Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2021-01-21 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 5.4.0-52-generic #57-Ubuntu SMP Thu Oct 15 10:57:00 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

3aa7212e0a ktls: Initial support for ChaCha20-Poly1305
5b57aa24c3 Ensure SRP BN_mod_exp follows the constant time path
53d650d1f3 ec_kmgmt.c: OSSL_PKEY_PARAM_DEFAULT_DIGEST is gettable param for 
EC/SM2 keys
d8ab30be9c X509v3_get_ext_by_NID.pod: Add warning on counter-intuitive behavior 
of X509v3_delete_ext() etc.
05458fdb73 apps/x509.c: Make -x509toreq respect -clrext, -sigopt, and -extfile 
options
b9fbacaa7b apps/x509.c: Add -copy_extensions option, used when transforming 
x509 <-> req
1d1d23128f 80-test_ssl_old.t: Minor corrections: update name of test dir etc.
03f4e3ded6 apps.c: Clean up copy_extensions()
2367238ced X509_REQ_print_ex(): Correct indentation of extensions, which are 
attributes
db6a47b10d X509_REQ_print_ex(): Replace weird 'a0:00' output on empty 
attributes by '(none)'
743975c7e5 constify X509_REQ_add_extensions() and X509_REQ_add_extensions_nid()
b24cfd6bf4 apps/x509.c: Major code, user guidance, and documentation cleanup
7c5237e1d7 apps/x509.c: Take the -signkey arg as default pubkey with -new
49b36afb0b 25-test_x509.t: Make test case w.r.t. self-issued cert run also 
without EC enabled
abc4439c92 25-test_x509.t: Minor update: factor out path for test input files
8cadc51706 25-test_x509.t: Minor update: do not anymore unlink test output files
63162e3d55 X509: Enable printing cert even with invalid validity times, saying 
'Bad time value'
b09aa550d3 ASN1_TIME_print() etc.: Improve doc and add comment on handling 
invalid time input
9495cfbc22 make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
3d63348a87 apps/genpkey.c: Use PEM_read_bio_Parameters_ex when reading 
parameters
ac6ea3a7c5 test-gendsa: Add test cases with FIPS provider
07b6068d24 x509_vfy.c: Rename CHECK_CB() to the more intuitively readable 
CB_FAIL_IF()
3e878d924f Remove pkey_downgrade from PKCS7 code
c972577684 util/check-format.pl: Minor improvements of whitespace checks
83b6dc8dc7 Deprecate OCSP_xxx API for OSSL_HTTP_xxx
fee0af0863 DOCS: Fix the last few remaining pass phrase options references
47b784a41b Fix memory leak in mac_newctx() on error
038f4dc68e Fix PKCS7 potential segfault
84af8027c5 CMS: Fix NULL access if d2i_CMS_bio() is not passed a 
CMS_ContentInfo**.
0d83b7b903 Rename EVP_CIPHER_CTX_get_iv and EVP_CIPHER_CTX_get_iv_state for 
clarity
3aff5b4bac Update SERVER_HELLO_MAX_LENGTH

Build log ended with (last 100 lines):

/usr/bin/perl ../openssl/test/generate_buildtest.pl md5 > test/buildtest_md5.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl mdc2 > test/buildtest_mdc2.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl modes > 
test/buildtest_modes.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl obj_mac > 
test/buildtest_obj_mac.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl objects > 
test/buildtest_objects.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl ossl_typ > 
test/buildtest_ossl_typ.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl param_build > 
test/buildtest_param_build.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl params > 
test/buildtest_params.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl pem > test/buildtest_pem.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl pem2 > test/buildtest_pem2.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl provider > 
test/buildtest_provider.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl rand > test/buildtest_rand.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl rc2 > test/buildtest_rc2.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl rc4 > test/buildtest_rc4.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl ripemd > 
test/buildtest_ripemd.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl rsa > test/buildtest_rsa.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl seed > test/buildtest_seed.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl self_test > 
test/buildtest_self_test.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl sha > test/buildtest_sha.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl srtp > test/buildtest_srtp.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl ssl2 > test/buildtest_ssl2.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl sslerr_legacy > 
test/buildtest_sslerr_legacy.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl stack > 
test/buildtest_stack.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl store > 
test/buildtest_store.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl symhacks > 
test/buildtest_symhacks.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl tls1 > test/buildtest_tls1.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl ts > test/buildtest_ts.c
/usr/bin/perl ../openssl/test/generate_buildtest.pl txt_db > 
test/buildtest_txt_db.c
/usr/bin/perl 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-10-19 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

6c8149df1f Change markdown link style in README, INSTALL, SUPPORT and 
CONTRIBUTING
84dd002f41 README: make the link to the OpenSSL 3.0 Wiki page more prominent
9096809b20 ENCODER & DECODER: set params on all encoder/decoder instances, 
unconditionally
a1fc4642e1 dev/release.sh: improve instruction for pushing the tag
b40498c6e7 TEST: modify tconversion.pl for forensics
372e72b19e Add a CHANGES entry for the SSL_SECOP_TMP_DH change
47e81a1bfa Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callback
301fcb2843 Concentrate deprecated libssl API usage in one file
192d4b9ca6 Fix missing include of string.h in apps/lib/engine.c for strcmp.
f4bd510503 list: add a -provider-info option.
994a924b3c null prov: fix gettable param array type.
e8dca211b4 Prepare for 3.0 alpha 8
f9a5682e5c Prepare for release of 3.0 alpha 7
eec0ad10b9 Update copyright year
796948cd73 Changing X509at_get0_data_by_OBJ to expect const stack of 
X509_ATTRIBUTE
a829b735b6 Rename some occurrences of 'library_context' and 'lib_ctx' to 
'libctx'
b425001010 Rename OPENSSL_CTX prefix to OSSL_LIB_CTX
29000e43ea Make evp_pkey_ctx_get0_libctx/propq public API
0d30e15a57 Remove some more CMS key downgrades
7022d9b903 Remove CMS recipient info information out of the algorithm 
implementations
9ab7fe4836 Move CMS signing code out of the algorithms and into CMS
0b3a4ef27a Move CMS enveloping code out of the algorithms and into CMS
99b3b762c3 Remove a CMS key downgrade
5b70206cb3 [test][tls-provider] Implement KEM algorithm
8b17fbaf46 [ssl] Support ssl_encapsulate on server side
a011b5861b [ssl] Support ssl_decapsulate on client side
c1a74f59ac Define OSSL_CAPABILITY_TLS_GROUP_IS_KEM
ecff43e0ca [test][tls-provider] Add 2nd pluggable tls group for KEM
c8e3a4c613 [test][sslapitest] Add test for pluggable KEM group
32fea070dc [test][tls-provider] Group xor_group properties in a struct
47690cd4ce Use __BYTE_ORDER__ to test the endianness when available
8e596a93bc syscall_random(): don't fail if the getentropy() function is a dummy
58608c7c7a Reconciled c99 and loader arguments for float on NonStop TNS/E and 
TNS/X.

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-10-14 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

a8154452e5 EVP: Take care of locks when downgrading an EVP_PKEY
9f7505ab6a Fixed typo in ssl_lib.c
c804f2965e Make TAP::Harness and TAP::Parser optional.
8ebd88950d Document how deprecation should be done
d406f0fe67 OpenSSL::ParseC: handle OSSL_CORE_MAKE_FUNC
3ad9c47864 Add PEM declaration macros that take attributes
895419b7d1 Add ASN1 declaration macros that take attributes
053730c5b7 Make OpenSSL::ParseC and OpenSSL::Ordinals treat deprecation 
consistently
77c30753cd Add convenience macros OSSL_DEPRECATEDIN_{major}_{minor}
f044964e7a Add definitions of OSSL_DEPRECATED[_FOR] for Microsoft VC
6fbb89fb12 Change OSSL_DEPRECATED to take a version argument
abd9d035a7 Add a macro OSSL_DEPRECATED for compiler dependent deprecation 
attributes
71abae18f5 coverity 1403324 negative array index: check for finding an unknown 
value and error if so (since it shouldn't happen).
fb33f99409 coverity 1414446 out-of-bounds access: allocate \0 terminator byte 
to be safe
19431e5e44 vms: move otherwise dead code into the VMS relevant path.

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t  skipped: No external tests in this 
configuration
95-test_external_pyca.t  skipped: No external tests in this 
configuration
99-test_ecstress.t . ok
99-test_fuzz.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-10-12 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

113adc1f61 Adapt some code to OSSL_ENCODER_to_data() / OSSL_DECODER_from_data()
25cf949fc6 ENCODER / DECODER: Add functions to encode/decode to/from a buffer
3094351625 Fix diverse ERR code conflicts
86e5ac6d84 make ordinals
a23163a316 Modify util/mknum.pl to drop new symbols that don't exist any more
0c12ca7294 OpenSSL::Ordinals: Add options for the writing functions
cad8095925 INSTALL.md: Drop trailing spaces on a line
a96722219e Disabled symbol_presence test on NonStop due to different nm format.

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t  skipped: No external tests in this 
configuration
95-test_external_pyca.t  skipped: No external tests in this 
configuration
99-test_ecstress.t . ok
99-test_fuzz.t . ok

Test Summary Report
---
25-test_x509.t   (Wstat: 256 Tests: 15 Failed: 1)
  Failed test:  14
  Non-zero exit status: 1
Files=212, Tests=3574, 678 wallclock secs (14.20 usr  1.32 sys + 598.00 cusr 
60.55 csys = 674.07 CPU)
Result: FAIL
Makefile:3168: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dh'
Makefile:3166: recipe for target 'tests' failed
make: *** [tests] Error 2


Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-10-09 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

d00bd4e452 Set mark and pop error in d2i_PrivateKey_ex
13c5ec569e Fix zero-length content verification in S/MIME format
947fb81345 Tests for processing zero-length content in SMIME format
55c61473b5 Correct and simplify use of ERR_clear_error() etc. for loading DSO 
libs
02a2567173 Allow to continue on UNABLE_TO_VERIFY_LEAF_SIGNATURE
df38dcfcd5 Fix the decoder start type handling
b565a17d9f Add a test for encoding and decoding of parameters files
3861ac3b55 Fix encoding of DHX parameters files
db554ae110 Expose PKCS7_get_octet_string and PKCS7_type_is_other
b19b983017 Document install_fips in INSTALL.md
d3ed80802d providers/build.info: Tag the FIPS module, for the build file
8cab385ec5 descrip.mms.tmpl: Add a target to install the FIPS module config
403a5edcde windows-makefile.tmpl: Add a target to install the FIPS module config
a1bfcb15d9 unix-Makefile.tmpl: Add a target to install the FIPS module config
5884b05109 ERR: fix comment typo in err.c
bdde5b46c7 ocsp.h: Fix backward compatibility declaration of OCSP_parse_url()
1b4417abb8 apps: remove internal/cryptlib.h include that isn't used
23b2fc0b50 rsa: add ossl_ prefix to internal rsa_ calls.
a21db568bf Avoid memory leak of parent on allocation failure for child structure
8ad369171f Use size of target buffer for allocation

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-10-07 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

c5fc6754b7 Move CMP CLI test output files to BLDTOP/test-runs/test_cmp_cli/
bd60ac48a6 Test.pm: Add result_dir and export both result_dir and result_file
d8dc853825 Change CVE link style in CHANGES and NEWS
6ffc312776 Update CHANGES and NEWS for 1.1.1h release
5357c10624 ffc: add _ossl to exported but internal functions
69340cafb4 doc: remove duplicated code in example
856198aac7 Some OIDs used in Russian X.509 certificates.

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t  skipped: No external tests in this 
configuration
95-test_external_pyca.t  skipped: No external tests in this 
configuration
99-test_ecstress.t . ok
99-test_fuzz.t . ok

Test Summary Report
---
25-test_x509.t   (Wstat: 256 Tests: 15 Failed: 1)
  Failed test:  14
  Non-zero exit status: 1
Files=212, Tests=3574, 673 wallclock secs (14.79 usr  1.32 sys + 598.86 cusr 
61.08 csys = 676.05 CPU)
Result: FAIL
Makefile:3149: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dh'
Makefile:3147: recipe for target 'tests' failed
make: *** [tests] Error 2


Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-10-05 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

6514dee726 APPS: Reduce deprecation warning suppression - ENGINE
70c06aafa6 DECODER: Allow precise result type for 
OSSL_DECODER_CTX_new_by_EVP_PKEY()
ecadfdadde DECODER: Handle abstract object data type
4232a9e57f Configuration: add initial NonStop values in OpenSSL::config
99501e817c Ensure that _GNU_SOURCE is defined for NI_MAXHOST and NI_MAXSERV
993c437dbd Fix segfault on missing provider_query_operation()
62f27ab9dc TLS AEAD ciphers: more bytes for key_block than needed

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t  skipped: No external tests in this 
configuration
95-test_external_pyca.t  skipped: No external tests in this 
configuration
99-test_ecstress.t . ok
99-test_fuzz.t . ok

Test Summary Report
---
25-test_x509.t   (Wstat: 256 Tests: 15 Failed: 1)
  Failed test:  14
  Non-zero exit status: 1
Files=212, Tests=3574, 639 wallclock secs (13.82 usr  1.27 sys + 564.56 cusr 
59.03 csys = 638.68 CPU)
Result: FAIL
Makefile:3152: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dh'
Makefile:3150: recipe for target 'tests' failed
make: *** [tests] Error 2


Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-10-02 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

f21c9c64f5 EVP: use evp_pkey_ctx_is_legacy() to find what implementation to use
7d80985e17 Fix memory leak in req_cb() of x_req.c - handle distinguishing_id 
also with NO_SM2
746f367489 Fix some things the rename script didn't quite get right
d8652be06e Run the withlibctx.pl script
aedac96c11 Perl util to do with_libctx renaming
0129030639 der: _ossl prefix der_oid_ and der_aid_ functions
a55b00bdbc der: _ossl prefix DER functions
c4232b9edb rsa_mp_coeff_names should only have one entry in it for fips mode.
592dcfd3df prov: prefix all exposed 'cipher' symbols with ossl_
5b60f9c3e0 prov: prefix aes-cbc-cts functions with ossl_
13a574d8bb check-format.pl: Allow nested indentation of labels (not only at 
line pos 1)
8e655da022 check-format.pl: Extend exceptions for no SPC after trailing ';' in 
'for (...;)'
df4ec39203 check-format.pl: Document how to run positive and negative self-tests
4a24d6050b EC_GROUP_new_by_curve_name_with_libctx(): Add name of unknown group 
to error output
66066e1bba Prune low-level ASN.1 parse errors from error queue in 
der2key_decode() etc.
9032c2c11b 25-test_x509.t: Add test for suitable error report loading 
unsupported sm2 cert

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t  skipped: No external tests in this 
configuration

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-30 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

e1f5a92df4 Configure: handle undefined shared_target.
7d6766cb53 prov: prefix provider internal functions with ossl_
1be63951f8 prov: prefix all OSSL_DISPATCH tables names with ossl_
5e26c3399d 30-test_evp.t: On no-dh, no-dsa, no-ec, no-sm2, and no-gost 
configurations disable respective tests
e6a2596cdc appveyor.yml: Clean up minimal configuration, adding no-ec and 
pruning cascaded no-*
53c4992e0b rand: declare get_hardware_random_value() before use.
7339547d45 Remove TODO comment from sskdf.c
c57a59b1a0 todo: remove fork protection todo comment, it isn't relevant to the 
FIPS provider

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t  skipped: No external tests in this 
configuration
95-test_external_pyca.t  skipped: No external tests in this 
configuration
99-test_ecstress.t . ok
99-test_fuzz.t . ok

Test Summary Report
---
25-test_x509.t   (Wstat: 256 Tests: 14 Failed: 1)
  Failed test:  14
  Non-zero exit status: 1
Files=212, Tests=3570, 666 wallclock secs (14.13 usr  1.37 sys + 590.64 cusr 
60.04 csys = 666.18 CPU)
Result: FAIL
Makefile:3149: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dh'
Makefile:3147: recipe 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

d93bded6aa optimise ssl3_get_cipher_by_std_name()
8c27ee6e05 STORE: Clear a couple of TODOs that were there for the sake of SM2
4ff993d791 Implement treatment of id-pkix-ocsp-no-check extension for 
OCSP_basic_verify()
cf61b97d5f Generate a certificate with critical id-pkix-ocsp-nocheck extension
37326895b7 OCSP_resp_find_status.pod: Slightly improve the documentation of 
various flags
7d5ea3fecb OCSP_resp_find_status.pod: Replace function arg references B<...> by 
I<...>
4f5b222b84 Fix bug in EDDSA speed test
3786d74868 en EVP_PKEY_CTX_set_rsa_keygen_pubexp() BIGNUM management
fa9e541d49 Remove openssl provider app
fc959d7171 Update openssl list to support new provider objects.
1c52bf3c04 Add EVP_ASYM_CIPHER_gettable_ctx_params() and 
EVP_ASYM_CIPHER_settable_ctx_params()
5a9500488d Add EVP_KEM_gettable_ctx_params() and EVP_KEM_settable_ctx_params()
d3edef83f5 Modified rand_cpu_x86.c to support builtin hardware randomizer on 
HPE NonStop.
a48309cb5c Document the provider side SM2 Asymmetric Cipher support
bfb56a974d Extend the SM2 asym cipher test
989684227b Remove some dead SM2 code
fb2a6954fb Clean up some SM2 related TODOs in the tests
ce64d3eee0 Move SM2 asymmetric encryption to be available in the default 
provider
7a032be7f2 Build: Make NonStop shared libraries only export selected symbols
8a288609b1 TEST: Remove use of EVP_PKEY_set_alias_type() in 
test/evp_extra_test.c
14711fffbf EVP: Enforce that EVP_PKEY_set_alias_type() only works with legacy 
keys
294e380220 Configuration: Don't have shared libraries depend on themselves
e07a7892ee Configuration: Make it possible to have an argument file
25b16562d3 Hide ECX_KEY again
21e5be854d Add key length check to rsa_kem operation.
4e0723bc93 Test.pm: Some clarifications added to the documentation
1061baf646 apps/ca.c: Rename confusing variable 'req' to 'template_cert' in 
certify_cert()
29844ea5b3 Prune low-level ASN.1 parse errors from error queue in 
decoder_process()
50eb2a5077 load_key_certs_crls(): Restore output of fatal errors
254b5dcabd ACVP: add test case for DRBG
cdb5129e5c Use OPENSSL_SYS_TANDEM instead of OPENSSL_SYSNAME_TANDEM
37fe90ad17 Configure: Show 'enable' and 'disable' config attributes
c60330cb0e Configuration: Streamline NonStop entries
3eb99601b1 Simplify the tarball generating scripts

Build log ended with (last 100 lines):

70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-24 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

b0614f0ae3 drbg: revert renamings of the generate and reseed counter
0ce47b35c7 Configurations/unix-Makefile.tmpl: make cleanup kinder
e771249c4f Fix propq in x942kdf
0ecec0fa08 Fix missing propq in sm2
851886b061 Fix missing propq in ffc_params_generate
c4b3ea73a7 Fix missing propq in ecdh_cms_set_shared_info()
8dbef010e7 Fix ecx so that is uses a settable propertyquery
7f80980fb7 Fix ssl_hmac_new() so that it uses the propq
26496f5a5c Fix EVP_KDF_scrypt so that is uses a propq for its fetch.
719523c76d Change rsa gen so it can use the propq from 
OSSL_PKEY_PARAM_RSA_DIGEST
81777339e9 Fix CID 1466709 : Negative value passed to a function that cant be 
negative in cms_sd.c
ced5231b04 Fix CID 1466710 : Resource leak in ec_kmgmt due to new call to 
ossl_prov_is_running()
965d3f36c4 Fix CID 1466712 : Resource leak in ec_kmgmt due to new callto 
ossl_prov_is_running()
ad2dbfb543 Fix CID 1466713 : Dead code in encode_key2text.c
d65ab22efd Fix CID 1466714 : Null pointer dereference in EVP_PKEY_CTX_ctrl() 
due to new call to evp_pkey_ctx_store_cached_data()
78ef571707 Fix CID 1467068 : Null pointer dereference in self_test.c
2e9ab56edc rand: add a test case for configuration based random
2ff4e15dc2 list: add capability to print details about the current DRBGs
0ed26fb63c drbg: gettable parameters for cipher/digest/mac type.
c9452d74a4 kdf/mac: add name query calls for KDFs and MACs
d8e52fd05e evp_rand: fix bug in gettable_ctx/settable_ctx calls
44d2482ba6 Add a "random" configuration section.
11b93a1c82 DOC: remove OPENSSL_CTX from OSSL_DECODER_CTX_new
4640cd00c3 rand: reference count the EVP_RAND contexts.
8e3a64fdb6 Add auto-gen SM2 der files into .gitignore
e9aa4a16a6 refactor get params functions
1d03db9085 support PARAM_SECURITY_BITS for SM2
b3d267caac Address review comments
d0b79f8631 Add SM2 signature algorithm to default provider
7ee511d093 Add SM2 key management
6b1428ac12 Added FIPS DEP initialization for the NonStop platform in 
fips/self_test.c.

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-22 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

434343f896 Add const to 'ppin' function parameter
6600baa9bb DOC: POD syntax fixes in doc/man1/openssl-cmp.pod.in
36871717ac Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP sign
9c13b49a9f Increase PSK_MAX_IDENTITY_LEN from 128 to 256
639bb581ce apps/ocsp: Return non zero exit code with invalid certID
e57bbf9e1a Increase PSK_MAX_PSK_LEN to 512
627ddf7b5b Correct certificate and key names for explicit ec param test
d5b170a2fc Fixed EVP_MAC_final argument count in example
a316356133 Fix merge error with libcrypto.num
b1415dc182 util/find-doc-nits: Add a regexp for C symbols and use it
48b62fb33a DECODER: Some cleanups, and aligning with OSSL_ENCODER
ae12eac074 TEST: Adapt applicable tests to the changed 
OSSL_ENCODER_CTX_new_by_EVP_PKEY()
97bb8dff1f ENCODER: Adapt calls to the changed 
OSSL_ENCODER_CTX_new_by_EVP_PKEY()
111dc4b0f1 ENCODER: Refactor our provider encoder implementations
b8975c68b1 ENCODER: Refactor the OSSL_ENCODER API to be more like OSSL_DECODER
5a6d6fe666 ENCODER: Redefine the libcrypto <-> provider interface
4a71bee6cf ocsp_vfy.c: Clean up code w.r.t. coding guidelines and reduce 
redundancies
b5f82567af Fix: ecp_nistz256-armv4.S bad arguments
08e9684c53 Deprecate ASN1_STRING_length_set in OpenSSL 3.0.
28a5f5b39c util/mkerr.h: Restore header file rename
7889e7aef8 Fix ec keygen so that it passes the library context to 
SSL_SELF_TEST_get_callback().
f8e747471e Add a copy of OSSL_SELF_TEST_get_callback() to the fips module.
80f4fd18f7 Add KEM (Key encapsulation mechanism) support to providers
28833f1465 Update the EdDSA docs with information about Algorithm Identifiers
4c6348c23a Make sure we properly test for EdDSA with alg ids
d12a2fe4e7 Teach EdDSA signature algorithms about AlgorithmIdentifiers
991a6bb581 Add option to fipsinstall to disable fips security checks at run 
time.
7a810fac86 Add 'fips-securitychecks' option and plumb this into the actual fips 
checks
850a485f25 fix provider exchange operations
49ed5ba8f6 fix provider signatures
16fbda848d Separate fips and non fips code for key operations
a88d105ea8 Add missing 'ossl_unused' tags to some gettable and settable methods.
f85a9d26be Add error message to genpkey app for the '-genparam' option
341c3e7f28 Add fips checks for ecdh key agreement
8d17cca5b8 Add fips checks for rsa encryption
b8237707d4 Add fips checks for dh key agreement
0645110ebd Add fips checks for ecdsa signatures
e43b448241 Add fips checks for dsa signatures
3f699197ac Add fips checks for rsa signatures.
282de1cc2d Fix some doc-nits and make update errors
028b31b32d Remove some unneeded code from lhash.h
efffd8a6e4 Update err.h to use the new lhash generation code
2ca697ce00 Update conf.h.in to use the new lhash generation code
726b329339 Provide basis for fixing lhash code
ecf15b16ee s_client.pod: Fix grammar in NOTES section.

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-18 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

7f9e744036 Add selftest callback to CRNG output test
4b51903d86 Fix AES_XTS on x86-64 platforms with BSAES and VPAES support.
f80d0d2fd6 HMAC should work with non-provided digests
67ecd65cc4 Rename check_chain_extensions to check_chain
cccf532fef Disallow certs with explicit curve in verification chain
fe2f8aecfe EC_KEY: add EC_KEY_decoded_from_explicit_params()
bde4aa8dc1 Fix Coverity CID 1466708 - correct pointer calculation in one case
ebcae87f6b FIX strncpy warning in apps/cmp.c.
1cae59d14b Make KDFs fail if requesting a zero-length key.
0010870536 Allow zero-length secret for EVP_KDF API
ec4c86d9ec Fix typo in bind_loader_attic comment
3f96b687f7 Document 2 newly added functions
7fc6168b6f Test HMAC output from the dgst CLI
d8025f4ac0 Correctly display the signing/hmac algorithm in the dgst app
b0002eb09a Redirect EVP_DigestInit to EVP_DigestSignInit_ex if appropriate
b8e5622809 Don't send -1 as the length of the hmac key
067a3057c3 Annotate potential -Wunused-function violations in err.h
4bb73d5409 Add a NULL check to EVP_PKEY_assign
8230710f04 Update AES GCM IV max length to be 1024 bits (was 512)
eb750219f2 undeprecate EVP_PKEY_cmp and EVP_PKEY_cmp_parameters
5d94202884 Configurations/unix-Makefile.tmpl: Don't specify headers twice
fc661b50df OpenSSL::ParseC: recognise inline function bodies
4343a4187d Add self tests for rsa encryption

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-16 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

a268ed3acf free memory use on error in cert verify
871881856f generate_cookie_callback: free temporary memory on an error path
30f3b4e1c1 PKCS5 PBE: free allocations on unlikely / impossible failure path
e2d66c0d00 PKCS#8: free data on error path in newpass_bag
48ff651ecc DTLS: free allocated memory on error paths
4f14a378f8 prov/drbg: cleanup some RAND_DRBG leftovers
1d30b0a4ad prov/drbg: fix misspelling of '#ifdef FIPS_MODULE'

Build log ended with (last 100 lines):

65-test_cmp_vfy.t .. ok
66-test_ossl_store.t ... ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t  skipped: No external tests in this 
configuration
95-test_external_pyca.t  skipped: No external tests in this 
configuration
99-test_ecstress.t . ok
99-test_fuzz.t . ok

Test Summary Report
---
30-test_evp.t(Wstat: 512 Tests: 84 Failed: 2)
  Failed tests:  20, 44
  Non-zero exit status: 2
Files=212, Tests=3555, 693 wallclock secs (14.16 usr  1.54 sys + 618.72 cusr 
65.27 csys = 699.69 CPU)
Result: FAIL
Makefile:3116: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dh'
Makefile:3114: recipe for target 'tests' failed
make: *** [tests] Error 2


Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-14 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

ec0ce188f4 EVP: Centralise fetching error reporting
225c9660a5 Ignore unused return values from some sk_*() macros
89b46350a3 Don't complain about stack related macros
0490314f65 Make 'make errors' work again
962963395c Make 'make ordinals' work again
83ecb26f2b util/mknum.pl: Fix file opening
c6029deab2 Streamline the safestack generated code
316054147a Add a CHANGES entry for the safestack updates
262cda1cda Remove some safestack things that are no longer needed
9cedfc90ce Fix safestack issues in ui.h
add3392727 Fix safestack issues in pkcs12.h
15c3dcfc78 Fix safestack issues in crypto.h
e74e562f1c Fix safestack issues in conf.h
dd73147420 Fix safestack issues in bio.h
1e14bca233 Fix safestack issues in ess.h
0b28254015 Fix safestack issues in asn1t.h
9d01ac71a0 Fix safestack issues in ct.h
98c35dc48d Fix safestack issues in crmf.h
c5a5581127 Fix safestack issues in x509_vfy.h
22fbfe6a7d Fix safestack issues in srp.h
02199cc39d Fix safestack issues in pkcs7.h
fd3ed85c67 Fix safestack issues in ocsp.h
904e1f92b3 Fix safestack issues in cms.h
798f932980 Fix safestack issues in cmp.h
b4780134df Fix safestack issues in asn1.h
24c4ea958e Fix stacks of OPENSSL_STRING, OPENSSL_CSTRING and OPENSSL_BLOCK
e144fd36ce Fix safestack issues in x509v3.h
e6623cfbff Fix safestack issues in x509.h
6ac1cd10ba Fix safestack issues in ssl.h
08073700cc NonStop port updates for 3.0.0.
f0c62c5328 TEST: Add a test of EC key generation with encoding spec
655f73cecf EVP: Add the internal convenience function evp_keymgmt_util_export()
96bb4ff9b8 Fix EVP_PKEY_CTX_ctrl() documentation
33dd828d97 Update doc for EVP_PKEY_CTX_set_ec_param_enc()
7229a2f4ab EC: Reimplement EVP_PKEY_CTX_set_ec_param_enc() to support providers
4588f35b5a dev/release.sh: Rework to be smoother
35e6ea3bdc keygen: add FIPS error state management to conditional self tests
801ed9edba CRNGT: enter FIPS error state if the test fails
5736923f12 FIPS: error mode is set from failed self tests and produced a 
limited number of errors when algorithm accesses are attempted
f99d3eedf7 ciphers: add FIPS error state handling
422cbcee61 keymgmt: add FIPS error state handling
f590a5ea1a signature: add FIPS error state handling
ca94057fc3 exchange: add FIPS error state handling
2b9e4e956b kdf: add FIPS error state handling
5b104a81f0 mac: add FIPS error state handling
aef30ad0b6 rand: add FIPS error state handling
87fe138d35 asymciphers: add FIPS error state handling
1c1daab94c digests: add FIPS error state handling
6cf3730267 FIPS: rename the status call to is_running.
eab7b4240d provider: add an 'is_running' call to all providers.
5e8cd0a4f4 Fix coverity issue: CID 1466479 - Resource leak in apps/pkcs12.c
97f7a6d42e Fix coverity issue: CID 1466482 - Resource leak in 
OSSL_STORE_SEARCH_by_key_fingerprint()
9951eaf467 Fix coverity issue: CID 1466483 - Improper use of Negative value in 
dh_ctrl.c
0f0b7dfbe5 Fix coverity issue: CID 1466484 - Remove dead code in 
PKCS7_dataInit()
6e417f951c Fix coverity issue: CID 1466485 - Explicit NULL dereference in 
OSSL_STORE_find()
3481694946 Fix coverity issue: CID 1466486 - Resource leak in OSSL_STORE
c1aba0763c OSSL_DECODER 'decode' function must never be NULL.
c88f6f0e40 TEST: skip POSIX errcode zero in tesst/recipes/02-test_errstr.t
c9352933fe fuzz/test-corpus: check if PATH_MAX is already defined
64713cb10d apps/ca: allow CRL lastUpdate/nextUpdate fields to be specified
0e60ce6334 Improve robustness and performance of building Unix static libraries
5ea4c6e553 apps/cmp.c: Improve example given for -geninfo option (also in man 
page)
1cd77e2eca OSSL_CMP_CTX_new.pod: improve doc of 
OSSL_CMP_CTX_get1_{extraCertsIn,caPubs}
4d2b2889da openssl-cmp.pod.in: Update Insta Demo CA port number in case needed
62261446b2 apps/cmp.c: Improve user guidance on missing -subject etc. options
7a7d6b514f apps/cmp.c: Improve documentation of -extracerts, -untrusted, and 
-otherpass
ef2d3588e8 apps/cmp.c: Improve documentation of -secret, -cert, and -key options
82bdd64193 check_chain_extensions(): Require X.509 v3 if extensions are present
e41a2c4c60 check_chain_extensions(): Change exclusion condition w.r.t. RFC 6818 
section 2
d72c8b457b x509_vfy.c: Make sure that strict checks are not done for 
self-issued EE certs
bb377c8d6c check_chain_extensions(): Add check that CA cert includes key usage 
extension
da6c691d6d check_chain_extensions(): Add check that on empty Subject the SAN 
must be marked critical
89f13ca434 check_chain_extensions(): Add check that AKID and SKID are not 
marked critical
8a639b9d72 check_chain_extensions(): Add check that Basic Constraints of CA 
cert are marked critical
1e41dadfa7 Extend X509 cert checks and error reporting in v3_{purp,crld}.c and 
x509_{set,vfy}.c
b0a4cbead3 apps/cmp.c: Improve 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-11 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

d3dbc9b500 apps_ui.c: Correct password prompt for ui_method
591ceeddb3 apps_ui.c: Correct handling of empty password from -passin
f84de16f39 apps_ui.c: Improve error handling and return value of 
setup_ui_method()
9a62ccbe8a Fix fipsinstall module path
9f604ca13d STORE: Fix OSSL_STORE_attach() to check |ui_method| before use
5a0991d0d9 Add/harmonize multi-valued RDN support and doc of ca, cmp, req, 
storeutl, and x509 apps
5fdcde816f X509_NAME_cmp(): Clearly document its semantics, referencing 
relevant RFCs
a8e2a9f569 X509_NAME_add_entry_by_txt.pod: Improve documentation w.r.t. 
multi-valued RDNs (containing sets of AVAs)
bc64c5a69b X509_NAME_cmp: restrict normal return values to {-1,0,1} to avoid 
confusion with -2 for error
2aa91df406 X509_NAME_oneline(): Fix output of multi-valued RDNs, escaping '/' 
and '+' in values
115786793c X509_NAME_print_ex.pod: re-format lines to fit within 80 chars limit
388f2d9f6c app_load_config_bio(): fix crash on error
3101ab603c Fix an EVP_MD_CTX leak
b830e00429 Diverse build.info: Adjust paths
bb30bce22b bugfix in apps/cmp.c and cmp_client.c: inconsistencies on retrieving 
extraCerts in code and doc
543a802fab bugfix in ossl_cmp_msg_protect(): set senderKID and extend 
extraCerts also for unprotected CMP requests
6199478101 bugfix in ossl_cmp_msg_add_extraCerts(): should include cert chain 
when using PBM
7eb48cfc66 test/cmp_{client,msg}_test.c: minor code cleanup
eb5087fc7c test/recipes/81-test_cmp_cli_data/Mock/server.cnf: minor cleanup
4245fd64c8 81-test_cmp_cli: Make test output files all different according to 
#11080
57371e1674 81-test_cmp_cli.t: Stop unlinking test output files according to 
#11080
c4adc5ba5b apps.c: Fix mem leaks on error in load_certs() and load_crls()
a877d2629b apps/cmp.c: clear leftover errors on loading libengines.so etc.
87495d56a9 apps.c: Fix diagnostics and return value of load_key_certs_crls() on 
error
aad086e2ae Replace all wrong usages of 'B<...>' (typically by 'I<...>') in 
OSSL_CMP_CTX_new.pod
a0745e2be6 Clean up CMP chain building for CMP signer, TLS client, and newly 
enrolled certs
474853c39a Fix markdown nits in NOTES-Windows.txt
10203a3472 Support writing RSA keys using the traditional format again
8ae40cf57d ENCODER: Refactor provider implementations, and some cleanup
ce43db7a3f Fix up issue on AIX caused by broken compiler handling of macro 
expansion
b7a8fb52a9 s_time: check return values better
e942111267 In a non-shared build, don't include the md5 object files in legacy 
provider
5c97eeb726 TLS fixes for CBC mode and no-deprecated
b924d1b6e1 TLS: remove legacy code path supporting special CBC mode
81661a14bc legacy: include MD5 code in legacy provider
b250fc7be7 Deprecate SHA and MD5 again.

Build log ended with (last 100 lines):

65-test_cmp_status.t ... ok
65-test_cmp_vfy.t .. ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-09-09 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

b434b2c08d Allow unauthenticated CMP server if missing -trusted, -srvcert, and 
-secret options
15633d74dc Add 4 new OIDs for PKIX key purposes and 3 new CMP information types
1251cddf8d TEST: modify test/endecode_test.c to not use legacy keys
4ce1025a8a PEM: Make PEM_write_bio_PrivateKey_traditional() handle 
provider-native keys
924663c36d Add CMS AuthEnvelopedData with AES-GCM support
d96486dc80 apps/cmp.c: Allow default HTTP path (aka CMP alias) given with 
-server option
6e477a60e4 apps/cmp.c: Use enhanced OSSL_HTTP_parse_url(), removing 
parse_addr() and atoint()
d7fcee3b3b OSSL_HTTP_parse_url(): add optional port number return parameter and 
strengthen documentation
8d6481f532 EVP: Move the functions and controls for setting and getting distid
b968945204 EVP: Expand the use of EVP_PKEY_CTX_md()
86df26b394 EVP: Add support for delayed EVP_PKEY operation parameters
ea0add4a82 New GOST PKCS12 standard support
08497fc64f Fix test/evp_extra_test.c
20d56d6d62 EVP: Don't shadow EVP_PKEY_CTX_new* error records
509144964b EVP: Preserve the EVP_PKEY id in a few more spots
884baafba4 Use return code for 'which command' checks
4348995b0d Fix memory leaks in conf_def.c
385deae79f Building: Build Unix static libraries one object file at a time

Build log ended with (last 100 lines):

65-test_cmp_status.t ... ok
65-test_cmp_vfy.t .. ok
70-test_asyncio.t .. ok
70-test_bad_dtls.t . ok
70-test_clienthello.t .. ok
70-test_comp.t . ok
70-test_key_share.t  ok
70-test_packet.t ... ok
70-test_recordlen.t  ok
70-test_renegotiation.t  ok
70-test_servername.t ... ok
70-test_sslcbcpadding.t  ok
70-test_sslcertstatus.t  ok
70-test_sslextension.t . ok
70-test_sslmessages.t .. ok
70-test_sslrecords.t ... ok
70-test_sslsessiontick.t ... ok
70-test_sslsigalgs.t ... ok
70-test_sslsignature.t . ok
70-test_sslskewith0p.t . skipped: dh is not supported by this 
OpenSSL build
70-test_sslversions.t .. ok
70-test_sslvertol.t  ok
70-test_tls13alerts.t .. ok
70-test_tls13cookie.t .. ok
70-test_tls13downgrade.t ... ok
70-test_tls13hrr.t . ok
70-test_tls13kexmodes.t  ok
70-test_tls13messages.t  ok
70-test_tls13psk.t . ok
70-test_tlsextms.t . ok
70-test_verify_extra.t . ok
70-test_wpacket.t .. ok
71-test_ssl_ctx.t .. ok
80-test_ca.t ... ok
80-test_cipherbytes.t .. ok
80-test_cipherlist.t ... ok
80-test_ciphername.t ... ok

# 80-test_cms.t .. ok
80-test_cmsapi.t ... ok
80-test_ct.t ... ok
80-test_dane.t . ok
80-test_dtls.t . ok
80-test_dtls_mtu.t . ok
80-test_dtlsv1listen.t . skipped: dh is not supported by this 
OpenSSL build
80-test_http.t . ok
80-test_ocsp.t . ok
80-test_pkcs12.t ... ok
80-test_ssl_new.t .. ok
80-test_ssl_old.t .. ok
80-test_ssl_test_ctx.t . ok
80-test_sslcorrupt.t ... ok
80-test_tsa.t .. ok
80-test_x509aux.t .. ok

# 81-test_cmp_cli.t .. ok
90-test_asn1_time.t  ok
90-test_async.t  ok
90-test_bio_enc.t .. ok
90-test_bio_memleak.t .. ok
90-test_constant_time.t  ok
90-test_fatalerr.t . ok
90-test_gmdiff.t ... ok
90-test_gost.t . ok
90-test_ige.t .. ok
90-test_includes.t . ok
90-test_memleak.t .. ok
90-test_overhead.t . ok
90-test_secmem.t ... ok
90-test_shlibload.t  ok
90-test_srp.t .. ok
90-test_sslapi.t ... ok
90-test_sslbuffers.t ... ok
90-test_store.t  ok
90-test_sysdefault.t ... ok
90-test_threads.t .. ok
90-test_time_offset.t .. ok
90-test_tls13ccs.t . ok
90-test_tls13encryption.t .. ok
90-test_tls13secrets.t . ok
90-test_v3name.t ... ok
95-test_external_boringssl.t ... skipped: No external tests in this 
configuration
95-test_external_gost_engine.t . skipped: No external tests in this 
configuration
95-test_external_krb5.t 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-07-23 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

dcb71e1c21 Cleanup fips provider init
7b9f218838 document the deprecation of the '-public-key-methods' option to list
41bbba5375 EVP: deprecate the EVP_X_meth_ functions.
77ae4f6ff7 engines: fixed to work with EVP_*_meth calls deprecated
9e5f344a87 evp_test: use correct deallocation for EVP_CIPHER
340f82a4e7 evp_test: use correct deallocation for EVP_MD
1d864f0f53 Specific the engine pointer
490c87110c Align documentation with recommendations of Linux Documentation 
Project
bf19b64aae Fix UI method setup, which should be independent of (deprecated) 
engine use
4f8fbf372e 81-test_cmp_cli.t: Avoid using 'tail', 'awk', and the '-s' option of 
'lsof'
f91624d380 Skip test_cmp_cli if 'lsof' or 'kill' command is not available
90409da6a5 Fix provider cipher reinit issue
7717459892 Avoid errors with a priori inapplicable protocol bounds
5ac582d949 DOC: Fix SSL_CTX_set_cert_cb.pod and SSL_CTX_set_client_cert_cb.pod
8eca461731 util/find-doc-nits: Relax check of function declarations in 
name_synopsis()
904f42509f PROV: Move bio_prov.c from libcommon.a to libfips.a / libnonfips.a
7e4f01d8ba fixed swapped parameter descriptions for x509
9f7bdcf37f Add ERR_raise() errors to fips OSSL_provider_init and self tests.
823a113574 Fix API rename issue in shim layer that calls EVP_MAC_CTX_set_params
02e14a65fd man3: Drop warning about using security levels higher than 1.
16c6534b96 check-format.pl: Add an entry about it to NEWS.md and to CHANGES.md
174f4a4d6a check-format.pl: Report empty lines only if -s (--sloppy-spc) is not 
used
dc18781550 check-format.pl: Add check for essentially empty line at beginning 
of file
43b2e9e008 check-format.pl: Add check for multiples essentially empty lines in 
a row
a77571c34f check-format.pl: Allow comment start '/*' after opening '(','[','{'
5304331156 Fix linking against non-system zlib on macOS

Build log ended with (last 100 lines):

test/cmp_protect_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_server_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_server_test \
test/cmp_server_test-bin-cmp_server_test.o \
test/cmp_server_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_status_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_status_test \
test/cmp_status_test-bin-cmp_status_test.o \
test/cmp_status_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_vfy_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_vfy_test \
test/cmp_vfy_test-bin-cmp_testlib.o \
test/cmp_vfy_test-bin-cmp_vfy_test.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/context_internal_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-07-20 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

f64f17c3e0 Added missing ';' after methods in the synopsis section of pod files
93e32043cb util/find-doc-nits: relax some SYNOPSIS checks
d3cb5904f3 util/find-doc-nits: read full declarations as one line in 
name_synopsis()
43b3ab6f87 Fix typo for SSL_get_peer_certificate()
1bb78e72b9 Remove util/openssl-update-copyright
a85c902125 mac: always pass a non-NULL output size pointer to providers.
3fc164e8d1 doc: Fix documentation of EVP_EncryptUpdate().
b99c463d78 install: add notes about ignored seed sources in the FIPS provider.
45554b5c71 rand: detect if FIPS approved randomness sources are being used.
8e78da0666 Fix trailing whitespace mismatch error when running 02-test_errstr.
cb9bb7350d 99-test_fuzz.t: Clean up and re-organize such that sub-tests could 
be split easily
1e76cb002a test/run_tests.pl: In parallel runs, start those tests first that 
run longest
0b670a2101 x509_vfy.c: Improve key usage checks in internal_verify() of cert 
chains
1337a3a998 Constify X509_check_akid and prefer using X509_get0_serialNumber 
over X509_get_serialNumber
318565b733 Prepare for 3.0 alpha 6
e70a2d9f13 Prepare for release of 3.0 alpha 5
b013cf9000 util/mktar.pl: Change 'VERSION' to 'VERSION.dat'
e39e295e20 Update copyright year
e4162f86d7 DRBG: Fix the renamed functions after the EVP_MAC name reversal
660c534435 Revert "kdf: make function naming consistent."
865adf97c9 Revert "The EVP_MAC functions have been renamed for consistency.  
The EVP_MAC_CTX_*"
8dab4de538 Add latest changes and news in CHANGES.md and NEWS.md
ecca5b6e2e capabilities: make capability selection case insensitive.
81ed433cf8 libcrypto.num: engine deprecation updates
bb95426211 doc: remove unused engine tracing option
184fb690fa trace: condition out engine related tracing
03445677b9 Document that ENGINE_add_conf_module() was deprecated.
2099f1bb6b Document that exdata for ENGINES is deprecated.
1bdab93a62 Document that the ENGINE_[sg]_ex_data() calls are reprecated.
8b4c89f8d2 RAND: document that the ENGINE RAND override is deprecated.
571d2c4dc7 ENGINESDIR: document that this configuration is deprecated.
2d71c9468a doc: document that the engine initialisation options are deprecated.
9bd8d96c39 deprecate engines in provider code
e4468e6d8d deprecate engines in libcrypto
ad8fc6f626 apps: deprecate engines
91512a771a deprecate engine from public header files
304d070eba deprecate engine tests
92f8603537 deprecate engines in SSL
cf8e8cba93  deprecate engines
597f3f3ab1 Fix indentation for engine.h
4222682dae doc: deprecate ENGINE documentation
0f221d9c68 apps: document the deprecation of the -engine option
699caa18d5 engine: document the engine app as deprecated
0a684b09d8 apps/list: deprecate engine support
910b71cf47 deprecate engines in 3.0
8c2bfd2512 Add SSL_get[01]_peer_certificate()

Build log ended with (last 100 lines):

test/cmp_protect_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_server_test
rm -f test/cmp_status_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_server_test \
test/cmp_server_test-bin-cmp_server_test.o \
test/cmp_server_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_status_test \
test/cmp_status_test-bin-cmp_status_test.o \
test/cmp_status_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_vfy_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-07-16 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-106-generic #107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

55affcadbe Configure: fix minor typo in apitable comment
e45d943665 Add FIPS related configuration data to the default openssl 
application configuration file
5744dacb3a Make -provider_name and -section_name optional
d3b243d15b Use defaults FIPSKEY if not given on command line
7cc355c2e4 Add AES_CBC_CTS ciphers to providers
c35b853576 Enable WinCE build without deceiving _MSC_VER.
a1736f37ae To generate makefile with correct parameters for WinCE.
7a09fab2b3 Disable optimiization of BN_num_bits_word() for VS2005 ARM compiler 
due to its miscompilation of the function. 
https://mta.openssl.org/pipermail/openssl-users/2018-August/008465.html
6c2a56beec Changed uintptr_t to size_t. WinCE6 doesn't seem it have the 
definition.
ce3080e931 DRBG: rename the DRBG taxonomy.
d35bab46c9 Configurations: make Makefile tmpl files non-links

Build log ended with (last 100 lines):

test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_protect_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_protect_test \
test/cmp_protect_test-bin-cmp_protect_test.o \
test/cmp_protect_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_server_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_server_test \
test/cmp_server_test-bin-cmp_server_test.o \
test/cmp_server_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_status_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_status_test \
test/cmp_status_test-bin-cmp_status_test.o \
test/cmp_status_test-bin-cmp_testlib.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/cmp_vfy_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/cmp_vfy_test \
test/cmp_vfy_test-bin-cmp_testlib.o \
test/cmp_vfy_test-bin-cmp_vfy_test.o \
test/libtestutil.a libcrypto.a -ldl -pthread 
rm -f test/context_internal_test
${LDCMD:-clang} -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   \
-o test/context_internal_test \
test/context_internal_test-bin-context_internal_test.o \
test/libtestutil.a libcrypto.a -ldl 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-04-22 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

c72e59349f Add setter equivalents to X509_REQ_get0_signature
1269a9a1d1 Fix no-deprecated tests where the GOST engine is present
2d3e6d4116 Fix no-des
eb75980396 Fix an ssl_test_old test failure
62ba834554 Fix test_ssl_new test failure
1e78a50f5a Revert "TEST: make and use a fipsinstall script"
a87f3fe01a Fix NULL dereference in SSL_check_chain() for TLS 1.3
3656c08ab4 Add test for CVE-2020-1967
b0b0b6a41d Developer scripts: Release script
78b4aba9f8 Fix test_cmp_vfy failures with 
FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
7a92e80469 gendsa: remove unnecessary OPENSSL_SUPPRESS_DEPRECATED definition
be9d82bb35 Teach ssl_test_old to use the FIPS provider for its tests
63215d0449 Teach ssl_test_old how to run tests in a non-default library context
73d391ad13 Use a fetched MD if appropriate in ssl3_cbc_digest_record
682bc861a9 Teach ssl_test_new how to test the FIPS module
ab5a02f707 Teach ssl_test_new to have different tests for different loaded 
providers
fea4e2bd36 Run ssl_test_new with a non-default library context
0aa87e8683 Update comment on crls_http_cb() as it does support non-blocking I/O 
since #10667
2b264aee6f Fix descriptions of credentials and verification options for various 
apps
b418980c3f Swap parameters of evp_method_id()
64f849f439 Fix an assertion (and a comment) of evp_method_id()
738ee1819e Fix DH_get_nid() so that it does not cache values.
9e537cd2ad DOC: Extend EVP_PKEY-DSA(7) / EVP_PKEY_DH(7) with FFC information
33df1cfdd5 DOC: Refactor provider-keymgmt(7) to give the keytypes their own 
pages

Build log ended with (last 100 lines):

clang  -Iapps -I. -Iinclude -Iapps/include -I../openssl -I../openssl/include 
-I../openssl/apps/include  -pthread -m64 -Wa,--noexecstack -Qunused-arguments 
-Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   -MMD -MF apps/openssl-bin-errstr.d.tmp -MT 
apps/openssl-bin-errstr.o -c -o apps/openssl-bin-errstr.o 
../openssl/apps/errstr.c
clang  -Iapps -I. -Iinclude -Iapps/include -I../openssl -I../openssl/include 
-I../openssl/apps/include  -pthread -m64 -Wa,--noexecstack -Qunused-arguments 
-Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   -MMD -MF apps/openssl-bin-fipsinstall.d.tmp 
-MT apps/openssl-bin-fipsinstall.o -c -o apps/openssl-bin-fipsinstall.o 
../openssl/apps/fipsinstall.c
clang  -Iapps -I. -Iinclude -Iapps/include -I../openssl -I../openssl/include 
-I../openssl/apps/include  -pthread -m64 -Wa,--noexecstack -Qunused-arguments 
-Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   -MMD -MF apps/openssl-bin-gendsa.d.tmp -MT 
apps/openssl-bin-gendsa.o -c -o apps/openssl-bin-gendsa.o 
../openssl/apps/gendsa.c
clang  -Iapps -I. -Iinclude -Iapps/include -I../openssl -I../openssl/include 
-I../openssl/apps/include  -pthread -m64 -Wa,--noexecstack -Qunused-arguments 
-Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations   -MMD -MF apps/openssl-bin-genpkey.d.tmp -MT 
apps/openssl-bin-genpkey.o -c -o apps/openssl-bin-genpkey.o 
../openssl/apps/genpkey.c
clang  -Iapps -I. -Iinclude -Iapps/include -I../openssl 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-04-19 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

4114964865 Build files: add module installation targets
ae6b654b66 TEST: make and use a fipsinstall script
c0bfc473d8 Use the libctx for all EVP_PKEY_CTX operations
4f6c704495 Re-enable FIPS testing in sslapitest.c
5e30f2fd58 Use a non-default libctx in sslapitest
09ec5e6f5d dhparam: white space cleaning
61b2afb50a apps: undeprecate the conditioned out apps
19d9be09d1 openssl: include the version a command was deprecated in the output 
text.
f84fe4f448 apps: reinstate deprecated commands but using PKEY APIs
7539cb70eb dsaparam: update command line app to use EVP calls
b304f8567c CHANGES: note which command line utilities are marked for 
deprecation but still available.
769cfc3bd0 Undeprecate DH_get_length() and DH_set_length() functions
dddbbc6f39 gendsa: update command line app to use EVP calls
8f7e1f68cc genrsa: update command line app to use EVP calls
99a7c3a7bf openssl: include the version a command was deprecated in the output 
text.
188dd86ab4 apps: reinstate deprecated commands but using PKEY APIs
ccefc3411e dhparam: update command line app to use EVP calls
b0cfe526d7 tests: reinstate tests for deprecated but non-removed functionality
cd3572a110 dsaparam: update command line app to use EVP calls
54affb77c5 rsa: update command line app to use EVP calls
b940349de1 dsa: update command line app to use EVP calls
e0331eb8b8 Prevent crash in X509_NAME_cmp() etc. when cert has no issuer or no 
serialNumber
753283cd23 Add CMP error reason 'missing reference cert'
e599d0aecd Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in 
crypto/cmp/
a81151bd56 Add a couple of hints to fuzz/README.md
642f60d840 Rename CMP_PROTECTEDPART to OSSL_CMP_PROTECTEDPART for consistency
7a41760667 GOST2012 TLS ClientCertificateType Identifiers support
ccb47dbf47 DOC: Extend the description of EVP_PKEY_CTX_new_from_name()
476de2e5e5 DOC: Add more description of EVP_PKEY_fromdata(), and examples
031c9bd3f3 apps/speed: fix invalid final report when run SM2 benchmarks in 
parallel
ad16671d49 GOST cipher names adjustment
301ea192c7 INSTALL: document 'no-ui-console' rather than 'no-ui'
629c72db5f When calling the import_to function pass the libctx too
7da7b27eec Windows: Add type casting in CRYPTO_atomic_add to remove warning
4350a6bd42 doc: note that the FIPS provider contains some non-approved 
algorithms.
19985ac42c news: note the addition of ECX and SHAKE256 to the FIPS provider as 
non-approved algorithms
b5bcc05302 pkey: free key manager on error path
d8171446a2 ecx: check for errors creating public keys from private ones.
c1e48c5171 s390: ECX key generation fixes.
43cd37014e ecx: add key generation support.
1ee1e55114 Add ECX to FIPS provider as non-FIPS algorithms
8a5cb59601 TEST: Add a test of keygen with an empty template in 
test/evp_extra_test.c
d0ddf9b409 EVP: Fix calls to evp_pkey_export_to_provider()
6f89229603 TLSEXT_SIGALG_gostr34102012 0x0840 and 0x0841 support
7525c93030 Document X509_verify_ex() and X509_REQ_verify_ex()
465f34ed27 Introduce an internal version of X509_check_issued()
0820217441 Create a libctx aware X509_verify_ex()
b27ed81943 Put sys-specific files in build.info
705536e2b5 Use build.info, not ifdef for crypto modules
7165593ce5 Add DH keygen to providers
b03ec3b5d6 Add DSA keygen to provider
09b3654096 Make sure we always send an alert in libssl if we hit a fatal error
e395ba223d When calling EC_POINT_point2buf we must use a libctx
137b274aee Document the new libctx aware private key functions
d6a2bdf7f1 Make sure we use the libctx in libssl when loading PrivateKeys
1531241c54 Teach PEM_read_bio_PrivateKey about libctx
8755b08524 Teach the OSSL_STORE code about libctx
f13fdeb321 Use the libctx in Ed448 private key decoding
472a88b79e Teach d2i_PrivateKey et al about libctx
ca59b00bbd Fix no-pic static builds
49276c3569 EVP: fix memleak in evp_pkey_downgrade()
813d317178 EVP: Add a temporary SM2 hack to key generation
10d756a70e EC: Refactor EVP_PKEY_CTX curve setting macros for param generation
1f185f51a7 PROV: Implement EC param / key generation
2b9add6965 KEYMGMT: Add functions to get param/key generation parameters
a5c864ce90 Fix Dynamic engine loading so that the call to 
ENGINE_load_builtin_engines() is performed.
9bf475fcf3 mkerr: remove legacy guards from generated error headers
ff1f7cdeb1 Add ex_data to EVP_PKEY.
0437435a96 BIO_do_accept: correct error return value
b93e2ec273 Fix some errors in documentation
e32e00ab20 Initialize files that declare internal symbols
8270c4791d Rework util/find-doc-nits to distinguish internal documentation
eacd30a703 Add manpage entry for X509_check_purpose()
abfc73f374 Fix EVP_DigestSign interface when used with DES CMAC
cc572c2564 EVP: legacy_ctrl_to_param() to handle provider side keys
aec8de1a5f CMS KARI: 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-02-06 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

7fa8bcfe43 Fix misspelling errors and typos reported by codespell
2a2b1e4125 More accurate doc of -ssl_config option
d333c31130 Update command list
912f8a988a Add cmd-nits to travis build
54f78b1786 The -hmac option to speed is now #ifdef'd
0dda37f541 Add missing s_client options
7b6a746721 Prevent compiler warning for unused static function.
96fc458a9c Removed unused ssl_dane struct declaration.
099a398268 doc: Fix typo in EVP_DigestSignInit manpage
924d041fe0 Fix small misspelling in doc for OCSP_response_status
9afaa8d65b Fix no-sm2
f11f86f6ec Add FFC param/key generation
104a733df6 Fix no-tls1_3
5ce87e11de Fix builds with no-dh
9aa78c36ec Add a test for SSL_CTX_new_with_libctx()
0f00ed7720 Use the OPENSSL_CTX and property query string in EVP_PKEY_CTX
c8f6c28a93 Explicitly fetch ciphers and digests in libssl
8b6ffd4040 Params: change UTF8 construct calls to avoid explicit strlen(3) 
calls.
b744f915ca Stop accepting certificates signed using SHA1 at security level 1
4d9e8c9554 Create a new embeddedSCTs1 that's signed using SHA256
d8d4e5fb32 Fix no-multiblock
8f2fe32df2 Author: Ross Kinsey  Date:   Wed Jan 29 
00:19:40 2020 -0500
e558ae4921 x86: Add endbranch to indirect branch targets for Intel CET
34b167625a Make minimum size for secure memory a size_t.

Build log ended with (last 100 lines):

clang  -Icrypto/modes -I../openssl/crypto/modes -I. -Iinclude 
-Iproviders/common/include -Iproviders/implementations/include -Icrypto/include 
-I../openssl -I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-
 offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_USE_NODELETE -DL_ENDIAN 
-DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" 
-DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/evp/libcrypto-lib-e_aes_cbc_hmac_sha256.d.tmp -MT 
crypto/evp/libcrypto-lib-e_aes_cbc_hmac_sha256.o -c -o 
crypto/evp/libcrypto-lib-e_aes_cbc_hmac_sha256.o 
../openssl/crypto/evp/e_aes_cbc_hmac_sha256.c
clang  -Icrypto -Icrypto/modes -I../openssl/crypto -I../openssl/crypto/modes 
-I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include 
-Icrypto/include -I../openssl -I../openssl/include 
-I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-e
 xtension-token -Wno-extended-offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_USE_NODELETE -DL_ENDIAN 
-DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" 
-DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/evp/libcrypto-lib-e_aria.d.tmp -MT crypto/evp/libcrypto-lib-e_aria.o -c 
-o crypto/evp/libcrypto-lib-e_aria.o ../openssl/crypto/evp/e_aria.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-02-04 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

e3b1ccad69 EVP_MD_CTX_ctrl(): Remove unnecessary control
8bee651213 PROV: Fix the DSA SIGNATURE implementation for better digests 
handling
31a796d1cc PROV: Implement padding mode words in the RSA ASYM_CIPHER 
implementation
00bc1ad99a Don't pass a digest-size to signature implementations
972fa31895 Decentralize legacy_ctrl_str_to_param()
6d53ad6b5c Teach more BIOs how to handle BIO_CTRL_EOF
d924dbf4ae Detect EOF while reading in libssl
579422c85c Deprecate the ECDSA and EV_KEY_METHOD functions.
5e3f9aa4e9 Deprecate the ECDH functions.
ee8db22e27 ec.h: fix preprocessor indentation
d5e66eab0b Fix coverity issues CID 1457745...1457752, 1457853, 1457854
450d12c825 Fix krb5 external test failure
5a778ce574 Missing "obj_mac" header file in "dh_lib"
04bc70d737 Don't complain about documented symbols with find-doc-nits -d -o
8d242823ed Fix common test framework options
ef07122202 Fix no-ec
5a8848fa7f Revert "Legacy digests can have custom control values"

Build log ended with (last 100 lines):

clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_lu.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_lu.o -c -o 
crypto/x509/libcrypto-shlib-x509_lu.o ../openssl/crypto/x509/x509_lu.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_meth.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_meth.o -c -o 
crypto/x509/libcrypto-shlib-x509_meth.o ../openssl/crypto/x509/x509_meth.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-02-02 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

7f293d9f3b CHANGES: Add note about the refactoring of SM2 EVP_PKEYs
bac1030ae4 Adapt some 'openssl' commands for SM2 changes.
3995de2c03 Adapt tests for SM2 changes.
ef077ba0d2 Make SM3 a mandatory hash function for SM2.
bbaddbc068 X509: Refactor X509_verify() and X509_REQ_verify() for better 
streamlining
0943d5dd61 Add SM2 specific parameter and key generation
f4e4382cae EVP_PKEY_assign_EC_KEY(): detect SM2 curve and set EVP_PKEY type 
accordingly
658608c471 EVP: Small refactor of keymgmt library code
4bf3e989fe config: ensure the perl Configure run is the last statement
03e16083ff Fix "ts" no-XXX options, document two TLS options
8b3efb5302 Update the SSL/TLS connection options
c98eab85b8 evp_pmeth: free the MD reference correctly.
4a0a9e5767 scrypt: free the MD reference correctly.
ca2bf555cd Add support for DH 'modp' group parameters (RFC 3526)

Build log ended with (last 100 lines):

clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_lu.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_lu.o -c -o 
crypto/x509/libcrypto-shlib-x509_lu.o ../openssl/crypto/x509/x509_lu.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_meth.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_meth.o -c -o 
crypto/x509/libcrypto-shlib-x509_meth.o ../openssl/crypto/x509/x509_meth.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-01-30 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

cd624ccd41 Don't acknowledge a servername following warning alert in servername 
cb
0dc7c8e831 Provide better documentation for SSL_get_servername()
49ef3d0719 Test that SSL_get_servername returns what we expect
7955c1f16e Fix SSL_get_servername() and SNI behaviour
68229aebce Fix type name typo in d2i/i2d documentation.
68581885cb Add -issuer_checks to verify options
65718c516e Document most missing options
62742fdd8c Add more generated man1 doc files
12603de634 Add RSA key validation to default provider
a76ce2862b TLS: use EVP for HMAC throughout libssl.
dbde472688 Deprecate the low level HMAC functions
fd4d283e75 hmac: preprocessor indentation fixes
a6d572e601 Deprecate the low level CMAC functions
70a7685a32 cmac: preprocessor indentation fixes

Build log ended with (last 100 lines):

clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_lu.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_lu.o -c -o 
crypto/x509/libcrypto-shlib-x509_lu.o ../openssl/crypto/x509/x509_lu.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_meth.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_meth.o -c -o 
crypto/x509/libcrypto-shlib-x509_meth.o ../openssl/crypto/x509/x509_meth.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-01-28 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

e56ba0e122 Adapt X509_PUBKEY_set() for use with provided implementations
0cb3f4f985 test_evp_extra_test.c: don't rely on exact parameter position
505b41fc5a PROV: Adapt the DSA signature implementation to provide 
Algorithmidentifiers
d5aef5946b Adapt ASN1_item_sign_ctx() for use with provided keypairs
2ee4a50ab9 Modify EVP_PKEY_CTX_new_from_pkey() to add a propquery parameter
612539e8a6 OpenSSL::Test: bring back the relative paths

Build log ended with (last 100 lines):

clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_lu.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_lu.o -c -o 
crypto/x509/libcrypto-shlib-x509_lu.o ../openssl/crypto/x509/x509_lu.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_meth.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_meth.o -c -o 
crypto/x509/libcrypto-shlib-x509_meth.o ../openssl/crypto/x509/x509_meth.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2020-01-26 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

4ff5b41af1 test/recipes/30-test_evp.t: Fix multiple definition of @bffiles
b0031e5dc2 Check that the default signature type is allowed
5fd72d96a5 Replace apps/server.pem with certificate with a sha256 signature.
9420b403b7 EVP: Adapt EVP_PKEY Seal and Open for provider keys
3472082b4b openssl-config: add example libssl system-defaults
c6fec81b88 Deprecate the low level DES functions.
f6edde4f06 des: fix header file preprocessor indentation
8f21260b09 Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libssl
d80bf693fa New functions for PKCS8 attributes management - documentation
408113c050 New functions for PKCS8 attributes management
dc8de3e6f1 Modify DSA and DH keys to use a shared FFC_PARAMS struct
21d08b9ee9 Update man3/verify documentation, error text

Build log ended with (last 100 lines):

clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_lu.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_lu.o -c -o 
crypto/x509/libcrypto-shlib-x509_lu.o ../openssl/crypto/x509/x509_lu.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Win
 compatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/x509/libcrypto-shlib-x509_meth.d.tmp -MT 
crypto/x509/libcrypto-shlib-x509_meth.o -c -o 
crypto/x509/libcrypto-shlib-x509_meth.o ../openssl/crypto/x509/x509_meth.c
clang  -I. -Iinclude -Iproviders/common/include 
-Iproviders/implementations/include -Icrypto/include -I../openssl 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/implementations/include -I../openssl/crypto/include  
-DAES_ASM -DBSAES_ASM -DCMLL_ASM -DECP_NISTZ256_ASM -DGHASH_ASM 
-DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT 
-DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DPOLY1305_ASM 
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM 
-fPIC -pthread -m64 -Wa,--noexecstack -Qunused-arguments -Wall -O0 -g 
-DDEBUG_UNUSED -DPEDANTIC -pedantic -Wno-long-long -Wall -Wextra 
-Wno-unused-parameter -Wno-missing-field-initializers -Wswitch -Wsign-compare 
-Wshadow -Wformat -Wtype-limits -Wundef -Werror -Wmissing-prototypes 
-Wstrict-prototypes -Wno-unknown-warning-option -Wswitch-default 
-Wno-parentheses-equality -Wno-language-extension-token -Wno-extended-offsetof 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-12-22 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

390b18a7a2 Add fips self test DEP for solaris and hpux
169e422edd Remove asn1 module dependency from RSASSA-PKCS1-v1_5 implementation.
365955fb27 Rename doc/man7/provider-asymcipher.pod
b525a7586d doc/man1/openssl-cmds.pod: Add invisble name 'openssl-cmds'
8b849cca31 OpenSSL::Util::extract_pod_info(): Allow invisible names
dfb45dc824 OpenSSL::Util::extract_pod_info(): Read the POD one paragraph at a 
time
ccfce835e0 Adjust all util/missing*.txt to include the section number
b4350db5a7 util/find-doc-nits: Better checking of missing documentation
5423cabb50 perl: OpenSSL::Util::Pod::extract_pod_info() now saves the file 
contents
b0d3442efc Add some missing cfi frame info in aesni-sha and sha-x86_64.pl
95bbe6eff7 Add some missing cfi frame info in keccak1600-x86_64.pl
a5fe7825b9 Add some missing cfi frame info in aesni-x86_64.pl
013c2e8d1a Add some missing cfi frame info in rsaz-x86_64
0190c52ab8 Add some missing cfi frame info in x86_64-mont5.pl
4a0b7ffcc0 Add some missing cfi frame info in aes-x86_64.pl
6b913be708 Add some missing cfi frame info in camellia-x86_64.pl
74a5808b3b Fix no-des build
cc731bc3f6 EVP & PROV: Fix all platform inclusions
c0d47492a7 CRYPTO: split cipher_platform.h into algorithm specific headers

Build log ended with (last 100 lines):

DECLARE_PEM_rw(DSAparams, DSA)
^
../openssl/include/openssl/pem.h:251:9: note: expanded from macro 
'DECLARE_PEM_rw'
DECLARE_PEM_write(name, type)
^
../openssl/include/openssl/pem.h:236:9: note: expanded from macro 
'DECLARE_PEM_write'
DECLARE_PEM_write_bio(name, type) \
^
../openssl/include/openssl/pem.h:225:5: note: expanded from macro 
'DECLARE_PEM_write_bio'
PEM_write_fnsig(name, type, BIO, write_bio);
^
../openssl/include/openssl/pem.h:70:9: note: expanded from macro 
'PEM_write_fnsig'
int PEM_##writename##_##name(OUTTYPE *out, const type *x)
^
:59:1: note: expanded from here
PEM_write_bio_DSAparams
^
../openssl/providers/implementations/serializers/serializer_dh_param.c:87:12: 
error: this function declaration is not a prototype 
[-Werror,-Wstrict-prototypes]
return PEM_write_bio_DHparams(out, dh);
   ^
../openssl/providers/implementations/serializers/serializer_dh_param.c:101:9: 
error: implicit declaration of function 'DH_free' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
DH_free(dh);
^
8 errors generated.
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
did you mean 'i2d_DSAparams'?
../openssl/include/openssl/dsa.h:120:1: note: 'i2d_DSAparams' declared here
DECLARE_ASN1_ENCODE_FUNCTIONS_only(DSA, DSAparams)
^
../openssl/include/openssl/asn1.h:239:13: note: expanded from macro 
'DECLARE_ASN1_ENCODE_FUNCTIONS_only'
int i2d_##name(const type *a, unsigned char **out);
^
:138:1: note: expanded from here
i2d_DSAparams
^
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
implicit declaration of function 'i2d_DHparams' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
params->length = i2d_DHparams(dh, >data);
 ^
Makefile:19788: recipe for target 
'providers/implementations/serializers/libimplementations-lib-serializer_dh_param.o'
 failed
make[1]: *** 
[providers/implementations/serializers/libimplementations-lib-serializer_dh_param.o]
 Error 1
make[1]: *** Waiting for unfinished jobs
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: note: 
did you mean 'i2d_DHxparams'?
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
'i2d_DHxparams' declared here
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
implicit declaration of function 'DH_get0_pub_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), NULL);
   ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
incompatible integer to pointer conversion passing 'int' to parameter of type 
'const BIGNUM *' (aka 'const struct bignum_st *') [-Werror,-Wint-conversion]
ASN1_INTEGER 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-12-19 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

0ab6fc79a9 Fix regression on x509 keyform argument
625c781dc7 Use a function to generate do-not-edit comment
b575608507 Make Windows build more robust
3ce3866389 Fix travis timeout by excluding arm64 gcc -fsanitize=address build
31b59078c8 Optimize AES-GCM implementation on aarch64
51a7c4b5f2 TEST: Add test recipe and help program to test BIO_f_prefix()
f1299839b7 EVP: Adapt EVP_PKEY_print_ routines to use BIO_f_prefix()
0e79d20f1e ASN1: Adapt ASN.1 output routines to use BIO_f_prefix()
e79ae962fb APPS & TEST: Adapt to use the new BIO_f_prefix()
319cee9e2f BIO: Add BIO_f_prefix(), a text line prefixing filter
a0848daee5 crypto/bio/build.info: split the source files in categories
8913378a55 Fix unwind info for some trivial functions
f64f262204 Fix build when enabling mdebug options.
b2055d67f0 Cleanup legacy digest methods.

Build log ended with (last 100 lines):

   ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: note: 
did you mean 'i2d_DHxparams'?
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
'i2d_DHxparams' declared here
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
implicit declaration of function 'DH_get0_pub_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), NULL);
   ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
incompatible integer to pointer conversion passing 'int' to parameter of type 
'const BIGNUM *' (aka 'const struct bignum_st *') [-Werror,-Wint-conversion]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), NULL);
   ^~~
../openssl/include/openssl/asn1.h:637:48: note: passing argument to parameter 
'bn' here
ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai);
   ^
../openssl/providers/implementations/serializers/serializer_dh.c:138:49: error: 
implicit declaration of function 'DH_get0_priv_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
ASN1_INTEGER *priv_key = BN_to_ASN1_INTEGER(DH_get0_priv_key(dh), NULL);
^
../openssl/providers/implementations/serializers/serializer_dh.c:138:49: error: 
incompatible integer to pointer conversion passing 'int' to parameter of type 
'const BIGNUM *' (aka 'const struct bignum_st *') [-Werror,-Wint-conversion]
ASN1_INTEGER *priv_key = BN_to_ASN1_INTEGER(DH_get0_priv_key(dh), NULL);
^~~~
../openssl/include/openssl/asn1.h:637:48: note: passing argument to parameter 
'bn' here
ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai);
   ^
18 errors generated.
../openssl/providers/implementations/serializers/serializer_dh_param.c:64:12: 
note: did you mean 'i2d_KeyParams_bio'?
../openssl/include/openssl/evp.h:1163:5: note: 'i2d_KeyParams_bio' declared here
int i2d_KeyParams_bio(BIO *bp, const EVP_PKEY *pkey);
^
../openssl/providers/implementations/serializers/serializer_dh_param.c:64:12: 
error: this function declaration is not a prototype 
[-Werror,-Wstrict-prototypes]
return i2d_DHparams_bio(out, dh);
   ^
../openssl/providers/implementations/serializers/serializer_dh_param.c:79:9: 
error: implicit declaration of function 'DH_free' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
DH_free(dh);
^
Makefile:19784: recipe for target 
'providers/implementations/serializers/libimplementations-lib-serializer_dh.o' 
failed
../openssl/providers/implementations/serializers/serializer_dh_param.c:make[1]: 
*** 
[providers/implementations/serializers/libimplementations-lib-serializer_dh.o] 
Error 1
87:12: error: implicit declaration of function 'PEM_write_bio_DHparams' is 
invalid in C99 [-Werror,-Wimplicit-function-declaration]
make[1]: *** Waiting for unfinished jobs
return PEM_write_bio_DHparams(out, dh);
   ^
../openssl/providers/implementations/serializers/serializer_dh_priv.c:127:9: 
error: implicit declaration of function 'DH_free' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
DH_free(dh);
^

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-12-17 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

1ac7e15375 apps/speed.c: Fix eddsa sign and verify output with -multi option
982efd7765 EVP: make it possible to init EVP_PKEY_CTX with provided EVP_PKEY
19f909856d Update the HISTORY entry for RSA_get0_pss_params()
e295de1d84 Test that EVP_PKEY_set1_DH() correctly identifies the DH type
32c869ffab Ensure EVP_PKEY_set1_DH detects X9.42 keys
1aeec3dbc2 Return 1 when openssl req -addext kv is duplicated

Build log ended with (last 100 lines):

   ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: note: 
did you mean 'i2d_DHxparams'?
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
'i2d_DHxparams' declared here
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
implicit declaration of function 'DH_get0_pub_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), NULL);
   ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
incompatible integer to pointer conversion passing 'int' to parameter of type 
'const BIGNUM *' (aka 'const struct bignum_st *') [-Werror,-Wint-conversion]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), NULL);
   ^~~
../openssl/include/openssl/asn1.h:637:48: note: passing argument to parameter 
'bn' here
ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai);
   ^
../openssl/providers/implementations/serializers/serializer_dh.c:138:49: error: 
implicit declaration of function 'DH_get0_priv_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
ASN1_INTEGER *priv_key = BN_to_ASN1_INTEGER(DH_get0_priv_key(dh), NULL);
^
../openssl/providers/implementations/serializers/serializer_dh.c:138:49: error: 
incompatible integer to pointer conversion passing 'int' to parameter of type 
'const BIGNUM *' (aka 'const struct bignum_st *') [-Werror,-Wint-conversion]
ASN1_INTEGER *priv_key = BN_to_ASN1_INTEGER(DH_get0_priv_key(dh), NULL);
^~~~
../openssl/include/openssl/asn1.h:637:48: note: passing argument to parameter 
'bn' here
ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai);
   ^
18 errors generated.
Makefile:19759: recipe for target 
'providers/implementations/serializers/libimplementations-lib-serializer_dh.o' 
failed
make[1]: *** 
[providers/implementations/serializers/libimplementations-lib-serializer_dh.o] 
Error 1
make[1]: *** Waiting for unfinished jobs
../openssl/providers/implementations/serializers/serializer_dh_param.c:64:12: 
note: did you mean 'i2d_KeyParams_bio'?
../openssl/include/openssl/evp.h:1163:5: note: 'i2d_KeyParams_bio' declared here
int i2d_KeyParams_bio(BIO *bp, const EVP_PKEY *pkey);
^
../openssl/providers/implementations/serializers/serializer_dh_param.c:64:12: 
error: this function declaration is not a prototype 
[-Werror,-Wstrict-prototypes]
return i2d_DHparams_bio(out, dh);
   ^
../openssl/providers/implementations/serializers/serializer_dh_param.c:79:9: 
error: implicit declaration of function 'DH_free' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
DH_free(dh);
^
../openssl/providers/implementations/serializers/serializer_dh_param.c:87:12: 
error: implicit declaration of function 'PEM_write_bio_DHparams' is invalid in 
C99 [-Werror,-Wimplicit-function-declaration]
return PEM_write_bio_DHparams(out, dh);
   ^
../openssl/providers/implementations/serializers/serializer_dh_priv.c:127:9: 
error: implicit declaration of function 'DH_free' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
DH_free(dh);
^
../openssl/providers/implementations/serializers/serializer_dh_priv.c:127:9: 
error: this function declaration is not a prototype 
[-Werror,-Wstrict-prototypes]
../openssl/providers/implementations/serializers/serializer_dh_priv.c:162:9: 
error: implicit declaration of function 'DH_free' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
DH_free(dh);
^
../openssl/providers/implementations/serializers/serializer_dh_priv.c:208:9: 
error: implicit declaration of 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-12-15 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

1461138271 Deprecated crypto-mdebug-backtrace
742ccab318 Deprecate most of debug-memory
4e3ee452d0 Parse large GOST ClientKeyExchange messages
2e16439786 Remove CRYPTO_secure_allocated from util/missingcrypto111.txt
46994f7163 Add better support for using deprecated symbols internally
97ba39547d test/namemap_internal_test.c: use "cookie" instead of "foo"...
dd0139f416 Check return value after loading config file
ebe19ab86c mac poly1305: add missing NULL check in new function.
41a6d557b9 mac siphash: add missing NULL check on context creation

Build log ended with (last 100 lines):

^
../openssl/providers/implementations/serializers/serializer_dh_param.c:87:12: 
error: this function declaration is not a prototype 
[-Werror,-Wstrict-prototypes]
return PEM_write_bio_DHparams(out, dh);
   ^
../openssl/providers/implementations/serializers/serializer_dh_param.c:101:9: 
error: implicit declaration of function 'DH_free' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
DH_free(dh);
^
8 errors generated.
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: note: 
did you mean 'DSA_get0_p'?
../openssl/include/openssl/dsa.h:187:15: note: 'DSA_get0_p' declared here
const BIGNUM *DSA_get0_p(const DSA *d);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
p = DH_get0_p(dh);
^
../openssl/providers/implementations/serializers/serializer_dh.c:53:7: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
p = DH_get0_p(dh);
  ^ ~
../openssl/providers/implementations/serializers/serializer_dh.c:54:7: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
g = DH_get0_p(dh);
  ^ ~
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: error: 
implicit declaration of function 'i2d_DHxparams' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
params->length = i2d_DHxparams(dh, >data);
 ^
Makefile:19749: recipe for target 
'providers/implementations/serializers/libimplementations-lib-serializer_dh_param.o'
 failed
make[1]: *** 
[providers/implementations/serializers/libimplementations-lib-serializer_dh_param.o]
 Error 1
make[1]: *** Waiting for unfinished jobs
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
did you mean 'i2d_DSAparams'?
../openssl/include/openssl/dsa.h:120:1: note: 'i2d_DSAparams' declared here
DECLARE_ASN1_ENCODE_FUNCTIONS_only(DSA, DSAparams)
^
../openssl/include/openssl/asn1.h:239:13: note: expanded from macro 
'DECLARE_ASN1_ENCODE_FUNCTIONS_only'
int i2d_##name(const type *a, unsigned char **out);
^
:138:1: note: expanded from here
i2d_DSAparams
^
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
implicit declaration of function 'i2d_DHparams' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
params->length = i2d_DHparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: note: 
did you mean 'i2d_DHxparams'?
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
'i2d_DHxparams' declared here
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
implicit declaration of function 'DH_get0_pub_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), NULL);
   ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
incompatible integer to pointer conversion passing 'int' to parameter of type 
'const BIGNUM *' (aka 'const struct bignum_st *') [-Werror,-Wint-conversion]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), NULL);
   ^~~

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-12-12 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

d2b194d78f Various missing-link fixes
dc7aa02900 PROV: Move AES_GCM specialisation away from common cipher header
e85f3a14f8 PROV: Move AES_CCM specialisation away from common cipher header
3dbc5156b0 chunk 6 of CMP contribution to OpenSSL
0402c90ff9 rand_lib.c: fix null pointer dereferences after 
RAND_get_rand_method() failure
f5e77bb0fa Add support for otherName:NAIRealm in output
77fedcdc8c Enrich arm64 tests in Travis matrix
20c09f0034 Fix docs for CRYPTO_secure_allocated
79c44b4e30 Fix some typos
2ff16afc17 Optimize AES-ECB mode in OpenSSL for both aarch64 and aarch32
ef1e59ed83 More testing for sign/verify through `dgst` and `pkeyutl`
81722fdf2e More testing for CLI usage of Ed25519 and Ed448 keys
0984041283 Configure: use ELFv2 ABI on some ppc64 big endian systems
34ab13b7d8 crypto/perlasm/ppc-xlate.pl: add linux64v2 flavour
68a51d59a2 Move providers/common/{ciphers,digests}/* to 
providers/implementations

Build log ended with (last 100 lines):

const BIGNUM *DSA_get0_pub_key(const DSA *d);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:48:19: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
pub_key = DH_get0_pub_key(dh);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:48:17: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
pub_key = DH_get0_pub_key(dh);
^ ~~~
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: error: 
implicit declaration of function 'DH_get0_p' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
p = DH_get0_p(dh);
^
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: note: 
did you mean 'DSA_get0_p'?
../openssl/include/openssl/dsa.h:187:15: note: 'DSA_get0_p' declared here
const BIGNUM *DSA_get0_p(const DSA *d);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
p = DH_get0_p(dh);
^
../openssl/providers/implementations/serializers/serializer_dh.c:53:7: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
p = DH_get0_p(dh);
  ^ ~
../openssl/providers/implementations/serializers/serializer_dh.c:54:7: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
g = DH_get0_p(dh);
  ^ ~
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: error: 
implicit declaration of function 'i2d_DHxparams' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
did you mean 'i2d_DSAparams'?
../openssl/include/openssl/dsa.h:120:1: note: 'i2d_DSAparams' declared here
DECLARE_ASN1_ENCODE_FUNCTIONS_only(DSA, DSAparams)
^
../openssl/include/openssl/asn1.h:239:13: note: expanded from macro 
'DECLARE_ASN1_ENCODE_FUNCTIONS_only'
int i2d_##name(const type *a, unsigned char **out);
^
:145:1: note: expanded from here
i2d_DSAparams
^
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
implicit declaration of function 'i2d_DHparams' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
params->length = i2d_DHparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: note: 
did you mean 'i2d_DHxparams'?
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
'i2d_DHxparams' declared here
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:106:26: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
params->length = i2d_DHparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:122:48: error: 
implicit declaration of function 'DH_get0_pub_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
ASN1_INTEGER *pub_key = BN_to_ASN1_INTEGER(DH_get0_pub_key(dh), 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-12-10 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

436c21a0fd Remove handling of outdated macro's
8c06d7199e Configuration: compute openssl_other_defines and related info later
76d0a74b8e Disable devcryptoeng on newer OpenBSD versions
ea7a952c8a test/memleaktest.c: Modify for use with address/leak sanitizer
22c22369bc Use leak sanitizer instead of internal mdebug to check for memory 
leaks
0969e2592e Move U64 macro from sha.h to sha512.c
1352e0ff49 apps/speed: replace list of #define by enums declarations. it 
simplifies some pieces of code. Improve internal assertions Tag a few #endif 
with OPENSSL_NO_EC to mark its ending.
d63d89ea0f apps/speed: factorize ec test curves declarations remove 'test' 
prefix from variable names.
001d5e2c64 apps/speed: improve sm2 failure code. attach the new objects sooner, 
so error handling is simplified.
f607f6eadd apps/speed: simplify 'doit' action flag management code. Optimize 
algorithm selection code.
0609658f9b apps/speed: initialize key material only when its algo is selected. 
Remove some duplicate key data declarations.
d02b7e0931 apps/speed: remove a shared global variable replace |save_count| by 
the right c[D_EVP(_xxx)] variable. this may shared a value between various 
algorithm.
2cc076530f apps/speed: discard useless protoypes as these methods are defines 
before being used.
af0857f0e7 apps/speed: allow to continue tests after any init failure handling. 
previouly the exit(1) call was aborting the whole execution. Improve error 
message.

Build log ended with (last 100 lines):

const BIGNUM *DSA_get0_priv_key(const DSA *d);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:42:20: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
priv_key = DH_get0_priv_key(dh);
   ^
../openssl/providers/implementations/serializers/serializer_dh.c:42:18: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
priv_key = DH_get0_priv_key(dh);
 ^ 
../openssl/providers/implementations/serializers/serializer_dh.c:48:19: error: 
implicit declaration of function 'DH_get0_pub_key' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
pub_key = DH_get0_pub_key(dh);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:48:19: note: 
did you mean 'DSA_get0_pub_key'?
../openssl/include/openssl/dsa.h:190:15: note: 'DSA_get0_pub_key' declared here
const BIGNUM *DSA_get0_pub_key(const DSA *d);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:48:19: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
pub_key = DH_get0_pub_key(dh);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:48:17: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
pub_key = DH_get0_pub_key(dh);
^ ~~~
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: error: 
implicit declaration of function 'DH_get0_p' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
p = DH_get0_p(dh);
^
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: note: 
did you mean 'DSA_get0_p'?
../openssl/include/openssl/dsa.h:187:15: note: 'DSA_get0_p' declared here
const BIGNUM *DSA_get0_p(const DSA *d);
  ^
../openssl/providers/implementations/serializers/serializer_dh.c:53:9: error: 
this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
p = DH_get0_p(dh);
^
../openssl/providers/implementations/serializers/serializer_dh.c:53:7: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
p = DH_get0_p(dh);
  ^ ~
../openssl/providers/implementations/serializers/serializer_dh.c:54:7: error: 
incompatible integer to pointer conversion assigning to 'const BIGNUM *' (aka 
'const struct bignum_st *') from 'int' [-Werror,-Wint-conversion]
g = DH_get0_p(dh);
  ^ ~
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: error: 
implicit declaration of function 'i2d_DHxparams' is invalid in C99 
[-Werror,-Wimplicit-function-declaration]
params->length = i2d_DHxparams(dh, >data);
 ^
../openssl/providers/implementations/serializers/serializer_dh.c:104:26: note: 
did you mean 'i2d_DSAparams'?
../openssl/include/openssl/dsa.h:120:1: note: 'i2d_DSAparams' declared here

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-09-11 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

7f0a8dc7f9 crypto/threads_win.c: fix preprocessor indentation
0768b38b80 drbg: fix issue where DRBG_CTR fails if NO_DF is used (2nd attempt)
5562dbb39c drbg: add fork id to additional data on UNIX systems
849529257c drbg: ensure fork-safety without using a pthread_atfork handler
dc64dc2edd Add EVP_CIPHER_CTX_tag_length()
64115f05ac Usages of KDFs converted to use the name macros
69333af49d Register KDF's using their name macros rather than strings
2e548ac9a1 Make FIPS provider use KDF name for PBKDF2
27e27cd7ef Update tests to (mostly) use KDF names
1732c260db Convert SSL functions to use KDF names not SN_ strings
d810cc1977 Add macros for the KDF algorithm names.
4a3dd62923 Coverity 1453629 and 1453638: Error handling issues 
(NEGATIVE_RETURNS)
f20a59cb1c Coverity 1453634: Resource leaks (RESOURCE_LEAK)
d111712f6a Coverity 1453633: Error handling issues (CHECKED_RETURN)
64da55a64f Coverity 1453632 & 1453635: Null pointer dereferences (FORWARD_NULL)
085f1d11a0 Coverity 1453630: Null pointer dereferences (FORWARD_NULL)
6ce4ff1915 Coverity 1453628: Null pointer dereferences (REVERSE_INULL)
7e56c62693 Coverity 1453627: Null pointer dereferences (REVERSE_INULL)
92475712a9 Coverity 1414465: Resource leaks  (RESOURCE_LEAK)

Build log ended with (last 100 lines):

clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_params-bin-buildtest_params.d.tmp -MT 
test/buildtest_c_params-bin-buildtest_params.o -c -o 
test/buildtest_c_params-bin-buildtest_params.o test/buildtest_params.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_pem-bin-buildtest_pem.d.tmp -MT 
test/buildtest_c_pem-bin-buildtest_pem.o -c -o 
test/buildtest_c_pem-bin-buildtest_pem.o test/buildtest_pem.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_pem2-bin-buildtest_pem2.d.tmp -MT 
test/buildtest_c_pem2-bin-buildtest_pem2.o -c -o 
test/buildtest_c_pem2-bin-buildtest_pem2.o test/buildtest_pem2.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_pkcs12-bin-buildtest_pkcs12.d.tmp -MT 
test/buildtest_c_pkcs12-bin-buildtest_pkcs12.o -c -o 
test/buildtest_c_pkcs12-bin-buildtest_pkcs12.o test/buildtest_pkcs12.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-09-11 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

5840ed0cd1 Fix a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
fa3eb248e2 Fix a potential crash in rand_unix.c
e301c147a7 Fix a strict warnings error in rand_pool_acquire_entropy

Build log ended with (last 100 lines):

clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_md5-bin-buildtest_md5.d.tmp -MT 
test/buildtest_c_md5-bin-buildtest_md5.o -c -o 
test/buildtest_c_md5-bin-buildtest_md5.o test/buildtest_md5.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_mdc2-bin-buildtest_mdc2.d.tmp -MT 
test/buildtest_c_mdc2-bin-buildtest_mdc2.o -c -o 
test/buildtest_c_mdc2-bin-buildtest_mdc2.o test/buildtest_mdc2.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_modes-bin-buildtest_modes.d.tmp -MT 
test/buildtest_c_modes-bin-buildtest_modes.o -c -o 
test/buildtest_c_modes-bin-buildtest_modes.o test/buildtest_modes.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_obj_mac-bin-buildtest_obj_mac.d.tmp -MT 
test/buildtest_c_obj_mac-bin-buildtest_obj_mac.o -c -o 
test/buildtest_c_obj_mac-bin-buildtest_obj_mac.o test/buildtest_obj_mac.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 
test/buildtest_c_objects-bin-buildtest_objects.d.tmp -MT 
test/buildtest_c_objects-bin-buildtest_objects.o -c -o 
test/buildtest_c_objects-bin-buildtest_objects.o test/buildtest_objects.c
clang  -Iinclude -I../openssl/include  -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wno-unknown-warning-option -Wswitch-default -Wno-parentheses-equality 
-Wno-language-extension-token -Wno-extended-offsetof 
-Wconditional-uninitialized -Wincompatible-pointer-types-discards-qualifiers 
-Wmissing-variable-declarations -DOPENSSL_IA32_SSE2  -MMD -MF 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-07-18 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-50-generic #54-Ubuntu SMP Mon May 6 18:46:08 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

04edd688b3 Add value_barriers in constant time select functions
05f4eb2dc9 Fix S390X compile error due to missing defines
7a9abccde7 Cleanup use of X509 STORE locks
3b438ef95b Fix init_get_thread_local()

Build log ended with (last 100 lines):

clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/common/ciphers -I../openssl/crypto  -DAES_ASM 
-DBSAES_ASM -DECP_NISTZ256_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM 
-DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
-DOPENSSL_CPUID_OBJ -DPOLY1305_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 
-DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM -fPIC -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token 
-Wno-extended-offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers -Wn
 o-unknown-warning-option -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/evp/libcrypto-lib-bio_b64.d.tmp -MT crypto/evp/libcrypto-lib-bio_b64.o 
-c -o crypto/evp/libcrypto-lib-bio_b64.o ../openssl/crypto/evp/bio_b64.c
clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/common/ciphers -I../openssl/crypto  -DAES_ASM 
-DBSAES_ASM -DECP_NISTZ256_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM 
-DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
-DOPENSSL_CPUID_OBJ -DPOLY1305_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 
-DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM -fPIC -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token 
-Wno-extended-offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers -Wn
 o-unknown-warning-option -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/evp/libcrypto-lib-bio_enc.d.tmp -MT crypto/evp/libcrypto-lib-bio_enc.o 
-c -o crypto/evp/libcrypto-lib-bio_enc.o ../openssl/crypto/evp/bio_enc.c
clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/common/ciphers -I../openssl/crypto  -DAES_ASM 
-DBSAES_ASM -DECP_NISTZ256_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM 
-DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
-DOPENSSL_CPUID_OBJ -DPOLY1305_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 
-DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM -fPIC -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token 
-Wno-extended-offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers -Wn
 o-unknown-warning-option -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/evp/libcrypto-lib-bio_md.d.tmp -MT crypto/evp/libcrypto-lib-bio_md.o -c 
-o crypto/evp/libcrypto-lib-bio_md.o ../openssl/crypto/evp/bio_md.c
clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/common/ciphers -I../openssl/crypto  -DAES_ASM 
-DBSAES_ASM 

Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-07-17 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.15.0-50-generic #54-Ubuntu SMP Mon May 6 18:46:08 UTC 2019 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

e7aa7c11c7 Deprecated {OPENSSL,CRYPTO}_debug_mem_{push,pop}
7bc82358ae Fix the return value for SSL_get0_chain_certs()
3c93fbacf6 Parameter building utilities.
4bd8b24045 remove end of line spaces
dd6b270618 Remove tab characters from C source files.

Build log ended with (last 100 lines):

clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/common/ciphers -I../openssl/crypto  -DAES_ASM 
-DBSAES_ASM -DECP_NISTZ256_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM 
-DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
-DOPENSSL_CPUID_OBJ -DPOLY1305_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 
-DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM -fPIC -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token 
-Wno-extended-offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers -Wn
 o-unknown-warning-option -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/err/libcrypto-lib-err_prn.d.tmp -MT crypto/err/libcrypto-lib-err_prn.o 
-c -o crypto/err/libcrypto-lib-err_prn.o ../openssl/crypto/err/err_prn.c
clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/common/ciphers -I../openssl/crypto  -DAES_ASM 
-DBSAES_ASM -DECP_NISTZ256_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM 
-DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
-DOPENSSL_CPUID_OBJ -DPOLY1305_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 
-DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM -fPIC -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token 
-Wno-extended-offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers -Wn
 o-unknown-warning-option -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/ess/libcrypto-lib-ess_asn1.d.tmp -MT crypto/ess/libcrypto-lib-ess_asn1.o 
-c -o crypto/ess/libcrypto-lib-ess_asn1.o ../openssl/crypto/ess/ess_asn1.c
clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 
-I../openssl/providers/common/ciphers -I../openssl/crypto  -DAES_ASM 
-DBSAES_ASM -DECP_NISTZ256_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM 
-DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
-DOPENSSL_CPUID_OBJ -DPOLY1305_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 
-DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM -fPIC -pthread -m64 -Wa,--noexecstack 
-Qunused-arguments -Wall -O0 -g -DDEBUG_UNUSED -DPEDANTIC -pedantic 
-Wno-long-long -Wall -Wextra -Wno-unused-parameter 
-Wno-missing-field-initializers -Wswitch -Wsign-compare -Wshadow -Wformat 
-Wtype-limits -Wundef -Werror -Wmissing-prototypes -Wstrict-prototypes 
-Wswitch-default -Wno-parentheses-equality -Wno-language-extension-token 
-Wno-extended-offsetof -Wconditional-uninitialized 
-Wincompatible-pointer-types-discards-qualifiers -Wn
 o-unknown-warning-option -Wmissing-variable-declarations 
-DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC 
-DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/usr/local/lib/engines-3\"" 
-DMODULESDIR="\"/usr/local/lib/ossl-modules\""   -MMD -MF 
crypto/ess/libcrypto-lib-ess_err.d.tmp -MT crypto/ess/libcrypto-lib-ess_err.o 
-c -o crypto/ess/libcrypto-lib-ess_err.o ../openssl/crypto/ess/ess_err.c
clang  -I. -Icrypto/include -Iinclude -Iproviders/common/include 
-Iproviders/common/ciphers -Icrypto -I../openssl -I../openssl/crypto/include 
-I../openssl/include -I../openssl/providers/common/include 

[openssl-commits] Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2019-01-01 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.4.0-135-generic #161-Ubuntu SMP Mon Aug 27 10:45:01 UTC 2018 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

1f483a69bc Fix cert with rsa instead of rsaEncryption as public key algorithm
0b4233f5a4 Fix a minor nit in the hkdflabel size
005247af76 Fixed minor typo in the req.pod docs
fff1470cda fixed grammar typo

Build log ended with (last 100 lines):

../../openssl/test/recipes/30-test_pkey_meth.t  ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t  ok
../../openssl/test/recipes/40-test_rehash.t ... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t . ok
../../openssl/test/recipes/60-test_x509_dup_cert.t  ok
../../openssl/test/recipes/60-test_x509_store.t ... ok
../../openssl/test/recipes/60-test_x509_time.t  ok
../../openssl/test/recipes/70-test_asyncio.t .. ok
../../openssl/test/recipes/70-test_bad_dtls.t . ok
../../openssl/test/recipes/70-test_clienthello.t .. ok
../../openssl/test/recipes/70-test_comp.t . ok
../../openssl/test/recipes/70-test_key_share.t  ok
../../openssl/test/recipes/70-test_packet.t ... ok
../../openssl/test/recipes/70-test_recordlen.t  ok
../../openssl/test/recipes/70-test_renegotiation.t  ok
../../openssl/test/recipes/70-test_servername.t ... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t  ok
../../openssl/test/recipes/70-test_sslcertstatus.t  ok
../../openssl/test/recipes/70-test_sslextension.t . ok
../../openssl/test/recipes/70-test_sslmessages.t .. ok
../../openssl/test/recipes/70-test_sslrecords.t ... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ... ok
../../openssl/test/recipes/70-test_sslsignature.t . ok
../../openssl/test/recipes/70-test_sslskewith0p.t . skipped: dh is 
not supported by this OpenSSL build
../../openssl/test/recipes/70-test_sslversions.t .. ok
../../openssl/test/recipes/70-test_sslvertol.t  ok
../../openssl/test/recipes/70-test_tls13alerts.t .. ok
../../openssl/test/recipes/70-test_tls13cookie.t .. ok
../../openssl/test/recipes/70-test_tls13downgrade.t ... ok
../../openssl/test/recipes/70-test_tls13hrr.t . ok
../../openssl/test/recipes/70-test_tls13kexmodes.t  ok
../../openssl/test/recipes/70-test_tls13messages.t  ok
../../openssl/test/recipes/70-test_tls13psk.t . ok
../../openssl/test/recipes/70-test_tlsextms.t . ok
../../openssl/test/recipes/70-test_verify_extra.t . ok
../../openssl/test/recipes/70-test_wpacket.t .. ok
../../openssl/test/recipes/80-test_ca.t ... ok
../../openssl/test/recipes/80-test_cipherbytes.t .. ok
../../openssl/test/recipes/80-test_cipherlist.t ... ok
../../openssl/test/recipes/80-test_ciphername.t ... ok
../../openssl/test/recipes/80-test_cms.t .. ok
../../openssl/test/recipes/80-test_cmsapi.t ... ok
../../openssl/test/recipes/80-test_ct.t ... ok
../../openssl/test/recipes/80-test_dane.t . ok
../../openssl/test/recipes/80-test_dtls.t . ok
../../openssl/test/recipes/80-test_dtls_mtu.t . ok
../../openssl/test/recipes/80-test_dtlsv1listen.t . skipped: dh is 
not supported by this OpenSSL build
../../openssl/test/recipes/80-test_ocsp.t . ok
../../openssl/test/recipes/80-test_pkcs12.t ... ok
../../openssl/test/recipes/80-test_ssl_new.t .. ok
../../openssl/test/recipes/80-test_ssl_old.t .. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t . ok
../../openssl/test/recipes/80-test_sslcorrupt.t ... ok
../../openssl/test/recipes/80-test_tsa.t .. ok
../../openssl/test/recipes/80-test_x509aux.t .. ok
../../openssl/test/recipes/90-test_asn1_time.t  ok
../../openssl/test/recipes/90-test_async.t  ok
../../openssl/test/recipes/90-test_bio_enc.t .. ok
../../openssl/test/recipes/90-test_constant_time.t  ok
../../openssl/test/recipes/90-test_fatalerr.t . ok
../../openssl/test/recipes/90-test_gmdiff.t ... ok
../../openssl/test/recipes/90-test_gost.t . 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 
../../openssl/test/recipes/90-test_ige.t .. ok
../../openssl/test/recipes/90-test_includes.t . 

[openssl-commits] Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2018-12-24 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux run 4.4.0-135-generic #161-Ubuntu SMP Mon Aug 27 10:45:01 UTC 2018 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

cf1698cb91 Minor doc fixes for EVP_MAC.
47ec2367eb EVP_PKEY_size declared to take a const parameter
c79a022da9 Do not complain when /dev/crypto does not exist.
da84249be6 Coverity fix in some crypto/asn1 code
39fc4c17c4 Coverity fix in apps/oscp
23d221b771 util/process_docs.pl: handle multiple source directories correctly
baba154510 Admit unknown pkey types at security level 0
6f8b858d05 Fix function names in ct(7) documentation
229446dfae Some code-cleanup/simplification in apps
ffd2df135a X509_check_issued: check that signature algo matches signing key algo
5aa2a7ea41 Fix s_client hang on non-compliant NNTP server test

Build log ended with (last 100 lines):

../../openssl/test/recipes/30-test_pkey_meth.t  ok
../../openssl/test/recipes/30-test_pkey_meth_kdf.t  ok
../../openssl/test/recipes/40-test_rehash.t ... ok
../../openssl/test/recipes/60-test_x509_check_cert_pkey.t . ok
../../openssl/test/recipes/60-test_x509_dup_cert.t  ok
../../openssl/test/recipes/60-test_x509_store.t ... ok
../../openssl/test/recipes/60-test_x509_time.t  ok
../../openssl/test/recipes/70-test_asyncio.t .. ok
../../openssl/test/recipes/70-test_bad_dtls.t . ok
../../openssl/test/recipes/70-test_clienthello.t .. ok
../../openssl/test/recipes/70-test_comp.t . ok
../../openssl/test/recipes/70-test_key_share.t  ok
../../openssl/test/recipes/70-test_packet.t ... ok
../../openssl/test/recipes/70-test_recordlen.t  ok
../../openssl/test/recipes/70-test_renegotiation.t  ok
../../openssl/test/recipes/70-test_servername.t ... ok
../../openssl/test/recipes/70-test_sslcbcpadding.t  ok
../../openssl/test/recipes/70-test_sslcertstatus.t  ok
../../openssl/test/recipes/70-test_sslextension.t . ok
../../openssl/test/recipes/70-test_sslmessages.t .. ok
../../openssl/test/recipes/70-test_sslrecords.t ... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ... ok
../../openssl/test/recipes/70-test_sslsignature.t . ok
../../openssl/test/recipes/70-test_sslskewith0p.t . skipped: dh is 
not supported by this OpenSSL build
../../openssl/test/recipes/70-test_sslversions.t .. ok
../../openssl/test/recipes/70-test_sslvertol.t  ok
../../openssl/test/recipes/70-test_tls13alerts.t .. ok
../../openssl/test/recipes/70-test_tls13cookie.t .. ok
../../openssl/test/recipes/70-test_tls13downgrade.t ... ok
../../openssl/test/recipes/70-test_tls13hrr.t . ok
../../openssl/test/recipes/70-test_tls13kexmodes.t  ok
../../openssl/test/recipes/70-test_tls13messages.t  ok
../../openssl/test/recipes/70-test_tls13psk.t . ok
../../openssl/test/recipes/70-test_tlsextms.t . ok
../../openssl/test/recipes/70-test_verify_extra.t . ok
../../openssl/test/recipes/70-test_wpacket.t .. ok
../../openssl/test/recipes/80-test_ca.t ... ok
../../openssl/test/recipes/80-test_cipherbytes.t .. ok
../../openssl/test/recipes/80-test_cipherlist.t ... ok
../../openssl/test/recipes/80-test_ciphername.t ... ok
../../openssl/test/recipes/80-test_cms.t .. ok
../../openssl/test/recipes/80-test_cmsapi.t ... ok
../../openssl/test/recipes/80-test_ct.t ... ok
../../openssl/test/recipes/80-test_dane.t . ok
../../openssl/test/recipes/80-test_dtls.t . ok
../../openssl/test/recipes/80-test_dtls_mtu.t . ok
../../openssl/test/recipes/80-test_dtlsv1listen.t . skipped: dh is 
not supported by this OpenSSL build
../../openssl/test/recipes/80-test_ocsp.t . ok
../../openssl/test/recipes/80-test_pkcs12.t ... ok
../../openssl/test/recipes/80-test_ssl_new.t .. ok
../../openssl/test/recipes/80-test_ssl_old.t .. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t . ok
../../openssl/test/recipes/80-test_sslcorrupt.t ... ok
../../openssl/test/recipes/80-test_tsa.t .. ok
../../openssl/test/recipes/80-test_x509aux.t .. ok
../../openssl/test/recipes/90-test_asn1_time.t  ok
../../openssl/test/recipes/90-test_async.t  ok
../../openssl/test/recipes/90-test_bio_enc.t .. ok

[openssl-commits] Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2017-02-21 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux test 4.4.0-53-generic #74-Ubuntu SMP Fri Dec 2 15:59:10 UTC 2016 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

fe9aa76 appveyor.yml: engage VC-WIN64A-masm.
1b8f193 Fix memory leak in pkcs12 -export
0fbaef9 Fix some more memory leaks with TXT_DB_insert.
9ad52c5 Fix a few memleaks in TXT_DB.
a7c04f2 Provided support for the -nameopt flag in s_client, s_server and s_time 
commands.
ecca166 Prevent OOB in SRP base64 code.
9dd4ac8 Update client, server and x509 fuzz corpus
38e8f3c Check validity, not just signing for all certificates
faadddc Add no siglags test for ECDSA certificate
a8bb912 Set default validity flags.
9195ddc remove md array: it is not used any more.
5e1f879 Removed ugly size_t less than zero check.
70e14ff Ensure minsize >= sizeof(SH_LIST)
9bb6f82 fix spelling of Camellia in comment
d42d0a4 Implementation of the ARIA cipher as described in RFC 5794.
ad39b31 Added '-nameopt' option to the verify command.
b1498c9 Don't call memcpy if len is zero.

Build log ended with (last 100 lines):

../../openssl/test/recipes/20-test_enc.t .. ok
../../openssl/test/recipes/20-test_passwd.t ... ok
../../openssl/test/recipes/25-test_crl.t .. ok
../../openssl/test/recipes/25-test_d2i.t .. ok
../../openssl/test/recipes/25-test_pkcs7.t  ok
../../openssl/test/recipes/25-test_req.t .. ok
../../openssl/test/recipes/25-test_sid.t .. ok
../../openssl/test/recipes/25-test_verify.t ... ok
../../openssl/test/recipes/25-test_x509.t . ok
../../openssl/test/recipes/30-test_afalg.t  ok
../../openssl/test/recipes/30-test_engine.t ... ok
../../openssl/test/recipes/30-test_evp.t .. ok
../../openssl/test/recipes/30-test_evp_extra.t  ok
../../openssl/test/recipes/30-test_pbelu.t  ok
../../openssl/test/recipes/30-test_pkey_meth.t  ok
../../openssl/test/recipes/40-test_rehash.t ... ok
../../openssl/test/recipes/60-test_x509_store.t ... ok
../../openssl/test/recipes/70-test_asyncio.t .. ok
../../openssl/test/recipes/70-test_bad_dtls.t . ok
../../openssl/test/recipes/70-test_clienthello.t .. ok
../../openssl/test/recipes/70-test_key_share.t  skipped: test_key_share 
needs TLS1.3 enabled
../../openssl/test/recipes/70-test_packet.t ... ok
../../openssl/test/recipes/70-test_renegotiation.t  ok
../../openssl/test/recipes/70-test_sslcbcpadding.t  ok
../../openssl/test/recipes/70-test_sslcertstatus.t  ok
../../openssl/test/recipes/70-test_sslextension.t . ok
../../openssl/test/recipes/70-test_sslmessages.t .. ok
../../openssl/test/recipes/70-test_sslrecords.t ... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ... ok
../../openssl/test/recipes/70-test_sslsignature.t . ok
../../openssl/test/recipes/70-test_sslskewith0p.t . skipped: dh is not 
supported by this OpenSSL build
../../openssl/test/recipes/70-test_sslversions.t .. skipped: 
test_sslversions needs TLS1.3, TLS1.2 and TLS1.1 enabled
../../openssl/test/recipes/70-test_sslvertol.t  ok
../../openssl/test/recipes/70-test_tls13kexmodes.t  skipped: 
test_tls13kexmodes needs TLSv1.3 enabled
../../openssl/test/recipes/70-test_tls13messages.t  skipped: 
test_tls13messages needs TLSv1.3 enabled
../../openssl/test/recipes/70-test_tlsextms.t . ok
../../openssl/test/recipes/70-test_verify_extra.t . ok
../../openssl/test/recipes/70-test_wpacket.t .. ok
../../openssl/test/recipes/80-test_ca.t ... ok
../../openssl/test/recipes/80-test_cipherlist.t ... ok
../../openssl/test/recipes/80-test_cms.t .. ok
../../openssl/test/recipes/80-test_ct.t ... ok
../../openssl/test/recipes/80-test_dane.t . ok
../../openssl/test/recipes/80-test_dtls.t . ok
../../openssl/test/recipes/80-test_dtls_mtu.t . ok
../../openssl/test/recipes/80-test_dtlsv1listen.t . skipped: dh is not 
supported by this OpenSSL build
../../openssl/test/recipes/80-test_ocsp.t . ok
../../openssl/test/recipes/80-test_pkcs12.t ... ok

#   Failed test 'Comparing generated sources.'
#   at ../../openssl/test/recipes/80-test_ssl_new.t line 122.
#  got: '1'
# expected: '0'
# Looks like you failed 1 test of 3.

#   Failed test 'Test configuration 20-cert-select.conf'
#   at ../../openssl/test/recipes/80-test_ssl_new.t line 96.
# Looks like you failed 1 test of 21.
../../openssl/test/recipes/80-test_ssl_new.t .. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/21 subtests 
../../openssl/test/recipes/80-test_ssl_old.t .. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t . ok
../../openssl/test/recipes/80-test_sslcorrupt.t ... ok

[openssl-commits] Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dh

2017-02-19 Thread OpenSSL run-checker
Platform and configuration command:

$ uname -a
Linux test 4.4.0-53-generic #74-Ubuntu SMP Fri Dec 2 15:59:10 UTC 2016 x86_64 
x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dh

Commit log since last time:

e12e903 .travis.yml: remove osx from build matrix.
3aad8e1 Use memcmp() instead of CRYPTO_memcmp() when fuzzing
0837bd8 Internal siphash tests are not run.
d89f664 VMS fix of test/recipes/80-test_ssl_new.t
7c98706 Fix no-dh and no-dsa

Build log ended with (last 100 lines):

../../openssl/test/recipes/20-test_enc.t .. ok
../../openssl/test/recipes/20-test_passwd.t ... ok
../../openssl/test/recipes/25-test_crl.t .. ok
../../openssl/test/recipes/25-test_d2i.t .. ok
../../openssl/test/recipes/25-test_pkcs7.t  ok
../../openssl/test/recipes/25-test_req.t .. ok
../../openssl/test/recipes/25-test_sid.t .. ok
../../openssl/test/recipes/25-test_verify.t ... ok
../../openssl/test/recipes/25-test_x509.t . ok
../../openssl/test/recipes/30-test_afalg.t  ok
../../openssl/test/recipes/30-test_engine.t ... ok
../../openssl/test/recipes/30-test_evp.t .. ok
../../openssl/test/recipes/30-test_evp_extra.t  ok
../../openssl/test/recipes/30-test_pbelu.t  ok
../../openssl/test/recipes/30-test_pkey_meth.t  ok
../../openssl/test/recipes/40-test_rehash.t ... ok
../../openssl/test/recipes/60-test_x509_store.t ... ok
../../openssl/test/recipes/70-test_asyncio.t .. ok
../../openssl/test/recipes/70-test_bad_dtls.t . ok
../../openssl/test/recipes/70-test_clienthello.t .. ok
../../openssl/test/recipes/70-test_key_share.t  skipped: test_key_share 
needs TLS1.3 enabled
../../openssl/test/recipes/70-test_packet.t ... ok
../../openssl/test/recipes/70-test_renegotiation.t  ok
../../openssl/test/recipes/70-test_sslcbcpadding.t  ok
../../openssl/test/recipes/70-test_sslcertstatus.t  ok
../../openssl/test/recipes/70-test_sslextension.t . ok
../../openssl/test/recipes/70-test_sslmessages.t .. ok
../../openssl/test/recipes/70-test_sslrecords.t ... ok
../../openssl/test/recipes/70-test_sslsessiontick.t ... ok
../../openssl/test/recipes/70-test_sslsigalgs.t ... ok
../../openssl/test/recipes/70-test_sslsignature.t . ok
../../openssl/test/recipes/70-test_sslskewith0p.t . skipped: dh is not 
supported by this OpenSSL build
../../openssl/test/recipes/70-test_sslversions.t .. skipped: 
test_sslversions needs TLS1.3, TLS1.2 and TLS1.1 enabled
../../openssl/test/recipes/70-test_sslvertol.t  ok
../../openssl/test/recipes/70-test_tls13kexmodes.t  skipped: 
test_tls13kexmodes needs TLSv1.3 enabled
../../openssl/test/recipes/70-test_tls13messages.t  skipped: 
test_tls13messages needs TLSv1.3 enabled
../../openssl/test/recipes/70-test_tlsextms.t . ok
../../openssl/test/recipes/70-test_verify_extra.t . ok
../../openssl/test/recipes/70-test_wpacket.t .. ok
../../openssl/test/recipes/80-test_ca.t ... ok
../../openssl/test/recipes/80-test_cipherlist.t ... ok
../../openssl/test/recipes/80-test_cms.t .. ok
../../openssl/test/recipes/80-test_ct.t ... ok
../../openssl/test/recipes/80-test_dane.t . ok
../../openssl/test/recipes/80-test_dtls.t . ok
../../openssl/test/recipes/80-test_dtls_mtu.t . ok
../../openssl/test/recipes/80-test_dtlsv1listen.t . skipped: dh is not 
supported by this OpenSSL build
../../openssl/test/recipes/80-test_ocsp.t . ok
../../openssl/test/recipes/80-test_pkcs12.t ... ok

#   Failed test 'Comparing generated sources.'
#   at ../../openssl/test/recipes/80-test_ssl_new.t line 122.
#  got: '1'
# expected: '0'
# Looks like you failed 1 test of 3.

#   Failed test 'Test configuration 20-cert-select.conf'
#   at ../../openssl/test/recipes/80-test_ssl_new.t line 96.
# Looks like you failed 1 test of 21.
../../openssl/test/recipes/80-test_ssl_new.t .. 
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/21 subtests 
../../openssl/test/recipes/80-test_ssl_old.t .. ok
../../openssl/test/recipes/80-test_ssl_test_ctx.t . ok
../../openssl/test/recipes/80-test_sslcorrupt.t ... ok
../../openssl/test/recipes/80-test_tsa.t .. ok
../../openssl/test/recipes/80-test_x509aux.t .. ok
../../openssl/test/recipes/90-test_async.t  ok
../../openssl/test/recipes/90-test_bio_enc.t .. ok
../../openssl/test/recipes/90-test_bioprint.t . ok
../../openssl/test/recipes/90-test_constant_time.t  ok
../../openssl/test/recipes/90-test_external.t . skipped: No external 
tests in this configuration
../../openssl/test/recipes/90-test_gmdiff.t ... ok
../../openssl/test/recipes/90-test_ige.t .. ok
../../openssl/test/recipes/90-test_memleak.t