{"push_id":3037184105,"size":1000,"distinct_size":4,"ref":"refs/heads/recreate-OS390-Unix","head":"f7a1c3532ccbd04232ff6730bdcd989d6deff829","before":"c89bf85a64b72b5f7b9bfddf9c428b11a031c3e7","commits":[{"sha":"8258975c94398930e7b5406b8a3af53a662d1354","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"Configuration: Simplify generating list of generated files in build file templates\n\nComputing the value of the GENERATED variable in the build file\ntemplates is somewhat overcomplicated, and because of possible\nduplication errors, changes are potentially error prone.\n\nLooking more closely at how this list is determined, it can be\nobserved that the exact list of files to check is consistently\navailable in all the values found in the %unified_info tables\n'depends', 'sources' and 'shared_sources', and all that's needed is to\nfilter those values so only those present as keys in the 'generate'\ntable are left.\n\nThis computation is also common for all build files, so due to its\napparent complexity, we move it to common0.tmpl, with the result left\nin a global variable (@generated), to be consumed by all build file\ntemplates.\n\ncommon0.tmpl is included among the files to process when creating\nbuild files, but unlike common.tmpl, it comes first of all.\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5930)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/8258975c94398930e7b5406b8a3af53a662d1354"},{"sha":"6197bc7c5490d215f6abc20afa27308d5e301df2","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":".travis.yml: exercise build_all_generated\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5930)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/6197bc7c5490d215f6abc20afa27308d5e301df2"},{"sha":"ad5c205c011d1e2ec538d1f4d75477133e0dcab3","author":{"name":"Andy Polyakov","email":"015edf36635e030d5e009e08808a59984e629740@openssl.org"},"message":"appveyor.yml: exercise build_all_generated.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5930)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/ad5c205c011d1e2ec538d1f4d75477133e0dcab3"},{"sha":"0652e8a7fe6dd8cbdf4516b221642b10bbfc68fe","author":{"name":"Daniel Bevenius","email":"ae63d1d4d7994483a3e520cafec7a829fe25c0a1@gmail.com"},"message":"Clarify default section in config.pod\n\nThis is a minor update which hopefully makes these particular lines\nread a little easier.\n\nReviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5938)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/0652e8a7fe6dd8cbdf4516b221642b10bbfc68fe"},{"sha":"18d1588268f0fbec249d3386113df4452234573d","author":{"name":"Andy Polyakov","email":"015edf36635e030d5e009e08808a59984e629740@openssl.org"},"message":"Configurations/*.tmpl: refine build_all_generated.\n\nPurpose of build_all_generated is to execute all the rules that require\nperl, so that one can copy the tree to system with compiler but without\nperl. This commit removes last dependencies on perl.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5929)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/18d1588268f0fbec249d3386113df4452234573d"},{"sha":"adaf3cfad2319fe5c0d6fe179c726cc85eebf2d3","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"openssl rehash: document -compat\n\nFixes #5902\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5937)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/adaf3cfad2319fe5c0d6fe179c726cc85eebf2d3"},{"sha":"362ff3c39703633ac53ba9130c7acc02177bedc5","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"openssl rehash: use libcrypto variables for default dir\n\nX509_get_default_cert_dir_env() returns the default environment\nvariable to check for certificate directories.\nX509_get_default_cert_dir() returns the default configured certificate\ndirectory.\n\nUse these instead of hard coding our own values, and thereby be more\nintegrated with the rest of OpenSSL.\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5937)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/362ff3c39703633ac53ba9130c7acc02177bedc5"},{"sha":"6b3e8b94301d1081e88d276eeb452668c8f13632","author":{"name":"Andy Polyakov","email":"015edf36635e030d5e009e08808a59984e629740@openssl.org"},"message":"TLSProxy/Proxy.pm: handle -1 as return value from waitpid.\n\nOn rare occasion 's_server | perl -ne print' can complete before\ncorresponding waitpid, which on Windows can results in -1 return\nvalue. This is not an error, don't treat it like one. Collect\neven return value from s_server.\n\nReviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5907)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/6b3e8b94301d1081e88d276eeb452668c8f13632"},{"sha":"b4c1950d8914775db503d8ab931735325032a40d","author":{"name":"Andy Polyakov","email":"015edf36635e030d5e009e08808a59984e629740@openssl.org"},"message":"TLSProxy/Proxy.pm: handle \"impossible\" failure to connect to s_server.\n\nThe failure is \"impossible\", because we have confirmation that s_server\nlistens, yet Mac OS X fails to connect. This avoids 10 minutes timeout\non Travis CI.\n\nReviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5907)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/b4c1950d8914775db503d8ab931735325032a40d"},{"sha":"0320e8e2869fb6cde4579375e65f6d576bbec95e","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"Docs for OpenSSL_init_crypto: there is no way to specify another file\n\nThe documentation erroneously stated that one can change the default\nconfiguration file name.\n\nFixes #5939\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5941)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/0320e8e2869fb6cde4579375e65f6d576bbec95e"},{"sha":"c080461448815dab809661080ee5e21417478fb4","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Change SRP functions to use EVP_EncodeUpdate/EVP_DecodeUpdate functions\n\nPreviously they were using EVP_EncodeBlock/EVP_DecodeBlock. These are low\nlevel functions that do not handle padding characters. This was causing\nthe SRP code to fail. One side effect of using EVP_EncodeUpdate is that\nit inserts newlines which is not what we need in SRP so we add a flag to\navoid that.\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5925)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/c080461448815dab809661080ee5e21417478fb4"},{"sha":"3fd59700357072c567785a1fb1430a55ef7bd45b","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Add support for the SRP base64 alphabet\n\nHistorically we used to implement standalone base64 code for SRP. This\nwas replaced by commit 3d3f21aa with the standard base64 processing code.\n\nHowever, the SRP base64 code was designed to be compatible with other SRP\nlibraries (notably libsrp, but also others) that use a variant of standard\nbase64. Specifically a different alphabet is used and no padding '='\ncharacters are used. Instead 0 padding is added to the front of the string.\nBy changing to standard base64 we change the behaviour of the API which may\nimpact interoperability. It also means that SRP verifier files created prior\nto 1.1.1 would not be readable in 1.1.1 and vice versa.\n\nInstead we expand our standard base64 processing with the capability to be\nable to read and generate the SRP base64 variant.\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5925)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/3fd59700357072c567785a1fb1430a55ef7bd45b"},{"sha":"76fd7a1d61924ba5ee45224454cc3754b672efbf","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Add a test for SRP\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5925)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/76fd7a1d61924ba5ee45224454cc3754b672efbf"},{"sha":"a8ca496ddb532d7f7dc356fd2b026697388d2384","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"Split the scrypt and RSA-PSS into man3 and man7 pages\n\nThe scrypt and RSA-PSS documents were a mixture of section 3 and\nsection 7 material.  With pre-1.1.1 OpenSSL, this is understandable,\nsince we had a different directory layout.  With 1.1.1, we've moved to\nthe typical man-page directory layout, and the documents need to be\nupdated accordingly.\n\nAlso, the scrypt document contained a description of\nEVP_PKEY_CTX_set1_pbe_pass(), which is a generic function rather than\nan scrypt specific function, and therefore should be documented\nseparately.\n\nFixes #5802\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5942)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/a8ca496ddb532d7f7dc356fd2b026697388d2384"},{"sha":"1b9f41a0df6ed2fac1c5303be909c2f70c404f20","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"test/recipes/test_genrsa.t : don't fail because of size limit changes\n\nThere is a test to check that 'genrsa' doesn't accept absurdly low\nnumber of bits.  Apart from that, this test is designed to check the\nworking functionality of 'openssl genrsa', so instead of having a hard\ncoded lower limit on the size key, let's figure out what it is.\n\nPartially fixes #5751\n\nReviewed-by: Paul Dale <paul.dale@oracle.com>\n(Merged from https://github.com/openssl/openssl/pull/5754)\n\n(cherry picked from commit ec46830f8a4ce62c0c8ee7677b1eb8e53ee16df1)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/1b9f41a0df6ed2fac1c5303be909c2f70c404f20"},{"sha":"0e3ecaec3ebf2ed0dfbcff07b7fa1cfdd8240d5c","author":{"name":"Bernd Edlinger","email":"ac6902843ae77cc0d49b9c8ddec4cbf141db1bb7@hotmail.de"},"message":"Rework partial packet handling once more\n\nAddress the concern that commit c53c2fec raised differently.\n\nThe original direction of the traffic is encoded in bit 0\nof the flight number.\n\nReviewed-by: Andy Polyakov <appro@openssl.org>\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5923)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/0e3ecaec3ebf2ed0dfbcff07b7fa1cfdd8240d5c"},{"sha":"5bc6bcf82d2adce982e04837b0810b1a6cd55a19","author":{"name":"Dr. Matthias St. Pierre","email":"1910231d24f125aceac7850dc92279eee8d52323@ncp-e.com"},"message":"DRBG: implement a get_nonce() callback\n\nFixes #5849\n\nIn pull request #5503 a fallback was added which adds a random nonce of\nsecurity_strength/2 bits if no nonce callback is provided. This change raised\nthe entropy requirements form 256 to 384 bit, which can cause problems on some\nplatforms (e.g. VMS, see issue #5849).\n\nThe requirements for the nonce are given in section 8.6.7 of NIST SP 800-90Ar1:\n\n  A nonce may be required in the construction of a seed during instantiation\n  in order to provide a security cushion to block certain attacks.\n  The nonce shall be either:\n\n  a) A value with at least (security_strength/2) bits of entropy, or\n\n  b) A value that is expected to repeat no more often than a\n     (security_strength/2)-bit random string would be expected to repeat.\n\n  Each nonce shall be unique to the cryptographic module in which instantiation\n  is performed, but need not be secret. When used, the nonce shall be considered\n  to be a critical security parameter.\n\nThis commit implements a nonce of type b) in order to lower the entropy\nrequirements during instantiation back to 256 bits.\n\nThe formulation \"shall be unique to the cryptographic module\" above implies\nthat the nonce needs to be unique among (with high probability) among all\nDRBG instances in \"space\" and \"time\". We try to achieve this goal by creating a\nnonce of the following form\n\n    nonce = app-specific-data || high-resolution-utc-timestamp || counter\n\nWhere || denotes concatenation. The application specific data can be something\nlike the process or group id of the application. A utc timestamp is used because\nit increases monotonically, provided the system time is synchronized. This approach\nmay not be perfect yet for a FIPS evaluation, but it should be good enough for the\nmoment.\n\nThis commit also harmonizes the implementation of the get_nonce() and the\nget_additional_data() callbacks and moves the platform specific parts from\nrand_lib.c into rand_unix.c, rand_win.c, and rand_vms.c.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5920)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/5bc6bcf82d2adce982e04837b0810b1a6cd55a19"},{"sha":"560096f804a3712eea161726a8f085beefe8838a","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"make update\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5948)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/560096f804a3712eea161726a8f085beefe8838a"},{"sha":"d47eb76cd5fef2495c23705733d7034370063556","author":{"name":"Matthias Kraft","email":"d1d03fa17020268bada7e1feb68c6602f23c4172@softwareag.com"},"message":"openssl#5668: corrections after compiling with -qinfo=all:als.\n\nThe ongoing discussion about casting or not in PR #5626 had me compiling\nagain with above mentioned flags. Indeed the compiler had to say something\nabout it and I did these changes to silence it again.\n\nReviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>\nReviewed-by: Rich Salz <rsalz@openssl.org>\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5943)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/d47eb76cd5fef2495c23705733d7034370063556"},{"sha":"de5b3a8645a3b2dd22fa8866e64488eb2b69777d","author":{"name":"Andy Polyakov","email":"015edf36635e030d5e009e08808a59984e629740@openssl.org"},"message":"TLSProxy/Proxy.pm: bind s_server to loopback interface.\n\nBind even test/ssltest_old.c to loopback interface. This allows to avoid\nunnecessary alerts from Windows and Mac OS X firewalls.\n\nReviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/5933)","distinct":false,"url":"https://api.github.com/repos/levitte/openssl/commits/de5b3a8645a3b2dd22fa8866e64488eb2b69777d"}]}
{"actor":{"display_login":"levitte"}}