[openssl] openssl-3.0.0-alpha3 create
Matt Caswell
matt at openssl.org
Thu Jun 4 14:20:54 UTC 2020
The annotated tag openssl-3.0.0-alpha3 has been created
at 8e83bafcf6ab0dfa91e3e9ca6d01a7343bee45bf (tag)
tagging 3952c5a312bde6479578dcbc162ec6ce77318924 (commit)
replaces openssl-3.0.0-alpha2
tagged by Matt Caswell
on Thu Jun 4 14:56:41 2020 +0100
- Log -----------------------------------------------------------------
OpenSSL 3.0.0-alpha3 release tag
-----BEGIN PGP SIGNATURE-----
iQFFBAABCAAvFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAl7Y/ZkRHG1hdHRAb3Bl
bnNzbC5vcmcACgkQ2cTSbQ5gRJHQIAgAg4V42IVDiESjOaAGQk3qtMez8Vt3B7HE
v3J5SOl3O45MoK/QDkyAxGqqUIZQJelwE2j4Ahv3YPddstOPZ0DjwO5/ommuZCn1
bHnci4a6hUJNWq9+qoSFLWIlrWp4r/BaUNRtytbw9zRP73dhqkFcjdrEZQ3u019r
ukhK9b9QbkCoquZq4SQiV7DBWWoqEJp8wXyV8ofID3ucgIQOq6oLeTDmEjPToRlb
8O5MaDzmpCAVRGwN5GC3t3MWISD+KP2puQzAsdrqegtkCBHKzbqg4PK1P+aHjtaU
O2DUc2ePaCbKhOdh3VcUgu/6s7HCkcZ15/UdAY6xmAN2PIooB/tZhg==
=hQhl
-----END PGP SIGNATURE-----
Benjamin Kaduk (3):
test HKDF with empty IKM
params: do not ignore zero-length strings
RSA: Do not set NULL OAEP labels
Bernd Edlinger (9):
Fix some places where X509_up_ref is used without error handling.
Fix egd and devrandom source configs
Fix the parameter types of the CRYPTO_EX_dup function type.
Avoid undefined behavior with unaligned accesses
bio printf: Avoid using rounding errors in range check
Revert the check for NaN in %f format
Remove getenv(OPENSSL_FIPS) in openssl command
Prevent extended tests run unexpectedly in appveyor
Fix a buffer overflow in drbg_ctr_generate
Billy Brumley (4):
deprecate EC_POINTs_mul function
deprecate EC precomputation functionality
deprecate EC_POINT_make_affine and EC_POINTs_make_affine
Move EC_METHOD to internal-only
David von Oheimb (1):
Add 'methods' parameter to setup_engine() in apps.c for individual method defaults
Dmitry Belyavskiy (8):
Constants for new GOST TLS 1.2 ciphersuites
GOST-related objects changes
New Russian TLS 1.2 implementation
Introducing option SSL_OP_IGNORE_UNEXPECTED_EOF
Test for the SSL_OP_IGNORE_UNEXPECTED_EOF option
GOST external tests
Update the gost-engine submodule
Update gost-engine commit to match the API changes
Dr. David von Oheimb (9):
Guard use of struct tms with #ifdef __TMS like done earlier in apps/lib/apps.c
Nit-fix: remove whitespace in doc/man3/EVP_PKEY_fromdata.pod causing warning
Use OSSL_STORE for load_{,pub}key() and load_cert() in apps/lib/apps.c
Clean up macro definitions of openssl_fdset() in apps.h and sockets.h
Move decl of OSSL_CRMF_CERTID_dup from {crmf,cmp}_local.h to include/openssl/crmf.h
Constify X509_PUBKEY_get(), X509_PUBKEY_get0(), and X509_PUBKEY_get0_param()
Fix X509_PUBKEY_cmp(), move to crypto/x509/x_pubkey.c, rename, export, and document it
Rename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp_parameters() to EVP_PKEY_parameters_eq()
Make BIO_do_connect() and friends handle multiple IP addresses
Dr. Matthias St. Pierre (1):
doc: fix trace category names
FdaSilvaYY (1):
crypto/cms: add CAdES-BES signed attributes validation
Hubert Kario (1):
add FFDH to speed command
Jack O'Connor (1):
fix a docs typo
Marc (3):
s_client: Show cert algorithms & validity period
Use _get0_ functions instead of _get_.
s_client: Fix -proxy flag regression
Matt Caswell (9):
Prepare for 3.0 alpha 3
Ignore some auto-generated DER files
Maintain strict type discipline between the core and providers
Update documentation following changes of various types
Delete the sslprovider test
Fail if we fail to fetch the EVP_KEYMGMT
Add a test for fetching EVP_PKEY style algs without a provider
Update copyright year
Prepare for release of 3.0 alpha 3
Maxim Zakharov (1):
TTY_get() in crypto/ui/ui_openssl.c open_console() can also return errno 1 (EPERM, Linux)
Nicola Tuveri (2):
Adjust length of some strncpy() calls
Fix coverity issues in EC after #11807
Nikolay Morozov (1):
Fix small documentation issues
Norm Green (1):
Add missing pragma weak declaration to lhash.h
Patrick Steuer (1):
EVP_EncryptInit.pod: fix example
Pauli (11):
Coverity 1463258: Incorrect expression (EVALUATION_ORDER)
Coverity 1463576: Error handling issues (CHECKED_RETURN)
Coverity 1463574: Null pointer dereferences (REVERSE_INULL)
Coverity 1463571: Null pointer dereferences (FORWARD_NULL)
Coverity 1463830: Resource leaks (RESOURCE_LEAK)
ossl_shim: add deprecation guards around the -use-ticket-callback option.
fips: add AES CFB mode ciphers to FIPS provider.
fips: add AES OFB mode ciphers to FIPS provider.
ossl_shim: use the correct ticket key call back.
ossl_shim: include core_names.h to resolve undeclared symbols
ossl_shim: const cast the param arguments to avoid errors
Rich Salz (10):
Add "md-nits" make target
Fix all MD036 (emphasis used instead of heading)
Revise fips_config.pod
Revise x509v3_config.pod
Revise fips_install.pod
Use {module,install}-mac, not -checksum
Fix auto-gen names in .gitignore
Clean up some doc nits
Cleanup cert config files for tests
Update manpage to fix examples, other minor tweaks
Richard Levitte (18):
SSL: refactor ssl_cert_lookup_by_pkey() to work with provider side keys
Build: make apps/progs.c depend on configdata.pm
CORE: Fix a couple of bugs in algorithm_do_this()
CORE: query for operations only once per provider (unless no_store is true)
Add OSSL_PROVIDER_do_all()
Refactor the provider side DER constants and writers
rsa_padding_add_PKCS1_OAEP_mgf1_with_libctx(): fix check of |md|
STORE: Make try_decode_PrivateKey() ENGINE aware
Re-introduce legacy EVP_PKEY types for provided keys
Fix omissions in providers/common/der/build.info
PROV: Fix RSA-OAEP memory leak
PROV: Use rsa_padding_add_PKCS1_OAEP_mgf1_with_libctx() in RSA-OAEP
util/mkpod2html.pl: Fix unbalanced quotes
DOCS: add openssl-core_numbers.h(7)
DOCS: add openssl-core_names.h(7)
APPS: Remove make_config_name, use CONF_get1_default_config_file instead
PEM: Make PKCS8 serializers aware of OSSL_SERIALIZERs
TEST: Test i2d_PKCS8PrivateKey_bio() and PEM_write_bio_PKCS8PrivateKey()
Shane Lontis (3):
Fix ERR_print_errors so that it matches the documented format in doc/man3/ERR_error_string.pod
Update core_names.h fields and document most fields.
Fix errtest for older compilers
Tim Hudson (1):
undeprecate SSL_CTX_load_verify_locations and X509_STORE_load_locations
Tomas Mraz (6):
Cast the unsigned char to unsigned int before shifting left
Avoid potential overflow to the sign bit when shifting left 24 places
t1_trce: Fix remaining places where the 24 bit shift overflow happens
Prevent use after free of global_engine_lock
Revert "Guard use of struct tms with #ifdef __TMS"
Drop special case of time interval calculation for VMS
mettacrawler (1):
There is no -signreq option in CA.pl
raja-ashok (4):
Fix crash in early data send with out-of-band PSK using AES CCM
Test TLSv1.3 out-of-band PSK with all 5 ciphersuites
Update limitation of psk_client_cb and psk_server_cb in usage with TLSv1.3
Update early data exchange scenarios in doc
-----------------------------------------------------------------------
More information about the openssl-commits
mailing list