{"push_id":3183481713,"size":40,"distinct_size":1,"ref":"refs/heads/add-cades","head":"cd1c34d8bded4a4628bb96fd2dd635c133d502b5","before":"aff8de7566ae7b16f1f79b65faf70b6d73532f02","commits":[{"sha":"e436664828429a23bf210710ede34203bdfdc2b8","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"VMS build: better treatment of .S -> .obj compilation\n\nIt turned out that .S files aren't to be treated as lightly as I\nthought.  They need to go through a preprocessing step, which .s files\ndon't need to.\n\nCorrects #7703\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7889)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/e436664828429a23bf210710ede34203bdfdc2b8"},{"sha":"ee4afacd96f5bfbe7662c8f0ec4464c6eee4c450","author":{"name":"Rich Salz","email":"c04971a99e5a9ee80eaab4b1deb37e845b0bd697@akamai.com"},"message":"Ignore duplicated undocumented things\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Paul Yang <yang.yang@baishancloud.com>\n(Merged from https://github.com/openssl/openssl/pull/7423)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/ee4afacd96f5bfbe7662c8f0ec4464c6eee4c450"},{"sha":"4fea7005c3d08ed0d575bdea5082b7b0ce355237","author":{"name":"Mansour Ahmadi","email":"a8f0a18d520daf80848f5fa7dd28e8dbb58f4957@northeastern.edu"},"message":"fix inconsistent flen check in rsa_pk1 and rsa_oaep\n\nFixes #7117\n\nReviewed-by: Kurt Roeckx <kurt@roeckx.be>\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7880)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/4fea7005c3d08ed0d575bdea5082b7b0ce355237"},{"sha":"55833a8de70589a5000044b6291e190f5a3826ae","author":{"name":"Mansour Ahmadi","email":"a8f0a18d520daf80848f5fa7dd28e8dbb58f4957@northeastern.edu"},"message":"add missing check for BN_mod_inverse\n\nFixes #7650\n\nReviewed-by: Kurt Roeckx <kurt@roeckx.be>\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7876)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/55833a8de70589a5000044b6291e190f5a3826ae"},{"sha":"4128136a28c3b7d3878daed728c49f18eb950adc","author":{"name":"Mansour Ahmadi","email":"a8f0a18d520daf80848f5fa7dd28e8dbb58f4957@northeastern.edu"},"message":"Add missing OPENSSL_clear_free before using ec->key\n\nFixes #7657\n\nReviewed-by: Nicola Tuveri <nic.tuv@gmail.com>\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7877)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/4128136a28c3b7d3878daed728c49f18eb950adc"},{"sha":"9a3b5b766421b7ed9df859956d44fcbe52c2dd82","author":{"name":"Todd Short","email":"68073de78a3e53f20b3590686d3994bff5b8c553@akamai.com"},"message":"Fixes #7879: AES-SIV to use EVP_MAC APIs\n\nConvert CMAC APIs to EVP_MAC APIs\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Paul Dale <paul.dale@oracle.com>\n(Merged from https://github.com/openssl/openssl/pull/7891)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/9a3b5b766421b7ed9df859956d44fcbe52c2dd82"},{"sha":"91c5473035aaf2c0d86e4039c2a29a5b70541905","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"ERR: preserve system error number in a few more places\n\nIt turns out that intialization may change the error number, so we\nneed to preserve the system error number in functions where\ninitialization is called for.\nThese are ERR_get_state() and err_shelve_state()\n\nFixes #7897\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7902)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/91c5473035aaf2c0d86e4039c2a29a5b70541905"},{"sha":"5c587fb6b996d47771bcaecd71489e4849103f56","author":{"name":"Kurt Roeckx","email":"bb87b47479d83cec3c76132206933257ded727b2@roeckx.be"},"message":"Use (D)TLS_MAX_VERSION_INTERNAL internally\n\nUse 0 if we don't want to set a minimum or maximum version\n\nReviewed-by: Matt Caswell <matt@openssl.org>\nGH: #7260","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/5c587fb6b996d47771bcaecd71489e4849103f56"},{"sha":"04cd70c6899c6b36517b2b07d7a12b2cceba1bef","author":{"name":"Kurt Roeckx","email":"bb87b47479d83cec3c76132206933257ded727b2@roeckx.be"},"message":"Deprecate TLS_MAX_VERSION, DTLS_MAX_VERSION and DTLS_MIN_VERSION\n\nFixes: #7183\n\nReviewed-by: Matt Caswell <matt@openssl.org>\nGH: #7260","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/04cd70c6899c6b36517b2b07d7a12b2cceba1bef"},{"sha":"6e94b5aecd619afd25e3dc25902952b1b3194edf","author":{"name":"Kurt Roeckx","email":"bb87b47479d83cec3c76132206933257ded727b2@roeckx.be"},"message":"Convert tls1_prf_P_hash to use the EVP_MAC interface\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nGH: #7554","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/6e94b5aecd619afd25e3dc25902952b1b3194edf"},{"sha":"fc5ecaddd0c2aa76dfc8b9c4a7b3686cf2a3a292","author":{"name":"Dr. Matthias St. Pierre","email":"1910231d24f125aceac7850dc92279eee8d52323@ncp-e.com"},"message":"man: harmonize the various formulations in the HISTORY sections\n\nWhile stereotyped repetitions are frowned upon in literature, they\nserve a useful purpose in manual pages, because it is easier for\nthe user to find certain information if it is always presented in\nthe same way. For that reason, this commit harmonizes the varying\nformulations in the HISTORY section about which functions, flags,\netc. were added in which OpenSSL version.\n\nIt also attempts to make the pod files more grep friendly by\navoiding to insert line breaks between the symbol names and the\ncorresponding version number in which they were introduced\n(wherever possible). Some punctuation and typographical errors\nwere fixed on the way.\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7854)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/fc5ecaddd0c2aa76dfc8b9c4a7b3686cf2a3a292"},{"sha":"5aa2a7ea41d7137640cb0914807fd1202b920543","author":{"name":"Quantomicus","email":"be1a01629fa165e45762ad2c92f3e67346a8915c@gmail.com"},"message":"Fix s_client hang on non-compliant NNTP server test\n\nFixes #7722\n\nCLA: trivial\n\nSigned-off-by: Mateja Milosevic <quantumgleam@gmail.com>\n\nReviewed-by: Paul Yang <yang.yang@baishancloud.com>\nReviewed-by: Paul Dale <paul.dale@oracle.com>\n(Merged from https://github.com/openssl/openssl/pull/7915)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/5aa2a7ea41d7137640cb0914807fd1202b920543"},{"sha":"ffd2df135a5d9f6d2627bd125f362298430fdc06","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"X509_check_issued: check that signature algo matches signing key algo\n\nThis implements 3.5.18 \"Consistent Public Key and Signature Algorithms\"\nfrom RFC 4158 \"Internet X.509 Public Key Infrastructure: Certification\nPath Building\"\n\nRef: https://tools.ietf.org/html/rfc4158#section-3.5.18\n\nFixes #7899\n\nReviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>\n(Merged from https://github.com/openssl/openssl/pull/7919)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/ffd2df135a5d9f6d2627bd125f362298430fdc06"},{"sha":"229446dfae66aed32a738063c9062fea8e7049dc","author":{"name":"Rich Salz","email":"c04971a99e5a9ee80eaab4b1deb37e845b0bd697@akamai.com"},"message":"Some code-cleanup/simplification in apps\n\nRemove some casts on password callback by adding a wrapper function.\nRemove level of indent by doing an early-return on failure.\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7873)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/229446dfae66aed32a738063c9062fea8e7049dc"},{"sha":"6f8b858d054c4eb1112531e39da9ceb5fa37e5f1","author":{"name":"Christian Heimes","email":"2314b2e3a4a1f7db165be2aafbf1efd78f28cc97@python.org"},"message":"Fix function names in ct(7) documentation\n\nThe correct function name is SSL_CTX_enable_ct, not SSL_CTX_ct_enable.\n\nSigned-off-by: Christian Heimes <christian@python.org>\n\nReviewed-by: Paul Dale <paul.dale@oracle.com>\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7916)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/6f8b858d054c4eb1112531e39da9ceb5fa37e5f1"},{"sha":"baba1545105131fa34068f62928322e99d695ab1","author":{"name":"Ken Goldman","email":"db83bd3d6df8785c85c67845cb97166cc5163d0e@us.ibm.com"},"message":"Admit unknown pkey types at security level 0\n\nThe check_key_level() function currently fails when the public key\ncannot be extracted from the certificate because its algorithm is not\nsupported.  However, the public key is not needed for the last\ncertificate in the chain.\n\nThis change moves the check for level 0 before the check for a\nnon-NULL public key.\n\nFor background, this is the TPM 1.2 endorsement key certificate.\nI.e., this is a real application with millions of certificates issued.\nThe key is an RSA-2048 key.\n\nThe TCG (for a while) specified\n\n     Public Key Algorithm: rsaesOaep\n\nrather than the commonly used\n\n     Public Key Algorithm: rsaEncryption\n\nbecause the key is an encryption key rather than a signing key.\nThe X509 certificate parser fails to get the public key.\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7906)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/baba1545105131fa34068f62928322e99d695ab1"},{"sha":"23d221b771348e3e3ee316cd1190a4a344d145fc","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"util/process_docs.pl: handle multiple source directories correctly\n\nThe way this script handled multiple source directories wasn't quite\nright, it ended up giving pod2html 'ARRAY(0xXXXXXXXXX)' as a source\ndirectory.\n\nThis corrects the mistake.\n\nFixes #7742\nFixes #7939\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7911)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/23d221b771348e3e3ee316cd1190a4a344d145fc"},{"sha":"39fc4c17c49d248e0757bac9aa8863d205c7ad12","author":{"name":"FdaSilvaYY","email":"84d6bf9dc15b92ec6816115719ff792a7491fba8@gmail.com"},"message":"Coverity fix in apps/oscp\n\nCID 1440002 (#1 of 1): Use after free (USE_AFTER_FREE)\nNot a deadly error, because error was just before app exit.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7359)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/39fc4c17c49d248e0757bac9aa8863d205c7ad12"},{"sha":"da84249be6492ccfc5ecad32ac367fd06e9bdbef","author":{"name":"FdaSilvaYY","email":"84d6bf9dc15b92ec6816115719ff792a7491fba8@gmail.com"},"message":"Coverity fix in some crypto/asn1 code\n\nCall to i2d method returns an int value.\n\nFix:\nCID 1338183 (#1 of 1): Improper use of negative value (NEGATIVE_RETURNS)\nCID 1371691 (#1 of 1): Improper use of negative value (NEGATIVE_RETURNS)\nCID 1371692 (#1 of 1): Improper use of negative value (NEGATIVE_RETURNS)\n\n[extended tests]\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Matt Caswell <matt@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7359)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/da84249be6492ccfc5ecad32ac367fd06e9bdbef"},{"sha":"c79a022da973140c141eeebff9170ca5702be0f9","author":{"name":"Jung-uk Kim","email":"f64ec30c14442947ba46fae9598b7f932325bd04@FreeBSD.org"},"message":"Do not complain when /dev/crypto does not exist.\n\nFreeBSD does not enable cryptodev(4) by default.  OpenBSD disabled support\nfor /dev/crypto by default from 4.9 and removed it from 5.7.  Now the engine\nis properly enabled by default on BSD platforms (see #7885), it continuously\ncomplains:\n\nCould not open /dev/crypto: No such file or directory\n\nHide the nagging error message behind ENGINE_DEVCRYPTO_DEBUG.\n\nCLA: trivial\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Paul Dale <paul.dale@oracle.com>\nReviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>\n(Merged from https://github.com/openssl/openssl/pull/7896)","distinct":false,"url":"https://api.github.com/repos/opensignature/openssl/commits/c79a022da973140c141eeebff9170ca5702be0f9"}]}
{"actor":{"display_login":"opensignature"}}