[openssl-project] Monthly Status Report (January)

[Matt Caswell]

As well as normal reviews, responding to user queries, wiki user
requests, OMC business, handling security reports, etc., key activities
this month:

- Attended Real World Crypto 2018 in Zürich in order to collect the
Levchin prize on behalf of the team
- Took part in an interview for RedHat
- Reviewed a large number of historic commits wrt the licence change
- IETF TLS WG discussions and updates to spec with respect to
signature_algorithms_cert extension
- Reviewed all outstanding issues and PRs in order to assign them to a
milestone as part of 1.1.1 release planning. Closed 134 issues as part
of this.
- Co-ordinated discussions on the 1.1.1 release timetable and made a
proposal that is currently part of an OMC vote
- Ongoing work on the OpenSSL book
- Ongoing work on the Curve448 primitives implementation
- WIP implementation of configurable number of TLSv1.3 session tickets
- Fixed a bug in s_client PSK usage in 1.1.1
- Fixed some instances of a wrong alert being sent
- Discovered and fixed a bug wrt how renegotiation is handled
- Updated and pushed the SSL_stateless implementation
- Fixed a bug in speed which was attempting to use X25519 for ECDSA
- Fixed a crash in ca
- Fixed a timeout problem in TLSProxy
- Fixed a problem with BN_FLG_CONSTTIME and BN_copy()
- Fixed a problem in DTLS so that we now tolerate alerts with the wrong
version number
- Fixed a minor issue in the SSL_trace() code

Matt