GeezerVison is showing github.com — deps: upgrade openssl sources to 1.1.1f · nodejs/node@c9cc381
File treeExpand file treeCollapse file tree Open diff view settings Expand file treeCollapse file tree Open diff view settings Collapse file Copy file name to clipboardExpand all lines: deps/openssl/openssl/CHANGES +18Lines changed: 18 additions & 0 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 7 | 7 | https://github.com/openssl/openssl/commits/ and pick the appropriate | 8 | 8 | release branch. | 9 | 9 |
| | 10 | + Changes between 1.1.1e and 1.1.1f [31 Mar 2020] | | 11 | + | | 12 | + *) Revert the change of EOF detection while reading in libssl to avoid | | 13 | + regressions in applications depending on the current way of reporting | | 14 | + the EOF. As the existing method is not fully accurate the change to | | 15 | + reporting the EOF via SSL_ERROR_SSL is kept on the current development | | 16 | + branch and will be present in the 3.0 release. | | 17 | + [Tomas Mraz] | | 18 | + | | 19 | + *) Revised BN_generate_prime_ex to not avoid factors 3..17863 in p-1 | | 20 | + when primes for RSA keys are computed. | | 21 | + Since we previously always generated primes == 2 (mod 3) for RSA keys, | | 22 | + the 2-prime and 3-prime RSA modules were easy to distinguish, since | | 23 | + N = p*q = 1 (mod 3), but N = p*q*r = 2 (mod 3). Therefore fingerprinting | | 24 | + 2-prime vs. 3-prime RSA keys was possible by computing N mod 3. | | 25 | + This avoids possible fingerprinting of newly generated RSA modules. | | 26 | + [Bernd Edlinger] | | 27 | + | 10 | 28 | Changes between 1.1.1d and 1.1.1e [17 Mar 2020] | 11 | 29 | *) Properly detect EOF while reading in libssl. Previously if we hit an EOF | 12 | 30 | while reading in libssl then we would report an error back to the | |
Collapse file Copy file name to clipboardExpand all lines: deps/openssl/openssl/Configurations/unix-Makefile.tmpl +100-100Lines changed: 100 additions & 100 deletions Large diffs are not rendered by default. Collapse file Copy file name to clipboardExpand all lines: deps/openssl/openssl/NEWS +6Lines changed: 6 additions & 0 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 5 | 5 | This file gives a brief overview of the major changes between each OpenSSL | 6 | 6 | release. For more details please read the CHANGES file. | 7 | 7 |
| | 8 | + Major changes between OpenSSL 1.1.1e and OpenSSL 1.1.1f [31 Mar 2020] | | 9 | + | | 10 | + o Revert the unexpected EOF reporting via SSL_ERROR_SSL | | 11 | + | 8 | 12 | Major changes between OpenSSL 1.1.1d and OpenSSL 1.1.1e [17 Mar 2020] | 9 | 13 |
| 10 | 14 | o Fixed an overflow bug in the x64_64 Montgomery squaring procedure | 11 | 15 | used in exponentiation with 512-bit moduli (CVE-2019-1551) | | 16 | + o Properly detect unexpected EOF while reading in libssl and report | | 17 | + it via SSL_ERROR_SSL | 12 | 18 |
| 13 | 19 | Major changes between OpenSSL 1.1.1c and OpenSSL 1.1.1d [10 Sep 2019] | 14 | 20 |
| |
Collapse file Copy file name to clipboardExpand all lines: deps/openssl/openssl/README +2-2Lines changed: 2 additions & 2 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 1 | 1 |
| 2 | | - OpenSSL 1.1.1e 17 Mar 2020 | | 2 | + OpenSSL 1.1.1f 31 Mar 2020 | 3 | 3 |
| 4 | | - Copyright (c) 1998-2019 The OpenSSL Project | | 4 | + Copyright (c) 1998-2020 The OpenSSL Project | 5 | 5 | Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson | 6 | 6 | All rights reserved. | 7 | 7 |
| |
Collapse file Copy file name to clipboardExpand all lines: deps/openssl/openssl/apps/rehash.c +11-3Lines changed: 11 additions & 3 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 1 | 1 | /* | 2 | | - * Copyright 2015-2019 The OpenSSL Project Authors. All Rights Reserved. | | 2 | + * Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved. | 3 | 3 | | 4 | 4 | * | 5 | 5 | * Licensed under the OpenSSL license (the "License"). You may not use | @@ -274,11 +274,19 @@ static int do_file(const char *filename, const char *fullpath, enum Hash h) | 274 | 274 | if (x->x509 != NULL) { | 275 | 275 | type = TYPE_CERT; | 276 | 276 | name = X509_get_subject_name(x->x509); | 277 | | - X509_digest(x->x509, evpmd, digest, NULL); | | 277 | + if (!X509_digest(x->x509, evpmd, digest, NULL)) { | | 278 | + BIO_printf(bio_err, "out of memory\n"); | | 279 | + ++errs; | | 280 | + goto end; | | 281 | + } | 278 | 282 | } else if (x->crl != NULL) { | 279 | 283 | type = TYPE_CRL; | 280 | 284 | name = X509_CRL_get_issuer(x->crl); | 281 | | - X509_CRL_digest(x->crl, evpmd, digest, NULL); | | 285 | + if (!X509_CRL_digest(x->crl, evpmd, digest, NULL)) { | | 286 | + BIO_printf(bio_err, "out of memory\n"); | | 287 | + ++errs; | | 288 | + goto end; | | 289 | + } | 282 | 290 | } else { | 283 | 291 | ++errs; | 284 | 292 | goto end; | |
Collapse file Copy file name to clipboardExpand all lines: deps/openssl/openssl/apps/s_server.c +2-2Lines changed: 2 additions & 2 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 1 | 1 | /* | 2 | | - * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved. | | 2 | + * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved. | 3 | 3 | * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved | 4 | 4 | * Copyright 2005 Nokia. All rights reserved. | 5 | 5 | * | @@ -1904,7 +1904,7 @@ int s_server_main(int argc, char *argv[]) | 1904 | 1904 | BIO_printf(bio_s_out, "Setting secondary ctx parameters\n"); | 1905 | 1905 |
| 1906 | 1906 | if (sdebug) | 1907 | | - ssl_ctx_security_debug(ctx, sdebug); | | 1907 | + ssl_ctx_security_debug(ctx2, sdebug); | 1908 | 1908 |
| 1909 | 1909 | if (session_id_prefix) { | 1910 | 1910 | if (strlen(session_id_prefix) >= 32) | |
Collapse file Copy file name to clipboardExpand all lines: deps/openssl/openssl/crypto/bn/bn_local.h +1-4Lines changed: 1 addition & 4 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 1 | 1 | /* | 2 | | - * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved. | | 2 | + * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved. | 3 | 3 | * | 4 | 4 | * Licensed under the OpenSSL license (the "License"). You may not use | 5 | 5 | * this file except in compliance with the License. You can obtain a copy | @@ -654,9 +654,6 @@ BIGNUM *int_bn_mod_inverse(BIGNUM *in, | 654 | 654 | const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx, | 655 | 655 | int *noinv); | 656 | 656 |
| 657 | | -int bn_probable_prime_dh(BIGNUM *rnd, int bits, | 658 | | - const BIGNUM *add, const BIGNUM *rem, BN_CTX *ctx); | 659 | | - | 660 | 657 | static ossl_inline BIGNUM *bn_expand(BIGNUM *a, int bits) | 661 | 658 | { | 662 | 659 | if (bits > (INT_MAX - BN_BITS2 + 1)) | |
|