[openssl/openssl] 7bf2e4: tls: ban SSL3, TLS1, TLS1.1 and DTLS1.0 at securit...

[pauli]

  Branch: refs/heads/master
  Home:   https://github.openssl.org/openssl/openssl
  Commit: 7bf2e4d7f0c7ae19b7a8c416910886a7171e9820
      https://github.openssl.org/openssl/openssl/commit/7bf2e4d7f0c7ae19b7a8c416910886a7171e9820
  Author: Pauli <pauli at openssl.org>
  Date:   2022-05-08 (Sun, 08 May 2022)

  Changed paths:
    M NEWS.md
    M ssl/ssl_cert.c
    M test/bad_dtls_test.c
    M test/recipes/80-test_ssl_old.t
    M test/ssl-tests/20-cert-select.cnf
    M test/ssl-tests/20-cert-select.cnf.in

  Log Message:
  -----------
  tls: ban SSL3, TLS1, TLS1.1 and DTLS1.0 at security level one and above

This is in line with the NEWS entry (erroneously) announcing such for 3.0.

Fixes #18194

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18236)


  Commit: 54b0c534eeb283878092e006e7f1e9315ec62ad6
      https://github.openssl.org/openssl/openssl/commit/54b0c534eeb283878092e006e7f1e9315ec62ad6
  Author: Pauli <pauli at openssl.org>
  Date:   2022-05-08 (Sun, 08 May 2022)

  Changed paths:
    M doc/man3/SSL_CTX_set_security_level.pod

  Log Message:
  -----------
  doc: add not that DTLS 1.0, TLS 1.1 and before are disabled at security level 1

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18236)


  Commit: 6d4f63469ed5a0f6e7ccde189e8a6d2bb1d2b26a
      https://github.openssl.org/openssl/openssl/commit/6d4f63469ed5a0f6e7ccde189e8a6d2bb1d2b26a
  Author: Pauli <pauli at openssl.org>
  Date:   2022-05-08 (Sun, 08 May 2022)

  Changed paths:
    M gost-engine

  Log Message:
  -----------
  Update GOST engine

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18236)


Compare: https://github.openssl.org/openssl/openssl/compare/ac23650c1e53...6d4f63469ed5