wireguard-openbsd/lib/libssl, branch jd/queueboosts

We inherited the constant time CBC padding removal from BoringSSL, but

2020-06-19T21:26:40Z

missed a subsequent fix for an off-by-one in that code. If the first byte of a CBC padding of length 255 is mangled, we don't detect that. Adam Langley's BoringSSL commit 80842bdb44855dd7f1dde64a3fa9f4e782310fc7 Fixes the failing tlsfuzzer lucky 13 test case. ok beck inoguchi

The check_includes step is incorrect dependency management model for

2020-06-09T16:53:52Z

how our tree gets built. If this was done in all the libraries (imagine sys/dev), it would disrupt the development process hugely. So it should not be done here either. use 'make includes' by hand instead.

Implement a rolling hash of the ClientHello message, Enforce RFC 8446

2020-06-06T01:40:08Z

section 4.1.2 to ensure subsequent ClientHello messages after a HelloRetryRequest messages must be unchanged from the initial ClientHello. ok tb@ jsing@

Use IANA allocated GOST ClientCertificateTypes.

2020-06-05T18:14:05Z

IANA has allocated numbers for GOST ClientCertificateType. Use them in addition to private values (left in place for compatibility). Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Stop sending GOST R 34.10-94 as a CertificateType.

2020-06-05T17:58:32Z

GOST R 34.10-94 is an obsolete certificate type, unsupported by LibreSSL and by the rest of current software, so there is no point in sending in the CertificateTypes. Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Handle GOST in ssl_cert_dup().

2020-06-05T17:55:24Z

Add missing case entry for SSL_PKEY_GOST01. Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.

2020-06-05T17:53:26Z

GOST cipher suites requires that CertVerify signatures be generated in a special way (see ssl3_send_client_kex_gost(), ssl3_get_cert_verify()). However, the GOST_SIG_FORMAT_RS_LE flag was not passed in case of TLS 1.2 connections (because they use different code path). Set this flag on GOST PKEYs. Diff from Dmitry Baryshkov Sponsored by ROSA Linux ok inoguchi@ tb@

Align tls13_server_select_certificate() with

2020-06-04T18:46:21Z

tls13_client_select_certificate(). ok inoguchi

Improve client certificate selection for TLSv1.3

2020-06-04T18:41:42Z

This allows clients to use EC certificates. ok inoguchi, jsing

mention that TLS_method(3) also supports TLSv1.3;

2020-06-04T18:06:43Z

tb@ OKed this part of a larger diff from inoguchi@