Branch: refs/heads/feature/dtls-1.3
Home: https://github.com/openssl/openssl
Commit: e1e6b7cefae3cd455cc42b897b58c3a38f46202d
https://github.com/openssl/openssl/commit/e1e6b7cefae3cd455cc42b897b58c3a38f46202d
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M include/openssl/prov_ssl.h
M include/openssl/ssl.h.in
M ssl/d1_lib.c
M ssl/methods.c
M ssl/record/methods/recmethod_local.h
M ssl/record/methods/tls13_meth.c
M ssl/ssl_local.h
Log Message:
-----------
Adds initial dtls 1.3 structs and definitions
Reviewed-by: Neil Horman <nhor...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Richard Levitte <levi...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22259)
Commit: ecf5bdde53536526e17dd8b55adb20121c94b00c
https://github.com/openssl/openssl/commit/ecf5bdde53536526e17dd8b55adb20121c94b00c
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/methods.c
Log Message:
-----------
Remove compile guards for dtls1.3 method implementations
Reviewed-by: Neil Horman <nhor...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Richard Levitte <levi...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22259)
Commit: 79b63cf535aa2844e3516409222061793afa933b
https://github.com/openssl/openssl/commit/79b63cf535aa2844e3516409222061793afa933b
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M apps/include/opt.h
M apps/lib/s_cb.c
M apps/s_client.c
M apps/s_server.c
Log Message:
-----------
Integrate dtls1.3 in s_client and s_server
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22260)
Commit: a503dbd5d2d4879b9f878303870b85fe0be18493
https://github.com/openssl/openssl/commit/a503dbd5d2d4879b9f878303870b85fe0be18493
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M doc/man1/openssl-s_client.pod.in
M doc/man1/openssl-s_server.pod.in
M doc/man1/openssl.pod
M doc/perlvars.pm
Log Message:
-----------
Adds DTLS 1.3 functionality to s_client and s_server documentation.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22260)
Commit: a0211fbd2fe318cb4e1191cb18aed13ecf93df41
https://github.com/openssl/openssl/commit/a0211fbd2fe318cb4e1191cb18aed13ecf93df41
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M apps/s_client.c
Log Message:
-----------
Print session ticket for dtls 1.3 as well.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22260)
Commit: 3429dacf90ca0c11d908d39675d05c52b4d82150
https://github.com/openssl/openssl/commit/3429dacf90ca0c11d908d39675d05c52b4d82150
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/extensions_srvr.c
Log Message:
-----------
Support TLS1.3 extensions with DTLS1.3
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22261)
Commit: a3fe116338ea7c276461faaa197e7794597e31dc
https://github.com/openssl/openssl/commit/a3fe116338ea7c276461faaa197e7794597e31dc
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/tls13_enc.c
Log Message:
-----------
Use dtls1.3 cryptographic label prefix as dictated by RFC 9147 section 5.9
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22416)
Commit: 5e70e3ca645978ce9b7d4f5384e7345e42b4ed73
https://github.com/openssl/openssl/commit/5e70e3ca645978ce9b7d4f5384e7345e42b4ed73
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/tls13_enc.c
Log Message:
-----------
Determine which label prefix to use based on if the connection is dtls
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22416)
Commit: 40577a047c6fcdd67a8c69ab7e162cee3754e0ce
https://github.com/openssl/openssl/commit/40577a047c6fcdd67a8c69ab7e162cee3754e0ce
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_conf.c
M ssl/t1_trce.c
M test/helpers/ssl_test_ctx.c
M test/ssl_old_test.c
Log Message:
-----------
Adds DTLS1.3 to ssl protocol to text structs
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22273)
Commit: 47513b7160d4a32f9f2579f3c547527379374c8d
https://github.com/openssl/openssl/commit/47513b7160d4a32f9f2579f3c547527379374c8d
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_lib.c
Log Message:
-----------
Add dtls1.3 to ssl_protocol_to_string()
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22273)
Commit: 2001d9be626e9420217067042178c751c066e53d
https://github.com/openssl/openssl/commit/2001d9be626e9420217067042178c751c066e53d
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_conf.c
Log Message:
-----------
Fix protocol list for cmd_Protocol()
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22273)
Commit: 30d45f06508bea41a7038314f04093409e43be75
https://github.com/openssl/openssl/commit/30d45f06508bea41a7038314f04093409e43be75
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
M ssl/statem/statem_srvr.c
Log Message:
-----------
Update tls state machine logic to support dtls1.3 alongside tls1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22366)
Updated the logic in ssl_cipher_list_to_bytes to take account of the changes
from PR#24161
Reviewed-by: Richard Levitte <levi...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24226)
Commit: 70f0ce0e8f53789dff01bafb5a962f3d4567f386
https://github.com/openssl/openssl/commit/70f0ce0e8f53789dff01bafb5a962f3d4567f386
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_clnt.c
M ssl/statem/statem_srvr.c
Log Message:
-----------
Fix sending session ids in DTLS-1.3
DTLS 1.3 session id must not be sent by client unless
it has a cached id. And DTLS 1.3 servers must not echo
a session id from a client.
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22366)
Commit: 631fa077942380493fd3a7b973c7f68b8591580b
https://github.com/openssl/openssl/commit/631fa077942380493fd3a7b973c7f68b8591580b
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_local.h
M ssl/statem/statem.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
M ssl/statem/statem_srvr.c
Log Message:
-----------
Do DTLS13 and TLS13 connection version check in one macro
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22366)
Commit: 90322daa19545c8b3dcbed2cace881252e9769ad
https://github.com/openssl/openssl/commit/90322daa19545c8b3dcbed2cace881252e9769ad
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_srvr.c
Log Message:
-----------
Fix wrong dtls 1 and 1.2 version check
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22366)
Commit: 8388a7d5f226e54413de77f650941262419fe223
https://github.com/openssl/openssl/commit/8388a7d5f226e54413de77f650941262419fe223
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M providers/common/capabilities.c
M ssl/s3_lib.c
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/extensions_srvr.c
M ssl/t1_lib.c
Log Message:
-----------
Support TLS 1.3 kexs and groups with DTLS 1.3
SSL_CONNECTION_IS_VERSION13 macro is used where appropriate.
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22364)
Commit: 1a1925710d865b72727a44e7c9311e733f6ed03e
https://github.com/openssl/openssl/commit/1a1925710d865b72727a44e7c9311e733f6ed03e
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M util/perl/TLSProxy/Record.pm
M util/perl/TLSProxy/ServerHello.pm
Log Message:
-----------
Adds dtls 1.3 support in TLS::Proxy
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23375)
Commit: d092afee09c21899071982752ca64ec3c20ee17e
https://github.com/openssl/openssl/commit/d092afee09c21899071982752ca64ec3c20ee17e
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M apps/include/s_apps.h
Log Message:
-----------
Don't allow renegotiation for DTLS 1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22362)
Commit: 975d8ce4700ff5c875d60aba1ae891dc35f0210b
https://github.com/openssl/openssl/commit/975d8ce4700ff5c875d60aba1ae891dc35f0210b
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/record/rec_layer_d1.c
Log Message:
-----------
Make dtls1.3 changes to dtls1_read_bytes and do_dtls1_write which matches
ssl3_read_bytes and ssl3_write_bytes
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22360)
Commit: a84a938ec75d28d04ce4f1fde9655477a1ef8623
https://github.com/openssl/openssl/commit/a84a938ec75d28d04ce4f1fde9655477a1ef8623
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/record/methods/dtls_meth.c
Log Message:
-----------
Adds some more changes dtls specific functions to make them more in sync with
their tls counterparts.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22360)
Commit: f201e74b471f29738b68ee61e6b000a2a64fb96f
https://github.com/openssl/openssl/commit/f201e74b471f29738b68ee61e6b000a2a64fb96f
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_dtls.c
Log Message:
-----------
Make similar changes to dtls1_do_write() for dtls1.3 as in ssl3_do_write()
for tls1.3
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22360)
Commit: 8268924cc04cabc39f922d19f4cdc27f6850eaf0
https://github.com/openssl/openssl/commit/8268924cc04cabc39f922d19f4cdc27f6850eaf0
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/record/rec_layer_d1.c
Log Message:
-----------
Handle alerts similarly in dtls1_read_bytes() as done in ssl3_read_bytes()
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22360)
Commit: a05a3434c668b91201fc8ae8cdcedefc87348493
https://github.com/openssl/openssl/commit/a05a3434c668b91201fc8ae8cdcedefc87348493
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/t1_lib.c
Log Message:
-----------
Support TLS1.3 sigalg logic in DTLS1.3
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22380)
Commit: 424c9c8d61db0084cdfd6817b3bb588d8940fc7e
https://github.com/openssl/openssl/commit/424c9c8d61db0084cdfd6817b3bb588d8940fc7e
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_dtls.c
Log Message:
-----------
Removes an mtu assertion that fails
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22401)
Commit: f5fb9f0bd3b0d709a99c47c0eacb5b2c9843a697
https://github.com/openssl/openssl/commit/f5fb9f0bd3b0d709a99c47c0eacb5b2c9843a697
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_sess.c
M ssl/t1_lib.c
M ssl/t1_trce.c
Log Message:
-----------
Update session id and ticket logic for dtls13
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22936)
Commit: f94a886442f2afde37030f3f0c2fed8bc7e4d60a
https://github.com/openssl/openssl/commit/f94a886442f2afde37030f3f0c2fed8bc7e4d60a
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_txt.c
Log Message:
-----------
Fix session print for dtls1.3
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22936)
Commit: 8e2fab83780142ea325a29d95e49b67b015d1e3b
https://github.com/openssl/openssl/commit/8e2fab83780142ea325a29d95e49b67b015d1e3b
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/record/methods/tls_common.c
M ssl/record/methods/tlsany_meth.c
Log Message:
-----------
tls_post_encryption_processing_default() and tls_validate_record_header()
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22376)
Commit: 2d125123414e7b533e958a3c48b84a43c3411244
https://github.com/openssl/openssl/commit/2d125123414e7b533e958a3c48b84a43c3411244
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_lib.c
Log Message:
-----------
Fix ssl_lib functions for dtls 1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22378)
Commit: 8509f9601899b94a063cabf0efcfbaa5c34c0c4a
https://github.com/openssl/openssl/commit/8509f9601899b94a063cabf0efcfbaa5c34c0c4a
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/s3_lib.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
M ssl/t1_lib.c
Log Message:
-----------
Sanity tests of inputs to ssl_version_cmp
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24293)
Commit: 20dd5cf5e976bfda743cc43ae8ebe5444708f5ab
https://github.com/openssl/openssl/commit/20dd5cf5e976bfda743cc43ae8ebe5444708f5ab
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_lib.c
M ssl/t1_lib.c
Log Message:
-----------
Fix sanity tests for ssl_version_cmp for dtls 1.3 branch
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24293)
Commit: 9962774afd7ea48b37e68f96535d7574652af0bf
https://github.com/openssl/openssl/commit/9962774afd7ea48b37e68f96535d7574652af0bf
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M include/openssl/dtls1.h
M ssl/ssl_local.h
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
Log Message:
-----------
Update dtls max version
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: 180ffe377885b361c14c0a894729856638846f23
https://github.com/openssl/openssl/commit/180ffe377885b361c14c0a894729856638846f23
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_clnt.c
Log Message:
-----------
Remove obsolete TODO and guards for post handshake authentication in DTLS 1.3
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: a286ca6e1cdcbab2ec4236d5e6e68df7f7a9a216
https://github.com/openssl/openssl/commit/a286ca6e1cdcbab2ec4236d5e6e68df7f7a9a216
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_lib.c
M test/ssl_ctx_test.c
Log Message:
-----------
Update DTLS version tests
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: c26304328d48b6feb1f2ab85bffcaac2c8067e10
https://github.com/openssl/openssl/commit/c26304328d48b6feb1f2ab85bffcaac2c8067e10
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_lib.c
Log Message:
-----------
Fix version check to avoid unsupported protocol error in
ssl_choose_server_version()
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: 092812ba26faef959378d0d112c917865c6b3c3f
https://github.com/openssl/openssl/commit/092812ba26faef959378d0d112c917865c6b3c3f
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/extensions_clnt.c
Log Message:
-----------
Fix renegotiation check that was added in
https://github.com/openssl/openssl/pull/24161
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: 9782bd69ef3c9cf21e2b30838ec0d7a92f530d0e
https://github.com/openssl/openssl/commit/9782bd69ef3c9cf21e2b30838ec0d7a92f530d0e
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M fuzz/dtlsclient.c
M test/dtls_mtu_test.c
M test/dtlstest.c
M test/ssl-tests/29-dtls-sctp-label-bug.cnf
M test/ssl-tests/29-dtls-sctp-label-bug.cnf.in
Log Message:
-----------
Run some failing tests with DTLS1.2
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: a3d404c5a9a2f4eda29413a2b471976d2141f919
https://github.com/openssl/openssl/commit/a3d404c5a9a2f4eda29413a2b471976d2141f919
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/ssl-tests/07-dtls-protocol-version.cnf
M test/ssl-tests/11-dtls_resumption.cnf
M test/ssl-tests/protocol_version.pm
Log Message:
-----------
Fix test_ssl_new tests
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: de70500343bb6725218b40ecc51060d76ad8e1f3
https://github.com/openssl/openssl/commit/de70500343bb6725218b40ecc51060d76ad8e1f3
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/extensions_srvr.c
Log Message:
-----------
Check that both tls1.3 and dtls1.3 is disabled before removing code from
compilation path.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: a49587d1ae3aabf398b01270a32bfbc31b0ac2c3
https://github.com/openssl/openssl/commit/a49587d1ae3aabf398b01270a32bfbc31b0ac2c3
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_local.h
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
M ssl/statem/statem_srvr.c
Log Message:
-----------
Disable middlebox for dtls
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: 71fc0af8831f9f053d1dbcb39ccf4ca1a57a1956
https://github.com/openssl/openssl/commit/71fc0af8831f9f053d1dbcb39ccf4ca1a57a1956
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/tls13_enc.c
M test/tls13secretstest.c
Log Message:
-----------
Clear old messages from queues in order to avoid leaks of record layer
objects.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <m...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22275)
Commit: 1cdbbeb2cf2dd6dee5bd600ada48ae36d3bc4a77
https://github.com/openssl/openssl/commit/1cdbbeb2cf2dd6dee5bd600ada48ae36d3bc4a77
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/t1_trce.c
Log Message:
-----------
Correct traces for certificates in dtls13
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22935)
Commit: c5c7a2ef26c9a1b07e4a6746098b07c33a5c7f52
https://github.com/openssl/openssl/commit/c5c7a2ef26c9a1b07e4a6746098b07c33a5c7f52
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M doc/man1/openssl-s_client.pod.in
M doc/man3/SSL_CIPHER_get_name.pod
M doc/man3/SSL_CONF_cmd.pod
M doc/man3/SSL_CTX_set0_CA_list.pod
M doc/man3/SSL_CTX_set1_sigalgs.pod
M doc/man3/SSL_CTX_set_min_proto_version.pod
M doc/man3/SSL_CTX_set_num_tickets.pod
M doc/man3/SSL_CTX_set_options.pod
M doc/man3/SSL_check_chain.pod
M doc/man3/SSL_export_keying_material.pod
M doc/man3/SSL_get_shared_sigalgs.pod
M doc/man3/SSL_get_version.pod
Log Message:
-----------
Update documentation for DTLS1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22363)
Commit: f915625f51a4852abb263a01c61512c329cc6359
https://github.com/openssl/openssl/commit/f915625f51a4852abb263a01c61512c329cc6359
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M doc/man3/SSL_CONF_cmd.pod
Log Message:
-----------
Updates SSL_CONF_cmd.pod to be explicit when features are for both TLS and
DTLS
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22363)
Commit: 59b17a0b17a749e00fbc49c05ee44254dd539350
https://github.com/openssl/openssl/commit/59b17a0b17a749e00fbc49c05ee44254dd539350
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M doc/man3/SSL_CONF_cmd.pod
Log Message:
-----------
Mention brainpoolP256r1tls13, brainpoolP384r1tls13, brainpoolP512r1tls13 in
SSL_CONF_cmd.pod
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22363)
Commit: 14cd195bed0520acaa4a3c72e12f5e293cdcf102
https://github.com/openssl/openssl/commit/14cd195bed0520acaa4a3c72e12f5e293cdcf102
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/ssl_local.h
Log Message:
-----------
Fix description of version field of ssl connection struct
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22937)
Commit: a80b02e796cc504c78f2f8a53e3acfe881f11307
https://github.com/openssl/openssl/commit/a80b02e796cc504c78f2f8a53e3acfe881f11307
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_srvr.c
Log Message:
-----------
Continue processing cookieless client hellos for dtls1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22400)
Commit: eb2be8986d90683c9857dceb980e59fff6166b7a
https://github.com/openssl/openssl/commit/eb2be8986d90683c9857dceb980e59fff6166b7a
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/ssl-tests/02-protocol-version.cnf
M test/ssl-tests/07-dtls-protocol-version.cnf
M test/ssl-tests/10-resumption.cnf
M test/ssl-tests/protocol_version.pm
Log Message:
-----------
Adds DTLSv1.3 to protocol_version.pm for additional protocol version tests.
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23242)
Commit: 3d5233ccbd822dc77987e8bb191b2b4b5f835ca4
https://github.com/openssl/openssl/commit/3d5233ccbd822dc77987e8bb191b2b4b5f835ca4
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/dtlstest.c
M test/sslapitest.c
Log Message:
-----------
Run test_cookie() test with DTLS 1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24425)
Commit: 7f8fd73cc5f75ccd4b0c6705f3fbecc6229daa81
https://github.com/openssl/openssl/commit/7f8fd73cc5f75ccd4b0c6705f3fbecc6229daa81
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
A doc/designs/dtlsv1_3/dtlsv1_3-main.md
Log Message:
-----------
Add design document for DTLS 1.3 implementation
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23041)
Commit: 0e42732dd67a2ba9c95dc5440a09bebc45d5ddf4
https://github.com/openssl/openssl/commit/0e42732dd67a2ba9c95dc5440a09bebc45d5ddf4
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M apps/s_client.c
M apps/s_server.c
M ssl/record/methods/tls_common.c
M ssl/ssl_cert.c
M ssl/ssl_ciph.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/extensions_srvr.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
M ssl/t1_lib.c
M test/sslapitest.c
Log Message:
-----------
Refactor code and fix a couple of missing DTLSv1.3 checks.
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24345)
Commit: b9b5f5fea57c3b5bcdb9a088aee2f1f6f4c46d04
https://github.com/openssl/openssl/commit/b9b5f5fea57c3b5bcdb9a088aee2f1f6f4c46d04
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/record/methods/dtls_meth.c
M ssl/statem/statem_dtls.c
Log Message:
-----------
Re-enable mtu assertion which previously failed for DTLS 1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24524)
Commit: 2c800b852dedb5c146572c3f3dfce7b0acdaa640
https://github.com/openssl/openssl/commit/2c800b852dedb5c146572c3f3dfce7b0acdaa640
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M crypto/packet.c
M include/internal/common.h
M include/internal/packet.h
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/statem_dtls.c
M ssl/statem/statem_lib.c
M test/dtls_mtu_test.c
M test/ssl-tests/29-dtls-sctp-label-bug.cnf.in
Log Message:
-----------
Place start of ClientHello correctly when calculating binder for DTLS 1.3
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24426)
Commit: 9140ba9ad7a9374005e368bcb4ce7ca621a0bb48
https://github.com/openssl/openssl/commit/9140ba9ad7a9374005e368bcb4ce7ca621a0bb48
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_dtls.c
Log Message:
-----------
Use WPACKET in dtls1_do_write()
Reviewed-by: Matt Caswell <m...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24426)
Commit: 4b810dea2da6571a4e0f0a6752277729b2355bc7
https://github.com/openssl/openssl/commit/4b810dea2da6571a4e0f0a6752277729b2355bc7
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M fuzz/dtlsclient.c
M ssl/d1_lib.c
M ssl/ssl_local.h
M ssl/statem/extensions_clnt.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
M test/dtlstest.c
Log Message:
-----------
Fix an assertion failure which happens when a DTLS 1.3 client receives a
HelloVerifyRequest.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24509)
Commit: feef23e4f18b45ca176bba6809ff82ea818c6be0
https://github.com/openssl/openssl/commit/feef23e4f18b45ca176bba6809ff82ea818c6be0
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M Configure
M test/recipes/70-test_tls13alerts.t
M util/perl/TLSProxy/Message.pm
M util/perl/TLSProxy/Proxy.pm
M util/perl/TLSProxy/Record.pm
M util/perl/TLSProxy/ServerKeyExchange.pm
Log Message:
-----------
Run 70-test_tls13alerts.t with dtls
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24525)
Commit: 218ca61ebf9ae5a75586ed00f13f5c600f8d0dd0
https://github.com/openssl/openssl/commit/218ca61ebf9ae5a75586ed00f13f5c600f8d0dd0
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/recipes/70-test_tls13cookie.t
Log Message:
-----------
Run 70-test_tls13cookie.t with dtls
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24525)
Commit: 4a53781162480d1085717fdef9ca0b9d355136b1
https://github.com/openssl/openssl/commit/4a53781162480d1085717fdef9ca0b9d355136b1
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/recipes/70-test_tls13hrr.t
Log Message:
-----------
Run 70-test_tls13hrr.t with dtls
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24525)
Commit: a022d72aaac1a593fca6fb0bc616b63b819fa59e
https://github.com/openssl/openssl/commit/a022d72aaac1a593fca6fb0bc616b63b819fa59e
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/recipes/70-test_tls13psk.t
Log Message:
-----------
Add support for running 70-test_tls13psk.t with dtls
Has to be currently disabled because it fails.
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24525)
Commit: 8ce0641f7d314b6fe97430d98f202d7e186dab4f
https://github.com/openssl/openssl/commit/8ce0641f7d314b6fe97430d98f202d7e186dab4f
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/recipes/70-test_tls13messages.t
Log Message:
-----------
Run 70-test_tls13messages.t with dtls
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24525)
Commit: 06e06d44fd6fb8651939bc0d97c523fb473d5c78
https://github.com/openssl/openssl/commit/06e06d44fd6fb8651939bc0d97c523fb473d5c78
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/recipes/70-test_tls13kexmodes.t
Log Message:
-----------
Run 70-test_tls13kexmodes.t with dtls
It is currently unsupported because of missing support in TLSProxy.
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24525)
Commit: 29be50b727303d7aab282aec66c3eaf12cec4e98
https://github.com/openssl/openssl/commit/29be50b727303d7aab282aec66c3eaf12cec4e98
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M test/recipes/70-test_tls13alerts.t
M test/recipes/70-test_tls13certcomp.t
M test/recipes/70-test_tls13cookie.t
M test/recipes/70-test_tls13hrr.t
M test/recipes/70-test_tls13psk.t
Log Message:
-----------
Run 70-test_tls13certcomp.t with dtls
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24525)
Commit: d4af398d56098fb7e5a5d7a72ee0c4642dfbbe13
https://github.com/openssl/openssl/commit/d4af398d56098fb7e5a5d7a72ee0c4642dfbbe13
Author: Frederik Wedel-Heinen <frederik.wedel-hei...@dencrypt.dk>
Date: 2024-06-27 (Thu, 27 Jun 2024)
Changed paths:
M ssl/statem/statem_clnt.c
M ssl/statem/statem_srvr.c
M test/dtls_mtu_test.c
Log Message:
-----------
Fix SCTP todo
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24605)
Compare: https://github.com/openssl/openssl/compare/928386b424da...d4af398d5609
To unsubscribe from these emails, change your notification settings at
https://github.com/openssl/openssl/settings/notifications
