[openssl/openssl] e07b5e: Ensure the default length calculation includes the...

[Tomáš Mráz]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: e07b5e1a0a76f25c633a468d4f7945b82ae436bd
      https://github.com/openssl/openssl/commit/e07b5e1a0a76f25c633a468d4f7945b82ae436bd
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M ssl/record/methods/tls_common.c

  Log Message:
  -----------
  Ensure the default length calculation includes the content type byte

TLSv1.3 includes an extra byte after the payload for the content type.
We should incorporate that in the calculation of the default buffer length.

Fixes #23015

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23021)


  Commit: 5ccd4dec6f732b4144e16cc6c9e73f07fb506279
      https://github.com/openssl/openssl/commit/5ccd4dec6f732b4144e16cc6c9e73f07fb506279
  Author: Matt Caswell <matt at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M .github/workflows/run-checker-daily.yml

  Log Message:
  -----------
  Add a daily test for an alternative value for SSL3_ALIGN_PAYLOAD

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23021)


  Commit: 69c067ffbc2c02295e20c90e557b6fcb2f7da69c
      https://github.com/openssl/openssl/commit/69c067ffbc2c02295e20c90e557b6fcb2f7da69c
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M ssl/ssl_mcnf.c

  Log Message:
  -----------
  Always apply all configuration settings from the ssl section

Even if some configuration entry is incorrect, do not
skip the remaining ones.

Fixes #20789

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/23048)


  Commit: 17b4277d9ac6665e9b53a6270949418154cab2dc
      https://github.com/openssl/openssl/commit/17b4277d9ac6665e9b53a6270949418154cab2dc
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M test/sysdefault.cnf

  Log Message:
  -----------
  Test that incorrect entry in the ssl section is not fatal

The following entries should be still applied.

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/23048)


  Commit: 430dcbd0463573fece704263648cc15e891c3d49
      https://github.com/openssl/openssl/commit/430dcbd0463573fece704263648cc15e891c3d49
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M ssl/ssl_conf.c
    M ssl/ssl_mcnf.c

  Log Message:
  -----------
  Consolidate raising errors in SSL_CONF_cmd()

Reviewed-by: Neil Horman <nhorman at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/23048)


Compare: https://github.com/openssl/openssl/compare/ce42b72cb1ca...430dcbd04635