Matt Caswell

icon company OpenSSL

Results 503 comments of Matt Caswell

Pipelining support for TLSv1.3 and Provided Ciphers

For the TLSv1.3 implementation we want to just use the standard EVP interface, i.e. it should not be necessary to have a special TLS aware cipher.

QUIC Thread Assisted Mode Synchronisation Requirements

What happens to this PR now? Should it be updated to document that (2) was chosen solution and merged?

-DOPENSSLDIR="\"/xxx/ssl\"" -DENGINESDIR="\"/xxx/lib/engines-1.1\"

Closing since this is marked as resolved.

Crashes from FIPS provider EVP_RAND_generate when statically linked to libcrypto

> #0 0x0000000000589ac4 in err_string_data_cmp () #1 0x00007ffff7f05a48 in EVP_RAND_generate () from /home/ubuntu/dep/ssl307static/lib64/ossl-modules/fips.so Looks like the FIPS module is trying to raise some error here. Typically it does so via...

Update documentation for DTLS1.3

@t8m - please reconfirm

Updates DTLSv1_listen to support DTLS 1.3 client hellos.

Looks like this needs a rebase

OpenSSL License still applied for some source files

This is an error. All files should be released under Apache 2.0

Future proof RLAYER_USE_EXPLICIT_IV by checking dtls versions directly.

There are CI failures...most likely because of the issue highlighted in my comment.

Make conf_diagnostics apply also to the SSL conf errors

The CI failure looks relevant

Remove atexit() and replace by using a library destructor if it is available

Shouldn't we also be reviewing the whole nodelete code as part of this effort? That only exists because of atexit