[openssl/openssl] 16f0e9: Partial revert and reimplement "Enable brainpool c...

Matt Caswell noreply at github.com
Fri Oct 7 09:04:35 UTC 2022


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 16f0e91cf82e13c327f0b0402459dfbf78ef787c
      https://github.com/openssl/openssl/commit/16f0e91cf82e13c327f0b0402459dfbf78ef787c
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-10-07 (Fri, 07 Oct 2022)

  Changed paths:
    M ssl/s3_lib.c
    M ssl/ssl_local.h
    M ssl/statem/extensions.c
    M ssl/statem/extensions_clnt.c
    M ssl/statem/extensions_srvr.c
    M ssl/statem/statem_lib.c
    M ssl/t1_lib.c

  Log Message:
  -----------
  Partial revert and reimplement "Enable brainpool curves for TLS1.3"

This partially reverts commit 0a10825a0 in order to reimplement it in a
simpler way in the next commit. The reverted aspects are all related to
the TLSv1.3 brainpool curves in the supported_groups extension. Rather
than special casing the handling of these curves we simply add new entries
to the groups table to represent them. They can then be handled without
any additional special casing. This makes the code simpler to maintain.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/19315)


  Commit: c9ee6e3646258f79a9970be96394cb2b93b7eddd
      https://github.com/openssl/openssl/commit/c9ee6e3646258f79a9970be96394cb2b93b7eddd
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-10-07 (Fri, 07 Oct 2022)

  Changed paths:
    M crypto/objects/obj_dat.h
    M crypto/objects/obj_mac.num
    M crypto/objects/objects.txt
    M include/openssl/obj_mac.h
    M providers/common/capabilities.c
    M ssl/t1_lib.c
    M ssl/t1_trce.c
    M test/ssl-tests/20-cert-select.cnf
    M test/ssl-tests/20-cert-select.cnf.in

  Log Message:
  -----------
  Reimplement brainpool TLSv1.3 support group support

Create new TLS_GROUP_ENTRY values for these groups.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/19315)


  Commit: 3f76339a3fe7be412b754ffe7b0a5438a1297f28
      https://github.com/openssl/openssl/commit/3f76339a3fe7be412b754ffe7b0a5438a1297f28
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-10-07 (Fri, 07 Oct 2022)

  Changed paths:
    M test/helpers/ssl_test_ctx.c
    M test/ssl-tests/14-curves.cnf
    M test/ssl-tests/14-curves.cnf.in

  Log Message:
  -----------
  Add some more brainpool tests for TLSv1.3

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/19315)


  Commit: 8377f26c2e6dadd9a1728805cd895fa94669f2d0
      https://github.com/openssl/openssl/commit/8377f26c2e6dadd9a1728805cd895fa94669f2d0
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-10-07 (Fri, 07 Oct 2022)

  Changed paths:
    M doc/man3/SSL_CTX_set1_curves.pod

  Log Message:
  -----------
  Update the SSL_CTX_set1_groups documentation

Mention the brainpool curves in the documentation

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/19315)


Compare: https://github.com/openssl/openssl/compare/c007f466aaeb...8377f26c2e6d


More information about the openssl-commits mailing list