FLAG_CTR_NO_DF) == 0) {
         /* df initialisation */
         static unsigned char df_key[32] = {
             0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,
diff --git a/crypto/rand/drbg_lib.c b/crypto/rand/drbg_lib.c
index 4404e4f..c592a7b 100644
--- a/crypto/rand/drbg_lib.c
+++ b/crypto/rand/drbg_lib.c
@@ -90,6 +90,21 @@ static RAND_DRBG *drbg_private;
  * |randomness| argument). This will immediately reseed the <master> DRBG.
  * The <public> and <private> DRBG will detect this on their next generate
  * call and reseed, pulling randomness from <master>.
+ *
+ * LOCKING
+ *
+ * The three shared DRBGs are intended to be used concurrently, so they
+ * support locking by default. It is the callers responsibility to wrap
+ * calls to functions like RAND_DRBG_generate() which modify the DRBGs
+ * internal state with calls to RAND_DRBG_lock() and RAND_DRBG_unlock().
+ * The functions RAND_bytes() and RAND_priv_bytes() take the locks
+ * automatically, so using the RAND api is thread safe as before.
+ *
+ * All other DRBG instances don't have locking enabled by default, because
+ * they are intendended to be used by a single thread. If it is desired,
+ * locking can be enabled using RAND_DRBG_enable_locking(). However, instead
+ * of accessing a single DRBG instance concurrently from different threads,
+ * it is recommended to instantiate a separate DRBG instance per thread.
  */
 
 
@@ -99,7 +114,11 @@ static const char ossl_pers_string[] = "OpenSSL NIST SP 800-90A DRBG";
 static CRYPTO_ONCE rand_drbg_init = CRYPTO_ONCE_STATIC_INIT;
 
 static RAND_DRBG *drbg_setup(RAND_DRBG *parent);
-static void drbg_cleanup(RAND_DRBG *drbg);
+
+static RAND_DRBG *rand_drbg_new(int secure,
+                                int type,
+                                unsigned int flags,
+                                RAND_DRBG *parent);
 
 /*
  * Set/initialize |drbg| to be of type |nid|, with optional |flags|.
@@ -134,19 +153,26 @@ int RAND_DRBG_set(RAND_DRBG *drbg, int nid, unsigned int flags)
 }
 
 /*
- * Allocate memory and initialize a new DRBG.  The |parent|, if not
- * NULL, will be used to auto-seed this RAND_DRBG as needed.
+ * Allocate memory and initialize a new DRBG. The DRBG is allocated on
+ * the secure heap if |secure| is nonzero and the secure heap is enabled.
+ * The |parent|, if not NULL, will be used as random source for reseeding.
  *
  * Returns a pointer to the new DRBG instance on success, NULL on failure.
  */
-RAND_DRBG *RAND_DRBG_new(int type, unsigned int flags, RAND_DRBG *parent)
+static RAND_DRBG *rand_drbg_new(int secure,
+                                int type,
+                                unsigned int flags,
+                                RAND_DRBG *parent)
 {
-    RAND_DRBG *drbg = OPENSSL_zalloc(sizeof(*drbg));
+    RAND_DRBG *drbg = secure ?
+        OPENSSL_secure_zalloc(sizeof(*drbg)) : OPENSSL_zalloc(sizeof(*drbg));
 
     if (drbg == NULL) {
         RANDerr(RAND_F_RAND_DRBG_NEW, ERR_R_MALLOC_FAILURE);
         goto err;
     }
+
+    drbg->secure = secure && CRYPTO_secure_allocated(drbg);
     drbg->fork_count = rand_fork_count;
     drbg->parent = parent;
     if (RAND_DRBG_set(drbg, type, flags) == 0)
@@ -160,10 +186,24 @@ RAND_DRBG *RAND_DRBG_new(int type, unsigned int flags, RAND_DRBG *parent)
     return drbg;
 
 err:
-    OPENSSL_free(drbg);
+    if (drbg->secure)
+        OPENSSL_secure_free(drbg);
+    else
+        OPENSSL_free(drbg);
+
     return NULL;
 }
 
+RAND_DRBG *RAND_DRBG_new(int type, unsigned int flags, RAND_DRBG *parent)
+{
+    return rand_drbg_new(0, type, flags, parent);
+}
+
+RAND_DRBG *RAND_DRBG_secure_new(int type, unsigned int flags, RAND_DRBG *parent)
+{
+    return rand_drbg_new(1, type, flags, parent);
+}
+
 /*
  * Uninstantiate |drbg| and free all memory.
  */
@@ -174,8 +214,13 @@ void RAND_DRBG_free(RAND_DRBG *drbg)
 
     if (drbg->meth != NULL)
         drbg->meth->uninstantiate(drbg);
+    CRYPTO_THREAD_lock_free(drbg->lock);
     CRYPTO_free_ex_data(CRYPTO_EX_INDEX_DRBG, drbg, &drbg->ex_data);
-    OPENSSL_clear_free(drbg, sizeof(*drbg));
+
+    if (drbg->secure)
+        OPENSSL_secure_clear_free(drbg, sizeof(*drbg));
+    else
+        OPENSSL_clear_free(drbg, sizeof(*drbg));
 }
 
 /*
@@ -656,6 +701,69 @@ int RAND_DRBG_set_reseed_time_interval(RAND_DRBG *drbg, time_t interval)
     return 1;
 }
 
+
+/*
+ * Locks the given drbg. Locking a drbg which does not have locking
+ * enabled is considered a successful no-op.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_lock(RAND_DRBG *drbg)
+{
+    if (drbg->lock != NULL)
+        return CRYPTO_THREAD_write_lock(drbg->lock);
+
+    return 1;
+}
+
+/*
+ * Unlocks the given drbg. Unlocking a drbg which does not have locking
+ * enabled is considered a successful no-op.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_unlock(RAND_DRBG *drbg)
+{
+    if (drbg->lock != NULL)
+        return CRYPTO_THREAD_unlock(drbg->lock);
+
+    return 1;
+}
+
+/*
+ * Enables locking for the given drbg
+ *
+ * Locking can only be enabled if the random generator
+ * is in the uninitialized state.
+ *
+ * Returns 1 on success, 0 on failure.
+ */
+int RAND_DRBG_enable_locking(RAND_DRBG *drbg)
+{
+    if (drbg->state != DRBG_UNINITIALISED) {
+        RANDerr(RAND_F_RAND_DRBG_ENABLE_LOCKING,
+                RAND_R_DRBG_ALREADY_INITIALIZED);
+        return 0;
+    }
+
+    if (drbg->lock == NULL) {
+        if (drbg->parent != NULL && drbg->parent->lock == NULL) {
+            RANDerr(RAND_F_RAND_DRBG_ENABLE_LOCKING,
+                    RAND_R_PARENT_LOCKING_NOT_ENABLED);
+            return 0;
+        }
+
+        drbg->lock = CRYPTO_THREAD_lock_new();
+        if (drbg->lock == NULL) {
+            RANDerr(RAND_F_RAND_DRBG_ENABLE_LOCKING,
+                    RAND_R_FAILED_TO_CREATE_LOCK);
+            return 0;
+        }
+    }
+
+    return 1;
+}
+
 /*
  * Get and set the EXDATA
  */
@@ -685,28 +793,17 @@ static RAND_DRBG *drbg_setup(RAND_DRBG *parent)
 {
     RAND_DRBG *drbg;
 
-    drbg = OPENSSL_secure_zalloc(sizeof(RAND_DRBG));
+    drbg = RAND_DRBG_secure_new(RAND_DRBG_NID, 0, parent);
     if (drbg == NULL)
         return NULL;
 
-    drbg->lock = CRYPTO_THREAD_lock_new();
-    if (drbg->lock == NULL) {
-        RANDerr(RAND_F_DRBG_SETUP, RAND_R_FAILED_TO_CREATE_LOCK);
-        goto err;
-    }
-
-    if (RAND_DRBG_set(drbg,
-                      RAND_DRBG_NID, RAND_DRBG_FLAG_CTR_USE_DF) != 1)
-        goto err;
-    if (RAND_DRBG_set_callbacks(drbg, rand_drbg_get_entropy,
-                                rand_drbg_cleanup_entropy, NULL, NULL) != 1)
+    if (RAND_DRBG_enable_locking(drbg) == 0)
         goto err;
 
     if (parent == NULL) {
         drbg->reseed_interval = MASTER_RESEED_INTERVAL;
         drbg->reseed_time_interval = MASTER_RESEED_TIME_INTERVAL;
     } else {
-        drbg->parent = parent;
         drbg->reseed_interval = SLAVE_RESEED_INTERVAL;
         drbg->reseed_time_interval = SLAVE_RESEED_TIME_INTERVAL;
     }
@@ -726,7 +823,7 @@ static RAND_DRBG *drbg_setup(RAND_DRBG *parent)
     return drbg;
 
 err:
-    drbg_cleanup(drbg);
+    RAND_DRBG_free(drbg);
     return NULL;
 }
 
@@ -753,22 +850,12 @@ DEFINE_RUN_ONCE_STATIC(do_rand_drbg_init)
     return 1;
 }
 
-/* Cleans up the given global DRBG  */
-static void drbg_cleanup(RAND_DRBG *drbg)
-{
-    if (drbg != NULL) {
-        RAND_DRBG_uninstantiate(drbg);
-        CRYPTO_THREAD_lock_free(drbg->lock);
-        OPENSSL_secure_clear_free(drbg, sizeof(RAND_DRBG));
-    }
-}
-
 /* Clean up the global DRBGs before exit */
 void rand_drbg_cleanup_int(void)
 {
-    drbg_cleanup(drbg_private);
-    drbg_cleanup(drbg_public);
-    drbg_cleanup(drbg_master);
+    RAND_DRBG_free(drbg_private);
+    RAND_DRBG_free(drbg_public);
+    RAND_DRBG_free(drbg_master);
 
     drbg_private = drbg_public = drbg_master = NULL;
 }
@@ -782,9 +869,9 @@ static int drbg_bytes(unsigned char *out, int count)
     if (drbg == NULL)
         return 0;
 
-    CRYPTO_THREAD_write_lock(drbg->lock);
+    RAND_DRBG_lock(drbg);
     ret = RAND_DRBG_bytes(drbg, out, count);
-    CRYPTO_THREAD_unlock(drbg->lock);
+    RAND_DRBG_unlock(drbg);
 
     return ret;
 }
@@ -811,11 +898,11 @@ static int drbg_add(const void *buf, int num, double randomness)
         return 0;
     }
 
-    CRYPTO_THREAD_write_lock(drbg->lock);
+    RAND_DRBG_lock(drbg);
     ret = rand_drbg_restart(drbg, buf,
                             (size_t)(unsigned int)num,
                             (size_t)(8*randomness));
-    CRYPTO_THREAD_unlock(drbg->lock);
+    RAND_DRBG_unlock(drbg);
 
     return ret;
 }
@@ -835,9 +922,9 @@ static int drbg_status(void)
     if (drbg == NULL)
         return 0;
 
-    CRYPTO_THREAD_write_lock(drbg->lock);
+    RAND_DRBG_lock(drbg);
     ret = drbg->state == DRBG_READY ? 1 : 0;
-    CRYPTO_THREAD_unlock(drbg->lock);
+    RAND_DRBG_unlock(drbg);
     return ret;
 }
 
diff --git a/crypto/rand/rand_err.c b/crypto/rand/rand_err.c
index 9eadbf9..e8ec44a 100644
--- a/crypto/rand/rand_err.c
+++ b/crypto/rand/rand_err.c
@@ -19,6 +19,8 @@ static const ERR_STRING_DATA RAND_str_functs[] = {
     {ERR_PACK(ERR_LIB_RAND, RAND_F_DRBG_SETUP, 0), "drbg_setup"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_GET_ENTROPY, 0), "get_entropy"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_BYTES, 0), "RAND_bytes"},
+    {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_ENABLE_LOCKING, 0),
+     "RAND_DRBG_enable_locking"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_GENERATE, 0),
      "RAND_DRBG_generate"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_INSTANTIATE, 0),
@@ -49,6 +51,8 @@ static const ERR_STRING_DATA RAND_str_reasons[] = {
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ARGUMENT_OUT_OF_RANGE),
     "argument out of range"},
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_CANNOT_OPEN_FILE), "Cannot open file"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_DRBG_ALREADY_INITIALIZED),
+    "drbg already initialized"},
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_DRBG_NOT_INITIALISED),
     "drbg not initialised"},
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_ENTROPY_INPUT_TOO_LONG),
@@ -80,6 +84,8 @@ static const ERR_STRING_DATA RAND_str_reasons[] = {
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_NOT_INSTANTIATED), "not instantiated"},
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED),
     "no drbg implementation selected"},
+    {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PARENT_LOCKING_NOT_ENABLED),
+    "parent locking not enabled"},
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PERSONALISATION_STRING_TOO_LONG),
     "personalisation string too long"},
     {ERR_PACK(ERR_LIB_RAND, 0, RAND_R_PRNG_NOT_SEEDED), "PRNG not seeded"},
diff --git a/crypto/rand/rand_lcl.h b/crypto/rand/rand_lcl.h
index e3c0b76..a63b28b 100644
--- a/crypto/rand/rand_lcl.h
+++ b/crypto/rand/rand_lcl.h
@@ -115,6 +115,7 @@ typedef struct rand_drbg_ctr_st {
 struct rand_drbg_st {
     CRYPTO_RWLOCK *lock;
     RAND_DRBG *parent;
+    int secure; /* 1: allocated on the secure heap, 0: otherwise */
     int nid; /* the underlying algorithm */
     int fork_count;
     unsigned short flags; /* various external flags */
diff --git a/crypto/rand/rand_lib.c b/crypto/rand/rand_lib.c
index faec18d..289acf3 100644
--- a/crypto/rand/rand_lib.c
+++ b/crypto/rand/rand_lib.c
@@ -200,17 +200,16 @@ size_t rand_drbg_get_entropy(RAND_DRBG *drbg,
             /*
              * Get random from parent, include our state as additional input.
              * Our lock is already held, but we need to lock our parent before
-             * generating bits from it.
+             * generating bits from it. (Note: taking the lock will be a no-op
+             * if locking if drbg->parent->lock == NULL.)
              */
-            if (drbg->parent->lock)
-                CRYPTO_THREAD_write_lock(drbg->parent->lock);
+            RAND_DRBG_lock(drbg->parent);
             if (RAND_DRBG_generate(drbg->parent,
                                    buffer, bytes_needed,
                                    0,
                                    (unsigned char *)drbg, sizeof(*drbg)) != 0)
                 bytes = bytes_needed;
-            if (drbg->parent->lock)
-                CRYPTO_THREAD_unlock(drbg->parent->lock);
+            RAND_DRBG_unlock(drbg->parent);
 
             entropy_available = RAND_POOL_add_end(pool, bytes, 8 * bytes);
         }
@@ -406,9 +405,9 @@ int RAND_poll(void)
         if (drbg == NULL)
             return 0;
 
-        CRYPTO_THREAD_write_lock(drbg->lock);
+        RAND_DRBG_lock(drbg);
         ret = rand_drbg_restart(drbg, NULL, 0, 0);
-        CRYPTO_THREAD_unlock(drbg->lock);
+        RAND_DRBG_unlock(drbg);
 
         return ret;
 
@@ -798,9 +797,9 @@ int RAND_priv_bytes(unsigned char *buf, int num)
         return 0;
 
     /* We have to lock the DRBG before generating bits from it. */
-    CRYPTO_THREAD_write_lock(drbg->lock);
+    RAND_DRBG_lock(drbg);
     ret = RAND_DRBG_bytes(drbg, buf, num);
-    CRYPTO_THREAD_unlock(drbg->lock);
+    RAND_DRBG_unlock(drbg);
     return ret;
 }
 
diff --git a/include/internal/rand.h b/include/internal/rand.h
index 575e6ca..8d3e452 100644
--- a/include/internal/rand.h
+++ b/include/internal/rand.h
@@ -10,8 +10,8 @@
 #ifndef HEADER_DRBG_RAND_H
 # define HEADER_DRBG_RAND_H
 
-/* In CTR mode, use derivation function ctr_df */
-#define RAND_DRBG_FLAG_CTR_USE_DF            0x2
+/* In CTR mode, disable derivation function ctr_df */
+#define RAND_DRBG_FLAG_CTR_NO_DF            0x1
 
 /*
  * Default security strength (in the sense of [NIST SP 800-90Ar1])
@@ -28,6 +28,7 @@
  * Object lifetime functions.
  */
 RAND_DRBG *RAND_DRBG_new(int type, unsigned int flags, RAND_DRBG *parent);
+RAND_DRBG *RAND_DRBG_secure_new(int type, unsigned int flags, RAND_DRBG *parent);
 int RAND_DRBG_set(RAND_DRBG *drbg, int type, unsigned int flags);
 int RAND_DRBG_instantiate(RAND_DRBG *drbg,
                           const unsigned char *pers, size_t perslen);
@@ -47,6 +48,10 @@ int RAND_DRBG_bytes(RAND_DRBG *drbg, unsigned char *out, size_t outlen);
 int RAND_DRBG_set_reseed_interval(RAND_DRBG *drbg, unsigned int interval);
 int RAND_DRBG_set_reseed_time_interval(RAND_DRBG *drbg, time_t interval);
 
+int RAND_DRBG_lock(RAND_DRBG *drbg);
+int RAND_DRBG_unlock(RAND_DRBG *drbg);
+int RAND_DRBG_enable_locking(RAND_DRBG *drbg);
+
 RAND_DRBG *RAND_DRBG_get0_master(void);
 RAND_DRBG *RAND_DRBG_get0_public(void);
 RAND_DRBG *RAND_DRBG_get0_private(void);
diff --git a/include/openssl/randerr.h b/include/openssl/randerr.h
index ae5a2ea..4cfc06d 100644
--- a/include/openssl/randerr.h
+++ b/include/openssl/randerr.h
@@ -24,6 +24,7 @@ int ERR_load_RAND_strings(void);
 # define RAND_F_DRBG_SETUP                                117
 # define RAND_F_GET_ENTROPY                               106
 # define RAND_F_RAND_BYTES                                100
+# define RAND_F_RAND_DRBG_ENABLE_LOCKING                  119
 # define RAND_F_RAND_DRBG_GENERATE                        107
 # define RAND_F_RAND_DRBG_INSTANTIATE                     108
 # define RAND_F_RAND_DRBG_NEW                             109
@@ -46,6 +47,7 @@ int ERR_load_RAND_strings(void);
 # define RAND_R_ALREADY_INSTANTIATED                      103
 # define RAND_R_ARGUMENT_OUT_OF_RANGE                     105
 # define RAND_R_CANNOT_OPEN_FILE                          121
+# define RAND_R_DRBG_ALREADY_INITIALIZED                  129
 # define RAND_R_DRBG_NOT_INITIALISED                      104
 # define RAND_R_ENTROPY_INPUT_TOO_LONG                    106
 # define RAND_R_ENTROPY_OUT_OF_RANGE                      124
@@ -64,6 +66,7 @@ int ERR_load_RAND_strings(void);
 # define RAND_R_NOT_A_REGULAR_FILE                        122
 # define RAND_R_NOT_INSTANTIATED                          115
 # define RAND_R_NO_DRBG_IMPLEMENTATION_SELECTED           128
+# define RAND_R_PARENT_LOCKING_NOT_ENABLED                130
 # define RAND_R_PERSONALISATION_STRING_TOO_LONG           116
 # define RAND_R_PRNG_NOT_SEEDED                           100
 # define RAND_R_RANDOM_POOL_OVERFLOW                      125
diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 6a5c03d..00e02f4 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -694,8 +694,7 @@ SSL *SSL_new(SSL_CTX *ctx)
      */
     if (RAND_get_rand_method() == RAND_OpenSSL()) {
         s->drbg =
-            RAND_DRBG_new(RAND_DRBG_NID, RAND_DRBG_FLAG_CTR_USE_DF,
-                          RAND_DRBG_get0_public());
+            RAND_DRBG_new(RAND_DRBG_NID, 0, RAND_DRBG_get0_public());
         if (s->drbg == NULL
             || RAND_DRBG_instantiate(s->drbg,
                                      (const unsigned char *) SSL_version_str,
diff --git a/test/drbgtest.c b/test/drbgtest.c
index 6e916c4..c64628a 100644
--- a/test/drbgtest.c
+++ b/test/drbgtest.c
@@ -88,16 +88,19 @@ typedef struct drbg_selftest_data_st {
     pr##_pr_returnedbits, sizeof(pr##_pr_returnedbits) \
     }
 
-#define make_drbg_test_data_df(nid, pr, p) \
-    make_drbg_test_data(nid, RAND_DRBG_FLAG_CTR_USE_DF, pr, p)
+#define make_drbg_test_data_use_df(nid, pr, p) \
+    make_drbg_test_data(nid, 0, pr, p)
+
+#define make_drbg_test_data_no_df(nid, pr, p)                      \
+    make_drbg_test_data(nid, RAND_DRBG_FLAG_CTR_NO_DF, pr, p)
 
 static DRBG_SELFTEST_DATA drbg_test[] = {
-    make_drbg_test_data   (NID_aes_128_ctr, 0, aes_128_no_df, 0),
-    make_drbg_test_data   (NID_aes_192_ctr, 0, aes_192_no_df, 0),
-    make_drbg_test_data   (NID_aes_256_ctr, 0, aes_256_no_df, 1),
-    make_drbg_test_data_df(NID_aes_128_ctr,    aes_128_use_df, 0),
-    make_drbg_test_data_df(NID_aes_192_ctr,    aes_192_use_df, 0),
-    make_drbg_test_data_df(NID_aes_256_ctr,    aes_256_use_df, 1),
+    make_drbg_test_data_no_df (NID_aes_128_ctr, aes_128_no_df,  0),
+    make_drbg_test_data_no_df (NID_aes_192_ctr, aes_192_no_df,  0),
+    make_drbg_test_data_no_df (NID_aes_256_ctr, aes_256_no_df,  1),
+    make_drbg_test_data_use_df(NID_aes_128_ctr, aes_128_use_df, 0),
+    make_drbg_test_data_use_df(NID_aes_192_ctr, aes_192_use_df, 0),
+    make_drbg_test_data_use_df(NID_aes_256_ctr, aes_256_use_df, 1),
 };
 
 static int app_data_index;
diff --git a/util/libcrypto.num b/util/libcrypto.num
index 5005d9a..c7be540 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -4501,3 +4501,7 @@ EVP_sha512_256                          4442	1_1_1	EXIST::FUNCTION:
 EVP_sha512_224                          4443	1_1_1	EXIST::FUNCTION:
 OCSP_basic_sign_ctx                     4444	1_1_1	EXIST::FUNCTION:OCSP
 RAND_DRBG_bytes                         4445	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_lock                          4446	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_unlock                        4447	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_enable_locking                4448	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_secure_new                    4449	1_1_1	EXIST::FUNCTION:

From levitte at openssl.org  Tue Feb 13 17:58:34 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 17:58:34 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518544714.202634.26285.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  dc5facac9a4e904d32f01137ce95edd21b42ebe9 (commit)
      from  751485c6522f10006ba9f6cf90d719ea190e2201 (commit)


- Log -----------------------------------------------------------------
commit dc5facac9a4e904d32f01137ce95edd21b42ebe9
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Jun 16 03:46:41 2017 +0200

    Add the target 'build_all_generated'
    
    This new target is used to build all generated files and only that.
    This can be used to prepare everything that requires things like perl
    for a system that lacks perl and then move everything to that system
    and do the rest of the build there.
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3695)
    
    (cherry picked from commit 9b03b91b84b64c086081b87bd0a2c7d3612af6c0)

-----------------------------------------------------------------------

Summary of changes:
 CHANGES                              | 6 ++++++
 Configurations/descrip.mms.tmpl      | 4 ++++
 Configurations/unix-Makefile.tmpl    | 4 ++++
 Configurations/windows-makefile.tmpl | 4 ++++
 4 files changed, 18 insertions(+)

diff --git a/CHANGES b/CHANGES
index 0ac2f90..8840bd6 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,12 @@
 
  Changes between 1.1.0g and 1.1.0h [xx XXX xxxx]
 
+  *) Add a build target 'build_all_generated', to build all generated files
+     and only that.  This can be used to prepare everything that requires
+     things like perl for a system that lacks perl and then move everything
+     to that system and do the rest of the build there.
+     [Richard Levitte]
+
   *) Backport SSL_OP_NO_RENGOTIATION
 
      OpenSSL 1.0.2 and below had the ability to disable renegotiation using the
diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index 6f6a9ac..7e3356f 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -264,6 +264,10 @@ build_programs_nodep : $(PROGRAMS), $(SCRIPTS)
 # Kept around for backward compatibility
 build_apps build_tests : build_programs
 
+# Convenience target to prebuild all generated files, not just the mandatory
+# ones
+build_all_generated : $(GENERATED_MANDATORY) $(GENERATED)
+
 test : tests
 {- dependmagic('tests'); -} : build_programs_nodep, build_engines_nodep
         @ ! {- output_off() if $disabled{tests}; "" -}
diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index a1ef7e6..79993e3 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -241,6 +241,10 @@ build_programs_nodep: $(PROGRAMS) $(SCRIPTS)
 # Kept around for backward compatibility
 build_apps build_tests: build_programs
 
+# Convenience target to prebuild all generated files, not just the mandatory
+# ones
+build_all_generated: $(GENERATED_MANDATORY) $(GENERATED)
+
 test: tests
 {- dependmagic('tests'); -}: build_programs_nodep build_engines_nodep link-utils
 	@ : {- output_off() if $disabled{tests}; "" -}
diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index 29d157d..e86ba27 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -201,6 +201,10 @@ build_programs_nodep: $(PROGRAMS) $(SCRIPTS)
 # Kept around for backward compatibility
 build_apps build_tests: build_programs
 
+# Convenience target to prebuild all generated files, not just the mandatory
+# ones
+build_all_generated: $(GENERATED_MANDATORY) $(GENERATED)
+
 test: tests
 {- dependmagic('tests'); -}: build_programs_nodep build_engines_nodep
 	@rem {- output_off() if $disabled{tests}; "" -}

From levitte at openssl.org  Tue Feb 13 18:22:12 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 18:22:12 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518546132.009904.17743.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  3493b39d17bc064dcf0e81bceeeb3dff18cb1944 (commit)
      from  dc5facac9a4e904d32f01137ce95edd21b42ebe9 (commit)


- Log -----------------------------------------------------------------
commit 3493b39d17bc064dcf0e81bceeeb3dff18cb1944
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Aug 16 14:33:13 2017 +0100

    Copy dlls into fuzz directory
    
    This should fix the recent AppVeyor failures.
    
    [extended tests]
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4171)
    
    (cherry picked from commit 30bb02597df9a79b46bae2ddc9885a35286ed205)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/windows-makefile.tmpl | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index e86ba27..d90174a 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -236,6 +236,7 @@ libclean:
 	"$(PERL)" -e "map { m/(.*)\.dll$$/; unlink glob """$$1.*"""; } @ARGV" $(SHLIBS)
 	"$(PERL)" -e "map { m/(.*)\.dll$$/; unlink glob """apps/$$1.*"""; } @ARGV" $(SHLIBS)
 	"$(PERL)" -e "map { m/(.*)\.dll$$/; unlink glob """test/$$1.*"""; } @ARGV" $(SHLIBS)
+	"$(PERL)" -e "map { m/(.*)\.dll$$/; unlink glob """fuzz/$$1.*"""; } @ARGV" $(SHLIBS)
 	-del /Q /F $(LIBS)
 	-del /Q ossl_static.pdb
 
@@ -506,8 +507,10 @@ $objs $shlib.res$linklibs \$(EX_LIBS)
 	   \$(MT) \$(MTFLAGS) \$(MTINFLAG)$shlib$shlibext.manifest \$(MTOUTFLAG)$shlib$shlibext
 	IF EXIST apps\\$shlib$shlibext DEL /Q /F apps\\$shlib$shlibext
 	IF EXIST test\\$shlib$shlibext DEL /Q /F test\\$shlib$shlibext
+	IF EXIST fuzz\\$shlib$shlibext DEL /Q /F fuzz\\$shlib$shlibext
 	COPY $shlib$shlibext apps
 	COPY $shlib$shlibext test
+	COPY $shlib$shlibext fuzz
 EOF
  }
  sub obj2dso {

From rsalz at openssl.org  Tue Feb 13 18:22:33 2018
From: rsalz at openssl.org (Rich Salz)
Date: Tue, 13 Feb 2018 18:22:33 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518546153.669538.19194.nullmailer@dev.openssl.org>

The branch master has been updated
       via  97d37b85d4e1a218fdc61dbe0dff3e7c8ff36121 (commit)
      from  d7c402c4f2d9c311a91616fd75c24a15afabe2e5 (commit)


- Log -----------------------------------------------------------------
commit 97d37b85d4e1a218fdc61dbe0dff3e7c8ff36121
Author: Rich Salz <rsalz at openssl.org>
Date:   Tue Feb 13 13:09:02 2018 -0500

    Generate copyright year properly
    
    Output copyright year depends on any input file(s) and the script.
    This is not perfect, but better than what we had.
    Also run 'make update'
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5350)

-----------------------------------------------------------------------

Summary of changes:
 crypto/asn1/charmap.h     |  2 +-
 crypto/asn1/charmap.pl    |  4 +++-
 crypto/bn/bn_prime.h      |  2 +-
 crypto/bn/bn_prime.pl     |  4 +++-
 crypto/conf/conf_def.h    |  2 +-
 crypto/conf/keysets.pl    |  4 +++-
 crypto/objects/obj_dat.h  |  2 +-
 crypto/objects/obj_dat.pl |  8 ++++++--
 crypto/objects/obj_xref.h |  2 +-
 crypto/objects/objects.pl | 11 +++++++++--
 crypto/objects/objxref.pl |  9 ++++++++-
 fuzz/mkfuzzoids.pl        |  5 +++++
 include/openssl/obj_mac.h |  2 +-
 13 files changed, 43 insertions(+), 14 deletions(-)

diff --git a/crypto/asn1/charmap.h b/crypto/asn1/charmap.h
index 2a75925..bfccac2 100644
--- a/crypto/asn1/charmap.h
+++ b/crypto/asn1/charmap.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/asn1/charmap.pl
  *
- * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/asn1/charmap.pl b/crypto/asn1/charmap.pl
index 26ca325..e12006a 100644
--- a/crypto/asn1/charmap.pl
+++ b/crypto/asn1/charmap.pl
@@ -82,12 +82,14 @@ $arr[ord("?")] |= $PSTRING_CHAR;
 
 # Now generate the C code
 
+# Output year depends on the year of the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
 print <<EOF;
 /*
  * WARNING: do not edit!
  * Generated by crypto/asn1/charmap.pl
  *
- * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-$YEAR The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bn/bn_prime.h b/crypto/bn/bn_prime.h
index 3bee718..a64c963 100644
--- a/crypto/bn/bn_prime.h
+++ b/crypto/bn/bn_prime.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/bn/bn_prime.pl
  *
- * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bn/bn_prime.pl b/crypto/bn/bn_prime.pl
index b1e4707..72a5e1f 100644
--- a/crypto/bn/bn_prime.pl
+++ b/crypto/bn/bn_prime.pl
@@ -6,12 +6,14 @@
 # in the file LICENSE in the source distribution or at
 # https://www.openssl.org/source/license.html
 
+# Output year depends on the year of the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
 print <<"EOF";
 /*
  * WARNING: do not edit!
  * Generated by crypto/bn/bn_prime.pl
  *
- * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1998-$YEAR The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/conf/conf_def.h b/crypto/conf/conf_def.h
index da4767e..ad8894c 100644
--- a/crypto/conf/conf_def.h
+++ b/crypto/conf/conf_def.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/conf/keysets.pl
  *
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
diff --git a/crypto/conf/keysets.pl b/crypto/conf/keysets.pl
index 5af08ae..a637fdc 100644
--- a/crypto/conf/keysets.pl
+++ b/crypto/conf/keysets.pl
@@ -57,12 +57,14 @@ foreach (0 .. 255)
 	push(@V_w32,$v);
 	}
 
+# Output year depends on the year of the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
 print <<"EOF";
 /*
  * WARNING: do not edit!
  * Generated by crypto/conf/keysets.pl
  *
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-$YEAR The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
diff --git a/crypto/objects/obj_dat.h b/crypto/objects/obj_dat.h
index 7724453..61b12bf 100644
--- a/crypto/objects/obj_dat.h
+++ b/crypto/objects/obj_dat.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/obj_dat.pl
  *
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
diff --git a/crypto/objects/obj_dat.pl b/crypto/objects/obj_dat.pl
index 947ccee..19137b1 100644
--- a/crypto/objects/obj_dat.pl
+++ b/crypto/objects/obj_dat.pl
@@ -36,6 +36,10 @@ sub der_it
     return $ret;
 }
 
+# Output year depends on the year of the script and the input file.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($ARGV[0])]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
 
 # Read input, parse all #define's into OID name and value.
 # Populate %ln and %sn with long and short names (%dupln and %dupsn)
@@ -149,12 +153,12 @@ for (my $i = 0; $i < $n; $i++) {
 
 # Finally ready to generate the output.
 open(OUT, ">$ARGV[1]") || die "Can't open output file $ARGV[1], $!";
-print OUT <<'EOF';
+print OUT <<"EOF";
 /*
  * WARNING: do not edit!
  * Generated by crypto/objects/obj_dat.pl
  *
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-$YEAR The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
diff --git a/crypto/objects/obj_xref.h b/crypto/objects/obj_xref.h
index fe5c006..ebd5bf5 100644
--- a/crypto/objects/obj_xref.h
+++ b/crypto/objects/obj_xref.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by objxref.pl
  *
- * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/objects/objects.pl b/crypto/objects/objects.pl
index 6598b5e..b9e8890 100644
--- a/crypto/objects/objects.pl
+++ b/crypto/objects/objects.pl
@@ -6,6 +6,13 @@
 # in the file LICENSE in the source distribution or at
 # https://www.openssl.org/source/license.html
 
+# Output year depends on the year of the script and the input files.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($ARGV[0])]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+$iYEAR = [localtime([stat($ARGV[1])]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+
 open (NUMIN,"$ARGV[1]") || die "Can't open number file $ARGV[1]";
 $max_nid=0;
 $o=0;
@@ -124,12 +131,12 @@ foreach (sort { $a <=> $b } keys %nidn)
 close NUMOUT;
 
 open (OUT,">$ARGV[2]") || die "Can't open output file $ARGV[2]";
-print OUT <<'EOF';
+print OUT <<"EOF";
 /*
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-$YEAR The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
diff --git a/crypto/objects/objxref.pl b/crypto/objects/objxref.pl
index 53f9bd6..6a33130 100644
--- a/crypto/objects/objxref.pl
+++ b/crypto/objects/objxref.pl
@@ -14,6 +14,13 @@ my %oid_tbl;
 
 my ($mac_file, $xref_file) = @ARGV;
 
+# Output year depends on the year of the script and the input file.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($mac_file)]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+$iYEAR = [localtime([stat($xref_file)]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+
 open(IN, $mac_file) || die "Can't open $mac_file, $!\n";
 
 # Read in OID nid values for a lookup table.
@@ -71,7 +78,7 @@ print <<EOF;
  * WARNING: do not edit!
  * Generated by $pname
  *
- * Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1998-$YEAR The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/fuzz/mkfuzzoids.pl b/fuzz/mkfuzzoids.pl
index 4bf97bc..9ad96b3 100755
--- a/fuzz/mkfuzzoids.pl
+++ b/fuzz/mkfuzzoids.pl
@@ -8,6 +8,11 @@
 
 my $obj_dat_h = $ARGV[0];
 
+# Output year depends on the date on the input file and the script.
+my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
+my $iYEAR = [localtime([stat($obj_dat_h)]->[9])]->[5] + 1900;
+$YEAR = $iYEAR if $iYEAR > $YEAR;
+
 open IN, '<', $obj_dat_h
     || die "Couldn't open $obj_dat_h : $!\n";
 
diff --git a/include/openssl/obj_mac.h b/include/openssl/obj_mac.h
index b98c918..4014a49 100644
--- a/include/openssl/obj_mac.h
+++ b/include/openssl/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at

From levitte at openssl.org  Tue Feb 13 18:24:31 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 18:24:31 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518546271.299673.21881.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  a2019575614c0e9f81223348da360d058ff30883 (commit)
      from  3493b39d17bc064dcf0e81bceeeb3dff18cb1944 (commit)


- Log -----------------------------------------------------------------
commit a2019575614c0e9f81223348da360d058ff30883
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 19:18:46 2018 +0100

    Fix bug in BIO_f_linebuffer()
    
    In BIO_f_linebuffer, this would cause an error:
    
        BIO_write(bio, "1\n", 1);
    
    I.e. there's a \n just after the part of the string that we currently
    ask to get written.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5353)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/bf_lbuf.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/crypto/bio/bf_lbuf.c b/crypto/bio/bf_lbuf.c
index 3f2ac2c..58dd7ac 100644
--- a/crypto/bio/bf_lbuf.c
+++ b/crypto/bio/bf_lbuf.c
@@ -116,9 +116,10 @@ static int linebuffer_write(BIO *b, const char *in, int inl)
 
     do {
         const char *p;
+        char c;
 
-        for (p = in; p < in + inl && *p != '\n'; p++) ;
-        if (*p == '\n') {
+        for (p = in, c = '\0'; p < in + inl && (c = *p) != '\n'; p++) ;
+        if (c == '\n') {
             p++;
             foundnl = 1;
         } else

From no-reply at appveyor.com  Tue Feb 13 19:15:24 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 13 Feb 2018 19:15:24 +0000
Subject: [openssl-commits] Build failed: openssl master.15600
Message-ID: <20180213191524.1.508DB15B632D47DA@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180213/7d47f1e6/attachment.html>

From appro at openssl.org  Tue Feb 13 19:36:02 2018
From: appro at openssl.org (Andy Polyakov)
Date: Tue, 13 Feb 2018 19:36:02 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518550562.057270.25812.nullmailer@dev.openssl.org>

The branch master has been updated
       via  19308587d4a4fd2886b0ca193ccfc6756d867cb1 (commit)
      from  97d37b85d4e1a218fdc61dbe0dff3e7c8ff36121 (commit)


- Log -----------------------------------------------------------------
commit 19308587d4a4fd2886b0ca193ccfc6756d867cb1
Author: Patrick Steuer <patrick.steuer at de.ibm.com>
Date:   Wed Feb 7 18:49:29 2018 +0100

    s390x assembly pack: implement OPENSSL_rdtsc as STCKF
    
    .. if avalable. STCK has an artificial delay to ensure uniqueness
    which can result in a performance penalty if used heavily
    concurrently.
    
    Signed-off-by: Patrick Steuer <patrick.steuer at de.ibm.com>
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5284)

-----------------------------------------------------------------------

Summary of changes:
 crypto/s390xcpuid.pl | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/crypto/s390xcpuid.pl b/crypto/s390xcpuid.pl
index 5f6ffc6..b0ed9e0 100755
--- a/crypto/s390xcpuid.pl
+++ b/crypto/s390xcpuid.pl
@@ -129,6 +129,14 @@ OPENSSL_s390x_facilities:
 .type	OPENSSL_rdtsc,\@function
 .align	16
 OPENSSL_rdtsc:
+	larl	%r4,OPENSSL_s390xcap_P
+	tm	S390X_STFLE+3(%r4),0x40	# check for store-clock-fast facility
+	jz	.Lstck
+
+	.long	0xb27cf010	# stckf 16($sp)
+	lg	%r2,16($sp)
+	br	$ra
+.Lstck:
 	stck	16($sp)
 	lg	%r2,16($sp)
 	br	$ra

From levitte at openssl.org  Tue Feb 13 20:11:53 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 20:11:53 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518552713.570364.28156.nullmailer@dev.openssl.org>

The branch master has been updated
       via  9b7e82f8d939ca6894f941268b219da55f069b26 (commit)
      from  19308587d4a4fd2886b0ca193ccfc6756d867cb1 (commit)


- Log -----------------------------------------------------------------
commit 9b7e82f8d939ca6894f941268b219da55f069b26
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 19:46:10 2018 +0100

    Configure: if a file is generated, never assume it's in the source dir
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5355)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Configure b/Configure
index e3d8d70..2389e52 100755
--- a/Configure
+++ b/Configure
@@ -1929,7 +1929,7 @@ EOF
 
                 # If it isn't in the source tree, we assume it's generated
                 # in the build tree
-                if (! -f $s) {
+                if (! -f $s || $generate{$_}) {
                     $s = cleanfile($buildd, $_, $blddir);
                 }
                 # We recognise C++, C and asm files
@@ -1957,7 +1957,7 @@ EOF
 
                 # If it isn't in the source tree, we assume it's generated
                 # in the build tree
-                if (! -f $s) {
+                if (! -f $s || $generate{$_}) {
                     $s = cleanfile($buildd, $_, $blddir);
                 }
 

From levitte at openssl.org  Tue Feb 13 20:12:30 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 20:12:30 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518552750.818579.29512.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  b91891043df21928b72d8093a22a396eca58aa5b (commit)
      from  a2019575614c0e9f81223348da360d058ff30883 (commit)


- Log -----------------------------------------------------------------
commit b91891043df21928b72d8093a22a396eca58aa5b
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 19:46:10 2018 +0100

    Configure: if a file is generated, never assume it's in the source dir
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5355)
    
    (cherry picked from commit 9b7e82f8d939ca6894f941268b219da55f069b26)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Configure b/Configure
index 90a4651..bfd8b32 100755
--- a/Configure
+++ b/Configure
@@ -1757,7 +1757,7 @@ EOF
 
                 # If it isn't in the source tree, we assume it's generated
                 # in the build tree
-                if (! -f $s) {
+                if (! -f $s || $generate{$_}) {
                     $s = cleanfile($buildd, $_, $blddir);
                 }
                 # We recognise C and asm files
@@ -1783,7 +1783,7 @@ EOF
 
                 # If it isn't in the source tree, we assume it's generated
                 # in the build tree
-                if (! -f $s) {
+                if (! -f $s || $generate{$_}) {
                     $s = cleanfile($buildd, $_, $blddir);
                 }
                 # We recognise C and asm files

From levitte at openssl.org  Tue Feb 13 20:14:48 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 13 Feb 2018 20:14:48 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518552888.123544.32373.nullmailer@dev.openssl.org>

The branch master has been updated
       via  f11a023adaae8ba037f952fd72dfbcc34733c993 (commit)
      from  9b7e82f8d939ca6894f941268b219da55f069b26 (commit)


- Log -----------------------------------------------------------------
commit f11a023adaae8ba037f952fd72dfbcc34733c993
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 19:10:22 2018 +0100

    VMS: for testutil, make sure to use BIO_f_linebuffer
    
    Without that, output comes one character per line.  It's the same
    issue as has been observed before, this happens when using write()
    on a record oriented stream (possibly unbuffered too).
    
    This also uncovered a bug in BIO_f_linebuffer, where this would cause
    an error:
    
        BIO_write(bio, "1\n", 1);
    
    I.e. there's a \n just after the part of the string that we currently
    ask to get written.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5352)

-----------------------------------------------------------------------

Summary of changes:
 crypto/bio/bf_lbuf.c         | 5 +++--
 test/testutil/basic_output.c | 6 +++++-
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/crypto/bio/bf_lbuf.c b/crypto/bio/bf_lbuf.c
index 812ed3f..2a4d1e6 100644
--- a/crypto/bio/bf_lbuf.c
+++ b/crypto/bio/bf_lbuf.c
@@ -120,9 +120,10 @@ static int linebuffer_write(BIO *b, const char *in, int inl)
 
     do {
         const char *p;
+        char c;
 
-        for (p = in; p < in + inl && *p != '\n'; p++) ;
-        if (*p == '\n') {
+        for (p = in, c = '\0'; p < in + inl && (c = *p) != '\n'; p++) ;
+        if (c == '\n') {
             p++;
             foundnl = 1;
         } else
diff --git a/test/testutil/basic_output.c b/test/testutil/basic_output.c
index 6a06b36..1fb12c8 100644
--- a/test/testutil/basic_output.c
+++ b/test/testutil/basic_output.c
@@ -21,6 +21,10 @@ void test_open_streams(void)
 {
     bio_out = BIO_new_fp(stdout, BIO_NOCLOSE | BIO_FP_TEXT);
     bio_err = BIO_new_fp(stderr, BIO_NOCLOSE | BIO_FP_TEXT);
+#ifdef __VMS
+    bio_out = BIO_push(BIO_new(BIO_f_linebuffer()), bio_out);
+    bio_err = BIO_push(BIO_new(BIO_f_linebuffer()), bio_err);
+#endif
     bio_err = BIO_push(BIO_new(BIO_f_tap()), bio_err);
 
     OPENSSL_assert(bio_out != NULL);
@@ -29,7 +33,7 @@ void test_open_streams(void)
 
 void test_close_streams(void)
 {
-    BIO_free(bio_out);
+    BIO_free_all(bio_out);
     BIO_free_all(bio_err);
 }
 

From kurt at openssl.org  Tue Feb 13 20:15:35 2018
From: kurt at openssl.org (Kurt Roeckx)
Date: Tue, 13 Feb 2018 20:15:35 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518552935.171110.1480.nullmailer@dev.openssl.org>

The branch master has been updated
       via  72960279562e9af53264155a46b4a0b6a40f9590 (commit)
      from  f11a023adaae8ba037f952fd72dfbcc34733c993 (commit)


- Log -----------------------------------------------------------------
commit 72960279562e9af53264155a46b4a0b6a40f9590
Author: Kurt Roeckx <kurt at roeckx.be>
Date:   Sat Feb 10 00:30:29 2018 +0100

    Use both getrandom() and /dev/urandom by default on Linux.
    
    getrandom() is now used on Linux by default when using Linux >= 3.17
    and glibc >= 2.25
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    GH: #5314

-----------------------------------------------------------------------

Summary of changes:
 crypto/rand/rand_unix.c | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/crypto/rand/rand_unix.c b/crypto/rand/rand_unix.c
index f5a59cb..bfd7ef0 100644
--- a/crypto/rand/rand_unix.c
+++ b/crypto/rand/rand_unix.c
@@ -14,10 +14,6 @@
 #include "rand_lcl.h"
 #include <stdio.h>
 
-#ifdef OPENSSL_RAND_SEED_GETRANDOM
-# include <linux/random.h>
-#endif
-
 #if (defined(OPENSSL_SYS_VXWORKS) || defined(OPENSSL_SYS_UEFI)) && \
         !defined(OPENSSL_RAND_SEED_NONE)
 # error "UEFI and VXWorks only support seeding NONE"
@@ -123,11 +119,19 @@ size_t RAND_POOL_acquire_entropy(RAND_POOL *pool)
 #  endif
 
 #  if defined(OPENSSL_RAND_SEED_OS)
-#   if defined(DEVRANDOM)
-#    define OPENSSL_RAND_SEED_DEVRANDOM
-#   else
+#   if !defined(DEVRANDOM)
 #    error "OS seeding requires DEVRANDOM to be configured"
 #   endif
+#   define OPENSSL_RAND_SEED_DEVRANDOM
+#   if defined(__GLIBC__) && defined(__GLIBC_PREREQ)
+#    if __GLIBC_PREREQ(2, 25)
+#     define OPENSSL_RAND_SEED_GETRANDOM
+#    endif
+#   endif
+#  endif
+
+#  ifdef OPENSSL_RAND_SEED_GETRANDOM
+#   include <sys/random.h>
 #  endif
 
 #  if defined(OPENSSL_RAND_SEED_LIBRANDOM)

From no-reply at appveyor.com  Tue Feb 13 22:10:47 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 13 Feb 2018 22:10:47 +0000
Subject: [openssl-commits] Build failed: openssl master.15615
Message-ID: <20180213221047.1.79B3E7E4266F1322@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180213/b002b664/attachment.html>

From no-reply at appveyor.com  Wed Feb 14 04:15:52 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 14 Feb 2018 04:15:52 +0000
Subject: [openssl-commits] Build failed: openssl master.15626
Message-ID: <20180214041552.1.41DD345F0CE6C48A@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/543744ad/attachment.html>

From viktor at openssl.org  Wed Feb 14 04:28:21 2018
From: viktor at openssl.org (Viktor Dukhovni)
Date: Wed, 14 Feb 2018 04:28:21 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518582501.008237.4533.nullmailer@dev.openssl.org>

The branch master has been updated
       via  babab8e7c9060cd4e8e423a783853503982a5d27 (commit)
      from  72960279562e9af53264155a46b4a0b6a40f9590 (commit)


- Log -----------------------------------------------------------------
commit babab8e7c9060cd4e8e423a783853503982a5d27
Author: Viktor Dukhovni <openssl-users at dukhovni.org>
Date:   Tue Feb 13 22:43:15 2018 -0500

    Avoid fragile aliasing of SHA224/384 update/final
    
    This is purported to save a few cycles, but makes the code less
    obvious and more brittle, and in fact breaks on platforms where for
    ABI continuity reasons there is a SHA2 implementation in libc, and
    so EVP needs to call those to avoid conflicts.
    
    A sufficiently good optimizer could simply generate the same entry
    points for:
    
            foo(...) { ... }
        and
            bar(...) { return foo(...); }
    
    but, even without that, the different is negligible, with the
    "winner" varying from run to run (openssl speed -evp sha384):
    
        Old:
        type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 16384 bytes
        sha384           28864.28k   117362.62k   266469.21k   483258.03k   635144.87k 649123.16k
    
        New:
        type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 16384 bytes
        sha384           30055.18k   120725.98k   272057.26k   482847.40k   634585.09k 650308.27k
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/m_sha1.c | 33 ++++++++++++++++++++++++---------
 1 file changed, 24 insertions(+), 9 deletions(-)

diff --git a/crypto/evp/m_sha1.c b/crypto/evp/m_sha1.c
index d73e412..ac52417 100644
--- a/crypto/evp/m_sha1.c
+++ b/crypto/evp/m_sha1.c
@@ -116,16 +116,21 @@ static int init224(EVP_MD_CTX *ctx)
     return SHA224_Init(EVP_MD_CTX_md_data(ctx));
 }
 
+static int update224(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA224_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final224(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA224_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
 static int init256(EVP_MD_CTX *ctx)
 {
     return SHA256_Init(EVP_MD_CTX_md_data(ctx));
 }
 
-/*
- * Even though there're separate SHA224_[Update|Final], we call
- * SHA256 functions even in SHA224 context. This is what happens
- * there anyway, so we can spare few CPU cycles:-)
- */
 static int update256(EVP_MD_CTX *ctx, const void *data, size_t count)
 {
     return SHA256_Update(EVP_MD_CTX_md_data(ctx), data, count);
@@ -142,8 +147,8 @@ static const EVP_MD sha224_md = {
     SHA224_DIGEST_LENGTH,
     EVP_MD_FLAG_DIGALGID_ABSENT,
     init224,
-    update256,
-    final256,
+    update224,
+    final224,
     NULL,
     NULL,
     SHA256_CBLOCK,
@@ -189,6 +194,16 @@ static int init384(EVP_MD_CTX *ctx)
     return SHA384_Init(EVP_MD_CTX_md_data(ctx));
 }
 
+static int update384(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA384_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final384(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA384_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
 static int init512(EVP_MD_CTX *ctx)
 {
     return SHA512_Init(EVP_MD_CTX_md_data(ctx));
@@ -249,8 +264,8 @@ static const EVP_MD sha384_md = {
     SHA384_DIGEST_LENGTH,
     EVP_MD_FLAG_DIGALGID_ABSENT,
     init384,
-    update512,
-    final512,
+    update384,
+    final384,
     NULL,
     NULL,
     SHA512_CBLOCK,

From viktor at openssl.org  Wed Feb 14 04:29:19 2018
From: viktor at openssl.org (Viktor Dukhovni)
Date: Wed, 14 Feb 2018 04:29:19 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518582559.608636.6334.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  144724c75584054329a9d6bb7711cec527fbf523 (commit)
      from  b91891043df21928b72d8093a22a396eca58aa5b (commit)


- Log -----------------------------------------------------------------
commit 144724c75584054329a9d6bb7711cec527fbf523
Author: Viktor Dukhovni <openssl-users at dukhovni.org>
Date:   Tue Feb 13 22:43:15 2018 -0500

    Avoid fragile aliasing of SHA224/384 update/final
    
    This is purported to save a few cycles, but makes the code less
    obvious and more brittle, and in fact breaks on platforms where for
    ABI continuity reasons there is a SHA2 implementation in libc, and
    so EVP needs to call those to avoid conflicts.
    
    A sufficiently good optimizer could simply generate the same entry
    points for:
    
            foo(...) { ... }
        and
            bar(...) { return foo(...); }
    
    but, even without that, the different is negligible, with the
    "winner" varying from run to run (openssl speed -evp sha384):
    
        Old:
        type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 16384 bytes
        sha384           28864.28k   117362.62k   266469.21k   483258.03k   635144.87k 649123.16k
    
        New:
        type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 16384 bytes
        sha384           30055.18k   120725.98k   272057.26k   482847.40k   634585.09k 650308.27k
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/m_sha1.c | 33 ++++++++++++++++++++++++---------
 1 file changed, 24 insertions(+), 9 deletions(-)

diff --git a/crypto/evp/m_sha1.c b/crypto/evp/m_sha1.c
index 8f30077..ac0ead3 100644
--- a/crypto/evp/m_sha1.c
+++ b/crypto/evp/m_sha1.c
@@ -115,16 +115,21 @@ static int init224(EVP_MD_CTX *ctx)
     return SHA224_Init(EVP_MD_CTX_md_data(ctx));
 }
 
+static int update224(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA224_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final224(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA224_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
 static int init256(EVP_MD_CTX *ctx)
 {
     return SHA256_Init(EVP_MD_CTX_md_data(ctx));
 }
 
-/*
- * Even though there're separate SHA224_[Update|Final], we call
- * SHA256 functions even in SHA224 context. This is what happens
- * there anyway, so we can spare few CPU cycles:-)
- */
 static int update256(EVP_MD_CTX *ctx, const void *data, size_t count)
 {
     return SHA256_Update(EVP_MD_CTX_md_data(ctx), data, count);
@@ -141,8 +146,8 @@ static const EVP_MD sha224_md = {
     SHA224_DIGEST_LENGTH,
     EVP_MD_FLAG_DIGALGID_ABSENT,
     init224,
-    update256,
-    final256,
+    update224,
+    final224,
     NULL,
     NULL,
     SHA256_CBLOCK,
@@ -178,6 +183,16 @@ static int init384(EVP_MD_CTX *ctx)
     return SHA384_Init(EVP_MD_CTX_md_data(ctx));
 }
 
+static int update384(EVP_MD_CTX *ctx, const void *data, size_t count)
+{
+    return SHA384_Update(EVP_MD_CTX_md_data(ctx), data, count);
+}
+
+static int final384(EVP_MD_CTX *ctx, unsigned char *md)
+{
+    return SHA384_Final(md, EVP_MD_CTX_md_data(ctx));
+}
+
 static int init512(EVP_MD_CTX *ctx)
 {
     return SHA512_Init(EVP_MD_CTX_md_data(ctx));
@@ -200,8 +215,8 @@ static const EVP_MD sha384_md = {
     SHA384_DIGEST_LENGTH,
     EVP_MD_FLAG_DIGALGID_ABSENT,
     init384,
-    update512,
-    final512,
+    update384,
+    final384,
     NULL,
     NULL,
     SHA512_CBLOCK,

From no-reply at appveyor.com  Wed Feb 14 08:38:32 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 14 Feb 2018 08:38:32 +0000
Subject: [openssl-commits] Build failed: openssl master.15632
Message-ID: <20180214083832.1.EAFF958EAB2EFD08@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/009a27f9/attachment-0001.html>

From no-reply at appveyor.com  Wed Feb 14 09:47:28 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 14 Feb 2018 09:47:28 +0000
Subject: [openssl-commits] Build completed: openssl master.15633
Message-ID: <20180214094728.1.82E3B58D04D3ED62@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/5f79c834/attachment.html>

From builds at travis-ci.org  Wed Feb 14 10:12:10 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:12:10 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16261 (master - 7e70213)
In-Reply-To: <openssl/openssl+340412203+passed@travis-ci.org>
Message-ID: <5a816d801aede_43fb2478f5a3c78971a@22a9d706-ebb7-4d76-9da7-63235c8a106e.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16261
Status: Passed

Duration: 28 minutes and 9 seconds
Commit: 7e70213 (master)
Author: Matt Caswell
Message: Don't overestimate the ticket age

On the client we calculate the age of the ticket in seconds but the server
may work in ms. Due to rounding errors we could overestimate the age by up
to 1s. It is better to underestimate it. Otherwise, if the RTT is very
short, when the server calculates the age reported by the client it could
be bigger than the age calculated on the server - which should never happen.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5306)

View the changeset: https://github.com/openssl/openssl/compare/c684a2d34d0d...7e70213fe3c7

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/340412203?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/eb1cc647/attachment.html>

From builds at travis-ci.org  Wed Feb 14 10:12:40 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:12:40 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16262 (master - 1d0c08b)
In-Reply-To: <openssl/openssl+340413676+passed@travis-ci.org>
Message-ID: <5a8172daba5e9_43fbf1d649508469198@377c0f0d-db10-4d7e-a3eb-6726e48d36e4.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16262
Status: Passed

Duration: 40 minutes and 29 seconds
Commit: 1d0c08b (master)
Author: Matt Caswell
Message: The function ssl_get_min_max_version() can fail

We should always check the return code.

This fixes a coverity issue.

Reviewed-by: Tim Hudson <tjh at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5308)

View the changeset: https://github.com/openssl/openssl/compare/7e70213fe3c7...1d0c08b4963f

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/340413676?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/020d27f6/attachment-0001.html>

From builds at travis-ci.org  Wed Feb 14 10:12:51 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:12:51 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16334 (master - babab8e)
In-Reply-To: <openssl/openssl+341271791+passed@travis-ci.org>
Message-ID: <5a83c5a7ca72b_43f99652f54fc43499a@3ac35fc6-5091-4529-be93-cb9830d331b1.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16334
Status: Passed

Duration: 35 minutes and 11 seconds
Commit: babab8e (master)
Author: Viktor Dukhovni
Message: Avoid fragile aliasing of SHA224/384 update/final

This is purported to save a few cycles, but makes the code less
obvious and more brittle, and in fact breaks on platforms where for
ABI continuity reasons there is a SHA2 implementation in libc, and
so EVP needs to call those to avoid conflicts.

A sufficiently good optimizer could simply generate the same entry
points for:

        foo(...) { ... }
    and
        bar(...) { return foo(...); }

but, even without that, the different is negligible, with the
"winner" varying from run to run (openssl speed -evp sha384):

    Old:
    type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 16384 bytes
    sha384           28864.28k   117362.62k   266469.21k   483258.03k   635144.87k 649123.16k

    New:
    type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes 16384 bytes
    sha384           30055.18k   120725.98k   272057.26k   482847.40k   634585.09k 650308.27k

Reviewed-by: Rich Salz <rsalz at openssl.org>

View the changeset: https://github.com/openssl/openssl/compare/72960279562e...babab8e7c906

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341271791?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/41a77957/attachment.html>

From builds at travis-ci.org  Wed Feb 14 10:13:52 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:13:52 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16326 (master - 7296027)
In-Reply-To: <openssl/openssl+341118266+errored@travis-ci.org>
Message-ID: <5a835f03e5a24_43f982eda9afc1747158@585e993b-983a-4e3f-b270-9220289d668f.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16326
Status: Errored

Duration: 42 minutes and 55 seconds
Commit: 7296027 (master)
Author: Kurt Roeckx
Message: Use both getrandom() and /dev/urandom by default on Linux.

getrandom() is now used on Linux by default when using Linux >= 3.17
and glibc >= 2.25

Reviewed-by: Rich Salz <rsalz at openssl.org>
GH: #5314

View the changeset: https://github.com/openssl/openssl/compare/f11a023adaae...72960279562e

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341118266?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/21663c48/attachment.html>

From builds at travis-ci.org  Wed Feb 14 10:14:03 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:14:03 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16268 (master - ada2259)
In-Reply-To: <openssl/openssl+340502993+errored@travis-ci.org>
Message-ID: <5a81a954605b3_43fbf1d64cfc873113c@377c0f0d-db10-4d7e-a3eb-6726e48d36e4.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16268
Status: Errored

Duration: 31 minutes and 42 seconds
Commit: ada2259 (master)
Author: Bernd Edlinger
Message: Remove code that prints "<SPACES/NULS>" in hexdumps
when the data block ends with SPACEs or NULs.

The problem is, you can't see if the data ends
with SPACE or NUL or a combination of both.

This can happen for instance with
openssl rsautl -decrypt -hexdump

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5328)

View the changeset: https://github.com/openssl/openssl/compare/af0fcf7b4668...ada22597ce89

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/340502993?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/3f41ae3b/attachment-0001.html>

From builds at travis-ci.org  Wed Feb 14 10:14:23 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:14:23 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16297 (OpenSSL_1_1_1-pre1
	- 6aa85b5)
In-Reply-To: <openssl/openssl+340959110+passed@travis-ci.org>
Message-ID: <5a82fc43bb5d4_43f982ed3f79c10739dd@585e993b-983a-4e3f-b270-9220289d668f.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16297
Status: Passed

Duration: 43 minutes and 51 seconds
Commit: 6aa85b5 (OpenSSL_1_1_1-pre1)
Author: Matt Caswell
Message: Prepare for 1.1.1-pre1 release

Reviewed-by: Richard Levitte <levitte at openssl.org>

View the changeset: https://github.com/openssl/openssl/compare/c4aed7e2cf6d^...6aa85b5b6114

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/340959110?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/afc8deb8/attachment.html>

From builds at travis-ci.org  Wed Feb 14 10:14:28 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:14:28 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16271 (master - 034d55c)
In-Reply-To: <openssl/openssl+340520780+passed@travis-ci.org>
Message-ID: <5a81b5aa56968_43fb271255dec138956e@22a9d706-ebb7-4d76-9da7-63235c8a106e.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16271
Status: Passed

Duration: 34 minutes and 35 seconds
Commit: 034d55c (master)
Author: Matt Caswell
Message: Some minor tweaks following TLSv1.3 becoming default

Fix a typo in INSTALL and update the link in CHANGES

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5329)

View the changeset: https://github.com/openssl/openssl/compare/ada22597ce89...034d55cd5c82

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/340520780?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/064dbe95/attachment.html>

From builds at travis-ci.org  Wed Feb 14 10:14:16 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 10:14:16 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16321 (master - 1930858)
In-Reply-To: <openssl/openssl+341102778+errored@travis-ci.org>
Message-ID: <5a834dbf95e4e_43f982ec3865016327af@585e993b-983a-4e3f-b270-9220289d668f.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16321
Status: Errored

Duration: 32 minutes and 58 seconds
Commit: 1930858 (master)
Author: Patrick Steuer
Message: s390x assembly pack: implement OPENSSL_rdtsc as STCKF

.. if avalable. STCK has an artificial delay to ensure uniqueness
which can result in a performance penalty if used heavily
concurrently.

Signed-off-by: Patrick Steuer <patrick.steuer at de.ibm.com>

Reviewed-by: Andy Polyakov <appro at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5284)

View the changeset: https://github.com/openssl/openssl/compare/97d37b85d4e1...19308587d4a4

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341102778?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/184fe71a/attachment-0001.html>

From no-reply at appveyor.com  Wed Feb 14 10:25:53 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 14 Feb 2018 10:25:53 +0000
Subject: [openssl-commits] Build failed: openssl master.15635
Message-ID: <20180214102553.1.E762D1CABAF77F44@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/62bace67/attachment.html>

From levitte at openssl.org  Wed Feb 14 11:30:16 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 14 Feb 2018 11:30:16 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518607816.315044.5932.nullmailer@dev.openssl.org>

The branch master has been updated
       via  ab90718953eabbd8fa519895387d065c94418f5c (commit)
      from  babab8e7c9060cd4e8e423a783853503982a5d27 (commit)


- Log -----------------------------------------------------------------
commit ab90718953eabbd8fa519895387d065c94418f5c
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 14 10:34:12 2018 +0100

    VMS: simplify config targets
    
    All VMS config targets were literally copies of each other, only
    differing in what argument the parameter seeking function vms_info()
    received (the pointer size).
    
    This could be hugely simplified by letting vms_info() detect what
    pointer size was desired from the desired config target name instead.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5364)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/10-main.conf | 157 +++++++++++++++++---------------------------
 1 file changed, 59 insertions(+), 98 deletions(-)

diff --git a/Configurations/10-main.conf b/Configurations/10-main.conf
index b17a780..2c14913 100644
--- a/Configurations/10-main.conf
+++ b/Configurations/10-main.conf
@@ -116,13 +116,19 @@ sub vc_wince_info {
 # Helper functions for the VMS configs
 my $vms_info = {};
 sub vms_info {
-    unless (%$vms_info) {
-        my $pointer_size = shift;
-        my $pointer_size_str = $pointer_size == 0 ? "" : "$pointer_size";
+    my $pointer_size_str = $config{target} =~ m|-p(\d+)$| ? $1 : "";
+
+    # For the case where Configure iterate through all config targets, such
+    # as when listing them and their details, we reset info if the pointer
+    # size changes.
+    if (%$vms_info && $vms_info->{pointer_size} ne $pointer_size_str) {
+        $vms_info = {};
+    }
 
+    unless (%$vms_info) {
         $vms_info->{disable_warns} = [ ];
         $vms_info->{pointer_size} = $pointer_size_str;
-        if ($pointer_size == 64) {
+        if ($pointer_size_str eq "64") {
             `PIPE CC /NOCROSS_REFERENCE /NOLIST /NOOBJECT /WARNINGS = DISABLE = ( MAYLOSEDATA3, EMPTYFILE ) NL: 2> NL:`;
             if ($? == 0) {
                 push @{$vms_info->{disable_warns}}, "MAYLOSEDATA3";
@@ -1834,14 +1840,28 @@ my %targets = (
     },
 
     ##### VMS
+    # Most things happen in vms-generic.
+    # Note that vms_info extracts the pointer size from the end of
+    # the target name, and will assume that anything matching /-p\d+$/
+    # indicates the pointer size setting for the desired target.
     "vms-generic" => {
         inherit_from     => [ "BASE_VMS" ],
         template         => 1,
         cc               => "CC/DECC",
-        cflags           => picker(default => "/STANDARD=(ISOC94,RELAXED)/NOLIST/PREFIX=ALL",
-                                   debug   => "/NOOPTIMIZE/DEBUG",
-                                   release => "/OPTIMIZE/NODEBUG"),
-        defines          => add("OPENSSL_USE_NODELETE"),
+        cflags           =>
+            combine(picker(default => "/STANDARD=(ISOC94,RELAXED)/NOLIST/PREFIX=ALL",
+                           debug   => "/NOOPTIMIZE/DEBUG",
+                           release => "/OPTIMIZE/NODEBUG"),
+                    sub { my @warnings =
+                              @{vms_info()->{disable_warns}};
+                          @warnings
+                              ? "/WARNINGS=DISABLE=(".join(",", at warnings).")" : (); }),
+        defines          =>
+            add("OPENSSL_USE_NODELETE",
+                sub {
+                    return vms_info()->{def_zlib}
+                        ? "LIBZ=\"\"\"".vms_info()->{def_zlib}."\"\"\"" : ();
+                }),
         lflags           => picker(default => "/MAP='F\$PARSE(\".MAP\",\"\$\@\")'",
                                    debug   => "/DEBUG/TRACEBACK",
                                    release => "/NODEBUG/NOTRACEBACK"),
@@ -1849,6 +1869,7 @@ my %targets = (
         # no_inst_lib_cflags is used instead of lib_cflags by descrip.mms.tmpl
         # for object files belonging to selected internal libraries
         no_inst_lib_cflags => "",
+        ex_libs          => add(sub { return vms_info()->{zlib} || (); }),
         shared_target    => "vms-shared",
         dso_scheme       => "vms",
         thread_scheme    => "pthreads",
@@ -1857,109 +1878,49 @@ my %targets = (
         apps_init_src    => "vms_decc_init.c",
     },
 
+    # From HELP CC/POINTER_SIZE:
+    #
+    # ----------
+    # LONG[=ARGV] The compiler assumes 64-bit pointers. If the ARGV option to
+    #             LONG or 64 is present, the main argument argv will be an
+    #             array of long pointers instead of an array of short pointers.
+    #
+    # 64[=ARGV]   Same as LONG.
+    # ----------
+    #
+    # We don't want the hassle of dealing with 32-bit pointers with argv, so
+    # we force it to have 64-bit pointers, see the added cflags in the -p64
+    # config targets below.
+
     "vms-alpha" => {
         inherit_from     => [ "vms-generic" ],
-        cflags           => add(sub { my @warnings =
-                                          @{vms_info(0)->{disable_warns}};
-                                      @warnings
-                                          ? "/WARNINGS=DISABLE=(".join(",", at warnings).")" : (); }),
-        defines          =>
-                    add(sub {
-                            return vms_info(0)->{def_zlib}
-                                ? "LIBZ=\"\"\"".vms_info(0)->{def_zlib}."\"\"\"" : ();
-                            }),
-        ex_libs          => add(sub { return vms_info(0)->{zlib} || (); }),
-        pointer_size     => sub { return vms_info(0)->{pointer_size} },
-        #as               => "???",
-        #debug_aflags     => "/NOOPTIMIZE/DEBUG",
-        #release_aflags   => "/OPTIMIZE/NODEBUG",
-        bn_opts          => "SIXTY_FOUR_BIT RC4_INT",
+        bn_ops           => "SIXTY_FOUR_BIT RC4_INT",
+        pointer_size     => "",
     },
     "vms-alpha-p32" => {
-        inherit_from     => [ "vms-generic" ],
-        cflags           =>
-            add("/POINTER_SIZE=32",
-                sub { my @warnings =
-                          @{vms_info(32)->{disable_warns}};
-                      @warnings
-                          ? "/WARNINGS=DISABLE=(".join(",", at warnings).")" : ();
-                } ),
-        defines          =>
-                    add(sub {
-                            return vms_info(32)->{def_zlib}
-                                ? "LIBZ=\"\"\"".vms_info(32)->{def_zlib}."\"\"\"" : ();
-                            }),
-        ex_libs          => add(sub { return vms_info(32)->{zlib} || (); }),
-        pointer_size     => sub { return vms_info(32)->{pointer_size} },
+        inherit_from     => [ "vms-alpha" ],
+        cflags           => add("/POINTER_SIZE=32"),
+        pointer_size     => "32",
     },
     "vms-alpha-p64" => {
-        inherit_from     => [ "vms-generic" ],
-        cflags           =>
-            add("/POINTER_SIZE=64=ARGV",
-                sub { my @warnings =
-                          @{vms_info(64)->{disable_warns}};
-                      @warnings
-                          ? "/WARNINGS=DISABLE=(".join(",", at warnings).")" : ();
-                } ),
-        defines          =>
-                    add(sub {
-                            return vms_info(64)->{def_zlib}
-                                ? "LIBZ=\"\"\"".vms_info(64)->{def_zlib}."\"\"\"" : ();
-                            }),
-        ex_libs          => add(sub { return vms_info(64)->{zlib} || (); }),
-        pointer_size     => sub { return vms_info(64)->{pointer_size} },
+        inherit_from     => [ "vms-alpha" ],
+        cflags           => add("/POINTER_SIZE=64=ARGV"),
+        pointer_size     => "64",
     },
     "vms-ia64" => {
         inherit_from     => [ "vms-generic" ],
-        cflags           => add(sub { my @warnings =
-                                          @{vms_info(0)->{disable_warns}};
-                                      @warnings
-                                          ? "/WARNINGS=DISABLE=(".join(",", at warnings).")" : (); }),
-        defines          =>
-                    add(sub {
-                            return vms_info(0)->{def_zlib}
-                                ? "LIBZ=\"\"\"".vms_info(0)->{def_zlib}."\"\"\"" : ();
-                            }),
-        ex_libs          => add(sub { return vms_info(0)->{zlib} || (); }),
-        pointer_size     => sub { return vms_info(0)->{pointer_size} },
-        #as               => "I4S",
-        #debug_aflags     => "/NOOPTIMIZE/DEBUG",
-        #release_aflags   => "/OPTIMIZE/NODEBUG",
-        bn_opts          => "SIXTY_FOUR_BIT RC4_INT",
+        bn_ops           => "SIXTY_FOUR_BIT RC4_INT",
+        pointer_size     => "",
     },
     "vms-ia64-p32" => {
-        inherit_from     => [ "vms-generic" ],
-        cflags           =>
-            add("/POINTER_SIZE=32",
-                sub { my @warnings =
-                          @{vms_info(32)->{disable_warns}};
-                      @warnings
-                          ? "/WARNINGS=DISABLE=(".join(",", at warnings).")" : ();
-                } ),
-        defines          =>
-                    add(sub {
-                            return vms_info(32)->{def_zlib}
-                                ? "LIBZ=\"\"\"".vms_info(32)->{def_zlib}."\"\"\"" : ();
-                            }),
-        ex_libs          => add(sub { return vms_info(32)->{zlib} || (); }),
-        pointer_size     => sub { return vms_info(32)->{pointer_size} },
+        inherit_from     => [ "vms-ia64" ],
+        cflags           => add("/POINTER_SIZE=32"),
+        pointer_size     => "32",
     },
     "vms-ia64-p64" => {
-        inherit_from     => [ "vms-generic" ],
-        cflags           =>
-            add("/POINTER_SIZE=64=ARGV",
-                sub { my @warnings =
-                          @{vms_info(64)->{disable_warns}};
-                      @warnings
-                          ? "/WARNINGS=DISABLE=(".join(",", at warnings).")" : ();
-                } ),
-        defines          =>
-                    add(sub {
-                            return vms_info(64)->{def_zlib}
-                                ? "LIBZ=\"\"\"".vms_info(64)->{def_zlib}."\"\"\"" : ();
-                            }),
-        ex_libs          => add(sub { return vms_info(64)->{zlib} || (); }),
-        pointer_size     => sub { return vms_info(64)->{pointer_size} },
+        inherit_from     => [ "vms-ia64" ],
+        cflags           => add("/POINTER_SIZE=64=ARGV"),
+        pointer_size     => "64",
     },
 
 );

From levitte at openssl.org  Wed Feb 14 11:37:26 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 14 Feb 2018 11:37:26 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518608246.983912.7454.nullmailer@dev.openssl.org>

The branch master has been updated
       via  d8e2b4f9bf2e387ee533723a2d668fe7254b025c (commit)
      from  ab90718953eabbd8fa519895387d065c94418f5c (commit)


- Log -----------------------------------------------------------------
commit d8e2b4f9bf2e387ee533723a2d668fe7254b025c
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 20:04:35 2018 +0100

    Build files: parametrize cpp
    
    Instead of having the knowledge of the exact flags to run the C
    preprocessor only and have it output on standard output in the deeper
    recesses of the build file template, make it a config parameter, or
    rely on build CPP in value ('$(CC) -E' on Unix).
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/5356)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/10-main.conf          | 2 ++
 Configurations/descrip.mms.tmpl      | 1 +
 Configurations/unix-Makefile.tmpl    | 4 ++--
 Configurations/windows-makefile.tmpl | 5 +++--
 4 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/Configurations/10-main.conf b/Configurations/10-main.conf
index 2c14913..f66e35b 100644
--- a/Configurations/10-main.conf
+++ b/Configurations/10-main.conf
@@ -1308,6 +1308,7 @@ my %targets = (
         inherit_from     => [ "BASE_Windows" ],
         template         => 1,
         cc               => "cl",
+        cpp              => '$(CC) /EP /C',
         cflags           => "-W3 -wd4090 -Gs0 -GF -Gy -nologo",
         defines          => add("OPENSSL_SYS_WIN32", "WIN32_LEAN_AND_MEAN",
                                 "L_ENDIAN", "_CRT_SECURE_NO_DEPRECATE",
@@ -1848,6 +1849,7 @@ my %targets = (
         inherit_from     => [ "BASE_VMS" ],
         template         => 1,
         cc               => "CC/DECC",
+        cpp              => '$(CC)/PREPROCESS_ONLY=SYS$OUTPUT:',
         cflags           =>
             combine(picker(default => "/STANDARD=(ISOC94,RELAXED)/NOLIST/PREFIX=ALL",
                            debug   => "/NOOPTIMIZE/DEBUG",
diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index e3b1700..84008ee 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -172,6 +172,7 @@ OPENSSLDIR_C={- $osslprefix -}DATAROOT:[000000]
 ENGINESDIR_C={- $osslprefix -}ENGINES{- $sover_dirname.$target{pointer_size} -}:
 
 CC= {- $config{cc} -}
+CPP= {- $config{cpp} -}
 DEFINES={- our $defines = join(",",
                                '__dummy', # To make comma processing easier
                                @{$config{defines}}) -}
diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index 3c80fec..dad868b 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -857,7 +857,7 @@ EOF
 $target: $args{generator}->[0] $deps
 	( trap "rm -f \$@.*" INT 0; \\
 	  $generator \$@.S; \\
-	  \$(CC) $incs \$(CFLAGS) \$(CPPFLAGS) -E \$@.S | \\
+	  \$(CPP) $incs $cppflags \$@.S | \\
 	  \$(PERL) -ne '/^#(line)?\\s*[0-9]+/ or print' > \$@.i && \\
 	  mv -f \$@.i \$@ )
 EOF
@@ -870,7 +870,7 @@ EOF
           }
           return <<"EOF";
 $args{src}: $args{generator}->[0] $deps
-	\$(CC) $incs \$(CFLAGS) \$(CPPFLAGS) -E $args{generator}->[0] | \\
+	\$(CPP) $incs $cppflags $args{generator}->[0] | \\
 	\$(PERL) -ne '/^#(line)?\\s*[0-9]+/ or print' > \$@
 EOF
       }
diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index 86bc086..ab6a00d 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -160,6 +160,7 @@ ENGINESDIR=$(ENGINESDIR_dev)$(ENGINESDIR_dir)
 !ENDIF
 
 CC={- $config{cc} -}
+CPP={- $config{cpp} -}
 CPPFLAGS={- our $cppflags = join(" ",
                                  (map { "-D".$_} @{$config{defines}}),
                                  (map { " /I ".$_} @{$config{includes}}),
@@ -441,7 +442,7 @@ EOF
 $target: "$args{generator}->[0]" $deps
 	set ASM=\$(AS)
 	$generator \$@.S
-	\$(CC) $incs \$(CFLAGS) \$(CPPFLAGS) /EP /C \$@.S > \$@.i && move /Y \$@.i \$@
+	\$(CPP) $cppflags \$@.S > \$@.i && move /Y \$@.i \$@
         del /Q \$@.S
 EOF
               }
@@ -454,7 +455,7 @@ EOF
           }
           return <<"EOF";
 $target: "$args{generator}->[0]" $deps
-	\$(CC) $incs \$(CFLAGS) \$(CPPFLAGS) /EP /C "$args{generator}->[0]" > \$@.i && move /Y \$@.i \$@
+	\$(CPP) $incs $cppflags "$args{generator}->[0]" > \$@.i && move /Y \$@.i \$@
 EOF
       }
   }

From builds at travis-ci.org  Wed Feb 14 12:30:06 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 12:30:06 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16350 (master - d8e2b4f)
In-Reply-To: <openssl/openssl+341392633+errored@travis-ci.org>
Message-ID: <5a842c61b0f95_43fb759b5840c86791f@fc5d5a28-b18a-4646-a3f9-cb039adf816b.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16350
Status: Errored

Duration: 31 minutes and 38 seconds
Commit: d8e2b4f (master)
Author: Richard Levitte
Message: Build files: parametrize cpp

Instead of having the knowledge of the exact flags to run the C
preprocessor only and have it output on standard output in the deeper
recesses of the build file template, make it a config parameter, or
rely on build CPP in value ('$(CC) -E' on Unix).

Reviewed-by: Paul Dale <paul.dale at oracle.com>
(Merged from https://github.com/openssl/openssl/pull/5356)

View the changeset: https://github.com/openssl/openssl/compare/ab90718953ea...d8e2b4f9bf2e

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341392633?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/fe627cd7/attachment-0001.html>

From matt at openssl.org  Wed Feb 14 15:31:15 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 14 Feb 2018 15:31:15 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518622275.187523.29784.nullmailer@dev.openssl.org>

The branch master has been updated
       via  62542d046483687330c55b36fa27d82dc03958c2 (commit)
      from  d8e2b4f9bf2e387ee533723a2d668fe7254b025c (commit)


- Log -----------------------------------------------------------------
commit 62542d046483687330c55b36fa27d82dc03958c2
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 16:58:33 2018 +0000

    Fix a memory leak in an error path
    
    Found by Coverity.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/5336)

-----------------------------------------------------------------------

Summary of changes:
 crypto/rsa/rsa_mp.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crypto/rsa/rsa_mp.c b/crypto/rsa/rsa_mp.c
index 97a09f1..7e38179 100644
--- a/crypto/rsa/rsa_mp.c
+++ b/crypto/rsa/rsa_mp.c
@@ -51,6 +51,7 @@ RSA_PRIME_INFO *rsa_multip_info_new(void)
     BN_free(pinfo->d);
     BN_free(pinfo->t);
     BN_free(pinfo->pp);
+    OPENSSL_free(pinfo);
     return NULL;
 }
 

From matt at openssl.org  Wed Feb 14 15:40:28 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 14 Feb 2018 15:40:28 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518622828.265210.31487.nullmailer@dev.openssl.org>

The branch master has been updated
       via  cb1c3d1a2714eb69012b079053f7fbcca1acc544 (commit)
      from  62542d046483687330c55b36fa27d82dc03958c2 (commit)


- Log -----------------------------------------------------------------
commit cb1c3d1a2714eb69012b079053f7fbcca1acc544
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 17:22:17 2018 +0000

    Make sure we check the return value of extract_min_max()
    
    Commit 42d7d7dd6 turned this function from returning void to
    returning an int error code. This instance of calling it was
    missed.
    
    Found by Coverity.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5338)

-----------------------------------------------------------------------

Summary of changes:
 crypto/x509v3/v3_asid.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/crypto/x509v3/v3_asid.c b/crypto/x509v3/v3_asid.c
index 6bc4afd..50b8816 100644
--- a/crypto/x509v3/v3_asid.c
+++ b/crypto/x509v3/v3_asid.c
@@ -667,7 +667,9 @@ static int asid_contains(ASIdOrRanges *parent, ASIdOrRanges *child)
         for (;; p++) {
             if (p >= sk_ASIdOrRange_num(parent))
                 return 0;
-            extract_min_max(sk_ASIdOrRange_value(parent, p), &p_min, &p_max);
+            if (!extract_min_max(sk_ASIdOrRange_value(parent, p), &p_min,
+                                 &p_max))
+                return 0;
             if (ASN1_INTEGER_cmp(p_max, c_max) < 0)
                 continue;
             if (ASN1_INTEGER_cmp(p_min, c_min) > 0)

From matt at openssl.org  Wed Feb 14 15:49:18 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 14 Feb 2018 15:49:18 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518623358.076907.1188.nullmailer@dev.openssl.org>

The branch master has been updated
       via  6e99ae58c8e1b4a41ae376f91affc7992b0738f7 (commit)
      from  cb1c3d1a2714eb69012b079053f7fbcca1acc544 (commit)


- Log -----------------------------------------------------------------
commit 6e99ae58c8e1b4a41ae376f91affc7992b0738f7
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Jan 30 15:41:56 2018 +0000

    Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitable
    
    The s_client psk_use_session_cb callback has a comment stating that we
    should ignore a key that isn't suitable for TLSv1.3. However we were
    actually causing the connection to fail. Changing the return value fixes
    the issue.
    
    Also related to this is that the early_data extension was not marked as
    TLSv1.3 only which it should be.
    
    Fixes #5202
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    (Merged from https://github.com/openssl/openssl/pull/5205)

-----------------------------------------------------------------------

Summary of changes:
 apps/s_client.c         | 2 +-
 ssl/statem/extensions.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/apps/s_client.c b/apps/s_client.c
index ca2bd0d..eca0a4a 100644
--- a/apps/s_client.c
+++ b/apps/s_client.c
@@ -208,7 +208,7 @@ static int psk_use_session_cb(SSL *s, const EVP_MD *md,
             *id = NULL;
             *idlen = 0;
             *sess = NULL;
-            return 0;
+            return 1;
         }
         usesess = SSL_SESSION_new();
         if (usesess == NULL
diff --git a/ssl/statem/extensions.c b/ssl/statem/extensions.c
index daf43c6..7d456f3 100644
--- a/ssl/statem/extensions.c
+++ b/ssl/statem/extensions.c
@@ -358,7 +358,7 @@ static const EXTENSION_DEFINITION ext_defs[] = {
     {
         TLSEXT_TYPE_early_data,
         SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_3_ENCRYPTED_EXTENSIONS
-        | SSL_EXT_TLS1_3_NEW_SESSION_TICKET,
+        | SSL_EXT_TLS1_3_NEW_SESSION_TICKET | SSL_EXT_TLS1_3_ONLY,
         NULL, tls_parse_ctos_early_data, tls_parse_stoc_early_data,
         tls_construct_stoc_early_data, tls_construct_ctos_early_data,
         final_early_data

From builds at travis-ci.org  Wed Feb 14 16:08:11 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 16:08:11 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16357 (master - 62542d0)
In-Reply-To: <openssl/openssl+341487833+passed@travis-ci.org>
Message-ID: <5a845eea6e577_43fb73f1b520c12353d0@fc5d5a28-b18a-4646-a3f9-cb039adf816b.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16357
Status: Passed

Duration: 34 minutes and 48 seconds
Commit: 62542d0 (master)
Author: Matt Caswell
Message: Fix a memory leak in an error path

Found by Coverity.

Reviewed-by: Rich Salz <rsalz at openssl.org>
Reviewed-by: Paul Dale <paul.dale at oracle.com>
(Merged from https://github.com/openssl/openssl/pull/5336)

View the changeset: https://github.com/openssl/openssl/compare/d8e2b4f9bf2e...62542d046483

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341487833?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/91e832a7/attachment.html>

From matthias.st.pierre at ncp-e.com  Wed Feb 14 16:11:52 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Wed, 14 Feb 2018 16:11:52 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518624712.663360.6170.nullmailer@dev.openssl.org>

The branch master has been updated
       via  7c60a968ce1a6a8290dd3a9418ae10e06327f424 (commit)
      from  6e99ae58c8e1b4a41ae376f91affc7992b0738f7 (commit)


- Log -----------------------------------------------------------------
commit 7c60a968ce1a6a8290dd3a9418ae10e06327f424
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Wed Feb 14 12:21:26 2018 +0100

    d2i_X509.pod: clarify usage of the 'pp' function parameter
    
    The 'pp' function parameters of d2i_TYPE() and i2d_TYPE() are referenced
    in the DESCRIPTION section as 'in' resp. 'out'. This commit renames the
    references to 'ppin' resp. 'ppout' and adds an explaining sentence.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5365)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/d2i_X509.pod | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/doc/man3/d2i_X509.pod b/doc/man3/d2i_X509.pod
index 8096b39..80c5c9d 100644
--- a/doc/man3/d2i_X509.pod
+++ b/doc/man3/d2i_X509.pod
@@ -364,11 +364,11 @@ i2d_X509_VAL,
 
 =for comment generic
 
- TYPE *d2i_TYPE(TYPE **a, unsigned char **pp, long length);
+ TYPE *d2i_TYPE(TYPE **a, unsigned char **ppin, long length);
  TYPE *d2i_TYPE_bio(BIO *bp, TYPE **a);
  TYPE *d2i_TYPE_fp(FILE *fp, TYPE **a);
 
- int i2d_TYPE(TYPE *a, unsigned char **pp);
+ int i2d_TYPE(TYPE *a, unsigned char **ppout);
  int i2d_TYPE_fp(FILE *fp, TYPE *a);
  int i2d_TYPE_bio(BIO *bp, TYPE *a);
 
@@ -376,14 +376,16 @@ i2d_X509_VAL,
 
 In the description here, I<TYPE> is used a placeholder
 for any of the OpenSSL datatypes, such as I<X509_CRL>.
+The function parameters I<ppin> and I<ppout> are generally
+either both named I<pp> in the headers, or I<in> and I<out>.
 
 These functions convert OpenSSL objects to and from their ASN.1/DER
 encoding.  Unlike the C structures which can have pointers to sub-objects
 within, the DER is a serialized encoding, suitable for sending over the
 network, writing to a file, and so on.
 
-d2i_TYPE() attempts to decode B<len> bytes at B<*in>. If successful a
-pointer to the B<TYPE> structure is returned and B<*in> is incremented to
+d2i_TYPE() attempts to decode B<len> bytes at B<*ppin>. If successful a
+pointer to the B<TYPE> structure is returned and B<*ppin> is incremented to
 the byte following the parsed data.  If B<a> is not B<NULL> then a pointer
 to the returned structure is also written to B<*a>.  If an error occurred
 then B<NULL> is returned.
@@ -401,13 +403,13 @@ d2i_TYPE_fp() is similar to d2i_TYPE() except it attempts
 to parse data from FILE pointer B<fp>.
 
 i2d_TYPE() encodes the structure pointed to by B<a> into DER format.
-If B<out> is not B<NULL>, it writes the DER encoded data to the buffer
-at B<*out>, and increments it to point after the data just written.
+If B<ppout> is not B<NULL>, it writes the DER encoded data to the buffer
+at B<*ppout>, and increments it to point after the data just written.
 If the return value is negative an error occurred, otherwise it
 returns the length of the encoded data.
 
-If B<*out> is B<NULL> memory will be allocated for a buffer and the encoded
-data written to it. In this case B<*out> is not incremented and it points
+If B<*ppout> is B<NULL> memory will be allocated for a buffer and the encoded
+data written to it. In this case B<*ppout> is not incremented and it points
 to the start of the data just written.
 
 i2d_TYPE_bio() is similar to i2d_TYPE() except it writes
@@ -438,7 +440,7 @@ Therefore any FILE pointers or BIOs should be opened in binary mode.
 Functions such as strlen() will B<not> return the correct length
 of the encoded structure.
 
-The ways that B<*in> and B<*out> are incremented after the operation
+The ways that B<*ppin> and B<*ppout> are incremented after the operation
 can trap the unwary. See the B<WARNINGS> section for some common
 errors.
 The reason for this-auto increment behaviour is to reflect a typical

From levitte at openssl.org  Wed Feb 14 16:14:04 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 14 Feb 2018 16:14:04 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518624844.025807.7495.nullmailer@dev.openssl.org>

The branch master has been updated
       via  0f4844a9d5eff470e1f1bfa4db4cc1fb90dc9a21 (commit)
       via  6e652da4af93fc9dcddbd16fc8981cf42bccf518 (commit)
       via  ab7134eff591b0996578ebb881a165eb527e1810 (commit)
       via  722c9762f2e021a9b43774fca282c9a4146d38e6 (commit)
      from  7c60a968ce1a6a8290dd3a9418ae10e06327f424 (commit)


- Log -----------------------------------------------------------------
commit 0f4844a9d5eff470e1f1bfa4db4cc1fb90dc9a21
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 20:51:07 2018 +0100

    VMS: build ia64 assembler files if 'ias' is available
    
    Avoid using crypto/modes/ghash-ia64.s, as it uses features that are
    explicitely prohibited on VMS.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5357)

commit 6e652da4af93fc9dcddbd16fc8981cf42bccf518
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 20:48:48 2018 +0100

    VMS: modify crypto/bn/asm/ia64.S to build properly
    
    On VMS, 'abort' is really 'decc$abort'
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5357)

commit ab7134eff591b0996578ebb881a165eb527e1810
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 20:47:34 2018 +0100

    VMS: add the possibility to use Itanium assembler with 'ias'
    
    This does require the use of a port of 'ias' for VMS.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5357)

commit 722c9762f2e021a9b43774fca282c9a4146d38e6
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 13 20:32:42 2018 +0100

    Harmonize the make variables across all known platforms families
    
    The make variables LIB_CFLAGS, DSO_CFLAGS and so on were used in
    addition to CFLAGS and so on.  This works without problem on Unix and
    Windows, where options with different purposes (such as -D and -I) can
    appear anywhere on the command line and get accumulated as they come.
    This is not necessarely so on VMS.  For example, macros must all be
    collected and given through one /DEFINE, and the same goes for
    inclusion directories (/INCLUDE).
    
    So, to harmonize all platforms, we repurpose make variables starting
    with LIB_, DSO_ and BIN_ to be all encompassing variables that
    collects the corresponding values from CFLAGS, CPPFLAGS, DEFINES,
    INCLUDES and so on together with possible config target values
    specific for libraries DSOs and programs, and use them instead of the
    general ones everywhere.
    
    This will, for example, allow VMS to use the exact same generators for
    generated files that go through cpp as all other platforms, something
    that has been impossible to do safely before now.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5357)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/10-main.conf          |  21 ++-
 Configurations/descrip.mms.tmpl      | 243 +++++++++++++++++++++++------------
 Configurations/unix-Makefile.tmpl    |  82 ++++++------
 Configurations/windows-makefile.tmpl |  39 +++---
 crypto/aes/build.info                |   9 +-
 crypto/bf/build.info                 |   3 +-
 crypto/bn/asm/ia64.S                 |   4 +
 crypto/bn/build.info                 |  15 +--
 crypto/build.info                    |   3 +-
 crypto/camellia/build.info           |   2 +-
 crypto/cast/build.info               |   3 +-
 crypto/chacha/build.info             |   3 +-
 crypto/des/build.info                |   4 +-
 crypto/ec/build.info                 |   3 +-
 crypto/md5/build.info                |   2 +-
 crypto/modes/build.info              |   6 +-
 crypto/poly1305/build.info           |   3 +-
 crypto/rc4/build.info                |   3 +-
 crypto/rc5/build.info                |   2 +-
 crypto/ripemd/build.info             |   2 +-
 crypto/sha/build.info                |  18 +--
 crypto/whrlpool/build.info           |   3 +-
 engines/build.info                   |   3 +-
 23 files changed, 281 insertions(+), 195 deletions(-)

diff --git a/Configurations/10-main.conf b/Configurations/10-main.conf
index f66e35b..95097ca 100644
--- a/Configurations/10-main.conf
+++ b/Configurations/10-main.conf
@@ -146,6 +146,16 @@ sub vms_info {
                 $vms_info->{def_zlib} =~ s|/.*$||g;
             }
         }
+
+        if ($config{target} =~ /-ia64/) {
+            `PIPE ias -H 2> NL:`;
+            if ($? == 0) {
+                $vms_info->{as} = "ias";
+                $vms_info->{asflags} = '-d debug "-N" vms_upcase';
+                $vms_info->{asoutflag} = "-o";
+                $vms_info->{perlasm_scheme} = "ias";
+            }
+        }
     }
     return $vms_info;
 }
@@ -1876,6 +1886,11 @@ my %targets = (
         dso_scheme       => "vms",
         thread_scheme    => "pthreads",
 
+        as               => sub { vms_info()->{as} },
+        asflags          => sub { vms_info()->{asflags} },
+        asoutflag        => sub { vms_info()->{asoutflag} },
+        perlasm_scheme   => sub { vms_info()->{perlasm_scheme} },
+
         apps_aux_src     => "vms_term_sock.c",
         apps_init_src    => "vms_decc_init.c",
     },
@@ -1910,9 +1925,13 @@ my %targets = (
         pointer_size     => "64",
     },
     "vms-ia64" => {
-        inherit_from     => [ "vms-generic" ],
+        inherit_from     => [ "vms-generic",
+                              sub { vms_info()->{as}
+                                        ? asm("ia64_asm")->() : () } ],
         bn_ops           => "SIXTY_FOUR_BIT RC4_INT",
         pointer_size     => "",
+
+        modes_asm_src    => "", # Because ghash-ia64.s doesn't work on VMS
     },
     "vms-ia64-p32" => {
         inherit_from     => [ "vms-ia64" ],
diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index 84008ee..ab2485a 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -54,7 +54,7 @@
   our @install_shlibs =
       map { $unified_info{sharednames}->{$_} || () }
       grep(!/\.a$/, @{$unified_info{install}->{libraries}});
-  our @generated = ( ( map { (my $x = $_) =~ s|\.S$|\.s|; $x }
+  our @generated = ( ( map { (my $x = $_) =~ s|\.[sS]$|\.asm|; $x }
                        grep { defined $unified_info{generate}->{$_} }
                        map { @{$unified_info{sources}->{$_}} }
                        grep { /\.o$/ } keys %{$unified_info{sources}} ),
@@ -177,35 +177,44 @@ DEFINES={- our $defines = join(",",
                                '__dummy', # To make comma processing easier
                                @{$config{defines}}) -}
 INCLUDES={- our $includes = join(',', @{$config{includes}}) -}
-CPPFLAGS={- our $cppflags = join('', @{$config{cppflags}}) -}
-CPPFLAGS_Q={- (my $x = $cppflags) =~ s|"|""|g; $defines =~ s|"|""|g;
-              $x .= "/DEFINE=($defines)";
+CPPFLAGS='qual_includes'{- our $cppflags = join('', @{$config{cppflags}}) -}
+CPPFLAGS_Q={- (my $x = $cppflags) =~ s|"|""|g;
+              (my $d = $defines) =~ s|"|""|g;
               $x .= "/INCLUDE=($includes)" if $includes;
+              $x .= "/DEFINE=($d)";
               $x; -}
 CFLAGS={- join('', @{$config{cflags}}) -}
 LDFLAGS= {- join('', @{$config{lflags}}) -}
 EX_LIBS= {- join('', map { ','.$_ } @{$config{ex_libs}}) -}
-LIB_DEFINES={- join("",
-                    (map { ",$_" }
-                     @{$target{shared_defines}},
-                     'OPENSSLDIR="""$(OPENSSLDIR_C)"""',
-                     'ENGINESDIR="""$(ENGINESDIR_C)"""')) -}
-LIB_CFLAGS={- $target{lib_cflags} // "" -}
-DSO_CFLAGS={- $target{dso_cflags} // "" -}
-BIN_CFLAGS={- $target{bin_cflags} // "" -}
-NO_INST_LIB_CFLAGS={- $target{no_inst_lib_cflags} // '$(LIB_CFLAGS)' -}
-NO_INST_DSO_CFLAGS={- $target{no_inst_dso_cflags} // '$(DSO_CFLAGS)' -}
-NO_INST_BIN_CFLAGS={- $target{no_inst_bin_cflags} // '$(BIN_CFLAGS)' -}
+
+LIB_DEFINES=$(DEFINES){- join("", (map { ",$_" }
+                                   @{$target{shared_defines}},
+                                   'OPENSSLDIR="""$(OPENSSLDIR_C)"""',
+                                   'ENGINESDIR="""$(ENGINESDIR_C)"""')) -}
+LIB_CPPFLAGS=$(CPPFLAGS)/DEFINE=($(LIB_DEFINES))
+LIB_CFLAGS=$(CFLAGS){- $target{lib_cflags} // "" -}
+DSO_DEFINES=$(DEFINES){- join("", (map { ",$_" } @{$target{dso_defines}})) -}
+DSO_CPPFLAGS=$(CPPFLAGS)/DEFINE=($(DSO_DEFINES))
+DSO_CFLAGS=$(CFLAGS){- $target{dso_cflags} // "" -}
+BIN_DEFINES=$(DEFINES){- join("", (map { ",$_" } @{$target{bin_defines}})) -}
+BIN_CPPFLAGS=$(CPPFLAGS)/DEFINE=($(BIN_DEFINES))
+BIN_CFLAGS=$(CFLAGS){- $target{bin_cflags} // "" -}
+NO_INST_LIB_CFLAGS=$(CFLAGS){- $target{no_inst_lib_cflags}
+                               // $target{lib_cflags}
+                               // "" -}
+NO_INST_DSO_CFLAGS=$(CFLAGS){- $target{no_inst_dso_cflags}
+                               // $target{dso_cflags}
+                               // "" -}
+NO_INST_BIN_CFLAGS=$(CFLAGS){- $target{no_inst_bin_cflags}
+                               // $target{bin_cflags}
+                               // "" -}
 
 PERL={- $config{perl} -}
 
-# We let the C compiler driver to take care of .s files. This is done in
-# order to be excused from maintaining a separate set of architecture
-# dependent assembler flags. E.g. if you throw -mcpu=ultrasparc at SPARC
-# gcc, then the driver will automatically translate it to -xarch=v8plus
-# and pass it down to assembler.
 AS={- $config{as} -}
-ASFLAGS={- join('', @{$config{asflags}}) -}
+ASFLAGS={- join(' ', @{$config{asflags}}) -}
+ASOUTFLAG={- $target{asoutflag} -}$(OSSL_EMPTY)
+PERLASM_SCHEME={- $target{perlasm_scheme} -}
 
 # .FIRST and .LAST are special targets with MMS and MMK.
 # The defines in there are for C.  includes that look like
@@ -575,37 +584,128 @@ reconfigure reconf :
                    : $unified_info{sharednames}->{$_}.".EXE" } @_;
   }
 
+  # Helper function to deal with inclusion directory specs.
+  # We have to deal with two things:
+  # 1. comma separation and no possibility of trailing comma
+  # 2. no inclusion directories given at all
+  # 3. long compiler command lines
+  # To resolve 1, we need to iterate through the sources of inclusion
+  # directories, and only add a comma when needed.
+  # To resolve 2, we need to have a variable that will hold the whole
+  # inclusion qualifier, or be the empty string if there are no inclusion
+  # directories.  That's the symbol 'qual_includes' that's used in CPPFLAGS
+  # To resolve 3, we creata a logical name TMP_INCLUDES: to hold the list
+  # of inclusion directories.
+  #
+  # This function returns a list of two lists, one being the collection of
+  # commands to execute before the compiler is called, and the other being
+  # the collection of commands to execute after.  It takes as arguments the
+  # collection of strings to include as directory specs.
+  sub includes {
+      my @stuff = ( @_ );
+      my @before = (
+          'qual_includes :=',
+      );
+      my @after = (
+          'DELETE/SYMBOL/LOCAL qual_includes',
+      );
+
+      if (scalar @stuff > 0) {
+          push @before, 'tmp_includes := '.shift(@stuff);
+          while (@stuff) {
+              push @before, 'tmp_add := '.shift(@stuff);
+              push @before, 'IF tmp_includes .NES. "" .AND. tmp_add .NES. "" THEN tmp_includes = tmp_includes + ","';
+              push @before, 'tmp_includes = tmp_includes + tmp_add';
+          }
+          push @before, "IF tmp_includes .NES. \"\" THEN DEFINE tmp_includes 'tmp_includes'";
+          push @before, 'IF tmp_includes .NES. "" THEN qual_includes := /INCLUDE=(tmp_includes:)';
+          push @before, 'DELETE/SYMBOL/LOCAL tmp_includes';
+          push @before, 'DELETE/SYMBOL/LOCAL tmp_add';
+          push @after, 'DEASSIGN tmp_includes:'
+      }
+      return ([ @before ], [ @after ]);
+  }
+
   sub generatesrc {
       my %args = @_;
+      (my $target = $args{src}) =~ s/\.[sS]$/.asm/;
       my $generator = join(" ", @{$args{generator}});
       my $generator_incs = join("", map { ' "-I'.$_.'"' } @{$args{generator_incs}});
       my $deps = join(", -\n\t\t", @{$args{generator_deps}}, @{$args{deps}});
 
-      if ($args{src} !~ /\.[sS]$/) {
+      if ($target !~ /\.asm$/) {
           if ($args{generator}->[0] =~ m|^.*\.in$|) {
 	      my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
                                                    "util", "dofile.pl")),
                                    rel2abs($config{builddir}));
               return <<"EOF";
-$args{src} : $args{generator}->[0] $deps
+$target : $args{generator}->[0] $deps
 	\$(PERL) "-I\$(BLDDIR)" "-Mconfigdata" $dofile \\
-	    "-o$target{build_file}" $generator > \$@
+	    "-o$target{build_file}" $generator > \$\@
 EOF
 	  } else {
               return <<"EOF";
-$args{src} : $args{generator}->[0] $deps
-	\$(PERL)$generator_incs $generator > \$@
+$target : $args{generator}->[0] $deps
+	\$(PERL)$generator_incs $generator > \$\@
 EOF
 	  }
       } else {
-          die "No method to generate assembler source present.\n";
+          if ($args{generator}->[0] =~ /\.pl$/) {
+              $generator = '$(PERL)'.$generator_incs.' '.$generator;
+          } elsif ($args{generator}->[0] =~ /\.S$/) {
+              $generator = undef;
+          } else {
+              die "Generator type for $src unknown: $generator\n";
+          }
+
+          my $cppflags = { lib => '$(LIB_CPPFLAGS)',
+                           dso => '$(DSO_CPPFLAGS)',
+                           bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
+          my @incs_cmds = includes({ lib => '$(LIB_INCLUDES)',
+                                     dso => '$(DSO_INCLUDES)',
+                                     bin => '$(BIN_INCLUDES)' } -> {$args{intent}},
+                                   '$(INCLUDES)',
+                                   @{$args{incs}});
+          my $incs_on = join("\n\t\@ ", @{$incs_cmds[0]}) || '!';
+          my $incs_off = join("\n\t\@ ", @{$incs_cmds[1]}) || '!';
+          if (defined($generator)) {
+              # If the target is named foo.S in build.info, we want to
+              # end up generating foo.s in two steps.
+              if ($args{src} =~ /\.S$/) {
+                   return <<"EOF";
+$target : $args{generator}->[0] $deps
+	$generator \$\@-S
+        \@ $incs_on
+	PIPE \$(CPP) $cppflags \$\@-S | -
+        \$(PERL) -ne "/^#(\\s*line)?\\s*[0-9]+\\s+""/ or print" > \$\@-i
+        \@ $incs_off
+        RENAME \$\@-i \$\@
+        DELETE \$\@-S
+EOF
+              }
+              # Otherwise....
+              return <<"EOF";
+$target : $args{generator}->[0] $deps
+	$generator \$\@
+EOF
+          }
+          return <<"EOF";
+$target : $args{generator}->[0] $deps
+        \@ $incs_on
+        SHOW SYMBOL qual_includes
+        PIPE \$(CPP) $cppflags $args{generator}->[0] | -
+        \$(PERL) "-ne" "/^#(\\s*line)?\\s*[0-9]+\\s+""/ or print" > \$\@
+        \@ $incs_off
+EOF
       }
   }
 
   sub src2obj {
       my %args = @_;
+      my @srcs = map { (my $x = $_) =~ s/\.s$/.asm/; $x
+                     } ( @{$args{srcs}} );
       (my $obj = $args{obj}) =~ s|\.o$||;
-      my $deps = join(", -\n\t\t", @{$args{srcs}}, @{$args{deps}});
+      my $deps = join(", -\n\t\t", @srcs, @{$args{deps}});
 
       # Because VMS C isn't very good at combining a /INCLUDE path with
       # #includes having a relative directory (like '#include "../foo.h"),
@@ -618,63 +718,44 @@ EOF
       my $objd = abs2rel(rel2abs(dirname($obj)), rel2abs($forward));
       my $objn = basename($obj);
       my $srcs =
-          join(", ",
-               map { abs2rel(rel2abs($_), rel2abs($forward)) } @{$args{srcs}});
-      my $cflags = '$(CFLAGS)';
+          join(", ", map { abs2rel(rel2abs($_), rel2abs($forward)) } @srcs);
+      my $before = $unified_info{before}->{$obj.".OBJ"} || "\@ !";
+      my $after = $unified_info{after}->{$obj.".OBJ"} || "\@ !";
+
+      if ($srcs[0] =~ /\.asm$/) {
+          return <<"EOF";
+$obj.OBJ : $deps
+        ${before}
+        SET DEFAULT $forward
+        \$(AS) \$(ASFLAGS) \$(ASOUTFLAG)${objd}${objn}.OBJ $srcs
+        SET DEFAULT $backward
+EOF
+      }
+
+      my $cflags;
       if ($args{installed}) {
-          $cflags .= { lib => '$(LIB_CFLAGS)',
-                       dso => '$(DSO_CFLAGS)',
-                       bin => '$(BIN_CFLAGS)' } -> {$args{intent}};
+          $cflags = { lib => '$(LIB_CFLAGS)',
+                      dso => '$(DSO_CFLAGS)',
+                      bin => '$(BIN_CFLAGS)' } -> {$args{intent}};
       } else {
-          $cflags .= { lib => '$(NO_INST_LIB_CFLAGS)',
-                       dso => '$(NO_INST_DSO_CFLAGS)',
-                       bin => '$(NO_INST_BIN_CFLAGS)' } -> {$args{intent}};
+          $cflags = { lib => '$(NO_INST_LIB_CFLAGS)',
+                      dso => '$(NO_INST_DSO_CFLAGS)',
+                      bin => '$(NO_INST_BIN_CFLAGS)' } -> {$args{intent}};
       }
-      $cflags .= '$(CPPFLAGS)';
       $cflags .= { lib => '$(LIB_CPPFLAGS)',
 		   dso => '$(DSO_CPPFLAGS)',
 		   bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
-      my $defines = '$(DEFINES)';
-      $defines .= { lib => '$(LIB_DEFINES)',
-		    dso => '$(DSO_DEFINES)',
-		    bin => '$(BIN_DEFINES)' } -> {$args{intent}};
-      $cflags .= '/DEFINE=('.$defines.')';
-      $cflags .= "/INCLUDE=('tmp_includes')";
-      
-      # We create a logical name TMP_INCLUDES: to hold the list of internal
-      # includes.  However, we cannot use it directly, as logical names can't
-      # hold zero entries, so we also create a symbol with the same name and
-      # use that instead, see the '/INCLUDE=' assignment above.  If there are
-      # no internal include directories, it will simply be the empty string,
-      # but if there are, it will be assigned "TMP_DEFINES:,"
-      my $xtraincludes = { lib => '$(LIB_INCLUDES)',
-                           dso => '$(DSO_INCLUDES)',
-                           bin => '$(BIN_INCLUDES)' } -> {$args{intent}};
-      my $incs_add =
-          'IF tmp_add .NES. "" .AND. tmp_includes .NES. "" THEN tmp_includes = "," + tmp_includes'
-          ."\n\t".'tmp_includes = tmp_add + tmp_includes';
-      my $incs_on = 'tmp_includes := '
-          ."\n\t"."tmp_add := $xtraincludes"
-          ."\n\t".$incs_add
-          ."\n\t".'tmp_add := $(INCLUDES)'
-          ."\n\t".$incs_add;
-      my $incs_off = 'DELETE/SYMBOL/LOCAL tmp_includes'
-          ."\n\t".'DELETE/SYMBOL/LOCAL tmp_add';
-      if (@{$args{incs}}) {
-          $incs_on =
-              'DEFINE tmp_includes '
-              .join(",-\n\t\t\t", map {
-                                      file_name_is_absolute($_)
-                                      ? $_ : catdir($backward,$_)
-                                  } @{$args{incs}})
-              ."\n\t".$incs_on
-              ."\n\t".'IF tmp_includes .NES. "" THEN tmp_includes = "," + tmp_includes'
-              ."\n\t".'tmp_includes = "tmp_includes:" + tmp_includes';
-          $incs_off .=
-              "\n\t".'DEASSIGN tmp_includes';
-      }
-      my $before = $unified_info{before}->{$obj.".OBJ"} || "\@ !";
-      my $after = $unified_info{after}->{$obj.".OBJ"} || "\@ !";
+
+      my @incs_cmds = includes({ lib => '$(LIB_INCLUDES)',
+                                 dso => '$(DSO_INCLUDES)',
+                                 bin => '$(BIN_INCLUDES)' } -> {$args{intent}},
+                               '$(INCLUDES)',
+                               map {
+                                   file_name_is_absolute($_)
+                                   ? $_ : catdir($backward,$_)
+                               } @{$args{incs}});
+      my $incs_on = join("\n\t\@ ", @{$incs_cmds[0]}) || '!';
+      my $incs_off = join("\n\t\@ ", @{$incs_cmds[1]}) || '!';
       my $depbuild = $disabled{makedepend} ? ""
           : " /MMS=(FILE=${objd}${objn}.tmp-D,TARGET=$obj.OBJ)";
 
@@ -682,9 +763,9 @@ EOF
 $obj.OBJ : $deps
         ${before}
         SET DEFAULT $forward
-        $incs_on
+        \@ $incs_on
         \$(CC) ${cflags}${depbuild} /OBJECT=${objd}${objn}.OBJ /REPOSITORY=$backward $srcs
-        $incs_off
+        \@ $incs_off
         SET DEFAULT $backward
         ${after}
         - PURGE $obj.OBJ
diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index dad868b..1f214a2 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -196,22 +196,23 @@ CXXFLAGS={- join(' ', @{$config{cxxflags}}) -}
 LDFLAGS= {- join(' ', @{$config{lflags}}) -}
 PLIB_LDFLAGS= {- join(' ', @{$config{plib_lflags}}) -}
 EX_LIBS= {- join(' ', @{$config{ex_libs}}) -}
-LIB_CPPFLAGS={- join(' ',
-                     (map { '-D'.$_ }
-                          ('OPENSSLDIR="\"$(OPENSSLDIR)\""',
-                           'ENGINESDIR="\"$(ENGINESDIR)\""')),
-                     $target{shared_cppflag}) || "" -}
-LIB_CFLAGS={- $target{shared_cflag} || "" -}
-LIB_CXXFLAGS={- $target{shared_cxxflag} || "" -}
-LIB_LDFLAGS={- $target{shared_ldflag}." ".$config{shared_ldflag} -}
-DSO_CPPFLAGS={- $target{dso_cppflags} || "" -}
-DSO_CFLAGS={- $target{dso_cflags} || "" -}
-DSO_CXXFLAGS={- $target{dso_cxxflags} || "" -}
-DSO_LDFLAGS={- $target{dso_lflags} || "" -}
-BIN_CPPFLAGS={- $target{bin_cppflags} || "" -}
-BIN_CFLAGS={- $target{bin_cflags} || "" -}
-BIN_CXXFLAGS={- $target{bin_cxxflags} || "" -}
-BIN_LDFLAGS={- $target{bin_lflags} || "" -}
+
+LIB_CPPFLAGS={- join(' ', '$(CPPFLAGS)',
+                          $target{shared_cppflag} || (),
+                          (map { '-D'.$_ }
+                               ('OPENSSLDIR="\"$(OPENSSLDIR)\""',
+                                'ENGINESDIR="\"$(ENGINESDIR)\""'))) -}
+LIB_CFLAGS={- join(' ', '$(CFLAGS)', $target{shared_cflag} || ()) -}
+LIB_CXXFLAGS={- join(' ', '$(CXXFLAGS)', $target{shared_cxxflag} || ()) -}
+LIB_LDFLAGS={- join(' ', '$(LDFLAGS)', $target{shared_ldflag} || (), $config{shared_ldflag} || ()) -}
+DSO_CPPFLAGS={- join(' ', '$(CPPFLAGS)', $target{dso_cppflags} || ()) -}
+DSO_CFLAGS={- join(' ', '$(CFLAGS)', $target{dso_cflags} || ()) -}
+DSO_CXXFLAGS={- join(' ', '$(CXXFLAGS)', $target{dso_cxxflags} || ()) -}
+DSO_LDFLAGS={- join(' ', '$(LDFLAGS)', $target{dso_lflags} || ()) -}
+BIN_CPPFLAGS={- join(' ', '$(CPPFLAGS)', $target{bin_cppflags} || ()) -}
+BIN_CFLAGS={- join(' ', '$(CFLAGS)', $target{bin_cflags} || ()) -}
+BIN_CXXFLAGS={- join(' ', '$(CXXFLAGS)', $target{bin_cxxflags} || ()) -}
+BIN_LDFLAGS={- join(' ', '$(LDFLAGS)', $target{bin_lflags} || ()) -}
 
 PERL={- $config{perl} -}
 
@@ -848,6 +849,11 @@ EOF
               die "Generator type for $args{src} unknown: $generator\n";
           }
 
+          my $cppflags = {
+              lib => '$(LIB_CPPFLAGS)',
+              dso => '$(DSO_CPPFLAGS)',
+              bin => '$(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
           if (defined($generator)) {
               # If the target is named foo.S in build.info, we want to
               # end up generating foo.s in two steps.
@@ -891,9 +897,9 @@ EOF
       my $srcs = join(" ",  @srcs);
       my $deps = join(" ", @srcs, @{$args{deps}});
       my $incs = join("", map { " -I".$_ } @{$args{incs}});
-      my $cmd = '$(CC)';
-      my $cmdflags = '$(CFLAGS)';
-      my $cmdcompile = ' -c';
+      my $cmd;
+      my $cmdflags;
+      my $cmdcompile;
       my $makedepprog = $disabled{makedepend} ? undef : $config{makedepprog};
       if (grep /\.rc$/, @srcs) {
           $cmd = '$(RC)';
@@ -902,22 +908,20 @@ EOF
           $makedepprog = undef;
       } elsif (grep /\.(cc|cpp)$/, @srcs) {
           $cmd = '$(CXX)';
-          $cmdflags = '$(CXXFLAGS)';
-          $cmdflags .= ' ' . { lib => '$(LIB_CXXFLAGS)',
-                               dso => '$(DSO_CXXFLAGS)',
-                               bin => '$(BIN_CXXFLAGS)' } -> {$args{intent}};
-          $cmdflags .= ' $(CPPFLAGS)';
-          $cmdflags .= ' ' . { lib => '$(LIB_CPPFLAGS)',
-                               dso => '$(DSO_CPPFLAGS)',
-                               bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
+          $cmdcompile = ' -c';
+          $cmdflags = {
+              lib => '$(LIB_CXXFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CXXFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CXXFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
       } else {
-          $cmdflags .= ' ' . { lib => '$(LIB_CFLAGS)',
-                               dso => '$(DSO_CFLAGS)',
-                               bin => '$(BIN_CFLAGS)' } -> {$args{intent}};
-          $cmdflags .= ' $(CPPFLAGS)';
-          $cmdflags .= ' ' . { lib => '$(LIB_CPPFLAGS)',
-                               dso => '$(DSO_CPPFLAGS)',
-                               bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
+          $cmd = '$(CC)';
+          $cmdcompile = ' -c';
+          $cmdflags = {
+              lib => '$(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
       }
       $cmdflags .= $cmdcompile;
       my $recipe = <<"EOF";
@@ -997,7 +1001,7 @@ EOF
 # simplest, {libname}\$(SHLIB_EXT_IMPORT) for Windows POSIX layers and
 # {libname}\$(SHLIB_EXT_SIMPLE) for the Unix platforms.
 $target: $deps
-	\$(CC) \$(CFLAGS) \$(LIB_CFLAGS) $linkflags\$(LIB_LDFLAGS)$shared_soname$shared_imp \\
+	\$(CC) \$(LIB_CFLAGS) $linkflags\$(LIB_LDFLAGS)$shared_soname$shared_imp \\
 		-o $target_full$shared_def $objs \\
                 \$(PLIB_LDFLAGS) $linklibs \$(EX_LIBS)
 EOF
@@ -1040,7 +1044,7 @@ EOF
       my $target = dso($dso);
       return <<"EOF";
 $target: $objs $deps
-	\$(CC) \$(CFLAGS) \$(DSO_CFLAGS) $linkflags\$(DSO_LDFLAGS) \\
+	\$(CC) \$(DSO_CFLAGS) $linkflags\$(DSO_LDFLAGS) \\
 		-o $target $objs \\
                 \$(PLIB_LDFLAGS) $linklibs \$(EX_LIBS)
 EOF
@@ -1080,15 +1084,15 @@ EOF
                                     }
                                   } @{$args{deps}});
       my $cmd = '$(CC)';
-      my $cmdflags = '$(CFLAGS) $(BIN_CFLAGS)';
+      my $cmdflags = '$(BIN_CFLAGS)';
       if (grep /_cc\.o$/, @{$args{objs}}) {
           $cmd = '$(CXX)';
-          $cmdflags = '$(CXXFLAGS) $(BIN_CXXFLAGS)';
+          $cmdflags = '$(BIN_CXXFLAGS)';
       }
       return <<"EOF";
 $bin$exeext: $objs $deps
 	rm -f $bin$exeext
-	\$\${LDCMD:-$cmd} $cmdflags $linkflags\$(LDFLAGS) \$(BIN_LDFLAGS) \\
+	\$\${LDCMD:-$cmd} $cmdflags $linkflags\$(BIN_LDFLAGS) \\
 		-o $bin$exeext $objs \\
 		\$(PLIB_LDFLAGS) $linklibs \$(EX_LIBS)
 EOF
diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index ab6a00d..ab557b8 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -174,19 +174,20 @@ LD={- $config{ld} -}
 LDFLAGS={- join(' ', @{$config{lflags}}) -}
 LDOUTFLAG={- $target{loutflag} || "/out:" -}$(OSSL_EMPTY)
 EX_LIBS={- join(' ', @{$config{ex_libs}}) -}
-LIB_CPPFLAGS={- join(" ",
-                     $target{shared_cppflag} || "",
-                     (map { quotify_l("-D".$_) }
-                      "OPENSSLDIR=\"$openssldir\"",
-                      "ENGINESDIR=\"$enginesdir\"")) -}
-LIB_CFLAGS={- join(" ", $target{lib_cflags}, $target{shared_cflag}) -}
-LIB_LDFLAGS={- join(' ', $target{shared_ldflag}, $config{shared_ldflag}) -}
-DSO_CPPFLAGS={- $target{dso_cppflags} || "" -}
-DSO_CFLAGS={- $target{dso_cflags} || "" -}
-DSO_LDFLAGS={- $target{dso_ldflag} || "" -}
-BIN_CPPFLAGS={- $target{dso_cppflags} || "" -}
-BIN_CFLAGS={- $target{bin_cflags} -}
-BIN_LDFLAGS={- $target{bin_lflags} -}
+
+LIB_CPPFLAGS={- join(' ', '$(CPPFLAGS)',
+                          $target{shared_cppflag} || (),
+                          (map { quotify_l("-D".$_) }
+                           "OPENSSLDIR=\"$openssldir\"",
+                           "ENGINESDIR=\"$enginesdir\"")) -}
+LIB_CFLAGS={- join(' ', '$(CFLAGS)', $target{lib_cflags} || (), $target{shared_cflag} || ()) -}
+LIB_LDFLAGS={- join(' ', '$(LDFLAGS)', $target{shared_ldflag} || (), $config{shared_ldflag} || ()) -}
+DSO_CPPFLAGS={- join(' ', '$(CPPFLAGS)', $target{dso_cppflags} || ()) -}
+DSO_CFLAGS={- join(' ', '$(CFLAGS)', $target{dso_cflags} || ()) -}
+DSO_LDFLAGS={- join(' ', '$(LDFLAGS)', $target{dso_ldflag} || ()) -}
+BIN_CPPFLAGS={- join(' ', '$(CPPFLAGS)', $target{dso_cppflags} || ()) -}
+BIN_CFLAGS={- join(' ', '$(CFLAGS)', $target{bin_cflags} || ()) -}
+BIN_LDFLAGS={- join(' ', '$(LDFLAGS)', $target{bin_lflags} || ()) -}
 
 PERL={- $config{perl} -}
 
@@ -434,6 +435,10 @@ EOF
               die "Generator type for $src unknown: $generator\n";
           }
 
+          my $cppflags = $incs;
+          $cppflags .= { lib => '$(LIB_CPPFLAGS)',
+                         dso => '$(DSO_CPPFLAGS)',
+                         bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
           if (defined($generator)) {
               # If the target is named foo.S in build.info, we want to
               # end up generating foo.s in two steps.
@@ -467,12 +472,10 @@ EOF
      my $srcs = '"'.join('" "',  @srcs).'"';
      my $deps = '"'.join('" "', @srcs, @{$args{deps}}).'"';
      my $incs = join("", map { ' /I "'.$_.'"' } @{$args{incs}});
-     my $cflags = '$(CFLAGS)';
-     $cflags .= { lib => ' $(LIB_CFLAGS)',
-		  dso => ' $(DSO_CFLAGS)',
-		  bin => ' $(BIN_CFLAGS)' } -> {$args{intent}};
+     my $cflags = { lib => ' $(LIB_CFLAGS)',
+		    dso => ' $(DSO_CFLAGS)',
+		    bin => ' $(BIN_CFLAGS)' } -> {$args{intent}};
      $cflags .= $incs;
-     $cflags .= ' $(CPPFLAGS)';
      $cflags .= { lib => ' $(LIB_CPPFLAGS)',
 		  dso => ' $(DSO_CPPFLAGS)',
 		  bin => ' $(BIN_CPPFLAGS)' } -> {$args{intent}};
diff --git a/crypto/aes/build.info b/crypto/aes/build.info
index 102e863..0f04863 100644
--- a/crypto/aes/build.info
+++ b/crypto/aes/build.info
@@ -6,16 +6,13 @@ SOURCE[../../libcrypto]=\
 GENERATE[aes-ia64.s]=asm/aes-ia64.S
 
 GENERATE[aes-586.s]=asm/aes-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[aes-586.s]=../perlasm/x86asm.pl
 GENERATE[vpaes-x86.s]=asm/vpaes-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[vpaes-586.s]=../perlasm/x86asm.pl
 GENERATE[aesni-x86.s]=asm/aesni-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[aesni-586.s]=../perlasm/x86asm.pl
 
 GENERATE[aes-x86_64.s]=asm/aes-x86_64.pl $(PERLASM_SCHEME)
diff --git a/crypto/bf/build.info b/crypto/bf/build.info
index b1e9e8a..29adc8c 100644
--- a/crypto/bf/build.info
+++ b/crypto/bf/build.info
@@ -3,6 +3,5 @@ SOURCE[../../libcrypto]=bf_skey.c bf_ecb.c bf_cfb64.c bf_ofb64.c \
         {- $target{bf_asm_src} -}
 
 GENERATE[bf-586.s]=asm/bf-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[bf-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/crypto/bn/asm/ia64.S b/crypto/bn/asm/ia64.S
index 58f7628..f03264d 100644
--- a/crypto/bn/asm/ia64.S
+++ b/crypto/bn/asm/ia64.S
@@ -157,6 +157,9 @@
 #else
 #define	ADDP	add
 #endif
+#ifdef __VMS
+.alias abort, "decc$abort"
+#endif
 
 #if 1
 //
@@ -1428,6 +1431,7 @@ bn_div_words:
 	mov		ar.ec=0		// don't rotate at exit
 	mov		pr.rot=0	}
 { .mii;	mov		L=r33		// save l
+	mov		r25=r0		// needed if abort is called on VMS
 	mov		r36=r0		};;
 
 .L_divw_shift:	// -vv- note signed comparison
diff --git a/crypto/bn/build.info b/crypto/bn/build.info
index 950464d..a463edd 100644
--- a/crypto/bn/build.info
+++ b/crypto/bn/build.info
@@ -11,20 +11,16 @@ INCLUDE[../../libcrypto]=../../crypto/include
 INCLUDE[bn_exp.o]=..
 
 GENERATE[bn-586.s]=asm/bn-586.pl \
-	$(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[bn-586.s]=../perlasm/x86asm.pl
 GENERATE[co-586.s]=asm/co-586.pl \
-	$(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[co-586.s]=../perlasm/x86asm.pl
 GENERATE[x86-mont.s]=asm/x86-mont.pl \
-	$(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[x86-mont.s]=../perlasm/x86asm.pl
 GENERATE[x86-gf2m.s]=asm/x86-gf2m.pl \
-	$(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+	$(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[x86-gf2m.s]=../perlasm/x86asm.pl
 
 GENERATE[sparcv9a-mont.S]=asm/sparcv9a-mont.pl $(PERLASM_SCHEME)
@@ -53,8 +49,7 @@ GENERATE[rsaz-x86_64.s]=asm/rsaz-x86_64.pl $(PERLASM_SCHEME)
 GENERATE[rsaz-avx2.s]=asm/rsaz-avx2.pl $(PERLASM_SCHEME)
 
 GENERATE[bn-ia64.s]=asm/ia64.S
-GENERATE[ia64-mont.s]=asm/ia64-mont.pl \
-        $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+GENERATE[ia64-mont.s]=asm/ia64-mont.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 
 GENERATE[parisc-mont.s]=asm/parisc-mont.pl $(PERLASM_SCHEME)
 
diff --git a/crypto/build.info b/crypto/build.info
index a873219..0a8f6e2 100644
--- a/crypto/build.info
+++ b/crypto/build.info
@@ -19,8 +19,7 @@ GENERATE[uplink-x86_64.s]=../ms/uplink-x86_64.pl $(PERLASM_SCHEME)
 GENERATE[uplink-ia64.s]=../ms/uplink-ia64.pl $(PERLASM_SCHEME)
 
 GENERATE[x86cpuid.s]=x86cpuid.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[x86cpuid.s]=perlasm/x86asm.pl
 
 GENERATE[x86_64cpuid.s]=x86_64cpuid.pl $(PERLASM_SCHEME)
diff --git a/crypto/camellia/build.info b/crypto/camellia/build.info
index 9f8d1e6..e36a19b 100644
--- a/crypto/camellia/build.info
+++ b/crypto/camellia/build.info
@@ -4,7 +4,7 @@ SOURCE[../../libcrypto]=\
         {- $target{cmll_asm_src} -}
 
 GENERATE[cmll-x86.s]=asm/cmll-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) \
         $(PROCESSOR)
 DEPEND[cmll-x86.s]=../perlasm/x86asm.pl
 GENERATE[cmll-x86_64.s]=asm/cmll-x86_64.pl $(PERLASM_SCHEME)
diff --git a/crypto/cast/build.info b/crypto/cast/build.info
index 1fd0c6f..b0f59f3 100644
--- a/crypto/cast/build.info
+++ b/crypto/cast/build.info
@@ -3,6 +3,5 @@ SOURCE[../../libcrypto]=\
         c_skey.c c_ecb.c {- $target{cast_asm_src} -} c_cfb64.c c_ofb64.c
 
 GENERATE[cast-586.s]=asm/cast-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[cast-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/crypto/chacha/build.info b/crypto/chacha/build.info
index a33386c..02f8e51 100644
--- a/crypto/chacha/build.info
+++ b/crypto/chacha/build.info
@@ -2,8 +2,7 @@ LIBS=../../libcrypto
 SOURCE[../../libcrypto]={- $target{chacha_asm_src} -}
 
 GENERATE[chacha-x86.s]=asm/chacha-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 GENERATE[chacha-x86_64.s]=asm/chacha-x86_64.pl $(PERLASM_SCHEME)
 GENERATE[chacha-ppc.s]=asm/chacha-ppc.pl $(PERLASM_SCHEME)
 GENERATE[chacha-armv4.S]=asm/chacha-armv4.pl $(PERLASM_SCHEME)
diff --git a/crypto/des/build.info b/crypto/des/build.info
index 519db56..05cb154 100644
--- a/crypto/des/build.info
+++ b/crypto/des/build.info
@@ -12,8 +12,8 @@ GENERATE[dest4-sparcv9.S]=asm/dest4-sparcv9.pl $(PERLASM_SCHEME)
 INCLUDE[dest4-sparcv9.o]=..
 
 GENERATE[des-586.s]=asm/des-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 DEPEND[des-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
 GENERATE[crypt586.s]=asm/crypt586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 DEPEND[crypt586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/crypto/ec/build.info b/crypto/ec/build.info
index 7e5cad4..4e9de4b 100644
--- a/crypto/ec/build.info
+++ b/crypto/ec/build.info
@@ -9,8 +9,7 @@ SOURCE[../../libcrypto]=\
         {- $target{ec_asm_src} -}
 
 GENERATE[ecp_nistz256-x86.s]=asm/ecp_nistz256-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 
 GENERATE[ecp_nistz256-x86_64.s]=asm/ecp_nistz256-x86_64.pl $(PERLASM_SCHEME)
 
diff --git a/crypto/md5/build.info b/crypto/md5/build.info
index d1ea9cf..e641fec 100644
--- a/crypto/md5/build.info
+++ b/crypto/md5/build.info
@@ -3,7 +3,7 @@ SOURCE[../../libcrypto]=\
         md5_dgst.c md5_one.c {- $target{md5_asm_src} -}
 
 GENERATE[md5-586.s]=asm/md5-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 
 GENERATE[md5-x86_64.s]=asm/md5-x86_64.pl $(PERLASM_SCHEME)
 
diff --git a/crypto/modes/build.info b/crypto/modes/build.info
index d39b663..821340e 100644
--- a/crypto/modes/build.info
+++ b/crypto/modes/build.info
@@ -6,11 +6,9 @@ SOURCE[../../libcrypto]=\
 
 INCLUDE[gcm128.o]=..
 
-GENERATE[ghash-ia64.s]=asm/ghash-ia64.pl \
-        $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+GENERATE[ghash-ia64.s]=asm/ghash-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 GENERATE[ghash-x86.s]=asm/ghash-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 GENERATE[ghash-x86_64.s]=asm/ghash-x86_64.pl $(PERLASM_SCHEME)
 GENERATE[aesni-gcm-x86_64.s]=asm/aesni-gcm-x86_64.pl $(PERLASM_SCHEME)
 GENERATE[ghash-sparcv9.S]=asm/ghash-sparcv9.pl $(PERLASM_SCHEME)
diff --git a/crypto/poly1305/build.info b/crypto/poly1305/build.info
index a990a91..631b32b 100644
--- a/crypto/poly1305/build.info
+++ b/crypto/poly1305/build.info
@@ -7,8 +7,7 @@ SOURCE[../../libcrypto]=\
 GENERATE[poly1305-sparcv9.S]=asm/poly1305-sparcv9.pl $(PERLASM_SCHEME)
 INCLUDE[poly1305-sparcv9.o]=..
 GENERATE[poly1305-x86.s]=asm/poly1305-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 GENERATE[poly1305-x86_64.s]=asm/poly1305-x86_64.pl $(PERLASM_SCHEME)
 GENERATE[poly1305-ppc.s]=asm/poly1305-ppc.pl $(PERLASM_SCHEME)
 GENERATE[poly1305-ppcfp.s]=asm/poly1305-ppcfp.pl $(PERLASM_SCHEME)
diff --git a/crypto/rc4/build.info b/crypto/rc4/build.info
index dc44c0d..46ee66b 100644
--- a/crypto/rc4/build.info
+++ b/crypto/rc4/build.info
@@ -3,8 +3,7 @@ SOURCE[../../libcrypto]=\
         {- $target{rc4_asm_src} -}
 
 GENERATE[rc4-586.s]=asm/rc4-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[rc4-586.s]=../perlasm/x86asm.pl
 
 GENERATE[rc4-x86_64.s]=asm/rc4-x86_64.pl $(PERLASM_SCHEME)
diff --git a/crypto/rc5/build.info b/crypto/rc5/build.info
index 6a22594..928a62c 100644
--- a/crypto/rc5/build.info
+++ b/crypto/rc5/build.info
@@ -3,5 +3,5 @@ SOURCE[../../libcrypto]=\
         rc5_skey.c rc5_ecb.c {- $target{rc5_asm_src} -} rc5cfb64.c rc5ofb64.c
 
 GENERATE[rc5-586.s]=asm/rc5-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 DEPEND[rc5-586.s]=../perlasm/x86asm.pl ../perlasm/cbc.pl
diff --git a/crypto/ripemd/build.info b/crypto/ripemd/build.info
index 9dc7a76..a4a894e 100644
--- a/crypto/ripemd/build.info
+++ b/crypto/ripemd/build.info
@@ -3,5 +3,5 @@ SOURCE[../../libcrypto]=\
         rmd_dgst.c rmd_one.c {- $target{rmd160_asm_src} -}
 
 GENERATE[rmd-586.s]=asm/rmd-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 DEPEND[rmd-586.s]=../perlasm/x86asm.pl
diff --git a/crypto/sha/build.info b/crypto/sha/build.info
index 4044b3f..9dffec3 100644
--- a/crypto/sha/build.info
+++ b/crypto/sha/build.info
@@ -4,24 +4,18 @@ SOURCE[../../libcrypto]=\
         keccak1600.c
 
 GENERATE[sha1-586.s]=asm/sha1-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[sha1-586.s]=../perlasm/x86asm.pl
 GENERATE[sha256-586.s]=asm/sha256-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[sha256-586.s]=../perlasm/x86asm.pl
 GENERATE[sha512-586.s]=asm/sha512-586.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[sha512-586.s]=../perlasm/x86asm.pl
 
-GENERATE[sha1-ia64.s]=asm/sha1-ia64.pl \
-        $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
-GENERATE[sha256-ia64.s]=asm/sha512-ia64.pl \
-        $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
-GENERATE[sha512-ia64.s]=asm/sha512-ia64.pl \
-        $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS)
+GENERATE[sha1-ia64.s]=asm/sha1-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+GENERATE[sha256-ia64.s]=asm/sha512-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
+GENERATE[sha512-ia64.s]=asm/sha512-ia64.pl $(LIB_CFLAGS) $(LIB_CPPFLAGS)
 
 GENERATE[sha1-alpha.S]=asm/sha1-alpha.pl $(PERLASM_SCHEME)
 
diff --git a/crypto/whrlpool/build.info b/crypto/whrlpool/build.info
index 6044d7b..4b167b5 100644
--- a/crypto/whrlpool/build.info
+++ b/crypto/whrlpool/build.info
@@ -2,8 +2,7 @@ LIBS=../../libcrypto
 SOURCE[../../libcrypto]=wp_dgst.c {- $target{wp_asm_src} -}
 
 GENERATE[wp-mmx.s]=asm/wp-mmx.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
 DEPEND[wp-mmx.s]=../perlasm/x86asm.pl
 
 GENERATE[wp-x86_64.s]=asm/wp-x86_64.pl $(PERLASM_SCHEME)
diff --git a/engines/build.info b/engines/build.info
index ad5cc16..df173ea 100644
--- a/engines/build.info
+++ b/engines/build.info
@@ -38,7 +38,6 @@ IF[{- !$disabled{"engine"} -}]
   ENDIF
 
   GENERATE[e_padlock-x86.s]=asm/e_padlock-x86.pl \
-        $(PERLASM_SCHEME) $(CFLAGS) $(LIB_CFLAGS) $(CPPFLAGS) $(LIB_CPPFLAGS) \
-        $(PROCESSOR)
+        $(PERLASM_SCHEME) $(LIB_CFLAGS) $(LIB_CPPFLAGS) $(PROCESSOR)
   GENERATE[e_padlock-x86_64.s]=asm/e_padlock-x86_64.pl $(PERLASM_SCHEME)
 ENDIF

From matthias.st.pierre at ncp-e.com  Wed Feb 14 16:16:51 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Wed, 14 Feb 2018 16:16:51 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518625011.325738.8641.nullmailer@dev.openssl.org>

The branch master has been updated
       via  87e17dc550318a7217dbb521603f0b096dff1764 (commit)
      from  0f4844a9d5eff470e1f1bfa4db4cc1fb90dc9a21 (commit)


- Log -----------------------------------------------------------------
commit 87e17dc550318a7217dbb521603f0b096dff1764
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Wed Feb 14 16:56:09 2018 +0100

    PEM_read_bio_PrivateKey.pod: replace geek speek by something more serious
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5369)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/PEM_read_bio_PrivateKey.pod | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/man3/PEM_read_bio_PrivateKey.pod b/doc/man3/PEM_read_bio_PrivateKey.pod
index 67b99be..4ff5b2d 100644
--- a/doc/man3/PEM_read_bio_PrivateKey.pod
+++ b/doc/man3/PEM_read_bio_PrivateKey.pod
@@ -161,9 +161,9 @@ For more details about the meaning of arguments see the
 B<PEM FUNCTION ARGUMENTS> section.
 
 Each operation has four functions associated with it. For
-clarity the term "B<foobar> functions" will be used to collectively
-refer to the PEM_read_bio_foobar(), PEM_read_foobar(),
-PEM_write_bio_foobar() and PEM_write_foobar() functions.
+brevity the term "B<TYPE> functions" will be used below to collectively
+refer to the PEM_read_bio_TYPE(), PEM_read_TYPE(),
+PEM_write_bio_TYPE(), and PEM_write_TYPE() functions.
 
 The B<PrivateKey> functions read or write a private key in PEM format using an
 EVP_PKEY structure. The write routines use PKCS#8 private key format and are

From builds at travis-ci.org  Wed Feb 14 16:26:42 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 16:26:42 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16358 (master - cb1c3d1)
In-Reply-To: <openssl/openssl+341492639+passed@travis-ci.org>
Message-ID: <5a846341db189_43fb75990cc5c1270781@fc5d5a28-b18a-4646-a3f9-cb039adf816b.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16358
Status: Passed

Duration: 42 minutes and 26 seconds
Commit: cb1c3d1 (master)
Author: Matt Caswell
Message: Make sure we check the return value of extract_min_max()

Commit 42d7d7dd6 turned this function from returning void to
returning an int error code. This instance of calling it was
missed.

Found by Coverity.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5338)

View the changeset: https://github.com/openssl/openssl/compare/62542d046483...cb1c3d1a2714

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341492639?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/da3d746d/attachment.html>

From builds at travis-ci.org  Wed Feb 14 16:47:56 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 14 Feb 2018 16:47:56 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16359 (master - 6e99ae5)
In-Reply-To: <openssl/openssl+341496865+passed@travis-ci.org>
Message-ID: <5a84683c3e22c_43f995d9130d01284533@3ac35fc6-5091-4529-be93-cb9830d331b1.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16359
Status: Passed

Duration: 47 minutes and 5 seconds
Commit: 6e99ae5 (master)
Author: Matt Caswell
Message: Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitable

The s_client psk_use_session_cb callback has a comment stating that we
should ignore a key that isn't suitable for TLSv1.3. However we were
actually causing the connection to fail. Changing the return value fixes
the issue.

Also related to this is that the early_data extension was not marked as
TLSv1.3 only which it should be.

Fixes #5202

Reviewed-by: Ben Kaduk <kaduk at mit.edu>
(Merged from https://github.com/openssl/openssl/pull/5205)

View the changeset: https://github.com/openssl/openssl/compare/cb1c3d1a2714...6e99ae58c8e1

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341496865?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/4ae373fa/attachment-0001.html>

From levitte at openssl.org  Wed Feb 14 19:11:10 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 14 Feb 2018 19:11:10 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518635470.089738.3309.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4fd39122e51c3c44fcb72fb9b732d5008efda399 (commit)
      from  87e17dc550318a7217dbb521603f0b096dff1764 (commit)


- Log -----------------------------------------------------------------
commit 4fd39122e51c3c44fcb72fb9b732d5008efda399
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 14 10:28:08 2018 +0100

    OSSL_STORE: Add OSSL_STORE_vctrl()
    
    It's a convenient complement to OSSL_STORE_ctrl()
    
    Suggested by Norm Green
    
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    (Merged from https://github.com/openssl/openssl/pull/5363)

-----------------------------------------------------------------------

Summary of changes:
 crypto/store/store_lib.c | 12 +++++++++---
 include/openssl/store.h  |  1 +
 util/libcrypto.num       |  1 +
 3 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/crypto/store/store_lib.c b/crypto/store/store_lib.c
index 2cc247d..24876a3 100644
--- a/crypto/store/store_lib.c
+++ b/crypto/store/store_lib.c
@@ -109,16 +109,22 @@ OSSL_STORE_CTX *OSSL_STORE_open(const char *uri, const UI_METHOD *ui_method,
 int OSSL_STORE_ctrl(OSSL_STORE_CTX *ctx, int cmd, ...)
 {
     va_list args;
-    int ret = 0;
+    int ret;
 
     va_start(args, cmd);
-    if (ctx->loader->ctrl != NULL)
-        ret = ctx->loader->ctrl(ctx->loader_ctx, cmd, args);
+    ret = OSSL_STORE_vctrl(ctx, cmd, args);
     va_end(args);
 
     return ret;
 }
 
+int OSSL_STORE_vctrl(OSSL_STORE_CTX *ctx, int cmd, va_list args)
+{
+    if (ctx->loader->ctrl != NULL)
+        return ctx->loader->ctrl(ctx->loader_ctx, cmd, args);
+    return 0;
+}
+
 OSSL_STORE_INFO *OSSL_STORE_load(OSSL_STORE_CTX *ctx)
 {
     OSSL_STORE_INFO *v = NULL;
diff --git a/include/openssl/store.h b/include/openssl/store.h
index 8ec2edc..ff42953 100644
--- a/include/openssl/store.h
+++ b/include/openssl/store.h
@@ -58,6 +58,7 @@ OSSL_STORE_CTX *OSSL_STORE_open(const char *uri, const UI_METHOD *ui_method,
  * Each command takes different arguments.
  */
 int OSSL_STORE_ctrl(OSSL_STORE_CTX *ctx, int cmd, ... /* args */);
+int OSSL_STORE_vctrl(OSSL_STORE_CTX *ctx, int cmd, va_list args);
 
 /*
  * Common ctrl commands that different loaders may choose to support.
diff --git a/util/libcrypto.num b/util/libcrypto.num
index c7be540..c4384e6 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -4505,3 +4505,4 @@ RAND_DRBG_lock                          4446	1_1_1	EXIST::FUNCTION:
 RAND_DRBG_unlock                        4447	1_1_1	EXIST::FUNCTION:
 RAND_DRBG_enable_locking                4448	1_1_1	EXIST::FUNCTION:
 RAND_DRBG_secure_new                    4449	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_vctrl                        4450	1_1_1	EXIST::FUNCTION:

From no-reply at appveyor.com  Wed Feb 14 19:11:18 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 14 Feb 2018 19:11:18 +0000
Subject: [openssl-commits] Build failed: openssl master.15663
Message-ID: <20180214191118.1.8756893D2D1544B5@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/09ea3188/attachment.html>

From kaduk at mit.edu  Wed Feb 14 19:15:30 2018
From: kaduk at mit.edu (kaduk at mit.edu)
Date: Wed, 14 Feb 2018 19:15:30 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518635730.359409.5243.nullmailer@dev.openssl.org>

The branch master has been updated
       via  0b80103bfa12fcd461e8642d351fff40d650313b (commit)
      from  4fd39122e51c3c44fcb72fb9b732d5008efda399 (commit)


- Log -----------------------------------------------------------------
commit 0b80103bfa12fcd461e8642d351fff40d650313b
Author: Benjamin Kaduk <bkaduk at akamai.com>
Date:   Wed Feb 14 12:04:16 2018 -0600

    Auto-size more of configdata.pm "disabled features"
    
    configdata.pm -d prints out a lot of information, including a table
    of what features are disabled, why, and the effect of that disablement
    (in terms of preprocessor symbols defined and directories skipped).
    The first column is already auto-sized, to easily accomodate future
    disableable features with long names.  Also auto-size the second column,
    to accomodate future reasons for disablement with long names as well.
    
    Failing to take such precautions results in stderr spew from
    configdata.pm -d when such long reasons are in use:
    
       Negative repeat count does nothing at ./configdata.pm line 14504.
    
    Such output is pretty distracting from the actual desired output,
    so try to avoid it if possible.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5371)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Configure b/Configure
index 2389e52..cfe3625 100755
--- a/Configure
+++ b/Configure
@@ -2379,8 +2379,10 @@ _____
     }
     if ($dump || $options) {
         my $longest = 0;
+        my $longest2 = 0;
         foreach my $what (@disablables) {
             $longest = length($what) if $longest < length($what);
+            $longest2 = length($disabled{$what}) if $longest2 < length($disabled{$what});
         }
         print "\nEnabled features:\n\n";
         foreach my $what (@disablables) {
@@ -2390,7 +2392,7 @@ _____
         foreach my $what (@disablables) {
             if ($disabled{$what}) {
                 print "    $what", ' ' x ($longest - length($what) + 1),
-                    "[$disabled{$what}]", ' ' x (10 - length($disabled{$what}));
+                    "[$disabled{$what}]", ' ' x ($longest2 - length($disabled{$what}) + 1);
                 print $disabled_info{$what}->{macro}
                     if $disabled_info{$what}->{macro};
                 print ' (skip ',

From no-reply at appveyor.com  Wed Feb 14 20:51:07 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 14 Feb 2018 20:51:07 +0000
Subject: [openssl-commits] Build failed: openssl master.15668
Message-ID: <20180214205107.1.3C250CED31B98B53@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/64cb43cf/attachment.html>

From no-reply at appveyor.com  Wed Feb 14 21:19:14 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 14 Feb 2018 21:19:14 +0000
Subject: [openssl-commits] Build completed: openssl master.15669
Message-ID: <20180214211914.1.34F131BFDD25605B@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180214/10520c9b/attachment.html>

From levitte at openssl.org  Thu Feb 15 09:58:41 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 15 Feb 2018 09:58:41 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518688721.901711.25371.nullmailer@dev.openssl.org>

The branch master has been updated
       via  c3d76bb254eb33dbe2cd23e00f5f135f3c12381c (commit)
      from  0b80103bfa12fcd461e8642d351fff40d650313b (commit)


- Log -----------------------------------------------------------------
commit c3d76bb254eb33dbe2cd23e00f5f135f3c12381c
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 15 10:06:15 2018 +0100

    NOTES.UNIX: add additional note about --enable-new-dtags
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5374)

-----------------------------------------------------------------------

Summary of changes:
 NOTES.UNIX | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/NOTES.UNIX b/NOTES.UNIX
index 43146e9..3236107 100644
--- a/NOTES.UNIX
+++ b/NOTES.UNIX
@@ -28,3 +28,15 @@
 
     $ ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl \
         -Wl,-rpath,'$(LIBRPATH)'
+
+ On modern systems using GNU ld.so, a better choice may be to use the
+ new dtags, like this:
+
+    $ ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl \
+        -Wl,--enable-new-dtags,-rpath,'$(LIBRPATH)'
+
+ This sets DT_RUNPATH instead of DT_RPATH.  DT_RUNPATH is considered after
+ the environment variable LD_LIBRARY_PATH, while DT_RPATH is considered
+ before that environment variable (which means that the values in that
+ environment variable won't matter if the library is found in the
+ paths given by DT_RPATH).

From bernd.edlinger at hotmail.de  Thu Feb 15 10:57:37 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Thu, 15 Feb 2018 10:57:37 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518692257.135700.16873.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4d921bfb8b4161f735e5d3bc19fae264816c9c40 (commit)
      from  c3d76bb254eb33dbe2cd23e00f5f135f3c12381c (commit)


- Log -----------------------------------------------------------------
commit 4d921bfb8b4161f735e5d3bc19fae264816c9c40
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Wed Feb 14 21:30:32 2018 +0100

    Fix a gcc warning about possible fall through
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5373)

-----------------------------------------------------------------------

Summary of changes:
 test/handshake_helper.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/test/handshake_helper.c b/test/handshake_helper.c
index 16d2d73..c0265ab 100644
--- a/test/handshake_helper.c
+++ b/test/handshake_helper.c
@@ -1155,6 +1155,7 @@ static handshake_status_t handshake_status(peer_status_t last_status,
              */
             return INTERNAL_ERROR;
         }
+        break;
 
     case PEER_RETRY:
         return HANDSHAKE_RETRY;

From matthias.st.pierre at ncp-e.com  Thu Feb 15 11:26:57 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Thu, 15 Feb 2018 11:26:57 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518694017.018690.13488.nullmailer@dev.openssl.org>

The branch master has been updated
       via  812b15370613da4768d91b9e566fdf5a30c06805 (commit)
      from  4d921bfb8b4161f735e5d3bc19fae264816c9c40 (commit)


- Log -----------------------------------------------------------------
commit 812b15370613da4768d91b9e566fdf5a30c06805
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Thu Feb 15 10:29:56 2018 +0100

    DRBG: make locking api truly private
    
    In PR #5295 it was decided that the locking api should remain private
    and used only inside libcrypto. However, the locking functions were added
    back to `libcrypto.num` by `mkdef.pl`, because the function prototypes
    were still listed in `internal/rand.h`. (This header contains functions
    which are internal, but shared between libcrypto and libssl.)
    
    This commit moves the prototypes to `rand_lcl.h` and changes the names
    to lowercase, following the convention therein. It also corrects an
    outdated documenting comment.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5375)

-----------------------------------------------------------------------

Summary of changes:
 crypto/err/openssl.txt  |  2 +-
 crypto/rand/drbg_lib.c  | 42 +++++++++++++++++++++---------------------
 crypto/rand/rand_err.c  |  2 +-
 crypto/rand/rand_lcl.h  |  6 ++++++
 crypto/rand/rand_lib.c  | 12 ++++++------
 include/internal/rand.h |  4 ----
 util/libcrypto.num      |  7 ++-----
 7 files changed, 37 insertions(+), 38 deletions(-)

diff --git a/crypto/err/openssl.txt b/crypto/err/openssl.txt
index 8d00463..43001be 100644
--- a/crypto/err/openssl.txt
+++ b/crypto/err/openssl.txt
@@ -890,7 +890,7 @@ RAND_F_DRBG_GET_ENTROPY:105:drbg_get_entropy
 RAND_F_DRBG_SETUP:117:drbg_setup
 RAND_F_GET_ENTROPY:106:get_entropy
 RAND_F_RAND_BYTES:100:RAND_bytes
-RAND_F_RAND_DRBG_ENABLE_LOCKING:119:RAND_DRBG_enable_locking
+RAND_F_RAND_DRBG_ENABLE_LOCKING:119:rand_drbg_enable_locking
 RAND_F_RAND_DRBG_GENERATE:107:RAND_DRBG_generate
 RAND_F_RAND_DRBG_INSTANTIATE:108:RAND_DRBG_instantiate
 RAND_F_RAND_DRBG_NEW:109:RAND_DRBG_new
diff --git a/crypto/rand/drbg_lib.c b/crypto/rand/drbg_lib.c
index c592a7b..c43f571 100644
--- a/crypto/rand/drbg_lib.c
+++ b/crypto/rand/drbg_lib.c
@@ -94,17 +94,17 @@ static RAND_DRBG *drbg_private;
  * LOCKING
  *
  * The three shared DRBGs are intended to be used concurrently, so they
- * support locking by default. It is the callers responsibility to wrap
- * calls to functions like RAND_DRBG_generate() which modify the DRBGs
- * internal state with calls to RAND_DRBG_lock() and RAND_DRBG_unlock().
- * The functions RAND_bytes() and RAND_priv_bytes() take the locks
- * automatically, so using the RAND api is thread safe as before.
- *
- * All other DRBG instances don't have locking enabled by default, because
- * they are intendended to be used by a single thread. If it is desired,
- * locking can be enabled using RAND_DRBG_enable_locking(). However, instead
- * of accessing a single DRBG instance concurrently from different threads,
- * it is recommended to instantiate a separate DRBG instance per thread.
+ * support locking. The RAND methods take the locks automatically, so using
+ * the RAND api (in particular RAND_bytes() and RAND_priv_bytes()) is
+ * thread-safe. Note however that accessing the shared DRBGs directly via
+ * the RAND_DRBG interface is *not* thread-safe.
+ *
+ * All other DRBG instances don't support locking, because they are
+ * intendended to be used by a single thread. Instead of accessing a single
+ * DRBG instance concurrently from different threads, it is recommended to
+ * instantiate a separate DRBG instance per thread. Using the same shared
+ * DRBG (preferrably the public DRBG) as parent of DRBG instances on
+ * different threads is safe.
  */
 
 
@@ -708,7 +708,7 @@ int RAND_DRBG_set_reseed_time_interval(RAND_DRBG *drbg, time_t interval)
  *
  * Returns 1 on success, 0 on failure.
  */
-int RAND_DRBG_lock(RAND_DRBG *drbg)
+int rand_drbg_lock(RAND_DRBG *drbg)
 {
     if (drbg->lock != NULL)
         return CRYPTO_THREAD_write_lock(drbg->lock);
@@ -722,7 +722,7 @@ int RAND_DRBG_lock(RAND_DRBG *drbg)
  *
  * Returns 1 on success, 0 on failure.
  */
-int RAND_DRBG_unlock(RAND_DRBG *drbg)
+int rand_drbg_unlock(RAND_DRBG *drbg)
 {
     if (drbg->lock != NULL)
         return CRYPTO_THREAD_unlock(drbg->lock);
@@ -738,7 +738,7 @@ int RAND_DRBG_unlock(RAND_DRBG *drbg)
  *
  * Returns 1 on success, 0 on failure.
  */
-int RAND_DRBG_enable_locking(RAND_DRBG *drbg)
+int rand_drbg_enable_locking(RAND_DRBG *drbg)
 {
     if (drbg->state != DRBG_UNINITIALISED) {
         RANDerr(RAND_F_RAND_DRBG_ENABLE_LOCKING,
@@ -797,7 +797,7 @@ static RAND_DRBG *drbg_setup(RAND_DRBG *parent)
     if (drbg == NULL)
         return NULL;
 
-    if (RAND_DRBG_enable_locking(drbg) == 0)
+    if (rand_drbg_enable_locking(drbg) == 0)
         goto err;
 
     if (parent == NULL) {
@@ -869,9 +869,9 @@ static int drbg_bytes(unsigned char *out, int count)
     if (drbg == NULL)
         return 0;
 
-    RAND_DRBG_lock(drbg);
+    rand_drbg_lock(drbg);
     ret = RAND_DRBG_bytes(drbg, out, count);
-    RAND_DRBG_unlock(drbg);
+    rand_drbg_unlock(drbg);
 
     return ret;
 }
@@ -898,11 +898,11 @@ static int drbg_add(const void *buf, int num, double randomness)
         return 0;
     }
 
-    RAND_DRBG_lock(drbg);
+    rand_drbg_lock(drbg);
     ret = rand_drbg_restart(drbg, buf,
                             (size_t)(unsigned int)num,
                             (size_t)(8*randomness));
-    RAND_DRBG_unlock(drbg);
+    rand_drbg_unlock(drbg);
 
     return ret;
 }
@@ -922,9 +922,9 @@ static int drbg_status(void)
     if (drbg == NULL)
         return 0;
 
-    RAND_DRBG_lock(drbg);
+    rand_drbg_lock(drbg);
     ret = drbg->state == DRBG_READY ? 1 : 0;
-    RAND_DRBG_unlock(drbg);
+    rand_drbg_unlock(drbg);
     return ret;
 }
 
diff --git a/crypto/rand/rand_err.c b/crypto/rand/rand_err.c
index e8ec44a..e92c33f 100644
--- a/crypto/rand/rand_err.c
+++ b/crypto/rand/rand_err.c
@@ -20,7 +20,7 @@ static const ERR_STRING_DATA RAND_str_functs[] = {
     {ERR_PACK(ERR_LIB_RAND, RAND_F_GET_ENTROPY, 0), "get_entropy"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_BYTES, 0), "RAND_bytes"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_ENABLE_LOCKING, 0),
-     "RAND_DRBG_enable_locking"},
+     "rand_drbg_enable_locking"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_GENERATE, 0),
      "RAND_DRBG_generate"},
     {ERR_PACK(ERR_LIB_RAND, RAND_F_RAND_DRBG_INSTANTIATE, 0),
diff --git a/crypto/rand/rand_lcl.h b/crypto/rand/rand_lcl.h
index a63b28b..ceba8bb 100644
--- a/crypto/rand/rand_lcl.h
+++ b/crypto/rand/rand_lcl.h
@@ -222,6 +222,12 @@ size_t rand_drbg_get_additional_data(unsigned char **pout, size_t max_len);
 int rand_drbg_restart(RAND_DRBG *drbg,
                       const unsigned char *buffer, size_t len, size_t entropy);
 
+/* locking api */
+int rand_drbg_lock(RAND_DRBG *drbg);
+int rand_drbg_unlock(RAND_DRBG *drbg);
+int rand_drbg_enable_locking(RAND_DRBG *drbg);
+
+
 /* initializes the AES-CTR DRBG implementation */
 int drbg_ctr_init(RAND_DRBG *drbg);
 
diff --git a/crypto/rand/rand_lib.c b/crypto/rand/rand_lib.c
index 289acf3..7b8b8fc 100644
--- a/crypto/rand/rand_lib.c
+++ b/crypto/rand/rand_lib.c
@@ -203,13 +203,13 @@ size_t rand_drbg_get_entropy(RAND_DRBG *drbg,
              * generating bits from it. (Note: taking the lock will be a no-op
              * if locking if drbg->parent->lock == NULL.)
              */
-            RAND_DRBG_lock(drbg->parent);
+            rand_drbg_lock(drbg->parent);
             if (RAND_DRBG_generate(drbg->parent,
                                    buffer, bytes_needed,
                                    0,
                                    (unsigned char *)drbg, sizeof(*drbg)) != 0)
                 bytes = bytes_needed;
-            RAND_DRBG_unlock(drbg->parent);
+            rand_drbg_unlock(drbg->parent);
 
             entropy_available = RAND_POOL_add_end(pool, bytes, 8 * bytes);
         }
@@ -405,9 +405,9 @@ int RAND_poll(void)
         if (drbg == NULL)
             return 0;
 
-        RAND_DRBG_lock(drbg);
+        rand_drbg_lock(drbg);
         ret = rand_drbg_restart(drbg, NULL, 0, 0);
-        RAND_DRBG_unlock(drbg);
+        rand_drbg_unlock(drbg);
 
         return ret;
 
@@ -797,9 +797,9 @@ int RAND_priv_bytes(unsigned char *buf, int num)
         return 0;
 
     /* We have to lock the DRBG before generating bits from it. */
-    RAND_DRBG_lock(drbg);
+    rand_drbg_lock(drbg);
     ret = RAND_DRBG_bytes(drbg, buf, num);
-    RAND_DRBG_unlock(drbg);
+    rand_drbg_unlock(drbg);
     return ret;
 }
 
diff --git a/include/internal/rand.h b/include/internal/rand.h
index 8d3e452..d56742e 100644
--- a/include/internal/rand.h
+++ b/include/internal/rand.h
@@ -48,10 +48,6 @@ int RAND_DRBG_bytes(RAND_DRBG *drbg, unsigned char *out, size_t outlen);
 int RAND_DRBG_set_reseed_interval(RAND_DRBG *drbg, unsigned int interval);
 int RAND_DRBG_set_reseed_time_interval(RAND_DRBG *drbg, time_t interval);
 
-int RAND_DRBG_lock(RAND_DRBG *drbg);
-int RAND_DRBG_unlock(RAND_DRBG *drbg);
-int RAND_DRBG_enable_locking(RAND_DRBG *drbg);
-
 RAND_DRBG *RAND_DRBG_get0_master(void);
 RAND_DRBG *RAND_DRBG_get0_public(void);
 RAND_DRBG *RAND_DRBG_get0_private(void);
diff --git a/util/libcrypto.num b/util/libcrypto.num
index c4384e6..5456063 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -4501,8 +4501,5 @@ EVP_sha512_256                          4442	1_1_1	EXIST::FUNCTION:
 EVP_sha512_224                          4443	1_1_1	EXIST::FUNCTION:
 OCSP_basic_sign_ctx                     4444	1_1_1	EXIST::FUNCTION:OCSP
 RAND_DRBG_bytes                         4445	1_1_1	EXIST::FUNCTION:
-RAND_DRBG_lock                          4446	1_1_1	EXIST::FUNCTION:
-RAND_DRBG_unlock                        4447	1_1_1	EXIST::FUNCTION:
-RAND_DRBG_enable_locking                4448	1_1_1	EXIST::FUNCTION:
-RAND_DRBG_secure_new                    4449	1_1_1	EXIST::FUNCTION:
-OSSL_STORE_vctrl                        4450	1_1_1	EXIST::FUNCTION:
+RAND_DRBG_secure_new                    4446	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_vctrl                        4447	1_1_1	EXIST::FUNCTION:

From matt at openssl.org  Thu Feb 15 15:23:26 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 15 Feb 2018 15:23:26 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518708206.710643.14297.nullmailer@dev.openssl.org>

The branch master has been updated
       via  c471521243c729d344c2ab641feed7cfb7b8a36d (commit)
      from  812b15370613da4768d91b9e566fdf5a30c06805 (commit)


- Log -----------------------------------------------------------------
commit c471521243c729d344c2ab641feed7cfb7b8a36d
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 16:24:59 2018 +0000

    If s->ctx is NULL then this is an internal error
    
    Coverity was complaining because we checked if s->ctx is NULL and then
    later on in the function deref s->ctx anyway. In reality if s->ctx is
    NULL then this is an internal error.
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    (Merged from https://github.com/openssl/openssl/pull/5334)

-----------------------------------------------------------------------

Summary of changes:
 ssl/statem/extensions.c | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/ssl/statem/extensions.c b/ssl/statem/extensions.c
index 7d456f3..722943f 100644
--- a/ssl/statem/extensions.c
+++ b/ssl/statem/extensions.c
@@ -915,11 +915,16 @@ static int final_server_name(SSL *s, unsigned int context, int sent)
     int altmp = SSL_AD_UNRECOGNIZED_NAME;
     int was_ticket = (SSL_get_options(s) & SSL_OP_NO_TICKET) == 0;
 
-    if (s->ctx != NULL && s->ctx->ext.servername_cb != 0)
+    if (!ossl_assert(s->ctx != NULL) || !ossl_assert(s->session_ctx != NULL)) {
+        SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_FINAL_SERVER_NAME,
+                 ERR_R_INTERNAL_ERROR);
+        return 0;
+    }
+
+    if (s->ctx->ext.servername_cb != NULL)
         ret = s->ctx->ext.servername_cb(s, &altmp,
                                         s->ctx->ext.servername_arg);
-    else if (s->session_ctx != NULL
-             && s->session_ctx->ext.servername_cb != 0)
+    else if (s->session_ctx->ext.servername_cb != NULL)
         ret = s->session_ctx->ext.servername_cb(s, &altmp,
                                        s->session_ctx->ext.servername_arg);
 

From matt at openssl.org  Thu Feb 15 15:32:34 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 15 Feb 2018 15:32:34 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518708754.460462.23848.nullmailer@dev.openssl.org>

The branch master has been updated
       via  0d502c3511ab3b1c8acb129fb3af836727b8092d (commit)
       via  bc2a0dd283c0f61df572b8c2aaf3bfc2dd4b7571 (commit)
      from  c471521243c729d344c2ab641feed7cfb7b8a36d (commit)


- Log -----------------------------------------------------------------
commit 0d502c3511ab3b1c8acb129fb3af836727b8092d
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 17:47:50 2018 +0000

    Check the return code from ASN1_TIME_diff()
    
    The function can fail so we should check the return code.
    
    Found by Coverity
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5339)

commit bc2a0dd283c0f61df572b8c2aaf3bfc2dd4b7571
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 17:43:38 2018 +0000

    The function X509_gmtime_adj() can fail
    
    Check for a failure and free a_tm as appropriate.
    
    Found by Coverity
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5339)

-----------------------------------------------------------------------

Summary of changes:
 apps/ca.c | 21 +++++++++++++--------
 1 file changed, 13 insertions(+), 8 deletions(-)

diff --git a/apps/ca.c b/apps/ca.c
index 0c16050..26c0778 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1095,13 +1095,13 @@ end_of_options:
             goto end;
 
         tmptm = ASN1_TIME_new();
-        if (tmptm == NULL)
-            goto end;
-        X509_gmtime_adj(tmptm, 0);
-        X509_CRL_set1_lastUpdate(crl, tmptm);
-        if (!X509_time_adj_ex(tmptm, crldays, crlhours * 60 * 60 + crlsec,
-                              NULL)) {
+        if (tmptm == NULL
+                || X509_gmtime_adj(tmptm, 0) == NULL
+                || !X509_CRL_set1_lastUpdate(crl, tmptm)
+                || X509_time_adj_ex(tmptm, crldays, crlhours * 60 * 60 + crlsec,
+                                    NULL) == NULL) {
             BIO_puts(bio_err, "error setting CRL nextUpdate\n");
+            ASN1_TIME_free(tmptm);
             goto end;
         }
         X509_CRL_set1_nextUpdate(crl, tmptm);
@@ -1706,7 +1706,9 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
 
     if (enddate != NULL) {
         int tdays;
-        ASN1_TIME_diff(&tdays, NULL, NULL, X509_get0_notAfter(ret));
+
+        if (!ASN1_TIME_diff(&tdays, NULL, NULL, X509_get0_notAfter(ret)))
+            goto end;
         days = tdays;
     }
 
@@ -2209,7 +2211,10 @@ static int do_updatedb(CA_DB *db)
         return -1;
 
     /* get actual time and make a string */
-    a_tm = X509_gmtime_adj(a_tm, 0);
+    if (X509_gmtime_adj(a_tm, 0) == NULL) {
+        ASN1_UTCTIME_free(a_tm);
+        return -1;
+    }
     a_tm_s = app_malloc(a_tm->length + 1, "time string");
 
     memcpy(a_tm_s, a_tm->data, a_tm->length);

From matt at openssl.org  Thu Feb 15 15:32:46 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 15 Feb 2018 15:32:46 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1518708766.194710.24780.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  ed1306451f702aae629ccc39d826a96836b3b069 (commit)
       via  eadc6bbb9c472589020a25a94d306610a1d76af5 (commit)
      from  144724c75584054329a9d6bb7711cec527fbf523 (commit)


- Log -----------------------------------------------------------------
commit ed1306451f702aae629ccc39d826a96836b3b069
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 17:47:50 2018 +0000

    Check the return code from ASN1_TIME_diff()
    
    The function can fail so we should check the return code.
    
    Found by Coverity
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5339)
    
    (cherry picked from commit 0d502c3511ab3b1c8acb129fb3af836727b8092d)

commit eadc6bbb9c472589020a25a94d306610a1d76af5
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 17:43:38 2018 +0000

    The function X509_gmtime_adj() can fail
    
    Check for a failure and free a_tm as appropriate.
    
    Found by Coverity
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5339)
    
    (cherry picked from commit bc2a0dd283c0f61df572b8c2aaf3bfc2dd4b7571)

-----------------------------------------------------------------------

Summary of changes:
 apps/ca.c | 21 +++++++++++++--------
 1 file changed, 13 insertions(+), 8 deletions(-)

diff --git a/apps/ca.c b/apps/ca.c
index 633f6e3..26ca6bb 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1095,13 +1095,13 @@ end_of_options:
             goto end;
 
         tmptm = ASN1_TIME_new();
-        if (tmptm == NULL)
-            goto end;
-        X509_gmtime_adj(tmptm, 0);
-        X509_CRL_set1_lastUpdate(crl, tmptm);
-        if (!X509_time_adj_ex(tmptm, crldays, crlhours * 60 * 60 + crlsec,
-                              NULL)) {
+        if (tmptm == NULL
+                || X509_gmtime_adj(tmptm, 0) == NULL
+                || !X509_CRL_set1_lastUpdate(crl, tmptm)
+                || X509_time_adj_ex(tmptm, crldays, crlhours * 60 * 60 + crlsec,
+                                    NULL) == NULL) {
             BIO_puts(bio_err, "error setting CRL nextUpdate\n");
+            ASN1_TIME_free(tmptm);
             goto end;
         }
         X509_CRL_set1_nextUpdate(crl, tmptm);
@@ -1711,7 +1711,9 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
 
     if (enddate != NULL) {
         int tdays;
-        ASN1_TIME_diff(&tdays, NULL, NULL, X509_get0_notAfter(ret));
+
+        if (!ASN1_TIME_diff(&tdays, NULL, NULL, X509_get0_notAfter(ret)))
+            goto end;
         days = tdays;
     }
 
@@ -2215,7 +2217,10 @@ static int do_updatedb(CA_DB *db)
         return -1;
 
     /* get actual time and make a string */
-    a_tm = X509_gmtime_adj(a_tm, 0);
+    if (X509_gmtime_adj(a_tm, 0) == NULL) {
+        ASN1_UTCTIME_free(a_tm);
+        return -1;
+    }
     a_tm_s = app_malloc(a_tm->length + 1, "time string");
 
     memcpy(a_tm_s, a_tm->data, a_tm->length);

From builds at travis-ci.org  Thu Feb 15 17:17:37 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 15 Feb 2018 17:17:37 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16385 (master - 0d502c3)
In-Reply-To: <openssl/openssl+341938439+errored@travis-ci.org>
Message-ID: <5a85c0b177fc0_43f88dc48dc2c804e@09b046d5-76c4-40f0-8e3a-1e8ca68ec823.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16385
Status: Errored

Duration: 43 minutes and 11 seconds
Commit: 0d502c3 (master)
Author: Matt Caswell
Message: Check the return code from ASN1_TIME_diff()

The function can fail so we should check the return code.

Found by Coverity

Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/5339)

View the changeset: https://github.com/openssl/openssl/compare/c471521243c7...0d502c3511ab

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341938439?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180215/79710273/attachment.html>

From builds at travis-ci.org  Thu Feb 15 21:22:50 2018
From: builds at travis-ci.org (Travis CI)
Date: Thu, 15 Feb 2018 21:22:50 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16385 (master - 0d502c3)
In-Reply-To: <openssl/openssl+341938439+errored@travis-ci.org>
Message-ID: <5a85fa0e27d28_43f88dc4840dc45243b@09b046d5-76c4-40f0-8e3a-1e8ca68ec823.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16385
Status: Errored

Duration: 32 minutes and 6 seconds
Commit: 0d502c3 (master)
Author: Matt Caswell
Message: Check the return code from ASN1_TIME_diff()

The function can fail so we should check the return code.

Found by Coverity

Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/5339)

View the changeset: https://github.com/openssl/openssl/compare/c471521243c7...0d502c3511ab

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/341938439?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180215/b88f5f0f/attachment-0001.html>

From levitte at openssl.org  Thu Feb 15 22:05:48 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 15 Feb 2018 22:05:48 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518732348.390270.9958.nullmailer@dev.openssl.org>

The branch master has been updated
       via  6475b64978083750018db90c60f4df142aa2e28f (commit)
      from  0d502c3511ab3b1c8acb129fb3af836727b8092d (commit)


- Log -----------------------------------------------------------------
commit 6475b64978083750018db90c60f4df142aa2e28f
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 15 22:38:24 2018 +0100

    AIX: make sure that the arflags value includes the command letter (r)
    
    In previous OpenSSL versions, this letter was part of the make
    variable AR.  However, following the usual convention (read: GNU),
    this letter is supposed to be part of ARFLAGS.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5386)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/10-main.conf | 8 ++++----
 Configurations/README       | 3 ++-
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/Configurations/10-main.conf b/Configurations/10-main.conf
index 95097ca..3ee0717 100644
--- a/Configurations/10-main.conf
+++ b/Configurations/10-main.conf
@@ -1232,7 +1232,7 @@ my %targets = (
         shared_target    => "aix-shared",
         shared_ldflag    => "-shared -static-libgcc -Wl,-G",
         shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
-        arflags          => "-X32",
+        arflags          => "-X32 r",
     },
     "aix64-gcc" => {
         inherit_from     => [ "BASE_unix", asm("ppc64_asm") ],
@@ -1251,7 +1251,7 @@ my %targets = (
         shared_target    => "aix-shared",
         shared_ldflag    => "-shared -static-libgcc -Wl,-G",
         shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
-        arflags          => "-X64",
+        arflags          => "-X64 r",
     },
     "aix-cc" => {
         inherit_from     => [ "BASE_unix", asm("ppc32_asm") ],
@@ -1270,7 +1270,7 @@ my %targets = (
         shared_target    => "aix-shared",
         shared_ldflag    => "-G",
         shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
-        arflags          => "-X 32",
+        arflags          => "-X32 r",
     },
     "aix64-cc" => {
         inherit_from     => [ "BASE_unix", asm("ppc64_asm") ],
@@ -1289,7 +1289,7 @@ my %targets = (
         shared_target    => "aix-shared",
         shared_ldflag    => "-G",
         shared_extension => ".so.\$(SHLIB_VERSION_NUMBER)",
-        arflags          => "-X 64",
+        arflags          => "-X64 r",
     },
 
 # SIEMENS BS2000/OSD: an EBCDIC-based mainframe
diff --git a/Configurations/README b/Configurations/README
index 26cd0c6..8d32a25 100644
--- a/Configurations/README
+++ b/Configurations/README
@@ -95,7 +95,8 @@ In each table entry, the following keys are significant:
                            (NOTE: this is here for future use, it's
                            not implemented yet)
         arflags         => Flags to be used with the library archive
-                           command.
+                           command.  On Unix, this includes the
+                           command letter, 'r' by default.
 
         ranlib          => The library archive indexing command, the
                            default is 'ranlib' it it exists.

From levitte at openssl.org  Thu Feb 15 22:13:36 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 15 Feb 2018 22:13:36 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518732816.577722.18477.nullmailer@dev.openssl.org>

The branch master has been updated
       via  51cf8e0b50f677581bff2694942b690bbff630b7 (commit)
      from  6475b64978083750018db90c60f4df142aa2e28f (commit)


- Log -----------------------------------------------------------------
commit 51cf8e0b50f677581bff2694942b690bbff630b7
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 15 18:08:54 2018 +0100

    Configure: move down the treatment of seed sources
    
    Most of all, this is so it doesn't output mysterious text when we're
    treating the phony config targets LISH, HASH and TABLE
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5383)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/Configure b/Configure
index cfe3625..9835cf0 100755
--- a/Configure
+++ b/Configure
@@ -886,17 +886,6 @@ if (grep { $_ =~ /(^|\s)-Wl,-rpath,/ } ($user{LDLIBS} ? @{$user{LDLIBS}} : ())
 	"***** any of asan, msan or ubsan\n";
 }
 
-if (scalar(@seed_sources) == 0) {
-    print "Using implicit seed configuration\n";
-    push @seed_sources, 'os';
-}
-die "Cannot seed with none and anything else"
-    if scalar(grep { $_ eq 'none' } @seed_sources) > 0
-        && scalar(@seed_sources) > 1;
-push @{$config{openssl_other_defines}},
-     map { (my $x = $_) =~ tr|[\-a-z]|[_A-Z]|; "OPENSSL_RAND_SEED_$x" }
-	@seed_sources;
-
 my @tocheckfor = (keys %disabled);
 while (@tocheckfor) {
     my %new_tocheckfor = ();
@@ -940,6 +929,17 @@ if ($target eq "HASH") {
 print "Configuring OpenSSL version $config{version} ($config{version_num}) ";
 print "for $target\n";
 
+if (scalar(@seed_sources) == 0) {
+    print "Using os-specific seed configuration\n";
+    push @seed_sources, 'os';
+}
+die "Cannot seed with none and anything else"
+    if scalar(grep { $_ eq 'none' } @seed_sources) > 0
+        && scalar(@seed_sources) > 1;
+push @{$config{openssl_other_defines}},
+     map { (my $x = $_) =~ tr|[\-a-z]|[_A-Z]|; "OPENSSL_RAND_SEED_$x" }
+	@seed_sources;
+
 # Backward compatibility?
 if ($target =~ m/^CygWin32(-.*)$/) {
     $target = "Cygwin".$1;

From matt at openssl.org  Thu Feb 15 23:25:56 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 15 Feb 2018 23:25:56 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_1-pre1 delete
Message-ID: <1518737156.469725.24992.nullmailer@dev.openssl.org>

The annotated tag OpenSSL_1_1_1-pre1 has been deleted
       was  49527e7167812b31cc7116f7ac43ff339a44aaf6

- Log -----------------------------------------------------------------
6aa85b5b611419582dcec8bd8dbe64e90c442e06 Prepare for 1.1.1-pre1 release
-----------------------------------------------------------------------

From matt at openssl.org  Thu Feb 15 23:26:26 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 15 Feb 2018 23:26:26 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_1-pre1 create
Message-ID: <1518737186.457275.26461.nullmailer@dev.openssl.org>

The annotated tag OpenSSL_1_1_1-pre1 has been created
        at  5b6db3d6cb4cb4c5680ac57876ad997f473577da (tag)
   tagging  dcfa88bb29686f485dbd0e3e3800a7f79b462546 (commit)
  replaces  OpenSSL_1_1_0-pre6
 tagged by  Matt Caswell
        on  Thu Feb 15 23:22:33 2018 +0000

- Log -----------------------------------------------------------------
OpenSSL 1.1.1-pre1 release tag
-----BEGIN PGP SIGNATURE-----

iQEuBAABCAAYBQJahhY5ERxtYXR0QG9wZW5zc2wub3JnAAoJENnE0m0OYESRzogH
/3v0R1+Us+n6Cin3HFwn7mcW+HCaxCy2mzTRRtemjWfJohUOH9CR3EXJERV32+dK
tsXgb7IdGZ862C234RKBozK9IdgkhAwst0T8bTd8OiCCHXHWWGuYAHz5IpxSsPQB
cKFa8WnNltMnHoAbZqLSZm2tCmUO4Hfgc2HB+S4kkKoe8LheAJ1T7PLH97OYF7UV
reqAkJsowEYtL7SRMZMe43WuHhRZq8iHIJmONal3a1I8/UHoP9QJtxnul7PthVER
YrRy2qXKdYk9q49iTyBAoQ1iNCgGrPtmgoE1d21mqTl3fLAr7J15Bbu8y5V4yxEI
LEvff+fdPKYAnVev2aCO/zo=
=VrdL
-----END PGP SIGNATURE-----

Aashil Patel (1):
      Remove unnecessary if condition from apps.c

Adam Langley (6):
      Fix test of first of 255 CBC padding bytes.
      Fix copy-pasteism in CFI directives.
      perlasm/x86_64-xlate.pl: typo fix in comment.
      sha/asm/sha1-x86_64.pl: add CFI annotations.
      Small primes are primes too.
      nistp521: add a comment to the P+P exceptional case in point_add.

Adrian Vollmer (1):
      Adjust the default value of the private key size

Alessandro Ghedini (1):
      Use switch instead of multiple ifs

Alex Gaynor (9):
      GH1537: Avoid double-free in the EVP_PKEY API
      Annotate ASN.1 attributes of the jurisdictionCountryName NID
      Fixed #3020 -- set entry type on SCTs from X.509 and OCSP extensions
      Don't use a for-loop decleration
      This is an int
      Style fixes and use the source parameter so the OCSP path works
      Update the test to assert that the SCT is from an X.509 extension
      Newlines!
      Fixed merge nonsense

AlexDenisov (1):
      [packettest] Fix misplaced parentheses

Alexey Komnin (1):
      Fix tls1_generate_master_secret

Alfred E. Heggestad (1):
      add callback handler for setting DTLS timer interval

Andrea Grandi (6):
      Add missing .pod extension to EVP_PKEY_CTX_set_tls1_prf_md
      Fix broken link to ASYNC_get_wait_ctx and rewrap the paragraph
      Improve PRF documentation
      Add test to show wrong behavior of ASYNC_WAIT_CTX
      Remove fd from the list when the engine clears the wait context before pause
      Further improvements to ASYNC_WAIT_CTX_clear_fd

Andrew Siplas (1):
      Fixes #4459 "issuserAltName" documentation typo.

Andy (1):
      Code health: ssl/ssl_locl.h unused macros

Andy Grundman (1):
      Remove -xtarget=ultra from solaris(64)-sparcv9-cc builds.

Andy Polyakov (301):
      sha/asm/sha1-x86_64.pl: fix crash in SHAEXT code on Windows.
      crypto/sparcv9cap.c: fix overstep in getisax.
      crypto/ui/ui_openssl.c: let new-line through after query in Windows path.
      crypto/sparcv9cap.c: add missing declaration.
      test/ssl_test.tmpl: make it work with elderly perl.
      Configure: recognize -static as link option and disable incompatible options.
      ARMv8 assembly pack: add Samsung Mongoose results.
      ecp_nistz256.c: get is_one on 32-bit platforms right.
      evp/bio_enc.c: refine non-overlapping logic.
      Add test/bio_enc_test.c.
      crypto/pkcs12: add UTF8 support.
      Add PKCS#12 UTF-8 interoperability test.
      crypto/pkcs12: default to UTF-8.
      crypto/pkcs12: facilitate accessing data with non-interoperable password.
      bn/asm/x86[_64]-mont*.pl: implement slightly alternative page-walking.
      80-test_pkcs12.t: skip the test on Windows with non-Greek locale.
      evp/bio_enc.c: stop using pointer arithmetic for error detection.
      ec/asm/ecp_nistz256-x86_64.pl: addition to perform stricter reduction.
      ec/asm/ecp_nistz256-*.pl: addition to perform stricter reduction.
      ec/ecp_nistz256: harmonize is_infinity with ec_GFp_simple_is_at_infinity.
      ec/ecp_nistz256: harmonize is_infinity with ec_GFp_simple_is_at_infinity.
      ec/asm/ecp_nistz256-x86_64.pl: /cmovb/cmovc/ as nasm doesn't recognize cmovb.
      Configurations/10-main.conf: fix solaris64-*-cc link problems.
      Don't switch password formats using global state.
      Windows: UTF-8 opt-in for command-line arguments and console input.
      CHANGES: mention Windows UTF-8 opt-in option.
      bn/asm/ppc.pl: harmonize .size directive in bn_mul_words.
      perlasm/ppc-xlate.pl: recognize .type directive.
      Add ecp_nistz256-ppc64 module.
      crypto/bn/*: x86[_64] division instruction doesn't handle constants, change constraint from 'g' to 'r'.
      Configurations/10-main.conf: remove solaris-x86-cc target.
      Configurations/10-main.conf: fix omittions in commentary.
      Configurations/10-main.conf: add android64-x86_64 target.
      MIPS assembly pack: adapt it for MIPS[32|64]R6.
      Configurations/10-main.conf: add android64-mips64 target.
      Configure: clarify and refine -static.
      modes/asm/ghash-armv4.pl: improve interoperability with Android NDK.
      chacha/asm/chacha-ppc.pl: add missing .text directive.
      Configurations/10-main.cf: AIX "facelift".
      engines/afalg: make it compile with backward compatibility headers.
      Configure: impose ^X on whole build procedure.
      bn/bn_lcl.h: improve interoperability with clang and Android NDK.
      Configure: detect gcc's dependency generation capability more accurately.
      rand/randfile.c: restore fallback to $HOME for non-setuid programs.
      rand/randfile.c: rationalize __OpenBSD__ code path.
      rand/randfile.c: treat empty string in RAND_file_name as error.
      .travis.yml: install wine on demand.
      .travis.yml: minor optimizations:
      doc/crypto/OPENSSL_ia32cap.pod: update assembler requirements.
      crypto/sha: add Keccak1600 primitives to build SHA-3 upon.
      sha/keccak1600.c: add known answer and verify result with memcmp.
      x86_64 assembly pack: add Goldmont performance results.
      sha/asm/sha512-armv8.pl: adapt for kernel use.
      bn/asm/ppc-mont.pl: prepare for extension.
      bn/asm/ppc-mont.pl: add optimized multiplication and squaring subroutines.
      ppccap.c: engage new multipplication and squaring subroutines.
      sha/keccak1600.c: add couple of soft asserts.
      test/bntest.c: regression test for CVE-2016-7055.
      bn/asm/x86_64-mont.pl: fix for CVE-2016-7055 (Low severity).
      aes/asm/aesp8-ppc.pl: improve [backward] portability.
      test: add TLS application data corruption test.
      test/evptests.txt: add negative tests for AEAD ciphers.
      PPC assembler pack: add some PPC970/G5 performance data.
      chacha/asm/chacha-x86.pl: improve [backward] portability.
      sha/keccak1600.c: add some optimized implementations.
      sha/asm/sha512-armv8.pl: add NEON version of SHA256.
      Configurations/10-main.conf: document GCC for Solaris config constraint.
      Configurations/10-main.conf: remove obsolete flag from solaris-x86-gcc.
      sha/asm/sha512-armv8.pl: fix big-endian support in __KERNEL__ case.
      bn/asm/ppc-mont.pl: signal no-op in 32-bit bit build.
      test/evptests.txt: add regression test for false carry in ctr128.c.
      modes/ctr128.c: fix false carry in counter increment procedure.
      INSTALL: clarify 386 and no-sse2 options.
      poly1305/poly1305_base2_44.c: add reference base 2^44 implementation.
      x86_64 assembly pack: add AVX512 ChaCha20 and Poly1305 code paths.
      perlasm/x86_64-xlate.pl: refine sign extension in ea package.
      man3/OPENSSL_ia32cap.pod: clarify AVX512 support in clang context.
      perlasm/x86_64-xlate.pl: add support for AVX512 OPMASK-ing.
      poly1305/asm/poly1305-x86_64.pl: allow nasm to assemble AVX512 code.     chacha/asm/chacha-x86_64.pl: refine nasm version detection logic.
      x86 assembly pack: update performance results.
      chacha/asm/chacha-x86_64.pl: add AVX512 path optimized for shorter inputs.
      ec/asm/ecp_nistz256-ppc64.pl: minor POWER8-specific optimization.
      poly1305/poly1305_base2_44.c: clarify shift boundary condition.
      Replace div-spoiler hack with simpler code
      crypto/evp: harden RC4_MD5 cipher.
      crypto/evp: harden AEAD ciphers.
      test/bntest.c: regression test for carry bug in bn_sqr8x_internal.
      bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal.
      crypto/x86_64cpuid.pl: detect if kernel preserves %zmm registers.
      perlasm/x86_64-xlate.pl: clarify SEH coding guidelines.
      x86_64 assembly pack: Win64 SEH face-lift.
      Rename 90-test_fuzz.t to 99-test_fuzz.t to ensure that it's executed last.
      bn/asm/rsaz-avx2.pl: refine Win64 SE handler.
      perlasm/x86_64-xlate.pl: minor readability updates.
      perlasm/x86_64-xlate.pl: remove obsolete .picmeup synthetic directive.
      perlasm/x86_64-xlate.pl: recognize DWARF CFI directives.
      bn/asm/x86_64*: add DWARF CFI directives.
      perlasm/x86_64-xlate.pl: fix pair of typo-bugs in the new cfi_directive.
      modes/asm/*-x86_64.pl: add CFI annotations.
      {md5,rc4}/asm/*-x86_64.pl: add CFI annotations.
      ec/asm/ecp_nistz256-x86_64.pl: fix typo-bug in Win64 SE handler.
      ec/asm/ecp_nistz256-x86_64.pl: add CFI directives.
      perlasm/x86_64-xlate.pl: recognize even offset(%reg) in cfa_expression.
      aes/asm/*-x86_64.pl: add CFI annotations.
      sha/asm/*-x86_64.pl: add CFI annotations.
      ARMv4 assembly pack: harmonize Thumb-ification of iOS build.
      crypto/armcap.c: short-circuit processor capability probe in iOS builds.
      test/README: clarify last test number group
      .travis.yml: remove osx from build matrix.
      appveyor.yml: engage VC-WIN64A-masm.
      .travis.yml: make package pulls conditional.
      .travis.yml: introduce concept of "extended tests"
      poly1305/asm/poly1305-x86_64.pl: optimize AVX512 code path.
      poly1305/asm/poly1305-x86_64.pl: switch to vpermdd in table expansion.
      poly1305/asm/poly1305-x86_64.pl: add VPMADD52 code path.
      chacha/asm/chacha-x86_64.pl: add CFI annotations.
      poly1305/asm/poly1305-x86_64.pl: add CFI annotations.
      camellia/asm/cmll-x86_64.pl: add CFI annotations.
      whrlpool/asm/wp-x86_64.pl: add CFI annotations.
      crypto/x86_64cpuid.pl: add CFI annotations.
      poly1305/asm/poly1305-x86_64.pl: minor AVX512 optimization.
      crypto/des: remove unreferenced rcp_enc.c module.
      Configurations/50-masm.conf: add /nologo to ml64 command line.
      appveyor.yml: streamline pull requests.
      des/des_locl.h: clean up unused/irrelevant macros.
      bn/asm: clean up unused PA-RISC modules.
      CHANGES: mention CFI annotations.
      evp/e_aes_cbc_hmac_{sha1|sha256}.c: tag reference code.
      aes/aes_x86core.c: clarify reference implementation status.
      bio/b_addr.c: omit private hstrerror.
      Configurations/10-main.conf: omit redundant -lresolv from Solaris configs.
      apps/s_client.c: harden ldap_ExtendedResponse_parse.
      appveyor.yml: call upon cmd to redirect stderr.
      test: add chacha_internal_test.
      crypto/x86_64cpuid.pl: move extended feature detection upwards.
      crypto/x86*cpuid.pl: move extended feature detection.
      poly1305/asm/poly1305-armv8.pl: ilp32-specific poly1305_init fix.
      poly1305/asm/poly1305-x86_64.pl: add poly1305_blocks_vpmadd52_4x.
      .travis.yml: make git submodule update conditional.
      test/recipes/03-test_internal_*: call setup() first.
      NOTES.WIN: mention Strawberry Perl as option.
      x86_64 assembly pack: add some Ryzen performance results.
      poly1305/asm/poly1305-x86_64.pl: add poly1305_blocks_vpmadd52_8x.
      aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
      modes/ocb128.c: fix misaligned access in ILP32 builds on 64-bit processors.
      bn/asm/sparcv9-mont.pl: fix squaring code path.
      engines/e_capi.c: formatting and styling fixes.
      aes/asm/bsaes-armv7.pl: relax stack alignment requirement.
      apps/passwd.c: 32 bits are sufficient to hold ROUNDS_MAX.
      engine/e_capi.c: more formatting and styling fixes.
      engines/e_capi.c: adhere to CryptAcquireContextW unconditionally.
      engines/e_capi.c: slip in PROV_RSA_AES for interchangable CSP only.
      bio/b_print.c: fix %z failure in 32-bit build.
      bio/b_print.c: recognize even 'j' format modifier.
      apps/*.c: switch to platform-neutral format modifiers in BIO_print calls.
      e_os.h: drop now-redundant PRIu64 [and fix OSSLzu].
      bio/b_print.c: switch to int64_t as "greatest-width integer type".
      e_afalg.[ch]: fix --strict-warnings with gcc 4.x and 32-bit build.
      Configure: use 5.10.0, don't require...
      crypto/ppccap.c: SIGILL-free processor capabilities detection on MacOS X.
      Configure: recognize -framework as linker option [on Apple OSes].
      Configurations/README: reword bn_ops description.
      appveyor.yml: split {build,test}_scripts to avoid exit code masking.
      asn1/x_long.c: remove conditions in inner loops and dependency on BN.
      rand/rand_lib.c: keep fixing no-engine configuration.
      testlib/OpenSSL/Test.pm: keep default input private.
      asn1/a_int.c: remove code duplicate and optimize branches,
      asn1/a_int.c: simplify asn1_put_uint64.
      asn1/a_int.c: don't write result if returning error.
      asn1/a_int.c: clean up asn1_get_int64.
      test: don't make it more complicated than necessary.
      fuzz/{client,server}.c: omit _time64 "overload method".
      asn1/a_int.c: fix "next negative minimum" corner case in c2i_ibuf.
      test/asn1_encode_test.c: test "next negative minimum" corner case.
      perlasm/x86_64-xlate.pl: work around problem with hex constants in masm.
      sha/sha512.c: fix formatting.
      test/test_test.c: fix wrong BN test [and rearrange tests a little bit].
      test/run_tests.pl: don't mask test failures.
      test/secmemtest.c: clarify limitations for huge secure memory arena test.
      aria/aria.c: address undefined behaviour warning in small-footprint path.
      modes/ocb128.c: address undefined behaviour warning.
      test/evp_test.c: improve output in case of errors.
      sha/keccak1600.c: implement bit interleaving optimization.
      sha/keccak1600.c: implement lane complementing transform
      ec/asm/ecp_nistz256-x86_64.pl: minor sqr_montx cleanup.
      sha/keccak1600.c: add ARM-specific "reference" tweaks.
      sha/keccak1600.c: add another 1x variant.
      sha/keccak1600.c: reduce temporary storage utilization even futher.
      sha/keccak1600.c: add #ifdef KECCAK1600_ASM.
      Add sha/asm/keccak1600-armv4.pl.
      sha/asm/keccak1600-armv4.pl: optimization based on profiler feedback.
      sha/asm/keccak1600-armv4.pl: add SHA3_absorb and SHA3_squeeze.
      sha/asm/keccak1600-armv4.pl: add NEON code path.
      sha/keccak1600.c: switch to more efficient bit interleaving algorithm.
      sha/asm/keccak1600-armv4.pl: switch to more efficient bit interleaving algorithm.
      perlasm/ppc-xlate.pl: add PowerISA 3.0B instructions.
      Add sha/asm/keccak1600-armv8.pl.
      Add sha/asm/keccak1600-c64x.pl
      Add Keccak-1600 modules for PPC64 and POWER8.
      sha/asm/sha512p8-ppc.pl: add POWER8 performance data.
      Add sha/asm/keccak1600-mmx.pl, x86 MMX module.
      sha/asm/keccak1600-mmx.pl: optimize for Atom and add comparison data.
      Add sha/asm/keccak1600-x86_64.pl.
      sha/asm/keccak1600-x86_64.pl: remove redundant moves.
      sha/asm/keccak1600-x86_64.pl: optimize by re-ordering instructions.
      sha/asm/keccak1600-x86_64.pl: add CFI directives.
      Add sha/asm/keccak1600-s390x.pl.
      x86_64 assembly pack: fill some blanks in Ryzen results.
      sha/asm/keccak1600-s390x.pl: typo and readability, minor size optimization.
      sha/asm/keccak1600-x86_64.pl: close gap with Keccak Code Package.
      sha/keccak1600.c: internalize KeccakF1600 and simplify SHA3_absorb.
      objects/objects.txt: add SHA3 OIDs.
      'make update' after objects/objects.txt update.
      Add sha/asm/keccak1600-avx512.pl.
      Add sha/asm/keccak1600-avx2.pl.
      Optimize sha/asm/keccak1600-avx2.pl.
      sha/asm/keccak1600-avx2.pl: remodel register usage.
      sha/asm/keccak1600-avx2.pl: optimized remodelled version.
      x86_64 assembly pack: "optimize" for Knights Landing, add AVX-512 results.
      sha/asm/keccak1600-avx512.pl: absorb bug-fix and minor optimization.
      sha/asm/keccak1600-avx512.pl: improve performance by 17%.
      evp/e_aes_cbc_hmac_sha256.c: give SHAEXT right priority.
      aes/asm/aesni-sha*-x86_64.pl: add SHAEXT performance results.
      crypto/x86_64cpuid.pl: fix typo in Knights Landing detection.
      sha/keccak1600.c: build and make it work with strict warnings.
      Add evp/m_sha3.c.
      Wire SHA3 EVPs and add tests.
      bn/bn_lcl.h: improve inline assembly coverage on PPC64.
      bn/bn_lcl.h: use __int128 whenever possible, not only on MIPS.
      bn/bn_lcl.h: restore formatting.
      asn1/a_time.c: make handling of 'fractional point' formally correct.
      sha/keccak1600.c: choose more sensible default parameters.
      sha/asm/keccak1600-armv4.pl: improve non-NEON performance by ~10%.
      recipes/80-test_ca.t: make it work with spaces in pathnames.
      Add EVP_DigestFinalXOF, interface to extendable-output functions, XOFs.
      Wire SHAKE to EVP.
      sha/asm/keccak1600-avx512.pl: fix buglet in SHA3_squeeze tail.
      sha/asm/keccak1600-armv4.pl: optimize for Thumb-2.
      err/err.c: fix "wraparound" bug in ERR_set_error_data.
      err/err.c: improve readability.
      Revert "Allow --strict-warnings with the icc compiler as well"
      Configure: base compiler-specific decisions on pre-defines.
      ssl/statem/*.c: address "enum mixed with another type" warnings.
      ssl/statem/extensions_clnt.c: fix return code buglet.
      crypto/cryptlib.c: mask more capability bits upon FXSR bit flip.
      test/run_tests.pl: don't use Module::Load::Conditional.
      config: get "stty technique" working again on MacOS X.
      sha/asm/keccak1600-armv8.pl: fix return value buglet and ...
      objects/objects.txt: fix RSA-SHA3-284 typo.
      objects/obj_xref.txt: cross-reference SHA3 and rsaEncryption.
      evp/m_sha3.c: wire SHA3 to rsaEncryption.
      rsa/rsa_pmeth.c: recognize SHA3 as supported RSA digest.
      Configure: unify clang's -Qunused-arguments option treatment.
      Configure: add -Wmisleading-indentation to strict warnings flags.
      stack/stack.c: various cleanups.
      crypto/x509v3/v3_utl.c, ssl/ssl_cert.c: fix Coverity problems.
      modes/gcm128.c: harmonize GCM_MUL macro with GHASH.
      x509v3/v3_utl.c: avoid double-free.
      bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqrx8x_internal.
      test/bntest.c: add bn_sqrx8x_internal regression test.
      aes/asm/{aes-armv4|bsaes-armv7}.pl: make it work with binutils-2.29.
      OPENSSL_ia32cap: reserve for new extensions.
      Configurations/unix-Makefile.tmpl: fix HP-UX build.
      00-base-templates.conf: fix ia64 builds.
      util/copy.pl: work around glob quirk in some of earlier 5.1x Perl versions.
      asn1/a_strex.c: fix flags truncation in do_esc_char.
      evp/pbe_scrypt.c: add boundary condition for implicit cast.
      ssl/ssl_asn1.c: resolve warnings in VC-WIN32 build, which allows to add /WX.
      Resolve warnings in VC-WIN32 build, which allows to add /WX.
      Configurations/10-main.conf: add back /WX to VC-WIN32.
      ARMv8 assembly pack: add Qualcomm Kryo results.
      bn/bn_add.c: address performance regression.
      bn/bn_exp.c: harmonize BN_mod_exp_mont_consttime with negative input.
      Iron out /WX errors in VC-WIN32.
      crypto/x86_64cpuid.pl: fix AVX512 capability masking.
      rsa/rsa_gen.c: ensure backward compatibility with external rsa->meth.
      poly1305/asm/poly1305-x86_64.pl: switch to pure AVX512F.
      chacha/asm/chacha-x86_64.pl: fix sporadic crash in AVX512 code path.
      rsa/rsa_lib.c: make RSA_security_bits multi-prime aware.
      rsa/rsa_gen.c: harmonize keygen's ability with RSA_security_bits.
      modes/asm/ghashv8-armx.pl: implement 4x aggregate factor.
      modes/asm/ghashv8-armx.pl: modulo-schedule loop.
      modes/asm/ghashv8-armx.pl: optimize modulo-scheduled loop.
      modes/asm/ghashv8-armx.pl: handle lengths not divisible by 4x.
      bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.
      test/bntest.c: add rsaz_1024_mul_avx2 regression test.
      crypto/x86_64cpuid.pl: suppress AVX512F flag on Skylake-X.
      chacha/asm/chacha-x86_64.pl: add AVX512VL code path.
      Add sha/asm/keccak1600-avx512vl.pl.
      poly1305/asm/poly1305-x86_64.pl: add Knights Landing AVX512 result.
      ec/ecp_nistp*.c: sanitize for undefined/implmentation-specific behaviour.
      ec/curve25519.c: "double" ecdhx25519 performance on 64-bit platforms.
      ec/ecp_nistz256.c: improve ECDSA sign by 30-40%.
      ec/asm/ecp_nistz256-x86_64.pl: add .cfi and SEH handlers to new functions.
      ec/asm/ecp_nistz256-armv8.pl: add optimized inversion.
      ec/ecp_nistz256.c: switch to faster addition chain in scalar inversion.
      ec/curve25519.c: avoid 2^51 radix on SPARC.
      poly1305/poly1305_ieee754.c: add support for MIPS.
      test/asn1_time_test.c: fix pre-C90 warning.
      crypto/armcap.c: detect hardware-assisted SHA512 support.
      sha/asm/sha512-armv8.pl: add hardware-assisted SHA512 subroutine.

Azat Khuzhin (1):
      Remove ENGINE_load_dasync() (no OPENSSL_INIT_ENGINE_DASYNC already)

Balaji Marisetti (1):
      Addressed build failure because of missing #ifdef AF_UNIX guard     CLA: trivial

Baptiste Jonglez (2):
      afalg: Use eventfd2 syscall instead of eventfd
      afalg: Fix kernel version check

Beat Bolli (11):
      Update the location of the pod files
      Use consistent variable names in example
      doc/man3: use the documented coding style in the example code
      doc/man3: remove a duplicate BIO_do_accept() call
      ERR_put_error.pod: fix the name of function ERR_add_error_vdata()
      doc/man3: reformat the function prototypes in the synopses
      doc/man3: unindent a few unintended code blocks
      SSL_CTX_set_verify.pod: move a typedef in front of its first usage
      doc/man3: fix SSL_SESSSION typos
      doc: use /* ... */ comments in code examples
      doc/man3: use the documented coding style in the example code

Ben Kaduk (2):
      make update
      Fix more OCSP_resp_get0_signer() nits

Ben Laurie (5):
      Don't use DES when disabled.
      Make dependencies if Makefile is new.
      Remove untrue comment.
      Remove annoying and pointless pause.
      Remove unused variable.

Benjamin Kaduk (115):
      Remove some unused options from 10-main.conf
      Sort %disabled in Configure
      Wordsmith INSTALL
      Try to unify BIO read/write parameter names
      Fix grammar-o in CONTRIBUTING
      Restore the ERR_FATAL_ERROR() macro
      Do not overallocate for tmp.ciphers_raw
      Use _WIN32 over WIN32 for preprocessor conditional
      output number of exts from tls_collect_extensions()
      Store the number of extensions in CLIENTHELLO_MSG
      Move CLIENTHELLO_MSG up in the header
      Add more first-class support for SCSVS
      Let ssl_get_cipher_by_char yield not-valid ciphers
      Export SSL_bytes_to_cipher_list()
      Refactor SSL_bytes_to_cipher_list()
      Tests for SSL_bytes_to_cipher_list()
      Prepare for WORK_MORE_C
      Add SSL_CTX early callback
      Tests for SSL early callback
      Adopt test to changed behavior
      Use correct variable in test diagnostic
      Let test handshakes stop on certain errors
      Add an sslapitest for early callback
      Add test corpus for PEM reading
      Add AGL's "beer mug" PEM file as another test input
      Don't free in cleanup routine
      Remove OPENSSL_indirect_call()
      Fix some -Wshadow warnings
      Fix a -Wsign-compare warning
      De-obfuscate
      Clear alpn_selected_len for clients, too
      Tighten up client status_request processing
      Remove dead code
      Remove some unused PEM structures
      Remove unused typedefs from indent config
      Remove documentation of deleted function
      Further de-obfuscation
      Allow an ALPN callback to pretend to not exist
      Add -Wextra to gcc devteam warnings
      Address some -Wold-style-declaration warnings
      Remove duplicates from clang_devteam_warnings
      Add PEM_read_bio_ex
      Add PEM_bytes_read_bio_secmem()
      Make PEM_read_{,bio_}PrivateKey use secmem
      Add unit test for PEM_FLAG_ONLY_B64
      Remove stale note from s_server.pod
      Fix memory leaks in CTLOG_new_from_base64
      drop some no-longer-relevant TODO(TLS1.3) entries
      TLS 1.3 client sigalgs test no longer needs TLS 1.2
      Add SSL_early_get1_extensions_present()
      Add sslapitest for SSL_early_get1_extensions_present()
      Fix no-ec
      Disallow DSA/SHA1/etc. for pure TLS 1.3 ClientHellos
      Add constants for TLS 1.3 SignatureScheme values
      Fix no-dsa build
      Add tests for deprecated sigalgs with TLS 1.3 ClientHellos
      Fix no-dsa build again
      Fix return-value checks in OCSP_resp_get1_id()
      Improve BN_CTX documentation
      Error out when forcing an unsupported TLS version
      Remove trailing whitespace from drbgtest.c
      typedef's for RAND_DRBG methods
      Fix out-of-bounds read in ctr_XOR
      Define a value for SYS_F_FCNTL
      Fixups for STORE commit
      Catch up to the removal of OSSL_STORE_open_file()
      Improve style
      Remove trailing whitespace from store-related man pages
      Fix memory leak in session cache test
      Don't modify resumed session objects
      Move ALPN handling from finalizer to delayed call
      Add SSL_get_pending_cipher()
      Tighten up SSL_get1_supported_ciphers() docs
      Fixup include path in ossl_shim test after e_os.h work
      Fix long SNI lengths in test/handshake_helper.c
      Restore historical behavior for absent ServerHello extensions
      Fix test_client_hello with no-tls1_2_method
      Fix typo in comment
      Fix no-ec no-dh build
      Reenable s_server -dhparam option
      Move supportedgroup ext-block fields out of NO_EC
      Appease -Werror=maybe-uninitialized
      Fix memory leak in DH_get_nid()
      Add missing RAND_DRBG locking
      Fix a couple nits in DEFINE_STACK_OF.pod
      Use atomics for SSL_CTX statistics
      Normalize on session_ctx for stats where possible
      Provide SSL_CTX.stats.sess_accept for switched ctxs
      Fix memory leak in crltest error case
      Prevent NULL dereference in async clear-fd code
      Conditionalize fuzz tests on feature macros
      Add an API to get the signer of an OCSP response
      Add OCSP API test executable
      Fix no-ec
      Fix coverity-reported errors in ocspapitest
      Fix coverity nit in handshake_helper.c
      Wrap more of ocspapitest.c in OPENSSL_NO_OCSP
      Fix test_tls13messages with no-ocsp
      Fix typo in comment
      Permit the "supported_groups" extension in ServerHellos
      Test that supported_groups is permitted in ServerHello
      enc(1): document that AEAD is not and will not be supported
      Fix no-ec --strict-warnings builds
      Bump TLS1_3_VERSION_DRAFT for draft-23
      Renumber TLSEXT_TYPE_key_share for draft-23
      Add TLS 1.3 draft-23 PSS signature algorithms
      Propagate TLS 1.3 sigalgs through tls1_set_sigalgs()
      Update documentation for SSL_set1_sigalgs()
      Add support for the TLS 1.3 signature_algorithms_cert extension
      Add TLSProxy tests for signature_algorithms_cert
      Fix uninitialized read in sigalg parsing code
      Fix ssl-trace with TLS 1.3 draft-23 PSS sigalgs
      Catch some more old sigalg names in comments
      Revert the crypto "global lock" implementation
      Restore clearing of init_lock after free

Bernard Spil (1):
      openssl enc: Don't unbuffer stdin

Bernd Edlinger (85):
      Fix a memory leak in RSA_padding_add_PKCS1_OAEP_mgf1
      Check the exit code from the server process
      fix a memory leak in ssl3_generate_key_block fix the error handling in ssl3_change_cipher_state
      Fix a ssl session leak due to OOM in lh_SSL_SESSION_insert
      Fix error handling in compute_key, BN_CTX_get can return NULL
      remove test/.rnd on make clean
      Combined patch against master branch for the following issues:
      Fix a crash with malformed user notice policy numbers
      Fix a crash in EVP_CIPHER_CTX_cleanup due to cipher_data may be NULL     or EVP_CTRL_INIT/EVP_CTRL_COPY was not called or failed.     If that happens in EVP_CipherInit_ex/EVP_CIPHER_CTX_copy set cipher = NULL,     aes_gcm_cleanup should check that gctx != NULL before calling OPENSSL_cleanse.
      Use TLSEXT_KEYNAME_LENGTH in tls_decrypt_ticket.
      Rework error handling of custom_ext_meth_add towards strong exception safety.
      Fix a slightly confusing if condition in a2i_ASN1_INTEGER.
      Fix a few memleaks in TXT_DB.
      Fix some more memory leaks with TXT_DB_insert.
      Fix i2d_SSL_SESSION pp output parameter should point to end of asn1 data.
      Add some more consistency checks in tls_decrypt_ticket.
      Remove -Wno-parentheses-equality from gcc --strict-warnings options.     There has never been any gcc option of that kind.
      Add -Wundef to --strict-warnings options.
      Remove unnecessary memset after PR #2583 avoids accessing     the uninitialized session_id now.
      Fix handling of EVP_PKEY_CTRL_PKCS7_ENCRYPT/DECRYPT with OPENSSL_NO_CMS.
      Check that async_jobs is not negative and not too high.
      Reset executable bits on files where not needed.
      Fixup previous merge.
      Avoid questionable use of the value of a pointer
      Fix a crash or unbounded allocation in RSA_padding_add_PKCS1_PSS_mgf1     and RSA_verify_PKCS1_PSS_mgf1 with 512-bit RSA vs. sha-512.
      Added a test case for RSA_padding_add_PKCS1_PSS_mgf1.
      Fixed a crash in print_notice.
      Fix the error handling in CRYPTO_dup_ex_data.     Fix a strict aliasing issue in ui_dup_method_data.     Add test coverage for CRYPTO_dup_ex_data, use OPENSSL_assert.
      Don't access memory before checking the correct length in aesni_cbc_hmac_sha256_ctrl in case EVP_CTRL_AEAD_TLS1_AAD.
      Remove unnecessary loop in pkey_rsa_decrypt.
      Add parentheses on public macros where appropriate.     Fixes #3063.
      Fix a pedantic gcc-7 warning.
      Fix gcc-7 warnings.     - Mostly missing fall thru comments     - And uninitialized value used in sslapitest.c
      Fix memleak in EVP_DigestSignFinal/VerifyFinal.
      Fix a memleak in tls13_generate_secret.
      Fix a memleak in ec_copy_parameters.
      Fix a possible crash in the error handling.
      Fix crash in ecdh_simple_compute_key.
      Fix a possible crash in dsa_builtin_paramgen2.
      Fix another possible crash in rsa_ossl_mod_exp.
      Fix possible crash in X931 code.
      Fix the comment about default OPENSSLDIR in windows.
      Add a missing break in test/shlibloadtest.c
      Remove a pointless "#if 0" block from BN_mul.
      Fix the error handling in ERR_get_state:     - Ignoring the return code of ossl_init_thread_start created a memory leak.
      Fix the fall-out in 04-test_bioprint.t
      Add parentheses around macro argument of OSSL_NELEM.
      Fix a crash in tls_construct_client_certificate.
      Fix potential crash in tls_construct_finished.
      Fix crash in BUF_MEM_grow_clean.
      Fix error handling in get_header_and_data.
      Fix bogus use of BIO_sock_should_retry.
      Clean password buffer on stack for PEM_read_bio_PrivateKey     and d2i_PKCS8PrivateKey_bio before it goes out of scope.
      Add some test coverage for PEM_read_bio_PrivateKey
      Implement the CRYPTO_secure_clear_free function
      Use OPENSSL_secure_clear_free for secure mem BIOs and X25519 private keys
      Document OPENSSL_secure_clear_free
      Use OPENSSL_secure_clear_free in PEM_read_bio_PrivateKey and PEM_read_bio_ex
      Use OPENSSL_secure_clear_free in STORE file_load
      Add some test coverage for OPENSSL_secure_clear_free
      Fix an information leak in the RSA padding check code.     The memory blocks contain secret data and must be     cleared before returning to the system heap.
      Avoid surpising password dialog in X509 file lookup.
      Clear outputs in PKCS12_parse error handling.
      Clear secret stack values after use in curve25519.c
      Clear secret stack values after use in the ED25519-functions
      Fix the return type of felem_is_zero_int which should be int.     Change argument type of xxxelem_is_zero_int to const void*     to avoid the need of type casts.
      Fix error handling in SSL_new
      Add missing range checks on number of multi primes in rsa_ossl_mod_exp
      Minor cleanup of the rsa mp limits code
      Remove test-runs dir, adjust .gitignore
      Fix invalid function type casts.     Rename bio_info_cb to BIO_info_cb.
      Fix a typo in comment
      Alternate fix for ../test/recipes/80-test_ssl_old.t with no-ec
      Stop using unimplemented cipher classes.     Add comments to no longer usable ciphers.
      Fix error handling in X509_REQ_print_ex
      Catch SIGPIPE in TLSProxy::Proxy::clientstart
      Explicitly shut the socket down in s_client
      Use constant value 1 instead of SHUT_WR in do_server
      Set OPENSSL_ENGINES for Windows
      Add a configure option to opt-out secure memory
      Fix setting of IPV6_V6ONLY on Windows
      Make the s_server command listen on IPv6 only when requested
      Fix some style nits in commit eee8a40
      Swap the check in ssl3_write_pending to avoid using     the possibly indeterminate pointer value in wpend_buf.
      Remove code that prints "<SPACES/NULS>" in hexdumps     when the data block ends with SPACEs or NULs.

Camille Gu?rin (1):
      Fixed typo in X509_STORE_CTX_new description

Christian Heimes (3):
      Provide getters for min/max proto version
      Document SSL_OP_NO_RENEGOTIATION as new in 1.1.1
      Fix signature of min/max proto getter

Claus Assmann (1):
      Fix grammar error in SSL_CTX_set_min_proto_version

Cory Benfield (7):
      Add support for key logging callbacks.
      Add tests for the key logging callbacks.
      Add documentation for the key logging callbacks
      Limit the length of the encrypted premaster key.
      Add support for logging out TLSv1.3 secrets
      Test logging TLSv1.3 secrets.
      s_client accepts host/port as positional argument.

Cristian Stoica (5):
      speed.c: use size_t instead of int to match function signatures
      speed.c: simplify aggregation of rsa --multi results
      speed.c: simplify aggregation of dsa --multi results
      speed.c: simplify aggregation of ecdsa --multi results
      speed.c: simplify aggregation of ecdh --multi results

DK (1):
      Fixed deadlock in CRYPTO_THREAD_run_once for Windows

Daniel Bevenius (9):
      Fix minor typo in comment in rsa_st
      Correct minor typo in ssl_locl.h comment
      Make BIO_METHOD struct definitions consistent
      Minor improvements to ssl.pod
      Fix minor typo in bio.pod
      Add comments to NULL func ptrs in bio_method_st
      Remove extra `the` in SSL_SESSION_set1_id.pod
      Suggestion for improvements to x509.pod
      Fix minor 'the the' typos

Daniel Kahn Gillmor (1):
      Avoid failing s_server when client's psk_identity is unexpected

Dani?l van Eeden (1):
      Fix include in manpage of X509_check_host

Darren Tucker (1):
      DES keys are not 7 days long.

David Benjamin (32):
      Fix math in BN_bn2dec comment.
      Add a basic test for BN_bn2dec.
      Test CBC mode padding.
      Don't test quite so many of them.
      Address review comments.
      Switch back to assuming TLS 1.2.
      Add missing parameter.
      Remove trailing whitespace from some files.
      Fix up bn_prime.pl formatting.
      Implement RSASSA-PKCS1-v1_5 as specified.
      Make RSA_sign.pod less confusing.
      Improve RSA test coverage.
      Don't read uninitialised data for short session IDs.
      Fix typo in x86_64-mont5.pl CFI directives
      Remove duplicate X509_OBJECT free function.
      Numbers greater than 1 are usually non-negative.
      Remove filename argument to x86 asm_init.
      Fix the names of ChaCha20-Poly1305 cipher suites in t1_trce.c.
      Fix comment typo.
      Fix the names of older ciphers.
      Fix some documentation typos.
      Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.
      Fix test documentation.
      Introduce named constants for the ClientHello callback.
      Fix overflow in c2i_ASN1_BIT_STRING.
      Guard against DoS in name constraints handling.
      Allow DH_set0_key with only private key.
      Pretty-print large INTEGERs and ENUMERATEDs in hex.
      Fix chacha-armv4.pl with clang -fno-integrated-as.
      Make BN_num_bits_word constant-time.
      Don't leak the exponent bit width in BN_mod_exp_mont_consttime.
      Fix timing leak in BN_from_montgomery_word.

David Cooper (5):
      Add -rsigopt option to ocsp command
      Make editorial changes suggested by Rich Salz and add the -rsigopt option to the man page for the ocsp command.
      Make editorial changes suggested by Matt Caswell and fixed Travis failures.
      Add documentation for the OCSP_basic_sign() and OCSP_basic_sign_ctx() functions.
      Added "B" tag to all variables.

David Woodhouse (21):
      Fix SSL_export_keying_material() for DTLS1_BAD_VER
      Fix ossl_statem_client_max_message_size() for DTLS1_BAD_VER
      Fix DTLS_VERSION_xx() comparison macros for DTLS1_BAD_VER
      Fix cipher support for DTLS1_BAD_VER
      Make DTLS1_BAD_VER work with DTLS_client_method()
      Fix ubsan 'left shift of negative value -1' error in satsub64be()
      Add basic test for Cisco DTLS1_BAD_VER and record replay handling
      Fix clienthellotest to use PACKET functions
      Kill PACKET_starts() from bad_dtls_test
      Fix satsub64be() to unconditionally use 64-bit integers
      Avoid EVP_PKEY_cmp() crash on EC keys without public component
      Add enginesdir to libcrypto.pc pkg-config file
      Restore '-keyform engine' support for s_client
      Call ENGINE_init() before trying to use keys from engine
      Fix encrypt-then-mac implementation for DTLS
      Add SSL_OP_NO_ENCRYPT_THEN_MAC
      Add DTLS_get_data_mtu() function
      Add unit test for ssl_cipher_get_overhead()
      Add test cases for DTLS_get_data_mtu()
      Add documentation for DTLS_get_data_mtu()
      Document that PKCS#12 functions assume UTF-8 for passwords

David von Oheimb (3):
      Fix minor type warnings and risk of memory leak in testutil/driver.c
      Fix OCSP_basic_verify() cert chain construction in case bs->certs is NULL
      Various small build improvements on mkdef.pl, progs.pl, crypto/init.c, crypto/mem.c

Davide Galassi (1):
      Avoid the call to OPENSSL_malloc with a negative value (then casted to unsigned)

Diego Santa Cruz (4):
      Fix endless loop on srp app when listing users
      Fix srp app missing NULL termination with password callback
      Make SRP_CTX.info ownership and lifetime be the same as SRP_CTX.login.
      Use memset to clear SRP_CTX instead of NULL and zero assignments

Dmitry Belyavskiy (6):
      Typo fixed
      Added '-nameopt' option to the verify command.
      Provided support for the -nameopt flag in s_client, s_server and s_time     commands.
      Fix memory leak in pkcs12 -export
      Switch command-line utils to new nameopt API.
      NUMERICSTRING support

Dmitry Belyavsky (1):
      Avoid KCI attack for GOST

Dmitry Kostjuchenko (4):
      Compile fix on platforms with missing pthread_rwlock_t.
      Corrections according the review comments.
      Removed tab spaces.     Reviewed-by: Rich Salz <rsalz at openssl.org>     Reviewed-by: Richard Levitte <levitte at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/1981)
      Grouped data declarations [skip ci]     Reviewed-by: Rich Salz <rsalz at openssl.org>     Reviewed-by: Richard Levitte <levitte at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/1981)

Dr. Matthias St. Pierre (24):
      DRBG: clarify difference between entropy counts and buffer lengths
      RAND: Rename the RAND_poll_ex() callback and its typedef
      DRBG: Remove 'randomness' buffer from 'RAND_DRBG'
      Cleanup whitespace in ssl_lib.c (tabs to spaces)
      Fix reseeding issues of the public RAND_DRBG
      Remove unnecessary DRBG_RESEED state
      testutil.h: Remove duplicate test macros
      Add master DRBG for reseeding
      Implement automatic reseeding of DRBG after a specified time interval
      Allocate the three shared DRBGs on the secure heap
      Make DRBG uninstantiate() and instantiate() methods inverse to each other
      crypto/rand: rename drbg_rand.c to drbg_ctr.c
      crypto/rand: restore the generic DRBG implementation
      Improve readability of evp.pod
      Add util/openssl-update-copyright shell script
      Enhance util/openssl-update-copyright shell script
      Fix memory leak in do_rand_drbg_init()
      crypto/rand/rand_lib.c: fix undefined reference to `clock_gettime'
      drbg_bytes: remove check for DRBG_UNINITIALIZED state
      Fix size limitation of RAND_DRBG_bytes()
      Use RAND_DRBG_bytes() for RAND_bytes() and RAND_priv_bytes()
      CRYPTO_THREAD_run_once.pod: fix typo and punktuation
      Document new random generator in NEWS and CHANGES
      Fix whitespace issues in CHANGES and NEWS

Dr. Stephen Henson (374):
      Limit status message sisze in ts_get_status_check
      Free buffer in a2i_ASN1_INTEGER() on error path.
      Sanity check input length in OPENSSL_uni2asc().
      Update documentation for DSA_SIG and ECDSA_SIG.
      Use OIDs from draft-ietf-curdle-pkix-02
      Fix type of ptr field.
      X25519 public key methods
      make errors
      add to build.info
      Add X25519 methods to internal tables
      Update X25519 key format in evptests.txt
      Add point ctrls to X25519
      make update
      Add encoded points to other EC curves too.
      Modify TLS support for new X25519 API.
      Remove old EC based X25519 code.
      Print out names of other temp key algorithms.
      add documentation
      update CHANGES
      Fix no-ec
      Check for errors in BN_bn2dec()
      Check for errors in a2d_ASN1_OBJECT()
      Limit reads in do_b2i_bio()
      Add ASN1_STRING_get0_data(), deprecate ASN1_STRING_data().
      make update
      Corrupt signature earlier.
      Constify ASN1_item_unpack().
      constify X509_ALGOR_get0()
      Constify private key decode.
      Corrupt signature in place.
      Convert X509* functions to use const getters
      Constify X509_get0_signature()
      Constify X509_certificate_type()
      Constify ssl_cert_type()
      Constify X509_SIG.
      make update
      Constify i2a*
      constify i2o_ECPublicKey
      constify X509_REQ_get0_signature()
      Add X509_get0_serialNumber() and constify OCSP_cert_to_id()
      make update
      make update
      Avoid duplicated code.
      Set certificate times in one function.
      Constify certificate and CRL time routines.
      rename ordinals
      make update
      fix warning about trailing comma
      Add X509_getm_notBefore, X509_getm_notAfter
      update ordinals
      Sanity check ticket length.
      Avoid overflow in MDC2_Update()
      Support broken PKCS#12 key generation.
      Add ASN1_ITEM lookup and enumerate functions.
      Add -item option to asn1parse
      ASN1_ITEM should use type name not structure name.
      add item list support to d2i_test
      Print <ABSENT> if a STACK is NULL.
      make update
      SRP code tidy.
      Add SRP test vectors from RFC5054
      fix memory leak
      fix memory leak
      Fix X509_NAME decode for malloc failures.
      Add memory leak detection to d2i_test
      Fix embedded string handling.
      Don't set choice selector on parse failure.
      add test for CVE-2016-7053
      Simplify PKCS#12 PBE algorithm.
      Fix MSBLOB format with RSA.
      Make MSBLOB format work with dsa utility.
      Add conversion test for MSBLOB format.
      Support MSBLOB format if RC4 is disabled
      Add test to check EVP_PKEY method ordering.
      Fix ctrl operation for SHA1/MD5SHA1.
      add CMS SHA1 signing test
      Check input length to pkey_rsa_verify()
      Add RSA PSS tests
      Additional error tests in evp_test.c
      Add function and reason checking to evp_test
      evptests.txt is not a shell script
      Add RSA decrypt and OAEP tests.
      Remove BIO_seek/BIO_tell from evp_test.c
      Cache maskHash parameter
      Add pss field to RSA structure and free it.
      add EVP_PKEY_RSA_PSS
      PSS ASN.1 method
      Use method key type instead of EVP_PKEY_RSA
      Split PSS parameter creation.
      PSS parameter encode and decode.
      RSA-PSS key printing.
      PSS EVP_PKEY method
      Support RSA operations in PSS.
      Digest string helper function.
      Set PSS padding mode for PSS keys.
      Key gen param support.
      Support pad mode get/set for PSS keys.
      Add macros to determine if key or ctx is PSS.
      Don't allow PKCS#7/CMS encrypt with PSS.
      Add rsa_pss_get_param.
      Initial parameter restrictions.
      Add PSS parameter restrictions.
      Return errors PKCS#7/CMS enveloped data ctrls and PSS
      Decode parameters properly.
      Only allow PSS padding for PSS keys.
      Set EVP_PKEY_CTX in SignerInfo
      add parameter error
      make errors
      print errors in pkey utility
      add PSS key tests
      document RSA-PSS algorithm options
      add test for invalid key parameters
      make update
      fix various style issues
      clarify comment
      free str on error
      style issues
      Use more desciptive macro name rsa_pss_restricted()
      Add documentation for PSS control operations.
      fix typo and remove duplicate macro
      Remove unnecessary frees and style fixes.
      Documentation clarification and fixes.
      fix a few more style issues
      Add new ssl_test option.
      Add server temp key type checks
      Add options to check certificate types.
      add ECDSA test server certificate
      Add certificate selection tests.
      Add client cert type tests
      Add support for -1, -2 salt lengths for PSS only keys.
      additional PSS tests for -1 and invalid salt length
      Defines and strings for special salt length values, add tests
      Add options to check TLS signing hashes
      Add signing hash tests
      Use correct signature algorithm list when sending or checking.
      Add server signature algorithm bug test.
      use RSA_PSS_SALTLEN_DIGEST constant
      Use uint16_t for signature scheme.
      More complete PSS support.
      Store peer signature type.
      Add SSL_get_peer_signature_type_nid() function.
      Use shared signature algorithm list to find type.
      Extend TLS 1.3 signature table.
      Support TLS 1.3 signature scheme names.
      Replace TLS_SIGALGS with SIGALG_LOOKUP
      make update
      Update documentation
      Add test support for TLS signature types.
      Add tests for client and server signature type
      Use PSS for simple test so TLS 1.3 handhake is successful.
      Fix TLS 1.2 and no sigalgs.
      fix style issues
      Update macros.
      Store table entry to peer signature algorithm.
      Only allow PSS signatures with RSA keys and TLS 1.3
      Add TLS 1.3 signing curve check
      Don't check certificate type against ciphersuite for TLS 1.3
      Add digest and key indices to table.
      Simplify sigalgs code.
      Remove peer_md and use peer_sigalg instead.
      Tidy up Suite B logic
      Cosmetic change
      Add function tls_choose_sigalg().
      Set signature algorithm when choosing cipher
      make errors
      For TLS 1.3 retrieve previously set certificate index
      Remove special case for TLS 1.3.
      Update cipher definition
      Don't filter TLS 1.3 ciphersuites by signing or key exchange algorithm
      Add TLS 1.3 certificate selection tests.
      Add missing MinProtocol/MaxProtocol
      Add SSL_kANY and SSL_aANY
      Add NID_auth_any and NID_kx_any NIDs.
      Add constants to CCM and TLS.
      Add CCM mode support for TLS 1.3
      Use contants for Chacha/Poly, redo algorithm expressions.
      Make EVP_*Final work for CCM ciphers
      Call EVP_CipherFinal in CCM mode for tests.
      Add remaining TLS1.3 ciphersuites
      update test
      Update documentation
      Check index >= 0 as 0 is a valid index.
      Replace SSL_PKEY_RSA_ENC, SSL_PKEY_RSA_SIGN
      Make -xcert work again.
      add ssl_has_cert
      Change tls_choose_sigalg so it can set errors and alerts.
      Add sigalg for earlier TLS versions
      Use cert_index and sigalg
      Simplify tls_construct_server_key_exchange
      Use CERT_PKEY pointer instead of index
      Skip curve check if sigalg doesn't specify a curve.
      Set current certificate to selected certificate.
      Fix warning
      Add client side support to tls_choose_sigalg.
      Use tls_choose_sigalg for client auth.
      Add ECDSA client certificates
      Add client auth TLS 1.3 certificate selection tests
      Add and use function test_pem to work out test filenames.
      Add DSA support to mkcert.sh
      Add DH parameters, DSA cert and key
      add DSA cert tests
      Explicitly disallow DSA for TLS 1.3
      remove md array: it is not used any more.
      Set default validity flags.
      Add no siglags test for ECDSA certificate
      Check validity, not just signing for all certificates
      Tidy up certificate type handling.
      Add P-384 root and P-384, P-256 EE certificates.
      Add Suite B tests
      Add SuiteB support to tls_choose_sigalg()
      EC certificate with compression point
      Reject compressed point format with TLS 1.3
      For TLS 1.3 reject SHA1 TLS signatures
      Add tests for SHA1 and EC point compression
      Print signature type to out, not bio_err
      Add trace entries for remaining TLS 1.3 ciphersuites
      Add entry for PSK extension
      Print numerical value of named roups
      Add ffdhe groups to trace output
      print out alpn extension
      TLS 1.3 support for ssl_print_ticket()
      Add missing blank lines and cosmetic improvements
      Initial incomplete TLS 1.3 certificate request support.
      Trace support for TLS 1.3 certificate request message
      Remove ancient demoCA directory
      Remove wp_test.c: exactly the same tests are in evptests.txt
      Remove more redundant tests: md4, md5, rmd, rc4, p5_crpt2
      Revert rc4test removal, it performs additional tests not in evptests.txt
      Don't allow DSA for TLS 1.3
      Disallow zero length signature algorithms
      Signature algorithm enhancement.
      Set specific error is we have no valid signature algorithms set
      Update and add test
      Add additional RSA-PSS and RSA-OAEP tests.
      Remove obsolete version test when returning CA names.
      Add ExpectedClientCANames
      Add Client CA names tests
      Move parsing and construction of CA names to separate functions
      Allow signature algorithms in TLS 1.3 certificate request extensions.
      Support draft-19 TLS certificate request format
      Implement certificate_authorities extension
      fix typo
      Add X25519 doc
      update README
      New certificate_authorities functions
      SSL_CONF support for certificate_authorities
      Add extensions to debug list
      Add requestCAfile option
      Don't use client specific functions to retrieve CA list
      Print CA names in s_server, add -requestCAfile to s_client
      Constify SSL_dup_CA_list()
      Add ExpectedServerCANames
      Add certificate_authorities tests client to server.
      Document new ssl(3) functions and options.
      update ordinals
      Add support for custom signature parameters
      Use X509_get_signature_info() when checking security levels.
      Add custom sig_info setting for RSA-PSS
      Add certificates with PSS signatures
      Add PSS certificate signature tests
      Update documentation
      make update
      Fix no-ec
      Add EVP_DigestSign and EVP_DigesVerify
      make update
      Add support for multiple update calls in evp_test
      Add tests
      remove duplicate tests
      Add tests in evp_test for EVP_Digest{Sign,Verify}{Init,Update,Final}
      Add test support for "oneshot" versions EVP_DigestSign, EVP_DigestVerify.
      Add test data for EVP_DigestSign/EVP_DigestVerify tests.
      move comments to same line as fields
      Don't use one shot API for SSLv3.
      Add support for custom digestsign/digestverify methods.
      Allow NULL md for custom signing methods
      make errors
      Add Ed25519 algorithm.
      Make Ed25519 consistent with X25519
      Add EdDSA algorithm OIDs from draft-ietf-curdle-pkix-04
      Add ED25519 ASN.1 method
      add method
      ED25519 public key method.
      make errors
      Add RFC8032 tests and additional cases
      Add ED25519 as signature OID
      Add custom ASN.1 sign and verify
      make errors
      Add custom sig_info_set for ED25519
      Add Ed25519 verify test.
      no-ec fix
      Add Ed25519 documentation
      Clear sensitive data in ED25519_sign
      Fix define to match documentation
      Move and update RSA-PSS documentation.
      Recognise Ed25519 in X509_certificate_type
      Use X509_get_signature_info to get signature strength.
      Add index for ED25519
      Add Ed25519 to signature algorithm table
      Add Ed25519 signature algorithm
      Handle signature algorithms with no associated digest
      Add Ed25519 to trace output
      Print Ed25519 in s_client/s_server
      Convert key exchange to one shot call
      Allow Ed25519 in TLS 1.2
      Ed25519 support for mkcert.sh
      Add Ed25519 EE certificates
      Add Ed25519 TLS 1.3 and 1.2 tests
      Update test config file
      Use EVP_PKEY_X25519, EVP_PKEY_ED25519 instead of NIDs where appropriate.
      Fix build with no-threads no-ec
      Add certificate properties table.
      Add SSL_aCERT: this is used for any ciphersuite with a certificate.
      Replace tls12_get_pkey_idx
      Use certificate tables instead of ssl_cipher_get_cert_index.
      Use certificate tables instead of ssl_cert_type
      Use cert tables instead of X509_certificate_type
      make errors
      Use cert tables in ssl_set_sig_mask
      Add additional ECDSA/Ed25519 selection tests.
      Move certificate table to header file so it can be tested.
      Add sanity test for certificate table
      Set maskHash when creating parameters.
      Typo: should check mgf1md
      Add keygen test to evp_test
      Add keygen test data
      Add public key method enumeration function.
      Add list -public-key-methods
      make update
      Allow use of long name for KDFs
      Set randomness buffer pointer in get_entropy calls.
      Add entropy sanity check
      Use passed drbg, not global one
      Add predicatable RAND_METHOD to test ENGINE
      Support CMS decrypt without a certificate for all key types
      Add test for ECDH CMS key only
      Fix no-ec
      Add alternative CMS P-256 cert
      no-ec2m fixes
      Correct GCM docs.
      Add RSA-PSS key certificate type.
      Allow RSA certificates to be used for RSA-PSS
      Allow use of RSA-PSS certificates in TLS 1.2
      Add RSA-PSS test certificates
      Add RSA-PSS certificate type TLS tests
      Store groups as uint16_t
      Remove dhparam from SSL_CONF list.
      Return correct Suite B curve, fix comment.
      Return group id in tls1_shared_group
      Rename tls_curve_info to TLS_GROUP_INFO, move to ssl_locl.h
      Replace tls1_ec_curve_id2nid.
      New function ssl_generate_param_group
      Rewrite compression and group checks.
      Rename tls1_get_curvelist.
      Use tls1_group_id_lookup in tls1_curve_allowed
      Add and use function tls1_in_list to avoid code duplication.
      Use separate functions for supported and peer groups lists
      Change curves to groups where relevant
      Merge tls1_check_curve into tls1_check_group_id
      Don't ignore passed ENGINE.
      Fix memory leak on lookup failure
      Add EVP_PKEY_set1_engine() function.
      make update
      Add EVP_PKEY_METHOD redirection test
      Document EVP_PKEY_set1_engine()
      Support constant BN for DH parameters
      Add primes from RFC7919
      DH named parameter support
      Add objects for RFC7919 parameters
      Add RFC7919 support to EVP
      Don't assume shared key length matches expected length
      Add pad support
      Add RFC7919 tests.
      Add RFC7919 documentation.
      make update

D?niel Bakai (1):
      Added appropriate OPENSSL_NO_STDIO to PKCS12 header

EasySec (8):
      dtl_mtu_test doesn't follow BIO_* conventions and make Windows build fail
      When no SRP identity is found, no error was reported server side
      Replace the 'SSL' broken link with SSL_CTX_set_security_level which seems not being referenced from elsewhere
      Update s_client and s_server documentation about some missing arguments
      Fix list -disabled for blake2 alg
      set_hex() behaviour change
      Cleaning secret data after use
      fix compile error 'intrinsic function not declared'

Emeric Brun (1):
      Fix async engine pause dead lock in error case.

Emilia Kasper (42):
      Add a coverage target
      Add --gcov-options '\-lp' to coverage
      Reorganize SSL test structures
      Fix ALPN tests when NPN is off
      NPN and ALPN: test resumption
      SSL test ctx: fix tests
      CT: fix documentation
      SSL tests: port CT tests, add a few more
      Add TEST_check
      Gracefully free a NULL HANDSHAKE_RESULT
      Don't attempt to load the CT log list with no-ec
      SSL tests: send some application data
      Port multi-buffer tests
      Test that the peers send at most one fatal alert
      Indent ssl/
      Add more details on how to add a new SSL test
      TEST_check macro: don't end with semi
      testutil: always print errors on failure
      Don't create fixtures for simple tests
      Simplify tests part 2
      Add main() test methods to reduce test boilerplate.
      Run BoringSSL tests on Travis
      Test mac-then-encrypt
      X509 time: tighten validation per RFC 5280
      Remove methtest.c
      Remove dead code in crypto/pkcs7
      Remove debugging leftovers in apps/opt.c
      Remove BN_DEBUG_TRIX
      Clean up references to FIPS
      More Configure cleanup. Remove     - util/incore     - util/fipslink.pl     - the unused "baseaddr" configure switch
      Remove support for HMAC_TEST_PRIVATE_KEY_FORMAT
      Remove memcpy unrolling in bn_lib.c
      Remove some obsolete/obscure internal define switches:
      Port SRP tests to the new test framework
      Port remaining old DTLS tests
      Update master Travis to Trusty
      Add documentation for X509 time functions
      X509_cmp_time.pod: fix doc nits
      asynctest: don't depend on apps
      cipherbytes_test: remove unused includes
      Remove resolved TODO
      RSA_padding_check_PKCS1_type_2 is not constant time.

Erwann Abalea (1):
      Add some OID's from X.520

FdaSilvaYY (84):
      Constify ASN1_INTEGER_get, ASN1_ENUMERATED_get
      Constify two internal methods     - append_ia5     - old_entry_print
      Constify input buffer
      Constify inputs of two X509_LOOKUP_METHOD methods
      Constify some ASN1_OBJECT *obj input parameters
      Pack globals variables used to control apps/verify_callback()
      Fix doc and help about ca -valid option
      two typo fixes
      Relocalise some globals variables
      Improve error message
      Simplify and add help about OPT_PVK* options
      Constify char* input parameters in apps code
      Small nits and cleanups
      Allow to run all speed test when async_jobs active
      Duplicate includes
      Fix loopargs_t object duplication into ASYNC context
      Closing output file from inside the loop who open it
      Constify ASN1_PCTX_*
      Constify some inputs buffers
      Constify some input parameters.
      Constify some X509_NAME, ASN1 printing code
      Constify a bit X509_NAME_get_entry
      Fix some magic values about revocation info type...
      Remove an useless definition.
      Constify code about X509_VERIFY_PARAM
      Update INSTALL about no-md5 removal
      Fix various missing option help messages ...
      Remove an option related to a deprecated flag
      Add some missing types to indent.pro
      Fix copy-paste test labels
      Constify command options
      Fix style issue
      Fix not-c code
      Add error checking, small nit on ouput
      Allow null in  X509_CRL_METHOD_free
      Missing BN_RECP_CTX field init.
      Simplify and clean X509_VERIFY_PARAM new/free code.
      Simplify and fix usage of three string array variable...
      Introduce PATH_MAX and NAME_MAX
      Missing free item on push failure
      Raise an error on memory alloc failure.
      Clean one unused variable, plus an useless one.
      Clean dead macros and defines
      Fix use before assignment
      Fix some extra or missing whitespaces...
      Few nit's
      Fix some style and indent issue     simplify some code.
      Fix a few misspellings.
      Style
      Typo, fix a comment
      Fix a few double ;
      Fix a few typos     [skip ci]
      Simplify code around next_proto.len by changing 'len' data type.
      Fix a few more typos
      Spelling fixes
      Refomat a few comments on 80 cols
      Fix 0 -> NULL, indentation
      More typo fixes
      Add a 'max_send_frag' option to configure maximum size of send fragments
      Output prog name within error message
      Add checks on return code when applying some settings.     Remove hardcoded bound checkings.
      Declare a new x509v3 extension: x509ExtAdmission
      Fix some Typos and indents
      Fix some typo and comments     [skip ci]
      Fix overzealous cleanup command
      [Win] Fix some test method signatures ...
      Fix two MSVC warnings in apps.c
      fix some typos
      SSL Trace improvements
      Postpone allocation of STACK internal storage ... until a first push(),     insert() or an explicit call to OPENSSL_sk_reserve
      Use more pre-allocation
      Some cleanups to apps/ca.c
      Implement Maximum Fragment Length TLS extension.
      style : fix some if(...
      Various typo
      Fix possible leaks on sk_X509_EXTENSION_push() failure ...
      remove magic number
      Factorise duplicated code.
      Fix AppVeyor/VC build failure
      Fix docs for EVP_EncryptUpdate and EVP_DecryptUpdate
      Fix an incoherent test.
      Address some code-analysis issues.
      Useless conf != NULL test
      Small simplification in mkerr.pl

Finn Hakansson (1):
      Fix typo.

Frank Morgner (1):
      Added error checking for OBJ_create

Ga?tan Njinang (1):
      'openssl passwd' command can now compute AIX MD5-based passwords hashes.

Geoff Thorpe (3):
      bn: fix BN_DEBUG + BN_DEBUG_RAND support
      bn: catch negative zero as an error
      bn: fix occurances of negative zero

Gergely Nagy (2):
      Fix compilation when using MASM on x86
      PBKDF2 computation speedup (15-40%)

Graham Edgecombe (1):
      Return success in custom_ext_parse_old_cb_wrap if parse_cb is NULL

Greg Zaverucha (1):
      Fix sample code

Guido Vranken (4):
      Prevent overflows in stack API
      Prevent allocations of size 0 in sh_init, which are not possible with the default OPENSSL_zalloc, but are possible if the user has installed their own allocator using CRYPTO_set_mem_functions. If the 0-allocations succeeds, the secure heap code will later access (at least) the first byte of that space, which is technically an OOB access. This could lead to problems with some custom allocators that only return a valid pointer for subsequent free()-ing, and do not expect that the pointer is actually dereferenced.
      Prevents that OPENSSL_gmtime incorrectly signals success if gmtime_r fails, and that struct* tm result's possibly uninitialized content is used
      Remove obsolete comment

Hannes Magnusson (1):
      Remove redundant decl of 509_STORE_set_flags

Hikar (1):
      Removed ugly size_t less than zero check.

HorimotoYasuhiro (1):
      CLA: trivial

Hubert Kario (8):
      fix OSSL_STORE man pages
      pkcs12.c better formatting for unsupported params
      more info about PKCS#12 structure MAC
      make scrypt ASN.1 parameter functions public
      nicer formatting for MAC info
      handle scrypt PBKDF in PKCS#12 files info
      add basic references to the new methods in documentation
      doc: note that the BN_new() initialises the BIGNUM

Ian Spence (1):
      Fix function documentation

Iaroslav Gridin (7):
      Add AES-ECB and 3DES-ECB to cryptodev
      Remove non-functional CRYPTO_AES_CTR ifdef disabling AES-CTR in cryptodev
      Remove unused ret variable
      Style the code
      Remove commented-out HMAC code
      fix for BSD cryptodev
      use EVP_CIPHER_CTX_ functions instead of accessing EVP_CIPHER_CTX internals

Jack Lloyd (1):
      SM3: Add SM3 hash function

Jacob Hoffman-Andrews (1):
      Clarify error for unrecognized arguments.

Jakub Jelen (2):
      ECDSA_* is deprecated. EC_KEY_* is used instead
      doc: Bad prototypes of EVP_PKEY_CTX_new()

Jakub Zelenka (1):
      Never return -1 from BN_exp

JimC (3):
      Ignore windows generated manifests
      Fix CIPHER_DEBUG
      Documented BIO_set_accept_port()/BIO_get_accept_port()

JitendraLulla (4):
      extending afalg with aes-cbc-192/256, afalgtest.c also updated accordingly. comments from matt, Stephen considered
      fix  --strict-warnings
      make get_cipher_handle static
      putting the missing static

Johannes Bauer (15):
      Fix const correctness of EC_KEY_METHOD_get_*
      Set error when HKDF used without parameters
      More error handling to HKDF and one more case in TLS1-PRF
      Changed use of EVP_PKEY_CTX_md() and more specific error codes
      Added differentiation between missing secret and missing seed
      Fix indentation
      Fix typo in HKDF example documentation
      Small typo in manpage of x509(1)
      Add interface to the scrypt KDF by means of PKEY_METHOD
      Add PKEY_METHOD macro tests
      Add documentation for the scrypt PKEY_METHOD
      Fix building without scrypt
      Clarify CLI OCSP documentation
      Fix coding style of EVP_PKEY_CTX_ctrl_uint64
      Add PKEY_CTX setter tests for TLS1-PRF

Jon Spillett (27):
      Check for zero records and return immediately
      Exit the loop on failure
      Add Python Cryptography.io external test suite
      Add documentation for SSL version methods
      Add documentation for SSL_*_ex_data() functions
      Typo in SSL_CONF_CTX_set_flags.pod
      Typo in SSL_CONF_CTX_set1_prefix.pod - change SSL_CTX_cmd to SSL_CONF_cmd
      Typo in SSL_CONF_cmd_argv.pod
      SSL_CTX_use_PrivateKey_file uses private key, not certificate
      Tidy up the SSL options in SSL_CTX_set_options.pod
      Typo in SSL_CTX_sess_number.pod - started
      Add documentation for SNI APIs
      Add SSL_dup description
      Fix for #2730. Add CRLDP extension to list of supported extensions
      Convert exdata tests to new test framework
      Convert RSA tests to new framework
      Updates after code review
      Remove seed completely...
      Convert blowfish tests to new framework
      Code review. Split tests up
      Remove unused variable. Thanks @pauli-oracle
      Change 64-bit time type for windows
      Converted the bio_enc tests to use new test framework.
      Update pyca-cryptography to latest commit
      [extended tests] Add steps to update an external test suite
      Fix potential null pointer dereference in ARIA implementation
      Implement Aria GCM/CCM Modes and TLS cipher suites

Jonathan Protzenko (1):
      Fix speed command for alternation of ciphers and digests.

Joseph Birr-Pixton (3):
      TLS1.3: Correct intermediate secret derivation
      Update test vectors in tls13secretstest
      Improve testing of elliptic curve validation

Josh Soref (5):
      Fix spelling errors in CMS.
      mark V_ASN1_PRIMATIVE_TAG as compat
      Fix spelling errors in manpages
      improve comment: use "optimization" for clarity     The previous word was a misspelling of nicety
      Many spelling fixes/typo's corrected.

KaoruToda (5):
      Since return is inconsistent, I removed unnecessary parentheses and     unified them.     - return (0); -> return 0;     - return (1); -> return 1;     - return (-1); -> return -1;
      Remove parentheses of return.
      Various clean-ups
      Remove duplicate assignment.
      apps/s_client.c: add missing null check     apps/s_server.c: remove unnecessary null check

Kazuki Yamaguchi (8):
      Fix overflow check in BN_bn2dec()
      Expose alloc functions for EC{PK,}PARAMETERS
      Fix a memory leak in EC_GROUP_get_ecparameters()
      Add missing flags for EVP_chacha20()
      Properly zero cipher_data for ChaCha20-Poly1305 on cleanup
      Fix a typo in the SSL_get_max_early_data() declarations
      Fix BN_print()
      Do not lookup zero-length session ID

Keigo Tanaka (1):
      Added mysql as starttls protocol.

Ken Goldman (1):
      RSA_get0_ functions permit NULL parameters

Keshav Kini (1):
      Fix typos

Konstantin Shemyak (1):
      Corrected 'cms' exit status when key or certificate cannot be opened

Kurt Roeckx (80):
      Fix spelling of error code
      Fix off by 1 in ASN1_STRING_set()
      Test the support curves in tls
      Update fuzz corpora
      Update fuzz corpora
      Add a github pull request template
      conf fuzzer: also check for an empty file
      Cast to an unsigned type before negating
      Update fuzz corpora
      Add support for reference counting using C11 atomics
      Fix name of "locked" variable
      Make SSL_read and SSL_write return the old behaviour and document it.
      Add missing -zdelete for some linux arches
      coveralls: Use gcov-5 since we build it using gcc-5
      Fix formatting of fuzzers
      FuzzerInitialize always exists
      Add a FuzzerClean() function
      asn1parse: create the out bio during init, free it during cleanup
      bignum fuzzer: move new and free calls to the init and cleanup function.
      bndiv fuzzer: move new and free calls to the init and cleanup function.
      Use 8bit-counters when using libfuzzer
      Make the random number generator predictable when fuzzing.
      CMS fuzzer: also use id2
      Move libfuzzer sanitizer options to README
      Make the fuzzers more reproducible
      Run a some tests with -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
      travis: Use no-shared for the FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION targets
      Also set the CXXFLAG to the user supplied flags
      Make asn1 fuzzer more reproducible
      Make the predictable numbers start from 1
      And client fuzzer
      Fuzz corpora update
      Only call memcpy when the length is larger than 0.
      Update client fuzzer corpus
      Update client fuzz corpus
      Don't call memcpy with NULL as source
      Enable TLS1.3 and PEDANTIC in the coverage target
      Document the recommended parameters for fuzzing
      Make client and server fuzzer support all ciphers
      Fix memory leak in tls_parse_stoc_key_share
      Update fuzz corpora
      server fuzzer: add support for DSA and ECDSA
      Make rand_add predictable when fuzzing
      Update fuzz documentation
      Make the bignum fuzzer reproducible
      Make client and server fuzzer reproducible
      Update fuzz corpora
      Print the X509 version signed, and convert to unsigned for the hex version.
      Fix undefined behaviour when printing the X509 serial
      Fix VC warnings about unary minus to an unsigned type.
      Fix undefined behaviour when printing the X509 and CRL version
      Add missing braces.
      Update client and server corpus
      Use memcmp() instead of CRYPTO_memcmp() when fuzzing
      Revert "Use memcmp() instead of CRYPTO_memcmp() when fuzzing"
      Update client, server and x509 fuzz corpus
      Implement SSL_read_ex() and SSL_write_ex() as documented.
      Fix duplicate error codes
      Fix double free in cookie generation.
      Make the CRYPTO_memcmp() prototype match memcmp()
      Use memcmp() instead of CRYPTO_memcmp() when fuzzing
      Switch libfuzzer to use trace-pc-guard
      Make x509 and asn1 fuzzer reproducible
      Document how to update the corpus.
      Use a fixed time when fuzzing.
      Optionally check for early data
      Add missing commas in pod files
      Update fuzz corpora
      Don't auto-instantiate a DRBG when trying to use it and it's not
      Make the global DRBGs static
      Use curve_id not the nid
      Use size of entries, not size of the pointer.
      Only reset the ctx when a cipher is given
      Update location of the libfuzzer repository
      Don't turn b2 negative
      ASN1 fuzzer: Use d2i_TYPE / i2d_TYPE functions
      Update asn1 and x509 corpora
      Create a prototype for OPENSSL_rdtsc
      Fix comment about undefined behavior of constant_time_msb
      Add RAND_DRBG_bytes

Lingmo Zhu (2):
      Remove the obsolete misleading comment and code related to it.
      remove horrible pragma macro and remove __owur from SSL_CTX_add_session() declaration

Long Qin (1):
      lhash.c: Replace Unicode EN DASH with the ASCII char '-'.

Lukasz Pawelczyk (1):
      Restore EVP_CIPH_FLAG_LENGTH_BITS working properly

Luke Faraone (1):
      Add support for using engine-backed keys in spkac

Marek Klein (3):
      explicitText encoding
      Added support for ESSCertIDv2
      fixing incorrect OID of signingCertificateV2     Reviewed-by: Kurt Roeckx <kurt at openssl.org>     Reviewed-by: Rich Salz <rsalz at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/3538)

Markus Sauermann (1):
      Adjusted Argument Indices     CLA: trivial

Markus Triska (4):
      Fix reference to SSL_set_max_proto_version.
      replace "will lookup up" by "will look up"
      Correct reference to SSL_get_peer_cert_chain().
      correct 3 mistakes

Martin Peylo (1):
      Adding NID_hmac_sha1 and _md5 to builtin_pbe[]

Mat (1):
      Do not set load_crypto_strings_inited when OPENSSL_NO_ERR is defined

Matt Caswell (1054):
      Prepare for 1.1.0-pre7-dev
      Address feedback on SSLv2 ClientHello processing
      Send an alert if we get a non-initial record with the wrong version
      Add some SSLv2 ClientHello tests
      Address feedback on SSLv2 ClientHello processing
      Remove a stray unneeded line in 70-test_sslrecords.t
      Ensure we unpad in constant time for read pipelining
      Provide compat macros for SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_auto()
      Convert TS_STATUS_INFO* functions to use const getters
      Convert PKCS8* functions to use const getters
      Convert SSL_SESSION* functions to use const getters
      Convert OCSP* functions to use const getters
      Make X509_NAME_get0_der() conform to OpenSSL style
      Convert X509_CRL* functions to use const getters
      Convert X509_REVOKED* functions to use const getters
      Add a (D)TLS dumper BIO
      Add a DTLS packet mem BIO
      Split create_ssl_connection()
      Add a DTLS unprocesed records test
      Fix DTLS unprocessed records bug
      Add DTLS replay protection test
      Fix DTLS replay protection
      Fix some clang warnings
      Update function error code
      Convert PKCS12* functions to use const getters
      Fix enable-zlib
      Fix DTLS buffered message DoS attack
      Prevent DTLS Finished message injection
      Choose a ciphersuite for testing that won't be affected by "no-*" options
      Fix no-des
      Fix leak on error in tls_construct_cke_gost
      Ensure CT_POLICY_EVAL_CTX_free behaves properly with a NULL arg
      Ensure the mime_hdr_free function can handle NULLs
      Fix mem leak on error path
      Fix mem leak on error path
      Fix mem leak on error path
      Check for malloc error in bn_x931p.c
      Check for error return from ASN1_object_size
      Sanity check an ASN1_object_size result
      Remove some dead code
      Add some sanity checks when checking CRL scores
      Fix bio_enc_test
      Fix no-sock
      Fix some resource leaks in the apps
      Remove useless assignment
      Remove some dead code from rec_layer_s3.c
      Fix no-ec2m
      Clarify the error messages in 08f6ae5b28
      Fix an uninitialised read on an error path
      Fix uninit read in sslapitest
      Remove note from CHANGES about EC DRBG
      Ensure the CertStatus message adds a DTLS message header where needed
      Add some CertStatus tests
      Ensure trace recognises X25519
      Fix mem leaks during auto-deinit
      util/shlib_wrap.sh is now auto-generated so tell git to ignore it
      First pass at writing a writeable packets API
      Convert tls_construct_client_hello() to use PACKETW
      Rename PACKETW to WPACKET
      Move from explicit sub-packets to implicit ones
      Add WPACKET_sub_memcpy() function
      Various bug fixes and tweaks to WPACKET implementation
      Ensure the WPACKET gets cleaned up in the event of an error
      Add tests for the WPACKET implementation
      Move the WPACKET documentation comments to packet_locl.h
      Simplify the overflow checks in WPACKET_allocate_bytes()
      Address WPACKET review comments
      Add some soft asserts where applicable
      Pull out some common packet code into a function
      Remove else after a return in packet code
      Fix a few style nits in the wpacket code
      Abort on unrecognised warning alerts
      Convert CKE construction to use the WPACKET API
      Add a WPACKET_sub_allocate_bytes() function
      Make wpackettest conform to style rules
      Encourage use of the macros for the various "sub" functions
      Add some sanity checks around usage of t_fromb64()
      Fix OCSP_RESPID processing bug introduced by WPACKET changes
      Revert "Abort on unrecognised warning alerts"
      Convert num_alloc to a size_t in stack.c and tweak style
      Convert ClientVerify Construction to WPACKET
      Convert Certificate message construction to WPACKET
      Convert NextProto message construction to WPACKET
      Style tweaks following review feedback
      Convert Finished construction to WPACKET
      Convert CCS construction to WPACKET
      Convert WPACKET_put_bytes to use convenience macros
      Fix a missing NULL check in dsa_builtin_paramgen
      make update and fix some associated mis-matched error codes
      Don't allow too many consecutive warning alerts
      Don't leak on an OPENSSL_realloc() failure
      Excessive allocation of memory in tls_get_message_header()
      Excessive allocation of memory in dtls1_preprocess_fragment()
      Fix OCSP Status Request extension unbounded memory growth
      Add the ability to set OCSP_RESPID fields
      Add OCSP_RESPID_match()
      Add some more OCSP testing
      Fix a mem leak in NPN handling
      Fix a hang with SSL_peek()
      Updates CHANGES and NEWS for new release
      Add warning about a potential pitfall with WPACKET_allocate_bytes()
      Convert HelloVerifyRequest construction to WPACKET
      Add a test for large messages
      Fix a WPACKET bug
      Fix Use After Free for large message sizes
      Updates CHANGES and NEWS for new release
      Fix HelloVerifyRequest construction
      Fix some mem leaks in sslapitest
      Convert HelloRequest construction to WPACKET
      Fix a bug in Renegotiation extension construction
      Add support for testing renegotiation
      Update README.ssltest.md
      Extend the renegotiation tests
      Add DTLS renegotiation tests
      Fix no-dtls
      Fix an Uninit read in DTLS
      Convert ServerHello construction to WPACKET
      Delete some unneeded code
      Fix heartbeat compilation error
      Fix a bug in the construction of the ClienHello SRTP extension
      Address style feedback comments
      Convert CertificateRequest construction to WPACKET
      Remove tls12_copy_sigalgs_old()
      Add the WPACKET_reserve_bytes() function
      Convert ServerKeyExchange construction to WPACKET
      Fix a bug in CKE construction for PSK
      Address style feedback comments
      Add an example of usage to the WPACKET_reserve_bytes() documentation
      Fix an mis-matched function code so that "make update" doesn't fail
      Fix missing NULL checks in NewSessionTicket construction
      Convert SeverDone construction to WPACKET
      Fix mis-named macro in packet_locl.h
      Convert CertStatus message construction to WPACKET
      Fix an error in packet_locl.h
      Convert NewSessionTicket construction to WPACKET
      Remove the tls12_get_sigandhash_old() function
      Remove ssl_set_handshake_header()
      Rename ssl_set_handshake_header2()
      Move init of the WPACKET into write_state_machine()
      Don't set the handshake header in every message
      Harmonise setting the header and closing construction
      Remove the special case processing for finished construction
      Move setting of the handshake header up one more level
      Add a typedef for the construction function
      Fix linebreaks in the tls_construct_client_certificate function
      Use clang++ for C++ for the linux-x86_64-clang target
      Ensure we handle len == 0 in ERR_err_string_n
      Allow older versions in the *.num files
      Provide a cross-platform format specifier (OSSLzu) for printing size_t
      A zero return from BIO_read()/BIO_write() could be retryable
      Add a test for BIO_read() returning 0 in SSL_read() (and also for write)
      Fix a double free in ca command line
      Create BIO_read_ex() which handles size_t arguments
      Create BIO_write_ex() which handles size_t arguments
      Ensure all BIO functions call the new style callback
      Document the new BIO functions introduced as part of the size_t work
      Fix some bogus uninit variable warnings
      Fix a shadowed variable declaration warning
      Read up to INT_MAX when calling legacy BIO_read() implementations
      Ensure that BIO_read_ex() and BIO_write_ex() only return 0 or 1
      Tweaks based on review feedback of BIO size_t work
      More parameter naming of BIO_read*/BIO_write* related functions
      Add some sanity checks for BIO_read* and BIO_gets
      Fix some feedback issues for BIO size_t-ify
      Fix more shadowed variable warnings
      Fix stdio build following BIO size_t work
      Add the SSL_METHOD for TLSv1.3 and all other base changes required
      Use ciphersuite id when matching if we've got one
      Update Configure to know about tls1_3
      Convert a big "if" into a "switch"
      Make sure ossltest engine works with TLS1.3
      Enable TLSProxy to talk TLS1.3
      Fix some style issues in ossltest
      Fix read_ahead
      Add a read_ahead test
      Fail if an unrecognised record type is received
      Add a test for unrecognised record types
      Add a CHANGES entry for the unrecognised record type change
      Partial revert of 3d8b2ec42 to add back DSO_pathbyaddr
      Add a DSO_dsobyaddr() function
      Ensure that libcrypto and libssl do not unload until the process exits
      Add a test to dynamically load and unload the libraries
      Link using -znodelete
      Implement GET_MODULE_HANDLE_EX_FLAG_PIN for windows
      Integrate BoringSSL shim
      Add a test to call the BoringSSL test suite
      Rebase shim against latest boringssl code
      Add ossl_shim to .gitignore
      Add a shim config file
      Control building of ossl_shim through Configure
      Add a comment to 90-test_external.t to explain why we need filter_run
      Fix some unused variable warnings in ossl_shim
      Add -std=c++11 to CXXFLAGS
      Add documentation on the BoringSSL test suite integration
      Remove test/ossl_shim/Makefile
      Fix argument order in documentation
      Remove some #if 0'd out code
      Remove some unreferenced fields from TestState
      Remove unused BoringSSL specific flags
      Use the -allow-unimplemented feature of the BoringSSL runner
      Remove some flags that are unused in the shim
      Removed scoped_types.h
      Remove some #if 0'd out code
      Fix a code inconsistency
      Rename BoringSSL style OPENSSL_WINDOWS to OPENSSL_SYS_WINDOWS
      Update the BoringSSL suppressions file based on the latest shim
      Add missing bn.h include
      Swap header copyrights to standard OpenSSL
      Add a wildcard exception for TLS13 tests
      Remove an unused field in ossl_shim
      Convert record layer to use size_t
      Further libssl size_t-ify of reading
      Convert libssl writing for size_t
      Convert SSL3_RECORD_clear() and SSL3_RECORD_release() to size_t
      Convert some misc record layer functions for size_t
      Convert ssl3_cbc_digest_record for size_t
      Convert various mac_secret_size usage to size_t
      Convert master_secret_size code to size_t
      Convert session_id_length and sid_ctx_len to size_t
      Update numerous misc libssl fields to be size_t
      Update cookie_len for size_t
      Convert some libssl local functions to size_t
      Update misc function params in libssl for size_t
      Resolve some outstanding size_t related TODOs
      Fix some missed size_t updates
      Convert SSL BIO to use SSL_write_ex().
      Add some PACKET functions for size_t
      Fix some ssl3_record code witch converstion to/from size_t
      Convert the mac functions to just return 1 for success and 0 for failure
      Fix misc size_t issues causing Windows warnings in 64 bit
      Now that we can use size_t in PACKET lets use it
      Ensure HMAC_size() handles errors correctly
      Provide some constant time functions for dealing with size_t values
      Remove a stray TODO that has already been fixed
      Document the newly added SSL functions
      Fix some clashing symbol numbers due to merge conflict
      Fix some bogus warnings about uninitialised variables
      Fix style issues in HMAC_size()
      Updates various man pages based on review feedback received.
      Clarify the return values for the peek functions
      Ensure SSL_DEBUG works following size_t changes
      Test the size_t constant time functions
      Document the HMAC_size() function
      Fix a shadowed variable declaration warning picked up by Travis
      Clarify the return values for SSL_read_ex()/SSL_write_ex()
      Rename all "read" variables with "readbytes"
      Tweak the SSL_read()/SSL_write() text based on feedback received.
      Fix some style issues from libssl size_tify review
      Fix a missed size_t variable declaration
      Always ensure that init_msg is initialised for a CCS
      Correct the Id for the TLS1.3 ciphersuite
      test_sslcbcpadding only makes sense <TLS1.3
      Ignore the record version in TLS1.3
      Add a test for the wrong version number in a record
      Partial revert of "Fix client verify mode to check SSL_VERIFY_PEER"
      Fix zlib BIO_METHOD for latest BIO_METHOD structure changes
      Refactor ClientHello processing so that extensions get parsed earlier
      Handle compression methods correctly with SSLv2 compat ClientHello
      Fix a memory leak in the ClientHello extension parsing
      Use an explicit name for the struct for definition of RAW_EXTENSION
      Fix various style issues in the extension parsing refactor
      Improve some comment documentation following the extensions refactor
      Fix make update following extensions refactor
      Add some function documentation and update some existing comments
      Fix some minor style issues
      Rename clienthello.version to clienthello.legacy_version
      Load the sessionid directly in SSLv2 compat ClientHello
      Move setting the session_id_len until after we filled the session_id
      Swap back to using SSL3_RANDOM_SIZE instead of sizeof(clienthello.random)
      Update a comment
      Make some CLIENTHELLO_MSG function arguments const
      Update HKDF to support separte Extract and Expand steps
      Following the changes to HKDF to accept a mode, add some tests for this
      Add some documentation for the new HKDF modes
      Add support for initialising WPACKETs from a static buffer
      Add support for TLS1.3 secret generation
      Add a test for the TLS1.3 secret generation
      Ensure the key and iv labels are declared as static
      Add the ability to send the supported_versions extension
      Ensure that the -trace option can interpret the supported_versions extension
      Add server side support for supported_versions extension
      Update TLS1.3 draft version numbers for latest draft
      Add a test for the supported_versions extension
      Address some review feedback comments for supported_versions
      Ensure that vent->smeth != NULL before we call vent->smeth()
      Look at the supported_versions extension even if the server <TLS1.3
      A style tweak based on feedback received
      Add some more version tests
      Add a TODO(TLS1.3) about renegotation
      Give the test with only TLS1.1 and TLS1.0 a better name
      Fix some missing checks for TLS1_3_VERSION_DRAFT
      Remove some redundant trace code
      Address some supported_versions review comments
      Fix the no-tls option
      Update CHANGES and NEWS
      Rename the Elliptic Curves extension to supported_groups
      Fix test_sslcorrupt when using TLSv1.3
      Revert "Fixed deadlock in CRYPTO_THREAD_run_once for Windows"
      Generate the key_shares extension on the client side
      Add the key_share processing to the server side
      Update the trace code to know about the key_share extension
      Add key_share info to the ServerHello
      Add processing of the key_share received in the ServerHello
      Add a TLS version consistency check during session resumption
      Start using the key_share data to derive the PMS
      Validate that the provided key_share is in supported_groups
      Ensure the whole key_share extension is well formatted
      Check key_exchange data length is not 0
      Add some tests for the key_share extension
      Fixed various style issues in the key_share code
      Move getting the curvelist for client and server out of the loop
      Fix a typo in a comment
      Add SSL_peek() and SSL_peek_ex() to NAME section
      Remove a hack from ssl_test_old
      Fix a "defined but not used" warning when enabling ssl-trace
      Fix missing SSL_IS_TLS13(s) usage
      Fix EXTMS error introduced by commit 94ed2c6
      Remove old style NewSessionTicket from TLSv1.3
      Implement tls13_change_cipher_state()
      Update state machine to be closer to TLS1.3
      Create the Finished message payload
      Fix the tests following the state machine changes for TLSv1.3
      Ensure the end of first server flight processing is done
      Ensure unexpected messages are handled consistently
      Fix some TLSProxy warnings
      Add a test for the TLSv1.3 state machine
      Add an s_server capability to read an OCSP Response from a file
      Extend test_tls13messages
      Fix SSL_IS_TLS13(s)
      Fix some style issues identified during review
      Fix some style issues with TLSv1.3 state machine PR
      Update tls13secretstest to use the new simpler test framework
      Fix an uninit variable usage
      Fix a double ;; causing a travis failure
      Fix some defines in ossl_shim
      Use ClientHello.legacy_version for the RSA pre-master no matter what
      Fix missing NULL checks in CKE processing
      Fix missing NULL checks in key_share processing
      Fix a missing function prototype in AFALG engine
      Fix a warning about an uninit var
      Fix a bogus uninit var warning
      Ensure we are in accept state in DTLSv1_listen
      Fix mac-then-encrypt test with enable-tls1_3
      Use the TLSv1.3 nonce construction
      Add a test for TLSv1.3 encryption using the new nonce construction
      Fix a travis compilation error
      Fix a double free in tls13encryptiontest
      Fix some style issues in the TLSv1.3 nonce construction code
      Convert tls13encryptiontest so that we pass around a pointer not an index
      Make refdata in tls13encryptest static
      Fix a typo in bio_read_intern
      Add an ability to find out the current write location from a WPACKET
      Convert TLS record construction to use WPACKET
      Convert TLS Record receipt to use PACKET
      Update the record layer to use TLSv1.3 style record construction
      Add more TLS1.3 record tests
      Add a TLS1.3 TODO for the msg callback
      Ensure compressdata is always initialised
      Change various repeated rr[someindex] references to a pointer
      Various style fixes from the TLSv1.3 record changes review
      Change various repeated wr[someindex]/pkt[someindex] references to a pointer
      Send and Receive a TLSv1.3 format ServerHello
      Add EncryptedExtensions message
      Move tls_collect_extensions() into a separate file
      Add some missing extensions to SSL_extension_supported()
      Verify that extensions are used in the correct context
      Refactor ClientHello extension parsing
      Continue the extensions refactor
      Add extensions construction support
      Split extensions code into core extensions and server extensions code
      Move ServerHello extension construction into the new extensions framework
      Rename some functions
      Move client parsing of ServerHello extensions into new framework
      Move client construction of ClientHello extensions into new framework
      Add an extension initilisation and finalisation capability
      Provide server side extension init and finalisation functions
      Move ALPN processing into an extension finalisation function
      Simplify ClientHello extension parsing
      Avoid repeatedly scanning the list of extensions
      Move ServerHello extension parsing into the new extension framework
      Split ServerHello extensions
      Add tests for new extension code
      Support renegotiation in TLSProxy
      Add a test to check messsages sent are the ones we expect
      Fix a bug in TLSProxy where zero length messages were not being recorded
      Enable status_request test in test_sslmessages
      Add extension tests in test_sslmessages
      Merge common code between test_tls13messages and test_sslmessages
      Add more extension tests to test_sslmessages
      Add a renegotiation test
      Remove some spurious whitespace
      Add some extra key_share tests
      Fix a memory leak
      Correct imports for checkhandshake module
      Suppress some BoringSSL test failures
      Fix travis mixed declarations and code error
      Various style updates following extensions refactor
      Change TLSEXT_IDX_* values into an enum
      Introduce TLSEXT_STATUSTYPE_nothing constant
      Fix more style issues following extensions refactor feedback
      Fix make update issues
      Move the checkhandshake.pm module into test/testlib
      Fix various indentation
      Fix a travis failure
      Fix the declaration of tls_parse_extension in statem_locl.h
      Fix a leak in SSL_clear()
      Fix the EC point formats extension
      Add a test to check the EC point formats extension appears when we expect
      Fix extension for various no- options
      Fix compilation with no-ec
      Fix CT test_sslmessages hangs
      Fix the SSL_set1_sigalgs() macro
      Provide some tests for the sig algs API
      Don't run the sigalgs tests over a TLSv1.3 connection
      Extend tls_construct_extensions() to enable passing of a certificate
      Extends extension parsing to take the Certificate
      Create Certificate messages in TLS1.3 format
      Implement TLSv1.3 style CertificateStatus
      Update SSL_trace to understand TLSv1.3 Certificates
      Initialise the al variable
      Fix a double blank line style issue
      Rename the chain variable to chainidx
      Fix various style issues following feedback
      Mark a HelloRequest record as read if we ignore it
      Add a TODO(TLS1.3) around certificate selection
      Move Certificate Verify construction and processing into statem_lib.c
      Make CertificateVerify TLS1.3 aware
      Sign CertificateVerify messages using PSS padding
      Convert Sigalgs processing to use ints
      Remove a redundant function
      Use NIDs instead of the old TLSv1.2 sigalgs hash and sig ids
      Remove some unneeded functions
      Ensure the record sequence number gets incremented
      Use the correct size for TLSv1.3 finished keys
      Temporarily ignore NewSessionTickets for TLS1.3
      Fix client application traffic secret
      Verify that the sig algs extension has been sent for TLSv1.3
      Ignore PKCS1 based sig algs in TLSv1.3
      Add some sig algs tests
      Add a TLS1.3 TODO for setting of sig algs
      Always use TLSv1.0 for record layer version in TLSv1.3
      Fix test_sslversions to know that TLSv1.3 sets record version to TLSv1.0
      Extend PSS signature support to TLSv1.2
      Add a sigalg test to check we only allow sigalgs we sent
      Teach SSL_trace about the new sigalgs
      Teach TLSProxy about the CertificateVerify message
      Extend ServerKeyExchange parsing to work with a signature
      Teach TLSProxy how to re-encrypt a TLSv1.3 message after changes
      Add some signature tests
      Fix a Travis failure
      Fix an uninit read picked up by Travis
      Add some missing sigalgs
      Fix tls1_set_sigalgs() length calculation
      Fix no-ec following sigalgs refactor
      Fix compilation with no-nextprotoneg
      Fix no-dh builds
      Fix SSL_VERIFY_CLIENT_ONCE
      Stop client from sending Certificate message when not requested
      Stop server from expecting Certificate message when not requested
      Extend the test_ssl_new renegotiation tests to include client auth
      Fix SSL_get0_raw_cipherlist()
      Fix memory leaks in the Certificate extensions code
      Don't use magic numbers in aes_ocb_cipher()
      Properly handle a partial block in OCB mode
      Update evp_test to make sure passing partial block to "Update" is ok
      Fix the overlapping check for fragmented "Update" operations
      Adjust in and in_len instead of donelen
      Remove assert from is_partially_overlapping()
      Fix a merge error
      Update CHANGES and NEWS for new release
      ChangeCipherSpec is not allowed in TLSv1.3
      Remove use of the SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS flag
      Move state machine knowledge out of the record layer
      Disable requests for renegotiation in TLSv1.3
      Move TLSv1.3 Session Ticket processing into the state machine
      Add support for the psk_key_exchange_modes extension
      Create the NewSessionTicket message in TLSv1.3
      Process incoming NewSessionTicket messages on the client side
      Add a TODO around handling of SSL_get_session() and SSL_get1_session()
      Never send a session id in TLS1.3
      Update the s_client -sess_out feature to work for TLSv1.3
      Provide a new WPACKET function for filling in all the lengths
      Construct the client side psk extension for TLSv1.3
      Add support for the age_add field
      Add support for client side parsing of the PSK extension
      Provide a key_share extension finaliser
      Make sure we also cleanse the finished key
      Implement Server side of PSK extension parsing
      Implement server side of PSK extension construction
      Set the kex modes on the client too.
      Move session version consistency check
      Use the correct session resumption mechanism
      Tweak a comment
      Always ensure that session->cipher is set
      Re-enable ALPN resumption tests where we are using TLSv1.3
      Update create_ssl_connection() to make sure its gets a session
      Re-enable TLSv1.3 session resumption related tests in sslapitest
      Remove a TLS1.3 TODO that is now completed
      Re-enable test_ssl_new resumption tests for TLSv1.3
      Add a capability for TLSProxy to wait for a session before killing s_client
      Add testing of TLSv1.3 resumption in test_tls13messages
      Re-enable resumption for TLS1.3 CT tests
      Ensure the age_add variable is properly initialised
      Ensure the al variable is properly ininitialised in all code paths
      Miscellaneous style tweaks based on feedback received
      Make the "ticket" function return codes clearer
      Make calls to SSL_renegotiate() error out for TLSv1.3
      Enable wpacket test on shared builds
      Add a test for WPACKET_fill_lengths()
      Fix <= TLS1.2 break
      If we have no suitable PSK kex modes then don't attempt to resume
      Add a test for the PSK kex modes extension
      Move the SSL3_CK_CIPHERSUITE_FLAG out of public header
      Use for loop in WPACKET_fill_lengths instead of do...while
      Remove unneccessary comments
      Various style fixes following review feedback
      Add a TODO around validating the ticket age
      Expand comment in tls_process_hello_req()
      Make sure we free and cleanse the pms value in all code paths
      Free up the memory for the NewSessionTicket extensions
      Fix crash in tls13_enc
      Fix a typo in the X509_get0_subject_key_id() documentation
      Make the context available to the extensions parse and construction funcs
      Add server side support for creating the Hello Retry Request message
      Add client side support for parsing Hello Retry Request
      Implement support for resumption with a HelloRetryRequest
      Add trace support for HelloRetryRequest
      Update the key_share tests for HelloRetryRequest
      Update test counting in checkhandshake.pm
      Update TLSProxy to know about HelloRetryRequest messages
      Update the kex modes tests to check various HRR scenarios
      Update the tls13messages test to add some HRR scenarios
      Various style fixes following review feedback
      Add a bytestogroup macro
      Fix a bogus uninit variable warning
      Remove a double call to ssl3_send_alert()
      Fix no-ec compilation
      Fix merge issue
      Provide a test for the Encrypt-Then-Mac renegotiation crash
      Don't change the state of the ETM flags until CCS processing
      Remove an OPENSSL_assert() and replace with a soft assert and check
      Update CHANGES and NEWS for new release
      Fix a mem leak in ssl_test_ctx.c
      Provide a function to send a KeyUpdate message
      Add a capability to s_server to send KeyUpdate messages
      Add SSL_trace() support for KeyUpdate messages
      Add the ability for a client to receive a KeyUpdate message
      Add the ability for a client to send a KeyUpdate message
      Add a SSL_get_key_update_type() function
      Add the ability for s_client to send a KeyUpdate message
      Add the ability for a server to receive a KeyUpdate message
      If we receive an "update_requested" KeyUpdate then respond with a KeyUpdate
      Actually update the keys when a KeyUpdate message is sent or received
      Limit the number of KeyUpdate messages we can process
      Updates following review feedback
      Fix a shadowed global variable warning
      Add documentation for SSL_key_update() and SSL_get_key_update_type()
      Add some KeyUpdate tests
      Don't use an enum in the return type for a public API function
      Updates following review feedback
      Fix a merge error
      Remove some dead code from libssl
      Remove dead code in bn
      Remove the file r160test.c
      Remove bf_cbc.c
      Remove a pointless "#ifndef" from bf_enc.c
      Remove some commented out code in the apps
      Remove some commented out code in libcrypto
      Remove some commented out code in libssl
      Remove some commented out code in the tests
      Fix sslapitest when compiled with no-tls1_2
      Fix test_ssl_new when compiled with no-tls1_2 or no-dtls1_2
      Ensure that we never select compression in TLSv1.3
      Fix a compression bug
      Add compression tests
      Use the built in boolean type for CompressionExpected
      Construct the ticket_early_data_info extension
      Add a -max_early_data option to s_server
      Teach SSL_trace() about the early_data_info extension
      Parse the ticket_early_data_info extension
      Provide functions to write early data
      Construct the early_data extension
      Parse the early_data extension
      Add an option to s_client to send early_data
      Implement the early data changes required in tls13_change_cipher_state()
      Change the cipher state when sending early data
      Provide an SSL_read_early() function for reading early data
      Construct the server side early_data extension
      Fix changing of the cipher state when dealing with early data
      Add a "-early_data" option to s_server
      Implement client side parsing of the early_data extension
      Get s_client to report on whether early data was accepted or not
      Fix seg fault when sending early_data using CCM ciphersuites
      Disallow handshake messages in the middle of early_data
      Make sure we reset the read sequence when skipping records
      Check max_early_data against the amount of early data we actually receive
      Provide a default value for max_early_data
      Ensure the max_early_data option to s_server can be 0
      Validate the ticket age for resumed sessions
      Remove some TLSv1.3 TODOs that are no longer relevant
      Add extra validation parsing the server-to-client early_data extension
      Don't accept early_data if we are going to issue a HelloRetryRequest
      Skip early_data if appropriate after a HelloRetryRequest
      Only accept early_data if the negotiated ALPN is the same
      Don't attempt to write more early_data than we know the server will accept
      Add a SSL_SESSION_get_max_early_data() function
      Make SSL_get_max_early_data() and SSL_CTX_get_max_early_data() take a const
      Make SSL_get_early_data_status() take a const
      Add documentation for the early data functions
      Tighten sanity checks when calling early data functions
      Add documentation for the new s_client and s_server early_data options
      Improve the early data sanity check in SSL_do_handshake()
      Introduce a new early_data state in the state machine
      Enable the client to call SSL_read() without stopping the ability to call SSL_write_early()
      Enable the server to call SSL_write() without stopping the ability to call SSL_read_early()
      Various fixes required to allow SSL_write/SSL_read during early data
      Add early_data tests
      Make SSL_write_early_finish() an internal only function
      Updates to s_server and s_client for the latest early_data API changes
      Updates to the early data documentation
      Rename SSL_read_early() to SSL_read_early_data()
      Rename SSL_write_early() to SSL_write_early_data()
      Update early data API for writing to unauthenticated clients
      Update the API documentation for the latest early data changes
      More early data documentation updates following feedback
      Silence some clang warnings
      Silence some more clang warnings
      Ensure we don't call memcpy with a NULL pointer
      Fix a memory leak on an error path
      Add basic TLSv1.3 cookie support
      Add a test for TLSv1.3 cookies
      Don't call memcmp with a NULL pointer
      Fix no-psk
      Fix a test failure with no-tls1_1
      Fix no-ec
      Tweak the TLSv1.3 record overflow limits
      Add a test to check that we correctly handle record overflows
      Provide a function to test whether we have unread records pending
      Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundary
      Add a test for records not on the record boundary
      Fix the number of tests to skip if TLSv1.3 is disabled
      Fix no-comp
      Check that the PSK extension is last
      Add a test to check that if a PSK extension is not last then we fail
      Use the new TLSv1.3 certificate_required alert where appropriate
      Fix some RSA documentation
      Fix out-of-memory condition in conf
      Make the Boring tests pass
      Update ossl_config.json for later BoringSSL commit
      Fix 12 Boring tests involving NULL-SHA ciphersuites
      Ensure we set the session id context in ossl_shim
      SSL_get_peer_cert_chain() does not work after a resumption
      Re-enable some BoringSSL tests
      Fix a hang in tests that use sessionfile
      Update the TLSv1.3 version indicator for draft-19
      Update secret generation for draft-19
      Update the TLSv1.3 secrets test vectors for draft-19
      Update end of early data processing for draft-19
      Merge early_data_info extension into early_data
      Check ClientHello boundary as per draft-19
      HelloRetryRequest updates for draft-19
      Ensure after an HRR any PSKs have the right hash
      Fix ciphersuite handling during an HRR
      Add some more PSK tests
      Add some HRR tests
      Updates following review feedback
      Fix the Padding extension
      Add tests for the padding extension
      Handle TLSv1.3 being disabled in clienthello test
      Fix some undefined behaviour in stack test
      Fix no-dtls builds
      Fix resumption after HRR
      Add a test for resumption after HRR
      Add server side support for TLSv1.3 downgrade mechanism
      Add client side support for TLSv1.3 downgrade mechanism
      Make the TLSv1.3 downgrade mechanism a configurable option
      Add a test for the TLSv1.3 downgrade mechanism
      Move the downgrade sentinel declarations to a header file
      Provide documentation for missing SSL_SESSION_* functions
      Provide documentation for some state machine related functions
      Fix bug with SSL_read_early_data()
      Add a test for the bug fixed in the previous commit
      Fix early data bug with pause between EoED and CF
      Provide a test for pause between EoED and CF
      Fix s_client early data indicator
      Update SSL_extension_supported()
      Don't handle handshake messages when writing early data on server
      Update early data test for an even later arrival of CF
      Add a test for the problem fixed by the previous commit
      Tweak a style issue
      Fix calls to SSL_get_server_tmp_key() in TLSv1.3
      Add documentation for SSL_get_server_tmp_key()
      Add missing macros for DHxparams
      Ensure dhparams can handle X9.42 params in DER
      Fix a possible integer overflow in long_c2i
      Move ssl/t1_ext.c to ssl/statem/extensions_cust.c
      Move the extensions context codes into the public API
      Implement a new custom extensions API
      Add some tests for the new custom extensions API
      Add documentation for the new custom extensions API
      Various style tweaks based on feedback
      Prefix custom extension API callback types with SSL_
      Create an ENDPOINT enum type for use internally
      Remove an out of date TODO
      Fix a test failure when configured without TLSv1.3
      Reject decoding of an INT64 with a value >INT64_MAX
      Convert bad_dtls_test for the new test framework
      Convert asynciotest for the new test framework
      Convert clienthellotest for the new test framework
      Don't fail the connection in SSLv3 if server selects ECDHE
      Add a BIO_lookup_ex() function
      Add a -sctp option to s_server
      Add a -sctp option to s_client
      Add better error logging if SCTP AUTH chunks are not enabled
      Ask libssl if we should retry not the socket
      Remove special case code for SCTP reneg handling
      Don't attempt to send fragments > max_send_fragment in DTLS
      Fix problem with SCTP close_notify alerts
      Add support to test_ssl_new for testing with DTLS over SCTP
      Add SCTP testing to 16-dtls-certstatus.conf
      Add SCTP testing to 18-dtls-renegotiate.conf
      Add SCTP testing to 07-dtls-protocol-version.conf
      Add SCTP testing for 11-dtls_resumption.conf
      Add SCTP testing for 04-client_auth.conf
      Fix some variable references in init_client
      Document BIO_lookup_ex()
      Fix issue in 18-dtls-renegotiate.conf.in
      Address review feedback for the SCTP changes
      Fix doc-nits issue
      Add documentation for the -sctp option in command line apps
      Don't overwrite the alert value if there is no alert to send
      Add a ciphersuite config sanity check for clients
      Add a ciphersuite config sanity check for servers
      Add tests for version/ciphersuite sanity checks
      Remove TLS1.3 TODO around testing for session id length
      Add support for SSL_SESSION_is_resumable()
      Documentation updates for TLSv1.3 sessions
      Always duplicate the session on NewSessionTicket in TLSv1.3
      Tweak SSL_get_session.pod wording
      More SSL_SESSION documentation tweaks based on feedback
      Clarify that SSL_CTX_remove_session() marks a session as non-resumable
      Ensure s_client sends an SNI extension by default
      Fix comment around safari fingerprint check
      Fix some error path logic in i2v_AUTHORITY_INFO_ACCESS and i2v_GENERAL_NAME
      Extend the SERVERINFO file format to include an extensions context
      Only send custom extensions where we have received one in the ClientHello
      Add a SERVERINFOV2 format test file
      Add a test for CT in TLSv1.3
      Add an SSL_ prefix to SERVERINFOV2 and SERVERINFOV1
      Document the new SSL_CTX_use_serverinfo_ex() function
      Clarify serverinfo usage with Certificate messages
      Update serverinfo documentation based on feedback received
      Add the -groups option to s_server/s_client
      Update the documentation for "Groups" and "Curves"
      Update the HKDF labels for draft-20
      Update the TLSv1.3 version indicator for draft-20
      Update tls13secretstest test vectors for TLSv1.3 draft-20
      Fix an uninit read in igetest
      Don't leave stale errors on queue if DSO_dsobyaddr() fails
      Revert "Fix clang compile time error"
      Fix SSL_CTX_use_serverinfo_ex() et al to properly handle V1 data
      Add a test for loading serverinfo data from memory
      Updates to serverinfo fix based on review feedback
      Remove some out of date text inadvertently left behind
      Send the supported_groups extension in EE where applicable
      Add a test for supported_groups in the EE message
      Updates to supported_groups following review feedback
      Remove support for OPENSSL_SSL_TRACE_CRYPTO
      Add support to SSL_trace() for inner content types
      Update the message callback documentation
      Fix an s_server infinite loop
      Verify that only NULL compression is sent in TLSv1.3 ClientHello
      Add some badly formatted compression methods tests
      Fix some copy&paste errors and update following review feedback
      Don't do the final key_share checks if we are in an HRR
      Fix HRR bug
      More TLSv1.3 cookie tests
      Verify that if we have an HRR then something will change
      Add test for no change following an HRR
      Copy custom extension flags in a call to SSL_set_SSL_CTX()
      Add a test for SNI in conjunction with custom extensions
      Reject unknown warning alerts in TLSv1.3
      Fix some alert codes
      Verify that there is no trailing data after the extensions block
      Fix more alert codes
      Ensure we fail with a decode error alert if the server sends and empty Cert
      Send an illegal parameter alert if the update type in a KeyUpdate is wrong
      Check that a TLSv1.3 encrypted message has an app data content type
      TLSv1.3 alerts cannot be fragmented and only one per record
      TLSv1.3 alert and handshake messages can never be 0 length
      Send a missing_extension alert if key_share/supported groups not present
      Add some checks for trailing data after extension blocks
      Add some extra comments following alert changes
      Don't allow fragmented alerts
      Fail if we receive a response to an extension that we didn't request
      Add tests for unsolicited extensions
      Add a new unsolicited extension error code and add enum tag
      Allow a missing sig algs extension if resuming
      Add a test for a missing sig algs extension
      Fix EXT_RETURN usage for add_key_share()
      Try to be more consistent about the alerts we send
      Make SSL_is_server() accept a const SSL
      Fix ASN1_TIME_to_generalizedtime to take a const ASN1_TIME
      Fix return code in tls1_mac
      Add a macro for testing assertion in both debug and production builds
      Replace instances of OPENSSL_assert() with soft asserts in libssl
      Fix some style issues in returns
      Convert existing usage of assert() to ossl_assert() in libssl
      Add an error to the stack on failure in dtls1_write_bytes()
      Updates CHANGES and NEWS for new release
      Document that HMAC() with a NULL md is not thread safe
      Fix BoringSSL alert related test failures
      Update the pyca-cryptography version
      Fix a Proxy race condition
      Wait longer for the server in TLSProxy to start
      Left shift of a negative number is undefined behaviour
      Work around Travis "virtual memory exhausted" error
      Add back support for SHA224 based sig algs
      Clean up s_server documentation
      Allow the server to change the ciphersuite on resume
      Add a test for a server changing the ciphersuite
      Move ciphersuite selection before session resumption in TLSv1.3
      Fix an uninitialised variable warning
      Add comments to test_ciphersuite_change()
      Tweak the check that a ciphersuite has not changed since the HRR
      Add TLSv1.3 server side external PSK support
      Add TLSv1.3 client side external PSK support
      Add public API functions for setting TLSv1.3 PSK callbacks
      Add a function to get the handshake digest for an SSL_CIPHER
      Add the ability to use a client side TLSv1.3 external PSK in s_client
      Add the ability to use a server side TLSv1.3 external PSK in s_server
      Add SSL_SESSION_set1_master_key()
      Add SSL_SESSION_set_cipher()
      Add SSL_SESSION_set_protocol_version()
      Add the ability to set a TLSv1.3 PSK via just the key bytes
      Fix no-psk
      Add documentation for SSL_SESSION_set_cipher()
      Document SSL_SESSION_set1_master_key()
      Document SSL_SESSION_set_protocol_version()
      Document SSL_CIPHER_get_handshake_digest()
      Add documentation for SSL_CTX_set_psk_use_session_callback()
      Tweak the client side PSK callback
      Document SSL_set_psk_use_session_callback() and SSL_CTX equivalent
      Document SSL_set_psk_find_session_callback() and SSL_CTX equivalent
      Make the input parameters for SSL_SESSION_set1_master_key const
      Fix some bugs in the TLSv1.3 PSK code
      Add some tests for the new TLSv1.3 PSK code
      Use constants rather than macros for the cipher bytes in the apps
      PSK related tweaks based on review feedback
      Fix DTLS failure when used in a build which has SCTP enabled
      Add documentation for the SSL_export_keying_material() function
      Fix OBJ_create() to tolerate a NULL sn and ln
      Fix the constant time 64 test
      Treat all failures from EVP_DigestVerify() as a bad signature
      Fix another EVP_DigestVerify() instance
      Fix travis clang-3.9 builds
      Fix a memory leak in the new TAP filter BIO
      Update SSL_export_keying_material() for TLSv1.3
      Add an SSL_export_keying_material() test
      Update the SSL_export_keying_material() documentation for TLSv1.3
      Updates following review of SSL_export_key_material() changes
      Drop support for OPENSSL_NO_TLS1_3_METHOD
      Fix TLSv1.3 exporter
      Fix memory leak when using PSK session files
      Update the version number for TLSv1.3 draft 21
      Send and receive the ticket_nonce field in a NewSessionTicket
      The correct key length for a TLSv1.3 SHA384 ciphersuite is 48
      Update tls13_hkdf_expand() to take the length of the data
      Update the test/session.pem to have a tick_nonce value
      Update the early_secret generation to use the new ticket_nonce field
      Update SSL_trace() to know about ticket_nonce
      Updates following review feedback of TLSv1.3 draft-21 code
      Do not allow non-dhe kex_modes by default
      Update the documentation for the new SSL_OP_ALLOW_NO_DHE_KEX option
      Choose a safer value for SSL_OP_ALLOW_NO_DHE_KEX
      Some SSL_OP_ values can't be used in 1.1.x
      Fix s_client crash where the hostname is provided as a positional arg
      Fix early_data with an HRR
      Add a test for early_data when an HRR occurs
      Tolerate a zero length ticket nonce
      Fix SSL_clear() in TLSv1.3
      Add a test for SSL_clear()
      Remove session checks from SSL_clear()
      Add some performance notes about early data
      Fix undefined behaviour in e_aes_cbc_hmac_sha256.c and e_aes_cbc_hmac_sha1.c
      Remove some dead code
      Fix new_session_cb calls in TLSv1.3
      Add a test to check we get a new session even if s->hit is true in TLSv1.3
      Move ossl_assert
      Add an SSL_SESSION_dup() function
      Test server side session caching
      Copy dlls into fuzz directory
      Remove OPENSSL_assert() from crypto/asn1/bio_asn1.c
      Remove OPENSSL_assert() from various crypto/bio files
      Remove OPENSSL_assert() usage from crypto/bn
      Remove OPENSSL_assert() from conf_api.c
      Remove OPENSSL_assert() from crypto/ec
      Remove OPENSSL_assert() from crypto/hmac
      Remove OPENSSL_assert() from crypto/kdf
      Remove OPENSSL_assert() from crypto/pem
      Remove OPENSSL_assert() from crypto/threads_none.c
      Remove OPENSSL_assert() from crypto/x509
      Remove OPENSSL_assert() from crypto/x509v3
      Updates following feedback on OPENSSL_assert() removal
      More updates following review feedback
      Add documentation for SRTP functions
      Fix enable-sctp
      Don't run a CT specifc test if CT is disabled
      Ensure we exchange cookies in s_server even if SCTP is disabled
      Fix no-chacha and no-poly1305
      Clarify the meaning of no-stdio in INSTALL
      Fix description of how to report a bug in INSTALL
      Fix no-scrypt
      Fix no-tls and no-tls1_2
      Enable the ability to use an external PSK for sending early_data
      Add SSL_SESSION_set_max_early_data()
      Add some PSK early_data tests
      Add documentation for SSL_SESSION_set_max_early_data()
      Add HISTORY and SEE ALSO sections for the new TLSv1.3 PSK functions
      Make sure we use the correct cipher when using the early_secret
      If no SNI has been explicitly set use the one from the session
      Update the tests for SNI changes
      Show the error stack if there was an error writing early data in s_client
      Add functions for getting/setting SNI/ALPN info in SSL_SESSION
      Complain if we are writing early data but SNI or ALPN is incorrect
      Make sure we save ALPN data in the session
      Add server side sanity checks of SNI/ALPN for use with early_data
      Add PSK early_data tests
      Add some fixes for Travis failures
      Client side sanity check of ALPN after server has accepted early_data
      Test for late client side detection of ALPN inconsistenties
      Various review fixes for PSK early_data support
      Fix Proxy where a timeout occurs waiting for both client and server
      Don't attempt to add a zero length padding extension
      Don't use ciphersuites for inflating the ClientHello in clienthellotest
      Allow an endpoint to read the alert data before closing the socket
      Remove an incorrect comment
      Remove some commented out code
      Remove an unused file
      Ensure we test all parameters for BN_FLG_CONSTTIME
      Fix bug where early_data does not work if no SNI callback is present
      Add a test for setting initial SNI in CH but not using it with early_data
      Don't do version neg on an HRR
      Sanity check the HRR version field
      Tweak the comment regarding record version check with respect to TLSv1.3
      Correct value for BN_security_bits()
      Don't make any changes to the lhash structure if we are going to fail
      Don't use strcasecmp and strncasecmp for IA5 strings
      Update CHANGES and NEWS for new release
      Remove 4 broken macros from ocsp.h
      Fix race condition in TLSProxy
      Mark a zero length record as read
      Fix an s_client memory leak
      Ignore the session when setting SNI in s_client
      Allow a client to send early_data with SNI if the session has no SNI
      Provide a more information early_data message in s_server
      If a server is not acknowledging SNI then don't reject early_data
      Fix SSL_state_string() and SSL_state_string_long()
      Fix lshift tests
      Provide an SSLfatal() macro
      Replace some usage of SSLerr with SSLfatal()
      Convert the state machine code to use SSLfatal()
      Convert remaining functions in statem_clnt.c to use SSLfatal()
      Convert remaining functions in statem_srvr.c to use SSLfatal()
      Convert more functions in ssl/statem/statem.c to use SSLfatal()
      Convert more functions in ssl/statem/statem_dtls.c to use SSLfatal()
      Fix up a few places in the state machine that got missed with SSLfatal()
      Add some sanity checks for the fatal error condition
      Assert that SSLfatal() only gets called once
      Add some more cleanups
      Fix the Boring tests following the SSLfatal() changes
      Update an error reason code to be ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
      Remove spurious whitespace
      Fix some formatting nits
      Fix bug in TLSv1.3 PSK processing
      Fix the check_fatal macro
      Add a test for CVE-2017-3737
      Update CHANGES and NEWS for new release
      Fix the buffer sizing in the fatalerrtest
      Update ssl3_get_record() to use SSLfatal()
      Convert ssl3_read_bytes() to use SSLfatal()
      More record layer conversions to use SSLfatal()
      Convert dlts1_write_bytes() to use SSLfatal()
      Convert the remaining functions in the record layer to use SSLfatal()
      Fix ssl_test_new with no-tls1_2
      Fix no-tls1_1
      Replace tabs with spaces in 25-cipher.conf.in
      Don't expect a POLY1305 ciphersuite when using no-poly1305
      Fix no-chacha
      Update the TLSv1.3 draft version indicators to draft 22
      Update ServerHello to new draft-22 format
      Implement session id TLSv1.3 middlebox compatibility mode
      Send TLSv1.2 as the record version when using TLSv1.3
      Drop CCS messages received in the TLSv1.3 handshake
      Remove TLSv1.3 specific write transition for ClientHello
      Send a CCS from the client in a non-early_data handshake
      Send a CCS from a client in an early_data handshake
      Send a CCS after ServerHello in TLSv1.3 if using middlebox compat mode
      Merge HRR into ServerHello
      Fix an HRR bug
      Update state machine to send CCS based on whether we did an HRR
      Update TLSProxy to know about new HRR style
      Make sure supported_versions appears in an HRR too
      Send supported_versions in an HRR
      Ensure CCS sent before early_data has the correct record version
      Delay flush until after CCS with early_data
      Fix server side HRR flushing
      Issue a CCS from the client if we received an HRR
      Make sure we treat records written after HRR as TLSv1.3
      Add some TLSv1.3 CCS tests
      Don't run the TLSv1.3 CCS tests if TLSv1.3 is not enabled
      Fix some clang compilation errors
      Don't flush the ClientHello if we're going to send early data
      Disable partial writes for early data
      Update the documentation for SSL_write_early_data()
      Fix trace of TLSv1.3 Certificate Request message
      Tolerate DTLS alerts with an incorrect version number
      Revert BN_copy() flag copy semantics change
      Extend timeout for TLSProxy
      Don't allow an empty Subject when creating a Certificate
      Don't crash on a missing Subject in index.txt
      Don't attempt to use X25519 for ECDSA in speed
      Add support for sending TLSv1.3 cookies
      Enable the cookie callbacks to work even in TLS in the apps
      Add the SSL_stateless() function
      Fix logic around when to send an HRR based on cookies
      Add some tests for the SSL_stateless() capability
      Fix interaction between SSL_stateless() and SSL_clear()
      Fix the SSL_stateless() return code
      Fix the cookie/key_share extensions for use with SSL_stateless()
      Add documentation for SSL_stateless()
      Don't send unexpected_message if we receive CCS while stateless
      Add the ability for s_server to operate statelessly
      Add a timestamp to the cookie
      Updates following review of SSL_stateless() code
      Move decisions about whether to accept reneg into the state machine
      Fix some instances of the wrong alert type being sent
      Document SSL_OP_ENABLE_MIDDLEBOX_COMPAT
      Add MiddleboxCompat option to SSL_CONF_cmd man page
      Enable TLSv1.3 by default
      Fix clienthellotest with TLSv1.3
      Fix some undefined behaviour in ossltest engine
      Don't run tls13encryptiontest on a shared Windows build
      Fix no-chacha and no-poly1305
      Don't calculate the Finished MAC twice
      Fixes for no-tls1_2 and no-tls1_2-method
      Don't overestimate the ticket age
      The function ssl_get_min_max_version() can fail
      Some minor tweaks following TLSv1.3 becoming default
      Update NEWS file for new release
      Update last release letter for CHANGES and NEWS
      OpenSSL 1.1.1 is now in pre release
      Update copyright year
      Prepare for 1.1.1-pre1 release

Matthias Kraft (1):
      Solution proposal for issue #1647.

Meena Vyas (3):
      Added a new Makefile in demos/evp directory     Fixed compilation warning in file aesgcm.c
      passed TARFILE="$(TARFILE)" NAME="$(NAME)" to tar target
      Allow --strict-warnings with the icc compiler as well

MerQGh (1):
      Update eng_fat.c

Michael Richardson (2):
      added cmcCA and cmcRA as per rfc6402, capitalized per RFC7030 author
      Add OPENSSL_VERSION_AT_LEAST

Mike Aizatsky (1):
      [fuzzers] do not fail fuzzers with empty input

Mouse (1):
      Code hygiene; initialize some pointers.

Nick Mathewson (4):
      Remove redundant declarations of ERR_load_*_strings()
      Improve #include structure of pem{,2}.h
      In err_all.c, include the *err.h headers.
      Run "make update"

Nicola Tuveri (19):
      Use EVP interface for ECDH in apps/speed.c
      Fix coding style and remove some stale code/comments
      Handle EVP_PKEY_derive errors and fix coding style issues
      bugfix: calculate outlen for each curve
      Run util/openssl-format-source against apps/speed.c
      More coding style fixes
      Remove ECDH_EVP_derive_key wrapper function
      Reintroduce preliminary sanity check in ECDH speed and remove further checks in the benchmark loop.
      Use CRYPTO_memcmp for comparing derived secrets
      Remove leftover KDF pointer
      Do not handle R_EC_X25519 as a special case
      Handle "int_ctx_new:unsupported algorithm" error
      ecdhtest.c: move NAMED CURVES TESTS to evptests.txt
      Remove stale code in ecdhtest.c
      ecdhtest.c: move KATs to evptests.txt
      Remove more stale code in ecdhtest.c
      ecdhtest.c: move co-factor ECDH KATs to evptests
      Remove ecdhtest.c
      Reformat evptests.txt

Nikos Mavrogiannopoulos (2):
      cryptodev: Fix issue with signature generation
      cryptodev: allow copying EVP contexts

Noah Robbin (2):
      Use size of server key when selecting signature algorithm.
      Use the index that matches the key type (either SSL_PKEY_RSA_PSS_SIGN or SSL_PKEY_RSA).

Patrick Schlangen (1):
      Make data argument const in SSL_dane_tlsa_add

Patrick Steuer (26):
      Fix strict-warnings build
      Fix strict-warnings build
      Fix strict-warnings build
      Fix strict-warnings build
      apps/speed.c: fix ccm performance measurements.
      EVP_EncryptInit.pod: EVP_CIPHER_mode and EVP_CIPHER_CTX_mode update
      apps/speed.c: add 'rand' algo to enable DRBG performance measurements.
      crypto/aes/asm/aes-s390x.pl: fix $softonly=1 code path.
      s390x assembly pack: remove capability double-checking.
      e_os.h: add prandom and hwrng to the list of random devices on s390x.
      s390x assembly pack: extend s390x capability vector.
      apps/speed.c: add -seconds and -bytes options
      apps/speed.c: use 32 byte key material as default
      key_A and key_B had 3 references, only 2 were freed.
      apps/speed.c: detect evp cipher 32-bit ctr overflow and reset iv
      doc/man3/EVP_EncryptInit.pod: add EVP_CIPHER_CTX_rand_key
      apps/speed.c: generate evp_cipher keys implicitly
      apps/speed.c: initialize buffers
      crypto/bio/bss_dgram.c: annotate fallthrough (-Wimplicit-fallthrough)
      s390x assembly pack: add KMA code path for aes-ctr.
      crypto/aes/asm/aes-s390x.pl: replace decrypt flag by macro.
      s390x assembly pack: add KMA code path for aes-gcm.
      crypto/engine/eng_list.c: compare getenv rv to NULL instead of 0
      Document OPENSSL_ENGINES environment variable
      s390x assembly pack: add KMAC code path for aes-ccm
      crypto/evp/e_aes.c: add comments to s390x aes gcm implementation

Paul Hovey (2):
      fix undoes errors introduced by https://github.com/openssl/openssl/commit/fc6076ca272f74eb1364c29e6974ad5da5ef9777?diff=split#diff-1014acebaa2c13d44ca196b9a433ef2eR184
      updated macro spacing for styling purposes

Paul Yang (63):
      Fix typo in ASYNC_WAIT_CTX_new.pod doc
      Fix typo in INSTALL file
      Fix typo in doc/man3/EVP_EncrypInit.pod
      Fix coding style in apps/passwd file
      Document X509_check_private_key and relative
      Add test cases for X509_check_private_key
      Set local variable to 0 to avoid build error
      Fix doc nits in X509_check_private_key.pod
      Fix coding style
      Fix a bundle of trailing spaces in several files
      Fix possible usage of NULL pointers in apps/spkac.c
      Refactor functions in testdsa.h
      Clean up a bundle of codingstyle stuff in apps directory
      Make SNI behavior more clear in s_client doc & help
      Forbid to specify -nextprotoneg if -tls1_3 is enabled
      Remove non-accurate description in Configure script
      Make clear error message if opt_<number> fails
      Avoid compiler complaining
      Fix inaccurate comments in bn_prime.c
      Fix return value checking for BIO_sock_init
      Change to check last return value of BN_CTX_get
      Support converting cipher name to RFC name and vice versa
      Update doc/ca.pod to clarify description for dates
      Update documentation for SSL_is_server()
      Add asn1_time_to_tm function and check days in month
      Add test cases and docs for ASN1_STRING_TABLE_* functions
      Fix a reference nit in doc
      Fix coding style nits in crypto/asn1/a_strnid.c
      Make SSL_set_tlsext_host_name no effect from server side
      Fix rsa -check option
      Update ASN1_TIME_to_tm's documentation
      Refactor ASN1_TIME_print functions
      Add '-ext' option to display extensions in 'x509'
      Add EC key generation paragraph in doc/HOWTO/keys.txt
      Add test case for ASN1_TIME_print
      Add XXX_security_bits documentation
      Fix trivial nits in documentaion
      Use new setup_tests in code of rsa_test
      Document missing EVP_PKEY_method_* items
      Remove useless macros in apps/speed.c
      Fix coding style in crypto/rsa directory
      This part fixes braces around if-else.
      Add two missing SSL_CIPHER_* functions
      Introduce SSL_CIPHER_get_protocol_id
      Support key check in EVP interface
      Support EVP_PKEY_meth_remove and pmeth internal cleanup
      Fix doc nits
      Fix reading heap overflow in a test case
      Fix a bug in ALPN comparation code of a test case
      Make '-name' option of the 's_client' more generic
      Add sk_TYPE_new_reserve() function
      Fix mismatch of function prototype and document
      Fix doc-nits in doc/man3/DEFINE_STACK_OF.pod
      Simplify the stack reservation
      Support public key and param check in EVP interface
      Support multi-prime RSA (RFC 8017)
      Fix some issues in apps/req
      Leave a message in doc to indicate 0 is not acceptable
      Remove spaces at end of line in ssl/statem
      Remove outdated comments
      Add missing 'RETURN VALUES' sections in doc
      Enforce return values section check
      Update all affected files' copyright year to 2018

Pauli (155):
      Remove unused variable
      Implementation of the ARIA cipher as described in RFC 5794.
      fix spelling of Camellia in comment
      Ensure minsize >= sizeof(SH_LIST)
      Add a test case that tests more of the cipher modes.
      Increase the size of the stack buffer to prevent an overflow.
      Avoid buffer underflow in evp_test.
      Update the cipher(1) documentation to explicitly state that the RSA cipher     string means the same a kRSA.
      Increase the password buffer size to APP_PASS_LEN.
      Remove doc reference to non-existant GCM example
      Limit the output of the enc -ciphers command to just the ciphers enc can     process.  This means no AEAD ciphers and no XTS mode.
      Make the output of enc -ciphers identical even if run several times in a session.
      Use the callbacks from the SSL object instead of the SSL_CTX object
      Add the presence of ARIA to the change log.
      Unit tests for crypto/stack.
      Rewrite the documentation for sk_TYPE_find() and sk_TYPE_find_ex() to better     describe the vagaries in their behaviour.
      Rename the test_stack recipe file name to be consistent with the rest of the     tests.
      Add unit tests for the lhash functionality.
      Add enable-aria where rc5 and md2 are built.
      Test infrastructure additions.
      Documentation clean up for man1/list.pod
      Documentation cleanup for man1/nseq.pod
      Documentation cleanup for man1/enc.pod
      Documentation updates
      Make test marcos for true/false checks reliable for all integral types.
      Update rc2test to use the test infrastructure
      Update md2test to use the test infrastructure
      Update dtlstest to use the test infrastructure
      Update sha256t and sha512t to use the test infrastructure
      Update sha1test to use the test infrastructure
      Update mdc2test to use the test infrastructure
      Update rc5test to use the test infrastructure
      Update rc4test to use the test infrastructure
      Update d2i_test to use the test infrastructure
      Update secmemtest and memeleaktest to use the test infrastructure.
      Update gmdifftime to use the test infrastructure
      Update ideatest to use the test infrastructure
      Update sanitytest to use the test infrastructure
      Update the internal chacha test to use the framework     Reviewed-by: Richard Levitte <levitte at openssl.org>     Reviewed-by: Matt Caswell <matt at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/3195)
      Update threadstest to use the test framework
      Remove fprintfs from the poly1305 internal test but keep the test number     information.
      Update destest to use the test infrastructure
      Split the CAST tests up.
      Update the internal siphash tests to use the framework's output.
      Guarantee single argument evaluation for test macros.     Add test case that checks some of them.
      Refactor crltest.c to separate the test cases into individual functions.
      Update igetest to use the test framework.
      Test framework output improvement.
      Conversion of the EC tests to use the framework.     Some refactoring done as well.
      Add BN support to the test infrastructure.
      Add test_test tests for bignums.     Add relative tests for bignums.
      Add a descriptive header to diff output from failed tests.
      Remove dead code.
      Randomise the ordering of the C unit tests.
      Update one CI test to use randomised ordering.
      Reformat the output of BIGNUMS where test cases fail.
      Integration build a small memory image
      Bring the memory output inline with the suggestions in #3465.
      Reformat the string output to be more in line with the decisions made in #3465
      Correct Oracle copyrights & clarify.
      Add output routines to allow consistent formatting of memory, strings     and bignums.  These have been refactored into their own file, along with     their error displays.  The formatting follows the output format used     on error, except that bignums of sixty four bits or less are displayed     in a more compact one line form.
      Fix preprocessor indentation.     Rework main() to be in the style of the other conditional tests.
      Update tests to avoid printf to stdout/stderr when running as test cases.
      Put error output back.
      Address double error and OSSLzu comments.
      Address style issues.     Refactor count -> c which makes the for loop more readable.
      Remove OSSLzu macros and use %zu in the test framework (via BIO_printf).
      Remove duplicate see also reference to BIO_s_mem.
      TAP line filter BIO.
      Remove uses of the TEST_check macro.
      Fix copyright date for the ARIA evp file.
      Use the return value from write(2)     This prevents a warning when building with crypto-mdebug.
      Remove the TEST_check macro.
      Fix compiler warnings
      Avoid buffer overruns in the req command line utility.
      Rework the append_buf function
      Bounds check string functions in apps.     This includes strcat, strcpy and sprintf.
      Memory bounds checking in asn1 code.
      BIO range checking.
      Rearrange link line so the libraries come after the source.     Some linkers like it this way.
      change return (x) to return x
      Address potential buffer overflows.
      Trivial bounds checking.
      Demo style fixes and modernisation.
      Fix some issues raise by coverity in the tests.
      Avoid having an unsigned integer decrement below zero.
      Change return (x) to return x
      Test cleaning and modernisation
      Remove trailing blanks.
      Address Coverity issues.
      Fix some pedantic warnings.
      Improve struct tm population
      Fix potential use-after-free and memory leak
      Update the test framework so that the need for test_main is removed.  Everything     that needed test_main now works using the same infrastructure as tests that used     register_tests.
      Fix the two new tests since approval.
      Fix trivial coding style nits in a_time/a_tm files     Clean up some true/false returns
      OPENSSL_NO_ENGINE defined causes build failures
      Formatting & declaration cleanse.
      Remove EXECUTE_TEST_NO_TEARDOWN.
      Simplify some of the sslapitest code.
      Test fixtures changed to pointers.
      Change SETUP_TEST_FIXTURE so that the fixture structure is passed by     reference not by value.  This allows an error return from the setup function.
      Determine the number of output columns for the list and help commands using     the command names rather than hard coding it (conditionally).
      Remove tests dependence on e_os.h
      Fix windows build after too aggressive e_os.h removal
      Remove double error messages
      Fix ctype arguments.
      This has been added to avoid the situation where some host ctype.h functions     return true for characters > 127.  I.e. they are allowing extended ASCII     characters through which then cause problems.  E.g. marking superscript '2' as     a number then causes the common (ch - '0') conversion to number to fail     miserably.  Likewise letters with diacritical marks can also cause problems.
      Dead code elimination.
      Avoid a self-assignment.
      Improvement the formatting in bn_print.c     Movely removal of unnecessary brackets but some could be bugs addressed too.
      Check for EOF in ASCII conversions.
      Check range of test values using isascii before diving into the full     range of ctype functions.
      e_os.h removal from other headers and source files.
      Move the REF_PRINT support from e_os.h to internal/refcount.h.
      Remove the X_OK define, it is unused.
      Move e_os.h to be the very first include.     cryptilib.h is the second.
      Move OPENSSL_CONF from e_os.h to cryptlib.h
      Add ARIA as an alias for all ARIA based modes.
      Add documentation for ARIA GCM modes.
      Fix potential null problem.
      struct timeval include guards
      Fix an include location problem in the extrended tests.     [extended tests]
      Revert "GH614: Use memcpy()/strdup() when possible"
      Revert "Reuse strndup(), simplify code"
      Manually revert "Ensure allocation size fits into size_t"
      Ensure that the requested memory size cannot exceed the limit imposed by a     size_t variable.
      Remote unrequited casts     Also use strndup instead of a malloc/memcpy pair.
      Add explanatory comment about fitting into a size_t.
      Avoid signed vs unsigned comparison error.     Introduced by #4372
      Null pointer used.     Address coverity report of null pointer being dereferenced.
      Stack sorting safety
      Add a reserve call to the stack data structure.
      Add stack space reservations.
      Use safestack.h exclusively internally.     Remove all stack headers from some includes that don't use them.
      Remove unnecessary #include <openssl/lhash.h> directives.
      Put back the #include <openssl/safestack.h> lines in public headers.     the latter includes the former.
      Document that lhash isn't thread safe under any circumstances and     indicate the level of locking required for various operations.
      Add a CRYPTO_atomic_read call which allows an int variable to be read     in an atomic fashion.
      Add atomic write call
      Return a value from atomic read on Windows.     Use a read lock when reading using pthreads.
      Address a timing side channel whereby it is possible to determine some
      Address a timing side channel whereby it is possible to determine some
      Disabled list doesn't contain SM3 and SM4.
      use size_t tests instead of int ones
      Test support for time_t comparisons.
      A missing semicolon prevents compilation with ENGINE_REF_COUNT_DEBUG enabled.
      Enable the ARIA ciphers by default.
      Change the name of the SEC typedef to openssl_speed_sec_t.
      SHA512/224 and SHA512/256
      Make the OPENSSL_CPUID_OBJ define internal.     Patch by @levitte.
      Make OPENSSL_rdtsc universally available.
      Unify timer code
      Fix glibc specific conditional for Mac OS/X
      Fix glibc version detection.     Simplify Posix timer detection.

Pavel Kopyl (3):
      Fix error handling in i2d* functions.
      Add error handling in dsa_main and ASN1_i2d_bio.
      Check return value of OBJ_nid2obj in dsa_pub_encode.

Peter Meerwald-Stadler (1):
      Configure: Fix configdata.pm shorthand for --dump, should be -d     INSTALL: Mention 'aria' algorithm for no-<alg>

Peter Wu (3):
      apps: Add support for writing a keylog file
      SSL_get_shared_sigalgs: handle negative idx parameter
      doc: fix -keylogfile option

Pichulin Dmitrii (2):
      fix check of broken implementations of GOST ciphersuites
      Fix 'key' option in s_server can be in ENGINE keyform

Piotr Czajka (1):
      Typo fix

P?ter Budai (1):
      Fixed PKCS5_PBKDF2_HMAC() to adhere to the documentation.

Qin Long (3):
      Cleaning UEFI Build with additional OPENSSL_SYS_UEFI flags
      Fix the build warning under OPENSSL_NO_GOST
      e_os2.h: Refine OSSL_SSIZE definition under UEFI environment

Rainer Jung (1):
      Fix use of "can_load()" in run_tests.pl.

Remi Gacogne (1):
      Add missing session id and tlsext_status accessors

Rich Salz (284):
      Remove "lockit" from internal error-hash function
      Remove get_hash completely
      Fix output text to avoid gratuitious git diff
      Make update, etc.
      GH1383: Add casts to ERR_PACK
      Add some const casts
      Add #defines for magic numbers in API.
      Change callers to use the new constants.
      Check for bad filename in evp_test
      GH1446: Add SSL_SESSION_get0_cipher
      Fix some doc nits.
      RT3940: For now, just document the issue.
      Add BIO_get_new_index()
      Move BIO index lock creation
      RT2676: Reject RSA eponent if even or 1
      To avoid SWEET32 attack, move 3DES to weak
      Put DES into "not default" category.
      Remove trailing zeros
      Use uppercase name for PCT_ enum
      Remove comment tags from structs (coding style)
      Code cleanup UI
      Misc BN fixes
      Add missing debug strings.
      Trim config output
      Add --missing-help to list command
      Add -h and -help for c_rehash script and app
      GH1536: Install empty CT log list
      Make reference to other manpage more explicit
      RT3669: dgst can only sign/verify one file.
      Revert "Constify code about X509_VERIFY_PARAM"
      GH1555: Don't bump size on realloc failure
      Dcoument -alpn flag
      Add -Wswitch-enum
      Revert "Call ENGINE_init() before trying to use keys from engine"
      RT is put out to pasture
      GH1546: Fix old names in cryptodev code.
      Add NPN to an SSL3 build
      Fix typo (reported by Matthias St. Pierre)
      Move manpages to man[1357] structure.
      Disable MDC2 by default.
      Revert "Disable MDC2 by default."
      Update CRYPTO_set_mem_debug() doc
      Missed a mention of RT
      Zero stack variable with DSA nonce
      Check return value of some BN functions.
      Merge find-undoc-api into find-doc-nits
      Make bntest be (mostly) file-based.
      Fix various doc nits.
      Add X509_VERIFY_PARAM inheritance flag set/get
      CRL critical extension bugfix
      Doc nits: callback function typedefs
      Rename "verify_cb" to SSL_verify_cb
      Move extension data into sub-structs
      Use typedefs for PSK, NPN, ALPN callback functions
      Review comments
      Fix typo in Blake2 function names
      Review comments; fail build if nits found
      GH2176: Add X509_VERIFY_PARAM_get_time
      Add "random malloc failure" tooling
      Add documentation
      Rename file so "ls" works on 80 columns
      Make X509_Digest,others public
      Fix "failure rate" bugs
      If client doesn't send curves list, don't assume all.
      Skip ECDH tests for SSLv3
      Avoid over-long strings.  Fix a mem leak.
      Don't need the checkbox; the hook does it
      Add -Wno-parentheses-equality to dev-warnings.
      Doc fix
      Fix parsing of serial# in req
      Centralize documentation about config file location
      Add no-ec build
      Don't call memcpy if len is zero.
      Prevent OOB in SRP base64 code.
      Iterate over EC_GROUP's poly array in a safe way
      Update year, wording tweak
      Remove GENCB_TEST compile flag
      Exdata test was never enabled.
      Remove ref to err(7), update copyright.
      sh_malloc & sh_free prototype change to match POSIX
      Fix an endless loop in rsa_builtin_keygen.
      Remove some duplicate manpage entries
      Get pointer type right in BIO_ssl_shutdown()
      Fix many doc L<> errors
      Handle find-doc-nits script rename
      Fix some doc nits
      Add test for -nameout output
      Document BIO_printf family
      Look for comma before - in POD pages
      Move PRIu64, OSSLzu to e_os.h
      Remove duplicate doc
      Make default_method mostly compile-time
      Make default_method mostly compile-time (cont'd)
      Check for L<foo|foo>
      Add missing =back
      Standardize on =over 4 and check for it.
      Use 'over 2' for bullet lists.
      Additional check to handle BAD SSL_write retry
      Convert x509aux, cipherlist, casttest
      Address review feedback (to be squashed)
      WIP: Convert ui,v3ext,verify_extra_test
      Add -f -r flags to find-unused-errs
      Catch EC_R_UNKNOWN_GROUP in check_unsupported()
      Convert afalgtest
      [squash]Build works with/out NO_ENGINE and NO_AFALG
      Convert more tests
      Convert more tests to framework
      Update more tests
      Convert more tests
      Convert dhtest, dsatest, cipherbytes_test
      Document Next Protocol Negotiation APIs
      fix dh_test.
      Convert hmactest to new test framework
      Ignore dups in X509_STORE_add_*
      if log fails, avoid pms getting double free
      check length sanity before correcting in EVP_CTRL_AEAD_TLS1_AAD
      Fix typo in OPENSSL_LH_new compat API
      evp_test.c: Add PrivPubKeyPair tests
      Convert modular exponentiation tests to new framework
      Fix unit-tests when no-srp configured
      Convert dtls_mtu_test, dtlsv1listentest
      Convert bntest to TEST_ framework
      Convert sslapitest to test framework
      Fix ISO C function/object pointer issue
      Remove (broken) diagnostic print
      Ensure blank lines between tests.
      Check fflush on BIO_ctrl call
      Fix a stack smash
      Convert danetest, ssl_test_ctx_test
      Add some man page cross-references
      Fix URL links in comment
      Convert uses of snprintf to BIO_snprintf
      Remove some unused scripts
      Perltidy ck_errf
      Run perltidy, use strict+warnings on mkrc.pl
      Fix curly braces on util/mkrc.pl
      Fix tests of TEST tests, as it were
      Fix pathname errors in errcode file
      Remove outdated and unsupported CHIL engine
      Ignore MSVC warnings (via Gisle Vanem)
      Convert of evp_test to framework
      Address some feedback
      Use compare_mem wrapper
      Split test/evptests.txt into separate files.
      Rename evptests.txt to evppkey.txt
      Use scalar, not length; fixes test_evp
      Add "Title" directive to evp_test
      Convert shlibloadtest to new framework
      Review feedback; use single main, #ifdef ADD_TEST
      Use BIO not FILE for test file
      Move engines/afalg to engines
      -inkey can be an identifier, not just a file
      Revert "Integration build a small memory image"
      Fix line numbering for errors.
      Add titles to groups of EVP tests
      Revise evp_test parser; make like bn_test
      Fix va_arg all in test_error_c90
      Add stricter checking in NAME section
      Only release thread-local key if we created it.
      Add -p (public only) flag to find-doc-nits
      Add text pointing to full change list.
      Use common STANZA for bn and exp tests
      Document default client -psk_identity
      Add a lock around the OBJ_NAME table
      make error tables const and separate header file
      Fix possible memory over-read in apps/s_client.c
      Remove doc of non-existent functions
      Fix a read off the end of the input buffer
      List undocumented macros
      Remove needless type casting.
      If-guard to avoid null ptr deref in statem_srvr.c
      Introduce ASN1_TIME_set_string_X509 API
      Remove leading space-before-tab
      Put message strings in state files
      Update copyright on progs.h
      Remove OLD_STR_TO_KEY compile option
      Standardize Levitte's dual-license
      Remove bsd_cryptodev engine
      Add RAND_UNIMPLEMENTED error code
      Fix typo (note by oneton at users.github)
      Modify Sun copyright to follow OpenSSL style
      Ensure a space after colon in enc -v
      Reformat progs.pl; add ARIA support
      Merge Nokia copyright notice into standard
      Add constant-time 64
      Add ecstress test
      Rename static global "lock" to "obj_lock"
      Use randomness not entropy
      Add fork handlers, based on pthread_atfork
      Add ECHO to makefiles for real silence
      Merge Intel copyright notice into standard
      Fix atfork flag.  Avoid double-negatives :)
      Cleanup some copyright stuff
      Various doc fixes
      BN_pseudo_rand is really BN_rand
      Add echo for end of each build phase
      Undo commit d420ac2
      Undo commit 0755217
      Undo commit de02ec2
      Undo commit 40720ce
      Undo commit cd359b2
      Undo commit dc00fb9
      Fix crash
      Add two trivial fixes from old commits
      Cleanup RAND_load_file,RAND_write_file
      Remove some now-unneeded VMS controls
      Update various RAND podpages
      Rewrite RAND_egd
      Fix bug in err_string_data_cmp
      Start to overhaul RAND API
      Don't use "version" in "OpenSSL Version 1.1.0" etc
      Standardize apps use of -rand, etc.
      Fix use-after-free
      Add DRBG random method
      Add range-checking to RAND_DRBG_set_reseed_interval
      Rename internal rand.h file
      Add --with-rand-seed
      Install custom RAND_METHOD for fuzzing
      Switch from ossl_rand to DRBG rand
      Add a DRBG to each SSL object
      Add RAND_priv_bytes() for private keys
      Add missing include of cryptlib.h
      Make RAND_DRBG fork-safe
      Various RAND improvements
      Add -d flag to list -u details (now normally off)
      Move FuzzerSetRand to separate file.
      Instantiate when RAND_status() checks
      Doc fixes
      Add some casts for %j
      Revert "Add some casts for %j"
      Print pathnames for 'version -r'
      Put thread-fork-init inside a run-once guard
      Check # of arguments for remaining commands.
      Safely display SNI (just in case)
      Add random serial# support.
      Use "" not <> for internal/ includes
      Remove custom base64 code.
      Use "" not <> on e_os.h include
      (Re)move some things from e_os.h
      Move randomness to allocated buffer
      Tweak wording to be more clear.
      Use strcpy instead of sprintf %s
      Remove NO_DIRENT; it isn't used anywhere
      MSC_VER <= 1200 isn't supported; remove dead code
      Avoid out-of-bounds read
      Avoid possible uninitialized variable.
      Add CRYPTO_thread_glock_new
      Address feedback
      Less documentation for deprecated API
      Fix doc-nits from previous commit
      Add checks for alloc failing.
      Fix error handling/cleanup
      Always use $ as shell prompt in example
      Fix function name in ECerr call
      Replace malloc+strcpy with strdup
      Rewrite some code
      Anchor the regexp match
      Fix doc for i2d/d2i private/public key
      Add CRYPTO_get_alloc_counts.
      Remove email addresses from source code.
      Update RAND_load_file return value.
      Additional name for all commands
      Whitespace and indent fixes
      Warn if -days without -x509
      Removre comment with user's name
      Don't NULL check before calling DSO_free.
      Fix typo that cause find-doc-nits failure
      Revert "Add padding spaces before printing algo."
      Fix SOURCE_DATE_EPOCH bug; use UTC
      Check for malloc failure
      Add "friendly name" extractor
      Add link for more SECLEVEL info
      Consistent formatting for sizeof(foo)
      Rewrite RT3513.
      Remove old config that used non-exist util script
      Add fingerprint text, remove MD5
      Remove remaining NETWARE ifdef's
      Fix IPv6 define
      Add accessors for AdmissionSyntax
      Move fprintf after assignment to avoid crash.
      Improve some BN documentation.
      Shorten output by a line
      Remove unused file
      Copy name string in BIO_meth_new

Richard Levitte (658):
      Travis: When testing installation, build in separate dir, otherwise in checkout
      VSI submisson: make better use of item lists in o_time.c
      VSI submission: make the VMS version of RAND_poll() faster and more secure
      Have 'openssl engine' exit with non-zero when some engine fails to load
      VMS: have the IVP verify that a well known engine loads properly
      When tr gets bracketed arguments, they need to be quoted
      VMS: Fix building of bad_dtls_test
      openssl-format-source: no dash marker on *INDENT-(ON|OFF)* comments
      indent: add a couple of types we use in apps
      Move the building of test/buildtest_*. to be done unconditionally
      Travis: add a build with no-stdio
      util/mkdef.pl: mark certain PEM function declarations with STDIO
      make update
      Remove OPENSSL_NO_STDIO guards around certain SSL cert/key functions
      The capi engine uses stdio, so don't build it when configuring 'no-stdio'
      openssl-format-source: A few more (DECLARE|IMPLEMENT) variants to care for
      Add a note about a perl issue on VMS and how to work around it
      Skip the SRP tests in 80-test_ssl_old.t if no TLS versions is enabled
      Make "make" less verbose in Travis, except for the build only case
      Add a "config" for verbosity and use it with Travis
      Remove duplicate ordinals
      VMS: no ENDIF on one line IF statements, in config.com
      dasync is an internal testing engine, so don't install it
      Don't try to init dasync internally
      Simplify indentation of DECLARE_ and IMPLEMENT_ lines
      MEMPACKET is typedef'd in ssltestlib.h, don't do so again in ssltestlib.c
      VMS: Use strict refdef extern model when building library object files
      ssltestlib: Tell compiler we don't care about the value when we don't
      Make 'openssl req -x509' more equivalent to 'openssl req -new'
      Avoid more compiler warnings for use of uninitialised variables
      Configure: Properly cache the configured compiler command
      Trust RSA_check_key() to return correct values
      Check for __GNUC__ to use GNU C atomic buildins
      CRYPTO_atomic_add(): use acquire release memory order rather than relaxed
      CRYPTO_atomic_add(): check that the object is lock free
      NEWS: add a number of the types that were made opaque
      Update CHANGES, NEWS, README and opensslv.h on master
      Improve the definition of STITCHED_CALL in e_rc4_hmac_md5.c
      VMS: honor --openssldir setting
      Make it possible for the user to specify a different default build file
      Configure: clean away temporary section of code
      Configure: Redo the logic for finding build file templates
      Configure: save away the value of OPENSSL_LOCAL_CONFIG_DIR for reconf
      The Perl interpreter might be in a path with spaces, so maybe quote it
      Make it possible to disable fuzz testing
      Configure's print_table_entry printed incorrect information
      Have Configure's HASH or TABLE produce complete lists
      INSTALL: clarify OPENSSL_LOCAL_CONFIG_DIR
      INSTALL: add information on the environment variable BUILDFILE
      INSTALL: add information on option no-fuzz-test
      Add a more versatile test chooser
      Revert "Make it possible to disable fuzz testing"
      Revert "INSTALL: add information on option no-fuzz-test"
      Document the enhanced tests specification
      Move 05-test_fuzz.t to 90-test_fuzz.t
      Unix build: have the makedepend and cc actions in one recipe
      Correct detection of group end in map file when testing symbol presence
      Configure: Reorganise the checking of disabled options
      Allow asan, msan and ubsan to be configured with shared libraries
      Travis: Do asan and msan with shared libraries
      If errno is ENXIO in BSS_new_file(), set BIO_R_NO_SUCH_FILE
      Build file templates: additional information to build file template functions
      VMS: Use different C flags for programs that aren't to be installed
      VMS: be less picky when loading DSOs
      VMS: Don't force symbol mixed case when building DSOs
      Fix 'openssl passwd' with arguments -1 or -apr1
      Add a test for 'openssl passwd'
      Add SHA256 and SHA512 based output for 'openssl passwd'
      Document the new SHA256 and SHA512 password generation options
      Test the new SHA256 and SHA512 based password generation options
      Rather than one variable for each passwd type, use one enum variable
      VMS: Really don't force symbol mixed case when building DSOs
      VSI submission: redirect terminal input through socket
      Add copyright and license on apps/vms_term_sock.[ch]
      Reformat to fit OpenSSL source code standards
      Refactor to avoid unnecessary preprocessor logic
      Finally, make sure vms_term_sock.c is built on VMS
      Register the name of the config file each config target was found in
      Use the registered conf file names as dependencies to build configdata.pm
      Rearrange the storage of build file template names in %config
      Simplify the dependencies for remaking configdata.pm
      Simplify configudata.pm dependency generation
      Have the configuration options 'no-err' and 'no-async' work again
      Fix no-ocsp
      Fixup BIO demos for OpenSSL 1.1.x
      Fixup BIO demos for OpenSSL 1.1.x
      Fixup BIO demos for OpenSSL 1.1.x
      Don't ignore Makefiles in demos/
      Crude Makefile for demos/bio/
      Crude VMS build files for demos/bio/
      Documentation fixup; no more ECDHParameters
      apps/apps.c: include sys/socket.h to declare recv()
      Quiet compiler warning about uninitialised variable
      util/dofile.pl: report if a template couldn't be loaded
      descrip.mms.tmpl: in obj2bin, make sure an empty @deps means no empty lines
      VMS: add [.util]shlib_wrap.exe and its build instructions
      test/x509aux.c: Fix argv loop
      Fix error message typo, wrong function code
      apps/apps.c: initialize and de-initialize engine around key loading
      Add support for C++ in Configure
      Add support for C++ in Configurations/unix-Makefile.tmpl
      Add C++ settings in the Linux config targets
      Remove automatic RPATH
      Remove automatic RPATH - add user rpath support
      Remove automatic RPATH - adapt shlib_wrap.sh
      Remove automatic RPATH - Add a CHANGES entry
      Fix C++ support: set $target{cxx} correctly
      Fix config option 'no-deprecated'
      Make OpenSSL::Test a bit more flexible
      Add documentation of internal OpenSSL::Test functions
      appveyor: make tests verbose
      OpenSSL::Test cleanup - no forward declarations needed
      OpenSSL::Test - small fixup
      If an engine comes up explicitely, it must also come down explicitely
      apps: instead of varying implementation, make setup_engine a function always
      apps: remove some #ifndef clutter
      Correct installation test in appveyor
      Efence is antiquated, remove all traces of using it
      Add some notes on shared library names on different platforms
      Backdated note in CHANGES about shared library names
      VMS: tell the C compiler to use the ISO C94 standard
      Mark VC templates correctly.
      Unix Makefile: Some sed implementation truncate long lines.  Use perl instead.
      HPUX: Add the forgotten $(DSTDIR) when linking DSOs
      Secure our notification email.
      Test recipes: remove duplicate OpenSSL::Test usage
      test/build.info: typo, $ missing
      Convert poly1305 selftest into internal test
      Allow indented comments in build.info
      Explain the deal with internal test programs
      VMS: ignore multiply defined symbols when linking programs
      Convert asn1 selftests (a_strnid and ameth_lib) into internal test
      Convert modes selftests (cts128 and gcm128) to internal test
      Add a HEADER_MODES_H guard in include/openssl/modes.h
      Convert x509 selftests to internal test
      Convert mdc2 test print to internal test
      Finally, add a test recipe for the internal tests
      Clean away remaining 'selftest' code
      Clang doesn't like -znodelete, make it a linker flag instead
      test/shlibloadtest: small fixes
      Enable memory debugging while testing
      Don't assume to know the shared library extension
      Integrate ossl_shim into the build
      Convert 90-test_external.t to using "executable" rather than "system"
      Travis: add a strict build
      VMS: correct the logic around linking executables
      VMS: update the list of files that need some extra treatment
      Correct internal tests sources
      VMS build file template: assign 'arch' to local symbol table
      constant time test: include our internal/numbers.h rather than limits.h
      VMS: pretend to use -znodelete
      Fix the LIBZ macro on VC config targets
      Windows: use default ZLIB1 unless --with-zlib-lib is set
      INSTALL: small typo
      Unix Makefile: Make sure to use $(PERL) when running ./Configure
      Move algorithm specific ppccap code from crypto/ppccap.c
      Fix no-dso (shlibloadtest)
      Fix the evp_test Ctrl keyword processing
      chacha20/poly1305: make sure to clear the buffer at correct position
      Fix no-cms (CVE-2016-7053)
      descrip.mms.tmpl: Simplify fiddling of logical names record and statem
      Fix no-ct in test/ct_test.c
      Building: make it possible to force linking with static OpenSSL libs
      Document how to force linking with static libraries
      Link internal tests with static OpenSSL libraries when needed
      Revert "Move algorithm specific ppccap code from crypto/ppccap.c"
      Small fixups of util/process_docs.pl
      Fix the effect of no-dso in crypto/init.c
      Add util/check-doc-links.pl, to be used to check referenses in manuals
      Fix referenses in section 3 manuals
      Fix referenses in section 1 manuals
      Fix referenses in section 7 manuals
      Fix typo in util/process_docs.pl
      Remove heartbeat support
      Stop init loops
      Add a warning stipulating how things should be coded in ossl_init_base
      Remove heartbeats completely
      Revert "Remove heartbeats completely"
      Make it possible to disable building and running tests
      Only build the body of e_padlock when there are lower level routines
      Add a modern linux-x86 config target
      On x86 machines where the compiler supports -m32, use 'linux-x86'
      Clarify what X509_NAME_online does with the given buffer and size
      UI_process() didn't generate errors
      Add a test for the UI API
      Make sure that password_callback exercises UI
      In UI_OpenSSL's open(), generate an error on unknown errno
      UI_OpenSSL()'s session opener fails on MacOS X
      UI code style cleanup
      Remove extra bang
      Test framework: Add the possibility to have a test specific data dir
      VMS UI_OpenSSL: if the TT device isn't a tty, flag instead of error
      VMS UI_OpenSSL: generate OpenSSL errors when things go wrong.
      HP-UX doesn't have hstrerror(), so make our own for that platform
      evp_test: when function and reason strings aren't available, just skip
      e_afalg: Don't warn about kernel version when pedantic
      Fix no-ct, skip tests recipes that try to test CT
      test/ssl_test: give up if both client and server wait on read
      Fix erroneous goto lable
      Add bwrite_conv and bread_conv values to methods_dgramp_sctp
      M_check_autoarg: sanity check the key
      Reformat M_check_autoarg to match our coding style
      Travis: The TLS 1.3 code isn't interoperable yet, move it to its own build
      70-test_sslmessages.t: Don't check EXT_SIG_ALGS if TLS 1.2 is disabled
      70-test_sslvertol.t: Make sure to check a max TLS version that matches configuration
      80-test_ssl_new.t: Make 19-mac-then-encrypt.conf work without TLSv1.2
      70-test_sslvertol.t: skip test 1 and 2 if too few protocols are enabled
      Don't run NPN tests when NPN is disabled
      Don't test SRP when it's disabled
      Don't build OCSP stuff when OCSP is disabled
      Don't run OCSP tests when OCSP is disabled
      Don't run MSBLOB conversion tests when RSA or DSA are disabled
      Fix build issues with no-dh, no-dsa and no-ec
      Small fixes of cryptodev engine
      Only enable CRYPTO_3DES_ECB if that name is an existing macro
      Enable apps to get a UI_METHOD for the default prompter
      Constify the input parameter to UI_method_get_*
      Add an application data field in the UI_METHOD
      Add a UI utility function with which to wrap pem_callback_cb in a UI_METHOD
      make update
      Document the UI utility functions
      Add a few documentation lines about UI_OpenSSL()
      Add a test "uitest"
      UI: fix uitest for no-ui configuration
      UI: fix uitest for VMS
      UI documentation fixup
      Run find-doc-nits in travis
      UI: Ensure there will be no race condition when getting the UI_METHOD ex_data
      UI: Use RUN_ONCE differently
      Fix no-ocsp
      Clarify what RUN_ONCE returns
      Fix DSA parameter generation control error
      Fix no-tls1_2
      s_client: Better response success check for CONNECT
      Fix small typo
      Better check of DH parameters in TLS data
      Document DH_check_params()
      Correct pointer to be freed
      X509_CRL_digest() - ensure precomputed sha1 hash before returning it
      Document what EXFLAG_SET is for in x509v3.h
      Add a couple of test to check CRL fingerprint
      test/evp_test.c: If no algorithm was specified, don't try to check for DES
      Fix faulty free
      bntest: make sure that equalBN takes note of negative zero
      bntest: make sure file_rshift tests BN_rshift1 as well when appropriate
      bntest: do not stop on first fautl encountered
      bntests.txt: add a couple of checks of possibly negative zero
      bn: fix occurance of negative zero in BN_rshift1()
      Initialise alg_k and alg_a
      Fix "no-ec"
      Because our test sid file contains EC, don't try it when configured no-ec
      Add needed module in 25-test_sid.t
      test_rehash does nothing, have it do something
      test/README: clarify test number groups
      Add a test of the X509_STORE / X509_LOOKUP API
      Fix symbol shadow
      Fix test_x509_store
      If all versions of a proto are disabled, disabled the proto as well
      Fix no-dh and no-dsa
      VMS fix of test/recipes/80-test_ssl_new.t
      Correct the no-dh and no-dsa fix
      Have the directory reader use the Unix API on VMS
      Make "openssl rehash" work on VMS 8.3 and up
      Fix typo, missing ||
      Fix typo, should be && rather than &
      Let the output from 'openssl enc -ciphers' go to stdout
      On VMS, massage the fetch file names to remove the generation number
      In apps/rehash.c, decorate the inclusion of internal/o_dir.h for VMS
      Check for the presence of _WIN32 rather than its value.
      Add a null UI method
      Renumber to avoid a error code clash
      Code cleanup: remove the VMS specific reimplementation of gmtime
      Move the CHIL engine to demos/engines
      Code health: Remove obvious VAX C fixups
      Code health: Stop using timeb.h / ftime() (VMS only)
      Code health: Remove unused VAX transfer vector for engines
      Code health: Remove VAX exceptions in util/mkdef.pl
      Code health: make update
      Code health: Remove another VAX C-ism, globaldef and globalref
      Code health: With the VAX C-ism gone, OPENSSL_GLOBAL can be removed too
      Code health: Quick note in changes and the OPENSSL_GLOBAL et al changes
      Code health: Remove base address setting for mingw
      Don't use deprecated EVP_CIPHER_CTX_cleanup() internally
      VMS: compensate for gmtime_r() parameter pointer size
      Add NOTES.UNIX, with a description on how to deal with runpaths
      Fix the skip numbers in 80-test_ca.t
      -precert doesn't work when configured no-ct, don't try to test it then
      Add a platform specific configuration checker
      Add documentation on platform specific checks
      util/process_docs.pl: make it possible to add a suffix to man docs
      Unix Makefile: Have manual generation use the same perl script as Windows and VMS
      Make it possible to select or deselect test groups by number
      Document how to select / deselect test group numbers
      Split test/recipes/03_test_internal.t into individual tests
      Encourage having external tests in multiple test recipes
      Document UI_METHOD and UI_STRING, both useful for UI_METHOD creators
      Fix UI_get0_action_string()
      UI docs: Rephrase the UI method function return value description
      Recognise mingw64 in config script
      Document in CHANGES that config now recognises 64-bit mingw
      Better way to recognise mingw64 in config script
      Rather use -out parameter than redirect stdout
      VMS: Change debug linking method to generate a separate Debug Symbol File
      VMS: throw away [.util]shareable_image_wrap.c.in and add replacement scripts
      VMS: don't use /DSF, turn off CALL_DEBUG instead
      Add EC_KEY_get0_engine()
      VMS: turning off CALL_DEBUG isn't possible on Alpha
      Forgotten 'make update'
      Improve testing of elliptic curve validation
      Fix a few internals tests
      Fix docs for X509_CRL_get0_by_serial() and X509_CRL_get0_by_cert()
      Fix decoding of ASN.1 LONG and ZLONG items
      Rework how protocol specific ciphers in 80-test_ssl_old.t are picked out
      OpenSSL::Test: add a statusvar option for run with capture => 1
      Adapt 80-test_ssl_old.t to use statusvar
      Adapt 20-test_enc.t and 20-test_enc_more.t to use statusvar
      95-test_external_pyca_data/cryptography.py: only install for testing
      Travis: make a separate job for external tests
      Refuse to run the PYCA external test if configured 'no-shared'
      Change exit_checker comment on returned status
      Fix 80-test_ssl_old.t: only count the ciphers if there are any.
      Fix find-doc-nits: { is significant in regexps
      In err_cleanup(), cleanup the thread local storage too
      Add z modifier parsing to the BIO_printf et all format string
      Use the z modifier instead of OSSLzu with BIO_printf
      Add a simple test for the z modifier
      Fixup the github pull request template
      Remind people to have 'Fixes #XXXX' in the commit message
      Disable 15-test_ecparam.t when configured no-ec2m
      Implement internal ASN.1 types INT32, UINT32, INT64, UINT64
      make update
      Convert SSL_SESSION_ASN1 to use size specific integers
      Add a test of encoding and decoding LONG, INT32, UINT32, INT64 and UINT64
      Fix faulty check of padding in x_long.c
      Fix test/asn1_encode_test.c, ASN1_LONG_DATA used inappropriately
      In rand_cleanup_int(), don't go creating a default method
      Make getting and setting the RAND default method thread safe
      Don't try to clean up RAND from ENGINE
      Fix rand_lib.c for no-engine configuration
      Publish our INT32, UINT32, INT64, UINT64 ASN.1 types and Z variants
      Discourage the use of LONG and ZLONG, and deprecate it in the future
      Act on deprecation of LONG and ZLONG, step 1
      Act on deprecation of LONG and ZLONG, step 2
      Act on deprecation of LONG and ZLONG, step 3
      Add a note in CHANGES
      Fix util/mkdef.pl
      Fix int64 test of t_4bytes_4_neg
      Fix x_int64.c
      In asn1_encode_test.c, add custom DER encoding checks
      Fix definition of i2d_fn in asn1_encode_test.c
      Add tests of custom negative 1
      test/testutil.c: Flush stdout when running tests
      OpenSSL::Test: supported filtered command output
      Correct travis.yml to only build extended tests when explicitely asked to
      Test printing of ASN.1 types INTxx et al
      ASN.1: extend the possibilities to embed data instead of pointers
      ASN.1: change INTxx, UINTxx and Z variants to be embedable
      ASN.1: adapt our use of INTxx et al by making them explicitely embedded
      VMS: Fix the passing of cflags for things not being installed
      VMS: Fix internals test programs
      VMS: Copy DECC inclusion epi- and prologues to internals
      VMS: remove name mangling guards around inclusion of internals
      Fix test/recipes/95-test_external_krb5.t
      Port Ben's parallell Makefile hack to Windows
      Port Ben's parallell Makefile hack to VMS
      Typo fix in Configurations/descrip.mms.tmpl
      Make it possible to build static-only libraries
      Add CRYPTO_mem_leaks_cb
      Refactor the test framework testutil
      VMS: Make sure to include MAIN from static libraries if needed
      Adapt all test programs
      Avoid using BIO streams in bioprinttest.c
      TAPify testutil
      Add guards around one of use of IPPROTO_SCTP where it was missing
      Correct some badly formated preprocessor lines
      Ignore all .a files, not just the top ones
      Add include path '..' for libtestutil
      Tapify libtestutil a bit better
      TLSProxy: When in debug mode, show the exact subprocess commands
      testutil: Move printing function declarations to "internal" header
      testutil: make subtest_level() internal
      testutil: Add commodity printing functions test_printf_std{out,err}
      testutil: Add OpenSSL error stack printing wrapper TEST_openssl_errors
      testutil: Remove test_puts_std{out,err}, they are superfluous
      Update the pyca-cryptography submodule to version 1.8.1
      test/exptest.c: stop marking progress with a period
      Rearrange test/recipes/95-test_*.t to use skip_all
      test/recipes/95-test_*.t : correct skip_all syntax
      Prefer TAP::Harness over Test::Harness
      Fix 'no-ec'
      Clarify that a test failed
      Unclash clashing reason codes in ssl.h
      testutil: add the possibility to set the current test title
      evp_test: use the test file name as the test title
      testutil: Fix non-standard subtest output
      Cleanup - use e_os2.h rather than stdint.h
      Clean away needless VMS check
      INSTALL: clarify a bit more how Configure treats "unknown" options
      INSTALL: Remind people to read more if they added configuration options
      Remove notification settings from appveyor.yml
      Clarify what character encoding is used in the returned UI strings
      Add internal functions to fetch a refcount
      Correct small typo in CRYPTO_GET_REF
      Revert "Add internal functions to fetch a refcount"
      Add UI functionality to duplicate the user data
      Windows: rearrange programs cleanup
      Add -module option to util/mkerr.pl
      Rework writing crypto/err/openssl.txt
      .travis.yml: Detect if 'make update' updated something
      Move bn and evp test programs input data to their respective data dir
      Build apps/progs.h dynamically
      Add the target 'build_all_generated'
      Reorder Configure output
      Fix va_list processing in test_note()
      Configure: give config targets the possibility to enable or disable features
      tsget.in: remove call of WWW::Curl::Easy::global_cleanup
      util/mkerr.pl: allow module names prefixed with OSSL_ or OPENSSL_
      util/mkerr.pl: avoid getting an annoying warning about negative count
      Add the common error ERR_R_OPERATION_FAIL
      Add new /dev/crypto engine
      Adapt for BSD cryptodev.h differences
      Comment on the lack of documentation for asymmetric ciphers
      Document the added devcrypto engine in CHANGES
      UI_UTIL_wrap_read_pem_callback: make sure to terminate the string received
      test/uitest.c's pem_password_cb returned 1 instead of the password length
      Add dependency on apps/progs.h for test/uitest.o
      crypto/mem.c: on Windows, use rand() instead of random()
      Make it possible to refer to ERR_R_UI_LIB
      Add the STORE module
      Make asn1_d2i_read_bio accessible from STORE
      Make it possible to peek at BIO data through BIO_f_buffer()
      Add a STORE loader for the "file" scheme
      Add a simple store utility command
      Add a test that checks the store utility
      STORE 'file' scheme loader: add support for containers
      STORE 'file' scheme loader: add support for the PKCS#12 container
      STORE tests: add PKCS#12 tests
      STORE: Add a OSSL_STORE_INFO type to help support file handler restarts
      STORE 'file' scheme loader: refactor file_load to support decoding restart
      STORE 'file' scheme loader: Add handler for encrypted PKCS#8 data
      STORE 'file' scheme loader: Add directory listing capability
      Test that storeutl with a directory path works as expected
      STORE: add ENGINE information to loaders
      engine app: print out information on STORE loaders and STORE FILE handlers
      Add documentation for STORE functions
      Add documentation for the storeutl app
      STORE test recipe: Remove comment refering to OpenConnect
      STORE: Add an entry in NEWS and CHANGES
      STORE 'file' scheme loader: refactor the treatment of matches
      Make it possible to tell the file loader to use secure memory
      Add internal functions to fetch PEM data from an opened BIO
      util/mkdef.pl: Add UNIX as a platform
      util/mkdef.pl: Make symbol version processing Linux only
      STORE: simplify store_loader_cmp()
      STORE: Make sure the loader to be registered is complete
      When apps_startup() fails, exit with a failure code and a message
      STORE 'file' scheme loader: DNS name in URI is case insensitive
      Make sure OSSL_STORE_load() isn't caught in an endless loop
      Remove the possibility to disable the UI module entirely
      Correct documentation for UI_get0_result_string
      STORE: fix possible memory leak
      Avoid possible memleak in X509_policy_check()
      Fix small UI issues
      STORE 'file' scheme loader: fix try_decode_params() to check ambiguity
      VMS: When running a sub-MMS, make sure to give it the main MMS' qualifiers
      test/recipes/90-test_shlibload.t: Make sure to handle library renames
      test/run_tests.pl: Make sure to exit with a code that's understood universally
      Fix cipher_compare
      Fix style in crypto/store/loader_file.c
      For Windows, use _stat rather than stat
      test/recipes/90-test_store.t: Rename some functions
      test/recipes/90-test_store.t: Test absolute files
      OSSL_STORE: spell error reason correctly
      OSSL_STORE: Treat URIs as files first (with exceptions), then as full URIs
      test/recipes/90-test_store.t: Add a few cases with files starting with 'file:'
      OSSL_STORE "file" scheme loader: check for absolute path in URI later
      OSSL_STORE "file" scheme loader: check that a DOS device is correctly named
      testutil: stanza files are text files, open them as such
      Fix faulty include
      Simplify Makefile.shared
      test/recipes/80-test_tsa.t: Don't trust 'OPENSSL_CONF'
      Makefile.shared: Make link_shlib.linux-shared less verbose again
      Simplify the handling of shared library version numbers
      Perl: Use File::Glob::bsd_glob rather than File::Glob::glob
      Consolidate the locations where we have our internal perl modules
      File::Glob option ':bsd_glob' doesn't work everywhere, replace w/ a wrapper
      Rename crypto/evp/scrypt.c to crypto/evp/pbe_scrypt.c
      Add ERR_clear_last_mark()
      Clear error stack on successful OSSL_STORE_open()
      STORE: Add info on the expected post_process callback behavior
      STORE: Add documentation on the expectations for returned names
      When building a tarball, avoid trying to copy submodules
      test/asn1_time_test.c: Better check of signed time_t
      Turn on error sensitivity in the "tar" target
      Prepare tarball in dist directory
      Add a comment on expectations in the "tar" target
      Fix ui_write in apps/apps.c
      Fix the lack of isblank() with VMS C
      Don't try to test ctype functions for values < 0 or > 255
      Don't try to compare the ctype functions on values > 127
      apps/passwd.c: Don't disable MD5 and SHA when CHARSET_EBCDIC is defined
      apps/passwd.c: Fix code layout
      apps/passwd.c: Make MD5 and SHA password making EBCDIC aware
      NO_SYS_TYPES_H isn't defined anywhere, stop using it as a guard
      Move more socket stuff
      Fix guarding macro in include/internal/sockets.h
      If 'tests' is disabled, then so should 'external-tests'
      util/mkdef.pl: handle line terminators correctly
      OpenSSL::Test::__fixup_prg: don't check program existence
      Fix OpenSSL::Test::Utils::config to actualy load the config data
      OSSL_STORE: Avoid testing with URIs on the mingw command line
      Fix 90-test_store.t: using config() requires OpenSSL::Test::Utils
      Fix OSSL_STORE's 'file' loader: make sure peekbuf is initialised
      Add UI functions to set result with explicit length and to retrieve the length
      Disable the EGD seeding meachanism when stdio is disabled
      Add a recursive option to 'openssl storeutl'
      Document the recursive option
      Make sure that a cert with extensions gets version number 2 (v3)
      Configurations/windows-makefile.tmpl: canonicalise configured paths
      doc/man1/openssl.pod: Add missing commands and links
      Correct some typedef documentation
      Fix util/find-doc-nits to correctly parse function signature typedefs
      Fix util/perl/OpenSSL/Test.pm input variable overwrite
      Use the possibility to have test results in a different directory
      Reduce the things we ignore in test/
      Add branch coverage to coveralls statistics
      asn1_item_embed_new(): don't free an embedded item
      asn1_item_embed_new(): don't free an embedded item
      asn1_item_embed_new(): if locking failed, don't call asn1_item_embed_free()
      doc/man3/d2i_X509.pod: add {d2i,i2d}_DSA_PUBKEY in NAME section
      EVP_PKEY_ASN1_METHOD: add functions to set siginf_set and pkey_check methods
      Document EVP_PKEY_ASN1_METHOD and associated functions
      EVP_PKEY_asn1_add0(): Check that this method isn't already registered
      make update
      Fix EVP_PKEY_ASN1_METHOD manual
      Generate a dictionary of OIDs for fuzzers
      make update
      Fix small but important regression
      Travis: if "make update" created a diff, please show it
      Configure: cleanup @disable_cascade
      Modify expected output of a certificate to match the changed printout
      Add padding spaces before printing signature algorithm for CRLs output
      Modify expected output of a CRL to match the changed printout
      Avoid unnecessary MSYS2 conversion of some arguments
      Correct EVP_CIPHER_meth_new.pod and EVP_MD_meth_new.pod
      Fix EVP_MD_meth_new.pod
      Save away the environment variables we rely on
      Make it possible to add env var assignments as Configure options
      Document the possibility for command line argument env assignments
      Have all relevant config targets use the env() function rather than $ENV
      Make sure ./config passes options to ./Configure correctly
      Configure: die if there are other arguments with 'reconf'
      Document how the configuration option 'reconf' works
      Remove unicode characters from source
      In OPENSSL_init_ssl(), run the base ssl init before OPENSSL_init_crypto()
      In apps_startup(), call OPENSSL_init_ssl() rather than OPENSSL_init_crypto()
      Configure: move the processing of predefined macros to a function
      Configure: Add read_eval_file, a general purpose perl file reader/evaluator
      Configure: Read in extra information to help create shared libraries
      Configure: Recognise .rc and .def / .map / .opt as source files
      Build file templates: Replace the use of Makefile.shared
      build.info: adapt to the new handling of .rc / .def / .map / .opt files
      Configure et al: cleanups
      Remove Makefile.shared, as it's now entirely unused
      Note the removal of Makefile.shared in CHANGES
      Restore makedepend capabilities for Windows and VMS
      VMS build file template: adapt for when someone disabled 'makedepend'
      Fix leak in ERR_get_state() when OPENSSL_init_crypto() isn't called yet
      Fix VMS use of util/mkdef.pl in top build.info
      Restore the use of LDCMD when linking applications
      VMS build.info: uppercase args to perl modules must be quoted
      VMS fix: link shared libs from objects files instead of from static libs
      Add 'openssl req' option to specify extension values on command line
      Ignore ORDINALS in build.info files, and remove its documentation
      apps: make sure prog_init only calculates once
      Add the possibility to do 'openssl help [command]'
      CHANGES: Document the removal of OS390-Unix
      Clean up uClinux targets
      Separate general linking flags from extra libraries
      Update copyright years on all files merged since Jan 1st 2018
      Configure: try to make sure every config target name is unique
      Fix intermittent Cygwin failures in s_client
      Fix Windows build file template to recognise .res files
      Fix intermittent Windows and Cygwin failures in s_server
      TLSProxy::Proxy:  If we don't support IPv6, force IPv4
      TLSProxy::Proxy: don't waste time redirecting STDOUT and STDERR
      TLSProxy::Proxy: Don't use ReuseAddr on Windows
      Cygwin is POSIX, don't say it isn't
      Simplify Cygwin checks, part 1
      The Cygwin gcc doesn't define _WIN32, don't pretend it does
      Only implement secure malloc if _POSIX_VERSION allows
      Create one permanent proxy socket per TLSProxy::Proxy instance
      Copyright update of more files that have changed this year
      Enable TLSProxy tests on Windows
      Update the license end year
      Reduce the use of e_os.h in test programs
      test/ossl_shim/packeted_bio.h: don't include e_os.h
      When building shared libraries, only ln -s when simple and full name differ
      Add anything specifying a threads library to ex_libs
      Don't add $(EX_LIBS) to libssl.pc's Libs.private
      Revert "EVP_PKEY_asn1_add0(): Check that this method isn't already registered"
      Have EVP_PKEY_asn1_find_str() work more like EVP_PKEY_asn1_find()
      Configure: let INCLUDEs set on binaries "trickle down" to the objects
      Configure: ensure that a DEPEND generates the correct inclusion directory
      Small cleanup of some build.info files
      Processing GNU-style "make variables" - separate CPP flags from C flags
      Processing GNU-style "make variables" - implementation
      Stop having Unix defaults in Configure (partial)
      We need Unixly defaults for config targets that don't inherit a BASE
      Make sure all our config targets inherit a BASE template
      Add a note on Configure variable processing in NEWS and CHANGES
      VMS config.com: better handling of arguments
      Fix WinCE config target
      Treat C++ flags more like C flags, and only if C++ compiler specified
      Get rid of a warning about unused results
      Don't break testing when runnins as root
      Fix recent typo.  -DL_ENDIAN / -DB_ENDIAN, not -DL_DEBIAN / -DB_DEBIAN
      Remove $no_sse2, as it's just a 'copy' of $disabled{sse2}
      Don't define OPENSSL_NO_ERR for the command line
      Make configdata.pm runnable and move all display of information there
      Have the build files use the executable configdata.pm
      Move the display of disabled features to configdata.pm as well.
      Document the use of configdata.pm as a script
      Make Travis and Appveyor display the configuration data dump
      To make it less surprising and confusing, leave a message on configdata.pm
      Fix typo in Windows makefile template: quotify, not quotiry
      Restore perl variables for ENGINESDIR and OPENSSLDIR
      Add a 'reconfigure' make target
      Configure: add configure command line C flags after the configured C flags
      Configure: when checking user input, check both %user and %useradd
      Fix small typo (parenthesis missing)
      BIO: at the end of BIO_new, declare the BIO inited if no create method present
      Remove "dummy" BIO create and destroy functions
      apps: Don't include progs.h in apps.h
      Apps: divide the modules in direct command modules, support library and init
      Make test/uitest depend on the private apps support library
      Add missing \n in some testutil output
      Add an apps internal BIO filter for prefixing output lines
      Make sure that apps/openssl prefixes its output with '# ' during tests
      ocsp.c doesn't free the whole output chain, maybe causing a memory leak
      VMS: MMS wants a space before the target / dependecies separator
      Fix of prefix bio filter (bf_prefix.c): rely on the given length
      Have configdata.pm also display the contents of %target
      util/mkdef.pl: Trust configdata.pm
      Code cleanup: remove benchmark code from internal tests
      Modify test/afalgtest to fail if the afalg engine couldn't be loaded
      test/recipes/30-test_afalg.t: set OPENSSL_ENGINES correctly
      Make all private functions in e_afalg.c static
      mkerr.pl: When writing internal FOOerr.h, pay attention to disablable modules
      make update ERROR_REBUILD=-rebuild
      Revert "Modify test/afalgtest to fail if the afalg engine couldn't be loaded"
      With nmake, invoking $(MAKE) needs /$(MAKEFLAGS)
      util/mkdef.pl: use better array in search of 'DEPRECATEDIN_'
      Revert ".travis.yml: remove osx from build matrix."
      Fix check of cpuid_asm_src config attribute
      VMS: take care of includes
      Turn off printf format checking for BIO_printf et al on Mac OS/X
      Configuration: move the handling of zlib_include to config files

Rob Percival (57):
      Removes CTLOG_new_null from the CT public API
      Mkae CT_log_new_from_base64 always return 0 on failure
      Improves CTLOG_STORE setters
      Make CT_POLICY_EVAL_CTX_set1_{cert,issuer} into boolean functions
      Replaces CT_POLICY_EVAL_CTX_set0 entries with new setters in libcrypto.num
      Internalizes SCT_verify and removes SCT_verify_v1
      Prevent double-free of CTLOG public key
      Removes {i2o,o2i}_SCT_signature from the CT public API
      Document that o2i_SCT_signature can leave the SCT in an inconsistent state
      SCT_set_source resets validation_status
      First draft of CT documentation
      Fix comment about return value of ct_extract_tls_extension_scts
      Add SSL_get0_peer_scts to ssl.pod
      Fix comment about what SCT_LIST_validate does.
      Add comment about calling CT_POLICY_EVAL_CTX_free
      Remove unnecessary bold tags in CT pods
      Add enum definitions to CT pods
      Adds missing function names to NAME section of PODs
      Adds newline after =cut in PODs
      Adds copyright section to ct.pod
      Renames CT_POLICY_EVAL_CTX.pod to CT_POLICY_EVAL_CTX_new.pod
      Fixes final issue in CT PODs highlighted by util/find-doc-nits.pl
      Adds history section to CT PODs
      Refer to OPENSSLDIR rather than "the OpenSSL install directory"
      Clarifies the format of a log's public key in the CONF file
      Document that SCT_set_source returns 0 on failure.
      Removes d2i_SCT_LIST.pod
      Document the i2o and o2i SCT functions
      Documents the CTLOG functions
      Removes {o2i,i2o}_SCT_signature from PODs
      Documents the SCT validation functions
      Removes the SCT_verify* POD
      Correct documentation about SCT setters resetting validation status
      Updates the CT_POLICY_EVAL_CTX POD
      Typo fixes
      Check that SCT timestamps are not in the future
      Remove obsolete error constant CT_F_CTLOG_NEW_NULL
      Reword documentation for {SCT_CTX/CT_POLICY_EVAL_CTX}_set_time
      Default CT_POLICY_EVAL_CTX.epoch_time_in_ms to time()
      Don't check for time() failing in CT_POLICY_EVAL_CTX_new
      By default, allow SCT timestamps to be up to 5 minutes in the future
      Cast time_t to uint64_t before converting to milliseconds in ct_policy.c
      Convert C++ comments to C-style comments
      Add test for CT_POLICY_EVAL_CTX default time
      Construct SCT from base64 in ct_test
      Subtract padding from outlen in ct_base64_decode
      Pass a temporary pointer to o2i_SCT_signature from SCT_new_from_base64
      Use valid signature in test_decode_tls_sct()
      Make sure things get deleted when test setup fails in ct_test.c
      Move SCT_LIST_free definition into a more logical place
      Adds a "-precert" flag to "openssl req" for creating pre-certificates
      Basic test for "openssl req -precert" via apps/CA.pl
      Documentation for the -precert flag for "openssl req"
      Change CA.pl flag from --newprecert to --precert
      apps/req.c: flag "-new" is implied by "-precert"
      Add SSL tests for certificates with embedded SCTs
      CT_POLICY_EVAL_CTX_set_time expects milliseconds, but given seconds

Robbie Harwood (4):
      Add external krb5 test support
      Update external test README for running krb5
      Fix formatting of PYCA external test instructions
      [extended tests] Enable krb5 tests in Travis

Robert Scheck (7):
      Add LMTP support (RFC 2033) to s_client ("-starttls lmtp")
      Shift inside of switch back one level (code style change, as requested by Rich Salz)
      Avoid warnings like unused enum value (as suggested by Rich Salz)
      Add NNTP support (RFC 4642) to s_client ("-starttls nntp")
      Add Sieve support (RFC 5804) to s_client ("-starttls sieve")
      Handle negative reply for NNTP STARTTLS in s_client
      Add LDAP support (RFC 4511) to s_client ("-starttls ldap")

Robert Swiecki (1):
      Add to fuzz corpora for CVE-2016-6309

Roberto Guimaraes (1):
      this change will prevent undefined behavior when src and dst are equal (memcpy), effectively allowing setting length only in both functions.

Roelof duToit (2):
      Retry SSL_read on ERROR_WANT_READ.     This resolves the retry issue in general, but also the specific case where a TLS 1.3 server sends a post-handshake NewSessionTicket message prior to appdata.
      Update PR#3925

Ronald Tse (6):
      CHANGES: remove empty whitespaces
      SM4: Add SM4 block cipher to EVP
      EVP digest list: one hash algorithm per file, synchronize EVP list, overall cleanup.
      Synchronize man3 EVP cipher list with existing implementations, adding:     * ARIA, SEED, Camellia     * AES-XTS, OCB, CTR     * Key wrap for 3DES, AES     * RC4-MD5 AD     * CFB modes with 1-bit and 8-bit shifts
      SM3: restructure to EVP internal and update doc to right location
      Add SM3/SM4 to openssl command-line tool

Saagar Jha (1):
      Update comments to match function parameter names

Samuel Weiser (3):
      Fixed error in propagating BN_FLG_CONSTTIME flag through BN_MONT_CTX_set, which could lead to information disclosure on RSA primes p and q.
      BN_copy now propagates BN_FLG_CONSTTIME
      Added const-time flag to DSA key decoding to avoid potential leak of privkey

Sascha Steinbiss (1):
      Add OCSP_resp_get1_id() accessor

Sebastian Andrzej Siewior (2):
      dsa/dsa_gen: add error message for seed_len < 0
      rsa: Do not allow less than 512 bit RSA keys

Sergey Bronnikov (1):
      Fix link to LibFuzzer

Steffan Karger (1):
      Fix SSL_CTX_get_{min,max}_proto_version integer conversion warning

Steve Linsell (1):
      Update copyright year in mkerr.pl

Steven Collison (2):
      doc: Add missing options in s_{server,client}
      doc: Add stitched ciphers to EVP_EncryptInit.pod

Steven Danneman (1):
      Fix double array increment in s_client mysql connect

Steven Fackler (1):
      Fix signatures of EVP_Digest{Sign,Verify}Update

Tatsuhiro Tsujikawa (9):
      Restore s->early_data_state with the original value
      Call init and finalization functions per extension message
      Break before && operator
      Don't treat PACKET_remaining() as boolean
      Fix TLSv1.3 exporter secret
      Don't change client random in Client Hello in its second flight
      Generate exporter_master_secret after server Finished
      Remove generation of exporter master secret on client application traffic
      Make sure that exporting keying material is allowed

Thiago Arrais (1):
      update docs because depth refers only to intermediate certs

Thijs Wenker (1):
      Fix certificate version number in test

Tim Hudson (1):
      Fix EC_KEY_print so it prints out private key information     even when the public key is not present in an EC_KEY

Todd Short (53):
      Add SSL_CTX_set1_cert_store()
      Skipping tests in evp_test leaks memory
      Fix EVP_MD_meth_get_flags
      Add support for Poly1305 in EVP_PKEY
      Cleanup EVP_CIPH/EP_CTRL duplicate defines
      Majority rules, use session_ctx vs initial_ctx
      Add support for parameterized SipHash
      Internal siphash tests are not run.
      Fix potential memory leak in ASN1_TIME_to_generalizedtime()
      Remove some #if 0 code in ssl, crypto/bio
      Add some TLS13 values to s_client/s_server
      Add HelloRetryRequest text to s_client/s_server
      Add TLSv1.3 draft-19 messages to trace
      Add support for MLOCK_ONFAULT to secure arena
      Remove ECDH(E) ciphers from SSLv3
      OCSP Updates: error codes and multiple certificates
      Fix unit tests when no-bf configured
      Fix minor compiler issues.
      Fix s_client when no-dtls
      Fix time offset calculation.
      TLS1.3 Padding
      Limit padded record to max plaintext
      Fix clang compile time error
      Fix infinite loops in secure memory allocation.
      Clean up SSL_OP_* a bit
      Fix compile error/warning in packettest.c
      Tweak sec_mem tests
      Fix the mem_sec "small arena"
      Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION
      Fix ex_data and session_dup issues
      Handle the server refusing to reneg in a reneg_setup
      Always flush the BIO when we send any alert
      Fix #2400 Add NO_RENEGOTIATE option
      Fix #340: Parse ASN1_TIME to struct tm
      Add apps/progs.h to gitignore
      ssl_session_dup() missing ext.alpn_session
      Fix #946 Add -preserve_dates to x509 app
      Add support to free/allocate SSL buffers
      Fix SSL_set_tlsext_debug_callback/-tlsextdebug
      Consolidate to a single asn1_time_from_tm() function
      Reorder extensions to put SigAlgs last
      Fix return value of ASN1_TIME_compare
      Session resume broken switching contexts
      Use ChaCha only if prioritized by clnt
      Add sk_new_reserve support
      Fix 'make update'
      Fix --strict-warnings with C90
      Fix error-path memory leak in asn_mime.c
      Remove bad comments
      Add TLSv1.3 post-handshake authentication (PHA)
      Free pha_dgst in SSL_clear()
      Fix doc nits
      Fix some minor code nits

Tomas Mraz (12):
      Fix irregularities in GENERAL_NAME_print().
      Fix af_alg engine failure on 32 bit architectures.
      Add a comment for the added cast with explanation.
      Avoid truncating the pointer on x32 platform.
      Engine afalg: properly set operation type also on big endian.
      Fix regression in openssl req -x509 behaviour.
      Do not eat trailing '\n' in BIO_gets for fd BIO.
      Document that BIO_gets() preserves '\n'.
      Document the history of BIO_gets() on BIO_fd().
      Ignore -named_curve auto value to improve backwards compatibility
      Add missing documentation of the default format for commands.
      Avoid only exact duplicates when creating the accepted CA names list

Valentin Vidic (1):
      Add Postgres support to -starttls

Viktor Dukhovni (8):
      Fix missing dane_tlsa_rrdata option error message
      Add -dane_ee_no_namechecks s_client(1) option
      Un-delete still documented X509_STORE_CTX_set_verify
      Restore last-resort expired untrusted intermediate issuers
      Make possible variant SONAMEs and symbol versions
      Document the X509_V_FLAG_PARTIAL_CHAIN flag
      Add x509(1) reference
      Avoid leaking peername data via accept BIOs

Viktor Szakats (2):
      s_client: avoid warning on Windows/MS-DOS systems
      bio.h: fix number of arguments passed to BIO_ptr_ctrl()     Reviewed-by: Matt Caswell <matt at openssl.org>     Reviewed-by: Rich Salz <rsalz at openssl.org>     (Merged from https://github.com/openssl/openssl/pull/1520)

Vitezslav Cizek (1):
      Configure: remove superfluous 0x

Xiangyu Bu (1):
      Fix memory leak in GENERAL_NAME_set0_othername.

Xiaoyin Liu (15):
      Fix typo
      Remove unused function prototypes
      schlock global variable needs to be volatile
      Various doc fixes.
      Remove redundant declarations in record_locl.h
      Remove redundant declarations in ssl_locl.h
      Update copyright header
      Fix typos in files in ssl directory
      Fix typo in ASN1_TIME_set.pod
      Fix typo in sha1-thumb.pl
      app_isdir() cleanup
      Fix errors in SSL_state_string_long
      Fix typo in documents
      Fix typo in files in crypto folder
      Add missing HTML tag in www_body in s_server.c

Yuchi (1):
      mem leak on error path and error propagation fix

Yutian Li (2):
      Add padding spaces before printing algo.
      Add padding spaces before printing algo.

Zack Williams (1):
      "any" instead of "and"

Zhu Qun-Ying (1):
      Fixed address family test error for AF_UNIX in BIO_ADDR_make

choury (1):
      fix invalid use of incomplete type X509_STORE_CTX

daurnimator (1):
      Fix incorrect function name in BN_bn2bin manpage

edelangh (1):
      use OSSLzu instead of lu format for size_t display

enkore (1):
      EVP docs: chacha20, chacha20-poly1305

ganesh (3):
      Fixed the return code of RAND_query_egd_bytes when connect fails.
      Fixed the return code for RAND_egd_bytes.
      RAND_egd_bytes: No need to check RAND_status on connection error.

gbrl (1):
      bndiv fuzzer: limit the size of the input to avoid timeout

hongliang (1):
      coding style: remove extra whitespace charactor

jamercee (2):
      Adapt BIO_new_accept() to call BIO_set_accept_name()
      Fixed typo

jrmarino (1):
      Fix support for DragonFly BSD

klemens (2):
      spelling fixes, just comments and readme.
      fixing too optimistic typo-fix

komainu8 (1):
      Modify type of variable in OPENSSL_cpuid_setup function

letrhee-nsr (1):
      Add ARIA 32-bit implementation

lolyonok (1):
      Fix nid assignment in ASN1_STRING_TABLE_add

lrns (1):
      Change req_check_len error message, it also accepts 20 bytes, but states 'less than' in the error message

marko asplund (1):
      Allow CA.pl script user to pass extra arguments to openssl command

multics (1):
      Update rsautl.pod for typo

nickthetait (1):
      Create troubleshooting subsection in INSTALL file

pass86 (1):
      Fix spelling: adroideabi -> androideabi

xemdetia (2):
      Fix man3 reference to CRYPTO_secure_used
      Document default section and library configuration

-----------------------------------------------------------------------

From builds at travis-ci.org  Fri Feb 16 03:30:28 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 16 Feb 2018 03:30:28 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16401 (master - 6475b64)
In-Reply-To: <openssl/openssl+342092626+errored@travis-ci.org>
Message-ID: <5a8650381e823_43fce2157466089243b@2c8a3fbb-3423-4fce-a9d4-548aaff69c2d.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16401
Status: Errored

Duration: 33 minutes and 24 seconds
Commit: 6475b64 (master)
Author: Richard Levitte
Message: AIX: make sure that the arflags value includes the command letter (r)

In previous OpenSSL versions, this letter was part of the make
variable AR.  However, following the usual convention (read: GNU),
this letter is supposed to be part of ARFLAGS.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5386)

View the changeset: https://github.com/openssl/openssl/compare/0d502c3511ab...6475b6497808

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/342092626?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180216/c8677218/attachment.html>

From builds at travis-ci.org  Fri Feb 16 03:41:31 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 16 Feb 2018 03:41:31 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16402 (master - 51cf8e0)
In-Reply-To: <openssl/openssl+342096081+errored@travis-ci.org>
Message-ID: <5a8652eb77887_43fce3de6b09090405@2c8a3fbb-3423-4fce-a9d4-548aaff69c2d.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16402
Status: Errored

Duration: 36 minutes and 9 seconds
Commit: 51cf8e0 (master)
Author: Richard Levitte
Message: Configure: move down the treatment of seed sources

Most of all, this is so it doesn't output mysterious text when we're
treating the phony config targets LISH, HASH and TABLE

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5383)

View the changeset: https://github.com/openssl/openssl/compare/6475b6497808...51cf8e0b50f6

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/342096081?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180216/58130e8c/attachment.html>

From matthias.st.pierre at ncp-e.com  Fri Feb 16 12:14:10 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Fri, 16 Feb 2018 12:14:10 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518783250.542759.19354.nullmailer@dev.openssl.org>

The branch master has been updated
       via  856f231bd230e7f8bd3a2183a32d39093ab4ddc3 (commit)
      from  51cf8e0b50f677581bff2694942b690bbff630b7 (commit)


- Log -----------------------------------------------------------------
commit 856f231bd230e7f8bd3a2183a32d39093ab4ddc3
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Fri Feb 16 10:26:55 2018 +0100

    pkeyparam.pod: correct the command description
    
    The description was probably copy&pasted from pkey.pod and forgotten.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5390)

-----------------------------------------------------------------------

Summary of changes:
 doc/man1/pkeyparam.pod | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/man1/pkeyparam.pod b/doc/man1/pkeyparam.pod
index 1179705..70478c5 100644
--- a/doc/man1/pkeyparam.pod
+++ b/doc/man1/pkeyparam.pod
@@ -18,8 +18,8 @@ B<openssl> B<pkeyparam>
 
 =head1 DESCRIPTION
 
-The B<pkey> command processes public or private keys. They can be converted
-between various forms and their components printed out.
+The B<pkeyparam> command processes public key algorithm parameters.
+They can be checked for correctness and their components printed out.
 
 =head1 OPTIONS
 

From builds at travis-ci.org  Fri Feb 16 12:45:51 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 16 Feb 2018 12:45:51 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16408 (master - 856f231)
In-Reply-To: <openssl/openssl+342314044+passed@travis-ci.org>
Message-ID: <5a86d27edf1eb_43f88d3c1559815392af@09b046d5-76c4-40f0-8e3a-1e8ca68ec823.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16408
Status: Passed

Duration: 30 minutes and 30 seconds
Commit: 856f231 (master)
Author: Dr. Matthias St. Pierre
Message: pkeyparam.pod: correct the command description

The description was probably copy&pasted from pkey.pod and forgotten.

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5390)

View the changeset: https://github.com/openssl/openssl/compare/51cf8e0b50f6...856f231bd230

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/342314044?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180216/beedda85/attachment.html>

From no-reply at appveyor.com  Fri Feb 16 16:26:56 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 16 Feb 2018 16:26:56 +0000
Subject: [openssl-commits] Build failed: openssl master.15703
Message-ID: <20180216162656.1.529ADC534E57FEEF@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180216/1291a1ca/attachment.html>

From no-reply at appveyor.com  Fri Feb 16 17:06:29 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 16 Feb 2018 17:06:29 +0000
Subject: [openssl-commits] Build failed: openssl master.15704
Message-ID: <20180216170629.1.660CCDF6408FB42A@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180216/2e3ce48b/attachment.html>

From no-reply at appveyor.com  Fri Feb 16 17:32:34 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 16 Feb 2018 17:32:34 +0000
Subject: [openssl-commits] Build completed: openssl master.15705
Message-ID: <20180216173234.1.AB7BF4564DE804E0@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180216/67b803c3/attachment.html>

From levitte at openssl.org  Sun Feb 18 02:30:18 2018
From: levitte at openssl.org (Richard Levitte)
Date: Sun, 18 Feb 2018 02:30:18 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518921018.122448.14107.nullmailer@dev.openssl.org>

The branch master has been updated
       via  1d2c6b7d4a5cb00d43a8b57e028923f8592f49c7 (commit)
      from  856f231bd230e7f8bd3a2183a32d39093ab4ddc3 (commit)


- Log -----------------------------------------------------------------
commit 1d2c6b7d4a5cb00d43a8b57e028923f8592f49c7
Author: Richard Levitte <levitte at openssl.org>
Date:   Sat Feb 17 07:33:17 2018 +0100

    Configure: avoid uninit data in configdata.pm
    
    Fixes #5394
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5399)

-----------------------------------------------------------------------

Summary of changes:
 Configure | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Configure b/Configure
index 9835cf0..0cc554f 100755
--- a/Configure
+++ b/Configure
@@ -2382,7 +2382,8 @@ _____
         my $longest2 = 0;
         foreach my $what (@disablables) {
             $longest = length($what) if $longest < length($what);
-            $longest2 = length($disabled{$what}) if $longest2 < length($disabled{$what});
+            $longest2 = length($disabled{$what})
+                if $disabled{$what} && $longest2 < length($disabled{$what});
         }
         print "\nEnabled features:\n\n";
         foreach my $what (@disablables) {

From scan-admin at coverity.com  Sun Feb 18 07:24:38 2018
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Sun, 18 Feb 2018 07:24:38 +0000 (UTC)
Subject: [openssl-commits] Coverity Scan: Analysis completed for
	openssl/openssl
Message-ID: <5a892a345c4f0_2d87c00f1c534ce@node1.mail>


    Your request for analysis of openssl/openssl has been completed successfully.
    The results are available at https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRakUl6QyjujEohY7rPpoYUEcf-2B75FkFkxwwFKGZV8c1xA-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I3E252yLgvY2y1oSqAUM3SqT0CfFTTLKHmGSZbG-2Frqu1oZ-2FMs8jzFV6CCH-2FacZ6OgqQkx408-2Faxi3Q8AJOWAbIWOpVaKIwVveRHEIC0xlDC77872OvphmffzmnCnbroJW54NoyJDCUhLutdjNspPM7JZtLYgBQbypCrXhTHZT7iwvE0v6HH3u2xysXbZpDT8Aw-3D

    Build ID: 201475

    Analysis Summary:
       New defects found: 2
       Defects eliminated: 9

    If you have difficulty understanding any defects, email us at scan-admin at coverity.com,
    or post your question to StackOverflow
    at https://u2389337.ct.sendgrid.net/wf/click?upn=OgIsEqWzmIl4S-2FzEUMxLXL-2BukuZt9UUdRZhgmgzAKchwAzH1nH3073xDEXNRgHN6q227lMNIWoOb8ZgSjAjKcg-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I3E252yLgvY2y1oSqAUM3SqT0CfFTTLKHmGSZbG-2Frqu1nh3yEX0RoEv4AsijbkA3kkvwlA9NndsWKQqha5mJ9kxtYaZzGtuVkh2AFqGvnrazRe6yCTVle3cJX-2BtNBtGEgdkQ9t3iYcTkhqDwmLu61Do17E4mlvVxFXRXcoS3d0C9eo5rkevtay0bsWrJwYJHRg-3D

From scan-admin at coverity.com  Sun Feb 18 07:45:32 2018
From: scan-admin at coverity.com (scan-admin at coverity.com)
Date: Sun, 18 Feb 2018 07:45:32 +0000 (UTC)
Subject: [openssl-commits] Coverity Scan: Analysis completed for
	OpenSSL-1.0.2
Message-ID: <5a892f1c146ad_3a9bc00f1c534d6@node1.mail>


    Your request for analysis of OpenSSL-1.0.2 has been completed successfully.
    The results are available at https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRakUl6QyjujEohY7rPpoYUEeuRTZVWU4ku8PUBnVPw8PQ-3D-3D_19DGMz38yO7VfzGQuXkecdlEmzBoDG4v8Dvyanv-2F1I3muRwGx10hOpDV6ec1U32LWDUdOWwQiVVEZb7Uvx6-2BG4RPssA7nb-2FhBfRLQc9ThaIsziYLRL1iCTPehqZSeZa34YwPqWCxhm032C0fUzhMJ-2BEuefiPufKg537QO9U1bYasJmWUkboj8NyMiyyoSrBYQYrLdp3bOJTAeGvFZ2y8L6egg6J3ZXTRZVpYiq3YWZ8-3D

    Build ID: 201477

    Analysis Summary:
       New defects found: 0
       Defects eliminated: 0


From no-reply at appveyor.com  Sun Feb 18 17:57:56 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 18 Feb 2018 17:57:56 +0000
Subject: [openssl-commits] Build failed: openssl master.15711
Message-ID: <20180218175756.1.043460B34B539F45@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180218/7e1631fb/attachment.html>

From no-reply at appveyor.com  Sun Feb 18 18:43:40 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 18 Feb 2018 18:43:40 +0000
Subject: [openssl-commits] Build completed: openssl master.15712
Message-ID: <20180218184340.1.0ECD7B25BF4203FB@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180218/7d57db2b/attachment.html>

From no-reply at appveyor.com  Sun Feb 18 19:08:38 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 18 Feb 2018 19:08:38 +0000
Subject: [openssl-commits] Build failed: openssl master.15713
Message-ID: <20180218190838.1.27713460D5982AB9@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180218/9782a8da/attachment.html>

From no-reply at appveyor.com  Sun Feb 18 19:32:40 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 18 Feb 2018 19:32:40 +0000
Subject: [openssl-commits] Build completed: openssl master.15714
Message-ID: <20180218193240.1.068E062DA3355B51@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180218/43a450d9/attachment.html>

From paul.dale at oracle.com  Sun Feb 18 22:43:21 2018
From: paul.dale at oracle.com (paul.dale at oracle.com)
Date: Sun, 18 Feb 2018 22:43:21 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1518993801.045705.10301.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b45497c3371e218867d7ad43da8f99c34a32f635 (commit)
      from  1d2c6b7d4a5cb00d43a8b57e028923f8592f49c7 (commit)


- Log -----------------------------------------------------------------
commit b45497c3371e218867d7ad43da8f99c34a32f635
Author: Pauli <paul.dale at oracle.com>
Date:   Fri Feb 16 11:24:51 2018 +1000

    Avoid mentioning uninitialised contexts.
    
    All contexts must be initialised because they can only be created using the _new() calls.
    Remove the outdated mentions of uninitialised and initialised contexts.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5388)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/EVP_DigestInit.pod  | 14 ++++++--------
 doc/man3/EVP_EncryptInit.pod |  3 +--
 2 files changed, 7 insertions(+), 10 deletions(-)

diff --git a/doc/man3/EVP_DigestInit.pod b/doc/man3/EVP_DigestInit.pod
index b2eec52..ad5001e 100644
--- a/doc/man3/EVP_DigestInit.pod
+++ b/doc/man3/EVP_DigestInit.pod
@@ -57,7 +57,7 @@ and should be used instead of the cipher-specific functions.
 
 =item EVP_MD_CTX_new()
 
-Allocates, initializes and returns a digest context.
+Allocates and returns a digest context.
 
 =item EVP_MD_CTX_reset()
 
@@ -75,9 +75,8 @@ Performs digest-specific control actions on context B<ctx>.
 =item EVP_DigestInit_ex()
 
 Sets up digest context B<ctx> to use a digest B<type> from ENGINE B<impl>.
-B<ctx> must be initialized before calling this function. B<type> will typically
-be supplied by a function such as EVP_sha1().  If B<impl> is NULL then the
-default implementation of digest B<type> is used.
+B<type> will typically be supplied by a function such as EVP_sha1().  If
+B<impl> is NULL then the default implementation of digest B<type> is used.
 
 =item EVP_DigestUpdate()
 
@@ -105,13 +104,12 @@ made, but EVP_DigestInit_ex() can be called to initialize a new operation.
 
 Can be used to copy the message digest state from B<in> to B<out>. This is
 useful if large amounts of data are to be hashed which only differ in the last
-few bytes. B<out> must be initialized before calling this function.
+few bytes.
 
 =item EVP_DigestInit()
 
-Behaves in the same way as EVP_DigestInit_ex() except the passed context B<ctx>
-does not have to be initialized, and it always uses the default digest
-implementation.
+Behaves in the same way as EVP_DigestInit_ex() except it always uses the
+default digest implementation.
 
 =item EVP_DigestFinal()
 
diff --git a/doc/man3/EVP_EncryptInit.pod b/doc/man3/EVP_EncryptInit.pod
index 29ebf74..0dc4c13 100644
--- a/doc/man3/EVP_EncryptInit.pod
+++ b/doc/man3/EVP_EncryptInit.pod
@@ -190,8 +190,7 @@ series of calls.
 
 EVP_EncryptInit(), EVP_DecryptInit() and EVP_CipherInit() behave in a
 similar way to EVP_EncryptInit_ex(), EVP_DecryptInit_ex() and
-EVP_CipherInit_ex() except the B<ctx> parameter does not need to be
-initialized and they always use the default cipher implementation.
+EVP_CipherInit_ex() except they always use the default cipher implementation.
 
 EVP_EncryptFinal(), EVP_DecryptFinal() and EVP_CipherFinal() are
 identical to EVP_EncryptFinal_ex(), EVP_DecryptFinal_ex() and

From no-reply at appveyor.com  Mon Feb 19 09:17:58 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 19 Feb 2018 09:17:58 +0000
Subject: [openssl-commits] Build failed: openssl master.15720
Message-ID: <20180219091758.1.760A965CC556D7FD@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180219/71532590/attachment.html>

From matt at openssl.org  Mon Feb 19 11:19:59 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 19 Feb 2018 11:19:59 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519039199.212506.21124.nullmailer@dev.openssl.org>

The branch master has been updated
       via  62930b2ecf6ce308fd2ae9ee3e34ace8ba698aac (commit)
       via  5845f7de8165f35829e49acd41f6a2fc3698f221 (commit)
      from  b45497c3371e218867d7ad43da8f99c34a32f635 (commit)


- Log -----------------------------------------------------------------
commit 62930b2ecf6ce308fd2ae9ee3e34ace8ba698aac
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 16 23:34:32 2018 +0100

    test_ssl_old: avoid empty strings for flags
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5396)

commit 5845f7de8165f35829e49acd41f6a2fc3698f221
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 16 23:28:31 2018 +0100

    OpenSSL::Test::quotify: put quotes around empty arguments
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5396)

-----------------------------------------------------------------------

Summary of changes:
 test/recipes/80-test_ssl_old.t | 3 ++-
 util/perl/OpenSSL/Test.pm      | 7 ++++---
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/test/recipes/80-test_ssl_old.t b/test/recipes/80-test_ssl_old.t
index 543ca96..f89779c 100644
--- a/test/recipes/80-test_ssl_old.t
+++ b/test/recipes/80-test_ssl_old.t
@@ -450,7 +450,8 @@ sub testssl {
                     note "*****SKIPPING $protocol $cipher";
                     ok(1);
                 } else {
-                    ok(run(test([@ssltest, @exkeys, "-cipher", $cipher, $flag])),
+                    ok(run(test([@ssltest, @exkeys, "-cipher", $cipher,
+                                 $flag || ()])),
                     "Testing $cipher");
                 }
             }
diff --git a/util/perl/OpenSSL/Test.pm b/util/perl/OpenSSL/Test.pm
index e363a48..ad77896 100644
--- a/util/perl/OpenSSL/Test.pm
+++ b/util/perl/OpenSSL/Test.pm
@@ -760,12 +760,13 @@ I<This must never ever be done on VMS.>
 sub quotify {
     # Unix setup (default if nothing else is mentioned)
     my $arg_formatter =
-	sub { $_ = shift; /\s|[\{\}\\\$\[\]\*\?\|\&:;<>]/ ? "'$_'" : $_ };
+	sub { $_ = shift;
+	      ($_ eq '' || /\s|[\{\}\\\$\[\]\*\?\|\&:;<>]/) ? "'$_'" : $_ };
 
     if ( $^O eq "VMS") {	# VMS setup
 	$arg_formatter = sub {
 	    $_ = shift;
-	    if (/\s|["[:upper:]]/) {
+	    if ($_ eq '' || /\s|["[:upper:]]/) {
 		s/"/""/g;
 		'"'.$_.'"';
 	    } else {
@@ -775,7 +776,7 @@ sub quotify {
     } elsif ( $^O eq "MSWin32") { # MSWin setup
 	$arg_formatter = sub {
 	    $_ = shift;
-	    if (/\s|["\|\&\*\;<>]/) {
+	    if ($_ eq '' || /\s|["\|\&\*\;<>]/) {
 		s/(["\\])/\\$1/g;
 		'"'.$_.'"';
 	    } else {

From matt at openssl.org  Mon Feb 19 11:20:18 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 19 Feb 2018 11:20:18 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519039218.556409.22331.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  c99eaf2135c9c3ff5a00dccd00d332c0c5351776 (commit)
       via  d615c80a4fe12a983380106bd3b4c6b34bf8d982 (commit)
      from  ed1306451f702aae629ccc39d826a96836b3b069 (commit)


- Log -----------------------------------------------------------------
commit c99eaf2135c9c3ff5a00dccd00d332c0c5351776
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 16 23:34:32 2018 +0100

    test_ssl_old: avoid empty strings for flags
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5396)
    
    (cherry picked from commit 62930b2ecf6ce308fd2ae9ee3e34ace8ba698aac)

commit d615c80a4fe12a983380106bd3b4c6b34bf8d982
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 16 23:28:31 2018 +0100

    OpenSSL::Test::quotify: put quotes around empty arguments
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5396)
    
    (cherry picked from commit 5845f7de8165f35829e49acd41f6a2fc3698f221)

-----------------------------------------------------------------------

Summary of changes:
 test/recipes/80-test_ssl_old.t | 3 ++-
 util/perl/OpenSSL/Test.pm      | 7 ++++---
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/test/recipes/80-test_ssl_old.t b/test/recipes/80-test_ssl_old.t
index 97ef821..bafb796 100644
--- a/test/recipes/80-test_ssl_old.t
+++ b/test/recipes/80-test_ssl_old.t
@@ -476,7 +476,8 @@ sub testssl {
                     note "*****SKIPPING $protocol $cipher";
                     ok(1);
                 } else {
-                    ok(run(test([@ssltest, @exkeys, "-cipher", $cipher, $flag])),
+                    ok(run(test([@ssltest, @exkeys, "-cipher", $cipher,
+                                 $flag || ()])),
                        "Testing $cipher");
                }
 	    }
diff --git a/util/perl/OpenSSL/Test.pm b/util/perl/OpenSSL/Test.pm
index f8805a6..eacbd68 100644
--- a/util/perl/OpenSSL/Test.pm
+++ b/util/perl/OpenSSL/Test.pm
@@ -667,12 +667,13 @@ I<This must never ever be done on VMS.>
 sub quotify {
     # Unix setup (default if nothing else is mentioned)
     my $arg_formatter =
-	sub { $_ = shift; /\s|[\{\}\\\$\[\]\*\?\|\&:;<>]/ ? "'$_'" : $_ };
+	sub { $_ = shift;
+	      ($_ eq '' || /\s|[\{\}\\\$\[\]\*\?\|\&:;<>]/) ? "'$_'" : $_ };
 
     if ( $^O eq "VMS") {	# VMS setup
 	$arg_formatter = sub {
 	    $_ = shift;
-	    if (/\s|["[:upper:]]/) {
+	    if ($_ eq '' || /\s|["[:upper:]]/) {
 		s/"/""/g;
 		'"'.$_.'"';
 	    } else {
@@ -682,7 +683,7 @@ sub quotify {
     } elsif ( $^O eq "MSWin32") { # MSWin setup
 	$arg_formatter = sub {
 	    $_ = shift;
-	    if (/\s|["\|\&\*\;<>]/) {
+	    if ($_ eq '' || /\s|["\|\&\*\;<>]/) {
 		s/(["\\])/\\$1/g;
 		'"'.$_.'"';
 	    } else {

From no-reply at appveyor.com  Mon Feb 19 12:21:03 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 19 Feb 2018 12:21:03 +0000
Subject: [openssl-commits] Build completed: openssl master.15721
Message-ID: <20180219122103.1.F3DA9ABA3776D279@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180219/5a6bf65c/attachment-0001.html>

From appro at openssl.org  Mon Feb 19 13:17:04 2018
From: appro at openssl.org (Andy Polyakov)
Date: Mon, 19 Feb 2018 13:17:04 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519046224.118988.8597.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b761ff4e77f74f91d8694964039af24ead3c2467 (commit)
      from  62930b2ecf6ce308fd2ae9ee3e34ace8ba698aac (commit)


- Log -----------------------------------------------------------------
commit b761ff4e77f74f91d8694964039af24ead3c2467
Author: Andy Polyakov <appro at openssl.org>
Date:   Tue Feb 13 21:59:15 2018 +0100

    sha/asm/keccak1600-armv8.pl: add hardware-assisted ARMv8.2 subroutines.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5358)

-----------------------------------------------------------------------

Summary of changes:
 crypto/sha/asm/keccak1600-armv8.pl | 364 ++++++++++++++++++++++++++++++++++++-
 1 file changed, 356 insertions(+), 8 deletions(-)

diff --git a/crypto/sha/asm/keccak1600-armv8.pl b/crypto/sha/asm/keccak1600-armv8.pl
index 5e4cf77..a32b8ba 100755
--- a/crypto/sha/asm/keccak1600-armv8.pl
+++ b/crypto/sha/asm/keccak1600-armv8.pl
@@ -1,5 +1,5 @@
 #!/usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
@@ -26,6 +26,19 @@
 # it gets compensated by availability of rotate. Not to forget that
 # most processors achieve higher issue rate with scalar instructions.
 #
+# February 2018.
+#
+# Add hardware-assisted ARMv8.2 implementation. It's KECCAK_1X_ALT
+# variant with register permutation/rotation twist that allows to
+# eliminate copies to temporary registers. If you look closely you'll
+# notice that it uses only one lane of vector registers. The new
+# instructions effectively facilitate parallel hashing, which we don't
+# support [yet?]. But lowest-level core procedure is prepared for it.
+# The inner round is 67 [vector] instructions, so it's not actually
+# obvious that it will provide performance improvement [in serial
+# hash] as long as vector instructions issue rate is limited to 1 per
+# cycle...
+#
 ######################################################################
 # Numbers are cycles per processed byte.
 #
@@ -56,12 +69,6 @@ die "can't locate arm-xlate.pl";
 open OUT,"| \"$^X\" $xlate $flavour $output";
 *STDOUT=*OUT;
 
-my @A = map([ "x$_", "x".($_+1), "x".($_+2), "x".($_+3), "x".($_+4) ],
-            (0, 5, 10, 15, 20));
-   $A[3][3] = "x25"; # x18 is reserved
-
-my @C = map("x$_", (26,27,28,30));
-
 my @rhotates = ([  0,  1, 62, 28, 27 ],
                 [ 36, 44,  6, 55, 20 ],
                 [  3, 10, 43, 25, 39 ],
@@ -101,7 +108,15 @@ iotas:
 	.quad	0x0000000080000001
 	.quad	0x8000000080008008
 .size	iotas,.-iotas
+___
+								{{{
+my @A = map([ "x$_", "x".($_+1), "x".($_+2), "x".($_+3), "x".($_+4) ],
+            (0, 5, 10, 15, 20));
+   $A[3][3] = "x25"; # x18 is reserved
+
+my @C = map("x$_", (26,27,28,30));
 
+$code.=<<___;
 .type	KeccakF1600_int,%function
 .align	5
 KeccakF1600_int:
@@ -510,9 +525,342 @@ SHA3_squeeze:
 	ldp	x29,x30,[sp],#48
 	ret
 .size	SHA3_squeeze,.-SHA3_squeeze
+___
+}								}}}
+								{{{
+my @A = map([ "v".$_.".16b", "v".($_+1).".16b", "v".($_+2).".16b",
+                             "v".($_+3).".16b", "v".($_+4).".16b" ],
+            (0, 5, 10, 15, 20));
+
+my @C = map("v$_.16b", (25..31));
+
+$code.=<<___;
+.type	KeccakF1600_ce,%function
+.align	5
+KeccakF1600_ce:
+	mov	x9,#6
+	adr	x10,iotas
+	b	.Loop_ce
+.align	4
+.Loop_ce:
+___
+for($i=0; $i<4; $i++) {
+$code.=<<___;
+	////////////////////////////////////////////////// Theta
+	eor3	$C[0],$A[0][0],$A[1][0],$A[2][0]
+	eor3	$C[1],$A[0][1],$A[1][1],$A[2][1]
+	eor3	$C[2],$A[0][2],$A[1][2],$A[2][2]
+	eor3	$C[3],$A[0][3],$A[1][3],$A[2][3]
+	eor3	$C[4],$A[0][4],$A[1][4],$A[2][4]
+	eor3	$C[0],$C[0],   $A[3][0],$A[4][0]
+	eor3	$C[1],$C[1],   $A[3][1],$A[4][1]
+	eor3	$C[2],$C[2],   $A[3][2],$A[4][2]
+	eor3	$C[3],$C[3],   $A[3][3],$A[4][3]
+	eor3	$C[4],$C[4],   $A[3][4],$A[4][4]
+
+	rax1	$C[5],$C[0],$C[2]			// D[1]
+	rax1	$C[6],$C[1],$C[3]			// D[2]
+	rax1	$C[2],$C[2],$C[4]			// D[3]
+	rax1	$C[3],$C[3],$C[0]			// D[4]
+	rax1	$C[4],$C[4],$C[1]			// D[0]
+
+	////////////////////////////////////////////////// Theta+Rho+Pi
+	xar	$C[0],   $A[1][1],$C[5],#64-$rhotates[1][1]	// C[0]=A[0][1]
+	xar	$A[1][1],$A[1][4],$C[3],#64-$rhotates[1][4]
+	xar	$A[1][4],$A[4][2],$C[6],#64-$rhotates[4][2]
+	xar	$A[4][2],$A[2][4],$C[3],#64-$rhotates[2][4]
+	xar	$A[2][4],$A[4][0],$C[4],#64-$rhotates[4][0]
+
+	xar	$A[4][0],$A[0][2],$C[6],#64-$rhotates[0][2]
+
+	xar	$A[0][2],$A[2][2],$C[6],#64-$rhotates[2][2]
+	xar	$A[2][2],$A[2][3],$C[2],#64-$rhotates[2][3]
+	xar	$A[2][3],$A[3][4],$C[3],#64-$rhotates[3][4]
+	xar	$A[3][4],$A[4][3],$C[2],#64-$rhotates[4][3]
+	xar	$A[4][3],$A[3][0],$C[4],#64-$rhotates[3][0]
+
+	xar	$A[3][0],$A[0][4],$C[3],#64-$rhotates[0][4]
+
+	eor	$A[0][0],$A[0][0],$C[4]
+	ldr	x11,[x10],#8
+
+	xar	$C[1]   ,$A[3][3],$C[2],#64-$rhotates[3][3]	// C[1]=A[0][3]
+	xar	$A[3][3],$A[3][2],$C[6],#64-$rhotates[3][2]
+	xar	$A[3][2],$A[2][1],$C[5],#64-$rhotates[2][1]
+	xar	$A[2][1],$A[1][2],$C[6],#64-$rhotates[1][2]
+	xar	$A[1][2],$A[2][0],$C[4],#64-$rhotates[2][0]
+
+	xar	$A[2][0],$A[0][1],$C[5],#64-$rhotates[0][1]	// *
+
+	xar	$A[0][4],$A[4][4],$C[3],#64-$rhotates[4][4]
+	xar	$A[4][4],$A[4][1],$C[5],#64-$rhotates[4][1]
+	xar	$A[4][1],$A[1][3],$C[2],#64-$rhotates[1][3]
+	xar	$A[1][3],$A[3][1],$C[5],#64-$rhotates[3][1]
+	xar	$A[3][1],$A[1][0],$C[4],#64-$rhotates[1][0]
+
+	xar	$A[1][0],$A[0][3],$C[2],#64-$rhotates[0][3]	// *
+
+	////////////////////////////////////////////////// Chi+Iota
+	dup	$C[6],x11				// borrow C[6]
+	bcax	$C[3],   $A[0][0],$A[0][2],$C[0]	// *
+	bcax	$A[0][1],$C[0],   $C[1],   $A[0][2]	// *
+	bcax	$A[0][2],$A[0][2],$A[0][4],$C[1]
+	bcax	$A[0][3],$C[1],   $A[0][0],$A[0][4]
+	bcax	$A[0][4],$A[0][4],$C[0],   $A[0][0]
+
+	bcax	$C[0],   $A[1][0],$A[1][2],$A[1][1]	// *
+	bcax	$C[1],   $A[1][1],$A[1][3],$A[1][2]	// *
+	bcax	$A[1][2],$A[1][2],$A[1][4],$A[1][3]
+	bcax	$A[1][3],$A[1][3],$A[1][0],$A[1][4]
+	bcax	$A[1][4],$A[1][4],$A[1][1],$A[1][0]
+
+	eor	$A[0][0],$C[3],$C[6]			// Iota
+
+	bcax	$C[2],   $A[2][0],$A[2][2],$A[2][1]	// *
+	bcax	$C[3],   $A[2][1],$A[2][3],$A[2][2]	// *
+	bcax	$A[2][2],$A[2][2],$A[2][4],$A[2][3]
+	bcax	$A[2][3],$A[2][3],$A[2][0],$A[2][4]
+	bcax	$A[2][4],$A[2][4],$A[2][1],$A[2][0]
+
+	bcax	$A[2][0],$A[3][0],$A[3][2],$A[3][1]	// *
+	bcax	$A[2][1],$A[3][1],$A[3][3],$A[3][2]	// *
+	bcax	$A[3][2],$A[3][2],$A[3][4],$A[3][3]
+	bcax	$A[3][3],$A[3][3],$A[3][0],$A[3][4]
+	bcax	$A[3][4],$A[3][4],$A[3][1],$A[3][0]
+
+	bcax	$A[3][0],$A[4][0],$A[4][2],$A[4][1]	// *
+	bcax	$A[3][1],$A[4][1],$A[4][3],$A[4][2]	// *
+	bcax	$A[4][2],$A[4][2],$A[4][4],$A[4][3]
+	bcax	$A[4][3],$A[4][3],$A[4][0],$A[4][4]
+	bcax	$A[4][4],$A[4][4],$A[4][1],$A[4][0]
+___
+	($A[1][0],$A[1][1], $C[0],$C[1])
+	=  ($C[0],$C[1],    $A[1][0],$A[1][1]);
+	($A[2][0],$A[2][1], $A[3][0],$A[3][1], $A[4][0],$A[4][1], $C[2],$C[3])
+	=  ($C[2],$C[3],    $A[2][0],$A[2][1], $A[3][0],$A[3][1], $A[4][0],$A[4][1]);
+}
+$code.=<<___;
+	subs	x9,x9,#1
+	bne	.Loop_ce
+
+	ret
+.size	KeccakF1600_ce,.-KeccakF1600_ce
+
+.type	KeccakF1600_cext,%function
+.align	5
+KeccakF1600_cext:
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#16]		// per ABI requirement
+	stp	d10,d11,[sp,#32]
+	stp	d12,d13,[sp,#48]
+	stp	d14,d15,[sp,#64]
+___
+for($i=0; $i<24; $i+=2) {		# load A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	ldp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	ldr	d24,[x0,#8*$i]
+	bl	KeccakF1600_ce
+	ldr	x30,[sp,#8]
+___
+for($i=0; $i<24; $i+=2) {		# store A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	stp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	str	d24,[x0,#8*$i]
+
+	ldp	d8,d9,[sp,#16]
+	ldp	d10,d11,[sp,#32]
+	ldp	d12,d13,[sp,#48]
+	ldp	d14,d15,[sp,#64]
+	ldr	x29,[sp],#80
+	ret
+.size	KeccakF1600_cext,.-KeccakF1600_cext
+___
+
+{
+my ($ctx,$inp,$len,$bsz) = map("x$_",(0..3));
+
+$code.=<<___;
+.globl	SHA3_absorb_cext
+.type	SHA3_absorb_cext,%function
+.align	5
+SHA3_absorb_cext:
+	stp	x29,x30,[sp,#-80]!
+	add	x29,sp,#0
+	stp	d8,d9,[sp,#16]		// per ABI requirement
+	stp	d10,d11,[sp,#32]
+	stp	d12,d13,[sp,#48]
+	stp	d14,d15,[sp,#64]
+___
+for($i=0; $i<24; $i+=2) {		# load A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	ldp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	ldr	d24,[x0,#8*$i]
+	b	.Loop_absorb_ce
+
+.align	4
+.Loop_absorb_ce:
+	subs	$len,$len,$bsz		// len - bsz
+	blo	.Labsorbed_ce
+___
+for (my $i=0; $i<24; $i+=2) {
+my $j = $i+1;
+$code.=<<___;
+	ldr	d31,[$inp],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev64	v31.16b,v31.16b
+#endif
+	eor	$A[$i/5][$i%5],$A[$i/5][$i%5],v31.16b
+	cmp	$bsz,#8*($i+2)
+	blo	.Lprocess_block_ce
+	ldr	d31,[$inp],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev	v31.16b,v31.16b
+#endif
+	eor	$A[$j/5][$j%5],$A[$j/5][$j%5],v31.16b
+	beq	.Lprocess_block_ce
+___
+}
+$code.=<<___;
+	ldr	d31,[$inp],#8		// *inp++
+#ifdef	__AARCH64EB__
+	rev	v31.16b,v31.16b
+#endif
+	eor	$A[4][4],$A[4][4],v31.16b
+
+.Lprocess_block_ce:
+
+	bl	KeccakF1600_ce
+
+	b	.Loop_absorb_ce
+
+.align	4
+.Labsorbed_ce:
+___
+for($i=0; $i<24; $i+=2) {		# store A[5][5]
+my $j=$i+1;
+$code.=<<___;
+	stp	d$i,d$j,[x0,#8*$i]
+___
+}
+$code.=<<___;
+	str	d24,[x0,#8*$i]
+	add	x0,$len,$bsz		// return value
+
+	ldp	d8,d9,[sp,#16]
+	ldp	d10,d11,[sp,#32]
+	ldp	d12,d13,[sp,#48]
+	ldp	d14,d15,[sp,#64]
+	ldp	x29,x30,[sp],#80
+	ret
+.size	SHA3_absorb_cext,.-SHA3_absorb_cext
+___
+}
+{
+my ($ctx,$out,$len,$bsz) = map("x$_",(0..3));
+$code.=<<___;
+.globl	SHA3_squeeze_cext
+.type	SHA3_squeeze_cext,%function
+.align	5
+SHA3_squeeze_cext:
+	stp	x29,x30,[sp,#-16]!
+	add	x29,sp,#0
+	mov	x9,$ctx
+	mov	x10,$bsz
+
+.Loop_squeeze_ce:
+	ldr	x4,[x9],#8
+	cmp	$len,#8
+	blo	.Lsqueeze_tail_ce
+#ifdef	__AARCH64EB__
+	rev	x4,x4
+#endif
+	str	x4,[$out],#8
+	beq	.Lsqueeze_done_ce
+
+	sub	$len,$len,#8
+	subs	x10,x10,#8
+	bhi	.Loop_squeeze_ce
+
+	bl	KeccakF1600_cext
+	ldr	x30,[sp,#8]
+	mov	x9,$ctx
+	mov	x10,$bsz
+	b	.Loop_squeeze_ce
+
+.align	4
+.Lsqueeze_tail_ce:
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+	lsr	x4,x4,#8
+	subs	$len,$len,#1
+	beq	.Lsqueeze_done_ce
+	strb	w4,[$out],#1
+
+.Lsqueeze_done_ce:
+	ldr	x29,[sp],#16
+	ret
+.size	SHA3_squeeze_cext,.-SHA3_squeeze_cext
+___
+}								}}}
+$code.=<<___;
 .asciz	"Keccak-1600 absorb and squeeze for ARMv8, CRYPTOGAMS by <appro\@openssl.org>"
 ___
+
+{   my  %opcode = (
+	"rax1"	=> 0xce608c00,	"eor3"	=> 0xce000000,
+	"bcax"	=> 0xce200000,	"xar"	=> 0xce800000	);
+
+    sub unsha3 {
+	my ($mnemonic,$arg)=@_;
+
+	$arg =~ m/[qv]([0-9]+)[^,]*,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv]([0-9]+)[^,]*(?:,\s*[qv#]([0-9\-]+))?)?/
+	&&
+	sprintf ".inst\t0x%08x\t//%s %s",
+			$opcode{$mnemonic}|$1|($2<<5)|($3<<16)|(eval($4)<<10),
+			$mnemonic,$arg;
+    }
+}
+
+foreach(split("\n",$code)) {
+
+	s/\`([^\`]*)\`/eval($1)/ge;
+
+	m/\bdup\b/ and s/\.16b/.2d/g	or
+	s/\b(eor3|rax1|xar|bcax)\s+(v.*)/unsha3($1,$2)/ge;
+
+	print $_,"\n";
 }
 
-print $code;
 close STDOUT;

From matt at openssl.org  Mon Feb 19 14:09:20 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 19 Feb 2018 14:09:20 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519049360.106013.28670.nullmailer@dev.openssl.org>

The branch master has been updated
       via  5f7470df83cb179f793026a5950c1446866c9cab (commit)
      from  b761ff4e77f74f91d8694964039af24ead3c2467 (commit)


- Log -----------------------------------------------------------------
commit 5f7470df83cb179f793026a5950c1446866c9cab
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 15 14:29:45 2018 +0000

    The record version for ClientHello2 should be TLS1.2
    
    According to TLSv1.3 draft-24 the record version for ClientHello2 should
    be TLS1.2, and not TLS1.0 as it is now.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5377)

-----------------------------------------------------------------------

Summary of changes:
 ssl/record/rec_layer_s3.c | 4 +++-
 test/tls13ccstest.c       | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/ssl/record/rec_layer_s3.c b/ssl/record/rec_layer_s3.c
index ea70258..0953d2b 100644
--- a/ssl/record/rec_layer_s3.c
+++ b/ssl/record/rec_layer_s3.c
@@ -839,7 +839,9 @@ int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
          * and record version number > TLS 1.0
          */
         if (SSL_get_state(s) == TLS_ST_CW_CLNT_HELLO
-            && !s->renegotiate && TLS1_get_version(s) > TLS1_VERSION)
+                && !s->renegotiate
+                && TLS1_get_version(s) > TLS1_VERSION
+                && s->hello_retry_request == SSL_HRR_NONE)
             version = TLS1_VERSION;
 
         maxcomplen = pipelens[j];
diff --git a/test/tls13ccstest.c b/test/tls13ccstest.c
index c51c2ce..db9bfe5 100644
--- a/test/tls13ccstest.c
+++ b/test/tls13ccstest.c
@@ -118,7 +118,7 @@ static int watchccs_write(BIO *bio, const char *in, int inl)
                 return 0;
             if (msgtype == SSL3_MT_CLIENT_HELLO) {
                 chseen++;
-                expectedrecvers = TLS1_VERSION;
+
                 /*
                  * Skip legacy_version (2 bytes) and Random (32 bytes) to read
                  * session_id.
@@ -128,6 +128,8 @@ static int watchccs_write(BIO *bio, const char *in, int inl)
                     return 0;
 
                 if (chseen == 1) {
+                    expectedrecvers = TLS1_VERSION;
+
                     /* Save the session id for later */
                     chsessidlen = PACKET_remaining(&sessionid);
                     if (!PACKET_copy_bytes(&sessionid, chsessid, chsessidlen))

From no-reply at appveyor.com  Mon Feb 19 16:46:53 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 19 Feb 2018 16:46:53 +0000
Subject: [openssl-commits] Build failed: openssl master.15728
Message-ID: <20180219164653.1.D0A8EDBB992D7D83@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180219/0dc3376b/attachment.html>

From no-reply at appveyor.com  Mon Feb 19 18:05:30 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 19 Feb 2018 18:05:30 +0000
Subject: [openssl-commits] Build completed: openssl
	OpenSSL_1_0_2-stable.15729
Message-ID: <20180219180530.1.805174D7F46BB0AE@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180219/67f0c237/attachment.html>

From rsalz at openssl.org  Mon Feb 19 21:01:41 2018
From: rsalz at openssl.org (Rich Salz)
Date: Mon, 19 Feb 2018 21:01:41 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519074101.574654.2833.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b383aa2081467e8d49c3362d295da7bd5cb4e1d8 (commit)
      from  5f7470df83cb179f793026a5950c1446866c9cab (commit)


- Log -----------------------------------------------------------------
commit b383aa2081467e8d49c3362d295da7bd5cb4e1d8
Author: Massimiliano Pala <director at openca.org>
Date:   Mon Feb 19 15:47:02 2018 -0500

      Add X509_get0_authority_key_id() function
    
      This function makes it easier to retrieve a reference to the
      authority key identifier (akid->keyid) inside a certificate.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5271)

-----------------------------------------------------------------------

Summary of changes:
 crypto/x509v3/v3_purp.c               | 7 +++++++
 doc/man3/X509_get_extension_flags.pod | 6 ++++++
 include/openssl/x509v3.h              | 1 +
 util/libcrypto.num                    | 1 +
 4 files changed, 15 insertions(+)

diff --git a/crypto/x509v3/v3_purp.c b/crypto/x509v3/v3_purp.c
index 2ff8854..6c78041 100644
--- a/crypto/x509v3/v3_purp.c
+++ b/crypto/x509v3/v3_purp.c
@@ -848,6 +848,13 @@ const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x)
     return x->skid;
 }
 
+const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, -1);
+    return (x->akid != NULL ? x->akid->keyid : NULL);
+}
+
 long X509_get_pathlen(X509 *x)
 {
     /* Called for side effect of caching extensions */
diff --git a/doc/man3/X509_get_extension_flags.pod b/doc/man3/X509_get_extension_flags.pod
index 9aec918..fc4ebbb 100644
--- a/doc/man3/X509_get_extension_flags.pod
+++ b/doc/man3/X509_get_extension_flags.pod
@@ -3,6 +3,7 @@
 =head1 NAME
 
 X509_get0_subject_key_id,
+X509_get0_authority_key_id,
 X509_get_pathlen,
 X509_get_extension_flags,
 X509_get_key_usage,
@@ -20,6 +21,7 @@ X509_get_proxy_pathlen - retrieve certificate extension data
  uint32_t X509_get_key_usage(X509 *x);
  uint32_t X509_get_extended_key_usage(X509 *x);
  const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
+ const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x);
  void X509_set_proxy_flag(X509 *x);
  void X509_set_proxy_pathlen(int l);
  long X509_get_proxy_pathlen(X509 *x);
@@ -109,6 +111,10 @@ X509_get0_subject_key_id() returns an internal pointer to the subject key
 identifier of B<x> as an B<ASN1_OCTET_STRING> or B<NULL> if the extension
 is not present or cannot be parsed.
 
+X509_get0_authority_key_id() returns an internal pointer to the authority key
+identifier of B<x> as an B<ASN1_OCTET_STRING> or B<NULL> if the extension
+is not present or cannot be parsed.
+
 X509_set_proxy_flag() marks the certificate with the B<EXFLAG_PROXY> flag.
 This is for the users who need to mark non-RFC3820 proxy certificates as
 such, as OpenSSL only detects RFC3820 compliant ones.
diff --git a/include/openssl/x509v3.h b/include/openssl/x509v3.h
index 94f5561..fe1791c 100644
--- a/include/openssl/x509v3.h
+++ b/include/openssl/x509v3.h
@@ -660,6 +660,7 @@ uint32_t X509_get_extension_flags(X509 *x);
 uint32_t X509_get_key_usage(X509 *x);
 uint32_t X509_get_extended_key_usage(X509 *x);
 const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
+const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x);
 
 int X509_PURPOSE_get_count(void);
 X509_PURPOSE *X509_PURPOSE_get0(int idx);
diff --git a/util/libcrypto.num b/util/libcrypto.num
index 5456063..b1dd6a0 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -4503,3 +4503,4 @@ OCSP_basic_sign_ctx                     4444	1_1_1	EXIST::FUNCTION:OCSP
 RAND_DRBG_bytes                         4445	1_1_1	EXIST::FUNCTION:
 RAND_DRBG_secure_new                    4446	1_1_1	EXIST::FUNCTION:
 OSSL_STORE_vctrl                        4447	1_1_1	EXIST::FUNCTION:
+X509_get0_authority_key_id              4448	1_1_0h	EXIST::FUNCTION:

From rsalz at openssl.org  Mon Feb 19 21:09:41 2018
From: rsalz at openssl.org (Rich Salz)
Date: Mon, 19 Feb 2018 21:09:41 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519074581.920265.12115.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  058f12b7266a21f04893e88d8240b81e7c51fcd5 (commit)
      from  c99eaf2135c9c3ff5a00dccd00d332c0c5351776 (commit)


- Log -----------------------------------------------------------------
commit 058f12b7266a21f04893e88d8240b81e7c51fcd5
Author: Massimiliano Pala <director at openca.org>
Date:   Mon Feb 19 15:47:02 2018 -0500

    Add X509_get0_authority_key_id() function
    
    This function makes it easier to retrieve a reference to the
    authority key identifier (akid->keyid) inside a certificate.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5271)
    
    (cherry picked from commit b383aa2081467e8d49c3362d295da7bd5cb4e1d8)

-----------------------------------------------------------------------

Summary of changes:
 crypto/x509v3/v3_purp.c                 | 7 +++++++
 doc/crypto/X509_get_extension_flags.pod | 6 ++++++
 include/openssl/x509v3.h                | 1 +
 util/libcrypto.num                      | 1 +
 4 files changed, 15 insertions(+)

diff --git a/crypto/x509v3/v3_purp.c b/crypto/x509v3/v3_purp.c
index fa5c425..9030d53 100644
--- a/crypto/x509v3/v3_purp.c
+++ b/crypto/x509v3/v3_purp.c
@@ -847,6 +847,13 @@ const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x)
     return x->skid;
 }
 
+const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x)
+{
+    /* Call for side-effect of computing hash and caching extensions */
+    X509_check_purpose(x, -1, -1);
+    return (x->akid != NULL ? x->akid->keyid : NULL);
+}
+
 long X509_get_pathlen(X509 *x)
 {
     /* Called for side effect of caching extensions */
diff --git a/doc/crypto/X509_get_extension_flags.pod b/doc/crypto/X509_get_extension_flags.pod
index c78e457..4a25560 100644
--- a/doc/crypto/X509_get_extension_flags.pod
+++ b/doc/crypto/X509_get_extension_flags.pod
@@ -3,6 +3,7 @@
 =head1 NAME
 
 X509_get0_subject_key_id,
+X509_get0_authority_key_id,
 X509_get_pathlen,
 X509_get_extension_flags,
 X509_get_key_usage,
@@ -20,6 +21,7 @@ X509_get_proxy_pathlen - retrieve certificate extension data
    uint32_t X509_get_key_usage(X509 *x);
    uint32_t X509_get_extended_key_usage(X509 *x);
    const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
+   const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x);
    void X509_set_proxy_flag(X509 *x);
    void X509_set_proxy_pathlen(int l);
    long X509_get_proxy_pathlen(X509 *x);
@@ -109,6 +111,10 @@ X509_get0_subject_key_id() returns an internal pointer to the subject key
 identifier of B<x> as an B<ASN1_OCTET_STRING> or B<NULL> if the extension
 is not present or cannot be parsed.
 
+X509_get0_authority_key_id() returns an internal pointer to the authority key
+identifier of B<x> as an B<ASN1_OCTET_STRING> or B<NULL> if the extension
+is not present or cannot be parsed.
+
 X509_set_proxy_flag() marks the certificate with the B<EXFLAG_PROXY> flag.
 This is for the users who need to mark non-RFC3820 proxy certificates as
 such, as OpenSSL only detects RFC3820 compliant ones.
diff --git a/include/openssl/x509v3.h b/include/openssl/x509v3.h
index 533a38d..bc23307 100644
--- a/include/openssl/x509v3.h
+++ b/include/openssl/x509v3.h
@@ -658,6 +658,7 @@ uint32_t X509_get_extension_flags(X509 *x);
 uint32_t X509_get_key_usage(X509 *x);
 uint32_t X509_get_extended_key_usage(X509 *x);
 const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
+const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x);
 
 int X509_PURPOSE_get_count(void);
 X509_PURPOSE *X509_PURPOSE_get0(int idx);
diff --git a/util/libcrypto.num b/util/libcrypto.num
index 05c66e9..8414d97 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -4233,3 +4233,4 @@ ZINT64_it                               4215	1_1_0f	EXIST:EXPORT_VAR_AS_FUNCTION
 CRYPTO_secure_clear_free                4315	1_1_0g	EXIST::FUNCTION:
 EVP_PKEY_set1_engine                    4347	1_1_0g	EXIST::FUNCTION:ENGINE
 OCSP_resp_get0_signer                   4374	1_1_0h	EXIST::FUNCTION:OCSP
+X509_get0_authority_key_id              4448	1_1_0h	EXIST::FUNCTION:

From builds at travis-ci.org  Mon Feb 19 21:35:18 2018
From: builds at travis-ci.org (Travis CI)
Date: Mon, 19 Feb 2018 21:35:18 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16438
	(OpenSSL_1_1_0-stable - 058f12b)
In-Reply-To: <openssl/openssl+343556607+errored@travis-ci.org>
Message-ID: <5a8b431631b95_43fe8c46209fc43994b@da9dcd59-45db-4ebb-a59a-e3a3db5235e5.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16438
Status: Errored

Duration: 22 minutes and 57 seconds
Commit: 058f12b (OpenSSL_1_1_0-stable)
Author: Massimiliano Pala
Message: Add X509_get0_authority_key_id() function

This function makes it easier to retrieve a reference to the
authority key identifier (akid->keyid) inside a certificate.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5271)

(cherry picked from commit b383aa2081467e8d49c3362d295da7bd5cb4e1d8)

View the changeset: https://github.com/openssl/openssl/compare/c99eaf2135c9...058f12b7266a

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/343556607?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180219/21e5d996/attachment.html>

From appro at openssl.org  Mon Feb 19 22:04:24 2018
From: appro at openssl.org (Andy Polyakov)
Date: Mon, 19 Feb 2018 22:04:24 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519077864.825539.965.nullmailer@dev.openssl.org>

The branch master has been updated
       via  ebc0168384e9bbc29c02b85adb01036609769761 (commit)
      from  b383aa2081467e8d49c3362d295da7bd5cb4e1d8 (commit)


- Log -----------------------------------------------------------------
commit ebc0168384e9bbc29c02b85adb01036609769761
Author: John Hughes <john at atlantech.com>
Date:   Thu Feb 8 10:49:02 2018 +0100

    Add BIO_bind function to bind local address for a socket.
    
    Add -bind option to s_client application to allow specification of
    local address for connection.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5272)

-----------------------------------------------------------------------

Summary of changes:
 apps/s_apps.h            |  1 +
 apps/s_client.c          | 26 +++++++++++++++---
 apps/s_socket.c          | 49 ++++++++++++++++++++++++++++++++++
 crypto/bio/b_sock2.c     | 69 +++++++++++++++++++++++++++++++++++-------------
 crypto/bio/bio_err.c     |  1 +
 crypto/err/openssl.txt   |  1 +
 doc/man1/s_client.pod    | 10 +++++++
 doc/man3/BIO_connect.pod | 11 +++++---
 include/openssl/bio.h    |  1 +
 include/openssl/bioerr.h |  1 +
 util/libcrypto.num       |  1 +
 11 files changed, 145 insertions(+), 26 deletions(-)

diff --git a/apps/s_apps.h b/apps/s_apps.h
index 6ee2b0c..fbffd86 100644
--- a/apps/s_apps.h
+++ b/apps/s_apps.h
@@ -38,6 +38,7 @@ int ssl_print_groups(BIO *out, SSL *s, int noshared);
 #endif
 int ssl_print_tmp_key(BIO *out, SSL *s);
 int init_client(int *sock, const char *host, const char *port,
+                const char *bindhost, const char *bindport,
                 int family, int type, int protocol);
 int should_retry(int i);
 
diff --git a/apps/s_client.c b/apps/s_client.c
index eca0a4a..a319d21 100644
--- a/apps/s_client.c
+++ b/apps/s_client.c
@@ -570,7 +570,7 @@ static int tlsa_import_rrset(SSL *con, STACK_OF(OPENSSL_STRING) *rrset)
 
 typedef enum OPTION_choice {
     OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
-    OPT_4, OPT_6, OPT_HOST, OPT_PORT, OPT_CONNECT, OPT_UNIX,
+    OPT_4, OPT_6, OPT_HOST, OPT_PORT, OPT_CONNECT, OPT_BIND, OPT_UNIX,
     OPT_XMPPHOST, OPT_VERIFY, OPT_NAMEOPT,
     OPT_CERT, OPT_CRL, OPT_CRL_DOWNLOAD, OPT_SESS_OUT, OPT_SESS_IN,
     OPT_CERTFORM, OPT_CRLFORM, OPT_VERIFY_RET_ERROR, OPT_VERIFY_QUIET,
@@ -612,6 +612,7 @@ const OPTIONS s_client_options[] = {
     {"port", OPT_PORT, 'p', "Use -connect instead"},
     {"connect", OPT_CONNECT, 's',
      "TCP/IP where to connect (default is :" PORT ")"},
+    {"bind", OPT_BIND, 's', "bind local address for connection"},
     {"proxy", OPT_PROXY, 's',
      "Connect to via specified proxy to the real server"},
 #ifdef AF_UNIX
@@ -884,10 +885,11 @@ int s_client_main(int argc, char **argv)
     const SSL_METHOD *meth = TLS_client_method();
     const char *CApath = NULL, *CAfile = NULL;
     char *cbuf = NULL, *sbuf = NULL;
-    char *mbuf = NULL, *proxystr = NULL, *connectstr = NULL;
+    char *mbuf = NULL, *proxystr = NULL, *connectstr = NULL, *bindstr = NULL;
     char *cert_file = NULL, *key_file = NULL, *chain_file = NULL;
     char *chCApath = NULL, *chCAfile = NULL, *host = NULL;
     char *port = OPENSSL_strdup(PORT);
+    char *bindhost = NULL, *bindport = NULL;
     char *passarg = NULL, *pass = NULL, *vfyCApath = NULL, *vfyCAfile = NULL;
     char *ReqCAfile = NULL;
     char *sess_in = NULL, *crl_file = NULL, *p;
@@ -1053,6 +1055,9 @@ int s_client_main(int argc, char **argv)
             connect_type = use_inet;
             freeandcopy(&connectstr, opt_arg());
             break;
+        case OPT_BIND:
+            freeandcopy(&bindstr, opt_arg());
+            break;
         case OPT_PROXY:
             proxystr = opt_arg();
             starttls_proto = PROTO_CONNECT;
@@ -1554,6 +1559,18 @@ int s_client_main(int argc, char **argv)
         }
     }
 
+    if (bindstr != NULL) {
+        int res;
+        res = BIO_parse_hostserv(bindstr, &bindhost, &bindport,
+                                 BIO_PARSE_PRIO_HOST);
+        if (!res) {
+            BIO_printf(bio_err,
+                       "%s: -bind argument parameter malformed or ambiguous\n",
+                       prog);
+            goto end;
+        }
+    }
+
 #ifdef AF_UNIX
     if (socket_family == AF_UNIX && socket_type != SOCK_STREAM) {
         BIO_printf(bio_err,
@@ -1976,8 +1993,8 @@ int s_client_main(int argc, char **argv)
     }
 
  re_start:
-    if (init_client(&s, host, port, socket_family, socket_type, protocol)
-            == 0) {
+    if (init_client(&s, host, port, bindhost, bindport, socket_family,
+                    socket_type, protocol) == 0) {
         BIO_printf(bio_err, "connect:errno=%d\n", get_last_socket_error());
         BIO_closesocket(s);
         goto end;
@@ -3082,6 +3099,7 @@ int s_client_main(int argc, char **argv)
     OPENSSL_free(srp_arg.srppassin);
 #endif
     OPENSSL_free(connectstr);
+    OPENSSL_free(bindstr);
     OPENSSL_free(host);
     OPENSSL_free(port);
     X509_VERIFY_PARAM_free(vpm);
diff --git a/apps/s_socket.c b/apps/s_socket.c
index 485b419..4b82011 100644
--- a/apps/s_socket.c
+++ b/apps/s_socket.c
@@ -43,6 +43,8 @@ BIO_ADDR *ourpeer = NULL;
  * @sock: pointer to storage of resulting socket.
  * @host: the host name or path (for AF_UNIX) to connect to.
  * @port: the port to connect to (ignored for AF_UNIX).
+ * @bindhost: source host or path (for AF_UNIX).
+ * @bindport: source port (ignored for AF_UNIX).
  * @family: desired socket family, may be AF_INET, AF_INET6, AF_UNIX or
  *  AF_UNSPEC
  * @type: socket type, must be SOCK_STREAM or SOCK_DGRAM
@@ -58,10 +60,14 @@ BIO_ADDR *ourpeer = NULL;
  * Returns 1 on success, 0 on failure.
  */
 int init_client(int *sock, const char *host, const char *port,
+                const char *bindhost, const char *bindport,
                 int family, int type, int protocol)
 {
     BIO_ADDRINFO *res = NULL;
+    BIO_ADDRINFO *bindaddr = NULL;
     const BIO_ADDRINFO *ai = NULL;
+    const BIO_ADDRINFO *bi = NULL;
+    int found = 0;
     int ret;
 
     if (BIO_sock_init() != 1)
@@ -74,6 +80,15 @@ int init_client(int *sock, const char *host, const char *port,
         return 0;
     }
 
+    if (bindhost != NULL || bindport != NULL) {
+        ret = BIO_lookup_ex(bindhost, bindport, BIO_LOOKUP_CLIENT,
+                            family, type, protocol, &bindaddr);
+        if (ret == 0) {
+            ERR_print_errors (bio_err);
+            goto out;
+        }
+    }
+
     ret = 0;
     for (ai = res; ai != NULL; ai = BIO_ADDRINFO_next(ai)) {
         /* Admittedly, these checks are quite paranoid, we should not get
@@ -85,6 +100,16 @@ int init_client(int *sock, const char *host, const char *port,
                        && (protocol == 0
                            || protocol == BIO_ADDRINFO_protocol(ai)));
 
+        if (bindaddr != NULL) {
+            for (bi = bindaddr; bi != NULL; bi = BIO_ADDRINFO_next(bi)) {
+                if (BIO_ADDRINFO_family(bi) == BIO_ADDRINFO_family(ai))
+                    break;
+            }
+            if (bi == NULL)
+                continue;
+            ++found;
+        }
+
         *sock = BIO_socket(BIO_ADDRINFO_family(ai), BIO_ADDRINFO_socktype(ai),
                            BIO_ADDRINFO_protocol(ai), 0);
         if (*sock == INVALID_SOCKET) {
@@ -94,6 +119,15 @@ int init_client(int *sock, const char *host, const char *port,
             continue;
         }
 
+        if (bi != NULL) {
+            if (!BIO_bind(*sock, BIO_ADDRINFO_address(bi),
+                          BIO_SOCK_REUSEADDR)) {
+                BIO_closesocket(*sock);
+                *sock = INVALID_SOCKET;
+                break;
+            }
+        }
+
 #ifndef OPENSSL_NO_SCTP
         if (protocol == IPPROTO_SCTP) {
             /*
@@ -123,12 +157,27 @@ int init_client(int *sock, const char *host, const char *port,
     }
 
     if (*sock == INVALID_SOCKET) {
+        if (bindaddr != NULL && !found) {
+            BIO_printf(bio_err, "Can't bind %saddress for %s%s%s\n",
+                       BIO_ADDRINFO_family(res) == AF_INET6 ? "IPv6 " :
+                       BIO_ADDRINFO_family(res) == AF_INET ? "IPv4 " :
+                       BIO_ADDRINFO_family(res) == AF_UNIX ? "unix " : "",
+                       bindhost != NULL ? bindhost : "",
+                       bindport != NULL ? ":" : "",
+                       bindport != NULL ? bindport : "");
+            ERR_clear_error();
+            ret = 0;
+        }
         ERR_print_errors(bio_err);
     } else {
         /* Remove any stale errors from previous connection attempts */
         ERR_clear_error();
         ret = 1;
     }
+out:
+    if (bindaddr != NULL) {
+        BIO_ADDRINFO_free (bindaddr);
+    }
     BIO_ADDRINFO_free(res);
     return ret;
 }
diff --git a/crypto/bio/b_sock2.c b/crypto/bio/b_sock2.c
index 12a3b36..823732d 100644
--- a/crypto/bio/b_sock2.c
+++ b/crypto/bio/b_sock2.c
@@ -116,6 +116,55 @@ int BIO_connect(int sock, const BIO_ADDR *addr, int options)
 }
 
 /*-
+ * BIO_bind - bind socket to address
+ * @sock: the socket to set
+ * @addr: local address to bind to
+ * @options: BIO socket options
+ *
+ * Binds to the address using the given socket and options.
+ *
+ * Options can be a combination of the following:
+ * - BIO_SOCK_REUSEADDR: Try to reuse the address and port combination
+ *   for a recently closed port.
+ *
+ * When restarting the program it could be that the port is still in use.  If
+ * you set to BIO_SOCK_REUSEADDR option it will try to reuse the port anyway.
+ * It's recommended that you use this.
+ */
+int BIO_bind(int sock, const BIO_ADDR *addr, int options)
+{
+    int on = 1;
+
+    if (sock == -1) {
+        BIOerr(BIO_F_BIO_BIND, BIO_R_INVALID_SOCKET);
+        return 0;
+    }
+
+# ifndef OPENSSL_SYS_WINDOWS
+    /*
+     * SO_REUSEADDR has different behavior on Windows than on
+     * other operating systems, don't set it there.
+     */
+    if (options & BIO_SOCK_REUSEADDR) {
+        if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR,
+                       (const void *)&on, sizeof(on)) != 0) {
+            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
+            BIOerr(BIO_F_BIO_BIND, BIO_R_UNABLE_TO_REUSEADDR);
+            return 0;
+        }
+    }
+# endif
+
+    if (bind(sock, BIO_ADDR_sockaddr(addr), BIO_ADDR_sockaddr_size(addr)) != 0) {
+        SYSerr(SYS_F_BIND, get_last_socket_error());
+        BIOerr(BIO_F_BIO_BIND, BIO_R_UNABLE_TO_BIND_SOCKET);
+        return 0;
+    }
+
+    return 1;
+}
+
+/*-
  * BIO_listen - Creates a listen socket
  * @sock: the socket to listen with
  * @addr: local address to bind to
@@ -174,21 +223,6 @@ int BIO_listen(int sock, const BIO_ADDR *addr, int options)
     if (!BIO_socket_nbio(sock, (options & BIO_SOCK_NONBLOCK) != 0))
         return 0;
 
-# ifndef OPENSSL_SYS_WINDOWS
-    /*
-     * SO_REUSEADDR has different behavior on Windows than on
-     * other operating systems, don't set it there.
-     */
-    if (options & BIO_SOCK_REUSEADDR) {
-        if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR,
-                       (const void *)&on, sizeof(on)) != 0) {
-            SYSerr(SYS_F_SETSOCKOPT, get_last_socket_error());
-            BIOerr(BIO_F_BIO_LISTEN, BIO_R_UNABLE_TO_REUSEADDR);
-            return 0;
-        }
-    }
-# endif
-
     if (options & BIO_SOCK_KEEPALIVE) {
         if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE,
                        (const void *)&on, sizeof(on)) != 0) {
@@ -223,11 +257,8 @@ int BIO_listen(int sock, const BIO_ADDR *addr, int options)
     }
 # endif
 
-    if (bind(sock, BIO_ADDR_sockaddr(addr), BIO_ADDR_sockaddr_size(addr)) != 0) {
-        SYSerr(SYS_F_BIND, get_last_socket_error());
-        BIOerr(BIO_F_BIO_LISTEN, BIO_R_UNABLE_TO_BIND_SOCKET);
+    if (!BIO_bind(sock, addr, options))
         return 0;
-    }
 
     if (socktype != SOCK_DGRAM && listen(sock, MAX_LISTEN) == -1) {
         SYSerr(SYS_F_LISTEN, get_last_socket_error());
diff --git a/crypto/bio/bio_err.c b/crypto/bio/bio_err.c
index 20f3aa1..594013d 100644
--- a/crypto/bio/bio_err.c
+++ b/crypto/bio/bio_err.c
@@ -19,6 +19,7 @@ static const ERR_STRING_DATA BIO_str_functs[] = {
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_ACCEPT, 0), "BIO_accept"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_ACCEPT_EX, 0), "BIO_accept_ex"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_ADDR_NEW, 0), "BIO_ADDR_new"},
+    {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_BIND, 0), "BIO_bind"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_CALLBACK_CTRL, 0), "BIO_callback_ctrl"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_CONNECT, 0), "BIO_connect"},
     {ERR_PACK(ERR_LIB_BIO, BIO_F_BIO_CTRL, 0), "BIO_ctrl"},
diff --git a/crypto/err/openssl.txt b/crypto/err/openssl.txt
index 43001be..9b8a03a 100644
--- a/crypto/err/openssl.txt
+++ b/crypto/err/openssl.txt
@@ -116,6 +116,7 @@ BIO_F_ADDR_STRINGS:134:addr_strings
 BIO_F_BIO_ACCEPT:101:BIO_accept
 BIO_F_BIO_ACCEPT_EX:137:BIO_accept_ex
 BIO_F_BIO_ADDR_NEW:144:BIO_ADDR_new
+BIO_F_BIO_BIND:147:BIO_bind
 BIO_F_BIO_CALLBACK_CTRL:131:BIO_callback_ctrl
 BIO_F_BIO_CONNECT:138:BIO_connect
 BIO_F_BIO_CTRL:103:BIO_ctrl
diff --git a/doc/man1/s_client.pod b/doc/man1/s_client.pod
index 8d8eac7..6e47140 100644
--- a/doc/man1/s_client.pod
+++ b/doc/man1/s_client.pod
@@ -10,6 +10,7 @@ s_client - SSL/TLS client program
 B<openssl> B<s_client>
 [B<-help>]
 [B<-connect host:port>]
+[B<-bind host:port>]
 [B<-proxy host:port>]
 [B<-unix path>]
 [B<-4>]
@@ -147,6 +148,12 @@ select the host and port using the optional target positional argument instead.
 If neither this nor the target positonal argument are specified then an attempt
 is made to connect to the local host on port 4433.
 
+=item B<-bind host:port>]
+
+This specifies the host address and or port to bind as the source for the
+connection.  For Unix-domain sockets the port is ignored and the host is
+used as the source socket address.
+
 =item B<-proxy host:port>
 
 When used with the B<-connect> flag, the program uses the host and port
@@ -686,6 +693,9 @@ applications should B<not> do this as it makes them vulnerable to a MITM
 attack. This behaviour can be changed by with the B<-verify_return_error>
 option: any verify errors are then returned aborting the handshake.
 
+The B<-bind> option may be useful if the server or a firewall requires
+connections to come from some particular address and or port.
+
 =head1 BUGS
 
 Because this program has a lot of options and also because some of the
diff --git a/doc/man3/BIO_connect.pod b/doc/man3/BIO_connect.pod
index 91dcab1..454832e 100644
--- a/doc/man3/BIO_connect.pod
+++ b/doc/man3/BIO_connect.pod
@@ -2,7 +2,7 @@
 
 =head1 NAME
 
-BIO_socket, BIO_connect, BIO_listen, BIO_accept_ex, BIO_closesocket - BIO
+BIO_socket, BIO_bind, BIO_connect, BIO_listen, BIO_accept_ex, BIO_closesocket - BIO
 socket communication setup routines
 
 =head1 SYNOPSIS
@@ -10,6 +10,7 @@ socket communication setup routines
  #include <openssl/bio.h>
 
  int BIO_socket(int domain, int socktype, int protocol, int options);
+ int BIO_bind(int sock, const BIO_ADDR *addr, int options);
  int BIO_connect(int sock, const BIO_ADDR *addr, int options);
  int BIO_listen(int sock, const BIO_ADDR *addr, int options);
  int BIO_accept_ex(int accept_sock, BIO_ADDR *peer, int options);
@@ -21,6 +22,10 @@ BIO_socket() creates a socket in the domain B<domain>, of type
 B<socktype> and B<protocol>.  Socket B<options> are currently unused,
 but is present for future use.
 
+BIO_bind() binds the source address and service to a socket and
+may be useful before calling BIO_connect().  The options may include
+B<BIO_SOCK_REUSADDR>, which is described in L</FLAGS> below.
+
 BIO_connect() connects B<sock> to the address and service given by
 B<addr>.  Connection B<options> may be zero or any combination of
 B<BIO_SOCK_KEEPALIVE>, B<BIO_SOCK_NONBLOCK> and B<BIO_SOCK_NODELAY>.
@@ -81,7 +86,7 @@ BIO_socket() returns the socket number on success or B<INVALID_SOCKET>
 (-1) on error.  When an error has occurred, the OpenSSL error stack
 will hold the error data and errno has the system error.
 
-BIO_connect() and BIO_listen() return 1 on success or 0 on error.
+BIO_bind(), BIO_connect() and BIO_listen() return 1 on success or 0 on error.
 When an error has occurred, the OpenSSL error stack will hold the error
 data and errno has the system error.
 
@@ -102,7 +107,7 @@ L<BIO_ADDR(3)>
 
 =head1 COPYRIGHT
 
-Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/bio.h b/include/openssl/bio.h
index cffcd3d..c6f57f2 100644
--- a/include/openssl/bio.h
+++ b/include/openssl/bio.h
@@ -709,6 +709,7 @@ int BIO_sock_info(int sock,
 
 int BIO_socket(int domain, int socktype, int protocol, int options);
 int BIO_connect(int sock, const BIO_ADDR *addr, int options);
+int BIO_bind(int sock, const BIO_ADDR *addr, int options);
 int BIO_listen(int sock, const BIO_ADDR *addr, int options);
 int BIO_accept_ex(int accept_sock, BIO_ADDR *addr, int options);
 int BIO_closesocket(int sock);
diff --git a/include/openssl/bioerr.h b/include/openssl/bioerr.h
index 7a552d6..4931c1d 100644
--- a/include/openssl/bioerr.h
+++ b/include/openssl/bioerr.h
@@ -24,6 +24,7 @@ int ERR_load_BIO_strings(void);
 # define BIO_F_BIO_ACCEPT                                 101
 # define BIO_F_BIO_ACCEPT_EX                              137
 # define BIO_F_BIO_ADDR_NEW                               144
+# define BIO_F_BIO_BIND                                   147
 # define BIO_F_BIO_CALLBACK_CTRL                          131
 # define BIO_F_BIO_CONNECT                                138
 # define BIO_F_BIO_CTRL                                   103
diff --git a/util/libcrypto.num b/util/libcrypto.num
index b1dd6a0..0049eab 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -4504,3 +4504,4 @@ RAND_DRBG_bytes                         4445	1_1_1	EXIST::FUNCTION:
 RAND_DRBG_secure_new                    4446	1_1_1	EXIST::FUNCTION:
 OSSL_STORE_vctrl                        4447	1_1_1	EXIST::FUNCTION:
 X509_get0_authority_key_id              4448	1_1_0h	EXIST::FUNCTION:
+BIO_bind                                4449	1_1_1	EXIST::FUNCTION:SOCK

From no-reply at appveyor.com  Tue Feb 20 13:05:54 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 20 Feb 2018 13:05:54 +0000
Subject: [openssl-commits] Build failed: openssl master.15741
Message-ID: <20180220130554.1.A27F0704E06BC6AE@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180220/a069e9ed/attachment.html>

From matt at openssl.org  Tue Feb 20 13:07:06 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 20 Feb 2018 13:07:06 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519132027.001592.24652.nullmailer@dev.openssl.org>

The branch master has been updated
       via  59bf467ccaff27ab2ffe7243b3a334675fea8ed9 (commit)
       via  dd8796c551f236ee89a1b9068247c428ae818f21 (commit)
       via  a4e6dd819a1c395fb8e884c5a8f29ed0551ec13e (commit)
       via  18985129eb57d0bc162d376a5c0a160c22351999 (commit)
       via  8e32ec7a568b377f7fbcbee6b1bcf7fd8bbe2e88 (commit)
       via  cb5ed32665ffb3a5ed6f631343d9c5302eaf7478 (commit)
       via  909c68ae7253a718993cf9d89412e4c9b403eb9b (commit)
       via  c1f15b76ef13823ddd1f006ba75128c369eca067 (commit)
       via  9c9d6ff41c7cbd6c551bd056bf9cc06390de8290 (commit)
       via  a7232276fef30a63070fd9dbb53d3820d3761d5b (commit)
       via  434149c7448729b5c20d61c359bd9dc367cf5604 (commit)
       via  2abe3cad23a12fb868ca469b8ce9a9f335c11e9d (commit)
       via  53ef3252fa3f7008feaf5696d24a05bef0efa676 (commit)
       via  9fd3c858b4ceea7ff0b176c7c0a2438475898598 (commit)
       via  68b20c00659c16b65ae2fcfc120e1407a68de04f (commit)
       via  04ebd4e17e1de9a5baa65113cce57817b05ae6f8 (commit)
       via  e4118223184e0ea421fdfa38868c3f2ed16648c9 (commit)
       via  756b5af71c50a5e66525b06daa4372b44cf1040e (commit)
       via  8855a9a110d4a8e6b9f2ea3a7cd9f591a30cbc11 (commit)
       via  f918504f91780225d8edc9ac0d4308e005b4d078 (commit)
       via  e0fa632420adaab5f0c5fb1db7190dcbd7637a18 (commit)
       via  7114a5a17a1231e5607e94d67c7b4e4a0ce0b115 (commit)
       via  bd74eae1be6c11bbfa95542daa7d59d461464853 (commit)
       via  7e492f3372ed83af074a63d5920f13de7e3455b6 (commit)
       via  0cdcdacc337005e08a906b2e07d4e44e3ee48138 (commit)
       via  dd03fd7e3ada3a9ebdb83fc5e4164b2a404e6c62 (commit)
       via  06d72c2c64ecad9b36a0bf26139320e569bd05e3 (commit)
       via  f53c77648ce1c4d8455dfb1a5c1ecf4239fe8e87 (commit)
       via  bce310816138f2fbd3f34450a48136132d968e58 (commit)
       via  7d9e120fea8481449b376af7fa9bbe7995a75f35 (commit)
       via  e54f5f397acde3798f2666c0fb3e797c50d571cf (commit)
       via  2c9def25b1948f5f231b1acc15c060d9c2264816 (commit)
       via  52a9587c78a135ff200b8c92f8aad7ea1bd4de75 (commit)
       via  575d5afcf8852056c996117578bcaade7ad21fef (commit)
       via  db90b274a169b8027ef10fa9c5235c9698667215 (commit)
       via  001a0934191319f4617c02eb2b2857dd80e7464a (commit)
       via  b47758dbd06e960e5775db5de39b6e9b31c09097 (commit)
       via  aeeef83cb536216a414287dee1f424265283da88 (commit)
       via  35b7c85a22a214512da9ce374ba7ff737b52f49d (commit)
       via  8d55f844b08199e0ac6a2ddc501de39f3237c5e9 (commit)
       via  205fd6388175704bd7597dbfb571c84f868ce6da (commit)
       via  1308e022e1a62214b9e7f8ec92ca7045e70af3a2 (commit)
       via  22bcc9cb7fbd1433924bd9738cb34f9dfbb35c91 (commit)
       via  ff489fb4725b120a9da05d339595bc7799c53802 (commit)
       via  094c071cbf3bca19eee73ccb8dfc0f7498f5d8e1 (commit)
       via  bb6e60adc5d02d903cbbf92cf7b1d7152fb4a905 (commit)
       via  c4148792cf643677839096742ee090fe6f4ac910 (commit)
       via  2799d385406077f6726cd91c9edb18be12d37dc3 (commit)
       via  a242839f75846b9bfa87774a85090651d2ec17c6 (commit)
       via  c255e98ed2f6cc686b8fd22eba403fb2e828b5cd (commit)
       via  6ea71cbabe96c5382dda51553271570535d94cbd (commit)
       via  4ea41daa073af5fb45dacc7e380248e3a108c63d (commit)
       via  6207b1398327720a94d706e6e35bd7dc7eb8351a (commit)
       via  ca42a316a80d661752618cf3ec5143c2b92f3125 (commit)
       via  91f2e94c00a6c11170791d2803e9a49ab67a0075 (commit)
       via  09ffbc94f21ff564e5bb0bbd1c6624e608412308 (commit)
       via  9455aab4fecc37a8e10dfb1167c70b0b7cf28715 (commit)
       via  aacf29b8aabf549817cf2328ef22a5638ee4d738 (commit)
       via  88ba7e71e0aff19b3a8a5e37758dcf88e8bae848 (commit)
       via  e77725774638ae974a70fd8b1bc0566ccfa03ac0 (commit)
       via  46b4183155a0033f6703a0b4482d279f60b4689c (commit)
       via  a469abf05e8ffa374cba03c07c97b07c0a41372f (commit)
       via  67f1cccd7e527e6865ff9e86820c7f2b25da49b4 (commit)
       via  6853d09368b5b5c56db046de086fc7258c43e8ed (commit)
       via  ad0a8a5c9dc8e454e5f705e3bc0b1834e21348f8 (commit)
       via  b6e388ba9ab548356c7fb612144637a43e644ed2 (commit)
       via  f8385b0fc0215b378b61891582b0579659d0b9f4 (commit)
       via  893b7c4f17fbb005894553807002e2a74f1163b8 (commit)
       via  4052e1de4c81ad7718a29e331cc7f3eba12e9e40 (commit)
       via  a2039c87f5923b10f148dea8fb725df03b90011b (commit)
       via  abcd22bf621b25e5db724b0ad9bcb4bcc189b1d3 (commit)
       via  7324473f893ef135693cf983b415f19a0366d539 (commit)
      from  ebc0168384e9bbc29c02b85adb01036609769761 (commit)


- Log -----------------------------------------------------------------
commit 59bf467ccaff27ab2ffe7243b3a334675fea8ed9
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 19 14:53:01 2018 +0000

    Add tests for newly added constant time functions
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit dd8796c551f236ee89a1b9068247c428ae818f21
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Feb 16 21:39:19 2018 +0000

    Some more cleanups of curve448 code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit a4e6dd819a1c395fb8e884c5a8f29ed0551ec13e
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Feb 16 21:39:03 2018 +0000

    fixup! More style fixes for the curve448 code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 18985129eb57d0bc162d376a5c0a160c22351999
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Feb 16 16:54:53 2018 +0000

    fixup! Improve readability of f_impl.c and f_impl.h
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 8e32ec7a568b377f7fbcbee6b1bcf7fd8bbe2e88
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 14 14:35:01 2018 +0000

    Improve readability of f_impl.c and f_impl.h
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit cb5ed32665ffb3a5ed6f631343d9c5302eaf7478
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Jan 31 13:37:42 2018 +0000

    Remove unrolled loops
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 909c68ae7253a718993cf9d89412e4c9b403eb9b
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 17:03:14 2018 +0000

    Yet more style updates to the curve448 code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit c1f15b76ef13823ddd1f006ba75128c369eca067
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 13:56:50 2018 +0000

    Further style changes to curve448 code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 9c9d6ff41c7cbd6c551bd056bf9cc06390de8290
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 13:40:56 2018 +0000

    Simplify some code
    
    The original curve448 code was templated to allow for a 25519
    implementation. We've just imported the 448 stuff - but a remnant of
    the original templated approach remained. This just simplifies that.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit a7232276fef30a63070fd9dbb53d3820d3761d5b
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 12:14:25 2018 +0000

    Remove some unneccessary use of constant time code in curve448
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 434149c7448729b5c20d61c359bd9dc367cf5604
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 12:08:47 2018 +0000

    Fix a travis failure in the curve448 code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 2abe3cad23a12fb868ca469b8ce9a9f335c11e9d
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 14:38:13 2018 +0000

    Remove the curve448 vector code
    
    We removed various platform specific optimisation files in an earlier
    commit. The vector code was related to that and therefore is no longer
    required. It may be resurrected at a later point if we reintroduce the
    opimtisations.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 53ef3252fa3f7008feaf5696d24a05bef0efa676
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 7 11:47:41 2018 +0000

    More style fixes for the curve448 code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 9fd3c858b4ceea7ff0b176c7c0a2438475898598
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 6 14:59:14 2018 +0000

    Remove a strict aliasing issue with pre-computed curve448 constants
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 68b20c00659c16b65ae2fcfc120e1407a68de04f
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 14:27:02 2018 +0000

    More style fixes to Curve448 code based on review feedback
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 04ebd4e17e1de9a5baa65113cce57817b05ae6f8
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 12 14:03:36 2018 +0000

    Some style fixes
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit e4118223184e0ea421fdfa38868c3f2ed16648c9
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 1 14:29:01 2018 +0000

    Formatting tweak based on review feedback
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 756b5af71c50a5e66525b06daa4372b44cf1040e
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 1 14:23:13 2018 +0000

    Use NLIMBS where appropriate to simplify the code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 8855a9a110d4a8e6b9f2ea3a7cd9f591a30cbc11
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 1 14:17:38 2018 +0000

    Remove cplusplus guards in internal headers
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit f918504f91780225d8edc9ac0d4308e005b4d078
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 1 13:53:56 2018 +0000

    Remove the curve448 specific constant time implementation
    
    Instead we should use the standard OpenSSL constant time routines.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit e0fa632420adaab5f0c5fb1db7190dcbd7637a18
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Feb 1 13:51:53 2018 +0000

    Add some new constant time functions needed by curve448
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 7114a5a17a1231e5607e94d67c7b4e4a0ce0b115
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Jan 31 13:53:45 2018 +0000

    Use the NLIMBS macro rather than try and calculate the number of limbs
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit bd74eae1be6c11bbfa95542daa7d59d461464853
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Jan 31 13:43:15 2018 +0000

    Rename a function to avoid a clash
    
    We already have a constant_time_select() function so, to avoid
    confusion/clashing we shouldn't have a second one.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 7e492f3372ed83af074a63d5920f13de7e3455b6
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Jan 31 13:14:48 2018 +0000

    Remove curve448 architecture specific files
    
    Remove all architecture specific files except for the reference arch_32
    version. These files provide archicture specific performance optimisation.
    However they have not been integrated yet. In order to avoid review issues
    they are removed for now. They may be reintroduced at a later time.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 0cdcdacc337005e08a906b2e07d4e44e3ee48138
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Jan 19 15:37:34 2018 +0000

    Fix AppVeyor failure in eddsa.c
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit dd03fd7e3ada3a9ebdb83fc5e4164b2a404e6c62
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Jan 18 14:15:46 2018 +0000

    Fix travis failure in f_impl.c
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 06d72c2c64ecad9b36a0bf26139320e569bd05e3
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Jan 18 13:27:45 2018 +0000

    Fix a typo in a comment
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit f53c77648ce1c4d8455dfb1a5c1ecf4239fe8e87
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Jan 18 13:12:46 2018 +0000

    Update Curve448 copyright for 2018
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit bce310816138f2fbd3f34450a48136132d968e58
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Dec 13 09:57:48 2017 +0000

    Code tidy up
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 7d9e120fea8481449b376af7fa9bbe7995a75f35
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Dec 13 09:57:12 2017 +0000

    Fixes for compilation using clang
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit e54f5f397acde3798f2666c0fb3e797c50d571cf
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Dec 12 20:32:19 2017 +0000

    Update the curve448 internal test to use testutil.h
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 2c9def25b1948f5f231b1acc15c060d9c2264816
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Dec 12 19:55:38 2017 +0000

    Move curve448_test.c to be a full internal test
    
    This ensures that this test is run as part of the test suite
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 52a9587c78a135ff200b8c92f8aad7ea1bd4de75
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Dec 12 14:17:40 2017 +0000

    Fix build errors for Curve448 code on Windows (VC-WIN32 and VC-WIN64A)
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 575d5afcf8852056c996117578bcaade7ad21fef
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Dec 11 17:00:07 2017 +0000

    Remove some gcc/clang specific attributes we don't support
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit db90b274a169b8027ef10fa9c5235c9698667215
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Dec 6 13:06:13 2017 +0000

    Remove duplicated 448 in the names of various things
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 001a0934191319f4617c02eb2b2857dd80e7464a
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Dec 5 17:09:39 2017 +0000

    Merge f_field.h into field.h
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit b47758dbd06e960e5775db5de39b6e9b31c09097
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Dec 5 16:59:42 2017 +0000

    Merge f_arithmetic.c into f_generic.c
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit aeeef83cb536216a414287dee1f424265283da88
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Dec 5 16:37:57 2017 +0000

    Remove references to libdecaf
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 35b7c85a22a214512da9ce374ba7ff737b52f49d
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Dec 5 16:14:11 2017 +0000

    Remove some unneeded code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 8d55f844b08199e0ac6a2ddc501de39f3237c5e9
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Dec 4 13:30:53 2017 +0000

    Manual formatting tweaks to Curve448 code
    
    Following running openssl-format-source there were a lot of manual tweaks
    that were requried.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 205fd6388175704bd7597dbfb571c84f868ce6da
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Dec 4 11:38:58 2017 +0000

    Run util/openssl-format-source on the Curve448 code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 1308e022e1a62214b9e7f8ec92ca7045e70af3a2
Author: Matt Caswell <matt at openssl.org>
Date:   Fri Dec 1 18:12:25 2017 +0000

    Update the imported curve448 code to use OpenSSL copyright headers
    
    Some files talk about the MIT license. This code was contributed under
    CLA and was relicensed to the OpenSSL licence when imported.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 22bcc9cb7fbd1433924bd9738cb34f9dfbb35c91
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 18:23:51 2017 +0000

    Fix the ED448 key lengths
    
    Unlike X448 the key lengths for ED448 are 57 bytes (as opposed to 56)
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit ff489fb4725b120a9da05d339595bc7799c53802
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 16:19:57 2017 +0000

    Integrate Curve448 into the build system
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 094c071cbf3bca19eee73ccb8dfc0f7498f5d8e1
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Jan 18 12:55:23 2018 +0000

    Convert to C90 from C99
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit bb6e60adc5d02d903cbbf92cf7b1d7152fb4a905
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 14:56:43 2017 +0000

    Rename the decaf files to curve448 files
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit c4148792cf643677839096742ee090fe6f4ac910
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 13:59:43 2017 +0000

    Remove portable_endian.h
    
    It is no longer used
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 2799d385406077f6726cd91c9edb18be12d37dc3
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 12:23:33 2017 +0000

    Remove the old shake256 implementation
    
    We have fully converted curve448 to use the OpenSSL shake256 implementation
    so we can now remove the old one.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit a242839f75846b9bfa87774a85090651d2ec17c6
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 12:09:23 2017 +0000

    Convert Curve448 internals to use OpenSSL shake256
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit c255e98ed2f6cc686b8fd22eba403fb2e828b5cd
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 11:34:54 2017 +0000

    Use OpenSSL shake256
    
    Convert the curve448 test to use the OpenSSL implementation of shake256.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 6ea71cbabe96c5382dda51553271570535d94cbd
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Nov 28 09:53:58 2017 +0000

    Add tests for Ed448ph
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 4ea41daa073af5fb45dacc7e380248e3a108c63d
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Nov 27 11:32:03 2017 +0000

    Add Ed448 tests
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 6207b1398327720a94d706e6e35bd7dc7eb8351a
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 23 16:50:42 2017 +0000

    Remove inclusion of header files that we can't rely on due to portability
    
    Some non-portable includes are left because they are already suitably
    guarded.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit ca42a316a80d661752618cf3ec5143c2b92f3125
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 17:35:10 2017 +0000

    Remove DECAF_NOINLINE
    
    OpenSSL does not have this concept
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 91f2e94c00a6c11170791d2803e9a49ab67a0075
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 17:27:05 2017 +0000

    Remove DECAF_NONNULL
    
    OpenSSL does not currently have this concept. It only provides compiler
    warnings so just remove it.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 09ffbc94f21ff564e5bb0bbd1c6624e608412308
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 17:18:57 2017 +0000

    Remove all instances of DECAF_API_VIS
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 9455aab4fecc37a8e10dfb1167c70b0b7cf28715
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 17:13:18 2017 +0000

    Replace DECAF_WARN_UNUSED with __owur
    
    Most of these were in point_448.h. While I was at it I spotted some unused
    declarations, so I deleted those too.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit aacf29b8aabf549817cf2328ef22a5638ee4d738
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 17:07:21 2017 +0000

    Replace DECAF_INLINE with ossl_inline
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 88ba7e71e0aff19b3a8a5e37758dcf88e8bae848
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 16:58:20 2017 +0000

    Remove some vestiges of the old decaf template approach
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit e77725774638ae974a70fd8b1bc0566ccfa03ac0
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 16:27:48 2017 +0000

    Rename decaf_448_* to curve448_*
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 46b4183155a0033f6703a0b4482d279f60b4689c
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 16:20:34 2017 +0000

    Remove some more unneeded code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit a469abf05e8ffa374cba03c07c97b07c0a41372f
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 16:22:00 2017 +0000

    Remove some uneeded macros and conditionally compiled code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 67f1cccd7e527e6865ff9e86820c7f2b25da49b4
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 14:08:23 2017 +0000

    Remove some unneeded stuff
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 6853d09368b5b5c56db046de086fc7258c43e8ed
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 11:52:06 2017 +0000

    Add a local test
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit ad0a8a5c9dc8e454e5f705e3bc0b1834e21348f8
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Nov 16 11:13:53 2017 +0000

    Add the X448() and X448_public_from_private() functions
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit b6e388ba9ab548356c7fb612144637a43e644ed2
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Nov 15 16:39:33 2017 +0000

    Remove the decaf_bzero function and replace with OPENSSL_cleanse()
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit f8385b0fc0215b378b61891582b0579659d0b9f4
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Nov 15 16:24:32 2017 +0000

    Remove the curve448/decaf sub-directory
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 893b7c4f17fbb005894553807002e2a74f1163b8
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Nov 15 16:21:42 2017 +0000

    Remove some unneeded code
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 4052e1de4c81ad7718a29e331cc7f3eba12e9e40
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Nov 15 16:19:15 2017 +0000

    Remove some deprecated curve 448 code and remove some unneeded defines
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit a2039c87f5923b10f148dea8fb725df03b90011b
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Nov 15 16:15:18 2017 +0000

    Remove some unneeded files and further flatten the curve 448 structure
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit abcd22bf621b25e5db724b0ad9bcb4bcc189b1d3
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Nov 15 15:59:27 2017 +0000

    Flatten the Curve 448 source structure
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

commit 7324473f893ef135693cf983b415f19a0366d539
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Nov 15 15:27:21 2017 +0000

    Import Curve 448 support
    
    This imports selected files from the src directory of this repository:
    
    https://sourceforge.net/p/ed448goldilocks/code/ci/v0.9.4/tree/
    
    This is from the version tagged as "v0.9.4" with commit id 7527e9.
    
    This code was originally writting by Mike Hamburg and the import is done by
    kind permission of Rambus and Mike Hamburg under CLA. As this is under CLA
    the files are being relicensed under the OpenSSL licence. Subsequent
    commits will correct any licence notices in the individual files.
    
    These files should provide complete self-contained support for X448 and
    Ed448. They are imported "as is" from the source repository and this
    commit does not attempt to integrate them into the OpenSSL build system,
    or modify them in any way to fit OpenSSL style guidelines. That will be
    done by subsequent commits.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5105)

-----------------------------------------------------------------------

Summary of changes:
 crypto/ec/build.info                         |   9 +
 crypto/ec/curve448/arch_32/arch_intrinsics.h |  27 +
 crypto/ec/curve448/arch_32/f_impl.c          |  95 ++++
 crypto/ec/curve448/arch_32/f_impl.h          |  60 +++
 crypto/ec/curve448/curve448.c                | 727 +++++++++++++++++++++++++++
 crypto/ec/curve448/curve448_lcl.h            |  38 ++
 crypto/ec/curve448/curve448_tables.c         | 475 +++++++++++++++++
 crypto/ec/curve448/curve448utils.h           |  77 +++
 crypto/ec/curve448/ed448.h                   | 195 +++++++
 crypto/ec/curve448/eddsa.c                   | 350 +++++++++++++
 crypto/ec/curve448/f_generic.c               | 204 ++++++++
 crypto/ec/curve448/field.h                   | 168 +++++++
 crypto/ec/curve448/point_448.h               | 301 +++++++++++
 crypto/ec/curve448/scalar.c                  | 235 +++++++++
 crypto/ec/curve448/word.h                    |  81 +++
 include/internal/constant_time_locl.h        |  93 ++++
 test/build.info                              |   7 +-
 test/constant_time_test.c                    | 200 +++++---
 test/curve448_internal_test.c                | 702 ++++++++++++++++++++++++++
 test/recipes/03-test_internal_curve448.t     |  19 +
 20 files changed, 4000 insertions(+), 63 deletions(-)
 create mode 100644 crypto/ec/curve448/arch_32/arch_intrinsics.h
 create mode 100644 crypto/ec/curve448/arch_32/f_impl.c
 create mode 100644 crypto/ec/curve448/arch_32/f_impl.h
 create mode 100644 crypto/ec/curve448/curve448.c
 create mode 100644 crypto/ec/curve448/curve448_lcl.h
 create mode 100644 crypto/ec/curve448/curve448_tables.c
 create mode 100644 crypto/ec/curve448/curve448utils.h
 create mode 100644 crypto/ec/curve448/ed448.h
 create mode 100644 crypto/ec/curve448/eddsa.c
 create mode 100644 crypto/ec/curve448/f_generic.c
 create mode 100644 crypto/ec/curve448/field.h
 create mode 100644 crypto/ec/curve448/point_448.h
 create mode 100644 crypto/ec/curve448/scalar.c
 create mode 100644 crypto/ec/curve448/word.h
 create mode 100644 test/curve448_internal_test.c
 create mode 100644 test/recipes/03-test_internal_curve448.t

diff --git a/crypto/ec/build.info b/crypto/ec/build.info
index 4e9de4b..b6549a1 100644
--- a/crypto/ec/build.info
+++ b/crypto/ec/build.info
@@ -6,6 +6,8 @@ SOURCE[../../libcrypto]=\
         ecp_nistp224.c ecp_nistp256.c ecp_nistp521.c ecp_nistputil.c \
         ecp_oct.c ec2_oct.c ec_oct.c ec_kmeth.c ecdh_ossl.c ecdh_kdf.c \
         ecdsa_ossl.c ecdsa_sign.c ecdsa_vrf.c curve25519.c ecx_meth.c \
+        curve448/arch_32/f_impl.c curve448/f_generic.c curve448/scalar.c \
+        curve448/curve448_tables.c curve448/eddsa.c curve448/curve448.c \
         {- $target{ec_asm_src} -}
 
 GENERATE[ecp_nistz256-x86.s]=asm/ecp_nistz256-x86.pl \
@@ -28,3 +30,10 @@ BEGINRAW[Makefile]
 {- $builddir -}/ecp_nistz256-%.S:	{- $sourcedir -}/asm/ecp_nistz256-%.pl
 	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
 ENDRAW[Makefile]
+
+INCLUDE[curve448/arch_32/f_impl.o]=curve448/arch_32 curve448
+INCLUDE[curve448/f_generic.o]=curve448/arch_32 curve448
+INCLUDE[curve448/scalar.o]=curve448/arch_32 curve448
+INCLUDE[curve448/curve448_tables.o]=curve448/arch_32 curve448
+INCLUDE[curve448/eddsa.o]=curve448/arch_32 curve448
+INCLUDE[curve448/curve448.o]=curve448/arch_32 curve448
diff --git a/crypto/ec/curve448/arch_32/arch_intrinsics.h b/crypto/ec/curve448/arch_32/arch_intrinsics.h
new file mode 100644
index 0000000..48081c7
--- /dev/null
+++ b/crypto/ec/curve448/arch_32/arch_intrinsics.h
@@ -0,0 +1,27 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_ARCH_32_ARCH_INTRINSICS_H
+# define HEADER_ARCH_32_ARCH_INTRINSICS_H
+
+#include "internal/constant_time_locl.h"
+
+# define ARCH_WORD_BITS 32
+
+#define word_is_zero(a)     constant_time_is_zero_32(a)
+
+static ossl_inline uint64_t widemul(uint32_t a, uint32_t b)
+{
+    return ((uint64_t)a) * b;
+}
+
+#endif                          /* HEADER_ARCH_32_ARCH_INTRINSICS_H */
diff --git a/crypto/ec/curve448/arch_32/f_impl.c b/crypto/ec/curve448/arch_32/f_impl.c
new file mode 100644
index 0000000..8a89d27
--- /dev/null
+++ b/crypto/ec/curve448/arch_32/f_impl.c
@@ -0,0 +1,95 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#include "field.h"
+
+void gf_mul(gf_s * RESTRICT cs, const gf as, const gf bs)
+{
+    const uint32_t *a = as->limb, *b = bs->limb;
+    uint32_t *c = cs->limb;
+    uint64_t accum0 = 0, accum1 = 0, accum2 = 0;
+    uint32_t mask = (1 << 28) - 1;
+    uint32_t aa[8], bb[8];
+    int i, j;
+
+    for (i = 0; i < 8; i++) {
+        aa[i] = a[i] + a[i + 8];
+        bb[i] = b[i] + b[i + 8];
+    }
+
+    for (j = 0; j < 8; j++) {
+        accum2 = 0;
+        for (i = 0; i < j + 1; i++) {
+            accum2 += widemul(a[j - i], b[i]);
+            accum1 += widemul(aa[j - i], bb[i]);
+            accum0 += widemul(a[8 + j - i], b[8 + i]);
+        }
+        accum1 -= accum2;
+        accum0 += accum2;
+        accum2 = 0;
+        for (i = j + 1; i < 8; i++) {
+            accum0 -= widemul(a[8 + j - i], b[i]);
+            accum2 += widemul(aa[8 + j - i], bb[i]);
+            accum1 += widemul(a[16 + j - i], b[8 + i]);
+        }
+        accum1 += accum2;
+        accum0 += accum2;
+        c[j] = ((uint32_t)(accum0)) & mask;
+        c[j + 8] = ((uint32_t)(accum1)) & mask;
+        accum0 >>= 28;
+        accum1 >>= 28;
+    }
+
+    accum0 += accum1;
+    accum0 += c[8];
+    accum1 += c[0];
+    c[8] = ((uint32_t)(accum0)) & mask;
+    c[0] = ((uint32_t)(accum1)) & mask;
+
+    accum0 >>= 28;
+    accum1 >>= 28;
+    c[9] += ((uint32_t)(accum0));
+    c[1] += ((uint32_t)(accum1));
+}
+
+void gf_mulw_unsigned(gf_s * RESTRICT cs, const gf as, uint32_t b)
+{
+    const uint32_t *a = as->limb;
+    uint32_t *c = cs->limb;
+    uint64_t accum0 = 0, accum8 = 0;
+    uint32_t mask = (1 << 28) - 1;
+    int i;
+
+    assert(b <= mask);
+
+    for (i = 0; i < 8; i++) {
+        accum0 += widemul(b, a[i]);
+        accum8 += widemul(b, a[i + 8]);
+        c[i] = accum0 & mask;
+        accum0 >>= 28;
+        c[i + 8] = accum8 & mask;
+        accum8 >>= 28;
+    }
+
+    accum0 += accum8 + c[8];
+    c[8] = ((uint32_t)accum0) & mask;
+    c[9] += (uint32_t)(accum0 >> 28);
+
+    accum8 += c[0];
+    c[0] = ((uint32_t)accum8) & mask;
+    c[1] += (uint32_t)(accum8 >> 28);
+}
+
+void gf_sqr(gf_s * RESTRICT cs, const gf as)
+{
+    gf_mul(cs, as, as);         /* Performs better with a dedicated square */
+}
diff --git a/crypto/ec/curve448/arch_32/f_impl.h b/crypto/ec/curve448/arch_32/f_impl.h
new file mode 100644
index 0000000..bbde84a
--- /dev/null
+++ b/crypto/ec/curve448/arch_32/f_impl.h
@@ -0,0 +1,60 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_ARCH_32_F_IMPL_H
+# define HEADER_ARCH_32_F_IMPL_H
+
+# define GF_HEADROOM 2
+# define LIMB(x) ((x) & ((1 << 28) - 1)), ((x) >> 28)
+# define FIELD_LITERAL(a, b, c, d, e, f, g, h) \
+    {{LIMB(a), LIMB(b), LIMB(c), LIMB(d), LIMB(e), LIMB(f), LIMB(g), LIMB(h)}}
+
+# define LIMB_PLACE_VALUE(i) 28
+
+void gf_add_RAW(gf out, const gf a, const gf b)
+{
+    unsigned int i;
+
+    for (i = 0; i < NLIMBS; i++)
+        out->limb[i] = a->limb[i] + b->limb[i];
+}
+
+void gf_sub_RAW(gf out, const gf a, const gf b)
+{
+    unsigned int i;
+
+    for (i = 0; i < NLIMBS; i++)
+        out->limb[i] = a->limb[i] - b->limb[i];
+}
+
+void gf_bias(gf a, int amt)
+{
+    unsigned int i;
+    uint32_t co1 = ((1 << 28) - 1) * amt, co2 = co1 - amt;
+
+    for (i = 0; i < NLIMBS; i++)
+        a->limb[i] += (i == NLIMBS / 2) ? co2 : co1;
+}
+
+void gf_weak_reduce(gf a)
+{
+    uint32_t mask = (1 << 28) - 1;
+    uint32_t tmp = a->limb[NLIMBS - 1] >> 28;
+    unsigned int i;
+
+    a->limb[NLIMBS / 2] += tmp;
+    for (i = NLIMBS - 1; i > 0; i--)
+        a->limb[i] = (a->limb[i] & mask) + (a->limb[i - 1] >> 28);
+    a->limb[0] = (a->limb[0] & mask) + tmp;
+}
+
+#endif                  /* HEADER_ARCH_32_F_IMPL_H */
diff --git a/crypto/ec/curve448/curve448.c b/crypto/ec/curve448/curve448.c
new file mode 100644
index 0000000..7c43a75
--- /dev/null
+++ b/crypto/ec/curve448/curve448.c
@@ -0,0 +1,727 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include <openssl/crypto.h>
+#include "word.h"
+#include "field.h"
+
+#include "point_448.h"
+#include "ed448.h"
+#include "curve448_lcl.h"
+
+#define COFACTOR 4
+
+#define C448_WNAF_FIXED_TABLE_BITS 5
+#define C448_WNAF_VAR_TABLE_BITS 3
+
+#define EDWARDS_D       (-39081)
+
+static const curve448_scalar_t precomputed_scalarmul_adjustment = {
+    {
+        {
+            SC_LIMB(0xc873d6d54a7bb0cf), SC_LIMB(0xe933d8d723a70aad),
+            SC_LIMB(0xbb124b65129c96fd), SC_LIMB(0x00000008335dc163)
+        }
+    }
+};
+
+#define TWISTED_D (EDWARDS_D - 1)
+
+#define WBITS C448_WORD_BITS   /* NB this may be different from ARCH_WORD_BITS */
+
+/* Inverse. */
+static void gf_invert(gf y, const gf x, int assert_nonzero)
+{
+    mask_t ret;
+    gf t1, t2;
+
+    gf_sqr(t1, x);              /* o^2 */
+    ret = gf_isr(t2, t1);       /* +-1/sqrt(o^2) = +-1/o */
+    (void)ret;
+    if (assert_nonzero)
+        assert(ret);
+    gf_sqr(t1, t2);
+    gf_mul(t2, t1, x);          /* not direct to y in case of alias. */
+    gf_copy(y, t2);
+}
+
+/** identity = (0,1) */
+const curve448_point_t curve448_point_identity =
+    { {{{{0}}}, {{{1}}}, {{{1}}}, {{{0}}}} };
+
+static void point_double_internal(curve448_point_t p, const curve448_point_t q,
+                                  int before_double)
+{
+    gf a, b, c, d;
+
+    gf_sqr(c, q->x);
+    gf_sqr(a, q->y);
+    gf_add_nr(d, c, a);         /* 2+e */
+    gf_add_nr(p->t, q->y, q->x); /* 2+e */
+    gf_sqr(b, p->t);
+    gf_subx_nr(b, b, d, 3);     /* 4+e */
+    gf_sub_nr(p->t, a, c);      /* 3+e */
+    gf_sqr(p->x, q->z);
+    gf_add_nr(p->z, p->x, p->x); /* 2+e */
+    gf_subx_nr(a, p->z, p->t, 4); /* 6+e */
+    if (GF_HEADROOM == 5)
+        gf_weak_reduce(a);      /* or 1+e */
+    gf_mul(p->x, a, b);
+    gf_mul(p->z, p->t, a);
+    gf_mul(p->y, p->t, d);
+    if (!before_double)
+        gf_mul(p->t, b, d);
+}
+
+void curve448_point_double(curve448_point_t p, const curve448_point_t q)
+{
+    point_double_internal(p, q, 0);
+}
+
+/* Operations on [p]niels */
+static ossl_inline void cond_neg_niels(niels_t n, mask_t neg)
+{
+    gf_cond_swap(n->a, n->b, neg);
+    gf_cond_neg(n->c, neg);
+}
+
+static void pt_to_pniels(pniels_t b, const curve448_point_t a)
+{
+    gf_sub(b->n->a, a->y, a->x);
+    gf_add(b->n->b, a->x, a->y);
+    gf_mulw(b->n->c, a->t, 2 * TWISTED_D);
+    gf_add(b->z, a->z, a->z);
+}
+
+static void pniels_to_pt(curve448_point_t e, const pniels_t d)
+{
+    gf eu;
+
+    gf_add(eu, d->n->b, d->n->a);
+    gf_sub(e->y, d->n->b, d->n->a);
+    gf_mul(e->t, e->y, eu);
+    gf_mul(e->x, d->z, e->y);
+    gf_mul(e->y, d->z, eu);
+    gf_sqr(e->z, d->z);
+}
+
+static void niels_to_pt(curve448_point_t e, const niels_t n)
+{
+    gf_add(e->y, n->b, n->a);
+    gf_sub(e->x, n->b, n->a);
+    gf_mul(e->t, e->y, e->x);
+    gf_copy(e->z, ONE);
+}
+
+static void add_niels_to_pt(curve448_point_t d, const niels_t e,
+                            int before_double)
+{
+    gf a, b, c;
+
+    gf_sub_nr(b, d->y, d->x);   /* 3+e */
+    gf_mul(a, e->a, b);
+    gf_add_nr(b, d->x, d->y);   /* 2+e */
+    gf_mul(d->y, e->b, b);
+    gf_mul(d->x, e->c, d->t);
+    gf_add_nr(c, a, d->y);      /* 2+e */
+    gf_sub_nr(b, d->y, a);      /* 3+e */
+    gf_sub_nr(d->y, d->z, d->x); /* 3+e */
+    gf_add_nr(a, d->x, d->z);   /* 2+e */
+    gf_mul(d->z, a, d->y);
+    gf_mul(d->x, d->y, b);
+    gf_mul(d->y, a, c);
+    if (!before_double)
+        gf_mul(d->t, b, c);
+}
+
+static void sub_niels_from_pt(curve448_point_t d, const niels_t e,
+                              int before_double)
+{
+    gf a, b, c;
+
+    gf_sub_nr(b, d->y, d->x);   /* 3+e */
+    gf_mul(a, e->b, b);
+    gf_add_nr(b, d->x, d->y);   /* 2+e */
+    gf_mul(d->y, e->a, b);
+    gf_mul(d->x, e->c, d->t);
+    gf_add_nr(c, a, d->y);      /* 2+e */
+    gf_sub_nr(b, d->y, a);      /* 3+e */
+    gf_add_nr(d->y, d->z, d->x); /* 2+e */
+    gf_sub_nr(a, d->z, d->x);   /* 3+e */
+    gf_mul(d->z, a, d->y);
+    gf_mul(d->x, d->y, b);
+    gf_mul(d->y, a, c);
+    if (!before_double)
+        gf_mul(d->t, b, c);
+}
+
+static void add_pniels_to_pt(curve448_point_t p, const pniels_t pn,
+                             int before_double)
+{
+    gf L0;
+
+    gf_mul(L0, p->z, pn->z);
+    gf_copy(p->z, L0);
+    add_niels_to_pt(p, pn->n, before_double);
+}
+
+static void sub_pniels_from_pt(curve448_point_t p, const pniels_t pn,
+                               int before_double)
+{
+    gf L0;
+
+    gf_mul(L0, p->z, pn->z);
+    gf_copy(p->z, L0);
+    sub_niels_from_pt(p, pn->n, before_double);
+}
+
+c448_bool_t curve448_point_eq(const curve448_point_t p,
+                              const curve448_point_t q)
+{
+    mask_t succ;
+    gf a, b;
+
+    /* equality mod 2-torsion compares x/y */
+    gf_mul(a, p->y, q->x);
+    gf_mul(b, q->y, p->x);
+    succ = gf_eq(a, b);
+
+    return mask_to_bool(succ);
+}
+
+c448_bool_t curve448_point_valid(const curve448_point_t p)
+{
+    mask_t out;
+    gf a, b, c;
+
+    gf_mul(a, p->x, p->y);
+    gf_mul(b, p->z, p->t);
+    out = gf_eq(a, b);
+    gf_sqr(a, p->x);
+    gf_sqr(b, p->y);
+    gf_sub(a, b, a);
+    gf_sqr(b, p->t);
+    gf_mulw(c, b, TWISTED_D);
+    gf_sqr(b, p->z);
+    gf_add(b, b, c);
+    out &= gf_eq(a, b);
+    out &= ~gf_eq(p->z, ZERO);
+    return mask_to_bool(out);
+}
+
+static ossl_inline void constant_time_lookup_niels(niels_s * RESTRICT ni,
+                                                   const niels_t * table,
+                                                   int nelts, int idx)
+{
+    constant_time_lookup(ni, table, sizeof(niels_s), nelts, idx);
+}
+
+void curve448_precomputed_scalarmul(curve448_point_t out,
+                                    const curve448_precomputed_s * table,
+                                    const curve448_scalar_t scalar)
+{
+    unsigned int i, j, k;
+    const unsigned int n = COMBS_N, t = COMBS_T, s = COMBS_S;
+    niels_t ni;
+    curve448_scalar_t scalar1x;
+
+    curve448_scalar_add(scalar1x, scalar, precomputed_scalarmul_adjustment);
+    curve448_scalar_halve(scalar1x, scalar1x);
+
+    for (i = s; i > 0; i--) {
+        if (i != s)
+            point_double_internal(out, out, 0);
+
+        for (j = 0; j < n; j++) {
+            int tab = 0;
+            mask_t invert;
+
+            for (k = 0; k < t; k++) {
+                unsigned int bit = (i - 1) + s * (k + j * t);
+
+                if (bit < C448_SCALAR_BITS)
+                    tab |=
+                        (scalar1x->limb[bit / WBITS] >> (bit % WBITS) & 1) << k;
+            }
+
+            invert = (tab >> (t - 1)) - 1;
+            tab ^= invert;
+            tab &= (1 << (t - 1)) - 1;
+
+            constant_time_lookup_niels(ni, &table->table[j << (t - 1)],
+                                       1 << (t - 1), tab);
+
+            cond_neg_niels(ni, invert);
+            if ((i != s) || j != 0)
+                add_niels_to_pt(out, ni, j == n - 1 && i != 1);
+            else
+                niels_to_pt(out, ni);
+        }
+    }
+
+    OPENSSL_cleanse(ni, sizeof(ni));
+    OPENSSL_cleanse(scalar1x, sizeof(scalar1x));
+}
+
+void curve448_point_mul_by_ratio_and_encode_like_eddsa(
+                                    uint8_t enc[EDDSA_448_PUBLIC_BYTES],
+                                    const curve448_point_t p)
+{
+    gf x, y, z, t;
+    curve448_point_t q;
+
+    /* The point is now on the twisted curve.  Move it to untwisted. */
+    curve448_point_copy(q, p);
+
+    {
+        /* 4-isogeny: 2xy/(y^+x^2), (y^2-x^2)/(2z^2-y^2+x^2) */
+        gf u;
+
+        gf_sqr(x, q->x);
+        gf_sqr(t, q->y);
+        gf_add(u, x, t);
+        gf_add(z, q->y, q->x);
+        gf_sqr(y, z);
+        gf_sub(y, y, u);
+        gf_sub(z, t, x);
+        gf_sqr(x, q->z);
+        gf_add(t, x, x);
+        gf_sub(t, t, z);
+        gf_mul(x, t, y);
+        gf_mul(y, z, u);
+        gf_mul(z, u, t);
+        OPENSSL_cleanse(u, sizeof(u));
+    }
+
+    /* Affinize */
+    gf_invert(z, z, 1);
+    gf_mul(t, x, z);
+    gf_mul(x, y, z);
+
+    /* Encode */
+    enc[EDDSA_448_PRIVATE_BYTES - 1] = 0;
+    gf_serialize(enc, x, 1);
+    enc[EDDSA_448_PRIVATE_BYTES - 1] |= 0x80 & gf_lobit(t);
+
+    OPENSSL_cleanse(x, sizeof(x));
+    OPENSSL_cleanse(y, sizeof(y));
+    OPENSSL_cleanse(z, sizeof(z));
+    OPENSSL_cleanse(t, sizeof(t));
+    curve448_point_destroy(q);
+}
+
+c448_error_t curve448_point_decode_like_eddsa_and_mul_by_ratio(
+                                curve448_point_t p,
+                                const uint8_t enc[EDDSA_448_PUBLIC_BYTES])
+{
+    uint8_t enc2[EDDSA_448_PUBLIC_BYTES];
+    mask_t low;
+    mask_t succ;
+
+    memcpy(enc2, enc, sizeof(enc2));
+
+    low = ~word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1] & 0x80);
+    enc2[EDDSA_448_PRIVATE_BYTES - 1] &= ~0x80;
+
+    succ = gf_deserialize(p->y, enc2, 1, 0);
+    succ &= word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1]);
+
+    gf_sqr(p->x, p->y);
+    gf_sub(p->z, ONE, p->x);    /* num = 1-y^2 */
+    gf_mulw(p->t, p->x, EDWARDS_D); /* dy^2 */
+    gf_sub(p->t, ONE, p->t);    /* denom = 1-dy^2 or 1-d + dy^2 */
+
+    gf_mul(p->x, p->z, p->t);
+    succ &= gf_isr(p->t, p->x); /* 1/sqrt(num * denom) */
+
+    gf_mul(p->x, p->t, p->z);   /* sqrt(num / denom) */
+    gf_cond_neg(p->x, gf_lobit(p->x) ^ low);
+    gf_copy(p->z, ONE);
+
+    {
+        gf a, b, c, d;
+
+        /* 4-isogeny 2xy/(y^2-ax^2), (y^2+ax^2)/(2-y^2-ax^2) */
+        gf_sqr(c, p->x);
+        gf_sqr(a, p->y);
+        gf_add(d, c, a);
+        gf_add(p->t, p->y, p->x);
+        gf_sqr(b, p->t);
+        gf_sub(b, b, d);
+        gf_sub(p->t, a, c);
+        gf_sqr(p->x, p->z);
+        gf_add(p->z, p->x, p->x);
+        gf_sub(a, p->z, d);
+        gf_mul(p->x, a, b);
+        gf_mul(p->z, p->t, a);
+        gf_mul(p->y, p->t, d);
+        gf_mul(p->t, b, d);
+        OPENSSL_cleanse(a, sizeof(a));
+        OPENSSL_cleanse(b, sizeof(b));
+        OPENSSL_cleanse(c, sizeof(c));
+        OPENSSL_cleanse(d, sizeof(d));
+    }
+
+    OPENSSL_cleanse(enc2, sizeof(enc2));
+    assert(curve448_point_valid(p) || ~succ);
+
+    return c448_succeed_if(mask_to_bool(succ));
+}
+
+c448_error_t x448_int(uint8_t out[X_PUBLIC_BYTES],
+                      const uint8_t base[X_PUBLIC_BYTES],
+                      const uint8_t scalar[X_PRIVATE_BYTES])
+{
+    gf x1, x2, z2, x3, z3, t1, t2;
+    int t;
+    mask_t swap = 0;
+    mask_t nz;
+
+    (void)gf_deserialize(x1, base, 1, 0);
+    gf_copy(x2, ONE);
+    gf_copy(z2, ZERO);
+    gf_copy(x3, x1);
+    gf_copy(z3, ONE);
+
+    for (t = X_PRIVATE_BITS - 1; t >= 0; t--) {
+        uint8_t sb = scalar[t / 8];
+        mask_t k_t;
+
+        /* Scalar conditioning */
+        if (t / 8 == 0)
+            sb &= -(uint8_t)COFACTOR;
+        else if (t == X_PRIVATE_BITS - 1)
+            sb = -1;
+
+        k_t = (sb >> (t % 8)) & 1;
+        k_t = 0 - k_t;             /* set to all 0s or all 1s */
+
+        swap ^= k_t;
+        gf_cond_swap(x2, x3, swap);
+        gf_cond_swap(z2, z3, swap);
+        swap = k_t;
+
+        /*
+         * The "_nr" below skips coefficient reduction. In the following
+         * comments, "2+e" is saying that the coefficients are at most 2+epsilon
+         * times the reduction limit.
+         */
+        gf_add_nr(t1, x2, z2);  /* A = x2 + z2 */ /* 2+e */
+        gf_sub_nr(t2, x2, z2);  /* B = x2 - z2 */ /* 3+e */
+        gf_sub_nr(z2, x3, z3);  /* D = x3 - z3 */ /* 3+e */
+        gf_mul(x2, t1, z2);     /* DA */
+        gf_add_nr(z2, z3, x3);  /* C = x3 + z3 */ /* 2+e */
+        gf_mul(x3, t2, z2);     /* CB */
+        gf_sub_nr(z3, x2, x3);  /* DA-CB */ /* 3+e */
+        gf_sqr(z2, z3);         /* (DA-CB)^2 */
+        gf_mul(z3, x1, z2);     /* z3 = x1(DA-CB)^2 */
+        gf_add_nr(z2, x2, x3);  /* (DA+CB) */ /* 2+e */
+        gf_sqr(x3, z2);         /* x3 = (DA+CB)^2 */
+
+        gf_sqr(z2, t1);         /* AA = A^2 */
+        gf_sqr(t1, t2);         /* BB = B^2 */
+        gf_mul(x2, z2, t1);     /* x2 = AA*BB */
+        gf_sub_nr(t2, z2, t1);  /* E = AA-BB */ /* 3+e */
+
+        gf_mulw(t1, t2, -EDWARDS_D); /* E*-d = a24*E */
+        gf_add_nr(t1, t1, z2);  /* AA + a24*E */ /* 2+e */
+        gf_mul(z2, t2, t1);     /* z2 = E(AA+a24*E) */
+    }
+
+    /* Finish */
+    gf_cond_swap(x2, x3, swap);
+    gf_cond_swap(z2, z3, swap);
+    gf_invert(z2, z2, 0);
+    gf_mul(x1, x2, z2);
+    gf_serialize(out, x1, 1);
+    nz = ~gf_eq(x1, ZERO);
+
+    OPENSSL_cleanse(x1, sizeof(x1));
+    OPENSSL_cleanse(x2, sizeof(x2));
+    OPENSSL_cleanse(z2, sizeof(z2));
+    OPENSSL_cleanse(x3, sizeof(x3));
+    OPENSSL_cleanse(z3, sizeof(z3));
+    OPENSSL_cleanse(t1, sizeof(t1));
+    OPENSSL_cleanse(t2, sizeof(t2));
+
+    return c448_succeed_if(mask_to_bool(nz));
+}
+
+void curve448_point_mul_by_ratio_and_encode_like_x448(uint8_t
+                                                      out[X_PUBLIC_BYTES],
+                                                      const curve448_point_t p)
+{
+    curve448_point_t q;
+
+    curve448_point_copy(q, p);
+    gf_invert(q->t, q->x, 0);   /* 1/x */
+    gf_mul(q->z, q->t, q->y);   /* y/x */
+    gf_sqr(q->y, q->z);         /* (y/x)^2 */
+    gf_serialize(out, q->y, 1);
+    curve448_point_destroy(q);
+}
+
+void x448_derive_public_key(uint8_t out[X_PUBLIC_BYTES],
+                            const uint8_t scalar[X_PRIVATE_BYTES])
+{
+    /* Scalar conditioning */
+    uint8_t scalar2[X_PRIVATE_BYTES];
+    curve448_scalar_t the_scalar;
+    curve448_point_t p;
+    unsigned int i;
+
+    memcpy(scalar2, scalar, sizeof(scalar2));
+    scalar2[0] &= -(uint8_t)COFACTOR;
+
+    scalar2[X_PRIVATE_BYTES - 1] &= ~((0u - 1u) << ((X_PRIVATE_BITS + 7) % 8));
+    scalar2[X_PRIVATE_BYTES - 1] |= 1 << ((X_PRIVATE_BITS + 7) % 8);
+
+    curve448_scalar_decode_long(the_scalar, scalar2, sizeof(scalar2));
+
+    /* Compensate for the encoding ratio */
+    for (i = 1; i < X448_ENCODE_RATIO; i <<= 1)
+        curve448_scalar_halve(the_scalar, the_scalar);
+
+    curve448_precomputed_scalarmul(p, curve448_precomputed_base, the_scalar);
+    curve448_point_mul_by_ratio_and_encode_like_x448(out, p);
+    curve448_point_destroy(p);
+}
+
+/* Control for variable-time scalar multiply algorithms. */
+struct smvt_control {
+    int power, addend;
+};
+
+#if defined(__GNUC__) || defined(__clang__)
+# define NUMTRAILINGZEROS	__builtin_ctz
+#else
+# define NUMTRAILINGZEROS	numtrailingzeros
+static uint32_t numtrailingzeros(uint32_t i)
+{
+    uint32_t tmp;
+    uint32_t num = 31;
+
+    if (i == 0)
+        return 32;
+
+    tmp = i << 16;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 16;
+    }
+    tmp = i << 8;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 8;
+    }
+    tmp = i << 4;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 4;
+    }
+    tmp = i << 2;
+    if (tmp != 0) {
+        i = tmp;
+        num -= 2;
+    }
+    tmp = i << 1;
+    if (tmp != 0)
+        num--;
+
+    return num;
+}
+#endif
+
+static int recode_wnaf(struct smvt_control *control,
+                       /* [nbits/(table_bits + 1) + 3] */
+                       const curve448_scalar_t scalar,
+                       unsigned int table_bits)
+{
+    unsigned int table_size = C448_SCALAR_BITS / (table_bits + 1) + 3;
+    int position = table_size - 1; /* at the end */
+    uint64_t current = scalar->limb[0] & 0xFFFF;
+    uint32_t mask = (1 << (table_bits + 1)) - 1;
+    unsigned int w;
+    const unsigned int B_OVER_16 = sizeof(scalar->limb[0]) / 2;
+    unsigned int n, i;
+
+    /* place the end marker */
+    control[position].power = -1;
+    control[position].addend = 0;
+    position--;
+
+    /*
+     * PERF: Could negate scalar if it's large.  But then would need more cases
+     * in the actual code that uses it, all for an expected reduction of like
+     * 1/5 op. Probably not worth it.
+     */
+
+    for (w = 1; w < (C448_SCALAR_BITS - 1) / 16 + 3; w++) {
+        if (w < (C448_SCALAR_BITS - 1) / 16 + 1) {
+            /* Refill the 16 high bits of current */
+            current += (uint32_t)((scalar->limb[w / B_OVER_16]
+                       >> (16 * (w % B_OVER_16))) << 16);
+        }
+
+        while (current & 0xFFFF) {
+            uint32_t pos = NUMTRAILINGZEROS((uint32_t)current);
+            uint32_t odd = (uint32_t)current >> pos;
+            int32_t delta = odd & mask;
+
+            assert(position >= 0);
+            if (odd & (1 << (table_bits + 1)))
+                delta -= (1 << (table_bits + 1));
+            current -= delta << pos;
+            control[position].power = pos + 16 * (w - 1);
+            control[position].addend = delta;
+            position--;
+        }
+        current >>= 16;
+    }
+    assert(current == 0);
+
+    position++;
+    n = table_size - position;
+    for (i = 0; i < n; i++)
+        control[i] = control[i + position];
+
+    return n - 1;
+}
+
+static void prepare_wnaf_table(pniels_t * output,
+                               const curve448_point_t working,
+                               unsigned int tbits)
+{
+    curve448_point_t tmp;
+    int i;
+    pniels_t twop;
+
+    pt_to_pniels(output[0], working);
+
+    if (tbits == 0)
+        return;
+
+    curve448_point_double(tmp, working);
+    pt_to_pniels(twop, tmp);
+
+    add_pniels_to_pt(tmp, output[0], 0);
+    pt_to_pniels(output[1], tmp);
+
+    for (i = 2; i < 1 << tbits; i++) {
+        add_pniels_to_pt(tmp, twop, 0);
+        pt_to_pniels(output[i], tmp);
+    }
+
+    curve448_point_destroy(tmp);
+    OPENSSL_cleanse(twop, sizeof(twop));
+}
+
+void curve448_base_double_scalarmul_non_secret(curve448_point_t combo,
+                                               const curve448_scalar_t scalar1,
+                                               const curve448_point_t base2,
+                                               const curve448_scalar_t scalar2)
+{
+    const int table_bits_var = C448_WNAF_VAR_TABLE_BITS;
+    const int table_bits_pre = C448_WNAF_FIXED_TABLE_BITS;
+    struct smvt_control control_var[C448_SCALAR_BITS /
+                                    (C448_WNAF_VAR_TABLE_BITS + 1) + 3];
+    struct smvt_control control_pre[C448_SCALAR_BITS /
+                                    (C448_WNAF_FIXED_TABLE_BITS + 1) + 3];
+    int ncb_pre = recode_wnaf(control_pre, scalar1, table_bits_pre);
+    int ncb_var = recode_wnaf(control_var, scalar2, table_bits_var);
+    pniels_t precmp_var[1 << C448_WNAF_VAR_TABLE_BITS];
+    int contp = 0, contv = 0, i;
+
+    prepare_wnaf_table(precmp_var, base2, table_bits_var);
+    i = control_var[0].power;
+
+    if (i < 0) {
+        curve448_point_copy(combo, curve448_point_identity);
+        return;
+    }
+    if (i > control_pre[0].power) {
+        pniels_to_pt(combo, precmp_var[control_var[0].addend >> 1]);
+        contv++;
+    } else if (i == control_pre[0].power && i >= 0) {
+        pniels_to_pt(combo, precmp_var[control_var[0].addend >> 1]);
+        add_niels_to_pt(combo, curve448_wnaf_base[control_pre[0].addend >> 1],
+                        i);
+        contv++;
+        contp++;
+    } else {
+        i = control_pre[0].power;
+        niels_to_pt(combo, curve448_wnaf_base[control_pre[0].addend >> 1]);
+        contp++;
+    }
+
+    for (i--; i >= 0; i--) {
+        int cv = (i == control_var[contv].power);
+        int cp = (i == control_pre[contp].power);
+
+        point_double_internal(combo, combo, i && !(cv || cp));
+
+        if (cv) {
+            assert(control_var[contv].addend);
+
+            if (control_var[contv].addend > 0)
+                add_pniels_to_pt(combo,
+                                 precmp_var[control_var[contv].addend >> 1],
+                                 i && !cp);
+            else
+                sub_pniels_from_pt(combo,
+                                   precmp_var[(-control_var[contv].addend)
+                                              >> 1], i && !cp);
+            contv++;
+        }
+
+        if (cp) {
+            assert(control_pre[contp].addend);
+
+            if (control_pre[contp].addend > 0)
+                add_niels_to_pt(combo,
+                                curve448_wnaf_base[control_pre[contp].addend
+                                                   >> 1], i);
+            else
+                sub_niels_from_pt(combo,
+                                  curve448_wnaf_base[(-control_pre
+                                                      [contp].addend) >> 1], i);
+            contp++;
+        }
+    }
+
+    /* This function is non-secret, but whatever this is cheap. */
+    OPENSSL_cleanse(control_var, sizeof(control_var));
+    OPENSSL_cleanse(control_pre, sizeof(control_pre));
+    OPENSSL_cleanse(precmp_var, sizeof(precmp_var));
+
+    assert(contv == ncb_var);
+    (void)ncb_var;
+    assert(contp == ncb_pre);
+    (void)ncb_pre;
+}
+
+void curve448_point_destroy(curve448_point_t point)
+{
+    OPENSSL_cleanse(point, sizeof(curve448_point_t));
+}
+
+int X448(uint8_t out_shared_key[56], const uint8_t private_key[56],
+         const uint8_t peer_public_value[56])
+{
+    return x448_int(out_shared_key, peer_public_value, private_key)
+           == C448_SUCCESS;
+}
+
+void X448_public_from_private(uint8_t out_public_value[56],
+                              const uint8_t private_key[56])
+{
+    x448_derive_public_key(out_public_value, private_key);
+}
diff --git a/crypto/ec/curve448/curve448_lcl.h b/crypto/ec/curve448/curve448_lcl.h
new file mode 100644
index 0000000..2bc3bd8
--- /dev/null
+++ b/crypto/ec/curve448/curve448_lcl.h
@@ -0,0 +1,38 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#ifndef HEADER_CURVE448_LCL_H
+# define HEADER_CURVE448_LCL_H
+# include "curve448utils.h"
+
+int X448(uint8_t out_shared_key[56], const uint8_t private_key[56],
+         const uint8_t peer_public_value[56]);
+
+void X448_public_from_private(uint8_t out_public_value[56],
+                              const uint8_t private_key[56]);
+
+int ED448_sign(uint8_t *out_sig, const uint8_t *message, size_t message_len,
+               const uint8_t public_key[57], const uint8_t private_key[57],
+               const uint8_t *context, size_t context_len);
+
+int ED448_verify(const uint8_t *message, size_t message_len,
+                 const uint8_t signature[114], const uint8_t public_key[57],
+                 const uint8_t *context, size_t context_len);
+
+int ED448ph_sign(uint8_t *out_sig, const uint8_t hash[64],
+                 const uint8_t public_key[57], const uint8_t private_key[57],
+                 const uint8_t *context, size_t context_len);
+
+int ED448ph_verify(const uint8_t hash[64], const uint8_t signature[114],
+                   const uint8_t public_key[57], const uint8_t *context,
+                   size_t context_len);
+
+int ED448_public_from_private(uint8_t out_public_key[57],
+                              const uint8_t private_key[57]);
+
+#endif              /* HEADER_CURVE448_LCL_H */
diff --git a/crypto/ec/curve448/curve448_tables.c b/crypto/ec/curve448/curve448_tables.c
new file mode 100644
index 0000000..a1185b1
--- /dev/null
+++ b/crypto/ec/curve448/curve448_tables.c
@@ -0,0 +1,475 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include "field.h"
+
+#include "point_448.h"
+
+static const curve448_precomputed_s curve448_precomputed_base_table = {
+    {
+        {{
+            {FIELD_LITERAL(0x00cc3b062366f4cc,0x003d6e34e314aa3c,0x00d51c0a7521774d,0x0094e060eec6ab8b,0x00d21291b4d80082,0x00befed12b55ef1e,0x00c3dd2df5c94518,0x00e0a7b112b8d4e6)},
+            {FIELD_LITERAL(0x0019eb5608d8723a,0x00d1bab52fb3aedb,0x00270a7311ebc90c,0x0037c12b91be7f13,0x005be16cd8b5c704,0x003e181acda888e1,0x00bc1f00fc3fc6d0,0x00d3839bfa319e20)},
+            {FIELD_LITERAL(0x003caeb88611909f,0x00ea8b378c4df3d4,0x00b3295b95a5a19a,0x00a65f97514bdfb5,0x00b39efba743cab1,0x0016ba98b862fd2d,0x0001508812ee71d7,0x000a75740eea114a)},
+        }}, {{
+            {FIELD_LITERAL(0x00ebcf0eb649f823,0x00166d332e98ea03,0x0059ddf64f5cd5f6,0x0047763123d9471b,0x00a64065c53ef62f,0x00978e44c480153d,0x000b5b2a0265f194,0x0046a24b9f32965a)},
+            {FIELD_LITERAL(0x00b9eef787034df0,0x0020bc24de3390cd,0x000022160bae99bb,0x00ae66e886e97946,0x0048d4bbe02cbb8b,0x0072ba97b34e38d4,0x00eae7ec8f03e85a,0x005ba92ecf808b2c)},
+            {FIELD_LITERAL(0x00c9cfbbe74258fd,0x00843a979ea9eaa7,0x000cbb4371cfbe90,0x0059bac8f7f0a628,0x004b3dff882ff530,0x0011869df4d90733,0x00595aa71f4abfc2,0x0070e2d38990c2e6)},
+        }}, {{
+            {FIELD_LITERAL(0x00de2010c0a01733,0x00c739a612e24297,0x00a7212643141d7c,0x00f88444f6b67c11,0x00484b7b16ec28f2,0x009c1b8856af9c68,0x00ff4669591fe9d6,0x0054974be08a32c8)},
+            {FIELD_LITERAL(0x0010de3fd682ceed,0x008c07642d83ca4e,0x0013bb064e00a1cc,0x009411ae27870e11,0x00ea8e5b4d531223,0x0032fe7d2aaece2e,0x00d989e243e7bb41,0x000fe79a508e9b8b)},
+            {FIELD_LITERAL(0x005e0426b9bfc5b1,0x0041a5b1d29ee4fa,0x0015b0def7774391,0x00bc164f1f51af01,0x00d543b0942797b9,0x003c129b6398099c,0x002b114c6e5adf18,0x00b4e630e4018a7b)},
+        }}, {{
+            {FIELD_LITERAL(0x00d490afc95f8420,0x00b096bf50c1d9b9,0x00799fd707679866,0x007c74d9334afbea,0x00efaa8be80ff4ed,0x0075c4943bb81694,0x00c21c2fca161f36,0x00e77035d492bfee)},
+            {FIELD_LITERAL(0x006658a190dd6661,0x00e0e9bab38609a6,0x0028895c802237ed,0x006a0229c494f587,0x002dcde96c9916b7,0x00d158822de16218,0x00173b917a06856f,0x00ca78a79ae07326)},
+            {FIELD_LITERAL(0x00e35bfc79caced4,0x0087238a3e1fe3bb,0x00bcbf0ff4ceff5b,0x00a19c1c94099b91,0x0071e102b49db976,0x0059e3d004eada1e,0x008da78afa58a47e,0x00579c8ebf269187)},
+        }}, {{
+            {FIELD_LITERAL(0x00a16c2905eee75f,0x009d4bcaea2c7e1d,0x00d3bd79bfad19df,0x0050da745193342c,0x006abdb8f6b29ab1,0x00a24fe0a4fef7ef,0x0063730da1057dfb,0x00a08c312c8eb108)},
+            {FIELD_LITERAL(0x00b583be005375be,0x00a40c8f8a4e3df4,0x003fac4a8f5bdbf7,0x00d4481d872cd718,0x004dc8749cdbaefe,0x00cce740d5e5c975,0x000b1c1f4241fd21,0x00a76de1b4e1cd07)},
+            {FIELD_LITERAL(0x007a076500d30b62,0x000a6e117b7f090f,0x00c8712ae7eebd9a,0x000fbd6c1d5f6ff7,0x003a7977246ebf11,0x00166ed969c6600e,0x00aa42e469c98bec,0x00dc58f307cf0666)},
+        }}, {{
+            {FIELD_LITERAL(0x004b491f65a9a28b,0x006a10309e8a55b7,0x00b67210185187ef,0x00cf6497b12d9b8f,0x0085778c56e2b1ba,0x0015b4c07a814d85,0x00686479e62da561,0x008de5d88f114916)},
+            {FIELD_LITERAL(0x00e37c88d6bba7b1,0x003e4577e1b8d433,0x0050d8ea5f510ec0,0x0042fc9f2da9ef59,0x003bd074c1141420,0x00561b8b7b68774e,0x00232e5e5d1013a3,0x006b7f2cb3d7e73f)},
+            {FIELD_LITERAL(0x004bdd0f0b41e6a0,0x001773057c405d24,0x006029f99915bd97,0x006a5ba70a17fe2f,0x0046111977df7e08,0x004d8124c89fb6b7,0x00580983b2bb2724,0x00207bf330d6f3fe)},
+        }}, {{
+            {FIELD_LITERAL(0x007efdc93972a48b,0x002f5e50e78d5fee,0x0080dc11d61c7fe5,0x0065aa598707245b,0x009abba2300641be,0x000c68787656543a,0x00ffe0fef2dc0a17,0x00007ffbd6cb4f3a)},
+            {FIELD_LITERAL(0x0036012f2b836efc,0x00458c126d6b5fbc,0x00a34436d719ad1e,0x0097be6167117dea,0x0009c219c879cff3,0x0065564493e60755,0x00993ac94a8cdec0,0x002d4885a4d0dbaf)},
+            {FIELD_LITERAL(0x00598b60b4c068ba,0x00c547a0be7f1afd,0x009582164acf12af,0x00af4acac4fbbe40,0x005f6ca7c539121a,0x003b6e752ebf9d66,0x00f08a30d5cac5d4,0x00e399bb5f97c5a9)},
+        }}, {{
+            {FIELD_LITERAL(0x007445a0409c0a66,0x00a65c369f3829c0,0x0031d248a4f74826,0x006817f34defbe8e,0x00649741d95ebf2e,0x00d46466ab16b397,0x00fdc35703bee414,0x00343b43334525f8)},
+            {FIELD_LITERAL(0x001796bea93f6401,0x00090c5a42e85269,0x00672412ba1252ed,0x001201d47b6de7de,0x006877bccfe66497,0x00b554fd97a4c161,0x009753f42dbac3cf,0x00e983e3e378270a)},
+            {FIELD_LITERAL(0x00ac3eff18849872,0x00f0eea3bff05690,0x00a6d72c21dd505d,0x001b832642424169,0x00a6813017b540e5,0x00a744bd71b385cd,0x0022a7d089130a7b,0x004edeec9a133486)},
+        }}, {{
+            {FIELD_LITERAL(0x00b2d6729196e8a9,0x0088a9bb2031cef4,0x00579e7787dc1567,0x0030f49feb059190,0x00a0b1d69c7f7d8f,0x0040bdcc6d9d806f,0x00d76c4037edd095,0x00bbf24376415dd7)},
+            {FIELD_LITERAL(0x00240465ff5a7197,0x00bb97e76caf27d0,0x004b4edbf8116d39,0x001d8586f708cbaa,0x000f8ee8ff8e4a50,0x00dde5a1945dd622,0x00e6fc1c0957e07c,0x0041c9cdabfd88a0)},
+            {FIELD_LITERAL(0x005344b0bf5b548c,0x002957d0b705cc99,0x00f586a70390553d,0x0075b3229f583cc3,0x00a1aa78227490e4,0x001bf09cf7957717,0x00cf6bf344325f52,0x0065bd1c23ca3ecf)},
+        }}, {{
+            {FIELD_LITERAL(0x009bff3b3239363c,0x00e17368796ef7c0,0x00528b0fe0971f3a,0x0008014fc8d4a095,0x00d09f2e8a521ec4,0x006713ab5dde5987,0x0003015758e0dbb1,0x00215999f1ba212d)},
+            {FIELD_LITERAL(0x002c88e93527da0e,0x0077c78f3456aad5,0x0071087a0a389d1c,0x00934dac1fb96dbd,0x008470e801162697,0x005bc2196cd4ad49,0x00e535601d5087c3,0x00769888700f497f)},
+            {FIELD_LITERAL(0x00da7a4b557298ad,0x0019d2589ea5df76,0x00ef3e38be0c6497,0x00a9644e1312609a,0x004592f61b2558da,0x0082c1df510d7e46,0x0042809a535c0023,0x00215bcb5afd7757)},
+        }}, {{
+            {FIELD_LITERAL(0x002b9df55a1a4213,0x00dcfc3b464a26be,0x00c4f9e07a8144d5,0x00c8e0617a92b602,0x008e3c93accafae0,0x00bf1bcb95b2ca60,0x004ce2426a613bf3,0x00266cac58e40921)},
+            {FIELD_LITERAL(0x008456d5db76e8f0,0x0032ca9cab2ce163,0x0059f2b8bf91abcf,0x0063c2a021712788,0x00f86155af22f72d,0x00db98b2a6c005a0,0x00ac6e416a693ac4,0x007a93572af53226)},
+            {FIELD_LITERAL(0x0087767520f0de22,0x0091f64012279fb5,0x001050f1f0644999,0x004f097a2477ad3c,0x006b37913a9947bd,0x001a3d78645af241,0x0057832bbb3008a7,0x002c1d902b80dc20)},
+        }}, {{
+            {FIELD_LITERAL(0x001a6002bf178877,0x009bce168aa5af50,0x005fc318ff04a7f5,0x0052818f55c36461,0x008768f5d4b24afb,0x0037ffbae7b69c85,0x0018195a4b61edc0,0x001e12ea088434b2)},
+            {FIELD_LITERAL(0x0047d3f804e7ab07,0x00a809ab5f905260,0x00b3ffc7cdaf306d,0x00746e8ec2d6e509,0x00d0dade8887a645,0x00acceeebde0dd37,0x009bc2579054686b,0x0023804f97f1c2bf)},
+            {FIELD_LITERAL(0x0043e2e2e50b80d7,0x00143aafe4427e0f,0x005594aaecab855b,0x008b12ccaaecbc01,0x002deeb091082bc3,0x009cca4be2ae7514,0x00142b96e696d047,0x00ad2a2b1c05256a)},
+        }}, {{
+            {FIELD_LITERAL(0x003914f2f144b78b,0x007a95dd8bee6f68,0x00c7f4384d61c8e6,0x004e51eb60f1bdb2,0x00f64be7aa4621d8,0x006797bfec2f0ac0,0x007d17aab3c75900,0x001893e73cac8bc5)},
+            {FIELD_LITERAL(0x00140360b768665b,0x00b68aca4967f977,0x0001089b66195ae4,0x00fe71122185e725,0x000bca2618d49637,0x00a54f0557d7e98a,0x00cdcd2f91d6f417,0x00ab8c13741fd793)},
+            {FIELD_LITERAL(0x00725ee6b1e549e0,0x007124a0769777fa,0x000b68fdad07ae42,0x0085b909cd4952df,0x0092d2e3c81606f4,0x009f22f6cac099a0,0x00f59da57f2799a8,0x00f06c090122f777)},
+        }}, {{
+            {FIELD_LITERAL(0x00ce0bed0a3532bc,0x001a5048a22df16b,0x00e31db4cbad8bf1,0x00e89292120cf00e,0x007d1dd1a9b00034,0x00e2a9041ff8f680,0x006a4c837ae596e7,0x00713af1068070b3)},
+            {FIELD_LITERAL(0x00c4fe64ce66d04b,0x00b095d52e09b3d7,0x00758bbecb1a3a8e,0x00f35cce8d0650c0,0x002b878aa5984473,0x0062e0a3b7544ddc,0x00b25b290ed116fe,0x007b0f6abe0bebf2)},
+            {FIELD_LITERAL(0x0081d4e3addae0a8,0x003410c836c7ffcc,0x00c8129ad89e4314,0x000e3d5a23922dcd,0x00d91e46f29c31f3,0x006c728cde8c5947,0x002bc655ba2566c0,0x002ca94721533108)},
+        }}, {{
+            {FIELD_LITERAL(0x0051e4b3f764d8a9,0x0019792d46e904a0,0x00853bc13dbc8227,0x000840208179f12d,0x0068243474879235,0x0013856fbfe374d0,0x00bda12fe8676424,0x00bbb43635926eb2)},
+            {FIELD_LITERAL(0x0012cdc880a93982,0x003c495b21cd1b58,0x00b7e5c93f22a26e,0x0044aa82dfb99458,0x009ba092cdffe9c0,0x00a14b3ab2083b73,0x000271c2f70e1c4b,0x00eea9cac0f66eb8)},
+            {FIELD_LITERAL(0x001a1847c4ac5480,0x00b1b412935bb03a,0x00f74285983bf2b2,0x00624138b5b5d0f1,0x008820c0b03d38bf,0x00b94e50a18c1572,0x0060f6934841798f,0x00c52f5d66d6ebe2)},
+        }}, {{
+            {FIELD_LITERAL(0x00da23d59f9bcea6,0x00e0f27007a06a4b,0x00128b5b43a6758c,0x000cf50190fa8b56,0x00fc877aba2b2d72,0x00623bef52edf53f,0x00e6af6b819669e2,0x00e314dc34fcaa4f)},
+            {FIELD_LITERAL(0x0066e5eddd164d1e,0x00418a7c6fe28238,0x0002e2f37e962c25,0x00f01f56b5975306,0x0048842fa503875c,0x0057b0e968078143,0x00ff683024f3d134,0x0082ae28fcad12e4)},
+            {FIELD_LITERAL(0x0011ddfd21260e42,0x00d05b0319a76892,0x00183ea4368e9b8f,0x00b0815662affc96,0x00b466a5e7ce7c88,0x00db93b07506e6ee,0x0033885f82f62401,0x0086f9090ec9b419)},
+        }}, {{
+            {FIELD_LITERAL(0x00d95d1c5fcb435a,0x0016d1ed6b5086f9,0x00792aa0b7e54d71,0x0067b65715f1925d,0x00a219755ec6176b,0x00bc3f026b12c28f,0x00700c897ffeb93e,0x0089b83f6ec50b46)},
+            {FIELD_LITERAL(0x003c97e6384da36e,0x00423d53eac81a09,0x00b70d68f3cdce35,0x00ee7959b354b92c,0x00f4e9718819c8ca,0x009349f12acbffe9,0x005aee7b62cb7da6,0x00d97764154ffc86)},
+            {FIELD_LITERAL(0x00526324babb46dc,0x002ee99b38d7bf9e,0x007ea51794706ef4,0x00abeb04da6e3c39,0x006b457c1d281060,0x00fe243e9a66c793,0x00378de0fb6c6ee4,0x003e4194b9c3cb93)},
+        }}, {{
+            {FIELD_LITERAL(0x00fed3cd80ca2292,0x0015b043a73ca613,0x000a9fd7bf9be227,0x003b5e03de2db983,0x005af72d46904ef7,0x00c0f1b5c49faa99,0x00dc86fc3bd305e1,0x00c92f08c1cb1797)},
+            {FIELD_LITERAL(0x0079680ce111ed3b,0x001a1ed82806122c,0x000c2e7466d15df3,0x002c407f6f7150fd,0x00c5e7c96b1b0ce3,0x009aa44626863ff9,0x00887b8b5b80be42,0x00b6023cec964825)},
+            {FIELD_LITERAL(0x00e4a8e1048970c8,0x0062887b7830a302,0x00bcf1c8cd81402b,0x0056dbb81a68f5be,0x0014eced83f12452,0x00139e1a510150df,0x00bb81140a82d1a3,0x000febcc1aaf1aa7)},
+        }}, {{
+            {FIELD_LITERAL(0x00a7527958238159,0x0013ec9537a84cd6,0x001d7fee7d562525,0x00b9eefa6191d5e5,0x00dbc97db70bcb8a,0x00481affc7a4d395,0x006f73d3e70c31bb,0x00183f324ed96a61)},
+            {FIELD_LITERAL(0x0039dd7ce7fc6860,0x00d64f6425653da1,0x003e037c7f57d0af,0x0063477a06e2bcf2,0x001727dbb7ac67e6,0x0049589f5efafe2e,0x00fc0fef2e813d54,0x008baa5d087fb50d)},
+            {FIELD_LITERAL(0x0024fb59d9b457c7,0x00a7d4e060223e4c,0x00c118d1b555fd80,0x0082e216c732f22a,0x00cd2a2993089504,0x003638e836a3e13d,0x000d855ee89b4729,0x008ec5b7d4810c91)},
+        }}, {{
+            {FIELD_LITERAL(0x001bf51f7d65cdfd,0x00d14cdafa16a97d,0x002c38e60fcd10e7,0x00a27446e393efbd,0x000b5d8946a71fdd,0x0063df2cde128f2f,0x006c8679569b1888,0x0059ffc4925d732d)},
+            {FIELD_LITERAL(0x00ece96f95f2b66f,0x00ece7952813a27b,0x0026fc36592e489e,0x007157d1a2de0f66,0x00759dc111d86ddf,0x0012881e5780bb0f,0x00c8ccc83ad29496,0x0012b9bd1929eb71)},
+            {FIELD_LITERAL(0x000fa15a20da5df0,0x00349ddb1a46cd31,0x002c512ad1d8e726,0x00047611f669318d,0x009e68fba591e17e,0x004320dffa803906,0x00a640874951a3d3,0x00b6353478baa24f)},
+        }}, {{
+            {FIELD_LITERAL(0x009696510000d333,0x00ec2f788bc04826,0x000e4d02b1f67ba5,0x00659aa8dace08b6,0x00d7a38a3a3ae533,0x008856defa8c746b,0x004d7a4402d3da1a,0x00ea82e06229260f)},
+            {FIELD_LITERAL(0x006a15bb20f75c0c,0x0079a144027a5d0c,0x00d19116ce0b4d70,0x0059b83bcb0b268e,0x005f58f63f16c127,0x0079958318ee2c37,0x00defbb063d07f82,0x00f1f0b931d2d446)},
+            {FIELD_LITERAL(0x00cb5e4c3c35d422,0x008df885ca43577f,0x00fa50b16ca3e471,0x005a0e58e17488c8,0x00b2ceccd6d34d19,0x00f01d5d235e36e9,0x00db2e7e4be6ca44,0x00260ab77f35fccd)},
+        }}, {{
+            {FIELD_LITERAL(0x006f6fd9baac61d5,0x002a7710a020a895,0x009de0db7fc03d4d,0x00cdedcb1875f40b,0x00050caf9b6b1e22,0x005e3a6654456ab0,0x00775fdf8c4423d4,0x0028701ea5738b5d)},
+            {FIELD_LITERAL(0x009ffd90abfeae96,0x00cba3c2b624a516,0x005ef08bcee46c91,0x00e6fde30afb6185,0x00f0b4db4f818ce4,0x006c54f45d2127f5,0x00040125035854c7,0x00372658a3287e13)},
+            {FIELD_LITERAL(0x00d7070fb1beb2ab,0x0078fc845a93896b,0x006894a4b2f224a6,0x005bdd8192b9dbde,0x00b38839874b3a9e,0x00f93618b04b7a57,0x003e3ec75fd2c67e,0x00bf5e6bfc29494a)},
+        }}, {{
+            {FIELD_LITERAL(0x00f19224ebba2aa5,0x0074f89d358e694d,0x00eea486597135ad,0x0081579a4555c7e1,0x0010b9b872930a9d,0x00f002e87a30ecc0,0x009b9d66b6de56e2,0x00a3c4f45e8004eb)},
+            {FIELD_LITERAL(0x0045e8dda9400888,0x002ff12e5fc05db7,0x00a7098d54afe69c,0x00cdbe846a500585,0x00879c1593ca1882,0x003f7a7fea76c8b0,0x002cd73dd0c8e0a1,0x00645d6ce96f51fe)},
+            {FIELD_LITERAL(0x002b7e83e123d6d6,0x00398346f7419c80,0x0042922e55940163,0x005e7fc5601886a3,0x00e88f2cee1d3103,0x00e7fab135f2e377,0x00b059984dbf0ded,0x0009ce080faa5bb8)},
+        }}, {{
+            {FIELD_LITERAL(0x0085e78af7758979,0x00275a4ee1631a3a,0x00d26bc0ed78b683,0x004f8355ea21064f,0x00d618e1a32696e5,0x008d8d7b150e5680,0x00a74cd854b278d2,0x001dd62702203ea0)},
+            {FIELD_LITERAL(0x00f89335c2a59286,0x00a0f5c905d55141,0x00b41fb836ee9382,0x00e235d51730ca43,0x00a5cb37b5c0a69a,0x009b966ffe136c45,0x00cb2ea10bf80ed1,0x00fb2b370b40dc35)},
+            {FIELD_LITERAL(0x00d687d16d4ee8ba,0x0071520bdd069dff,0x00de85c60d32355d,0x0087d2e3565102f4,0x00cde391b8dfc9aa,0x00e18d69efdfefe5,0x004a9d0591954e91,0x00fa36dd8b50eee5)},
+        }}, {{
+            {FIELD_LITERAL(0x002e788749a865f7,0x006e4dc3116861ea,0x009f1428c37276e6,0x00e7d2e0fc1e1226,0x003aeebc6b6c45f6,0x0071a8073bf500c9,0x004b22ad986b530c,0x00f439e63c0d79d4)},
+            {FIELD_LITERAL(0x006bc3d53011f470,0x00032d6e692b83e8,0x00059722f497cd0b,0x0009b4e6f0c497cc,0x0058a804b7cce6c0,0x002b71d3302bbd5d,0x00e2f82a36765fce,0x008dded99524c703)},
+            {FIELD_LITERAL(0x004d058953747d64,0x00701940fe79aa6f,0x00a620ac71c760bf,0x009532b611158b75,0x00547ed7f466f300,0x003cb5ab53a8401a,0x00c7763168ce3120,0x007e48e33e4b9ab2)},
+        }}, {{
+            {FIELD_LITERAL(0x001b2fc57bf3c738,0x006a3f918993fb80,0x0026f7a14fdec288,0x0075a2cdccef08db,0x00d3ecbc9eecdbf1,0x0048c40f06e5bf7f,0x00d63e423009896b,0x000598bc99c056a8)},
+            {FIELD_LITERAL(0x002f194eaafa46dc,0x008e38f57fe87613,0x00dc8e5ae25f4ab2,0x000a17809575e6bd,0x00d3ec7923ba366a,0x003a7e72e0ad75e3,0x0010024b88436e0a,0x00ed3c5444b64051)},
+            {FIELD_LITERAL(0x00831fc1340af342,0x00c9645669466d35,0x007692b4cc5a080f,0x009fd4a47ac9259f,0x001eeddf7d45928b,0x003c0446fc45f28b,0x002c0713aa3e2507,0x0095706935f0f41e)},
+        }}, {{
+            {FIELD_LITERAL(0x00766ae4190ec6d8,0x0065768cabc71380,0x00b902598416cdc2,0x00380021ad38df52,0x008f0b89d6551134,0x004254d4cc62c5a5,0x000d79f4484b9b94,0x00b516732ae3c50e)},
+            {FIELD_LITERAL(0x001fb73475c45509,0x00d2b2e5ea43345a,0x00cb3c3842077bd1,0x0029f90ad820946e,0x007c11b2380778aa,0x009e54ece62c1704,0x004bc60c41ca01c3,0x004525679a5a0b03)},
+            {FIELD_LITERAL(0x00c64fbddbed87b3,0x0040601d11731faa,0x009c22475b6f9d67,0x0024b79dae875f15,0x00616fed3f02c3b0,0x0000cf39f6af2d3b,0x00c46bac0aa9a688,0x00ab23e2800da204)},
+        }}, {{
+            {FIELD_LITERAL(0x000b3a37617632b0,0x00597199fe1cfb6c,0x0042a7ccdfeafdd6,0x004cc9f15ebcea17,0x00f436e596a6b4a4,0x00168861142df0d8,0x000753edfec26af5,0x000c495d7e388116)},
+            {FIELD_LITERAL(0x0017085f4a346148,0x00c7cf7a37f62272,0x001776e129bc5c30,0x009955134c9eef2a,0x001ba5bdf1df07be,0x00ec39497103a55c,0x006578354fda6cfb,0x005f02719d4f15ee)},
+            {FIELD_LITERAL(0x0052b9d9b5d9655d,0x00d4ec7ba1b461c3,0x00f95df4974f280b,0x003d8e5ca11aeb51,0x00d4981eb5a70b26,0x000af9a4f6659f29,0x004598c846faeb43,0x0049d9a183a47670)},
+        }}, {{
+            {FIELD_LITERAL(0x000a72d23dcb3f1f,0x00a3737f84011727,0x00f870c0fbbf4a47,0x00a7aadd04b5c9ca,0x000c7715c67bd072,0x00015a136afcd74e,0x0080d5caea499634,0x0026b448ec7514b7)},
+            {FIELD_LITERAL(0x00b60167d9e7d065,0x00e60ba0d07381e8,0x003a4f17b725c2d4,0x006c19fe176b64fa,0x003b57b31af86ccb,0x0021047c286180fd,0x00bdc8fb00c6dbb6,0x00fe4a9f4bab4f3f)},
+            {FIELD_LITERAL(0x0088ffc3a16111f7,0x009155e4245d0bc8,0x00851d68220572d5,0x00557ace1e514d29,0x0031d7c339d91022,0x00101d0ae2eaceea,0x00246ab3f837b66a,0x00d5216d381ff530)},
+        }}, {{
+            {FIELD_LITERAL(0x0057e7ea35f36dae,0x00f47d7ad15de22e,0x00d757ea4b105115,0x008311457d579d7e,0x00b49b75b1edd4eb,0x0081c7ff742fd63a,0x00ddda3187433df6,0x00475727d55f9c66)},
+            {FIELD_LITERAL(0x00a6295218dc136a,0x00563b3af0e9c012,0x00d3753b0145db1b,0x004550389c043dc1,0x00ea94ae27401bdf,0x002b0b949f2b7956,0x00c63f780ad8e23c,0x00e591c47d6bab15)},
+            {FIELD_LITERAL(0x00416c582b058eb6,0x004107da5b2cc695,0x00b3cd2556aeec64,0x00c0b418267e57a1,0x001799293579bd2e,0x0046ed44590e4d07,0x001d7459b3630a1e,0x00c6afba8b6696aa)},
+        }}, {{
+            {FIELD_LITERAL(0x008d6009b26da3f8,0x00898e88ca06b1ca,0x00edb22b2ed7fe62,0x00fbc93516aabe80,0x008b4b470c42ce0d,0x00e0032ba7d0dcbb,0x00d76da3a956ecc8,0x007f20fe74e3852a)},
+            {FIELD_LITERAL(0x002419222c607674,0x00a7f23af89188b3,0x00ad127284e73d1c,0x008bba582fae1c51,0x00fc6aa7ca9ecab1,0x003df5319eb6c2ba,0x002a05af8a8b199a,0x004bf8354558407c)},
+            {FIELD_LITERAL(0x00ce7d4a30f0fcbf,0x00d02c272629f03d,0x0048c001f7400bc2,0x002c21368011958d,0x0098a550391e96b5,0x002d80b66390f379,0x001fa878760cc785,0x001adfce54b613d5)},
+        }}, {{
+            {FIELD_LITERAL(0x001ed4dc71fa2523,0x005d0bff19bf9b5c,0x00c3801cee065a64,0x001ed0b504323fbf,0x0003ab9fdcbbc593,0x00df82070178b8d2,0x00a2bcaa9c251f85,0x00c628a3674bd02e)},
+            {FIELD_LITERAL(0x006b7a0674f9f8de,0x00a742414e5c7cff,0x0041cbf3c6e13221,0x00e3a64fd207af24,0x0087c05f15fbe8d1,0x004c50936d9e8a33,0x001306ec21042b6d,0x00a4f4137d1141c2)},
+            {FIELD_LITERAL(0x0009e6fb921568b0,0x00b3c60120219118,0x002a6c3460dd503a,0x009db1ef11654b54,0x0063e4bf0be79601,0x00670d34bb2592b9,0x00dcee2f6c4130ce,0x00b2682e88e77f54)},
+        }}, {{
+            {FIELD_LITERAL(0x000d5b4b3da135ab,0x00838f3e5064d81d,0x00d44eb50f6d94ed,0x0008931ab502ac6d,0x00debe01ca3d3586,0x0025c206775f0641,0x005ad4b6ae912763,0x007e2c318ad8f247)},
+            {FIELD_LITERAL(0x00ddbe0750dd1add,0x004b3c7b885844b8,0x00363e7ecf12f1ae,0x0062e953e6438f9d,0x0023cc73b076afe9,0x00b09fa083b4da32,0x00c7c3d2456c541d,0x005b591ec6b694d4)},
+            {FIELD_LITERAL(0x0028656e19d62fcf,0x0052a4af03df148d,0x00122765ddd14e42,0x00f2252904f67157,0x004741965b636f3a,0x006441d296132cb9,0x005e2106f956a5b7,0x00247029592d335c)},
+        }}, {{
+            {FIELD_LITERAL(0x003fe038eb92f894,0x000e6da1b72e8e32,0x003a1411bfcbe0fa,0x00b55d473164a9e4,0x00b9a775ac2df48d,0x0002ddf350659e21,0x00a279a69eb19cb3,0x00f844eab25cba44)},
+            {FIELD_LITERAL(0x00c41d1f9c1f1ac1,0x007b2df4e9f19146,0x00b469355fd5ba7a,0x00b5e1965afc852a,0x00388d5f1e2d8217,0x0022079e4c09ae93,0x0014268acd4ef518,0x00c1dd8d9640464c)},
+            {FIELD_LITERAL(0x0038526adeed0c55,0x00dd68c607e3fe85,0x00f746ddd48a5d57,0x0042f2952b963b7c,0x001cbbd6876d5ec2,0x005e341470bca5c2,0x00871d41e085f413,0x00e53ab098f45732)},
+        }}, {{
+            {FIELD_LITERAL(0x004d51124797c831,0x008f5ae3750347ad,0x0070ced94c1a0c8e,0x00f6db2043898e64,0x000d00c9a5750cd0,0x000741ec59bad712,0x003c9d11aab37b7f,0x00a67ba169807714)},
+            {FIELD_LITERAL(0x00adb2c1566e8b8f,0x0096c68a35771a9a,0x00869933356f334a,0x00ba9c93459f5962,0x009ec73fb6e8ca4b,0x003c3802c27202e1,0x0031f5b733e0c008,0x00f9058c19611fa9)},
+            {FIELD_LITERAL(0x00238f01814a3421,0x00c325a44b6cce28,0x002136f97aeb0e73,0x000cac8268a4afe2,0x0022fd218da471b3,0x009dcd8dfff8def9,0x00cb9f8181d999bb,0x00143ae56edea349)},
+        }}, {{
+            {FIELD_LITERAL(0x0000623bf87622c5,0x00a1966fdd069496,0x00c315b7b812f9fc,0x00bdf5efcd128b97,0x001d464f532e3e16,0x003cd94f081bfd7e,0x00ed9dae12ce4009,0x002756f5736eee70)},
+            {FIELD_LITERAL(0x00a5187e6ee7341b,0x00e6d52e82d83b6e,0x00df3c41323094a7,0x00b3324f444e9de9,0x00689eb21a35bfe5,0x00f16363becd548d,0x00e187cc98e7f60f,0x00127d9062f0ccab)},
+            {FIELD_LITERAL(0x004ad71b31c29e40,0x00a5fcace12fae29,0x004425b5597280ed,0x00e7ef5d716c3346,0x0010b53ada410ac8,0x0092310226060c9b,0x0091c26128729c7e,0x0088b42900f8ec3b)},
+        }}, {{
+            {FIELD_LITERAL(0x00f1e26e9762d4a8,0x00d9d74082183414,0x00ffec9bd57a0282,0x000919e128fd497a,0x00ab7ae7d00fe5f8,0x0054dc442851ff68,0x00c9ebeb3b861687,0x00507f7cab8b698f)},
+            {FIELD_LITERAL(0x00c13c5aae3ae341,0x009c6c9ed98373e7,0x00098f26864577a8,0x0015b886e9488b45,0x0037692c42aadba5,0x00b83170b8e7791c,0x001670952ece1b44,0x00fd932a39276da2)},
+            {FIELD_LITERAL(0x0081a3259bef3398,0x005480fff416107b,0x00ce4f607d21be98,0x003ffc084b41df9b,0x0043d0bb100502d1,0x00ec35f575ba3261,0x00ca18f677300ef3,0x00e8bb0a827d8548)},
+        }}, {{
+            {FIELD_LITERAL(0x00df76b3328ada72,0x002e20621604a7c2,0x00f910638a105b09,0x00ef4724d96ef2cd,0x00377d83d6b8a2f7,0x00b4f48805ade324,0x001cd5da8b152018,0x0045af671a20ca7f)},
+            {FIELD_LITERAL(0x009ae3b93a56c404,0x004a410b7a456699,0x00023a619355e6b2,0x009cdc7297387257,0x0055b94d4ae70d04,0x002cbd607f65b005,0x003208b489697166,0x00ea2aa058867370)},
+            {FIELD_LITERAL(0x00f29d2598ee3f32,0x00b4ac5385d82adc,0x007633eaf04df19b,0x00aa2d3d77ceab01,0x004a2302fcbb778a,0x00927f225d5afa34,0x004a8e9d5047f237,0x008224ae9dbce530)},
+        }}, {{
+            {FIELD_LITERAL(0x001cf640859b02f8,0x00758d1d5d5ce427,0x00763c784ef4604c,0x005fa81aee205270,0x00ac537bfdfc44cb,0x004b919bd342d670,0x00238508d9bf4b7a,0x00154888795644f3)},
+            {FIELD_LITERAL(0x00c845923c084294,0x00072419a201bc25,0x0045f408b5f8e669,0x00e9d6a186b74dfe,0x00e19108c68fa075,0x0017b91d874177b7,0x002f0ca2c7912c5a,0x009400aa385a90a2)},
+            {FIELD_LITERAL(0x0071110b01482184,0x00cfed0044f2bef8,0x0034f2901cf4662e,0x003b4ae2a67f9834,0x00cca9b96fe94810,0x00522507ae77abd0,0x00bac7422721e73e,0x0066622b0f3a62b0)},
+        }}, {{
+            {FIELD_LITERAL(0x00f8ac5cf4705b6a,0x00867d82dcb457e3,0x007e13ab2ccc2ce9,0x009ee9a018d3930e,0x008370f8ecb42df8,0x002d9f019add263e,0x003302385b92d196,0x00a15654536e2c0c)},
+            {FIELD_LITERAL(0x0026ef1614e160af,0x00c023f9edfc9c76,0x00cff090da5f57ba,0x0076db7a66643ae9,0x0019462f8c646999,0x008fec00b3854b22,0x00d55041692a0a1c,0x0065db894215ca00)},
+            {FIELD_LITERAL(0x00a925036e0a451c,0x002a0390c36b6cc1,0x00f27020d90894f4,0x008d90d52cbd3d7f,0x00e1d0137392f3b8,0x00f017c158b51a8f,0x00cac313d3ed7dbc,0x00b99a81e3eb42d3)},
+        }}, {{
+            {FIELD_LITERAL(0x00b54850275fe626,0x0053a3fd1ec71140,0x00e3d2d7dbe096fa,0x00e4ac7b595cce4c,0x0077bad449c0a494,0x00b7c98814afd5b3,0x0057226f58486cf9,0x00b1557154f0cc57)},
+            {FIELD_LITERAL(0x008cc9cd236315c0,0x0031d9c5b39fda54,0x00a5713ef37e1171,0x00293d5ae2886325,0x00c4aba3e05015e1,0x0003f35ef78e4fc6,0x0039d6bd3ac1527b,0x0019d7c3afb77106)},
+            {FIELD_LITERAL(0x007b162931a985af,0x00ad40a2e0daa713,0x006df27c4009f118,0x00503e9f4e2e8bec,0x00751a77c82c182d,0x000298937769245b,0x00ffb1e8fabf9ee5,0x0008334706e09abe)},
+        }}, {{
+            {FIELD_LITERAL(0x00dbca4e98a7dcd9,0x00ee29cfc78bde99,0x00e4a3b6995f52e9,0x0045d70189ae8096,0x00fd2a8a3b9b0d1b,0x00af1793b107d8e1,0x00dbf92cbe4afa20,0x00da60f798e3681d)},
+            {FIELD_LITERAL(0x004246bfcecc627a,0x004ba431246c03a4,0x00bd1d101872d497,0x003b73d3f185ee16,0x001feb2e2678c0e3,0x00ff13c5a89dec76,0x00ed06042e771d8f,0x00a4fd2a897a83dd)},
+            {FIELD_LITERAL(0x009a4a3be50d6597,0x00de3165fc5a1096,0x004f3f56e345b0c7,0x00f7bf721d5ab8bc,0x004313e47b098c50,0x00e4c7d5c0e1adbb,0x002e3e3db365051e,0x00a480c2cd6a96fb)},
+        }}, {{
+            {FIELD_LITERAL(0x00417fa30a7119ed,0x00af257758419751,0x00d358a487b463d4,0x0089703cc720b00d,0x00ce56314ff7f271,0x0064db171ade62c1,0x00640b36d4a22fed,0x00424eb88696d23f)},
+            {FIELD_LITERAL(0x004ede34af2813f3,0x00d4a8e11c9e8216,0x004796d5041de8a5,0x00c4c6b4d21cc987,0x00e8a433ee07fa1e,0x0055720b5abcc5a1,0x008873ea9c74b080,0x005b3fec1ab65d48)},
+            {FIELD_LITERAL(0x0047e5277db70ec5,0x000a096c66db7d6b,0x00b4164cc1730159,0x004a9f783fe720fe,0x00a8177b94449dbc,0x0095a24ff49a599f,0x0069c1c578250cbc,0x00452019213debf4)},
+        }}, {{
+            {FIELD_LITERAL(0x0021ce99e09ebda3,0x00fcbd9f91875ad0,0x009bbf6b7b7a0b5f,0x00388886a69b1940,0x00926a56d0f81f12,0x00e12903c3358d46,0x005dfce4e8e1ce9d,0x0044cfa94e2f7e23)},
+            {FIELD_LITERAL(0x001bd59c09e982ea,0x00f72daeb937b289,0x0018b76dca908e0e,0x00edb498512384ad,0x00ce0243b6cc9538,0x00f96ff690cb4e70,0x007c77bf9f673c8d,0x005bf704c088a528)},
+            {FIELD_LITERAL(0x0093d4628dcb33be,0x0095263d51d42582,0x0049b3222458fe06,0x00e7fce73b653a7f,0x003ca2ebce60b369,0x00c5de239a32bea4,0x0063b8b3d71fb6bf,0x0039aeeb78a1a839)},
+        }}, {{
+            {FIELD_LITERAL(0x007dc52da400336c,0x001fded1e15b9457,0x00902e00f5568e3a,0x00219bef40456d2d,0x005684161fb3dbc9,0x004a4e9be49a76ea,0x006e685ae88b78ff,0x0021c42f13042d3c)},
+            {FIELD_LITERAL(0x00fb22bb5fd3ce50,0x0017b48aada7ae54,0x00fd5c44ad19a536,0x000ccc4e4e55e45c,0x00fd637d45b4c3f5,0x0038914e023c37cf,0x00ac1881d6a8d898,0x00611ed8d3d943a8)},
+            {FIELD_LITERAL(0x0056e2259d113d2b,0x00594819b284ec16,0x00c7bf794bb36696,0x00721ee75097cdc6,0x00f71be9047a2892,0x00df6ba142564edf,0x0069580b7a184e8d,0x00f056e38fca0fee)},
+        }}, {{
+            {FIELD_LITERAL(0x009df98566a18c6d,0x00cf3a200968f219,0x0044ba60da6d9086,0x00dbc9c0e344da03,0x000f9401c4466855,0x00d46a57c5b0a8d1,0x00875a635d7ac7c6,0x00ef4a933b7e0ae6)},
+            {FIELD_LITERAL(0x005e8694077a1535,0x008bef75f71c8f1d,0x000a7c1316423511,0x00906e1d70604320,0x003fc46c1a2ffbd6,0x00d1d5022e68f360,0x002515fba37bbf46,0x00ca16234e023b44)},
+            {FIELD_LITERAL(0x00787c99561f4690,0x00a857a8c1561f27,0x00a10df9223c09fe,0x00b98a9562e3b154,0x004330b8744c3ed2,0x00e06812807ec5c4,0x00e4cf6a7db9f1e3,0x00d95b089f132a34)},
+        }}, {{
+            {FIELD_LITERAL(0x002922b39ca33eec,0x0090d12a5f3ab194,0x00ab60c02fb5f8ed,0x00188d292abba1cf,0x00e10edec9698f6e,0x0069a4d9934133c8,0x0024aac40e6d3d06,0x001702c2177661b0)},
+            {FIELD_LITERAL(0x00139078397030bd,0x000e3c447e859a00,0x0064a5b334c82393,0x00b8aabeb7358093,0x00020778bb9ae73b,0x0032ee94c7892a18,0x008215253cb41bda,0x005e2797593517ae)},
+            {FIELD_LITERAL(0x0083765a5f855d4a,0x0051b6d1351b8ee2,0x00116de548b0f7bb,0x0087bd88703affa0,0x0095b2cc34d7fdd2,0x0084cd81b53f0bc8,0x008562fc995350ed,0x00a39abb193651e3)},
+        }}, {{
+            {FIELD_LITERAL(0x0019e23f0474b114,0x00eb94c2ad3b437e,0x006ddb34683b75ac,0x00391f9209b564c6,0x00083b3bb3bff7aa,0x00eedcd0f6dceefc,0x00b50817f794fe01,0x0036474deaaa75c9)},
+            {FIELD_LITERAL(0x0091868594265aa2,0x00797accae98ca6d,0x0008d8c5f0f8a184,0x00d1f4f1c2b2fe6e,0x0036783dfb48a006,0x008c165120503527,0x0025fd780058ce9b,0x0068beb007be7d27)},
+            {FIELD_LITERAL(0x00d0ff88aa7c90c2,0x00b2c60dacf53394,0x0094a7284d9666d6,0x00bed9022ce7a19d,0x00c51553f0cd7682,0x00c3fb870b124992,0x008d0bc539956c9b,0x00fc8cf258bb8885)},
+        }}, {{
+            {FIELD_LITERAL(0x003667bf998406f8,0x0000115c43a12975,0x001e662f3b20e8fd,0x0019ffa534cb24eb,0x00016be0dc8efb45,0x00ff76a8b26243f5,0x00ae20d241a541e3,0x0069bd6af13cd430)},
+            {FIELD_LITERAL(0x0045fdc16487cda3,0x00b2d8e844cf2ed7,0x00612c50e88c1607,0x00a08aabc66c1672,0x006031fdcbb24d97,0x001b639525744b93,0x004409d62639ab17,0x00a1853d0347ab1d)},
+            {FIELD_LITERAL(0x0075a1a56ebf5c21,0x00a3e72be9ac53ed,0x00efcde1629170c2,0x0004225fe91ef535,0x0088049fc73dfda7,0x004abc74857e1288,0x0024e2434657317c,0x00d98cb3d3e5543c)},
+        }}, {{
+            {FIELD_LITERAL(0x00b4b53eab6bdb19,0x009b22d8b43711d0,0x00d948b9d961785d,0x00cb167b6f279ead,0x00191de3a678e1c9,0x00d9dd9511095c2e,0x00f284324cd43067,0x00ed74fa535151dd)},
+            {FIELD_LITERAL(0x007e32c049b5c477,0x009d2bfdbd9bcfd8,0x00636e93045938c6,0x007fde4af7687298,0x0046a5184fafa5d3,0x0079b1e7f13a359b,0x00875adf1fb927d6,0x00333e21c61bcad2)},
+            {FIELD_LITERAL(0x00048014f73d8b8d,0x0075684aa0966388,0x0092be7df06dc47c,0x0097cebcd0f5568a,0x005a7004d9c4c6a9,0x00b0ecbb659924c7,0x00d90332dd492a7c,0x0057fc14df11493d)},
+        }}, {{
+            {FIELD_LITERAL(0x0008ed8ea0ad95be,0x0041d324b9709645,0x00e25412257a19b4,0x0058df9f3423d8d2,0x00a9ab20def71304,0x009ae0dbf8ac4a81,0x00c9565977e4392a,0x003c9269444baf55)},
+            {FIELD_LITERAL(0x007df6cbb926830b,0x00d336058ae37865,0x007af47dac696423,0x0048d3011ec64ac8,0x006b87666e40049f,0x0036a2e0e51303d7,0x00ba319bd79dbc55,0x003e2737ecc94f53)},
+            {FIELD_LITERAL(0x00d296ff726272d9,0x00f6d097928fcf57,0x00e0e616a55d7013,0x00deaf454ed9eac7,0x0073a56bedef4d92,0x006ccfdf6fc92e19,0x009d1ee1371a7218,0x00ee3c2ee4462d80)},
+        }}, {{
+            {FIELD_LITERAL(0x00437bce9bccdf9d,0x00e0c8e2f85dc0a3,0x00c91a7073995a19,0x00856ec9fe294559,0x009e4b33394b156e,0x00e245b0dc497e5c,0x006a54e687eeaeff,0x00f1cd1cd00fdb7c)},
+            {FIELD_LITERAL(0x008132ae5c5d8cd1,0x00121d68324a1d9f,0x00d6be9dafcb8c76,0x00684d9070edf745,0x00519fbc96d7448e,0x00388182fdc1f27e,0x000235baed41f158,0x00bf6cf6f1a1796a)},
+            {FIELD_LITERAL(0x002adc4b4d148219,0x003084ada0d3a90a,0x0046de8aab0f2e4e,0x00452d342a67b5fd,0x00d4b50f01d4de21,0x00db6d9fc0cefb79,0x008c184c86a462cd,0x00e17c83764d42da)},
+        }}, {{
+            {FIELD_LITERAL(0x007b2743b9a1e01a,0x007847ffd42688c4,0x006c7844d610a316,0x00f0cb8b250aa4b0,0x00a19060143b3ae6,0x0014eb10b77cfd80,0x000170905729dd06,0x00063b5b9cd72477)},
+            {FIELD_LITERAL(0x00ce382dc7993d92,0x00021153e938b4c8,0x00096f7567f48f51,0x0058f81ddfe4b0d5,0x00cc379a56b355c7,0x002c760770d3e819,0x00ee22d1d26e5a40,0x00de6d93d5b082d7)},
+            {FIELD_LITERAL(0x000a91a42c52e056,0x00185f6b77fce7ea,0x000803c51962f6b5,0x0022528582ba563d,0x0043f8040e9856d6,0x0085a29ec81fb860,0x005f9a611549f5ff,0x00c1f974ecbd4b06)},
+        }}, {{
+            {FIELD_LITERAL(0x005b64c6fd65ec97,0x00c1fdd7f877bc7f,0x000d9cc6c89f841c,0x005c97b7f1aff9ad,0x0075e3c61475d47e,0x001ecb1ba8153011,0x00fe7f1c8d71d40d,0x003fa9757a229832)},
+            {FIELD_LITERAL(0x00ffc5c89d2b0cba,0x00d363d42e3e6fc3,0x0019a1a0118e2e8a,0x00f7baeff48882e1,0x001bd5af28c6b514,0x0055476ca2253cb2,0x00d8eb1977e2ddf3,0x00b173b1adb228a1)},
+            {FIELD_LITERAL(0x00f2cb99dd0ad707,0x00e1e08b6859ddd8,0x000008f2d0650bcc,0x00d7ed392f8615c3,0x00976750a94da27f,0x003e83bb0ecb69ba,0x00df8e8d15c14ac6,0x00f9f7174295d9c2)},
+        }}, {{
+            {FIELD_LITERAL(0x00f11cc8e0e70bcb,0x00e5dc689974e7dd,0x0014e409f9ee5870,0x00826e6689acbd63,0x008a6f4e3d895d88,0x00b26a8da41fd4ad,0x000fb7723f83efd7,0x009c749db0a5f6c3)},
+            {FIELD_LITERAL(0x002389319450f9ba,0x003677f31aa1250a,0x0092c3db642f38cb,0x00f8b64c0dfc9773,0x00cd49fe3505b795,0x0068105a4090a510,0x00df0ba2072a8bb6,0x00eb396143afd8be)},
+            {FIELD_LITERAL(0x00a0d4ecfb24cdff,0x00ddaf8008ba6479,0x00f0b3e36d4b0f44,0x003734bd3af1f146,0x00b87e2efc75527e,0x00d230df55ddab50,0x002613257ae56c1d,0x00bc0946d135934d)},
+        }}, {{
+            {FIELD_LITERAL(0x00468711bd994651,0x0033108fa67561bf,0x0089d760192a54b4,0x00adc433de9f1871,0x000467d05f36e050,0x007847e0f0579f7f,0x00a2314ad320052d,0x00b3a93649f0b243)},
+            {FIELD_LITERAL(0x0067f8f0c4fe26c9,0x0079c4a3cc8f67b9,0x0082b1e62f23550d,0x00f2d409caefd7f5,0x0080e67dcdb26e81,0x0087ae993ea1f98a,0x00aa108becf61d03,0x001acf11efb608a3)},
+            {FIELD_LITERAL(0x008225febbab50d9,0x00f3b605e4dd2083,0x00a32b28189e23d2,0x00d507e5e5eb4c97,0x005a1a84e302821f,0x0006f54c1c5f08c7,0x00a347c8cb2843f0,0x0009f73e9544bfa5)},
+        }}, {{
+            {FIELD_LITERAL(0x006c59c9ae744185,0x009fc32f1b4282cd,0x004d6348ca59b1ac,0x00105376881be067,0x00af4096013147dc,0x004abfb5a5cb3124,0x000d2a7f8626c354,0x009c6ed568e07431)},
+            {FIELD_LITERAL(0x00e828333c297f8b,0x009ef3cf8c3f7e1f,0x00ab45f8fff31cb9,0x00c8b4178cb0b013,0x00d0c50dd3260a3f,0x0097126ac257f5bc,0x0042376cc90c705a,0x001d96fdb4a1071e)},
+            {FIELD_LITERAL(0x00542d44d89ee1a8,0x00306642e0442d98,0x0090853872b87338,0x002362cbf22dc044,0x002c222adff663b8,0x0067c924495fcb79,0x000e621d983c977c,0x00df77a9eccb66fb)},
+        }}, {{
+            {FIELD_LITERAL(0x002809e4bbf1814a,0x00b9e854f9fafb32,0x00d35e67c10f7a67,0x008f1bcb76e748cf,0x004224d9515687d2,0x005ba0b774e620c4,0x00b5e57db5d54119,0x00e15babe5683282)},
+            {FIELD_LITERAL(0x00832d02369b482c,0x00cba52ff0d93450,0x003fa9c908d554db,0x008d1e357b54122f,0x00abd91c2dc950c6,0x007eff1df4c0ec69,0x003f6aeb13fb2d31,0x00002d6179fc5b2c)},
+            {FIELD_LITERAL(0x0046c9eda81c9c89,0x00b60cb71c8f62fc,0x0022f5a683baa558,0x00f87319fccdf997,0x009ca09b51ce6a22,0x005b12baf4af7d77,0x008a46524a1e33e2,0x00035a77e988be0d)},
+        }}, {{
+            {FIELD_LITERAL(0x00a7efe46a7dbe2f,0x002f66fd55014fe7,0x006a428afa1ff026,0x0056caaa9604ab72,0x0033f3bcd7fac8ae,0x00ccb1aa01c86764,0x00158d1edf13bf40,0x009848ee76fcf3b4)},
+            {FIELD_LITERAL(0x00a9e7730a819691,0x00d9cc73c4992b70,0x00e299bde067de5a,0x008c314eb705192a,0x00e7226f17e8a3cc,0x0029dfd956e65a47,0x0053a8e839073b12,0x006f942b2ab1597e)},
+            {FIELD_LITERAL(0x001c3d780ecd5e39,0x0094f247fbdcc5fe,0x00d5c786fd527764,0x00b6f4da74f0db2a,0x0080f1f8badcd5fc,0x00f36a373ad2e23b,0x00f804f9f4343bf2,0x00d1af40ec623982)},
+        }}, {{
+            {FIELD_LITERAL(0x0082aeace5f1b144,0x00f68b3108cf4dd3,0x00634af01dde3020,0x000beab5df5c2355,0x00e8b790d1b49b0b,0x00e48d15854e36f4,0x0040ab2d95f3db9f,0x002711c4ed9e899a)},
+            {FIELD_LITERAL(0x0039343746531ebe,0x00c8509d835d429d,0x00e79eceff6b0018,0x004abfd31e8efce5,0x007bbfaaa1e20210,0x00e3be89c193e179,0x001c420f4c31d585,0x00f414a315bef5ae)},
+            {FIELD_LITERAL(0x007c296a24990df8,0x00d5d07525a75588,0x00dd8e113e94b7e7,0x007bbc58febe0cc8,0x0029f51af9bfcad3,0x007e9311ec7ab6f3,0x009a884de1676343,0x0050d5f2dce84be9)},
+        }}, {{
+            {FIELD_LITERAL(0x005fa020cca2450a,0x00491c29db6416d8,0x0037cefe3f9f9a85,0x003d405230647066,0x0049e835f0fdbe89,0x00feb78ac1a0815c,0x00828e4b32dc9724,0x00db84f2dc8d6fd4)},
+            {FIELD_LITERAL(0x0098cddc8b39549a,0x006da37e3b05d22c,0x00ce633cfd4eb3cb,0x00fda288ef526acd,0x0025338878c5d30a,0x00f34438c4e5a1b4,0x00584efea7c310f1,0x0041a551f1b660ad)},
+            {FIELD_LITERAL(0x00d7f7a8fbd6437a,0x0062872413bf3753,0x00ad4bbcb43c584b,0x007fe49be601d7e3,0x0077c659789babf4,0x00eb45fcb06a741b,0x005ce244913f9708,0x0088426401736326)},
+        }}, {{
+            {FIELD_LITERAL(0x007bf562ca768d7c,0x006c1f3a174e387c,0x00f024b447fee939,0x007e7af75f01143f,0x003adb70b4eed89d,0x00e43544021ad79a,0x0091f7f7042011f6,0x0093c1a1ee3a0ddc)},
+            {FIELD_LITERAL(0x00a0b68ec1eb72d2,0x002c03235c0d45a0,0x00553627323fe8c5,0x006186e94b17af94,0x00a9906196e29f14,0x0025b3aee6567733,0x007e0dd840080517,0x0018eb5801a4ba93)},
+            {FIELD_LITERAL(0x00d7fe7017bf6a40,0x006e3f0624be0c42,0x00ffbba205358245,0x00f9fc2cf8194239,0x008d93b37bf15b4e,0x006ddf2e38be8e95,0x002b6e79bf5fcff9,0x00ab355da425e2de)},
+        }}, {{
+            {FIELD_LITERAL(0x00938f97e20be973,0x0099141a36aaf306,0x0057b0ca29e545a1,0x0085db571f9fbc13,0x008b333c554b4693,0x0043ab6ef3e241cb,0x0054fb20aa1e5c70,0x00be0ff852760adf)},
+            {FIELD_LITERAL(0x003973d8938971d6,0x002aca26fa80c1f5,0x00108af1faa6b513,0x00daae275d7924e6,0x0053634ced721308,0x00d2355fe0bbd443,0x00357612b2d22095,0x00f9bb9dd4136cf3)},
+            {FIELD_LITERAL(0x002bff12cf5e03a5,0x001bdb1fa8a19cf8,0x00c91c6793f84d39,0x00f869f1b2eba9af,0x0059bc547dc3236b,0x00d91611d6d38689,0x00e062daaa2c0214,0x00ed3c047cc2bc82)},
+        }}, {{
+            {FIELD_LITERAL(0x000050d70c32b31a,0x001939d576d437b3,0x00d709e598bf9fe6,0x00a885b34bd2ee9e,0x00dd4b5c08ab1a50,0x0091bebd50b55639,0x00cf79ff64acdbc6,0x006067a39d826336)},
+            {FIELD_LITERAL(0x0062dd0fb31be374,0x00fcc96b84c8e727,0x003f64f1375e6ae3,0x0057d9b6dd1af004,0x00d6a167b1103c7b,0x00dd28f3180fb537,0x004ff27ad7167128,0x008934c33461f2ac)},
+            {FIELD_LITERAL(0x0065b472b7900043,0x00ba7efd2ff1064b,0x000b67d6c4c3020f,0x0012d28469f4e46d,0x0031c32939703ec7,0x00b49f0bce133066,0x00f7e10416181d47,0x005c90f51867eecc)},
+        }}, {{
+            {FIELD_LITERAL(0x0051207abd179101,0x00fc2a5c20d9c5da,0x00fb9d5f2701b6df,0x002dd040fdea82b8,0x00f163b0738442ff,0x00d9736bd68855b8,0x00e0d8e93005e61c,0x00df5a40b3988570)},
+            {FIELD_LITERAL(0x0006918f5dfce6dc,0x00d4bf1c793c57fb,0x0069a3f649435364,0x00e89a50e5b0cd6e,0x00b9f6a237e973af,0x006d4ed8b104e41d,0x00498946a3924cd2,0x00c136ec5ac9d4f7)},
+            {FIELD_LITERAL(0x0011a9c290ac5336,0x002b9a2d4a6a6533,0x009a8a68c445d937,0x00361b27b07e5e5c,0x003c043b1755b974,0x00b7eb66cf1155ee,0x0077af5909eefff2,0x0098f609877cc806)},
+        }}, {{
+            {FIELD_LITERAL(0x00ab13af436bf8f4,0x000bcf0a0dac8574,0x00d50c864f705045,0x00c40e611debc842,0x0085010489bd5caa,0x007c5050acec026f,0x00f67d943c8da6d1,0x00de1da0278074c6)},
+            {FIELD_LITERAL(0x00b373076597455f,0x00e83f1af53ac0f5,0x0041f63c01dc6840,0x0097dea19b0c6f4b,0x007f9d63b4c1572c,0x00e692d492d0f5f0,0x00cbcb392e83b4ad,0x0069c0f39ed9b1a8)},
+            {FIELD_LITERAL(0x00861030012707c9,0x009fbbdc7fd4aafb,0x008f591d6b554822,0x00df08a41ea18ade,0x009d7d83e642abea,0x0098c71bda3b78ff,0x0022c89e7021f005,0x0044d29a3fe1e3c4)},
+        }}, {{
+            {FIELD_LITERAL(0x00e748cd7b5c52f2,0x00ea9df883f89cc3,0x0018970df156b6c7,0x00c5a46c2a33a847,0x00cbde395e32aa09,0x0072474ebb423140,0x00fb00053086a23d,0x001dafcfe22d4e1f)},
+            {FIELD_LITERAL(0x00c903ee6d825540,0x00add6c4cf98473e,0x007636efed4227f1,0x00905124ae55e772,0x00e6b38fab12ed53,0x0045e132b863fe55,0x003974662edb366a,0x00b1787052be8208)},
+            {FIELD_LITERAL(0x00a614b00d775c7c,0x00d7c78941cc7754,0x00422dd68b5dabc4,0x00a6110f0167d28b,0x00685a309c252886,0x00b439ffd5143660,0x003656e29ee7396f,0x00c7c9b9ed5ad854)},
+        }}, {{
+            {FIELD_LITERAL(0x0040f7e7c5b37bf2,0x0064e4dc81181bba,0x00a8767ae2a366b6,0x001496b4f90546f2,0x002a28493f860441,0x0021f59513049a3a,0x00852d369a8b7ee3,0x00dd2e7d8b7d30a9)},
+            {FIELD_LITERAL(0x00006e34a35d9fbc,0x00eee4e48b2f019a,0x006b344743003a5f,0x00541d514f04a7e3,0x00e81f9ee7647455,0x005e2b916c438f81,0x00116f8137b7eff0,0x009bd3decc7039d1)},
+            {FIELD_LITERAL(0x0005d226f434110d,0x00af8288b8ef21d5,0x004a7a52ef181c8c,0x00be0b781b4b06de,0x00e6e3627ded07e1,0x00e43aa342272b8b,0x00e86ab424577d84,0x00fb292c566e35bb)},
+        }}, {{
+            {FIELD_LITERAL(0x00334f5303ea1222,0x00dfb3dbeb0a5d3e,0x002940d9592335c1,0x00706a7a63e8938a,0x005a533558bc4caf,0x00558e33192022a9,0x00970d9faf74c133,0x002979fcb63493ca)},
+            {FIELD_LITERAL(0x00e38abece3c82ab,0x005a51f18a2c7a86,0x009dafa2e86d592e,0x00495a62eb688678,0x00b79df74c0eb212,0x0023e8cc78b75982,0x005998cb91075e13,0x00735aa9ba61bc76)},
+            {FIELD_LITERAL(0x00d9f7a82ddbe628,0x00a1fc782889ae0f,0x0071ffda12d14b66,0x0037cf4eca7fb3d5,0x00c80bc242c58808,0x0075bf8c2d08c863,0x008d41f31afc52a7,0x00197962ecf38741)},
+        }}, {{
+            {FIELD_LITERAL(0x006e9f475cccf2ee,0x00454b9cd506430c,0x00224a4fb79ee479,0x0062e3347ef0b5e2,0x0034fd2a3512232a,0x00b8b3cb0f457046,0x00eb20165daa38ec,0x00128eebc2d9c0f7)},
+            {FIELD_LITERAL(0x00bfc5fa1e4ea21f,0x00c21d7b6bb892e6,0x00cf043f3acf0291,0x00c13f2f849b3c90,0x00d1a97ebef10891,0x0061e130a445e7fe,0x0019513fdedbf22b,0x001d60c813bff841)},
+            {FIELD_LITERAL(0x0019561c7fcf0213,0x00e3dca6843ebd77,0x0068ea95b9ca920e,0x009bdfb70f253595,0x00c68f59186aa02a,0x005aee1cca1c3039,0x00ab79a8a937a1ce,0x00b9a0e549959e6f)},
+        }}, {{
+            {FIELD_LITERAL(0x00c79e0b6d97dfbd,0x00917c71fd2bc6e8,0x00db7529ccfb63d8,0x00be5be957f17866,0x00a9e11fdc2cdac1,0x007b91a8e1f44443,0x00a3065e4057d80f,0x004825f5b8d5f6d4)},
+            {FIELD_LITERAL(0x003e4964fa8a8fc8,0x00f6a1cdbcf41689,0x00943cb18fe7fda7,0x00606dafbf34440a,0x005d37a86399c789,0x00e79a2a69417403,0x00fe34f7e68b8866,0x0011f448ed2df10e)},
+            {FIELD_LITERAL(0x00f1f57efcc1fcc4,0x00513679117de154,0x002e5b5b7c86d8c3,0x009f6486561f9cfb,0x00169e74b0170cf7,0x00900205af4af696,0x006acfddb77853f3,0x00df184c90f31068)},
+        }}, {{
+            {FIELD_LITERAL(0x00b37396c3320791,0x00fc7b67175c5783,0x00c36d2cd73ecc38,0x0080ebcc0b328fc5,0x0043a5b22b35d35d,0x00466c9f1713c9da,0x0026ad346dcaa8da,0x007c684e701183a6)},
+            {FIELD_LITERAL(0x00fd579ffb691713,0x00b76af4f81c412d,0x00f239de96110f82,0x00e965fb437f0306,0x00ca7e9436900921,0x00e487f1325fa24a,0x00633907de476380,0x00721c62ac5b8ea0)},
+            {FIELD_LITERAL(0x00c0d54e542eb4f9,0x004ed657171c8dcf,0x00b743a4f7c2a39b,0x00fd9f93ed6cc567,0x00307fae3113e58b,0x0058aa577c93c319,0x00d254556f35b346,0x00491aada2203f0d)},
+        }}, {{
+            {FIELD_LITERAL(0x00dff3103786ff34,0x000144553b1f20c3,0x0095613baeb930e4,0x00098058275ea5d4,0x007cd1402b046756,0x0074d74e4d58aee3,0x005f93fc343ff69b,0x00873df17296b3b0)},
+            {FIELD_LITERAL(0x00c4a1fb48635413,0x00b5dd54423ad59f,0x009ff5d53fd24a88,0x003c98d267fc06a7,0x002db7cb20013641,0x00bd1d6716e191f2,0x006dbc8b29094241,0x0044bbf233dafa2c)},
+            {FIELD_LITERAL(0x0055838d41f531e6,0x00bf6a2dd03c81b2,0x005827a061c4839e,0x0000de2cbb36aac3,0x002efa29d9717478,0x00f9e928cc8a77ba,0x00c134b458def9ef,0x00958a182223fc48)},
+        }}, {{
+            {FIELD_LITERAL(0x000a9ee23c06881f,0x002c727d3d871945,0x00f47d971512d24a,0x00671e816f9ef31a,0x00883af2cfaad673,0x00601f98583d6c9a,0x00b435f5adc79655,0x00ad87b71c04bff2)},
+            {FIELD_LITERAL(0x007860d99db787cf,0x00fda8983018f4a8,0x008c8866bac4743c,0x00ef471f84c82a3f,0x00abea5976d3b8e7,0x00714882896cd015,0x00b49fae584ddac5,0x008e33a1a0b69c81)},
+            {FIELD_LITERAL(0x007b6ee2c9e8a9ec,0x002455dbbd89d622,0x006490cf4eaab038,0x00d925f6c3081561,0x00153b3047de7382,0x003b421f8bdceb6f,0x00761a4a5049da78,0x00980348c5202433)},
+        }}, {{
+            {FIELD_LITERAL(0x007f8a43da97dd5c,0x00058539c800fc7b,0x0040f3cf5a28414a,0x00d68dd0d95283d6,0x004adce9da90146e,0x00befa41c7d4f908,0x007603bc2e3c3060,0x00bdf360ab3545db)},
+            {FIELD_LITERAL(0x00eebfd4e2312cc3,0x00474b2564e4fc8c,0x003303ef14b1da9b,0x003c93e0e66beb1d,0x0013619b0566925a,0x008817c24d901bf3,0x00b62bd8898d218b,0x0075a7716f1e88a2)},
+            {FIELD_LITERAL(0x0009218da1e6890f,0x0026907f5fd02575,0x004dabed5f19d605,0x003abf181870249d,0x00b52fd048cc92c4,0x00b6dd51e415a5c5,0x00d9eb82bd2b4014,0x002c865a43b46b43)},
+        }}, {{
+            {FIELD_LITERAL(0x0070047189452f4c,0x00f7ad12e1ce78d5,0x00af1ba51ec44a8b,0x005f39f63e667cd6,0x00058eac4648425e,0x00d7fdab42bea03b,0x0028576a5688de15,0x00af973209e77c10)},
+            {FIELD_LITERAL(0x00c338b915d8fef0,0x00a893292045c39a,0x0028ab4f2eba6887,0x0060743cb519fd61,0x0006213964093ac0,0x007c0b7a43f6266d,0x008e3557c4fa5bda,0x002da976de7b8d9d)},
+            {FIELD_LITERAL(0x0048729f8a8b6dcd,0x00fe23b85cc4d323,0x00e7384d16e4db0e,0x004a423970678942,0x00ec0b763345d4ba,0x00c477b9f99ed721,0x00c29dad3777b230,0x001c517b466f7df6)},
+        }}, {{
+            {FIELD_LITERAL(0x006366c380f7b574,0x001c7d1f09ff0438,0x003e20a7301f5b22,0x00d3efb1916d28f6,0x0049f4f81060ce83,0x00c69d91ea43ced1,0x002b6f3e5cd269ed,0x005b0fb22ce9ec65)},
+            {FIELD_LITERAL(0x00aa2261022d883f,0x00ebcca4548010ac,0x002528512e28a437,0x0070ca7676b66082,0x0084bda170f7c6d3,0x00581b4747c9b8bb,0x005c96a01061c7e2,0x00fb7c4a362b5273)},
+            {FIELD_LITERAL(0x00c30020eb512d02,0x0060f288283a4d26,0x00b7ed13becde260,0x0075ebb74220f6e9,0x00701079fcfe8a1f,0x001c28fcdff58938,0x002e4544b8f4df6b,0x0060c5bc4f1a7d73)},
+        }}, {{
+            {FIELD_LITERAL(0x00ae307cf069f701,0x005859f222dd618b,0x00212d6c46ec0b0d,0x00a0fe4642afb62d,0x00420d8e4a0a8903,0x00a80ff639bdf7b0,0x0019bee1490b5d8e,0x007439e4b9c27a86)},
+            {FIELD_LITERAL(0x00a94700032a093f,0x0076e96c225216e7,0x00a63a4316e45f91,0x007d8bbb4645d3b2,0x00340a6ff22793eb,0x006f935d4572aeb7,0x00b1fb69f00afa28,0x009e8f3423161ed3)},
+            {FIELD_LITERAL(0x009ef49c6b5ced17,0x00a555e6269e9f0a,0x007e6f1d79ec73b5,0x009ac78695a32ac4,0x0001d77fbbcd5682,0x008cea1fee0aaeed,0x00f42bea82a53462,0x002e46ab96cafcc9)},
+        }}, {{
+            {FIELD_LITERAL(0x0051cfcc5885377a,0x00dce566cb1803ca,0x00430c7643f2c7d4,0x00dce1a1337bdcc0,0x0010d5bd7283c128,0x003b1b547f9b46fe,0x000f245e37e770ab,0x007b72511f022b37)},
+            {FIELD_LITERAL(0x0060db815bc4786c,0x006fab25beedc434,0x00c610d06084797c,0x000c48f08537bec0,0x0031aba51c5b93da,0x007968fa6e01f347,0x0030070da52840c6,0x00c043c225a4837f)},
+            {FIELD_LITERAL(0x001bcfd00649ee93,0x006dceb47e2a0fd5,0x00f2cebda0cf8fd0,0x00b6b9d9d1fbdec3,0x00815262e6490611,0x00ef7f5ce3176760,0x00e49cd0c998d58b,0x005fc6cc269ba57c)},
+        }}, {{
+            {FIELD_LITERAL(0x008940211aa0d633,0x00addae28136571d,0x00d68fdbba20d673,0x003bc6129bc9e21a,0x000346cf184ebe9a,0x0068774d741ebc7f,0x0019d5e9e6966557,0x0003cbd7f981b651)},
+            {FIELD_LITERAL(0x004a2902926f8d3f,0x00ad79b42637ab75,0x0088f60b90f2d4e8,0x0030f54ef0e398c4,0x00021dc9bf99681e,0x007ebf66fde74ee3,0x004ade654386e9a4,0x00e7485066be4c27)},
+            {FIELD_LITERAL(0x00445f1263983be0,0x004cf371dda45e6a,0x00744a89d5a310e7,0x001f20ce4f904833,0x00e746edebe66e29,0x000912ab1f6c153d,0x00f61d77d9b2444c,0x0001499cd6647610)},
+        }}
+    }
+};
+const struct curve448_precomputed_s *curve448_precomputed_base
+    = &curve448_precomputed_base_table;
+
+static const niels_t curve448_wnaf_base_table[32] = {
+    {{
+        {FIELD_LITERAL(0x00303cda6feea532,0x00860f1d5a3850e4,0x00226b9fa4728ccd,0x00e822938a0a0c0c,0x00263a61c9ea9216,0x001204029321b828,0x006a468360983c65,0x0002846f0a782143)},
+        {FIELD_LITERAL(0x00303cda6feea532,0x00860f1d5a3850e4,0x00226b9fa4728ccd,0x006822938a0a0c0c,0x00263a61c9ea9215,0x001204029321b828,0x006a468360983c65,0x0082846f0a782143)},
+        {FIELD_LITERAL(0x00ef8e22b275198d,0x00b0eb141a0b0e8b,0x001f6789da3cb38c,0x006d2ff8ed39073e,0x00610bdb69a167f3,0x00571f306c9689b4,0x00f557e6f84b2df8,0x002affd38b2c86db)},
+    }}, {{
+        {FIELD_LITERAL(0x00cea0fc8d2e88b5,0x00821612d69f1862,0x0074c283b3e67522,0x005a195ba05a876d,0x000cddfe557feea4,0x008046c795bcc5e5,0x00540969f4d6e119,0x00d27f96d6b143d5)},
+        {FIELD_LITERAL(0x000c3b1019d474e8,0x00e19533e4952284,0x00cc9810ba7c920a,0x00f103d2785945ac,0x00bfa5696cc69b34,0x00a8d3d51e9ca839,0x005623cb459586b9,0x00eae7ce1cd52e9e)},
+        {FIELD_LITERAL(0x0005a178751dd7d8,0x002cc3844c69c42f,0x00acbfe5efe10539,0x009c20f43431a65a,0x008435d96374a7b3,0x009ee57566877bd3,0x0044691725ed4757,0x001e87bb2fe2c6b2)},
+    }}, {{
+        {FIELD_LITERAL(0x000cedc4debf7a04,0x002ffa45000470ac,0x002e9f9678201915,0x0017da1208c4fe72,0x007d558cc7d656cb,0x0037a827287cf289,0x00142472d3441819,0x009c21f166cf8dd1)},
+        {FIELD_LITERAL(0x003ef83af164b2f2,0x000949a5a0525d0d,0x00f4498186cac051,0x00e77ac09ef126d2,0x0073ae0b2c9296e9,0x001c163f6922e3ed,0x0062946159321bea,0x00cfb79b22990b39)},
+        {FIELD_LITERAL(0x00b001431ca9e654,0x002d7e5eabcc9a3a,0x0052e8114c2f6747,0x0079ac4f94487f92,0x00bffd919b5d749c,0x00261f92ad15e620,0x00718397b7a97895,0x00c1443e6ebbc0c4)},
+    }}, {{
+        {FIELD_LITERAL(0x00eacd90c1e0a049,0x008977935b149fbe,0x0004cb9ba11c93dc,0x009fbd5b3470844d,0x004bc18c9bfc22cf,0x0057679a991839f3,0x00ef15b76fb4092e,0x0074a5173a225041)},
+        {FIELD_LITERAL(0x003f5f9d7ec4777b,0x00ab2e733c919c94,0x001bb6c035245ae5,0x00a325a49a883630,0x0033e9a9ea3cea2f,0x00e442a1eaa0e844,0x00b2116d5b0e71b8,0x00c16abed6d64047)},
+        {FIELD_LITERAL(0x00c560b5ed051165,0x001945adc5d65094,0x00e221865710f910,0x00cc12bc9e9b8ceb,0x004faa9518914e35,0x0017476d89d42f6d,0x00b8f637c8fa1c8b,0x0088c7d2790864b8)},
+    }}, {{
+        {FIELD_LITERAL(0x00ef7eafc1c69be6,0x0085d3855778fbea,0x002c8d5b450cb6f5,0x004e77de5e1e7fec,0x0047c057893abded,0x001b430b85d51e16,0x00965c7b45640c3c,0x00487b2bb1162b97)},
+        {FIELD_LITERAL(0x0099c73a311beec2,0x00a3eff38d8912ad,0x002efa9d1d7e8972,0x00f717ae1e14d126,0x002833f795850c8b,0x0066c12ad71486bd,0x00ae9889da4820eb,0x00d6044309555c08)},
+        {FIELD_LITERAL(0x004b1c5283d15e41,0x00669d8ea308ff75,0x0004390233f762a1,0x00e1d67b83cb6cec,0x003eebaa964c78b1,0x006b0aff965eb664,0x00b313d4470bdc37,0x008814ffcb3cb9d8)},
+    }}, {{
+        {FIELD_LITERAL(0x009724b8ce68db70,0x007678b5ed006f3d,0x00bdf4b89c0abd73,0x00299748e04c7c6d,0x00ddd86492c3c977,0x00c5a7febfa30a99,0x00ed84715b4b02bb,0x00319568adf70486)},
+        {FIELD_LITERAL(0x0070ff2d864de5bb,0x005a37eeb637ee95,0x0033741c258de160,0x00e6ca5cb1988f46,0x001ceabd92a24661,0x0030957bd500fe40,0x001c3362afe912c5,0x005187889f678bd2)},
+        {FIELD_LITERAL(0x0086835fc62bbdc7,0x009c3516ca4910a1,0x00956c71f8d00783,0x0095c78fcf63235f,0x00fc7ff6ba05c222,0x00cdd8b3f8d74a52,0x00ac5ae16de8256e,0x00e9d4be8ed48624)},
+    }}, {{
+        {FIELD_LITERAL(0x00c0ce11405df2d8,0x004e3f37b293d7b6,0x002410172e1ac6db,0x00b8dbff4bf8143d,0x003a7b409d56eb66,0x003e0f6a0dfef9af,0x0081c4e4d3645be1,0x00ce76076b127623)},
+        {FIELD_LITERAL(0x00f6ee0f98974239,0x0042d89af07d3a4f,0x00846b7fe84346b5,0x006a21fc6a8d39a1,0x00ac8bc2541ff2d9,0x006d4e2a77732732,0x009a39b694cc3f2f,0x0085c0aa2a404c8f)},
+        {FIELD_LITERAL(0x00b261101a218548,0x00c1cae96424277b,0x00869da0a77dd268,0x00bc0b09f8ec83ea,0x00d61027f8e82ba9,0x00aa4c85999dce67,0x00eac3132b9f3fe1,0x00fb9b0cf1c695d2)},
+    }}, {{
+        {FIELD_LITERAL(0x0043079295512f0d,0x0046a009861758e0,0x003ee2842a807378,0x0034cc9d1298e4fa,0x009744eb4d31b3ee,0x00afacec96650cd0,0x00ac891b313761ae,0x00e864d6d26e708a)},
+        {FIELD_LITERAL(0x00a84d7c8a23b491,0x0088e19aa868b27f,0x0005986d43e78ce9,0x00f28012f0606d28,0x0017ded7e10249b3,0x005ed4084b23af9b,0x00b9b0a940564472,0x00ad9056cceeb1f4)},
+        {FIELD_LITERAL(0x00db91b357fe755e,0x00a1aa544b15359c,0x00af4931a0195574,0x007686124fe11aef,0x00d1ead3c7b9ef7e,0x00aaf5fc580f8c15,0x00e727be147ee1ec,0x003c61c1e1577b86)},
+    }}, {{
+        {FIELD_LITERAL(0x009d3fca983220cf,0x00cd11acbc853dc4,0x0017590409d27f1d,0x00d2176698082802,0x00fa01251b2838c8,0x00dd297a0d9b51c6,0x00d76c92c045820a,0x00534bc7c46c9033)},
+        {FIELD_LITERAL(0x0080ed9bc9b07338,0x00fceac7745d2652,0x008a9d55f5f2cc69,0x0096ce72df301ac5,0x00f53232e7974d87,0x0071728c7ae73947,0x0090507602570778,0x00cb81cfd883b1b2)},
+        {FIELD_LITERAL(0x005011aadea373da,0x003a8578ec896034,0x00f20a6535fa6d71,0x005152d31e5a87cf,0x002bac1c8e68ca31,0x00b0e323db4c1381,0x00f1d596b7d5ae25,0x00eae458097cb4e0)},
+    }}, {{
+        {FIELD_LITERAL(0x00920ac80f9b0d21,0x00f80f7f73401246,0x0086d37849b557d6,0x0002bd4b317b752e,0x00b26463993a42bb,0x002070422a73b129,0x00341acaa0380cb3,0x00541914dd66a1b2)},
+        {FIELD_LITERAL(0x00c1513cd66abe8c,0x000139e01118944d,0x0064abbcb8080bbb,0x00b3b08202473142,0x00c629ef25da2403,0x00f0aec3310d9b7f,0x0050b2227472d8cd,0x00f6c8a922d41fb4)},
+        {FIELD_LITERAL(0x001075ccf26b7b1f,0x00bb6bb213170433,0x00e9491ad262da79,0x009ef4f48d2d384c,0x008992770766f09d,0x001584396b6b1101,0x00af3f8676c9feef,0x0024603c40269118)},
+    }}, {{
+        {FIELD_LITERAL(0x009dd7b31319527c,0x001e7ac948d873a9,0x00fa54b46ef9673a,0x0066efb8d5b02fe6,0x00754b1d3928aeae,0x0004262ac72a6f6b,0x0079b7d49a6eb026,0x003126a753540102)},
+        {FIELD_LITERAL(0x009666e24f693947,0x00f714311269d45f,0x0010ffac1d0c851c,0x0066e80c37363497,0x00f1f4ad010c60b0,0x0015c87408470ff7,0x00651d5e9c7766a4,0x008138819d7116de)},
+        {FIELD_LITERAL(0x003934b11c57253b,0x00ef308edf21f46e,0x00e54e99c7a16198,0x0080d57135764e63,0x00751c27b946bc24,0x00dd389ce4e9e129,0x00a1a2bfd1cd84dc,0x002fae73e5149b32)},
+    }}, {{
+        {FIELD_LITERAL(0x00911657dffb4cdd,0x00c100b7cc553d06,0x00449d075ec467cc,0x007062100bc64e70,0x0043cf86f7bd21e7,0x00f401dc4b797dea,0x005224afb2f62e65,0x00d1ede3fb5a42be)},
+        {FIELD_LITERAL(0x00f2ba36a41aa144,0x00a0c22d946ee18f,0x008aae8ef9a14f99,0x00eef4d79b19bb36,0x008e75ce3d27b1fc,0x00a65daa03b29a27,0x00d9cc83684eb145,0x009e1ed80cc2ed74)},
+        {FIELD_LITERAL(0x00bed953d1997988,0x00b93ed175a24128,0x00871c5963fb6365,0x00ca2df20014a787,0x00f5d9c1d0b34322,0x00f6f5942818db0a,0x004cc091f49c9906,0x00e8a188a60bff9f)},
+    }}, {{
+        {FIELD_LITERAL(0x0032c7762032fae8,0x00e4087232e0bc21,0x00f767344b6e8d85,0x00bbf369b76c2aa2,0x008a1f46c6e1570c,0x001368cd9780369f,0x007359a39d079430,0x0003646512921434)},
+        {FIELD_LITERAL(0x007c4b47ca7c73e7,0x005396221039734b,0x008b64ddf0e45d7e,0x00bfad5af285e6c2,0x008ec711c5b1a1a8,0x00cf663301237f98,0x00917ee3f1655126,0x004152f337efedd8)},
+        {FIELD_LITERAL(0x0007c7edc9305daa,0x000a6664f273701c,0x00f6e78795e200b1,0x005d05b9ecd2473e,0x0014f5f17c865786,0x00c7fd2d166fa995,0x004939a2d8eb80e0,0x002244ba0942c199)},
+    }}, {{
+        {FIELD_LITERAL(0x00321e767f0262cf,0x002e57d776caf68e,0x00bf2c94814f0437,0x00c339196acd622f,0x001db4cce71e2770,0x001ded5ddba6eee2,0x0078608ab1554c8d,0x00067fe0ab76365b)},
+        {FIELD_LITERAL(0x00f09758e11e3985,0x00169efdbd64fad3,0x00e8889b7d6dacd6,0x0035cdd58ea88209,0x00bcda47586d7f49,0x003cdddcb2879088,0x0016da70187e954b,0x009556ea2e92aacd)},
+        {FIELD_LITERAL(0x008cab16bd1ff897,0x00b389972cdf753f,0x00ea8ed1e46dfdc0,0x004fe7ef94c589f4,0x002b8ae9b805ecf3,0x0025c08d892874a5,0x0023938e98d44c4c,0x00f759134cabf69c)},
+    }}, {{
+        {FIELD_LITERAL(0x006c2a84678e4b3b,0x007a194aacd1868f,0x00ed0225af424761,0x00da0a6f293c64b8,0x001062ac5c6a7a18,0x0030f5775a8aeef4,0x0002acaad76b7af0,0x00410b8fd63a579f)},
+        {FIELD_LITERAL(0x001ec59db3d9590e,0x001e9e3f1c3f182d,0x0045a9c3ec2cab14,0x0008198572aeb673,0x00773b74068bd167,0x0012535eaa395434,0x0044dba9e3bbb74a,0x002fba4d3c74bd0e)},
+        {FIELD_LITERAL(0x0042bf08fe66922c,0x003318b8fbb49e8c,0x00d75946004aa14c,0x00f601586b42bf1c,0x00c74cf1d912fe66,0x00abcb36974b30ad,0x007eb78720c9d2b8,0x009f54ab7bd4df85)},
+    }}, {{
+        {FIELD_LITERAL(0x00db9fc948f73826,0x00fa8b3746ed8ee9,0x00132cb65aafbeb2,0x00c36ff3fe7925b8,0x00837daed353d2fe,0x00ec661be0667cf4,0x005beb8ed2e90204,0x00d77dd69e564967)},
+        {FIELD_LITERAL(0x0042e6268b861751,0x0008dd0469500c16,0x00b51b57c338a3fd,0x00cc4497d85cff6b,0x002f13d6b57c34a4,0x0083652eaf301105,0x00cc344294cc93a8,0x0060f4d02810e270)},
+        {FIELD_LITERAL(0x00a8954363cd518b,0x00ad171124bccb7b,0x0065f46a4adaae00,0x001b1a5b2a96e500,0x0043fe24f8233285,0x0066996d8ae1f2c3,0x00c530f3264169f9,0x00c0f92d07cf6a57)},
+    }}, {{
+        {FIELD_LITERAL(0x0036a55c6815d943,0x008c8d1def993db3,0x002e0e1e8ff7318f,0x00d883a4b92db00a,0x002f5e781ae33906,0x001a72adb235c06d,0x00f2e59e736e9caa,0x001a4b58e3031914)},
+        {FIELD_LITERAL(0x00d73bfae5e00844,0x00bf459766fb5f52,0x0061b4f5a5313cde,0x004392d4c3b95514,0x000d3551b1077523,0x0000998840ee5d71,0x006de6e340448b7b,0x00251aa504875d6e)},
+        {FIELD_LITERAL(0x003bf343427ac342,0x00adc0a78642b8c5,0x0003b893175a8314,0x0061a34ade5703bc,0x00ea3ea8bb71d632,0x00be0df9a1f198c2,0x0046dd8e7c1635fb,0x00f1523fdd25d5e5)},
+    }}, {{
+        {FIELD_LITERAL(0x00633f63fc9dd406,0x00e713ff80e04a43,0x0060c6e970f2d621,0x00a57cd7f0df1891,0x00f2406a550650bb,0x00b064290efdc684,0x001eab0144d17916,0x00cd15f863c293ab)},
+        {FIELD_LITERAL(0x0029cec55273f70d,0x007044ee275c6340,0x0040f637a93015e2,0x00338bb78db5aae9,0x001491b2a6132147,0x00a125d6cfe6bde3,0x005f7ac561ba8669,0x001d5eaea3fbaacf)},
+        {FIELD_LITERAL(0x00054e9635e3be31,0x000e43f31e2872be,0x00d05b1c9e339841,0x006fac50bd81fd98,0x00cdc7852eaebb09,0x004ff519b061991b,0x009099e8107d4c85,0x00273e24c36a4a61)},
+    }}, {{
+        {FIELD_LITERAL(0x00070b4441ef2c46,0x00efa5b02801a109,0x00bf0b8c3ee64adf,0x008a67e0b3452e98,0x001916b1f2fa7a74,0x00d781a78ff6cdc3,0x008682ce57e5c919,0x00cc1109dd210da3)},
+        {FIELD_LITERAL(0x00cae8aaff388663,0x005e983a35dda1c7,0x007ab1030d8e37f4,0x00e48940f5d032fe,0x006a36f9ef30b331,0x009be6f03958c757,0x0086231ceba91400,0x008bd0f7b823e7aa)},
+        {FIELD_LITERAL(0x00cf881ebef5a45a,0x004ebea78e7c6f2c,0x0090da9209cf26a0,0x00de2b2e4c775b84,0x0071d6031c3c15ae,0x00d9e927ef177d70,0x00894ee8c23896fd,0x00e3b3b401e41aad)},
+    }}, {{
+        {FIELD_LITERAL(0x00204fef26864170,0x00819269c5dee0f8,0x00bfb4713ec97966,0x0026339a6f34df78,0x001f26e64c761dc2,0x00effe3af313cb60,0x00e17b70138f601b,0x00f16e1ccd9ede5e)},
+        {FIELD_LITERAL(0x005d9a8353fdb2db,0x0055cc2048c698f0,0x00f6c4ac89657218,0x00525034d73faeb2,0x00435776fbda3c7d,0x0070ea5312323cbc,0x007a105d44d069fb,0x006dbc8d6dc786aa)},
+        {FIELD_LITERAL(0x0017cff19cd394ec,0x00fef7b810922587,0x00e6483970dff548,0x00ddf36ad6874264,0x00e61778523fcce2,0x0093a66c0c93b24a,0x00fd367114db7f86,0x007652d7ddce26dd)},
+    }}, {{
+        {FIELD_LITERAL(0x00d92ced7ba12843,0x00aea9c7771e86e7,0x0046639693354f7b,0x00a628dbb6a80c47,0x003a0b0507372953,0x00421113ab45c0d9,0x00e545f08362ab7a,0x0028ce087b4d6d96)},
+        {FIELD_LITERAL(0x00a67ee7cf9f99eb,0x005713b275f2ff68,0x00f1d536a841513d,0x00823b59b024712e,0x009c46b9d0d38cec,0x00cdb1595aa2d7d4,0x008375b3423d9af8,0x000ab0b516d978f7)},
+        {FIELD_LITERAL(0x00428dcb3c510b0f,0x00585607ea24bb4e,0x003736bf1603687a,0x00c47e568c4fe3c7,0x003cd00282848605,0x0043a487c3b91939,0x004ffc04e1095a06,0x00a4c989a3d4b918)},
+    }}, {{
+        {FIELD_LITERAL(0x00a8778d0e429f7a,0x004c02b059105a68,0x0016653b609da3ff,0x00d5107bd1a12d27,0x00b4708f9a771cab,0x00bb63b662033f69,0x0072f322240e7215,0x0019445b59c69222)},
+        {FIELD_LITERAL(0x00cf4f6069a658e6,0x0053ca52859436a6,0x0064b994d7e3e117,0x00cb469b9a07f534,0x00cfb68f399e9d47,0x00f0dcb8dac1c6e7,0x00f2ab67f538b3a5,0x0055544f178ab975)},
+        {FIELD_LITERAL(0x0099b7a2685d538c,0x00e2f1897b7c0018,0x003adac8ce48dae3,0x00089276d5c50c0c,0x00172fca07ad6717,0x00cb1a72f54069e5,0x004ee42f133545b3,0x00785f8651362f16)},
+    }}, {{
+        {FIELD_LITERAL(0x0049cbac38509e11,0x0015234505d42cdf,0x00794fb0b5840f1c,0x00496437344045a5,0x0031b6d944e4f9b0,0x00b207318ac1f5d8,0x0000c840da7f5c5d,0x00526f373a5c8814)},
+        {FIELD_LITERAL(0x002c7b7742d1dfd9,0x002cabeb18623c01,0x00055f5e3e044446,0x006c20f3b4ef54ba,0x00c600141ec6b35f,0x00354f437f1a32a3,0x00bac4624a3520f9,0x00c483f734a90691)},
+        {FIELD_LITERAL(0x0053a737d422918d,0x00f7fca1d8758625,0x00c360336dadb04c,0x00f38e3d9158a1b8,0x0069ce3b418e84c6,0x005d1697eca16ead,0x00f8bd6a35ece13d,0x007885dfc2b5afea)},
+    }}, {{
+        {FIELD_LITERAL(0x00c3617ae260776c,0x00b20dc3e96922d7,0x00a1a7802246706a,0x00ca6505a5240244,0x002246b62d919782,0x001439102d7aa9b3,0x00e8af1139e6422c,0x00c888d1b52f2b05)},
+        {FIELD_LITERAL(0x005b67690ffd41d9,0x005294f28df516f9,0x00a879272412fcb9,0x00098b629a6d1c8d,0x00fabd3c8050865a,0x00cd7e5b0a3879c5,0x00153238210f3423,0x00357cac101e9f42)},
+        {FIELD_LITERAL(0x008917b454444fb7,0x00f59247c97e441b,0x00a6200a6815152d,0x0009a4228601d254,0x001c0360559bd374,0x007563362039cb36,0x00bd75b48d74e32b,0x0017f515ac3499e8)},
+    }}, {{
+        {FIELD_LITERAL(0x001532a7ffe41c5a,0x00eb1edce358d6bf,0x00ddbacc7b678a7b,0x008a7b70f3c841a3,0x00f1923bf27d3f4c,0x000b2713ed8f7873,0x00aaf67e29047902,0x0044994a70b3976d)},
+        {FIELD_LITERAL(0x00d54e802082d42c,0x00a55aa0dce7cc6c,0x006477b96073f146,0x0082efe4ceb43594,0x00a922bcba026845,0x0077f19d1ab75182,0x00c2bb2737846e59,0x0004d7eec791dd33)},
+        {FIELD_LITERAL(0x0044588d1a81d680,0x00b0a9097208e4f8,0x00212605350dc57e,0x0028717cd2871123,0x00fb083c100fd979,0x0045a056ce063fdf,0x00a5d604b4dd6a41,0x001dabc08ba4e236)},
+    }}, {{
+        {FIELD_LITERAL(0x00c4887198d7a7fa,0x00244f98fb45784a,0x0045911e15a15d01,0x001d323d374c0966,0x00967c3915196562,0x0039373abd2f3c67,0x000d2c5614312423,0x0041cf2215442ce3)},
+        {FIELD_LITERAL(0x008ede889ada7f06,0x001611e91de2e135,0x00fdb9a458a471b9,0x00563484e03710d1,0x0031cc81925e3070,0x0062c97b3af80005,0x00fa733eea28edeb,0x00e82457e1ebbc88)},
+        {FIELD_LITERAL(0x006a0df5fe9b6f59,0x00a0d4ff46040d92,0x004a7cedb6f93250,0x00d1df8855b8c357,0x00e73a46086fd058,0x0048fb0add6dfe59,0x001e03a28f1b4e3d,0x00a871c993308d76)},
+    }}, {{
+        {FIELD_LITERAL(0x0030dbb2d1766ec8,0x00586c0ad138555e,0x00d1a34f9e91c77c,0x0063408ad0e89014,0x00d61231b05f6f5b,0x0009abf569f5fd8a,0x00aec67a110f1c43,0x0031d1a790938dd7)},
+        {FIELD_LITERAL(0x006cded841e2a862,0x00198d60af0ab6fb,0x0018f09db809e750,0x004e6ac676016263,0x00eafcd1620969cb,0x002c9784ca34917d,0x0054f00079796de7,0x00d9fab5c5972204)},
+        {FIELD_LITERAL(0x004bd0fee2438a83,0x00b571e62b0f83bd,0x0059287d7ce74800,0x00fb3631b645c3f0,0x00a018e977f78494,0x0091e27065c27b12,0x007696c1817165e0,0x008c40be7c45ba3a)},
+    }}, {{
+        {FIELD_LITERAL(0x00a0f326327cb684,0x001c7d0f672680ff,0x008c1c81ffb112d1,0x00f8f801674eddc8,0x00e926d5d48c2a9d,0x005bd6d954c6fe9a,0x004c6b24b4e33703,0x00d05eb5c09105cc)},
+        {FIELD_LITERAL(0x00d61731caacf2cf,0x002df0c7609e01c5,0x00306172208b1e2b,0x00b413fe4fb2b686,0x00826d360902a221,0x003f8d056e67e7f7,0x0065025b0175e989,0x00369add117865eb)},
+        {FIELD_LITERAL(0x00aaf895aec2fa11,0x000f892bc313eb52,0x005b1c794dad050b,0x003f8ec4864cec14,0x00af81058d0b90e5,0x00ebe43e183997bb,0x00a9d610f9f3e615,0x007acd8eec2e88d3)},
+    }}, {{
+        {FIELD_LITERAL(0x0049b2fab13812a3,0x00846db32cd60431,0x000177fa578c8d6c,0x00047d0e2ad4bc51,0x00b158ba38d1e588,0x006a45daad79e3f3,0x000997b93cab887b,0x00c47ea42fa23dc3)},
+        {FIELD_LITERAL(0x0012b6fef7aeb1ca,0x009412768194b6a7,0x00ff0d351f23ab93,0x007e8a14c1aff71b,0x006c1c0170c512bc,0x0016243ea02ab2e5,0x007bb6865b303f3e,0x0015ce6b29b159f4)},
+        {FIELD_LITERAL(0x009961cd02e68108,0x00e2035d3a1d0836,0x005d51f69b5e1a1d,0x004bccb4ea36edcd,0x0069be6a7aeef268,0x0063f4dd9de8d5a7,0x006283783092ca35,0x0075a31af2c35409)},
+    }}, {{
+        {FIELD_LITERAL(0x00c412365162e8cf,0x00012283fb34388a,0x003e6543babf39e2,0x00eead6b3a804978,0x0099c0314e8b326f,0x00e98e0a8d477a4f,0x00d2eb96b127a687,0x00ed8d7df87571bb)},
+        {FIELD_LITERAL(0x00777463e308cacf,0x00c8acb93950132d,0x00ebddbf4ca48b2c,0x0026ad7ca0795a0a,0x00f99a3d9a715064,0x000d60bcf9d4dfcc,0x005e65a73a437a06,0x0019d536a8db56c8)},
+        {FIELD_LITERAL(0x00192d7dd558d135,0x0027cd6a8323ffa7,0x00239f1a412dc1e7,0x0046b4b3be74fc5c,0x0020c47a2bef5bce,0x00aa17e48f43862b,0x00f7e26c96342e5f,0x0008011c530f39a9)},
+    }}, {{
+        {FIELD_LITERAL(0x00aad4ac569bf0f1,0x00a67adc90b27740,0x0048551369a5751a,0x0031252584a3306a,0x0084e15df770e6fc,0x00d7bba1c74b5805,0x00a80ef223af1012,0x0089c85ceb843a34)},
+        {FIELD_LITERAL(0x00c4545be4a54004,0x0099e11f60357e6c,0x001f3936d19515a6,0x007793df84341a6e,0x0051061886717ffa,0x00e9b0a660b28f85,0x0044ea685892de0d,0x000257d2a1fda9d9)},
+        {FIELD_LITERAL(0x007e8b01b24ac8a8,0x006cf3b0b5ca1337,0x00f1607d3e36a570,0x0039b7fab82991a1,0x00231777065840c5,0x00998e5afdd346f9,0x00b7dc3e64acc85f,0x00baacc748013ad6)},
+    }}, {{
+        {FIELD_LITERAL(0x008ea6a4177580bf,0x005fa1953e3f0378,0x005fe409ac74d614,0x00452327f477e047,0x00a4018507fb6073,0x007b6e71951caac8,0x0012b42ab8a6ce91,0x0080eca677294ab7)},
+        {FIELD_LITERAL(0x00a53edc023ba69b,0x00c6afa83ddde2e8,0x00c3f638b307b14e,0x004a357a64414062,0x00e4d94d8b582dc9,0x001739caf71695b7,0x0012431b2ae28de1,0x003b6bc98682907c)},
+        {FIELD_LITERAL(0x008a9a93be1f99d6,0x0079fa627cc699c8,0x00b0cfb134ba84c8,0x001c4b778249419a,0x00df4ab3d9c44f40,0x009f596e6c1a9e3c,0x001979c0df237316,0x00501e953a919b87)},
+    }}
+};
+const niels_t *curve448_wnaf_base = curve448_wnaf_base_table;
diff --git a/crypto/ec/curve448/curve448utils.h b/crypto/ec/curve448/curve448utils.h
new file mode 100644
index 0000000..4af2c3f
--- /dev/null
+++ b/crypto/ec/curve448/curve448utils.h
@@ -0,0 +1,77 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_CURVE448UTILS_H
+# define HEADER_CURVE448UTILS_H
+
+# include <openssl/e_os2.h>
+
+/*
+ * Internal word types. Somewhat tricky.  This could be decided separately per
+ * platform.  However, the structs do need to be all the same size and
+ * alignment on a given platform to support dynamic linking, since even if you
+ * header was built with eg arch_neon, you might end up linking a library built
+ * with arch_arm32.
+ */
+# ifndef C448_WORD_BITS
+#  if defined(__SIZEOF_INT128__) && (__SIZEOF_INT128__ == 16)
+#   define C448_WORD_BITS 64      /* The number of bits in a word */
+#  else
+#   define C448_WORD_BITS 32      /* The number of bits in a word */
+#  endif
+# endif
+
+# if C448_WORD_BITS == 64
+/* Word size for internal computations */
+typedef uint64_t c448_word_t;
+/* Signed word size for internal computations */
+typedef int64_t c448_sword_t;
+/* "Boolean" type, will be set to all-zero or all-one (i.e. -1u) */
+typedef uint64_t c448_bool_t;
+/* Double-word size for internal computations */
+typedef __uint128_t c448_dword_t;
+/* Signed double-word size for internal computations */
+typedef __int128_t c448_dsword_t;
+# elif C448_WORD_BITS == 32
+/* Word size for internal computations */
+typedef uint32_t c448_word_t;
+/* Signed word size for internal computations */
+typedef int32_t c448_sword_t;
+/* "Boolean" type, will be set to all-zero or all-one (i.e. -1u) */
+typedef uint32_t c448_bool_t;
+/* Double-word size for internal computations */
+typedef uint64_t c448_dword_t;
+/* Signed double-word size for internal computations */
+typedef int64_t c448_dsword_t;
+# else
+#  error "Only supporting C448_WORD_BITS = 32 or 64 for now"
+# endif
+
+/* C448_TRUE = -1 so that C448_TRUE & x = x */
+# define C448_TRUE      (0 - (c448_bool_t)1)
+
+/* C448_FALSE = 0 so that C448_FALSE & x = 0 */
+# define C448_FALSE     0
+
+/* Another boolean type used to indicate success or failure. */
+typedef enum {
+    C448_SUCCESS = -1, /**< The operation succeeded. */
+    C448_FAILURE = 0   /**< The operation failed. */
+} c448_error_t;
+
+/* Return success if x is true */
+static ossl_inline c448_error_t c448_succeed_if(c448_bool_t x)
+{
+    return (c448_error_t) x;
+}
+
+#endif                          /* __C448_COMMON_H__ */
diff --git a/crypto/ec/curve448/ed448.h b/crypto/ec/curve448/ed448.h
new file mode 100644
index 0000000..5fe939e
--- /dev/null
+++ b/crypto/ec/curve448/ed448.h
@@ -0,0 +1,195 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_ED448_H
+# define HEADER_ED448_H
+
+# include "point_448.h"
+
+/* Number of bytes in an EdDSA public key. */
+# define EDDSA_448_PUBLIC_BYTES 57
+
+/* Number of bytes in an EdDSA private key. */
+# define EDDSA_448_PRIVATE_BYTES EDDSA_448_PUBLIC_BYTES
+
+/* Number of bytes in an EdDSA private key. */
+# define EDDSA_448_SIGNATURE_BYTES (EDDSA_448_PUBLIC_BYTES + \
+                                    EDDSA_448_PRIVATE_BYTES)
+
+/* EdDSA encoding ratio. */
+# define C448_EDDSA_ENCODE_RATIO 4
+
+/* EdDSA decoding ratio. */
+# define C448_EDDSA_DECODE_RATIO (4 / 4)
+
+/*
+ * EdDSA key generation.  This function uses a different (non-Decaf) encoding.
+ *
+ * pubkey (out): The public key.
+ * privkey (in): The private key.
+ */
+c448_error_t c448_ed448_derive_public_key(
+                        uint8_t pubkey [EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t privkey [EDDSA_448_PRIVATE_BYTES]);
+
+/*
+ * EdDSA signing.
+ *
+ * signature (out): The signature.
+ * privkey (in): The private key.
+ * pubkey (in):  The public key.
+ * message (in):  The message to sign.
+ * message_len (in):  The length of the message.
+ * prehashed (in):  Nonzero if the message is actually the hash of something
+ *                  you want to sign.
+ * context (in):  A "context" for this signature of up to 255 bytes.
+ * context_len (in):  Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_sign(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t *message, size_t message_len,
+                        uint8_t prehashed, const uint8_t *context,
+                        size_t context_len);
+
+/*
+ * EdDSA signing with prehash.
+ *
+ * signature (out): The signature.
+ * privkey (in): The private key.
+ * pubkey (in): The public key.
+ * hash (in): The hash of the message.  This object will not be modified by the
+ *            call.
+ * context (in): A "context" for this signature of up to 255 bytes.  Must be the
+ *               same as what was used for the prehash.
+ * context_len (in): Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_sign_prehash(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t hash[64],
+                        const uint8_t *context,
+                        size_t context_len);
+
+/*
+ * EdDSA signature verification.
+ *
+ * Uses the standard (i.e. less-strict) verification formula.
+ *
+ * signature (in): The signature.
+ * pubkey (in): The public key.
+ * message (in): The message to verify.
+ * message_len (in): The length of the message.
+ * prehashed (in): Nonzero if the message is actually the hash of something you
+ *                 want to verify.
+ * context (in): A "context" for this signature of up to 255 bytes.
+ * context_len (in): Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_verify(const uint8_t
+                                 signature[EDDSA_448_SIGNATURE_BYTES],
+                                 const uint8_t
+                                 pubkey[EDDSA_448_PUBLIC_BYTES],
+                                 const uint8_t *message, size_t message_len,
+                                 uint8_t prehashed, const uint8_t *context,
+                                 uint8_t context_len);
+
+/*
+ * EdDSA signature verification.
+ *
+ * Uses the standard (i.e. less-strict) verification formula.
+ *
+ * signature (in): The signature.
+ * pubkey (in): The public key.
+ * hash (in): The hash of the message.  This object will not be modified by the
+ *            call.
+ * context (in): A "context" for this signature of up to 255 bytes.  Must be the
+ *               same as what was used for the prehash.
+ * context_len (in): Length of the context.
+ *
+ * For Ed25519, it is unsafe to use the same key for both prehashed and
+ * non-prehashed messages, at least without some very careful protocol-level
+ * disambiguation.  For Ed448 it is safe.
+ */
+c448_error_t c448_ed448_verify_prehash(
+                    const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                    const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                    const uint8_t hash[64],
+                    const uint8_t *context,
+                    uint8_t context_len);
+
+/*
+ * EdDSA point encoding.  Used internally, exposed externally.
+ * Multiplies by C448_EDDSA_ENCODE_RATIO first.
+ *
+ * The multiplication is required because the EdDSA encoding represents
+ * the cofactor information, but the Decaf encoding ignores it (which
+ * is the whole point).  So if you decode from EdDSA and re-encode to
+ * EdDSA, the cofactor info must get cleared, because the intermediate
+ * representation doesn't track it.
+ *
+ * The way we handle this is to multiply by C448_EDDSA_DECODE_RATIO when
+ * decoding, and by C448_EDDSA_ENCODE_RATIO when encoding.  The product of
+ * these ratios is always exactly the cofactor 4, so the cofactor ends up
+ * cleared one way or another.  But exactly how that shakes out depends on the
+ * base points specified in RFC 8032.
+ *
+ * The upshot is that if you pass the Decaf/Ristretto base point to
+ * this function, you will get C448_EDDSA_ENCODE_RATIO times the
+ * EdDSA base point.
+ *
+ * enc (out): The encoded point.
+ * p (in): The point.
+ */
+void curve448_point_mul_by_ratio_and_encode_like_eddsa(
+                                    uint8_t enc [EDDSA_448_PUBLIC_BYTES],
+                                    const curve448_point_t p);
+
+/*
+ * EdDSA point decoding.  Multiplies by C448_EDDSA_DECODE_RATIO, and
+ * ignores cofactor information.
+ *
+ * See notes on curve448_point_mul_by_ratio_and_encode_like_eddsa
+ *
+ * enc (out): The encoded point.
+ * p (in): The point.
+ */
+c448_error_t curve448_point_decode_like_eddsa_and_mul_by_ratio(
+                            curve448_point_t p,
+                            const uint8_t enc[EDDSA_448_PUBLIC_BYTES]);
+
+/*
+ * EdDSA to ECDH private key conversion
+ * Using the appropriate hash function, hash the EdDSA private key
+ * and keep only the lower bytes to get the ECDH private key
+ *
+ * x (out): The ECDH private key as in RFC7748
+ * ed (in): The EdDSA private key
+ */
+c448_error_t c448_ed448_convert_private_key_to_x448(
+                            uint8_t x[X448_PRIVATE_BYTES],
+                            const uint8_t ed[EDDSA_448_PRIVATE_BYTES]);
+
+#endif                          /* HEADER_ED448_H */
diff --git a/crypto/ec/curve448/eddsa.c b/crypto/ec/curve448/eddsa.c
new file mode 100644
index 0000000..7175715
--- /dev/null
+++ b/crypto/ec/curve448/eddsa.c
@@ -0,0 +1,350 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include <string.h>
+#include <openssl/crypto.h>
+#include <openssl/evp.h>
+#include "curve448_lcl.h"
+#include "word.h"
+#include "ed448.h"
+#include "internal/numbers.h"
+
+#define COFACTOR 4
+
+static c448_error_t oneshot_hash(uint8_t *out, size_t outlen,
+                                 const uint8_t *in, size_t inlen)
+{
+    EVP_MD_CTX *hashctx = EVP_MD_CTX_new();
+
+    if (hashctx == NULL)
+        return C448_FAILURE;
+
+    if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
+            || !EVP_DigestUpdate(hashctx, in, inlen)
+            || !EVP_DigestFinalXOF(hashctx, out, outlen)) {
+        EVP_MD_CTX_free(hashctx);
+        return C448_FAILURE;
+    }
+
+    EVP_MD_CTX_free(hashctx);
+    return C448_SUCCESS;
+}
+
+static void clamp(uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES])
+{
+    secret_scalar_ser[0] &= -COFACTOR;
+    secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 1] = 0;
+    secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 2] |= 0x80;
+}
+
+static c448_error_t hash_init_with_dom(EVP_MD_CTX *hashctx, uint8_t prehashed,
+                                       uint8_t for_prehash,
+                                       const uint8_t *context,
+                                       size_t context_len)
+{
+    const char *dom_s = "SigEd448";
+    uint8_t dom[2];
+
+    if (context_len > UINT8_MAX)
+        return C448_FAILURE;
+
+    dom[0] = (uint8_t)(2 - (prehashed == 0 ? 1 : 0)
+                       - (for_prehash == 0 ? 1 : 0));
+    dom[1] = (uint8_t)context_len;
+
+    if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
+            || !EVP_DigestUpdate(hashctx, dom_s, strlen(dom_s))
+            || !EVP_DigestUpdate(hashctx, dom, sizeof(dom))
+            || !EVP_DigestUpdate(hashctx, context, context_len))
+        return C448_FAILURE;
+
+    return C448_SUCCESS;
+}
+
+/* In this file because it uses the hash */
+c448_error_t c448_ed448_convert_private_key_to_x448(
+                            uint8_t x[X448_PRIVATE_BYTES],
+                            const uint8_t ed [EDDSA_448_PRIVATE_BYTES])
+{
+    /* pass the private key through oneshot_hash function */
+    /* and keep the first X448_PRIVATE_BYTES bytes */
+    return oneshot_hash(x, X448_PRIVATE_BYTES, ed,
+                        EDDSA_448_PRIVATE_BYTES);
+}
+
+c448_error_t c448_ed448_derive_public_key(
+                        uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES])
+{
+    /* only this much used for keygen */
+    uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES];
+    curve448_scalar_t secret_scalar;
+    unsigned int c;
+    curve448_point_t p;
+
+    if (!oneshot_hash(secret_scalar_ser, sizeof(secret_scalar_ser), privkey,
+                      EDDSA_448_PRIVATE_BYTES))
+        return C448_FAILURE;
+
+    clamp(secret_scalar_ser);
+
+    curve448_scalar_decode_long(secret_scalar, secret_scalar_ser,
+                                sizeof(secret_scalar_ser));
+
+    /*
+     * Since we are going to mul_by_cofactor during encoding, divide by it
+     * here. However, the EdDSA base point is not the same as the decaf base
+     * point if the sigma isogeny is in use: the EdDSA base point is on
+     * Etwist_d/(1-d) and the decaf base point is on Etwist_d, and when
+     * converted it effectively picks up a factor of 2 from the isogenies.  So
+     * we might start at 2 instead of 1.
+     */
+    for (c = 1; c < C448_EDDSA_ENCODE_RATIO; c <<= 1)
+        curve448_scalar_halve(secret_scalar, secret_scalar);
+
+    curve448_precomputed_scalarmul(p, curve448_precomputed_base, secret_scalar);
+
+    curve448_point_mul_by_ratio_and_encode_like_eddsa(pubkey, p);
+
+    /* Cleanup */
+    curve448_scalar_destroy(secret_scalar);
+    curve448_point_destroy(p);
+    OPENSSL_cleanse(secret_scalar_ser, sizeof(secret_scalar_ser));
+
+    return C448_SUCCESS;
+}
+
+c448_error_t c448_ed448_sign(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t *message, size_t message_len,
+                        uint8_t prehashed, const uint8_t *context,
+                        size_t context_len)
+{
+    curve448_scalar_t secret_scalar;
+    EVP_MD_CTX *hashctx = EVP_MD_CTX_new();
+    c448_error_t ret = C448_FAILURE;
+    curve448_scalar_t nonce_scalar;
+    uint8_t nonce_point[EDDSA_448_PUBLIC_BYTES] = { 0 };
+    unsigned int c;
+    curve448_scalar_t challenge_scalar;
+
+    if (hashctx == NULL)
+        return C448_FAILURE;
+
+    {
+        /*
+         * Schedule the secret key, First EDDSA_448_PRIVATE_BYTES is serialised
+         * secret scalar,next EDDSA_448_PRIVATE_BYTES bytes is the seed.
+         */
+        uint8_t expanded[EDDSA_448_PRIVATE_BYTES * 2];
+
+        if (!oneshot_hash(expanded, sizeof(expanded), privkey,
+                          EDDSA_448_PRIVATE_BYTES))
+            goto err;
+        clamp(expanded);
+        curve448_scalar_decode_long(secret_scalar, expanded,
+                                    EDDSA_448_PRIVATE_BYTES);
+
+        /* Hash to create the nonce */
+        if (!hash_init_with_dom(hashctx, prehashed, 0, context, context_len)
+                || !EVP_DigestUpdate(hashctx,
+                                     expanded + EDDSA_448_PRIVATE_BYTES,
+                                     EDDSA_448_PRIVATE_BYTES)
+                || !EVP_DigestUpdate(hashctx, message, message_len)) {
+            OPENSSL_cleanse(expanded, sizeof(expanded));
+            goto err;
+        }
+        OPENSSL_cleanse(expanded, sizeof(expanded));
+    }
+
+    /* Decode the nonce */
+    {
+        uint8_t nonce[2 * EDDSA_448_PRIVATE_BYTES];
+
+        if (!EVP_DigestFinalXOF(hashctx, nonce, sizeof(nonce)))
+            goto err;
+        curve448_scalar_decode_long(nonce_scalar, nonce, sizeof(nonce));
+        OPENSSL_cleanse(nonce, sizeof(nonce));
+    }
+
+    {
+        /* Scalarmul to create the nonce-point */
+        curve448_scalar_t nonce_scalar_2;
+        curve448_point_t p;
+
+        curve448_scalar_halve(nonce_scalar_2, nonce_scalar);
+        for (c = 2; c < C448_EDDSA_ENCODE_RATIO; c <<= 1)
+            curve448_scalar_halve(nonce_scalar_2, nonce_scalar_2);
+
+        curve448_precomputed_scalarmul(p, curve448_precomputed_base,
+                                       nonce_scalar_2);
+        curve448_point_mul_by_ratio_and_encode_like_eddsa(nonce_point, p);
+        curve448_point_destroy(p);
+        curve448_scalar_destroy(nonce_scalar_2);
+    }
+
+    {
+        uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];
+
+        /* Compute the challenge */
+        if (!hash_init_with_dom(hashctx, prehashed, 0, context, context_len)
+                || !EVP_DigestUpdate(hashctx, nonce_point, sizeof(nonce_point))
+                || !EVP_DigestUpdate(hashctx, pubkey, EDDSA_448_PUBLIC_BYTES)
+                || !EVP_DigestUpdate(hashctx, message, message_len)
+                || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge)))
+            goto err;
+
+        curve448_scalar_decode_long(challenge_scalar, challenge,
+                                    sizeof(challenge));
+        OPENSSL_cleanse(challenge, sizeof(challenge));
+    }
+
+    curve448_scalar_mul(challenge_scalar, challenge_scalar, secret_scalar);
+    curve448_scalar_add(challenge_scalar, challenge_scalar, nonce_scalar);
+
+    OPENSSL_cleanse(signature, EDDSA_448_SIGNATURE_BYTES);
+    memcpy(signature, nonce_point, sizeof(nonce_point));
+    curve448_scalar_encode(&signature[EDDSA_448_PUBLIC_BYTES],
+                           challenge_scalar);
+
+    curve448_scalar_destroy(secret_scalar);
+    curve448_scalar_destroy(nonce_scalar);
+    curve448_scalar_destroy(challenge_scalar);
+
+    ret = C448_SUCCESS;
+ err:
+    EVP_MD_CTX_free(hashctx);
+    return ret;
+}
+
+c448_error_t c448_ed448_sign_prehash(
+                        uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                        const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],
+                        const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                        const uint8_t hash[64], const uint8_t *context,
+                        size_t context_len)
+{
+    return c448_ed448_sign(signature, privkey, pubkey, hash, 64, 1, context,
+                           context_len);
+}
+
+c448_error_t c448_ed448_verify(
+                    const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                    const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                    const uint8_t *message, size_t message_len,
+                    uint8_t prehashed, const uint8_t *context,
+                    uint8_t context_len)
+{
+    curve448_point_t pk_point, r_point;
+    c448_error_t error =
+        curve448_point_decode_like_eddsa_and_mul_by_ratio(pk_point, pubkey);
+    curve448_scalar_t challenge_scalar;
+    curve448_scalar_t response_scalar;
+    unsigned int c;
+
+    if (C448_SUCCESS != error)
+        return error;
+
+    error =
+        curve448_point_decode_like_eddsa_and_mul_by_ratio(r_point, signature);
+    if (C448_SUCCESS != error)
+        return error;
+
+    {
+        /* Compute the challenge */
+        EVP_MD_CTX *hashctx = EVP_MD_CTX_new();
+        uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];
+
+        if (hashctx == NULL
+                || !hash_init_with_dom(hashctx, prehashed, 0, context,
+                                       context_len)
+                || !EVP_DigestUpdate(hashctx, signature, EDDSA_448_PUBLIC_BYTES)
+                || !EVP_DigestUpdate(hashctx, pubkey, EDDSA_448_PUBLIC_BYTES)
+                || !EVP_DigestUpdate(hashctx, message, message_len)
+                || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge))) {
+            EVP_MD_CTX_free(hashctx);
+            return C448_FAILURE;
+        }
+
+        EVP_MD_CTX_free(hashctx);
+        curve448_scalar_decode_long(challenge_scalar, challenge,
+                                    sizeof(challenge));
+        OPENSSL_cleanse(challenge, sizeof(challenge));
+    }
+    curve448_scalar_sub(challenge_scalar, curve448_scalar_zero,
+                        challenge_scalar);
+
+    curve448_scalar_decode_long(response_scalar,
+                                &signature[EDDSA_448_PUBLIC_BYTES],
+                                EDDSA_448_PRIVATE_BYTES);
+
+    for (c = 1; c < C448_EDDSA_DECODE_RATIO; c <<= 1)
+        curve448_scalar_add(response_scalar, response_scalar, response_scalar);
+
+    /* pk_point = -c(x(P)) + (cx + k)G = kG */
+    curve448_base_double_scalarmul_non_secret(pk_point,
+                                              response_scalar,
+                                              pk_point, challenge_scalar);
+    return c448_succeed_if(curve448_point_eq(pk_point, r_point));
+}
+
+c448_error_t c448_ed448_verify_prehash(
+                    const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],
+                    const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],
+                    const uint8_t hash[64], const uint8_t *context,
+                    uint8_t context_len)
+{
+    return c448_ed448_verify(signature, pubkey, hash, 64, 1, context,
+                             context_len);
+}
+
+int ED448_sign(uint8_t *out_sig, const uint8_t *message, size_t message_len,
+               const uint8_t public_key[57], const uint8_t private_key[57],
+               const uint8_t *context, size_t context_len)
+{
+    return c448_ed448_sign(out_sig, private_key, public_key, message,
+                           message_len, 0, context, context_len)
+        == C448_SUCCESS;
+}
+
+int ED448_verify(const uint8_t *message, size_t message_len,
+                 const uint8_t signature[114], const uint8_t public_key[57],
+                 const uint8_t *context, size_t context_len)
+{
+    return c448_ed448_verify(signature, public_key, message, message_len, 0,
+                             context, (uint8_t)context_len) == C448_SUCCESS;
+}
+
+int ED448ph_sign(uint8_t *out_sig, const uint8_t hash[64],
+                 const uint8_t public_key[57], const uint8_t private_key[57],
+                 const uint8_t *context, size_t context_len)
+{
+    return c448_ed448_sign_prehash(out_sig, private_key, public_key, hash,
+                                   context, context_len) == C448_SUCCESS;
+
+}
+
+int ED448ph_verify(const uint8_t hash[64], const uint8_t signature[114],
+                   const uint8_t public_key[57], const uint8_t *context,
+                   size_t context_len)
+{
+    return c448_ed448_verify_prehash(signature, public_key, hash, context,
+                                     (uint8_t)context_len) == C448_SUCCESS;
+}
+
+int ED448_public_from_private(uint8_t out_public_key[57],
+                              const uint8_t private_key[57])
+{
+    return c448_ed448_derive_public_key(out_public_key, private_key)
+        == C448_SUCCESS;
+}
diff --git a/crypto/ec/curve448/f_generic.c b/crypto/ec/curve448/f_generic.c
new file mode 100644
index 0000000..6babea6
--- /dev/null
+++ b/crypto/ec/curve448/f_generic.c
@@ -0,0 +1,204 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include "field.h"
+
+static const gf MODULUS = {
+    FIELD_LITERAL(0xffffffffffffff, 0xffffffffffffff, 0xffffffffffffff,
+                  0xffffffffffffff, 0xfffffffffffffe, 0xffffffffffffff,
+                  0xffffffffffffff, 0xffffffffffffff)
+};
+
+/* Serialize to wire format. */
+void gf_serialize(uint8_t serial[SER_BYTES], const gf x, int with_hibit)
+{
+    unsigned int j = 0, fill = 0;
+    dword_t buffer = 0;
+    int i;
+    gf red;
+
+    gf_copy(red, x);
+    gf_strong_reduce(red);
+    if (!with_hibit)
+        assert(gf_hibit(red) == 0);
+
+    for (i = 0; i < (with_hibit ? X_SER_BYTES : SER_BYTES); i++) {
+        if (fill < 8 && j < NLIMBS) {
+            buffer |= ((dword_t) red->limb[LIMBPERM(j)]) << fill;
+            fill += LIMB_PLACE_VALUE(LIMBPERM(j));
+            j++;
+        }
+        serial[i] = (uint8_t)buffer;
+        fill -= 8;
+        buffer >>= 8;
+    }
+}
+
+/* Return high bit of x = low bit of 2x mod p */
+mask_t gf_hibit(const gf x)
+{
+    gf y;
+
+    gf_add(y, x, x);
+    gf_strong_reduce(y);
+    return 0 - (y->limb[0] & 1);
+}
+
+/* Return high bit of x = low bit of 2x mod p */
+mask_t gf_lobit(const gf x)
+{
+    gf y;
+
+    gf_copy(y, x);
+    gf_strong_reduce(y);
+    return 0 - (y->limb[0] & 1);
+}
+
+/* Deserialize from wire format; return -1 on success and 0 on failure. */
+mask_t gf_deserialize(gf x, const uint8_t serial[SER_BYTES], int with_hibit,
+                      uint8_t hi_nmask)
+{
+    unsigned int j = 0, fill = 0;
+    dword_t buffer = 0;
+    dsword_t scarry = 0;
+    const unsigned nbytes = with_hibit ? X_SER_BYTES : SER_BYTES;
+    unsigned int i;
+    mask_t succ;
+
+    for (i = 0; i < NLIMBS; i++) {
+        while (fill < LIMB_PLACE_VALUE(LIMBPERM(i)) && j < nbytes) {
+            uint8_t sj;
+
+            sj = serial[j];
+            if (j == nbytes - 1)
+                sj &= ~hi_nmask;
+            buffer |= ((dword_t) sj) << fill;
+            fill += 8;
+            j++;
+        }
+        x->limb[LIMBPERM(i)] = (word_t)
+            ((i < NLIMBS - 1) ? buffer & LIMB_MASK(LIMBPERM(i)) : buffer);
+        fill -= LIMB_PLACE_VALUE(LIMBPERM(i));
+        buffer >>= LIMB_PLACE_VALUE(LIMBPERM(i));
+        scarry =
+            (scarry + x->limb[LIMBPERM(i)] -
+             MODULUS->limb[LIMBPERM(i)]) >> (8 * sizeof(word_t));
+    }
+    succ = with_hibit ? 0 - (mask_t) 1 : ~gf_hibit(x);
+    return succ & word_is_zero((word_t)buffer) & ~word_is_zero((word_t)scarry);
+}
+
+/* Reduce to canonical form. */
+void gf_strong_reduce(gf a)
+{
+    dsword_t scarry;
+    word_t scarry_0;
+    dword_t carry = 0;
+    unsigned int i;
+
+    /* first, clear high */
+    gf_weak_reduce(a);          /* Determined to have negligible perf impact. */
+
+    /* now the total is less than 2p */
+
+    /* compute total_value - p.  No need to reduce mod p. */
+    scarry = 0;
+    for (i = 0; i < NLIMBS; i++) {
+        scarry = scarry + a->limb[LIMBPERM(i)] - MODULUS->limb[LIMBPERM(i)];
+        a->limb[LIMBPERM(i)] = scarry & LIMB_MASK(LIMBPERM(i));
+        scarry >>= LIMB_PLACE_VALUE(LIMBPERM(i));
+    }
+
+    /*
+     * uncommon case: it was >= p, so now scarry = 0 and this = x common case:
+     * it was < p, so now scarry = -1 and this = x - p + 2^255 so let's add
+     * back in p.  will carry back off the top for 2^255.
+     */
+    assert(word_is_zero(scarry) | word_is_zero(scarry + 1));
+
+    scarry_0 = (word_t)scarry;
+
+    /* add it back */
+    for (i = 0; i < NLIMBS; i++) {
+        carry =
+            carry + a->limb[LIMBPERM(i)] +
+            (scarry_0 & MODULUS->limb[LIMBPERM(i)]);
+        a->limb[LIMBPERM(i)] = carry & LIMB_MASK(LIMBPERM(i));
+        carry >>= LIMB_PLACE_VALUE(LIMBPERM(i));
+    }
+
+    assert(word_is_zero(carry + scarry_0));
+}
+
+/* Subtract two gf elements d=a-b */
+void gf_sub(gf d, const gf a, const gf b)
+{
+    gf_sub_RAW(d, a, b);
+    gf_bias(d, 2);
+    gf_weak_reduce(d);
+}
+
+/* Add two field elements d = a+b */
+void gf_add(gf d, const gf a, const gf b)
+{
+    gf_add_RAW(d, a, b);
+    gf_weak_reduce(d);
+}
+
+/* Compare a==b */
+mask_t gf_eq(const gf a, const gf b)
+{
+    gf c;
+    mask_t ret = 0;
+    unsigned int i;
+
+    gf_sub(c, a, b);
+    gf_strong_reduce(c);
+
+    for (i = 0; i < NLIMBS; i++)
+        ret |= c->limb[LIMBPERM(i)];
+
+    return word_is_zero(ret);
+}
+
+mask_t gf_isr(gf a, const gf x)
+{
+    gf L0, L1, L2;
+
+    gf_sqr(L1, x);
+    gf_mul(L2, x, L1);
+    gf_sqr(L1, L2);
+    gf_mul(L2, x, L1);
+    gf_sqrn(L1, L2, 3);
+    gf_mul(L0, L2, L1);
+    gf_sqrn(L1, L0, 3);
+    gf_mul(L0, L2, L1);
+    gf_sqrn(L2, L0, 9);
+    gf_mul(L1, L0, L2);
+    gf_sqr(L0, L1);
+    gf_mul(L2, x, L0);
+    gf_sqrn(L0, L2, 18);
+    gf_mul(L2, L1, L0);
+    gf_sqrn(L0, L2, 37);
+    gf_mul(L1, L2, L0);
+    gf_sqrn(L0, L1, 37);
+    gf_mul(L1, L2, L0);
+    gf_sqrn(L0, L1, 111);
+    gf_mul(L2, L1, L0);
+    gf_sqr(L0, L2);
+    gf_mul(L1, x, L0);
+    gf_sqrn(L0, L1, 223);
+    gf_mul(L1, L2, L0);
+    gf_sqr(L2, L1);
+    gf_mul(L0, L2, x);
+    gf_copy(a, L1);
+    return gf_eq(L0, ONE);
+}
diff --git a/crypto/ec/curve448/field.h b/crypto/ec/curve448/field.h
new file mode 100644
index 0000000..c3bad40
--- /dev/null
+++ b/crypto/ec/curve448/field.h
@@ -0,0 +1,168 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_FIELD_H
+# define HEADER_FIELD_H
+
+# include "internal/constant_time_locl.h"
+# include <string.h>
+# include <assert.h>
+# include "word.h"
+
+# define NLIMBS (64/sizeof(word_t))
+# define X_SER_BYTES 56
+# define SER_BYTES 56
+
+# if defined(__GNUC__) || defined(__clang__)
+#  define INLINE_UNUSED __inline__ __attribute__((__unused__,__always_inline__))
+#  define RESTRICT __restrict__
+#  define ALIGNED __attribute__((__aligned__(32)))
+# else
+#  define INLINE_UNUSED ossl_inline
+#  define RESTRICT
+#  define ALIGNED
+# endif
+
+typedef struct gf_s {
+    word_t limb[NLIMBS];
+} ALIGNED gf_s, gf[1];
+
+/* RFC 7748 support */
+# define X_PUBLIC_BYTES  X_SER_BYTES
+# define X_PRIVATE_BYTES X_PUBLIC_BYTES
+# define X_PRIVATE_BITS  448
+
+static INLINE_UNUSED void gf_copy(gf out, const gf a)
+{
+    *out = *a;
+}
+
+static INLINE_UNUSED void gf_add_RAW(gf out, const gf a, const gf b);
+static INLINE_UNUSED void gf_sub_RAW(gf out, const gf a, const gf b);
+static INLINE_UNUSED void gf_bias(gf inout, int amount);
+static INLINE_UNUSED void gf_weak_reduce(gf inout);
+
+void gf_strong_reduce(gf inout);
+void gf_add(gf out, const gf a, const gf b);
+void gf_sub(gf out, const gf a, const gf b);
+void gf_mul(gf_s * RESTRICT out, const gf a, const gf b);
+void gf_mulw_unsigned(gf_s * RESTRICT out, const gf a, uint32_t b);
+void gf_sqr(gf_s * RESTRICT out, const gf a);
+mask_t gf_isr(gf a, const gf x); /** a^2 x = 1, QNR, or 0 if x=0.  Return true if successful */
+mask_t gf_eq(const gf x, const gf y);
+mask_t gf_lobit(const gf x);
+mask_t gf_hibit(const gf x);
+
+void gf_serialize(uint8_t *serial, const gf x, int with_highbit);
+mask_t gf_deserialize(gf x, const uint8_t serial[SER_BYTES], int with_hibit,
+                      uint8_t hi_nmask);
+
+# include "f_impl.h"            /* Bring in the inline implementations */
+
+# define LIMBPERM(i) (i)
+# define LIMB_MASK(i) (((1)<<LIMB_PLACE_VALUE(i))-1)
+
+static const gf ZERO = {{{0}}}, ONE = {{{1}}};
+
+/* Square x, n times. */
+static ossl_inline void gf_sqrn(gf_s * RESTRICT y, const gf x, int n)
+{
+    gf tmp;
+
+    assert(n > 0);
+    if (n & 1) {
+        gf_sqr(y, x);
+        n--;
+    } else {
+        gf_sqr(tmp, x);
+        gf_sqr(y, tmp);
+        n -= 2;
+    }
+    for (; n; n -= 2) {
+        gf_sqr(tmp, y);
+        gf_sqr(y, tmp);
+    }
+}
+
+# define gf_add_nr gf_add_RAW
+
+/* Subtract mod p.  Bias by 2 and don't reduce  */
+static ossl_inline void gf_sub_nr(gf c, const gf a, const gf b)
+{
+    gf_sub_RAW(c, a, b);
+    gf_bias(c, 2);
+    if (GF_HEADROOM < 3)
+        gf_weak_reduce(c);
+}
+
+/* Subtract mod p. Bias by amt but don't reduce.  */
+static ossl_inline void gf_subx_nr(gf c, const gf a, const gf b, int amt)
+{
+    gf_sub_RAW(c, a, b);
+    gf_bias(c, amt);
+    if (GF_HEADROOM < amt + 1)
+        gf_weak_reduce(c);
+}
+
+/* Mul by signed int.  Not constant-time WRT the sign of that int. */
+static ossl_inline void gf_mulw(gf c, const gf a, int32_t w)
+{
+    if (w > 0) {
+        gf_mulw_unsigned(c, a, w);
+    } else {
+        gf_mulw_unsigned(c, a, -w);
+        gf_sub(c, ZERO, c);
+    }
+}
+
+/* Constant time, x = is_z ? z : y */
+static ossl_inline void gf_cond_sel(gf x, const gf y, const gf z, mask_t is_z)
+{
+    size_t i;
+
+    for (i = 0; i < NLIMBS; i++) {
+#if ARCH_WORD_BITS == 32
+        x[0].limb[i] = constant_time_select_32(is_z, z[0].limb[i],
+                                               y[0].limb[i]);
+#else
+        /* Must be 64 bit */
+        x[0].limb[i] = constant_time_select_64(is_z, z[0].limb[i],
+                                               y[0].limb[i]);
+#endif
+    }
+}
+
+/* Constant time, if (neg) x=-x; */
+static ossl_inline void gf_cond_neg(gf x, mask_t neg)
+{
+    gf y;
+
+    gf_sub(y, ZERO, x);
+    gf_cond_sel(x, x, y, neg);
+}
+
+/* Constant time, if (swap) (x,y) = (y,x); */
+static ossl_inline void gf_cond_swap(gf x, gf_s * RESTRICT y, mask_t swap)
+{
+    size_t i;
+
+    for (i = 0; i < NLIMBS; i++) {
+#if ARCH_WORD_BITS == 32
+        constant_time_cond_swap_32(swap, &(x[0].limb[i]), &(y->limb[i]));
+#else
+        /* Must be 64 bit */
+        constant_time_cond_swap_64(swap, &(x[0].limb[i]), &(y->limb[i]));
+#endif
+    }
+}
+
+#endif                          /* HEADER_FIELD_H */
diff --git a/crypto/ec/curve448/point_448.h b/crypto/ec/curve448/point_448.h
new file mode 100644
index 0000000..0ef3b87
--- /dev/null
+++ b/crypto/ec/curve448/point_448.h
@@ -0,0 +1,301 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_POINT_448_H
+# define HEADER_POINT_448_H
+
+# include "curve448utils.h"
+# include "field.h"
+
+/* Comb config: number of combs, n, t, s. */
+#define COMBS_N 5
+#define COMBS_T 5
+#define COMBS_S 18
+
+/* Projective Niels coordinates */
+typedef struct {
+    gf a, b, c;
+} niels_s, niels_t[1];
+typedef struct {
+    niels_t n;
+    gf z;
+} pniels_t[1];
+
+/* Precomputed base */
+struct curve448_precomputed_s {
+    niels_t table[COMBS_N << (COMBS_T - 1)];
+};
+
+# define C448_SCALAR_LIMBS ((446-1)/C448_WORD_BITS+1)
+
+/* The number of bits in a scalar */
+# define C448_SCALAR_BITS 446
+
+/* Number of bytes in a serialized scalar. */
+# define C448_SCALAR_BYTES 56
+
+/* X448 encoding ratio. */
+# define X448_ENCODE_RATIO 2
+
+/* Number of bytes in an x448 public key */
+# define X448_PUBLIC_BYTES 56
+
+/* Number of bytes in an x448 private key */
+# define X448_PRIVATE_BYTES 56
+
+/* Twisted Edwards extended homogeneous coordinates */
+typedef struct curve448_point_s {
+    gf x, y, z, t;
+} curve448_point_t[1];
+
+/* Precomputed table based on a point.  Can be trivial implementation. */
+struct curve448_precomputed_s;
+
+/* Precomputed table based on a point.  Can be trivial implementation. */
+typedef struct curve448_precomputed_s curve448_precomputed_s;
+
+/* Scalar is stored packed, because we don't need the speed. */
+typedef struct curve448_scalar_s {
+    c448_word_t limb[C448_SCALAR_LIMBS];
+} curve448_scalar_t[1];
+
+/* A scalar equal to 1. */
+extern const curve448_scalar_t curve448_scalar_one;
+
+/* A scalar equal to 0. */
+extern const curve448_scalar_t curve448_scalar_zero;
+
+/* The identity point on the curve. */
+extern const curve448_point_t curve448_point_identity;
+
+/* Precomputed table for the base point on the curve. */
+extern const struct curve448_precomputed_s *curve448_precomputed_base;
+extern const niels_t *curve448_wnaf_base;
+
+/*
+ * Read a scalar from wire format or from bytes.
+ *
+ * ser (in): Serialized form of a scalar.
+ * out (out): Deserialized form.
+ *
+ * Returns:
+ * C448_SUCCESS: The scalar was correctly encoded.
+ * C448_FAILURE: The scalar was greater than the modulus, and has been reduced
+ * modulo that modulus.
+ */
+c448_error_t curve448_scalar_decode(curve448_scalar_t out,
+                                    const unsigned char ser[C448_SCALAR_BYTES]);
+
+/*
+ * Read a scalar from wire format or from bytes.  Reduces mod scalar prime.
+ *
+ * ser (in): Serialized form of a scalar.
+ * ser_len (in): Length of serialized form.
+ * out (out): Deserialized form.
+ */
+void curve448_scalar_decode_long(curve448_scalar_t out,
+                                 const unsigned char *ser, size_t ser_len);
+
+/*
+ * Serialize a scalar to wire format.
+ *
+ * ser (out): Serialized form of a scalar.
+ * s (in): Deserialized scalar.
+ */
+void curve448_scalar_encode(unsigned char ser[C448_SCALAR_BYTES],
+                            const curve448_scalar_t s);
+
+/*
+ * Add two scalars. |a|, |b| and |out| may alias each other.
+ * 
+ * a (in): One scalar.
+ * b (in): Another scalar.
+ * out (out): a+b.
+ */
+void curve448_scalar_add(curve448_scalar_t out,
+                         const curve448_scalar_t a, const curve448_scalar_t b);
+
+/*
+ * Subtract two scalars.  |a|, |b| and |out| may alias each other.
+ * a (in): One scalar.
+ * b (in): Another scalar.
+ * out (out): a-b.
+ */
+void curve448_scalar_sub(curve448_scalar_t out,
+                         const curve448_scalar_t a, const curve448_scalar_t b);
+
+/*
+ * Multiply two scalars. |a|, |b| and |out| may alias each other.
+ * 
+ * a (in): One scalar.
+ * b (in): Another scalar.
+ * out (out): a*b.
+ */
+void curve448_scalar_mul(curve448_scalar_t out,
+                         const curve448_scalar_t a, const curve448_scalar_t b);
+
+/*
+* Halve a scalar.  |a| and |out| may alias each other.
+* 
+* a (in): A scalar.
+* out (out): a/2.
+*/
+void curve448_scalar_halve(curve448_scalar_t out, const curve448_scalar_t a);
+
+/*
+ * Copy a scalar.  The scalars may alias each other, in which case this
+ * function does nothing.
+ * 
+ * a (in): A scalar.
+ * out (out): Will become a copy of a.
+ */
+static ossl_inline void curve448_scalar_copy(curve448_scalar_t out,
+                                             const curve448_scalar_t a)
+{
+    *out = *a;
+}
+
+/*
+ * Copy a point.  The input and output may alias, in which case this function
+ * does nothing.
+ *
+ * a (out): A copy of the point.
+ * b (in): Any point.
+ */
+static ossl_inline void curve448_point_copy(curve448_point_t a,
+                                            const curve448_point_t b)
+{
+    *a = *b;
+}
+
+/*
+ * Test whether two points are equal.  If yes, return C448_TRUE, else return
+ * C448_FALSE.
+ *
+ * a (in): A point.
+ * b (in): Another point.
+ * 
+ * Returns:
+ * C448_TRUE: The points are equal.
+ * C448_FALSE: The points are not equal.
+ */
+__owur c448_bool_t curve448_point_eq(const curve448_point_t a,
+                                     const curve448_point_t b);
+
+/*
+ * Double a point. Equivalent to curve448_point_add(two_a,a,a), but potentially
+ * faster.
+ *
+ * two_a (out): The sum a+a.
+ * a (in): A point.
+ */
+void curve448_point_double(curve448_point_t two_a, const curve448_point_t a);
+
+/*
+ * RFC 7748 Diffie-Hellman scalarmul.  This function uses a different
+ * (non-Decaf) encoding.
+ *
+ * out (out): The scaled point base*scalar
+ * base (in): The point to be scaled.
+ * scalar (in): The scalar to multiply by.
+ *
+ * Returns:
+ * C448_SUCCESS: The scalarmul succeeded.
+ * C448_FAILURE: The scalarmul didn't succeed, because the base point is in a
+ * small subgroup.
+ */
+__owur c448_error_t x448_int(uint8_t out[X448_PUBLIC_BYTES],
+                             const uint8_t base[X448_PUBLIC_BYTES],
+                             const uint8_t scalar[X448_PRIVATE_BYTES]);
+
+/*
+ * Multiply a point by X448_ENCODE_RATIO, then encode it like RFC 7748.
+ *
+ * This function is mainly used internally, but is exported in case
+ * it will be useful.
+ *
+ * The ratio is necessary because the internal representation doesn't
+ * track the cofactor information, so on output we must clear the cofactor.
+ * This would multiply by the cofactor, but in fact internally points are always
+ * even, so it multiplies by half the cofactor instead.
+ *
+ * As it happens, this aligns with the base point definitions; that is,
+ * if you pass the Decaf/Ristretto base point to this function, the result
+ * will be X448_ENCODE_RATIO times the X448
+ * base point.
+ *
+ * out (out): The scaled and encoded point.
+ * p (in): The point to be scaled and encoded.
+ */
+void curve448_point_mul_by_ratio_and_encode_like_x448(
+                                        uint8_t out[X448_PUBLIC_BYTES],
+                                        const curve448_point_t p);
+
+/*
+ * RFC 7748 Diffie-Hellman base point scalarmul.  This function uses a different
+ * (non-Decaf) encoding.
+ * 
+ * out (out): The scaled point base*scalar
+ * scalar (in): The scalar to multiply by.
+ */
+void x448_derive_public_key(uint8_t out[X448_PUBLIC_BYTES],
+                            const uint8_t scalar[X448_PRIVATE_BYTES]);
+
+/*
+ * Multiply a precomputed base point by a scalar: out = scalar*base.
+ *
+ * scaled (out): The scaled point base*scalar
+ * base (in): The point to be scaled.
+ * scalar (in): The scalar to multiply by.
+ */
+void curve448_precomputed_scalarmul(curve448_point_t scaled,
+                                    const curve448_precomputed_s * base,
+                                    const curve448_scalar_t scalar);
+
+/*
+ * Multiply two base points by two scalars:
+ * combo = scalar1*curve448_point_base + scalar2*base2.
+ *
+ * Otherwise equivalent to curve448_point_double_scalarmul, but may be
+ * faster at the expense of being variable time.
+ *
+ * combo (out): The linear combination scalar1*base + scalar2*base2.
+ * scalar1 (in): A first scalar to multiply by.
+ * base2 (in): A second point to be scaled.
+ * scalar2 (in) A second scalar to multiply by.
+ *
+ * Warning: This function takes variable time, and may leak the scalars used. 
+ * It is designed for signature verification.
+ */
+void curve448_base_double_scalarmul_non_secret(curve448_point_t combo,
+                                               const curve448_scalar_t scalar1,
+                                               const curve448_point_t base2,
+                                               const curve448_scalar_t scalar2);
+
+/*
+ * Test that a point is valid, for debugging purposes.
+ *
+ * to_test (in): The point to test.
+ *
+ * Returns:
+ * C448_TRUE The point is valid.
+ * C448_FALSE The point is invalid.
+ */
+__owur c448_bool_t curve448_point_valid(const curve448_point_t to_test);
+
+/* Overwrite scalar with zeros. */
+void curve448_scalar_destroy(curve448_scalar_t scalar);
+
+/* Overwrite point with zeros. */
+void curve448_point_destroy(curve448_point_t point);
+
+#endif                          /* HEADER_POINT_448_H */
diff --git a/crypto/ec/curve448/scalar.c b/crypto/ec/curve448/scalar.c
new file mode 100644
index 0000000..0f14bc4
--- /dev/null
+++ b/crypto/ec/curve448/scalar.c
@@ -0,0 +1,235 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2016 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+#include <openssl/crypto.h>
+
+#include "word.h"
+#include "point_448.h"
+
+static const c448_word_t MONTGOMERY_FACTOR = (c448_word_t) 0x3bd440fae918bc5;
+static const curve448_scalar_t sc_p = {
+    {
+        {
+            SC_LIMB(0x2378c292ab5844f3), SC_LIMB(0x216cc2728dc58f55),
+            SC_LIMB(0xc44edb49aed63690), SC_LIMB(0xffffffff7cca23e9),
+            SC_LIMB(0xffffffffffffffff), SC_LIMB(0xffffffffffffffff),
+            SC_LIMB(0x3fffffffffffffff)
+        }
+    }
+}, sc_r2 = {
+    {
+        {
+
+            SC_LIMB(0xe3539257049b9b60), SC_LIMB(0x7af32c4bc1b195d9),
+            SC_LIMB(0x0d66de2388ea1859), SC_LIMB(0xae17cf725ee4d838),
+            SC_LIMB(0x1a9cc14ba3c47c44), SC_LIMB(0x2052bcb7e4d070af),
+            SC_LIMB(0x3402a939f823b729)
+        }
+    }
+};
+
+#define WBITS C448_WORD_BITS   /* NB this may be different from ARCH_WORD_BITS */
+
+const curve448_scalar_t curve448_scalar_one = {{{1}}};
+const curve448_scalar_t curve448_scalar_zero = {{{0}}};
+
+/*
+ * {extra,accum} - sub +? p
+ * Must have extra <= 1
+ */
+static void sc_subx(curve448_scalar_t out,
+                    const c448_word_t accum[C448_SCALAR_LIMBS],
+                    const curve448_scalar_t sub,
+                    const curve448_scalar_t p, c448_word_t extra)
+{
+    c448_dsword_t chain = 0;
+    unsigned int i;
+    c448_word_t borrow;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + accum[i]) - sub->limb[i];
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= WBITS;
+    }
+    borrow = (c448_word_t)chain + extra;     /* = 0 or -1 */
+
+    chain = 0;
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + out->limb[i]) + (p->limb[i] & borrow);
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= WBITS;
+    }
+}
+
+static void sc_montmul(curve448_scalar_t out, const curve448_scalar_t a,
+                       const curve448_scalar_t b)
+{
+    unsigned int i, j;
+    c448_word_t accum[C448_SCALAR_LIMBS + 1] = { 0 };
+    c448_word_t hi_carry = 0;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        c448_word_t mand = a->limb[i];
+        const c448_word_t *mier = b->limb;
+
+        c448_dword_t chain = 0;
+        for (j = 0; j < C448_SCALAR_LIMBS; j++) {
+            chain += ((c448_dword_t) mand) * mier[j] + accum[j];
+            accum[j] = (c448_word_t)chain;
+            chain >>= WBITS;
+        }
+        accum[j] = (c448_word_t)chain;
+
+        mand = accum[0] * MONTGOMERY_FACTOR;
+        chain = 0;
+        mier = sc_p->limb;
+        for (j = 0; j < C448_SCALAR_LIMBS; j++) {
+            chain += (c448_dword_t) mand *mier[j] + accum[j];
+            if (j)
+                accum[j - 1] = (c448_word_t)chain;
+            chain >>= WBITS;
+        }
+        chain += accum[j];
+        chain += hi_carry;
+        accum[j - 1] = (c448_word_t)chain;
+        hi_carry = chain >> WBITS;
+    }
+
+    sc_subx(out, accum, sc_p, sc_p, hi_carry);
+}
+
+void curve448_scalar_mul(curve448_scalar_t out, const curve448_scalar_t a,
+                         const curve448_scalar_t b)
+{
+    sc_montmul(out, a, b);
+    sc_montmul(out, out, sc_r2);
+}
+
+void curve448_scalar_sub(curve448_scalar_t out, const curve448_scalar_t a,
+                         const curve448_scalar_t b)
+{
+    sc_subx(out, a->limb, b, sc_p, 0);
+}
+
+void curve448_scalar_add(curve448_scalar_t out, const curve448_scalar_t a,
+                         const curve448_scalar_t b)
+{
+    c448_dword_t chain = 0;
+    unsigned int i;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + a->limb[i]) + b->limb[i];
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= WBITS;
+    }
+    sc_subx(out, out->limb, sc_p, sc_p, (c448_word_t)chain);
+}
+
+static ossl_inline void scalar_decode_short(curve448_scalar_t s,
+                                            const unsigned char *ser,
+                                            unsigned int nbytes)
+{
+    unsigned int i, j, k = 0;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        c448_word_t out = 0;
+
+        for (j = 0; j < sizeof(c448_word_t) && k < nbytes; j++, k++)
+            out |= ((c448_word_t) ser[k]) << (8 * j);
+        s->limb[i] = out;
+    }
+}
+
+c448_error_t curve448_scalar_decode(
+                                curve448_scalar_t s,
+                                const unsigned char ser[C448_SCALAR_BYTES])
+{
+    unsigned int i;
+    c448_dsword_t accum = 0;
+
+    scalar_decode_short(s, ser, C448_SCALAR_BYTES);
+    for (i = 0; i < C448_SCALAR_LIMBS; i++)
+        accum = (accum + s->limb[i] - sc_p->limb[i]) >> WBITS;
+    /* Here accum == 0 or -1 */
+
+    curve448_scalar_mul(s, s, curve448_scalar_one); /* ham-handed reduce */
+
+    return c448_succeed_if(~word_is_zero((uint32_t)accum));
+}
+
+void curve448_scalar_destroy(curve448_scalar_t scalar)
+{
+    OPENSSL_cleanse(scalar, sizeof(curve448_scalar_t));
+}
+
+void curve448_scalar_decode_long(curve448_scalar_t s,
+                                 const unsigned char *ser, size_t ser_len)
+{
+    size_t i;
+    curve448_scalar_t t1, t2;
+
+    if (ser_len == 0) {
+        curve448_scalar_copy(s, curve448_scalar_zero);
+        return;
+    }
+
+    i = ser_len - (ser_len % C448_SCALAR_BYTES);
+    if (i == ser_len)
+        i -= C448_SCALAR_BYTES;
+
+    scalar_decode_short(t1, &ser[i], ser_len - i);
+
+    if (ser_len == sizeof(curve448_scalar_t)) {
+        assert(i == 0);
+        /* ham-handed reduce */
+        curve448_scalar_mul(s, t1, curve448_scalar_one);
+        curve448_scalar_destroy(t1);
+        return;
+    }
+
+    while (i) {
+        i -= C448_SCALAR_BYTES;
+        sc_montmul(t1, t1, sc_r2);
+        (void)curve448_scalar_decode(t2, ser + i);
+        curve448_scalar_add(t1, t1, t2);
+    }
+
+    curve448_scalar_copy(s, t1);
+    curve448_scalar_destroy(t1);
+    curve448_scalar_destroy(t2);
+}
+
+void curve448_scalar_encode(unsigned char ser[C448_SCALAR_BYTES],
+                            const curve448_scalar_t s)
+{
+    unsigned int i, j, k = 0;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        for (j = 0; j < sizeof(c448_word_t); j++, k++)
+            ser[k] = s->limb[i] >> (8 * j);
+    }
+}
+
+void curve448_scalar_halve(curve448_scalar_t out, const curve448_scalar_t a)
+{
+    c448_word_t mask = 0 - (a->limb[0] & 1);
+    c448_dword_t chain = 0;
+    unsigned int i;
+
+    for (i = 0; i < C448_SCALAR_LIMBS; i++) {
+        chain = (chain + a->limb[i]) + (sc_p->limb[i] & mask);
+        out->limb[i] = (c448_word_t)chain;
+        chain >>= C448_WORD_BITS;
+    }
+    for (i = 0; i < C448_SCALAR_LIMBS - 1; i++)
+        out->limb[i] = out->limb[i] >> 1 | out->limb[i + 1] << (WBITS - 1);
+    out->limb[i] = out->limb[i] >> 1 | (c448_word_t)(chain << (WBITS - 1));
+}
diff --git a/crypto/ec/curve448/word.h b/crypto/ec/curve448/word.h
new file mode 100644
index 0000000..a48b9e0
--- /dev/null
+++ b/crypto/ec/curve448/word.h
@@ -0,0 +1,81 @@
+/*
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014 Cryptography Research, Inc.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ *
+ * Originally written by Mike Hamburg
+ */
+
+#ifndef HEADER_WORD_H
+# define HEADER_WORD_H
+
+# include <string.h>
+# include <assert.h>
+# include <stdlib.h>
+# include <openssl/e_os2.h>
+# include "arch_intrinsics.h"
+# include "curve448utils.h"
+
+# if (ARCH_WORD_BITS == 64)
+typedef uint64_t word_t, mask_t;
+typedef __uint128_t dword_t;
+typedef int32_t hsword_t;
+typedef int64_t sword_t;
+typedef __int128_t dsword_t;
+# elif (ARCH_WORD_BITS == 32)
+typedef uint32_t word_t, mask_t;
+typedef uint64_t dword_t;
+typedef int16_t hsword_t;
+typedef int32_t sword_t;
+typedef int64_t dsword_t;
+# else
+#  error "For now, we only support 32- and 64-bit architectures."
+# endif
+
+/*
+ * Scalar limbs are keyed off of the API word size instead of the arch word
+ * size.
+ */
+# if C448_WORD_BITS == 64
+#  define SC_LIMB(x) (x)
+# elif C448_WORD_BITS == 32
+#  define SC_LIMB(x) ((uint32_t)(x)),((x) >> 32)
+# else
+#  error "For now we only support 32- and 64-bit architectures."
+# endif
+
+/*
+ * The plan on booleans: The external interface uses c448_bool_t, but this
+ * might be a different size than our particular arch's word_t (and thus
+ * mask_t).  Also, the caller isn't guaranteed to pass it as nonzero.  So
+ * bool_to_mask converts word sizes and checks nonzero. On the flip side,
+ * mask_t is always -1 or 0, but it might be a different size than
+ * c448_bool_t. On the third hand, we have success vs boolean types, but
+ * that's handled in common.h: it converts between c448_bool_t and
+ * c448_error_t.
+ */
+static ossl_inline c448_bool_t mask_to_bool(mask_t m)
+{
+    return (c448_sword_t)(sword_t)m;
+}
+
+static ossl_inline mask_t bool_to_mask(c448_bool_t m)
+{
+    /* On most arches this will be optimized to a simple cast. */
+    mask_t ret = 0;
+    unsigned int i;
+    unsigned int limit = sizeof(c448_bool_t) / sizeof(mask_t);
+
+    if (limit < 1)
+        limit = 1;
+    for (i = 0; i < limit; i++)
+        ret |= ~word_is_zero(m >> (i * 8 * sizeof(word_t)));
+
+    return ret;
+}
+
+#endif                          /* HEADER_WORD_H */
diff --git a/include/internal/constant_time_locl.h b/include/internal/constant_time_locl.h
index c60e59c..813df63 100644
--- a/include/internal/constant_time_locl.h
+++ b/include/internal/constant_time_locl.h
@@ -11,6 +11,7 @@
 # define HEADER_CONSTANT_TIME_LOCL_H
 
 # include <stdlib.h>
+# include <string.h>
 # include <openssl/e_os2.h>              /* For 'ossl_inline' */
 
 #ifdef __cplusplus
@@ -33,6 +34,8 @@ extern "C" {
 
 /* Returns the given value with the MSB copied to all the other bits. */
 static ossl_inline unsigned int constant_time_msb(unsigned int a);
+/* Convenience method for uint32_t. */
+static ossl_inline uint32_t constant_time_msb_32(uint32_t a);
 /* Convenience method for uint64_t. */
 static ossl_inline uint64_t constant_time_msb_64(uint64_t a);
 
@@ -56,6 +59,8 @@ static ossl_inline unsigned char constant_time_ge_8(unsigned int a,
 static ossl_inline unsigned int constant_time_is_zero(unsigned int a);
 /* Convenience method for getting an 8-bit mask. */
 static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a);
+/* Convenience method for getting a 32-bit mask. */
+static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a);
 
 /* Returns 0xff..f if a == b and 0 otherwise. */
 static ossl_inline unsigned int constant_time_eq(unsigned int a,
@@ -82,6 +87,11 @@ static ossl_inline unsigned int constant_time_select(unsigned int mask,
 static ossl_inline unsigned char constant_time_select_8(unsigned char mask,
                                                         unsigned char a,
                                                         unsigned char b);
+
+/* Convenience method for uint32_t. */
+static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a,
+                                                    uint32_t b);
+
 /* Convenience method for uint64_t. */
 static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a,
                                                     uint64_t b);
@@ -95,6 +105,12 @@ static ossl_inline unsigned int constant_time_msb(unsigned int a)
     return 0 - (a >> (sizeof(a) * 8 - 1));
 }
 
+
+static ossl_inline uint32_t constant_time_msb_32(uint32_t a)
+{
+    return 0 - (a >> 31);
+}
+
 static ossl_inline uint64_t constant_time_msb_64(uint64_t a)
 {
     return 0 - (a >> 63);
@@ -164,6 +180,11 @@ static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a)
     return (unsigned char)constant_time_is_zero(a);
 }
 
+static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
+{
+    return constant_time_msb_32(~a & (a - 1));
+}
+
 static ossl_inline unsigned int constant_time_eq(unsigned int a,
                                                  unsigned int b)
 {
@@ -229,12 +250,84 @@ static ossl_inline int constant_time_select_int_s(size_t mask, int a, int b)
                                       (unsigned)(b));
 }
 
+static ossl_inline uint32_t constant_time_select_32(uint32_t mask, uint32_t a,
+                                                    uint32_t b)
+{
+    return (mask & a) | (~mask & b);
+}
+
 static ossl_inline uint64_t constant_time_select_64(uint64_t mask, uint64_t a,
                                                     uint64_t b)
 {
     return (mask & a) | (~mask & b);
 }
 
+/*
+ * mask must be 0xFFFFFFFF or 0x00000000.
+ *
+ * if (mask) {
+ *     uint32_t tmp = *a;
+ *
+ *     *a = *b;
+ *     *b = tmp;
+ * }
+ */
+static ossl_inline void constant_time_cond_swap_32(uint32_t mask, uint32_t *a,
+                                                   uint32_t *b)
+{
+    uint32_t xor = *a ^ *b;
+
+    xor &= mask;
+    *a ^= xor;
+    *b ^= xor;
+}
+
+/*
+ * mask must be 0xFFFFFFFF or 0x00000000.
+ *
+ * if (mask) {
+ *     uint64_t tmp = *a;
+ *
+ *     *a = *b;
+ *     *b = tmp;
+ * }
+ */
+static ossl_inline void constant_time_cond_swap_64(uint64_t mask, uint64_t *a,
+                                                   uint64_t *b)
+{
+    uint64_t xor = *a ^ *b;
+
+    xor &= mask;
+    *a ^= xor;
+    *b ^= xor;
+}
+
+/*
+ * table is a two dimensional array of bytes. Each row has rowsize elements.
+ * Copies row number idx into out. rowsize and numrows are not considered
+ * private.
+ */
+static ossl_inline void constant_time_lookup(void *out,
+                                             const void *table,
+                                             size_t rowsize,
+                                             size_t numrows,
+                                             size_t idx)
+{
+    size_t i, j;
+    const unsigned char *tablec = (const unsigned char *)table;
+    unsigned char *outc = (unsigned char *)out;
+    unsigned char mask;
+
+    memset(out, 0, rowsize);
+
+    /* Note idx may underflow - but that is well defined */
+    for (i = 0; i < numrows; i++, idx--) {
+        mask = (unsigned char)constant_time_is_zero_s(idx);
+        for (j = 0; j < rowsize; j++)
+            *(outc + j) |= constant_time_select_8(mask, *(tablec++), 0);
+    }
+}
+
 #ifdef __cplusplus
 }
 #endif
diff --git a/test/build.info b/test/build.info
index 7811f04..d8ea2f2 100644
--- a/test/build.info
+++ b/test/build.info
@@ -400,7 +400,8 @@ INCLUDE_MAIN___test_libtestutil_OLB = /INCLUDE=MAIN
   # names with the DLL import libraries.
   IF[{- $disabled{shared} || $target{build_scheme}->[1] ne 'windows' -}]
     PROGRAMS_NO_INST=asn1_internal_test modes_internal_test x509_internal_test \
-                     tls13encryptiontest wpackettest ctype_internal_test
+                     tls13encryptiontest wpackettest ctype_internal_test \
+                     curve448_internal_test
     IF[{- !$disabled{poly1305} -}]
       PROGRAMS_NO_INST=poly1305_internal_test
     ENDIF
@@ -453,6 +454,10 @@ INCLUDE_MAIN___test_libtestutil_OLB = /INCLUDE=MAIN
     SOURCE[sm4_internal_test]=sm4_internal_test.c
     INCLUDE[sm4_internal_test]=.. ../include ../crypto/include
     DEPEND[sm4_internal_test]=../libcrypto.a libtestutil.a
+
+    SOURCE[curve448_internal_test]=curve448_internal_test.c
+    INCLUDE[curve448_internal_test]=.. ../include ../crypto/ec/curve448
+    DEPEND[curve448_internal_test]=../libcrypto.a libtestutil.a
   ENDIF
 
   IF[{- !$disabled{mdc2} -}]
diff --git a/test/constant_time_test.c b/test/constant_time_test.c
index 200cb37..ac851e2 100644
--- a/test/constant_time_test.c
+++ b/test/constant_time_test.c
@@ -21,9 +21,43 @@ static const unsigned char CONSTTIME_TRUE_8 = 0xff;
 static const unsigned char CONSTTIME_FALSE_8 = 0;
 static const size_t CONSTTIME_TRUE_S = ~((size_t)0);
 static const size_t CONSTTIME_FALSE_S = 0;
+static uint32_t CONSTTIME_TRUE_32 = (uint32_t)(~(uint32_t)0);
+static uint32_t CONSTTIME_FALSE_32 = 0;
 static uint64_t CONSTTIME_TRUE_64 = (uint64_t)(~(uint64_t)0);
 static uint64_t CONSTTIME_FALSE_64 = 0;
 
+static unsigned int test_values[] = {
+    0, 1, 1024, 12345, 32000, UINT_MAX / 2 - 1,
+    UINT_MAX / 2, UINT_MAX / 2 + 1, UINT_MAX - 1,
+    UINT_MAX
+};
+
+static unsigned char test_values_8[] = {
+    0, 1, 2, 20, 32, 127, 128, 129, 255
+};
+
+static int signed_test_values[] = {
+    0, 1, -1, 1024, -1024, 12345, -12345,
+    32000, -32000, INT_MAX, INT_MIN, INT_MAX - 1,
+    INT_MIN + 1
+};
+
+static size_t test_values_s[] = {
+    0, 1, 1024, 12345, 32000, SIZE_MAX / 2 - 1,
+    SIZE_MAX / 2, SIZE_MAX / 2 + 1, SIZE_MAX - 1,
+    SIZE_MAX
+};
+
+static uint32_t test_values_32[] = {
+    0, 1, 1024, 12345, 32000, UINT32_MAX / 2, UINT32_MAX / 2 + 1,
+    UINT32_MAX - 1, UINT32_MAX
+};
+
+static uint64_t test_values_64[] = {
+    0, 1, 1024, 12345, 32000, 32000000, 32000000001, UINT64_MAX / 2,
+    UINT64_MAX / 2 + 1, UINT64_MAX - 1, UINT64_MAX
+};
+
 static int test_binary_op(unsigned int (*op) (unsigned int a, unsigned int b),
                           const char *op_name, unsigned int a, unsigned int b,
                           int is_true)
@@ -76,9 +110,10 @@ static int test_binary_op_64(uint64_t (*op)(uint64_t a, uint64_t b),
     return 1;
 }
 
-
-static int test_is_zero(unsigned int a)
+static int test_is_zero(int i)
 {
+    unsigned int a = test_values[i];
+
     if (a == 0 && !TEST_uint_eq(constant_time_is_zero(a), CONSTTIME_TRUE))
         return 0;
     if (a != 0 && !TEST_uint_eq(constant_time_is_zero(a), CONSTTIME_FALSE))
@@ -86,8 +121,10 @@ static int test_is_zero(unsigned int a)
     return 1;
 }
 
-static int test_is_zero_8(unsigned int a)
+static int test_is_zero_8(int i)
 {
+    unsigned int a = test_values_8[i];
+
     if (a == 0 && !TEST_uint_eq(constant_time_is_zero_8(a), CONSTTIME_TRUE_8))
         return 0;
     if (a != 0 && !TEST_uint_eq(constant_time_is_zero_8(a), CONSTTIME_FALSE_8))
@@ -95,8 +132,21 @@ static int test_is_zero_8(unsigned int a)
     return 1;
 }
 
-static int test_is_zero_s(unsigned int a)
+static int test_is_zero_32(int i)
 {
+    uint32_t a = test_values_32[i];
+
+    if (a == 0 && !TEST_true(constant_time_is_zero_32(a) == CONSTTIME_TRUE_32))
+        return 0;
+    if (a != 0 && !TEST_true(constant_time_is_zero_32(a) == CONSTTIME_FALSE_32))
+        return 0;
+    return 1;
+}
+
+static int test_is_zero_s(int i)
+{
+    size_t a = test_values_s[i];
+
     if (a == 0 && !TEST_size_t_eq(constant_time_is_zero_s(a), CONSTTIME_TRUE_S))
         return 0;
     if (a != 0 && !TEST_uint_eq(constant_time_is_zero_s(a), CONSTTIME_FALSE_S))
@@ -122,7 +172,16 @@ static int test_select_8(unsigned char a, unsigned char b)
     return 1;
 }
 
-static int test_select_s(unsigned char a, unsigned char b)
+static int test_select_32(uint32_t a, uint32_t b)
+{
+    if (!TEST_true(constant_time_select_32(CONSTTIME_TRUE_32, a, b) == a))
+        return 0;
+    if (!TEST_true(constant_time_select_32(CONSTTIME_FALSE_32, a, b) == b))
+        return 0;
+    return 1;
+}
+
+static int test_select_s(size_t a, size_t b)
 {
     if (!TEST_uint_eq(constant_time_select_s(CONSTTIME_TRUE_S, a, b), a))
         return 0;
@@ -184,33 +243,6 @@ static int test_eq_int(int a, int b)
     return 1;
 }
 
-static unsigned int test_values[] = {
-    0, 1, 1024, 12345, 32000, UINT_MAX / 2 - 1,
-    UINT_MAX / 2, UINT_MAX / 2 + 1, UINT_MAX - 1,
-    UINT_MAX
-};
-
-static unsigned char test_values_8[] = {
-    0, 1, 2, 20, 32, 127, 128, 129, 255
-};
-
-static int signed_test_values[] = {
-    0, 1, -1, 1024, -1024, 12345, -12345,
-    32000, -32000, INT_MAX, INT_MIN, INT_MAX - 1,
-    INT_MIN + 1
-};
-
-static size_t test_values_s[] = {
-    0, 1, 1024, 12345, 32000, SIZE_MAX / 2 - 1,
-    SIZE_MAX / 2, SIZE_MAX / 2 + 1, SIZE_MAX - 1,
-    SIZE_MAX
-};
-
-static uint64_t test_values_64[] = {
-    0, 1, 1024, 12345, 32000, 32000000, 32000000001, UINT64_MAX / 2,
-    UINT64_MAX / 2 + 1, UINT64_MAX - 1, UINT64_MAX
-};
-
 static int test_sizeofs(void)
 {
     if (!TEST_uint_eq(OSSL_NELEM(test_values), OSSL_NELEM(test_values_s)))
@@ -221,58 +253,80 @@ static int test_sizeofs(void)
 static int test_binops(int i)
 {
     unsigned int a = test_values[i];
-    unsigned int g = test_values_s[i];
     int j;
     int ret = 1;
 
-    if (!test_is_zero(a) || !test_is_zero_8(a) || !test_is_zero_s(g))
-        ret = 0;
-
     for (j = 0; j < (int)OSSL_NELEM(test_values); ++j) {
         unsigned int b = test_values[j];
-        unsigned int h = test_values[j];
 
         if (!test_select(a, b)
-                || !test_select_s(g, h)
-                || !test_eq_s(g, h)
                 || !test_binary_op(&constant_time_lt, "ct_lt",
                                    a, b, a < b)
-                || !test_binary_op_8(&constant_time_lt_8, "constant_time_lt_8",
-                                     a, b, a < b)
-                || !test_binary_op_s(&constant_time_lt_s, "constant_time_lt_s",
-                                     g, h, g < h)
                 || !test_binary_op(&constant_time_lt, "constant_time_lt",
                                    b, a, b < a)
-                || !test_binary_op_8(&constant_time_lt_8, "constant_time_lt_8",
-                                     b, a, b < a)
-                || !test_binary_op_s(&constant_time_lt_s, "constant_time_lt_s",
-                                     h, g, h < g)
                 || !test_binary_op(&constant_time_ge, "constant_time_ge",
                                    a, b, a >= b)
-                || !test_binary_op_8(&constant_time_ge_8, "constant_time_ge_8",
-                                     a, b, a >= b)
-                || !test_binary_op_s(&constant_time_ge_s, "constant_time_ge_s",
-                                     g, h, g >= h)
                 || !test_binary_op(&constant_time_ge, "constant_time_ge",
                                    b, a, b >= a)
-                || !test_binary_op_8(&constant_time_ge_8, "constant_time_ge_8",
-                                     b, a, b >= a)
-                || !test_binary_op_s(&constant_time_ge_s, "constant_time_ge_s",
-                                     h, g, h >= g)
                 || !test_binary_op(&constant_time_eq, "constant_time_eq",
                                    a, b, a == b)
+                || !test_binary_op(&constant_time_eq, "constant_time_eq",
+                                   b, a, b == a))
+            ret = 0;
+    }
+    return ret;
+}
+
+static int test_binops_8(int i)
+{
+    unsigned int a = test_values_8[i];
+    int j;
+    int ret = 1;
+
+    for (j = 0; j < (int)OSSL_NELEM(test_values_8); ++j) {
+        unsigned int b = test_values_8[j];
+
+        if (!test_binary_op_8(&constant_time_lt_8, "constant_time_lt_8",
+                                     a, b, a < b)
+                || !test_binary_op_8(&constant_time_lt_8, "constant_time_lt_8",
+                                     b, a, b < a)
+                || !test_binary_op_8(&constant_time_ge_8, "constant_time_ge_8",
+                                     a, b, a >= b)
+                || !test_binary_op_8(&constant_time_ge_8, "constant_time_ge_8",
+                                     b, a, b >= a)
                 || !test_binary_op_8(&constant_time_eq_8, "constant_time_eq_8",
                                      a, b, a == b)
-                || !test_binary_op_s(&constant_time_eq_s, "constant_time_eq_s",
-                                     g, h, g == h)
-                || !test_binary_op(&constant_time_eq, "constant_time_eq",
-                                   b, a, b == a)
                 || !test_binary_op_8(&constant_time_eq_8, "constant_time_eq_8",
-                                     b, a, b == a)
+                                     b, a, b == a))
+            ret = 0;
+    }
+    return ret;
+}
+
+static int test_binops_s(int i)
+{
+    size_t a = test_values_s[i];
+    int j;
+    int ret = 1;
+
+    for (j = 0; j < (int)OSSL_NELEM(test_values_s); ++j) {
+        size_t b = test_values_s[j];
+
+        if (!test_select_s(a, b)
+                || !test_eq_s(a, b)
+                || !test_binary_op_s(&constant_time_lt_s, "constant_time_lt_s",
+                                     a, b, a < b)
+                || !test_binary_op_s(&constant_time_lt_s, "constant_time_lt_s",
+                                     b, a, b < a)
+                || !test_binary_op_s(&constant_time_ge_s, "constant_time_ge_s",
+                                     a, b, a >= b)
+                || !test_binary_op_s(&constant_time_ge_s, "constant_time_ge_s",
+                                     b, a, b >= a)
                 || !test_binary_op_s(&constant_time_eq_s, "constant_time_eq_s",
-                                     h, g, h == g)) {
+                                     a, b, a == b)
+                || !test_binary_op_s(&constant_time_eq_s, "constant_time_eq_s",
+                                     b, a, b == a))
             ret = 0;
-        }
     }
     return ret;
 }
@@ -309,6 +363,21 @@ static int test_8values(int i)
     return ret;
 }
 
+static int test_32values(int i)
+{
+    uint32_t e = test_values_32[i];
+    size_t j;
+    int ret = 1;
+
+    for (j = 0; j < OSSL_NELEM(test_values_32); j++) {
+        uint32_t f = test_values_32[j];
+
+        if (!test_select_32(e, f))
+            ret = 0;
+    }
+    return ret;
+}
+
 static int test_64values(int i)
 {
     uint64_t g = test_values_64[i];
@@ -330,9 +399,16 @@ static int test_64values(int i)
 int setup_tests(void)
 {
     ADD_TEST(test_sizeofs);
+    ADD_ALL_TESTS(test_is_zero, OSSL_NELEM(test_values));
+    ADD_ALL_TESTS(test_is_zero_8, OSSL_NELEM(test_values_8));
+    ADD_ALL_TESTS(test_is_zero_32, OSSL_NELEM(test_values_32));
+    ADD_ALL_TESTS(test_is_zero_s, OSSL_NELEM(test_values_s));
     ADD_ALL_TESTS(test_binops, OSSL_NELEM(test_values));
+    ADD_ALL_TESTS(test_binops_8, OSSL_NELEM(test_values_8));
+    ADD_ALL_TESTS(test_binops_s, OSSL_NELEM(test_values_s));
     ADD_ALL_TESTS(test_signed, OSSL_NELEM(signed_test_values));
     ADD_ALL_TESTS(test_8values, OSSL_NELEM(test_values_8));
+    ADD_ALL_TESTS(test_32values, OSSL_NELEM(test_values_32));
     ADD_ALL_TESTS(test_64values, OSSL_NELEM(test_values_64));
     return 1;
 }
diff --git a/test/curve448_internal_test.c b/test/curve448_internal_test.c
new file mode 100644
index 0000000..aac4818
--- /dev/null
+++ b/test/curve448_internal_test.c
@@ -0,0 +1,702 @@
+/*
+ * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License").  You may not use
+ * this file except in compliance with the License.  You can obtain a copy
+ * in the file LICENSE in the source distribution or at
+ * https://www.openssl.org/source/license.html
+ */
+#include <stdio.h>
+#include <string.h>
+#include <openssl/e_os2.h>
+#include <openssl/evp.h>
+#include "curve448_lcl.h"
+#include "testutil.h"
+
+static unsigned int max = 1000;
+static unsigned int verbose = 0;
+
+/* Test vectors from RFC7748 for X448 */
+
+static const uint8_t in_scalar1[56] = {
+    0x3d, 0x26, 0x2f, 0xdd, 0xf9, 0xec, 0x8e, 0x88, 0x49, 0x52, 0x66, 0xfe,
+    0xa1, 0x9a, 0x34, 0xd2, 0x88, 0x82, 0xac, 0xef, 0x04, 0x51, 0x04, 0xd0,
+    0xd1, 0xaa, 0xe1, 0x21, 0x70, 0x0a, 0x77, 0x9c, 0x98, 0x4c, 0x24, 0xf8,
+    0xcd, 0xd7, 0x8f, 0xbf, 0xf4, 0x49, 0x43, 0xeb, 0xa3, 0x68, 0xf5, 0x4b,
+    0x29, 0x25, 0x9a, 0x4f, 0x1c, 0x60, 0x0a, 0xd3
+};
+
+static const uint8_t in_u1[56] = {
+    0x06, 0xfc, 0xe6, 0x40, 0xfa, 0x34, 0x87, 0xbf, 0xda, 0x5f, 0x6c, 0xf2,
+    0xd5, 0x26, 0x3f, 0x8a, 0xad, 0x88, 0x33, 0x4c, 0xbd, 0x07, 0x43, 0x7f,
+    0x02, 0x0f, 0x08, 0xf9, 0x81, 0x4d, 0xc0, 0x31, 0xdd, 0xbd, 0xc3, 0x8c,
+    0x19, 0xc6, 0xda, 0x25, 0x83, 0xfa, 0x54, 0x29, 0xdb, 0x94, 0xad, 0xa1,
+    0x8a, 0xa7, 0xa7, 0xfb, 0x4e, 0xf8, 0xa0, 0x86
+};
+
+static const uint8_t out_u1[56] = {
+    0xce, 0x3e, 0x4f, 0xf9, 0x5a, 0x60, 0xdc, 0x66, 0x97, 0xda, 0x1d, 0xb1,
+    0xd8, 0x5e, 0x6a, 0xfb, 0xdf, 0x79, 0xb5, 0x0a, 0x24, 0x12, 0xd7, 0x54,
+    0x6d, 0x5f, 0x23, 0x9f, 0xe1, 0x4f, 0xba, 0xad, 0xeb, 0x44, 0x5f, 0xc6,
+    0x6a, 0x01, 0xb0, 0x77, 0x9d, 0x98, 0x22, 0x39, 0x61, 0x11, 0x1e, 0x21,
+    0x76, 0x62, 0x82, 0xf7, 0x3d, 0xd9, 0x6b, 0x6f
+};
+
+static const uint8_t in_scalar2[56] = {
+    0x20, 0x3d, 0x49, 0x44, 0x28, 0xb8, 0x39, 0x93, 0x52, 0x66, 0x5d, 0xdc,
+    0xa4, 0x2f, 0x9d, 0xe8, 0xfe, 0xf6, 0x00, 0x90, 0x8e, 0x0d, 0x46, 0x1c,
+    0xb0, 0x21, 0xf8, 0xc5, 0x38, 0x34, 0x5d, 0xd7, 0x7c, 0x3e, 0x48, 0x06,
+    0xe2, 0x5f, 0x46, 0xd3, 0x31, 0x5c, 0x44, 0xe0, 0xa5, 0xb4, 0x37, 0x12,
+    0x82, 0xdd, 0x2c, 0x8d, 0x5b, 0xe3, 0x09, 0x5f
+};
+
+static const uint8_t in_u2[56] = {
+    0x0f, 0xbc, 0xc2, 0xf9, 0x93, 0xcd, 0x56, 0xd3, 0x30, 0x5b, 0x0b, 0x7d,
+    0x9e, 0x55, 0xd4, 0xc1, 0xa8, 0xfb, 0x5d, 0xbb, 0x52, 0xf8, 0xe9, 0xa1,
+    0xe9, 0xb6, 0x20, 0x1b, 0x16, 0x5d, 0x01, 0x58, 0x94, 0xe5, 0x6c, 0x4d,
+    0x35, 0x70, 0xbe, 0xe5, 0x2f, 0xe2, 0x05, 0xe2, 0x8a, 0x78, 0xb9, 0x1c,
+    0xdf, 0xbd, 0xe7, 0x1c, 0xe8, 0xd1, 0x57, 0xdb
+};
+
+static const uint8_t out_u2[56] = {
+    0x88, 0x4a, 0x02, 0x57, 0x62, 0x39, 0xff, 0x7a, 0x2f, 0x2f, 0x63, 0xb2,
+    0xdb, 0x6a, 0x9f, 0xf3, 0x70, 0x47, 0xac, 0x13, 0x56, 0x8e, 0x1e, 0x30,
+    0xfe, 0x63, 0xc4, 0xa7, 0xad, 0x1b, 0x3e, 0xe3, 0xa5, 0x70, 0x0d, 0xf3,
+    0x43, 0x21, 0xd6, 0x20, 0x77, 0xe6, 0x36, 0x33, 0xc5, 0x75, 0xc1, 0xc9,
+    0x54, 0x51, 0x4e, 0x99, 0xda, 0x7c, 0x17, 0x9d
+};
+
+static const uint8_t in_u3[56] = {
+    0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+
+static const uint8_t out_u3[3][56] = {
+    {
+        0x3f, 0x48, 0x2c, 0x8a, 0x9f, 0x19, 0xb0, 0x1e, 0x6c, 0x46, 0xee, 0x97,
+        0x11, 0xd9, 0xdc, 0x14, 0xfd, 0x4b, 0xf6, 0x7a, 0xf3, 0x07, 0x65, 0xc2,
+        0xae, 0x2b, 0x84, 0x6a, 0x4d, 0x23, 0xa8, 0xcd, 0x0d, 0xb8, 0x97, 0x08,
+        0x62, 0x39, 0x49, 0x2c, 0xaf, 0x35, 0x0b, 0x51, 0xf8, 0x33, 0x86, 0x8b,
+        0x9b, 0xc2, 0xb3, 0xbc, 0xa9, 0xcf, 0x41, 0x13
+    }, {
+        0xaa, 0x3b, 0x47, 0x49, 0xd5, 0x5b, 0x9d, 0xaf, 0x1e, 0x5b, 0x00, 0x28,
+        0x88, 0x26, 0xc4, 0x67, 0x27, 0x4c, 0xe3, 0xeb, 0xbd, 0xd5, 0xc1, 0x7b,
+        0x97, 0x5e, 0x09, 0xd4, 0xaf, 0x6c, 0x67, 0xcf, 0x10, 0xd0, 0x87, 0x20,
+        0x2d, 0xb8, 0x82, 0x86, 0xe2, 0xb7, 0x9f, 0xce, 0xea, 0x3e, 0xc3, 0x53,
+        0xef, 0x54, 0xfa, 0xa2, 0x6e, 0x21, 0x9f, 0x38
+    }, {
+        0x07, 0x7f, 0x45, 0x36, 0x81, 0xca, 0xca, 0x36, 0x93, 0x19, 0x84, 0x20,
+        0xbb, 0xe5, 0x15, 0xca, 0xe0, 0x00, 0x24, 0x72, 0x51, 0x9b, 0x3e, 0x67,
+        0x66, 0x1a, 0x7e, 0x89, 0xca, 0xb9, 0x46, 0x95, 0xc8, 0xf4, 0xbc, 0xd6,
+        0x6e, 0x61, 0xb9, 0xb9, 0xc9, 0x46, 0xda, 0x8d, 0x52, 0x4d, 0xe3, 0xd6,
+        0x9b, 0xd9, 0xd9, 0xd6, 0x6b, 0x99, 0x7e, 0x37
+    }
+};
+
+/* Test vectors from RFC8032 for Ed448 */
+
+/* Pure Ed448 */
+
+static const uint8_t privkey1[57] = {
+    0x6c, 0x82, 0xa5, 0x62, 0xcb, 0x80, 0x8d, 0x10, 0xd6, 0x32, 0xbe, 0x89,
+    0xc8, 0x51, 0x3e, 0xbf, 0x6c, 0x92, 0x9f, 0x34, 0xdd, 0xfa, 0x8c, 0x9f,
+    0x63, 0xc9, 0x96, 0x0e, 0xf6, 0xe3, 0x48, 0xa3, 0x52, 0x8c, 0x8a, 0x3f,
+    0xcc, 0x2f, 0x04, 0x4e, 0x39, 0xa3, 0xfc, 0x5b, 0x94, 0x49, 0x2f, 0x8f,
+    0x03, 0x2e, 0x75, 0x49, 0xa2, 0x00, 0x98, 0xf9, 0x5b
+};
+
+static const uint8_t pubkey1[57] = {
+    0x5f, 0xd7, 0x44, 0x9b, 0x59, 0xb4, 0x61, 0xfd, 0x2c, 0xe7, 0x87, 0xec,
+    0x61, 0x6a, 0xd4, 0x6a, 0x1d, 0xa1, 0x34, 0x24, 0x85, 0xa7, 0x0e, 0x1f,
+    0x8a, 0x0e, 0xa7, 0x5d, 0x80, 0xe9, 0x67, 0x78, 0xed, 0xf1, 0x24, 0x76,
+    0x9b, 0x46, 0xc7, 0x06, 0x1b, 0xd6, 0x78, 0x3d, 0xf1, 0xe5, 0x0f, 0x6c,
+    0xd1, 0xfa, 0x1a, 0xbe, 0xaf, 0xe8, 0x25, 0x61, 0x80
+};
+
+static const uint8_t sig1[114] = {
+    0x53, 0x3a, 0x37, 0xf6, 0xbb, 0xe4, 0x57, 0x25, 0x1f, 0x02, 0x3c, 0x0d,
+    0x88, 0xf9, 0x76, 0xae, 0x2d, 0xfb, 0x50, 0x4a, 0x84, 0x3e, 0x34, 0xd2,
+    0x07, 0x4f, 0xd8, 0x23, 0xd4, 0x1a, 0x59, 0x1f, 0x2b, 0x23, 0x3f, 0x03,
+    0x4f, 0x62, 0x82, 0x81, 0xf2, 0xfd, 0x7a, 0x22, 0xdd, 0xd4, 0x7d, 0x78,
+    0x28, 0xc5, 0x9b, 0xd0, 0xa2, 0x1b, 0xfd, 0x39, 0x80, 0xff, 0x0d, 0x20,
+    0x28, 0xd4, 0xb1, 0x8a, 0x9d, 0xf6, 0x3e, 0x00, 0x6c, 0x5d, 0x1c, 0x2d,
+    0x34, 0x5b, 0x92, 0x5d, 0x8d, 0xc0, 0x0b, 0x41, 0x04, 0x85, 0x2d, 0xb9,
+    0x9a, 0xc5, 0xc7, 0xcd, 0xda, 0x85, 0x30, 0xa1, 0x13, 0xa0, 0xf4, 0xdb,
+    0xb6, 0x11, 0x49, 0xf0, 0x5a, 0x73, 0x63, 0x26, 0x8c, 0x71, 0xd9, 0x58,
+    0x08, 0xff, 0x2e, 0x65, 0x26, 0x00
+};
+
+static const uint8_t privkey2[57] = {
+    0xc4, 0xea, 0xb0, 0x5d, 0x35, 0x70, 0x07, 0xc6, 0x32, 0xf3, 0xdb, 0xb4,
+    0x84, 0x89, 0x92, 0x4d, 0x55, 0x2b, 0x08, 0xfe, 0x0c, 0x35, 0x3a, 0x0d,
+    0x4a, 0x1f, 0x00, 0xac, 0xda, 0x2c, 0x46, 0x3a, 0xfb, 0xea, 0x67, 0xc5,
+    0xe8, 0xd2, 0x87, 0x7c, 0x5e, 0x3b, 0xc3, 0x97, 0xa6, 0x59, 0x94, 0x9e,
+    0xf8, 0x02, 0x1e, 0x95, 0x4e, 0x0a, 0x12, 0x27, 0x4e
+};
+
+static const uint8_t pubkey2[57] = {
+    0x43, 0xba, 0x28, 0xf4, 0x30, 0xcd, 0xff, 0x45, 0x6a, 0xe5, 0x31, 0x54,
+    0x5f, 0x7e, 0xcd, 0x0a, 0xc8, 0x34, 0xa5, 0x5d, 0x93, 0x58, 0xc0, 0x37,
+    0x2b, 0xfa, 0x0c, 0x6c, 0x67, 0x98, 0xc0, 0x86, 0x6a, 0xea, 0x01, 0xeb,
+    0x00, 0x74, 0x28, 0x02, 0xb8, 0x43, 0x8e, 0xa4, 0xcb, 0x82, 0x16, 0x9c,
+    0x23, 0x51, 0x60, 0x62, 0x7b, 0x4c, 0x3a, 0x94, 0x80
+};
+
+static const uint8_t msg2[1] = {
+    0x03
+};
+
+static const uint8_t sig2[114] = {
+    0x26, 0xb8, 0xf9, 0x17, 0x27, 0xbd, 0x62, 0x89, 0x7a, 0xf1, 0x5e, 0x41,
+    0xeb, 0x43, 0xc3, 0x77, 0xef, 0xb9, 0xc6, 0x10, 0xd4, 0x8f, 0x23, 0x35,
+    0xcb, 0x0b, 0xd0, 0x08, 0x78, 0x10, 0xf4, 0x35, 0x25, 0x41, 0xb1, 0x43,
+    0xc4, 0xb9, 0x81, 0xb7, 0xe1, 0x8f, 0x62, 0xde, 0x8c, 0xcd, 0xf6, 0x33,
+    0xfc, 0x1b, 0xf0, 0x37, 0xab, 0x7c, 0xd7, 0x79, 0x80, 0x5e, 0x0d, 0xbc,
+    0xc0, 0xaa, 0xe1, 0xcb, 0xce, 0xe1, 0xaf, 0xb2, 0xe0, 0x27, 0xdf, 0x36,
+    0xbc, 0x04, 0xdc, 0xec, 0xbf, 0x15, 0x43, 0x36, 0xc1, 0x9f, 0x0a, 0xf7,
+    0xe0, 0xa6, 0x47, 0x29, 0x05, 0xe7, 0x99, 0xf1, 0x95, 0x3d, 0x2a, 0x0f,
+    0xf3, 0x34, 0x8a, 0xb2, 0x1a, 0xa4, 0xad, 0xaf, 0xd1, 0xd2, 0x34, 0x44,
+    0x1c, 0xf8, 0x07, 0xc0, 0x3a, 0x00
+};
+
+static const uint8_t privkey3[57] = {
+    0xc4, 0xea, 0xb0, 0x5d, 0x35, 0x70, 0x07, 0xc6, 0x32, 0xf3, 0xdb, 0xb4,
+    0x84, 0x89, 0x92, 0x4d, 0x55, 0x2b, 0x08, 0xfe, 0x0c, 0x35, 0x3a, 0x0d,
+    0x4a, 0x1f, 0x00, 0xac, 0xda, 0x2c, 0x46, 0x3a, 0xfb, 0xea, 0x67, 0xc5,
+    0xe8, 0xd2, 0x87, 0x7c, 0x5e, 0x3b, 0xc3, 0x97, 0xa6, 0x59, 0x94, 0x9e,
+    0xf8, 0x02, 0x1e, 0x95, 0x4e, 0x0a, 0x12, 0x27, 0x4e
+};
+
+static const uint8_t pubkey3[57] = {
+    0x43, 0xba, 0x28, 0xf4, 0x30, 0xcd, 0xff, 0x45, 0x6a, 0xe5, 0x31, 0x54,
+    0x5f, 0x7e, 0xcd, 0x0a, 0xc8, 0x34, 0xa5, 0x5d, 0x93, 0x58, 0xc0, 0x37,
+    0x2b, 0xfa, 0x0c, 0x6c, 0x67, 0x98, 0xc0, 0x86, 0x6a, 0xea, 0x01, 0xeb,
+    0x00, 0x74, 0x28, 0x02, 0xb8, 0x43, 0x8e, 0xa4, 0xcb, 0x82, 0x16, 0x9c,
+    0x23, 0x51, 0x60, 0x62, 0x7b, 0x4c, 0x3a, 0x94, 0x80
+};
+
+static const uint8_t msg3[1] = {
+    0x03
+};
+
+static const uint8_t context3[3] = {
+    0x66, 0x6f, 0x6f
+};
+
+static const uint8_t sig3[114] = {
+    0xd4, 0xf8, 0xf6, 0x13, 0x17, 0x70, 0xdd, 0x46, 0xf4, 0x08, 0x67, 0xd6,
+    0xfd, 0x5d, 0x50, 0x55, 0xde, 0x43, 0x54, 0x1f, 0x8c, 0x5e, 0x35, 0xab,
+    0xbc, 0xd0, 0x01, 0xb3, 0x2a, 0x89, 0xf7, 0xd2, 0x15, 0x1f, 0x76, 0x47,
+    0xf1, 0x1d, 0x8c, 0xa2, 0xae, 0x27, 0x9f, 0xb8, 0x42, 0xd6, 0x07, 0x21,
+    0x7f, 0xce, 0x6e, 0x04, 0x2f, 0x68, 0x15, 0xea, 0x00, 0x0c, 0x85, 0x74,
+    0x1d, 0xe5, 0xc8, 0xda, 0x11, 0x44, 0xa6, 0xa1, 0xab, 0xa7, 0xf9, 0x6d,
+    0xe4, 0x25, 0x05, 0xd7, 0xa7, 0x29, 0x85, 0x24, 0xfd, 0xa5, 0x38, 0xfc,
+    0xcb, 0xbb, 0x75, 0x4f, 0x57, 0x8c, 0x1c, 0xad, 0x10, 0xd5, 0x4d, 0x0d,
+    0x54, 0x28, 0x40, 0x7e, 0x85, 0xdc, 0xbc, 0x98, 0xa4, 0x91, 0x55, 0xc1,
+    0x37, 0x64, 0xe6, 0x6c, 0x3c, 0x00
+};
+
+static const uint8_t privkey4[57] = {
+    0xcd, 0x23, 0xd2, 0x4f, 0x71, 0x42, 0x74, 0xe7, 0x44, 0x34, 0x32, 0x37,
+    0xb9, 0x32, 0x90, 0xf5, 0x11, 0xf6, 0x42, 0x5f, 0x98, 0xe6, 0x44, 0x59,
+    0xff, 0x20, 0x3e, 0x89, 0x85, 0x08, 0x3f, 0xfd, 0xf6, 0x05, 0x00, 0x55,
+    0x3a, 0xbc, 0x0e, 0x05, 0xcd, 0x02, 0x18, 0x4b, 0xdb, 0x89, 0xc4, 0xcc,
+    0xd6, 0x7e, 0x18, 0x79, 0x51, 0x26, 0x7e, 0xb3, 0x28
+};
+
+static const uint8_t pubkey4[57] = {
+    0xdc, 0xea, 0x9e, 0x78, 0xf3, 0x5a, 0x1b, 0xf3, 0x49, 0x9a, 0x83, 0x1b,
+    0x10, 0xb8, 0x6c, 0x90, 0xaa, 0xc0, 0x1c, 0xd8, 0x4b, 0x67, 0xa0, 0x10,
+    0x9b, 0x55, 0xa3, 0x6e, 0x93, 0x28, 0xb1, 0xe3, 0x65, 0xfc, 0xe1, 0x61,
+    0xd7, 0x1c, 0xe7, 0x13, 0x1a, 0x54, 0x3e, 0xa4, 0xcb, 0x5f, 0x7e, 0x9f,
+    0x1d, 0x8b, 0x00, 0x69, 0x64, 0x47, 0x00, 0x14, 0x00
+};
+
+static const uint8_t msg4[11] = {
+    0x0c, 0x3e, 0x54, 0x40, 0x74, 0xec, 0x63, 0xb0, 0x26, 0x5e, 0x0c
+};
+
+static const uint8_t sig4[114] = {
+    0x1f, 0x0a, 0x88, 0x88, 0xce, 0x25, 0xe8, 0xd4, 0x58, 0xa2, 0x11, 0x30,
+    0x87, 0x9b, 0x84, 0x0a, 0x90, 0x89, 0xd9, 0x99, 0xaa, 0xba, 0x03, 0x9e,
+    0xaf, 0x3e, 0x3a, 0xfa, 0x09, 0x0a, 0x09, 0xd3, 0x89, 0xdb, 0xa8, 0x2c,
+    0x4f, 0xf2, 0xae, 0x8a, 0xc5, 0xcd, 0xfb, 0x7c, 0x55, 0xe9, 0x4d, 0x5d,
+    0x96, 0x1a, 0x29, 0xfe, 0x01, 0x09, 0x94, 0x1e, 0x00, 0xb8, 0xdb, 0xde,
+    0xea, 0x6d, 0x3b, 0x05, 0x10, 0x68, 0xdf, 0x72, 0x54, 0xc0, 0xcd, 0xc1,
+    0x29, 0xcb, 0xe6, 0x2d, 0xb2, 0xdc, 0x95, 0x7d, 0xbb, 0x47, 0xb5, 0x1f,
+    0xd3, 0xf2, 0x13, 0xfb, 0x86, 0x98, 0xf0, 0x64, 0x77, 0x42, 0x50, 0xa5,
+    0x02, 0x89, 0x61, 0xc9, 0xbf, 0x8f, 0xfd, 0x97, 0x3f, 0xe5, 0xd5, 0xc2,
+    0x06, 0x49, 0x2b, 0x14, 0x0e, 0x00
+};
+
+static const uint8_t privkey5[57] = {
+    0x25, 0x8c, 0xdd, 0x4a, 0xda, 0x32, 0xed, 0x9c, 0x9f, 0xf5, 0x4e, 0x63,
+    0x75, 0x6a, 0xe5, 0x82, 0xfb, 0x8f, 0xab, 0x2a, 0xc7, 0x21, 0xf2, 0xc8,
+    0xe6, 0x76, 0xa7, 0x27, 0x68, 0x51, 0x3d, 0x93, 0x9f, 0x63, 0xdd, 0xdb,
+    0x55, 0x60, 0x91, 0x33, 0xf2, 0x9a, 0xdf, 0x86, 0xec, 0x99, 0x29, 0xdc,
+    0xcb, 0x52, 0xc1, 0xc5, 0xfd, 0x2f, 0xf7, 0xe2, 0x1b
+};
+
+static const uint8_t pubkey5[57] = {
+    0x3b, 0xa1, 0x6d, 0xa0, 0xc6, 0xf2, 0xcc, 0x1f, 0x30, 0x18, 0x77, 0x40,
+    0x75, 0x6f, 0x5e, 0x79, 0x8d, 0x6b, 0xc5, 0xfc, 0x01, 0x5d, 0x7c, 0x63,
+    0xcc, 0x95, 0x10, 0xee, 0x3f, 0xd4, 0x4a, 0xdc, 0x24, 0xd8, 0xe9, 0x68,
+    0xb6, 0xe4, 0x6e, 0x6f, 0x94, 0xd1, 0x9b, 0x94, 0x53, 0x61, 0x72, 0x6b,
+    0xd7, 0x5e, 0x14, 0x9e, 0xf0, 0x98, 0x17, 0xf5, 0x80
+};
+
+static const uint8_t msg5[12] = {
+    0x64, 0xa6, 0x5f, 0x3c, 0xde, 0xdc, 0xdd, 0x66, 0x81, 0x1e, 0x29, 0x15
+};
+
+static const uint8_t sig5[114] = {
+    0x7e, 0xee, 0xab, 0x7c, 0x4e, 0x50, 0xfb, 0x79, 0x9b, 0x41, 0x8e, 0xe5,
+    0xe3, 0x19, 0x7f, 0xf6, 0xbf, 0x15, 0xd4, 0x3a, 0x14, 0xc3, 0x43, 0x89,
+    0xb5, 0x9d, 0xd1, 0xa7, 0xb1, 0xb8, 0x5b, 0x4a, 0xe9, 0x04, 0x38, 0xac,
+    0xa6, 0x34, 0xbe, 0xa4, 0x5e, 0x3a, 0x26, 0x95, 0xf1, 0x27, 0x0f, 0x07,
+    0xfd, 0xcd, 0xf7, 0xc6, 0x2b, 0x8e, 0xfe, 0xaf, 0x00, 0xb4, 0x5c, 0x2c,
+    0x96, 0xba, 0x45, 0x7e, 0xb1, 0xa8, 0xbf, 0x07, 0x5a, 0x3d, 0xb2, 0x8e,
+    0x5c, 0x24, 0xf6, 0xb9, 0x23, 0xed, 0x4a, 0xd7, 0x47, 0xc3, 0xc9, 0xe0,
+    0x3c, 0x70, 0x79, 0xef, 0xb8, 0x7c, 0xb1, 0x10, 0xd3, 0xa9, 0x98, 0x61,
+    0xe7, 0x20, 0x03, 0xcb, 0xae, 0x6d, 0x6b, 0x8b, 0x82, 0x7e, 0x4e, 0x6c,
+    0x14, 0x30, 0x64, 0xff, 0x3c, 0x00
+};
+
+static const uint8_t privkey6[57] = {
+    0x7e, 0xf4, 0xe8, 0x45, 0x44, 0x23, 0x67, 0x52, 0xfb, 0xb5, 0x6b, 0x8f,
+    0x31, 0xa2, 0x3a, 0x10, 0xe4, 0x28, 0x14, 0xf5, 0xf5, 0x5c, 0xa0, 0x37,
+    0xcd, 0xcc, 0x11, 0xc6, 0x4c, 0x9a, 0x3b, 0x29, 0x49, 0xc1, 0xbb, 0x60,
+    0x70, 0x03, 0x14, 0x61, 0x17, 0x32, 0xa6, 0xc2, 0xfe, 0xa9, 0x8e, 0xeb,
+    0xc0, 0x26, 0x6a, 0x11, 0xa9, 0x39, 0x70, 0x10, 0x0e
+};
+
+static const uint8_t pubkey6[57] = {
+    0xb3, 0xda, 0x07, 0x9b, 0x0a, 0xa4, 0x93, 0xa5, 0x77, 0x20, 0x29, 0xf0,
+    0x46, 0x7b, 0xae, 0xbe, 0xe5, 0xa8, 0x11, 0x2d, 0x9d, 0x3a, 0x22, 0x53,
+    0x23, 0x61, 0xda, 0x29, 0x4f, 0x7b, 0xb3, 0x81, 0x5c, 0x5d, 0xc5, 0x9e,
+    0x17, 0x6b, 0x4d, 0x9f, 0x38, 0x1c, 0xa0, 0x93, 0x8e, 0x13, 0xc6, 0xc0,
+    0x7b, 0x17, 0x4b, 0xe6, 0x5d, 0xfa, 0x57, 0x8e, 0x80
+};
+
+static const uint8_t msg6[13] = {
+    0x64, 0xa6, 0x5f, 0x3c, 0xde, 0xdc, 0xdd, 0x66, 0x81, 0x1e, 0x29, 0x15,
+    0xe7
+};
+
+static const uint8_t sig6[114] = {
+    0x6a, 0x12, 0x06, 0x6f, 0x55, 0x33, 0x1b, 0x6c, 0x22, 0xac, 0xd5, 0xd5,
+    0xbf, 0xc5, 0xd7, 0x12, 0x28, 0xfb, 0xda, 0x80, 0xae, 0x8d, 0xec, 0x26,
+    0xbd, 0xd3, 0x06, 0x74, 0x3c, 0x50, 0x27, 0xcb, 0x48, 0x90, 0x81, 0x0c,
+    0x16, 0x2c, 0x02, 0x74, 0x68, 0x67, 0x5e, 0xcf, 0x64, 0x5a, 0x83, 0x17,
+    0x6c, 0x0d, 0x73, 0x23, 0xa2, 0xcc, 0xde, 0x2d, 0x80, 0xef, 0xe5, 0xa1,
+    0x26, 0x8e, 0x8a, 0xca, 0x1d, 0x6f, 0xbc, 0x19, 0x4d, 0x3f, 0x77, 0xc4,
+    0x49, 0x86, 0xeb, 0x4a, 0xb4, 0x17, 0x79, 0x19, 0xad, 0x8b, 0xec, 0x33,
+    0xeb, 0x47, 0xbb, 0xb5, 0xfc, 0x6e, 0x28, 0x19, 0x6f, 0xd1, 0xca, 0xf5,
+    0x6b, 0x4e, 0x7e, 0x0b, 0xa5, 0x51, 0x92, 0x34, 0xd0, 0x47, 0x15, 0x5a,
+    0xc7, 0x27, 0xa1, 0x05, 0x31, 0x00
+};
+
+static const uint8_t privkey7[57] = {
+    0xd6, 0x5d, 0xf3, 0x41, 0xad, 0x13, 0xe0, 0x08, 0x56, 0x76, 0x88, 0xba,
+    0xed, 0xda, 0x8e, 0x9d, 0xcd, 0xc1, 0x7d, 0xc0, 0x24, 0x97, 0x4e, 0xa5,
+    0xb4, 0x22, 0x7b, 0x65, 0x30, 0xe3, 0x39, 0xbf, 0xf2, 0x1f, 0x99, 0xe6,
+    0x8c, 0xa6, 0x96, 0x8f, 0x3c, 0xca, 0x6d, 0xfe, 0x0f, 0xb9, 0xf4, 0xfa,
+    0xb4, 0xfa, 0x13, 0x5d, 0x55, 0x42, 0xea, 0x3f, 0x01
+};
+
+static const uint8_t pubkey7[57] = {
+    0xdf, 0x97, 0x05, 0xf5, 0x8e, 0xdb, 0xab, 0x80, 0x2c, 0x7f, 0x83, 0x63,
+    0xcf, 0xe5, 0x56, 0x0a, 0xb1, 0xc6, 0x13, 0x2c, 0x20, 0xa9, 0xf1, 0xdd,
+    0x16, 0x34, 0x83, 0xa2, 0x6f, 0x8a, 0xc5, 0x3a, 0x39, 0xd6, 0x80, 0x8b,
+    0xf4, 0xa1, 0xdf, 0xbd, 0x26, 0x1b, 0x09, 0x9b, 0xb0, 0x3b, 0x3f, 0xb5,
+    0x09, 0x06, 0xcb, 0x28, 0xbd, 0x8a, 0x08, 0x1f, 0x00
+};
+
+static const uint8_t msg7[64] = {
+    0xbd, 0x0f, 0x6a, 0x37, 0x47, 0xcd, 0x56, 0x1b, 0xdd, 0xdf, 0x46, 0x40,
+    0xa3, 0x32, 0x46, 0x1a, 0x4a, 0x30, 0xa1, 0x2a, 0x43, 0x4c, 0xd0, 0xbf,
+    0x40, 0xd7, 0x66, 0xd9, 0xc6, 0xd4, 0x58, 0xe5, 0x51, 0x22, 0x04, 0xa3,
+    0x0c, 0x17, 0xd1, 0xf5, 0x0b, 0x50, 0x79, 0x63, 0x1f, 0x64, 0xeb, 0x31,
+    0x12, 0x18, 0x2d, 0xa3, 0x00, 0x58, 0x35, 0x46, 0x11, 0x13, 0x71, 0x8d,
+    0x1a, 0x5e, 0xf9, 0x44
+};
+
+static const uint8_t sig7[114] = {
+    0x55, 0x4b, 0xc2, 0x48, 0x08, 0x60, 0xb4, 0x9e, 0xab, 0x85, 0x32, 0xd2,
+    0xa5, 0x33, 0xb7, 0xd5, 0x78, 0xef, 0x47, 0x3e, 0xeb, 0x58, 0xc9, 0x8b,
+    0xb2, 0xd0, 0xe1, 0xce, 0x48, 0x8a, 0x98, 0xb1, 0x8d, 0xfd, 0xe9, 0xb9,
+    0xb9, 0x07, 0x75, 0xe6, 0x7f, 0x47, 0xd4, 0xa1, 0xc3, 0x48, 0x20, 0x58,
+    0xef, 0xc9, 0xf4, 0x0d, 0x2c, 0xa0, 0x33, 0xa0, 0x80, 0x1b, 0x63, 0xd4,
+    0x5b, 0x3b, 0x72, 0x2e, 0xf5, 0x52, 0xba, 0xd3, 0xb4, 0xcc, 0xb6, 0x67,
+    0xda, 0x35, 0x01, 0x92, 0xb6, 0x1c, 0x50, 0x8c, 0xf7, 0xb6, 0xb5, 0xad,
+    0xad, 0xc2, 0xc8, 0xd9, 0xa4, 0x46, 0xef, 0x00, 0x3f, 0xb0, 0x5c, 0xba,
+    0x5f, 0x30, 0xe8, 0x8e, 0x36, 0xec, 0x27, 0x03, 0xb3, 0x49, 0xca, 0x22,
+    0x9c, 0x26, 0x70, 0x83, 0x39, 0x00
+};
+
+static const uint8_t privkey8[57] = {
+    0x2e, 0xc5, 0xfe, 0x3c, 0x17, 0x04, 0x5a, 0xbd, 0xb1, 0x36, 0xa5, 0xe6,
+    0xa9, 0x13, 0xe3, 0x2a, 0xb7, 0x5a, 0xe6, 0x8b, 0x53, 0xd2, 0xfc, 0x14,
+    0x9b, 0x77, 0xe5, 0x04, 0x13, 0x2d, 0x37, 0x56, 0x9b, 0x7e, 0x76, 0x6b,
+    0xa7, 0x4a, 0x19, 0xbd, 0x61, 0x62, 0x34, 0x3a, 0x21, 0xc8, 0x59, 0x0a,
+    0xa9, 0xce, 0xbc, 0xa9, 0x01, 0x4c, 0x63, 0x6d, 0xf5
+};
+
+static const uint8_t pubkey8[57] = {
+    0x79, 0x75, 0x6f, 0x01, 0x4d, 0xcf, 0xe2, 0x07, 0x9f, 0x5d, 0xd9, 0xe7,
+    0x18, 0xbe, 0x41, 0x71, 0xe2, 0xef, 0x24, 0x86, 0xa0, 0x8f, 0x25, 0x18,
+    0x6f, 0x6b, 0xff, 0x43, 0xa9, 0x93, 0x6b, 0x9b, 0xfe, 0x12, 0x40, 0x2b,
+    0x08, 0xae, 0x65, 0x79, 0x8a, 0x3d, 0x81, 0xe2, 0x2e, 0x9e, 0xc8, 0x0e,
+    0x76, 0x90, 0x86, 0x2e, 0xf3, 0xd4, 0xed, 0x3a, 0x00
+};
+
+static const uint8_t msg8[256] = {
+    0x15, 0x77, 0x75, 0x32, 0xb0, 0xbd, 0xd0, 0xd1, 0x38, 0x9f, 0x63, 0x6c,
+    0x5f, 0x6b, 0x9b, 0xa7, 0x34, 0xc9, 0x0a, 0xf5, 0x72, 0x87, 0x7e, 0x2d,
+    0x27, 0x2d, 0xd0, 0x78, 0xaa, 0x1e, 0x56, 0x7c, 0xfa, 0x80, 0xe1, 0x29,
+    0x28, 0xbb, 0x54, 0x23, 0x30, 0xe8, 0x40, 0x9f, 0x31, 0x74, 0x50, 0x41,
+    0x07, 0xec, 0xd5, 0xef, 0xac, 0x61, 0xae, 0x75, 0x04, 0xda, 0xbe, 0x2a,
+    0x60, 0x2e, 0xde, 0x89, 0xe5, 0xcc, 0xa6, 0x25, 0x7a, 0x7c, 0x77, 0xe2,
+    0x7a, 0x70, 0x2b, 0x3a, 0xe3, 0x9f, 0xc7, 0x69, 0xfc, 0x54, 0xf2, 0x39,
+    0x5a, 0xe6, 0xa1, 0x17, 0x8c, 0xab, 0x47, 0x38, 0xe5, 0x43, 0x07, 0x2f,
+    0xc1, 0xc1, 0x77, 0xfe, 0x71, 0xe9, 0x2e, 0x25, 0xbf, 0x03, 0xe4, 0xec,
+    0xb7, 0x2f, 0x47, 0xb6, 0x4d, 0x04, 0x65, 0xaa, 0xea, 0x4c, 0x7f, 0xad,
+    0x37, 0x25, 0x36, 0xc8, 0xba, 0x51, 0x6a, 0x60, 0x39, 0xc3, 0xc2, 0xa3,
+    0x9f, 0x0e, 0x4d, 0x83, 0x2b, 0xe4, 0x32, 0xdf, 0xa9, 0xa7, 0x06, 0xa6,
+    0xe5, 0xc7, 0xe1, 0x9f, 0x39, 0x79, 0x64, 0xca, 0x42, 0x58, 0x00, 0x2f,
+    0x7c, 0x05, 0x41, 0xb5, 0x90, 0x31, 0x6d, 0xbc, 0x56, 0x22, 0xb6, 0xb2,
+    0xa6, 0xfe, 0x7a, 0x4a, 0xbf, 0xfd, 0x96, 0x10, 0x5e, 0xca, 0x76, 0xea,
+    0x7b, 0x98, 0x81, 0x6a, 0xf0, 0x74, 0x8c, 0x10, 0xdf, 0x04, 0x8c, 0xe0,
+    0x12, 0xd9, 0x01, 0x01, 0x5a, 0x51, 0xf1, 0x89, 0xf3, 0x88, 0x81, 0x45,
+    0xc0, 0x36, 0x50, 0xaa, 0x23, 0xce, 0x89, 0x4c, 0x3b, 0xd8, 0x89, 0xe0,
+    0x30, 0xd5, 0x65, 0x07, 0x1c, 0x59, 0xf4, 0x09, 0xa9, 0x98, 0x1b, 0x51,
+    0x87, 0x8f, 0xd6, 0xfc, 0x11, 0x06, 0x24, 0xdc, 0xbc, 0xde, 0x0b, 0xf7,
+    0xa6, 0x9c, 0xcc, 0xe3, 0x8f, 0xab, 0xdf, 0x86, 0xf3, 0xbe, 0xf6, 0x04,
+    0x48, 0x19, 0xde, 0x11
+};
+
+static const uint8_t sig8[114] = {
+    0xc6, 0x50, 0xdd, 0xbb, 0x06, 0x01, 0xc1, 0x9c, 0xa1, 0x14, 0x39, 0xe1,
+    0x64, 0x0d, 0xd9, 0x31, 0xf4, 0x3c, 0x51, 0x8e, 0xa5, 0xbe, 0xa7, 0x0d,
+    0x3d, 0xcd, 0xe5, 0xf4, 0x19, 0x1f, 0xe5, 0x3f, 0x00, 0xcf, 0x96, 0x65,
+    0x46, 0xb7, 0x2b, 0xcc, 0x7d, 0x58, 0xbe, 0x2b, 0x9b, 0xad, 0xef, 0x28,
+    0x74, 0x39, 0x54, 0xe3, 0xa4, 0x4a, 0x23, 0xf8, 0x80, 0xe8, 0xd4, 0xf1,
+    0xcf, 0xce, 0x2d, 0x7a, 0x61, 0x45, 0x2d, 0x26, 0xda, 0x05, 0x89, 0x6f,
+    0x0a, 0x50, 0xda, 0x66, 0xa2, 0x39, 0xa8, 0xa1, 0x88, 0xb6, 0xd8, 0x25,
+    0xb3, 0x30, 0x5a, 0xd7, 0x7b, 0x73, 0xfb, 0xac, 0x08, 0x36, 0xec, 0xc6,
+    0x09, 0x87, 0xfd, 0x08, 0x52, 0x7c, 0x1a, 0x8e, 0x80, 0xd5, 0x82, 0x3e,
+    0x65, 0xca, 0xfe, 0x2a, 0x3d, 0x00
+};
+
+static const uint8_t privkey9[57] = {
+    0x87, 0x2d, 0x09, 0x37, 0x80, 0xf5, 0xd3, 0x73, 0x0d, 0xf7, 0xc2, 0x12,
+    0x66, 0x4b, 0x37, 0xb8, 0xa0, 0xf2, 0x4f, 0x56, 0x81, 0x0d, 0xaa, 0x83,
+    0x82, 0xcd, 0x4f, 0xa3, 0xf7, 0x76, 0x34, 0xec, 0x44, 0xdc, 0x54, 0xf1,
+    0xc2, 0xed, 0x9b, 0xea, 0x86, 0xfa, 0xfb, 0x76, 0x32, 0xd8, 0xbe, 0x19,
+    0x9e, 0xa1, 0x65, 0xf5, 0xad, 0x55, 0xdd, 0x9c, 0xe8
+};
+
+static const uint8_t pubkey9[57] = {
+    0xa8, 0x1b, 0x2e, 0x8a, 0x70, 0xa5, 0xac, 0x94, 0xff, 0xdb, 0xcc, 0x9b,
+    0xad, 0xfc, 0x3f, 0xeb, 0x08, 0x01, 0xf2, 0x58, 0x57, 0x8b, 0xb1, 0x14,
+    0xad, 0x44, 0xec, 0xe1, 0xec, 0x0e, 0x79, 0x9d, 0xa0, 0x8e, 0xff, 0xb8,
+    0x1c, 0x5d, 0x68, 0x5c, 0x0c, 0x56, 0xf6, 0x4e, 0xec, 0xae, 0xf8, 0xcd,
+    0xf1, 0x1c, 0xc3, 0x87, 0x37, 0x83, 0x8c, 0xf4, 0x00
+};
+
+static const uint8_t msg9[1023] = {
+    0x6d, 0xdf, 0x80, 0x2e, 0x1a, 0xae, 0x49, 0x86, 0x93, 0x5f, 0x7f, 0x98,
+    0x1b, 0xa3, 0xf0, 0x35, 0x1d, 0x62, 0x73, 0xc0, 0xa0, 0xc2, 0x2c, 0x9c,
+    0x0e, 0x83, 0x39, 0x16, 0x8e, 0x67, 0x54, 0x12, 0xa3, 0xde, 0xbf, 0xaf,
+    0x43, 0x5e, 0xd6, 0x51, 0x55, 0x80, 0x07, 0xdb, 0x43, 0x84, 0xb6, 0x50,
+    0xfc, 0xc0, 0x7e, 0x3b, 0x58, 0x6a, 0x27, 0xa4, 0xf7, 0xa0, 0x0a, 0xc8,
+    0xa6, 0xfe, 0xc2, 0xcd, 0x86, 0xae, 0x4b, 0xf1, 0x57, 0x0c, 0x41, 0xe6,
+    0xa4, 0x0c, 0x93, 0x1d, 0xb2, 0x7b, 0x2f, 0xaa, 0x15, 0xa8, 0xce, 0xdd,
+    0x52, 0xcf, 0xf7, 0x36, 0x2c, 0x4e, 0x6e, 0x23, 0xda, 0xec, 0x0f, 0xbc,
+    0x3a, 0x79, 0xb6, 0x80, 0x6e, 0x31, 0x6e, 0xfc, 0xc7, 0xb6, 0x81, 0x19,
+    0xbf, 0x46, 0xbc, 0x76, 0xa2, 0x60, 0x67, 0xa5, 0x3f, 0x29, 0x6d, 0xaf,
+    0xdb, 0xdc, 0x11, 0xc7, 0x7f, 0x77, 0x77, 0xe9, 0x72, 0x66, 0x0c, 0xf4,
+    0xb6, 0xa9, 0xb3, 0x69, 0xa6, 0x66, 0x5f, 0x02, 0xe0, 0xcc, 0x9b, 0x6e,
+    0xdf, 0xad, 0x13, 0x6b, 0x4f, 0xab, 0xe7, 0x23, 0xd2, 0x81, 0x3d, 0xb3,
+    0x13, 0x6c, 0xfd, 0xe9, 0xb6, 0xd0, 0x44, 0x32, 0x2f, 0xee, 0x29, 0x47,
+    0x95, 0x2e, 0x03, 0x1b, 0x73, 0xab, 0x5c, 0x60, 0x33, 0x49, 0xb3, 0x07,
+    0xbd, 0xc2, 0x7b, 0xc6, 0xcb, 0x8b, 0x8b, 0xbd, 0x7b, 0xd3, 0x23, 0x21,
+    0x9b, 0x80, 0x33, 0xa5, 0x81, 0xb5, 0x9e, 0xad, 0xeb, 0xb0, 0x9b, 0x3c,
+    0x4f, 0x3d, 0x22, 0x77, 0xd4, 0xf0, 0x34, 0x36, 0x24, 0xac, 0xc8, 0x17,
+    0x80, 0x47, 0x28, 0xb2, 0x5a, 0xb7, 0x97, 0x17, 0x2b, 0x4c, 0x5c, 0x21,
+    0xa2, 0x2f, 0x9c, 0x78, 0x39, 0xd6, 0x43, 0x00, 0x23, 0x2e, 0xb6, 0x6e,
+    0x53, 0xf3, 0x1c, 0x72, 0x3f, 0xa3, 0x7f, 0xe3, 0x87, 0xc7, 0xd3, 0xe5,
+    0x0b, 0xdf, 0x98, 0x13, 0xa3, 0x0e, 0x5b, 0xb1, 0x2c, 0xf4, 0xcd, 0x93,
+    0x0c, 0x40, 0xcf, 0xb4, 0xe1, 0xfc, 0x62, 0x25, 0x92, 0xa4, 0x95, 0x88,
+    0x79, 0x44, 0x94, 0xd5, 0x6d, 0x24, 0xea, 0x4b, 0x40, 0xc8, 0x9f, 0xc0,
+    0x59, 0x6c, 0xc9, 0xeb, 0xb9, 0x61, 0xc8, 0xcb, 0x10, 0xad, 0xde, 0x97,
+    0x6a, 0x5d, 0x60, 0x2b, 0x1c, 0x3f, 0x85, 0xb9, 0xb9, 0xa0, 0x01, 0xed,
+    0x3c, 0x6a, 0x4d, 0x3b, 0x14, 0x37, 0xf5, 0x20, 0x96, 0xcd, 0x19, 0x56,
+    0xd0, 0x42, 0xa5, 0x97, 0xd5, 0x61, 0xa5, 0x96, 0xec, 0xd3, 0xd1, 0x73,
+    0x5a, 0x8d, 0x57, 0x0e, 0xa0, 0xec, 0x27, 0x22, 0x5a, 0x2c, 0x4a, 0xaf,
+    0xf2, 0x63, 0x06, 0xd1, 0x52, 0x6c, 0x1a, 0xf3, 0xca, 0x6d, 0x9c, 0xf5,
+    0xa2, 0xc9, 0x8f, 0x47, 0xe1, 0xc4, 0x6d, 0xb9, 0xa3, 0x32, 0x34, 0xcf,
+    0xd4, 0xd8, 0x1f, 0x2c, 0x98, 0x53, 0x8a, 0x09, 0xeb, 0xe7, 0x69, 0x98,
+    0xd0, 0xd8, 0xfd, 0x25, 0x99, 0x7c, 0x7d, 0x25, 0x5c, 0x6d, 0x66, 0xec,
+    0xe6, 0xfa, 0x56, 0xf1, 0x11, 0x44, 0x95, 0x0f, 0x02, 0x77, 0x95, 0xe6,
+    0x53, 0x00, 0x8f, 0x4b, 0xd7, 0xca, 0x2d, 0xee, 0x85, 0xd8, 0xe9, 0x0f,
+    0x3d, 0xc3, 0x15, 0x13, 0x0c, 0xe2, 0xa0, 0x03, 0x75, 0xa3, 0x18, 0xc7,
+    0xc3, 0xd9, 0x7b, 0xe2, 0xc8, 0xce, 0x5b, 0x6d, 0xb4, 0x1a, 0x62, 0x54,
+    0xff, 0x26, 0x4f, 0xa6, 0x15, 0x5b, 0xae, 0xe3, 0xb0, 0x77, 0x3c, 0x0f,
+    0x49, 0x7c, 0x57, 0x3f, 0x19, 0xbb, 0x4f, 0x42, 0x40, 0x28, 0x1f, 0x0b,
+    0x1f, 0x4f, 0x7b, 0xe8, 0x57, 0xa4, 0xe5, 0x9d, 0x41, 0x6c, 0x06, 0xb4,
+    0xc5, 0x0f, 0xa0, 0x9e, 0x18, 0x10, 0xdd, 0xc6, 0xb1, 0x46, 0x7b, 0xae,
+    0xac, 0x5a, 0x36, 0x68, 0xd1, 0x1b, 0x6e, 0xca, 0xa9, 0x01, 0x44, 0x00,
+    0x16, 0xf3, 0x89, 0xf8, 0x0a, 0xcc, 0x4d, 0xb9, 0x77, 0x02, 0x5e, 0x7f,
+    0x59, 0x24, 0x38, 0x8c, 0x7e, 0x34, 0x0a, 0x73, 0x2e, 0x55, 0x44, 0x40,
+    0xe7, 0x65, 0x70, 0xf8, 0xdd, 0x71, 0xb7, 0xd6, 0x40, 0xb3, 0x45, 0x0d,
+    0x1f, 0xd5, 0xf0, 0x41, 0x0a, 0x18, 0xf9, 0xa3, 0x49, 0x4f, 0x70, 0x7c,
+    0x71, 0x7b, 0x79, 0xb4, 0xbf, 0x75, 0xc9, 0x84, 0x00, 0xb0, 0x96, 0xb2,
+    0x16, 0x53, 0xb5, 0xd2, 0x17, 0xcf, 0x35, 0x65, 0xc9, 0x59, 0x74, 0x56,
+    0xf7, 0x07, 0x03, 0x49, 0x7a, 0x07, 0x87, 0x63, 0x82, 0x9b, 0xc0, 0x1b,
+    0xb1, 0xcb, 0xc8, 0xfa, 0x04, 0xea, 0xdc, 0x9a, 0x6e, 0x3f, 0x66, 0x99,
+    0x58, 0x7a, 0x9e, 0x75, 0xc9, 0x4e, 0x5b, 0xab, 0x00, 0x36, 0xe0, 0xb2,
+    0xe7, 0x11, 0x39, 0x2c, 0xff, 0x00, 0x47, 0xd0, 0xd6, 0xb0, 0x5b, 0xd2,
+    0xa5, 0x88, 0xbc, 0x10, 0x97, 0x18, 0x95, 0x42, 0x59, 0xf1, 0xd8, 0x66,
+    0x78, 0xa5, 0x79, 0xa3, 0x12, 0x0f, 0x19, 0xcf, 0xb2, 0x96, 0x3f, 0x17,
+    0x7a, 0xeb, 0x70, 0xf2, 0xd4, 0x84, 0x48, 0x26, 0x26, 0x2e, 0x51, 0xb8,
+    0x02, 0x71, 0x27, 0x20, 0x68, 0xef, 0x5b, 0x38, 0x56, 0xfa, 0x85, 0x35,
+    0xaa, 0x2a, 0x88, 0xb2, 0xd4, 0x1f, 0x2a, 0x0e, 0x2f, 0xda, 0x76, 0x24,
+    0xc2, 0x85, 0x02, 0x72, 0xac, 0x4a, 0x2f, 0x56, 0x1f, 0x8f, 0x2f, 0x7a,
+    0x31, 0x8b, 0xfd, 0x5c, 0xaf, 0x96, 0x96, 0x14, 0x9e, 0x4a, 0xc8, 0x24,
+    0xad, 0x34, 0x60, 0x53, 0x8f, 0xdc, 0x25, 0x42, 0x1b, 0xee, 0xc2, 0xcc,
+    0x68, 0x18, 0x16, 0x2d, 0x06, 0xbb, 0xed, 0x0c, 0x40, 0xa3, 0x87, 0x19,
+    0x23, 0x49, 0xdb, 0x67, 0xa1, 0x18, 0xba, 0xda, 0x6c, 0xd5, 0xab, 0x01,
+    0x40, 0xee, 0x27, 0x32, 0x04, 0xf6, 0x28, 0xaa, 0xd1, 0xc1, 0x35, 0xf7,
+    0x70, 0x27, 0x9a, 0x65, 0x1e, 0x24, 0xd8, 0xc1, 0x4d, 0x75, 0xa6, 0x05,
+    0x9d, 0x76, 0xb9, 0x6a, 0x6f, 0xd8, 0x57, 0xde, 0xf5, 0xe0, 0xb3, 0x54,
+    0xb2, 0x7a, 0xb9, 0x37, 0xa5, 0x81, 0x5d, 0x16, 0xb5, 0xfa, 0xe4, 0x07,
+    0xff, 0x18, 0x22, 0x2c, 0x6d, 0x1e, 0xd2, 0x63, 0xbe, 0x68, 0xc9, 0x5f,
+    0x32, 0xd9, 0x08, 0xbd, 0x89, 0x5c, 0xd7, 0x62, 0x07, 0xae, 0x72, 0x64,
+    0x87, 0x56, 0x7f, 0x9a, 0x67, 0xda, 0xd7, 0x9a, 0xbe, 0xc3, 0x16, 0xf6,
+    0x83, 0xb1, 0x7f, 0x2d, 0x02, 0xbf, 0x07, 0xe0, 0xac, 0x8b, 0x5b, 0xc6,
+    0x16, 0x2c, 0xf9, 0x46, 0x97, 0xb3, 0xc2, 0x7c, 0xd1, 0xfe, 0xa4, 0x9b,
+    0x27, 0xf2, 0x3b, 0xa2, 0x90, 0x18, 0x71, 0x96, 0x25, 0x06, 0x52, 0x0c,
+    0x39, 0x2d, 0xa8, 0xb6, 0xad, 0x0d, 0x99, 0xf7, 0x01, 0x3f, 0xbc, 0x06,
+    0xc2, 0xc1, 0x7a, 0x56, 0x95, 0x00, 0xc8, 0xa7, 0x69, 0x64, 0x81, 0xc1,
+    0xcd, 0x33, 0xe9, 0xb1, 0x4e, 0x40, 0xb8, 0x2e, 0x79, 0xa5, 0xf5, 0xdb,
+    0x82, 0x57, 0x1b, 0xa9, 0x7b, 0xae, 0x3a, 0xd3, 0xe0, 0x47, 0x95, 0x15,
+    0xbb, 0x0e, 0x2b, 0x0f, 0x3b, 0xfc, 0xd1, 0xfd, 0x33, 0x03, 0x4e, 0xfc,
+    0x62, 0x45, 0xed, 0xdd, 0x7e, 0xe2, 0x08, 0x6d, 0xda, 0xe2, 0x60, 0x0d,
+    0x8c, 0xa7, 0x3e, 0x21, 0x4e, 0x8c, 0x2b, 0x0b, 0xdb, 0x2b, 0x04, 0x7c,
+    0x6a, 0x46, 0x4a, 0x56, 0x2e, 0xd7, 0x7b, 0x73, 0xd2, 0xd8, 0x41, 0xc4,
+    0xb3, 0x49, 0x73, 0x55, 0x12, 0x57, 0x71, 0x3b, 0x75, 0x36, 0x32, 0xef,
+    0xba, 0x34, 0x81, 0x69, 0xab, 0xc9, 0x0a, 0x68, 0xf4, 0x26, 0x11, 0xa4,
+    0x01, 0x26, 0xd7, 0xcb, 0x21, 0xb5, 0x86, 0x95, 0x56, 0x81, 0x86, 0xf7,
+    0xe5, 0x69, 0xd2, 0xff, 0x0f, 0x9e, 0x74, 0x5d, 0x04, 0x87, 0xdd, 0x2e,
+    0xb9, 0x97, 0xca, 0xfc, 0x5a, 0xbf, 0x9d, 0xd1, 0x02, 0xe6, 0x2f, 0xf6,
+    0x6c, 0xba, 0x87
+};
+
+static const uint8_t sig9[114] = {
+    0xe3, 0x01, 0x34, 0x5a, 0x41, 0xa3, 0x9a, 0x4d, 0x72, 0xff, 0xf8, 0xdf,
+    0x69, 0xc9, 0x80, 0x75, 0xa0, 0xcc, 0x08, 0x2b, 0x80, 0x2f, 0xc9, 0xb2,
+    0xb6, 0xbc, 0x50, 0x3f, 0x92, 0x6b, 0x65, 0xbd, 0xdf, 0x7f, 0x4c, 0x8f,
+    0x1c, 0xb4, 0x9f, 0x63, 0x96, 0xaf, 0xc8, 0xa7, 0x0a, 0xbe, 0x6d, 0x8a,
+    0xef, 0x0d, 0xb4, 0x78, 0xd4, 0xc6, 0xb2, 0x97, 0x00, 0x76, 0xc6, 0xa0,
+    0x48, 0x4f, 0xe7, 0x6d, 0x76, 0xb3, 0xa9, 0x76, 0x25, 0xd7, 0x9f, 0x1c,
+    0xe2, 0x40, 0xe7, 0xc5, 0x76, 0x75, 0x0d, 0x29, 0x55, 0x28, 0x28, 0x6f,
+    0x71, 0x9b, 0x41, 0x3d, 0xe9, 0xad, 0xa3, 0xe8, 0xeb, 0x78, 0xed, 0x57,
+    0x36, 0x03, 0xce, 0x30, 0xd8, 0xbb, 0x76, 0x17, 0x85, 0xdc, 0x30, 0xdb,
+    0xc3, 0x20, 0x86, 0x9e, 0x1a, 0x00
+};
+
+/* Prehash Ed448 */
+
+static const uint8_t phprivkey1[57] = {
+    0x83, 0x3f, 0xe6, 0x24, 0x09, 0x23, 0x7b, 0x9d, 0x62, 0xec, 0x77, 0x58,
+    0x75, 0x20, 0x91, 0x1e, 0x9a, 0x75, 0x9c, 0xec, 0x1d, 0x19, 0x75, 0x5b,
+    0x7d, 0xa9, 0x01, 0xb9, 0x6d, 0xca, 0x3d, 0x42, 0xef, 0x78, 0x22, 0xe0,
+    0xd5, 0x10, 0x41, 0x27, 0xdc, 0x05, 0xd6, 0xdb, 0xef, 0xde, 0x69, 0xe3,
+    0xab, 0x2c, 0xec, 0x7c, 0x86, 0x7c, 0x6e, 0x2c, 0x49
+};
+
+static const uint8_t phpubkey1[57] = {
+    0x25, 0x9b, 0x71, 0xc1, 0x9f, 0x83, 0xef, 0x77, 0xa7, 0xab, 0xd2, 0x65,
+    0x24, 0xcb, 0xdb, 0x31, 0x61, 0xb5, 0x90, 0xa4, 0x8f, 0x7d, 0x17, 0xde,
+    0x3e, 0xe0, 0xba, 0x9c, 0x52, 0xbe, 0xb7, 0x43, 0xc0, 0x94, 0x28, 0xa1,
+    0x31, 0xd6, 0xb1, 0xb5, 0x73, 0x03, 0xd9, 0x0d, 0x81, 0x32, 0xc2, 0x76,
+    0xd5, 0xed, 0x3d, 0x5d, 0x01, 0xc0, 0xf5, 0x38, 0x80
+};
+
+static const uint8_t phmsg1[3] = {
+    0x61, 0x62, 0x63
+};
+
+static const uint8_t phsig1[114] = {
+    0x82, 0x2f, 0x69, 0x01, 0xf7, 0x48, 0x0f, 0x3d, 0x5f, 0x56, 0x2c, 0x59,
+    0x29, 0x94, 0xd9, 0x69, 0x36, 0x02, 0x87, 0x56, 0x14, 0x48, 0x32, 0x56,
+    0x50, 0x56, 0x00, 0xbb, 0xc2, 0x81, 0xae, 0x38, 0x1f, 0x54, 0xd6, 0xbc,
+    0xe2, 0xea, 0x91, 0x15, 0x74, 0x93, 0x2f, 0x52, 0xa4, 0xe6, 0xca, 0xdd,
+    0x78, 0x76, 0x93, 0x75, 0xec, 0x3f, 0xfd, 0x1b, 0x80, 0x1a, 0x0d, 0x9b,
+    0x3f, 0x40, 0x30, 0xcd, 0x43, 0x39, 0x64, 0xb6, 0x45, 0x7e, 0xa3, 0x94,
+    0x76, 0x51, 0x12, 0x14, 0xf9, 0x74, 0x69, 0xb5, 0x7d, 0xd3, 0x2d, 0xbc,
+    0x56, 0x0a, 0x9a, 0x94, 0xd0, 0x0b, 0xff, 0x07, 0x62, 0x04, 0x64, 0xa3,
+    0xad, 0x20, 0x3d, 0xf7, 0xdc, 0x7c, 0xe3, 0x60, 0xc3, 0xcd, 0x36, 0x96,
+    0xd9, 0xd9, 0xfa, 0xb9, 0x0f, 0x00
+};
+
+static const uint8_t phprivkey2[57] = {
+    0x83, 0x3f, 0xe6, 0x24, 0x09, 0x23, 0x7b, 0x9d, 0x62, 0xec, 0x77, 0x58,
+    0x75, 0x20, 0x91, 0x1e, 0x9a, 0x75, 0x9c, 0xec, 0x1d, 0x19, 0x75, 0x5b,
+    0x7d, 0xa9, 0x01, 0xb9, 0x6d, 0xca, 0x3d, 0x42, 0xef, 0x78, 0x22, 0xe0,
+    0xd5, 0x10, 0x41, 0x27, 0xdc, 0x05, 0xd6, 0xdb, 0xef, 0xde, 0x69, 0xe3,
+    0xab, 0x2c, 0xec, 0x7c, 0x86, 0x7c, 0x6e, 0x2c, 0x49
+};
+
+static const uint8_t phpubkey2[57] = {
+    0x25, 0x9b, 0x71, 0xc1, 0x9f, 0x83, 0xef, 0x77, 0xa7, 0xab, 0xd2, 0x65,
+    0x24, 0xcb, 0xdb, 0x31, 0x61, 0xb5, 0x90, 0xa4, 0x8f, 0x7d, 0x17, 0xde,
+    0x3e, 0xe0, 0xba, 0x9c, 0x52, 0xbe, 0xb7, 0x43, 0xc0, 0x94, 0x28, 0xa1,
+    0x31, 0xd6, 0xb1, 0xb5, 0x73, 0x03, 0xd9, 0x0d, 0x81, 0x32, 0xc2, 0x76,
+    0xd5, 0xed, 0x3d, 0x5d, 0x01, 0xc0, 0xf5, 0x38, 0x80
+};
+
+static const uint8_t phmsg2[3] = {
+    0x61, 0x62, 0x63
+};
+
+static const uint8_t phcontext2[3] = {
+    0x66, 0x6f, 0x6f
+};
+
+static const uint8_t phsig2[114] = {
+    0xc3, 0x22, 0x99, 0xd4, 0x6e, 0xc8, 0xff, 0x02, 0xb5, 0x45, 0x40, 0x98,
+    0x28, 0x14, 0xdc, 0xe9, 0xa0, 0x58, 0x12, 0xf8, 0x19, 0x62, 0xb6, 0x49,
+    0xd5, 0x28, 0x09, 0x59, 0x16, 0xa2, 0xaa, 0x48, 0x10, 0x65, 0xb1, 0x58,
+    0x04, 0x23, 0xef, 0x92, 0x7e, 0xcf, 0x0a, 0xf5, 0x88, 0x8f, 0x90, 0xda,
+    0x0f, 0x6a, 0x9a, 0x85, 0xad, 0x5d, 0xc3, 0xf2, 0x80, 0xd9, 0x12, 0x24,
+    0xba, 0x99, 0x11, 0xa3, 0x65, 0x3d, 0x00, 0xe4, 0x84, 0xe2, 0xce, 0x23,
+    0x25, 0x21, 0x48, 0x1c, 0x86, 0x58, 0xdf, 0x30, 0x4b, 0xb7, 0x74, 0x5a,
+    0x73, 0x51, 0x4c, 0xdb, 0x9b, 0xf3, 0xe1, 0x57, 0x84, 0xab, 0x71, 0x28,
+    0x4f, 0x8d, 0x07, 0x04, 0xa6, 0x08, 0xc5, 0x4a, 0x6b, 0x62, 0xd9, 0x7b,
+    0xeb, 0x51, 0x1d, 0x13, 0x21, 0x00
+};
+
+static const uint8_t *dohash(EVP_MD_CTX *hashctx, const uint8_t *msg,
+                             size_t msglen)
+{
+    static uint8_t hashout[64];
+
+    if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
+            || !EVP_DigestUpdate(hashctx, msg, msglen)
+            || !EVP_DigestFinalXOF(hashctx, hashout, sizeof(hashout)))
+        return NULL;
+
+    return hashout;
+}
+
+static int test_ed448(void)
+{
+    uint8_t outsig[114];
+    EVP_MD_CTX *hashctx = EVP_MD_CTX_new();
+
+    if (!TEST_ptr(hashctx)
+            || !TEST_true(ED448_sign(outsig, NULL, 0, pubkey1, privkey1, NULL,
+                                     0))
+            || !TEST_int_eq(memcmp(sig1, outsig, sizeof(sig1)), 0)
+            || !TEST_true(ED448_sign(outsig, msg2, sizeof(msg2), pubkey2,
+                                     privkey2, NULL, 0))
+            || !TEST_int_eq(memcmp(sig2, outsig, sizeof(sig2)), 0)
+            || !TEST_true(ED448_sign(outsig, msg3, sizeof(msg3), pubkey3,
+                                     privkey3, context3, sizeof(context3)))
+            || !TEST_int_eq(memcmp(sig3, outsig, sizeof(sig3)), 0)
+            || !TEST_true(ED448_sign(outsig, msg4, sizeof(msg4), pubkey4,
+                                     privkey4, NULL, 0))
+            || !TEST_int_eq(memcmp(sig4, outsig, sizeof(sig4)), 0)
+            || !TEST_true(ED448_sign(outsig, msg5, sizeof(msg5), pubkey5,
+                                     privkey5, NULL, 0))
+            || !TEST_int_eq(memcmp(sig5, outsig, sizeof(sig5)), 0)
+            || !TEST_true(ED448_sign(outsig, msg6, sizeof(msg6), pubkey6,
+                                     privkey6, NULL, 0))
+            || !TEST_int_eq(memcmp(sig6, outsig, sizeof(sig6)), 0)
+            || !TEST_true(ED448_sign(outsig, msg7, sizeof(msg7), pubkey7,
+                                     privkey7, NULL, 0))
+            || !TEST_int_eq(memcmp(sig7, outsig, sizeof(sig7)), 0)
+            || !TEST_true(ED448_sign(outsig, msg8, sizeof(msg8), pubkey8,
+                                     privkey8, NULL, 0))
+            || !TEST_int_eq(memcmp(sig8, outsig, sizeof(sig8)), 0)
+            || !TEST_true(ED448_sign(outsig, msg9, sizeof(msg9), pubkey9,
+                                     privkey9, NULL, 0))
+            || !TEST_int_eq(memcmp(sig9, outsig, sizeof(sig9)), 0)
+            || !TEST_true(ED448ph_sign(outsig, dohash(hashctx, phmsg1,
+                                       sizeof(phmsg1)), phpubkey1, phprivkey1,
+                                       NULL, 0))
+            || !TEST_int_eq(memcmp(phsig1, outsig, sizeof(phsig1)), 0)
+            || !TEST_true(ED448ph_sign(outsig, dohash(hashctx, phmsg2,
+                                       sizeof(phmsg2)), phpubkey2, phprivkey2,
+                                       phcontext2, sizeof(phcontext2)))
+            || !TEST_int_eq(memcmp(phsig2, outsig, sizeof(phsig2)), 0)) {
+        EVP_MD_CTX_free(hashctx);
+        return 0;
+    }
+
+    EVP_MD_CTX_free(hashctx);
+    return 1;
+}
+
+static int test_x448(void)
+{
+    uint8_t u[56], k[56], out[56];
+    unsigned int i;
+    int j = -1;
+
+    /* Curve448 tests */
+
+    if (!TEST_true(X448(out, in_scalar1, in_u1))
+          || !TEST_int_eq(memcmp(out, out_u1, sizeof(out)), 0)
+          || !TEST_true(X448(out, in_scalar2, in_u2))
+          || !TEST_int_eq(memcmp(out, out_u2, sizeof(out)), 0))
+        return 0;
+
+    memcpy(u, in_u3, sizeof(u));
+    memcpy(k, in_u3, sizeof(k));
+    for (i = 1; i <= max; i++) {
+        if (verbose && i % 10000 == 0) {
+            printf(".");
+            fflush(stdout);
+        }
+
+        if (!TEST_true(X448(out, k, u)))
+            return 0;
+
+        if (i == 1 || i == 1000 || i == 1000000) {
+            j++;
+            if (!TEST_int_eq(memcmp(out, out_u3[j], sizeof(out)), 0)) {
+                TEST_info("Failed at iteration %d", i);
+                return 0;
+            }
+        }
+        memcpy(u, k, sizeof(u));
+        memcpy(k, out, sizeof(k));
+    }
+
+    return 1;
+}
+
+int setup_tests(void)
+{
+    /*
+     * The test vectors contain one test which takes a very long time to run,
+     * so we don't do that be default. Using the -f option will cause it to be
+     * run.
+     */
+    if (test_has_option("-f"))
+        max = 1000000;
+
+    /* Print progress dots */
+    if (test_has_option("-v"))
+        verbose = 1;
+
+    ADD_TEST(test_x448);
+    ADD_TEST(test_ed448);
+    return 1;
+}
diff --git a/test/recipes/03-test_internal_curve448.t b/test/recipes/03-test_internal_curve448.t
new file mode 100644
index 0000000..1099d9e
--- /dev/null
+++ b/test/recipes/03-test_internal_curve448.t
@@ -0,0 +1,19 @@
+#! /usr/bin/env perl
+# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+use strict;
+use OpenSSL::Test;              # get 'plan'
+use OpenSSL::Test::Simple;
+use OpenSSL::Test::Utils;
+
+setup("test_internal_curve448");
+
+plan skip_all => "This test is unsupported in a shared library build on Windows"
+    if $^O eq 'MSWin32' && !disabled("shared");
+
+simple_test("test_internal_curve448", "curve448_internal_test");

From osslsanity at gmail.com  Tue Feb 20 13:27:00 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Tue, 20 Feb 2018 13:27:00 +0000 (UTC)
Subject: [openssl-commits] Build failed in Jenkins: master_noec #398
Message-ID: <342294644.338.1519133220793.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_noec/398/display/redirect?page=changes>

Changes:

[matt] Import Curve 448 support

[matt] Flatten the Curve 448 source structure

[matt] Remove some unneeded files and further flatten the curve 448 structure

[matt] Remove some deprecated curve 448 code and remove some unneeded defines

[matt] Remove some unneeded code

[matt] Remove the curve448/decaf sub-directory

[matt] Remove the decaf_bzero function and replace with OPENSSL_cleanse()

[matt] Add the X448() and X448_public_from_private() functions

[matt] Add a local test

[matt] Remove some unneeded stuff

[matt] Remove some uneeded macros and conditionally compiled code

[matt] Remove some more unneeded code

[matt] Rename decaf_448_* to curve448_*

[matt] Remove some vestiges of the old decaf template approach

[matt] Replace DECAF_INLINE with ossl_inline

[matt] Replace DECAF_WARN_UNUSED with __owur

[matt] Remove all instances of DECAF_API_VIS

[matt] Remove DECAF_NONNULL

[matt] Remove DECAF_NOINLINE

[matt] Remove inclusion of header files that we can't rely on due to

[matt] Add Ed448 tests

[matt] Add tests for Ed448ph

[matt] Use OpenSSL shake256

[matt] Convert Curve448 internals to use OpenSSL shake256

[matt] Remove the old shake256 implementation

[matt] Remove portable_endian.h

[matt] Rename the decaf files to curve448 files

[matt] Convert to C90 from C99

[matt] Integrate Curve448 into the build system

[matt] Fix the ED448 key lengths

[matt] Update the imported curve448 code to use OpenSSL copyright headers

[matt] Run util/openssl-format-source on the Curve448 code

[matt] Manual formatting tweaks to Curve448 code

[matt] Remove some unneeded code

[matt] Remove references to libdecaf

[matt] Merge f_arithmetic.c into f_generic.c

[matt] Merge f_field.h into field.h

[matt] Remove duplicated 448 in the names of various things

[matt] Remove some gcc/clang specific attributes we don't support

[matt] Fix build errors for Curve448 code on Windows (VC-WIN32 and VC-WIN64A)

[matt] Move curve448_test.c to be a full internal test

[matt] Update the curve448 internal test to use testutil.h

[matt] Fixes for compilation using clang

[matt] Code tidy up

[matt] Update Curve448 copyright for 2018

[matt] Fix a typo in a comment

[matt] Fix travis failure in f_impl.c

[matt] Fix AppVeyor failure in eddsa.c

[matt] Remove curve448 architecture specific files

[matt] Rename a function to avoid a clash

[matt] Use the NLIMBS macro rather than try and calculate the number of limbs

[matt] Add some new constant time functions needed by curve448

[matt] Remove the curve448 specific constant time implementation

[matt] Remove cplusplus guards in internal headers

[matt] Use NLIMBS where appropriate to simplify the code

[matt] Formatting tweak based on review feedback

[matt] Some style fixes

[matt] More style fixes to Curve448 code based on review feedback

[matt] Remove a strict aliasing issue with pre-computed curve448 constants

[matt] More style fixes for the curve448 code

[matt] Remove the curve448 vector code

[matt] Fix a travis failure in the curve448 code

[matt] Remove some unneccessary use of constant time code in curve448

[matt] Simplify some code

[matt] Further style changes to curve448 code

[matt] Yet more style updates to the curve448 code

[matt] Remove unrolled loops

[matt] Improve readability of f_impl.c and f_impl.h

[matt] fixup! Improve readability of f_impl.c and f_impl.h

[matt] fixup! More style fixes for the curve448 code

[matt] Some more cleanups of curve448 code

[matt] Add tests for newly added constant time functions

------------------------------------------
[...truncated 549.10 KB...]
		-o test/buildtest_rc2 test/buildtest_rc2.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl rc4 > test/buildtest_rc4.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_rc4.d.tmp -MT test/buildtest_rc4.o -c -o test/buildtest_rc4.o test/buildtest_rc4.c
rm -f test/buildtest_rc4
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_rc4 test/buildtest_rc4.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl ripemd > test/buildtest_ripemd.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_ripemd.d.tmp -MT test/buildtest_ripemd.o -c -o test/buildtest_ripemd.o test/buildtest_ripemd.c
rm -f test/buildtest_ripemd
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_ripemd test/buildtest_ripemd.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl rsa > test/buildtest_rsa.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_rsa.d.tmp -MT test/buildtest_rsa.o -c -o test/buildtest_rsa.o test/buildtest_rsa.c
rm -f test/buildtest_rsa
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_rsa test/buildtest_rsa.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl rsaerr > test/buildtest_rsaerr.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_rsaerr.d.tmp -MT test/buildtest_rsaerr.o -c -o test/buildtest_rsaerr.o test/buildtest_rsaerr.c
rm -f test/buildtest_rsaerr
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_rsaerr test/buildtest_rsaerr.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl safestack > test/buildtest_safestack.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_safestack.d.tmp -MT test/buildtest_safestack.o -c -o test/buildtest_safestack.o test/buildtest_safestack.c
rm -f test/buildtest_safestack
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_safestack test/buildtest_safestack.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl seed > test/buildtest_seed.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_seed.d.tmp -MT test/buildtest_seed.o -c -o test/buildtest_seed.o test/buildtest_seed.c
rm -f test/buildtest_seed
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_seed test/buildtest_seed.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl sha > test/buildtest_sha.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_sha.d.tmp -MT test/buildtest_sha.o -c -o test/buildtest_sha.o test/buildtest_sha.c
rm -f test/buildtest_sha
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_sha test/buildtest_sha.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl srp > test/buildtest_srp.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_srp.d.tmp -MT test/buildtest_srp.o -c -o test/buildtest_srp.o test/buildtest_srp.c
rm -f test/buildtest_srp
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_srp test/buildtest_srp.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl srtp > test/buildtest_srtp.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_srtp.d.tmp -MT test/buildtest_srtp.o -c -o test/buildtest_srtp.o test/buildtest_srtp.c
rm -f test/buildtest_srtp
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_srtp test/buildtest_srtp.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl ssl > test/buildtest_ssl.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_ssl.d.tmp -MT test/buildtest_ssl.o -c -o test/buildtest_ssl.o test/buildtest_ssl.c
rm -f test/buildtest_ssl
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_ssl test/buildtest_ssl.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl ssl2 > test/buildtest_ssl2.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_ssl2.d.tmp -MT test/buildtest_ssl2.o -c -o test/buildtest_ssl2.o test/buildtest_ssl2.c
rm -f test/buildtest_ssl2
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_ssl2 test/buildtest_ssl2.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl sslerr > test/buildtest_sslerr.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_sslerr.d.tmp -MT test/buildtest_sslerr.o -c -o test/buildtest_sslerr.o test/buildtest_sslerr.c
rm -f test/buildtest_sslerr
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_sslerr test/buildtest_sslerr.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl stack > test/buildtest_stack.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_stack.d.tmp -MT test/buildtest_stack.o -c -o test/buildtest_stack.o test/buildtest_stack.c
rm -f test/buildtest_stack
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_stack test/buildtest_stack.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl store > test/buildtest_store.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_store.d.tmp -MT test/buildtest_store.o -c -o test/buildtest_store.o test/buildtest_store.c
rm -f test/buildtest_store
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_store test/buildtest_store.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl storeerr > test/buildtest_storeerr.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_storeerr.d.tmp -MT test/buildtest_storeerr.o -c -o test/buildtest_storeerr.o test/buildtest_storeerr.c
rm -f test/buildtest_storeerr
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_storeerr test/buildtest_storeerr.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl symhacks > test/buildtest_symhacks.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_symhacks.d.tmp -MT test/buildtest_symhacks.o -c -o test/buildtest_symhacks.o test/buildtest_symhacks.c
rm -f test/buildtest_symhacks
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_symhacks test/buildtest_symhacks.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl tls1 > test/buildtest_tls1.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_tls1.d.tmp -MT test/buildtest_tls1.o -c -o test/buildtest_tls1.o test/buildtest_tls1.c
rm -f test/buildtest_tls1
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_tls1 test/buildtest_tls1.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl ts > test/buildtest_ts.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_ts.d.tmp -MT test/buildtest_ts.o -c -o test/buildtest_ts.o test/buildtest_ts.c
rm -f test/buildtest_ts
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_ts test/buildtest_ts.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl tserr > test/buildtest_tserr.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_tserr.d.tmp -MT test/buildtest_tserr.o -c -o test/buildtest_tserr.o test/buildtest_tserr.c
rm -f test/buildtest_tserr
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_tserr test/buildtest_tserr.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl txt_db > test/buildtest_txt_db.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_txt_db.d.tmp -MT test/buildtest_txt_db.o -c -o test/buildtest_txt_db.o test/buildtest_txt_db.c
rm -f test/buildtest_txt_db
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_txt_db test/buildtest_txt_db.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl ui > test/buildtest_ui.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_ui.d.tmp -MT test/buildtest_ui.o -c -o test/buildtest_ui.o test/buildtest_ui.c
rm -f test/buildtest_ui
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_ui test/buildtest_ui.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl uierr > test/buildtest_uierr.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_uierr.d.tmp -MT test/buildtest_uierr.o -c -o test/buildtest_uierr.o test/buildtest_uierr.c
rm -f test/buildtest_uierr
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_uierr test/buildtest_uierr.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl whrlpool > test/buildtest_whrlpool.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_whrlpool.d.tmp -MT test/buildtest_whrlpool.o -c -o test/buildtest_whrlpool.o test/buildtest_whrlpool.c
rm -f test/buildtest_whrlpool
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_whrlpool test/buildtest_whrlpool.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl x509 > test/buildtest_x509.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509.d.tmp -MT test/buildtest_x509.o -c -o test/buildtest_x509.o test/buildtest_x509.c
rm -f test/buildtest_x509
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_x509 test/buildtest_x509.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl x509_vfy > test/buildtest_x509_vfy.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509_vfy.d.tmp -MT test/buildtest_x509_vfy.o -c -o test/buildtest_x509_vfy.o test/buildtest_x509_vfy.c
rm -f test/buildtest_x509_vfy
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_x509_vfy test/buildtest_x509_vfy.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl x509err > test/buildtest_x509err.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509err.d.tmp -MT test/buildtest_x509err.o -c -o test/buildtest_x509err.o test/buildtest_x509err.c
rm -f test/buildtest_x509err
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_x509err test/buildtest_x509err.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl x509v3 > test/buildtest_x509v3.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509v3.d.tmp -MT test/buildtest_x509v3.o -c -o test/buildtest_x509v3.o test/buildtest_x509v3.c
rm -f test/buildtest_x509v3
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_x509v3 test/buildtest_x509v3.o \
		  -lssl -lcrypto -ldl -pthread
/usr/bin/perl test/generate_buildtest.pl x509v3err > test/buildtest_x509v3err.c
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509v3err.d.tmp -MT test/buildtest_x509v3err.o -c -o test/buildtest_x509v3err.o test/buildtest_x509v3err.c
rm -f test/buildtest_x509v3err
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/buildtest_x509v3err test/buildtest_x509v3err.o \
		  -lssl -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/casttest.d.tmp -MT test/casttest.o -c -o test/casttest.o test/casttest.c
rm -f test/casttest
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/casttest test/casttest.o \
		  test/libtestutil.a -lcrypto -ldl -pthread
gcc  -I. -Iinclude -Icrypto/include -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/chacha_internal_test.d.tmp -MT test/chacha_internal_test.o -c -o test/chacha_internal_test.o test/chacha_internal_test.c
rm -f test/chacha_internal_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/chacha_internal_test test/chacha_internal_test.o \
		  test/libtestutil.a libcrypto.a -ldl -pthread
gcc  -I. -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/cipher_overhead_test.d.tmp -MT test/cipher_overhead_test.o -c -o test/cipher_overhead_test.o test/cipher_overhead_test.c
rm -f test/cipher_overhead_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/cipher_overhead_test test/cipher_overhead_test.o \
		  -lssl test/libtestutil.a -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/cipherbytes_test.d.tmp -MT test/cipherbytes_test.o -c -o test/cipherbytes_test.o test/cipherbytes_test.c
rm -f test/cipherbytes_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/cipherbytes_test test/cipherbytes_test.o \
		  -lssl test/libtestutil.a -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/cipherlist_test.d.tmp -MT test/cipherlist_test.o -c -o test/cipherlist_test.o test/cipherlist_test.c
rm -f test/cipherlist_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/cipherlist_test test/cipherlist_test.o \
		  -lssl test/libtestutil.a -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/ciphername_test.d.tmp -MT test/ciphername_test.o -c -o test/ciphername_test.o test/ciphername_test.c
rm -f test/ciphername_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/ciphername_test test/ciphername_test.o \
		  -lssl test/libtestutil.a -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/clienthellotest.d.tmp -MT test/clienthellotest.o -c -o test/clienthellotest.o test/clienthellotest.c
rm -f test/clienthellotest
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/clienthellotest test/clienthellotest.o \
		  -lssl test/libtestutil.a -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/constant_time_test.d.tmp -MT test/constant_time_test.o -c -o test/constant_time_test.o test/constant_time_test.c
rm -f test/constant_time_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/constant_time_test test/constant_time_test.o \
		  test/libtestutil.a -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/crltest.d.tmp -MT test/crltest.o -c -o test/crltest.o test/crltest.c
rm -f test/crltest
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/crltest test/crltest.o \
		  test/libtestutil.a -lcrypto -ldl -pthread
gcc  -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/ct_test.d.tmp -MT test/ct_test.o -c -o test/ct_test.o test/ct_test.c
rm -f test/ct_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/ct_test test/ct_test.o \
		  test/libtestutil.a -lcrypto -ldl -pthread
gcc  -I. -Icrypto/include -Iinclude -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/ctype_internal_test.d.tmp -MT test/ctype_internal_test.o -c -o test/ctype_internal_test.o test/ctype_internal_test.c
rm -f test/ctype_internal_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/ctype_internal_test test/ctype_internal_test.o \
		  test/libtestutil.a libcrypto.a -ldl -pthread
gcc  -I. -Iinclude -Icrypto/ec/curve448 -Wall -O3 -pthread -m64 -Wa,--noexecstack -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/curve448_internal_test.d.tmp -MT test/curve448_internal_test.o -c -o test/curve448_internal_test.o test/curve448_internal_test.c
rm -f test/curve448_internal_test
${LDCMD:-gcc} -Wall -O3 -pthread -m64 -Wa,--noexecstack -L.  \
		-o test/curve448_internal_test test/curve448_internal_test.o \
		  test/libtestutil.a libcrypto.a -ldl -pthread
test/curve448_internal_test.o: In function `test_x448':
curve448_internal_test.c:(.text+0x33): undefined reference to `X448'
curve448_internal_test.c:(.text+0xcd): undefined reference to `X448'
curve448_internal_test.c:(.text+0x2c8): undefined reference to `X448'
test/curve448_internal_test.o: In function `test_ed448':
curve448_internal_test.c:(.text+0x3fe): undefined reference to `ED448_sign'
curve448_internal_test.c:(.text+0x4ad): undefined reference to `ED448_sign'
curve448_internal_test.c:(.text+0x538): undefined reference to `ED448_sign'
curve448_internal_test.c:(.text+0x5c0): undefined reference to `ED448_sign'
curve448_internal_test.c:(.text+0x648): undefined reference to `ED448_sign'
test/curve448_internal_test.o:curve448_internal_test.c:(.text+0x6d0): more undefined references to `ED448_sign' follow
test/curve448_internal_test.o: In function `test_ed448':
curve448_internal_test.c:(.text+0x8f0): undefined reference to `ED448ph_sign'
curve448_internal_test.c:(.text+0x97e): undefined reference to `ED448ph_sign'
collect2: error: ld returned 1 exit status
make[1]: *** [test/curve448_internal_test] Error 1
make[1]: Leaving directory `<http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_noec/ws/'>
make: *** [all] Error 2
Build step 'Execute shell' marked build as failure

From builds at travis-ci.org  Tue Feb 20 13:51:44 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 20 Feb 2018 13:51:44 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16453 (master - 59bf467)
In-Reply-To: <openssl/openssl+343818010+broken@travis-ci.org>
Message-ID: <5a8c27f08450b_43ff631414abc3577f@4bd91f79-d291-4184-a71f-ed0c21313741.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16453
Status: Broken

Duration: 36 minutes and 20 seconds
Commit: 59bf467 (master)
Author: Matt Caswell
Message: Add tests for newly added constant time functions

Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/5105)

View the changeset: https://github.com/openssl/openssl/compare/ebc0168384e9...59bf467ccaff

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/343818010?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180220/75ebd963/attachment.html>

From no-reply at appveyor.com  Tue Feb 20 14:39:54 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 20 Feb 2018 14:39:54 +0000
Subject: [openssl-commits] Build completed: openssl
	OpenSSL_1_0_2-stable.15742
Message-ID: <20180220143954.1.CC1905C82C872FD3@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180220/35599dab/attachment.html>

From openssl at openssl.org  Wed Feb 21 03:03:10 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Wed, 21 Feb 2018 03:03:10 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-ec
Message-ID: <1519182190.185083.26893.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ec

Commit log since last time:

59bf467 Add tests for newly added constant time functions
dd8796c Some more cleanups of curve448 code
a4e6dd8 fixup! More style fixes for the curve448 code
1898512 fixup! Improve readability of f_impl.c and f_impl.h
8e32ec7 Improve readability of f_impl.c and f_impl.h
cb5ed32 Remove unrolled loops
909c68a Yet more style updates to the curve448 code
c1f15b7 Further style changes to curve448 code
9c9d6ff Simplify some code
a723227 Remove some unneccessary use of constant time code in curve448
434149c Fix a travis failure in the curve448 code
2abe3ca Remove the curve448 vector code
53ef325 More style fixes for the curve448 code
9fd3c85 Remove a strict aliasing issue with pre-computed curve448 constants
68b20c0 More style fixes to Curve448 code based on review feedback
04ebd4e Some style fixes
e411822 Formatting tweak based on review feedback
756b5af Use NLIMBS where appropriate to simplify the code
8855a9a Remove cplusplus guards in internal headers
f918504 Remove the curve448 specific constant time implementation
e0fa632 Add some new constant time functions needed by curve448
7114a5a Use the NLIMBS macro rather than try and calculate the number of limbs
bd74eae Rename a function to avoid a clash
7e492f3 Remove curve448 architecture specific files
0cdcdac Fix AppVeyor failure in eddsa.c
dd03fd7 Fix travis failure in f_impl.c
06d72c2 Fix a typo in a comment
f53c776 Update Curve448 copyright for 2018
bce3108 Code tidy up
7d9e120 Fixes for compilation using clang
e54f5f3 Update the curve448 internal test to use testutil.h
2c9def2 Move curve448_test.c to be a full internal test
52a9587 Fix build errors for Curve448 code on Windows (VC-WIN32 and VC-WIN64A)
575d5af Remove some gcc/clang specific attributes we don't support
db90b27 Remove duplicated 448 in the names of various things
001a093 Merge f_field.h into field.h
b47758d Merge f_arithmetic.c into f_generic.c
aeeef83 Remove references to libdecaf
35b7c85 Remove some unneeded code
8d55f84 Manual formatting tweaks to Curve448 code
205fd63 Run util/openssl-format-source on the Curve448 code
1308e02 Update the imported curve448 code to use OpenSSL copyright headers
22bcc9c Fix the ED448 key lengths
ff489fb Integrate Curve448 into the build system
094c071 Convert to C90 from C99
bb6e60a Rename the decaf files to curve448 files
c414879 Remove portable_endian.h
2799d38 Remove the old shake256 implementation
a242839 Convert Curve448 internals to use OpenSSL shake256
c255e98 Use OpenSSL shake256
6ea71cb Add tests for Ed448ph
4ea41da Add Ed448 tests
6207b13 Remove inclusion of header files that we can't rely on due to portability
ca42a31 Remove DECAF_NOINLINE
91f2e94 Remove DECAF_NONNULL
09ffbc9 Remove all instances of DECAF_API_VIS
9455aab Replace DECAF_WARN_UNUSED with __owur
aacf29b Replace DECAF_INLINE with ossl_inline
88ba7e7 Remove some vestiges of the old decaf template approach
e777257 Rename decaf_448_* to curve448_*
46b4183 Remove some more unneeded code
a469abf Remove some uneeded macros and conditionally compiled code
67f1ccc Remove some unneeded stuff
6853d09 Add a local test
ad0a8a5 Add the X448() and X448_public_from_private() functions
b6e388b Remove the decaf_bzero function and replace with OPENSSL_cleanse()
f8385b0 Remove the curve448/decaf sub-directory
893b7c4 Remove some unneeded code
4052e1d Remove some deprecated curve 448 code and remove some unneeded defines
a2039c8 Remove some unneeded files and further flatten the curve 448 structure
abcd22b Flatten the Curve 448 source structure
7324473 Import Curve 448 support
ebc0168 Add BIO_bind function to bind local address for a socket.

Build log ended with (last 100 lines):

clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_symhacks.d.tmp -MT test/buildtest_symhacks.o -c -o test/buildtest_symhacks.o test/buildtest_symhacks.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_tls1.d.tmp -MT test/buildtest_tls1.o -c -o test/buildtest_tls1.o test/buildtest_tls1.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_ts.d.tmp -MT test/buildtest_ts.o -c -o test/buildtest_ts.o test/buildtest_ts.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_tserr.d.tmp -MT test/buildtest_tserr.o -c -o test/buildtest_tserr.o test/buildtest_tserr.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_txt_db.d.tmp -MT test/buildtest_txt_db.o -c -o test/buildtest_txt_db.o test/buildtest_txt_db.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_ui.d.tmp -MT test/buildtest_ui.o -c -o test/buildtest_ui.o test/buildtest_ui.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_uierr.d.tmp -MT test/buildtest_uierr.o -c -o test/buildtest_uierr.o test/buildtest_uierr.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_whrlpool.d.tmp -MT test/buildtest_whrlpool.o -c -o test/buildtest_whrlpool.o test/buildtest_whrlpool.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509.d.tmp -MT test/buildtest_x509.o -c -o test/buildtest_x509.o test/buildtest_x509.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509_vfy.d.tmp -MT test/buildtest_x509_vfy.o -c -o test/buildtest_x509_vfy.o test/buildtest_x509_vfy.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509err.d.tmp -MT test/buildtest_x509err.o -c -o test/buildtest_x509err.o test/buildtest_x509err.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509v3.d.tmp -MT test/buildtest_x509v3.o -c -o test/buildtest_x509v3.o test/buildtest_x509v3.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_x509v3err.d.tmp -MT test/buildtest_x509v3err.o -c -o test/buildtest_x509v3err.o test/buildtest_x509v3err.c
ar r libcrypto.a crypto/aes/aes-x86_64.o crypto/aes/aes_cfb.o crypto/aes/aes_ecb.o crypto/aes/aes_ige.o crypto/aes/aes_misc.o crypto/aes/aes_ofb.o crypto/aes/aes_wrap.o crypto/aes/aesni-mb-x86_64.o crypto/aes/aesni-sha1-x86_64.o crypto/aes/aesni-sha256-x86_64.o crypto/aes/aesni-x86_64.o crypto/aes/bsaes-x86_64.o crypto/aes/vpaes-x86_64.o crypto/aria/aria.o crypto/asn1/a_bitstr.o crypto/asn1/a_d2i_fp.o crypto/asn1/a_digest.o crypto/asn1/a_dup.o crypto/asn1/a_gentm.o crypto/asn1/a_i2d_fp.o crypto/asn1/a_int.o crypto/asn1/a_mbstr.o crypto/asn1/a_object.o crypto/asn1/a_octet.o crypto/asn1/a_print.o crypto/asn1/a_sign.o crypto/asn1/a_strex.o crypto/asn1/a_strnid.o crypto/asn1/a_time.o crypto/asn1/a_type.o crypto/asn1/a_utctm.o crypto/asn1/a_utf8.o crypto/asn1/a_verify.o crypto/asn1/ameth_lib.o crypto/asn1/asn1_err.o crypto/asn1/asn1_gen.o crypto/asn1/asn1_item_list.o crypto/asn1/asn1_lib.o crypto/asn1/asn1_par.o crypto/asn1/asn_mime.o crypto/asn1/asn_moid.o crypto/asn1/asn_mstbl.o crypto/asn1/asn_pack.o crypto/asn1/bio_asn1.o crypto/asn1/bio_ndef.o crypto/asn1/d2i_pr.o crypto/asn1/d2i_pu.o crypto/asn1/evp_asn1.o crypto/asn1/f_int.o crypto/asn1/f_string.o crypto/asn1/i2d_pr.o crypto/asn1/i2d_pu.o crypto/asn1/n_pkey.o crypto/asn1/nsseq.o crypto/asn1/p5_pbe.o crypto/asn1/p5_pbev2.o crypto/asn1/p5_scrypt.o crypto/asn1/p8_pkey.o crypto/asn1/t_bitst.o crypto/asn1/t_pkey.o crypto/asn1/t_spki.o crypto/asn1/tasn_dec.o crypto/asn1/tasn_enc.o crypto/asn1/tasn_fre.o crypto/asn1/tasn_new.o crypto/asn1/tasn_prn.o crypto/asn1/tasn_scn.o crypto/asn1/tasn_typ.o crypto/asn1/tasn_utl.o crypto/asn1/x_algor.o crypto/asn1/x_bignum.o crypto/asn1/x_info.o crypto/asn1/x_int64.o crypto/asn1/x_long.o crypto/asn1/x_pkey.o crypto/asn1/x_sig.o crypto/asn1/x_spki.o crypto/asn1/x_val.o crypto/async/arch/async_null.o crypto/async/arch/async_posix.o crypto/async/arch/async_win.o crypto/async/async.o crypto/async/async_err.o crypto/async/async_wait.o crypto/bf/bf_cfb64.o crypto/bf/bf_ecb.o crypto/bf/bf_enc.o crypto/bf/bf_ofb64.o crypto/bf/bf_skey.o crypto/bio/b_addr.o crypto/bio/b_dump.o crypto/bio/b_print.o crypto/bio/b_sock.o crypto/bio/b_sock2.o crypto/bio/bf_buff.o crypto/bio/bf_lbuf.o crypto/bio/bf_nbio.o crypto/bio/bf_null.o crypto/bio/bio_cb.o crypto/bio/bio_err.o crypto/bio/bio_lib.o crypto/bio/bio_meth.o crypto/bio/bss_acpt.o crypto/bio/bss_bio.o crypto/bio/bss_conn.o crypto/bio/bss_dgram.o crypto/bio/bss_fd.o crypto/bio/bss_file.o crypto/bio/bss_log.o crypto/bio/bss_mem.o crypto/bio/bss_null.o crypto/bio/bss_sock.o crypto/blake2/blake2b.o crypto/blake2/blake2s.o crypto/blake2/m_blake2b.o crypto/blake2/m_blake2s.o crypto/bn/asm/x86_64-gcc.o crypto/bn/bn_add.o crypto/bn/bn_blind.o crypto/bn/bn_const.o crypto/bn/bn_ctx.o crypto/bn/bn_depr.o crypto/bn/bn_dh.o crypto/bn/bn_div.o crypto/bn/bn_err.o crypto/bn/bn_exp.o crypto/bn/bn_exp2.o crypto/bn/bn_gcd.o crypto/bn/bn_gf2m.o crypto/bn/bn_intern.o crypto/bn/bn_kron.o crypto/bn/bn_lib.o crypto/bn/bn_mod.o crypto/bn/bn_mont.o crypto/bn/bn_mpi.o crypto/bn/bn_mul.o crypto/bn/bn_nist.o crypto/bn/bn_prime.o crypto/bn/bn_print.o crypto/bn/bn_rand.o crypto/bn/bn_recp.o crypto/bn/bn_shift.o crypto/bn/bn_sqr.o crypto/bn/bn_sqrt.o crypto/bn/bn_srp.o crypto/bn/bn_word.o crypto/bn/bn_x931p.o crypto/bn/rsaz-avx2.o crypto/bn/rsaz-x86_64.o crypto/bn/rsaz_exp.o crypto/bn/x86_64-gf2m.o crypto/bn/x86_64-mont.o crypto/bn/x86_64-mont5.o crypto/buffer/buf_err.o crypto/buffer/buffer.o crypto/camellia/cmll-x86_64.o crypto/camellia/cmll_cfb.o crypto/camellia/cmll_ctr.o crypto/camellia/cmll_ecb.o crypto/camellia/cmll_misc.o crypto/camellia/cmll_ofb.o crypto/cast/c_cfb64.o crypto/cast/c_ecb.o crypto/cast/c_enc.o crypto/cast/c_ofb64.o crypto/cast/c_skey.o crypto/chacha/chacha-x86_64.o crypto/cmac/cm_ameth.o crypto/cmac/cm_pmeth.o crypto/cmac/cmac.o crypto/cms/cms_asn1.o crypto/cms/cms_att.o crypto/cms/cms_cd.o crypto/cms/cms_dd.o crypto/cms/cms_enc.o crypto/cms/cms_env.o crypto/cms/cms_err.o crypto/cms/cms_ess.o crypto/cms/cms_io.o crypto/cms/cms_kari.o crypto/cms/cms_lib.o crypto/cms/cms_pwri.o crypto/cms/cms_sd.o crypto/cms/cms_smime.o crypto/comp/c_zlib.o crypto/comp/comp_err.o crypto/comp/comp_lib.o crypto/conf/conf_api.o crypto/conf/conf_def.o crypto/conf/conf_err.o crypto/conf/conf_lib.o crypto/conf/conf_mall.o crypto/conf/conf_mod.o crypto/conf/conf_sap.o crypto/cpt_err.o crypto/cryptlib.o crypto/ct/ct_b64.o crypto/ct/ct_err.o crypto/ct/ct_log.o crypto/ct/ct_oct.o crypto/ct/ct_policy.o crypto/ct/ct_prn.o crypto/ct/ct_sct.o crypto/ct/ct_sct_ctx.o crypto/ct/ct_vfy.o crypto/ct/ct_x509v3.o crypto/ctype.o crypto/cversion.o crypto/des/cbc_cksm.o crypto/des/cbc_enc.o crypto/des/cfb64ede.o crypto/des/cfb64enc.o crypto/des/cfb_enc.o crypto/des/des_enc.o crypto/des/ecb3_enc.o crypto/des/ecb_enc.o crypto/des/fcrypt.o crypto/des/fcrypt_b.o crypto/des/ofb64ede.o crypto/des/ofb64enc.o crypto/des/ofb_enc.o crypto/des/pcbc_enc.o crypto/des/qud_cksm.o crypto/des/rand_key.o crypto/des/set_key.o crypto/des/str2key.o crypto/des/xcbc_enc.o crypto/dh/dh_ameth.o crypto/dh/dh_asn1.o crypto/dh/dh_check.o crypto/dh/dh_depr.o crypto/dh/dh_err.o crypto/dh/dh_gen.o crypto/dh/dh_kdf.o crypto/dh/dh_key.o crypto/dh/dh_lib.o crypto/dh/dh_meth.o crypto/dh/dh_pmeth.o crypto/dh/dh_prn.o crypto/dh/dh_rfc5114.o crypto/dh/dh_rfc7919.o crypto/dsa/dsa_ameth.o crypto/dsa/dsa_asn1.o crypto/dsa/dsa_depr.o crypto/dsa/dsa_err.o crypto/dsa/dsa_gen.o crypto/dsa/dsa_key.o crypto/dsa/dsa_lib.o crypto/dsa/dsa_meth.o crypto/dsa/dsa_ossl.o crypto/dsa/dsa_pmeth.o crypto/dsa/dsa_prn.o crypto/dsa/dsa_sign.o crypto/dsa/dsa_vrf.o crypto/dso/dso_dl.o crypto/dso/dso_dlfcn.o crypto/dso/dso_err.o crypto/dso/dso_lib.o crypto/dso/dso_openssl.o crypto/dso/dso_vms.o crypto/dso/dso_win32.o crypto/ebcdic.o crypto/engine/eng_all.o crypto/engine/eng_cnf.o crypto/engine/eng_ctrl.o crypto/engine/eng_dyn.o crypto/engine/eng_err.o crypto/engine/eng_fat.o crypto/engine/eng_init.o crypto/engine/eng_lib.o crypto/engine/eng_list.o crypto/engine/eng_openssl.o crypto/engine/eng_pkey.o crypto/engine/eng_rdrand.o crypto/engine/eng_table.o crypto/engine/tb_asnmth.o crypto/engine/tb_cipher.o crypto/engine/tb_dh.o crypto/engine/tb_digest.o crypto/engine/tb_dsa.o crypto/engine/tb_eckey.o crypto/engine/tb_pkmeth.o crypto/engine/tb_rand.o crypto/engine/tb_rsa.o crypto/err/err.o crypto/err/err_all.o crypto/err/err_prn.o crypto/evp/bio_b64.o crypto/evp/bio_enc.o crypto/evp/bio_md.o crypto/evp/bio_ok.o crypto/evp/c_allc.o crypto/evp/c_alld.o crypto/evp/cmeth_lib.o crypto/evp/digest.o crypto/evp/e_aes.o crypto/evp/e_aes_cbc_hmac_sha1.o crypto/evp/e_aes_cbc_hmac_sha256.o crypto/evp/e_aria.o crypto/evp/e_bf.o crypto/evp/e_camellia.o crypto/evp/e_cast.o crypto/evp/e_chacha20_poly1305.o crypto/evp/e_des.o crypto/evp/e_des3.o crypto/evp/e_idea.o crypto/evp/e_null.o crypto/evp/e_old.o crypto/evp/e_rc2.o crypto/evp/e_rc4.o crypto/evp/e_rc4_hmac_md5.o crypto/evp/e_rc5.o crypto/evp/e_seed.o crypto/evp/e_sm4.o crypto/evp/e_xcbc_d.o crypto/evp/encode.o crypto/evp/evp_cnf.o crypto/evp/evp_enc.o crypto/evp/evp_err.o crypto/evp/evp_key.o crypto/evp/evp_lib.o crypto/evp/evp_pbe.o crypto/evp/evp_pkey.o crypto/evp/m_md2.o crypto/evp/m_md4.o crypto/evp/m_md5.o crypto/evp/m_md5_sha1.o crypto/evp/m_mdc2.o crypto/evp/m_null.o crypto/evp/m_ripemd.o crypto/evp/m_sha1.o crypto/evp/m_sha3.o crypto/evp/m_sigver.o crypto/evp/m_wp.o crypto/evp/names.o crypto/evp/p5_crpt.o crypto/evp/p5_crpt2.o crypto/evp/p_dec.o crypto/evp/p_enc.o crypto/evp/p_lib.o crypto/evp/p_open.o crypto/evp/p_seal.o crypto/evp/p_sign.o crypto/evp/p_verify.o crypto/evp/pbe_scrypt.o crypto/evp/pmeth_fn.o crypto/evp/pmeth_gn.o crypto/evp/pmeth_lib.o crypto/ex_data.o crypto/hmac/hm_ameth.o crypto/hmac/hm_pmeth.o crypto/hmac/hmac.o crypto/idea/i_cbc.o crypto/idea/i_cfb64.o crypto/idea/i_ecb.o crypto/idea/i_ofb64.o crypto/idea/i_skey.o crypto/init.o crypto/kdf/hkdf.o crypto/kdf/kdf_err.o crypto/kdf/scrypt.o crypto/kdf/tls1_prf.o crypto/lhash/lh_stats.o crypto/lhash/lhash.o crypto/md4/md4_dgst.o crypto/md4/md4_one.o crypto/md5/md5-x86_64.o crypto/md5/md5_dgst.o crypto/md5/md5_one.o crypto/mdc2/mdc2_one.o crypto/mdc2/mdc2dgst.o crypto/mem.o crypto/mem_dbg.o crypto/mem_sec.o crypto/modes/aesni-gcm-x86_64.o crypto/modes/cbc128.o crypto/modes/ccm128.o crypto/modes/cfb128.o crypto/modes/ctr128.o crypto/modes/cts128.o crypto/modes/gcm128.o crypto/modes/ghash-x86_64.o crypto/modes/ocb128.o crypto/modes/ofb128.o crypto/modes/wrap128.o crypto/modes/xts128.o crypto/o_dir.o crypto/o_fips.o crypto/o_fopen.o crypto/o_init.o crypto/o_str.o crypto/o_time.o crypto/objects/o_names.o crypto/objects/obj_dat.o crypto/objects/obj_err.o crypto/objects/obj_lib.o crypto/objects/obj_xref.o crypto/ocsp/ocsp_asn.o crypto/ocsp/ocsp_cl.o crypto/ocsp/ocsp_err.o crypto/ocsp/ocsp_ext.o crypto/ocsp/ocsp_ht.o crypto/ocsp/ocsp_lib.o crypto/ocsp/ocsp_prn.o crypto/ocsp/ocsp_srv.o crypto/ocsp/ocsp_vfy.o crypto/ocsp/v3_ocsp.o crypto/pem/pem_all.o crypto/pem/pem_err.o crypto/pem/pem_info.o crypto/pem/pem_lib.o crypto/pem/pem_oth.o crypto/pem/pem_pk8.o crypto/pem/pem_pkey.o crypto/pem/pem_sign.o crypto/pem/pem_x509.o crypto/pem/pem_xaux.o crypto/pem/pvkfmt.o crypto/pkcs12/p12_add.o crypto/pkcs12/p12_asn.o crypto/pkcs12/p12_attr.o crypto/pkcs12/p12_crpt.o crypto/pkcs12/p12_crt.o crypto/pkcs12/p12_decr.o crypto/pkcs12/p12_init.o crypto/pkcs12/p12_key.o crypto/pkcs12/p12_kiss.o crypto/pkcs12/p12_mutl.o crypto/pkcs12/p12_npas.o crypto/pkcs12/p12_p8d.o crypto/pkcs12/p12_p8e.o crypto/pkcs12/p12_sbag.o crypto/pkcs12/p12_utl.o crypto/pkcs12/pk12err.o crypto/pkcs7/bio_pk7.o crypto/pkcs7/pk7_asn1.o crypto/pkcs7/pk7_attr.o crypto/pkcs7/pk7_doit.o crypto/pkcs7/pk7_lib.o crypto/pkcs7/pk7_mime.o crypto/pkcs7/pk7_smime.o crypto/pkcs7/pkcs7err.o crypto/poly1305/poly1305-x86_64.o crypto/poly1305/poly1305.o crypto/poly1305/poly1305_ameth.o crypto/poly1305/poly1305_pmeth.o crypto/rand/drbg_ctr.o crypto/rand/drbg_lib.o crypto/rand/rand_egd.o crypto/rand/rand_err.o crypto/rand/rand_lib.o crypto/rand/rand_unix.o crypto/rand/rand_vms.o crypto/rand/rand_win.o crypto/rand/randfile.o crypto/rc2/rc2_cbc.o crypto/rc2/rc2_ecb.o crypto/rc2/rc2_skey.o crypto/rc2/rc2cfb64.o crypto/rc2/rc2ofb64.o crypto/rc4/rc4-md5-x86_64.o crypto/rc4/rc4-x86_64.o crypto/ripemd/rmd_dgst.o crypto/ripemd/rmd_one.o crypto/rsa/rsa_ameth.o crypto/rsa/rsa_asn1.o crypto/rsa/rsa_chk.o crypto/rsa/rsa_crpt.o crypto/rsa/rsa_depr.o crypto/rsa/rsa_err.o crypto/rsa/rsa_gen.o crypto/rsa/rsa_lib.o crypto/rsa/rsa_meth.o crypto/rsa/rsa_mp.o crypto/rsa/rsa_none.o crypto/rsa/rsa_oaep.o crypto/rsa/rsa_ossl.o crypto/rsa/rsa_pk1.o crypto/rsa/rsa_pmeth.o crypto/rsa/rsa_prn.o crypto/rsa/rsa_pss.o crypto/rsa/rsa_saos.o crypto/rsa/rsa_sign.o crypto/rsa/rsa_ssl.o crypto/rsa/rsa_x931.o crypto/rsa/rsa_x931g.o crypto/seed/seed.o crypto/seed/seed_cbc.o crypto/seed/seed_cfb.o crypto/seed/seed_ecb.o crypto/seed/seed_ofb.o crypto/sha/keccak1600.o crypto/sha/sha1-mb-x86_64.o crypto/sha/sha1-x86_64.o crypto/sha/sha1_one.o crypto/sha/sha1dgst.o crypto/sha/sha256-mb-x86_64.o crypto/sha/sha256-x86_64.o crypto/sha/sha256.o crypto/sha/sha512-x86_64.o crypto/sha/sha512.o crypto/siphash/siphash.o crypto/siphash/siphash_ameth.o crypto/siphash/siphash_pmeth.o crypto/sm3/m_sm3.o crypto/sm3/sm3.o crypto/sm4/sm4.o crypto/srp/srp_lib.o crypto/srp/srp_vfy.o crypto/stack/stack.o crypto/store/loader_file.o crypto/store/store_err.o crypto/store/store_init.o crypto/store/store_lib.o crypto/store/store_register.o crypto/store/store_strings.o crypto/threads_none.o crypto/threads_pthread.o crypto/threads_win.o crypto/ts/ts_asn1.o crypto/ts/ts_conf.o crypto/ts/ts_err.o crypto/ts/ts_lib.o crypto/ts/ts_req_print.o crypto/ts/ts_req_utils.o crypto/ts/ts_rsp_print.o crypto/ts/ts_rsp_sign.o crypto/ts/ts_rsp_utils.o crypto/ts/ts_rsp_verify.o crypto/ts/ts_verify_ctx.o crypto/txt_db/txt_db.o crypto/ui/ui_err.o crypto/ui/ui_lib.o crypto/ui/ui_null.o crypto/ui/ui_openssl.o crypto/ui/ui_util.o crypto/uid.o crypto/whrlpool/wp-x86_64.o crypto/whrlpool/wp_dgst.o crypto/x509/by_dir.o crypto/x509/by_file.o crypto/x509/t_crl.o crypto/x509/t_req.o crypto/x509/t_x509.o crypto/x509/x509_att.o crypto/x509/x509_cmp.o crypto/x509/x509_d2.o crypto/x509/x509_def.o crypto/x509/x509_err.o crypto/x509/x509_ext.o crypto/x509/x509_lu.o crypto/x509/x509_obj.o crypto/x509/x509_r2x.o crypto/x509/x509_req.o crypto/x509/x509_set.o crypto/x509/x509_trs.o crypto/x509/x509_txt.o crypto/x509/x509_v3.o crypto/x509/x509_vfy.o crypto/x509/x509_vpm.o crypto/x509/x509cset.o crypto/x509/x509name.o crypto/x509/x509rset.o crypto/x509/x509spki.o crypto/x509/x509type.o crypto/x509/x_all.o crypto/x509/x_attrib.o crypto/x509/x_crl.o crypto/x509/x_exten.o crypto/x509/x_name.o crypto/x509/x_pubkey.o crypto/x509/x_req.o crypto/x509/x_x509.o crypto/x509/x_x509a.o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_tree.o crypto/x509v3/v3_addr.o crypto/x509v3/v3_admis.o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_alt.o crypto/x509v3/v3_asid.o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_conf.o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_crld.o crypto/x509v3/v3_enum.o crypto/x509v3/v3_extku.o crypto/x509v3/v3_genn.o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_info.o crypto/x509v3/v3_int.o crypto/x509v3/v3_lib.o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_prn.o crypto/x509v3/v3_purp.o crypto/x509v3/v3_skey.o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_utl.o crypto/x509v3/v3err.o crypto/x86_64cpuid.o
ar: creating libcrypto.a
clang -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -L.  -Wl,-znodelete -shared -Wl,-Bsymbolic -Wl,-soname=libcrypto.so.1.1 \
	-o libcrypto.so.1.1 -Wl,--version-script=libcrypto.map crypto/aes/aes-x86_64.o crypto/aes/aes_cfb.o crypto/aes/aes_ecb.o crypto/aes/aes_ige.o crypto/aes/aes_misc.o crypto/aes/aes_ofb.o crypto/aes/aes_wrap.o crypto/aes/aesni-mb-x86_64.o crypto/aes/aesni-sha1-x86_64.o crypto/aes/aesni-sha256-x86_64.o crypto/aes/aesni-x86_64.o crypto/aes/bsaes-x86_64.o crypto/aes/vpaes-x86_64.o crypto/aria/aria.o crypto/asn1/a_bitstr.o crypto/asn1/a_d2i_fp.o crypto/asn1/a_digest.o crypto/asn1/a_dup.o crypto/asn1/a_gentm.o crypto/asn1/a_i2d_fp.o crypto/asn1/a_int.o crypto/asn1/a_mbstr.o crypto/asn1/a_object.o crypto/asn1/a_octet.o crypto/asn1/a_print.o crypto/asn1/a_sign.o crypto/asn1/a_strex.o crypto/asn1/a_strnid.o crypto/asn1/a_time.o crypto/asn1/a_type.o crypto/asn1/a_utctm.o crypto/asn1/a_utf8.o crypto/asn1/a_verify.o crypto/asn1/ameth_lib.o crypto/asn1/asn1_err.o crypto/asn1/asn1_gen.o crypto/asn1/asn1_item_list.o crypto/asn1/asn1_lib.o crypto/asn1/asn1_par.o crypto/asn1/asn_mime.o crypto/asn1/asn_moid.o crypto/asn1/asn_mstbl.o crypto/asn1/asn_pack.o crypto/asn1/bio_asn1.o crypto/asn1/bio_ndef.o crypto/asn1/d2i_pr.o crypto/asn1/d2i_pu.o crypto/asn1/evp_asn1.o crypto/asn1/f_int.o crypto/asn1/f_string.o crypto/asn1/i2d_pr.o crypto/asn1/i2d_pu.o crypto/asn1/n_pkey.o crypto/asn1/nsseq.o crypto/asn1/p5_pbe.o crypto/asn1/p5_pbev2.o crypto/asn1/p5_scrypt.o crypto/asn1/p8_pkey.o crypto/asn1/t_bitst.o crypto/asn1/t_pkey.o crypto/asn1/t_spki.o crypto/asn1/tasn_dec.o crypto/asn1/tasn_enc.o crypto/asn1/tasn_fre.o crypto/asn1/tasn_new.o crypto/asn1/tasn_prn.o crypto/asn1/tasn_scn.o crypto/asn1/tasn_typ.o crypto/asn1/tasn_utl.o crypto/asn1/x_algor.o crypto/asn1/x_bignum.o crypto/asn1/x_info.o crypto/asn1/x_int64.o crypto/asn1/x_long.o crypto/asn1/x_pkey.o crypto/asn1/x_sig.o crypto/asn1/x_spki.o crypto/asn1/x_val.o crypto/async/arch/async_null.o crypto/async/arch/async_posix.o crypto/async/arch/async_win.o crypto/async/async.o crypto/async/async_err.o crypto/async/async_wait.o crypto/bf/bf_cfb64.o crypto/bf/bf_ecb.o crypto/bf/bf_enc.o crypto/bf/bf_ofb64.o crypto/bf/bf_skey.o crypto/bio/b_addr.o crypto/bio/b_dump.o crypto/bio/b_print.o crypto/bio/b_sock.o crypto/bio/b_sock2.o crypto/bio/bf_buff.o crypto/bio/bf_lbuf.o crypto/bio/bf_nbio.o crypto/bio/bf_null.o crypto/bio/bio_cb.o crypto/bio/bio_err.o crypto/bio/bio_lib.o crypto/bio/bio_meth.o crypto/bio/bss_acpt.o crypto/bio/bss_bio.o crypto/bio/bss_conn.o crypto/bio/bss_dgram.o crypto/bio/bss_fd.o crypto/bio/bss_file.o crypto/bio/bss_log.o crypto/bio/bss_mem.o crypto/bio/bss_null.o crypto/bio/bss_sock.o crypto/blake2/blake2b.o crypto/blake2/blake2s.o crypto/blake2/m_blake2b.o crypto/blake2/m_blake2s.o crypto/bn/asm/x86_64-gcc.o crypto/bn/bn_add.o crypto/bn/bn_blind.o crypto/bn/bn_const.o crypto/bn/bn_ctx.o crypto/bn/bn_depr.o crypto/bn/bn_dh.o crypto/bn/bn_div.o crypto/bn/bn_err.o crypto/bn/bn_exp.o crypto/bn/bn_exp2.o crypto/bn/bn_gcd.o crypto/bn/bn_gf2m.o crypto/bn/bn_intern.o crypto/bn/bn_kron.o crypto/bn/bn_lib.o crypto/bn/bn_mod.o crypto/bn/bn_mont.o crypto/bn/bn_mpi.o crypto/bn/bn_mul.o crypto/bn/bn_nist.o crypto/bn/bn_prime.o crypto/bn/bn_print.o crypto/bn/bn_rand.o crypto/bn/bn_recp.o crypto/bn/bn_shift.o crypto/bn/bn_sqr.o crypto/bn/bn_sqrt.o crypto/bn/bn_srp.o crypto/bn/bn_word.o crypto/bn/bn_x931p.o crypto/bn/rsaz-avx2.o crypto/bn/rsaz-x86_64.o crypto/bn/rsaz_exp.o crypto/bn/x86_64-gf2m.o crypto/bn/x86_64-mont.o crypto/bn/x86_64-mont5.o crypto/buffer/buf_err.o crypto/buffer/buffer.o crypto/camellia/cmll-x86_64.o crypto/camellia/cmll_cfb.o crypto/camellia/cmll_ctr.o crypto/camellia/cmll_ecb.o crypto/camellia/cmll_misc.o crypto/camellia/cmll_ofb.o crypto/cast/c_cfb64.o crypto/cast/c_ecb.o crypto/cast/c_enc.o crypto/cast/c_ofb64.o crypto/cast/c_skey.o crypto/chacha/chacha-x86_64.o crypto/cmac/cm_ameth.o crypto/cmac/cm_pmeth.o crypto/cmac/cmac.o crypto/cms/cms_asn1.o crypto/cms/cms_att.o crypto/cms/cms_cd.o crypto/cms/cms_dd.o crypto/cms/cms_enc.o crypto/cms/cms_env.o crypto/cms/cms_err.o crypto/cms/cms_ess.o crypto/cms/cms_io.o crypto/cms/cms_kari.o crypto/cms/cms_lib.o crypto/cms/cms_pwri.o crypto/cms/cms_sd.o crypto/cms/cms_smime.o crypto/comp/c_zlib.o crypto/comp/comp_err.o crypto/comp/comp_lib.o crypto/conf/conf_api.o crypto/conf/conf_def.o crypto/conf/conf_err.o crypto/conf/conf_lib.o crypto/conf/conf_mall.o crypto/conf/conf_mod.o crypto/conf/conf_sap.o crypto/cpt_err.o crypto/cryptlib.o crypto/ct/ct_b64.o crypto/ct/ct_err.o crypto/ct/ct_log.o crypto/ct/ct_oct.o crypto/ct/ct_policy.o crypto/ct/ct_prn.o crypto/ct/ct_sct.o crypto/ct/ct_sct_ctx.o crypto/ct/ct_vfy.o crypto/ct/ct_x509v3.o crypto/ctype.o crypto/cversion.o crypto/des/cbc_cksm.o crypto/des/cbc_enc.o crypto/des/cfb64ede.o crypto/des/cfb64enc.o crypto/des/cfb_enc.o crypto/des/des_enc.o crypto/des/ecb3_enc.o crypto/des/ecb_enc.o crypto/des/fcrypt.o crypto/des/fcrypt_b.o crypto/des/ofb64ede.o crypto/des/ofb64enc.o crypto/des/ofb_enc.o crypto/des/pcbc_enc.o crypto/des/qud_cksm.o crypto/des/rand_key.o crypto/des/set_key.o crypto/des/str2key.o crypto/des/xcbc_enc.o crypto/dh/dh_ameth.o crypto/dh/dh_asn1.o crypto/dh/dh_check.o crypto/dh/dh_depr.o crypto/dh/dh_err.o crypto/dh/dh_gen.o crypto/dh/dh_kdf.o crypto/dh/dh_key.o crypto/dh/dh_lib.o crypto/dh/dh_meth.o crypto/dh/dh_pmeth.o crypto/dh/dh_prn.o crypto/dh/dh_rfc5114.o crypto/dh/dh_rfc7919.o crypto/dsa/dsa_ameth.o crypto/dsa/dsa_asn1.o crypto/dsa/dsa_depr.o crypto/dsa/dsa_err.o crypto/dsa/dsa_gen.o crypto/dsa/dsa_key.o crypto/dsa/dsa_lib.o crypto/dsa/dsa_meth.o crypto/dsa/dsa_ossl.o crypto/dsa/dsa_pmeth.o crypto/dsa/dsa_prn.o crypto/dsa/dsa_sign.o crypto/dsa/dsa_vrf.o crypto/dso/dso_dl.o crypto/dso/dso_dlfcn.o crypto/dso/dso_err.o crypto/dso/dso_lib.o crypto/dso/dso_openssl.o crypto/dso/dso_vms.o crypto/dso/dso_win32.o crypto/ebcdic.o crypto/engine/eng_all.o crypto/engine/eng_cnf.o crypto/engine/eng_ctrl.o crypto/engine/eng_dyn.o crypto/engine/eng_err.o crypto/engine/eng_fat.o crypto/engine/eng_init.o crypto/engine/eng_lib.o crypto/engine/eng_list.o crypto/engine/eng_openssl.o crypto/engine/eng_pkey.o crypto/engine/eng_rdrand.o crypto/engine/eng_table.o crypto/engine/tb_asnmth.o crypto/engine/tb_cipher.o crypto/engine/tb_dh.o crypto/engine/tb_digest.o crypto/engine/tb_dsa.o crypto/engine/tb_eckey.o crypto/engine/tb_pkmeth.o crypto/engine/tb_rand.o crypto/engine/tb_rsa.o crypto/err/err.o crypto/err/err_all.o crypto/err/err_prn.o crypto/evp/bio_b64.o crypto/evp/bio_enc.o crypto/evp/bio_md.o crypto/evp/bio_ok.o crypto/evp/c_allc.o crypto/evp/c_alld.o crypto/evp/cmeth_lib.o crypto/evp/digest.o crypto/evp/e_aes.o crypto/evp/e_aes_cbc_hmac_sha1.o crypto/evp/e_aes_cbc_hmac_sha256.o crypto/evp/e_aria.o crypto/evp/e_bf.o crypto/evp/e_camellia.o crypto/evp/e_cast.o crypto/evp/e_chacha20_poly1305.o crypto/evp/e_des.o crypto/evp/e_des3.o crypto/evp/e_idea.o crypto/evp/e_null.o crypto/evp/e_old.o crypto/evp/e_rc2.o crypto/evp/e_rc4.o crypto/evp/e_rc4_hmac_md5.o crypto/evp/e_rc5.o crypto/evp/e_seed.o crypto/evp/e_sm4.o crypto/evp/e_xcbc_d.o crypto/evp/encode.o crypto/evp/evp_cnf.o crypto/evp/evp_enc.o crypto/evp/evp_err.o crypto/evp/evp_key.o crypto/evp/evp_lib.o crypto/evp/evp_pbe.o crypto/evp/evp_pkey.o crypto/evp/m_md2.o crypto/evp/m_md4.o crypto/evp/m_md5.o crypto/evp/m_md5_sha1.o crypto/evp/m_mdc2.o crypto/evp/m_null.o crypto/evp/m_ripemd.o crypto/evp/m_sha1.o crypto/evp/m_sha3.o crypto/evp/m_sigver.o crypto/evp/m_wp.o crypto/evp/names.o crypto/evp/p5_crpt.o crypto/evp/p5_crpt2.o crypto/evp/p_dec.o crypto/evp/p_enc.o crypto/evp/p_lib.o crypto/evp/p_open.o crypto/evp/p_seal.o crypto/evp/p_sign.o crypto/evp/p_verify.o crypto/evp/pbe_scrypt.o crypto/evp/pmeth_fn.o crypto/evp/pmeth_gn.o crypto/evp/pmeth_lib.o crypto/ex_data.o crypto/hmac/hm_ameth.o crypto/hmac/hm_pmeth.o crypto/hmac/hmac.o crypto/idea/i_cbc.o crypto/idea/i_cfb64.o crypto/idea/i_ecb.o crypto/idea/i_ofb64.o crypto/idea/i_skey.o crypto/init.o crypto/kdf/hkdf.o crypto/kdf/kdf_err.o crypto/kdf/scrypt.o crypto/kdf/tls1_prf.o crypto/lhash/lh_stats.o crypto/lhash/lhash.o crypto/md4/md4_dgst.o crypto/md4/md4_one.o crypto/md5/md5-x86_64.o crypto/md5/md5_dgst.o crypto/md5/md5_one.o crypto/mdc2/mdc2_one.o crypto/mdc2/mdc2dgst.o crypto/mem.o crypto/mem_dbg.o crypto/mem_sec.o crypto/modes/aesni-gcm-x86_64.o crypto/modes/cbc128.o crypto/modes/ccm128.o crypto/modes/cfb128.o crypto/modes/ctr128.o crypto/modes/cts128.o crypto/modes/gcm128.o crypto/modes/ghash-x86_64.o crypto/modes/ocb128.o crypto/modes/ofb128.o crypto/modes/wrap128.o crypto/modes/xts128.o crypto/o_dir.o crypto/o_fips.o crypto/o_fopen.o crypto/o_init.o crypto/o_str.o crypto/o_time.o crypto/objects/o_names.o crypto/objects/obj_dat.o crypto/objects/obj_err.o crypto/objects/obj_lib.o crypto/objects/obj_xref.o crypto/ocsp/ocsp_asn.o crypto/ocsp/ocsp_cl.o crypto/ocsp/ocsp_err.o crypto/ocsp/ocsp_ext.o crypto/ocsp/ocsp_ht.o crypto/ocsp/ocsp_lib.o crypto/ocsp/ocsp_prn.o crypto/ocsp/ocsp_srv.o crypto/ocsp/ocsp_vfy.o crypto/ocsp/v3_ocsp.o crypto/pem/pem_all.o crypto/pem/pem_err.o crypto/pem/pem_info.o crypto/pem/pem_lib.o crypto/pem/pem_oth.o crypto/pem/pem_pk8.o crypto/pem/pem_pkey.o crypto/pem/pem_sign.o crypto/pem/pem_x509.o crypto/pem/pem_xaux.o crypto/pem/pvkfmt.o crypto/pkcs12/p12_add.o crypto/pkcs12/p12_asn.o crypto/pkcs12/p12_attr.o crypto/pkcs12/p12_crpt.o crypto/pkcs12/p12_crt.o crypto/pkcs12/p12_decr.o crypto/pkcs12/p12_init.o crypto/pkcs12/p12_key.o crypto/pkcs12/p12_kiss.o crypto/pkcs12/p12_mutl.o crypto/pkcs12/p12_npas.o crypto/pkcs12/p12_p8d.o crypto/pkcs12/p12_p8e.o crypto/pkcs12/p12_sbag.o crypto/pkcs12/p12_utl.o crypto/pkcs12/pk12err.o crypto/pkcs7/bio_pk7.o crypto/pkcs7/pk7_asn1.o crypto/pkcs7/pk7_attr.o crypto/pkcs7/pk7_doit.o crypto/pkcs7/pk7_lib.o crypto/pkcs7/pk7_mime.o crypto/pkcs7/pk7_smime.o crypto/pkcs7/pkcs7err.o crypto/poly1305/poly1305-x86_64.o crypto/poly1305/poly1305.o crypto/poly1305/poly1305_ameth.o crypto/poly1305/poly1305_pmeth.o crypto/rand/drbg_ctr.o crypto/rand/drbg_lib.o crypto/rand/rand_egd.o crypto/rand/rand_err.o crypto/rand/rand_lib.o crypto/rand/rand_unix.o crypto/rand/rand_vms.o crypto/rand/rand_win.o crypto/rand/randfile.o crypto/rc2/rc2_cbc.o crypto/rc2/rc2_ecb.o crypto/rc2/rc2_skey.o crypto/rc2/rc2cfb64.o crypto/rc2/rc2ofb64.o crypto/rc4/rc4-md5-x86_64.o crypto/rc4/rc4-x86_64.o crypto/ripemd/rmd_dgst.o crypto/ripemd/rmd_one.o crypto/rsa/rsa_ameth.o crypto/rsa/rsa_asn1.o crypto/rsa/rsa_chk.o crypto/rsa/rsa_crpt.o crypto/rsa/rsa_depr.o crypto/rsa/rsa_err.o crypto/rsa/rsa_gen.o crypto/rsa/rsa_lib.o crypto/rsa/rsa_meth.o crypto/rsa/rsa_mp.o crypto/rsa/rsa_none.o crypto/rsa/rsa_oaep.o crypto/rsa/rsa_ossl.o crypto/rsa/rsa_pk1.o crypto/rsa/rsa_pmeth.o crypto/rsa/rsa_prn.o crypto/rsa/rsa_pss.o crypto/rsa/rsa_saos.o crypto/rsa/rsa_sign.o crypto/rsa/rsa_ssl.o crypto/rsa/rsa_x931.o crypto/rsa/rsa_x931g.o crypto/seed/seed.o crypto/seed/seed_cbc.o crypto/seed/seed_cfb.o crypto/seed/seed_ecb.o crypto/seed/seed_ofb.o crypto/sha/keccak1600.o crypto/sha/sha1-mb-x86_64.o crypto/sha/sha1-x86_64.o crypto/sha/sha1_one.o crypto/sha/sha1dgst.o crypto/sha/sha256-mb-x86_64.o crypto/sha/sha256-x86_64.o crypto/sha/sha256.o crypto/sha/sha512-x86_64.o crypto/sha/sha512.o crypto/siphash/siphash.o crypto/siphash/siphash_ameth.o crypto/siphash/siphash_pmeth.o crypto/sm3/m_sm3.o crypto/sm3/sm3.o crypto/sm4/sm4.o crypto/srp/srp_lib.o crypto/srp/srp_vfy.o crypto/stack/stack.o crypto/store/loader_file.o crypto/store/store_err.o crypto/store/store_init.o crypto/store/store_lib.o crypto/store/store_register.o crypto/store/store_strings.o crypto/threads_none.o crypto/threads_pthread.o crypto/threads_win.o crypto/ts/ts_asn1.o crypto/ts/ts_conf.o crypto/ts/ts_err.o crypto/ts/ts_lib.o crypto/ts/ts_req_print.o crypto/ts/ts_req_utils.o crypto/ts/ts_rsp_print.o crypto/ts/ts_rsp_sign.o crypto/ts/ts_rsp_utils.o crypto/ts/ts_rsp_verify.o crypto/ts/ts_verify_ctx.o crypto/txt_db/txt_db.o crypto/ui/ui_err.o crypto/ui/ui_lib.o crypto/ui/ui_null.o crypto/ui/ui_openssl.o crypto/ui/ui_util.o crypto/uid.o crypto/whrlpool/wp-x86_64.o crypto/whrlpool/wp_dgst.o crypto/x509/by_dir.o crypto/x509/by_file.o crypto/x509/t_crl.o crypto/x509/t_req.o crypto/x509/t_x509.o crypto/x509/x509_att.o crypto/x509/x509_cmp.o crypto/x509/x509_d2.o crypto/x509/x509_def.o crypto/x509/x509_err.o crypto/x509/x509_ext.o crypto/x509/x509_lu.o crypto/x509/x509_obj.o crypto/x509/x509_r2x.o crypto/x509/x509_req.o crypto/x509/x509_set.o crypto/x509/x509_trs.o crypto/x509/x509_txt.o crypto/x509/x509_v3.o crypto/x509/x509_vfy.o crypto/x509/x509_vpm.o crypto/x509/x509cset.o crypto/x509/x509name.o crypto/x509/x509rset.o crypto/x509/x509spki.o crypto/x509/x509type.o crypto/x509/x_all.o crypto/x509/x_attrib.o crypto/x509/x_crl.o crypto/x509/x_exten.o crypto/x509/x_name.o crypto/x509/x_pubkey.o crypto/x509/x_req.o crypto/x509/x_x509.o crypto/x509/x_x509a.o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_lib.o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_tree.o crypto/x509v3/v3_addr.o crypto/x509v3/v3_admis.o crypto/x509v3/v3_akey.o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_alt.o crypto/x509v3/v3_asid.o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_conf.o crypto/x509v3/v3_cpols.o crypto/x509v3/v3_crld.o crypto/x509v3/v3_enum.o crypto/x509v3/v3_extku.o crypto/x509v3/v3_genn.o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_info.o crypto/x509v3/v3_int.o crypto/x509v3/v3_lib.o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_pci.o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_pku.o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_prn.o crypto/x509v3/v3_purp.o crypto/x509v3/v3_skey.o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_tlsf.o crypto/x509v3/v3_utl.o crypto/x509v3/v3err.o crypto/x86_64cpuid.o \
                  -ldl -pthread
ranlib libcrypto.a || echo Never mind.
rm -f test/asn1_internal_test
rm -f test/chacha_internal_test
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/asn1_internal_test test/asn1_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/chacha_internal_test test/chacha_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
rm -f test/ctype_internal_test
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/ctype_internal_test test/ctype_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
if [ 'libcrypto.so' != 'libcrypto.so.1.1' ]; then \
	rm -f libcrypto.so; \
	ln -s libcrypto.so.1.1 libcrypto.so; \
fi
rm -f test/curve448_internal_test
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/curve448_internal_test test/curve448_internal_test.o \
	  test/libtestutil.a libcrypto.a -ldl -pthread
rm -f test/d2i_test
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/d2i_test test/d2i_test.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
rm -f test/destest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/destest test/destest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
rm -f test/dhtest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/dhtest test/dhtest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
rm -f test/drbgtest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/drbgtest test/drbgtest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
rm -f test/dsatest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/dsatest test/dsatest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
rm -f test/ecdsatest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/ecdsatest test/ecdsatest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
test/curve448_internal_test.o: In function `test_x448':
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:654: undefined reference to `X448'
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:656: undefined reference to `X448'
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:668: undefined reference to `X448'
test/curve448_internal_test.o: In function `test_ed448':
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:603: undefined reference to `ED448_sign'
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:606: undefined reference to `ED448_sign'
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:609: undefined reference to `ED448_sign'
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:612: undefined reference to `ED448_sign'
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:615: undefined reference to `ED448_sign'
test/curve448_internal_test.o:/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:618: more undefined references to `ED448_sign' follow
test/curve448_internal_test.o: In function `test_ed448':
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:630: undefined reference to `ED448ph_sign'
/home/openssl/run-checker/no-ec/../openssl/test/curve448_internal_test.c:634: undefined reference to `ED448ph_sign'
rm -f test/ecstresstest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/ecstresstest test/ecstresstest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
rm -f test/ectest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/ectest test/ectest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
rm -f test/enginetest
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/enginetest test/enginetest.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
clang: error: linker command failed with exit code 1 (use -v to see invocation)
rm -f test/evp_extra_test
Makefile:8496: recipe for target 'test/curve448_internal_test' failed
make[1]: *** [test/curve448_internal_test] Error 1
make[1]: *** Waiting for unfinished jobs....
${LDCMD:-clang} -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -L.  \
	-o test/evp_extra_test test/evp_extra_test.o \
	  test/libtestutil.a -lcrypto -ldl -pthread
make[1]: Leaving directory '/home/openssl/run-checker/no-ec'
Makefile:144: recipe for target 'all' failed
make: *** [all] Error 2

From appro at openssl.org  Wed Feb 21 09:14:37 2018
From: appro at openssl.org (Andy Polyakov)
Date: Wed, 21 Feb 2018 09:14:37 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519204477.560183.26065.nullmailer@dev.openssl.org>

The branch master has been updated
       via  0e5c8d566029a995d1fa23cac0f828c39519d97f (commit)
       via  c521e4392f8423af4bc64cdee57495e39e4e7a07 (commit)
       via  42efffcb70f9805e76c72005d91e5b4ce6979a5f (commit)
       via  127d6cf747652a182636597cbdf4d0d49d2e661a (commit)
      from  59bf467ccaff27ab2ffe7243b3a334675fea8ed9 (commit)


- Log -----------------------------------------------------------------
commit 0e5c8d566029a995d1fa23cac0f828c39519d97f
Author: Andy Polyakov <appro at openssl.org>
Date:   Mon Feb 19 15:19:49 2018 +0100

    Configure: engage x25519 assembly support.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/5408)

commit c521e4392f8423af4bc64cdee57495e39e4e7a07
Author: Andy Polyakov <appro at openssl.org>
Date:   Mon Feb 19 15:17:30 2018 +0100

    ec/curve25519.c: facilitate assembly implementations.
    
    Currently it's limited to 64-bit platforms only as minimum radix
    expected in assembly is 2^51.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/5408)

commit 42efffcb70f9805e76c72005d91e5b4ce6979a5f
Author: Andy Polyakov <appro at openssl.org>
Date:   Mon Feb 19 15:09:33 2018 +0100

    Add x25519-x86_64.pl module, mod 2^255-19 primitives.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/5408)

commit 127d6cf747652a182636597cbdf4d0d49d2e661a
Author: Andy Polyakov <appro at openssl.org>
Date:   Mon Feb 19 15:00:59 2018 +0100

    crypto/ec/curve25519.c: remove redundant fe[51]_cswap.
    
    3 least significant bits of the input scalar are explicitly cleared,
    hence swap variable has fixed value [of zero] upon exit from the loop.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/5408)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/00-base-templates.conf |   2 +-
 Configure                             |   3 +
 crypto/ec/asm/x25519-x86_64.pl        | 816 ++++++++++++++++++++++++++++++++++
 crypto/ec/build.info                  |   2 +
 crypto/ec/curve25519.c                | 323 ++++++++++++--
 5 files changed, 1109 insertions(+), 37 deletions(-)
 create mode 100755 crypto/ec/asm/x25519-x86_64.pl

diff --git a/Configurations/00-base-templates.conf b/Configurations/00-base-templates.conf
index 951aeaa..99c271e 100644
--- a/Configurations/00-base-templates.conf
+++ b/Configurations/00-base-templates.conf
@@ -203,7 +203,7 @@ my %targets=(
 	template	=> 1,
 	cpuid_asm_src   => "x86_64cpuid.s",
 	bn_asm_src      => "asm/x86_64-gcc.c x86_64-mont.s x86_64-mont5.s x86_64-gf2m.s rsaz_exp.c rsaz-x86_64.s rsaz-avx2.s",
-	ec_asm_src      => "ecp_nistz256.c ecp_nistz256-x86_64.s",
+	ec_asm_src      => "ecp_nistz256.c ecp_nistz256-x86_64.s x25519-x86_64.s",
 	aes_asm_src     => "aes-x86_64.s vpaes-x86_64.s bsaes-x86_64.s aesni-x86_64.s aesni-sha1-x86_64.s aesni-sha256-x86_64.s aesni-mb-x86_64.s",
 	md5_asm_src     => "md5-x86_64.s",
 	sha1_asm_src    => "sha1-x86_64.s sha256-x86_64.s sha512-x86_64.s sha1-mb-x86_64.s sha256-mb-x86_64.s",
diff --git a/Configure b/Configure
index 0cc554f..05618ed 100755
--- a/Configure
+++ b/Configure
@@ -1341,6 +1341,9 @@ unless ($disabled{asm}) {
     if ($target{ec_asm_src} =~ /ecp_nistz256/) {
 	push @{$config{defines}}, "ECP_NISTZ256_ASM";
     }
+    if ($target{ec_asm_src} =~ /x25519/) {
+	push @{$config{defines}}, "X25519_ASM";
+    }
     if ($target{padlock_asm_src} ne $table{DEFAULTS}->{padlock_asm_src}) {
 	push @{$config{defines}}, "PADLOCK_ASM";
     }
diff --git a/crypto/ec/asm/x25519-x86_64.pl b/crypto/ec/asm/x25519-x86_64.pl
new file mode 100755
index 0000000..6c0f738
--- /dev/null
+++ b/crypto/ec/asm/x25519-x86_64.pl
@@ -0,0 +1,816 @@
+#!/usr/bin/env perl
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+#
+# ====================================================================
+# Written by Andy Polyakov <appro at openssl.org> for the OpenSSL
+# project. The module is, however, dual licensed under OpenSSL and
+# CRYPTOGAMS licenses depending on where you obtain it. For further
+# details see http://www.openssl.org/~appro/cryptogams/.
+# ====================================================================
+#
+# X25519 lower-level primitives for x86_86.
+#
+# February 2018.
+#
+# This module implements radix 2^51 multiplication and squaring, and
+# radix 2^64 multiplication, squaring, addition, subtraction and final
+# reduction. Latter radix is used on ADCX/ADOX-capable processors such
+# as Broadwell. On related note one should mention that there are
+# vector implementations that provide significantly better performance
+# on some processors(*), but they are large and overly complex. Which
+# in combination with them being effectively processor-specific makes
+# the undertaking hard to justify. The goal for this implementation
+# is rather versatility and simplicity [and ultimately formal
+# verification].
+#
+# (*)	For example sandy2x should provide ~30% improvement on Sandy
+#	Bridge, but only nominal ~5% on Haswell [and big loss on
+#	Broadwell and successors].
+#
+######################################################################
+# Improvement coefficients:
+#
+#			amd64-51(*)	gcc-5.x(**)
+#
+# P4			+22%		+40%
+# Sandy Bridge		-3%		+11%
+# Haswell		-1%		+13%
+# Broadwell(***)	+26%		+30%
+# Skylake(***)		+30%		+47%
+# Silvermont		+20%		+26%
+# Goldmont		+40%		+50%
+# Bulldozer		+20%		+9%
+# Ryzen(***)		+35%		+32%
+# VIA			+170%		+120%
+#
+# (*)	amd64-51 is popular assembly implementation with 2^51 radix,
+#	only multiplication and squaring subroutines were linked
+#	for comparison, but not complete ladder step; gain on most
+#	processors is because this module refrains from shld, and
+#	minor regression on others is because this does result in
+#	higher instruction count;
+# (**)	compiler is free to inline functions, in assembly one would
+#	need to implement ladder step to do that, and it will improve
+#	performance by several percent;
+# (***)	ADCX/ADOX result for 2^64 radix, there is no corresponding
+#	C implementation, so that comparison is always against
+#	2^51 radix;
+
+$flavour = shift;
+$output  = shift;
+if ($flavour =~ /\./) { $output = $flavour; undef $flavour; }
+
+$win64=0; $win64=1 if ($flavour =~ /[nm]asm|mingw64/ || $output =~ /\.asm$/);
+
+$0 =~ m/(.*[\/\\])[^\/\\]+$/; $dir=$1;
+( $xlate="${dir}x86_64-xlate.pl" and -f $xlate ) or
+( $xlate="${dir}../../perlasm/x86_64-xlate.pl" and -f $xlate) or
+die "can't locate x86_64-xlate.pl";
+
+open OUT,"| \"$^X\" \"$xlate\" $flavour \"$output\"";
+*STDOUT=*OUT;
+
+if (`$ENV{CC} -Wa,-v -c -o /dev/null -x assembler /dev/null 2>&1`
+		=~ /GNU assembler version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.23);
+}
+
+if (!$addx && $win64 && ($flavour =~ /nasm/ || $ENV{ASM} =~ /nasm/) &&
+	    `nasm -v 2>&1` =~ /NASM version ([2-9]\.[0-9]+)/) {
+	$addx = ($1>=2.10);
+}
+
+if (!$addx && $win64 && ($flavour =~ /masm/ || $ENV{ASM} =~ /ml64/) &&
+	    `ml64 2>&1` =~ /Version ([0-9]+)\./) {
+	$addx = ($1>=12);
+}
+
+if (!$addx && `$ENV{CC} -v 2>&1` =~ /((?:^clang|LLVM) version|.*based on LLVM) ([3-9])\.([0-9]+)/) {
+	my $ver = $2 + $3/100.0;	# 3.1->3.01, 3.10->3.10
+	$addx = ($ver>=3.03);
+}
+
+$code.=<<___;
+.text
+
+.globl	x25519_fe51_mul
+.type	x25519_fe51_mul,\@function,3
+.align	32
+x25519_fe51_mul:
+	push	%rbp
+	push	%rbx
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	lea	-8*5(%rsp),%rsp
+
+	mov	8*0(%rsi),%rax		# f[0]
+	mov	8*0(%rdx),%r11		# load g[0-4]
+	mov	8*1(%rdx),%r12
+	mov	8*2(%rdx),%r13
+	mov	8*3(%rdx),%rbp
+	mov	8*4(%rdx),%r14
+
+	mov	%rdi,8*4(%rsp)		# offload 1st argument
+	mov	%rax,%rdi
+	mulq	%r11			# f[0]*g[0]
+	mov	%r11,8*0(%rsp)		# offload g[0]
+	mov	%rax,%rbx		# %rbx:%rcx = h0
+	mov	%rdi,%rax
+	mov	%rdx,%rcx
+	mulq	%r12			# f[0]*g[1]
+	mov	%r12,8*1(%rsp)		# offload g[1]
+	mov	%rax,%r8		# %r8:%r9 = h1
+	mov	%rdi,%rax
+	lea	(%r14,%r14,8),%r15
+	mov	%rdx,%r9
+	mulq	%r13			# f[0]*g[2]
+	mov	%r13,8*2(%rsp)		# offload g[2]
+	mov	%rax,%r10		# %r10:%r11 = h2
+	mov	%rdi,%rax
+	lea	(%r14,%r15,2),%rdi	# g[4]*19
+	mov	%rdx,%r11
+	mulq	%rbp			# f[0]*g[3]
+	mov	%rax,%r12		# %r12:%r13 = h3
+	mov	8*0(%rsi),%rax		# f[0]
+	mov	%rdx,%r13
+	mulq	%r14			# f[0]*g[4]
+	mov	%rax,%r14		# %r14:%r15 = h4
+	mov	8*1(%rsi),%rax		# f[1]
+	mov	%rdx,%r15
+
+	mulq	%rdi			# f[1]*g[4]*19
+	add	%rax,%rbx
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%rcx
+	mulq	%rdi			# f[2]*g[4]*19
+	add	%rax,%r8
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r9
+	mulq	%rdi			# f[3]*g[4]*19
+	add	%rax,%r10
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r11
+	mulq	%rdi			# f[4]*g[4]*19
+	imulq	\$19,%rbp,%rdi		# g[3]*19
+	add	%rax,%r12
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[1]*g[3]
+	mov	8*2(%rsp),%rbp		# g[2]
+	add	%rax,%r14
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r15
+
+	mulq	%rdi			# f[2]*g[3]*19
+	add	%rax,%rbx
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%rcx
+	mulq	%rdi			# f[3]*g[3]*19
+	add	%rax,%r8
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r9
+	mulq	%rdi			# f[4]*g[3]*19
+	imulq	\$19,%rbp,%rdi		# g[2]*19
+	add	%rax,%r10
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%r11
+	mulq	%rbp			# f[1]*g[2]
+	add	%rax,%r12
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[2]*g[2]
+	mov	8*1(%rsp),%rbp		# g[1]
+	add	%rax,%r14
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r15
+
+	mulq	%rdi			# f[3]*g[2]*19
+	add	%rax,%rbx
+	mov	8*4(%rsi),%rax		# f[3]
+	adc	%rdx,%rcx
+	mulq	%rdi			# f[4]*g[2]*19
+	add	%rax,%r8
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%r9
+	mulq	%rbp			# f[1]*g[1]
+	imulq	\$19,%rbp,%rdi
+	add	%rax,%r10
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r11
+	mulq	%rbp			# f[2]*g[1]
+	add	%rax,%r12
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[3]*g[1]
+	mov	8*0(%rsp),%rbp		# g[0]
+	add	%rax,%r14
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r15
+
+	mulq	%rdi			# f[4]*g[1]*19
+	add	%rax,%rbx
+	mov	8*1(%rsi),%rax		# f[1]
+	adc	%rdx,%rcx
+	mul	%rbp			# f[1]*g[0]
+	add	%rax,%r8
+	mov	8*2(%rsi),%rax		# f[2]
+	adc	%rdx,%r9
+	mul	%rbp			# f[2]*g[0]
+	add	%rax,%r10
+	mov	8*3(%rsi),%rax		# f[3]
+	adc	%rdx,%r11
+	mul	%rbp			# f[3]*g[0]
+	add	%rax,%r12
+	mov	8*4(%rsi),%rax		# f[4]
+	adc	%rdx,%r13
+	mulq	%rbp			# f[4]*g[0]
+	add	%rax,%r14
+	adc	%rdx,%r15
+
+	mov	8*4(%rsp),%rdi		# restore 1st argument
+	jmp	.Lreduce51
+.size	x25519_fe51_mul,.-x25519_fe51_mul
+
+.globl	x25519_fe51_sqr
+.type	x25519_fe51_sqr,\@function,2
+.align	32
+x25519_fe51_sqr:
+	push	%rbp
+	push	%rbx
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	lea	-8*5(%rsp),%rsp
+
+	mov	8*0(%rsi),%rax		# g[0]
+	mov	8*2(%rsi),%r15		# g[2]
+	mov	8*4(%rsi),%rbp		# g[4]
+
+	mov	%rdi,8*4(%rsp)		# offload 1st argument
+	lea	(%rax,%rax),%r14
+	mulq	%rax			# g[0]*g[0]
+	mov	%rax,%rbx
+	mov	8*1(%rsi),%rax		# g[1]
+	mov	%rdx,%rcx
+	mulq	%r14			# 2*g[0]*g[1]
+	mov	%rax,%r8
+	mov	%r15,%rax
+	mov	%r15,8*0(%rsp)		# offload g[2]
+	mov	%rdx,%r9
+	mulq	%r14			# 2*g[0]*g[2]
+	mov	%rax,%r10
+	mov	8*3(%rsi),%rax
+	mov	%rdx,%r11
+	imulq	\$19,%rbp,%rdi		# g[4]*19
+	mulq	%r14			# 2*g[0]*g[3]
+	mov	%rax,%r12
+	mov	%rbp,%rax
+	mov	%rdx,%r13
+	mulq	%r14			# 2*g[0]*g[4]
+	mov	%rax,%r14
+	mov	%rbp,%rax
+	mov	%rdx,%r15
+
+	mulq	%rdi			# g[4]*g[4]*19
+	add	%rax,%r12
+	mov	8*1(%rsi),%rax		# g[1]
+	adc	%rdx,%r13
+
+	mov	8*3(%rsi),%rsi		# g[3]
+	lea	(%rax,%rax),%rbp
+	mulq	%rax			# g[1]*g[1]
+	add	%rax,%r10
+	mov	8*0(%rsp),%rax		# g[2]
+	adc	%rdx,%r11
+	mulq	%rbp			# 2*g[1]*g[2]
+	add	%rax,%r12
+	mov	%rbp,%rax
+	adc	%rdx,%r13
+	mulq	%rsi			# 2*g[1]*g[3]
+	add	%rax,%r14
+	mov	%rbp,%rax
+	adc	%rdx,%r15
+	imulq	\$19,%rsi,%rbp		# g[3]*19
+	mulq	%rdi			# 2*g[1]*g[4]*19
+	add	%rax,%rbx
+	lea	(%rsi,%rsi),%rax
+	adc	%rdx,%rcx
+
+	mulq	%rdi			# 2*g[3]*g[4]*19
+	add	%rax,%r10
+	mov	%rsi,%rax
+	adc	%rdx,%r11
+	mulq	%rbp			# g[3]*g[3]*19
+	add	%rax,%r8
+	mov	8*0(%rsp),%rax		# g[2]
+	adc	%rdx,%r9
+
+	lea	(%rax,%rax),%rsi
+	mulq	%rax			# g[2]*g[2]
+	add	%rax,%r14
+	mov	%rbp,%rax
+	adc	%rdx,%r15
+	mulq	%rsi			# 2*g[2]*g[3]*19
+	add	%rax,%rbx
+	mov	%rsi,%rax
+	adc	%rdx,%rcx
+	mulq	%rdi			# 2*g[2]*g[4]*19
+	add	%rax,%r8
+	adc	%rdx,%r9
+
+	mov	8*4(%rsp),%rdi		# restore 1st argument
+	jmp	.Lreduce51
+
+.align	32
+.Lreduce51:
+	mov	\$0x7ffffffffffff,%rbp
+
+	mov	%r10,%rdx
+	shr	\$51,%r10
+	shl	\$13,%r11
+	and	%rbp,%rdx		# %rdx = g2 = h2 & mask
+	or	%r10,%r11		# h2>>51
+	add	%r11,%r12
+	adc	\$0,%r13		# h3 += h2>>51
+
+	mov	%rbx,%rax
+	shr	\$51,%rbx
+	shl	\$13,%rcx
+	and	%rbp,%rax		# %rax = g0 = h0 & mask
+	or	%rbx,%rcx		# h0>>51
+	add	%rcx,%r8		# h1 += h0>>51
+	adc	\$0,%r9
+
+	mov	%r12,%rbx
+	shr	\$51,%r12
+	shl	\$13,%r13
+	and	%rbp,%rbx		# %rbx = g3 = h3 & mask
+	or	%r12,%r13		# h3>>51
+	add	%r13,%r14		# h4 += h3>>51
+	adc	\$0,%r15
+
+	mov	%r8,%rcx
+	shr	\$51,%r8
+	shl	\$13,%r9
+	and	%rbp,%rcx		# %rcx = g1 = h1 & mask
+	or	%r8,%r9
+	add	%r9,%rdx		# g2 += h1>>51
+
+	mov	%r14,%r10
+	shr	\$51,%r14
+	shl	\$13,%r15
+	and	%rbp,%r10		# %r10 = g4 = h0 & mask
+	or	%r14,%r15		# h0>>51
+
+	lea	(%r15,%r15,8),%r14
+	lea	(%r15,%r14,2),%r15
+	add	%r15,%rax		# g0 += (h0>>51)*19
+
+	mov	%rdx,%r8
+	and	%rbp,%rdx		# g2 &= mask
+	shr	\$51,%r8
+	add	%r8,%rbx		# g3 += g2>>51
+
+	mov	%rax,%r9
+	and	%rbp,%rax		# g0 &= mask
+	shr	\$51,%r9
+	add	%r9,%rcx		# g1 += g0>>51
+
+	mov	%rax,8*0(%rdi)		# save the result
+	mov	%rcx,8*1(%rdi)
+	mov	%rdx,8*2(%rdi)
+	mov	%rbx,8*3(%rdi)
+	mov	%r10,8*4(%rdi)
+
+	mov	8*5(%rsp),%r15
+	mov	8*6(%rsp),%r14
+	mov	8*7(%rsp),%r13
+	mov	8*8(%rsp),%r12
+	mov	8*9(%rsp),%rbx
+	mov	8*10(%rsp),%rbp
+	lea	8*11(%rsp),%rsp
+	ret
+.size	x25519_fe51_sqr,.-x25519_fe51_sqr
+
+.globl	x25519_fe51_mul121666
+.type	x25519_fe51_mul121666,\@function,2
+.align	32
+x25519_fe51_mul121666:
+	push	%rbp
+	push	%rbx
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	mov	\$121666,%eax
+	lea	-8*5(%rsp),%rsp
+
+	mulq	8*0(%rsi)
+	mov	%rax,%rbx		# %rbx:%rcx = h0
+	mov	\$121666,%eax
+	mov	%rdx,%rcx
+	mulq	8*1(%rsi)
+	mov	%rax,%r8		# %r8:%r9 = h1
+	mov	\$121666,%eax
+	mov	%rdx,%r9
+	mulq	8*2(%rsi)
+	mov	%rax,%r10		# %r10:%r11 = h2
+	mov	\$121666,%eax
+	mov	%rdx,%r11
+	mulq	8*3(%rsi)
+	mov	%rax,%r12		# %r12:%r13 = h3
+	mov	\$121666,%eax		# f[0]
+	mov	%rdx,%r13
+	mulq	8*4(%rsi)
+	mov	%rax,%r14		# %r14:%r15 = h4
+	mov	%rdx,%r15
+
+	jmp	.Lreduce51
+.size	x25519_fe51_mul121666,.-x25519_fe51_mul121666
+___
+########################################################################
+# Base 2^64 subroutines modulo 2*(2^255-19)
+#
+if ($addx) {
+my ($acc0,$acc1,$acc2,$acc3,$acc4,$acc5,$acc6,$acc7) = map("%r$_",(8..15));
+
+$code.=<<___;
+.extern	OPENSSL_ia32cap_P
+.globl	x25519_fe64_eligible
+.type	x25519_fe64_eligible,\@abi-omnipotent
+.align	32
+x25519_fe64_eligible:
+	mov	OPENSSL_ia32cap_P+8(%rip),%ecx
+	xor	%eax,%eax
+	and	\$0x80100,%ecx
+	cmp	\$0x80100,%ecx
+	cmove	%ecx,%eax
+	ret
+.size	x25519_fe64_eligible,.-x25519_fe64_eligible
+
+.globl	x25519_fe64_mul
+.type	x25519_fe64_mul,\@function,3
+.align	32
+x25519_fe64_mul:
+	push	%rbp
+	push	%rbx
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	push	%rdi			# offload dst
+	lea	-8*2(%rsp),%rsp
+
+	mov	%rdx,%rax
+	mov	8*0(%rdx),%rbp		# b[0]
+	mov	8*0(%rsi),%rdx		# a[0]
+	mov	8*1(%rax),%rcx		# b[1]
+	mov	8*2(%rax),$acc6		# b[2]
+	mov	8*3(%rax),$acc7		# b[3]
+
+	mulx	%rbp,$acc0,%rax		# a[0]*b[0]
+	xor	%edi,%edi		# cf=0,of=0
+	mulx	%rcx,$acc1,%rbx		# a[0]*b[1]
+	adcx	%rax,$acc1
+	mulx	$acc6,$acc2,%rax	# a[0]*b[2]
+	adcx	%rbx,$acc2
+	mulx	$acc7,$acc3,$acc4	# a[0]*b[3]
+	 mov	8*1(%rsi),%rdx		# a[1]
+	adcx	%rax,$acc3
+	mov	$acc6,(%rsp)		# offload b[2]
+	adcx	%rdi,$acc4		# cf=0
+
+	mulx	%rbp,%rax,%rbx		# a[1]*b[0]
+	adox	%rax,$acc1
+	adcx	%rbx,$acc2
+	mulx	%rcx,%rax,%rbx		# a[1]*b[1]
+	adox	%rax,$acc2
+	adcx	%rbx,$acc3
+	mulx	$acc6,%rax,%rbx		# a[1]*b[2]
+	adox	%rax,$acc3
+	adcx	%rbx,$acc4
+	mulx	$acc7,%rax,$acc5	# a[1]*b[3]
+	 mov	8*2(%rsi),%rdx		# a[2]
+	adox	%rax,$acc4
+	adcx	%rdi,$acc5		# cf=0
+	adox	%rdi,$acc5		# of=0
+
+	mulx	%rbp,%rax,%rbx		# a[2]*b[0]
+	adcx	%rax,$acc2
+	adox	%rbx,$acc3
+	mulx	%rcx,%rax,%rbx		# a[2]*b[1]
+	adcx	%rax,$acc3
+	adox	%rbx,$acc4
+	mulx	$acc6,%rax,%rbx		# a[2]*b[2]
+	adcx	%rax,$acc4
+	adox	%rbx,$acc5
+	mulx	$acc7,%rax,$acc6	# a[2]*b[3]
+	 mov	8*3(%rsi),%rdx		# a[3]
+	adcx	%rax,$acc5
+	adox	%rdi,$acc6		# of=0
+	adcx	%rdi,$acc6		# cf=0
+
+	mulx	%rbp,%rax,%rbx		# a[3]*b[0]
+	adox	%rax,$acc3
+	adcx	%rbx,$acc4
+	mulx	%rcx,%rax,%rbx		# a[3]*b[1]
+	adox	%rax,$acc4
+	adcx	%rbx,$acc5
+	mulx	(%rsp),%rax,%rbx	# a[3]*b[2]
+	adox	%rax,$acc5
+	adcx	%rbx,$acc6
+	mulx	$acc7,%rax,$acc7	# a[3]*b[3]
+	 mov	\$38,%edx
+	adox	%rax,$acc6
+	adcx	%rdi,$acc7		# cf=0
+	adox	%rdi,$acc7		# of=0
+
+	jmp	.Lreduce64
+.size	x25519_fe64_mul,.-x25519_fe64_mul
+
+.globl	x25519_fe64_sqr
+.type	x25519_fe64_sqr,\@function,2
+.align	32
+x25519_fe64_sqr:
+	push	%rbp
+	push	%rbx
+	push	%r12
+	push	%r13
+	push	%r14
+	push	%r15
+	push	%rdi			# offload dst
+	lea	-8*2(%rsp),%rsp
+
+	mov	8*0(%rsi),%rdx		# a[0]
+	mov	8*1(%rsi),%rcx		# a[1]
+	mov	8*2(%rsi),%rbp		# a[2]
+	mov	8*3(%rsi),%rsi		# a[3]
+
+	################################################################
+	mulx	%rdx,$acc0,$acc7	# a[0]*a[0]
+	mulx	%rcx,$acc1,%rax		# a[0]*a[1]
+	xor	%edi,%edi		# cf=0,of=0
+	mulx	%rbp,$acc2,%rbx		# a[0]*a[2]
+	adcx	%rax,$acc2
+	mulx	%rsi,$acc3,$acc4	# a[0]*a[3]
+	 mov	%rcx,%rdx		# a[1]
+	adcx	%rbx,$acc3
+	adcx	%rdi,$acc4		# cf=0
+
+	################################################################
+	mulx	%rbp,%rax,%rbx		# a[1]*a[2]
+	adox	%rax,$acc3
+	adcx	%rbx,$acc4
+	mulx	%rsi,%rax,$acc5		# a[1]*a[3]
+	 mov	%rbp,%rdx		# a[2]
+	adox	%rax,$acc4
+	adcx	%rdi,$acc5
+
+	################################################################
+	mulx	%rsi,%rax,$acc6		# a[2]*a[3]
+	 mov	%rcx,%rdx		# a[1]
+	adox	%rax,$acc5
+	adcx	%rdi,$acc6		# cf=0
+	adox	%rdi,$acc6		# of=0
+
+	 adcx	$acc1,$acc1		# acc1:6<<1
+	adox	$acc7,$acc1
+	 adcx	$acc2,$acc2
+	mulx	%rdx,%rax,%rbx		# a[1]*a[1]
+	 mov	%rbp,%rdx		# a[2]
+	 adcx	$acc3,$acc3
+	adox	%rax,$acc2
+	 adcx	$acc4,$acc4
+	adox	%rbx,$acc3
+	mulx	%rdx,%rax,%rbx		# a[2]*a[2]
+	 mov	%rsi,%rdx		# a[3]
+	 adcx	$acc5,$acc5
+	adox	%rax,$acc4
+	 adcx	$acc6,$acc6
+	adox	%rbx,$acc5
+	mulx	%rdx,%rax,$acc7		# a[3]*a[3]
+	 mov	\$38,%edx
+	adox	%rax,$acc6
+	adcx	%rdi,$acc7		# cf=0
+	adox	%rdi,$acc7		# of=0
+	jmp	.Lreduce64
+
+.align	32
+.Lreduce64:
+	mulx	$acc4,%rax,%rbx
+	adcx	%rax,$acc0
+	adox	%rbx,$acc1
+	mulx	$acc5,%rax,%rbx
+	adcx	%rax,$acc1
+	adox	%rbx,$acc2
+	mulx	$acc6,%rax,%rbx
+	adcx	%rax,$acc2
+	adox	%rbx,$acc3
+	mulx	$acc7,%rax,$acc4
+	adcx	%rax,$acc3
+	adox	%rdi,$acc4
+	adcx	%rdi,$acc4
+
+	mov	8*2(%rsp),%rdi		# restore dst
+	imulq	%rdx,$acc4
+
+	add	$acc4,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	adc	\$0,$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	add	%rax,$acc0
+	adc	\$0,$acc1
+	mov	$acc0,8*0(%rdi)
+	adc	\$0,$acc2
+	mov	$acc1,8*1(%rdi)
+	adc	\$0,$acc3
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+
+	mov	8*3(%rsp),%r15
+	mov	8*4(%rsp),%r14
+	mov	8*5(%rsp),%r13
+	mov	8*6(%rsp),%r12
+	mov	8*7(%rsp),%rbx
+	mov	8*8(%rsp),%rbp
+	lea	8*9(%rsp),%rsp
+	ret
+.size	x25519_fe64_sqr,.-x25519_fe64_sqr
+
+.globl	x25519_fe64_mul121666
+.type	x25519_fe64_mul121666,\@function,2
+.align	32
+x25519_fe64_mul121666:
+	mov	\$121666,%edx
+	mulx	8*0(%rsi),$acc0,%rcx
+	mulx	8*1(%rsi),$acc1,%rax
+	add	%rcx,$acc1
+	mulx	8*2(%rsi),$acc2,%rcx
+	adc	%rax,$acc2
+	mulx	8*3(%rsi),$acc3,%rax
+	adc	%rcx,$acc3
+	adc	\$0,%rax
+
+	imulq	\$38,%rax,%rax
+
+	add	%rax,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	adc	\$0,$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	add	%rax,$acc0
+	adc	\$0,$acc1
+	mov	$acc0,8*0(%rdi)
+	adc	\$0,$acc2
+	mov	$acc1,8*1(%rdi)
+	adc	\$0,$acc3
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+
+	ret
+.size	x25519_fe64_mul121666,.-x25519_fe64_mul121666
+
+.globl	x25519_fe64_add
+.type	x25519_fe64_add,\@function,3
+.align	32
+x25519_fe64_add:
+	mov	8*0(%rsi),$acc0
+	mov	8*1(%rsi),$acc1
+	mov	8*2(%rsi),$acc2
+	mov	8*3(%rsi),$acc3
+
+	add	8*0(%rdx),$acc0
+	adc	8*1(%rdx),$acc1
+	adc	8*2(%rdx),$acc2
+	adc	8*3(%rdx),$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	add	%rax,$acc0
+	adc	\$0,$acc1
+	mov	$acc0,8*0(%rdi)
+	adc	\$0,$acc2
+	mov	$acc1,8*1(%rdi)
+	adc	\$0,$acc3
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+
+	ret
+.size	x25519_fe64_add,.-x25519_fe64_add
+
+.globl	x25519_fe64_sub
+.type	x25519_fe64_sub,\@function,3
+.align	32
+x25519_fe64_sub:
+	mov	8*0(%rsi),$acc0
+	mov	8*1(%rsi),$acc1
+	mov	8*2(%rsi),$acc2
+	mov	8*3(%rsi),$acc3
+
+	sub	8*0(%rdx),$acc0
+	sbb	8*1(%rdx),$acc1
+	sbb	8*2(%rdx),$acc2
+	sbb	8*3(%rdx),$acc3
+
+	sbb	%rax,%rax		# cf -> mask
+	and	\$38,%rax
+
+	sub	%rax,$acc0
+	sbb	\$0,$acc1
+	mov	$acc0,8*0(%rdi)
+	sbb	\$0,$acc2
+	mov	$acc1,8*1(%rdi)
+	sbb	\$0,$acc3
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+
+	ret
+.size	x25519_fe64_sub,.-x25519_fe64_sub
+
+.globl	x25519_fe64_tobytes
+.type	x25519_fe64_tobytes,\@function,2
+.align	32
+x25519_fe64_tobytes:
+	mov	8*0(%rsi),$acc0
+	mov	8*1(%rsi),$acc1
+	mov	8*2(%rsi),$acc2
+	mov	8*3(%rsi),$acc3
+
+	################################# reduction modulo 2^255-19
+	lea	($acc3,$acc3),%rax
+	sar	\$63,$acc3		# most significant bit -> mask
+	shr	\$1,%rax		# most significant bit cleared
+	and	\$19,$acc3
+
+	add	$acc3,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	adc	\$0,%rax
+
+	lea	(%rax,%rax),$acc3
+	sar	\$63,%rax		# most significant bit -> mask
+	shr	\$1,$acc3		# most significant bit cleared
+	and	\$19,%rax
+
+	add	%rax,$acc0
+	adc	\$0,$acc1
+	adc	\$0,$acc2
+	adc	\$0,$acc3
+
+	mov	$acc0,8*0(%rdi)
+	mov	$acc1,8*1(%rdi)
+	mov	$acc2,8*2(%rdi)
+	mov	$acc3,8*3(%rdi)
+
+	ret
+.size	x25519_fe64_tobytes,.-x25519_fe64_tobytes
+___
+} else {
+$code.=<<___;
+.globl	x25519_fe64_eligible
+.type	x25519_fe64_eligible,\@function
+.align	32
+x25519_fe64_eligible:
+	xor	%eax,%eax
+	ret
+.size	x25519_fe64_eligible,.-x25519_fe64_eligible
+
+.globl	x25519_fe64_mul
+.globl	x25519_fe64_sqr
+.globl	x25519_fe64_mul121666
+.globl	x25519_fe64_add
+.globl	x25519_fe64_sub
+.globl	x25519_fe64_tobytes
+x25519_fe64_mul:
+x25519_fe64_sqr:
+x25519_fe64_mul121666:
+x25519_fe64_add:
+x25519_fe64_sub:
+x25519_fe64_sub:
+x25519_fe64_tobytes:
+	.byte	0x0f,0x0b	# ud2
+___
+}
+$code.=<<___;
+.asciz	"X25519 primitives for x86_64, CRYPTOGAMS by <appro\@openssl.org>"
+___
+
+$code =~ s/\`([^\`]*)\`/eval $1/gem;
+print $code;
+close $STDOUT;
diff --git a/crypto/ec/build.info b/crypto/ec/build.info
index b6549a1..1e7814f 100644
--- a/crypto/ec/build.info
+++ b/crypto/ec/build.info
@@ -26,6 +26,8 @@ GENERATE[ecp_nistz256-armv8.S]=asm/ecp_nistz256-armv8.pl $(PERLASM_SCHEME)
 INCLUDE[ecp_nistz256-armv8.o]=..
 GENERATE[ecp_nistz256-ppc64.s]=asm/ecp_nistz256-ppc64.pl $(PERLASM_SCHEME)
 
+GENERATE[x25519-x86_64.s]=asm/x25519-x86_64.pl $(PERLASM_SCHEME)
+
 BEGINRAW[Makefile]
 {- $builddir -}/ecp_nistz256-%.S:	{- $sourcedir -}/asm/ecp_nistz256-%.pl
 	CC="$(CC)" $(PERL) $< $(PERLASM_SCHEME) $@
diff --git a/crypto/ec/curve25519.c b/crypto/ec/curve25519.c
index 2c0bd5f..f354107 100644
--- a/crypto/ec/curve25519.c
+++ b/crypto/ec/curve25519.c
@@ -11,16 +11,19 @@
 #include "ec_lcl.h"
 #include <openssl/sha.h>
 
-#if !defined(PEDANTIC) && \
-    !defined(__sparc__) && \
-    (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16)
+#if defined(X25519_ASM) \
+    || ( !defined(PEDANTIC) && \
+         !defined(__sparc__) && \
+         (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16) )
 /*
  * Base 2^51 implementation.
  */
 # define BASE_2_51_IMPLEMENTED
 
 typedef uint64_t fe51[5];
+# if !defined(X25519_ASM)
 typedef unsigned __int128 u128;
+# endif
 
 static const uint64_t MASK51 = 0x7ffffffffffff;
 
@@ -132,6 +135,250 @@ static void fe51_tobytes(uint8_t *s, const fe51 h)
     s[31] = h4 >> 44;
 }
 
+# ifdef X25519_ASM
+void x25519_fe51_mul(fe51 h, const fe51 f, const fe51 g);
+void x25519_fe51_sqr(fe51 h, const fe51 f);
+void x25519_fe51_mul121666(fe51 h, fe51 f);
+#  define fe51_mul x25519_fe51_mul
+#  define fe51_sq  x25519_fe51_sqr
+#  define fe51_mul121666 x25519_fe51_mul121666
+
+#  if defined(__x86_64) || defined(__x86_64__) || \
+      defined(_M_AMD64) || defined(_M_X64)
+
+#   define BASE_2_64_IMPLEMENTED
+
+typedef uint64_t fe64[4];
+
+int x25519_fe64_eligible();
+
+/*
+ * There are no reference C implementations for this radix.
+ */
+void x25519_fe64_mul(fe64 h, const fe64 f, const fe64 g);
+void x25519_fe64_sqr(fe64 h, const fe64 f);
+void x25519_fe64_mul121666(fe64 h, fe64 f);
+void x25519_fe64_add(fe64 h, const fe64 f, const fe64 g);
+void x25519_fe64_sub(fe64 h, const fe64 f, const fe64 g);
+void x25519_fe64_tobytes(uint8_t *s, const fe64 f);
+#   define fe64_mul x25519_fe64_mul
+#   define fe64_sqr x25519_fe64_sqr
+#   define fe64_mul121666 x25519_fe64_mul121666
+#   define fe64_add x25519_fe64_add
+#   define fe64_sub x25519_fe64_sub
+#   define fe64_tobytes x25519_fe64_tobytes
+
+static uint64_t load_8(const uint8_t *in)
+{
+    uint64_t result;
+
+    result = in[0];
+    result |= ((uint64_t)in[1]) << 8;
+    result |= ((uint64_t)in[2]) << 16;
+    result |= ((uint64_t)in[3]) << 24;
+    result |= ((uint64_t)in[4]) << 32;
+    result |= ((uint64_t)in[5]) << 40;
+    result |= ((uint64_t)in[6]) << 48;
+    result |= ((uint64_t)in[7]) << 56;
+
+    return result;
+}
+
+static void fe64_frombytes(fe64 h, const uint8_t *s)
+{
+    h[0] = load_8(s);
+    h[1] = load_8(s + 8);
+    h[2] = load_8(s + 16);
+    h[3] = load_8(s + 24) & 0x7fffffffffffffff;
+}
+
+static void fe64_0(fe64 h)
+{
+    h[0] = 0;
+    h[1] = 0;
+    h[2] = 0;
+    h[3] = 0;
+}
+
+static void fe64_1(fe64 h)
+{
+    h[0] = 1;
+    h[1] = 0;
+    h[2] = 0;
+    h[3] = 0;
+}
+
+static void fe64_copy(fe64 h, const fe64 f)
+{
+    h[0] = f[0];
+    h[1] = f[1];
+    h[2] = f[2];
+    h[3] = f[3];
+}
+
+static void fe64_cswap(fe64 f, fe64 g, unsigned int b)
+{
+    int i;
+    uint64_t mask = 0 - (uint64_t)b;
+
+    for (i = 0; i < 4; i++) {
+        uint64_t x = f[i] ^ g[i];
+        x &= mask;
+        f[i] ^= x;
+        g[i] ^= x;
+    }
+}
+
+static void fe64_invert(fe64 out, const fe64 z)
+{
+    fe64 t0;
+    fe64 t1;
+    fe64 t2;
+    fe64 t3;
+    int i;
+
+    /*
+     * Compute z ** -1 = z ** (2 ** 255 - 19 - 2) with the exponent as
+     * 2 ** 255 - 21 = (2 ** 5) * (2 ** 250 - 1) + 11.
+     */
+
+    /* t0 = z ** 2 */
+    fe64_sqr(t0, z);
+
+    /* t1 = t0 ** (2 ** 2) = z ** 8 */
+    fe64_sqr(t1, t0);
+    fe64_sqr(t1, t1);
+
+    /* t1 = z * t1 = z ** 9 */
+    fe64_mul(t1, z, t1);
+    /* t0 = t0 * t1 = z ** 11 -- stash t0 away for the end. */
+    fe64_mul(t0, t0, t1);
+
+    /* t2 = t0 ** 2 = z ** 22 */
+    fe64_sqr(t2, t0);
+
+    /* t1 = t1 * t2 = z ** (2 ** 5 - 1) */
+    fe64_mul(t1, t1, t2);
+
+    /* t2 = t1 ** (2 ** 5) = z ** ((2 ** 5) * (2 ** 5 - 1)) */
+    fe64_sqr(t2, t1);
+    for (i = 1; i < 5; ++i)
+        fe64_sqr(t2, t2);
+
+    /* t1 = t1 * t2 = z ** ((2 ** 5 + 1) * (2 ** 5 - 1)) = z ** (2 ** 10 - 1) */
+    fe64_mul(t1, t2, t1);
+
+    /* Continuing similarly... */
+
+    /* t2 = z ** (2 ** 20 - 1) */
+    fe64_sqr(t2, t1);
+    for (i = 1; i < 10; ++i)
+        fe64_sqr(t2, t2);
+
+    fe64_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 40 - 1) */
+    fe64_sqr(t3, t2);
+    for (i = 1; i < 20; ++i)
+        fe64_sqr(t3, t3);
+
+    fe64_mul(t2, t3, t2);
+
+    /* t2 = z ** (2 ** 10) * (2 ** 40 - 1) */
+    for (i = 0; i < 10; ++i)
+        fe64_sqr(t2, t2);
+
+    /* t1 = z ** (2 ** 50 - 1) */
+    fe64_mul(t1, t2, t1);
+
+    /* t2 = z ** (2 ** 100 - 1) */
+    fe64_sqr(t2, t1);
+    for (i = 1; i < 50; ++i)
+        fe64_sqr(t2, t2);
+
+    fe64_mul(t2, t2, t1);
+
+    /* t2 = z ** (2 ** 200 - 1) */
+    fe64_sqr(t3, t2);
+    for (i = 1; i < 100; ++i)
+        fe64_sqr(t3, t3);
+
+    fe64_mul(t2, t3, t2);
+
+    /* t2 = z ** ((2 ** 50) * (2 ** 200 - 1) */
+    for (i = 0; i < 50; ++i)
+        fe64_sqr(t2, t2);
+
+    /* t1 = z ** (2 ** 250 - 1) */
+    fe64_mul(t1, t2, t1);
+
+    /* t1 = z ** ((2 ** 5) * (2 ** 250 - 1)) */
+    for (i = 0; i < 5; ++i)
+        fe64_sqr(t1, t1);
+
+    /* Recall t0 = z ** 11; out = z ** (2 ** 255 - 21) */
+    fe64_mul(out, t1, t0);
+}
+
+/*
+ * Duplicate of original x25519_scalar_mult_generic, but using
+ * fe64_* subroutines.
+ */
+static void x25519_scalar_mulx(uint8_t out[32], const uint8_t scalar[32],
+                               const uint8_t point[32])
+{
+    fe64 x1, x2, z2, x3, z3, tmp0, tmp1;
+    uint8_t e[32];
+    unsigned swap = 0;
+    int pos;
+
+    memcpy(e, scalar, 32);
+    e[0]  &= 0xf8;
+    e[31] &= 0x7f;
+    e[31] |= 0x40;
+    fe64_frombytes(x1, point);
+    fe64_1(x2);
+    fe64_0(z2);
+    fe64_copy(x3, x1);
+    fe64_1(z3);
+
+    for (pos = 254; pos >= 0; --pos) {
+        unsigned int b = 1 & (e[pos / 8] >> (pos & 7));
+
+        swap ^= b;
+        fe64_cswap(x2, x3, swap);
+        fe64_cswap(z2, z3, swap);
+        swap = b;
+        fe64_sub(tmp0, x3, z3);
+        fe64_sub(tmp1, x2, z2);
+        fe64_add(x2, x2, z2);
+        fe64_add(z2, x3, z3);
+        fe64_mul(z3, x2, tmp0);
+        fe64_mul(z2, z2, tmp1);
+        fe64_sqr(tmp0, tmp1);
+        fe64_sqr(tmp1, x2);
+        fe64_add(x3, z3, z2);
+        fe64_sub(z2, z3, z2);
+        fe64_mul(x2, tmp1, tmp0);
+        fe64_sub(tmp1, tmp1, tmp0);
+        fe64_sqr(z2, z2);
+        fe64_mul121666(z3, tmp1);
+        fe64_sqr(x3, x3);
+        fe64_add(tmp0, tmp0, z3);
+        fe64_mul(z3, x1, z2);
+        fe64_mul(z2, tmp1, tmp0);
+    }
+
+    fe64_invert(z2, z2);
+    fe64_mul(x2, x2, z2);
+    fe64_tobytes(out, x2);
+
+    OPENSSL_cleanse(e, sizeof(e));
+}
+#  endif
+
+# else
+
 static void fe51_mul(fe51 h, const fe51 f, const fe51 g)
 {
     u128 h0, h1, h2, h3, h4;
@@ -192,9 +439,9 @@ static void fe51_mul(fe51 h, const fe51 f, const fe51 g)
 
 static void fe51_sq(fe51 h, const fe51 f)
 {
-# if defined(OPENSSL_SMALL_FOOTPRINT)
+#  if defined(OPENSSL_SMALL_FOOTPRINT)
     fe51_mul(h, f, f);
-# else
+#  else
     /* dedicated squaring gives 16-25% overall improvement */
     uint64_t g0 = f[0];
     uint64_t g1 = f[1];
@@ -241,9 +488,36 @@ static void fe51_sq(fe51 h, const fe51 f)
     h[2] = g2;
     h[3] = g3;
     h[4] = g4;
-# endif
+#  endif
 }
 
+static void fe51_mul121666(fe51 h, fe51 f)
+{
+    u128 h0 = f[0] * (u128)121666;
+    u128 h1 = f[1] * (u128)121666;
+    u128 h2 = f[2] * (u128)121666;
+    u128 h3 = f[3] * (u128)121666;
+    u128 h4 = f[4] * (u128)121666;
+    uint64_t g0, g1, g2, g3, g4;
+
+    h3 += (uint64_t)(h2 >> 51); g2 = (uint64_t)h2 & MASK51;
+    h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51;
+
+    h4 += (uint64_t)(h3 >> 51); g3 = (uint64_t)h3 & MASK51;
+    g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51;
+
+    g0 += (uint64_t)(h4 >> 51) * 19; g4 = (uint64_t)h4 & MASK51;
+    g3 += g2 >> 51; g2 &= MASK51;
+    g1 += g0 >> 51; g0 &= MASK51;
+
+    h[0] = g0;
+    h[1] = g1;
+    h[2] = g2;
+    h[3] = g3;
+    h[4] = g4;
+}
+# endif
+
 static void fe51_add(fe51 h, const fe51 f, const fe51 g)
 {
     h[0] = f[0] + g[0];
@@ -397,32 +671,6 @@ static void fe51_invert(fe51 out, const fe51 z)
     fe51_mul(out, t1, t0);
 }
 
-static void fe51_mul121666(fe51 h, fe51 f)
-{
-    u128 h0 = f[0] * (u128)121666;
-    u128 h1 = f[1] * (u128)121666;
-    u128 h2 = f[2] * (u128)121666;
-    u128 h3 = f[3] * (u128)121666;
-    u128 h4 = f[4] * (u128)121666;
-    uint64_t g0, g1, g2, g3, g4;
-
-    h3 += (uint64_t)(h2 >> 51); g2 = (uint64_t)h2 & MASK51;
-    h1 += (uint64_t)(h0 >> 51); g0 = (uint64_t)h0 & MASK51;
-
-    h4 += (uint64_t)(h3 >> 51); g3 = (uint64_t)h3 & MASK51;
-    g2 += (uint64_t)(h1 >> 51); g1 = (uint64_t)h1 & MASK51;
-
-    g0 += (uint64_t)(h4 >> 51) * 19; g4 = (uint64_t)h4 & MASK51;
-    g3 += g2 >> 51; g2 &= MASK51;
-    g1 += g0 >> 51; g0 &= MASK51;
-
-    h[0] = g0;
-    h[1] = g1;
-    h[2] = g2;
-    h[3] = g3;
-    h[4] = g4;
-}
-
 /*
  * Duplicate of original x25519_scalar_mult_generic, but using
  * fe51_* subroutines.
@@ -435,6 +683,13 @@ static void x25519_scalar_mult(uint8_t out[32], const uint8_t scalar[32],
     unsigned swap = 0;
     int pos;
 
+# ifdef BASE_2_64_IMPLEMENTED
+    if (x25519_fe64_eligible()) {
+        x25519_scalar_mulx(out, scalar, point);
+        return;
+    }
+# endif
+
     memcpy(e, scalar, 32);
     e[0]  &= 0xf8;
     e[31] &= 0x7f;
@@ -471,8 +726,6 @@ static void x25519_scalar_mult(uint8_t out[32], const uint8_t scalar[32],
         fe51_mul(z3, x1, z2);
         fe51_mul(z2, tmp1, tmp0);
     }
-    fe51_cswap(x2, x3, swap);
-    fe51_cswap(z2, z3, swap);
 
     fe51_invert(z2, z2);
     fe51_mul(x2, x2, z2);
@@ -4050,8 +4303,6 @@ static void x25519_scalar_mult_generic(uint8_t out[32],
     fe_mul(z3, x1, z2);
     fe_mul(z2, tmp1, tmp0);
   }
-  fe_cswap(x2, x3, swap);
-  fe_cswap(z2, z3, swap);
 
   fe_invert(z2, z2);
   fe_mul(x2, x2, z2);

From appro at openssl.org  Wed Feb 21 09:18:59 2018
From: appro at openssl.org (Andy Polyakov)
Date: Wed, 21 Feb 2018 09:18:59 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519204739.954804.27329.nullmailer@dev.openssl.org>

The branch master has been updated
       via  d4c499f562c1ab7ec7773c3987fc4dce7662a805 (commit)
      from  0e5c8d566029a995d1fa23cac0f828c39519d97f (commit)


- Log -----------------------------------------------------------------
commit d4c499f562c1ab7ec7773c3987fc4dce7662a805
Author: Andy Polyakov <appro at openssl.org>
Date:   Tue Feb 20 12:43:35 2018 +0100

    test/recipes/80-test_pkcs12.t: handle lack of Win32::API.
    
    So far check for availability of Win32::API served as implicit check
    for $^O being MSWin32. Reportedly it's not safe assumption, and check
    for MSWin32 has to be explicit.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5416)

-----------------------------------------------------------------------

Summary of changes:
 test/recipes/80-test_pkcs12.t | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/test/recipes/80-test_pkcs12.t b/test/recipes/80-test_pkcs12.t
index 5bcfb69..aa307d2 100644
--- a/test/recipes/80-test_pkcs12.t
+++ b/test/recipes/80-test_pkcs12.t
@@ -41,6 +41,8 @@ if (eval { require Win32::API; 1; }) {
         SetConsoleOutputCP(1253);
         $pass = Encode::encode("cp1253",Encode::decode("utf-8",$pass));
     }
+} elsif ($^O eq "MSWin32") {
+    plan skip_all => "Win32::API unavailable";
 } else {
     # Running MinGW tests transparently under Wine apparently requires
     # UTF-8 locale...

From no-reply at appveyor.com  Wed Feb 21 09:49:15 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 21 Feb 2018 09:49:15 +0000
Subject: [openssl-commits] Build failed: openssl master.15761
Message-ID: <20180221094915.1.A6F71124B91636C7@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/d5ce6d3e/attachment.html>

From levitte at openssl.org  Wed Feb 21 09:50:38 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 21 Feb 2018 09:50:38 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519206638.880584.32334.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b8a3f39b890304757058deb730c855b72c14947b (commit)
      from  d4c499f562c1ab7ec7773c3987fc4dce7662a805 (commit)


- Log -----------------------------------------------------------------
commit b8a3f39b890304757058deb730c855b72c14947b
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 21 10:15:16 2018 +0100

    VMS: Fix curve448 internal test program
    
    The internals test programs access header files that aren't guarded by
    the public __DECC_INCLUDE_PROLOGUE.H and __DECC_INCLUDE_EPILOGUE.H
    files, and therefore have no idea what the naming convention is.
    Therefore, we need to specify that explicitely in the internals test
    programs, since they aren't built with the same naming convention as
    the library they belong with.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5425)

-----------------------------------------------------------------------

Summary of changes:
 test/curve448_internal_test.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/test/curve448_internal_test.c b/test/curve448_internal_test.c
index aac4818..8c9b09d 100644
--- a/test/curve448_internal_test.c
+++ b/test/curve448_internal_test.c
@@ -10,7 +10,18 @@
 #include <string.h>
 #include <openssl/e_os2.h>
 #include <openssl/evp.h>
+
+#ifdef __VMS
+# pragma names save
+# pragma names as_is,shortened
+#endif
+
 #include "curve448_lcl.h"
+
+#ifdef __VMS
+# pragma names restore
+#endif
+
 #include "testutil.h"
 
 static unsigned int max = 1000;

From builds at travis-ci.org  Wed Feb 21 09:46:06 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 21 Feb 2018 09:46:06 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16464 (master -
	0e5c8d5)
In-Reply-To: <openssl/openssl+344226046+still failing@travis-ci.org>
Message-ID: <5a8d3fddf0ed4_43fa1601149c81583229@9449b92b-5bb6-4cb8-8a8d-34a3a50b3bef.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16464
Status: Still Failing

Duration: 30 minutes and 30 seconds
Commit: 0e5c8d5 (master)
Author: Andy Polyakov
Message: Configure: engage x25519 assembly support.

Reviewed-by: Rich Salz <rsalz at openssl.org>
Reviewed-by: Paul Dale <paul.dale at oracle.com>
(Merged from https://github.com/openssl/openssl/pull/5408)

View the changeset: https://github.com/openssl/openssl/compare/59bf467ccaff...0e5c8d566029

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/344226046?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/7c732de7/attachment.html>

From builds at travis-ci.org  Wed Feb 21 10:12:43 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 21 Feb 2018 10:12:43 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16466 (master -
	d4c499f)
In-Reply-To: <openssl/openssl+344227304+still failing@travis-ci.org>
Message-ID: <5a8d461b37e4a_43fa160114be41618078@9449b92b-5bb6-4cb8-8a8d-34a3a50b3bef.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16466
Status: Still Failing

Duration: 33 minutes and 8 seconds
Commit: d4c499f (master)
Author: Andy Polyakov
Message: test/recipes/80-test_pkcs12.t: handle lack of Win32::API.

So far check for availability of Win32::API served as implicit check
for $^O being MSWin32. Reportedly it's not safe assumption, and check
for MSWin32 has to be explicit.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5416)

View the changeset: https://github.com/openssl/openssl/compare/0e5c8d566029...d4c499f562c1

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/344227304?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/b65596c2/attachment-0001.html>

From no-reply at appveyor.com  Wed Feb 21 10:47:28 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 21 Feb 2018 10:47:28 +0000
Subject: [openssl-commits] Build completed: openssl
	OpenSSL_1_0_2-stable.15762
Message-ID: <20180221104728.1.E2A3C262508A9076@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/110e5ac3/attachment.html>

From builds at travis-ci.org  Wed Feb 21 10:42:38 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 21 Feb 2018 10:42:38 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16469 (master - b8a3f39)
In-Reply-To: <openssl/openssl+344237415+errored@travis-ci.org>
Message-ID: <5a8d4d1e8c407_43ff62ade9f0817799fb@4bd91f79-d291-4184-a71f-ed0c21313741.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16469
Status: Errored

Duration: 32 minutes and 37 seconds
Commit: b8a3f39 (master)
Author: Richard Levitte
Message: VMS: Fix curve448 internal test program

The internals test programs access header files that aren't guarded by
the public __DECC_INCLUDE_PROLOGUE.H and __DECC_INCLUDE_EPILOGUE.H
files, and therefore have no idea what the naming convention is.
Therefore, we need to specify that explicitely in the internals test
programs, since they aren't built with the same naming convention as
the library they belong with.

Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5425)

View the changeset: https://github.com/openssl/openssl/compare/d4c499f562c1...b8a3f39b8903

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/344237415?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/359e8956/attachment.html>

From matt at openssl.org  Wed Feb 21 11:12:01 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 11:12:01 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519211521.583164.9549.nullmailer@dev.openssl.org>

The branch master has been updated
       via  6c61b2749634246956f8ec7adc9520e5d22dcbf4 (commit)
      from  b8a3f39b890304757058deb730c855b72c14947b (commit)


- Log -----------------------------------------------------------------
commit 6c61b2749634246956f8ec7adc9520e5d22dcbf4
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 14 17:29:32 2018 +0000

    Remove a spurious TLSProxy byte in TLSv1.3
    
    When the proxy re-encrypted a TLSv1.3 record it was adding a spurious
    byte onto the end. This commit removes that.
    
    The "extra" byte was intended to be the inner content type of the record.
    However, TLSProxy was actually adding the original encrypted data into the
    record (which already has the inner content type in it) and then adding
    the spurious additional content type byte on the end (and adjusting the
    record length accordingly).
    
    It is interesting to look at why this didn't cause a failure:
    
    The receiving peer first attempts to decrypt the data. Because this is
    TLSProxy we always use a GCM based ciphersuite with a 16 byte tag. When
    we decrypt this it actually gets diverted to the ossltest engine. All this
    does is go through the motions of encrypting/decrypting but just passes
    back the original data. Crucially it will never fail because of a bad tag!
    The receiving party thinks the spurious additional byte is part of the
    tag and the ossltest engine ignores it.
    
    This means the data that gets passed back to the record layer still has
    an additional spurious byte on it - but because the 16 byte tag has been
    removed, this is actually the first byte of the original tag. Again
    because we are using ossltest engine we aren't actually creating "real"
    tags - we only ever emit 16, 0 bytes for the tag. So the spurious
    additional byte always has the value 0. The TLSv1.3 spec says that records
    can have additional 0 bytes on the end of them - this is "padding". So the
    record layer interprets this 0 byte as padding and strips it off to end up
    with the originally transmitted record data - which it can now process
    successfully.
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/5370)

-----------------------------------------------------------------------

Summary of changes:
 util/perl/TLSProxy/Record.pm | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/util/perl/TLSProxy/Record.pm b/util/perl/TLSProxy/Record.pm
index c949287..773f759 100644
--- a/util/perl/TLSProxy/Record.pm
+++ b/util/perl/TLSProxy/Record.pm
@@ -286,15 +286,13 @@ sub reconstruct_record
     my $self = shift;
     my $server = shift;
     my $data;
-    my $tls13_enc = 0;
 
     if ($self->sslv2) {
         $data = pack('n', $self->len | 0x8000);
     } else {
         if (TLSProxy::Proxy->is_tls13() && $self->encrypted) {
             $data = pack('Cnn', $self->outer_content_type, $self->version,
-                         $self->len + 1);
-            $tls13_enc = 1;
+                         $self->len);
         } else {
             $data = pack('Cnn', $self->content_type, $self->version,
                          $self->len);
@@ -303,10 +301,6 @@ sub reconstruct_record
     }
     $data .= $self->data;
 
-    if ($tls13_enc) {
-        $data .= pack('C', $self->content_type);
-    }
-
     return $data;
 }
 

From matt at openssl.org  Wed Feb 21 11:16:35 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 11:16:35 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519211795.923780.10694.nullmailer@dev.openssl.org>

The branch master has been updated
       via  c7a47adca29e1ec761d639dd75336bb36ebf4a9b (commit)
       via  7876dbffcee9a53ac8a75e90c0443c1193edb580 (commit)
      from  6c61b2749634246956f8ec7adc9520e5d22dcbf4 (commit)


- Log -----------------------------------------------------------------
commit c7a47adca29e1ec761d639dd75336bb36ebf4a9b
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 20 14:53:40 2018 +0000

    Fix no-ec build
    
    [extended tests]
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5418)

commit 7876dbffcee9a53ac8a75e90c0443c1193edb580
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 20 14:53:06 2018 +0000

    Fix some undefined behaviour in the Curve448 code
    
    We can't add NULL data into a hash
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5418)

-----------------------------------------------------------------------

Summary of changes:
 crypto/ec/curve448/eddsa.c               | 9 ++++++---
 test/build.info                          | 6 ++++--
 test/recipes/03-test_internal_curve448.t | 3 +++
 3 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/crypto/ec/curve448/eddsa.c b/crypto/ec/curve448/eddsa.c
index 7175715..d318876 100644
--- a/crypto/ec/curve448/eddsa.c
+++ b/crypto/ec/curve448/eddsa.c
@@ -63,7 +63,8 @@ static c448_error_t hash_init_with_dom(EVP_MD_CTX *hashctx, uint8_t prehashed,
     if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
             || !EVP_DigestUpdate(hashctx, dom_s, strlen(dom_s))
             || !EVP_DigestUpdate(hashctx, dom, sizeof(dom))
-            || !EVP_DigestUpdate(hashctx, context, context_len))
+            || (context_len > 0
+                && !EVP_DigestUpdate(hashctx, context, context_len)))
         return C448_FAILURE;
 
     return C448_SUCCESS;
@@ -160,7 +161,8 @@ c448_error_t c448_ed448_sign(
                 || !EVP_DigestUpdate(hashctx,
                                      expanded + EDDSA_448_PRIVATE_BYTES,
                                      EDDSA_448_PRIVATE_BYTES)
-                || !EVP_DigestUpdate(hashctx, message, message_len)) {
+                || (message_len > 0
+                    && !EVP_DigestUpdate(hashctx, message, message_len))) {
             OPENSSL_cleanse(expanded, sizeof(expanded));
             goto err;
         }
@@ -200,7 +202,8 @@ c448_error_t c448_ed448_sign(
         if (!hash_init_with_dom(hashctx, prehashed, 0, context, context_len)
                 || !EVP_DigestUpdate(hashctx, nonce_point, sizeof(nonce_point))
                 || !EVP_DigestUpdate(hashctx, pubkey, EDDSA_448_PUBLIC_BYTES)
-                || !EVP_DigestUpdate(hashctx, message, message_len)
+                || (message_len > 0
+                    && !EVP_DigestUpdate(hashctx, message, message_len))
                 || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge)))
             goto err;
 
diff --git a/test/build.info b/test/build.info
index d8ea2f2..38fcf84 100644
--- a/test/build.info
+++ b/test/build.info
@@ -400,8 +400,7 @@ INCLUDE_MAIN___test_libtestutil_OLB = /INCLUDE=MAIN
   # names with the DLL import libraries.
   IF[{- $disabled{shared} || $target{build_scheme}->[1] ne 'windows' -}]
     PROGRAMS_NO_INST=asn1_internal_test modes_internal_test x509_internal_test \
-                     tls13encryptiontest wpackettest ctype_internal_test \
-                     curve448_internal_test
+                     tls13encryptiontest wpackettest ctype_internal_test
     IF[{- !$disabled{poly1305} -}]
       PROGRAMS_NO_INST=poly1305_internal_test
     ENDIF
@@ -414,6 +413,9 @@ INCLUDE_MAIN___test_libtestutil_OLB = /INCLUDE=MAIN
     IF[{- !$disabled{sm4} -}]
       PROGRAMS_NO_INST=sm4_internal_test
     ENDIF
+    IF[{- !$disabled{ec} -}]
+      PROGRAMS_NO_INST=curve448_internal_test
+    ENDIF
 
     SOURCE[poly1305_internal_test]=poly1305_internal_test.c
     INCLUDE[poly1305_internal_test]=.. ../include ../crypto/include
diff --git a/test/recipes/03-test_internal_curve448.t b/test/recipes/03-test_internal_curve448.t
index 1099d9e..44bac02 100644
--- a/test/recipes/03-test_internal_curve448.t
+++ b/test/recipes/03-test_internal_curve448.t
@@ -16,4 +16,7 @@ setup("test_internal_curve448");
 plan skip_all => "This test is unsupported in a shared library build on Windows"
     if $^O eq 'MSWin32' && !disabled("shared");
 
+plan skip_all => "This test is unsupported in a no-ec build"
+    if disabled("ec");
+
 simple_test("test_internal_curve448", "curve448_internal_test");

From matt at openssl.org  Wed Feb 21 11:22:08 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 11:22:08 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519212128.857450.11976.nullmailer@dev.openssl.org>

The branch master has been updated
       via  ee763495250b29fd32cb4026f17678ba30a59342 (commit)
      from  c7a47adca29e1ec761d639dd75336bb36ebf4a9b (commit)


- Log -----------------------------------------------------------------
commit ee763495250b29fd32cb4026f17678ba30a59342
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 20 10:20:20 2018 +0000

    Sanity check the ticket length before using key name/IV
    
    This could in theory result in an overread - but due to the over allocation
    of the underlying buffer does not represent a security issue.
    
    Thanks to Fedor Indutny for reporting this issue.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    (Merged from https://github.com/openssl/openssl/pull/5414)

-----------------------------------------------------------------------

Summary of changes:
 ssl/t1_lib.c | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 3965be9..57f9559 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1280,9 +1280,15 @@ TICKET_RETURN tls_decrypt_ticket(SSL *s, const unsigned char *etick,
     size_t mlen;
     unsigned char tick_hmac[EVP_MAX_MD_SIZE];
     HMAC_CTX *hctx = NULL;
-    EVP_CIPHER_CTX *ctx;
+    EVP_CIPHER_CTX *ctx = NULL;
     SSL_CTX *tctx = s->session_ctx;
 
+    /* Need at least keyname + iv */
+    if (eticklen < TLSEXT_KEYNAME_LENGTH + EVP_MAX_IV_LENGTH) {
+        ret = TICKET_NO_DECRYPT;
+        goto err;
+    }
+
     /* Initialize session ticket encryption and HMAC contexts */
     hctx = HMAC_CTX_new();
     if (hctx == NULL)
@@ -1294,8 +1300,9 @@ TICKET_RETURN tls_decrypt_ticket(SSL *s, const unsigned char *etick,
     }
     if (tctx->ext.ticket_key_cb) {
         unsigned char *nctick = (unsigned char *)etick;
-        int rv = tctx->ext.ticket_key_cb(s, nctick, nctick + 16,
-                                            ctx, hctx, 0);
+        int rv = tctx->ext.ticket_key_cb(s, nctick,
+                                         nctick + TLSEXT_KEYNAME_LENGTH,
+                                         ctx, hctx, 0);
         if (rv < 0)
             goto err;
         if (rv == 0) {
@@ -1307,7 +1314,7 @@ TICKET_RETURN tls_decrypt_ticket(SSL *s, const unsigned char *etick,
     } else {
         /* Check key name matches */
         if (memcmp(etick, tctx->ext.tick_key_name,
-                   sizeof(tctx->ext.tick_key_name)) != 0) {
+                   TLSEXT_KEYNAME_LENGTH) != 0) {
             ret = TICKET_NO_DECRYPT;
             goto err;
         }
@@ -1316,8 +1323,7 @@ TICKET_RETURN tls_decrypt_ticket(SSL *s, const unsigned char *etick,
                          EVP_sha256(), NULL) <= 0
             || EVP_DecryptInit_ex(ctx, EVP_aes_256_cbc(), NULL,
                                   tctx->ext.tick_aes_key,
-                                  etick
-                                  + sizeof(tctx->ext.tick_key_name)) <= 0) {
+                                  etick + TLSEXT_KEYNAME_LENGTH) <= 0) {
             goto err;
         }
     }

From matt at openssl.org  Wed Feb 21 11:25:46 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 11:25:46 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519212346.097426.13063.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  5a19f9ea7a27453d67c09160a8c806e644e844e7 (commit)
      from  058f12b7266a21f04893e88d8240b81e7c51fcd5 (commit)


- Log -----------------------------------------------------------------
commit 5a19f9ea7a27453d67c09160a8c806e644e844e7
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 20 10:20:20 2018 +0000

    Sanity check the ticket length before using key name/IV
    
    This could in theory result in an overread - but due to the over allocation
    of the underlying buffer does not represent a security issue.
    
    Thanks to Fedor Indutny for reporting this issue.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5415)

-----------------------------------------------------------------------

Summary of changes:
 ssl/t1_lib.c | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index df963b7..a68b452 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -3111,9 +3111,15 @@ static int tls_decrypt_ticket(SSL *s, const unsigned char *etick,
     int slen, mlen, renew_ticket = 0, ret = -1;
     unsigned char tick_hmac[EVP_MAX_MD_SIZE];
     HMAC_CTX *hctx = NULL;
-    EVP_CIPHER_CTX *ctx;
+    EVP_CIPHER_CTX *ctx = NULL;
     SSL_CTX *tctx = s->session_ctx;
 
+    /* Need at least keyname + iv */
+    if (eticklen < TLSEXT_KEYNAME_LENGTH + EVP_MAX_IV_LENGTH) {
+        ret = 2;
+        goto err;
+    }
+
     /* Initialize session ticket encryption and HMAC contexts */
     hctx = HMAC_CTX_new();
     if (hctx == NULL)
@@ -3125,7 +3131,8 @@ static int tls_decrypt_ticket(SSL *s, const unsigned char *etick,
     }
     if (tctx->tlsext_ticket_key_cb) {
         unsigned char *nctick = (unsigned char *)etick;
-        int rv = tctx->tlsext_ticket_key_cb(s, nctick, nctick + 16,
+        int rv = tctx->tlsext_ticket_key_cb(s, nctick,
+                                            nctick + TLSEXT_KEYNAME_LENGTH,
                                             ctx, hctx, 0);
         if (rv < 0)
             goto err;
@@ -3138,7 +3145,7 @@ static int tls_decrypt_ticket(SSL *s, const unsigned char *etick,
     } else {
         /* Check key name matches */
         if (memcmp(etick, tctx->tlsext_tick_key_name,
-                   sizeof(tctx->tlsext_tick_key_name)) != 0) {
+                   TLSEXT_KEYNAME_LENGTH) != 0) {
             ret = 2;
             goto err;
         }
@@ -3147,8 +3154,7 @@ static int tls_decrypt_ticket(SSL *s, const unsigned char *etick,
                          EVP_sha256(), NULL) <= 0
             || EVP_DecryptInit_ex(ctx, EVP_aes_256_cbc(), NULL,
                                   tctx->tlsext_tick_aes_key,
-                                  etick + sizeof(tctx->tlsext_tick_key_name)) <=
-            0) {
+                                  etick + TLSEXT_KEYNAME_LENGTH) <= 0) {
             goto err;
         }
     }

From matt at openssl.org  Wed Feb 21 11:29:03 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 11:29:03 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1519212543.919579.14151.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  cb7503750efc02c64cdb7167dee692e47c44c6e9 (commit)
      from  773da093b1b9a63ae9c94cae756848011686caa0 (commit)


- Log -----------------------------------------------------------------
commit cb7503750efc02c64cdb7167dee692e47c44c6e9
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 20 10:20:20 2018 +0000

    Sanity check the ticket length before using key name/IV
    
    This could in theory result in an overread - but due to the over allocation
    of the underlying buffer does not represent a security issue.
    
    Thanks to Fedor Indutny for reporting this issue.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5417)

-----------------------------------------------------------------------

Summary of changes:
 ssl/t1_lib.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 82ad601..a186623 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -3505,6 +3505,10 @@ static int tls_decrypt_ticket(SSL *s, const unsigned char *etick,
     EVP_CIPHER_CTX ctx;
     SSL_CTX *tctx = s->initial_ctx;
 
+    /* Need at least keyname + iv */
+    if (eticklen < 16 + EVP_MAX_IV_LENGTH)
+        return 2;
+
     /* Initialize session ticket encryption and HMAC contexts */
     HMAC_CTX_init(&hctx);
     EVP_CIPHER_CTX_init(&ctx);

From osslsanity at gmail.com  Wed Feb 21 11:32:23 2018
From: osslsanity at gmail.com (osslsanity at gmail.com)
Date: Wed, 21 Feb 2018 11:32:23 +0000 (UTC)
Subject: [openssl-commits] Jenkins build is back to normal : master_noec #399
In-Reply-To: <342294644.338.1519133220793.JavaMail.jenkins@ip-172-31-34-99>
References: <342294644.338.1519133220793.JavaMail.jenkins@ip-172-31-34-99>
Message-ID: <484208481.340.1519212743350.JavaMail.jenkins@ip-172-31-34-99>

See <http://ec2-52-37-178-53.us-west-2.compute.amazonaws.com:8080/job/master_noec/399/display/redirect?page=changes>


From builds at travis-ci.org  Wed Feb 21 11:45:01 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 21 Feb 2018 11:45:01 +0000
Subject: [openssl-commits] Failed: openssl/openssl#16470 (master - 6c61b27)
In-Reply-To: <openssl/openssl+344266332+failed@travis-ci.org>
Message-ID: <5a8d5bbd34d8b_43ff62f6cb0a01867530@4bd91f79-d291-4184-a71f-ed0c21313741.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16470
Status: Failed

Duration: 32 minutes and 6 seconds
Commit: 6c61b27 (master)
Author: Matt Caswell
Message: Remove a spurious TLSProxy byte in TLSv1.3

When the proxy re-encrypted a TLSv1.3 record it was adding a spurious
byte onto the end. This commit removes that.

The "extra" byte was intended to be the inner content type of the record.
However, TLSProxy was actually adding the original encrypted data into the
record (which already has the inner content type in it) and then adding
the spurious additional content type byte on the end (and adjusting the
record length accordingly).

It is interesting to look at why this didn't cause a failure:

The receiving peer first attempts to decrypt the data. Because this is
TLSProxy we always use a GCM based ciphersuite with a 16 byte tag. When
we decrypt this it actually gets diverted to the ossltest engine. All this
does is go through the motions of encrypting/decrypting but just passes
back the original data. Crucially it will never fail because of a bad tag!
The receiving party thinks the spurious additional byte is part of the
tag and the ossltest engine ignores it.

This means the data that gets passed back to the record layer still has
an additional spurious byte on it - but because the 16 byte tag has been
removed, this is actually the first byte of the original tag. Again
because we are using ossltest engine we aren't actually creating "real"
tags - we only ever emit 16, 0 bytes for the tag. So the spurious
additional byte always has the value 0. The TLSv1.3 spec says that records
can have additional 0 bytes on the end of them - this is "padding". So the
record layer interprets this 0 byte as padding and strips it off to end up
with the originally transmitted record data - which it can now process
successfully.

Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/5370)

View the changeset: https://github.com/openssl/openssl/compare/b8a3f39b8903...6c61b2749634

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/344266332?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/61822b87/attachment.html>

From builds at travis-ci.org  Wed Feb 21 12:06:15 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 21 Feb 2018 12:06:15 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16471 (master - c7a47ad)
In-Reply-To: <openssl/openssl+344267559+passed@travis-ci.org>
Message-ID: <5a8d60b7fd3_43fa160114be417622fc@9449b92b-5bb6-4cb8-8a8d-34a3a50b3bef.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16471
Status: Passed

Duration: 42 minutes and 52 seconds
Commit: c7a47ad (master)
Author: Matt Caswell
Message: Fix no-ec build

[extended tests]

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5418)

View the changeset: https://github.com/openssl/openssl/compare/6c61b2749634...c7a47adca29e

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/344267559?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/d9e1b8a1/attachment-0001.html>

From matt at openssl.org  Wed Feb 21 12:08:12 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 12:08:12 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519214892.759149.18778.nullmailer@dev.openssl.org>

The branch master has been updated
       via  8db7946ee879ce483f4c81141926e1357aa6b941 (commit)
      from  ee763495250b29fd32cb4026f17678ba30a59342 (commit)


- Log -----------------------------------------------------------------
commit 8db7946ee879ce483f4c81141926e1357aa6b941
Author: Samuel Weiser <samuel.weiser at iaik.tugraz.at>
Date:   Wed Feb 21 11:56:01 2018 +0000

    Replaced variable-time GCD with consttime inversion to avoid side-channel attacks on RSA key generation
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Kurt Roeckx <kurt at roeckx.be>
    (Merged from https://github.com/openssl/openssl/pull/5161)

-----------------------------------------------------------------------

Summary of changes:
 crypto/rsa/rsa_gen.c | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/crypto/rsa/rsa_gen.c b/crypto/rsa/rsa_gen.c
index 4b9296e..0539027 100644
--- a/crypto/rsa/rsa_gen.c
+++ b/crypto/rsa/rsa_gen.c
@@ -71,6 +71,7 @@ static int rsa_builtin_keygen(RSA *rsa, int bits, int primes, BIGNUM *e_value,
     STACK_OF(RSA_PRIME_INFO) *prime_infos = NULL;
     BN_CTX *ctx = NULL;
     BN_ULONG bitst = 0;
+    unsigned long error = 0;
 
     if (bits < RSA_MIN_MODULUS_BITS) {
         ok = 0;             /* we set our own err */
@@ -186,10 +187,20 @@ static int rsa_builtin_keygen(RSA *rsa, int bits, int primes, BIGNUM *e_value,
             }
             if (!BN_sub(r2, prime, BN_value_one()))
                 goto err;
-            if (!BN_gcd(r1, r2, rsa->e, ctx))
-                goto err;
-            if (BN_is_one(r1))
+            ERR_set_mark();
+            BN_set_flags(r2, BN_FLG_CONSTTIME);
+            if (BN_mod_inverse(r1, r2, rsa->e, ctx) != NULL) {
+               /* GCD == 1 since inverse exists */
                 break;
+            }
+            error = ERR_peek_last_error();
+            if (ERR_GET_LIB(error) == ERR_LIB_BN
+                && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
+                /* GCD != 1 */
+                ERR_pop_to_mark();
+            } else {
+                goto err;
+            }
             if (!BN_GENCB_call(cb, 2, n++))
                 goto err;
         }

From matt at openssl.org  Wed Feb 21 12:26:16 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 12:26:16 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519215976.723532.21413.nullmailer@dev.openssl.org>

The branch master has been updated
       via  59053968e756e9063c512fba59717c32621e3f1a (commit)
       via  abcf241114c4dc33af95288ae7f7d10916c67db0 (commit)
      from  8db7946ee879ce483f4c81141926e1357aa6b941 (commit)


- Log -----------------------------------------------------------------
commit 59053968e756e9063c512fba59717c32621e3f1a
Author: Pavel Kopyl <p.kopyl at samsung.com>
Date:   Fri Nov 3 22:18:35 2017 +0300

    do_body: fix heap-use-after-free.
    
    The memory pointed to by the 'push' is freed by the
    X509_NAME_ENTRY_free() in do_body(). The second time
    it is referenced to (indirectly) in certify_cert:X509_REQ_free().
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4698)

commit abcf241114c4dc33af95288ae7f7d10916c67db0
Author: Pavel Kopyl <p.kopyl at samsung.com>
Date:   Tue Nov 7 15:28:18 2017 +0300

    X509V3_EXT_add_nconf_sk, X509v3_add_ext: fix errors handling
    
    X509v3_add_ext: free 'sk' if the memory pointed to by it
    was malloc-ed inside this function.
    X509V3_EXT_add_nconf_sk: return an error if X509v3_add_ext() fails.
    This prevents use of a freed memory in do_body:sk_X509_EXTENSION_num().
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4698)

-----------------------------------------------------------------------

Summary of changes:
 apps/ca.c               | 1 -
 crypto/x509/x509_v3.c   | 3 ++-
 crypto/x509v3/v3_conf.c | 8 ++++++--
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/apps/ca.c b/apps/ca.c
index 26c0778..2819fea 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1556,7 +1556,6 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
 
             if (push != NULL) {
                 if (!X509_NAME_add_entry(subject, push, -1, 0)) {
-                    X509_NAME_ENTRY_free(push);
                     BIO_printf(bio_err, "Memory allocation failure\n");
                     goto end;
                 }
diff --git a/crypto/x509/x509_v3.c b/crypto/x509/x509_v3.c
index a09b0ce..b439030 100644
--- a/crypto/x509/x509_v3.c
+++ b/crypto/x509/x509_v3.c
@@ -128,7 +128,8 @@ STACK_OF(X509_EXTENSION) *X509v3_add_ext(STACK_OF(X509_EXTENSION) **x,
     X509err(X509_F_X509V3_ADD_EXT, ERR_R_MALLOC_FAILURE);
  err2:
     X509_EXTENSION_free(new_ex);
-    sk_X509_EXTENSION_free(sk);
+    if (x != NULL && *x == NULL)
+        sk_X509_EXTENSION_free(sk);
     return NULL;
 }
 
diff --git a/crypto/x509v3/v3_conf.c b/crypto/x509v3/v3_conf.c
index 711ff02..59caa31 100644
--- a/crypto/x509v3/v3_conf.c
+++ b/crypto/x509v3/v3_conf.c
@@ -313,8 +313,12 @@ int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, const char *section,
             return 0;
         if (ctx->flags == X509V3_CTX_REPLACE)
             delete_ext(*sk, ext);
-        if (sk)
-            X509v3_add_ext(sk, ext, -1);
+        if (sk != NULL) {
+            if (X509v3_add_ext(sk, ext, -1) == NULL) {
+                X509_EXTENSION_free(ext);
+                return 0;
+            }
+        }
         X509_EXTENSION_free(ext);
     }
     return 1;

From matt at openssl.org  Wed Feb 21 12:26:26 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 12:26:26 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519215986.769375.22228.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  a9603be1a8484fc17cbcb0f4df953a4c6f37ffa1 (commit)
       via  2d4def005263614d23b9dcbf98f48c145ea1b0cf (commit)
      from  5a19f9ea7a27453d67c09160a8c806e644e844e7 (commit)


- Log -----------------------------------------------------------------
commit a9603be1a8484fc17cbcb0f4df953a4c6f37ffa1
Author: Pavel Kopyl <p.kopyl at samsung.com>
Date:   Fri Nov 3 22:18:35 2017 +0300

    do_body: fix heap-use-after-free.
    
    The memory pointed to by the 'push' is freed by the
    X509_NAME_ENTRY_free() in do_body(). The second time
    it is referenced to (indirectly) in certify_cert:X509_REQ_free().
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4698)

commit 2d4def005263614d23b9dcbf98f48c145ea1b0cf
Author: Pavel Kopyl <p.kopyl at samsung.com>
Date:   Tue Nov 7 15:28:18 2017 +0300

    X509V3_EXT_add_nconf_sk, X509v3_add_ext: fix errors handling
    
    X509v3_add_ext: free 'sk' if the memory pointed to by it
    was malloc-ed inside this function.
    X509V3_EXT_add_nconf_sk: return an error if X509v3_add_ext() fails.
    This prevents use of a freed memory in do_body:sk_X509_EXTENSION_num().
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4698)

-----------------------------------------------------------------------

Summary of changes:
 apps/ca.c               | 1 -
 crypto/x509/x509_v3.c   | 3 ++-
 crypto/x509v3/v3_conf.c | 8 ++++++--
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/apps/ca.c b/apps/ca.c
index 26ca6bb..ad8c5c8 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1560,7 +1560,6 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
 
             if (push != NULL) {
                 if (!X509_NAME_add_entry(subject, push, -1, 0)) {
-                    X509_NAME_ENTRY_free(push);
                     BIO_printf(bio_err, "Memory allocation failure\n");
                     goto end;
                 }
diff --git a/crypto/x509/x509_v3.c b/crypto/x509/x509_v3.c
index 213e762..cbadd9b 100644
--- a/crypto/x509/x509_v3.c
+++ b/crypto/x509/x509_v3.c
@@ -128,7 +128,8 @@ STACK_OF(X509_EXTENSION) *X509v3_add_ext(STACK_OF(X509_EXTENSION) **x,
     X509err(X509_F_X509V3_ADD_EXT, ERR_R_MALLOC_FAILURE);
  err2:
     X509_EXTENSION_free(new_ex);
-    sk_X509_EXTENSION_free(sk);
+    if (x != NULL && *x == NULL)
+        sk_X509_EXTENSION_free(sk);
     return (NULL);
 }
 
diff --git a/crypto/x509v3/v3_conf.c b/crypto/x509v3/v3_conf.c
index f625ff5..68ceab1 100644
--- a/crypto/x509v3/v3_conf.c
+++ b/crypto/x509v3/v3_conf.c
@@ -313,8 +313,12 @@ int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, const char *section,
             return 0;
         if (ctx->flags == X509V3_CTX_REPLACE)
             delete_ext(*sk, ext);
-        if (sk)
-            X509v3_add_ext(sk, ext, -1);
+        if (sk != NULL) {
+            if (X509v3_add_ext(sk, ext, -1) == NULL) {
+                X509_EXTENSION_free(ext);
+                return 0;
+            }
+        }
         X509_EXTENSION_free(ext);
     }
     return 1;

From matt at openssl.org  Wed Feb 21 12:32:33 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 12:32:33 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1519216353.418255.23796.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  a25e2d49a75eb01dcdad41a5bec05666d461b2d6 (commit)
       via  becdc13fd87052058c87dd0ee3894345617085b8 (commit)
      from  cb7503750efc02c64cdb7167dee692e47c44c6e9 (commit)


- Log -----------------------------------------------------------------
commit a25e2d49a75eb01dcdad41a5bec05666d461b2d6
Author: Pavel Kopyl <p.kopyl at samsung.com>
Date:   Sun Dec 10 22:57:43 2017 +0300

    do_body: fix heap-use-after-free.
    
    The memory pointed to by the 'push' is freed by the
    X509_NAME_ENTRY_free() in do_body(). The second time
    it is referenced to (indirectly) in certify_cert:X509_REQ_free().
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4896)

commit becdc13fd87052058c87dd0ee3894345617085b8
Author: Pavel Kopyl <p.kopyl at samsung.com>
Date:   Sun Dec 10 22:49:42 2017 +0300

    X509V3_EXT_add_nconf_sk, X509v3_add_ext: fix errors handling
    
    X509v3_add_ext: free 'sk' if the memory pointed to by it
    was malloc-ed inside this function.
    X509V3_EXT_add_nconf_sk: return an error if X509v3_add_ext() fails.
    This prevents use of a freed memory in do_body:sk_X509_EXTENSION_num().
    
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4896)

-----------------------------------------------------------------------

Summary of changes:
 apps/ca.c               | 2 --
 crypto/x509/x509_v3.c   | 2 +-
 crypto/x509v3/v3_conf.c | 8 ++++++--
 3 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/apps/ca.c b/apps/ca.c
index bde3e44..06002ad 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1825,8 +1825,6 @@ static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
 
             if (push != NULL) {
                 if (!X509_NAME_add_entry(subject, push, -1, 0)) {
-                    if (push != NULL)
-                        X509_NAME_ENTRY_free(push);
                     BIO_printf(bio_err, "Memory allocation failure\n");
                     goto err;
                 }
diff --git a/crypto/x509/x509_v3.c b/crypto/x509/x509_v3.c
index 4a03445..9a3517e 100644
--- a/crypto/x509/x509_v3.c
+++ b/crypto/x509/x509_v3.c
@@ -177,7 +177,7 @@ STACK_OF(X509_EXTENSION) *X509v3_add_ext(STACK_OF(X509_EXTENSION) **x,
  err2:
     if (new_ex != NULL)
         X509_EXTENSION_free(new_ex);
-    if (sk != NULL)
+    if (x != NULL && *x == NULL && sk != NULL)
         sk_X509_EXTENSION_free(sk);
     return (NULL);
 }
diff --git a/crypto/x509v3/v3_conf.c b/crypto/x509v3/v3_conf.c
index c1b4c1a..c984aa0 100644
--- a/crypto/x509v3/v3_conf.c
+++ b/crypto/x509v3/v3_conf.c
@@ -340,8 +340,12 @@ int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, char *section,
         val = sk_CONF_VALUE_value(nval, i);
         if (!(ext = X509V3_EXT_nconf(conf, ctx, val->name, val->value)))
             return 0;
-        if (sk)
-            X509v3_add_ext(sk, ext, -1);
+        if (sk != NULL) {
+            if (X509v3_add_ext(sk, ext, -1) == NULL) {
+                X509_EXTENSION_free(ext);
+                return 0;
+            }
+        }
         X509_EXTENSION_free(ext);
     }
     return 1;

From builds at travis-ci.org  Wed Feb 21 12:17:41 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 21 Feb 2018 12:17:41 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16473
	(OpenSSL_1_1_0-stable - 5a19f9e)
In-Reply-To: <openssl/openssl+344271342+passed@travis-ci.org>
Message-ID: <5a8d63657030e_43ff63156efac191635@4bd91f79-d291-4184-a71f-ed0c21313741.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16473
Status: Passed

Duration: 20 minutes and 6 seconds
Commit: 5a19f9e (OpenSSL_1_1_0-stable)
Author: Matt Caswell
Message: Sanity check the ticket length before using key name/IV

This could in theory result in an overread - but due to the over allocation
of the underlying buffer does not represent a security issue.

Thanks to Fedor Indutny for reporting this issue.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5415)

View the changeset: https://github.com/openssl/openssl/compare/058f12b7266a...5a19f9ea7a27

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/344271342?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/1e4206a7/attachment-0001.html>

From matt at openssl.org  Wed Feb 21 12:37:14 2018
From: matt at openssl.org (Matt Caswell)
Date: Wed, 21 Feb 2018 12:37:14 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519216634.343335.25030.nullmailer@dev.openssl.org>

The branch master has been updated
       via  405988f2cca816fdfdf8ad62b1285dcf06822e85 (commit)
      from  59053968e756e9063c512fba59717c32621e3f1a (commit)


- Log -----------------------------------------------------------------
commit 405988f2cca816fdfdf8ad62b1285dcf06822e85
Author: EasySec <easy.sec at free.fr>
Date:   Wed Dec 14 16:29:06 2016 +0100

    Add support for PBKDF2 for enc command
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2083)

-----------------------------------------------------------------------

Summary of changes:
 apps/enc.c       | 58 ++++++++++++++++++++++++++++++++++++++++++++++----------
 doc/man1/enc.pod | 14 ++++++++++++--
 2 files changed, 60 insertions(+), 12 deletions(-)

diff --git a/apps/enc.c b/apps/enc.c
index 0081ef5..8e5a57d 100644
--- a/apps/enc.c
+++ b/apps/enc.c
@@ -44,7 +44,7 @@ typedef enum OPTION_choice {
     OPT_E, OPT_IN, OPT_OUT, OPT_PASS, OPT_ENGINE, OPT_D, OPT_P, OPT_V,
     OPT_NOPAD, OPT_SALT, OPT_NOSALT, OPT_DEBUG, OPT_UPPER_P, OPT_UPPER_A,
     OPT_A, OPT_Z, OPT_BUFSIZE, OPT_K, OPT_KFILE, OPT_UPPER_K, OPT_NONE,
-    OPT_UPPER_S, OPT_IV, OPT_MD, OPT_CIPHER,
+    OPT_UPPER_S, OPT_IV, OPT_MD, OPT_ITER, OPT_PBKDF2, OPT_CIPHER,
     OPT_R_ENUM
 } OPTION_CHOICE;
 
@@ -74,6 +74,8 @@ const OPTIONS enc_options[] = {
     {"S", OPT_UPPER_S, 's', "Salt, in hex"},
     {"iv", OPT_IV, 's', "IV in hex"},
     {"md", OPT_MD, 's', "Use specified digest to create a key from the passphrase"},
+    {"iter", OPT_ITER, 'p', "Specify the iteration count and force use of PBKDF2"},
+    {"pbkdf2", OPT_PBKDF2, '-', "Use password-based key derivation function 2"},
     {"none", OPT_NONE, '-', "Don't encrypt"},
     {"", OPT_CIPHER, '-', "Any supported cipher"},
     OPT_R_OPTIONS,
@@ -107,6 +109,8 @@ int enc_main(int argc, char **argv)
     int ret = 1, inl, nopad = 0;
     unsigned char key[EVP_MAX_KEY_LENGTH], iv[EVP_MAX_IV_LENGTH];
     unsigned char *buff = NULL, salt[PKCS5_SALT_LEN];
+    int pbkdf2 = 0;
+    int iter = 0;
     long n;
     struct doall_enc_ciphers dec;
 #ifdef ZLIB
@@ -255,6 +259,16 @@ int enc_main(int argc, char **argv)
                 goto opthelp;
             cipher = c;
             break;
+        case OPT_ITER:
+            if (!opt_int(opt_arg(), &iter))
+                goto opthelp;
+            pbkdf2 = 1;
+            break;
+        case OPT_PBKDF2:
+            pbkdf2 = 1;
+            if (iter == 0)    /* do not overwrite a chosen value */
+                iter = 10000;
+            break;
         case OPT_NONE:
             cipher = NULL;
             break;
@@ -282,6 +296,9 @@ int enc_main(int argc, char **argv)
     if (dgst == NULL)
         dgst = EVP_sha256();
 
+    if (iter == 0)
+        iter = 1;
+
     /* It must be large enough for a base64 encoded line */
     if (base64 && bsize < 80)
         bsize = 80;
@@ -439,15 +456,37 @@ int enc_main(int argc, char **argv)
                     BIO_printf(bio_err, "bad magic number\n");
                     goto end;
                 }
-
                 sptr = salt;
             }
 
-            if (!EVP_BytesToKey(cipher, dgst, sptr,
-                                (unsigned char *)str,
-                                str_len, 1, key, iv)) {
-                BIO_printf(bio_err, "EVP_BytesToKey failed\n");
-                goto end;
+            if (pbkdf2 == 1) {
+                /*
+                * derive key and default iv
+                * concatenated into a temporary buffer
+                */
+                unsigned char tmpkeyiv[EVP_MAX_KEY_LENGTH + EVP_MAX_IV_LENGTH];
+                int iklen = EVP_CIPHER_key_length(cipher);
+                int ivlen = EVP_CIPHER_iv_length(cipher);
+                /* not needed if HASH_UPDATE() is fixed : */
+                int islen = (sptr != NULL ? sizeof(salt) : 0);
+                if (!PKCS5_PBKDF2_HMAC(str, str_len, sptr, islen,
+                                       iter, dgst, iklen+ivlen, tmpkeyiv)) {
+                    BIO_printf(bio_err, "PKCS5_PBKDF2_HMAC failed\n");
+                    goto end;
+                }
+                /* split and move data back to global buffer */
+                memcpy(key, tmpkeyiv, iklen);
+                memcpy(iv, tmpkeyiv+iklen, ivlen);
+            } else {
+                BIO_printf(bio_err, "*** WARNING : "
+                                    "deprecated key derivation used.\n"
+                                    "Using -iter or -pbkdf2 would be better.\n");
+                if (!EVP_BytesToKey(cipher, dgst, sptr,
+                                    (unsigned char *)str, str_len,
+                                    1, key, iv)) {
+                    BIO_printf(bio_err, "EVP_BytesToKey failed\n");
+                    goto end;
+                }
             }
             /*
              * zero the complete buffer or the string passed from the command
@@ -470,9 +509,8 @@ int enc_main(int argc, char **argv)
         if ((hiv == NULL) && (str == NULL)
             && EVP_CIPHER_iv_length(cipher) != 0) {
             /*
-             * No IV was explicitly set and no IV was generated during
-             * EVP_BytesToKey. Hence the IV is undefined, making correct
-             * decryption impossible.
+             * No IV was explicitly set and no IV was generated.
+             * Hence the IV is undefined, making correct decryption impossible.
              */
             BIO_printf(bio_err, "iv undefined\n");
             goto end;
diff --git a/doc/man1/enc.pod b/doc/man1/enc.pod
index cbf5cb2..01cca4e 100644
--- a/doc/man1/enc.pod
+++ b/doc/man1/enc.pod
@@ -27,6 +27,8 @@ B<openssl enc -I<cipher>>
 [B<-nosalt>]
 [B<-z>]
 [B<-md digest>]
+[B<-iter count>]
+[B<-pbkdf2>]
 [B<-p>]
 [B<-P>]
 [B<-bufsize number>]
@@ -109,6 +111,16 @@ the B<-pass> argument.
 Use the specified digest to create the key from the passphrase.
 The default algorithm is sha-256.
 
+=item B<-iter count>
+
+Use a given number of iterations on the password in deriving the encryption key.
+High values increase the time required to brute-force the resulting file.
+This option enables the use of PBKDF2 algorithm to derive the key.
+
+=item B<-pbkdf2>
+
+Use PBKDF2 algorithm with default iteration count unless otherwise specified.
+
 =item B<-nosalt>
 
 Don't use a salt in the key derivation routines. This option B<SHOULD NOT> be
@@ -375,8 +387,6 @@ Decrypt some data using a supplied 40 bit RC4 key:
 
 The B<-A> option when used with large files doesn't work properly.
 
-There should be an option to allow an iteration count to be included.
-
 The B<enc> program only supports a fixed number of algorithms with
 certain parameters. So if, for example, you want to use RC2 with a
 76 bit key or RC4 with an 84 bit key you can't use this program.

From builds at travis-ci.org  Wed Feb 21 12:24:29 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 21 Feb 2018 12:24:29 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16472 (master - ee76349)
In-Reply-To: <openssl/openssl+344269364+passed@travis-ci.org>
Message-ID: <5a8d64fd2ca3e_43ff6314f3bcc192514d@4bd91f79-d291-4184-a71f-ed0c21313741.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16472
Status: Passed

Duration: 45 minutes and 2 seconds
Commit: ee76349 (master)
Author: Matt Caswell
Message: Sanity check the ticket length before using key name/IV

This could in theory result in an overread - but due to the over allocation
of the underlying buffer does not represent a security issue.

Thanks to Fedor Indutny for reporting this issue.

Reviewed-by: Rich Salz <rsalz at openssl.org>
Reviewed-by: Ben Kaduk <kaduk at mit.edu>
(Merged from https://github.com/openssl/openssl/pull/5414)

View the changeset: https://github.com/openssl/openssl/compare/c7a47adca29e...ee763495250b

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/344269364?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/f91e9ae7/attachment.html>

From rsalz at openssl.org  Wed Feb 21 13:45:42 2018
From: rsalz at openssl.org (Rich Salz)
Date: Wed, 21 Feb 2018 13:45:42 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519220742.470035.1974.nullmailer@dev.openssl.org>

The branch master has been updated
       via  649cfb5cbb78e3c4c91ceb65fad2a4daad6047dd (commit)
      from  405988f2cca816fdfdf8ad62b1285dcf06822e85 (commit)


- Log -----------------------------------------------------------------
commit 649cfb5cbb78e3c4c91ceb65fad2a4daad6047dd
Author: Viktor Dukhovni <openssl-users at dukhovni.org>
Date:   Wed Feb 21 08:25:49 2018 -0500

    Use malloc to avoid alignment problems.
    
    Thanks to Norm Green for reporting this issue.
    
    Signed-off-by: Rich Salz <rsalz at openssl.org>
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5423)

-----------------------------------------------------------------------

Summary of changes:
 test/asn1_encode_test.c | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/test/asn1_encode_test.c b/test/asn1_encode_test.c
index e9f459a..1ae0519 100644
--- a/test/asn1_encode_test.c
+++ b/test/asn1_encode_test.c
@@ -709,15 +709,18 @@ static int do_encode_custom(EXPECTED *input,
 static int do_print_item(const TEST_PACKAGE *package)
 {
 #define DATA_BUF_SIZE 256
-    unsigned char buf[DATA_BUF_SIZE];
     const ASN1_ITEM *i = ASN1_ITEM_ptr(package->asn1_type);
-    ASN1_VALUE *o = (ASN1_VALUE *)&buf;
+    ASN1_VALUE *o;
     int ret;
 
     OPENSSL_assert(package->encode_expectations_elem_size <= DATA_BUF_SIZE);
+    if ((o = OPENSSL_malloc(DATA_BUF_SIZE)) == NULL)
+        return 0;
 
-    (void)RAND_bytes(buf, (int)package->encode_expectations_elem_size);
+    (void)RAND_bytes((unsigned char*)o,
+                     (int)package->encode_expectations_elem_size);
     ret = ASN1_item_print(bio_err, o, 0, i, NULL);
+    OPENSSL_free(o);
 
     return ret;
 }

From openssl at openssl.org  Wed Feb 21 15:43:03 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Wed, 21 Feb 2018 15:43:03 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings enable-ubsan -DPEDANTIC
	-DOPENSSL_SMALL_FOOTPRINT -fno-sanitize=alignment
Message-ID: <1519227783.804413.12844.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings enable-ubsan -DPEDANTIC -DOPENSSL_SMALL_FOOTPRINT -fno-sanitize=alignment

Commit log since last time:

59bf467 Add tests for newly added constant time functions
dd8796c Some more cleanups of curve448 code
a4e6dd8 fixup! More style fixes for the curve448 code
1898512 fixup! Improve readability of f_impl.c and f_impl.h
8e32ec7 Improve readability of f_impl.c and f_impl.h
cb5ed32 Remove unrolled loops
909c68a Yet more style updates to the curve448 code
c1f15b7 Further style changes to curve448 code
9c9d6ff Simplify some code
a723227 Remove some unneccessary use of constant time code in curve448
434149c Fix a travis failure in the curve448 code
2abe3ca Remove the curve448 vector code
53ef325 More style fixes for the curve448 code
9fd3c85 Remove a strict aliasing issue with pre-computed curve448 constants
68b20c0 More style fixes to Curve448 code based on review feedback
04ebd4e Some style fixes
e411822 Formatting tweak based on review feedback
756b5af Use NLIMBS where appropriate to simplify the code
8855a9a Remove cplusplus guards in internal headers
f918504 Remove the curve448 specific constant time implementation
e0fa632 Add some new constant time functions needed by curve448
7114a5a Use the NLIMBS macro rather than try and calculate the number of limbs
bd74eae Rename a function to avoid a clash
7e492f3 Remove curve448 architecture specific files
0cdcdac Fix AppVeyor failure in eddsa.c
dd03fd7 Fix travis failure in f_impl.c
06d72c2 Fix a typo in a comment
f53c776 Update Curve448 copyright for 2018
bce3108 Code tidy up
7d9e120 Fixes for compilation using clang
e54f5f3 Update the curve448 internal test to use testutil.h
2c9def2 Move curve448_test.c to be a full internal test
52a9587 Fix build errors for Curve448 code on Windows (VC-WIN32 and VC-WIN64A)
575d5af Remove some gcc/clang specific attributes we don't support
db90b27 Remove duplicated 448 in the names of various things
001a093 Merge f_field.h into field.h
b47758d Merge f_arithmetic.c into f_generic.c
aeeef83 Remove references to libdecaf
35b7c85 Remove some unneeded code
8d55f84 Manual formatting tweaks to Curve448 code
205fd63 Run util/openssl-format-source on the Curve448 code
1308e02 Update the imported curve448 code to use OpenSSL copyright headers
22bcc9c Fix the ED448 key lengths
ff489fb Integrate Curve448 into the build system
094c071 Convert to C90 from C99
bb6e60a Rename the decaf files to curve448 files
c414879 Remove portable_endian.h
2799d38 Remove the old shake256 implementation
a242839 Convert Curve448 internals to use OpenSSL shake256
c255e98 Use OpenSSL shake256
6ea71cb Add tests for Ed448ph
4ea41da Add Ed448 tests
6207b13 Remove inclusion of header files that we can't rely on due to portability
ca42a31 Remove DECAF_NOINLINE
91f2e94 Remove DECAF_NONNULL
09ffbc9 Remove all instances of DECAF_API_VIS
9455aab Replace DECAF_WARN_UNUSED with __owur
aacf29b Replace DECAF_INLINE with ossl_inline
88ba7e7 Remove some vestiges of the old decaf template approach
e777257 Rename decaf_448_* to curve448_*
46b4183 Remove some more unneeded code
a469abf Remove some uneeded macros and conditionally compiled code
67f1ccc Remove some unneeded stuff
6853d09 Add a local test
ad0a8a5 Add the X448() and X448_public_from_private() functions
b6e388b Remove the decaf_bzero function and replace with OPENSSL_cleanse()
f8385b0 Remove the curve448/decaf sub-directory
893b7c4 Remove some unneeded code
4052e1d Remove some deprecated curve 448 code and remove some unneeded defines
a2039c8 Remove some unneeded files and further flatten the curve 448 structure
abcd22b Flatten the Curve 448 source structure
7324473 Import Curve 448 support
ebc0168 Add BIO_bind function to bind local address for a socket.

Build log ended with (last 100 lines):

../../openssl/test/recipes/25-test_verify.t ................... ok
../../openssl/test/recipes/25-test_x509.t ..................... ok
../../openssl/test/recipes/30-test_afalg.t .................... ok
../../openssl/test/recipes/30-test_engine.t ................... ok
../../openssl/test/recipes/30-test_evp.t ...................... ok
../../openssl/test/recipes/30-test_evp_extra.t ................ ok
../../openssl/test/recipes/30-test_pbelu.t .................... ok
../../openssl/test/recipes/30-test_pkey_meth.t ................ ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t ............ ok
../../openssl/test/recipes/40-test_rehash.t ................... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t ..... ok
../../openssl/test/recipes/60-test_x509_dup_cert.t ............ ok
../../openssl/test/recipes/60-test_x509_store.t ............... ok
../../openssl/test/recipes/60-test_x509_time.t ................ ok
../../openssl/test/recipes/70-test_asyncio.t .................. ok
../../openssl/test/recipes/70-test_bad_dtls.t ................. ok
../../openssl/test/recipes/70-test_clienthello.t .............. ok
../../openssl/test/recipes/70-test_comp.t ..................... ok
../../openssl/test/recipes/70-test_key_share.t ................ ok
../../openssl/test/recipes/70-test_packet.t ................... ok
../../openssl/test/recipes/70-test_recordlen.t ................ ok
../../openssl/test/recipes/70-test_renegotiation.t ............ ok
../../openssl/test/recipes/70-test_servername.t ............... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t ............ ok
../../openssl/test/recipes/70-test_sslcertstatus.t ............ ok
../../openssl/test/recipes/70-test_sslextension.t ............. ok
../../openssl/test/recipes/70-test_sslmessages.t .............. ok
../../openssl/test/recipes/70-test_sslrecords.t ............... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ........... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ............... ok
../../openssl/test/recipes/70-test_sslsignature.t ............. ok
../../openssl/test/recipes/70-test_sslskewith0p.t ............. ok
../../openssl/test/recipes/70-test_sslversions.t .............. ok
../../openssl/test/recipes/70-test_sslvertol.t ................ ok
../../openssl/test/recipes/70-test_tls13cookie.t .............. ok
../../openssl/test/recipes/70-test_tls13downgrade.t ........... skipped: test_tls13downgrade not run in pre TLSv1.3 RFC implementation
../../openssl/test/recipes/70-test_tls13hrr.t ................. ok
../../openssl/test/recipes/70-test_tls13kexmodes.t ............ ok
../../openssl/test/recipes/70-test_tls13messages.t ............ ok
../../openssl/test/recipes/70-test_tls13psk.t ................. ok
../../openssl/test/recipes/70-test_tlsextms.t ................. ok
../../openssl/test/recipes/70-test_verify_extra.t ............. ok
../../openssl/test/recipes/70-test_wpacket.t .................. ok
../../openssl/test/recipes/80-test_ca.t ....................... ok
../../openssl/test/recipes/80-test_cipherbytes.t .............. ok
../../openssl/test/recipes/80-test_cipherlist.t ............... ok
../../openssl/test/recipes/80-test_ciphername.t ............... ok
../../openssl/test/recipes/80-test_cms.t ...................... ok
../../openssl/test/recipes/80-test_ct.t ....................... ok
../../openssl/test/recipes/80-test_dane.t ..................... ok
../../openssl/test/recipes/80-test_dtls.t ..................... ok
../../openssl/test/recipes/80-test_dtls_mtu.t ................. ok
../../openssl/test/recipes/80-test_dtlsv1listen.t ............. ok
../../openssl/test/recipes/80-test_ocsp.t ..................... ok
../../openssl/test/recipes/80-test_pkcs12.t ................... ok
../../openssl/test/recipes/80-test_ssl_new.t .................. ok
../../openssl/test/recipes/80-test_ssl_old.t .................. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t ............. ok
../../openssl/test/recipes/80-test_sslcorrupt.t ............... ok
../../openssl/test/recipes/80-test_tsa.t ...................... ok
../../openssl/test/recipes/80-test_x509aux.t .................. ok
../../openssl/test/recipes/90-test_asn1_time.t ................ ok
../../openssl/test/recipes/90-test_async.t .................... ok
../../openssl/test/recipes/90-test_bio_enc.t .................. ok
../../openssl/test/recipes/90-test_constant_time.t ............ ok
../../openssl/test/recipes/90-test_fatalerr.t ................. ok
../../openssl/test/recipes/90-test_gmdiff.t ................... ok
../../openssl/test/recipes/90-test_ige.t ...................... ok
../../openssl/test/recipes/90-test_memleak.t .................. ok
../../openssl/test/recipes/90-test_overhead.t ................. skipped: Only supported in no-shared builds
../../openssl/test/recipes/90-test_secmem.t ................... ok
../../openssl/test/recipes/90-test_shlibload.t ................ ok
../../openssl/test/recipes/90-test_srp.t ...................... ok
../../openssl/test/recipes/90-test_sslapi.t ................... ok
../../openssl/test/recipes/90-test_sslbuffers.t ............... ok
../../openssl/test/recipes/90-test_store.t .................... ok
../../openssl/test/recipes/90-test_threads.t .................. ok
../../openssl/test/recipes/90-test_time_offset.t .............. ok
../../openssl/test/recipes/90-test_tls13ccs.t ................. ok
../../openssl/test/recipes/90-test_tls13encryption.t .......... ok
../../openssl/test/recipes/90-test_tls13secrets.t ............. ok
../../openssl/test/recipes/90-test_v3name.t ................... ok
../../openssl/test/recipes/95-test_external_boringssl.t ....... skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_krb5.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/95-test_external_pyca.t ............ skipped: No external tests in this configuration
../../openssl/test/recipes/99-test_ecstress.t ................. ok
../../openssl/test/recipes/99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
../../openssl/test/recipes/03-test_internal_curve448.t      (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
Files=141, Tests=1313, 955 wallclock secs ( 6.49 usr  0.67 sys + 459.68 cusr 259.52 csys = 726.36 CPU)
Result: FAIL
Makefile:172: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/enable-ubsan'
Makefile:170: recipe for target 'tests' failed
make: *** [tests] Error 2

From no-reply at appveyor.com  Wed Feb 21 17:14:42 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 21 Feb 2018 17:14:42 +0000
Subject: [openssl-commits] Build failed: openssl master.15781
Message-ID: <20180221171442.1.8D4CA186C9F258DF@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/222ad87a/attachment.html>

From no-reply at appveyor.com  Wed Feb 21 17:44:28 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 21 Feb 2018 17:44:28 +0000
Subject: [openssl-commits] Build completed: openssl master.15782
Message-ID: <20180221174428.1.59A20A348A392B0A@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/ad52b924/attachment.html>

From no-reply at appveyor.com  Wed Feb 21 19:09:46 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 21 Feb 2018 19:09:46 +0000
Subject: [openssl-commits] Build failed: openssl master.15786
Message-ID: <20180221190946.1.D130DE0FB684D8FB@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/e4d792ec/attachment.html>

From rsalz at openssl.org  Wed Feb 21 19:18:06 2018
From: rsalz at openssl.org (Rich Salz)
Date: Wed, 21 Feb 2018 19:18:06 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1519240686.986930.10286.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4a45104b1146f500bd0db1c921d3101cd10099b4 (commit)
       via  8609abfd6aca838ed58095e670005791466e4307 (commit)
      from  81f14d3c92704e0a1bc18fdc5f47d62cf086812f (commit)


- Log -----------------------------------------------------------------
commit 4a45104b1146f500bd0db1c921d3101cd10099b4
Author: Rich Salz <rsalz at openssl.org>
Date:   Wed Feb 21 14:17:49 2018 -0500

    Add "last chance looking for" webpage generator

commit 8609abfd6aca838ed58095e670005791466e4307
Author: Rich Salz <rsalz at openssl.org>
Date:   Wed Feb 21 13:54:21 2018 -0500

    Secondary sort in email order

-----------------------------------------------------------------------

Summary of changes:
 license/README         |  2 ++
 license/add-lastchance | 74 ++++++++++++++++++++++++++++++++++++++++++++++++++
 license/get-followups  |  2 +-
 3 files changed, 77 insertions(+), 1 deletion(-)
 create mode 100755 license/add-lastchance

diff --git a/license/README b/license/README
index aa713db..3db5742 100644
--- a/license/README
+++ b/license/README
@@ -10,6 +10,8 @@ Tools
     rmcommit -- Remove a set of commits from a user's activity
     rmuser -- Remove specified email authors from database
     whattoremove -- Commits to remove for folks who said no
+    add-counts -- add commit data to output of get-followups
+    add-lastchance -- "last chance trying to reach" version of add-counts
 
 Passwords; create these files.  One line per each
     adpass.txt -- HTTP password for admin functions
diff --git a/license/add-lastchance b/license/add-lastchance
new file mode 100755
index 0000000..3d963f6
--- /dev/null
+++ b/license/add-lastchance
@@ -0,0 +1,74 @@
+#! /usr/bin/env perl
+# Annotate the output of "get-followups -d" to show the stats
+# of each commit for a "last chance trying to find" page.
+use strict;
+use warnings;
+
+die "Feed this the output of 'get-followups -d'\n" if -t 0;
+
+print <<'EOF';
+<html>
+  <head>
+    <title>Help find these hackers</title>
+    <link rel="stylesheet" type="text/css" href="/style.css">
+  </head>
+  <body>
+    <h1>Help find these hackers</h1>
+    <p>
+If you know where to find any of the following people, please email their
+current address to license at openssl.org, or ask them to get in touch.
+
+Each contributor is separated by a blank line.  The first line is the last
+known email we have (not valid), and the full name if known.  Each following
+line has the number of files changed, lines added and deleted, the commit ID
+and date, and then the commit subject line.
+
+Thank you!
+</p>
+<pre>
+EOF
+
+while ( <> ) {
+    unless ( /([0-da-f]{8}) .*/ ) {
+	s/.*uid.[0-9]+, //;
+	s/, \d, /, /;
+	s/"//g;
+	if ( /([^,]*), (.*)/ ) {
+	    if ( $1 eq $2 ) {
+		print "&lt;$1>\n";
+	    } else {
+		print "$2 &lt;$1>\n";
+	    }
+	} else {
+	    print;
+	}
+	next;
+    }
+    my $cid = $1;
+    my $line = $_;
+    $line =~ s/^\s*//;
+    if ( $cid eq 'd02b48c6' ) {
+	print "- +0/-0 ", $_;
+	next;
+    }
+    my $pattern = "$cid^..$cid";
+    my $files = 0;
+    my $adds = 0;
+    my $dels = 0;
+    open my $F, "git diff --numstat $pattern|"
+	|| die "Can't open git diff, $!\n";
+    while ( <$F> ) {
+	$files++;
+	next unless /(\d+)\s+(\d+)\s+(.*)/;
+	$adds += int($1);
+	$dels += int($2);
+    }
+    close $F || die "Can't close git diff, $!\n";
+    print "$files +$adds -$dels $line";
+}
+print <<'EOF';
+
+    </pre>
+</body>
+</html>
+EOF
diff --git a/license/get-followups b/license/get-followups
index 11fafb3..1d9472c 100755
--- a/license/get-followups
+++ b/license/get-followups
@@ -34,7 +34,7 @@ for o,a in opts:
 rows = []
 q = ('SELECT users.uid,email,reply,name,count(log.uid) FROM users'
         ' LEFT JOIN log ON log.uid = users.uid'
-        ' WHERE reply = "-" GROUP BY email ORDER BY count(log.uid)' )
+        ' WHERE reply = "-" GROUP BY email ORDER BY count(log.uid), email' )
 cursor.execute(q)
 for row in cursor:
     uid,email,reply,name,count = row

From kurt at openssl.org  Wed Feb 21 19:42:28 2018
From: kurt at openssl.org (Kurt Roeckx)
Date: Wed, 21 Feb 2018 19:42:28 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519242148.752463.14196.nullmailer@dev.openssl.org>

The branch master has been updated
       via  32bda2b2e4900308cb025020d8c8692e1d3c2ba9 (commit)
      from  649cfb5cbb78e3c4c91ceb65fad2a4daad6047dd (commit)


- Log -----------------------------------------------------------------
commit 32bda2b2e4900308cb025020d8c8692e1d3c2ba9
Author: Kurt Roeckx <kurt at roeckx.be>
Date:   Sun Feb 18 19:16:13 2018 +0100

    Switch the DRBGs from AES-128-CTR to AES-256-CTR
    
    Reviewed-by: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    GH: #5401

-----------------------------------------------------------------------

Summary of changes:
 include/internal/rand.h | 18 +++++++++++++-----
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/include/internal/rand.h b/include/internal/rand.h
index d56742e..471b6b5 100644
--- a/include/internal/rand.h
+++ b/include/internal/rand.h
@@ -15,14 +15,22 @@
 
 /*
  * Default security strength (in the sense of [NIST SP 800-90Ar1])
- * of the default OpenSSL DRBG, and the corresponding NID.
  *
- * Currently supported values: 128, 192, 256
+ * NIST SP 800-90Ar1 supports the strength of the DRBG being smaller than that
+ * of the cipher by collecting less entropy. The current DRBG implemantion does
+ * not take RAND_DRBG_STRENGTH into account and sets the strength of the DRBG
+ * to that of the cipher.
  *
- * TODO(DRBG): would be nice to have the strength configurable
+ * RAND_DRBG_STRENGTH is currently only used for the legacy RAND
+ * implementation.
+ *
+ * Currently supported ciphers are: NID_aes_128_ctr, NID_aes_192_ctr and
+ * NID_aes_256_ctr
+ *
+ * TODO(DRBG): would be nice to have the NID and strength configurable
  */
-# define RAND_DRBG_STRENGTH             128
-# define RAND_DRBG_NID                  NID_aes_128_ctr
+# define RAND_DRBG_STRENGTH             256
+# define RAND_DRBG_NID                  NID_aes_256_ctr
 
 /*
  * Object lifetime functions.

From no-reply at appveyor.com  Wed Feb 21 19:43:04 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 21 Feb 2018 19:43:04 +0000
Subject: [openssl-commits] Build completed: openssl master.15787
Message-ID: <20180221194304.1.1426F9632A896C5A@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180221/6d621ba4/attachment.html>

From kurt at openssl.org  Wed Feb 21 19:46:09 2018
From: kurt at openssl.org (Kurt Roeckx)
Date: Wed, 21 Feb 2018 19:46:09 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519242369.084453.15454.nullmailer@dev.openssl.org>

The branch master has been updated
       via  60595292ae83b112a1854a59379a51f210c04b6c (commit)
      from  32bda2b2e4900308cb025020d8c8692e1d3c2ba9 (commit)


- Log -----------------------------------------------------------------
commit 60595292ae83b112a1854a59379a51f210c04b6c
Author: Kurt Roeckx <kurt at roeckx.be>
Date:   Sun Feb 18 18:39:19 2018 +0100

    Check return value of time() when getting additional data for the DRBG
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    GH: #5400

-----------------------------------------------------------------------

Summary of changes:
 crypto/rand/rand_lib.c | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/crypto/rand/rand_lib.c b/crypto/rand/rand_lib.c
index 7b8b8fc..b8b7b6e 100644
--- a/crypto/rand/rand_lib.c
+++ b/crypto/rand/rand_lib.c
@@ -229,9 +229,11 @@ size_t rand_drbg_get_entropy(RAND_DRBG *drbg,
 }
 
 /*
- * Find a suitable system time.  Start with the highest resolution source
+ * Find a suitable source of time.  Start with the highest resolution source
  * and work down to the slower ones.  This is added as additional data and
  * isn't counted as randomness, so any result is acceptable.
+ *
+ * Returns 0 when we weren't able to find any time source
  */
 static uint64_t get_timer_bits(void)
 {
@@ -260,7 +262,7 @@ static uint64_t get_timer_bits(void)
     }
 #else
 
-#if defined(OSSL_POSIX_TIMER_OKAY)
+# if defined(OSSL_POSIX_TIMER_OKAY)
     {
         struct timespec ts;
         clockid_t cid;
@@ -286,7 +288,12 @@ static uint64_t get_timer_bits(void)
             return TWO32TO64(tv.tv_sec, tv.tv_usec);
     }
 # endif
-    return time(NULL);
+    {
+        time_t t = time(NULL);
+        if (t == (time_t)-1)
+            return 0;
+        return t;
+    }
 #endif
 }
 
@@ -329,7 +336,8 @@ size_t rand_drbg_get_additional_data(unsigned char **pout, size_t max_len)
         RAND_POOL_add(pool, (unsigned char *)&thread_id, sizeof(thread_id), 0);
 
     tbits = get_timer_bits();
-    RAND_POOL_add(pool, (unsigned char *)&tbits, sizeof(tbits), 0);
+    if (tbits != 0)
+        RAND_POOL_add(pool, (unsigned char *)&tbits, sizeof(tbits), 0);
 
     /* TODO: Use RDSEED? */
 

From openssl at openssl.org  Thu Feb 22 03:07:31 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 22 Feb 2018 03:07:31 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings no-ec
Message-ID: <1519268851.353435.24497.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ec

Commit log since last time:

6059529 Check return value of time() when getting additional data for the DRBG
32bda2b Switch the DRBGs from AES-128-CTR to AES-256-CTR
649cfb5 Use malloc to avoid alignment problems.
405988f Add support for PBKDF2 for enc command
5905396 do_body: fix heap-use-after-free.
abcf241 X509V3_EXT_add_nconf_sk, X509v3_add_ext: fix errors handling
8db7946 Replaced variable-time GCD with consttime inversion to avoid side-channel attacks on RSA key generation
ee76349 Sanity check the ticket length before using key name/IV
c7a47ad Fix no-ec build
7876dbf Fix some undefined behaviour in the Curve448 code
6c61b27 Remove a spurious TLSProxy byte in TLSv1.3
b8a3f39 VMS: Fix curve448 internal test program
d4c499f test/recipes/80-test_pkcs12.t: handle lack of Win32::API.
0e5c8d5 Configure: engage x25519 assembly support.
c521e43 ec/curve25519.c: facilitate assembly implementations.
42efffc Add x25519-x86_64.pl module, mod 2^255-19 primitives.
127d6cf crypto/ec/curve25519.c: remove redundant fe[51]_cswap.

From no-reply at appveyor.com  Thu Feb 22 03:31:20 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 22 Feb 2018 03:31:20 +0000
Subject: [openssl-commits] Build failed: openssl master.15800
Message-ID: <20180222033120.1.7BCCCCA83831942E@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180222/d75a7325/attachment-0001.html>

From no-reply at appveyor.com  Thu Feb 22 04:08:34 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 22 Feb 2018 04:08:34 +0000
Subject: [openssl-commits] Build completed: openssl master.15801
Message-ID: <20180222040834.1.E595F7DCC2858BB3@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180222/a54ba02f/attachment.html>

From levitte at openssl.org  Thu Feb 22 15:43:13 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 22 Feb 2018 15:43:13 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519314193.244484.10766.nullmailer@dev.openssl.org>

The branch master has been updated
       via  a1b6933ea4def7ce9333fd64ef7d6083aa306c2a (commit)
       via  820e414d2830f2a28cd6daf49251f52f75046f2f (commit)
       via  047f0292d56b47f097236b879ab623f1663894b8 (commit)
       via  f729ba5537fe0733764b7eaa6f73f6e5f7f9b666 (commit)
       via  8590b1f38d2f0278a730d5a7d077d24eb292e48f (commit)
       via  5f2e18bc3e8a85fe4ea2d0c892b7399c797c7cd0 (commit)
       via  d5fa7035cbe7f7f4cb6d69a3b7f8680fde5008f0 (commit)
      from  60595292ae83b112a1854a59379a51f210c04b6c (commit)


- Log -----------------------------------------------------------------
commit a1b6933ea4def7ce9333fd64ef7d6083aa306c2a
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 20:33:13 2018 +0100

    Build file templates: be less verbose when reconfiguring
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5247)

commit 820e414d2830f2a28cd6daf49251f52f75046f2f
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 12:30:50 2018 +0100

    Replace the message about configdata.pm as a script
    
    The new message is geared toward issue reports
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5247)

commit 047f0292d56b47f097236b879ab623f1663894b8
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 12:30:14 2018 +0100

    Add a comment in configdata.pm regarding script-only variables
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5247)

commit f729ba5537fe0733764b7eaa6f73f6e5f7f9b666
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 12:27:29 2018 +0100

    Make CROSS_COMPILE another supported "make variable" in Configure
    
    No more special casing for that one, and this means it gets displayed
    by 'perl configdata.pm --make-variables' among all the others.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5247)

commit 8590b1f38d2f0278a730d5a7d077d24eb292e48f
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 12:25:26 2018 +0100

    Unix Makefile: Rework the assignment of CXX and AS
    
    If the configured value is the empty string, give them a sane default.
    Otherwise, give them the configured value prefix with $(CROSS_COMPILE)
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5247)

commit 5f2e18bc3e8a85fe4ea2d0c892b7399c797c7cd0
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 12:23:09 2018 +0100

    Refactor the ranlib attribute
    
    It was inconsistent to see this specific command have
    '$(CROSS_COMPILE)' in its value when no other command did.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5247)

commit d5fa7035cbe7f7f4cb6d69a3b7f8680fde5008f0
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 2 12:21:27 2018 +0100

    Have configdata.pm display information on perl
    
    Specifically, the specific perl that was used to run Configure
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5247)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/00-base-templates.conf |  8 ++---
 Configurations/descrip.mms.tmpl       |  4 +--
 Configurations/unix-Makefile.tmpl     | 10 +++---
 Configurations/windows-makefile.tmpl  |  4 +--
 Configure                             | 64 +++++++++++++++++++++--------------
 5 files changed, 52 insertions(+), 38 deletions(-)

diff --git a/Configurations/00-base-templates.conf b/Configurations/00-base-templates.conf
index 99c271e..0350997 100644
--- a/Configurations/00-base-templates.conf
+++ b/Configurations/00-base-templates.conf
@@ -50,8 +50,8 @@ my %targets=(
 	arflags		=> "r",
 	cc		=> "cc",
 	hashbangperl	=> "/usr/bin/env perl",
-	ranlib		=> sub { which("$config{cross_compile_prefix}ranlib") ?
-				     "\$(CROSS_COMPILE)ranlib" : "true"; },
+	ranlib		=> sub { which("$config{cross_compile_prefix}ranlib")
+                                     ? "ranlib" : "" },
 	rc		=> "windres",
 
 	#### THESE WILL BE ENABLED IN OpenSSL 1.2
@@ -94,8 +94,8 @@ my %targets=(
                   && defined($disabled{"zlib-dynamic"})
                   ? "-lz" : () },
         hashbangperl    => "/usr/bin/env perl", # Only Unix actually cares
-        ranlib          => sub { which("$config{cross_compile_prefix}ranlib") ?
-                                     "\$(CROSS_COMPILE)ranlib" : "true"; },
+        ranlib          => sub { which("$config{cross_compile_prefix}ranlib")
+                                     ? "ranlib" : "" },
         rc              => "windres",
 
         build_scheme    => [ "unified", "unix" ],
diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index ab2485a..72bae8b 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -558,7 +558,7 @@ debug_logicals :
 # Building targets ###################################################
 
 configdata.pm : $(SRCDIR)Configure $(SRCDIR)config.com {- join(" ", @{$config{build_file_templates}}, @{$config{build_infos}}, @{$config{conf_files}}) -}
-        perl configdata.pm -r -v
+        perl configdata.pm -r
         @ WRITE SYS$OUTPUT "*************************************************"
         @ WRITE SYS$OUTPUT "***                                           ***"
         @ WRITE SYS$OUTPUT "***   Please run the same mms command again   ***"
@@ -567,7 +567,7 @@ configdata.pm : $(SRCDIR)Configure $(SRCDIR)config.com {- join(" ", @{$config{bu
         @ PIPE ( EXIT %X10000000 )
 
 reconfigure reconf :
-	perl configdata.pm -r -v
+	perl configdata.pm -r
 
 {-
   use File::Basename;
diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index 1f214a2..b3edd66 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -191,7 +191,7 @@ CPPFLAGS={- our $cppflags = join(" ",
 CPPFLAGS_Q={- $cppflags =~ s|([\\"])|\\$1|g; $cppflags -}
 CC= $(CROSS_COMPILE){- $config{cc} -}
 CFLAGS={- join(' ', @{$config{cflags}}) -}
-CXX= $(CROSS_COMPILE){- $config{cxx} -}
+CXX={- $config{cxx} ? "\$(CROSS_COMPILE)$config{cxx}" : '' -}
 CXXFLAGS={- join(' ', @{$config{cxxflags}}) -}
 LDFLAGS= {- join(' ', @{$config{lflags}}) -}
 PLIB_LDFLAGS= {- join(' ', @{$config{plib_lflags}}) -}
@@ -218,7 +218,7 @@ PERL={- $config{perl} -}
 
 AR=$(CROSS_COMPILE){- $config{ar} -}
 ARFLAGS= {- join(' ', @{$config{arflags}}) -}
-RANLIB= {- $config{ranlib} -}
+RANLIB={- $config{ranlib} ? "\$(CROSS_COMPILE)$config{ranlib}" : "true"; -}
 RC= $(CROSS_COMPILE){- $target{rc} || "windres" -}
 RCFLAGS={- join(' ', @{$config{rcflags}}) -} {- $target{shared_rcflag} -}
 RM= rm -f
@@ -236,7 +236,7 @@ TARFILE=        ../$(NAME).tar
 # dependent assembler flags. E.g. if you throw -mcpu=ultrasparc at SPARC
 # gcc, then the driver will automatically translate it to -xarch=v8plus
 # and pass it down to assembler.
-AS={- $config{as} || '$(CC) -c' -}
+AS={- $config{as} ? "\$(CROSS_COMPILE)$config{as}" : '$(CC) -c' -}
 ASFLAGS={- join(' ', @{$config{asflags}}) || '$(CFLAGS)' -}
 PERLASM_SCHEME= {- $target{perlasm_scheme} -}
 
@@ -787,7 +787,7 @@ openssl.pc:
 
 configdata.pm: $(SRCDIR)/Configure $(SRCDIR)/config {- join(" ", @{$config{build_file_templates}}, @{$config{build_infos}}, @{$config{conf_files}}) -}
 	@echo "Detected changed: $?"
-	$(PERL) configdata.pm -r -v
+	$(PERL) configdata.pm -r
 	@echo "**************************************************"
 	@echo "***                                            ***"
 	@echo "***   Please run the same make command again   ***"
@@ -796,7 +796,7 @@ configdata.pm: $(SRCDIR)/Configure $(SRCDIR)/config {- join(" ", @{$config{build
 	@false
 
 reconfigure reconf:
-	$(PERL) configdata.pm -r -v
+	$(PERL) configdata.pm -r
 
 {-
   use File::Basename;
diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index ab557b8..3e8348e 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -372,7 +372,7 @@ uninstall_html_docs:
 
 configdata.pm: "$(SRCDIR)\Configure" {- join(" ", map { '"'.$_.'"' } @{$config{build_file_templates}}, @{$config{build_infos}}, @{$config{conf_files}}) -}
 	@echo "Detected changed: $?"
-	"$(PERL)" configdata.pm -r -v
+	"$(PERL)" configdata.pm -r
 	@echo "**************************************************"
 	@echo "***                                            ***"
 	@echo "***   Please run the same make command again   ***"
@@ -381,7 +381,7 @@ configdata.pm: "$(SRCDIR)\Configure" {- join(" ", map { '"'.$_.'"' } @{$config{b
 	@exit 1
 
 reconfigure reconf:
-	"$(PERL)" configdata.pm -r -v
+	"$(PERL)" configdata.pm -r
 
 {-
  use File::Basename;
diff --git a/Configure b/Configure
index 05618ed..3c40a0e 100755
--- a/Configure
+++ b/Configure
@@ -278,11 +278,15 @@ if (defined env($local_config_envname)) {
     }
 }
 
+# Save away perl command information
+$config{perl_cmd} = $^X;
+$config{perl_version} = $Config{version};
+$config{perl_archname} = $Config{archname};
+
 $config{prefix}="";
 $config{openssldir}="";
 $config{processor}="";
 $config{libdir}="";
-$config{cross_compile_prefix}="";
 my $auto_threads=1;    # enable threads automatically? true by default
 my $default_ranlib;
 
@@ -532,6 +536,7 @@ my %user = (
     CPPFLAGS    => [],  # -D, -I, -Wp,
     CPPDEFINES  => [],  # Alternative for -D
     CPPINCLUDES => [],  # Alternative for -I
+    CROSS_COMPILE => undef,
     HASHBANGPERL=> undef,
     LD          => undef,
     LDFLAGS     => [],  # -L, -Wl,
@@ -543,6 +548,9 @@ my %user = (
     RCFLAGS     => [],
     RM          => undef,
    );
+# Info about what "make variables" may be prefixed with the cross compiler
+# prefix.  This should NEVER mention any such variable with a list for value.
+my @user_crossable = qw ( AR AS CC CXX CPP LD MT RANLIB RC );
 # The same but for flags given as Configure options.  These are *additional*
 # input, as opposed to the VAR=string option that override the corresponding
 # config target attributes
@@ -564,6 +572,7 @@ my %user_to_target = (
     # If not given here, the value is the lc of the key
     CPPDEFINES  => 'defines',
     CPPINCLUDES => 'includes',
+    CROSS_COMPILE => 'cross_compile_prefix',
     LDFLAGS     => 'lflags',
     LDLIBS      => 'ex_libs',
    );
@@ -779,7 +788,7 @@ while (@argvcopy)
                         }
 		elsif (/^--cross-compile-prefix=(.*)$/)
 			{
-			$config{cross_compile_prefix}=$1;
+			$user{CROSS_COMPILE}=$1;
 			}
 		elsif (/^--config=(.*)$/)
 			{
@@ -1034,10 +1043,6 @@ $target{dso_extension}=$target{shared_extension_simple};
 ($target{shared_import_extension}=$target{shared_extension_simple}.".a")
     if ($config{target} =~ /^(?:Cygwin|mingw)/);
 
-
-$config{cross_compile_prefix} = env('CROSS_COMPILE')
-    if $config{cross_compile_prefix} eq "";
-
 # Allow overriding the names of some tools.  USE WITH CARE
 # Note: only Unix cares about HASHBANGPERL...  that explains
 # the default string.
@@ -2299,6 +2304,8 @@ if ($builder eq "unified") {
 
 EOF
 }
+print OUT
+    "# The following data is only used when this files is use as a script\n";
 print OUT "my \%makevars = (\n";
 foreach (sort keys %user) {
     print OUT '    ',$_,' ' x (20 - length $_),'=> ',
@@ -2321,6 +2328,7 @@ foreach my $what (sort keys %disabled_info) {
     print OUT "    },\n";
 }
 print OUT ");\n";
+print OUT 'my @user_crossable = qw( ', join (' ', @user_crossable), " );\n";
 print OUT << 'EOF';
 # If run directly, we can give some answers, and even reconfigure
 unless (caller) {
@@ -2373,12 +2381,14 @@ _____
                   -verbose => 2);
     }
     if ($dump || $cmdline) {
-        print "\n(with current working directory = $here)";
-        print "\nCommand line:\n\n";
+        print "\nCommand line (with current working directory = $here):\n\n";
         print '    ',join(' ',
                           $config{perl},
                           catfile($config{sourcedir}, 'Configure'),
                           @{$config{perlargv}}), "\n";
+        print "\nPerl information:\n\n";
+        print '    ',$config{perl_cmd},"\n";
+        print '    ',$config{perl_version},' for ',$config{perl_archname},"\n";
     }
     if ($dump || $options) {
         my $longest = 0;
@@ -2430,13 +2440,16 @@ _____
     }
     if ($dump || $makevars) {
         print "\nMakevars:\n\n";
-        foreach (sort keys %makevars) {
-            print '    ',$_,' ' x (16 - length $_),'= ',
-                (ref $config{$makevars{$_}} eq 'ARRAY'
-                 ? join(' ', @{$config{$makevars{$_}}})
-                 : $config{$makevars{$_}}),
+        foreach my $var (sort keys %makevars) {
+            my $prefix = '';
+            $prefix = $config{cross_compile_prefix}
+                if grep { $var eq $_ } @user_crossable;
+            print '    ',$var,' ' x (16 - length $var),'= ',
+                (ref $config{$makevars{$var}} eq 'ARRAY'
+                 ? join(' ', @{$config{$makevars{$var}}})
+                 : $prefix.$config{$makevars{$var}}),
                 "\n"
-                if defined $config{$makevars{$_}};
+                if defined $config{$makevars{$var}};
         }
 
         my @buildfile = ($config{builddir}, $config{build_file});
@@ -2590,17 +2603,6 @@ my %builders = (
 
 $builders{$builder}->($builder_platform, @builder_opts);
 
-# Show a note on the use of configdata.pm, but ONLY for release 1.1.1
-# (i.e. this message disappears with the following update, 1.1.1a)
-print <<"EOF" if ($config{version_num} =~ m|^0x1010100.L$|);
-
-NOTE: Starting with OpenSSL 1.1.1, 'Configure' doesn't display all the disabled
-options or the "make variables" with their values.  Instead, you must use
-'configdata.pm' as a script to get a display of the configuration data.  For
-help, please do this:
-
-        perl configdata.pm --help
-EOF
 print <<"EOF" if ($disabled{threads} eq "unavailable");
 
 The library could not be configured for supporting multi-threaded
@@ -2625,6 +2627,18 @@ safest course of action is to clean the source directory and redo this
 configuration.
 EOF
 
+print <<"EOF";
+
+**********************************************************************
+***                                                                ***
+***   If you want to report a building issue, please include the   ***
+***   output from this command:                                    ***
+***                                                                ***
+***     perl configdata.pm --dump                                  ***
+***                                                                ***
+**********************************************************************
+EOF
+
 exit(0);
 
 ######################################################################

From openssl at openssl.org  Thu Feb 22 15:48:38 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Thu, 22 Feb 2018 15:48:38 +0000
Subject: [openssl-commits] SUCCESSFUL build of OpenSSL branch master with
	options -d --strict-warnings enable-ubsan -DPEDANTIC
	-DOPENSSL_SMALL_FOOTPRINT -fno-sanitize=alignment
Message-ID: <1519314518.423008.10816.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings enable-ubsan -DPEDANTIC -DOPENSSL_SMALL_FOOTPRINT -fno-sanitize=alignment

Commit log since last time:

6059529 Check return value of time() when getting additional data for the DRBG
32bda2b Switch the DRBGs from AES-128-CTR to AES-256-CTR
649cfb5 Use malloc to avoid alignment problems.
405988f Add support for PBKDF2 for enc command
5905396 do_body: fix heap-use-after-free.
abcf241 X509V3_EXT_add_nconf_sk, X509v3_add_ext: fix errors handling
8db7946 Replaced variable-time GCD with consttime inversion to avoid side-channel attacks on RSA key generation
ee76349 Sanity check the ticket length before using key name/IV
c7a47ad Fix no-ec build
7876dbf Fix some undefined behaviour in the Curve448 code
6c61b27 Remove a spurious TLSProxy byte in TLSv1.3
b8a3f39 VMS: Fix curve448 internal test program
d4c499f test/recipes/80-test_pkcs12.t: handle lack of Win32::API.
0e5c8d5 Configure: engage x25519 assembly support.
c521e43 ec/curve25519.c: facilitate assembly implementations.
42efffc Add x25519-x86_64.pl module, mod 2^255-19 primitives.
127d6cf crypto/ec/curve25519.c: remove redundant fe[51]_cswap.

From matt at openssl.org  Thu Feb 22 16:43:31 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 22 Feb 2018 16:43:31 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519317811.008104.21211.nullmailer@dev.openssl.org>

The branch master has been updated
       via  6f4b929af0b7dfb6a4d420fc9a8e25016f616c10 (commit)
      from  a1b6933ea4def7ce9333fd64ef7d6083aa306c2a (commit)


- Log -----------------------------------------------------------------
commit 6f4b929af0b7dfb6a4d420fc9a8e25016f616c10
Author: Per Sandstr?m <per.j.sandstrom at gmail.com>
Date:   Wed Feb 14 14:08:33 2018 +0100

    Update EC_POINT_new.pod
    
    CLA: trivial
    fix typo:
    EC_point2buf => EC_POINT_point2buf
    
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5367)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/EC_POINT_new.pod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/man3/EC_POINT_new.pod b/doc/man3/EC_POINT_new.pod
index 3358a08..e10c0a9 100644
--- a/doc/man3/EC_POINT_new.pod
+++ b/doc/man3/EC_POINT_new.pod
@@ -164,7 +164,7 @@ EC_POINT_set_compressed_coordinates_GF2m() and EC_POINT_oct2point().
 
 EC_POINT_method_of returns the EC_METHOD associated with the supplied EC_POINT.
 
-EC_POINT_point2oct() and EC_point2buf() return the length of the required
+EC_POINT_point2oct() and EC_POINT_point2buf() return the length of the required
 buffer or 0 on error.
 
 EC_POINT_point2bn() returns the pointer to the BIGNUM supplied, or NULL on

From matt at openssl.org  Thu Feb 22 16:43:43 2018
From: matt at openssl.org (Matt Caswell)
Date: Thu, 22 Feb 2018 16:43:43 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519317823.284559.22200.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  15f90bc60a11ec6b5fe42f9fb155715a64e4ab10 (commit)
      from  a9603be1a8484fc17cbcb0f4df953a4c6f37ffa1 (commit)


- Log -----------------------------------------------------------------
commit 15f90bc60a11ec6b5fe42f9fb155715a64e4ab10
Author: Per Sandstr?m <per.j.sandstrom at gmail.com>
Date:   Wed Feb 14 14:08:33 2018 +0100

    Update EC_POINT_new.pod
    
    CLA: trivial
    fix typo:
    EC_point2buf => EC_POINT_point2buf
    
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5367)
    
    (cherry picked from commit 6f4b929af0b7dfb6a4d420fc9a8e25016f616c10)

-----------------------------------------------------------------------

Summary of changes:
 doc/crypto/EC_POINT_new.pod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/crypto/EC_POINT_new.pod b/doc/crypto/EC_POINT_new.pod
index 3358a08..e10c0a9 100644
--- a/doc/crypto/EC_POINT_new.pod
+++ b/doc/crypto/EC_POINT_new.pod
@@ -164,7 +164,7 @@ EC_POINT_set_compressed_coordinates_GF2m() and EC_POINT_oct2point().
 
 EC_POINT_method_of returns the EC_METHOD associated with the supplied EC_POINT.
 
-EC_POINT_point2oct() and EC_point2buf() return the length of the required
+EC_POINT_point2oct() and EC_POINT_point2buf() return the length of the required
 buffer or 0 on error.
 
 EC_POINT_point2bn() returns the pointer to the BIGNUM supplied, or NULL on

From rsalz at openssl.org  Thu Feb 22 18:54:30 2018
From: rsalz at openssl.org (Rich Salz)
Date: Thu, 22 Feb 2018 18:54:30 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519325670.040376.11314.nullmailer@dev.openssl.org>

The branch master has been updated
       via  d16a2c1931534cfc798a15c255e17180844d2ceb (commit)
      from  6f4b929af0b7dfb6a4d420fc9a8e25016f616c10 (commit)


- Log -----------------------------------------------------------------
commit d16a2c1931534cfc798a15c255e17180844d2ceb
Author: Steve Linsell <stevenx.linsell at intel.com>
Date:   Thu Feb 22 13:24:13 2018 -0500

    initialise dc variable to satisfy old compilers.
    
    When compiling with -Wall on a machine with an old compiler it gives a false
    positive that the dc variable which is a structure of type DISPLAY_COLUMNS
    could be used uninitialised. In fact the dc variable's members will always get
    set in the case it is used, otherwise it is left uninitialised.
    This fix just causes the dc variable's members to always get initialised to 0
    at declaration, so the false positive will not get flagged.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5337)

-----------------------------------------------------------------------

Summary of changes:
 apps/openssl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/openssl.c b/apps/openssl.c
index fffa05e..39b4f2c 100644
--- a/apps/openssl.c
+++ b/apps/openssl.c
@@ -520,7 +520,7 @@ static void list_type(FUNC_TYPE ft, int one)
 {
     FUNCTION *fp;
     int i = 0;
-    DISPLAY_COLUMNS dc;
+    DISPLAY_COLUMNS dc = {0};
 
     if (!one)
         calculate_columns(&dc);

From rsalz at openssl.org  Thu Feb 22 18:56:56 2018
From: rsalz at openssl.org (Rich Salz)
Date: Thu, 22 Feb 2018 18:56:56 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1519325816.930430.12381.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  99bb59d9d7fbcf73c8ed1e5b3e9cb7e3b0225521 (commit)
      from  a25e2d49a75eb01dcdad41a5bec05666d461b2d6 (commit)


- Log -----------------------------------------------------------------
commit 99bb59d9d7fbcf73c8ed1e5b3e9cb7e3b0225521
Author: Philippe Antoine <p.antoine at catenacyber.fr>
Date:   Thu Feb 22 13:56:40 2018 -0500

    Checks ec_points_format extension size
    
    Before reading first byte as length
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5410)

-----------------------------------------------------------------------

Summary of changes:
 ssl/t1_lib.c | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index a186623..3c5b6ad 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -2284,8 +2284,13 @@ static int ssl_scan_clienthello_tlsext(SSL *s, unsigned char **p,
 # ifndef OPENSSL_NO_EC
         else if (type == TLSEXT_TYPE_ec_point_formats) {
             unsigned char *sdata = data;
-            int ecpointformatlist_length = *(sdata++);
+            int ecpointformatlist_length;
 
+            if (size == 0) {
+                goto err;
+            }
+
+            ecpointformatlist_length = *(sdata++);
             if (ecpointformatlist_length != size - 1 ||
                 ecpointformatlist_length < 1)
                 goto err;
@@ -2711,8 +2716,14 @@ static int ssl_scan_serverhello_tlsext(SSL *s, unsigned char **p,
 # ifndef OPENSSL_NO_EC
         else if (type == TLSEXT_TYPE_ec_point_formats) {
             unsigned char *sdata = data;
-            int ecpointformatlist_length = *(sdata++);
+            int ecpointformatlist_length;
+
+            if (size == 0) {
+                *al = TLS1_AD_DECODE_ERROR;
+                return 0;
+            }
 
+            ecpointformatlist_length = *(sdata++);
             if (ecpointformatlist_length != size - 1) {
                 *al = TLS1_AD_DECODE_ERROR;
                 return 0;

From rsalz at openssl.org  Thu Feb 22 18:58:31 2018
From: rsalz at openssl.org (Rich Salz)
Date: Thu, 22 Feb 2018 18:58:31 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1519325911.166034.13529.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  37e62cee3ee50983ecad88813ec11b326efb123a (commit)
      from  99bb59d9d7fbcf73c8ed1e5b3e9cb7e3b0225521 (commit)


- Log -----------------------------------------------------------------
commit 37e62cee3ee50983ecad88813ec11b326efb123a
Author: White_Rabbit <bruno at tracciabi.li>
Date:   Thu Feb 22 13:58:19 2018 -0500

    Update s_client doc adding xmpp as value for -starttls
    
    CLA: trivial
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5407)

-----------------------------------------------------------------------

Summary of changes:
 doc/apps/s_client.pod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/apps/s_client.pod b/doc/apps/s_client.pod
index d9413a0..d2cad29 100644
--- a/doc/apps/s_client.pod
+++ b/doc/apps/s_client.pod
@@ -250,7 +250,7 @@ use the server's cipher preferences; only used for SSLV2.
 
 send the protocol-specific message(s) to switch to TLS for communication.
 B<protocol> is a keyword for the intended protocol.  Currently, the only
-supported keywords are "smtp", "pop3", "imap", and "ftp".
+supported keywords are "smtp", "pop3", "imap", "ftp" and "xmpp".
 
 =item B<-tlsextdebug>
 

From no-reply at appveyor.com  Thu Feb 22 19:01:44 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 22 Feb 2018 19:01:44 +0000
Subject: [openssl-commits] Build failed: openssl master.15822
Message-ID: <20180222190144.1.773AF4DEDF5B3FBF@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180222/580c2808/attachment.html>

From no-reply at appveyor.com  Thu Feb 22 19:27:23 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 22 Feb 2018 19:27:23 +0000
Subject: [openssl-commits] Build completed: openssl master.15823
Message-ID: <20180222192723.1.62E36B0F77462F0E@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180222/c7fd8416/attachment.html>

From rsalz at openssl.org  Thu Feb 22 20:48:16 2018
From: rsalz at openssl.org (Rich Salz)
Date: Thu, 22 Feb 2018 20:48:16 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519332496.660135.31348.nullmailer@dev.openssl.org>

The branch master has been updated
       via  1af563e3742c5be733194dab9778e064984b3c23 (commit)
      from  d16a2c1931534cfc798a15c255e17180844d2ceb (commit)


- Log -----------------------------------------------------------------
commit 1af563e3742c5be733194dab9778e064984b3c23
Author: Rich Salz <rsalz at openssl.org>
Date:   Thu Feb 22 15:36:27 2018 -0500

    Remove unused num.pl,segregnam scripts
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5433)

-----------------------------------------------------------------------

Summary of changes:
 crypto/lhash/num.pl | 23 -----------------
 ms/segrenam.pl      | 71 -----------------------------------------------------
 2 files changed, 94 deletions(-)
 delete mode 100644 crypto/lhash/num.pl
 delete mode 100755 ms/segrenam.pl

diff --git a/crypto/lhash/num.pl b/crypto/lhash/num.pl
deleted file mode 100644
index 8a8c42c..0000000
--- a/crypto/lhash/num.pl
+++ /dev/null
@@ -1,23 +0,0 @@
-#! /usr/bin/env perl
-# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
-#
-# Licensed under the OpenSSL license (the "License").  You may not use
-# this file except in compliance with the License.  You can obtain a copy
-# in the file LICENSE in the source distribution or at
-# https://www.openssl.org/source/license.html
-
-#node     10 ->   4
-
-while (<>)
-	{
-	next unless /^node/;
-	s|\R$||;                # Better chomp
-	@a=split;
-	$num{$a[3]}++;
-	}
-
- at a=sort {$a <=> $b } keys %num;
-foreach (0 .. $a[$#a])
-	{
-	printf "%4d:%4d\n",$_,$num{$_};
-	}
diff --git a/ms/segrenam.pl b/ms/segrenam.pl
deleted file mode 100755
index 353a0ef..0000000
--- a/ms/segrenam.pl
+++ /dev/null
@@ -1,71 +0,0 @@
-#! /usr/bin/env perl
-# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
-#
-# Licensed under the OpenSSL license (the "License").  You may not use
-# this file except in compliance with the License.  You can obtain a copy
-# in the file LICENSE in the source distribution or at
-# https://www.openssl.org/source/license.html
-
-my $quiet = 1;
-
-unpack("L",pack("N",1))!=1 || die "only little-endian hosts are supported";
-
-# first argument can specify custom suffix...
-$suffix=(@ARGV[0]=~/^\$/) ? shift(@ARGV) : "\$m";
-#################################################################
-# rename segments in COFF modules according to %map table below #
-%map=( ".text"  => "fipstx$suffix",                             #
-       ".text\$"=> "fipstx$suffix",                             #
-       ".rdata" => "fipsrd$suffix",                             #
-       ".data"  => "fipsda$suffix" );                           #
-#################################################################
-
-# collect file list
-foreach (@ARGV) {
-    if (/\*/) { push(@files,glob($_)); }
-    else      { push(@files,$_);       }
-}
-
-use Fcntl;
-use Fcntl ":seek";
-
-foreach (@files) {
-    $file=$_;
-    print "processing $file\n" unless $quiet;
-
-    sysopen(FD,$file,O_RDWR|O_BINARY) || die "sysopen($file): $!";
-
-    # read IMAGE_DOS_HEADER
-    sysread(FD,$mz,64)==64 || die "$file is too short";
-    @dos_header=unpack("a2C58I",$mz);
-    if (@dos_header[0] eq "MZ") {
-        $e_lfanew=pop(@dos_header);
-        sysseek(FD,$e_lfanew,SEEK_SET) || die "$file is too short";
-        sysread(FD,$Magic,4)==4        || die "$file is too short";
-        unpack("I",$Magic)==0x4550     || die "$file is not COFF image";
-    } elsif ($file =~ /\.obj$/i) {
-        # .obj files have no IMAGE_DOS_HEADER
-        sysseek(FD,0,SEEK_SET)         || die "unable to rewind $file";
-    } else { next; }
-
-    # read IMAGE_FILE_HEADER
-    sysread(FD,$coff,20)==20 || die "$file is too short";
-    ($Machine,$NumberOfSections,$TimeDateStamp,
-     $PointerToSymbolTable,$NumberOfSymbols,
-     $SizeOfOptionalHeader,$Characteristics)=unpack("SSIIISS",$coff);
-
-    # skip over IMAGE_OPTIONAL_HEADER
-    sysseek(FD,$SizeOfOptionalHeader,SEEK_CUR) || die "$file is too short";
-
-    # traverse IMAGE_SECTION_HEADER table
-    for($i=0;$i<$NumberOfSections;$i++) {
-        sysread(FD,$SectionHeader,40)==40 || die "$file is too short";
-        ($Name, at opaque)=unpack("Z8C*",$SectionHeader);
-        if ($map{$Name}) {
-            sysseek(FD,-40,SEEK_CUR) || die "unable to rewind $file";
-            syswrite(FD,pack("a8C*",$map{$Name}, at opaque))==40 || die "syswrite failed: $!";
-            printf "    %-8s -> %.8s\n",$Name,$map{$Name} unless $quiet;
-        }
-    }
-    close(FD);
-}

From levitte at openssl.org  Thu Feb 22 20:56:45 2018
From: levitte at openssl.org (Richard Levitte)
Date: Thu, 22 Feb 2018 20:56:45 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519333005.119712.705.nullmailer@dev.openssl.org>

The branch master has been updated
       via  8bc0147ff863bcf47dea5c71cf1d4f17b3b6914e (commit)
      from  1af563e3742c5be733194dab9778e064984b3c23 (commit)


- Log -----------------------------------------------------------------
commit 8bc0147ff863bcf47dea5c71cf1d4f17b3b6914e
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 22 16:33:58 2018 +0100

    Build files: when using $(CPP), use the C flags alongside the CPP flags
    
    The reason for this is that some of the C flags affect built in macros
    that we may depend on.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5436)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/descrip.mms.tmpl      | 8 +++++---
 Configurations/unix-Makefile.tmpl    | 6 +++---
 Configurations/windows-makefile.tmpl | 8 +++++---
 3 files changed, 13 insertions(+), 9 deletions(-)

diff --git a/Configurations/descrip.mms.tmpl b/Configurations/descrip.mms.tmpl
index 72bae8b..2364644 100644
--- a/Configurations/descrip.mms.tmpl
+++ b/Configurations/descrip.mms.tmpl
@@ -658,9 +658,11 @@ EOF
               die "Generator type for $src unknown: $generator\n";
           }
 
-          my $cppflags = { lib => '$(LIB_CPPFLAGS)',
-                           dso => '$(DSO_CPPFLAGS)',
-                           bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
+          my $cppflags = {
+              lib => '$(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
           my @incs_cmds = includes({ lib => '$(LIB_INCLUDES)',
                                      dso => '$(DSO_INCLUDES)',
                                      bin => '$(BIN_INCLUDES)' } -> {$args{intent}},
diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index b3edd66..365499e 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -850,9 +850,9 @@ EOF
           }
 
           my $cppflags = {
-              lib => '$(LIB_CPPFLAGS)',
-              dso => '$(DSO_CPPFLAGS)',
-              bin => '$(BIN_CPPFLAGS)'
+              lib => '$(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => '$(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => '$(BIN_CFLAGS) $(BIN_CPPFLAGS)'
           } -> {$args{intent}};
           if (defined($generator)) {
               # If the target is named foo.S in build.info, we want to
diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index 3e8348e..7193972 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -436,9 +436,11 @@ EOF
           }
 
           my $cppflags = $incs;
-          $cppflags .= { lib => '$(LIB_CPPFLAGS)',
-                         dso => '$(DSO_CPPFLAGS)',
-                         bin => '$(BIN_CPPFLAGS)' } -> {$args{intent}};
+          $cppflags .= {
+              lib => ' $(LIB_CFLAGS) $(LIB_CPPFLAGS)',
+              dso => ' $(DSO_CFLAGS) $(DSO_CPPFLAGS)',
+              bin => ' $(BIN_CFLAGS) $(BIN_CPPFLAGS)'
+          } -> {$args{intent}};
           if (defined($generator)) {
               # If the target is named foo.S in build.info, we want to
               # end up generating foo.s in two steps.

From no-reply at appveyor.com  Thu Feb 22 21:42:13 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 22 Feb 2018 21:42:13 +0000
Subject: [openssl-commits] Build failed: openssl master.15828
Message-ID: <20180222214213.1.9F6A20DB06E5A706@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180222/eb631cd9/attachment.html>

From no-reply at appveyor.com  Thu Feb 22 23:33:48 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Thu, 22 Feb 2018 23:33:48 +0000
Subject: [openssl-commits] Build failed: openssl master.15833
Message-ID: <20180222233348.1.09E890717B1A516B@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180222/32951562/attachment-0001.html>

From no-reply at appveyor.com  Fri Feb 23 00:02:18 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 00:02:18 +0000
Subject: [openssl-commits] Build completed: openssl master.15834
Message-ID: <20180223000218.1.ABA32F9618B97126@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/514aee29/attachment.html>

From no-reply at appveyor.com  Fri Feb 23 01:47:47 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 01:47:47 +0000
Subject: [openssl-commits] Build failed: openssl master.15837
Message-ID: <20180223014747.1.17A8D4A09DDE13E3@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/d4fd58e4/attachment.html>

From no-reply at appveyor.com  Fri Feb 23 02:12:18 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 02:12:18 +0000
Subject: [openssl-commits] Build completed: openssl master.15838
Message-ID: <20180223021218.1.F2DFADA80EB5C3AC@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/64a640c3/attachment.html>

From paul.dale at oracle.com  Fri Feb 23 03:48:44 2018
From: paul.dale at oracle.com (paul.dale at oracle.com)
Date: Fri, 23 Feb 2018 03:48:44 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519357724.256043.20749.nullmailer@dev.openssl.org>

The branch master has been updated
       via  d5927344207e0d5d9ee5c862631fdc292e65e7e6 (commit)
      from  8bc0147ff863bcf47dea5c71cf1d4f17b3b6914e (commit)


- Log -----------------------------------------------------------------
commit d5927344207e0d5d9ee5c862631fdc292e65e7e6
Author: Pauli <paul.dale at oracle.com>
Date:   Fri Feb 23 10:55:50 2018 +1000

    Remove unreachable statement.
    
    The return at the end isn't reachable.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5442)

-----------------------------------------------------------------------

Summary of changes:
 ssl/statem/statem_srvr.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/ssl/statem/statem_srvr.c b/ssl/statem/statem_srvr.c
index 812780a..d335819 100644
--- a/ssl/statem/statem_srvr.c
+++ b/ssl/statem/statem_srvr.c
@@ -1150,7 +1150,6 @@ WORK_STATE ossl_statem_server_post_process_message(SSL *s, WORK_STATE wst)
     case TLS_ST_SR_KEY_EXCH:
         return tls_post_process_client_key_exchange(s, wst);
     }
-    return WORK_FINISHED_CONTINUE;
 }
 
 #ifndef OPENSSL_NO_SRP

From builds at travis-ci.org  Fri Feb 23 04:22:47 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 23 Feb 2018 04:22:47 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16544 (master - d592734)
In-Reply-To: <openssl/openssl+345099981+errored@travis-ci.org>
Message-ID: <5a8f9717147e0_43fc1472e941880404e@7067f629-b197-4bdf-8fc3-2c8ba9308c07.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16544
Status: Errored

Duration: 33 minutes and 11 seconds
Commit: d592734 (master)
Author: Pauli
Message: Remove unreachable statement.

The return at the end isn't reachable.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5442)

View the changeset: https://github.com/openssl/openssl/compare/8bc0147ff863...d5927344207e

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/345099981?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/96931981/attachment.html>

From levitte at openssl.org  Fri Feb 23 06:43:17 2018
From: levitte at openssl.org (Richard Levitte)
Date: Fri, 23 Feb 2018 06:43:17 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519368197.078129.16088.nullmailer@dev.openssl.org>

The branch master has been updated
       via  0764e4131243e72b54c86486462975d066cd9453 (commit)
       via  a75831f9cc608e4f4502f86f6ab35ef742762e85 (commit)
       via  6ab6deccd95c97a6235f345b371664afb65f77c7 (commit)
       via  511e4e0d6890d552eba77971bbcfb5df51e772e2 (commit)
       via  93d2f9fa4a5d03ac227a54f5c0f2f9b23f1121b6 (commit)
       via  fac8673b8aed77231e23d51d78cd8eb995d21f5c (commit)
       via  7622baf8a7c3e9084f97a4f41406a29ef5d04fc3 (commit)
       via  ce9586b98c792288a57620035b7f5824563389ce (commit)
       via  9511d973444d19e1d492762c5f28473cbd31a5a9 (commit)
       via  6541d9e2646d693b3879ce438a2e9b8d290907fc (commit)
       via  072bfcc90b6f7c206e39339da519567c4460250c (commit)
       via  4eefdbda815c2cd76d788049c839e90a5ac6b843 (commit)
      from  d5927344207e0d5d9ee5c862631fdc292e65e7e6 (commit)


- Log -----------------------------------------------------------------
commit 0764e4131243e72b54c86486462975d066cd9453
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 22 05:45:18 2018 +0100

    Add a note in CHANGES
    
    [extended tests]
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit a75831f9cc608e4f4502f86f6ab35ef742762e85
Author: Richard Levitte <levitte at openssl.org>
Date:   Mon Feb 20 02:49:13 2017 +0100

    Test the storeutl searching options
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 6ab6deccd95c97a6235f345b371664afb65f77c7
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Jul 5 19:17:40 2017 +0200

    STORE: Add documentation on search criteria
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 511e4e0d6890d552eba77971bbcfb5df51e772e2
Author: Richard Levitte <levitte at openssl.org>
Date:   Mon Feb 20 02:47:56 2017 +0100

    Adapt storeutl to allow search for specific objects
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 93d2f9fa4a5d03ac227a54f5c0f2f9b23f1121b6
Author: Richard Levitte <levitte at openssl.org>
Date:   Mon Feb 20 02:39:52 2017 +0100

    STORE 'file' scheme loader: Add search capibility
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit fac8673b8aed77231e23d51d78cd8eb995d21f5c
Author: Richard Levitte <levitte at openssl.org>
Date:   Sun Feb 19 12:24:19 2017 +0100

    STORE: Add the possibility to search for specific information
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 7622baf8a7c3e9084f97a4f41406a29ef5d04fc3
Author: Richard Levitte <levitte at openssl.org>
Date:   Sat Feb 11 04:02:32 2017 +0100

    Test the storeutl expectation options
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit ce9586b98c792288a57620035b7f5824563389ce
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Jul 5 16:15:48 2017 +0200

    STORE: Add documentation on expecting specific infos
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 9511d973444d19e1d492762c5f28473cbd31a5a9
Author: Richard Levitte <levitte at openssl.org>
Date:   Sat Feb 11 03:20:45 2017 +0100

    Adapt storeutl to allow looking for a specific info type
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 6541d9e2646d693b3879ce438a2e9b8d290907fc
Author: Richard Levitte <levitte at openssl.org>
Date:   Sat Feb 11 02:27:31 2017 +0100

    STORE 'file' scheme loader: Add info type expectation
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 072bfcc90b6f7c206e39339da519567c4460250c
Author: Richard Levitte <levitte at openssl.org>
Date:   Sat Feb 11 02:33:18 2017 +0100

    STORE: Add the possibility to specify an expected info type
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

commit 4eefdbda815c2cd76d788049c839e90a5ac6b843
Author: Richard Levitte <levitte at openssl.org>
Date:   Sat Feb 11 02:50:50 2017 +0100

    STORE: In preparation for coming work, mark when loading is started
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/2688)

-----------------------------------------------------------------------

Summary of changes:
 CHANGES                        |   6 +
 apps/storeutl.c                | 246 +++++++++++++++++++++++++++++++++++++++--
 crypto/err/openssl.txt         |  16 +++
 crypto/store/loader_file.c     | 123 ++++++++++++++++++++-
 crypto/store/store_err.c       |  25 ++++-
 crypto/store/store_lib.c       | 188 ++++++++++++++++++++++++++++++-
 crypto/store/store_locl.h      |  32 +++++-
 crypto/store/store_register.c  |  14 +++
 doc/man1/storeutl.pod          |  50 ++++++++-
 doc/man3/OSSL_STORE_LOADER.pod |  45 +++++++-
 doc/man3/OSSL_STORE_SEARCH.pod | 193 ++++++++++++++++++++++++++++++++
 doc/man3/OSSL_STORE_expect.pod |  79 +++++++++++++
 doc/man7/ossl_store.pod        |   6 +-
 include/openssl/ossl_typ.h     |   1 +
 include/openssl/store.h        |  56 ++++++++++
 include/openssl/storeerr.h     |  12 ++
 test/recipes/90-test_store.t   |  72 ++++++++++--
 util/libcrypto.num             |  16 +++
 util/private.num               |   3 +
 19 files changed, 1157 insertions(+), 26 deletions(-)
 create mode 100644 doc/man3/OSSL_STORE_SEARCH.pod
 create mode 100644 doc/man3/OSSL_STORE_expect.pod

diff --git a/CHANGES b/CHANGES
index 5abfbad..e08644a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,12 @@
 
  Changes between 1.1.0g and 1.1.1 [xx XXX xxxx]
 
+  *) Extend OSSL_STORE with capabilities to search and to narrow the set of
+     objects loaded.  This adds the functions OSSL_STORE_expect() and
+     OSSL_STORE_find() as well as needed tools to construct searches and
+     get the search data out of them.
+     [Richard Levitte]
+
   *) Support for TLSv1.3 added. Note that users upgrading from an earlier
      version of OpenSSL should review their configuration settings to ensure
      that they are still appropriate for TLSv1.3. In particular if no TLSv1.3
diff --git a/apps/storeutl.c b/apps/storeutl.c
index 326c2af..d40d263 100644
--- a/apps/storeutl.c
+++ b/apps/storeutl.c
@@ -16,11 +16,17 @@
 #include <openssl/store.h>
 
 static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
-                   int text, int noout, int recursive, int indent, BIO *out);
+                   int expected, int criterion, OSSL_STORE_SEARCH *search,
+                   int text, int noout, int recursive, int indent, BIO *out,
+                   const char *prog);
 
 typedef enum OPTION_choice {
     OPT_ERR = -1, OPT_EOF = 0, OPT_HELP, OPT_ENGINE, OPT_OUT, OPT_PASSIN,
-    OPT_NOOUT, OPT_TEXT, OPT_RECURSIVE
+    OPT_NOOUT, OPT_TEXT, OPT_RECURSIVE,
+    OPT_SEARCHFOR_CERTS, OPT_SEARCHFOR_KEYS, OPT_SEARCHFOR_CRLS,
+    OPT_CRITERION_SUBJECT, OPT_CRITERION_ISSUER, OPT_CRITERION_SERIAL,
+    OPT_CRITERION_FINGERPRINT, OPT_CRITERION_ALIAS,
+    OPT_MD
 } OPTION_CHOICE;
 
 const OPTIONS storeutl_options[] = {
@@ -30,6 +36,15 @@ const OPTIONS storeutl_options[] = {
     {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
     {"text", OPT_TEXT, '-', "Print a text form of the objects"},
     {"noout", OPT_NOOUT, '-', "No PEM output, just status"},
+    {"certs", OPT_SEARCHFOR_CERTS, '-', "Search for certificates only"},
+    {"keys", OPT_SEARCHFOR_KEYS, '-', "Search for keys only"},
+    {"crls", OPT_SEARCHFOR_CRLS, '-', "Search for CRLs only"},
+    {"subject", OPT_CRITERION_SUBJECT, 's', "Search by subject"},
+    {"issuer", OPT_CRITERION_ISSUER, 's', "Search by issuer and serial, issuer name"},
+    {"serial", OPT_CRITERION_SERIAL, 's', "Search by issuer and serial, serial number"},
+    {"fingerprint", OPT_CRITERION_FINGERPRINT, 's', "Search by public key fingerprint, given in hex"},
+    {"alias", OPT_CRITERION_ALIAS, 's', "Search by alias"},
+    {"", OPT_MD, '-', "Any supported digest"},
 #ifndef OPENSSL_NO_ENGINE
     {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
 #endif
@@ -46,6 +61,15 @@ int storeutl_main(int argc, char *argv[])
     OPTION_CHOICE o;
     char *prog = opt_init(argc, argv, storeutl_options);
     PW_CB_DATA pw_cb_data;
+    int expected = 0;
+    int criterion = 0;
+    X509_NAME *subject = NULL, *issuer = NULL;
+    ASN1_INTEGER *serial = NULL;
+    unsigned char *fingerprint = NULL;
+    size_t fingerprintlen = 0;
+    char *alias = NULL;
+    OSSL_STORE_SEARCH *search = NULL;
+    const EVP_MD *digest = NULL;
 
     while ((o = opt_next()) != OPT_EOF) {
         switch (o) {
@@ -73,9 +97,147 @@ int storeutl_main(int argc, char *argv[])
         case OPT_RECURSIVE:
             recursive = 1;
             break;
+        case OPT_SEARCHFOR_CERTS:
+        case OPT_SEARCHFOR_KEYS:
+        case OPT_SEARCHFOR_CRLS:
+            if (expected != 0) {
+                BIO_printf(bio_err, "%s: only one search type can be given.\n",
+                           prog);
+                goto end;
+            }
+            {
+                static const struct {
+                    enum OPTION_choice choice;
+                    int type;
+                } map[] = {
+                    {OPT_SEARCHFOR_CERTS, OSSL_STORE_INFO_CERT},
+                    {OPT_SEARCHFOR_KEYS, OSSL_STORE_INFO_PKEY},
+                    {OPT_SEARCHFOR_CRLS, OSSL_STORE_INFO_CRL},
+                };
+                size_t i;
+
+                for (i = 0; i < OSSL_NELEM(map); i++) {
+                    if (o == map[i].choice) {
+                        expected = map[i].type;
+                        break;
+                    }
+                }
+                /*
+                 * If expected wasn't set at this point, it means the map
+                 * isn't syncronised with the possible options leading here.
+                 */
+                OPENSSL_assert(expected != 0);
+            }
+            break;
+        case OPT_CRITERION_SUBJECT:
+            if (criterion != 0) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_NAME;
+            if (subject != NULL) {
+                BIO_printf(bio_err, "%s: subject already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((subject = parse_name(opt_arg(), MBSTRING_UTF8, 1)) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse subject argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
+        case OPT_CRITERION_ISSUER:
+            if (criterion != 0
+                || (criterion == OSSL_STORE_SEARCH_BY_ISSUER_SERIAL
+                    && issuer != NULL)) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_ISSUER_SERIAL;
+            if (issuer != NULL) {
+                BIO_printf(bio_err, "%s: issuer already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((issuer = parse_name(opt_arg(), MBSTRING_UTF8, 1)) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse issuer argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
+        case OPT_CRITERION_SERIAL:
+            if (criterion != 0
+                || (criterion == OSSL_STORE_SEARCH_BY_ISSUER_SERIAL
+                    && serial != NULL)) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_ISSUER_SERIAL;
+            if (serial != NULL) {
+                BIO_printf(bio_err, "%s: serial number already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse serial number argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
+        case OPT_CRITERION_FINGERPRINT:
+            if (criterion != 0
+                || (criterion == OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT
+                    && fingerprint != NULL)) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT;
+            if (fingerprint != NULL) {
+                BIO_printf(bio_err, "%s: fingerprint already given.\n",
+                           prog);
+                goto end;
+            }
+            {
+                long tmplen = 0;
+
+                if ((fingerprint = OPENSSL_hexstr2buf(opt_arg(), &tmplen))
+                    == NULL) {
+                    BIO_printf(bio_err,
+                               "%s: can't parse fingerprint argument.\n",
+                               prog);
+                    goto end;
+                }
+                fingerprintlen = (size_t)tmplen;
+            }
+            break;
+        case OPT_CRITERION_ALIAS:
+            if (criterion != 0) {
+                BIO_printf(bio_err, "%s: criterion already given.\n",
+                           prog);
+                goto end;
+            }
+            criterion = OSSL_STORE_SEARCH_BY_ALIAS;
+            if (alias != NULL) {
+                BIO_printf(bio_err, "%s: alias already given.\n",
+                           prog);
+                goto end;
+            }
+            if ((alias = OPENSSL_strdup(opt_arg())) == NULL) {
+                BIO_printf(bio_err, "%s: can't parse alias argument.\n",
+                           prog);
+                goto end;
+            }
+            break;
         case OPT_ENGINE:
             e = setup_engine(opt_arg(), 0);
             break;
+        case OPT_MD:
+            if (!opt_md(opt_unknown(), &digest))
+                goto opthelp;
         }
     }
     argc = opt_num_rest();
@@ -90,6 +252,45 @@ int storeutl_main(int argc, char *argv[])
         goto opthelp;
     }
 
+    if (criterion != 0) {
+        switch (criterion) {
+        case OSSL_STORE_SEARCH_BY_NAME:
+            if ((search = OSSL_STORE_SEARCH_by_name(subject)) == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        case OSSL_STORE_SEARCH_BY_ISSUER_SERIAL:
+            if (issuer == NULL || serial == NULL) {
+                BIO_printf(bio_err,
+                           "%s: both -issuer and -serial must be given.\n",
+                           prog);
+                goto end;
+            }
+            if ((search = OSSL_STORE_SEARCH_by_issuer_serial(issuer, serial))
+                == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        case OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT:
+            if ((search = OSSL_STORE_SEARCH_by_key_fingerprint(digest,
+                                                               fingerprint,
+                                                               fingerprintlen))
+                == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        case OSSL_STORE_SEARCH_BY_ALIAS:
+            if ((search = OSSL_STORE_SEARCH_by_alias(alias)) == NULL) {
+                ERR_print_errors(bio_err);
+                goto end;
+            }
+            break;
+        }
+    }
+
     if (!app_passwd(passinarg, NULL, &passin, NULL)) {
         BIO_printf(bio_err, "Error getting passwords\n");
         goto end;
@@ -101,10 +302,16 @@ int storeutl_main(int argc, char *argv[])
     if (out == NULL)
         goto end;
 
-    ret = process(argv[0], get_ui_method(), &pw_cb_data, text, noout, recursive,
-                  0, out);
+    ret = process(argv[0], get_ui_method(), &pw_cb_data,
+                  expected, criterion, search,
+                  text, noout, recursive, 0, out, prog);
 
  end:
+    OPENSSL_free(alias);
+    ASN1_INTEGER_free(serial);
+    X509_NAME_free(subject);
+    X509_NAME_free(issuer);
+    OSSL_STORE_SEARCH_free(search);
     BIO_free_all(out);
     OPENSSL_free(passin);
     release_engine(e);
@@ -125,7 +332,9 @@ static int indent_printf(int indent, BIO *bio, const char *format, ...)
 }
 
 static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
-                   int text, int noout, int recursive, int indent, BIO *out)
+                   int expected, int criterion, OSSL_STORE_SEARCH *search,
+                   int text, int noout, int recursive, int indent, BIO *out,
+                   const char *prog)
 {
     OSSL_STORE_CTX *store_ctx = NULL;
     int ret = 1, items = 0;
@@ -137,6 +346,27 @@ static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
         return ret;
     }
 
+    if (expected != 0) {
+        if (!OSSL_STORE_expect(store_ctx, expected)) {
+            ERR_print_errors(bio_err);
+            goto end2;
+        }
+    }
+
+    if (criterion != 0) {
+        if (!OSSL_STORE_supports_search(store_ctx, criterion)) {
+            BIO_printf(bio_err,
+                       "%s: the store scheme doesn't support the given search criteria.\n",
+                       prog);
+            goto end2;
+        }
+
+        if (!OSSL_STORE_find(store_ctx, search)) {
+            ERR_print_errors(bio_err);
+            goto end2;
+        }
+    }
+
     /* From here on, we count errors, and we'll return the count at the end */
     ret = 0;
 
@@ -188,8 +418,9 @@ static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
         case OSSL_STORE_INFO_NAME:
             if (recursive) {
                 const char *suburi = OSSL_STORE_INFO_get0_NAME(info);
-                ret += process(suburi, uimeth, uidata, text, noout, recursive,
-                               indent + 2, out);
+                ret += process(suburi, uimeth, uidata,
+                               expected, criterion, search,
+                               text, noout, recursive, indent + 2, out, prog);
             }
             break;
         case OSSL_STORE_INFO_PARAMS:
@@ -230,6 +461,7 @@ static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
     }
     indent_printf(indent, out, "Total found: %d\n", items);
 
+ end2:
     if (!OSSL_STORE_close(store_ctx)) {
         ERR_print_errors(bio_err);
         ret++;
diff --git a/crypto/err/openssl.txt b/crypto/err/openssl.txt
index 9b8a03a..e406bec 100644
--- a/crypto/err/openssl.txt
+++ b/crypto/err/openssl.txt
@@ -751,14 +751,17 @@ OCSP_F_OCSP_REQUEST_VERIFY:116:OCSP_request_verify
 OCSP_F_OCSP_RESPONSE_GET1_BASIC:111:OCSP_response_get1_basic
 OCSP_F_PARSE_HTTP_LINE1:118:parse_http_line1
 OSSL_STORE_F_FILE_CTRL:129:file_ctrl
+OSSL_STORE_F_FILE_FIND:138:file_find
 OSSL_STORE_F_FILE_GET_PASS:118:file_get_pass
 OSSL_STORE_F_FILE_LOAD:119:file_load
 OSSL_STORE_F_FILE_LOAD_TRY_DECODE:124:file_load_try_decode
 OSSL_STORE_F_FILE_NAME_TO_URI:126:file_name_to_uri
 OSSL_STORE_F_FILE_OPEN:120:file_open
 OSSL_STORE_F_OSSL_STORE_ATTACH_PEM_BIO:127:ossl_store_attach_pem_bio
+OSSL_STORE_F_OSSL_STORE_EXPECT:130:OSSL_STORE_expect
 OSSL_STORE_F_OSSL_STORE_FILE_ATTACH_PEM_BIO_INT:128:\
 	ossl_store_file_attach_pem_bio_int
+OSSL_STORE_F_OSSL_STORE_FIND:131:OSSL_STORE_find
 OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT:100:ossl_store_get0_loader_int
 OSSL_STORE_F_OSSL_STORE_INFO_GET1_CERT:101:OSSL_STORE_INFO_get1_CERT
 OSSL_STORE_F_OSSL_STORE_INFO_GET1_CRL:102:OSSL_STORE_INFO_get1_CRL
@@ -780,6 +783,12 @@ OSSL_STORE_F_OSSL_STORE_LOADER_NEW:113:OSSL_STORE_LOADER_new
 OSSL_STORE_F_OSSL_STORE_OPEN:114:OSSL_STORE_open
 OSSL_STORE_F_OSSL_STORE_OPEN_INT:115:*
 OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT:117:ossl_store_register_loader_int
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS:132:OSSL_STORE_SEARCH_by_alias
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL:133:\
+	OSSL_STORE_SEARCH_by_issuer_serial
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT:136:\
+	OSSL_STORE_SEARCH_by_key_fingerprint
+OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME:137:OSSL_STORE_SEARCH_by_name
 OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT:116:\
 	ossl_store_unregister_loader_int
 OSSL_STORE_F_TRY_DECODE_PARAMS:121:try_decode_params
@@ -2146,9 +2155,12 @@ OCSP_R_UNSUPPORTED_REQUESTORNAME_TYPE:129:unsupported requestorname type
 OSSL_STORE_R_AMBIGUOUS_CONTENT_TYPE:107:ambiguous content type
 OSSL_STORE_R_BAD_PASSWORD_READ:115:bad password read
 OSSL_STORE_R_ERROR_VERIFYING_PKCS12_MAC:113:error verifying pkcs12 mac
+OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST:121:\
+	fingerprint size does not match digest
 OSSL_STORE_R_INVALID_SCHEME:106:invalid scheme
 OSSL_STORE_R_IS_NOT_A:112:is not a
 OSSL_STORE_R_LOADER_INCOMPLETE:116:loader incomplete
+OSSL_STORE_R_LOADING_STARTED:117:loading started
 OSSL_STORE_R_NOT_A_CERTIFICATE:100:not a certificate
 OSSL_STORE_R_NOT_A_CRL:101:not a crl
 OSSL_STORE_R_NOT_A_KEY:102:not a key
@@ -2156,10 +2168,14 @@ OSSL_STORE_R_NOT_A_NAME:103:not a name
 OSSL_STORE_R_NOT_PARAMETERS:104:not parameters
 OSSL_STORE_R_PASSPHRASE_CALLBACK_ERROR:114:passphrase callback error
 OSSL_STORE_R_PATH_MUST_BE_ABSOLUTE:108:path must be absolute
+OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES:119:\
+	search only supported for directories
 OSSL_STORE_R_UI_PROCESS_INTERRUPTED_OR_CANCELLED:109:\
 	ui process interrupted or cancelled
 OSSL_STORE_R_UNREGISTERED_SCHEME:105:unregistered scheme
 OSSL_STORE_R_UNSUPPORTED_CONTENT_TYPE:110:unsupported content type
+OSSL_STORE_R_UNSUPPORTED_OPERATION:118:unsupported operation
+OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE:120:unsupported search type
 OSSL_STORE_R_URI_AUTHORITY_UNSUPPORTED:111:uri authority unsupported
 PEM_R_BAD_BASE64_DECODE:100:bad base64 decode
 PEM_R_BAD_DECRYPT:101:bad decrypt
diff --git a/crypto/store/loader_file.c b/crypto/store/loader_file.c
index 588a581..ea1b321 100644
--- a/crypto/store/loader_file.c
+++ b/crypto/store/loader_file.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -10,6 +10,7 @@
 #include "e_os.h"
 #include <string.h>
 #include <sys/stat.h>
+#include <ctype.h>
 #include <assert.h>
 
 #include <openssl/bio.h>
@@ -713,6 +714,13 @@ struct ossl_store_loader_ctx_st {
             char *uri;
 
             /*
+             * When a search expression is given, these are filled in.
+             * |search_name| contains the file basename to look for.
+             * The string is exactly 8 characters long.
+             */
+            char search_name[9];
+
+            /*
              * The directory reading utility we have combines opening with
              * reading the first name.  To make sure we can detect the end
              * at the right time, we read early and cache the name.
@@ -721,6 +729,9 @@ struct ossl_store_loader_ctx_st {
             int last_errno;
         } dir;
     } _;
+
+    /* Expected object type.  May be unspecified */
+    int expected_type;
 };
 
 static void OSSL_STORE_LOADER_CTX_free(OSSL_STORE_LOADER_CTX *ctx)
@@ -908,6 +919,43 @@ static int file_ctrl(OSSL_STORE_LOADER_CTX *ctx, int cmd, va_list args)
     return ret;
 }
 
+static int file_expect(OSSL_STORE_LOADER_CTX *ctx, int expected)
+{
+    ctx->expected_type = expected;
+    return 1;
+}
+
+static int file_find(OSSL_STORE_LOADER_CTX *ctx, OSSL_STORE_SEARCH *search)
+{
+    /*
+     * If ctx == NULL, the library is looking to know if this loader supports
+     * the given search type.
+     */
+
+    if (OSSL_STORE_SEARCH_get_type(search) == OSSL_STORE_SEARCH_BY_NAME) {
+        unsigned long hash = 0;
+
+        if (ctx == NULL)
+            return 1;
+
+        if (ctx->type != is_dir) {
+            OSSL_STOREerr(OSSL_STORE_F_FILE_FIND,
+                          OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES);
+            return 0;
+        }
+
+        hash = X509_NAME_hash(OSSL_STORE_SEARCH_get0_name(search));
+        BIO_snprintf(ctx->_.dir.search_name, sizeof(ctx->_.dir.search_name),
+                     "%08lx", hash);
+        return 1;
+    }
+
+    if (ctx != NULL)
+        OSSL_STOREerr(OSSL_STORE_F_FILE_FIND,
+                      OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE);
+    return 0;
+}
+
 /* Internal function to decode an already opened PEM file */
 OSSL_STORE_LOADER_CTX *ossl_store_file_attach_pem_bio_int(BIO *bp)
 {
@@ -1128,6 +1176,68 @@ static int file_name_to_uri(OSSL_STORE_LOADER_CTX *ctx, const char *name,
     return 1;
 }
 
+static int file_name_check(OSSL_STORE_LOADER_CTX *ctx, const char *name)
+{
+    const char *p = NULL;
+
+    /* If there are no search criteria, all names are accepted */
+    if (ctx->_.dir.search_name[0] == '\0')
+        return 1;
+
+    /* If the expected type isn't supported, no name is accepted */
+    if (ctx->expected_type != 0
+        && ctx->expected_type != OSSL_STORE_INFO_CERT
+        && ctx->expected_type != OSSL_STORE_INFO_CRL)
+        return 0;
+
+    /*
+     * First, check the basename
+     */
+    if (strncasecmp(name, ctx->_.dir.search_name,
+                    sizeof(ctx->_.dir.search_name) - 1) != 0
+        || name[sizeof(ctx->_.dir.search_name) - 1] != '.')
+        return 0;
+    p = &name[sizeof(ctx->_.dir.search_name)];
+
+    /*
+     * Then, if the expected type is a CRL, check that the extension starts
+     * with 'r'
+     */
+    if (*p == 'r') {
+        p++;
+        if (ctx->expected_type != 0
+            && ctx->expected_type != OSSL_STORE_INFO_CRL)
+            return 0;
+    } else if (ctx->expected_type == OSSL_STORE_INFO_CRL) {
+        return 0;
+    }
+
+    /*
+     * Last, check that the rest of the extension is a decimal number, at
+     * least one digit long.
+     */
+    if (!isdigit(*p))
+        return 0;
+    while (isdigit(*p))
+        p++;
+
+# ifdef __VMS
+    /*
+     * One extra step here, check for a possible generation number.
+     */
+    if (*p == ';')
+        for (p++; *p != '\0'; p++)
+            if (!isdigit(*p))
+                break;
+# endif
+
+    /*
+     * If we've reached the end of the string at this point, we've successfully
+     * found a fitting file name.
+     */
+    return *p == '\0';
+}
+
 static int file_eof(OSSL_STORE_LOADER_CTX *ctx);
 static int file_error(OSSL_STORE_LOADER_CTX *ctx);
 static OSSL_STORE_INFO *file_load(OSSL_STORE_LOADER_CTX *ctx,
@@ -1156,6 +1266,7 @@ static OSSL_STORE_INFO *file_load(OSSL_STORE_LOADER_CTX *ctx,
             }
 
             if (ctx->_.dir.last_entry[0] != '.'
+                && file_name_check(ctx, ctx->_.dir.last_entry)
                 && !file_name_to_uri(ctx, ctx->_.dir.last_entry, &newname))
                 return NULL;
 
@@ -1181,6 +1292,7 @@ static OSSL_STORE_INFO *file_load(OSSL_STORE_LOADER_CTX *ctx,
     } else {
         int matchcount = -1;
 
+     again:
         result = file_load_try_repeat(ctx, ui_method, ui_data);
         if (result != NULL)
             return result;
@@ -1251,6 +1363,13 @@ static OSSL_STORE_INFO *file_load(OSSL_STORE_LOADER_CTX *ctx,
         /* We bail out on ambiguity */
         if (matchcount > 1)
             return NULL;
+
+        if (result != NULL
+            && ctx->expected_type != 0
+            && ctx->expected_type != OSSL_STORE_INFO_get_type(result)) {
+            OSSL_STORE_INFO_free(result);
+            goto again;
+        }
     }
 
     return result;
@@ -1295,6 +1414,8 @@ static OSSL_STORE_LOADER file_loader =
         NULL,
         file_open,
         file_ctrl,
+        file_expect,
+        file_find,
         file_load,
         file_eof,
         file_error,
diff --git a/crypto/store/store_err.c b/crypto/store/store_err.c
index c78b3899..5a8a840 100644
--- a/crypto/store/store_err.c
+++ b/crypto/store/store_err.c
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -15,6 +15,7 @@
 
 static const ERR_STRING_DATA OSSL_STORE_str_functs[] = {
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_CTRL, 0), "file_ctrl"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_FIND, 0), "file_find"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_GET_PASS, 0),
      "file_get_pass"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_LOAD, 0), "file_load"},
@@ -25,8 +26,12 @@ static const ERR_STRING_DATA OSSL_STORE_str_functs[] = {
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_FILE_OPEN, 0), "file_open"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_ATTACH_PEM_BIO, 0),
      "ossl_store_attach_pem_bio"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_EXPECT, 0),
+     "OSSL_STORE_expect"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_FILE_ATTACH_PEM_BIO_INT, 0),
      "ossl_store_file_attach_pem_bio_int"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_FIND, 0),
+     "OSSL_STORE_find"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT, 0),
      "ossl_store_get0_loader_int"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_INFO_GET1_CERT, 0),
@@ -64,6 +69,14 @@ static const ERR_STRING_DATA OSSL_STORE_str_functs[] = {
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_OPEN_INT, 0), ""},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT, 0),
      "ossl_store_register_loader_int"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS, 0),
+     "OSSL_STORE_SEARCH_by_alias"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL, 0),
+     "OSSL_STORE_SEARCH_by_issuer_serial"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT, 0),
+     "OSSL_STORE_SEARCH_by_key_fingerprint"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME, 0),
+     "OSSL_STORE_SEARCH_by_name"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT, 0),
      "ossl_store_unregister_loader_int"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, OSSL_STORE_F_TRY_DECODE_PARAMS, 0),
@@ -82,11 +95,15 @@ static const ERR_STRING_DATA OSSL_STORE_str_reasons[] = {
     "bad password read"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_ERROR_VERIFYING_PKCS12_MAC),
     "error verifying pkcs12 mac"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST),
+    "fingerprint size does not match digest"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_INVALID_SCHEME),
     "invalid scheme"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_IS_NOT_A), "is not a"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_LOADER_INCOMPLETE),
     "loader incomplete"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_LOADING_STARTED),
+    "loading started"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_NOT_A_CERTIFICATE),
     "not a certificate"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_NOT_A_CRL), "not a crl"},
@@ -98,12 +115,18 @@ static const ERR_STRING_DATA OSSL_STORE_str_reasons[] = {
     "passphrase callback error"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_PATH_MUST_BE_ABSOLUTE),
     "path must be absolute"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES),
+    "search only supported for directories"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UI_PROCESS_INTERRUPTED_OR_CANCELLED),
     "ui process interrupted or cancelled"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNREGISTERED_SCHEME),
     "unregistered scheme"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNSUPPORTED_CONTENT_TYPE),
     "unsupported content type"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNSUPPORTED_OPERATION),
+    "unsupported operation"},
+    {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE),
+    "unsupported search type"},
     {ERR_PACK(ERR_LIB_OSSL_STORE, 0, OSSL_STORE_R_URI_AUTHORITY_UNSUPPORTED),
     "uri authority unsupported"},
     {0, NULL}
diff --git a/crypto/store/store_lib.c b/crypto/store/store_lib.c
index 24876a3..1c43547 100644
--- a/crypto/store/store_lib.c
+++ b/crypto/store/store_lib.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -10,6 +10,10 @@
 #include "e_os.h"
 #include <stdlib.h>
 #include <string.h>
+#include <assert.h>
+
+#include "e_os.h"
+
 #include <openssl/crypto.h>
 #include <openssl/err.h>
 #include <openssl/store.h>
@@ -24,6 +28,10 @@ struct ossl_store_ctx_st {
     void *ui_data;
     OSSL_STORE_post_process_info_fn post_process;
     void *post_process_data;
+    int expected_type;
+
+    /* 0 before the first STORE_load(), 1 otherwise */
+    int loading;
 };
 
 OSSL_STORE_CTX *OSSL_STORE_open(const char *uri, const UI_METHOD *ui_method,
@@ -125,10 +133,41 @@ int OSSL_STORE_vctrl(OSSL_STORE_CTX *ctx, int cmd, va_list args)
     return 0;
 }
 
+int OSSL_STORE_expect(OSSL_STORE_CTX *ctx, int expected_type)
+{
+    if (ctx->loading) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_EXPECT,
+                      OSSL_STORE_R_LOADING_STARTED);
+        return 0;
+    }
+
+    ctx->expected_type = expected_type;
+    if (ctx->loader->expect != NULL)
+        return ctx->loader->expect(ctx->loader_ctx, expected_type);
+    return 1;
+}
+
+int OSSL_STORE_find(OSSL_STORE_CTX *ctx, OSSL_STORE_SEARCH *search)
+{
+    if (ctx->loading) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_FIND,
+                      OSSL_STORE_R_LOADING_STARTED);
+        return 0;
+    }
+    if (ctx->loader->find == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_FIND,
+                      OSSL_STORE_R_UNSUPPORTED_OPERATION);
+        return 0;
+    }
+
+    return ctx->loader->find(ctx->loader_ctx, search);
+}
+
 OSSL_STORE_INFO *OSSL_STORE_load(OSSL_STORE_CTX *ctx)
 {
     OSSL_STORE_INFO *v = NULL;
 
+    ctx->loading = 1;
  again:
     if (OSSL_STORE_eof(ctx))
         return NULL;
@@ -146,6 +185,24 @@ OSSL_STORE_INFO *OSSL_STORE_load(OSSL_STORE_CTX *ctx)
             goto again;
     }
 
+    if (v != NULL && ctx->expected_type != 0) {
+        int returned_type = OSSL_STORE_INFO_get_type(v);
+
+        if (returned_type != OSSL_STORE_INFO_NAME && returned_type != 0) {
+            /*
+             * Soft assert here so those who want to harsly weed out faulty
+             * loaders can do so using a debugging version of libcrypto.
+             */
+            if (ctx->loader->expect != NULL)
+                assert(ctx->expected_type == returned_type);
+
+            if (ctx->expected_type != returned_type) {
+                OSSL_STORE_INFO_free(v);
+                goto again;
+            }
+        }
+    }
+
     return v;
 }
 
@@ -411,6 +468,135 @@ void OSSL_STORE_INFO_free(OSSL_STORE_INFO *info)
     }
 }
 
+int OSSL_STORE_supports_search(OSSL_STORE_CTX *ctx, int search_type)
+{
+    OSSL_STORE_SEARCH tmp_search;
+
+    if (ctx->loader->find == NULL)
+        return 0;
+    tmp_search.search_type = search_type;
+    return ctx->loader->find(NULL, &tmp_search);
+}
+
+/* Search term constructors */
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_name(X509_NAME *name)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_NAME;
+    search->name = name;
+    return search;
+}
+
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_issuer_serial(X509_NAME *name,
+                                                    const ASN1_INTEGER *serial)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_ISSUER_SERIAL;
+    search->name = name;
+    search->serial = serial;
+    return search;
+}
+
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_key_fingerprint(const EVP_MD *digest,
+                                                        const unsigned char
+                                                        *bytes, size_t len)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    if (digest != NULL && len != (size_t)EVP_MD_size(digest)) {
+        char buf1[20], buf2[20];
+
+        BIO_snprintf(buf1, sizeof(buf1), "%d", EVP_MD_size(digest));
+        BIO_snprintf(buf2, sizeof(buf2), "%zu", len);
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT,
+                      OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST);
+        ERR_add_error_data(5, EVP_MD_name(digest), " size is ", buf1,
+                           ", fingerprint size is ", buf2);
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT;
+    search->digest = digest;
+    search->string = bytes;
+    search->stringlength = len;
+    return search;
+}
+
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_alias(const char *alias)
+{
+    OSSL_STORE_SEARCH *search = OPENSSL_zalloc(sizeof(*search));
+
+    if (search == NULL) {
+        OSSL_STOREerr(OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS,
+                      ERR_R_MALLOC_FAILURE);
+        return NULL;
+    }
+
+    search->search_type = OSSL_STORE_SEARCH_BY_ALIAS;
+    search->string = (const unsigned char *)alias;
+    search->stringlength = strlen(alias);
+    return search;
+}
+
+/* Search term destructor */
+void OSSL_STORE_SEARCH_free(OSSL_STORE_SEARCH *search)
+{
+    OPENSSL_free(search);
+}
+
+/* Search term accessors */
+int OSSL_STORE_SEARCH_get_type(const OSSL_STORE_SEARCH *criterion)
+{
+    return criterion->search_type;
+}
+
+X509_NAME *OSSL_STORE_SEARCH_get0_name(OSSL_STORE_SEARCH *criterion)
+{
+    return criterion->name;
+}
+
+const ASN1_INTEGER *OSSL_STORE_SEARCH_get0_serial(const OSSL_STORE_SEARCH
+                                                 *criterion)
+{
+    return criterion->serial;
+}
+
+const unsigned char *OSSL_STORE_SEARCH_get0_bytes(const OSSL_STORE_SEARCH
+                                                  *criterion, size_t *length)
+{
+    *length = criterion->stringlength;
+    return criterion->string;
+}
+
+const char *OSSL_STORE_SEARCH_get0_string(const OSSL_STORE_SEARCH *criterion)
+{
+    return (const char *)criterion->string;
+}
+
+const EVP_MD *OSSL_STORE_SEARCH_get0_digest(const OSSL_STORE_SEARCH *criterion)
+{
+    return criterion->digest;
+}
+
 /* Internal functions */
 OSSL_STORE_INFO *ossl_store_info_new_EMBEDDED(const char *new_pem_name,
                                               BUF_MEM *embedded)
diff --git a/crypto/store/store_locl.h b/crypto/store/store_locl.h
index 789d332..369dcb3 100644
--- a/crypto/store/store_locl.h
+++ b/crypto/store/store_locl.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -62,6 +62,34 @@ BUF_MEM *ossl_store_info_get0_EMBEDDED_buffer(OSSL_STORE_INFO *info);
 char *ossl_store_info_get0_EMBEDDED_pem_name(OSSL_STORE_INFO *info);
 
 /*-
+ *  OSSL_STORE_SEARCH stuff
+ *  -----------------------
+ */
+
+struct ossl_store_search_st {
+    int search_type;
+
+    /*
+     * Used by OSSL_STORE_SEARCH_BY_NAME and
+     * OSSL_STORE_SEARCH_BY_ISSUER_SERIAL
+     */
+    X509_NAME *name;
+
+    /* Used by OSSL_STORE_SEARCH_BY_ISSUER_SERIAL */
+    const ASN1_INTEGER *serial;
+
+    /* Used by OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT */
+    const EVP_MD *digest;
+
+    /*
+     * Used by OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT and
+     * OSSL_STORE_SEARCH_BY_ALIAS
+     */
+    const unsigned char *string;
+    size_t stringlength;
+};
+
+/*-
  *  OSSL_STORE_LOADER stuff
  *  -----------------------
  */
@@ -75,6 +103,8 @@ struct ossl_store_loader_st {
     ENGINE *engine;
     OSSL_STORE_open_fn open;
     OSSL_STORE_ctrl_fn ctrl;
+    OSSL_STORE_expect_fn expect;
+    OSSL_STORE_find_fn find;
     OSSL_STORE_load_fn load;
     OSSL_STORE_eof_fn eof;
     OSSL_STORE_error_fn error;
diff --git a/crypto/store/store_register.c b/crypto/store/store_register.c
index 855c28e..e68cb3c 100644
--- a/crypto/store/store_register.c
+++ b/crypto/store/store_register.c
@@ -78,6 +78,20 @@ int OSSL_STORE_LOADER_set_ctrl(OSSL_STORE_LOADER *loader,
     return 1;
 }
 
+int OSSL_STORE_LOADER_set_expect(OSSL_STORE_LOADER *loader,
+                                 OSSL_STORE_expect_fn expect_function)
+{
+    loader->expect = expect_function;
+    return 1;
+}
+
+int OSSL_STORE_LOADER_set_find(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_find_fn find_function)
+{
+    loader->find = find_function;
+    return 1;
+}
+
 int OSSL_STORE_LOADER_set_load(OSSL_STORE_LOADER *loader,
                                OSSL_STORE_load_fn load_function)
 {
diff --git a/doc/man1/storeutl.pod b/doc/man1/storeutl.pod
index 74361a7..3f26ab5 100644
--- a/doc/man1/storeutl.pod
+++ b/doc/man1/storeutl.pod
@@ -15,6 +15,15 @@ B<openssl> B<storeutl>
 [B<-text arg>]
 [B<-engine id>]
 [B<-r>]
+[B<-certs>]
+[B<-keys>]
+[B<-crls>]
+[B<-subject arg>]
+[B<-issuer arg>]
+[B<-serial arg>]
+[B<-alias arg>]
+[B<-fingerprint arg>]
+[B<-I<digest>>]
 B<uri> ...
 
 =head1 DESCRIPTION
@@ -60,6 +69,45 @@ The engine will then be set as the default for all available algorithms.
 
 Fetch objects recursively when possible.
 
+=item B<-certs>
+
+=item B<-keys>
+
+=item B<-crls>
+
+Only select the certificates, keys or CRLs from the given URI.
+However, if this URI would return a set of names (URIs), those are always
+returned.
+
+=item B<-subject arg>
+
+Search for an object having the subject name B<arg>.
+The arg must be formatted as I</type0=value0/type1=value1/type2=...>,
+characters may be escaped by \ (backslash), no spaces are skipped.
+
+=item B<-issuer arg>
+
+=item B<-serial arg>
+
+Search for an object having the given issuer name and serial number.
+These two options I<must> be used together.
+The issuer arg must be formatted as I</type0=value0/type1=value1/type2=...>,
+characters may be escaped by \ (backslash), no spaces are skipped.
+The serial arg may be specified as a decimal value or a hex value if preceded
+by B<0x>.
+
+=item B<-alias arg>
+
+Search for an object having the given alias.
+
+=item B<-fingerprint arg>
+
+Search for an object having the given fingerprint.
+
+=item B<-I<digest>>
+
+The digest that was used to compute the fingerprint given with B<-fingerprint>.
+
 =back
 
 =head1 SEE ALSO
@@ -72,7 +120,7 @@ B<openssl> B<storeutl> was added to OpenSSL 1.1.1.
 
 =head1 COPYRIGHT
 
-Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/OSSL_STORE_LOADER.pod b/doc/man3/OSSL_STORE_LOADER.pod
index 0bdd112..e827434 100644
--- a/doc/man3/OSSL_STORE_LOADER.pod
+++ b/doc/man3/OSSL_STORE_LOADER.pod
@@ -5,10 +5,12 @@
 OSSL_STORE_LOADER, OSSL_STORE_LOADER_CTX, OSSL_STORE_LOADER_new,
 OSSL_STORE_LOADER_get0_engine, OSSL_STORE_LOADER_get0_scheme,
 OSSL_STORE_LOADER_set_open, OSSL_STORE_LOADER_set_ctrl,
+OSSL_STORE_LOADER_set_expect, OSSL_STORE_LOADER_set_find,
 OSSL_STORE_LOADER_set_load, OSSL_STORE_LOADER_set_eof,
 OSSL_STORE_LOADER_set_error, OSSL_STORE_LOADER_set_close,
 OSSL_STORE_LOADER_free, OSSL_STORE_register_loader,
 OSSL_STORE_unregister_loader, OSSL_STORE_open_fn, OSSL_STORE_ctrl_fn,
+OSSL_STORE_expect_fn, OSSL_STORE_find_fn,
 OSSL_STORE_load_fn, OSSL_STORE_eof_fn, OSSL_STORE_error_fn,
 OSSL_STORE_close_fn - Types and functions to manipulate, register and
 unregister STORE loaders for different URI schemes
@@ -37,6 +39,13 @@ unregister STORE loaders for different URI schemes
                                    va_list args);
  int OSSL_STORE_LOADER_set_ctrl(OSSL_STORE_LOADER *store_loader,
                                 OSSL_STORE_ctrl_fn store_ctrl_function);
+ typedef int (*OSSL_STORE_expect_fn)(OSSL_STORE_LOADER_CTX *ctx, int expected);
+ int OSSL_STORE_LOADER_set_expect(OSSL_STORE_LOADER *loader,
+                                  OSSL_STORE_expect_fn expect_function);
+ typedef int (*OSSL_STORE_find_fn)(OSSL_STORE_LOADER_CTX *ctx,
+                                   OSSL_STORE_SEARCH *criteria);
+ int OSSL_STORE_LOADER_set_find(OSSL_STORE_LOADER *loader,
+                                OSSL_STORE_find_fn find_function);
  typedef OSSL_STORE_INFO *(*OSSL_STORE_load_fn)(OSSL_STORE_LOADER_CTX *ctx,
                                                 UI_METHOD *ui_method,
                                                 void *ui_data);
@@ -71,9 +80,10 @@ OSSL_STORE_close() for this scheme.
 B<OSSL_STORE_LOADER_CTX> is a type template, to be defined by each loader
 using B<struct ossl_store_loader_ctx_st { ... }>.
 
-B<OSSL_STORE_open_fn>, B<OSSL_STORE_ctrl_fn>, B<OSSL_STORE_load_fn>,
-B<OSSL_STORE_eof_fn> and B<OSSL_STORE_close_fn> are the function pointer
-types used within a STORE loader.
+B<OSSL_STORE_open_fn>, B<OSSL_STORE_ctrl_fn>, B<OSSL_STORE_expect_fn>,
+B<OSSL_STORE_find_fn>, B<OSSL_STORE_load_fn>, B<OSSL_STORE_eof_fn>,
+and B<OSSL_STORE_close_fn>
+are the function pointer types used within a STORE loader.
 The functions pointed at define the functionality of the given loader.
 
 =over 4
@@ -108,6 +118,27 @@ numbers.
 
 This function is expected to return 1 on success, 0 on error.
 
+=item B<OSSL_STORE_expect_fn>
+
+This function takes a B<OSSL_STORE_LOADER_CTX> pointer and a B<OSSL_STORE_INFO>
+identity B<expected>, and is used to tell the loader what object type is
+expected.
+B<expected> may be zero to signify that no specific object type is expected.
+
+This function is expected to return 1 on success, 0 on error.
+
+=item B<OSSL_STORE_find_fn>
+
+This function takes a B<OSSL_STORE_LOADER_CTX> pointer and a
+B<OSSL_STORE_SEARCH> search criterion, and is used to tell the loader what
+to search for.
+
+When called with the loader context being B<NULL>, this function is expected
+to return 1 if the loader supports the criterion, otherwise 0.
+
+When called with the loader context being something other than B<NULL>, this
+function is expected to return 1 on success, 0 on error.
+
 =item B<OSSL_STORE_load_fn>
 
 This function takes a B<OSSL_STORE_LOADER_CTX> pointer and a B<UI_METHOD>
@@ -161,6 +192,9 @@ B<store_loader>.
 OSSL_STORE_LOADER_set_ctrl() sets the control function for the
 B<store_loader>.
 
+OSSL_STORE_LOADER_set_expect() sets the expect function for the
+B<store_loader>.
+
 OSSL_STORE_LOADER_set_load() sets the loader function for the
 B<store_loader>.
 
@@ -186,9 +220,10 @@ The B<file:> scheme has built in support.
 =head1 RETURN VALUES
 
 The functions with the types B<OSSL_STORE_open_fn>, B<OSSL_STORE_ctrl_fn>,
+B<OSSL_STORE_expect_fn>,
 B<OSSL_STORE_load_fn>, B<OSSL_STORE_eof_fn> and B<OSSL_STORE_close_fn> have the
-same return values as OSSL_STORE_open(), OSSL_STORE_load(), OSSL_STORE_eof() and
-OSSL_STORE_close(), respectively.
+same return values as OSSL_STORE_open(), OSSL_STORE_ctrl(), OSSL_STORE_expect(),
+OSSL_STORE_load(), OSSL_STORE_eof() and OSSL_STORE_close(), respectively.
 
 OSSL_STORE_LOADER_new() returns a pointer to a B<OSSL_STORE_LOADER> on success,
 or B<NULL> on failure.
diff --git a/doc/man3/OSSL_STORE_SEARCH.pod b/doc/man3/OSSL_STORE_SEARCH.pod
new file mode 100644
index 0000000..411664d
--- /dev/null
+++ b/doc/man3/OSSL_STORE_SEARCH.pod
@@ -0,0 +1,193 @@
+=pod
+
+=head1 NAME
+
+OSSL_STORE_SEARCH,
+OSSL_STORE_SEARCH_by_name,
+OSSL_STORE_SEARCH_by_issuer_serial,
+OSSL_STORE_SEARCH_by_key_fingerprint,
+OSSL_STORE_SEARCH_by_alias,
+OSSL_STORE_SEARCH_free,
+OSSL_STORE_SEARCH_get_type,
+OSSL_STORE_SEARCH_get0_name,
+OSSL_STORE_SEARCH_get0_serial,
+OSSL_STORE_SEARCH_get0_bytes,
+OSSL_STORE_SEARCH_get0_string,
+OSSL_STORE_SEARCH_get0_digest
+- Type and functions to create OSSL_STORE search criteria
+
+=head1 SYNOPSIS
+
+ #include <openssl/store.h>
+
+ typedef struct ossl_store_search_st OSSL_STORE_SEARCH;
+
+ OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_name(X509_NAME *name);
+ OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_issuer_serial(X509_NAME *name,
+                                                       const ASN1_INTEGER
+                                                       *serial);
+ OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_key_fingerprint(const EVP_MD *digest,
+                                                         const unsigned char
+                                                         *bytes, int len);
+ OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_alias(const char *alias);
+
+ void OSSL_STORE_SEARCH_free(OSSL_STORE_SEARCH *search);
+
+ int OSSL_STORE_SEARCH_get_type(const OSSL_STORE_SEARCH *criterion);
+ X509_NAME *OSSL_STORE_SEARCH_get0_name(OSSL_STORE_SEARCH *criterion);
+ const ASN1_INTEGER *OSSL_STORE_SEARCH_get0_serial(const OSSL_STORE_SEARCH
+                                                   *criterion);
+ const unsigned char *OSSL_STORE_SEARCH_get0_bytes(const OSSL_STORE_SEARCH
+                                                   *criterion, size_t *length);
+ const char *OSSL_STORE_SEARCH_get0_string(const OSSL_STORE_SEARCH *criterion);
+ const EVP_MD *OSSL_STORE_SEARCH_get0_digest(const OSSL_STORE_SEARCH
+                                             *criterion);
+
+=head1 DESCRIPTION
+
+These functions are use to specify search criteria to help search for specific
+objects through other names than just the URI that's given to OSSL_STORE_open().
+For example, this can be useful for an application that has received a URI
+and then wants to add on search criteria in a uniform and supported manner.
+
+=head2 Types
+
+B<OSSL_STORE_SEARCH> is an opaque type that holds the constructed search
+criterion, and that can be given to an OSSL_STORE context with
+OSSL_STORE_find().
+
+The calling application owns the allocation of an B<OSSL_STORE_SEARCH> at all
+times, and should therefore be careful not to deallocate it before
+OSSL_STORE_close() has been called for the OSSL_STORE context it was given
+to.
+
+=head2 Application Functions
+
+OSSL_STORE_SEARCH_by_name(),
+OSSL_STORE_SEARCH_by_issuer_serial(),
+OSSL_STORE_SEARCH_by_key_fingerprint(),
+and OSSL_STORE_SEARCH_by_alias()
+are used to create an B<OSSL_STORE_SEARCH> from a subject name, an issuer name
+and serial number pair, a key fingerprint, and an alias (for example a friendly
+name).
+The parameters that are provided are not copied, only referred to in a
+criterion, so they must have at least the same life time as the created
+B<OSSL_STORE_SEARCH>.
+
+OSSL_STORE_SEARCH_free() is used to free the B<OSSL_STORE_SEARCH>.
+
+=head2 Loader Functions
+
+OSSL_STORE_SEARCH_get_type() returns the criterion type for the given
+B<OSSL_STORE_SEARCH>.
+
+OSSL_STORE_SEARCH_get0_name(), OSSL_STORE_SEARCH_get0_serial(),
+OSSL_STORE_SEARCH_get0_bytes(), OSSL_STORE_SEARCH_get0_string(),
+and OSSL_STORE_SEARCH_get0_digest()
+are used to retrieve different data from a B<OSSL_STORE_SEARCH>, as
+available for each type.
+For more information, see L</SUPPORTED CRITERION TYPES> below.
+
+=head1 SUPPORTED CRITERION TYPES
+
+Currently supported criterion types are:
+
+=over 4
+
+=item OSSL_STORE_SEARCH_BY_NAME
+
+This criterion supports a search by exact match of subject name.
+The subject name itself is a B<X509_NAME> pointer.
+A criterion of this type is created with OSSL_STORE_SEARCH_by_name(),
+and the actual subject name is retrieved with OSSL_STORE_SEARCH_get0_name().
+
+=item OSSL_STORE_SEARCH_BY_ISSUER_SERIAL
+
+This criterion supports a search by exact match of both issuer name and serial
+number.
+The issuer name itself is a B<X509_NAME> pointer, and the serial number is
+a B<ASN1_INTEGER> pointer.
+A criterion of this type is created with OSSL_STORE_SEARCH_by_issuer_serial()
+and the actual issuer name and serial number are retrieved with
+OSSL_STORE_SEARCH_get0_name() and OSSL_STORE_SEARCH_get0_serial().
+
+=item OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT
+
+This criterion supports a search by exact match of key fingerprint.
+The key fingerprint in itself is a string of bytes and its length, as
+well as the algorithm that was used to compute the fingerprint.
+The digest may be left unspecified (NULL), and in that case, the
+loader has to decide on a default digest and compare fingerprints
+accordingly.
+A criterion of this type is created with OSSL_STORE_SEARCH_by_key_fingerprint()
+and the actual fingerprint and its length can be retrieved with
+OSSL_STORE_SEARCH_get0_bytes().
+The digest can be retreived with OSSL_STORE_SEARCH_get0_digest().
+
+=item OSSL_STORE_SEARCH_BY_ALIAS
+
+This criterion supports a search by match of an alias of some kind.
+The alias in itself is a simple C string.
+A criterion of this type is created with OSSL_STORE_SEARCH_by_alias()
+and the actual alias is retrieved with OSSL_STORE_SEARCH_get0_string().
+
+=back
+
+=head1 RETURN VALUES
+
+OSSL_STORE_SEARCH_by_name(),
+OSSL_STORE_SEARCH_by_issuer_serial(),
+OSSL_STORE_SEARCH_by_key_fingerprint(),
+and OSSL_STORE_SEARCH_by_alias()
+return a B<OSSL_STORE_SEARCH> pointer on success, or B<NULL> on failure.
+
+OSSL_STORE_SEARCH_get_type() returns the criterion type of the given
+B<OSSL_STORE_SEARCH>.
+There is no error value.
+
+OSSL_STORE_SEARCH_get0_name() returns a B<X509_NAME> pointer on success,
+or B<NULL> when the given B<OSSL_STORE_SEARCH> was of a different type.
+
+OSSL_STORE_SEARCH_get0_serial() returns a B<ASN1_INTEGER> pointer on success,
+or B<NULL> when the given B<OSSL_STORE_SEARCH> was of a different type.
+
+OSSL_STORE_SEARCH_get0_bytes() returns a B<const unsigned char> pointer and
+sets B<*length> to the strings length on success, or B<NULL> when the given
+B<OSSL_STORE_SEARCH> was of a different type.
+
+OSSL_STORE_SEARCH_get0_string() returns a B<const char> pointer on success,
+or B<NULL> when the given B<OSSL_STORE_SEARCH> was of a different type.
+
+OSSL_STORE_SEARCH_get0_digest() returns a B<const EVP_MD> pointer.
+B<NULL> is a valid value and means that the store loader default will
+be used when applicable.
+
+=head1 SEE ALSO
+
+L<ossl_store(7)>, L<OSSL_STORE_supports_search(3)>, L<OSSL_STORE_find(3)>
+
+=head1 HISTORY
+
+B<OSSL_STORE_SEARCH>,
+OSSL_STORE_SEARCH_by_name(),
+OSSL_STORE_SEARCH_by_issuer_serial(),
+OSSL_STORE_SEARCH_by_key_fingerprint(),
+OSSL_STORE_SEARCH_by_alias(),
+OSSL_STORE_SEARCH_free(),
+OSSL_STORE_SEARCH_get_type(),
+OSSL_STORE_SEARCH_get0_name(),
+OSSL_STORE_SEARCH_get0_serial(),
+OSSL_STORE_SEARCH_get0_bytes(),
+and OSSL_STORE_SEARCH_get0_string()
+were added to OpenSSL 1.1.1.
+
+=head1 COPYRIGHT
+
+Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+
+Licensed under the OpenSSL license (the "License").  You may not use
+this file except in compliance with the License.  You can obtain a copy
+in the file LICENSE in the source distribution or at
+L<https://www.openssl.org/source/license.html>.
+
+=cut
diff --git a/doc/man3/OSSL_STORE_expect.pod b/doc/man3/OSSL_STORE_expect.pod
new file mode 100644
index 0000000..ab0e878
--- /dev/null
+++ b/doc/man3/OSSL_STORE_expect.pod
@@ -0,0 +1,79 @@
+=pod
+
+=head1 NAME
+
+OSSL_STORE_expect,
+OSSL_STORE_supports_search,
+OSSL_STORE_find
+- Specify what object type is expected
+
+=head1 SYNOPSIS
+
+ #include <openssl/store.h>
+
+ int OSSL_STORE_expect(OSSL_STORE_CTX *ctx, int expected_type);
+
+ int OSSL_STORE_supports_search(OSSL_STORE_CTX *ctx, int criterion_type);
+ 
+ int OSSL_STORE_find(OSSL_STORE_CTX *ctx, OSSL_STORE_SEARCH *search);
+
+=head1 DESCRIPTION
+
+OSSL_STORE_expect() helps applications filter what OSSL_STORE_load() returns
+by specifying a B<OSSL_STORE_INFO> type.
+For example, if C<file:/foo/bar/store.pem> contains several different objects
+and only the certificates are interesting, the application can simply say
+that it expects the type B<OSSL_STORE_INFO_CERT>.
+All known object types (see L<OSSL_STORE_INFO(3)/SUPPORTED OBJECTS>)
+except for B<OSSL_STORE_INFO_NAME> are supported.
+
+OSSL_STORE_find() helps applications specify a criterion for a more fine
+grained search of objects.
+
+OSSL_STORE_supports_search() checks if the loader of the given OSSL_STORE
+context supports the given search type.
+See L<OSSL_STORE_SEARCH/SUPPORED CRITERION TYPES> for information on the
+supported search criterion types.
+
+OSSL_STORE_expect() and OSSL_STORE_find I<must> be called before the first
+OSSL_STORE_load() of a given session, or they will fail.
+
+=head1 NOTES
+
+If a more elaborate filter is required by the application, a better choice
+would be to use a post-processing function.
+See L<OSSL_STORE_open(3)> for more information.
+
+However, some loaders may take advantage of the knowledge of an expected type
+to make object retrieval more efficient, so if a single type is expected, this
+method is usually preferable.
+
+=head1 RETURN VALUES
+
+OSSL_STORE_expect() returns 1 on success, or 0 on failure.
+
+OSSL_STORE_supports_search() returns 1 if the criterion is supported, or 0
+otherwise.
+
+OSSL_STORE_find() returns 1 on success, or 0 on failure.
+
+=head1 SEE ALSO
+
+L<ossl_store(7)>, L<OSSL_STORE_INFO(3)>, L<OSSL_STORE_SEARCH(3)>,
+L<OSSL_STORE_load(3)>
+
+=head1 HISTORY
+
+OSSL_STORE_expect(), OSSL_STORE_supports_search() and OSSL_STORE_find()
+were added to OpenSSL 1.1.1.
+
+=head1 COPYRIGHT
+
+Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+
+Licensed under the OpenSSL license (the "License").  You may not use
+this file except in compliance with the License.  You can obtain a copy
+in the file LICENSE in the source distribution or at
+L<https://www.openssl.org/source/license.html>.
+
+=cut
diff --git a/doc/man7/ossl_store.pod b/doc/man7/ossl_store.pod
index 71cb27d..98cc04f 100644
--- a/doc/man7/ossl_store.pod
+++ b/doc/man7/ossl_store.pod
@@ -86,11 +86,13 @@ only).
 
 =head1 SEE ALSO
 
-L<OSSL_STORE_open(3)>, L<OSSL_STORE_INFO(3)>, L<OSSL_STORE_LOADER(3)>
+L<OSSL_STORE_INFO(3)>, L<OSSL_STORE_LOADER(3)>,
+L<OSSL_STORE_open(3)>, L<OSSL_STORE_expect(3)>,
+L<OSSL_STORE_SEARCH(3)>
 
 =head1 COPYRIGHT
 
-Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/ossl_typ.h b/include/openssl/ossl_typ.h
index f5214ab..2f242f1 100644
--- a/include/openssl/ossl_typ.h
+++ b/include/openssl/ossl_typ.h
@@ -174,6 +174,7 @@ typedef struct ctlog_store_st CTLOG_STORE;
 typedef struct ct_policy_eval_ctx_st CT_POLICY_EVAL_CTX;
 
 typedef struct ossl_store_info_st OSSL_STORE_INFO;
+typedef struct ossl_store_search_st OSSL_STORE_SEARCH;
 
 #if defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L && \
     defined(INTMAX_MAX) && defined(UINTMAX_MAX)
diff --git a/include/openssl/store.h b/include/openssl/store.h
index ff42953..7b43e8b 100644
--- a/include/openssl/store.h
+++ b/include/openssl/store.h
@@ -153,6 +153,55 @@ void OSSL_STORE_INFO_free(OSSL_STORE_INFO *info);
 
 
 /*-
+ *  Functions to construct a search URI from a base URI and search criteria
+ *  -----------------------------------------------------------------------
+ */
+
+/* OSSL_STORE search types */
+# define OSSL_STORE_SEARCH_BY_NAME              1 /* subject in certs, issuer in CRLs */
+# define OSSL_STORE_SEARCH_BY_ISSUER_SERIAL     2
+# define OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT   3
+# define OSSL_STORE_SEARCH_BY_ALIAS             4
+
+/* To check what search types the scheme handler supports */
+int OSSL_STORE_supports_search(OSSL_STORE_CTX *ctx, int search_type);
+
+/* Search term constructors */
+/*
+ * The input is considered to be owned by the caller, and must therefore
+ * remain present throughout the lifetime of the returned OSSL_STORE_SEARCH
+ */
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_name(X509_NAME *name);
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_issuer_serial(X509_NAME *name,
+                                                      const ASN1_INTEGER
+                                                      *serial);
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_key_fingerprint(const EVP_MD *digest,
+                                                        const unsigned char
+                                                        *bytes, size_t len);
+OSSL_STORE_SEARCH *OSSL_STORE_SEARCH_by_alias(const char *alias);
+
+/* Search term destructor */
+void OSSL_STORE_SEARCH_free(OSSL_STORE_SEARCH *search);
+
+/* Search term accessors */
+int OSSL_STORE_SEARCH_get_type(const OSSL_STORE_SEARCH *criterion);
+X509_NAME *OSSL_STORE_SEARCH_get0_name(OSSL_STORE_SEARCH *criterion);
+const ASN1_INTEGER *OSSL_STORE_SEARCH_get0_serial(const OSSL_STORE_SEARCH
+                                                  *criterion);
+const unsigned char *OSSL_STORE_SEARCH_get0_bytes(const OSSL_STORE_SEARCH
+                                                  *criterion, size_t *length);
+const char *OSSL_STORE_SEARCH_get0_string(const OSSL_STORE_SEARCH *criterion);
+const EVP_MD *OSSL_STORE_SEARCH_get0_digest(const OSSL_STORE_SEARCH *criterion);
+
+/*
+ * Add search criterion and expected return type (which can be unspecified)
+ * to the loading channel.  This MUST happen before the first OSSL_STORE_load().
+ */
+int OSSL_STORE_expect(OSSL_STORE_CTX *ctx, int expected_type);
+int OSSL_STORE_find(OSSL_STORE_CTX *ctx, OSSL_STORE_SEARCH *search);
+
+
+/*-
  *  Function to register a loader for the given URI scheme.
  *  -------------------------------------------------------
  *
@@ -177,6 +226,13 @@ typedef int (*OSSL_STORE_ctrl_fn)(OSSL_STORE_LOADER_CTX *ctx, int cmd,
                                   va_list args);
 int OSSL_STORE_LOADER_set_ctrl(OSSL_STORE_LOADER *loader,
                                OSSL_STORE_ctrl_fn ctrl_function);
+typedef int (*OSSL_STORE_expect_fn)(OSSL_STORE_LOADER_CTX *ctx, int expected);
+int OSSL_STORE_LOADER_set_expect(OSSL_STORE_LOADER *loader,
+                                 OSSL_STORE_expect_fn expect_function);
+typedef int (*OSSL_STORE_find_fn)(OSSL_STORE_LOADER_CTX *ctx,
+                                  OSSL_STORE_SEARCH *criteria);
+int OSSL_STORE_LOADER_set_find(OSSL_STORE_LOADER *loader,
+                               OSSL_STORE_find_fn find_function);
 typedef OSSL_STORE_INFO *(*OSSL_STORE_load_fn)(OSSL_STORE_LOADER_CTX *ctx,
                                                const UI_METHOD *ui_method,
                                                void *ui_data);
diff --git a/include/openssl/storeerr.h b/include/openssl/storeerr.h
index 5476d00..33d0ab7 100644
--- a/include/openssl/storeerr.h
+++ b/include/openssl/storeerr.h
@@ -20,13 +20,16 @@ int ERR_load_OSSL_STORE_strings(void);
  * OSSL_STORE function codes.
  */
 # define OSSL_STORE_F_FILE_CTRL                           129
+# define OSSL_STORE_F_FILE_FIND                           138
 # define OSSL_STORE_F_FILE_GET_PASS                       118
 # define OSSL_STORE_F_FILE_LOAD                           119
 # define OSSL_STORE_F_FILE_LOAD_TRY_DECODE                124
 # define OSSL_STORE_F_FILE_NAME_TO_URI                    126
 # define OSSL_STORE_F_FILE_OPEN                           120
 # define OSSL_STORE_F_OSSL_STORE_ATTACH_PEM_BIO           127
+# define OSSL_STORE_F_OSSL_STORE_EXPECT                   130
 # define OSSL_STORE_F_OSSL_STORE_FILE_ATTACH_PEM_BIO_INT  128
+# define OSSL_STORE_F_OSSL_STORE_FIND                     131
 # define OSSL_STORE_F_OSSL_STORE_GET0_LOADER_INT          100
 # define OSSL_STORE_F_OSSL_STORE_INFO_GET1_CERT           101
 # define OSSL_STORE_F_OSSL_STORE_INFO_GET1_CRL            102
@@ -46,6 +49,10 @@ int ERR_load_OSSL_STORE_strings(void);
 # define OSSL_STORE_F_OSSL_STORE_OPEN                     114
 # define OSSL_STORE_F_OSSL_STORE_OPEN_INT                 115
 # define OSSL_STORE_F_OSSL_STORE_REGISTER_LOADER_INT      117
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ALIAS          132
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_ISSUER_SERIAL  133
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT 136
+# define OSSL_STORE_F_OSSL_STORE_SEARCH_BY_NAME           137
 # define OSSL_STORE_F_OSSL_STORE_UNREGISTER_LOADER_INT    116
 # define OSSL_STORE_F_TRY_DECODE_PARAMS                   121
 # define OSSL_STORE_F_TRY_DECODE_PKCS12                   122
@@ -57,9 +64,11 @@ int ERR_load_OSSL_STORE_strings(void);
 # define OSSL_STORE_R_AMBIGUOUS_CONTENT_TYPE              107
 # define OSSL_STORE_R_BAD_PASSWORD_READ                   115
 # define OSSL_STORE_R_ERROR_VERIFYING_PKCS12_MAC          113
+# define OSSL_STORE_R_FINGERPRINT_SIZE_DOES_NOT_MATCH_DIGEST 121
 # define OSSL_STORE_R_INVALID_SCHEME                      106
 # define OSSL_STORE_R_IS_NOT_A                            112
 # define OSSL_STORE_R_LOADER_INCOMPLETE                   116
+# define OSSL_STORE_R_LOADING_STARTED                     117
 # define OSSL_STORE_R_NOT_A_CERTIFICATE                   100
 # define OSSL_STORE_R_NOT_A_CRL                           101
 # define OSSL_STORE_R_NOT_A_KEY                           102
@@ -67,9 +76,12 @@ int ERR_load_OSSL_STORE_strings(void);
 # define OSSL_STORE_R_NOT_PARAMETERS                      104
 # define OSSL_STORE_R_PASSPHRASE_CALLBACK_ERROR           114
 # define OSSL_STORE_R_PATH_MUST_BE_ABSOLUTE               108
+# define OSSL_STORE_R_SEARCH_ONLY_SUPPORTED_FOR_DIRECTORIES 119
 # define OSSL_STORE_R_UI_PROCESS_INTERRUPTED_OR_CANCELLED 109
 # define OSSL_STORE_R_UNREGISTERED_SCHEME                 105
 # define OSSL_STORE_R_UNSUPPORTED_CONTENT_TYPE            110
+# define OSSL_STORE_R_UNSUPPORTED_OPERATION               118
+# define OSSL_STORE_R_UNSUPPORTED_SEARCH_TYPE             120
 # define OSSL_STORE_R_URI_AUTHORITY_UNSUPPORTED           111
 
 #endif
diff --git a/test/recipes/90-test_store.t b/test/recipes/90-test_store.t
index 83ec012..2a6414b 100644
--- a/test/recipes/90-test_store.t
+++ b/test/recipes/90-test_store.t
@@ -1,12 +1,12 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
 # in the file LICENSE in the source distribution or at
 # https://www.openssl.org/source/license.html
 
-use File::Spec;
+use File::Spec::Functions;
 use File::Copy;
 use MIME::Base64;
 use OpenSSL::Test qw(:DEFAULT srctop_file srctop_dir bldtop_file data_file);
@@ -69,13 +69,13 @@ my @noexist_file_files =
     ( "file:blahdiblah.pem",
       "file:test/blahdibleh.der" );
 
-
 my $n = (3 * scalar @noexist_files)
     + (6 * scalar @src_files)
     + (4 * scalar @generated_files)
     + (scalar keys %generated_file_files)
     + (scalar @noexist_file_files)
-    + 4;
+    + 3
+    + 11;
 
 plan tests => $n;
 
@@ -84,9 +84,7 @@ indir "store_$$" => sub {
     {
         skip "failed initialisation", $n unless init();
 
-        # test PEM_read_bio_PrivateKey
-        ok(run(app(["openssl", "rsa", "-in", "rsa-key-pkcs8-pbes2-sha256.pem",
-                    "-passin", "pass:password"])));
+        my $rehash = init_rehash();
 
         foreach (@noexist_files) {
             my $file = srctop_file($_);
@@ -152,6 +150,55 @@ indir "store_$$" => sub {
                 ok(run(app(["openssl", "storeutl", to_abs_file_uri($dir, 1)])));
             }
         }
+
+        ok(!run(app(['openssl', 'storeutl',
+                     '-subject', '/C=AU/ST=QLD/CN=SSLeay\/rsa test cert',
+                     srctop_file('test', 'testx509.pem')])),
+           "Checking that -subject can't be used with a single file");
+
+        ok(run(app(['openssl', 'storeutl', '-certs',
+                    srctop_file('test', 'testx509.pem')])),
+           "Checking that -certs returns 1 object on a certificate file");
+        ok(run(app(['openssl', 'storeutl', '-certs',
+                     srctop_file('test', 'testcrl.pem')])),
+           "Checking that -certs returns 0 objects on a CRL file");
+
+        ok(run(app(['openssl', 'storeutl', '-crls',
+                     srctop_file('test', 'testx509.pem')])),
+           "Checking that -crls returns 0 objects on a certificate file");
+        ok(run(app(['openssl', 'storeutl', '-crls',
+                    srctop_file('test', 'testcrl.pem')])),
+           "Checking that -crls returns 1 object on a CRL file");
+
+    SKIP: {
+            skip "failed rehash initialisation", 6 unless $rehash;
+
+            # subject from testx509.pem:
+            # '/C=AU/ST=QLD/CN=SSLeay\/rsa test cert'
+            # issuer from testcrl.pem:
+            # '/C=US/O=RSA Data Security, Inc./OU=Secure Server Certification Authority'
+            ok(run(app(['openssl', 'storeutl',
+                        '-subject', '/C=AU/ST=QLD/CN=SSLeay\/rsa test cert',
+                        catdir(curdir(), 'rehash')])));
+            ok(run(app(['openssl', 'storeutl',
+                        '-subject',
+                        '/C=US/O=RSA Data Security, Inc./OU=Secure Server Certification Authority',
+                        catdir(curdir(), 'rehash')])));
+            ok(run(app(['openssl', 'storeutl', '-certs',
+                        '-subject', '/C=AU/ST=QLD/CN=SSLeay\/rsa test cert',
+                        catdir(curdir(), 'rehash')])));
+            ok(run(app(['openssl', 'storeutl', '-crls',
+                        '-subject', '/C=AU/ST=QLD/CN=SSLeay\/rsa test cert',
+                        catdir(curdir(), 'rehash')])));
+            ok(run(app(['openssl', 'storeutl', '-certs',
+                        '-subject',
+                        '/C=US/O=RSA Data Security, Inc./OU=Secure Server Certification Authority',
+                        catdir(curdir(), 'rehash')])));
+            ok(run(app(['openssl', 'storeutl', '-crls',
+                        '-subject',
+                        '/C=US/O=RSA Data Security, Inc./OU=Secure Server Certification Authority',
+                        catdir(curdir(), 'rehash')])));
+        }
     }
 }, create => 1, cleanup => 1;
 
@@ -350,6 +397,17 @@ sub init {
            );
 }
 
+sub init_rehash {
+    return (
+            mkdir(catdir(curdir(), 'rehash'))
+            && copy(srctop_file('test', 'testx509.pem'),
+                    catdir(curdir(), 'rehash'))
+            && copy(srctop_file('test', 'testcrl.pem'),
+                    catdir(curdir(), 'rehash'))
+            && run(app(['openssl', 'rehash', catdir(curdir(), 'rehash')]))
+           );
+}
+
 sub runall {
     my ($function, @items) = @_;
 
diff --git a/util/libcrypto.num b/util/libcrypto.num
index 0049eab..bd94e27 100644
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -4505,3 +4505,19 @@ RAND_DRBG_secure_new                    4446	1_1_1	EXIST::FUNCTION:
 OSSL_STORE_vctrl                        4447	1_1_1	EXIST::FUNCTION:
 X509_get0_authority_key_id              4448	1_1_0h	EXIST::FUNCTION:
 BIO_bind                                4449	1_1_1	EXIST::FUNCTION:SOCK
+OSSL_STORE_LOADER_set_expect            4450	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_expect                       4451	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_key_fingerprint    4452	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_serial           4453	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_name               4454	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_supports_search              4455	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_find                         4456	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get_type              4457	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_bytes            4458	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_string           4459	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_issuer_serial      4460	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_name             4461	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_by_alias              4462	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_LOADER_set_find              4463	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_free                  4464	1_1_1	EXIST::FUNCTION:
+OSSL_STORE_SEARCH_get0_digest           4465	1_1_1	EXIST::FUNCTION:
diff --git a/util/private.num b/util/private.num
index 099a4f7..c106e60 100644
--- a/util/private.num
+++ b/util/private.num
@@ -31,8 +31,11 @@ OSSL_STORE_CTX                          datatype
 OSSL_STORE_INFO                         datatype
 OSSL_STORE_LOADER                       datatype
 OSSL_STORE_LOADER_CTX                   datatype
+OSSL_STORE_SEARCH                       datatype
 OSSL_STORE_close_fn                     datatype
 OSSL_STORE_ctrl_fn                      datatype
+OSSL_STORE_expect_fn                    datatype
+OSSL_STORE_find_fn                      datatype
 OSSL_STORE_eof_fn                       datatype
 OSSL_STORE_error_fn                     datatype
 OSSL_STORE_load_fn                      datatype

From builds at travis-ci.org  Fri Feb 23 07:18:52 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 23 Feb 2018 07:18:52 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16545 (master - 0764e41)
In-Reply-To: <openssl/openssl+345126518+passed@travis-ci.org>
Message-ID: <5a8fc05c3b2c5_43f8d67f6b2a4185582d@30b0f6f2-1af2-4f76-a9ec-577e4b8802df.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16545
Status: Passed

Duration: 34 minutes and 44 seconds
Commit: 0764e41 (master)
Author: Richard Levitte
Message: Add a note in CHANGES

[extended tests]

Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2688)

View the changeset: https://github.com/openssl/openssl/compare/d5927344207e...0764e4131243

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/345126518?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/0340a4da/attachment.html>

From bernd.edlinger at hotmail.de  Fri Feb 23 13:08:48 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Fri, 23 Feb 2018 13:08:48 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519391328.343717.21146.nullmailer@dev.openssl.org>

The branch master has been updated
       via  e42809f80895b9f89d9165358e1a06f9c8f821cc (commit)
      from  0764e4131243e72b54c86486462975d066cd9453 (commit)


- Log -----------------------------------------------------------------
commit e42809f80895b9f89d9165358e1a06f9c8f821cc
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Thu Feb 22 08:30:41 2018 +0100

    Remove executable bit from test/recipes/03-test_internal_sm4.t
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5434)

-----------------------------------------------------------------------

Summary of changes:
 test/recipes/03-test_internal_sm4.t | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 mode change 100755 => 100644 test/recipes/03-test_internal_sm4.t

diff --git a/test/recipes/03-test_internal_sm4.t b/test/recipes/03-test_internal_sm4.t
old mode 100755
new mode 100644

From bernd.edlinger at hotmail.de  Fri Feb 23 13:11:30 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Fri, 23 Feb 2018 13:11:30 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519391490.585978.22724.nullmailer@dev.openssl.org>

The branch master has been updated
       via  604e591ed75eff9296c21ee5fe93f3e9ec246094 (commit)
      from  e42809f80895b9f89d9165358e1a06f9c8f821cc (commit)


- Log -----------------------------------------------------------------
commit 604e591ed75eff9296c21ee5fe93f3e9ec246094
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Wed Feb 21 15:48:02 2018 +0100

    Fix some bugs with the cfb1 bitsize handling
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5426)

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/e_aes.c                | 2 ++
 crypto/evp/e_camellia.c           | 4 +++-
 crypto/include/internal/evp_int.h | 2 +-
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/crypto/evp/e_aes.c b/crypto/evp/e_aes.c
index e56be16..1d5007a 100644
--- a/crypto/evp/e_aes.c
+++ b/crypto/evp/e_aes.c
@@ -2510,6 +2510,8 @@ static int aes_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
                                 EVP_CIPHER_CTX_encrypting(ctx), dat->block);
         EVP_CIPHER_CTX_set_num(ctx, num);
         len -= MAXBITCHUNK;
+        out += MAXBITCHUNK;
+        in  += MAXBITCHUNK;
     }
     if (len) {
         int num = EVP_CIPHER_CTX_num(ctx);
diff --git a/crypto/evp/e_camellia.c b/crypto/evp/e_camellia.c
index b50fa0b..905d7a6 100644
--- a/crypto/evp/e_camellia.c
+++ b/crypto/evp/e_camellia.c
@@ -325,8 +325,10 @@ static int camellia_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
         int num = EVP_CIPHER_CTX_num(ctx);
         CRYPTO_cfb128_1_encrypt(in, out, MAXBITCHUNK * 8, &dat->ks,
                                 EVP_CIPHER_CTX_iv_noconst(ctx), &num, EVP_CIPHER_CTX_encrypting(ctx), dat->block);
-        len -= MAXBITCHUNK;
         EVP_CIPHER_CTX_set_num(ctx, num);
+        len -= MAXBITCHUNK;
+        out += MAXBITCHUNK;
+        in  += MAXBITCHUNK;
     }
     if (len) {
         int num = EVP_CIPHER_CTX_num(ctx);
diff --git a/crypto/include/internal/evp_int.h b/crypto/include/internal/evp_int.h
index 917245c..bbf2ba6 100644
--- a/crypto/include/internal/evp_int.h
+++ b/crypto/include/internal/evp_int.h
@@ -214,7 +214,7 @@ static int cname##_cfb##cbits##_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
         cprefix##_cfb##cbits##_encrypt(in, out, (long) \
             ((cbits == 1) \
                 && !EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS) \
-                ? inl*8 : inl), \
+                ? chunk*8 : chunk), \
             &EVP_C_DATA(kstruct, ctx)->ksched, EVP_CIPHER_CTX_iv_noconst(ctx),\
             &num, EVP_CIPHER_CTX_encrypting(ctx));\
         EVP_CIPHER_CTX_set_num(ctx, num);\

From bernd.edlinger at hotmail.de  Fri Feb 23 13:12:49 2018
From: bernd.edlinger at hotmail.de (bernd.edlinger at hotmail.de)
Date: Fri, 23 Feb 2018 13:12:49 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519391569.883782.23837.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  89314d9a22ad0b0ce87e188c486532926aff01ea (commit)
      from  15f90bc60a11ec6b5fe42f9fb155715a64e4ab10 (commit)


- Log -----------------------------------------------------------------
commit 89314d9a22ad0b0ce87e188c486532926aff01ea
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Wed Feb 21 15:48:02 2018 +0100

    Fix some bugs with the cfb1 bitsize handling
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5426)
    
    (cherry picked from commit 604e591ed75eff9296c21ee5fe93f3e9ec246094)

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/e_aes.c                | 2 ++
 crypto/evp/e_camellia.c           | 4 +++-
 crypto/include/internal/evp_int.h | 2 +-
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/crypto/evp/e_aes.c b/crypto/evp/e_aes.c
index fe52213..b17154d 100644
--- a/crypto/evp/e_aes.c
+++ b/crypto/evp/e_aes.c
@@ -1229,6 +1229,8 @@ static int aes_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
                                 EVP_CIPHER_CTX_encrypting(ctx), dat->block);
         EVP_CIPHER_CTX_set_num(ctx, num);
         len -= MAXBITCHUNK;
+        out += MAXBITCHUNK;
+        in  += MAXBITCHUNK;
     }
     if (len) {
         int num = EVP_CIPHER_CTX_num(ctx);
diff --git a/crypto/evp/e_camellia.c b/crypto/evp/e_camellia.c
index b50fa0b..905d7a6 100644
--- a/crypto/evp/e_camellia.c
+++ b/crypto/evp/e_camellia.c
@@ -325,8 +325,10 @@ static int camellia_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
         int num = EVP_CIPHER_CTX_num(ctx);
         CRYPTO_cfb128_1_encrypt(in, out, MAXBITCHUNK * 8, &dat->ks,
                                 EVP_CIPHER_CTX_iv_noconst(ctx), &num, EVP_CIPHER_CTX_encrypting(ctx), dat->block);
-        len -= MAXBITCHUNK;
         EVP_CIPHER_CTX_set_num(ctx, num);
+        len -= MAXBITCHUNK;
+        out += MAXBITCHUNK;
+        in  += MAXBITCHUNK;
     }
     if (len) {
         int num = EVP_CIPHER_CTX_num(ctx);
diff --git a/crypto/include/internal/evp_int.h b/crypto/include/internal/evp_int.h
index 6cc2f92..358d720 100644
--- a/crypto/include/internal/evp_int.h
+++ b/crypto/include/internal/evp_int.h
@@ -199,7 +199,7 @@ static int cname##_cfb##cbits##_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
         cprefix##_cfb##cbits##_encrypt(in, out, (long) \
             ((cbits == 1) \
                 && !EVP_CIPHER_CTX_test_flags(ctx, EVP_CIPH_FLAG_LENGTH_BITS) \
-                ? inl*8 : inl), \
+                ? chunk*8 : chunk), \
             &EVP_C_DATA(kstruct, ctx)->ksched, EVP_CIPHER_CTX_iv_noconst(ctx),\
             &num, EVP_CIPHER_CTX_encrypting(ctx));\
         EVP_CIPHER_CTX_set_num(ctx, num);\

From no-reply at appveyor.com  Fri Feb 23 13:49:20 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 13:49:20 +0000
Subject: [openssl-commits] Build failed: openssl master.15850
Message-ID: <20180223134920.1.FE85B41105F2FD59@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/c4d6a97c/attachment.html>

From builds at travis-ci.org  Fri Feb 23 13:50:06 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 23 Feb 2018 13:50:06 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16557 (master - 604e591)
In-Reply-To: <openssl/openssl+345243181+errored@travis-ci.org>
Message-ID: <5a901ca84be54_43fcc1d88862c17388e2@c64687ee-280c-455d-895f-b01e1e74a5a3.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16557
Status: Errored

Duration: 33 minutes and 17 seconds
Commit: 604e591 (master)
Author: Bernd Edlinger
Message: Fix some bugs with the cfb1 bitsize handling

Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5426)

View the changeset: https://github.com/openssl/openssl/compare/e42809f80895...604e591ed75e

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/345243181?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/a356a006/attachment-0001.html>

From no-reply at appveyor.com  Fri Feb 23 18:56:17 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 18:56:17 +0000
Subject: [openssl-commits] Build failed: openssl master.15860
Message-ID: <20180223185617.1.64B7A6F0E4FFDE65@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/be3a30aa/attachment.html>

From rsalz at openssl.org  Fri Feb 23 21:03:29 2018
From: rsalz at openssl.org (Rich Salz)
Date: Fri, 23 Feb 2018 21:03:29 +0000
Subject: [openssl-commits] [tools]  master update
Message-ID: <1519419809.542488.25536.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b56ac254a6398d5611e8b48fad9c50e43520ea31 (commit)
      from  4a45104b1146f500bd0db1c921d3101cd10099b4 (commit)


- Log -----------------------------------------------------------------
commit b56ac254a6398d5611e8b48fad9c50e43520ea31
Author: Rich Salz <rsalz at openssl.org>
Date:   Fri Feb 23 16:03:26 2018 -0500

    Formatting tweaks

-----------------------------------------------------------------------

Summary of changes:
 license/add-lastchance | 24 +++++++++++++++++-------
 1 file changed, 17 insertions(+), 7 deletions(-)

diff --git a/license/add-lastchance b/license/add-lastchance
index 3d963f6..8249952 100755
--- a/license/add-lastchance
+++ b/license/add-lastchance
@@ -9,20 +9,28 @@ die "Feed this the output of 'get-followups -d'\n" if -t 0;
 print <<'EOF';
 <html>
   <head>
-    <title>Help find these hackers</title>
+    <title>Help find these people</title>
     <link rel="stylesheet" type="text/css" href="/style.css">
   </head>
   <body>
-    <h1>Help find these hackers</h1>
-    <p>
+    <h1>Help find these people</h1>
+<p>
+We are looking for some people who have previously contributed to OpenSSL. See
+<a href="/blog/blog/2017/03/22/license/">https://www.openssl.org/blog/blog/2017/03/22/license/</a>
+for some background.
+</p>
 If you know where to find any of the following people, please email their
-current address to license at openssl.org, or ask them to get in touch.
-
+current address to
+<a href="mailto:license at openssl.org">license at openssl.org</a>,
+or ask them to get in touch.
+</p>
+<p>
 Each contributor is separated by a blank line.  The first line is the last
 known email we have (not valid), and the full name if known.  Each following
 line has the number of files changed, lines added and deleted, the commit ID
 and date, and then the commit subject line.
-
+</p>
+<p>
 Thank you!
 </p>
 <pre>
@@ -69,6 +77,8 @@ while ( <> ) {
 print <<'EOF';
 
     </pre>
-</body>
+
+    <a href="/">Main page</a></p>
+  </body>
 </html>
 EOF

From no-reply at appveyor.com  Fri Feb 23 22:05:37 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 22:05:37 +0000
Subject: [openssl-commits] Build failed: openssl master.15869
Message-ID: <20180223220537.1.75CF57654C176D6E@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/8ff7552c/attachment.html>

From rsalz at openssl.org  Fri Feb 23 22:44:12 2018
From: rsalz at openssl.org (Rich Salz)
Date: Fri, 23 Feb 2018 22:44:12 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519425852.646511.7979.nullmailer@dev.openssl.org>

The branch master has been updated
       via  77376c0507b6159b94fc092d7fcd7e7c7a3ed7d9 (commit)
      from  604e591ed75eff9296c21ee5fe93f3e9ec246094 (commit)


- Log -----------------------------------------------------------------
commit 77376c0507b6159b94fc092d7fcd7e7c7a3ed7d9
Author: Rich Salz <rsalz at openssl.org>
Date:   Fri Feb 23 16:49:59 2018 -0500

    Remove OSSLzu, and fix the one place that used it.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5439)

-----------------------------------------------------------------------

Summary of changes:
 e_os.h                   | 27 ---------------------------
 ssl/record/ssl3_record.c |  2 +-
 2 files changed, 1 insertion(+), 28 deletions(-)

diff --git a/e_os.h b/e_os.h
index f3b8fb8..3e92716 100644
--- a/e_os.h
+++ b/e_os.h
@@ -26,33 +26,6 @@
 extern "C" {
 #endif
 
-/*
- * Format specifier for printing size_t. Original conundrum was to
- * get it working with -Wformat [-Werror], which can be considered
- * overzealous, especially in multi-platform context, but it's
- * conscious choice...
- */
-# if defined(_WIN64)
-#  define OSSLzu  "I64u"    /* One would expect _WIN{64|32} cases after
-                             * __STDC_VERSION__, but there are corner
-                             * cases of MinGW compilers that link with
-                             * non-compliant MSVCRT.DLL... */
-# elif defined(_WIN32)
-#  define OSSLzu  "u"
-# elif defined(__VMS)
-#  define OSSLzu  "u"       /* VMS suffers from similar problem as MinGW,
-                             * i.e. C RTL falling behind compiler. Recall
-                             * that sizeof(size_t)==4 even in LP64 case. */
-# elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L
-#  define OSSLzu  "zu"
-# elif defined(__SIZEOF_SIZE_T__) && __SIZEOF_SIZE_T__==4
-#  define OSSLzu  "u"       /* 'lu' should have worked, but when generating
-                             * 32-bit code gcc still complains :-( */
-# else
-#  define OSSLzu  "lu"      /* To see that is works recall what does L
-                             * stand for in ILP32 and LP64 */
-# endif
-
 # ifndef DEVRANDOM
 /*
  * set this to a comma-separated list of 'random' device files to try out. By
diff --git a/ssl/record/ssl3_record.c b/ssl/record/ssl3_record.c
index a806606..fda918a 100644
--- a/ssl/record/ssl3_record.c
+++ b/ssl/record/ssl3_record.c
@@ -550,7 +550,7 @@ int ssl3_get_record(SSL *s)
         return -1;
     }
 #ifdef SSL_DEBUG
-    printf("dec %"OSSLzu"\n", rr[0].length);
+    printf("dec %lu\n", (unsigned long)rr[0].length);
     {
         size_t z;
         for (z = 0; z < rr[0].length; z++)

From no-reply at appveyor.com  Fri Feb 23 23:23:42 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 23:23:42 +0000
Subject: [openssl-commits] Build failed: openssl master.15874
Message-ID: <20180223232342.1.E4756682E90548F9@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/b835f838/attachment.html>

From builds at travis-ci.org  Fri Feb 23 23:14:43 2018
From: builds at travis-ci.org (Travis CI)
Date: Fri, 23 Feb 2018 23:14:43 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16580 (master - 77376c0)
In-Reply-To: <openssl/openssl+345469654+passed@travis-ci.org>
Message-ID: <5a90a063c56e1_43fa4314a488063676@cf379c90-3eba-42c8-bef9-878fe9cdcb48.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16580
Status: Passed

Duration: 29 minutes and 42 seconds
Commit: 77376c0 (master)
Author: Rich Salz
Message: Remove OSSLzu, and fix the one place that used it.

Reviewed-by: Andy Polyakov <appro at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5439)

View the changeset: https://github.com/openssl/openssl/compare/604e591ed75e...77376c0507b6

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/345469654?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/fb8721e0/attachment-0001.html>

From no-reply at appveyor.com  Fri Feb 23 23:49:57 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Fri, 23 Feb 2018 23:49:57 +0000
Subject: [openssl-commits] Build completed: openssl master.15875
Message-ID: <20180223234957.1.DFD6C35379F650F6@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180223/6c8a2bb9/attachment.html>

From no-reply at appveyor.com  Sat Feb 24 00:11:15 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sat, 24 Feb 2018 00:11:15 +0000
Subject: [openssl-commits] Build failed: openssl master.15876
Message-ID: <20180224001115.1.F066F1CDA4922915@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180224/6a519e4f/attachment.html>

From no-reply at appveyor.com  Sat Feb 24 01:09:29 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sat, 24 Feb 2018 01:09:29 +0000
Subject: [openssl-commits] Build completed: openssl master.15877
Message-ID: <20180224010929.1.397A0D8175EB8D33@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180224/540a8ce9/attachment.html>

From no-reply at appveyor.com  Sat Feb 24 04:29:31 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sat, 24 Feb 2018 04:29:31 +0000
Subject: [openssl-commits] Build failed: openssl master.15878
Message-ID: <20180224042931.1.129EE186F4D97C03@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180224/f4e99667/attachment.html>

From no-reply at appveyor.com  Sat Feb 24 05:20:36 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sat, 24 Feb 2018 05:20:36 +0000
Subject: [openssl-commits] Build failed: openssl master.15879
Message-ID: <20180224052036.1.E38EEC8B074E6F88@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180224/0540323b/attachment.html>

From appro at openssl.org  Sat Feb 24 13:06:56 2018
From: appro at openssl.org (Andy Polyakov)
Date: Sat, 24 Feb 2018 13:06:56 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519477616.333639.5315.nullmailer@dev.openssl.org>

The branch master has been updated
       via  e8c42b9888f53ac60f92221da309dc5a2b007cc3 (commit)
      from  77376c0507b6159b94fc092d7fcd7e7c7a3ed7d9 (commit)


- Log -----------------------------------------------------------------
commit e8c42b9888f53ac60f92221da309dc5a2b007cc3
Author: Andy Polyakov <appro at openssl.org>
Date:   Fri Feb 23 11:51:41 2018 +0100

    ec/asm/x25519-x86_64.pl: fix up ADCX/ADOX fallback.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5447)

-----------------------------------------------------------------------

Summary of changes:
 crypto/ec/asm/x25519-x86_64.pl | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/crypto/ec/asm/x25519-x86_64.pl b/crypto/ec/asm/x25519-x86_64.pl
index 6c0f738..68a7771 100755
--- a/crypto/ec/asm/x25519-x86_64.pl
+++ b/crypto/ec/asm/x25519-x86_64.pl
@@ -784,7 +784,7 @@ ___
 } else {
 $code.=<<___;
 .globl	x25519_fe64_eligible
-.type	x25519_fe64_eligible,\@function
+.type	x25519_fe64_eligible,\@abi-omnipotent
 .align	32
 x25519_fe64_eligible:
 	xor	%eax,%eax
@@ -792,6 +792,7 @@ x25519_fe64_eligible:
 .size	x25519_fe64_eligible,.-x25519_fe64_eligible
 
 .globl	x25519_fe64_mul
+.type	x25519_fe64_mul,\@abi-omnipotent
 .globl	x25519_fe64_sqr
 .globl	x25519_fe64_mul121666
 .globl	x25519_fe64_add
@@ -802,9 +803,10 @@ x25519_fe64_sqr:
 x25519_fe64_mul121666:
 x25519_fe64_add:
 x25519_fe64_sub:
-x25519_fe64_sub:
 x25519_fe64_tobytes:
 	.byte	0x0f,0x0b	# ud2
+	ret
+.size	x25519_fe64_mul,.-x25519_fe64_mul
 ___
 }
 $code.=<<___;

From appro at openssl.org  Sat Feb 24 13:15:21 2018
From: appro at openssl.org (Andy Polyakov)
Date: Sat, 24 Feb 2018 13:15:21 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519478121.558101.7933.nullmailer@dev.openssl.org>

The branch master has been updated
       via  6afed267db47a8aa604a3a9e78ac72efa02363df (commit)
       via  11a9eacde99f6333707b2399054d66ebbc0eb2a9 (commit)
       via  ae1ffe0f65c460ccdfe5153b96fe9943d7a171b8 (commit)
      from  e8c42b9888f53ac60f92221da309dc5a2b007cc3 (commit)


- Log -----------------------------------------------------------------
commit 6afed267db47a8aa604a3a9e78ac72efa02363df
Author: Andy Polyakov <appro at openssl.org>
Date:   Fri Feb 23 13:55:37 2018 +0100

    ec/ecp_nistp{224,256,521}.c: harmonize usage of __uint128_t.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5449)

commit 11a9eacde99f6333707b2399054d66ebbc0eb2a9
Author: Andy Polyakov <appro at openssl.org>
Date:   Fri Feb 23 13:37:06 2018 +0100

    {ec/curve25519,poly1305/poly1305}.c: relax pedantic constraint.
    
    As it turns out gcc -pedantic doesn't seem to consider __uint128_t
    as non-standard, unlike __int128 that is.
    
    Fix even MSVC warnings in curve25519.c.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5449)

commit ae1ffe0f65c460ccdfe5153b96fe9943d7a171b8
Author: Andy Polyakov <appro at openssl.org>
Date:   Fri Feb 23 13:20:33 2018 +0100

    ec/curve448: portability fixups.
    
    SPARC condition in __SIZEOF_INT128__==16 is rather performance thing
    than portability. Even though compiler advertises int128 capability,
    corresponding operations are inefficient, because they are not
    directly backed by instruction set.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5449)

-----------------------------------------------------------------------

Summary of changes:
 crypto/ec/curve25519.c             | 135 ++++++++++++++++++-------------------
 crypto/ec/curve448/curve448.c      |   2 +-
 crypto/ec/curve448/curve448utils.h |   3 +-
 crypto/ec/ecp_nistp224.c           |   4 +-
 crypto/ec/ecp_nistp256.c           |   4 +-
 crypto/ec/ecp_nistp521.c           |   4 +-
 crypto/poly1305/poly1305.c         |   5 +-
 7 files changed, 78 insertions(+), 79 deletions(-)

diff --git a/crypto/ec/curve25519.c b/crypto/ec/curve25519.c
index f354107..45525f4 100644
--- a/crypto/ec/curve25519.c
+++ b/crypto/ec/curve25519.c
@@ -12,9 +12,8 @@
 #include <openssl/sha.h>
 
 #if defined(X25519_ASM) \
-    || ( !defined(PEDANTIC) && \
-         !defined(__sparc__) && \
-         (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16) )
+    || ( (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__ == 16) \
+         && !defined(__sparc__) )
 /*
  * Base 2^51 implementation.
  */
@@ -22,7 +21,7 @@
 
 typedef uint64_t fe51[5];
 # if !defined(X25519_ASM)
-typedef unsigned __int128 u128;
+typedef __uint128_t u128;
 # endif
 
 static const uint64_t MASK51 = 0x7ffffffffffff;
@@ -101,38 +100,38 @@ static void fe51_tobytes(uint8_t *s, const fe51 h)
                     h4 &= MASK51;
 
     /* smash */
-    s[0] = h0 >> 0;
-    s[1] = h0 >> 8;
-    s[2] = h0 >> 16;
-    s[3] = h0 >> 24;
-    s[4] = h0 >> 32;
-    s[5] = h0 >> 40;
-    s[6] = (h0 >> 48) | ((uint32_t)h1 << 3);
-    s[7] = h1 >> 5;
-    s[8] = h1 >> 13;
-    s[9] = h1 >> 21;
-    s[10] = h1 >> 29;
-    s[11] = h1 >> 37;
-    s[12] = (h1 >> 45) | ((uint32_t)h2 << 6);
-    s[13] = h2 >> 2;
-    s[14] = h2 >> 10;
-    s[15] = h2 >> 18;
-    s[16] = h2 >> 26;
-    s[17] = h2 >> 34;
-    s[18] = h2 >> 42;
-    s[19] = (h2 >> 50) | ((uint32_t)h3 << 1);
-    s[20] = h3 >> 7;
-    s[21] = h3 >> 15;
-    s[22] = h3 >> 23;
-    s[23] = h3 >> 31;
-    s[24] = h3 >> 39;
-    s[25] = (h3 >> 47) | ((uint32_t)h4 << 4);
-    s[26] = h4 >> 4;
-    s[27] = h4 >> 12;
-    s[28] = h4 >> 20;
-    s[29] = h4 >> 28;
-    s[30] = h4 >> 36;
-    s[31] = h4 >> 44;
+    s[0] = (uint8_t)(h0 >> 0);
+    s[1] = (uint8_t)(h0 >> 8);
+    s[2] = (uint8_t)(h0 >> 16);
+    s[3] = (uint8_t)(h0 >> 24);
+    s[4] = (uint8_t)(h0 >> 32);
+    s[5] = (uint8_t)(h0 >> 40);
+    s[6] = (uint8_t)((h0 >> 48) | ((uint32_t)h1 << 3));
+    s[7] = (uint8_t)(h1 >> 5);
+    s[8] = (uint8_t)(h1 >> 13);
+    s[9] = (uint8_t)(h1 >> 21);
+    s[10] = (uint8_t)(h1 >> 29);
+    s[11] = (uint8_t)(h1 >> 37);
+    s[12] = (uint8_t)((h1 >> 45) | ((uint32_t)h2 << 6));
+    s[13] = (uint8_t)(h2 >> 2);
+    s[14] = (uint8_t)(h2 >> 10);
+    s[15] = (uint8_t)(h2 >> 18);
+    s[16] = (uint8_t)(h2 >> 26);
+    s[17] = (uint8_t)(h2 >> 34);
+    s[18] = (uint8_t)(h2 >> 42);
+    s[19] = (uint8_t)((h2 >> 50) | ((uint32_t)h3 << 1));
+    s[20] = (uint8_t)(h3 >> 7);
+    s[21] = (uint8_t)(h3 >> 15);
+    s[22] = (uint8_t)(h3 >> 23);
+    s[23] = (uint8_t)(h3 >> 31);
+    s[24] = (uint8_t)(h3 >> 39);
+    s[25] = (uint8_t)((h3 >> 47) | ((uint32_t)h4 << 4));
+    s[26] = (uint8_t)(h4 >> 4);
+    s[27] = (uint8_t)(h4 >> 12);
+    s[28] = (uint8_t)(h4 >> 20);
+    s[29] = (uint8_t)(h4 >> 28);
+    s[30] = (uint8_t)(h4 >> 36);
+    s[31] = (uint8_t)(h4 >> 44);
 }
 
 # ifdef X25519_ASM
@@ -888,38 +887,38 @@ static void fe_tobytes(uint8_t *s, const fe h) {
    * evidently 2^255 h10-2^255 q = 0.
    * Goal: Output h0+...+2^230 h9.  */
 
-  s[0] = h0 >> 0;
-  s[1] = h0 >> 8;
-  s[2] = h0 >> 16;
-  s[3] = (h0 >> 24) | ((uint32_t)(h1) << 2);
-  s[4] = h1 >> 6;
-  s[5] = h1 >> 14;
-  s[6] = (h1 >> 22) | ((uint32_t)(h2) << 3);
-  s[7] = h2 >> 5;
-  s[8] = h2 >> 13;
-  s[9] = (h2 >> 21) | ((uint32_t)(h3) << 5);
-  s[10] = h3 >> 3;
-  s[11] = h3 >> 11;
-  s[12] = (h3 >> 19) | ((uint32_t)(h4) << 6);
-  s[13] = h4 >> 2;
-  s[14] = h4 >> 10;
-  s[15] = h4 >> 18;
-  s[16] = h5 >> 0;
-  s[17] = h5 >> 8;
-  s[18] = h5 >> 16;
-  s[19] = (h5 >> 24) | ((uint32_t)(h6) << 1);
-  s[20] = h6 >> 7;
-  s[21] = h6 >> 15;
-  s[22] = (h6 >> 23) | ((uint32_t)(h7) << 3);
-  s[23] = h7 >> 5;
-  s[24] = h7 >> 13;
-  s[25] = (h7 >> 21) | ((uint32_t)(h8) << 4);
-  s[26] = h8 >> 4;
-  s[27] = h8 >> 12;
-  s[28] = (h8 >> 20) | ((uint32_t)(h9) << 6);
-  s[29] = h9 >> 2;
-  s[30] = h9 >> 10;
-  s[31] = h9 >> 18;
+  s[0] = (uint8_t)(h0 >> 0);
+  s[1] = (uint8_t)(h0 >> 8);
+  s[2] = (uint8_t)(h0 >> 16);
+  s[3] = (uint8_t)((h0 >> 24) | ((uint32_t)(h1) << 2));
+  s[4] = (uint8_t)(h1 >> 6);
+  s[5] = (uint8_t)(h1 >> 14);
+  s[6] = (uint8_t)((h1 >> 22) | ((uint32_t)(h2) << 3));
+  s[7] = (uint8_t)(h2 >> 5);
+  s[8] = (uint8_t)(h2 >> 13);
+  s[9] = (uint8_t)((h2 >> 21) | ((uint32_t)(h3) << 5));
+  s[10] = (uint8_t)(h3 >> 3);
+  s[11] = (uint8_t)(h3 >> 11);
+  s[12] = (uint8_t)((h3 >> 19) | ((uint32_t)(h4) << 6));
+  s[13] = (uint8_t)(h4 >> 2);
+  s[14] = (uint8_t)(h4 >> 10);
+  s[15] = (uint8_t)(h4 >> 18);
+  s[16] = (uint8_t)(h5 >> 0);
+  s[17] = (uint8_t)(h5 >> 8);
+  s[18] = (uint8_t)(h5 >> 16);
+  s[19] = (uint8_t)((h5 >> 24) | ((uint32_t)(h6) << 1));
+  s[20] = (uint8_t)(h6 >> 7);
+  s[21] = (uint8_t)(h6 >> 15);
+  s[22] = (uint8_t)((h6 >> 23) | ((uint32_t)(h7) << 3));
+  s[23] = (uint8_t)(h7 >> 5);
+  s[24] = (uint8_t)(h7 >> 13);
+  s[25] = (uint8_t)((h7 >> 21) | ((uint32_t)(h8) << 4));
+  s[26] = (uint8_t)(h8 >> 4);
+  s[27] = (uint8_t)(h8 >> 12);
+  s[28] = (uint8_t)((h8 >> 20) | ((uint32_t)(h9) << 6));
+  s[29] = (uint8_t)(h9 >> 2);
+  s[30] = (uint8_t)(h9 >> 10);
+  s[31] = (uint8_t)(h9 >> 18);
 }
 
 /* h = f */
diff --git a/crypto/ec/curve448/curve448.c b/crypto/ec/curve448/curve448.c
index 7c43a75..8ced622 100644
--- a/crypto/ec/curve448/curve448.c
+++ b/crypto/ec/curve448/curve448.c
@@ -500,7 +500,7 @@ struct smvt_control {
     int power, addend;
 };
 
-#if defined(__GNUC__) || defined(__clang__)
+#if defined(__GNUC__) && (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ > 3))
 # define NUMTRAILINGZEROS	__builtin_ctz
 #else
 # define NUMTRAILINGZEROS	numtrailingzeros
diff --git a/crypto/ec/curve448/curve448utils.h b/crypto/ec/curve448/curve448utils.h
index 4af2c3f..9bf8379 100644
--- a/crypto/ec/curve448/curve448utils.h
+++ b/crypto/ec/curve448/curve448utils.h
@@ -23,7 +23,8 @@
  * with arch_arm32.
  */
 # ifndef C448_WORD_BITS
-#  if defined(__SIZEOF_INT128__) && (__SIZEOF_INT128__ == 16)
+#  if (defined(__SIZEOF_INT128__) && (__SIZEOF_INT128__ == 16)) \
+      && !defined(__sparc__)
 #   define C448_WORD_BITS 64      /* The number of bits in a word */
 #  else
 #   define C448_WORD_BITS 32      /* The number of bits in a word */
diff --git a/crypto/ec/ecp_nistp224.c b/crypto/ec/ecp_nistp224.c
index 9a9b8a4..9896727 100644
--- a/crypto/ec/ecp_nistp224.c
+++ b/crypto/ec/ecp_nistp224.c
@@ -40,12 +40,12 @@ NON_EMPTY_TRANSLATION_UNIT
 # include <openssl/err.h>
 # include "ec_lcl.h"
 
-# if defined(__GNUC__) && (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 1))
+# if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16
   /* even with gcc, the typedef won't work for 32-bit platforms */
 typedef __uint128_t uint128_t;  /* nonstandard; implemented by gcc on 64-bit
                                  * platforms */
 # else
-#  error "Need GCC 3.1 or later to define type uint128_t"
+#  error "Need GCC 4.0 or later to define type uint128_t"
 # endif
 
 typedef uint8_t u8;
diff --git a/crypto/ec/ecp_nistp256.c b/crypto/ec/ecp_nistp256.c
index d8f7e8a..6381efa 100644
--- a/crypto/ec/ecp_nistp256.c
+++ b/crypto/ec/ecp_nistp256.c
@@ -41,13 +41,13 @@ NON_EMPTY_TRANSLATION_UNIT
 # include <openssl/err.h>
 # include "ec_lcl.h"
 
-# if defined(__GNUC__) && (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 1))
+# if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16
   /* even with gcc, the typedef won't work for 32-bit platforms */
 typedef __uint128_t uint128_t;  /* nonstandard; implemented by gcc on 64-bit
                                  * platforms */
 typedef __int128_t int128_t;
 # else
-#  error "Need GCC 3.1 or later to define type uint128_t"
+#  error "Need GCC 4.0 or later to define type uint128_t"
 # endif
 
 typedef uint8_t u8;
diff --git a/crypto/ec/ecp_nistp521.c b/crypto/ec/ecp_nistp521.c
index dcb5415..3a0ec0c 100644
--- a/crypto/ec/ecp_nistp521.c
+++ b/crypto/ec/ecp_nistp521.c
@@ -40,12 +40,12 @@ NON_EMPTY_TRANSLATION_UNIT
 # include <openssl/err.h>
 # include "ec_lcl.h"
 
-# if defined(__GNUC__) && (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 1))
+# if defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16
   /* even with gcc, the typedef won't work for 32-bit platforms */
 typedef __uint128_t uint128_t;  /* nonstandard; implemented by gcc on 64-bit
                                  * platforms */
 # else
-#  error "Need GCC 3.1 or later to define type uint128_t"
+#  error "Need GCC 4.0 or later to define type uint128_t"
 # endif
 
 typedef uint8_t u8;
diff --git a/crypto/poly1305/poly1305.c b/crypto/poly1305/poly1305.c
index ab4fa83..7615e33 100644
--- a/crypto/poly1305/poly1305.c
+++ b/crypto/poly1305/poly1305.c
@@ -95,12 +95,11 @@ poly1305_blocks(void *ctx, const unsigned char *inp, size_t len, u32 padbit);
          (a ^ ((a ^ b) | ((a - b) ^ b))) >> (sizeof(a) * 8 - 1) \
          )
 
-# if !defined(PEDANTIC) && \
-     (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16) && \
+# if (defined(__SIZEOF_INT128__) && __SIZEOF_INT128__==16) && \
      (defined(__SIZEOF_LONG__) && __SIZEOF_LONG__==8)
 
 typedef unsigned long u64;
-typedef unsigned __int128 u128;
+typedef __uint128_t u128;
 
 typedef struct {
     u64 h[3];

From appro at openssl.org  Sat Feb 24 13:19:13 2018
From: appro at openssl.org (Andy Polyakov)
Date: Sat, 24 Feb 2018 13:19:13 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519478353.476370.9350.nullmailer@dev.openssl.org>

The branch master has been updated
       via  441bcafd865947474741a71fea49fc5d078b6532 (commit)
      from  6afed267db47a8aa604a3a9e78ac72efa02363df (commit)


- Log -----------------------------------------------------------------
commit 441bcafd865947474741a71fea49fc5d078b6532
Author: Andy Polyakov <appro at openssl.org>
Date:   Fri Feb 23 17:24:41 2018 +0100

    appveyor.yml: omit makedepend step.
    
    makedepend makes lesser sense in a throw-away build like CI, but
    it spares some computational time, because with MSVC it takes
    separate per-file compiler invocation.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5452)

-----------------------------------------------------------------------

Summary of changes:
 appveyor.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/appveyor.yml b/appveyor.yml
index b3165d5..5074a31 100644
--- a/appveyor.yml
+++ b/appveyor.yml
@@ -22,9 +22,9 @@ before_build:
         }
     - ps: >-
         If ($env:Configuration -Match "shared") {
-            $env:SHARED=""
+            $env:SHARED="no-makedepend"
         } Else {
-            $env:SHARED="no-shared"
+            $env:SHARED="no-shared no-makedepend"
         }
     - ps: $env:VSCOMNTOOLS=(Get-Content ("env:VS" + "$env:VSVER" + "0COMNTOOLS"))
     - call "%VSCOMNTOOLS%\..\..\VC\vcvarsall.bat" %VCVARS_PLATFORM%

From appro at openssl.org  Sat Feb 24 13:19:58 2018
From: appro at openssl.org (Andy Polyakov)
Date: Sat, 24 Feb 2018 13:19:58 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519478398.455946.10238.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  831dbc358eab0a50c1b435f93d7c16d99ad61472 (commit)
      from  89314d9a22ad0b0ce87e188c486532926aff01ea (commit)


- Log -----------------------------------------------------------------
commit 831dbc358eab0a50c1b435f93d7c16d99ad61472
Author: Andy Polyakov <appro at openssl.org>
Date:   Tue Feb 20 12:43:35 2018 +0100

    test/recipes/80-test_pkcs12.t: handle lack of Win32::API.
    
    So far check for availability of Win32::API served as implicit check
    for $^O being MSWin32. Reportedly it's not safe assumption, and check
    for MSWin32 has to be explicit.
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5416)
    
    (cherry picked from commit d4c499f562c1ab7ec7773c3987fc4dce7662a805)

-----------------------------------------------------------------------

Summary of changes:
 test/recipes/80-test_pkcs12.t | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/test/recipes/80-test_pkcs12.t b/test/recipes/80-test_pkcs12.t
index 5bcfb69..aa307d2 100644
--- a/test/recipes/80-test_pkcs12.t
+++ b/test/recipes/80-test_pkcs12.t
@@ -41,6 +41,8 @@ if (eval { require Win32::API; 1; }) {
         SetConsoleOutputCP(1253);
         $pass = Encode::encode("cp1253",Encode::decode("utf-8",$pass));
     }
+} elsif ($^O eq "MSWin32") {
+    plan skip_all => "Win32::API unavailable";
 } else {
     # Running MinGW tests transparently under Wine apparently requires
     # UTF-8 locale...

From no-reply at appveyor.com  Sat Feb 24 14:13:07 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sat, 24 Feb 2018 14:13:07 +0000
Subject: [openssl-commits] Build failed: openssl OpenSSL_1_1_0-stable.15883
Message-ID: <20180224141307.1.8967ADCB67AFAB7F@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180224/fdb569bc/attachment.html>

From builds at travis-ci.org  Sat Feb 24 14:15:46 2018
From: builds at travis-ci.org (Travis CI)
Date: Sat, 24 Feb 2018 14:15:46 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16585 (master - 441bcaf)
In-Reply-To: <openssl/openssl+345639117+errored@travis-ci.org>
Message-ID: <5a9174302e6bc_43f8faf4f1680173336d@13774a70-469a-44fe-8c9a-e654e8d66961.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16585
Status: Errored

Duration: 45 minutes and 8 seconds
Commit: 441bcaf (master)
Author: Andy Polyakov
Message: appveyor.yml: omit makedepend step.

makedepend makes lesser sense in a throw-away build like CI, but
it spares some computational time, because with MSVC it takes
separate per-file compiler invocation.

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5452)

View the changeset: https://github.com/openssl/openssl/compare/6afed267db47...441bcafd8659

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/345639117?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180224/2f217ec7/attachment.html>

From no-reply at appveyor.com  Sun Feb 25 14:14:01 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 25 Feb 2018 14:14:01 +0000
Subject: [openssl-commits] Build failed: openssl master.15884
Message-ID: <20180225141401.1.28E89FEEE2785506@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180225/72e256d2/attachment.html>

From no-reply at appveyor.com  Sun Feb 25 14:54:42 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 25 Feb 2018 14:54:42 +0000
Subject: [openssl-commits] Build completed: openssl master.15885
Message-ID: <20180225145442.1.B93EE77139C1EC59@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180225/a8aba3b2/attachment.html>

From no-reply at appveyor.com  Sun Feb 25 15:43:36 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 25 Feb 2018 15:43:36 +0000
Subject: [openssl-commits] Build failed: openssl master.15886
Message-ID: <20180225154336.1.79F3BD29327C69B3@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180225/85e8b84a/attachment-0001.html>

From no-reply at appveyor.com  Sun Feb 25 16:22:08 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 25 Feb 2018 16:22:08 +0000
Subject: [openssl-commits] Build completed: openssl master.15887
Message-ID: <20180225162208.1.C3656841452377B1@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180225/a7d16ab3/attachment.html>

From no-reply at appveyor.com  Sun Feb 25 19:47:27 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 25 Feb 2018 19:47:27 +0000
Subject: [openssl-commits] Build failed: openssl master.15891
Message-ID: <20180225194727.1.8801762B61DA2DBE@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180225/4fce633d/attachment.html>

From no-reply at appveyor.com  Sun Feb 25 22:31:49 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Sun, 25 Feb 2018 22:31:49 +0000
Subject: [openssl-commits] Build completed: openssl master.15892
Message-ID: <20180225223149.1.D54319F147033C92@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180225/63d23f32/attachment.html>

From levitte at openssl.org  Mon Feb 26 07:51:17 2018
From: levitte at openssl.org (Richard Levitte)
Date: Mon, 26 Feb 2018 07:51:17 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519631477.760299.18735.nullmailer@dev.openssl.org>

The branch master has been updated
       via  e454f3add638fda5c2aa32cd368c8929c0b1eb09 (commit)
      from  441bcafd865947474741a71fea49fc5d078b6532 (commit)


- Log -----------------------------------------------------------------
commit e454f3add638fda5c2aa32cd368c8929c0b1eb09
Author: Richard Levitte <levitte at openssl.org>
Date:   Fri Feb 23 12:10:42 2018 +0100

    Make it possible to give --libdir an absolute path
    
    With this, we introduce the make variable 'libdir', which differs from
    'LIBDIR' not only in casing, but also by being the absolute path to
    the library installation directory.  This variable is intentionally
    compatible with the GNU coding standards.
    
    When --libdir is given an absolute path, it is considered as a value
    according to GNU coding standards, and the variables LIBDIR and libdir
    will be this:
    
        LIBDIR=
        libdir=/absolute/path
    
    When --libdir is given a relative path (just the name of the desired
    library directory), or not given at all, it is considered as a
    "traditional" OpenSSL value, and the variables LIBDIR and libdir will
    be this:
    
        LIBDIR=relativepath
        libdir=$(INSTALLTOP)/$(LIBDIR)
    
    Fixes #5398
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5446)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/unix-Makefile.tmpl    | 143 ++++++++++++++++++++---------------
 Configurations/windows-makefile.tmpl |  14 ++--
 2 files changed, 88 insertions(+), 69 deletions(-)

diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index 365499e..78b1a5e 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -154,21 +154,26 @@ OPENSSLDIR={- #
                            : catdir($prefix, $config{openssldir}))
                       : catdir($prefix, "ssl");
               $openssldir -}
-LIBDIR={- #
-          # if $prefix/lib$target{multilib} is not an existing
-          # directory, then assume that it's not searched by linker
-          # automatically, in which case adding $target{multilib} suffix
-          # causes more grief than we're ready to tolerate, so don't...
-          our $multilib =
-              -d "$prefix/lib$target{multilib}" ? $target{multilib} : "";
-          our $libdir = $config{libdir} || "lib$multilib";
-          $libdir -}
-ENGINESDIR={- use File::Spec::Functions;
-              catdir($prefix,$libdir,"engines-$sover_dirname") -}
+LIBDIR={- our $libdir = $config{libdir};
+          unless ($libdir) {
+              #
+              # if $prefix/lib$target{multilib} is not an existing
+              # directory, then assume that it's not searched by linker
+              # automatically, in which case adding $target{multilib} suffix
+              # causes more grief than we're ready to tolerate, so don't...
+              our $multilib =
+                  -d "$prefix/lib$target{multilib}" ? $target{multilib} : "";
+              $libdir = "lib$multilib";
+          }
+          file_name_is_absolute($libdir) ? "" : $libdir -}
+# $(libdir) is chosen to be compatible with the GNU coding standards
+libdir={- file_name_is_absolute($libdir)
+          ? $libdir : '$(INSTALLTOP)/$(LIBDIR)' -}
+ENGINESDIR=$(libdir)/engines-{- $sover_dirname -}
 
 # Convenience variable for those who want to set the rpath in shared
 # libraries and applications
-LIBRPATH=$(INSTALLTOP)/$(LIBDIR)
+LIBRPATH=$(libdir)
 
 MANDIR=$(INSTALLTOP)/share/man
 DOCDIR=$(INSTALLTOP)/share/doc/$(BASENAME)
@@ -409,15 +414,15 @@ install_dev:
 		cp $$i $(DESTDIR)$(INSTALLTOP)/include/openssl/$$fn; \
 		chmod 644 $(DESTDIR)$(INSTALLTOP)/include/openssl/$$fn; \
 	done
-	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(libdir)
 	@set -e; for l in $(INSTALL_LIBS); do \
 		fn=`basename $$l`; \
-		$(ECHO) "install $$l -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn"; \
-		cp $$l $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn.new; \
-		$(RANLIB) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn.new; \
-		chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn.new; \
-		mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn.new \
-		      $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn; \
+		$(ECHO) "install $$l -> $(DESTDIR)$(libdir)/$$fn"; \
+		cp $$l $(DESTDIR)$(libdir)/$$fn.new; \
+		$(RANLIB) $(DESTDIR)$(libdir)/$$fn.new; \
+		chmod 644 $(DESTDIR)$(libdir)/$$fn.new; \
+		mv -f $(DESTDIR)$(libdir)/$$fn.new \
+		      $(DESTDIR)$(libdir)/$$fn; \
 	done
 	@ : {- output_off() if $disabled{shared}; "" -}
 	@set -e; for s in $(INSTALL_SHLIB_INFO); do \
@@ -426,34 +431,34 @@ install_dev:
 		fn1=`basename $$s1`; \
 		fn2=`basename $$s2`; \
 		: {- output_off() if windowsdll(); "" -}; \
-		$(ECHO) "install $$s1 -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1"; \
-		cp $$s1 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1.new; \
-		chmod 755 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1.new; \
-		mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1.new \
-		      $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1; \
+		$(ECHO) "install $$s1 -> $(DESTDIR)$(libdir)/$$fn1"; \
+		cp $$s1 $(DESTDIR)$(libdir)/$$fn1.new; \
+		chmod 755 $(DESTDIR)$(libdir)/$$fn1.new; \
+		mv -f $(DESTDIR)$(libdir)/$$fn1.new \
+		      $(DESTDIR)$(libdir)/$$fn1; \
 		if [ "$$fn1" != "$$fn2" ]; then \
-			$(ECHO) "link $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2 -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1"; \
-			ln -sf $$fn1 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2; \
+			$(ECHO) "link $(DESTDIR)$(libdir)/$$fn2 -> $(DESTDIR)$(libdir)/$$fn1"; \
+			ln -sf $$fn1 $(DESTDIR)$(libdir)/$$fn2; \
 		fi; \
 		: {- output_on() if windowsdll(); "" -}{- output_off() unless windowsdll(); "" -}; \
-		$(ECHO) "install $$s2 -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2"; \
-		cp $$s2 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2.new; \
-		chmod 755 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2.new; \
-		mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2.new \
-		      $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2; \
+		$(ECHO) "install $$s2 -> $(DESTDIR)$(libdir)/$$fn2"; \
+		cp $$s2 $(DESTDIR)$(libdir)/$$fn2.new; \
+		chmod 755 $(DESTDIR)$(libdir)/$$fn2.new; \
+		mv -f $(DESTDIR)$(libdir)/$$fn2.new \
+		      $(DESTDIR)$(libdir)/$$fn2; \
 		: {- output_on() unless windowsdll(); "" -}; \
 	done
 	@ : {- output_on() if $disabled{shared}; "" -}
-	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
-	@$(ECHO) "install libcrypto.pc -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libcrypto.pc"
-	@cp libcrypto.pc $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
-	@chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libcrypto.pc
-	@$(ECHO) "install libssl.pc -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libssl.pc"
-	@cp libssl.pc $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
-	@chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libssl.pc
-	@$(ECHO) "install openssl.pc -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/openssl.pc"
-	@cp openssl.pc $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
-	@chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/openssl.pc
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(libdir)/pkgconfig
+	@$(ECHO) "install libcrypto.pc -> $(DESTDIR)$(libdir)/pkgconfig/libcrypto.pc"
+	@cp libcrypto.pc $(DESTDIR)$(libdir)/pkgconfig
+	@chmod 644 $(DESTDIR)$(libdir)/pkgconfig/libcrypto.pc
+	@$(ECHO) "install libssl.pc -> $(DESTDIR)$(libdir)/pkgconfig/libssl.pc"
+	@cp libssl.pc $(DESTDIR)$(libdir)/pkgconfig
+	@chmod 644 $(DESTDIR)$(libdir)/pkgconfig/libssl.pc
+	@$(ECHO) "install openssl.pc -> $(DESTDIR)$(libdir)/pkgconfig/openssl.pc"
+	@cp openssl.pc $(DESTDIR)$(libdir)/pkgconfig
+	@chmod 644 $(DESTDIR)$(libdir)/pkgconfig/openssl.pc
 
 uninstall_dev:
 	@$(ECHO) "*** Uninstalling development files"
@@ -471,8 +476,8 @@ uninstall_dev:
 	-$(RMDIR) $(DESTDIR)$(INSTALLTOP)/include
 	@set -e; for l in $(INSTALL_LIBS); do \
 		fn=`basename $$l`; \
-		$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn"; \
-		$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn; \
+		$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn"; \
+		$(RM) $(DESTDIR)$(libdir)/$$fn; \
 	done
 	@ : {- output_off() if $disabled{shared}; "" -}
 	@set -e; for s in $(INSTALL_SHLIB_INFO); do \
@@ -481,23 +486,23 @@ uninstall_dev:
 		fn1=`basename $$s1`; \
 		fn2=`basename $$s2`; \
 		: {- output_off() if windowsdll(); "" -}; \
-		$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1"; \
-		$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn1; \
+		$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn1"; \
+		$(RM) $(DESTDIR)$(libdir)/$$fn1; \
 		if [ "$$fn1" != "$$fn2" ]; then \
-			$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2"; \
-			$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2; \
+			$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn2"; \
+			$(RM) $(DESTDIR)$(libdir)/$$fn2; \
 		fi; \
 		: {- output_on() if windowsdll(); "" -}{- output_off() unless windowsdll(); "" -}; \
-		$(ECHO) "$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2"; \
-		$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn2; \
+		$(ECHO) "$(RM) $(DESTDIR)$(libdir)/$$fn2"; \
+		$(RM) $(DESTDIR)$(libdir)/$$fn2; \
 		: {- output_on() unless windowsdll(); "" -}; \
 	done
 	@ : {- output_on() if $disabled{shared}; "" -}
-	$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libcrypto.pc
-	$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libssl.pc
-	$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/openssl.pc
-	-$(RMDIR) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
-	-$(RMDIR) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)
+	$(RM) $(DESTDIR)$(libdir)/pkgconfig/libcrypto.pc
+	$(RM) $(DESTDIR)$(libdir)/pkgconfig/libssl.pc
+	$(RM) $(DESTDIR)$(libdir)/pkgconfig/openssl.pc
+	-$(RMDIR) $(DESTDIR)$(libdir)/pkgconfig
+	-$(RMDIR) $(DESTDIR)$(libdir)
 
 install_engines:
 	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
@@ -530,7 +535,7 @@ install_runtime:
 	@[ -n "$(INSTALLTOP)" ] || (echo INSTALLTOP should not be empty; exit 1)
 	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(INSTALLTOP)/bin
 	@ : {- output_off() if windowsdll(); "" -}
-	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)
+	@$(PERL) $(SRCDIR)/util/mkdir-p.pl $(DESTDIR)$(libdir)
 	@ : {- output_on() if windowsdll(); "" -}
 	@$(ECHO) "*** Installing runtime files"
 	@set -e; for s in dummy $(INSTALL_SHLIBS); do \
@@ -543,11 +548,11 @@ install_runtime:
 		mv -f $(DESTDIR)$(INSTALLTOP)/bin/$$fn.new \
 		      $(DESTDIR)$(INSTALLTOP)/bin/$$fn; \
 		: {- output_on() unless windowsdll(); "" -}{- output_off() if windowsdll(); "" -}; \
-		$(ECHO) "install $$s -> $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn"; \
-		cp $$s $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn.new; \
-		chmod 755 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn.new; \
-		mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn.new \
-		      $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$fn; \
+		$(ECHO) "install $$s -> $(DESTDIR)$(libdir)/$$fn"; \
+		cp $$s $(DESTDIR)$(libdir)/$$fn.new; \
+		chmod 755 $(DESTDIR)$(libdir)/$$fn.new; \
+		mv -f $(DESTDIR)$(libdir)/$$fn.new \
+		      $(DESTDIR)$(libdir)/$$fn; \
 		: {- output_on() if windowsdll(); "" -}; \
 	done
 	@set -e; for x in dummy $(INSTALL_PROGRAMS); do \
@@ -750,7 +755,11 @@ libcrypto.pc libssl.pc openssl.pc: configdata.pm $(LIBS) {- join(" ",map { shlib
 libcrypto.pc:
 	@ ( echo 'prefix=$(INSTALLTOP)'; \
 	    echo 'exec_prefix=$${prefix}'; \
-	    echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    if [ -n "$(LIBDIR)" ]; then \
+	        echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    else \
+	        echo 'libdir=$(libdir)'; \
+	    fi; \
 	    echo 'includedir=$${prefix}/include'; \
 	    echo 'enginesdir=$${libdir}/engines-{- $sover_dirname -}'; \
 	    echo ''; \
@@ -764,7 +773,11 @@ libcrypto.pc:
 libssl.pc:
 	@ ( echo 'prefix=$(INSTALLTOP)'; \
 	    echo 'exec_prefix=$${prefix}'; \
-	    echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    if [ -n "$(LIBDIR)" ]; then \
+	        echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    else \
+	        echo 'libdir=$(libdir)'; \
+	    fi; \
 	    echo 'includedir=$${prefix}/include'; \
 	    echo ''; \
 	    echo 'Name: OpenSSL-libssl'; \
@@ -777,7 +790,11 @@ libssl.pc:
 openssl.pc:
 	@ ( echo 'prefix=$(INSTALLTOP)'; \
 	    echo 'exec_prefix=$${prefix}'; \
-	    echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    if [ -n "$(LIBDIR)" ]; then \
+	        echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
+	    else \
+	        echo 'libdir=$(libdir)'; \
+	    fi; \
 	    echo 'includedir=$${prefix}/include'; \
 	    echo ''; \
 	    echo 'Name: OpenSSL'; \
diff --git a/Configurations/windows-makefile.tmpl b/Configurations/windows-makefile.tmpl
index 7193972..2f6426d 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -142,7 +142,7 @@ OPENSSLDIR_dev={- #
                   $openssldir_dev -}
 OPENSSLDIR_dir={- canonpath($openssldir_dir) -}
 LIBDIR={- our $libdir = $config{libdir} || "lib";
-          $libdir -}
+          file_name_is_absolute($libdir) ? "" : $libdir -}
 ENGINESDIR_dev={- use File::Spec::Functions qw(:DEFAULT splitpath);
                   our $enginesdir = catdir($prefix,$libdir,"engines-$sover_dirname");
                   our ($enginesdir_dev, $enginesdir_dir, $enginesdir_file) =
@@ -159,6 +159,10 @@ OPENSSLDIR=$(OPENSSLDIR_dev)$(OPENSSLDIR_dir)
 ENGINESDIR=$(ENGINESDIR_dev)$(ENGINESDIR_dir)
 !ENDIF
 
+# $(libdir) is chosen to be compatible with the GNU coding standards
+libdir={- file_name_is_absolute($libdir)
+          ? $libdir : '$(INSTALLTOP)\$(LIBDIR)' -}
+
 CC={- $config{cc} -}
 CPP={- $config{cpp} -}
 CPPFLAGS={- our $cppflags = join(" ",
@@ -324,12 +328,10 @@ install_dev:
 				       "$(INSTALLTOP)\include\openssl"
 	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(BLDDIR)\include\openssl\*.h \
 				       "$(INSTALLTOP)\include\openssl"
-	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(INSTALLTOP)\$(LIBDIR)"
-	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_LIBS) \
-				       "$(INSTALLTOP)\$(LIBDIR)"
+	@"$(PERL)" "$(SRCDIR)\util\mkdir-p.pl" "$(libdir)"
+	@"$(PERL)" "$(SRCDIR)\util\copy.pl" $(INSTALL_LIBS) "$(libdir)"
 	@if "$(SHLIBS)"=="" \
-	 "$(PERL)" "$(SRCDIR)\util\copy.pl" ossl_static.pdb \
-                                       "$(INSTALLTOP)\$(LIBDIR)"
+	 "$(PERL)" "$(SRCDIR)\util\copy.pl" ossl_static.pdb "$(libdir)"
 
 uninstall_dev:
 

From builds at travis-ci.org  Mon Feb 26 08:32:40 2018
From: builds at travis-ci.org (Travis CI)
Date: Mon, 26 Feb 2018 08:32:40 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16602 (master - e454f3a)
In-Reply-To: <openssl/openssl+346172473+passed@travis-ci.org>
Message-ID: <5a93c62827561_43fa61e884d30934676@051945ba-be0d-4002-a47d-8c063e0e6399.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16602
Status: Passed

Duration: 39 minutes and 14 seconds
Commit: e454f3a (master)
Author: Richard Levitte
Message: Make it possible to give --libdir an absolute path

With this, we introduce the make variable 'libdir', which differs from
'LIBDIR' not only in casing, but also by being the absolute path to
the library installation directory.  This variable is intentionally
compatible with the GNU coding standards.

When --libdir is given an absolute path, it is considered as a value
according to GNU coding standards, and the variables LIBDIR and libdir
will be this:

    LIBDIR=
    libdir=/absolute/path

When --libdir is given a relative path (just the name of the desired
library directory), or not given at all, it is considered as a
"traditional" OpenSSL value, and the variables LIBDIR and libdir will
be this:

    LIBDIR=relativepath
    libdir=$(INSTALLTOP)/$(LIBDIR)

Fixes #5398

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5446)

View the changeset: https://github.com/openssl/openssl/compare/441bcafd8659...e454f3add638

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346172473?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/30872d74/attachment-0001.html>

From openssl at openssl.org  Mon Feb 26 11:12:47 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Mon, 26 Feb 2018 11:12:47 +0000
Subject: [openssl-commits] FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-ocsp
Message-ID: <1519643567.224494.18423.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ocsp

Commit log since last time:

441bcaf appveyor.yml: omit makedepend step.
6afed26 ec/ecp_nistp{224,256,521}.c: harmonize usage of __uint128_t.
11a9eac {ec/curve25519,poly1305/poly1305}.c: relax pedantic constraint.
ae1ffe0 ec/curve448: portability fixups.
e8c42b9 ec/asm/x25519-x86_64.pl: fix up ADCX/ADOX fallback.
77376c0 Remove OSSLzu, and fix the one place that used it.
604e591 Fix some bugs with the cfb1 bitsize handling
e42809f Remove executable bit from test/recipes/03-test_internal_sm4.t
0764e41 Add a note in CHANGES
a75831f Test the storeutl searching options
6ab6dec STORE: Add documentation on search criteria
511e4e0 Adapt storeutl to allow search for specific objects
93d2f9f STORE 'file' scheme loader: Add search capibility
fac8673 STORE: Add the possibility to search for specific information
7622baf Test the storeutl expectation options
ce9586b STORE: Add documentation on expecting specific infos
9511d97 Adapt storeutl to allow looking for a specific info type
6541d9e STORE 'file' scheme loader: Add info type expectation
072bfcc STORE: Add the possibility to specify an expected info type
4eefdbd STORE: In preparation for coming work, mark when loading is started
d592734 Remove unreachable statement.

Build log ended with (last 100 lines):

ar: creating apps/libapps.a
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aes-x86_64.d.tmp -MT crypto/aes/aes-x86_64.o -c -o crypto/aes/aes-x86_64.o crypto/aes/aes-x86_64.s
ranlib apps/libapps.a || echo Never mind.
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-mb-x86_64.d.tmp -MT crypto/aes/aesni-mb-x86_64.o -c -o crypto/aes/aesni-mb-x86_64.o crypto/aes/aesni-mb-x86_64.s
chmod a+x tools/c_rehash
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-sha1-x86_64.d.tmp -MT crypto/aes/aesni-sha1-x86_64.o -c -o crypto/aes/aesni-sha1-x86_64.o crypto/aes/aesni-sha1-x86_64.s
chmod a+x util/shlib_wrap.sh
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-sha256-x86_64.d.tmp -MT crypto/aes/aesni-sha256-x86_64.o -c -o crypto/aes/aesni-sha256-x86_64.o crypto/aes/aesni-sha256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-x86_64.d.tmp -MT crypto/aes/aesni-x86_64.o -c -o crypto/aes/aesni-x86_64.o crypto/aes/aesni-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/bsaes-x86_64.d.tmp -MT crypto/aes/bsaes-x86_64.o -c -o crypto/aes/bsaes-x86_64.o crypto/aes/bsaes-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/vpaes-x86_64.d.tmp -MT crypto/aes/vpaes-x86_64.o -c -o crypto/aes/vpaes-x86_64.o crypto/aes/vpaes-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/rsaz-avx2.d.tmp -MT crypto/bn/rsaz-avx2.o -c -o crypto/bn/rsaz-avx2.o crypto/bn/rsaz-avx2.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/rsaz-x86_64.d.tmp -MT crypto/bn/rsaz-x86_64.o -c -o crypto/bn/rsaz-x86_64.o crypto/bn/rsaz-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-gf2m.d.tmp -MT crypto/bn/x86_64-gf2m.o -c -o crypto/bn/x86_64-gf2m.o crypto/bn/x86_64-gf2m.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-mont.d.tmp -MT crypto/bn/x86_64-mont.o -c -o crypto/bn/x86_64-mont.o crypto/bn/x86_64-mont.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-mont5.d.tmp -MT crypto/bn/x86_64-mont5.o -c -o crypto/bn/x86_64-mont5.o crypto/bn/x86_64-mont5.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/camellia/cmll-x86_64.d.tmp -MT crypto/camellia/cmll-x86_64.o -c -o crypto/camellia/cmll-x86_64.o crypto/camellia/cmll-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/chacha/chacha-x86_64.d.tmp -MT crypto/chacha/chacha-x86_64.o -c -o crypto/chacha/chacha-x86_64.o crypto/chacha/chacha-x86_64.s
clang  -I. -Icrypto/include -Iinclude -Icrypto -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/cversion.d.tmp -MT crypto/cversion.o -c -o crypto/cversion.o ../openssl/crypto/cversion.c
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/ec/ecp_nistz256-x86_64.d.tmp -MT crypto/ec/ecp_nistz256-x86_64.o -c -o crypto/ec/ecp_nistz256-x86_64.o crypto/ec/ecp_nistz256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/ec/x25519-x86_64.d.tmp -MT crypto/ec/x25519-x86_64.o -c -o crypto/ec/x25519-x86_64.o crypto/ec/x25519-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/md5/md5-x86_64.d.tmp -MT crypto/md5/md5-x86_64.o -c -o crypto/md5/md5-x86_64.o crypto/md5/md5-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/modes/aesni-gcm-x86_64.d.tmp -MT crypto/modes/aesni-gcm-x86_64.o -c -o crypto/modes/aesni-gcm-x86_64.o crypto/modes/aesni-gcm-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/modes/ghash-x86_64.d.tmp -MT crypto/modes/ghash-x86_64.o -c -o crypto/modes/ghash-x86_64.o crypto/modes/ghash-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/poly1305/poly1305-x86_64.d.tmp -MT crypto/poly1305/poly1305-x86_64.o -c -o crypto/poly1305/poly1305-x86_64.o crypto/poly1305/poly1305-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/rc4/rc4-md5-x86_64.d.tmp -MT crypto/rc4/rc4-md5-x86_64.o -c -o crypto/rc4/rc4-md5-x86_64.o crypto/rc4/rc4-md5-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/rc4/rc4-x86_64.d.tmp -MT crypto/rc4/rc4-x86_64.o -c -o crypto/rc4/rc4-x86_64.o crypto/rc4/rc4-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha1-mb-x86_64.d.tmp -MT crypto/sha/sha1-mb-x86_64.o -c -o crypto/sha/sha1-mb-x86_64.o crypto/sha/sha1-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha1-x86_64.d.tmp -MT crypto/sha/sha1-x86_64.o -c -o crypto/sha/sha1-x86_64.o crypto/sha/sha1-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha256-mb-x86_64.d.tmp -MT crypto/sha/sha256-mb-x86_64.o -c -o crypto/sha/sha256-mb-x86_64.o crypto/sha/sha256-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha256-x86_64.d.tmp -MT crypto/sha/sha256-x86_64.o -c -o crypto/sha/sha256-x86_64.o crypto/sha/sha256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha512-x86_64.d.tmp -MT crypto/sha/sha512-x86_64.o -c -o crypto/sha/sha512-x86_64.o crypto/sha/sha512-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/whrlpool/wp-x86_64.d.tmp -MT crypto/whrlpool/wp-x86_64.o -c -o crypto/whrlpool/wp-x86_64.o crypto/whrlpool/wp-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/x86_64cpuid.d.tmp -MT crypto/x86_64cpuid.o -c -o crypto/x86_64cpuid.o crypto/x86_64cpuid.s
ar r libssl.a ssl/bio_ssl.o ssl/d1_lib.o ssl/d1_msg.o ssl/d1_srtp.o ssl/methods.o ssl/packet.o ssl/pqueue.o ssl/record/dtls1_bitmap.o ssl/record/rec_layer_d1.o ssl/record/rec_layer_s3.o ssl/record/ssl3_buffer.o ssl/record/ssl3_record.o ssl/record/ssl3_record_tls13.o ssl/s3_cbc.o ssl/s3_enc.o ssl/s3_lib.o ssl/s3_msg.o ssl/ssl_asn1.o ssl/ssl_cert.o ssl/ssl_ciph.o ssl/ssl_conf.o ssl/ssl_err.o ssl/ssl_init.o ssl/ssl_lib.o ssl/ssl_mcnf.o ssl/ssl_rsa.o ssl/ssl_sess.o ssl/ssl_stat.o ssl/ssl_txt.o ssl/ssl_utst.o ssl/statem/extensions.o ssl/statem/extensions_clnt.o ssl/statem/extensions_cust.o ssl/statem/extensions_srvr.o ssl/statem/statem.o ssl/statem/statem_clnt.o ssl/statem/statem_dtls.o ssl/statem/statem_lib.o ssl/statem/statem_srvr.o ssl/t1_enc.o ssl/t1_lib.o ssl/t1_trce.o ssl/tls13_enc.o ssl/tls_srp.o
ar: creating libssl.a
ranlib libssl.a || echo Never mind.
ar r test/libtestutil.a test/testutil/basic_output.o test/testutil/cb.o test/testutil/driver.o test/testutil/format_output.o test/testutil/init.o test/testutil/main.o test/testutil/output_helpers.o test/testutil/stanza.o test/testutil/tap_bio.o test/testutil/test_cleanup.o test/testutil/tests.o
ar: creating test/libtestutil.a
ranlib test/libtestutil.a || echo Never mind.
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF engines/e_padlock-x86_64.d.tmp -MT engines/e_padlock-x86_64.o -c -o engines/e_padlock-x86_64.o engines/e_padlock-x86_64.s
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/asn1pars.d.tmp -MT apps/asn1pars.o -c -o apps/asn1pars.o ../openssl/apps/asn1pars.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ca.d.tmp -MT apps/ca.o -c -o apps/ca.o ../openssl/apps/ca.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ciphers.d.tmp -MT apps/ciphers.o -c -o apps/ciphers.o ../openssl/apps/ciphers.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/cms.d.tmp -MT apps/cms.o -c -o apps/cms.o ../openssl/apps/cms.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/crl.d.tmp -MT apps/crl.o -c -o apps/crl.o ../openssl/apps/crl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/crl2p7.d.tmp -MT apps/crl2p7.o -c -o apps/crl2p7.o ../openssl/apps/crl2p7.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dgst.d.tmp -MT apps/dgst.o -c -o apps/dgst.o ../openssl/apps/dgst.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dhparam.d.tmp -MT apps/dhparam.o -c -o apps/dhparam.o ../openssl/apps/dhparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dsa.d.tmp -MT apps/dsa.o -c -o apps/dsa.o ../openssl/apps/dsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dsaparam.d.tmp -MT apps/dsaparam.o -c -o apps/dsaparam.o ../openssl/apps/dsaparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ec.d.tmp -MT apps/ec.o -c -o apps/ec.o ../openssl/apps/ec.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ecparam.d.tmp -MT apps/ecparam.o -c -o apps/ecparam.o ../openssl/apps/ecparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/enc.d.tmp -MT apps/enc.o -c -o apps/enc.o ../openssl/apps/enc.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/engine.d.tmp -MT apps/engine.o -c -o apps/engine.o ../openssl/apps/engine.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/errstr.d.tmp -MT apps/errstr.o -c -o apps/errstr.o ../openssl/apps/errstr.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/gendsa.d.tmp -MT apps/gendsa.o -c -o apps/gendsa.o ../openssl/apps/gendsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/genpkey.d.tmp -MT apps/genpkey.o -c -o apps/genpkey.o ../openssl/apps/genpkey.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/genrsa.d.tmp -MT apps/genrsa.o -c -o apps/genrsa.o ../openssl/apps/genrsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/nseq.d.tmp -MT apps/nseq.o -c -o apps/nseq.o ../openssl/apps/nseq.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ocsp.d.tmp -MT apps/ocsp.o -c -o apps/ocsp.o ../openssl/apps/ocsp.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/openssl.d.tmp -MT apps/openssl.o -c -o apps/openssl.o ../openssl/apps/openssl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/passwd.d.tmp -MT apps/passwd.o -c -o apps/passwd.o ../openssl/apps/passwd.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs12.d.tmp -MT apps/pkcs12.o -c -o apps/pkcs12.o ../openssl/apps/pkcs12.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs7.d.tmp -MT apps/pkcs7.o -c -o apps/pkcs7.o ../openssl/apps/pkcs7.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs8.d.tmp -MT apps/pkcs8.o -c -o apps/pkcs8.o ../openssl/apps/pkcs8.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkey.d.tmp -MT apps/pkey.o -c -o apps/pkey.o ../openssl/apps/pkey.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkeyparam.d.tmp -MT apps/pkeyparam.o -c -o apps/pkeyparam.o ../openssl/apps/pkeyparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkeyutl.d.tmp -MT apps/pkeyutl.o -c -o apps/pkeyutl.o ../openssl/apps/pkeyutl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/prime.d.tmp -MT apps/prime.o -c -o apps/prime.o ../openssl/apps/prime.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rand.d.tmp -MT apps/rand.o -c -o apps/rand.o ../openssl/apps/rand.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rehash.d.tmp -MT apps/rehash.o -c -o apps/rehash.o ../openssl/apps/rehash.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/req.d.tmp -MT apps/req.o -c -o apps/req.o ../openssl/apps/req.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rsa.d.tmp -MT apps/rsa.o -c -o apps/rsa.o ../openssl/apps/rsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rsautl.d.tmp -MT apps/rsautl.o -c -o apps/rsautl.o ../openssl/apps/rsautl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_client.d.tmp -MT apps/s_client.o -c -o apps/s_client.o ../openssl/apps/s_client.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_server.d.tmp -MT apps/s_server.o -c -o apps/s_server.o ../openssl/apps/s_server.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_time.d.tmp -MT apps/s_time.o -c -o apps/s_time.o ../openssl/apps/s_time.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/sess_id.d.tmp -MT apps/sess_id.o -c -o apps/sess_id.o ../openssl/apps/sess_id.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/smime.d.tmp -MT apps/smime.o -c -o apps/smime.o ../openssl/apps/smime.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/speed.d.tmp -MT apps/speed.o -c -o apps/speed.o ../openssl/apps/speed.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/spkac.d.tmp -MT apps/spkac.o -c -o apps/spkac.o ../openssl/apps/spkac.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/srp.d.tmp -MT apps/srp.o -c -o apps/srp.o ../openssl/apps/srp.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/storeutl.d.tmp -MT apps/storeutl.o -c -o apps/storeutl.o ../openssl/apps/storeutl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ts.d.tmp -MT apps/ts.o -c -o apps/ts.o ../openssl/apps/ts.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/verify.d.tmp -MT apps/verify.o -c -o apps/verify.o ../openssl/apps/verify.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/version.d.tmp -MT apps/version.o -c -o apps/version.o ../openssl/apps/version.c
../openssl/apps/storeutl.c:184:27: error: implicit declaration of function 's2i_ASN1_INTEGER' is invalid in C99 [-Werror,-Wimplicit-function-declaration]
            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
                          ^
../openssl/apps/storeutl.c:184:25: error: incompatible integer to pointer conversion assigning to 'ASN1_INTEGER *' (aka 'struct asn1_string_st *') from 'int' [-Werror,-Wint-conversion]
            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
                        ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2 errors generated.
Makefile:6825: recipe for target 'apps/storeutl.o' failed
make[1]: *** [apps/storeutl.o] Error 1
make[1]: *** Waiting for unfinished jobs....
make[1]: Leaving directory '/home/openssl/run-checker/no-ocsp'
Makefile:144: recipe for target 'all' failed
make: *** [all] Error 2

From matt at openssl.org  Mon Feb 26 13:42:26 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 26 Feb 2018 13:42:26 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519652546.617343.15829.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b38ede8043439d99a3c6c174f17b91875cce66ac (commit)
      from  e454f3add638fda5c2aa32cd368c8929c0b1eb09 (commit)


- Log -----------------------------------------------------------------
commit b38ede8043439d99a3c6c174f17b91875cce66ac
Author: Tatsuhiro Tsujikawa <tatsuhiro.t at gmail.com>
Date:   Sun Feb 4 12:20:37 2018 +0900

    Export keying material using early exporter master secret
    
    This commit adds SSL_export_keying_material_early() which exports
    keying material using early exporter master secret.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5252)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/SSL_export_keying_material.pod | 31 +++++++++++--
 include/openssl/tls1.h                  | 13 ++++++
 ssl/ssl_lib.c                           | 12 +++++
 ssl/ssl_locl.h                          |  6 +++
 ssl/statem/statem.c                     | 15 ++++++
 ssl/statem/statem.h                     |  1 +
 ssl/tls13_enc.c                         | 70 ++++++++++++++++++++++++++++
 test/sslapitest.c                       | 82 +++++++++++++++++++++++++++++++++
 test/tls13secretstest.c                 |  5 ++
 util/libssl.num                         |  1 +
 10 files changed, 232 insertions(+), 4 deletions(-)

diff --git a/doc/man3/SSL_export_keying_material.pod b/doc/man3/SSL_export_keying_material.pod
index 532b144..586ad66 100644
--- a/doc/man3/SSL_export_keying_material.pod
+++ b/doc/man3/SSL_export_keying_material.pod
@@ -2,7 +2,9 @@
 
 =head1 NAME
 
-SSL_export_keying_material - obtain keying material for application use
+SSL_export_keying_material,
+SSL_export_keying_material_early
+- obtain keying material for application use
 
 =head1 SYNOPSIS
 
@@ -13,14 +15,29 @@ SSL_export_keying_material - obtain keying material for application use
                                 const unsigned char *context,
                                 size_t contextlen, int use_context);
 
+ int SSL_export_keying_material_early(SSL *s, unsigned char *out, size_t olen,
+                                      const char *label, size_t llen,
+                                      const unsigned char *context,
+                                      size_t contextlen);
+
 =head1 DESCRIPTION
 
 During the creation of a TLS or DTLS connection shared keying material is
-established between the two endpoints. The function SSL_export_keying_material()
-enables an application to use some of this keying material for its own purposes
-in accordance with RFC5705 (for TLSv1.2 and below) or RFCXXXX (for TLSv1.3).
+established between the two endpoints. The functions
+SSL_export_keying_material() and SSL_export_keying_material_early() enable an
+application to use some of this keying material for its own purposes in
+accordance with RFC5705 (for TLSv1.2 and below) or RFCXXXX (for TLSv1.3).
 TODO(TLS1.3): Update the RFC number when the RFC is published.
 
+SSL_export_keying_material() derives keying material using
+the F<exporter_master_secret> established in the handshake.
+
+SSL_export_keying_material_early() is only usable with TLSv1.3, and derives
+keying material using the F<early_exporter_master_secret> (as defined in the
+TLS 1.3 RFC). For the client, the F<early_exporter_master_secret> is only
+available when the client attempts to send 0-RTT data. For the server, it is
+only available when the server accepts 0-RTT data.
+
 An application may need to securely establish the context within which this
 keying material will be used. For example this may include identifiers for the
 application session, application algorithms or parameters, or the lifetime of
@@ -52,6 +69,12 @@ above. Attempting to use it in SSLv3 will result in an error.
 
 SSL_export_keying_material() returns 0 or -1 on failure or 1 on success.
 
+SSL_export_keying_material_early() returns 0 on failure or 1 on success.
+
+=head1 HISTORY
+
+SSL_export_keying_material_early() was first added in OpenSSL 1.1.1.
+
 =head1 COPYRIGHT
 
 Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
diff --git a/include/openssl/tls1.h b/include/openssl/tls1.h
index ed0380f..f167856 100644
--- a/include/openssl/tls1.h
+++ b/include/openssl/tls1.h
@@ -232,6 +232,19 @@ __owur int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen,
                                       const unsigned char *context,
                                       size_t contextlen, int use_context);
 
+/*
+ * SSL_export_keying_material_early exports a value derived from the
+ * early exporter master secret, as specified in
+ * https://tools.ietf.org/html/draft-ietf-tls-tls13-23. It writes
+ * |olen| bytes to |out| given a label and optional context. It
+ * returns 1 on success and 0 otherwise.
+ */
+__owur int SSL_export_keying_material_early(SSL *s, unsigned char *out,
+                                            size_t olen, const char *label,
+                                            size_t llen,
+                                            const unsigned char *context,
+                                            size_t contextlen);
+
 int SSL_get_peer_signature_type_nid(const SSL *s, int *pnid);
 
 int SSL_get_sigalgs(SSL *s, int idx,
diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 00e02f4..59b507e 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -2810,6 +2810,18 @@ int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen,
                                                        contextlen, use_context);
 }
 
+int SSL_export_keying_material_early(SSL *s, unsigned char *out, size_t olen,
+                                     const char *label, size_t llen,
+                                     const unsigned char *context,
+                                     size_t contextlen)
+{
+    if (s->version != TLS1_3_VERSION)
+        return 0;
+
+    return tls13_export_keying_material_early(s, out, olen, label, llen,
+                                              context, contextlen);
+}
+
 static unsigned long ssl_session_hash(const SSL_SESSION *a)
 {
     const unsigned char *session_id = a->session_id;
diff --git a/ssl/ssl_locl.h b/ssl/ssl_locl.h
index b590b53..0dd2a7b 100644
--- a/ssl/ssl_locl.h
+++ b/ssl/ssl_locl.h
@@ -1111,6 +1111,7 @@ struct ssl_st {
     unsigned char client_app_traffic_secret[EVP_MAX_MD_SIZE];
     unsigned char server_app_traffic_secret[EVP_MAX_MD_SIZE];
     unsigned char exporter_master_secret[EVP_MAX_MD_SIZE];
+    unsigned char early_exporter_master_secret[EVP_MAX_MD_SIZE];
     EVP_CIPHER_CTX *enc_read_ctx; /* cryptographic state */
     unsigned char read_iv[EVP_MAX_IV_LENGTH]; /* TLSv1.3 static read IV */
     EVP_MD_CTX *read_hash;      /* used for mac generation */
@@ -2406,6 +2407,11 @@ __owur int tls13_export_keying_material(SSL *s, unsigned char *out, size_t olen,
                                         const char *label, size_t llen,
                                         const unsigned char *context,
                                         size_t contextlen, int use_context);
+__owur int tls13_export_keying_material_early(SSL *s, unsigned char *out,
+                                              size_t olen, const char *label,
+                                              size_t llen,
+                                              const unsigned char *context,
+                                              size_t contextlen);
 __owur int tls1_alert_code(int code);
 __owur int tls13_alert_code(int code);
 __owur int ssl3_alert_code(int code);
diff --git a/ssl/statem/statem.c b/ssl/statem/statem.c
index 818e648..a574853 100644
--- a/ssl/statem/statem.c
+++ b/ssl/statem/statem.c
@@ -951,3 +951,18 @@ int ossl_statem_export_allowed(SSL *s)
     return s->s3->previous_server_finished_len != 0
            && s->statem.hand_state != TLS_ST_SW_FINISHED;
 }
+
+/*
+ * Return 1 if early TLS exporter is ready to export keying material,
+ * or 0 if otherwise.
+ */
+int ossl_statem_export_early_allowed(SSL *s)
+{
+    /*
+     * The early exporter secret is only present on the server if we
+     * have accepted early_data. It is present on the client as long
+     * as we have sent early_data.
+     */
+    return s->ext.early_data == SSL_EARLY_DATA_ACCEPTED
+           || (!s->server && s->ext.early_data != SSL_EARLY_DATA_NOT_SENT);
+}
diff --git a/ssl/statem/statem.h b/ssl/statem/statem.h
index 58cc4f4..1935718 100644
--- a/ssl/statem/statem.h
+++ b/ssl/statem/statem.h
@@ -133,6 +133,7 @@ void ossl_statem_check_finish_init(SSL *s, int send);
 void ossl_statem_set_hello_verify_done(SSL *s);
 __owur int ossl_statem_app_data_allowed(SSL *s);
 __owur int ossl_statem_export_allowed(SSL *s);
+__owur int ossl_statem_export_early_allowed(SSL *s);
 
 /* Flush the write BIO */
 int statem_flush(SSL *s);
diff --git a/ssl/tls13_enc.c b/ssl/tls13_enc.c
index 9311866..6332804 100644
--- a/ssl/tls13_enc.c
+++ b/ssl/tls13_enc.c
@@ -365,6 +365,7 @@ int tls13_change_cipher_state(SSL *s, int which)
     static const unsigned char server_application_traffic[] = "s ap traffic";
     static const unsigned char exporter_master_secret[] = "exp master";
     static const unsigned char resumption_master_secret[] = "res master";
+    static const unsigned char early_exporter_master_secret[] = "e exp master";
     unsigned char *iv;
     unsigned char secret[EVP_MAX_MD_SIZE];
     unsigned char hashval[EVP_MAX_MD_SIZE];
@@ -481,6 +482,16 @@ int tls13_change_cipher_state(SSL *s, int which)
             }
             hashlen = hashlenui;
             EVP_MD_CTX_free(mdctx);
+
+            if (!tls13_hkdf_expand(s, md, insecret,
+                                   early_exporter_master_secret,
+                                   sizeof(early_exporter_master_secret) - 1,
+                                   hashval, hashlen,
+                                   s->early_exporter_master_secret, hashlen)) {
+                SSLfatal(s, SSL_AD_INTERNAL_ERROR,
+                         SSL_F_TLS13_CHANGE_CIPHER_STATE, ERR_R_INTERNAL_ERROR);
+                goto err;
+            }
         } else if (which & SSL3_CC_HANDSHAKE) {
             insecret = s->handshake_secret;
             finsecret = s->client_finished_secret;
@@ -690,3 +701,62 @@ int tls13_export_keying_material(SSL *s, unsigned char *out, size_t olen,
     EVP_MD_CTX_free(ctx);
     return ret;
 }
+
+int tls13_export_keying_material_early(SSL *s, unsigned char *out, size_t olen,
+                                       const char *label, size_t llen,
+                                       const unsigned char *context,
+                                       size_t contextlen)
+{
+    static const unsigned char exporterlabel[] = "exporter";
+    unsigned char exportsecret[EVP_MAX_MD_SIZE];
+    unsigned char hash[EVP_MAX_MD_SIZE], data[EVP_MAX_MD_SIZE];
+    const EVP_MD *md;
+    EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+    unsigned int hashsize, datalen;
+    int ret = 0;
+    const SSL_CIPHER *sslcipher;
+
+    if (ctx == NULL || !ossl_statem_export_early_allowed(s))
+        goto err;
+
+    if (!s->server && s->max_early_data > 0
+            && s->session->ext.max_early_data == 0)
+        sslcipher = SSL_SESSION_get0_cipher(s->psksession);
+    else
+        sslcipher = SSL_SESSION_get0_cipher(s->session);
+
+    md = ssl_md(sslcipher->algorithm2);
+
+    /*
+     * Calculate the hash value and store it in |data|. The reason why
+     * the empty string is used is that the definition of TLS-Exporter
+     * is like so:
+     *
+     * TLS-Exporter(label, context_value, key_length) =
+     *     HKDF-Expand-Label(Derive-Secret(Secret, label, ""),
+     *                       "exporter", Hash(context_value), key_length)
+     *
+     * Derive-Secret(Secret, Label, Messages) =
+     *       HKDF-Expand-Label(Secret, Label,
+     *                         Transcript-Hash(Messages), Hash.length)
+     *
+     * Here Transcript-Hash is the cipher suite hash algorithm.
+     */
+    if (EVP_DigestInit_ex(ctx, md, NULL) <= 0
+            || EVP_DigestUpdate(ctx, context, contextlen) <= 0
+            || EVP_DigestFinal_ex(ctx, hash, &hashsize) <= 0
+            || EVP_DigestInit_ex(ctx, md, NULL) <= 0
+            || EVP_DigestFinal_ex(ctx, data, &datalen) <= 0
+            || !tls13_hkdf_expand(s, md, s->early_exporter_master_secret,
+                                  (const unsigned char *)label, llen,
+                                  data, datalen, exportsecret, hashsize)
+            || !tls13_hkdf_expand(s, md, exportsecret, exporterlabel,
+                                  sizeof(exporterlabel) - 1, hash, hashsize,
+                                  out, olen))
+        goto err;
+
+    ret = 1;
+ err:
+    EVP_MD_CTX_free(ctx);
+    return ret;
+}
diff --git a/test/sslapitest.c b/test/sslapitest.c
index 0b6af66..1cf5c4f 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -3157,6 +3157,85 @@ static int test_export_key_mat(int tst)
     return testresult;
 }
 
+#ifndef OPENSSL_NO_TLS1_3
+/*
+ * Test that SSL_export_keying_material_early() produces expected
+ * results. There are no test vectors so all we do is test that both
+ * sides of the communication produce the same results for different
+ * protocol versions.
+ */
+static int test_export_key_mat_early(int idx)
+{
+    static const char label[] = "test label";
+    static const unsigned char context[] = "context";
+    int testresult = 0;
+    SSL_CTX *cctx = NULL, *sctx = NULL;
+    SSL *clientssl = NULL, *serverssl = NULL;
+    SSL_SESSION *sess = NULL;
+    const unsigned char *emptycontext = NULL;
+    unsigned char ckeymat1[80], ckeymat2[80];
+    unsigned char skeymat1[80], skeymat2[80];
+    unsigned char buf[1];
+    size_t readbytes, written;
+
+    if (!TEST_true(setupearly_data_test(&cctx, &sctx, &clientssl, &serverssl,
+                                        &sess, idx)))
+        goto end;
+
+    /* Here writing 0 length early data is enough. */
+    if (!TEST_true(SSL_write_early_data(clientssl, NULL, 0, &written))
+            || !TEST_int_eq(SSL_read_early_data(serverssl, buf, sizeof(buf),
+                                                &readbytes),
+                            SSL_READ_EARLY_DATA_ERROR)
+            || !TEST_int_eq(SSL_get_early_data_status(serverssl),
+                            SSL_EARLY_DATA_ACCEPTED))
+        goto end;
+
+    if (!TEST_int_eq(SSL_export_keying_material_early(
+                     clientssl, ckeymat1, sizeof(ckeymat1), label,
+                     sizeof(label) - 1, context, sizeof(context) - 1), 1)
+            || !TEST_int_eq(SSL_export_keying_material_early(
+                            clientssl, ckeymat2, sizeof(ckeymat2), label,
+                            sizeof(label) - 1, emptycontext, 0), 1)
+            || !TEST_int_eq(SSL_export_keying_material_early(
+                            serverssl, skeymat1, sizeof(skeymat1), label,
+                            sizeof(label) - 1, context, sizeof(context) - 1), 1)
+            || !TEST_int_eq(SSL_export_keying_material_early(
+                            serverssl, skeymat2, sizeof(skeymat2), label,
+                            sizeof(label) - 1, emptycontext, 0), 1)
+               /*
+                * Check that both sides created the same key material with the
+                * same context.
+                */
+            || !TEST_mem_eq(ckeymat1, sizeof(ckeymat1), skeymat1,
+                            sizeof(skeymat1))
+               /*
+                * Check that both sides created the same key material with an
+                * empty context.
+                */
+            || !TEST_mem_eq(ckeymat2, sizeof(ckeymat2), skeymat2,
+                            sizeof(skeymat2))
+               /* Different contexts should produce different results */
+            || !TEST_mem_ne(ckeymat1, sizeof(ckeymat1), ckeymat2,
+                            sizeof(ckeymat2)))
+        goto end;
+
+    testresult = 1;
+
+ end:
+    if (sess != clientpsk)
+        SSL_SESSION_free(sess);
+    SSL_SESSION_free(clientpsk);
+    SSL_SESSION_free(serverpsk);
+    SSL_free(serverssl);
+    SSL_free(clientssl);
+    SSL_CTX_free(sctx);
+    SSL_CTX_free(cctx);
+
+    return testresult;
+}
+#endif /* OPENSSL_NO_TLS1_3 */
+
 static int test_ssl_clear(int idx)
 {
     SSL_CTX *cctx = NULL, *sctx = NULL;
@@ -3431,6 +3510,9 @@ int setup_tests(void)
 #endif
     ADD_ALL_TESTS(test_serverinfo, 8);
     ADD_ALL_TESTS(test_export_key_mat, 4);
+#ifndef OPENSSL_NO_TLS1_3
+    ADD_ALL_TESTS(test_export_key_mat_early, 3);
+#endif
     ADD_ALL_TESTS(test_ssl_clear, 2);
     ADD_ALL_TESTS(test_max_fragment_len_ext, OSSL_NELEM(max_fragment_len_test));
     return 1;
diff --git a/test/tls13secretstest.c b/test/tls13secretstest.c
index c19bd2c..8b775b8 100644
--- a/test/tls13secretstest.c
+++ b/test/tls13secretstest.c
@@ -217,6 +217,11 @@ int ossl_statem_export_allowed(SSL *s)
     return 1;
 }
 
+int ossl_statem_export_early_allowed(SSL *s)
+{
+    return 1;
+}
+
 /* End of mocked out code */
 
 static int test_secret(SSL *s, unsigned char *prk,
diff --git a/util/libssl.num b/util/libssl.num
index 866ff53..48c5eca 100644
--- a/util/libssl.num
+++ b/util/libssl.num
@@ -476,3 +476,4 @@ SSL_SESSION_get_max_fragment_length     476	1_1_1	EXIST::FUNCTION:
 SSL_stateless                           477	1_1_1	EXIST::FUNCTION:
 SSL_verify_client_post_handshake        478	1_1_1	EXIST::FUNCTION:
 SSL_force_post_handshake_auth           479	1_1_1	EXIST::FUNCTION:
+SSL_export_keying_material_early        480	1_1_1	EXIST::FUNCTION:

From builds at travis-ci.org  Mon Feb 26 14:19:52 2018
From: builds at travis-ci.org (Travis CI)
Date: Mon, 26 Feb 2018 14:19:52 +0000
Subject: [openssl-commits] Broken: openssl/openssl#16605 (master - b38ede8)
In-Reply-To: <openssl/openssl+346286999+broken@travis-ci.org>
Message-ID: <5a94178893b9_43fa61e8857f813676d5@051945ba-be0d-4002-a47d-8c063e0e6399.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16605
Status: Broken

Duration: 36 minutes and 6 seconds
Commit: b38ede8 (master)
Author: Tatsuhiro Tsujikawa
Message: Export keying material using early exporter master secret

This commit adds SSL_export_keying_material_early() which exports
keying material using early exporter master secret.

Reviewed-by: Rich Salz <rsalz at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5252)

View the changeset: https://github.com/openssl/openssl/compare/e454f3add638...b38ede804343

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346286999?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/7d7e823a/attachment-0001.html>

From appro at openssl.org  Mon Feb 26 16:48:56 2018
From: appro at openssl.org (Andy Polyakov)
Date: Mon, 26 Feb 2018 16:48:56 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519663736.452048.979.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b9d1ad32039a8203e79845eafc8acd199c20a807 (commit)
      from  b38ede8043439d99a3c6c174f17b91875cce66ac (commit)


- Log -----------------------------------------------------------------
commit b9d1ad32039a8203e79845eafc8acd199c20a807
Author: Andy Polyakov <appro at openssl.org>
Date:   Sun Feb 25 16:24:34 2018 +0100

    test/ct_test.c: remove dependency on -lm.
    
    fabs(3m) is customarily inlined, but it's not, one has to link with -lm.
    Since fabs(3m) is the only reference, it makes more sense to avoid it.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 test/ct_test.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/test/ct_test.c b/test/ct_test.c
index 6c848af..ce99f42 100644
--- a/test/ct_test.c
+++ b/test/ct_test.c
@@ -8,7 +8,6 @@
  */
 
 #include <ctype.h>
-#include <math.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
@@ -297,7 +296,8 @@ static int execute_cert_test(CT_TEST_FIXTURE *fixture)
             for (i = 0; i < sk_SCT_num(scts); ++i) {
                 SCT *sct_i = sk_SCT_value(scts, i);
 
-                if (!TEST_int_eq(SCT_get_source(sct_i), SCT_SOURCE_X509V3_EXTENSION)) {
+                if (!TEST_int_eq(SCT_get_source(sct_i),
+                                 SCT_SOURCE_X509V3_EXTENSION)) {
                     goto end;
                 }
             }
@@ -504,8 +504,8 @@ static int test_default_ct_policy_eval_ctx_time_is_now(void)
                                 1000;
     const time_t time_tolerance = 600;  /* 10 minutes */
 
-    if (!TEST_uint_le((unsigned int)fabs(difftime(time(NULL), default_time)),
-                      (unsigned int)time_tolerance))
+    if (!TEST_time_t_le(abs((int)difftime(time(NULL), default_time)),
+                        time_tolerance))
         goto end;
 
     success = 1;

From appro at openssl.org  Mon Feb 26 16:51:36 2018
From: appro at openssl.org (Andy Polyakov)
Date: Mon, 26 Feb 2018 16:51:36 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519663896.297220.2045.nullmailer@dev.openssl.org>

The branch master has been updated
       via  5839185cdd9b339ff741da437d964a25e72a3fb6 (commit)
      from  b9d1ad32039a8203e79845eafc8acd199c20a807 (commit)


- Log -----------------------------------------------------------------
commit 5839185cdd9b339ff741da437d964a25e72a3fb6
Author: Andy Polyakov <appro at openssl.org>
Date:   Sun Feb 25 16:56:26 2018 +0100

    mem_sec.c: relax POSIX requirement.
    
    Even though mlock(2) was standardized in POSIX.1-2001, vendors did
    implement it prior that point.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5460)

-----------------------------------------------------------------------

Summary of changes:
 crypto/mem_sec.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/crypto/mem_sec.c b/crypto/mem_sec.c
index 4c01045..77bf165 100644
--- a/crypto/mem_sec.c
+++ b/crypto/mem_sec.c
@@ -22,7 +22,9 @@
 
 /* e_os.h includes unistd.h, which defines _POSIX_VERSION */
 #if !defined(OPENSSL_NO_SECURE_MEMORY) && defined(OPENSSL_SYS_UNIX) \
-    && defined(_POSIX_VERSION) && _POSIX_VERSION >= 200112L
+    && ( (defined(_POSIX_VERSION) && _POSIX_VERSION >= 200112L) \
+         || defined(__sun) || defined(__hpux) || defined(__sgi) \
+         || defined(__osf__) )
 # define IMPLEMENTED
 # include <stdlib.h>
 # include <assert.h>

From appro at openssl.org  Mon Feb 26 16:52:33 2018
From: appro at openssl.org (Andy Polyakov)
Date: Mon, 26 Feb 2018 16:52:33 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519663953.473351.2915.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  4974a6f21b3e1aee969174fd20e2a68c36237e71 (commit)
      from  831dbc358eab0a50c1b435f93d7c16d99ad61472 (commit)


- Log -----------------------------------------------------------------
commit 4974a6f21b3e1aee969174fd20e2a68c36237e71
Author: Andy Polyakov <appro at openssl.org>
Date:   Sun Feb 25 16:56:26 2018 +0100

    mem_sec.c: relax POSIX requirement.
    
    Even though mlock(2) was standardized in POSIX.1-2001, vendors did
    implement it prior that point.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5460)
    
    (cherry picked from commit 5839185cdd9b339ff741da437d964a25e72a3fb6)

-----------------------------------------------------------------------

Summary of changes:
 crypto/mem_sec.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/crypto/mem_sec.c b/crypto/mem_sec.c
index b626b3d..c36e392 100644
--- a/crypto/mem_sec.c
+++ b/crypto/mem_sec.c
@@ -26,7 +26,9 @@
 
 /* e_os.h includes unistd.h, which defines _POSIX_VERSION */
 #if !defined(OPENSSL_NO_SECURE_MEMORY) && defined(OPENSSL_SYS_UNIX) \
-    && defined(_POSIX_VERSION) && _POSIX_VERSION >= 200112L
+    && ( (defined(_POSIX_VERSION) && _POSIX_VERSION >= 200112L) \
+         || defined(__sun) || defined(__hpux) || defined(__sgi) \
+         || defined(__osf__) )
 # define IMPLEMENTED
 # include <stdlib.h>
 # include <assert.h>

From builds at travis-ci.org  Mon Feb 26 17:32:39 2018
From: builds at travis-ci.org (Travis CI)
Date: Mon, 26 Feb 2018 17:32:39 +0000
Subject: [openssl-commits] Still Failing: openssl/openssl#16609 (master -
	b9d1ad3)
In-Reply-To: <openssl/openssl+346375598+still failing@travis-ci.org>
Message-ID: <5a9444b76157b_43fd0168d6b7c20945c@40616529-7a43-4ff1-b8f8-90c3449c4300.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16609
Status: Still Failing

Duration: 37 minutes and 48 seconds
Commit: b9d1ad3 (master)
Author: Andy Polyakov
Message: test/ct_test.c: remove dependency on -lm.

fabs(3m) is customarily inlined, but it's not, one has to link with -lm.
Since fabs(3m) is the only reference, it makes more sense to avoid it.

Reviewed-by: Rich Salz <rsalz at openssl.org>

View the changeset: https://github.com/openssl/openssl/compare/b38ede804343...b9d1ad32039a

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346375598?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/92248be6/attachment.html>

From builds at travis-ci.org  Mon Feb 26 17:42:13 2018
From: builds at travis-ci.org (Travis CI)
Date: Mon, 26 Feb 2018 17:42:13 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16611
	(OpenSSL_1_1_0-stable - 4974a6f)
In-Reply-To: <openssl/openssl+346377350+errored@travis-ci.org>
Message-ID: <5a94478f366c4_43fd020d1989c2314d@40616529-7a43-4ff1-b8f8-90c3449c4300.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16611
Status: Errored

Duration: 19 minutes and 11 seconds
Commit: 4974a6f (OpenSSL_1_1_0-stable)
Author: Andy Polyakov
Message: mem_sec.c: relax POSIX requirement.

Even though mlock(2) was standardized in POSIX.1-2001, vendors did
implement it prior that point.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5460)

(cherry picked from commit 5839185cdd9b339ff741da437d964a25e72a3fb6)

View the changeset: https://github.com/openssl/openssl/compare/831dbc358eab...4974a6f21b3e

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346377350?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/ada68647/attachment-0001.html>

From builds at travis-ci.org  Mon Feb 26 17:50:08 2018
From: builds at travis-ci.org (Travis CI)
Date: Mon, 26 Feb 2018 17:50:08 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16610 (master - 5839185)
In-Reply-To: <openssl/openssl+346376840+errored@travis-ci.org>
Message-ID: <5a9448d09b2bd_43fd90d914bfc3549ed@2b57ec39-dfa5-482b-aeb8-ca64827b4c27.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16610
Status: Errored

Duration: 41 minutes and 4 seconds
Commit: 5839185 (master)
Author: Andy Polyakov
Message: mem_sec.c: relax POSIX requirement.

Even though mlock(2) was standardized in POSIX.1-2001, vendors did
implement it prior that point.

Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5460)

View the changeset: https://github.com/openssl/openssl/compare/b9d1ad32039a...5839185cdd9b

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346376840?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/53d7050a/attachment.html>

From no-reply at appveyor.com  Mon Feb 26 19:11:40 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 26 Feb 2018 19:11:40 +0000
Subject: [openssl-commits] Build failed: openssl master.15909
Message-ID: <20180226191140.1.04411B56C55A63ED@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/dd22d8db/attachment.html>

From no-reply at appveyor.com  Mon Feb 26 20:00:48 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Mon, 26 Feb 2018 20:00:48 +0000
Subject: [openssl-commits] Build completed: openssl master.15910
Message-ID: <20180226200048.1.103DD0BDE4216904@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/068499e7/attachment.html>

From matt at openssl.org  Mon Feb 26 23:17:20 2018
From: matt at openssl.org (Matt Caswell)
Date: Mon, 26 Feb 2018 23:17:20 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519687040.114829.7814.nullmailer@dev.openssl.org>

The branch master has been updated
       via  34ff74eb183519ccedf11c97e754450469707951 (commit)
      from  5839185cdd9b339ff741da437d964a25e72a3fb6 (commit)


- Log -----------------------------------------------------------------
commit 34ff74eb183519ccedf11c97e754450469707951
Author: Matt Caswell <matt at openssl.org>
Date:   Mon Feb 26 19:34:42 2018 +0000

    Clear some sslapitest global variables after use
    
    Otherwise we get a use after free if the test order is randomised.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5467)

-----------------------------------------------------------------------

Summary of changes:
 test/sslapitest.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/test/sslapitest.c b/test/sslapitest.c
index 1cf5c4f..6480885 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -3227,6 +3227,7 @@ static int test_export_key_mat_early(int idx)
         SSL_SESSION_free(sess);
     SSL_SESSION_free(clientpsk);
     SSL_SESSION_free(serverpsk);
+    clientpsk = serverpsk = NULL;
     SSL_free(serverssl);
     SSL_free(clientssl);
     SSL_CTX_free(sctx);

From builds at travis-ci.org  Mon Feb 26 23:53:20 2018
From: builds at travis-ci.org (Travis CI)
Date: Mon, 26 Feb 2018 23:53:20 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16614 (master - 34ff74e)
In-Reply-To: <openssl/openssl+346542796+passed@travis-ci.org>
Message-ID: <5a949df052011_43fd020cd940481524f@40616529-7a43-4ff1-b8f8-90c3449c4300.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16614
Status: Passed

Duration: 35 minutes and 4 seconds
Commit: 34ff74e (master)
Author: Matt Caswell
Message: Clear some sslapitest global variables after use

Otherwise we get a use after free if the test order is randomised.

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5467)

View the changeset: https://github.com/openssl/openssl/compare/5839185cdd9b...34ff74eb1835

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346542796?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180226/c8af92ce/attachment-0001.html>

From builds at travis-ci.org  Tue Feb 27 07:20:15 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 07:20:15 +0000
Subject: [openssl-commits] Broken: winnerof2010/openssl#2 (master - 94f6fcd)
In-Reply-To: <winnerof2010/openssl+346644898+broken@travis-ci.org>
Message-ID: <5a95074e62e6f_43fd020cd93141165663@40616529-7a43-4ff1-b8f8-90c3449c4300.mail>

Build Update for winnerof2010/openssl
-------------------------------------

Build: #2
Status: Broken

Duration: 43 minutes and 57 seconds
Commit: 94f6fcd (master)
Author: winnerof2010
Message: Added Jenkinsfile

View the changeset: https://github.com/winnerof2010/openssl/compare/6a3ba847efd7...94f6fcda48d5

View the full build log and details: https://travis-ci.org/winnerof2010/openssl/builds/346644898?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/149936a8/attachment.html>

From builds at travis-ci.org  Tue Feb 27 07:56:01 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 07:56:01 +0000
Subject: [openssl-commits] Broken: winnerof2010/openssl#4 (master - 18b54cf)
In-Reply-To: <winnerof2010/openssl+346652594+broken@travis-ci.org>
Message-ID: <5a950f11131fc_43fd90d816da415979da@2b57ec39-dfa5-482b-aeb8-ca64827b4c27.mail>

Build Update for winnerof2010/openssl
-------------------------------------

Build: #4
Status: Broken

Duration: 42 minutes and 37 seconds
Commit: 18b54cf (master)
Author: winnerof2010
Message: Added Jenkinsfile

View the changeset: https://github.com/winnerof2010/openssl/compare/9a48bfabd623...18b54cf8c0bb

View the full build log and details: https://travis-ci.org/winnerof2010/openssl/builds/346652594?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/c0e2f211/attachment.html>

From builds at travis-ci.org  Tue Feb 27 08:39:42 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 08:39:42 +0000
Subject: [openssl-commits] Failed: winnerof2010/openssl#6 (master - 6e4d8f4)
In-Reply-To: <winnerof2010/openssl+346653647+failed@travis-ci.org>
Message-ID: <5a95194dd53f9_43fecc6012014115674c@90444f2b-147c-4bb6-b11e-4521baf4ca0a.mail>

Build Update for winnerof2010/openssl
-------------------------------------

Build: #6
Status: Failed

Duration: 48 minutes and 45 seconds
Commit: 6e4d8f4 (master)
Author: winnerof2010
Message: Added Jenkinsfile

View the changeset: https://github.com/winnerof2010/openssl/compare/a6d4d17cad27...6e4d8f465e9e

View the full build log and details: https://travis-ci.org/winnerof2010/openssl/builds/346653647?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/e401ecb3/attachment-0001.html>

From no-reply at appveyor.com  Tue Feb 27 10:16:29 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 27 Feb 2018 10:16:29 +0000
Subject: [openssl-commits] Build failed: openssl master.15915
Message-ID: <20180227101629.1.B46FC396C386B4A6@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/8ad8803d/attachment.html>

From no-reply at appveyor.com  Tue Feb 27 10:38:44 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Tue, 27 Feb 2018 10:38:44 +0000
Subject: [openssl-commits] Build completed: openssl master.15916
Message-ID: <20180227103844.1.1313656F9F4FE96E@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/5fe5f280/attachment.html>

From openssl at openssl.org  Tue Feb 27 11:20:04 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Tue, 27 Feb 2018 11:20:04 +0000
Subject: [openssl-commits] Still FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-ocsp
Message-ID: <1519730404.725824.9006.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ocsp

Commit log since last time:

5839185 mem_sec.c: relax POSIX requirement.
b9d1ad3 test/ct_test.c: remove dependency on -lm.
b38ede8 Export keying material using early exporter master secret
e454f3a Make it possible to give --libdir an absolute path

Build log ended with (last 100 lines):

chmod a+x apps/CA.pl
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-mb-x86_64.d.tmp -MT crypto/aes/aesni-mb-x86_64.o -c -o crypto/aes/aesni-mb-x86_64.o crypto/aes/aesni-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-sha1-x86_64.d.tmp -MT crypto/aes/aesni-sha1-x86_64.o -c -o crypto/aes/aesni-sha1-x86_64.o crypto/aes/aesni-sha1-x86_64.s
chmod a+x tools/c_rehash
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-sha256-x86_64.d.tmp -MT crypto/aes/aesni-sha256-x86_64.o -c -o crypto/aes/aesni-sha256-x86_64.o crypto/aes/aesni-sha256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-x86_64.d.tmp -MT crypto/aes/aesni-x86_64.o -c -o crypto/aes/aesni-x86_64.o crypto/aes/aesni-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/bsaes-x86_64.d.tmp -MT crypto/aes/bsaes-x86_64.o -c -o crypto/aes/bsaes-x86_64.o crypto/aes/bsaes-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/vpaes-x86_64.d.tmp -MT crypto/aes/vpaes-x86_64.o -c -o crypto/aes/vpaes-x86_64.o crypto/aes/vpaes-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/rsaz-avx2.d.tmp -MT crypto/bn/rsaz-avx2.o -c -o crypto/bn/rsaz-avx2.o crypto/bn/rsaz-avx2.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/rsaz-x86_64.d.tmp -MT crypto/bn/rsaz-x86_64.o -c -o crypto/bn/rsaz-x86_64.o crypto/bn/rsaz-x86_64.s
chmod a+x util/shlib_wrap.sh
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-gf2m.d.tmp -MT crypto/bn/x86_64-gf2m.o -c -o crypto/bn/x86_64-gf2m.o crypto/bn/x86_64-gf2m.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-mont.d.tmp -MT crypto/bn/x86_64-mont.o -c -o crypto/bn/x86_64-mont.o crypto/bn/x86_64-mont.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-mont5.d.tmp -MT crypto/bn/x86_64-mont5.o -c -o crypto/bn/x86_64-mont5.o crypto/bn/x86_64-mont5.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/camellia/cmll-x86_64.d.tmp -MT crypto/camellia/cmll-x86_64.o -c -o crypto/camellia/cmll-x86_64.o crypto/camellia/cmll-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/chacha/chacha-x86_64.d.tmp -MT crypto/chacha/chacha-x86_64.o -c -o crypto/chacha/chacha-x86_64.o crypto/chacha/chacha-x86_64.s
clang  -I. -Icrypto/include -Iinclude -Icrypto -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/cversion.d.tmp -MT crypto/cversion.o -c -o crypto/cversion.o ../openssl/crypto/cversion.c
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/ec/ecp_nistz256-x86_64.d.tmp -MT crypto/ec/ecp_nistz256-x86_64.o -c -o crypto/ec/ecp_nistz256-x86_64.o crypto/ec/ecp_nistz256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/ec/x25519-x86_64.d.tmp -MT crypto/ec/x25519-x86_64.o -c -o crypto/ec/x25519-x86_64.o crypto/ec/x25519-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/md5/md5-x86_64.d.tmp -MT crypto/md5/md5-x86_64.o -c -o crypto/md5/md5-x86_64.o crypto/md5/md5-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/modes/aesni-gcm-x86_64.d.tmp -MT crypto/modes/aesni-gcm-x86_64.o -c -o crypto/modes/aesni-gcm-x86_64.o crypto/modes/aesni-gcm-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/modes/ghash-x86_64.d.tmp -MT crypto/modes/ghash-x86_64.o -c -o crypto/modes/ghash-x86_64.o crypto/modes/ghash-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/poly1305/poly1305-x86_64.d.tmp -MT crypto/poly1305/poly1305-x86_64.o -c -o crypto/poly1305/poly1305-x86_64.o crypto/poly1305/poly1305-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/rc4/rc4-md5-x86_64.d.tmp -MT crypto/rc4/rc4-md5-x86_64.o -c -o crypto/rc4/rc4-md5-x86_64.o crypto/rc4/rc4-md5-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/rc4/rc4-x86_64.d.tmp -MT crypto/rc4/rc4-x86_64.o -c -o crypto/rc4/rc4-x86_64.o crypto/rc4/rc4-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha1-mb-x86_64.d.tmp -MT crypto/sha/sha1-mb-x86_64.o -c -o crypto/sha/sha1-mb-x86_64.o crypto/sha/sha1-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha1-x86_64.d.tmp -MT crypto/sha/sha1-x86_64.o -c -o crypto/sha/sha1-x86_64.o crypto/sha/sha1-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha256-mb-x86_64.d.tmp -MT crypto/sha/sha256-mb-x86_64.o -c -o crypto/sha/sha256-mb-x86_64.o crypto/sha/sha256-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha256-x86_64.d.tmp -MT crypto/sha/sha256-x86_64.o -c -o crypto/sha/sha256-x86_64.o crypto/sha/sha256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha512-x86_64.d.tmp -MT crypto/sha/sha512-x86_64.o -c -o crypto/sha/sha512-x86_64.o crypto/sha/sha512-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/whrlpool/wp-x86_64.d.tmp -MT crypto/whrlpool/wp-x86_64.o -c -o crypto/whrlpool/wp-x86_64.o crypto/whrlpool/wp-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/x86_64cpuid.d.tmp -MT crypto/x86_64cpuid.o -c -o crypto/x86_64cpuid.o crypto/x86_64cpuid.s
ar r libssl.a ssl/bio_ssl.o ssl/d1_lib.o ssl/d1_msg.o ssl/d1_srtp.o ssl/methods.o ssl/packet.o ssl/pqueue.o ssl/record/dtls1_bitmap.o ssl/record/rec_layer_d1.o ssl/record/rec_layer_s3.o ssl/record/ssl3_buffer.o ssl/record/ssl3_record.o ssl/record/ssl3_record_tls13.o ssl/s3_cbc.o ssl/s3_enc.o ssl/s3_lib.o ssl/s3_msg.o ssl/ssl_asn1.o ssl/ssl_cert.o ssl/ssl_ciph.o ssl/ssl_conf.o ssl/ssl_err.o ssl/ssl_init.o ssl/ssl_lib.o ssl/ssl_mcnf.o ssl/ssl_rsa.o ssl/ssl_sess.o ssl/ssl_stat.o ssl/ssl_txt.o ssl/ssl_utst.o ssl/statem/extensions.o ssl/statem/extensions_clnt.o ssl/statem/extensions_cust.o ssl/statem/extensions_srvr.o ssl/statem/statem.o ssl/statem/statem_clnt.o ssl/statem/statem_dtls.o ssl/statem/statem_lib.o ssl/statem/statem_srvr.o ssl/t1_enc.o ssl/t1_lib.o ssl/t1_trce.o ssl/tls13_enc.o ssl/tls_srp.o
ar: creating libssl.a
ar r test/libtestutil.a test/testutil/basic_output.o test/testutil/cb.o test/testutil/driver.o test/testutil/format_output.o test/testutil/init.o test/testutil/main.o test/testutil/output_helpers.o test/testutil/stanza.o test/testutil/tap_bio.o test/testutil/test_cleanup.o test/testutil/tests.o
ar: creating test/libtestutil.a
ranlib test/libtestutil.a || echo Never mind.
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF engines/e_padlock-x86_64.d.tmp -MT engines/e_padlock-x86_64.o -c -o engines/e_padlock-x86_64.o engines/e_padlock-x86_64.s
ranlib libssl.a || echo Never mind.
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/asn1pars.d.tmp -MT apps/asn1pars.o -c -o apps/asn1pars.o ../openssl/apps/asn1pars.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ca.d.tmp -MT apps/ca.o -c -o apps/ca.o ../openssl/apps/ca.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ciphers.d.tmp -MT apps/ciphers.o -c -o apps/ciphers.o ../openssl/apps/ciphers.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/cms.d.tmp -MT apps/cms.o -c -o apps/cms.o ../openssl/apps/cms.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/crl.d.tmp -MT apps/crl.o -c -o apps/crl.o ../openssl/apps/crl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/crl2p7.d.tmp -MT apps/crl2p7.o -c -o apps/crl2p7.o ../openssl/apps/crl2p7.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dgst.d.tmp -MT apps/dgst.o -c -o apps/dgst.o ../openssl/apps/dgst.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dhparam.d.tmp -MT apps/dhparam.o -c -o apps/dhparam.o ../openssl/apps/dhparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dsa.d.tmp -MT apps/dsa.o -c -o apps/dsa.o ../openssl/apps/dsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dsaparam.d.tmp -MT apps/dsaparam.o -c -o apps/dsaparam.o ../openssl/apps/dsaparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ec.d.tmp -MT apps/ec.o -c -o apps/ec.o ../openssl/apps/ec.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ecparam.d.tmp -MT apps/ecparam.o -c -o apps/ecparam.o ../openssl/apps/ecparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/enc.d.tmp -MT apps/enc.o -c -o apps/enc.o ../openssl/apps/enc.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/engine.d.tmp -MT apps/engine.o -c -o apps/engine.o ../openssl/apps/engine.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/errstr.d.tmp -MT apps/errstr.o -c -o apps/errstr.o ../openssl/apps/errstr.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/gendsa.d.tmp -MT apps/gendsa.o -c -o apps/gendsa.o ../openssl/apps/gendsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/genpkey.d.tmp -MT apps/genpkey.o -c -o apps/genpkey.o ../openssl/apps/genpkey.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/genrsa.d.tmp -MT apps/genrsa.o -c -o apps/genrsa.o ../openssl/apps/genrsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/nseq.d.tmp -MT apps/nseq.o -c -o apps/nseq.o ../openssl/apps/nseq.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ocsp.d.tmp -MT apps/ocsp.o -c -o apps/ocsp.o ../openssl/apps/ocsp.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/openssl.d.tmp -MT apps/openssl.o -c -o apps/openssl.o ../openssl/apps/openssl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/passwd.d.tmp -MT apps/passwd.o -c -o apps/passwd.o ../openssl/apps/passwd.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs12.d.tmp -MT apps/pkcs12.o -c -o apps/pkcs12.o ../openssl/apps/pkcs12.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs7.d.tmp -MT apps/pkcs7.o -c -o apps/pkcs7.o ../openssl/apps/pkcs7.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs8.d.tmp -MT apps/pkcs8.o -c -o apps/pkcs8.o ../openssl/apps/pkcs8.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkey.d.tmp -MT apps/pkey.o -c -o apps/pkey.o ../openssl/apps/pkey.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkeyparam.d.tmp -MT apps/pkeyparam.o -c -o apps/pkeyparam.o ../openssl/apps/pkeyparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkeyutl.d.tmp -MT apps/pkeyutl.o -c -o apps/pkeyutl.o ../openssl/apps/pkeyutl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/prime.d.tmp -MT apps/prime.o -c -o apps/prime.o ../openssl/apps/prime.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rand.d.tmp -MT apps/rand.o -c -o apps/rand.o ../openssl/apps/rand.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rehash.d.tmp -MT apps/rehash.o -c -o apps/rehash.o ../openssl/apps/rehash.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/req.d.tmp -MT apps/req.o -c -o apps/req.o ../openssl/apps/req.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rsa.d.tmp -MT apps/rsa.o -c -o apps/rsa.o ../openssl/apps/rsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rsautl.d.tmp -MT apps/rsautl.o -c -o apps/rsautl.o ../openssl/apps/rsautl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_client.d.tmp -MT apps/s_client.o -c -o apps/s_client.o ../openssl/apps/s_client.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_server.d.tmp -MT apps/s_server.o -c -o apps/s_server.o ../openssl/apps/s_server.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_time.d.tmp -MT apps/s_time.o -c -o apps/s_time.o ../openssl/apps/s_time.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/sess_id.d.tmp -MT apps/sess_id.o -c -o apps/sess_id.o ../openssl/apps/sess_id.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/smime.d.tmp -MT apps/smime.o -c -o apps/smime.o ../openssl/apps/smime.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/speed.d.tmp -MT apps/speed.o -c -o apps/speed.o ../openssl/apps/speed.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/spkac.d.tmp -MT apps/spkac.o -c -o apps/spkac.o ../openssl/apps/spkac.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/srp.d.tmp -MT apps/srp.o -c -o apps/srp.o ../openssl/apps/srp.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/storeutl.d.tmp -MT apps/storeutl.o -c -o apps/storeutl.o ../openssl/apps/storeutl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ts.d.tmp -MT apps/ts.o -c -o apps/ts.o ../openssl/apps/ts.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/verify.d.tmp -MT apps/verify.o -c -o apps/verify.o ../openssl/apps/verify.c
../openssl/apps/storeutl.c:184:27: error: implicit declaration of function 's2i_ASN1_INTEGER' is invalid in C99 [-Werror,-Wimplicit-function-declaration]
            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
                          ^
../openssl/apps/storeutl.c:184:25: error: incompatible integer to pointer conversion assigning to 'ASN1_INTEGER *' (aka 'struct asn1_string_st *') from 'int' [-Werror,-Wint-conversion]
            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
                        ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/version.d.tmp -MT apps/version.o -c -o apps/version.o ../openssl/apps/version.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/x509.d.tmp -MT apps/x509.o -c -o apps/x509.o ../openssl/apps/x509.c
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF test/buildtest_aes.d.tmp -MT test/buildtest_aes.o -c -o test/buildtest_aes.o test/buildtest_aes.c
2 errors generated.
Makefile:6839: recipe for target 'apps/storeutl.o' failed
make[1]: *** [apps/storeutl.o] Error 1
make[1]: *** Waiting for unfinished jobs....
make[1]: Leaving directory '/home/openssl/run-checker/no-ocsp'
Makefile:146: recipe for target 'all' failed
make: *** [all] Error 2

From matt at openssl.org  Tue Feb 27 14:04:30 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 27 Feb 2018 14:04:30 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519740270.397578.3962.nullmailer@dev.openssl.org>

The branch master has been updated
       via  9763f15e80f7e663f140f6201725e0910b59d86a (commit)
       via  6941960602658a52742786978fe8e677548f89bf (commit)
       via  0d66475908a5679ee588641c43b3cb6a2d6b164a (commit)
      from  34ff74eb183519ccedf11c97e754450469707951 (commit)


- Log -----------------------------------------------------------------
commit 9763f15e80f7e663f140f6201725e0910b59d86a
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 27 13:41:51 2018 +0000

    Prepare for 1.1.1-pre3-dev
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

commit 6941960602658a52742786978fe8e677548f89bf
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 27 13:40:37 2018 +0000

    Prepare for 1.1.1-pre2 release
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

commit 0d66475908a5679ee588641c43b3cb6a2d6b164a
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 27 13:37:28 2018 +0000

    Update copyright year
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 README                                   | 2 +-
 apps/s_apps.h                            | 2 +-
 crypto/asn1/charmap.pl                   | 2 +-
 crypto/bio/bf_lbuf.c                     | 2 +-
 crypto/bn/asm/ia64.S                     | 2 +-
 crypto/bn/bn_prime.pl                    | 2 +-
 crypto/conf/keysets.pl                   | 2 +-
 crypto/ec/ecp_nistp224.c                 | 2 +-
 crypto/ec/ecp_nistp256.c                 | 2 +-
 crypto/ec/ecp_nistp521.c                 | 2 +-
 crypto/evp/e_camellia.c                  | 2 +-
 crypto/include/internal/evp_int.h        | 2 +-
 crypto/objects/obj_dat.pl                | 2 +-
 crypto/objects/objects.pl                | 2 +-
 crypto/objects/objxref.pl                | 2 +-
 crypto/poly1305/poly1305.c               | 2 +-
 crypto/rand/rand_unix.c                  | 2 +-
 crypto/rsa/rsa_gen.c                     | 2 +-
 crypto/rsa/rsa_mp.c                      | 2 +-
 crypto/x509/x509_v3.c                    | 2 +-
 crypto/x509v3/v3_asid.c                  | 2 +-
 crypto/x509v3/v3_conf.c                  | 2 +-
 crypto/x509v3/v3_purp.c                  | 2 +-
 doc/man1/pkeyparam.pod                   | 2 +-
 doc/man3/EC_POINT_new.pod                | 2 +-
 doc/man3/EVP_DigestInit.pod              | 2 +-
 doc/man3/EVP_EncryptInit.pod             | 2 +-
 doc/man3/OSSL_STORE_LOADER.pod           | 2 +-
 doc/man3/SSL_export_keying_material.pod  | 2 +-
 e_os.h                                   | 2 +-
 fuzz/mkfuzzoids.pl                       | 2 +-
 include/internal/constant_time_locl.h    | 2 +-
 include/openssl/opensslv.h               | 4 ++--
 include/openssl/ossl_typ.h               | 2 +-
 test/asn1_encode_test.c                  | 2 +-
 test/constant_time_test.c                | 2 +-
 test/curve448_internal_test.c            | 2 +-
 test/recipes/03-test_internal_curve448.t | 2 +-
 test/recipes/03-test_internal_sm4.t      | 2 +-
 test/recipes/80-test_pkcs12.t            | 2 +-
 test/testutil/basic_output.c             | 2 +-
 test/tls13ccstest.c                      | 2 +-
 42 files changed, 43 insertions(+), 43 deletions(-)

diff --git a/README b/README
index cc59ad9..84913bc 100644
--- a/README
+++ b/README
@@ -1,5 +1,5 @@
 
- OpenSSL 1.1.1-pre2-dev
+ OpenSSL 1.1.1-pre3-dev
 
  Copyright (c) 1998-2018 The OpenSSL Project
  Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
diff --git a/apps/s_apps.h b/apps/s_apps.h
index fbffd86..614aab8 100644
--- a/apps/s_apps.h
+++ b/apps/s_apps.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/asn1/charmap.pl b/crypto/asn1/charmap.pl
index e12006a..fbab1f3 100644
--- a/crypto/asn1/charmap.pl
+++ b/crypto/asn1/charmap.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bio/bf_lbuf.c b/crypto/bio/bf_lbuf.c
index 2a4d1e6..2dac3d7 100644
--- a/crypto/bio/bf_lbuf.c
+++ b/crypto/bio/bf_lbuf.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bn/asm/ia64.S b/crypto/bn/asm/ia64.S
index f03264d..d235c45 100644
--- a/crypto/bn/asm/ia64.S
+++ b/crypto/bn/asm/ia64.S
@@ -3,7 +3,7 @@
 .ident	"ia64.S, Version 2.1"
 .ident	"IA-64 ISA artwork by Andy Polyakov <appro at openssl.org>"
 
-// Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+// Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
 //
 // Licensed under the OpenSSL license (the "License").  You may not use
 // this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/bn/bn_prime.pl b/crypto/bn/bn_prime.pl
index 72a5e1f..eeca475 100644
--- a/crypto/bn/bn_prime.pl
+++ b/crypto/bn/bn_prime.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/conf/keysets.pl b/crypto/conf/keysets.pl
index a637fdc..a6d2578 100644
--- a/crypto/conf/keysets.pl
+++ b/crypto/conf/keysets.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/ec/ecp_nistp224.c b/crypto/ec/ecp_nistp224.c
index 9896727..4ece15c 100644
--- a/crypto/ec/ecp_nistp224.c
+++ b/crypto/ec/ecp_nistp224.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2010-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/ec/ecp_nistp256.c b/crypto/ec/ecp_nistp256.c
index 6381efa..5eee25c 100644
--- a/crypto/ec/ecp_nistp256.c
+++ b/crypto/ec/ecp_nistp256.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/ec/ecp_nistp521.c b/crypto/ec/ecp_nistp521.c
index 3a0ec0c..97846f8 100644
--- a/crypto/ec/ecp_nistp521.c
+++ b/crypto/ec/ecp_nistp521.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2011-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/evp/e_camellia.c b/crypto/evp/e_camellia.c
index 905d7a6..2df4a6e 100644
--- a/crypto/evp/e_camellia.c
+++ b/crypto/evp/e_camellia.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/include/internal/evp_int.h b/crypto/include/internal/evp_int.h
index bbf2ba6..a838a2a 100644
--- a/crypto/include/internal/evp_int.h
+++ b/crypto/include/internal/evp_int.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/objects/obj_dat.pl b/crypto/objects/obj_dat.pl
index 19137b1..392617c 100644
--- a/crypto/objects/obj_dat.pl
+++ b/crypto/objects/obj_dat.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/objects/objects.pl b/crypto/objects/objects.pl
index b9e8890..20f726d 100644
--- a/crypto/objects/objects.pl
+++ b/crypto/objects/objects.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/objects/objxref.pl b/crypto/objects/objxref.pl
index 6a33130..0ec63f0 100644
--- a/crypto/objects/objxref.pl
+++ b/crypto/objects/objxref.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 1998-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 1998-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/poly1305/poly1305.c b/crypto/poly1305/poly1305.c
index 7615e33..e3eb5da 100644
--- a/crypto/poly1305/poly1305.c
+++ b/crypto/poly1305/poly1305.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/rand/rand_unix.c b/crypto/rand/rand_unix.c
index bfd7ef0..74c8282 100644
--- a/crypto/rand/rand_unix.c
+++ b/crypto/rand/rand_unix.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/rsa/rsa_gen.c b/crypto/rsa/rsa_gen.c
index 0539027..d8ef3c7 100644
--- a/crypto/rsa/rsa_gen.c
+++ b/crypto/rsa/rsa_gen.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/rsa/rsa_mp.c b/crypto/rsa/rsa_mp.c
index 7e38179..b8727fa 100644
--- a/crypto/rsa/rsa_mp.c
+++ b/crypto/rsa/rsa_mp.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright 2017 BaishanCloud. All rights reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/crypto/x509/x509_v3.c b/crypto/x509/x509_v3.c
index b439030..75ae767 100644
--- a/crypto/x509/x509_v3.c
+++ b/crypto/x509/x509_v3.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/x509v3/v3_asid.c b/crypto/x509v3/v3_asid.c
index 50b8816..089f2ae 100644
--- a/crypto/x509v3/v3_asid.c
+++ b/crypto/x509v3/v3_asid.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/x509v3/v3_conf.c b/crypto/x509v3/v3_conf.c
index 59caa31..7acaebf 100644
--- a/crypto/x509v3/v3_conf.c
+++ b/crypto/x509v3/v3_conf.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/crypto/x509v3/v3_purp.c b/crypto/x509v3/v3_purp.c
index 6c78041..d344e2d 100644
--- a/crypto/x509v3/v3_purp.c
+++ b/crypto/x509v3/v3_purp.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man1/pkeyparam.pod b/doc/man1/pkeyparam.pod
index 70478c5..5094965 100644
--- a/doc/man1/pkeyparam.pod
+++ b/doc/man1/pkeyparam.pod
@@ -78,7 +78,7 @@ L<dsa(1)>, L<genrsa(1)>, L<gendsa(1)>
 
 =head1 COPYRIGHT
 
-Copyright 2006-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/EC_POINT_new.pod b/doc/man3/EC_POINT_new.pod
index e10c0a9..5ac41b3 100644
--- a/doc/man3/EC_POINT_new.pod
+++ b/doc/man3/EC_POINT_new.pod
@@ -186,7 +186,7 @@ L<EC_GFp_simple_method(3)>, L<d2i_ECPKParameters(3)>
 
 =head1 COPYRIGHT
 
-Copyright 2013-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2013-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/EVP_DigestInit.pod b/doc/man3/EVP_DigestInit.pod
index ad5001e..187292f 100644
--- a/doc/man3/EVP_DigestInit.pod
+++ b/doc/man3/EVP_DigestInit.pod
@@ -314,7 +314,7 @@ EVP_dss1() was removed in OpenSSL 1.1.0.
 
 =head1 COPYRIGHT
 
-Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/EVP_EncryptInit.pod b/doc/man3/EVP_EncryptInit.pod
index 0dc4c13..619a94e 100644
--- a/doc/man3/EVP_EncryptInit.pod
+++ b/doc/man3/EVP_EncryptInit.pod
@@ -642,7 +642,7 @@ EVP_CIPHER_CTX_reset().
 
 =head1 COPYRIGHT
 
-Copyright 2000-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/OSSL_STORE_LOADER.pod b/doc/man3/OSSL_STORE_LOADER.pod
index e827434..e6e520e 100644
--- a/doc/man3/OSSL_STORE_LOADER.pod
+++ b/doc/man3/OSSL_STORE_LOADER.pod
@@ -254,7 +254,7 @@ were added to OpenSSL 1.1.1.
 
 =head1 COPYRIGHT
 
-Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/doc/man3/SSL_export_keying_material.pod b/doc/man3/SSL_export_keying_material.pod
index 586ad66..0090097 100644
--- a/doc/man3/SSL_export_keying_material.pod
+++ b/doc/man3/SSL_export_keying_material.pod
@@ -77,7 +77,7 @@ SSL_export_keying_material_early() was first added in OpenSSL 1.1.1.
 
 =head1 COPYRIGHT
 
-Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 
 Licensed under the OpenSSL license (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
diff --git a/e_os.h b/e_os.h
index 3e92716..5071af6 100644
--- a/e_os.h
+++ b/e_os.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/fuzz/mkfuzzoids.pl b/fuzz/mkfuzzoids.pl
index 9ad96b3..0153a03 100755
--- a/fuzz/mkfuzzoids.pl
+++ b/fuzz/mkfuzzoids.pl
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/include/internal/constant_time_locl.h b/include/internal/constant_time_locl.h
index 813df63..d23f515 100644
--- a/include/internal/constant_time_locl.h
+++ b/include/internal/constant_time_locl.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2014-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/include/openssl/opensslv.h b/include/openssl/opensslv.h
index 60c8874..32b6f4d 100644
--- a/include/openssl/opensslv.h
+++ b/include/openssl/opensslv.h
@@ -39,8 +39,8 @@ extern "C" {
  * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for
  *  major minor fix final patch/beta)
  */
-# define OPENSSL_VERSION_NUMBER  0x10101002L
-# define OPENSSL_VERSION_TEXT    "OpenSSL 1.1.1-pre2-dev  xx XXX xxxx"
+# define OPENSSL_VERSION_NUMBER  0x10101003L
+# define OPENSSL_VERSION_TEXT    "OpenSSL 1.1.1-pre3-dev  xx XXX xxxx"
 
 #define OPENSSL_MAKE_VERSION(maj,min,fix,patch) ((0x10000000L)+((maj&0xff)<<20)+((min&0xff)<<12)+((fix&0xff)<<4)+patch)
 
diff --git a/include/openssl/ossl_typ.h b/include/openssl/ossl_typ.h
index 2f242f1..165878e 100644
--- a/include/openssl/ossl_typ.h
+++ b/include/openssl/ossl_typ.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2001-2016 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/asn1_encode_test.c b/test/asn1_encode_test.c
index 1ae0519..6a64bf9 100644
--- a/test/asn1_encode_test.c
+++ b/test/asn1_encode_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/constant_time_test.c b/test/constant_time_test.c
index ac851e2..e5e3e49 100644
--- a/test/constant_time_test.c
+++ b/test/constant_time_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2014-2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/curve448_internal_test.c b/test/curve448_internal_test.c
index 8c9b09d..e7d4378 100644
--- a/test/curve448_internal_test.c
+++ b/test/curve448_internal_test.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/03-test_internal_curve448.t b/test/recipes/03-test_internal_curve448.t
index 44bac02..fb41a6b 100644
--- a/test/recipes/03-test_internal_curve448.t
+++ b/test/recipes/03-test_internal_curve448.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/recipes/03-test_internal_sm4.t b/test/recipes/03-test_internal_sm4.t
index f0ecc28..459d83c 100644
--- a/test/recipes/03-test_internal_sm4.t
+++ b/test/recipes/03-test_internal_sm4.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
 # Copyright 2017 [Ribose Inc.](https://www.ribose.com). All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
diff --git a/test/recipes/80-test_pkcs12.t b/test/recipes/80-test_pkcs12.t
index aa307d2..430df67 100644
--- a/test/recipes/80-test_pkcs12.t
+++ b/test/recipes/80-test_pkcs12.t
@@ -1,5 +1,5 @@
 #! /usr/bin/env perl
-# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
+# Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the OpenSSL license (the "License").  You may not use
 # this file except in compliance with the License.  You can obtain a copy
diff --git a/test/testutil/basic_output.c b/test/testutil/basic_output.c
index 1fb12c8..e442da8 100644
--- a/test/testutil/basic_output.c
+++ b/test/testutil/basic_output.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/test/tls13ccstest.c b/test/tls13ccstest.c
index db9bfe5..c95010f 100644
--- a/test/tls13ccstest.c
+++ b/test/tls13ccstest.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the OpenSSL license (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy

From matt at openssl.org  Tue Feb 27 14:04:45 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 27 Feb 2018 14:04:45 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_1-pre2 create
Message-ID: <1519740285.213959.5017.nullmailer@dev.openssl.org>

The annotated tag OpenSSL_1_1_1-pre2 has been created
        at  68d5f598acf715a36071a8fa17f87f54ca1e8548 (tag)
   tagging  6941960602658a52742786978fe8e677548f89bf (commit)
  replaces  OpenSSL_1_1_1-pre1
 tagged by  Matt Caswell
        on  Tue Feb 27 14:02:48 2018 +0000

- Log -----------------------------------------------------------------
OpenSSL 1.1.1-pre2 release tag
-----BEGIN PGP SIGNATURE-----

iQEuBAABCAAYBQJalWUIERxtYXR0QG9wZW5zc2wub3JnAAoJENnE0m0OYESRNNgH
/1csJYfCuBNUELQutafRw2uoenftWLG+76FXaZGU1Y1ewLptd2FKeW8OonHTl1PQ
IEbIgDWcxJYjJK1axK95sucCDJ8bf3cN9Ot4sV6SBFVioF3icPMbJL5MmR2rc3Ex
B3zyvN3wkvmGsUMr+WrQQLX9wFChrWJZtEFZGmTV3J5iYCAHMYIIFc28zDxe80Of
YM8HqSFNO65o9whV+NHCasxY2xpuQjcv8MdLS8SSipvUcCjGMVxgnWz3BURmKUf1
XHe1HKNzwYA3AycyCx3uouz7M31//SkFyQzWSgmEMvJqvv+ufHy1U+vaoSSc+yic
Gt8wbKMYM+drYY6n0Gsznw8=
=LV91
-----END PGP SIGNATURE-----

Andy Polyakov (13):
      sha/asm/keccak1600-armv8.pl: add hardware-assisted ARMv8.2 subroutines.
      crypto/ec/curve25519.c: remove redundant fe[51]_cswap.
      Add x25519-x86_64.pl module, mod 2^255-19 primitives.
      ec/curve25519.c: facilitate assembly implementations.
      Configure: engage x25519 assembly support.
      test/recipes/80-test_pkcs12.t: handle lack of Win32::API.
      ec/asm/x25519-x86_64.pl: fix up ADCX/ADOX fallback.
      ec/curve448: portability fixups.
      {ec/curve25519,poly1305/poly1305}.c: relax pedantic constraint.
      ec/ecp_nistp{224,256,521}.c: harmonize usage of __uint128_t.
      appveyor.yml: omit makedepend step.
      test/ct_test.c: remove dependency on -lm.
      mem_sec.c: relax POSIX requirement.

Benjamin Kaduk (1):
      Auto-size more of configdata.pm "disabled features"

Bernd Edlinger (3):
      Fix a gcc warning about possible fall through
      Remove executable bit from test/recipes/03-test_internal_sm4.t
      Fix some bugs with the cfb1 bitsize handling

Dr. Matthias St. Pierre (8):
      DRBG: add locking api
      DRBG: unify initialization and cleanup code
      DRBG: make the derivation function the default for ctr_drbg
      OPENSSL_cleanup: cleanup secure memory
      d2i_X509.pod: clarify usage of the 'pp' function parameter
      PEM_read_bio_PrivateKey.pod: replace geek speek by something more serious
      DRBG: make locking api truly private
      pkeyparam.pod: correct the command description

EasySec (1):
      Add support for PBKDF2 for enc command

John Hughes (1):
      Add BIO_bind function to bind local address for a socket.

Kurt Roeckx (3):
      Use both getrandom() and /dev/urandom by default on Linux.
      Switch the DRBGs from AES-128-CTR to AES-256-CTR
      Check return value of time() when getting additional data for the DRBG

Massimiliano Pala (1):
      Add X509_get0_authority_key_id() function

Matt Caswell (87):
      Prepare for 1.1.1-pre2-dev
      Fix a memory leak in an error path
      Make sure we check the return value of extract_min_max()
      Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitable
      If s->ctx is NULL then this is an internal error
      The function X509_gmtime_adj() can fail
      Check the return code from ASN1_TIME_diff()
      The record version for ClientHello2 should be TLS1.2
      Import Curve 448 support
      Flatten the Curve 448 source structure
      Remove some unneeded files and further flatten the curve 448 structure
      Remove some deprecated curve 448 code and remove some unneeded defines
      Remove some unneeded code
      Remove the curve448/decaf sub-directory
      Remove the decaf_bzero function and replace with OPENSSL_cleanse()
      Add the X448() and X448_public_from_private() functions
      Add a local test
      Remove some unneeded stuff
      Remove some uneeded macros and conditionally compiled code
      Remove some more unneeded code
      Rename decaf_448_* to curve448_*
      Remove some vestiges of the old decaf template approach
      Replace DECAF_INLINE with ossl_inline
      Replace DECAF_WARN_UNUSED with __owur
      Remove all instances of DECAF_API_VIS
      Remove DECAF_NONNULL
      Remove DECAF_NOINLINE
      Remove inclusion of header files that we can't rely on due to portability
      Add Ed448 tests
      Add tests for Ed448ph
      Use OpenSSL shake256
      Convert Curve448 internals to use OpenSSL shake256
      Remove the old shake256 implementation
      Remove portable_endian.h
      Rename the decaf files to curve448 files
      Convert to C90 from C99
      Integrate Curve448 into the build system
      Fix the ED448 key lengths
      Update the imported curve448 code to use OpenSSL copyright headers
      Run util/openssl-format-source on the Curve448 code
      Manual formatting tweaks to Curve448 code
      Remove some unneeded code
      Remove references to libdecaf
      Merge f_arithmetic.c into f_generic.c
      Merge f_field.h into field.h
      Remove duplicated 448 in the names of various things
      Remove some gcc/clang specific attributes we don't support
      Fix build errors for Curve448 code on Windows (VC-WIN32 and VC-WIN64A)
      Move curve448_test.c to be a full internal test
      Update the curve448 internal test to use testutil.h
      Fixes for compilation using clang
      Code tidy up
      Update Curve448 copyright for 2018
      Fix a typo in a comment
      Fix travis failure in f_impl.c
      Fix AppVeyor failure in eddsa.c
      Remove curve448 architecture specific files
      Rename a function to avoid a clash
      Use the NLIMBS macro rather than try and calculate the number of limbs
      Add some new constant time functions needed by curve448
      Remove the curve448 specific constant time implementation
      Remove cplusplus guards in internal headers
      Use NLIMBS where appropriate to simplify the code
      Formatting tweak based on review feedback
      Some style fixes
      More style fixes to Curve448 code based on review feedback
      Remove a strict aliasing issue with pre-computed curve448 constants
      More style fixes for the curve448 code
      Remove the curve448 vector code
      Fix a travis failure in the curve448 code
      Remove some unneccessary use of constant time code in curve448
      Simplify some code
      Further style changes to curve448 code
      Yet more style updates to the curve448 code
      Remove unrolled loops
      Improve readability of f_impl.c and f_impl.h
      fixup! Improve readability of f_impl.c and f_impl.h
      fixup! More style fixes for the curve448 code
      Some more cleanups of curve448 code
      Add tests for newly added constant time functions
      Remove a spurious TLSProxy byte in TLSv1.3
      Fix some undefined behaviour in the Curve448 code
      Fix no-ec build
      Sanity check the ticket length before using key name/IV
      Clear some sslapitest global variables after use
      Update copyright year
      Prepare for 1.1.1-pre2 release

Patrick Steuer (1):
      s390x assembly pack: implement OPENSSL_rdtsc as STCKF

Pauli (2):
      Avoid mentioning uninitialised contexts.
      Remove unreachable statement.

Pavel Kopyl (2):
      X509V3_EXT_add_nconf_sk, X509v3_add_ext: fix errors handling
      do_body: fix heap-use-after-free.

Per Sandstr?m (1):
      Update EC_POINT_new.pod

Rich Salz (3):
      Generate copyright year properly
      Remove unused num.pl,segregnam scripts
      Remove OSSLzu, and fix the one place that used it.

Richard Levitte (37):
      Configure: if a file is generated, never assume it's in the source dir
      VMS: for testutil, make sure to use BIO_f_linebuffer
      VMS: simplify config targets
      Build files: parametrize cpp
      Harmonize the make variables across all known platforms families
      VMS: add the possibility to use Itanium assembler with 'ias'
      VMS: modify crypto/bn/asm/ia64.S to build properly
      VMS: build ia64 assembler files if 'ias' is available
      OSSL_STORE: Add OSSL_STORE_vctrl()
      NOTES.UNIX: add additional note about --enable-new-dtags
      AIX: make sure that the arflags value includes the command letter (r)
      Configure: move down the treatment of seed sources
      Configure: avoid uninit data in configdata.pm
      OpenSSL::Test::quotify: put quotes around empty arguments
      test_ssl_old: avoid empty strings for flags
      VMS: Fix curve448 internal test program
      Have configdata.pm display information on perl
      Refactor the ranlib attribute
      Unix Makefile: Rework the assignment of CXX and AS
      Make CROSS_COMPILE another supported "make variable" in Configure
      Add a comment in configdata.pm regarding script-only variables
      Replace the message about configdata.pm as a script
      Build file templates: be less verbose when reconfiguring
      Build files: when using $(CPP), use the C flags alongside the CPP flags
      STORE: In preparation for coming work, mark when loading is started
      STORE: Add the possibility to specify an expected info type
      STORE 'file' scheme loader: Add info type expectation
      Adapt storeutl to allow looking for a specific info type
      STORE: Add documentation on expecting specific infos
      Test the storeutl expectation options
      STORE: Add the possibility to search for specific information
      STORE 'file' scheme loader: Add search capibility
      Adapt storeutl to allow search for specific objects
      STORE: Add documentation on search criteria
      Test the storeutl searching options
      Add a note in CHANGES
      Make it possible to give --libdir an absolute path

Samuel Weiser (1):
      Replaced variable-time GCD with consttime inversion to avoid side-channel attacks on RSA key generation

Steve Linsell (1):
      initialise dc variable to satisfy old compilers.

Tatsuhiro Tsujikawa (1):
      Export keying material using early exporter master secret

Viktor Dukhovni (2):
      Avoid fragile aliasing of SHA224/384 update/final
      Use malloc to avoid alignment problems.

-----------------------------------------------------------------------

From matt at openssl.org  Tue Feb 27 14:07:37 2018
From: matt at openssl.org (Matt Caswell)
Date: Tue, 27 Feb 2018 14:07:37 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1519740457.751701.6111.nullmailer@dev.openssl.org>

The branch master has been updated
       via  998aec751cf4da874a5ca07e4252729c477c0f70 (commit)
       via  7fa0bc9045b0c543d487226e18d6e40d49027582 (commit)
      from  238ca81834d315ce2874eee155d3268e98d92d94 (commit)


- Log -----------------------------------------------------------------
commit 998aec751cf4da874a5ca07e4252729c477c0f70
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 27 14:07:00 2018 +0000

    Add old source directories for 1.1.1

commit 7fa0bc9045b0c543d487226e18d6e40d49027582
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Feb 27 13:48:35 2018 +0000

    Update for new release

-----------------------------------------------------------------------

Summary of changes:
 news/newsflash.txt                     | 1 +
 source/old/{1.0.2 => 1.1.1}/index.html | 6 +++---
 source/old/index.html                  | 1 +
 3 files changed, 5 insertions(+), 3 deletions(-)
 copy source/old/{1.0.2 => 1.1.1}/index.html (87%)

diff --git a/news/newsflash.txt b/news/newsflash.txt
index 2a6e7e3..abc5ab0 100644
--- a/news/newsflash.txt
+++ b/news/newsflash.txt
@@ -4,6 +4,7 @@
 # Format is two fields, colon-separated; the first line is the column
 # headings.  URL paths must all be absolute.
 Date: Item
+27-Feb-2018: Alpha 2 of OpenSSL 1.1.1 is now available: please download and test it
 13-Feb-2018: Alpha 1 of OpenSSL 1.1.1 is now available: please download and test it
 10-Jan-2018: New Blog post: <a href="https://www.openssl.org/blog/blog/2018/01/10/levchin/">OpenSSL wins the Levchin prize</a>
 07-Dec-2017: <a href="/news/secadv/20171207.txt">Security Advisory</a>: one security fix
diff --git a/source/old/1.0.2/index.html b/source/old/1.1.1/index.html
similarity index 87%
copy from source/old/1.0.2/index.html
copy to source/old/1.1.1/index.html
index da5007c..a9635c4 100644
--- a/source/old/1.0.2/index.html
+++ b/source/old/1.1.1/index.html
@@ -7,9 +7,9 @@
   <div id="content">
     <div class="blog-index">
       <article>
-        <header><h2>Old 1.0.2 Releases</h2></header>
+        <header><h2>Old 1.1.1 Releases</h2></header>
         <div class="entry-content">
-          <p>Here are the old 1.0.2 releases.</p>
+          <p>Here are the old 1.1.1 releases.</p>
           <table>
             <tr>
               <td>KBytes&nbsp;</td>
@@ -25,7 +25,7 @@
           You are here: <a href="/">Home</a>
           : <a href="/source">Downloads</a>
           : <a href="/source/old">Old Releases</a>
-          : <a href="">1.0.2</a>
+          : <a href="">1.1.1</a>
           <br/><a href="/sitemap.txt">Sitemap</a>
         </footer>
       </article>
diff --git a/source/old/index.html b/source/old/index.html
index a5fe85d..47163a2 100644
--- a/source/old/index.html
+++ b/source/old/index.html
@@ -16,6 +16,7 @@
             <li><a href="1.0.1">1.0.1</a></li>
             <li><a href="1.0.2">1.0.2</a></li>
             <li><a href="1.1.0">1.1.0</a></li>
+            <li><a href="1.1.1">1.1.1</a></li>
             <li><a href="fips">fips</a></li>
           </ul>
         </div>

From levitte at openssl.org  Tue Feb 27 14:28:02 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 27 Feb 2018 14:28:02 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1519741682.848063.9422.nullmailer@dev.openssl.org>

The branch master has been updated
       via  8e971cf5d3256e7a1ca7bbb04c28926f36505eb8 (commit)
      from  998aec751cf4da874a5ca07e4252729c477c0f70 (commit)


- Log -----------------------------------------------------------------
commit 8e971cf5d3256e7a1ca7bbb04c28926f36505eb8
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 27 15:27:24 2018 +0100

    Include source/old/1.1.1

-----------------------------------------------------------------------

Summary of changes:
 Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Makefile b/Makefile
index 2ba6f57..27e4609 100644
--- a/Makefile
+++ b/Makefile
@@ -37,6 +37,7 @@ SRCLISTS = \
 	   source/old/1.0.1/index.inc \
 	   source/old/1.0.2/index.inc \
 	   source/old/1.1.0/index.inc \
+	   source/old/1.1.1/index.inc \
 	   source/old/fips/index.inc \
 
 

From builds at travis-ci.org  Tue Feb 27 14:55:10 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 14:55:10 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16623 (OpenSSL_1_1_1-pre2
	- 6941960)
In-Reply-To: <openssl/openssl+346789237+passed@travis-ci.org>
Message-ID: <5a95714ce22f3_43fd020ef86cc17574cb@40616529-7a43-4ff1-b8f8-90c3449c4300.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16623
Status: Passed

Duration: 49 minutes and 43 seconds
Commit: 6941960 (OpenSSL_1_1_1-pre2)
Author: Matt Caswell
Message: Prepare for 1.1.1-pre2 release

Reviewed-by: Richard Levitte <levitte at openssl.org>

View the changeset: https://github.com/openssl/openssl/compare/OpenSSL_1_1_1-pre2

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346789237?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/f6c5e226/attachment.html>

From matthias.st.pierre at ncp-e.com  Tue Feb 27 17:39:29 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Tue, 27 Feb 2018 17:39:29 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519753169.772566.29513.nullmailer@dev.openssl.org>

The branch master has been updated
       via  d070b4ae78a1280c5cb6b88df75bcbfbcef6a8f1 (commit)
      from  9763f15e80f7e663f140f6201725e0910b59d86a (commit)


- Log -----------------------------------------------------------------
commit d070b4ae78a1280c5cb6b88df75bcbfbcef6a8f1
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Wed Feb 21 01:45:14 2018 +0100

    bio_b64.c: prevent base64 filter BIO from decoding out-of-bound data
    
    Fixes #5405, #1381
    
    The base64 filter BIO reads its input in chunks of B64_BLOCK_SIZE bytes.
    When processing input in PEM format it can happen in rare cases that
    
    - the trailing PEM marker crosses the boundary of a chunk, and
    - the beginning of the following chunk contains valid base64 encoded data.
    
    This happened in issue #5405, where the PEM marker was split into
    "-----END CER" and "TIFICATE-----" at the end of the first chunk.
    
    The decoding of the first chunk terminated correctly at the '-' character,
    which is treated as an EOF marker, and b64_read() returned. However,
    when called the second time, b64_read() read the next chunk and interpreted
    the string "TIFICATE" as valid base64 encoded data, adding 6 extra bytes
    '4c 81 48 08 04 c4'.
    
    This patch restores the assignment of the error code to 'ctx->cont', which
    was deleted accidentally in commit 5562cfaca4f3 and which prevents b64_read()
    from reading additional data on subsequent calls.
    
    This issue was observed and reported by Annie Yousar.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5422)

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/bio_b64.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/crypto/evp/bio_b64.c b/crypto/evp/bio_b64.c
index cade6f8..e70fc32 100644
--- a/crypto/evp/bio_b64.c
+++ b/crypto/evp/bio_b64.c
@@ -289,6 +289,14 @@ static int b64_read(BIO *b, char *out, int outl)
                                  (unsigned char *)ctx->tmp, i);
             ctx->tmp_len = 0;
         }
+        /*
+         * If eof or an error was signalled, then the condition
+         * 'ctx->cont <= 0' will prevent b64_read() from reading
+         * more data on subsequent calls. This assignment was
+         * deleted accidentally in commit 5562cfaca4f3.
+         */
+        ctx->cont = i;
+
         ctx->buf_off = 0;
         if (i < 0) {
             ret_code = 0;

From matthias.st.pierre at ncp-e.com  Tue Feb 27 17:40:03 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Tue, 27 Feb 2018 17:40:03 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519753203.822023.30345.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  5eb9a426d953b17c377b87315d0666c86126022f (commit)
      from  4974a6f21b3e1aee969174fd20e2a68c36237e71 (commit)


- Log -----------------------------------------------------------------
commit 5eb9a426d953b17c377b87315d0666c86126022f
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Wed Feb 21 01:45:14 2018 +0100

    bio_b64.c: prevent base64 filter BIO from decoding out-of-bound data
    
    Fixes #5405, #1381
    
    The base64 filter BIO reads its input in chunks of B64_BLOCK_SIZE bytes.
    When processing input in PEM format it can happen in rare cases that
    
    - the trailing PEM marker crosses the boundary of a chunk, and
    - the beginning of the following chunk contains valid base64 encoded data.
    
    This happened in issue #5405, where the PEM marker was split into
    "-----END CER" and "TIFICATE-----" at the end of the first chunk.
    
    The decoding of the first chunk terminated correctly at the '-' character,
    which is treated as an EOF marker, and b64_read() returned. However,
    when called the second time, b64_read() read the next chunk and interpreted
    the string "TIFICATE" as valid base64 encoded data, adding 6 extra bytes
    '4c 81 48 08 04 c4'.
    
    This patch restores the assignment of the error code to 'ctx->cont', which
    was deleted accidentally in commit 5562cfaca4f3 and which prevents b64_read()
    from reading additional data on subsequent calls.
    
    This issue was observed and reported by Annie Yousar.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5422)

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/bio_b64.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/crypto/evp/bio_b64.c b/crypto/evp/bio_b64.c
index 41a10a7..05019fd 100644
--- a/crypto/evp/bio_b64.c
+++ b/crypto/evp/bio_b64.c
@@ -288,6 +288,14 @@ static int b64_read(BIO *b, char *out, int outl)
                                  (unsigned char *)ctx->tmp, i);
             ctx->tmp_len = 0;
         }
+        /*
+         * If eof or an error was signalled, then the condition
+         * 'ctx->cont <= 0' will prevent b64_read() from reading
+         * more data on subsequent calls. This assignment was
+         * deleted accidentally in commit 5562cfaca4f3.
+         */
+        ctx->cont = i;
+
         ctx->buf_off = 0;
         if (i < 0) {
             ret_code = 0;

From matthias.st.pierre at ncp-e.com  Tue Feb 27 17:40:34 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Tue, 27 Feb 2018 17:40:34 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_0_2-stable update
Message-ID: <1519753234.820510.31150.nullmailer@dev.openssl.org>

The branch OpenSSL_1_0_2-stable has been updated
       via  b3f9b401ab6284e6bbde59dde06736f681f70a9d (commit)
      from  37e62cee3ee50983ecad88813ec11b326efb123a (commit)


- Log -----------------------------------------------------------------
commit b3f9b401ab6284e6bbde59dde06736f681f70a9d
Author: Dr. Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Date:   Wed Feb 21 01:45:14 2018 +0100

    bio_b64.c: prevent base64 filter BIO from decoding out-of-bound data
    
    Fixes #5405, #1381
    
    The base64 filter BIO reads its input in chunks of B64_BLOCK_SIZE bytes.
    When processing input in PEM format it can happen in rare cases that
    
    - the trailing PEM marker crosses the boundary of a chunk, and
    - the beginning of the following chunk contains valid base64 encoded data.
    
    This happened in issue #5405, where the PEM marker was split into
    "-----END CER" and "TIFICATE-----" at the end of the first chunk.
    
    The decoding of the first chunk terminated correctly at the '-' character,
    which is treated as an EOF marker, and b64_read() returned. However,
    when called the second time, b64_read() read the next chunk and interpreted
    the string "TIFICATE" as valid base64 encoded data, adding 6 extra bytes
    '4c 81 48 08 04 c4'.
    
    This patch restores the assignment of the error code to 'ctx->cont', which
    was deleted accidentally in commit 5562cfaca4f3 and which prevents b64_read()
    from reading additional data on subsequent calls.
    
    This issue was observed and reported by Annie Yousar.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5422)

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/bio_b64.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/crypto/evp/bio_b64.c b/crypto/evp/bio_b64.c
index 538b520..5ad5a95 100644
--- a/crypto/evp/bio_b64.c
+++ b/crypto/evp/bio_b64.c
@@ -330,6 +330,14 @@ static int b64_read(BIO *b, char *out, int outl)
                                  (unsigned char *)ctx->tmp, i);
             ctx->tmp_len = 0;
         }
+        /*
+         * If eof or an error was signalled, then the condition
+         * 'ctx->cont <= 0' will prevent b64_read() from reading
+         * more data on subsequent calls. This assignment was
+         * deleted accidentally in commit 5562cfaca4f3.
+         */
+        ctx->cont = i;
+
         ctx->buf_off = 0;
         if (i < 0) {
             ret_code = 0;

From builds at travis-ci.org  Tue Feb 27 18:09:56 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 18:09:56 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16626
	(OpenSSL_1_1_0-stable - 5eb9a42)
In-Reply-To: <openssl/openssl+346893637+passed@travis-ci.org>
Message-ID: <5a959ef43dfda_43ff2f4b53a483745a8@75c4fbb5-c1c9-4413-baf5-069e9321a89e.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16626
Status: Passed

Duration: 15 minutes and 54 seconds
Commit: 5eb9a42 (OpenSSL_1_1_0-stable)
Author: Dr. Matthias St. Pierre
Message: bio_b64.c: prevent base64 filter BIO from decoding out-of-bound data

Fixes #5405, #1381

The base64 filter BIO reads its input in chunks of B64_BLOCK_SIZE bytes.
When processing input in PEM format it can happen in rare cases that

- the trailing PEM marker crosses the boundary of a chunk, and
- the beginning of the following chunk contains valid base64 encoded data.

This happened in issue #5405, where the PEM marker was split into
"-----END CER" and "TIFICATE-----" at the end of the first chunk.

The decoding of the first chunk terminated correctly at the '-' character,
which is treated as an EOF marker, and b64_read() returned. However,
when called the second time, b64_read() read the next chunk and interpreted
the string "TIFICATE" as valid base64 encoded data, adding 6 extra bytes
'4c 81 48 08 04 c4'.

This patch restores the assignment of the error code to 'ctx->cont', which
was deleted accidentally in commit 5562cfaca4f3 and which prevents b64_read()
from reading additional data on subsequent calls.

This issue was observed and reported by Annie Yousar.

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5422)

View the changeset: https://github.com/openssl/openssl/compare/4974a6f21b3e...5eb9a426d953

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346893637?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/ed2bbcd7/attachment.html>

From levitte at openssl.org  Tue Feb 27 20:18:01 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 27 Feb 2018 20:18:01 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519762681.373334.16683.nullmailer@dev.openssl.org>

The branch master has been updated
       via  4c861b381667b8e496483bf89f72674ad7e5fc25 (commit)
       via  b700bc59669939a9285255293e1bb70a5a35f736 (commit)
      from  d070b4ae78a1280c5cb6b88df75bcbfbcef6a8f1 (commit)


- Log -----------------------------------------------------------------
commit 4c861b381667b8e496483bf89f72674ad7e5fc25
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 27 21:02:31 2018 +0100

    crypto/ec/asm/x25519-x86_64.pl: close STDOUT, not $STDOUT
    
    Fixes #5471
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5472)

commit b700bc59669939a9285255293e1bb70a5a35f736
Author: Richard Levitte <levitte at openssl.org>
Date:   Tue Feb 27 21:01:59 2018 +0100

    configdata.pm: ensure $prefix is defined
    
    Fixes #5471
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5472)

-----------------------------------------------------------------------

Summary of changes:
 Configure                      | 1 +
 crypto/ec/asm/x25519-x86_64.pl | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/Configure b/Configure
index 3c40a0e..d78066b 100755
--- a/Configure
+++ b/Configure
@@ -2444,6 +2444,7 @@ _____
             my $prefix = '';
             $prefix = $config{cross_compile_prefix}
                 if grep { $var eq $_ } @user_crossable;
+            $prefix //= '';
             print '    ',$var,' ' x (16 - length $var),'= ',
                 (ref $config{$makevars{$var}} eq 'ARRAY'
                  ? join(' ', @{$config{$makevars{$var}}})
diff --git a/crypto/ec/asm/x25519-x86_64.pl b/crypto/ec/asm/x25519-x86_64.pl
index 68a7771..9a56939 100755
--- a/crypto/ec/asm/x25519-x86_64.pl
+++ b/crypto/ec/asm/x25519-x86_64.pl
@@ -815,4 +815,4 @@ ___
 
 $code =~ s/\`([^\`]*)\`/eval $1/gem;
 print $code;
-close $STDOUT;
+close STDOUT;

From builds at travis-ci.org  Tue Feb 27 20:54:31 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 20:54:31 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16633 (master - 4c861b3)
In-Reply-To: <openssl/openssl+346964281+errored@travis-ci.org>
Message-ID: <5a95c58719e0e_43f9fc13eacc455497@40fe3d70-6292-4d01-970c-5e1503a58b97.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16633
Status: Errored

Duration: 35 minutes and 44 seconds
Commit: 4c861b3 (master)
Author: Richard Levitte
Message: crypto/ec/asm/x25519-x86_64.pl: close STDOUT, not $STDOUT

Fixes #5471

Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5472)

View the changeset: https://github.com/openssl/openssl/compare/d070b4ae78a1...4c861b381667

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346964281?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/3207fff4/attachment-0001.html>

From rsalz at openssl.org  Tue Feb 27 21:06:15 2018
From: rsalz at openssl.org (Rich Salz)
Date: Tue, 27 Feb 2018 21:06:15 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519765575.626463.23124.nullmailer@dev.openssl.org>

The branch master has been updated
       via  22defb43507ce026a9eb717df433f1ba7531ffe7 (commit)
      from  4c861b381667b8e496483bf89f72674ad7e5fc25 (commit)


- Log -----------------------------------------------------------------
commit 22defb43507ce026a9eb717df433f1ba7531ffe7
Author: Rich Salz <rsalz at openssl.org>
Date:   Tue Feb 27 15:14:18 2018 -0500

    Make some perl scripts output to stdout
    
    And only generate one output "file" at a time for objects.pl
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5432)

-----------------------------------------------------------------------

Summary of changes:
 Configurations/unix-Makefile.tmpl |  9 ++++++--
 crypto/objects/obj_dat.pl         | 45 ++++++++++++++++++---------------------
 crypto/objects/objects.pl         | 35 ++++++++++++++++--------------
 3 files changed, 47 insertions(+), 42 deletions(-)

diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
index 78b1a5e..6c0eb42 100644
--- a/Configurations/unix-Makefile.tmpl
+++ b/Configurations/unix-Makefile.tmpl
@@ -651,13 +651,18 @@ generate_crypto_bn:
 	( cd $(SRCDIR); $(PERL) crypto/bn/bn_prime.pl > crypto/bn/bn_prime.h )
 
 generate_crypto_objects:
+	( cd $(SRCDIR); $(PERL) crypto/objects/objects.pl -n \
+				crypto/objects/objects.txt \
+				crypto/objects/obj_mac.num \
+				> crypto/objects/obj_mac.new && \
+	    mv crypto/objects/obj_mac.new crypto/objects/obj_mac.num )
 	( cd $(SRCDIR); $(PERL) crypto/objects/objects.pl \
 				crypto/objects/objects.txt \
 				crypto/objects/obj_mac.num \
-				include/openssl/obj_mac.h )
+				> include/openssl/obj_mac.h )
 	( cd $(SRCDIR); $(PERL) crypto/objects/obj_dat.pl \
 				include/openssl/obj_mac.h \
-				crypto/objects/obj_dat.h )
+				> crypto/objects/obj_dat.h )
 	( cd $(SRCDIR); $(PERL) crypto/objects/objxref.pl \
 				crypto/objects/obj_mac.num \
 				crypto/objects/obj_xref.txt \
diff --git a/crypto/objects/obj_dat.pl b/crypto/objects/obj_dat.pl
index 392617c..e80900d 100644
--- a/crypto/objects/obj_dat.pl
+++ b/crypto/objects/obj_dat.pl
@@ -152,8 +152,7 @@ for (my $i = 0; $i < $n; $i++) {
 }
 
 # Finally ready to generate the output.
-open(OUT, ">$ARGV[1]") || die "Can't open output file $ARGV[1], $!";
-print OUT <<"EOF";
+print <<"EOF";
 /*
  * WARNING: do not edit!
  * Generated by crypto/objects/obj_dat.pl
@@ -167,44 +166,44 @@ print OUT <<"EOF";
 
 EOF
 
-print OUT "/* Serialized OID's */\n";
-printf OUT "static const unsigned char so[%d] = {\n", $lvalues + 1;
-print OUT @lvalues;
-print OUT "};\n\n";
+print "/* Serialized OID's */\n";
+printf "static const unsigned char so[%d] = {\n", $lvalues + 1;
+print @lvalues;
+print "};\n\n";
 
-printf OUT "#define NUM_NID %d\n", $n;
-printf OUT "static const ASN1_OBJECT nid_objs[NUM_NID] = {\n";
-print OUT @out;
-print  OUT "};\n\n";
+printf "#define NUM_NID %d\n", $n;
+printf "static const ASN1_OBJECT nid_objs[NUM_NID] = {\n";
+print @out;
+print  "};\n\n";
 
 {
     no warnings "uninitialized";
     @a = grep(defined $sn{$nid{$_}}, 0 .. $n);
 }
-printf OUT "#define NUM_SN %d\n", $#a + 1;
-printf OUT "static const unsigned int sn_objs[NUM_SN] = {\n";
+printf "#define NUM_SN %d\n", $#a + 1;
+printf "static const unsigned int sn_objs[NUM_SN] = {\n";
 foreach (sort { $sn{$nid{$a}} cmp $sn{$nid{$b}} } @a) {
-    printf OUT "    %4d,    /* \"$sn{$nid{$_}}\" */\n", $_;
+    printf "    %4d,    /* \"$sn{$nid{$_}}\" */\n", $_;
 }
-print  OUT "};\n\n";
+print  "};\n\n";
 
 {
     no warnings "uninitialized";
     @a = grep(defined $ln{$nid{$_}}, 0 .. $n);
 }
-printf OUT "#define NUM_LN %d\n", $#a + 1;
-printf OUT "static const unsigned int ln_objs[NUM_LN] = {\n";
+printf "#define NUM_LN %d\n", $#a + 1;
+printf "static const unsigned int ln_objs[NUM_LN] = {\n";
 foreach (sort { $ln{$nid{$a}} cmp $ln{$nid{$b}} } @a) {
-    printf OUT "    %4d,    /* \"$ln{$nid{$_}}\" */\n", $_;
+    printf "    %4d,    /* \"$ln{$nid{$_}}\" */\n", $_;
 }
-print  OUT "};\n\n";
+print  "};\n\n";
 
 {
     no warnings "uninitialized";
     @a = grep(defined $obj{$nid{$_}}, 0 .. $n);
 }
-printf OUT "#define NUM_OBJ %d\n", $#a + 1;
-printf OUT "static const unsigned int obj_objs[NUM_OBJ] = {\n";
+printf "#define NUM_OBJ %d\n", $#a + 1;
+printf "static const unsigned int obj_objs[NUM_OBJ] = {\n";
 
 # Compare DER; prefer shorter; if some length, use the "smaller" encoding.
 sub obj_cmp
@@ -224,8 +223,6 @@ foreach (sort obj_cmp @a) {
     my $v = $objd{$m};
     $v =~ s/L//g;
     $v =~ s/,/ /g;
-    printf OUT "    %4d,    /* %-32s %s */\n", $_, $m, $v;
+    printf "    %4d,    /* %-32s %s */\n", $_, $m, $v;
 }
-print  OUT "};\n";
-
-close OUT;
+print  "};\n";
diff --git a/crypto/objects/objects.pl b/crypto/objects/objects.pl
index 20f726d..8f9b67f 100644
--- a/crypto/objects/objects.pl
+++ b/crypto/objects/objects.pl
@@ -6,7 +6,12 @@
 # in the file LICENSE in the source distribution or at
 # https://www.openssl.org/source/license.html
 
-# Output year depends on the year of the script and the input files.
+use Getopt::Std;
+
+our($opt_n);
+getopts('n');
+
+# Output year depends on the year of the script and the input file.
 my $YEAR = [localtime([stat($0)]->[9])]->[5] + 1900;
 my $iYEAR = [localtime([stat($ARGV[0])]->[9])]->[5] + 1900;
 $YEAR = $iYEAR if $iYEAR > $YEAR;
@@ -123,15 +128,15 @@ print STDERR "Added OID $Cname\n";
 	}
 close IN;
 
-open (NUMOUT,">$ARGV[1]") || die "Can't open output file $ARGV[1]";
-foreach (sort { $a <=> $b } keys %nidn)
-	{
-	print NUMOUT $nidn{$_},"\t\t",$_,"\n";
-	}
-close NUMOUT;
+if ( $opt_n ) {
+    foreach (sort { $a <=> $b } keys %nidn)
+            {
+            print $nidn{$_},"\t\t",$_,"\n";
+            }
+    exit;
+}
 
-open (OUT,">$ARGV[2]") || die "Can't open output file $ARGV[2]";
-print OUT <<"EOF";
+print <<"EOF";
 /*
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
@@ -161,15 +166,13 @@ sub expand
 foreach (sort { $a <=> $b } keys %ordern)
 	{
 	$Cname=$ordern{$_};
-	print OUT "\n";
-	print OUT expand("#define SN_$Cname\t\t\"$sn{$Cname}\"\n") if $sn{$Cname} ne "";
-	print OUT expand("#define LN_$Cname\t\t\"$ln{$Cname}\"\n") if $ln{$Cname} ne "";
-	print OUT expand("#define NID_$Cname\t\t$nid{$Cname}\n") if $nid{$Cname} ne "";
-	print OUT expand("#define OBJ_$Cname\t\t$obj{$Cname}\n") if $obj{$Cname} ne "";
+	print "\n";
+	print expand("#define SN_$Cname\t\t\"$sn{$Cname}\"\n") if $sn{$Cname} ne "";
+	print expand("#define LN_$Cname\t\t\"$ln{$Cname}\"\n") if $ln{$Cname} ne "";
+	print expand("#define NID_$Cname\t\t$nid{$Cname}\n") if $nid{$Cname} ne "";
+	print expand("#define OBJ_$Cname\t\t$obj{$Cname}\n") if $obj{$Cname} ne "";
 	}
 
-close OUT;
-
 sub process_oid
 	{
 	local($oid)=@_;

From levitte at openssl.org  Tue Feb 27 21:19:53 2018
From: levitte at openssl.org (Richard Levitte)
Date: Tue, 27 Feb 2018 21:19:53 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519766393.503968.25949.nullmailer@dev.openssl.org>

The branch master has been updated
       via  89f66fe2bc4fc9bf5eb17a377cd9561f46985222 (commit)
      from  22defb43507ce026a9eb717df433f1ba7531ffe7 (commit)


- Log -----------------------------------------------------------------
commit 89f66fe2bc4fc9bf5eb17a377cd9561f46985222
Author: xemdetia <xemdetia at 808inorganic.com>
Date:   Tue Feb 27 15:29:32 2018 -0500

    Fix documentation link to reference man3
    
    CLA: trivial
    
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5473)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/EVP_DigestInit.pod | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/man3/EVP_DigestInit.pod b/doc/man3/EVP_DigestInit.pod
index 187292f..45c361e 100644
--- a/doc/man3/EVP_DigestInit.pod
+++ b/doc/man3/EVP_DigestInit.pod
@@ -217,8 +217,8 @@ preference to the low level interfaces. This is because the code then becomes
 transparent to the digest used and much more flexible.
 
 New applications should use the SHA-2 (such as L<EVP_sha256(3)>) or the SHA-3
-digest algorithms (such as L<EVP_sha3_512>). The other digest algorithms are
-still in common use.
+digest algorithms (such as L<EVP_sha3_512(3)>). The other digest algorithms
+are still in common use.
 
 For most applications the B<impl> parameter to EVP_DigestInit_ex() will be
 set to NULL to use the default digest implementation.

From builds at travis-ci.org  Tue Feb 27 22:05:22 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 22:05:22 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16637 (master - 89f66fe)
In-Reply-To: <openssl/openssl+346990688+errored@travis-ci.org>
Message-ID: <5a95d622ae2cb_43fc6ffbdd6886541f7@45cdde4e-54ce-44c0-9131-5f45dfed6287.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16637
Status: Errored

Duration: 42 minutes and 46 seconds
Commit: 89f66fe (master)
Author: xemdetia
Message: Fix documentation link to reference man3

CLA: trivial

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5473)

View the changeset: https://github.com/openssl/openssl/compare/22defb43507c...89f66fe2bc4f

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346990688?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/b434e9aa/attachment.html>

From builds at travis-ci.org  Tue Feb 27 21:51:24 2018
From: builds at travis-ci.org (Travis CI)
Date: Tue, 27 Feb 2018 21:51:24 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16636 (master - 22defb4)
In-Reply-To: <openssl/openssl+346984526+errored@travis-ci.org>
Message-ID: <5a95d2dcbc02f_43f9fc706a850665193@40fe3d70-6292-4d01-970c-5e1503a58b97.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16636
Status: Errored

Duration: 41 minutes and 10 seconds
Commit: 22defb4 (master)
Author: Rich Salz
Message: Make some perl scripts output to stdout

And only generate one output "file" at a time for objects.pl

Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5432)

View the changeset: https://github.com/openssl/openssl/compare/4c861b381667...22defb43507c

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/346984526?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180227/0c215b89/attachment-0001.html>

From davidben at google.com  Wed Feb 28 00:08:17 2018
From: davidben at google.com (davidben at google.com)
Date: Wed, 28 Feb 2018 00:08:17 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519776497.704857.16527.nullmailer@dev.openssl.org>

The branch master has been updated
       via  8a5d8bc4bc1e835b62d988ad63454540be83d862 (commit)
      from  89f66fe2bc4fc9bf5eb17a377cd9561f46985222 (commit)


- Log -----------------------------------------------------------------
commit 8a5d8bc4bc1e835b62d988ad63454540be83d862
Author: David Benjamin <davidben at google.com>
Date:   Wed Feb 21 18:50:21 2018 -0500

    Always use adr with __thumb2__.
    
    Thumb2 addresses are a bit a mess, depending on whether a label is
    interpreted as a function pointer value (for use with BX and BLX) or as
    a program counter value (for use with PC-relative addressing). Clang's
    integrated assembler mis-assembles this code. See
    https://crbug.com/124610#c54 for details.
    
    Instead, use the ADR pseudo-instruction which has clear semantics and
    should be supported by every assembler that handles the OpenSSL Thumb2
    code. (In other files, the ADR vs SUB conditionals are based on
    __thumb2__ already. For some reason, this one is based on __APPLE__, I'm
    guessing to deal with an older version of clang assembler.)
    
    It's unclear to me which of clang or binutils is "correct" or if this is
    even a well-defined notion beyond "whatever binutils does". But I will
    note that https://github.com/openssl/openssl/pull/4669 suggests binutils
    has also changed behavior around this before.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5431)

-----------------------------------------------------------------------

Summary of changes:
 crypto/aes/asm/aes-armv4.pl   | 6 +++---
 crypto/aes/asm/bsaes-armv7.pl | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/crypto/aes/asm/aes-armv4.pl b/crypto/aes/asm/aes-armv4.pl
index c6474b8..2fa0755 100644
--- a/crypto/aes/asm/aes-armv4.pl
+++ b/crypto/aes/asm/aes-armv4.pl
@@ -203,7 +203,7 @@ AES_encrypt:
 	adr	r3,.
 #endif
 	stmdb   sp!,{r1,r4-r12,lr}
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$tbl,AES_Te
 #else
 	sub	$tbl,r3,#AES_encrypt-AES_Te	@ Te
@@ -481,7 +481,7 @@ _armv4_AES_set_encrypt_key:
 	mov	lr,r1			@ bits
 	mov	$key,r2			@ key
 
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$tbl,AES_Te+1024				@ Te4
 #else
 	sub	$tbl,r3,#_armv4_AES_set_encrypt_key-AES_Te-1024	@ Te4
@@ -979,7 +979,7 @@ AES_decrypt:
 	adr	r3,.
 #endif
 	stmdb   sp!,{r1,r4-r12,lr}
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$tbl,AES_Td
 #else
 	sub	$tbl,r3,#AES_decrypt-AES_Td	@ Td
diff --git a/crypto/aes/asm/bsaes-armv7.pl b/crypto/aes/asm/bsaes-armv7.pl
index 0c5e762..8a5f3f1 100644
--- a/crypto/aes/asm/bsaes-armv7.pl
+++ b/crypto/aes/asm/bsaes-armv7.pl
@@ -742,7 +742,7 @@ $code.=<<___;
 _bsaes_decrypt8:
 	adr	$const,.
 	vldmia	$key!, {@XMM[9]}		@ round 0 key
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$const,.LM0ISR
 #else
 	add	$const,$const,#.LM0ISR-_bsaes_decrypt8
@@ -841,7 +841,7 @@ _bsaes_const:
 _bsaes_encrypt8:
 	adr	$const,.
 	vldmia	$key!, {@XMM[9]}		@ round 0 key
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$const,.LM0SR
 #else
 	sub	$const,$const,#_bsaes_encrypt8-.LM0SR
@@ -949,7 +949,7 @@ $code.=<<___;
 _bsaes_key_convert:
 	adr	$const,.
 	vld1.8	{@XMM[7]},  [$inp]!		@ load round 0 key
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$const,.LM0
 #else
 	sub	$const,$const,#_bsaes_key_convert-.LM0

From builds at travis-ci.org  Wed Feb 28 00:24:32 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 28 Feb 2018 00:24:32 +0000
Subject: [openssl-commits] Passed: openssl/openssl#16639 (master - 8a5d8bc)
In-Reply-To: <openssl/openssl+347051163+passed@travis-ci.org>
Message-ID: <5a95f6bfe8b66_43fc6ff9f5cd0801928@45cdde4e-54ce-44c0-9131-5f45dfed6287.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16639
Status: Passed

Duration: 32 minutes and 45 seconds
Commit: 8a5d8bc (master)
Author: David Benjamin
Message: Always use adr with __thumb2__.

Thumb2 addresses are a bit a mess, depending on whether a label is
interpreted as a function pointer value (for use with BX and BLX) or as
a program counter value (for use with PC-relative addressing). Clang's
integrated assembler mis-assembles this code. See
https://crbug.com/124610#c54 for details.

Instead, use the ADR pseudo-instruction which has clear semantics and
should be supported by every assembler that handles the OpenSSL Thumb2
code. (In other files, the ADR vs SUB conditionals are based on
__thumb2__ already. For some reason, this one is based on __APPLE__, I'm
guessing to deal with an older version of clang assembler.)

It's unclear to me which of clang or binutils is "correct" or if this is
even a well-defined notion beyond "whatever binutils does". But I will
note that https://github.com/openssl/openssl/pull/4669 suggests binutils
has also changed behavior around this before.

Reviewed-by: Andy Polyakov <appro at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5431)

View the changeset: https://github.com/openssl/openssl/compare/89f66fe2bc4f...8a5d8bc4bc1e

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/347051163?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180228/58a2f6c5/attachment.html>

From appro at openssl.org  Wed Feb 28 11:00:43 2018
From: appro at openssl.org (Andy Polyakov)
Date: Wed, 28 Feb 2018 11:00:43 +0000
Subject: [openssl-commits] [openssl]  OpenSSL_1_1_0-stable update
Message-ID: <1519815643.832912.16459.nullmailer@dev.openssl.org>

The branch OpenSSL_1_1_0-stable has been updated
       via  fa9ab9ee91c28b755f8fc51d4c45042e6798ce6b (commit)
      from  5eb9a426d953b17c377b87315d0666c86126022f (commit)


- Log -----------------------------------------------------------------
commit fa9ab9ee91c28b755f8fc51d4c45042e6798ce6b
Author: David Benjamin <davidben at google.com>
Date:   Wed Feb 21 18:50:21 2018 -0500

    Always use adr with __thumb2__.
    
    Thumb2 addresses are a bit a mess, depending on whether a label is
    interpreted as a function pointer value (for use with BX and BLX) or as
    a program counter value (for use with PC-relative addressing). Clang's
    integrated assembler mis-assembles this code. See
    https://crbug.com/124610#c54 for details.
    
    Instead, use the ADR pseudo-instruction which has clear semantics and
    should be supported by every assembler that handles the OpenSSL Thumb2
    code. (In other files, the ADR vs SUB conditionals are based on
    __thumb2__ already. For some reason, this one is based on __APPLE__, I'm
    guessing to deal with an older version of clang assembler.)
    
    It's unclear to me which of clang or binutils is "correct" or if this is
    even a well-defined notion beyond "whatever binutils does". But I will
    note that https://github.com/openssl/openssl/pull/4669 suggests binutils
    has also changed behavior around this before.
    
    Reviewed-by: Andy Polyakov <appro at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5431)
    
    (cherry picked from commit 8a5d8bc4bc1e835b62d988ad63454540be83d862)

-----------------------------------------------------------------------

Summary of changes:
 crypto/aes/asm/aes-armv4.pl   | 6 +++---
 crypto/aes/asm/bsaes-armv7.pl | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/crypto/aes/asm/aes-armv4.pl b/crypto/aes/asm/aes-armv4.pl
index c6474b8..2fa0755 100644
--- a/crypto/aes/asm/aes-armv4.pl
+++ b/crypto/aes/asm/aes-armv4.pl
@@ -203,7 +203,7 @@ AES_encrypt:
 	adr	r3,.
 #endif
 	stmdb   sp!,{r1,r4-r12,lr}
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$tbl,AES_Te
 #else
 	sub	$tbl,r3,#AES_encrypt-AES_Te	@ Te
@@ -481,7 +481,7 @@ _armv4_AES_set_encrypt_key:
 	mov	lr,r1			@ bits
 	mov	$key,r2			@ key
 
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$tbl,AES_Te+1024				@ Te4
 #else
 	sub	$tbl,r3,#_armv4_AES_set_encrypt_key-AES_Te-1024	@ Te4
@@ -979,7 +979,7 @@ AES_decrypt:
 	adr	r3,.
 #endif
 	stmdb   sp!,{r1,r4-r12,lr}
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$tbl,AES_Td
 #else
 	sub	$tbl,r3,#AES_decrypt-AES_Td	@ Td
diff --git a/crypto/aes/asm/bsaes-armv7.pl b/crypto/aes/asm/bsaes-armv7.pl
index a27bb4a..5cd57f6 100644
--- a/crypto/aes/asm/bsaes-armv7.pl
+++ b/crypto/aes/asm/bsaes-armv7.pl
@@ -746,7 +746,7 @@ $code.=<<___;
 _bsaes_decrypt8:
 	adr	$const,.
 	vldmia	$key!, {@XMM[9]}		@ round 0 key
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$const,.LM0ISR
 #else
 	add	$const,$const,#.LM0ISR-_bsaes_decrypt8
@@ -845,7 +845,7 @@ _bsaes_const:
 _bsaes_encrypt8:
 	adr	$const,.
 	vldmia	$key!, {@XMM[9]}		@ round 0 key
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$const,.LM0SR
 #else
 	sub	$const,$const,#_bsaes_encrypt8-.LM0SR
@@ -953,7 +953,7 @@ $code.=<<___;
 _bsaes_key_convert:
 	adr	$const,.
 	vld1.8	{@XMM[7]},  [$inp]!		@ load round 0 key
-#ifdef	__APPLE__
+#if defined(__thumb2__) || defined(__APPLE__)
 	adr	$const,.LM0
 #else
 	sub	$const,$const,#_bsaes_key_convert-.LM0

From openssl at openssl.org  Wed Feb 28 11:04:39 2018
From: openssl at openssl.org (OpenSSL run-checker)
Date: Wed, 28 Feb 2018 11:04:39 +0000
Subject: [openssl-commits] Still FAILED build of OpenSSL branch master with
	options -d --strict-warnings no-ocsp
Message-ID: <1519815879.949455.419.nullmailer@run.openssl.org>

Platform and configuration command:

$ uname -a
Linux run 4.4.0-96-generic #119-Ubuntu SMP Tue Sep 12 14:59:54 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-ocsp

Commit log since last time:

89f66fe Fix documentation link to reference man3
22defb4 Make some perl scripts output to stdout
4c861b3 crypto/ec/asm/x25519-x86_64.pl: close STDOUT, not $STDOUT
b700bc5 configdata.pm: ensure $prefix is defined
d070b4a bio_b64.c: prevent base64 filter BIO from decoding out-of-bound data
9763f15 Prepare for 1.1.1-pre3-dev
6941960 Prepare for 1.1.1-pre2 release
0d66475 Update copyright year
34ff74e Clear some sslapitest global variables after use

Build log ended with (last 100 lines):

ar: creating apps/libapps.a
ranlib apps/libapps.a || echo Never mind.
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aes-x86_64.d.tmp -MT crypto/aes/aes-x86_64.o -c -o crypto/aes/aes-x86_64.o crypto/aes/aes-x86_64.s
chmod a+x tools/c_rehash
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-mb-x86_64.d.tmp -MT crypto/aes/aesni-mb-x86_64.o -c -o crypto/aes/aesni-mb-x86_64.o crypto/aes/aesni-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-sha1-x86_64.d.tmp -MT crypto/aes/aesni-sha1-x86_64.o -c -o crypto/aes/aesni-sha1-x86_64.o crypto/aes/aesni-sha1-x86_64.s
chmod a+x util/shlib_wrap.sh
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-sha256-x86_64.d.tmp -MT crypto/aes/aesni-sha256-x86_64.o -c -o crypto/aes/aesni-sha256-x86_64.o crypto/aes/aesni-sha256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/aesni-x86_64.d.tmp -MT crypto/aes/aesni-x86_64.o -c -o crypto/aes/aesni-x86_64.o crypto/aes/aesni-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/bsaes-x86_64.d.tmp -MT crypto/aes/bsaes-x86_64.o -c -o crypto/aes/bsaes-x86_64.o crypto/aes/bsaes-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/aes/vpaes-x86_64.d.tmp -MT crypto/aes/vpaes-x86_64.o -c -o crypto/aes/vpaes-x86_64.o crypto/aes/vpaes-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/rsaz-avx2.d.tmp -MT crypto/bn/rsaz-avx2.o -c -o crypto/bn/rsaz-avx2.o crypto/bn/rsaz-avx2.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/rsaz-x86_64.d.tmp -MT crypto/bn/rsaz-x86_64.o -c -o crypto/bn/rsaz-x86_64.o crypto/bn/rsaz-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-gf2m.d.tmp -MT crypto/bn/x86_64-gf2m.o -c -o crypto/bn/x86_64-gf2m.o crypto/bn/x86_64-gf2m.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-mont.d.tmp -MT crypto/bn/x86_64-mont.o -c -o crypto/bn/x86_64-mont.o crypto/bn/x86_64-mont.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/bn/x86_64-mont5.d.tmp -MT crypto/bn/x86_64-mont5.o -c -o crypto/bn/x86_64-mont5.o crypto/bn/x86_64-mont5.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/camellia/cmll-x86_64.d.tmp -MT crypto/camellia/cmll-x86_64.o -c -o crypto/camellia/cmll-x86_64.o crypto/camellia/cmll-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/chacha/chacha-x86_64.d.tmp -MT crypto/chacha/chacha-x86_64.o -c -o crypto/chacha/chacha-x86_64.o crypto/chacha/chacha-x86_64.s
clang  -I. -Icrypto/include -Iinclude -Icrypto -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/cversion.d.tmp -MT crypto/cversion.o -c -o crypto/cversion.o ../openssl/crypto/cversion.c
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/ec/ecp_nistz256-x86_64.d.tmp -MT crypto/ec/ecp_nistz256-x86_64.o -c -o crypto/ec/ecp_nistz256-x86_64.o crypto/ec/ecp_nistz256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/ec/x25519-x86_64.d.tmp -MT crypto/ec/x25519-x86_64.o -c -o crypto/ec/x25519-x86_64.o crypto/ec/x25519-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/md5/md5-x86_64.d.tmp -MT crypto/md5/md5-x86_64.o -c -o crypto/md5/md5-x86_64.o crypto/md5/md5-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/modes/aesni-gcm-x86_64.d.tmp -MT crypto/modes/aesni-gcm-x86_64.o -c -o crypto/modes/aesni-gcm-x86_64.o crypto/modes/aesni-gcm-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/modes/ghash-x86_64.d.tmp -MT crypto/modes/ghash-x86_64.o -c -o crypto/modes/ghash-x86_64.o crypto/modes/ghash-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/poly1305/poly1305-x86_64.d.tmp -MT crypto/poly1305/poly1305-x86_64.o -c -o crypto/poly1305/poly1305-x86_64.o crypto/poly1305/poly1305-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/rc4/rc4-md5-x86_64.d.tmp -MT crypto/rc4/rc4-md5-x86_64.o -c -o crypto/rc4/rc4-md5-x86_64.o crypto/rc4/rc4-md5-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/rc4/rc4-x86_64.d.tmp -MT crypto/rc4/rc4-x86_64.o -c -o crypto/rc4/rc4-x86_64.o crypto/rc4/rc4-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha1-mb-x86_64.d.tmp -MT crypto/sha/sha1-mb-x86_64.o -c -o crypto/sha/sha1-mb-x86_64.o crypto/sha/sha1-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha1-x86_64.d.tmp -MT crypto/sha/sha1-x86_64.o -c -o crypto/sha/sha1-x86_64.o crypto/sha/sha1-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha256-mb-x86_64.d.tmp -MT crypto/sha/sha256-mb-x86_64.o -c -o crypto/sha/sha256-mb-x86_64.o crypto/sha/sha256-mb-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha256-x86_64.d.tmp -MT crypto/sha/sha256-x86_64.o -c -o crypto/sha/sha256-x86_64.o crypto/sha/sha256-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/sha/sha512-x86_64.d.tmp -MT crypto/sha/sha512-x86_64.o -c -o crypto/sha/sha512-x86_64.o crypto/sha/sha512-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/whrlpool/wp-x86_64.d.tmp -MT crypto/whrlpool/wp-x86_64.o -c -o crypto/whrlpool/wp-x86_64.o crypto/whrlpool/wp-x86_64.s
clang  -I. -Icrypto/include -Iinclude -I../openssl -I../openssl/crypto/include -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-1.1\"" -c -MMD -MF crypto/x86_64cpuid.d.tmp -MT crypto/x86_64cpuid.o -c -o crypto/x86_64cpuid.o crypto/x86_64cpuid.s
ar r libssl.a ssl/bio_ssl.o ssl/d1_lib.o ssl/d1_msg.o ssl/d1_srtp.o ssl/methods.o ssl/packet.o ssl/pqueue.o ssl/record/dtls1_bitmap.o ssl/record/rec_layer_d1.o ssl/record/rec_layer_s3.o ssl/record/ssl3_buffer.o ssl/record/ssl3_record.o ssl/record/ssl3_record_tls13.o ssl/s3_cbc.o ssl/s3_enc.o ssl/s3_lib.o ssl/s3_msg.o ssl/ssl_asn1.o ssl/ssl_cert.o ssl/ssl_ciph.o ssl/ssl_conf.o ssl/ssl_err.o ssl/ssl_init.o ssl/ssl_lib.o ssl/ssl_mcnf.o ssl/ssl_rsa.o ssl/ssl_sess.o ssl/ssl_stat.o ssl/ssl_txt.o ssl/ssl_utst.o ssl/statem/extensions.o ssl/statem/extensions_clnt.o ssl/statem/extensions_cust.o ssl/statem/extensions_srvr.o ssl/statem/statem.o ssl/statem/statem_clnt.o ssl/statem/statem_dtls.o ssl/statem/statem_lib.o ssl/statem/statem_srvr.o ssl/t1_enc.o ssl/t1_lib.o ssl/t1_trce.o ssl/tls13_enc.o ssl/tls_srp.o
ar: creating libssl.a
ranlib libssl.a || echo Never mind.
ar r test/libtestutil.a test/testutil/basic_output.o test/testutil/cb.o test/testutil/driver.o test/testutil/format_output.o test/testutil/init.o test/testutil/main.o test/testutil/output_helpers.o test/testutil/stanza.o test/testutil/tap_bio.o test/testutil/test_cleanup.o test/testutil/tests.o
ar: creating test/libtestutil.a
ranlib test/libtestutil.a || echo Never mind.
clang  -Iinclude -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -fPIC -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF engines/e_padlock-x86_64.d.tmp -MT engines/e_padlock-x86_64.o -c -o engines/e_padlock-x86_64.o engines/e_padlock-x86_64.s
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/asn1pars.d.tmp -MT apps/asn1pars.o -c -o apps/asn1pars.o ../openssl/apps/asn1pars.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ca.d.tmp -MT apps/ca.o -c -o apps/ca.o ../openssl/apps/ca.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ciphers.d.tmp -MT apps/ciphers.o -c -o apps/ciphers.o ../openssl/apps/ciphers.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/cms.d.tmp -MT apps/cms.o -c -o apps/cms.o ../openssl/apps/cms.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/crl.d.tmp -MT apps/crl.o -c -o apps/crl.o ../openssl/apps/crl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/crl2p7.d.tmp -MT apps/crl2p7.o -c -o apps/crl2p7.o ../openssl/apps/crl2p7.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dgst.d.tmp -MT apps/dgst.o -c -o apps/dgst.o ../openssl/apps/dgst.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dhparam.d.tmp -MT apps/dhparam.o -c -o apps/dhparam.o ../openssl/apps/dhparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dsa.d.tmp -MT apps/dsa.o -c -o apps/dsa.o ../openssl/apps/dsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/dsaparam.d.tmp -MT apps/dsaparam.o -c -o apps/dsaparam.o ../openssl/apps/dsaparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ec.d.tmp -MT apps/ec.o -c -o apps/ec.o ../openssl/apps/ec.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ecparam.d.tmp -MT apps/ecparam.o -c -o apps/ecparam.o ../openssl/apps/ecparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/enc.d.tmp -MT apps/enc.o -c -o apps/enc.o ../openssl/apps/enc.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/engine.d.tmp -MT apps/engine.o -c -o apps/engine.o ../openssl/apps/engine.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/errstr.d.tmp -MT apps/errstr.o -c -o apps/errstr.o ../openssl/apps/errstr.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/gendsa.d.tmp -MT apps/gendsa.o -c -o apps/gendsa.o ../openssl/apps/gendsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/genpkey.d.tmp -MT apps/genpkey.o -c -o apps/genpkey.o ../openssl/apps/genpkey.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/genrsa.d.tmp -MT apps/genrsa.o -c -o apps/genrsa.o ../openssl/apps/genrsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/nseq.d.tmp -MT apps/nseq.o -c -o apps/nseq.o ../openssl/apps/nseq.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ocsp.d.tmp -MT apps/ocsp.o -c -o apps/ocsp.o ../openssl/apps/ocsp.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/openssl.d.tmp -MT apps/openssl.o -c -o apps/openssl.o ../openssl/apps/openssl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/passwd.d.tmp -MT apps/passwd.o -c -o apps/passwd.o ../openssl/apps/passwd.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs12.d.tmp -MT apps/pkcs12.o -c -o apps/pkcs12.o ../openssl/apps/pkcs12.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs7.d.tmp -MT apps/pkcs7.o -c -o apps/pkcs7.o ../openssl/apps/pkcs7.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkcs8.d.tmp -MT apps/pkcs8.o -c -o apps/pkcs8.o ../openssl/apps/pkcs8.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkey.d.tmp -MT apps/pkey.o -c -o apps/pkey.o ../openssl/apps/pkey.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkeyparam.d.tmp -MT apps/pkeyparam.o -c -o apps/pkeyparam.o ../openssl/apps/pkeyparam.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/pkeyutl.d.tmp -MT apps/pkeyutl.o -c -o apps/pkeyutl.o ../openssl/apps/pkeyutl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/prime.d.tmp -MT apps/prime.o -c -o apps/prime.o ../openssl/apps/prime.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rand.d.tmp -MT apps/rand.o -c -o apps/rand.o ../openssl/apps/rand.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rehash.d.tmp -MT apps/rehash.o -c -o apps/rehash.o ../openssl/apps/rehash.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/req.d.tmp -MT apps/req.o -c -o apps/req.o ../openssl/apps/req.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rsa.d.tmp -MT apps/rsa.o -c -o apps/rsa.o ../openssl/apps/rsa.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/rsautl.d.tmp -MT apps/rsautl.o -c -o apps/rsautl.o ../openssl/apps/rsautl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_client.d.tmp -MT apps/s_client.o -c -o apps/s_client.o ../openssl/apps/s_client.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_server.d.tmp -MT apps/s_server.o -c -o apps/s_server.o ../openssl/apps/s_server.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/s_time.d.tmp -MT apps/s_time.o -c -o apps/s_time.o ../openssl/apps/s_time.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/sess_id.d.tmp -MT apps/sess_id.o -c -o apps/sess_id.o ../openssl/apps/sess_id.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/smime.d.tmp -MT apps/smime.o -c -o apps/smime.o ../openssl/apps/smime.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/speed.d.tmp -MT apps/speed.o -c -o apps/speed.o ../openssl/apps/speed.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/spkac.d.tmp -MT apps/spkac.o -c -o apps/spkac.o ../openssl/apps/spkac.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/srp.d.tmp -MT apps/srp.o -c -o apps/srp.o ../openssl/apps/srp.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/storeutl.d.tmp -MT apps/storeutl.o -c -o apps/storeutl.o ../openssl/apps/storeutl.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/ts.d.tmp -MT apps/ts.o -c -o apps/ts.o ../openssl/apps/ts.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/verify.d.tmp -MT apps/verify.o -c -o apps/verify.o ../openssl/apps/verify.c
clang  -I. -Iinclude -Iapps -I../openssl -I../openssl/include -Wall -O0 -g -pthread -m64 -Wextra -Qunused-arguments -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra -Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Wundef -Werror  -Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations -Wno-unknown-warning-option -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSL_USE_NODELETE -DL_ENDIAN -c -MMD -MF apps/version.d.tmp -MT apps/version.o -c -o apps/version.o ../openssl/apps/version.c
../openssl/apps/storeutl.c:184:27: error: implicit declaration of function 's2i_ASN1_INTEGER' is invalid in C99 [-Werror,-Wimplicit-function-declaration]
            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
                          ^
../openssl/apps/storeutl.c:184:25: error: incompatible integer to pointer conversion assigning to 'ASN1_INTEGER *' (aka 'struct asn1_string_st *') from 'int' [-Werror,-Wint-conversion]
            if ((serial = s2i_ASN1_INTEGER(NULL, opt_arg())) == NULL) {
                        ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2 errors generated.
Makefile:6844: recipe for target 'apps/storeutl.o' failed
make[1]: *** [apps/storeutl.o] Error 1
make[1]: *** Waiting for unfinished jobs....
make[1]: Leaving directory '/home/openssl/run-checker/no-ocsp'
Makefile:146: recipe for target 'all' failed
make: *** [all] Error 2

From builds at travis-ci.org  Wed Feb 28 11:14:49 2018
From: builds at travis-ci.org (Travis CI)
Date: Wed, 28 Feb 2018 11:14:49 +0000
Subject: [openssl-commits] Errored: openssl/openssl#16644
	(OpenSSL_1_1_0-stable - fa9ab9e)
In-Reply-To: <openssl/openssl+347216352+errored@travis-ci.org>
Message-ID: <5a968f282b763_43f9fc3df9ac416315a2@40fe3d70-6292-4d01-970c-5e1503a58b97.mail>

Build Update for openssl/openssl
-------------------------------------

Build: #16644
Status: Errored

Duration: 13 minutes and 6 seconds
Commit: fa9ab9e (OpenSSL_1_1_0-stable)
Author: David Benjamin
Message: Always use adr with __thumb2__.

Thumb2 addresses are a bit a mess, depending on whether a label is
interpreted as a function pointer value (for use with BX and BLX) or as
a program counter value (for use with PC-relative addressing). Clang's
integrated assembler mis-assembles this code. See
https://crbug.com/124610#c54 for details.

Instead, use the ADR pseudo-instruction which has clear semantics and
should be supported by every assembler that handles the OpenSSL Thumb2
code. (In other files, the ADR vs SUB conditionals are based on
__thumb2__ already. For some reason, this one is based on __APPLE__, I'm
guessing to deal with an older version of clang assembler.)

It's unclear to me which of clang or binutils is "correct" or if this is
even a well-defined notion beyond "whatever binutils does". But I will
note that https://github.com/openssl/openssl/pull/4669 suggests binutils
has also changed behavior around this before.

Reviewed-by: Andy Polyakov <appro at openssl.org>
Reviewed-by: Rich Salz <rsalz at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5431)

(cherry picked from commit 8a5d8bc4bc1e835b62d988ad63454540be83d862)

View the changeset: https://github.com/openssl/openssl/compare/5eb9a426d953...fa9ab9ee91c2

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/347216352?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180228/4a205ef1/attachment.html>

From rsalz at openssl.org  Wed Feb 28 15:24:42 2018
From: rsalz at openssl.org (Rich Salz)
Date: Wed, 28 Feb 2018 15:24:42 +0000
Subject: [openssl-commits] [web]  master update
Message-ID: <1519831482.200877.10830.nullmailer@dev.openssl.org>

The branch master has been updated
       via  46a84819a178b76996e0ddbe4b6d72b3197153e7 (commit)
      from  8e971cf5d3256e7a1ca7bbb04c28926f36505eb8 (commit)


- Log -----------------------------------------------------------------
commit 46a84819a178b76996e0ddbe4b6d72b3197153e7
Author: Rich Salz <rsalz at akamai.com>
Date:   Wed Feb 28 10:23:36 2018 -0500

    Add Travel Reimbursement policy

-----------------------------------------------------------------------

Summary of changes:
 policies/index.html    |  6 +++--
 policies/sidebar.shtml |  3 +++
 policies/travel.html   | 60 ++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 67 insertions(+), 2 deletions(-)
 create mode 100644 policies/travel.html

diff --git a/policies/index.html b/policies/index.html
index e12703d..71607df 100644
--- a/policies/index.html
+++ b/policies/index.html
@@ -29,10 +29,12 @@
 	      supported.</li>
 	    </ul>
 	    <p>
-	    Put another way, by being as transparent as possible,
+	    By being as transparent as possible,
 	    we hope to reduce the chance that people are surprised by
 	    what we do, and we hope to help maintain predictable
-	    behavior within the project.
+	    behavior within the project. This includes how spend some
+            money, as detailed in the
+            <a href="travel.html">travel reimbursement policy</a>.
 	    </p>
             <p>
 	    The <a href="roadmap.html">Roadmap</a> describes our overall
diff --git a/policies/sidebar.shtml b/policies/sidebar.shtml
index f7cd8c1..389cc51 100644
--- a/policies/sidebar.shtml
+++ b/policies/sidebar.shtml
@@ -16,6 +16,9 @@
 	<a href="releasestrat.html">Release Strategy</a>
       </li>
       <li>
+        <a href="travel.html">Travel Reimbursement Policy</a>.
+      </li>
+      <li>
 	<a href="secpolicy.html">Security Policy</a>
       </li>
       <li>
diff --git a/policies/travel.html b/policies/travel.html
new file mode 100644
index 0000000..5d0f1db
--- /dev/null
+++ b/policies/travel.html
@@ -0,0 +1,60 @@
+<!DOCTYPE html>
+<html lang="en">
+<!--#include virtual="/inc/head.shtml" -->
+
+<body>
+<!--#include virtual="/inc/banner.shtml" -->
+
+<div id="main">
+  <div id="content">
+    <div class="blog-index">
+      <article>
+	<header>
+	  <h2>Travel Reimbursement Policy</h2>
+	  <h5>
+	    First issued 28th February 2014<br/>
+	  </h5>
+	</header>
+
+	<div class="entry-content">
+
+          <p>The OpenSSL project may pay travel expenses for OMC members when
+          pre-approved by the OMC or when it is an official OMC meeting (as
+          determined by vote). Project members may seek to be reimbursed if
+          their employer is not covering the expense. The requirements for
+          reimbursement are:</p>
+
+          <ul>
+            <li>An email sent to openssl-omc, including scanned attachments of
+              all receipts over 30 Euros.</li>
+            <li>Barring exceptional circumstances, for an all-day meeting the
+              project will pay for arrival the day before and departure the
+              following morning.</li>
+            <li>When presenting at a conference, the project will pay the
+              expenses for the entire conference provided the attendee agrees
+              to act as representative of the project during that time.</li>
+            <li>Reasonable lodging and meal expenses during the travel time
+              will be covered.</li>
+            <li>Barring exceptional circumstances, room service, minibar,
+              in-room movies, and other similar amenities are not
+              covered.</li>
+          </ul>
+
+	</div>
+	<footer>
+	  You are here: <a href="/">Home</a>
+	  : <a href="/policies">Policies</a>
+	  : <a href="">Travel Reimbursement Policy</a>
+	  <br/><a href="/sitemap.txt">Sitemap</a>
+	</footer>
+      </article>
+    </div>
+    <!--#include virtual="sidebar.shtml" -->
+  </div>
+</div>
+
+<!--#include virtual="/inc/footer.shtml" -->
+</body>
+
+</html>
+

From no-reply at appveyor.com  Wed Feb 28 17:32:47 2018
From: no-reply at appveyor.com (AppVeyor)
Date: Wed, 28 Feb 2018 17:32:47 +0000
Subject: [openssl-commits] Build failed: openssl master.15943
Message-ID: <20180228173247.1.307A2CDD4543EEC1@appveyor.com>

An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180228/67cd46df/attachment.html>

From levitte at openssl.org  Wed Feb 28 17:40:14 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 28 Feb 2018 17:40:14 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519839614.476007.23338.nullmailer@dev.openssl.org>

The branch master has been updated
       via  946ec58448d664c10ee05c1c8d3c2a3915c9d5f5 (commit)
      from  8a5d8bc4bc1e835b62d988ad63454540be83d862 (commit)


- Log -----------------------------------------------------------------
commit 946ec58448d664c10ee05c1c8d3c2a3915c9d5f5
Author: Richard Levitte <levitte at openssl.org>
Date:   Wed Feb 28 18:08:51 2018 +0100

    storeutl: make sure s2i_ASN1_INTEGER is correctly declared
    
    Reviewed-by: Ben Kaduk <kaduk at mit.edu>
    (Merged from https://github.com/openssl/openssl/pull/5482)

-----------------------------------------------------------------------

Summary of changes:
 apps/storeutl.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/storeutl.c b/apps/storeutl.c
index d40d263..0f310d2 100644
--- a/apps/storeutl.c
+++ b/apps/storeutl.c
@@ -14,6 +14,7 @@
 #include <openssl/err.h>
 #include <openssl/pem.h>
 #include <openssl/store.h>
+#include <openssl/x509v3.h>      /* s2i_ASN1_INTEGER */
 
 static int process(const char *uri, const UI_METHOD *uimeth, PW_CB_DATA *uidata,
                    int expected, int criterion, OSSL_STORE_SEARCH *search,

From levitte at openssl.org  Wed Feb 28 17:46:06 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 28 Feb 2018 17:46:06 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519839966.718024.24713.nullmailer@dev.openssl.org>

The branch master has been updated
       via  6f007824adc40d629e6ad1317d4184ca8bb967fc (commit)
       via  c7702e077da512ba47f25424f24c11bd0c394bc0 (commit)
       via  555c94a0db9661428da0a45cb32b9f002324eefd (commit)
      from  946ec58448d664c10ee05c1c8d3c2a3915c9d5f5 (commit)


- Log -----------------------------------------------------------------
commit 6f007824adc40d629e6ad1317d4184ca8bb967fc
Author: Paul Yang <yang.yang at baishancloud.com>
Date:   Tue Feb 27 10:47:16 2018 +0800

    Fix the type of -out option
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3709)

commit c7702e077da512ba47f25424f24c11bd0c394bc0
Author: Paul Yang <yang.yang at baishancloud.com>
Date:   Tue Feb 13 20:15:34 2018 +0800

    Add test cases for this -out option check
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3709)

commit 555c94a0db9661428da0a45cb32b9f002324eefd
Author: Paul Yang <yang.yang at baishancloud.com>
Date:   Wed Jun 21 23:02:12 2017 +0800

    Check directory is able to create files for various -out option
    
    This is to address issue #3404, only works in Unix-like platforms
    
    Reviewed-by: Matt Caswell <matt at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3709)

-----------------------------------------------------------------------

Summary of changes:
 apps/apps.c                       | 67 +++++++++++++++++++++++++++++++++++++++
 apps/apps.h                       |  1 +
 apps/genrsa.c                     |  2 +-
 apps/opt.c                        | 41 +++++++++++++++++++++---
 apps/sess_id.c                    |  2 +-
 test/recipes/15-test_out_option.t | 60 +++++++++++++++++++++++++++++++++++
 6 files changed, 166 insertions(+), 7 deletions(-)
 create mode 100644 test/recipes/15-test_out_option.t

diff --git a/apps/apps.c b/apps/apps.c
index 0438bdb..3b713f4 100644
--- a/apps/apps.c
+++ b/apps/apps.c
@@ -2340,6 +2340,73 @@ int app_isdir(const char *name)
 }
 #endif
 
+/* app_dirname section */
+
+/*
+ * This exactly follows what POSIX's
+ * dirname does, but is implemented
+ * in a more platform independent way.
+ *
+ * path        dirname
+ * /usr/lib    /usr
+ * /usr/       /
+ * usr         .
+ * /           /
+ * .           .
+ * ..          .
+ * ""          .
+ *
+ * Note: this function also keeps the
+ * possibility of modifying the 'path'
+ * string same as POSIX dirname.
+ */
+static char *posix_dirname(char *path)
+{
+    size_t l;
+    char *ret = ".";
+
+    l = strlen(path);
+    if (l == 0)
+        goto out;
+    if (strcmp(path, ".") == 0)
+        goto out;
+    if (strcmp(path, "..") == 0)
+        goto out;
+    if (strcmp(path, "/") == 0) {
+        ret = "/";
+        goto out;
+    }
+    if (path[l - 1] == '/') {
+        /* /usr/ */
+        path[l - 1] = '\0';
+    }
+    if ((ret = strrchr(path, '/')) == NULL) {
+        /* usr */
+        ret = ".";
+    } else if (ret == path) {
+        /* /usr */
+        *++ret = '\0';
+        ret = path;
+    } else {
+        /* /usr/lib */
+        *ret = '\0';
+        ret = path;
+    }
+ out:
+    return ret;
+}
+
+/*
+ * TODO: implement app_dirname for Windows
+ * and VMS.
+ */
+#if !defined(_WIN32) && !defined(__VMS)
+char *app_dirname(char *path)
+{
+    return posix_dirname(path);
+}
+#endif
+
 /* raw_read|write section */
 #if defined(__VMS)
 # include "vms_term_sock.h"
diff --git a/apps/apps.h b/apps/apps.h
index daaef36..3086f09 100644
--- a/apps/apps.h
+++ b/apps/apps.h
@@ -594,6 +594,7 @@ void store_setup_crl_download(X509_STORE *st);
 
 int app_isdir(const char *);
 int app_access(const char *, int flag);
+char *app_dirname(char *path);
 int fileno_stdin(void);
 int fileno_stdout(void);
 int raw_read_stdin(void *, int);
diff --git a/apps/genrsa.c b/apps/genrsa.c
index 464657c..2bc8fa0 100644
--- a/apps/genrsa.c
+++ b/apps/genrsa.c
@@ -44,7 +44,7 @@ const OPTIONS genrsa_options[] = {
     {"3", OPT_3, '-', "Use 3 for the E value"},
     {"F4", OPT_F4, '-', "Use F4 (0x10001) for the E value"},
     {"f4", OPT_F4, '-', "Use F4 (0x10001) for the E value"},
-    {"out", OPT_OUT, 's', "Output the key to specified file"},
+    {"out", OPT_OUT, '>', "Output the key to specified file"},
     OPT_R_OPTIONS,
     {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
     {"", OPT_CIPHER, '-', "Encrypt the output with any supported cipher"},
diff --git a/apps/opt.c b/apps/opt.c
index a9d163a..a47451c 100644
--- a/apps/opt.c
+++ b/apps/opt.c
@@ -613,13 +613,17 @@ int opt_verify(int opt, X509_VERIFY_PARAM *vpm)
  */
 int opt_next(void)
 {
-    char *p;
+    char *p, *estr;
     const OPTIONS *o;
     int ival;
     long lval;
     unsigned long ulval;
     ossl_intmax_t imval;
     ossl_uintmax_t umval;
+#if !defined(_WIN32) && !defined(__VMS)
+    char *c;
+    int oerrno;
+#endif
 
     /* Look at current arg; at end of the list? */
     arg = NULL;
@@ -676,13 +680,13 @@ int opt_next(void)
             /* Just a string. */
             break;
         case '/':
-            if (app_isdir(arg) >= 0)
+            if (app_isdir(arg) > 0)
                 break;
             BIO_printf(bio_err, "%s: Not a directory: %s\n", prog, arg);
             return -1;
         case '<':
             /* Input file. */
-            if (strcmp(arg, "-") == 0 || app_access(arg, R_OK) >= 0)
+            if (strcmp(arg, "-") == 0 || app_access(arg, R_OK) == 0)
                 break;
             BIO_printf(bio_err,
                        "%s: Cannot open input file %s, %s\n",
@@ -690,11 +694,38 @@ int opt_next(void)
             return -1;
         case '>':
             /* Output file. */
-            if (strcmp(arg, "-") == 0 || app_access(arg, W_OK) >= 0 || errno == ENOENT)
+#if !defined(_WIN32) && !defined(__VMS)
+            c = OPENSSL_strdup(arg);
+            if (c == NULL) {
+                BIO_printf(bio_err,
+                           "%s: Memory allocation failure\n", prog);
+                return -1;
+            }
+            oerrno = errno;
+            errno = 0;
+            if (strcmp(arg, "-") == 0
+                || (app_access(app_dirname(c), W_OK) == 0
+                    && app_isdir(arg) <= 0
+                    && (app_access(arg, W_OK) == 0 || errno == ENOENT))) {
+                OPENSSL_free(c);
                 break;
+            }
+            OPENSSL_free(c);
+            if (errno == 0)
+                /* only possible if 'arg' is a directory */
+                estr = "is a directory";
+            else
+                estr = strerror(errno);
+            errno = oerrno;
+#else
+            if (strcmp(arg, "-") == 0 || app_access(arg, W_OK) == 0
+                || errno == ENOENT)
+                break;
+            estr = strerror(errno);
+#endif
             BIO_printf(bio_err,
                        "%s: Cannot open output file %s, %s\n",
-                       prog, arg, strerror(errno));
+                       prog, arg, estr);
             return -1;
         case 'p':
         case 'n':
diff --git a/apps/sess_id.c b/apps/sess_id.c
index 70966de..8fd584f 100644
--- a/apps/sess_id.c
+++ b/apps/sess_id.c
@@ -30,7 +30,7 @@ const OPTIONS sess_id_options[] = {
     {"outform", OPT_OUTFORM, 'f',
      "Output format - default PEM (PEM, DER or NSS)"},
     {"in", OPT_IN, 's', "Input file - default stdin"},
-    {"out", OPT_OUT, 's', "Output file - default stdout"},
+    {"out", OPT_OUT, '>', "Output file - default stdout"},
     {"text", OPT_TEXT, '-', "Print ssl session id details"},
     {"cert", OPT_CERT, '-', "Output certificate "},
     {"noout", OPT_NOOUT, '-', "Don't output the encoded session info"},
diff --git a/test/recipes/15-test_out_option.t b/test/recipes/15-test_out_option.t
new file mode 100644
index 0000000..1b9c40d
--- /dev/null
+++ b/test/recipes/15-test_out_option.t
@@ -0,0 +1,60 @@
+#! /usr/bin/env perl
+# Copyright 2018 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License").  You may not use
+# this file except in compliance with the License.  You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
+
+
+use strict;
+use warnings;
+
+use File::Spec;
+use OpenSSL::Test qw/:DEFAULT srctop_file/;
+use OpenSSL::Test::Utils;
+
+setup("test_out_option");
+
+plan skip_all => "'-out' option tests are not available on Windows or VMS"
+    if $^O =~ /^(VMS|MSWin32)$/;
+
+plan tests => 11;
+
+# The following patterns should be tested:
+#
+# path        dirname
+# /usr/       /
+# /           /
+# .           .
+# ..          .
+
+test_illegal_path('/usr/');
+test_illegal_path('/');
+test_illegal_path('.');
+test_illegal_path('..');
+
+# Test for trying to create a file in a non-exist directory
+my @chars = ("A".."Z", "a".."z", "0".."9");
+my $rand_path = $chars[rand @chars] for 1..32;
+$rand_path .= "/test.pem";
+
+test_illegal_path($rand_path);
+test_legal_path('test.pem');
+unlink 'test.pem';
+
+sub test_illegal_path {
+    my ($path) = @_;
+
+    my $start = time();
+    ok(!run(app([ 'openssl', 'genrsa', '-out', $path, '16384'])), "invalid output path: $path");
+    my $end = time();
+    # The above process should exit in 2 seconds if the path is not valid
+    ok($end - $start < 2, "check time consumed");
+}
+
+sub test_legal_path {
+    my ($path) = @_;
+
+    ok(run(app([ 'openssl', 'genrsa', '-out', $path, '2048'])), "valid output path: $path");
+}

From levitte at openssl.org  Wed Feb 28 17:49:28 2018
From: levitte at openssl.org (Richard Levitte)
Date: Wed, 28 Feb 2018 17:49:28 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519840168.898214.25790.nullmailer@dev.openssl.org>

The branch master has been updated
       via  000edfec502c0eed742d07e3ac02c2012381ee5e (commit)
       via  b107e7f5572e6d441913ee921e828bc10d27a504 (commit)
       via  f6d765988f37c43edb1056ab83165f2569182e9d (commit)
       via  215a6730f1eaf53b01a4eb10d75bd09fd74f70cc (commit)
      from  6f007824adc40d629e6ad1317d4184ca8bb967fc (commit)


- Log -----------------------------------------------------------------
commit 000edfec502c0eed742d07e3ac02c2012381ee5e
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 22 23:39:01 2018 +0100

    Adapt 15-test_out_option.t for more than just Unix
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4008)

commit b107e7f5572e6d441913ee921e828bc10d27a504
Author: Richard Levitte <levitte at openssl.org>
Date:   Thu Feb 22 22:22:29 2018 +0100

    Enable the -out option test on VMS as well
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4008)

commit f6d765988f37c43edb1056ab83165f2569182e9d
Author: Richard Levitte <levitte at openssl.org>
Date:   Mon Jan 29 08:58:26 2018 +0100

    Check on VMS as well
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4008)

commit 215a6730f1eaf53b01a4eb10d75bd09fd74f70cc
Author: Richard Levitte <levitte at openssl.org>
Date:   Mon Jul 24 23:32:00 2017 +0200

    Add VMS version of app_dirname()
    
    Related to #3709
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/4008)

-----------------------------------------------------------------------

Summary of changes:
 apps/apps.c                       | 55 ++++++++++++++++++++++++++++++++++++---
 apps/opt.c                        |  4 +--
 test/recipes/15-test_out_option.t | 12 ++++-----
 3 files changed, 60 insertions(+), 11 deletions(-)

diff --git a/apps/apps.c b/apps/apps.c
index 3b713f4..ef57355 100644
--- a/apps/apps.c
+++ b/apps/apps.c
@@ -25,6 +25,12 @@
 #endif
 #include <ctype.h>
 #include <errno.h>
+#ifdef __VMS
+# include <descrip.h>
+# include <iledef.h>
+# include <fscndef.h>
+# include <starlet.h>
+#endif
 #include <openssl/err.h>
 #include <openssl/x509.h>
 #include <openssl/x509v3.h>
@@ -2397,14 +2403,57 @@ static char *posix_dirname(char *path)
 }
 
 /*
- * TODO: implement app_dirname for Windows
- * and VMS.
+ * TODO: implement app_dirname for Windows.
  */
-#if !defined(_WIN32) && !defined(__VMS)
+#if !defined(_WIN32)
 char *app_dirname(char *path)
 {
     return posix_dirname(path);
 }
+#elif defined(__VMS)
+/*
+ * sys$filescan fills the given item list with pointers into the original
+ * path string, so all we need to do is to find the file name and simply
+ * put a NUL byte wherever the FSCN$_NAME pointer points.  If there is no
+ * file name part and the path string isn't the empty string, we know for
+ * a fact that the whole string is a directory spec and return it as is.
+ * Otherwise or if that pointer is the starting address of the original
+ * path string, we know to return "sys$disk:[]", which corresponds to the
+ * Unixly ".".
+ *
+ * If sys$filescan returns an error status, we know that this is not
+ * parsable as a VMS file spec, and then use the fallback, in case we
+ * have a Unix type path.
+ */
+char *app_dirname(char *path)
+{
+    char *ret = "sys$disk:[]";
+    struct dsc$descriptor_s dsc_path = { 0 };
+    ile2 itemlist[] = {
+        {0, FSCN$_NAME, 0},
+        {0, 0, 0}
+    };
+    int fields;
+    int status;
+
+    dsc_path.dsc$a_pointer = path;
+    dsc_path.dsc$w_length = strlen(path);
+    status = sys$filescan(&dsc_path, itemlist, &fields, 0, 0);
+
+    if (!(status & 1))
+        return posix_dirname(path);
+
+    if ((fields & (1 << FSCN$_NAME)) == 0) {
+        if (dsc_path.dsc$w_length != 0)
+            ret = path;
+    } else if (itemlist[0].ile2$ps_bufaddr != path) {
+        if (itemlist[0].ile2$ps_bufaddr != path) {
+            *itemlist[0].ile2$ps_bufaddr = '\0';
+            ret = path;
+        }
+    }
+    return ret;
+}
 #endif
 
 /* raw_read|write section */
diff --git a/apps/opt.c b/apps/opt.c
index a47451c..9025636 100644
--- a/apps/opt.c
+++ b/apps/opt.c
@@ -620,7 +620,7 @@ int opt_next(void)
     unsigned long ulval;
     ossl_intmax_t imval;
     ossl_uintmax_t umval;
-#if !defined(_WIN32) && !defined(__VMS)
+#if !defined(_WIN32)
     char *c;
     int oerrno;
 #endif
@@ -694,7 +694,7 @@ int opt_next(void)
             return -1;
         case '>':
             /* Output file. */
-#if !defined(_WIN32) && !defined(__VMS)
+#if !defined(_WIN32)
             c = OPENSSL_strdup(arg);
             if (c == NULL) {
                 BIO_printf(bio_err,
diff --git a/test/recipes/15-test_out_option.t b/test/recipes/15-test_out_option.t
index 1b9c40d..018ff3d 100644
--- a/test/recipes/15-test_out_option.t
+++ b/test/recipes/15-test_out_option.t
@@ -16,8 +16,8 @@ use OpenSSL::Test::Utils;
 
 setup("test_out_option");
 
-plan skip_all => "'-out' option tests are not available on Windows or VMS"
-    if $^O =~ /^(VMS|MSWin32)$/;
+plan skip_all => "'-out' option tests are not available on Windows"
+    if $^O eq 'MSWin32';
 
 plan tests => 11;
 
@@ -31,8 +31,8 @@ plan tests => 11;
 
 test_illegal_path('/usr/');
 test_illegal_path('/');
-test_illegal_path('.');
-test_illegal_path('..');
+test_illegal_path('./');
+test_illegal_path('../');
 
 # Test for trying to create a file in a non-exist directory
 my @chars = ("A".."Z", "a".."z", "0".."9");
@@ -44,7 +44,7 @@ test_legal_path('test.pem');
 unlink 'test.pem';
 
 sub test_illegal_path {
-    my ($path) = @_;
+    my $path = File::Spec->canonpath($_[0]);
 
     my $start = time();
     ok(!run(app([ 'openssl', 'genrsa', '-out', $path, '16384'])), "invalid output path: $path");
@@ -54,7 +54,7 @@ sub test_illegal_path {
 }
 
 sub test_legal_path {
-    my ($path) = @_;
+    my $path = File::Spec->canonpath($_[0]);
 
     ok(run(app([ 'openssl', 'genrsa', '-out', $path, '2048'])), "valid output path: $path");
 }

From matthias.st.pierre at ncp-e.com  Wed Feb 28 19:32:26 2018
From: matthias.st.pierre at ncp-e.com (matthias.st.pierre at ncp-e.com)
Date: Wed, 28 Feb 2018 19:32:26 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519846346.110007.3182.nullmailer@dev.openssl.org>

The branch master has been updated
       via  b3f9064cc66324d2359dba5350c71540ce869ceb (commit)
      from  000edfec502c0eed742d07e3ac02c2012381ee5e (commit)


- Log -----------------------------------------------------------------
commit b3f9064cc66324d2359dba5350c71540ce869ceb
Author: David Makepeace <david.p.makepeace at oracle.com>
Date:   Wed Feb 28 16:30:32 2018 +1000

    Fixed typo in description of EVP_CIPHER_meth_set_iv_length().
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre at ncp-e.com>
    (Merged from https://github.com/openssl/openssl/pull/5477)

-----------------------------------------------------------------------

Summary of changes:
 doc/man3/EVP_CIPHER_meth_new.pod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/man3/EVP_CIPHER_meth_new.pod b/doc/man3/EVP_CIPHER_meth_new.pod
index a33cb76..15f7161 100644
--- a/doc/man3/EVP_CIPHER_meth_new.pod
+++ b/doc/man3/EVP_CIPHER_meth_new.pod
@@ -73,7 +73,7 @@ EVP_CIPHER_meth_dup() creates a copy of B<cipher>.
 
 EVP_CIPHER_meth_free() destroys a B<EVP_CIPHER> structure.
 
-EVP_CIPHER_meth_iv_length() sets the length of the IV.
+EVP_CIPHER_meth_set_iv_length() sets the length of the IV.
 This is only needed when the implemented cipher mode requires it.
 
 EVP_CIPHER_meth_set_flags() sets the flags to describe optional

From kurt at openssl.org  Wed Feb 28 20:21:31 2018
From: kurt at openssl.org (Kurt Roeckx)
Date: Wed, 28 Feb 2018 20:21:31 +0000
Subject: [openssl-commits] [openssl]  master update
Message-ID: <1519849291.012264.9381.nullmailer@dev.openssl.org>

The branch master has been updated
       via  d91f45688c2d0bfcc5b3b57fb20cc80b010eef0b (commit)
      from  b3f9064cc66324d2359dba5350c71540ce869ceb (commit)


- Log -----------------------------------------------------------------
commit d91f45688c2d0bfcc5b3b57fb20cc80b010eef0b
Author: Kurt Roeckx <kurt at roeckx.be>
Date:   Sun Nov 5 14:37:15 2017 +0100

    Tell the ciphers which DRBG to use for generating random bytes.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    GH: #4672

-----------------------------------------------------------------------

Summary of changes:
 crypto/evp/e_aes.c                 | 22 +++++++++++++++++-----
 crypto/evp/e_aes_cbc_hmac_sha1.c   | 15 ++++++++++++---
 crypto/evp/e_aes_cbc_hmac_sha256.c | 15 ++++++++++++---
 crypto/evp/e_aria.c                | 12 +++++++++---
 crypto/evp/e_des.c                 |  8 +++++++-
 crypto/evp/e_des3.c                | 13 +++++++++++--
 crypto/evp/evp_enc.c               | 16 +++++++++++++++-
 crypto/evp/evp_locl.h              |  1 +
 crypto/evp/p_seal.c                | 13 ++++++++++---
 doc/man3/EVP_EncryptInit.pod       | 14 ++++++++++++++
 include/openssl/evp.h              |  2 ++
 ssl/s3_enc.c                       |  1 +
 ssl/statem/statem_srvr.c           |  1 +
 ssl/t1_enc.c                       |  1 +
 ssl/tls13_enc.c                    |  1 +
 15 files changed, 114 insertions(+), 21 deletions(-)

diff --git a/crypto/evp/e_aes.c b/crypto/evp/e_aes.c
index 1d5007a..bed9b27 100644
--- a/crypto/evp/e_aes.c
+++ b/crypto/evp/e_aes.c
@@ -17,6 +17,7 @@
 #include "internal/evp_int.h"
 #include "modes_lcl.h"
 #include <openssl/rand.h>
+#include <internal/rand.h>
 #include "evp_locl.h"
 
 typedef struct {
@@ -1404,8 +1405,14 @@ static int s390x_aes_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
             memcpy(gctx->iv, ptr, arg);
 
         enc = EVP_CIPHER_CTX_encrypting(c);
-        if (enc && RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0)
-            return 0;
+        if (enc) {
+            if (c->drbg != NULL) {
+                if (RAND_DRBG_bytes(c->drbg, gctx->iv + arg, gctx->ivlen - arg) == 0)
+                    return 0;
+            } else if (RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0) {
+                return 0;
+            }
+        }
 
         gctx->iv_gen = 1;
         return 1;
@@ -2632,9 +2639,14 @@ static int aes_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
             return 0;
         if (arg)
             memcpy(gctx->iv, ptr, arg);
-        if (EVP_CIPHER_CTX_encrypting(c)
-            && RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0)
-            return 0;
+        if (EVP_CIPHER_CTX_encrypting(c)) {
+            if (c->drbg != NULL) {
+                if (RAND_DRBG_bytes(c->drbg, gctx->iv + arg, gctx->ivlen - arg) == 0)
+                    return 0;
+            } else if (RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0) {
+                return 0;
+            }
+        }
         gctx->iv_gen = 1;
         return 1;
 
diff --git a/crypto/evp/e_aes_cbc_hmac_sha1.c b/crypto/evp/e_aes_cbc_hmac_sha1.c
index 09d24dc..053189e 100644
--- a/crypto/evp/e_aes_cbc_hmac_sha1.c
+++ b/crypto/evp/e_aes_cbc_hmac_sha1.c
@@ -17,9 +17,11 @@
 #include <openssl/aes.h>
 #include <openssl/sha.h>
 #include <openssl/rand.h>
+#include <internal/rand.h>
 #include "modes_lcl.h"
 #include "internal/evp_int.h"
 #include "internal/constant_time_locl.h"
+#include "evp_locl.h"
 
 typedef struct {
     AES_KEY ks;
@@ -154,7 +156,8 @@ void aesni_multi_cbc_encrypt(CIPH_DESC *, void *, int);
 static size_t tls1_1_multi_block_encrypt(EVP_AES_HMAC_SHA1 *key,
                                          unsigned char *out,
                                          const unsigned char *inp,
-                                         size_t inp_len, int n4x)
+                                         size_t inp_len, int n4x,
+                                         RAND_DRBG *drbg)
 {                               /* n4x is 1 or 2 */
     HASH_DESC hash_d[8], edges[8];
     CIPH_DESC ciph_d[8];
@@ -174,8 +177,13 @@ static size_t tls1_1_multi_block_encrypt(EVP_AES_HMAC_SHA1 *key,
 #  endif
 
     /* ask for IVs in bulk */
-    if (RAND_bytes((IVs = blocks[0].c), 16 * x4) <= 0)
+    IVs = blocks[0].c;
+    if (drbg != NULL) {
+        if (RAND_DRBG_bytes(drbg, IVs, 16 * x4) == 0)
+            return 0;
+    } else if (RAND_bytes(IVs, 16 * x4) <= 0) {
         return 0;
+    }
 
     ctx = (SHA1_MB_CTX *) (storage + 32 - ((size_t)storage % 32)); /* align */
 
@@ -893,7 +901,8 @@ static int aesni_cbc_hmac_sha1_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
 
             return (int)tls1_1_multi_block_encrypt(key, param->out,
                                                    param->inp, param->len,
-                                                   param->interleave / 4);
+                                                   param->interleave / 4,
+                                                   ctx->drbg);
         }
     case EVP_CTRL_TLS1_1_MULTIBLOCK_DECRYPT:
 # endif
diff --git a/crypto/evp/e_aes_cbc_hmac_sha256.c b/crypto/evp/e_aes_cbc_hmac_sha256.c
index caac0c9..215e02f 100644
--- a/crypto/evp/e_aes_cbc_hmac_sha256.c
+++ b/crypto/evp/e_aes_cbc_hmac_sha256.c
@@ -18,9 +18,11 @@
 #include <openssl/aes.h>
 #include <openssl/sha.h>
 #include <openssl/rand.h>
+#include <internal/rand.h>
 #include "modes_lcl.h"
 #include "internal/constant_time_locl.h"
 #include "internal/evp_int.h"
+#include "evp_locl.h"
 
 typedef struct {
     AES_KEY ks;
@@ -150,7 +152,8 @@ void aesni_multi_cbc_encrypt(CIPH_DESC *, void *, int);
 static size_t tls1_1_multi_block_encrypt(EVP_AES_HMAC_SHA256 *key,
                                          unsigned char *out,
                                          const unsigned char *inp,
-                                         size_t inp_len, int n4x)
+                                         size_t inp_len, int n4x,
+                                         RAND_DRBG *drbg)
 {                               /* n4x is 1 or 2 */
     HASH_DESC hash_d[8], edges[8];
     CIPH_DESC ciph_d[8];
@@ -170,8 +173,13 @@ static size_t tls1_1_multi_block_encrypt(EVP_AES_HMAC_SHA256 *key,
 #  endif
 
     /* ask for IVs in bulk */
-    if (RAND_bytes((IVs = blocks[0].c), 16 * x4) <= 0)
+    IVs = blocks[0].c;
+    if (drbg != NULL) {
+        if (RAND_DRBG_bytes(drbg, IVs, 16 * x4) == 0)
+            return 0;
+    } else if (RAND_bytes(IVs, 16 * x4) <= 0) {
         return 0;
+    }
 
     /* align */
     ctx = (SHA256_MB_CTX *) (storage + 32 - ((size_t)storage % 32));
@@ -877,7 +885,8 @@ static int aesni_cbc_hmac_sha256_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
 
             return (int)tls1_1_multi_block_encrypt(key, param->out,
                                                    param->inp, param->len,
-                                                   param->interleave / 4);
+                                                   param->interleave / 4,
+                                                   ctx->drbg);
         }
     case EVP_CTRL_TLS1_1_MULTIBLOCK_DECRYPT:
 # endif
diff --git a/crypto/evp/e_aria.c b/crypto/evp/e_aria.c
index 00e008a..10525a8 100644
--- a/crypto/evp/e_aria.c
+++ b/crypto/evp/e_aria.c
@@ -15,6 +15,7 @@
 # include <openssl/rand.h>
 # include "internal/aria.h"
 # include "internal/evp_int.h"
+# include "internal/rand.h"
 # include "modes_lcl.h"
 # include "evp_locl.h"
 
@@ -301,9 +302,14 @@ static int aria_gcm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
             return 0;
         if (arg)
             memcpy(gctx->iv, ptr, arg);
-        if (EVP_CIPHER_CTX_encrypting(c)
-            && RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0)
-            return 0;
+        if (EVP_CIPHER_CTX_encrypting(c)) {
+            if (c->drbg != NULL) {
+                if (RAND_DRBG_bytes(c->drbg, gctx->iv + arg, gctx->ivlen - arg) == 0)
+                    return 0;
+            } else if (RAND_bytes(gctx->iv + arg, gctx->ivlen - arg) <= 0) {
+                return 0;
+            }
+        }
         gctx->iv_gen = 1;
         return 1;
 
diff --git a/crypto/evp/e_des.c b/crypto/evp/e_des.c
index 9b2facf..d8c4afa 100644
--- a/crypto/evp/e_des.c
+++ b/crypto/evp/e_des.c
@@ -15,6 +15,8 @@
 # include "internal/evp_int.h"
 # include <openssl/des.h>
 # include <openssl/rand.h>
+# include <internal/rand.h>
+# include "evp_locl.h"
 
 typedef struct {
     union {
@@ -229,8 +231,12 @@ static int des_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
 
     switch (type) {
     case EVP_CTRL_RAND_KEY:
-        if (RAND_bytes(ptr, 8) <= 0)
+        if (c->drbg != NULL) {
+            if (RAND_DRBG_bytes(c->drbg, ptr, 8) == 0)
+                return 0;
+        } else if (RAND_bytes(ptr, 8) <= 0) {
             return 0;
+        }
         DES_set_odd_parity((DES_cblock *)ptr);
         return 1;
 
diff --git a/crypto/evp/e_des3.c b/crypto/evp/e_des3.c
index da77936..75e6ecf 100644
--- a/crypto/evp/e_des3.c
+++ b/crypto/evp/e_des3.c
@@ -15,6 +15,7 @@
 # include "internal/evp_int.h"
 # include <openssl/des.h>
 # include <openssl/rand.h>
+# include <internal/rand.h>
 # include "evp_locl.h"
 
 typedef struct {
@@ -283,8 +284,12 @@ static int des3_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr)
 
     switch (type) {
     case EVP_CTRL_RAND_KEY:
-        if (RAND_bytes(ptr, EVP_CIPHER_CTX_key_length(ctx)) <= 0)
+        if (ctx->drbg != NULL) {
+            if (RAND_DRBG_bytes(ctx->drbg, ptr, EVP_CIPHER_CTX_key_length(ctx)) == 0)
+                return 0;
+        } else if (RAND_bytes(ptr, EVP_CIPHER_CTX_key_length(ctx)) <= 0) {
             return 0;
+        }
         DES_set_odd_parity(deskey);
         if (EVP_CIPHER_CTX_key_length(ctx) >= 16)
             DES_set_odd_parity(deskey + 1);
@@ -372,8 +377,12 @@ static int des_ede3_wrap(EVP_CIPHER_CTX *ctx, unsigned char *out,
     memcpy(out + inl + 8, sha1tmp, 8);
     OPENSSL_cleanse(sha1tmp, SHA_DIGEST_LENGTH);
     /* Generate random IV */
-    if (RAND_bytes(EVP_CIPHER_CTX_iv_noconst(ctx), 8) <= 0)
+    if (ctx->drbg != NULL) {
+        if (RAND_DRBG_bytes(ctx->drbg, EVP_CIPHER_CTX_iv_noconst(ctx), 8) == 0)
+            return -1;
+    } else if (RAND_bytes(EVP_CIPHER_CTX_iv_noconst(ctx), 8) <= 0) {
         return -1;
+    }
     memcpy(out, EVP_CIPHER_CTX_iv_noconst(ctx), 8);
     /* Encrypt everything after IV in place */
     des_ede_cbc_cipher(ctx, out + 8, out + 8, inl + 8);
diff --git a/crypto/evp/evp_enc.c b/crypto/evp/evp_enc.c
index 2c4a2db..3176c61 100644
--- a/crypto/evp/evp_enc.c
+++ b/crypto/evp/evp_enc.c
@@ -15,6 +15,7 @@
 #include <openssl/rand.h>
 #include <openssl/engine.h>
 #include "internal/evp_int.h"
+#include "internal/rand.h"
 #include "evp_locl.h"
 
 int EVP_CIPHER_CTX_reset(EVP_CIPHER_CTX *c)
@@ -577,6 +578,15 @@ int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *ctx, int pad)
 int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr)
 {
     int ret;
+
+    if (type == EVP_CTRL_GET_DRBG) {
+        *(RAND_DRBG **)ptr = ctx->drbg;
+        return 1;
+    }
+    if (type == EVP_CTRL_SET_DRBG) {
+        ctx->drbg = ptr;
+        return 1;
+    }
     if (!ctx->cipher) {
         EVPerr(EVP_F_EVP_CIPHER_CTX_CTRL, EVP_R_NO_CIPHER_SET);
         return 0;
@@ -600,8 +610,12 @@ int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key)
 {
     if (ctx->cipher->flags & EVP_CIPH_RAND_KEY)
         return EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_RAND_KEY, 0, key);
-    if (RAND_bytes(key, ctx->key_len) <= 0)
+    if (ctx->drbg) {
+        if (RAND_DRBG_bytes(ctx->drbg, key, ctx->key_len) == 0)
+            return 0;
+    } else if (RAND_bytes(key, ctx->key_len) <= 0) {
         return 0;
+    }
     return 1;
 }
 
diff --git a/crypto/evp/evp_locl.h b/crypto/evp/evp_locl.h
index 209577b..82b9433 100644
--- a/crypto/evp/evp_locl.h
+++ b/crypto/evp/evp_locl.h
@@ -39,6 +39,7 @@ struct evp_cipher_ctx_st {
     int final_used;
     int block_mask;
     unsigned char final[EVP_MAX_BLOCK_LENGTH]; /* possible final block */
+    RAND_DRBG *drbg;
 } /* EVP_CIPHER_CTX */ ;
 
 int PKCS5_v2_PBKDF2_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass,
diff --git a/crypto/evp/p_seal.c b/crypto/evp/p_seal.c
index 50ea602..3b79dab 100644
--- a/crypto/evp/p_seal.c
+++ b/crypto/evp/p_seal.c
@@ -14,6 +14,8 @@
 #include <openssl/evp.h>
 #include <openssl/objects.h>
 #include <openssl/x509.h>
+#include <internal/rand.h>
+#include "evp_locl.h"
 
 int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
                  unsigned char **ek, int *ekl, unsigned char *iv,
@@ -31,9 +33,14 @@ int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
         return 1;
     if (EVP_CIPHER_CTX_rand_key(ctx, key) <= 0)
         return 0;
-    if (EVP_CIPHER_CTX_iv_length(ctx)
-        && RAND_bytes(iv, EVP_CIPHER_CTX_iv_length(ctx)) <= 0)
-        return 0;
+    if (EVP_CIPHER_CTX_iv_length(ctx)) {
+        if (ctx->drbg) {
+            if (RAND_DRBG_bytes(ctx->drbg, iv, EVP_CIPHER_CTX_iv_length(ctx)) == 0)
+                return 0;
+        } else if (RAND_bytes(iv, EVP_CIPHER_CTX_iv_length(ctx)) <= 0) {
+            return 0;
+        }
+    }
 
     if (!EVP_EncryptInit_ex(ctx, NULL, NULL, key, iv))
         return 0;
diff --git a/doc/man3/EVP_EncryptInit.pod b/doc/man3/EVP_EncryptInit.pod
index 619a94e..3022c7a 100644
--- a/doc/man3/EVP_EncryptInit.pod
+++ b/doc/man3/EVP_EncryptInit.pod
@@ -457,6 +457,20 @@ This call is only valid when decrypting data.
 
 =back
 
+=head1 Random numbers
+
+The following can be used to select the DRBG that is used to generate the random
+numbers:
+
+EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_SET_DRBG, 0, drbg)
+
+The following can be used to get the DRBG:
+
+EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GET_DRBG, 0, &drbg)
+
+By default it's set to NULL which results in RAND_bytes() being used.
+
+
 =head1 NOTES
 
 Where possible the B<EVP> interface to symmetric ciphers should be used in
diff --git a/include/openssl/evp.h b/include/openssl/evp.h
index 268e90f..e135de6 100644
--- a/include/openssl/evp.h
+++ b/include/openssl/evp.h
@@ -344,6 +344,8 @@ int (*EVP_CIPHER_meth_get_ctrl(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
 # define         EVP_CTRL_SET_PIPELINE_INPUT_BUFS        0x23
 /* Set the input buffer lengths to use for a pipelined operation */
 # define         EVP_CTRL_SET_PIPELINE_INPUT_LENS        0x24
+# define         EVP_CTRL_GET_DRBG                       0x25
+# define         EVP_CTRL_SET_DRBG                       0x26
 
 /* Padding modes */
 #define EVP_PADDING_PKCS7       1
diff --git a/ssl/s3_enc.c b/ssl/s3_enc.c
index 4c63d4a..f775f26 100644
--- a/ssl/s3_enc.c
+++ b/ssl/s3_enc.c
@@ -167,6 +167,7 @@ int ssl3_change_cipher_state(SSL *s, int which)
              */
             EVP_CIPHER_CTX_reset(s->enc_write_ctx);
         }
+        EVP_CIPHER_CTX_ctrl(s->enc_write_ctx, EVP_CTRL_SET_DRBG, 0, s->drbg);
         dd = s->enc_write_ctx;
         if (ssl_replace_hash(&s->write_hash, m) == NULL) {
             SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_SSL3_CHANGE_CIPHER_STATE,
diff --git a/ssl/statem/statem_srvr.c b/ssl/statem/statem_srvr.c
index d335819..8092684 100644
--- a/ssl/statem/statem_srvr.c
+++ b/ssl/statem/statem_srvr.c
@@ -3753,6 +3753,7 @@ int tls_construct_new_session_ticket(SSL *s, WPACKET *pkt)
                  SSL_F_TLS_CONSTRUCT_NEW_SESSION_TICKET, ERR_R_MALLOC_FAILURE);
         goto err;
     }
+    EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_SET_DRBG, 0, s->drbg);
 
     p = senc;
     if (!i2d_SSL_SESSION(s->session, &p)) {
diff --git a/ssl/t1_enc.c b/ssl/t1_enc.c
index 465d483..774625a 100644
--- a/ssl/t1_enc.c
+++ b/ssl/t1_enc.c
@@ -170,6 +170,7 @@ int tls1_change_cipher_state(SSL *s, int which)
                      ERR_R_MALLOC_FAILURE);
             goto err;
         }
+        EVP_CIPHER_CTX_ctrl(s->enc_write_ctx, EVP_CTRL_SET_DRBG, 0, s->drbg);
         dd = s->enc_write_ctx;
         if (SSL_IS_DTLS(s)) {
             mac_ctx = EVP_MD_CTX_new();
diff --git a/ssl/tls13_enc.c b/ssl/tls13_enc.c
index 6332804..5982c8e 100644
--- a/ssl/tls13_enc.c
+++ b/ssl/tls13_enc.c
@@ -406,6 +406,7 @@ int tls13_change_cipher_state(SSL *s, int which)
                          SSL_F_TLS13_CHANGE_CIPHER_STATE, ERR_R_MALLOC_FAILURE);
                 goto err;
             }
+            EVP_CIPHER_CTX_ctrl(s->enc_write_ctx, EVP_CTRL_SET_DRBG, 0, s->drbg);
         }
         ciph_ctx = s->enc_write_ctx;
         iv = s->write_iv;