head 1.1; branch 1.1.1; access; symbols netbsd-9-5-RELEASE:1.1.1.1.2.2 netbsd-11-0-RELEASE:1.1.1.1 netbsd-11-0-RC7:1.1.1.1 netbsd-11-0-RC6:1.1.1.1 netbsd-11-0-RC5:1.1.1.1 netbsd-11-0-RC4:1.1.1.1 netbsd-11-0-RC3:1.1.1.1 netbsd-11-0-RC2:1.1.1.1 netbsd-11-0-RC1:1.1.1.1 perseant-exfatfs-base-20250801:1.1.1.1 netbsd-11:1.1.1.1.0.12 netbsd-11-base:1.1.1.1 openssl-3-0-16:1.1.1.1 netbsd-10-1-RELEASE:1.1.1.1 openssl-3-0-15:1.1.1.1 perseant-exfatfs-base-20240630:1.1.1.1 perseant-exfatfs:1.1.1.1.0.10 perseant-exfatfs-base:1.1.1.1 openssl-3-0-14:1.1.1.1 netbsd-9-4-RELEASE:1.1.1.1.2.2 netbsd-10-0-RELEASE:1.1.1.1 netbsd-10-0-RC6:1.1.1.1 netbsd-10-0-RC5:1.1.1.1 netbsd-10-0-RC4:1.1.1.1 netbsd-10-0-RC3:1.1.1.1 netbsd-10-0-RC2:1.1.1.1 netbsd-10-0-RC1:1.1.1.1 openssl-3-0-12:1.1.1.1 openssl-3-0-9:1.1.1.1 openssl-3-0-8:1.1.1.1 openssl-1-1-1t:1.1.1.1 netbsd-10:1.1.1.1.0.8 netbsd-10-base:1.1.1.1 netbsd-9-3-RELEASE:1.1.1.1.2.2 openssl-1-1-1n:1.1.1.1 openssl-1-1-1m:1.1.1.1 cjep_sun2x-base1:1.1.1.1 cjep_sun2x:1.1.1.1.0.6 cjep_sun2x-base:1.1.1.1 cjep_staticlib_x-base1:1.1.1.1 netbsd-9-2-RELEASE:1.1.1.1.2.2 cjep_staticlib_x:1.1.1.1.0.4 cjep_staticlib_x-base:1.1.1.1 netbsd-9:1.1.1.1.0.2 openssl-1-1-1k:1.1.1.1 openssl-1-1-1j:1.1.1.1 openssl-1-1-1i:1.1.1.1 OPENSSL:1.1.1; locks; strict; comment @# @; 1.1 date 2020.12.10.00.13.02; author christos; state Exp; branches 1.1.1.1; next ; commitid 7JtMflEwRYKm08zC; 1.1.1.1 date 2020.12.10.00.13.02; author christos; state Exp; branches 1.1.1.1.2.1; next ; commitid 7JtMflEwRYKm08zC; 1.1.1.1.2.1 date 2020.12.10.00.13.02; author martin; state dead; branches; next 1.1.1.1.2.2; commitid QJPWihKTWcn1kXMC; 1.1.1.1.2.2 date 2021.03.27.14.35.14; author martin; state Exp; branches; next ; commitid QJPWihKTWcn1kXMC; desc @@ 1.1 log @Initial revision @ text @-----BEGIN PRIVATE KEY----- MIIBeQIBADCCAQMGByqGSM49AgEwgfcCAQEwLAYHKoZIzj0BAQIhAP////8AAAAB AAAAAAAAAAAAAAAA////////////////MFsEIP////8AAAABAAAAAAAAAAAAAAAA ///////////////8BCBaxjXYqjqT57PrvVV2mIa8ZR0GsMxTsPY7zjw+J9JgSwMV AMSdNgiG5wSTamZ44ROdJreBn36QBEEEaxfR8uEsQkf4vOblY6RA8ncDfYEt6zOg 9KE5RdiYwpZP40Li/hp/m47n60p8D54WK84zV2sxXs7LtkBoN79R9QIhAP////8A AAAA//////////+85vqtpxeehPO5ysL8YyVRAgEBBG0wawIBAQQg0cmpcTcEYG5G ZaVkGjtsBc3sLZn1EuV9qNK2qx6iNzmhRANCAAT7tMM/sL1WpA9Oeqglz8W9/83j kFf6UF+Z+IYF5Eq1Ky+sRFSXKbNDj+fFW3KajMCAXFDSbL33wcdNJUKPtKrn -----END PRIVATE KEY----- @ 1.1.1.1 log @Changes between 1.1.1h and 1.1.1i [08 Dec 2020] Fixed NULL pointer deref in the GENERAL_NAME_cmp function This function could crash if both GENERAL_NAMEs contain an EDIPARTYNAME. If an attacker can control both items being compared then this could lead to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) (CVE-2020-1971) Matt Caswell Changes between 1.1.1g and 1.1.1h [22 Sep 2020] Certificates with explicit curve parameters are now disallowed in verification chains if the X509_V_FLAG_X509_STRICT flag is used. Tomas Mraz The 'MinProtocol' and 'MaxProtocol' configuration commands now silently ignore TLS protocol version bounds when configuring DTLS-based contexts, and conversely, silently ignore DTLS protocol version bounds when configuring TLS-based contexts. The commands can be repeated to set bounds of both types. The same applies with the corresponding "min_protocol" and "max_protocol" command-line switches, in case some application uses both TLS and DTLS. SSL_CTX instances that are created for a fixed protocol version (e.g. TLSv1_server_method()) also silently ignore version bounds. Previously attempts to apply bounds to these protocol versions would result in an error. Now only the "version-flexible" SSL_CTX instances are subject to limits in configuration files in command-line options. Viktor Dukhovni Handshake now fails if Extended Master Secret extension is dropped on renegotiation. Tomas Mraz The Oracle Developer Studio compiler will start reporting deprecated APIs @ text @@ 1.1.1.1.2.1 log @file ee-key-ec-explicit.pem was added on branch netbsd-9 on 2021-03-27 14:35:14 +0000 @ text @d1 10 @ 1.1.1.1.2.2 log @Pull up the following revisions, requested by christos in ticket #1237: crypto/external/bsd/openssl/dist/VMS/msg_install.com up to 1.1.1.1 crypto/external/bsd/openssl/dist/VMS/msg_staging.com up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ca-cert-ec-explicit.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ca-cert-ec-named.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ca-key-ec-explicit.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ca-key-ec-named.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-cert-ec-explicit.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-cert-ec-named-explicit.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-cert-ec-named-named.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-key-ec-explicit.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-key-ec-named-explicit.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-key-ec-named-named.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-self-signed.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/root-expired.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ca-pss-cert.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ca-pss-key.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/ee-pss-cert.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/certs/invalid-cert.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/recipes/04-test_pem_data/cert-254-chars-at-the-end.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/recipes/04-test_pem_data/cert-254-chars-in-the-middle.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/recipes/04-test_pem_data/cert-oneline-multiple-of-254.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/recipes/05-test_cmac.t up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/recipes/15-test_genec.t up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/recipes/20-test_dgst.t up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/cmactest.c up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/tested25519.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/tested25519pub.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/tested448.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/test/tested448pub.pem up to 1.1.1.1 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-avx2.pl delete crypto/external/bsd/openssl/dist/AUTHORS up to 1.1.1.3 crypto/external/bsd/openssl/dist/CHANGES up to 1.27 crypto/external/bsd/openssl/dist/CONTRIBUTING up to 1.1.1.9 crypto/external/bsd/openssl/dist/Configure up to 1.28 crypto/external/bsd/openssl/dist/INSTALL up to 1.1.1.14 crypto/external/bsd/openssl/dist/NEWS up to 1.27 crypto/external/bsd/openssl/dist/NOTES.ANDROID up to 1.1.1.5 crypto/external/bsd/openssl/dist/NOTES.PERL up to 1.1.1.3 crypto/external/bsd/openssl/dist/NOTES.VMS up to 1.1.1.5 crypto/external/bsd/openssl/dist/NOTES.WIN up to 1.1.1.5 crypto/external/bsd/openssl/dist/README up to 1.27 crypto/external/bsd/openssl/dist/appveyor.yml up to 1.1.1.6 crypto/external/bsd/openssl/dist/config up to 1.1.1.12 crypto/external/bsd/openssl/dist/e_os.h up to 1.17 crypto/external/bsd/openssl/dist/Configurations/10-main.conf up to 1.1.1.9 crypto/external/bsd/openssl/dist/Configurations/descrip.mms.tmpl up to 1.1.1.7 crypto/external/bsd/openssl/dist/Configurations/unix-Makefile.tmpl up to 1.1.1.11 crypto/external/bsd/openssl/dist/Configurations/windows-makefile.tmpl up to 1.1.1.7 crypto/external/bsd/openssl/dist/apps/ca.c up to 1.21 crypto/external/bsd/openssl/dist/apps/cms.c up to 1.1.1.15 crypto/external/bsd/openssl/dist/apps/genpkey.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/apps/rsa8192.pem up to 1.1.1.2 crypto/external/bsd/openssl/dist/apps/s_cb.c up to 1.1.1.19 crypto/external/bsd/openssl/dist/apps/s_client.c up to 1.23 crypto/external/bsd/openssl/dist/apps/s_time.c up to 1.12 crypto/external/bsd/openssl/dist/apps/x509.c up to 1.1.1.16 crypto/external/bsd/openssl/dist/crypto/armcap.c up to 1.13 crypto/external/bsd/openssl/dist/crypto/mem_sec.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/o_str.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/o_time.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/ppccap.c up to 1.19 crypto/external/bsd/openssl/dist/crypto/aes/aes_core.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/aes/aes_ige.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-mb-x86_64.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-sha1-x86_64.pl up to 1.7 crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-sha256-x86_64.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/aes/asm/aesv8-armx.pl up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/asn1/asn1_err.c up to 1.1.1.12 crypto/external/bsd/openssl/dist/crypto/asn1/asn1_par.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/crypto/asn1/bio_ndef.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/asn1/charmap.h up to 1.1.1.7 crypto/external/bsd/openssl/dist/crypto/asn1/d2i_pr.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/asn1/tasn_dec.c up to 1.11 crypto/external/bsd/openssl/dist/crypto/asn1/tasn_enc.c up to 1.11 crypto/external/bsd/openssl/dist/crypto/asn1/x_algor.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/bio/b_addr.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/bio/b_print.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/crypto/bio/bss_acpt.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/crypto/bio/bss_conn.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/bn/bn_gcd.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/bn/bn_lib.c up to 1.15 crypto/external/bsd/openssl/dist/crypto/bn/bn_mpi.c up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/bn/bn_prime.h up to 1.1.1.7 crypto/external/bsd/openssl/dist/crypto/bn/asm/mips.pl up to 1.8 crypto/external/bsd/openssl/dist/crypto/bn/asm/rsaz-avx2.pl up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/bn/asm/rsaz-x86_64.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont.pl up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont5.pl up to 1.1.1.13 crypto/external/bsd/openssl/dist/crypto/chacha/asm/chacha-armv8.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/chacha/asm/chacha-x86.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/chacha/asm/chacha-x86_64.pl up to 1.1.1.4 crypto/external/bsd/openssl/dist/crypto/cmac/cmac.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/cms/cms_lib.c up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/cms/cms_sd.c up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/cms/cms_smime.c up to 1.1.1.14 crypto/external/bsd/openssl/dist/crypto/conf/conf_def.c up to 1.13 crypto/external/bsd/openssl/dist/crypto/conf/conf_def.h up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/dh/dh_key.c up to 1.1.1.12 crypto/external/bsd/openssl/dist/crypto/dso/dso_win32.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/crypto/ec/ec_ameth.c up to 1.12 crypto/external/bsd/openssl/dist/crypto/ec/ec_asn1.c up to 1.11 crypto/external/bsd/openssl/dist/crypto/ec/ec_err.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/ec/ec_key.c up to 1.6 crypto/external/bsd/openssl/dist/crypto/ec/ec_lib.c up to 1.10 crypto/external/bsd/openssl/dist/crypto/ec/ec_local.h up to 1.1.1.2 crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistp224.c up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistp521.c up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistz256.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-armv4.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/ec/asm/ecp_nistz256-x86_64.pl up to 1.1.1.7 crypto/external/bsd/openssl/dist/crypto/ec/asm/x25519-x86_64.pl up to 1.1.1.3 crypto/external/bsd/openssl/dist/crypto/engine/eng_devcrypto.c up to 1.9 crypto/external/bsd/openssl/dist/crypto/engine/eng_lib.c up to 1.8 crypto/external/bsd/openssl/dist/crypto/err/openssl.txt up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/evp/bio_ok.c up to 1.1.1.12 crypto/external/bsd/openssl/dist/crypto/evp/e_aes.c up to 1.24 crypto/external/bsd/openssl/dist/crypto/evp/encode.c up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/evp/evp_enc.c up to 1.13 crypto/external/bsd/openssl/dist/crypto/evp/evp_err.c up to 1.1.1.16 crypto/external/bsd/openssl/dist/crypto/modes/cbc128.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/modes/ccm128.c up to 1.1.1.7 crypto/external/bsd/openssl/dist/crypto/modes/cfb128.c up to 1.1.1.7 crypto/external/bsd/openssl/dist/crypto/modes/ctr128.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/modes/gcm128.c up to 1.11 crypto/external/bsd/openssl/dist/crypto/modes/modes_local.h up to 1.1.1.2 crypto/external/bsd/openssl/dist/crypto/modes/ofb128.c up to 1.1.1.7 crypto/external/bsd/openssl/dist/crypto/modes/xts128.c up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/modes/asm/aesni-gcm-x86_64.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-x86_64.pl up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.h up to 1.1.1.12 crypto/external/bsd/openssl/dist/crypto/objects/obj_xref.h up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/pem/pem_err.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/pem/pem_lib.c up to 1.1.1.14 crypto/external/bsd/openssl/dist/crypto/pem/pem_pkey.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/pem/pvkfmt.c up to 1.1.1.15 crypto/external/bsd/openssl/dist/crypto/pkcs7/pk7_smime.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-armv4.pl up to 1.1.1.4 crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-armv8.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-x86.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/poly1305/asm/poly1305-x86_64.pl up to 1.1.1.4 crypto/external/bsd/openssl/dist/crypto/rand/drbg_ctr.c up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/rand/drbg_lib.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/rand/rand_lib.c up to 1.1.1.15 crypto/external/bsd/openssl/dist/crypto/rand/rand_local.h up to 1.1.1.2 crypto/external/bsd/openssl/dist/crypto/rand/rand_unix.c up to 1.17 crypto/external/bsd/openssl/dist/crypto/rand/randfile.c up to 1.13 crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ameth.c up to 1.1.1.15 crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ssl.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/crypto/sha/keccak1600.c up to 1.3 crypto/external/bsd/openssl/dist/crypto/sha/asm/keccak1600-ppc64.pl up to 1.3 crypto/external/bsd/openssl/dist/crypto/sha/asm/keccak1600p8-ppc.pl up to 1.3 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-586.pl up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-armv8.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-mb-x86_64.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-x86_64.pl up to 1.10 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-586.pl up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-mb-x86_64.pl up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-armv8.pl up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-x86_64.pl up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/srp/srp_lib.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/crypto/store/loader_file.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/crypto/store/store_lib.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/crypto/ts/ts_rsp_sign.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/crypto/ui/ui_openssl.c up to 1.17 crypto/external/bsd/openssl/dist/crypto/whrlpool/wp_block.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/x509/x509_att.c up to 1.1.1.8 crypto/external/bsd/openssl/dist/crypto/x509/x509_cmp.c up to 1.1.1.16 crypto/external/bsd/openssl/dist/crypto/x509/x509_err.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/crypto/x509/x509_local.h up to 1.1.1.2 crypto/external/bsd/openssl/dist/crypto/x509/x509_req.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/x509/x509_txt.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/x509/x509_vfy.c up to 1.23 crypto/external/bsd/openssl/dist/crypto/x509/x_all.c up to 1.1.1.12 crypto/external/bsd/openssl/dist/crypto/x509/x_attrib.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/crypto/x509/x_pubkey.c up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/x509v3/pcy_data.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/crypto/x509v3/v3_alt.c up to 1.1.1.11 crypto/external/bsd/openssl/dist/crypto/x509v3/v3_genn.c up to 1.1.1.5 crypto/external/bsd/openssl/dist/crypto/x509v3/v3_purp.c up to 1.1.1.15 crypto/external/bsd/openssl/dist/doc/man1/CA.pl.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man1/ca.pod up to 1.1.1.6 crypto/external/bsd/openssl/dist/doc/man1/cms.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man1/crl2pkcs7.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man1/dgst.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man1/dsa.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man1/ec.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man1/enc.pod up to 1.1.1.6 crypto/external/bsd/openssl/dist/doc/man1/genpkey.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man1/genrsa.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man1/ocsp.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man1/pkcs12.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man1/pkcs8.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man1/pkey.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man1/pkeyutl.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man1/req.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man1/rsa.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man1/s_client.pod up to 1.1.1.7 crypto/external/bsd/openssl/dist/doc/man1/s_server.pod up to 1.1.1.7 crypto/external/bsd/openssl/dist/doc/man1/s_time.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man1/sess_id.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man1/smime.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man1/spkac.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man1/storeutl.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man1/ts.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man1/tsget.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man1/verify.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man1/x509.pod up to 1.1.1.6 crypto/external/bsd/openssl/dist/doc/man3/ASN1_INTEGER_get_int64.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/ASN1_STRING_length.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/ASN1_TIME_set.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/ASN1_TYPE_get.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/ASYNC_WAIT_CTX_new.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/ASYNC_start_job.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/BF_encrypt.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BIO_ADDR.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BIO_ADDRINFO.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BIO_connect.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/BIO_ctrl.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BIO_get_data.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BIO_parse_hostserv.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BIO_read.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BIO_s_accept.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/BIO_s_bio.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/BIO_s_connect.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/BIO_s_file.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/BIO_set_callback.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/BN_add.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BN_bn2bin.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/BN_generate_prime.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/BN_mod_mul_montgomery.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/BN_set_bit.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/CMS_verify.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/CRYPTO_THREAD_run_once.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/CRYPTO_memcmp.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/DES_random_key.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/DH_generate_key.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/DH_get0_pqg.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/DH_set_method.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/DSA_set_method.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/DTLSv1_listen.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/ECDSA_SIG_new.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/EC_GROUP_new.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/EC_KEY_new.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/EC_POINT_new.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/ENGINE_add.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/ERR_get_error.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/ERR_print_errors.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/ERR_put_error.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/EVP_DigestInit.pod up to 1.1.1.6 crypto/external/bsd/openssl/dist/doc/man3/EVP_DigestSignInit.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/EVP_DigestVerifyInit.pod up to 1.1.1.6 crypto/external/bsd/openssl/dist/doc/man3/EVP_EncodeInit.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/EVP_EncryptInit.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/EVP_OpenInit.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/EVP_PKEY_CTX_ctrl.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/EVP_PKEY_CTX_new.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/EVP_PKEY_keygen.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/EVP_PKEY_new.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/EVP_SealInit.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/EVP_SignInit.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/EVP_VerifyInit.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/HMAC.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/OCSP_cert_to_id.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/OCSP_request_add1_nonce.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/OCSP_resp_find_status.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/OCSP_sendreq_new.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_LH_COMPFUNC.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_config.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_ia32cap.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_init_crypto.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_init_ssl.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/OPENSSL_malloc.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/OSSL_STORE_open.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/PEM_read_bio_PrivateKey.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/PKCS7_verify.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/RAND_DRBG_new.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/RAND_DRBG_set_callbacks.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/RAND_add.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/RAND_load_file.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/RSA_blinding_on.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/RSA_private_encrypt.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/RSA_set_method.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SHA256_Init.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_CONF_cmd.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_dane_enable.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_alpn_select_cb.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_generate_session_id.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_info_callback.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_max_cert_list.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_mode.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_options.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_psk_client_callback.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_read_ahead.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_security_level.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_session_cache_mode.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_session_id_context.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_session_ticket_cb.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_split_send_fragment.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_tlsext_servername_callback.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_set_tlsext_ticket_key_cb.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/SSL_CTX_use_psk_identity_hint.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_accept.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_alloc_buffers.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_connect.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_do_handshake.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_get_all_async_fds.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_get_error.pod up to 1.1.1.7 crypto/external/bsd/openssl/dist/doc/man3/SSL_new.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_pending.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_read.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/SSL_read_early_data.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_set1_host.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/SSL_set_bio.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_set_fd.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_set_shutdown.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_shutdown.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/SSL_state_string.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/SSL_want.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/SSL_write.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man3/UI_UTIL_read_pw.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/UI_create_method.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/UI_new.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/X509V3_get_d2i.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/X509_ALGOR_dup.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/X509_LOOKUP_hash_dir.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/X509_LOOKUP_meth_new.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/X509_STORE_CTX_get_error.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/X509_STORE_CTX_new.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/X509_STORE_CTX_set_verify_cb.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/X509_STORE_set_verify_cb_func.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/X509_VERIFY_PARAM_set_flags.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/X509_check_ca.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/X509_check_host.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/X509_check_issued.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/X509_check_purpose.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/X509_get0_signature.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man3/X509_get_extension_flags.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man3/X509v3_get_ext_by_NID.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/d2i_DHparams.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man3/d2i_X509.pod up to 1.1.1.5 crypto/external/bsd/openssl/dist/doc/man5/config.pod up to 1.1.1.4 crypto/external/bsd/openssl/dist/doc/man5/x509v3_config.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man7/SM2.pod up to 1.1.1.3 crypto/external/bsd/openssl/dist/doc/man7/evp.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/doc/man7/ossl_store.pod up to 1.1.1.2 crypto/external/bsd/openssl/dist/fuzz/asn1.c up to 1.1.1.3 crypto/external/bsd/openssl/dist/fuzz/x509.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/include/openssl/asn1err.h up to 1.1.1.3 crypto/external/bsd/openssl/dist/include/openssl/bn.h up to 1.4 crypto/external/bsd/openssl/dist/include/openssl/e_os2.h up to 1.1.1.5 crypto/external/bsd/openssl/dist/include/openssl/ec.h up to 1.1.1.5 crypto/external/bsd/openssl/dist/include/openssl/ecerr.h up to 1.1.1.4 crypto/external/bsd/openssl/dist/include/openssl/evperr.h up to 1.1.1.5 crypto/external/bsd/openssl/dist/include/openssl/obj_mac.h up to 1.1.1.6 crypto/external/bsd/openssl/dist/include/openssl/opensslconf.h.in up to 1.1.1.5 crypto/external/bsd/openssl/dist/include/openssl/opensslv.h up to 1.1.1.14 crypto/external/bsd/openssl/dist/include/openssl/pemerr.h up to 1.1.1.3 crypto/external/bsd/openssl/dist/include/openssl/ssl.h up to 1.1.1.9 crypto/external/bsd/openssl/dist/include/openssl/ssl3.h up to 1.1.1.4 crypto/external/bsd/openssl/dist/include/openssl/x509.h up to 1.1.1.4 crypto/external/bsd/openssl/dist/include/openssl/x509_vfy.h up to 1.1.1.5 crypto/external/bsd/openssl/dist/include/openssl/x509err.h up to 1.1.1.3 crypto/external/bsd/openssl/dist/include/openssl/x509v3.h up to 1.1.1.6 crypto/external/bsd/openssl/dist/ssl/bio_ssl.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/ssl/d1_lib.c up to 1.11 crypto/external/bsd/openssl/dist/ssl/s3_lib.c up to 1.28 crypto/external/bsd/openssl/dist/ssl/ssl_conf.c up to 1.1.1.7 crypto/external/bsd/openssl/dist/ssl/ssl_lib.c up to 1.20 crypto/external/bsd/openssl/dist/ssl/ssl_local.h up to 1.1.1.2 crypto/external/bsd/openssl/dist/ssl/ssl_rsa.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/ssl/ssl_sess.c up to 1.10 crypto/external/bsd/openssl/dist/ssl/t1_lib.c up to 1.33 crypto/external/bsd/openssl/dist/ssl/t1_trce.c up to 1.1.1.7 crypto/external/bsd/openssl/dist/ssl/tls13_enc.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/ssl/record/rec_layer_d1.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/ssl/record/ssl3_buffer.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/ssl/statem/extensions.c up to 1.1.1.9 crypto/external/bsd/openssl/dist/ssl/statem/extensions_clnt.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/ssl/statem/extensions_srvr.c up to 1.1.1.5 crypto/external/bsd/openssl/dist/ssl/statem/statem_clnt.c up to 1.1.1.12 crypto/external/bsd/openssl/dist/ssl/statem/statem_lib.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/ssl/statem/statem_srvr.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/test/asn1_decode_test.c up to 1.1.1.2 crypto/external/bsd/openssl/dist/test/asn1_encode_test.c up to 1.1.1.3 crypto/external/bsd/openssl/dist/test/bioprinttest.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/test/build.info up to 1.1.1.11 crypto/external/bsd/openssl/dist/test/drbgtest.c up to 1.1.1.6 crypto/external/bsd/openssl/dist/test/ec_internal_test.c up to 1.1.1.3 crypto/external/bsd/openssl/dist/test/ectest.c up to 1.8 crypto/external/bsd/openssl/dist/test/handshake_helper.c up to 1.1.1.7 crypto/external/bsd/openssl/dist/test/rsa_test.c up to 1.8 crypto/external/bsd/openssl/dist/test/sslapitest.c up to 1.1.1.10 crypto/external/bsd/openssl/dist/test/tls13encryptiontest.c up to 1.1.1.3 crypto/external/bsd/openssl/dist/test/v3nametest.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/test/verify_extra_test.c up to 1.1.1.5 crypto/external/bsd/openssl/dist/test/x509aux.c up to 1.1.1.4 crypto/external/bsd/openssl/dist/test/certs/mkcert.sh up to 1.1.1.4 crypto/external/bsd/openssl/dist/test/certs/setup.sh up to 1.1.1.9 crypto/external/bsd/openssl/dist/test/recipes/04-test_pem.t up to 1.1.1.4 crypto/external/bsd/openssl/dist/test/recipes/15-test_ec.t up to 1.1.1.2 crypto/external/bsd/openssl/dist/test/recipes/25-test_req.t up to 1.1.1.4 crypto/external/bsd/openssl/dist/test/recipes/25-test_verify.t up to 1.1.1.7 crypto/external/bsd/openssl/dist/test/recipes/70-test_renegotiation.t up to 1.1.1.2 crypto/external/bsd/openssl/dist/test/recipes/70-test_verify_extra.t up to 1.1.1.2 crypto/external/bsd/openssl/dist/test/recipes/80-test_x509aux.t up to 1.1.1.2 crypto/external/bsd/openssl/dist/tools/c_rehash.in up to 1.1.1.6 crypto/external/bsd/openssl/dist/util/libcrypto.num up to 1.1.1.10 crypto/external/bsd/openssl/dist/util/mkrc.pl up to 1.1.1.6 crypto/external/bsd/openssl/dist/util/perl/TLSProxy/Message.pm up to 1.1.1.5 doc/3RDPARTY (manually edited) Import OpenSSL 1.1.1k. Changes between 1.1.1j and 1.1.1k [xx XXX xxxx] Fixed a problem with verifying a certificate chain when using the X509_V_FLAG_X509_STRICT flag. This flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. ([CVE-2021-3450]) Tomasz Mraz Fixed an issue where an OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. ([CVE-2021-3449]) Peter Kaestle and Samuel Sapalski @ text @a0 10 -----BEGIN PRIVATE KEY----- MIIBeQIBADCCAQMGByqGSM49AgEwgfcCAQEwLAYHKoZIzj0BAQIhAP////8AAAAB AAAAAAAAAAAAAAAA////////////////MFsEIP////8AAAABAAAAAAAAAAAAAAAA ///////////////8BCBaxjXYqjqT57PrvVV2mIa8ZR0GsMxTsPY7zjw+J9JgSwMV AMSdNgiG5wSTamZ44ROdJreBn36QBEEEaxfR8uEsQkf4vOblY6RA8ncDfYEt6zOg 9KE5RdiYwpZP40Li/hp/m47n60p8D54WK84zV2sxXs7LtkBoN79R9QIhAP////8A AAAA//////////+85vqtpxeehPO5ysL8YyVRAgEBBG0wawIBAQQg0cmpcTcEYG5G ZaVkGjtsBc3sLZn1EuV9qNK2qx6iNzmhRANCAAT7tMM/sL1WpA9Oeqglz8W9/83j kFf6UF+Z+IYF5Eq1Ky+sRFSXKbNDj+fFW3KajMCAXFDSbL33wcdNJUKPtKrn -----END PRIVATE KEY----- @