K1

8.3-stable分支构建失败

1

``` ./config $make -j /usr/bin/perl "-I." -Mconfigdata "util/dofile.pl" \ "-oMakefile" include/crypto/bn_conf.h.in > include/crypto/bn_conf.h /usr/bin/perl "-I." -Mconfigdata "util/dofile.pl" \ "-oMakefile" include/crypto/dso_conf.h.in > include/crypto/dso_conf.h /usr/bin/perl "-I." -Mconfigdata "util/dofile.pl" \ "-oMakefile" include/openssl/opensslconf.h.in >...

feature: add balancer_ssl_session_fetchby and balancer_ssl_session_storeby

9

I hereby granted the copyright of the changes in this pull request to the authors of this lua-nginx-module project. Nginx support caching and reusing the upstream ssl session, but balancer_by_lua...

Fix coverity issues. Fix CVE-2024-0727, CVE-2023-6237 and CVE-2023-6129. ##### Checklist - [ ] 在 https://yuque.com/tsdoc 增加或更新了必要的文档 - [x] 增加或更新了必要的测试用例 - [x] 对于重要修改，更新了CHANGES文件 - [ ] 当前修改存在对已有API参数或返回值的改变 - [ ] 当前修改存在对旧版本功能的兼容性改变（如网络协议或密码算法）

envoy-openssl build successfully with envoy:cf2df8cbe, commit time is Tue Jul 28 02:32:57 2020. But build failed with the latest Envoy, when will support the latest Envoy?

Support CMS sign/verify for SM2 Key, rather than just ecdsa and rsa signature. ECDSA and DSA and all provider-delivered signatures implementation is the same by calling cms_generic_sign(). cherry-picked from openssl:...

[8.4]Fix coverity issue, 467560, 467559 and 464519

1

Resource leak: 467560. Overflowed integer argument: 467559 and 464519. ##### Checklist - [ ] 在 https://yuque.com/tsdoc 增加或更新了必要的文档 - [ ] 增加或更新了必要的测试用例 - [ ] 对于重要修改，更新了CHANGES文件 - [ ] 当前修改存在对已有API参数或返回值的改变 -...

Avoid type errors in EAI-related name check logic.

1

The incorrectly typed data is read only, used in a compare operation, so neither remote code execution, nor memory content disclosure were possible. However, applications performing certificate name checks were...

[8.3-stable] Fix coverity issues, remove useless code in NTLS

1

Fix coverity issues, including resource leaks, use after free, out of bounds access, misuse of time_t, etc. Remove useless code in NTLS, including psk and cookie extensions. ##### Checklist -...