{"push_id":3042395274,"size":7,"distinct_size":7,"ref":"refs/heads/master","head":"6e68dae85a8f91944370125561c7ec0d5da46c20","before":"59fbc8ef9a9c0700fd2b107fea390470ff17ada4","commits":[{"sha":"425036130dfb3cfbef5937772f7526ce60133264","author":{"name":"Richard Levitte","email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org"},"message":"Fix SipHash init order.\n\nSetting the SipHash hash size and setting its key is done with two\nindependent functions...  and yet, the internals depend on both.\n\nUnfortunately, the function to change the size wasn't adapted for the\npossibility that the key was set first, with a different hash size.\n\nThis changes the hash setting function to fix the internal values\n(which is easy, fortunately) according to the hash size.\n\nevpmac.txt value for digestsize:8 is also corrected.\n\nReviewed-by: Paul Dale <paul.dale@oracle.com>\n(Merged from https://github.com/openssl/openssl/pull/7613)","distinct":true,"url":"https://api.github.com/repos/paulidale/openssl/commits/425036130dfb3cfbef5937772f7526ce60133264"},{"sha":"de4dc598024fd0a9c2b7a466fd5323755d369522","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Don't negotiate TLSv1.3 if our EC cert isn't TLSv1.3 capable\n\nTLSv1.3 is more restrictive about the curve used. There must be a matching\nsig alg defined for that curve. Therefore if we are using some other curve\nin our certificate then we should not negotiate TLSv1.3.\n\nFixes #7435\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7442)","distinct":true,"url":"https://api.github.com/repos/paulidale/openssl/commits/de4dc598024fd0a9c2b7a466fd5323755d369522"},{"sha":"83c81eebed52aa84b6b34d26e984c859158ca1c0","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Add some test brainpool certificates\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7442)","distinct":true,"url":"https://api.github.com/repos/paulidale/openssl/commits/83c81eebed52aa84b6b34d26e984c859158ca1c0"},{"sha":"24ae00388fb9e25af8f94d36b7c191ae90061586","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Test use of a brainpool ECDSA certificate\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7442)","distinct":true,"url":"https://api.github.com/repos/paulidale/openssl/commits/24ae00388fb9e25af8f94d36b7c191ae90061586"},{"sha":"98732979001dbb59320803713c4c91ba40234250","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Separate ca_names handling for client and server\n\nSSL(_CTX)?_set_client_CA_list() was a server side only function in 1.1.0.\nIf it was called on the client side then it was ignored. In 1.1.1 it now\nmakes sense to have a CA list defined for both client and server (the\nclient now sends it the the TLSv1.3 certificate_authorities extension).\nUnfortunately some applications were using the same SSL_CTX for both\nclients and servers and this resulted in some client ClientHellos being\nexcessively large due to the number of certificate authorities being sent.\n\nThis commit seperates out the CA list updated by\nSSL(_CTX)?_set_client_CA_list() and the more generic\nSSL(_CTX)?_set0_CA_list(). This means that SSL(_CTX)?_set_client_CA_list()\nstill has no effect on the client side. If both CA lists are set then\nSSL(_CTX)?_set_client_CA_list() takes priority.\n\nFixes #7411\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7503)","distinct":true,"url":"https://api.github.com/repos/paulidale/openssl/commits/98732979001dbb59320803713c4c91ba40234250"},{"sha":"fb8c83599e869516552f7c27bdc4dd26947fe657","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Add a test for SSL_CTX_set0_CA_list()/SSL_CTX_set_client_CA_list()\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7503)","distinct":true,"url":"https://api.github.com/repos/paulidale/openssl/commits/fb8c83599e869516552f7c27bdc4dd26947fe657"},{"sha":"6e68dae85a8f91944370125561c7ec0d5da46c20","author":{"name":"Matt Caswell","email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org"},"message":"Merge the CA list documentation for clarity\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>\n(Merged from https://github.com/openssl/openssl/pull/7503)","distinct":true,"url":"https://api.github.com/repos/paulidale/openssl/commits/6e68dae85a8f91944370125561c7ec0d5da46c20"}]}
{"actor":{"display_login":"paulidale"}}