As well as normal reviews, responding to user queries, wiki user requests, OMC business, handling security reports, etc., key activities this month:
- Significant review work on the Kernel TLS Socket API PR (5253) - Significant work on the FIPS Strategy and Design documents - Significnat review work on the SRP docs PR (7522) - Managed and performed the release of 1.1.1a/1.1.0j/1.0.2q - Added a missing SSLfatal call that could result in an assertion failure - Worked on PR 7442 (Don't negotiated TLSv1.3 if our EC cert isn't TLSv1.3 capable) - Worked on PR 7503 (Separate ca_names handling for client and server) - Produced and published advisory for CVE-2018-5407 - Fixed no-ec and no-tls1_2 - Fixed uninit read in siphash_internal_test - Created PR to add option to avoid atexit, and to avoid pinning of the libraries in memory (7647) - Fixed a failure in errtest affecting a number of platforms - Reviewed the BN_div constant time change (7589) - Investigated and advised on fix for 7660 (tls_construct_server_key_exchange internal error) - Investigated and created fix for Ed25519 signature maleability issue (PR 7697) - Attended the OpenSSL OMC face-2-face in Edinburgh - Attended the OpenSSL FIPS meeting in Edinburgh Matt _______________________________________________ openssl-project mailing list openssl-project@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-project
