summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--.github/workflows/ci.yml39
-rw-r--r--.github/workflows/coveralls.yml2
-rw-r--r--.github/workflows/cross-compiles.yml2
-rwxr-xr-x.github/workflows/make-test3
-rw-r--r--CHANGES.md12
-rw-r--r--NEWS.md2
-rw-r--r--NOTES-NONSTOP.md4
-rw-r--r--apps/demoSRP/srp_verifier.txt4
-rw-r--r--apps/lib/apps.c15
-rw-r--r--apps/lib/cmp_mock_srv.c19
-rw-r--r--apps/lib/http_server.c6
-rw-r--r--apps/lib/s_socket.c6
-rw-r--r--apps/ocsp.c6
-rw-r--r--apps/speed.c6
-rw-r--r--build.info2
-rw-r--r--crypto/asn1/asn1_item_list.c1
-rw-r--r--crypto/asn1/asn1_item_list.h1
-rw-r--r--crypto/bio/bio_sock.c3
-rw-r--r--crypto/build.info2
-rw-r--r--crypto/cmp/cmp_asn.c33
-rw-r--r--crypto/cmp/cmp_genm.c6
-rw-r--r--crypto/conf/conf_mod.c1
-rw-r--r--crypto/hashtable/build.info4
-rw-r--r--crypto/hashtable/hashtable.c691
-rw-r--r--crypto/mem.c59
-rw-r--r--crypto/sha/sha512.c6
-rw-r--r--crypto/threads_none.c7
-rw-r--r--crypto/threads_pthread.c57
-rw-r--r--crypto/threads_win.c21
-rw-r--r--crypto/x509/build.info3
-rw-r--r--crypto/x509/by_store.c16
-rw-r--r--crypto/x509/t_acert.c285
-rw-r--r--crypto/x509/x509_acert.c328
-rw-r--r--crypto/x509/x509_acert.h22
-rw-r--r--crypto/x509/x509_d2.c5
-rw-r--r--crypto/x509/x509aset.c177
-rw-r--r--crypto/x509/x_all.c49
-rw-r--r--crypto/x509/x_ietfatt.c240
-rw-r--r--doc/HOWTO/certificates.txt2
-rw-r--r--doc/build.info42
-rw-r--r--doc/internal/man3/ossl_ht_new.pod374
-rw-r--r--doc/man3/CRYPTO_THREAD_run_once.pod13
-rw-r--r--doc/man3/EVP_PKEY_CTX_ctrl.pod5
-rw-r--r--doc/man3/EVP_PKEY_decrypt.pod13
-rw-r--r--doc/man3/OPENSSL_malloc.pod27
-rw-r--r--doc/man3/OSSL_CMP_ITAV_new_caCerts.pod5
-rw-r--r--doc/man3/OSSL_IETF_ATTR_SYNTAX.pod97
-rw-r--r--doc/man3/OSSL_IETF_ATTR_SYNTAX_print.pod41
-rw-r--r--doc/man3/PEM_read_bio_PrivateKey.pod12
-rw-r--r--doc/man3/RSA_public_encrypt.pod13
-rw-r--r--doc/man3/X509V3_get_d2i.pod19
-rw-r--r--doc/man3/X509_ACERT_add1_attr.pod67
-rw-r--r--doc/man3/X509_ACERT_add_attr_nconf.pod63
-rw-r--r--doc/man3/X509_ACERT_get0_holder_baseCertId.pod122
-rw-r--r--doc/man3/X509_ACERT_get_attr.pod59
-rw-r--r--doc/man3/X509_ACERT_print_ex.pod112
-rw-r--r--doc/man3/X509_dup.pod19
-rw-r--r--doc/man3/X509_get0_notBefore.pod25
-rw-r--r--doc/man3/X509_get0_signature.pod19
-rw-r--r--doc/man3/X509_get0_uids.pod18
-rw-r--r--doc/man3/X509_get_serialNumber.pod24
-rw-r--r--doc/man3/X509_get_subject_name.pod19
-rw-r--r--doc/man3/X509_get_version.pod12
-rw-r--r--doc/man3/X509_sign.pod10
-rw-r--r--doc/man3/X509_verify.pod12
-rw-r--r--doc/man3/d2i_X509.pod8
-rw-r--r--doc/man7/ossl-guide-migration.pod18
-rw-r--r--doc/man7/provider-asym_cipher.pod2
-rw-r--r--fuzz/acert.c48
-rw-r--r--fuzz/build.info20
m---------fuzz/corpora0
-rw-r--r--fuzz/hashtable.c389
-rw-r--r--include/crypto/x509_acert.h66
-rw-r--r--include/internal/hashtable.h332
-rw-r--r--include/internal/sockets.h10
-rw-r--r--include/openssl/crypto.h.in7
-rw-r--r--include/openssl/pem.h1
-rw-r--r--include/openssl/x509_acert.h.in156
m---------oqs-provider0
-rw-r--r--os-dep/Apple/PrivacyInfo.xcprivacy23
-rw-r--r--providers/implementations/kdfs/hkdf.c2
-rw-r--r--ssl/record/methods/tls_common.c7
-rw-r--r--ssl/ssl_lib.c3
-rw-r--r--ssl/statem/extensions_clnt.c48
-rw-r--r--ssl/statem/extensions_srvr.c7
-rw-r--r--ssl/statem/statem_clnt.c5
-rw-r--r--test/build.info9
-rw-r--r--test/certs/acert.pem5
-rw-r--r--test/certs/acert_bc1.pem46
-rw-r--r--test/certs/acert_bc2.pem17
-rw-r--r--test/certs/acert_ietf.pem15
-rw-r--r--test/ct_test.c9
-rw-r--r--test/drbgtest.c6
-rw-r--r--test/lhash_test.c468
-rw-r--r--test/prov_config_test.c3
-rw-r--r--test/recipes/60-test_x509_acert.t24
-rw-r--r--test/recipes/70-test_renegotiation.t101
-rw-r--r--test/recipes/70-test_sslextension.t1
-rw-r--r--test/recipes/70-test_sslmessages.t2
-rw-r--r--test/recipes/70-test_tls13certcomp.t3
-rw-r--r--test/recipes/70-test_tls13kexmodes.t6
-rw-r--r--test/recipes/70-test_tls13messages.t6
-rw-r--r--test/recipes/80-test_cmp_http_data/test_commands.csv2
-rw-r--r--test/recipes/82-test_ocsp_cert_chain.t12
-rwxr-xr-xtest/recipes/95-test_external_oqsprovider_data/oqsprovider.sh6
-rw-r--r--test/recipes/99-test_fuzz_acert.t22
-rw-r--r--test/recipes/99-test_fuzz_hashtable.t22
-rw-r--r--test/sslapitest.c6
-rw-r--r--test/threadstest.c20
-rw-r--r--test/x509_acert_test.c174
-rw-r--r--util/libcrypto.num85
-rw-r--r--util/other.syms2
-rw-r--r--util/platform_symbols/unix-symbols.txt2
113 files changed, 5407 insertions, 208 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b8b8f2ec3c..9bc5f9777f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -96,7 +96,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@basic-gcc"
- path: artifacts/
+ path: artifacts.tar.gz
basic_clang:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -118,7 +118,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@basic-clang"
- path: artifacts/
+ path: artifacts.tar.gz
self-hosted:
if: github.repository == 'openssl/openssl'
@@ -143,7 +143,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@self-hosted-${{ matrix.os }}"
- path: artifacts/
+ path: artifacts.tar.gz
minimal:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -165,8 +165,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@minimal"
- path: artifacts/
- if-no-files-found: ignore
+ path: artifacts.tar.gz
no-deprecated:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -188,7 +187,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@no-deprecated"
- path: artifacts/
+ path: artifacts.tar.gz
no-shared-ubuntu:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -210,7 +209,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@no-shared-ubuntu"
- path: artifacts/
+ path: artifacts.tar.gz
no-shared-macos:
strategy:
@@ -237,7 +236,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@no-shared-${{ matrix.os }}"
- path: artifacts/
+ path: artifacts.tar.gz
non-caching:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -263,7 +262,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@non-caching"
- path: artifacts/
+ path: artifacts.tar.gz
address_ub_sanitizer:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -289,7 +288,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@address_ub_sanitizer"
- path: artifacts/
+ path: artifacts.tar.gz
fuzz_tests:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -315,7 +314,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@fuzz_tests"
- path: artifacts/
+ path: artifacts.tar.gz
if-no-files-found: ignore
memory_sanitizer:
@@ -343,7 +342,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@memory_sanitizer"
- path: artifacts/
+ path: artifacts.tar.gz
threads_sanitizer:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -369,7 +368,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@threads_sanitizer"
- path: artifacts/
+ path: artifacts.tar.gz
enable_non-default_options:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -393,7 +392,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@enable_non-default_options"
- path: artifacts/
+ path: artifacts.tar.gz
full_featured:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -423,7 +422,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@full_featured"
- path: artifacts/
+ path: artifacts.tar.gz
no-legacy:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -445,7 +444,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@no-legacy"
- path: artifacts/
+ path: artifacts.tar.gz
legacy:
runs-on: ${{ github.server_url == 'https://github.com' && 'ubuntu-latest' || 'ubuntu-22.04-self-hosted' }}
@@ -467,7 +466,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@legacy"
- path: artifacts/
+ path: artifacts.tar.gz
# out-of-source-and-install checks multiple things at the same time:
# - That building, testing and installing works from an out-of-source
@@ -509,7 +508,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@out-of-readonly-source-and-install-ubuntu"
- path: build/artifacts/
+ path: build/artifacts.tar.gz
- name: make install
run: make install
working-directory: ./build
@@ -554,7 +553,7 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "ci@out-of-readonly-source-and-install-${{ matrix.os }}"
- path: build/artifacts/
+ path: build/artifacts.tar.gz
- name: make install
run: make install
working-directory: ./build
@@ -570,7 +569,7 @@ jobs:
sudo apt-get update
sudo apt-get -yq install bison gettext keyutils ldap-utils libldap2-dev libkeyutils-dev python3 python3-paste python3-pyrad slapd tcsh python3-virtualenv virtualenv python3-kdcproxy
- name: install cpanm and Test2::V0 for gost_engine testing
- uses: perl-actions/install-with-cpanm@v1
+ uses: perl-actions/install-with-cpanm@stable
with:
install: Test2::V0
- name: setup hostname workaround
diff --git a/.github/workflows/coveralls.yml b/.github/workflows/coveralls.yml
index aae4fbf4f8..5751bbdb13 100644
--- a/.github/workflows/coveralls.yml
+++ b/.github/workflows/coveralls.yml
@@ -56,7 +56,7 @@ jobs:
sudo apt-get -yq install lcov
sudo apt-get -yq install bison gettext keyutils ldap-utils libldap2-dev libkeyutils-dev python3 python3-paste python3-pyrad slapd tcsh python3-virtualenv virtualenv python3-kdcproxy
- name: install Test2::V0 for gost_engine testing
- uses: perl-actions/install-with-cpanm@v1
+ uses: perl-actions/install-with-cpanm@stable
with:
install: Test2::V0
- name: setup hostname workaround
diff --git a/.github/workflows/cross-compiles.yml b/.github/workflows/cross-compiles.yml
index 4e5dfa45f2..5dc1b83f4e 100644
--- a/.github/workflows/cross-compiles.yml
+++ b/.github/workflows/cross-compiles.yml
@@ -220,5 +220,5 @@ jobs:
uses: actions/upload-artifact@v3
with:
name: "cross-compiles@${{ matrix.platform.arch }}"
- path: artifacts/
+ path: artifacts.tar.gz
if-no-files-found: ignore
diff --git a/.github/workflows/make-test b/.github/workflows/make-test
index 247b4c61bd..195928e786 100755
--- a/.github/workflows/make-test
+++ b/.github/workflows/make-test
@@ -37,4 +37,7 @@ echo "Test suite exited with $RESULT, artifacts path is $OSSL_CI_ARTIFACTS_PATH"
(cd "$OSSL_CI_ARTIFACTS_PATH"; find . -type f | sort)
echo "::endgroup::"
+echo "Archive artifacts"
+tar -czvf artifacts.tar.gz $OSSL_CI_ARTIFACTS_PATH
+
exit $RESULT
diff --git a/CHANGES.md b/CHANGES.md
index 76801ac78c..28e1c0ae4d 100644
--- a/CHANGES.md