[openssl-project] Monthly Status Report (February)

[Matt Caswell]

As well as normal reviews, responding to user queries, wiki user
requests, OMC business, handling security reports, etc., key activities
this month:

- Performed both the alpha1 and alpha2 1.1.1 releases
- Completed work on the primitives, EVP layer and TLS implementation for
X448 and Ed448.
- Updated the TLSv1.3 blog post on the latest information
- Implemented a PR for solving the issue where legacy ciphersuite
configuration can end up disabling all TLSV1.3 ciphersuites leading to
connection failures.
- Fixed some documentation issues with Middlebox compat mode
- Enabled TLSv1.3 by default
- Fixed various no- options (no-nextprotoneg, no-chacha, no-poly1305,
no-tls1_2)
- Resolved an issue where the Finished MAC was being calculated twice
- Fixed an interoperability issue due to overestimating the ticket age
by up to 1s
- Reviewed a lot of the outstanding Coverity issues and implemented
fixes for a number of them
- Updates for TLSv1.3 draft-24
- Investigated and fixed an issue in TLSProxy where a spurious
additional byte was being sent
- Investigated issues associated with a crash in the ca app (there is
some ongoing work associated with this issue).
- Currently working on improving the EVP API for curves 25519 and 448.
- Performed some interoperability testing (mainly focused on X448/Ed448)
with a few other implementations and fixed some issues as a result

Matt