[openssl-commits] Build failed: openssl master.4105

[AppVeyor]

Build openssl master.4105 failed


Commit 44afcc267a by Rich Salz on 6/29/2016 4:23 PM:

Cleanup obj_dat.h, obj_dat.pl


Configure your notification preferences

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Jenkins build is back to normal : 1_0_2_abi #163

[openssl . sanity]

See 

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Build failed: openssl master.4104

[AppVeyor]

Build openssl master.4104 failed


Commit f50bc19841 by Rich Salz on 6/29/2016 4:23 PM:

Cleanup obj_dat.h, obj_dat.pl


Configure your notification preferences

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Build completed: openssl 171

[AppVeyor]

Build openssl 171 completed



Commit cfe6c7f154 by Alessandro Ghedini on 6/30/2016 10:51 PM:

Fix printing private EC_KEY


Configure your notification preferences

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Errored: openssl/openssl#4781 (master - 0685b15)

[Travis CI]

Build Update for openssl/openssl
-

Build: #4781
Status: Errored

Duration: 42 minutes and 27 seconds
Commit: 0685b15 (master)
Author: Richard Levitte
Message: Windows: Recreate the $prefix variable

$prefix was removed as part of the DESTDIR work.  However, it was
still used to create the ENGINESDIR_dev and ENGINESDIR_dir variables,
so a restoration is needed.

Reviewed-by: Rich Salz 

View the changeset: 
https://github.com/openssl/openssl/compare/c0c9c0c026d9...0685b15a68db

View the full build log and details: 
https://travis-ci.org/openssl/openssl/builds/141399272

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Still Failing: openssl/openssl#4777 (OpenSSL_1_0_2-stable - cb5ebf9)

[Travis CI]

Build Update for openssl/openssl
-

Build: #4777
Status: Still Failing

Duration: 57 minutes and 35 seconds
Commit: cb5ebf9 (OpenSSL_1_0_2-stable)
Author: Matt Caswell
Message: Convert memset calls to OPENSSL_cleanse

Ensure things really do get cleared when we intend them to.

Addresses an OCAP Audit issue.

Reviewed-by: Andy Polyakov 

View the changeset: 
https://github.com/openssl/openssl/compare/6ad8c4829162...cb5ebf961333

View the full build log and details: 
https://travis-ci.org/openssl/openssl/builds/141363654

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] [openssl] master update

[Richard Levitte]

The branch master has been updated
   via  0685b15a68db1cd24678432f38b88f217495cbb9 (commit)
  from  c0c9c0c026d9676c9ebb6f5b0b900b8c3fac6673 (commit)


- Log -
commit 0685b15a68db1cd24678432f38b88f217495cbb9
Author: Richard Levitte 
Date:   Thu Jun 30 00:10:21 2016 +0200

Windows: Recreate the $prefix variable

$prefix was removed as part of the DESTDIR work.  However, it was
still used to create the ENGINESDIR_dev and ENGINESDIR_dir variables,
so a restoration is needed.

Reviewed-by: Rich Salz 

---

Summary of changes:
 Configurations/windows-makefile.tmpl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Configurations/windows-makefile.tmpl 
b/Configurations/windows-makefile.tmpl
index b2e6cf5..fa430b6 100644
--- a/Configurations/windows-makefile.tmpl
+++ b/Configurations/windows-makefile.tmpl
@@ -90,9 +90,9 @@ GENERATED={- join(" ",
 INSTALLTOP_dev={- # $prefix is used in the OPENSSLDIR perl snippet
   #
   use File::Spec::Functions qw(:DEFAULT splitpath);
+  our $prefix = $config{prefix} || "$win_installroot\\OpenSSL";
   our ($prefix_dev, $prefix_dir, $prefix_file) =
-  splitpath($config{prefix} || "$win_installroot\\OpenSSL",
-1);
+  splitpath($prefix, 1);
   $prefix_dev -}
 INSTALLTOP_dir={- $prefix_dir -}
 OPENSSLDIR_dev={- #
_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] [openssl] master update

[Rich Salz]

The branch master has been updated
   via  c0c9c0c026d9676c9ebb6f5b0b900b8c3fac6673 (commit)
   via  7e1445b03e46db64425f63c060b3ff74295067e5 (commit)
  from  3ce2fdabe6e33952bf3011acf5b68107e6352603 (commit)


- Log -
commit c0c9c0c026d9676c9ebb6f5b0b900b8c3fac6673
Author: FdaSilvaYY 
Date:   Sat Jun 18 15:05:24 2016 +0200

Constify a bit more OPENSSL_sk_ API

Reviewed-by: Richard Levitte 
Reviewed-by: Rich Salz 
(Merged from https://github.com/openssl/openssl/pull/1244)

commit 7e1445b03e46db64425f63c060b3ff74295067e5
Author: FdaSilvaYY 
Date:   Thu Jun 2 00:59:34 2016 +0200

Use directly zalloc in OPENSSL_sk_dup and OPENSSL_sk_deep_copy

Reviewed-by: Richard Levitte 
Reviewed-by: Rich Salz 
(Merged from https://github.com/openssl/openssl/pull/1244)

---

Summary of changes:
 crypto/stack/stack.c   | 41 ++---
 doc/crypto/DEFINE_STACK_OF.pod |  4 ++--
 include/openssl/safestack.h|  6 +++---
 include/openssl/stack.h|  4 ++--
 4 files changed, 25 insertions(+), 30 deletions(-)

diff --git a/crypto/stack/stack.c b/crypto/stack/stack.c
index 0076db1..02be8af 100644
--- a/crypto/stack/stack.c
+++ b/crypto/stack/stack.c
@@ -36,49 +36,44 @@ OPENSSL_sk_compfunc OPENSSL_sk_set_cmp_func(OPENSSL_STACK 
*sk, OPENSSL_sk_compfu
 return old;
 }
 
-OPENSSL_STACK *OPENSSL_sk_dup(OPENSSL_STACK *sk)
+OPENSSL_STACK *OPENSSL_sk_dup(const OPENSSL_STACK *sk)
 {
 OPENSSL_STACK *ret;
-char **s;
 
-if ((ret = OPENSSL_sk_new(sk->comp)) == NULL)
-goto err;
-s = OPENSSL_realloc((char *)ret->data,
-(unsigned int)sizeof(char *) * sk->num_alloc);
-if (s == NULL)
-goto err;
-ret->data = s;
+if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL)
+return NULL;
+
+/* direct structure assignment */
+*ret = *sk;
 
-ret->num = sk->num;
+if ((ret->data = OPENSSL_malloc(sizeof(*ret->data) * sk->num_alloc)) == 
NULL)
+goto err;
 memcpy(ret->data, sk->data, sizeof(char *) * sk->num);
-ret->sorted = sk->sorted;
-ret->num_alloc = sk->num_alloc;
-ret->comp = sk->comp;
-return (ret);
+return ret;
  err:
 OPENSSL_sk_free(ret);
-return (NULL);
+return NULL;
 }
 
-OPENSSL_STACK *OPENSSL_sk_deep_copy(OPENSSL_STACK *sk, OPENSSL_sk_copyfunc 
copy_func,
+OPENSSL_STACK *OPENSSL_sk_deep_copy(const OPENSSL_STACK *sk,
+ OPENSSL_sk_copyfunc copy_func,
  OPENSSL_sk_freefunc free_func)
 {
 OPENSSL_STACK *ret;
 int i;
 
 if ((ret = OPENSSL_malloc(sizeof(*ret))) == NULL)
-return ret;
-ret->comp = sk->comp;
-ret->sorted = sk->sorted;
-ret->num = sk->num;
+return NULL;
+
+/* direct structure assignment */
+*ret = *sk;
+
 ret->num_alloc = sk->num > MIN_NODES ? sk->num : MIN_NODES;
-ret->data = OPENSSL_malloc(sizeof(*ret->data) * ret->num_alloc);
+ret->data = OPENSSL_zalloc(sizeof(*ret->data) * ret->num_alloc);
 if (ret->data == NULL) {
 OPENSSL_free(ret);
 return NULL;
 }
-for (i = 0; i < ret->num_alloc; i++)
-ret->data[i] = NULL;
 
 for (i = 0; i < ret->num; ++i) {
 if (sk->data[i] == NULL)
diff --git a/doc/crypto/DEFINE_STACK_OF.pod b/doc/crypto/DEFINE_STACK_OF.pod
index 996bfcd..94e483f 100644
--- a/doc/crypto/DEFINE_STACK_OF.pod
+++ b/doc/crypto/DEFINE_STACK_OF.pod
@@ -50,8 +50,8 @@ stack container
  int sk_TYPE_find_ex(STACK_OF(TYPE) *sk, TYPE *ptr);
  void sk_TYPE_sort(const STACK_OF(TYPE) *sk);
  int sk_TYPE_is_sorted(const STACK_OF(TYPE) *sk);
- STACK_OF(TYPE) *sk_TYPE_dup(STACK_OF(TYPE) *sk);
- STACK_OF(TYPE) *sk_TYPE_deep_copy(STACK_OF(TYPE) *sk,
+ STACK_OF(TYPE) *sk_TYPE_dup(const STACK_OF(TYPE) *sk);
+ STACK_OF(TYPE) *sk_TYPE_deep_copy(const STACK_OF(TYPE) *sk,
sk_TYPE_copyfunc copyfunc,
sk_TYPE_freefunc freefunc);
  sk_TYPE_compfunc (*sk_TYPE_set_cmp_func(STACK_OF(TYPE) *sk, sk_TYPE_compfunc 
compare);
diff --git a/include/openssl/safestack.h b/include/openssl/safestack.h
index fb8d910..7877fd9 100644
--- a/include/openssl/safestack.h
+++ b/include/openssl/safestack.h
@@ -101,11 +101,11 @@ extern "C" {
 { \
 return OPENSSL_sk_is_sorted((const OPENSSL_STACK *)sk); \
 } \
-static ossl_inline STACK_OF(t1) * sk_##t1##_dup(STACK_OF(t1) *sk) \
+static ossl_inline STACK_OF(t1) * sk_##t1##_dup(const STACK_OF(t1) *sk) \
 { \
-return (STACK_OF(t1) *)OPENSSL_sk_dup((OPENSSL_STACK *)sk); \
+return (STACK_OF(t1) *)OPENSSL_sk_dup((const OPENSSL_STACK *)sk); \
 } \
-static ossl_inline STACK_OF(t1) 

[openssl-commits] Still Failing: mouse07410/openssl#24 (OpenSSL_1_0_2-stable - 6ad8c48)

[Travis CI]

Build Update for mouse07410/openssl
-

Build: #24
Status: Still Failing

Duration: 1 hour, 2 minutes, and 11 seconds
Commit: 6ad8c48 (OpenSSL_1_0_2-stable)
Author: Richard Levitte
Message: Allow proxy certs to be present when verifying a chain

Reviewed-by: Rich Salz 

View the changeset: 
https://github.com/mouse07410/openssl/compare/ad64a69e02f7...6ad8c4829162

View the full build log and details: 
https://travis-ci.org/mouse07410/openssl/builds/141359493

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Canceled: openssl/openssl#4774 (master - 8a3c000)

[Travis CI]

Build Update for openssl/openssl
-

Build: #4774
Status: Canceled

Duration: 25 minutes and 36 seconds
Commit: 8a3c000 (master)
Author: Kurt Cancemi
Message: Fix hmac test case 6

Reviewed-by: Richard Levitte 
Reviewed-by: Rich Salz 
(Merged from https://github.com/openssl/openssl/pull/1267)

View the changeset: 
https://github.com/openssl/openssl/compare/6f60a5a1c64e...8a3c000c8f62

View the full build log and details: 
https://travis-ci.org/openssl/openssl/builds/141333638

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] [openssl] OpenSSL_1_0_1-stable update

[Matt Caswell]

The branch OpenSSL_1_0_1-stable has been updated
   via  beaa2c03e70b523f006003a489497a18b4d53e6c (commit)
  from  08327bfb261eea4a3c356d6ebff81d838f063d1b (commit)


- Log -
commit beaa2c03e70b523f006003a489497a18b4d53e6c
Author: Matt Caswell 
Date:   Fri Jun 24 23:37:27 2016 +0100

Convert memset calls to OPENSSL_cleanse

Ensure things really do get cleared when we intend them to.

Addresses an OCAP Audit issue.

Reviewed-by: Andy Polyakov 
(cherry picked from commit cb5ebf961333896776fbce10ef88c2af7bec8aea)

---

Summary of changes:
 crypto/bn/bn_lib.c|  2 +-
 crypto/evp/digest.c   |  2 +-
 crypto/md2/md2_dgst.c |  2 +-
 crypto/md32_common.h  | 10 +-
 crypto/rand/rand_unix.c   |  2 +-
 crypto/whrlpool/wp_dgst.c |  3 ++-
 6 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c
index 80105ff..10b78f5 100644
--- a/crypto/bn/bn_lib.c
+++ b/crypto/bn/bn_lib.c
@@ -569,7 +569,7 @@ void BN_clear(BIGNUM *a)
 {
 bn_check_top(a);
 if (a->d != NULL)
-memset(a->d, 0, a->dmax * sizeof(a->d[0]));
+OPENSSL_cleanse(a->d, a->dmax * sizeof(a->d[0]));
 a->top = 0;
 a->neg = 0;
 }
diff --git a/crypto/evp/digest.c b/crypto/evp/digest.c
index 5d419ef..0654050 100644
--- a/crypto/evp/digest.c
+++ b/crypto/evp/digest.c
@@ -273,7 +273,7 @@ int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, 
unsigned int *size)
 ctx->digest->cleanup(ctx);
 EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_CLEANED);
 }
-memset(ctx->md_data, 0, ctx->digest->ctx_size);
+OPENSSL_cleanse(ctx->md_data, ctx->digest->ctx_size);
 return ret;
 }
 
diff --git a/crypto/md2/md2_dgst.c b/crypto/md2/md2_dgst.c
index 9cd79f8..7f5d9ba 100644
--- a/crypto/md2/md2_dgst.c
+++ b/crypto/md2/md2_dgst.c
@@ -219,6 +219,6 @@ int MD2_Final(unsigned char *md, MD2_CTX *c)
 
 for (i = 0; i < 16; i++)
 md[i] = (UCHAR) (p1[i] & 0xff);
-memset((char *), 0, sizeof(c));
+OPENSSL_cleanse(c, sizeof(*c));
 return 1;
 }
diff --git a/crypto/md32_common.h b/crypto/md32_common.h
index 1823833..aac7191 100644
--- a/crypto/md32_common.h
+++ b/crypto/md32_common.h
@@ -109,6 +109,8 @@
  *  
  */
 
+#include 
+
 #if !defined(DATA_ORDER_IS_BIG_ENDIAN) && !defined(DATA_ORDER_IS_LITTLE_ENDIAN)
 # error "DATA_ORDER must be defined!"
 #endif
@@ -311,6 +313,12 @@ int HASH_UPDATE(HASH_CTX *c, const void *data_, size_t len)
 data += n;
 len -= n;
 c->num = 0;
+/*
+ * We use memset rather than OPENSSL_cleanse() here deliberately.
+ * Using OPENSSL_cleanse() here could be a performance issue. It
+ * will get properly cleansed on finalisation so this isn't a
+ * security problem.
+ */
 memset(p, 0, HASH_CBLOCK); /* keep it zeroed */
 } else {
 memcpy(p + n, data, len);
@@ -366,7 +374,7 @@ int HASH_FINAL(unsigned char *md, HASH_CTX *c)
 p -= HASH_CBLOCK;
 HASH_BLOCK_DATA_ORDER(c, p, 1);
 c->num = 0;
-memset(p, 0, HASH_CBLOCK);
+OPENSSL_cleanse(p, HASH_CBLOCK);
 
 #ifndef HASH_MAKE_STRING
 # error "HASH_MAKE_STRING must be defined!"
diff --git a/crypto/rand/rand_unix.c b/crypto/rand/rand_unix.c
index 266111e..6c5b65d 100644
--- a/crypto/rand/rand_unix.c
+++ b/crypto/rand/rand_unix.c
@@ -235,7 +235,7 @@ int RAND_poll(void)
 rnd >>= 8;
 }
 RAND_add(buf, sizeof(buf), ENTROPY_NEEDED);
-memset(buf, 0, sizeof(buf));
+OPENSSL_cleanse(buf, sizeof(buf));
 
 return 1;
 }
diff --git a/crypto/whrlpool/wp_dgst.c b/crypto/whrlpool/wp_dgst.c
index e33bb4f..807d1c4 100644
--- a/crypto/whrlpool/wp_dgst.c
+++ b/crypto/whrlpool/wp_dgst.c
@@ -51,6 +51,7 @@
  * input. This is done for perfomance.
  */
 
+#include 
 #include "wp_locl.h"
 #include 
 #include 
@@ -237,7 +238,7 @@ int WHIRLPOOL_Final(unsigned char *md, WHIRLPOOL_CTX *c)
 
 if (md) {
 memcpy(md, c->H.c, WHIRLPOOL_DIGEST_LENGTH);
-memset(c, 0, sizeof(*c));
+OPENSSL_cleanse(c, sizeof(*c));
 return (1);
 }
 return (0);
_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] [openssl] OpenSSL_1_0_2-stable update

[Matt Caswell]

The branch OpenSSL_1_0_2-stable has been updated
   via  cb5ebf961333896776fbce10ef88c2af7bec8aea (commit)
  from  6ad8c48291622a6ccc51489b9a230c9a05ca5614 (commit)


- Log -
commit cb5ebf961333896776fbce10ef88c2af7bec8aea
Author: Matt Caswell 
Date:   Fri Jun 24 23:37:27 2016 +0100

Convert memset calls to OPENSSL_cleanse

Ensure things really do get cleared when we intend them to.

Addresses an OCAP Audit issue.

Reviewed-by: Andy Polyakov 

---

Summary of changes:
 crypto/bn/bn_lib.c|  2 +-
 crypto/evp/digest.c   |  2 +-
 crypto/md2/md2_dgst.c |  2 +-
 crypto/md32_common.h  | 10 +-
 crypto/rand/rand_unix.c   |  2 +-
 crypto/whrlpool/wp_dgst.c |  3 ++-
 6 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c
index 80105ff..10b78f5 100644
--- a/crypto/bn/bn_lib.c
+++ b/crypto/bn/bn_lib.c
@@ -569,7 +569,7 @@ void BN_clear(BIGNUM *a)
 {
 bn_check_top(a);
 if (a->d != NULL)
-memset(a->d, 0, a->dmax * sizeof(a->d[0]));
+OPENSSL_cleanse(a->d, a->dmax * sizeof(a->d[0]));
 a->top = 0;
 a->neg = 0;
 }
diff --git a/crypto/evp/digest.c b/crypto/evp/digest.c
index ee4296e..4db1796 100644
--- a/crypto/evp/digest.c
+++ b/crypto/evp/digest.c
@@ -285,7 +285,7 @@ int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, 
unsigned int *size)
 ctx->digest->cleanup(ctx);
 EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_CLEANED);
 }
-memset(ctx->md_data, 0, ctx->digest->ctx_size);
+OPENSSL_cleanse(ctx->md_data, ctx->digest->ctx_size);
 return ret;
 }
 
diff --git a/crypto/md2/md2_dgst.c b/crypto/md2/md2_dgst.c
index 9cd79f8..7f5d9ba 100644
--- a/crypto/md2/md2_dgst.c
+++ b/crypto/md2/md2_dgst.c
@@ -219,6 +219,6 @@ int MD2_Final(unsigned char *md, MD2_CTX *c)
 
 for (i = 0; i < 16; i++)
 md[i] = (UCHAR) (p1[i] & 0xff);
-memset((char *), 0, sizeof(c));
+OPENSSL_cleanse(c, sizeof(*c));
 return 1;
 }
diff --git a/crypto/md32_common.h b/crypto/md32_common.h
index 96828d2..b5a04bf 100644
--- a/crypto/md32_common.h
+++ b/crypto/md32_common.h
@@ -109,6 +109,8 @@
  *  
  */
 
+#include 
+
 #if !defined(DATA_ORDER_IS_BIG_ENDIAN) && !defined(DATA_ORDER_IS_LITTLE_ENDIAN)
 # error "DATA_ORDER must be defined!"
 #endif
@@ -329,6 +331,12 @@ int HASH_UPDATE(HASH_CTX *c, const void *data_, size_t len)
 data += n;
 len -= n;
 c->num = 0;
+/*
+ * We use memset rather than OPENSSL_cleanse() here deliberately.
+ * Using OPENSSL_cleanse() here could be a performance issue. It
+ * will get properly cleansed on finalisation so this isn't a
+ * security problem.
+ */
 memset(p, 0, HASH_CBLOCK); /* keep it zeroed */
 } else {
 memcpy(p + n, data, len);
@@ -384,7 +392,7 @@ int HASH_FINAL(unsigned char *md, HASH_CTX *c)
 p -= HASH_CBLOCK;
 HASH_BLOCK_DATA_ORDER(c, p, 1);
 c->num = 0;
-memset(p, 0, HASH_CBLOCK);
+OPENSSL_cleanse(p, HASH_CBLOCK);
 
 #ifndef HASH_MAKE_STRING
 # error "HASH_MAKE_STRING must be defined!"
diff --git a/crypto/rand/rand_unix.c b/crypto/rand/rand_unix.c
index 266111e..6c5b65d 100644
--- a/crypto/rand/rand_unix.c
+++ b/crypto/rand/rand_unix.c
@@ -235,7 +235,7 @@ int RAND_poll(void)
 rnd >>= 8;
 }
 RAND_add(buf, sizeof(buf), ENTROPY_NEEDED);
-memset(buf, 0, sizeof(buf));
+OPENSSL_cleanse(buf, sizeof(buf));
 
 return 1;
 }
diff --git a/crypto/whrlpool/wp_dgst.c b/crypto/whrlpool/wp_dgst.c
index e33bb4f..807d1c4 100644
--- a/crypto/whrlpool/wp_dgst.c
+++ b/crypto/whrlpool/wp_dgst.c
@@ -51,6 +51,7 @@
  * input. This is done for perfomance.
  */
 
+#include 
 #include "wp_locl.h"
 #include 
 #include 
@@ -237,7 +238,7 @@ int WHIRLPOOL_Final(unsigned char *md, WHIRLPOOL_CTX *c)
 
 if (md) {
 memcpy(md, c->H.c, WHIRLPOOL_DIGEST_LENGTH);
-memset(c, 0, sizeof(*c));
+OPENSSL_cleanse(c, sizeof(*c));
 return (1);
 }
 return (0);
_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Canceled: FdaSilvaYY/openssl#1279 (various-app-fixes - 70693ba)

[Travis CI]

Build Update for FdaSilvaYY/openssl
-

Build: #1279
Status: Canceled

Duration: 28 minutes and 26 seconds
Commit: 70693ba (various-app-fixes)
Author: FdaSilvaYY
Message: Fix double calls to strlen

View the changeset: 
https://github.com/FdaSilvaYY/openssl/compare/20d802d2aec2...70693ba64efb

View the full build log and details: 
https://travis-ci.org/FdaSilvaYY/openssl/builds/141207049

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] [openssl] master update

[Matt Caswell]

The branch master has been updated
   via  6f4ae777f5100715a96b45355a1195c2efa96b4e (commit)
   via  fb5b14b420a0bff6e3f756ec4879644b6d5622c5 (commit)
  from  8a3c000c8f621cd01929313fcb7d0cc23fb516a6 (commit)


- Log -
commit 6f4ae777f5100715a96b45355a1195c2efa96b4e
Author: Matt Caswell 
Date:   Mon Jun 27 14:35:35 2016 +0100

Cleanup documentation for removed functionality

Remove some lingering references to removed functionality from docs.

Reviewed-by: Stephen Henson 

commit fb5b14b420a0bff6e3f756ec4879644b6d5622c5
Author: Matt Caswell 
Date:   Mon Jun 27 12:28:32 2016 +0100

Add some compat macros for removed tmp RSA functions/macros

Commit 361a119 removed all ciphersuites that could support temporary
RSA keys, therefore the associated functions were removed. We should have
"no-op" compatibility macros for these.

Reviewed-by: Stephen Henson 

---

Summary of changes:
 doc/ssl/SSL_CTX_set_tmp_dh_callback.pod |  1 -
 doc/ssl/ssl.pod |  2 --
 include/openssl/ssl.h   | 13 +
 3 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod 
b/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod
index 7ed93ab..fbfb8cb 100644
--- a/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod
+++ b/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod
@@ -122,7 +122,6 @@ on failure. Check the error queue to find out the reason of 
failure.
 =head1 SEE ALSO
 
 L, L,
-L,
 L,
 L, L
 
diff --git a/doc/ssl/ssl.pod b/doc/ssl/ssl.pod
index 589fc2d..dfd83ea 100644
--- a/doc/ssl/ssl.pod
+++ b/doc/ssl/ssl.pod
@@ -270,8 +270,6 @@ protocol context defined in the B structure.
 
 =item int B(SSL_CTX *ctx, const char *CAfile, 
const char *CApath);
 
-=item long B(SSL_CTX *ctx);
-
 =item SSL_CTX *B(const SSL_METHOD *meth);
 
 =item int SSL_CTX_up_ref(SSL_CTX *ctx);
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h
index abfbed4..cc66dd8 100644
--- a/include/openssl/ssl.h
+++ b/include/openssl/ssl.h
@@ -1270,6 +1270,19 @@ DECLARE_PEM_rw(SSL_SESSION, SSL_SESSION)
 #define SSL_set_max_proto_version(s, version) \
 SSL_ctrl(s, SSL_CTRL_SET_MAX_PROTO_VERSION, version, NULL)
 
+#if OPENSSL_API_COMPAT < 0x1010L
+/* Provide some compatibility macros for removed functionality. */
+# define SSL_CTX_need_tmp_RSA(ctx)0
+# define SSL_CTX_set_tmp_rsa(ctx,rsa) 1
+# define SSL_need_tmp_RSA(ssl)0
+# define SSL_set_tmp_rsa(ssl,rsa) 1
+/*
+ * We "preted" to call the callback to avoid warnings about unused static
+ * functions.
+ */
+# define SSL_CTX_set_tmp_rsa_callback(ctx, cb)while(0) (cb)(NULL, 0, 0)
+# define SSL_set_tmp_rsa_callback(ssl, cb)while(0) (cb)(NULL, 0, 0)
+#endif
 
 __owur const BIO_METHOD *BIO_f_ssl(void);
 __owur BIO *BIO_new_ssl(SSL_CTX *ctx, int client);
_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Errored: FdaSilvaYY/openssl#1278 (include_cleanup - 1ca8e76)

[Travis CI]

Build Update for FdaSilvaYY/openssl
-

Build: #1278
Status: Errored

Duration: 54 minutes and 53 seconds
Commit: 1ca8e76 (include_cleanup)
Author: FdaSilvaYY
Message: Clean pem.h header file include

View the changeset: 
https://github.com/FdaSilvaYY/openssl/compare/bfd0eb4c52ab...1ca8e7648d93

View the full build log and details: 
https://travis-ci.org/FdaSilvaYY/openssl/builds/141206697

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Passed: openssl/openssl#4769 (master - 8e21938)

[Travis CI]

Build Update for openssl/openssl
-

Build: #4769
Status: Passed

Duration: 58 minutes and 17 seconds
Commit: 8e21938 (master)
Author: Richard Levitte
Message: Remove the envvar hack to enable proxy cert processing

When the proxy cert code was initially added, some application authors
wanted to get them verified without having to change their code, so a
check of the env var OPENSSL_ALLOW_PROXY_CERTS was added.

Since then, the use of this variable has become irrelevant, as it's
likely that code has been changed since, so it's time it gets removed.

Reviewed-by: Tim Hudson 

View the changeset: 
https://github.com/openssl/openssl/compare/6b4a77f56e14...8e21938ce3a5

View the full build log and details: 
https://travis-ci.org/openssl/openssl/builds/141219812

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] [openssl] master update

[Rich Salz]

The branch master has been updated
   via  8a3c000c8f621cd01929313fcb7d0cc23fb516a6 (commit)
  from  6f60a5a1c64ea0e7b0cefddd5c676b727a90f3df (commit)


- Log -
commit 8a3c000c8f621cd01929313fcb7d0cc23fb516a6
Author: Kurt Cancemi 
Date:   Wed Jun 29 07:03:28 2016 -0400

Fix hmac test case 6

Reviewed-by: Richard Levitte 
Reviewed-by: Rich Salz 
(Merged from https://github.com/openssl/openssl/pull/1267)

---

Summary of changes:
 test/hmactest.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/test/hmactest.c b/test/hmactest.c
index 0f4348b..a5c6e74 100644
--- a/test/hmactest.c
+++ b/test/hmactest.c
@@ -71,8 +71,8 @@ static struct test_st {
 (unsigned char 
*)"bab53058ae861a7f191abe2d0145cbb123776a6369ee3f9d79ce455667e411dd"
 },
 {
-"12345", 5, "My test data again", 12,
-(unsigned char *)"7dbe8c764c068e3bcd6e6b0fbcd5e6fc197b15bb"
+"12345", 5, "My test data again", 18,
+(unsigned char *)"a12396ceddd2a85f4c656bc1e0aa50c78cffde3e"
 }
 };
 # endif
_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] [openssl] master update

[Rich Salz]

The branch master has been updated
   via  6f60a5a1c64ea0e7b0cefddd5c676b727a90f3df (commit)
  from  8e21938ce3a5306df753eb40a20fe30d17cf4a68 (commit)


- Log -
commit 6f60a5a1c64ea0e7b0cefddd5c676b727a90f3df
Author: Rich Salz 
Date:   Thu Jun 30 08:51:16 2016 -0400

Restore clang builds in travis.yml

Reviewed-by: Richard Levitte 

---

Summary of changes:
 .travis.yml | 22 +-
 1 file changed, 9 insertions(+), 13 deletions(-)

diff --git a/.travis.yml b/.travis.yml
index 38a298a..2232649 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -5,13 +5,13 @@ addons:
 apt:
 packages:
 - ccache
-#- clang-3.6
+- clang-3.6
 - gcc-5
 - binutils-mingw-w64
 - gcc-mingw-w64
 - wine
 sources:
-#- llvm-toolchain-precise-3.6
+- llvm-toolchain-precise-3.6
 - ubuntu-toolchain-r-test
 
 os:
@@ -32,21 +32,17 @@ env:
 matrix:
 include:
 - os: linux
-  compiler: clang
+  compiler: clang-3.6
   env: CONFIG_OPTS="no-shared enable-asan"
-#- os: linux
-#  compiler: clang-3.6
-#  compiler: clang
-#  env: CONFIG_OPTS="no-shared enable-asan"
-#- os: linux
-#  compiler: clang-3.6
-#  env: CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 
-fno-sanitize=alignment"
 - os: linux
-  compiler: gcc-5
-  env: CONFIG_OPTS="no-shared no-asm enable-rc5 enable-md2"
+  compiler: clang-3.6
+  env: CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 
-fno-sanitize=alignment"
+- os: linux
+  compiler: clang-3.6
+  env: CONFIG_OPTS="no-shared no-asm enable-asan enable-rc5 enable-md2"
 - os: linux
   compiler: gcc-5
-  env: CONFIG_OPTS="no-asm enable-rc5 enable-md2 -DPEDANTIC"
+  env: CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 
-DPEDANTIC"
 - os: linux
   compiler: i686-w64-mingw32-gcc
   env: CONFIG_OPTS="no-pic"
_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Passed: FdaSilvaYY/openssl#1273 (crypto-add-checks-on-sk_type_push - 01dc89e)

[Travis CI]

Build Update for FdaSilvaYY/openssl
-

Build: #1273
Status: Passed

Duration: 31 minutes and 57 seconds
Commit: 01dc89e (crypto-add-checks-on-sk_type_push)
Author: FdaSilvaYY
Message: Fix mem error handling in PKCS7_simple_smimecap

View the changeset: 
https://github.com/FdaSilvaYY/openssl/compare/aecdc9b09caf...01dc89e460f2

View the full build log and details: 
https://travis-ci.org/FdaSilvaYY/openssl/builds/141203158

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Still Failing: openssl/openssl#4765 (OpenSSL_1_0_2-stable - 6ad8c48)

[Travis CI]

Build Update for openssl/openssl
-

Build: #4765
Status: Still Failing

Duration: 4 minutes and 0 seconds
Commit: 6ad8c48 (OpenSSL_1_0_2-stable)
Author: Richard Levitte
Message: Allow proxy certs to be present when verifying a chain

Reviewed-by: Rich Salz 

View the changeset: 
https://github.com/openssl/openssl/compare/ad64a69e02f7...6ad8c4829162

View the full build log and details: 
https://travis-ci.org/openssl/openssl/builds/141191836

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Canceled: FdaSilvaYY/openssl#1271 (constify_2 - db9f800)

[Travis CI]

Build Update for FdaSilvaYY/openssl
-

Build: #1271
Status: Canceled

Duration: 2 minutes and 55 seconds
Commit: db9f800 (constify_2)
Author: FdaSilvaYY
Message: Constify some  ASN1_OBJECT ASN1_STRING, X509_NAME printing code

View the changeset: 
https://github.com/FdaSilvaYY/openssl/compare/829116d645c7...db9f8004695a

View the full build log and details: 
https://travis-ci.org/FdaSilvaYY/openssl/builds/141202775

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Passed: FdaSilvaYY/openssl#1270 (master - 6b4a77f)

[Travis CI]

Build Update for FdaSilvaYY/openssl
-

Build: #1270
Status: Passed

Duration: 5 minutes and 24 seconds
Commit: 6b4a77f (master)
Author: FdaSilvaYY
Message: Whitespace cleanup in apps

Reviewed-by: Andy Polyakov 
Reviewed-by: Kurt Roeckx 
Reviewed-by: Rich Salz 
(Merged from https://github.com/openssl/openssl/pull/1264)

View the changeset: 
https://github.com/FdaSilvaYY/openssl/compare/03cb37acec0c...6b4a77f56e14

View the full build log and details: 
https://travis-ci.org/FdaSilvaYY/openssl/builds/141201599

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Build completed: openssl 1.0.548

[AppVeyor]

Build openssl 1.0.548 completed



Commit d420f5f0d8 by FdaSilvaYY on 6/29/2016 10:11 PM:

OCSP_accept_responses_new


Configure your notification preferences

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits

[openssl-commits] Errored: FdaSilvaYY/openssl#1269 (simplify-sk_dup - 785e20e)

[Travis CI]

Build Update for FdaSilvaYY/openssl
-

Build: #1269
Status: Errored

Duration: 1 hour, 8 minutes, and 59 seconds
Commit: 785e20e (simplify-sk_dup)
Author: FdaSilvaYY
Message: Constify a bit more OPENSSL_sk_ API

View the changeset: 
https://github.com/FdaSilvaYY/openssl/compare/91be092dddc2...785e20e76ed7

View the full build log and details: 
https://travis-ci.org/FdaSilvaYY/openssl/builds/141201474

--

You can configure recipients for build notifications in your .travis.yml file. 
See https://docs.travis-ci.com/user/notifications

_
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits