[openssl/openssl] f85d34: Keep doing ossl_quic_tls_tick() even after handsha...

Tianjia Zhang noreply at github.com
Wed Aug 2 19:30:17 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: f85d343208bd944b88891feba200259b4cd0ba7c
      https://github.com/openssl/openssl/commit/f85d343208bd944b88891feba200259b4cd0ba7c
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-08-02 (Wed, 02 Aug 2023)

  Changed paths:
    M ssl/quic/quic_tls.c

  Log Message:
  -----------
  Keep doing ossl_quic_tls_tick() even after handshake completion

There may be post-handshake messages to process so make sure we keep
ticking things even if the handshake has finished. We do this simply by
calling SSL_read(). There should never be app data to read but we will
process any handshake records we encounter.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21591)


  Commit: 829eec9f86f94ca81de920a1b61e9b636792d3c2
      https://github.com/openssl/openssl/commit/829eec9f86f94ca81de920a1b61e9b636792d3c2
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-08-02 (Wed, 02 Aug 2023)

  Changed paths:
    M include/internal/quic_tserver.h
    M ssl/quic/quic_tserver.c
    M test/helpers/quictestlib.c
    M test/quic_multistream_test.c
    M test/quic_tserver_test.c
    M util/quicserver.c

  Log Message:
  -----------
  Add the ability for tserver to use a pre-existing SSL_CTX

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21591)


  Commit: f219abef51fd47fa5945d23bbdc379778e512dc5
      https://github.com/openssl/openssl/commit/f219abef51fd47fa5945d23bbdc379778e512dc5
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-08-02 (Wed, 02 Aug 2023)

  Changed paths:
    M ssl/quic/quic_impl.c

  Log Message:
  -----------
  Ensure the QUIC TLS SSL object is marked as shutdown

If we shutdown the QUIC connection then we should mark the underlying
TLS SSL object as shutdown as well. Otherwise any sessions are considered
unusable for resumption.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21591)


  Commit: cf355bd6e5564694e589d3f96e8bde192519649c
      https://github.com/openssl/openssl/commit/cf355bd6e5564694e589d3f96e8bde192519649c
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-08-02 (Wed, 02 Aug 2023)

  Changed paths:
    M doc/designs/quic-design/quic-fault-injector.md
    M test/helpers/quictestlib.c
    M test/helpers/quictestlib.h
    M test/quic_newcid_test.c
    M test/quicapitest.c
    M test/quicfaultstest.c

  Log Message:
  -----------
  Extend the test_quic_write_read() test to include resumption

We add an additional loop around test_quic_write_read() to repeat the
test but using a session obtained from the initial iteration to confirm
that we can successfully resume the session.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21591)


  Commit: c9fb65b8c8b82a8aa60a118342ec4ee58352db89
      https://github.com/openssl/openssl/commit/c9fb65b8c8b82a8aa60a118342ec4ee58352db89
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-08-02 (Wed, 02 Aug 2023)

  Changed paths:
    M test/helpers/quictestlib.c
    M test/quicapitest.c

  Log Message:
  -----------
  Add support into qtest_shutdown for blocking mode

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21591)


  Commit: 38c70a161cc6f96682bd77c8a935c5767355438c
      https://github.com/openssl/openssl/commit/38c70a161cc6f96682bd77c8a935c5767355438c
  Author: Tianjia Zhang <tianjia.zhang at linux.alibaba.com>
  Date:   2023-08-02 (Wed, 02 Aug 2023)

  Changed paths:
    M doc/man3/CMS_sign.pod

  Log Message:
  -----------
  Fix typo in function name

Signed-off-by: Tianjia Zhang <tianjia.zhang at linux.alibaba.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove at arm.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21608)


Compare: https://github.com/openssl/openssl/compare/747b51f48338...38c70a161cc6


More information about the openssl-commits mailing list