wireguard-openbsd/lib/libssl/ssl_cert.c, branch jd/queueboosts

Handle GOST in ssl_cert_dup().

2020-06-05T17:55:24Z

Add missing case entry for SSL_PKEY_GOST01. Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.

2020-05-19T16:35:20Z

Some time prior to SSLeay 0.8.1b, SSL_PKEY_RSA_SIGN got added with the intention of handling RSA sign only certificates... this incomplete code had the following comment: /* check to see if this is a signing only certificate */ /* EAY EAY EAY EAY */ And while the comment was removed in 2005, the incomplete RSA sign-only handling has remained ever since. Remove SSL_PKEY_RSA_SIGN and rename SSL_PKEY_RSA_ENC to SSL_PKEY_RSA. While here also remove the unused SSL_PKEY_DH_RSA. ok tb@

s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there is

2019-05-15T09:13:16Z

no need to check for it. Fixes COV-165788, identified with help from Alex Bumstead. ok jsing@

Avoid leak in SSL_dup_CA_list()

2019-04-13T18:04:05Z

In the case that X509_NAME_dup() succeeds, but sk_X509_NAME_push() fails, name is leaked. The entire function is trying to be clever and therefore hard to follow. Let's do it the stupid but safe way. ok jsing

Strip out all of the pkey to sigalg and sigalg to pkey linkages.

2019-03-25T17:33:26Z

These are no longer used now that we defer signature algorithm selection. ok beck@

Add a chain member to CERT_PKEY and provide functions for manipulating it.

2019-03-25T16:24:57Z

Note that this is not the full chain, as the leaf certificate currently remains in the x509 member of CERT_PKEY. Unfortunately we've got to contend with the fact that some OpenSSL *_chain_* APIs exclude the leaf certificate while others include it... ok beck@ tb@

Revert previous - the default sigalg for RSA key exchange is {sha1,rsa}.

2018-11-19T14:42:01Z

In TLSv1.2, if the client does not send a signature algorithms extension then for RSA key exchange a signature algorithm of {sha1,rsa} is implied. The MD5+SHA1 hash only applies to older versions of TLS, which do not support sigalgs.

Unbreak legacy ciphers for prior to 1.1 by setting having a legacy

2018-11-16T02:41:16Z

sigalg for MD5_SHA1 and using it as the non sigalgs default ok jsing@

Stop keeping track of sigalgs by guessing it from digest and pkey,

2018-11-10T01:19:09Z

just keep the sigalg around so we can remember what we actually decided to use. ok jsing@

Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.

2018-11-08T20:55:18Z

ok beck@ tb@