[openssl/openssl] 867746: Ensure the default length calculation includes the...

[Tomáš Mráz]

  Branch: refs/heads/openssl-3.2
  Home:   https://github.com/openssl/openssl
  Commit: 86774666d2aca407740c9658b8c831645a519485
      https://github.com/openssl/openssl/commit/86774666d2aca407740c9658b8c831645a519485
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M ssl/record/methods/tls_common.c

  Log Message:
  -----------
  Ensure the default length calculation includes the content type byte

TLSv1.3 includes an extra byte after the payload for the content type.
We should incorporate that in the calculation of the default buffer length.

Fixes #23015

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23021)

(cherry picked from commit e07b5e1a0a76f25c633a468d4f7945b82ae436bd)


  Commit: e5e592fda2afe920fb9a6e60ddca40e9afc75f4e
      https://github.com/openssl/openssl/commit/e5e592fda2afe920fb9a6e60ddca40e9afc75f4e
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M .github/workflows/run-checker-daily.yml

  Log Message:
  -----------
  Add a daily test for an alternative value for SSL3_ALIGN_PAYLOAD

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23021)

(cherry picked from commit 5ccd4dec6f732b4144e16cc6c9e73f07fb506279)


  Commit: 009a6053258cfac5024445eec638f34fad15885e
      https://github.com/openssl/openssl/commit/009a6053258cfac5024445eec638f34fad15885e
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M ssl/ssl_mcnf.c

  Log Message:
  -----------
  Always apply all configuration settings from the ssl section

Even if some configuration entry is incorrect, do not
skip the remaining ones.

Fixes #20789

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/23048)

(cherry picked from commit 69c067ffbc2c02295e20c90e557b6fcb2f7da69c)


  Commit: e0c4f317d7060a1185cda7642a5d2568d9ea75c4
      https://github.com/openssl/openssl/commit/e0c4f317d7060a1185cda7642a5d2568d9ea75c4
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M test/sysdefault.cnf

  Log Message:
  -----------
  Test that incorrect entry in the ssl section is not fatal

The following entries should be still applied.

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/23048)

(cherry picked from commit 17b4277d9ac6665e9b53a6270949418154cab2dc)


  Commit: bec5a6bed7716f7418369230f967701a8526c653
      https://github.com/openssl/openssl/commit/bec5a6bed7716f7418369230f967701a8526c653
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M ssl/ssl_conf.c
    M ssl/ssl_mcnf.c

  Log Message:
  -----------
  Consolidate raising errors in SSL_CONF_cmd()

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/23048)

(cherry picked from commit 430dcbd0463573fece704263648cc15e891c3d49)


Compare: https://github.com/openssl/openssl/compare/f17d3a904d73...bec5a6bed771