[openssl/openssl] 43788f: QUIC SSL Behaviours: Allow detection of an SSL con...

Hugo Landau noreply at github.com
Tue Jul 4 23:05:14 UTC 2023 

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 43788fb3ac7221a699e56c38c1e9b8b4f8de4071
      https://github.com/openssl/openssl/commit/43788fb3ac7221a699e56c38c1e9b8b4f8de4071
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M include/openssl/ssl3.h
    M ssl/quic/quic_impl.c
    M ssl/ssl_local.h

  Log Message:
  -----------
  QUIC SSL Behaviours: Allow detection of an SSL connection used for QUIC handshake

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: f082205bcfc8e361e53bb2f39f46b46097ec784a
      https://github.com/openssl/openssl/commit/f082205bcfc8e361e53bb2f39f46b46097ec784a
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_CTX_set_tlsext_use_srtp.pod
    M ssl/d1_srtp.c
    M ssl/quic/quic_impl.c
    M ssl/quic/quic_local.h
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC TLS: Prohibit SRTP-related calls for QUIC TLS

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 09d56d20a2db3170b97ec98dcde9862ee7e00e78
      https://github.com/openssl/openssl/commit/09d56d20a2db3170b97ec98dcde9862ee7e00e78
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M ssl/quic/quic_local.h
    M ssl/t1_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC: Forbid non-QUIC ciphers

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 68dbff4c040e6f1b65f84b649185aa466c4fba24
      https://github.com/openssl/openssl/commit/68dbff4c040e6f1b65f84b649185aa466c4fba24
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_CTX_set_alpn_select_cb.pod
    M ssl/ssl_lib.c

  Log Message:
  -----------
  QUIC: Forbid NPN

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: f0d9757cafef98a346088b9f7fa988964e301c67
      https://github.com/openssl/openssl/commit/f0d9757cafef98a346088b9f7fa988964e301c67
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M include/internal/quic_ssl.h
    M ssl/quic/quic_impl.c
    M ssl/ssl_lib.c
    M ssl/ssl_local.h
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC: Control SSL option setting

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 7163617f3310a2d8579388866a156df62b78bd69
      https://github.com/openssl/openssl/commit/7163617f3310a2d8579388866a156df62b78bd69
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_CTX_set_verify.pod
    M ssl/quic/quic_impl.c

  Log Message:
  -----------
  QUIC: Prohibit post-handshake auth

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 9ea0e7299223d10f61eee4db62ed0d4aec8f52e4
      https://github.com/openssl/openssl/commit/9ea0e7299223d10f61eee4db62ed0d4aec8f52e4
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_rstate_string.pod
    M ssl/record/rec_layer_s3.c
    M ssl/ssl_lib.c

  Log Message:
  -----------
  QUIC: Implement SSL_rstate_string(_long)

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 9280d26a3a14e2aa79ad26cc25e4f41fbaa828ec
      https://github.com/openssl/openssl/commit/9280d26a3a14e2aa79ad26cc25e4f41fbaa828ec
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M include/internal/quic_channel.h
    M include/internal/quic_demux.h
    M include/internal/quic_ssl.h
    M ssl/quic/quic_channel.c
    M ssl/quic/quic_demux.c
    M ssl/quic/quic_impl.c
    M ssl/ssl_lib.c

  Log Message:
  -----------
  QUIC: Implement SSL_has_pending

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: d0638fd5f0296ea84ff6fc314e9bfea8b5f06392
      https://github.com/openssl/openssl/commit/d0638fd5f0296ea84ff6fc314e9bfea8b5f06392
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_CTX_set_read_ahead.pod
    M doc/man3/SSL_CTX_set_record_padding_callback.pod
    M doc/man3/SSL_CTX_set_split_send_fragment.pod
    M ssl/quic/quic_local.h
    M ssl/record/rec_layer_s3.c
    M ssl/ssl_lib.c
    M ssl/t1_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: Prohibit readahead-related functions

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 82a2becab332c35b53c31d3f8a743fba66bef869
      https://github.com/openssl/openssl/commit/82a2becab332c35b53c31d3f8a743fba66bef869
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_read_early_data.pod
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: Prohibit early data functionailty

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: fe33e2c8c1a99b82509e1119235dd106118c3f84
      https://github.com/openssl/openssl/commit/fe33e2c8c1a99b82509e1119235dd106118c3f84
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_alloc_buffers.pod
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: Buffer Management

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: a1c56bbe79bcafb25880ce1deb7b75e2c6f5e0ce
      https://github.com/openssl/openssl/commit/a1c56bbe79bcafb25880ce1deb7b75e2c6f5e0ce
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/DTLSv1_listen.pod
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: HelloRetryRequest

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 5e6015af4df7c4b3ef2e6c3c2f3657bafde88805
      https://github.com/openssl/openssl/commit/5e6015af4df7c4b3ef2e6c3c2f3657bafde88805
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_set_fd.pod
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: SSL_set_fd for BIO_s_datagram

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 38c0ff1f404a25bc6711a2055efd92a20820ec38
      https://github.com/openssl/openssl/commit/38c0ff1f404a25bc6711a2055efd92a20820ec38
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: Forbid pipeline-related operations

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 0eecf8418a7bdff1b19c319b4c5973ce8d53b92e
      https://github.com/openssl/openssl/commit/0eecf8418a7bdff1b19c319b4c5973ce8d53b92e
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: Version setting restrictions

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 3ea30e76d788a4f1982785c0f29853cf1211d37e
      https://github.com/openssl/openssl/commit/3ea30e76d788a4f1982785c0f29853cf1211d37e
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/BIO_f_ssl.pod
    M doc/man3/SSL_CTX_set_ssl_version.pod
    M ssl/ssl_lib.c

  Log Message:
  -----------
  QUIC SSL: Restrict SSL_CTX_set_ssl_version, SSL_set_ssl_method

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: f66f0d3ce1667c04d08f158565320237a59593f6
      https://github.com/openssl/openssl/commit/f66f0d3ce1667c04d08f158565320237a59593f6
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_CTX_set_quiet_shutdown.pod
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: SSL_set_quiet_shutdown

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 764817c4aa1b7f9aa188cab0d3b2033e08025c73
      https://github.com/openssl/openssl/commit/764817c4aa1b7f9aa188cab0d3b2033e08025c73
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_new.pod
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: Block SSL_dup

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 5f69db396c61165b25c38a7506d608200561f228
      https://github.com/openssl/openssl/commit/5f69db396c61165b25c38a7506d608200561f228
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_clear.pod
    M ssl/quic/quic_impl.c
    M test/quicapitest.c

  Log Message:
  -----------
  QUIC SSL: Block SSL_clear

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: d6e7ebba3370e06ea4dfae6381dfe0e1c21070e3
      https://github.com/openssl/openssl/commit/d6e7ebba3370e06ea4dfae6381dfe0e1c21070e3
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/BIO_f_ssl.pod
    M doc/man3/DTLSv1_listen.pod
    M doc/man3/SSL_CTX_set_alpn_select_cb.pod
    M doc/man3/SSL_CTX_set_quiet_shutdown.pod
    M doc/man3/SSL_CTX_set_read_ahead.pod
    M doc/man3/SSL_CTX_set_record_padding_callback.pod
    M doc/man3/SSL_CTX_set_split_send_fragment.pod
    M doc/man3/SSL_CTX_set_ssl_version.pod
    M doc/man3/SSL_CTX_set_tlsext_use_srtp.pod
    M doc/man3/SSL_CTX_set_verify.pod
    M doc/man3/SSL_clear.pod
    M doc/man3/SSL_new.pod
    M doc/man3/SSL_read_early_data.pod
    M doc/man3/SSL_rstate_string.pod
    M doc/man3/SSL_set_fd.pod
    M include/internal/quic_ssl.h
    M include/internal/statem.h
    M ssl/d1_srtp.c
    M ssl/quic/quic_impl.c
    M ssl/quic/quic_local.h
    M ssl/record/rec_layer_s3.c
    M ssl/ssl_lib.c
    M ssl/t1_lib.c
    M test/quicapitest.c
    R test/ssl-tests/31-quic.cnf
    R test/ssl-tests/31-quic.cnf.in

  Log Message:
  -----------
  Minor fixes

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 3f7b67fb21e31b4262bb0c0dd83c01c221f3278c
      https://github.com/openssl/openssl/commit/3f7b67fb21e31b4262bb0c0dd83c01c221f3278c
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/OSSL_QUIC_client_method.pod
    M include/openssl/quic.h
    M ssl/quic/quic_method.c
    M test/recipes/80-test_ssl_new.t
    M test/ssl_test.c

  Log Message:
  -----------
  Remove unused server code

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 5a75ef37e94902c5221889604f2eda480fc18977
      https://github.com/openssl/openssl/commit/5a75ef37e94902c5221889604f2eda480fc18977
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M util/libssl.num

  Log Message:
  -----------
  make update

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 9289e59c9581d76f2c3e570d3d8eed6aea598bb8
      https://github.com/openssl/openssl/commit/9289e59c9581d76f2c3e570d3d8eed6aea598bb8
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M test/quic_multistream_test.c

  Log Message:
  -----------
  QUIC: Fix multistream test 19

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 6e5550a1045bb03afb40dac29f82cbc7158dbfc3
      https://github.com/openssl/openssl/commit/6e5550a1045bb03afb40dac29f82cbc7158dbfc3
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_CTX_set_alpn_select_cb.pod
    M include/internal/statem.h
    M ssl/quic/quic_impl.c
    M ssl/ssl_lib.c
    M test/quicapitest.c

  Log Message:
  -----------
  Minor updates

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 18ca1c8fc074e5b0fe52c91c52ade23e1f14cd0e
      https://github.com/openssl/openssl/commit/18ca1c8fc074e5b0fe52c91c52ade23e1f14cd0e
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M ssl/quic/quic_impl.c

  Log Message:
  -----------
  Update SSL options handling

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: 9562842b336c885b79385f2f6d65d0b2ff22a826
      https://github.com/openssl/openssl/commit/9562842b336c885b79385f2f6d65d0b2ff22a826
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M ssl/ssl_lib.c

  Log Message:
  -----------
  Simplify QUIC API masking

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


  Commit: db2f98c4ebb17a60307f70c330834beffb8f1253
      https://github.com/openssl/openssl/commit/db2f98c4ebb17a60307f70c330834beffb8f1253
  Author: Hugo Landau <hlandau at openssl.org>
  Date:   2023-07-05 (Wed, 05 Jul 2023)

  Changed paths:
    M doc/man3/SSL_CTX_set_options.pod
    M ssl/quic/quic_channel.c
    M ssl/quic/quic_impl.c
    M ssl/quic/quic_local.h
    M ssl/ssl_local.h

  Log Message:
  -----------
  Rework options handling

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Paul Dale <pauli at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20061)


Compare: https://github.com/openssl/openssl/compare/97beb77f319f...db2f98c4ebb1

More information about the openssl-commits mailing list