{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":7634677,"defaultBranch":"master","name":"openssl","ownerLogin":"openssl","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2013-01-15T22:34:48.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/3279138?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1713336886.0","currentOid":""},"activityList":{"items":[{"before":"8d0d05e9cb132d6baec7c1e9aa9c0bf4ebfeebee","after":"8beb0e3cc976b42ae12284aa1fd3b3c8eeb2030c","ref":"refs/heads/openssl-3.0","pushedAt":"2024-05-02T15:45:46.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Add docs noting requirements for SM2 signing\n\nReviewed-by: Paul Yang \nReviewed-by: Tomas Mraz \nReviewed-by: Matt Caswell \n(Merged from https://github.com/openssl/openssl/pull/24078)\n\n(cherry picked from commit 54673b93594a71c9f8052a1df1a7c6bf07c49f4d)","shortMessageHtmlLink":"Add docs noting requirements for SM2 signing"}},{"before":"e4a87616c07aa5e9bc32fa815e5ead4c17ce8fd9","after":"54673b93594a71c9f8052a1df1a7c6bf07c49f4d","ref":"refs/heads/openssl-3.1","pushedAt":"2024-05-02T15:45:42.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Add docs noting requirements for SM2 signing\n\nReviewed-by: Paul Yang \nReviewed-by: Tomas Mraz \nReviewed-by: Matt Caswell \n(Merged from https://github.com/openssl/openssl/pull/24078)","shortMessageHtmlLink":"Add docs noting requirements for SM2 signing"}},{"before":"a380ae85be287045b1eaa64d23942101a426c080","after":"067fbc01b9e867b31c71091d62f0f9012dc9e41a","ref":"refs/heads/master","pushedAt":"2024-05-02T13:35:41.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Reduce optimization in hppa builds\n\nWe're getting some odd errors in the lhash test on hppa. Analysis shows\nthat the crash is happening randomly in various places, but always\noccurs during an indexed load of register r11 or r23. Root cause hasn't\nbeen completely determined, but given that:\n\n1) hppa is an unadopted platform\n2) asan/ubsan/threadsan shows no issues with the affected code elsewhere\n3) The hppa build does not have threading enabled\n4) reducing the optimization level to 01 quashes the problem\n\nThe belief is that this is either a bug in gcc optimization, or an issue\nin the qemu emulator we use to test.\n\nSince this is causing CI failures, I'm proposing that we just lower the\noptimization level of the build to -01 to avoid the problem, and address\nit more throughly should an actual platform user encounter an error\n\nFixes #24272\n\nReviewed-by: Matt Caswell \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24318)","shortMessageHtmlLink":"Reduce optimization in hppa builds"}},{"before":"91d5fd54ee3ad87b5d3a57668e8dc9495d72bab6","after":"375447bac3ba98b97fe2a4c8b3c797fc0b2f4234","ref":"refs/heads/openssl-3.3","pushedAt":"2024-05-02T07:58:49.000Z","pushType":"push","commitsCount":7,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Correct top for EC/DSA nonces if BN_DEBUG is on\n\nOtherwise following operations would bail out in bn_check_top().\n\nReviewed-by: Paul Dale \nReviewed-by: Neil Horman \n(Merged from https://github.com/openssl/openssl/pull/24265)\n\n(cherry picked from commit a380ae85be287045b1eaa64d23942101a426c080)","shortMessageHtmlLink":"Correct top for EC/DSA nonces if BN_DEBUG is on"}},{"before":"f301d75eb850253b930a18d2af183783303a2ba8","after":"65b8a5156e13482ff6564ae6410ffb7892f144d3","ref":"refs/heads/openssl-3.2","pushedAt":"2024-05-02T07:58:49.000Z","pushType":"push","commitsCount":7,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Correct top for EC/DSA nonces if BN_DEBUG is on\n\nOtherwise following operations would bail out in bn_check_top().\n\nReviewed-by: Paul Dale \nReviewed-by: Neil Horman \n(Merged from https://github.com/openssl/openssl/pull/24265)\n\n(cherry picked from commit a380ae85be287045b1eaa64d23942101a426c080)","shortMessageHtmlLink":"Correct top for EC/DSA nonces if BN_DEBUG is on"}},{"before":"1848c561ec39a9ea91ff1bf740a554be274f98b0","after":"a380ae85be287045b1eaa64d23942101a426c080","ref":"refs/heads/master","pushedAt":"2024-05-02T07:58:49.000Z","pushType":"push","commitsCount":10,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Correct top for EC/DSA nonces if BN_DEBUG is on\n\nOtherwise following operations would bail out in bn_check_top().\n\nReviewed-by: Paul Dale \nReviewed-by: Neil Horman \n(Merged from https://github.com/openssl/openssl/pull/24265)","shortMessageHtmlLink":"Correct top for EC/DSA nonces if BN_DEBUG is on"}},{"before":"d6e88b0a713b2066fb1baf2663b676b1a13f5f59","after":"e554c01533ea15289d0e20573f61087da93d4f13","ref":"refs/heads/feature/dtls-1.3","pushedAt":"2024-05-02T07:58:49.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix sanity tests for ssl_version_cmp for dtls 1.3 branch\n\nReviewed-by: Matt Caswell \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24293)","shortMessageHtmlLink":"Fix sanity tests for ssl_version_cmp for dtls 1.3 branch"}},{"before":"bbae0c9f05f345d12b50422b3136c3de404ed7f1","after":"91d5fd54ee3ad87b5d3a57668e8dc9495d72bab6","ref":"refs/heads/openssl-3.3","pushedAt":"2024-05-01T07:58:16.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix intermittent sslapitest early data related failures\n\nEarly data is time sensitive. We have an approx 8 second allowance between\nwriting the early data and reading it. If we exceed that time tests will\nfail. This can sometimes (rarely) occur in normal CI operation. We can try\nand detect this and just ignore the result of such test failures if the test\nhas taken too long. We assume anything over 7 seconds is too long.\n\nThis is a partial fix for #22605\n\nReviewed-by: Tomas Mraz \nReviewed-by: Neil Horman \n(Merged from https://github.com/openssl/openssl/pull/23966)\n\n(cherry picked from commit 1848c561ec39a9ea91ff1bf740a554be274f98b0)","shortMessageHtmlLink":"Fix intermittent sslapitest early data related failures"}},{"before":"af75373eeab6040aba243dd7629fb6f8244f2f5d","after":"1848c561ec39a9ea91ff1bf740a554be274f98b0","ref":"refs/heads/master","pushedAt":"2024-05-01T07:58:12.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix intermittent sslapitest early data related failures\n\nEarly data is time sensitive. We have an approx 8 second allowance between\nwriting the early data and reading it. If we exceed that time tests will\nfail. This can sometimes (rarely) occur in normal CI operation. We can try\nand detect this and just ignore the result of such test failures if the test\nhas taken too long. We assume anything over 7 seconds is too long.\n\nThis is a partial fix for #22605\n\nReviewed-by: Tomas Mraz \nReviewed-by: Neil Horman \n(Merged from https://github.com/openssl/openssl/pull/23966)","shortMessageHtmlLink":"Fix intermittent sslapitest early data related failures"}},{"before":"c04901be78768eb698d575d0b046940a5cb2aa5b","after":"af75373eeab6040aba243dd7629fb6f8244f2f5d","ref":"refs/heads/master","pushedAt":"2024-04-30T15:24:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix race for X509 store found by thread sanitizer\n\nThe following issue was found in automatic tests with thread sanitizer\nbuilds in ClickHouse (which uses OpenSSL 3.2.1) [0].\n\nThe first stack [1] does proper locking (function 'x509_store_add',\nx509_lu.c) but in the second stack [2], function 'get_cert_by_subject_ex'\n(by_dir.b) forgets to lock when calling 'sk_X509_OBJECT_is_sorted'.\n\n[0] https://github.com/ClickHouse/ClickHouse/issues/63049\n\n[1] WARNING: ThreadSanitizer: data race (pid=1870)\n Write of size 4 at 0x7b08003d6810 by thread T552 (mutexes: write M0, write M1, write M2, write M3):\n #0 OPENSSL_sk_insert build_docker/./contrib/openssl/crypto/stack/stack.c:280:16 (clickhouse+0x203ad7e4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #1 OPENSSL_sk_push build_docker/./contrib/openssl/crypto/stack/stack.c:401:12 (clickhouse+0x203ad7e4)\n #2 x509_store_add build_docker/./contrib/openssl/crypto/x509/x509_lu.c:419:17 (clickhouse+0x203d4a52) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #3 X509_STORE_add_cert build_docker/./contrib/openssl/crypto/x509/x509_lu.c:432:10 (clickhouse+0x203d48a2) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #4 X509_load_cert_file_ex build_docker/./contrib/openssl/crypto/x509/by_file.c:127:18 (clickhouse+0x203b74e6) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #5 get_cert_by_subject_ex build_docker/./contrib/openssl/crypto/x509/by_dir.c:333:22 (clickhouse+0x203b684c) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #6 X509_LOOKUP_by_subject_ex build_docker/./contrib/openssl/crypto/x509/x509_lu.c:105:16 (clickhouse+0x203d46ec) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #7 ossl_x509_store_ctx_get_by_subject build_docker/./contrib/openssl/crypto/x509/x509_lu.c:360:17 (clickhouse+0x203d46ec)\n #8 X509_STORE_CTX_get1_issuer build_docker/./contrib/openssl/crypto/x509/x509_lu.c:782:10 (clickhouse+0x203d56cb) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #9 get1_trusted_issuer build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3194:10 (clickhouse+0x203db4a9) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #10 build_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3324:40 (clickhouse+0x203db4a9)\n #11 verify_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:240:15 (clickhouse+0x203dbe27) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #12 x509_verify_x509 build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:358 (clickhouse+0x203d7fd8) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #13 X509_verify_cert build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:293:56 (clickhouse+0x203d8215) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #14 ssl_verify_internal build_docker/./contrib/openssl/ssl/ssl_cert.c:496:13 (clickhouse+0x2019a2a4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #15 ssl_verify_cert_chain build_docker/./contrib/openssl/ssl/ssl_cert.c:543:12 (clickhouse+0x2019a402) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #16 tls_post_process_server_certificate build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:2072:9 (clickhouse+0x20227658) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #17 ossl_statem_client_post_process_message build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:1159:16 (clickhouse+0x202272ee) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #18 read_state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:712:35 (clickhouse+0x2021e96d) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #19 state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:478:21 (clickhouse+0x2021e96d)\n #20 ossl_statem_connect build_docker/./contrib/openssl/ssl/statem/statem.c:297:12 (clickhouse+0x2021ddce) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #21 SSL_do_handshake build_docker/./contrib/openssl/ssl/ssl_lib.c:4746:19 (clickhouse+0x201a5781) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #22 SSL_connect build_docker/./contrib/openssl/ssl/ssl_lib.c:2208:12 (clickhouse+0x201a5893) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #23 Poco::Net::SecureSocketImpl::connectSSL(bool) build_docker/./base/poco/NetSSL_OpenSSL/src/SecureSocketImpl.cpp:206:11 (clickhouse+0x1d179567) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n\n[2] Previous read of size 4 at 0x7b08003d6810 by thread T553 (mutexes: write M4, write M5, write M6):\n #0 OPENSSL_sk_is_sorted build_docker/./contrib/openssl/crypto/stack/stack.c:490:33 (clickhouse+0x203adcff) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #1 get_cert_by_subject_ex build_docker/./contrib/openssl/crypto/x509/by_dir.c:423:10 (clickhouse+0x203b6d8f) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #2 X509_LOOKUP_by_subject_ex build_docker/./contrib/openssl/crypto/x509/x509_lu.c:105:16 (clickhouse+0x203d46ec) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #3 ossl_x509_store_ctx_get_by_subject build_docker/./contrib/openssl/crypto/x509/x509_lu.c:360:17 (clickhouse+0x203d46ec)\n #4 X509_STORE_CTX_get1_issuer build_docker/./contrib/openssl/crypto/x509/x509_lu.c:782:10 (clickhouse+0x203d56cb) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #5 get1_trusted_issuer build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3194:10 (clickhouse+0x203db4a9) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #6 build_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3324:40 (clickhouse+0x203db4a9)\n #7 verify_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:240:15 (clickhouse+0x203dbe27) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #8 x509_verify_x509 build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:358 (clickhouse+0x203d7fd8) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #9 X509_verify_cert build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:293:56 (clickhouse+0x203d8215) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #10 ssl_verify_internal build_docker/./contrib/openssl/ssl/ssl_cert.c:496:13 (clickhouse+0x2019a2a4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #11 ssl_verify_cert_chain build_docker/./contrib/openssl/ssl/ssl_cert.c:543:12 (clickhouse+0x2019a402) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #12 tls_post_process_server_certificate build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:2072:9 (clickhouse+0x20227658) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #13 ossl_statem_client_post_process_message build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:1159:16 (clickhouse+0x202272ee) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #14 read_state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:712:35 (clickhouse+0x2021e96d) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #15 state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:478:21 (clickhouse+0x2021e96d)\n #16 ossl_statem_connect build_docker/./contrib/openssl/ssl/statem/statem.c:297:12 (clickhouse+0x2021ddce) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #17 SSL_do_handshake build_docker/./contrib/openssl/ssl/ssl_lib.c:4746:19 (clickhouse+0x201a5781) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #18 SSL_connect build_docker/./contrib/openssl/ssl/ssl_lib.c:2208:12 (clickhouse+0x201a5893) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #19 Poco::Net::SecureSocketImpl::connectSSL(bool) build_docker/./base/poco/NetSSL_OpenSSL/src/SecureSocketImpl.cpp:206:11 (clickhouse+0x1d179567) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n\nCLA: trivial\n\nReviewed-by: Todd Short \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24295)","shortMessageHtmlLink":"Fix race for X509 store found by thread sanitizer"}},{"before":"d65c1de5e2cc8d59bb6ac1ebc41dbbe77bda0493","after":"bbae0c9f05f345d12b50422b3136c3de404ed7f1","ref":"refs/heads/openssl-3.3","pushedAt":"2024-04-30T15:24:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix race for X509 store found by thread sanitizer\n\nThe following issue was found in automatic tests with thread sanitizer\nbuilds in ClickHouse (which uses OpenSSL 3.2.1) [0].\n\nThe first stack [1] does proper locking (function 'x509_store_add',\nx509_lu.c) but in the second stack [2], function 'get_cert_by_subject_ex'\n(by_dir.b) forgets to lock when calling 'sk_X509_OBJECT_is_sorted'.\n\n[0] https://github.com/ClickHouse/ClickHouse/issues/63049\n\n[1] WARNING: ThreadSanitizer: data race (pid=1870)\n Write of size 4 at 0x7b08003d6810 by thread T552 (mutexes: write M0, write M1, write M2, write M3):\n #0 OPENSSL_sk_insert build_docker/./contrib/openssl/crypto/stack/stack.c:280:16 (clickhouse+0x203ad7e4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #1 OPENSSL_sk_push build_docker/./contrib/openssl/crypto/stack/stack.c:401:12 (clickhouse+0x203ad7e4)\n #2 x509_store_add build_docker/./contrib/openssl/crypto/x509/x509_lu.c:419:17 (clickhouse+0x203d4a52) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #3 X509_STORE_add_cert build_docker/./contrib/openssl/crypto/x509/x509_lu.c:432:10 (clickhouse+0x203d48a2) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #4 X509_load_cert_file_ex build_docker/./contrib/openssl/crypto/x509/by_file.c:127:18 (clickhouse+0x203b74e6) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #5 get_cert_by_subject_ex build_docker/./contrib/openssl/crypto/x509/by_dir.c:333:22 (clickhouse+0x203b684c) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #6 X509_LOOKUP_by_subject_ex build_docker/./contrib/openssl/crypto/x509/x509_lu.c:105:16 (clickhouse+0x203d46ec) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #7 ossl_x509_store_ctx_get_by_subject build_docker/./contrib/openssl/crypto/x509/x509_lu.c:360:17 (clickhouse+0x203d46ec)\n #8 X509_STORE_CTX_get1_issuer build_docker/./contrib/openssl/crypto/x509/x509_lu.c:782:10 (clickhouse+0x203d56cb) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #9 get1_trusted_issuer build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3194:10 (clickhouse+0x203db4a9) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #10 build_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3324:40 (clickhouse+0x203db4a9)\n #11 verify_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:240:15 (clickhouse+0x203dbe27) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #12 x509_verify_x509 build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:358 (clickhouse+0x203d7fd8) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #13 X509_verify_cert build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:293:56 (clickhouse+0x203d8215) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #14 ssl_verify_internal build_docker/./contrib/openssl/ssl/ssl_cert.c:496:13 (clickhouse+0x2019a2a4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #15 ssl_verify_cert_chain build_docker/./contrib/openssl/ssl/ssl_cert.c:543:12 (clickhouse+0x2019a402) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #16 tls_post_process_server_certificate build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:2072:9 (clickhouse+0x20227658) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #17 ossl_statem_client_post_process_message build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:1159:16 (clickhouse+0x202272ee) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #18 read_state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:712:35 (clickhouse+0x2021e96d) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #19 state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:478:21 (clickhouse+0x2021e96d)\n #20 ossl_statem_connect build_docker/./contrib/openssl/ssl/statem/statem.c:297:12 (clickhouse+0x2021ddce) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #21 SSL_do_handshake build_docker/./contrib/openssl/ssl/ssl_lib.c:4746:19 (clickhouse+0x201a5781) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #22 SSL_connect build_docker/./contrib/openssl/ssl/ssl_lib.c:2208:12 (clickhouse+0x201a5893) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #23 Poco::Net::SecureSocketImpl::connectSSL(bool) build_docker/./base/poco/NetSSL_OpenSSL/src/SecureSocketImpl.cpp:206:11 (clickhouse+0x1d179567) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n\n[2] Previous read of size 4 at 0x7b08003d6810 by thread T553 (mutexes: write M4, write M5, write M6):\n #0 OPENSSL_sk_is_sorted build_docker/./contrib/openssl/crypto/stack/stack.c:490:33 (clickhouse+0x203adcff) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #1 get_cert_by_subject_ex build_docker/./contrib/openssl/crypto/x509/by_dir.c:423:10 (clickhouse+0x203b6d8f) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #2 X509_LOOKUP_by_subject_ex build_docker/./contrib/openssl/crypto/x509/x509_lu.c:105:16 (clickhouse+0x203d46ec) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #3 ossl_x509_store_ctx_get_by_subject build_docker/./contrib/openssl/crypto/x509/x509_lu.c:360:17 (clickhouse+0x203d46ec)\n #4 X509_STORE_CTX_get1_issuer build_docker/./contrib/openssl/crypto/x509/x509_lu.c:782:10 (clickhouse+0x203d56cb) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #5 get1_trusted_issuer build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3194:10 (clickhouse+0x203db4a9) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #6 build_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3324:40 (clickhouse+0x203db4a9)\n #7 verify_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:240:15 (clickhouse+0x203dbe27) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #8 x509_verify_x509 build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:358 (clickhouse+0x203d7fd8) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #9 X509_verify_cert build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:293:56 (clickhouse+0x203d8215) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #10 ssl_verify_internal build_docker/./contrib/openssl/ssl/ssl_cert.c:496:13 (clickhouse+0x2019a2a4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #11 ssl_verify_cert_chain build_docker/./contrib/openssl/ssl/ssl_cert.c:543:12 (clickhouse+0x2019a402) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #12 tls_post_process_server_certificate build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:2072:9 (clickhouse+0x20227658) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #13 ossl_statem_client_post_process_message build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:1159:16 (clickhouse+0x202272ee) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #14 read_state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:712:35 (clickhouse+0x2021e96d) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #15 state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:478:21 (clickhouse+0x2021e96d)\n #16 ossl_statem_connect build_docker/./contrib/openssl/ssl/statem/statem.c:297:12 (clickhouse+0x2021ddce) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #17 SSL_do_handshake build_docker/./contrib/openssl/ssl/ssl_lib.c:4746:19 (clickhouse+0x201a5781) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #18 SSL_connect build_docker/./contrib/openssl/ssl/ssl_lib.c:2208:12 (clickhouse+0x201a5893) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #19 Poco::Net::SecureSocketImpl::connectSSL(bool) build_docker/./base/poco/NetSSL_OpenSSL/src/SecureSocketImpl.cpp:206:11 (clickhouse+0x1d179567) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n\nCLA: trivial\n\nReviewed-by: Todd Short \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24295)\n\n(cherry picked from commit af75373eeab6040aba243dd7629fb6f8244f2f5d)","shortMessageHtmlLink":"Fix race for X509 store found by thread sanitizer"}},{"before":"d68a21fc9548afd8af100df2129d153b43956262","after":"f301d75eb850253b930a18d2af183783303a2ba8","ref":"refs/heads/openssl-3.2","pushedAt":"2024-04-30T15:24:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix race for X509 store found by thread sanitizer\n\nThe following issue was found in automatic tests with thread sanitizer\nbuilds in ClickHouse (which uses OpenSSL 3.2.1) [0].\n\nThe first stack [1] does proper locking (function 'x509_store_add',\nx509_lu.c) but in the second stack [2], function 'get_cert_by_subject_ex'\n(by_dir.b) forgets to lock when calling 'sk_X509_OBJECT_is_sorted'.\n\n[0] https://github.com/ClickHouse/ClickHouse/issues/63049\n\n[1] WARNING: ThreadSanitizer: data race (pid=1870)\n Write of size 4 at 0x7b08003d6810 by thread T552 (mutexes: write M0, write M1, write M2, write M3):\n #0 OPENSSL_sk_insert build_docker/./contrib/openssl/crypto/stack/stack.c:280:16 (clickhouse+0x203ad7e4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #1 OPENSSL_sk_push build_docker/./contrib/openssl/crypto/stack/stack.c:401:12 (clickhouse+0x203ad7e4)\n #2 x509_store_add build_docker/./contrib/openssl/crypto/x509/x509_lu.c:419:17 (clickhouse+0x203d4a52) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #3 X509_STORE_add_cert build_docker/./contrib/openssl/crypto/x509/x509_lu.c:432:10 (clickhouse+0x203d48a2) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #4 X509_load_cert_file_ex build_docker/./contrib/openssl/crypto/x509/by_file.c:127:18 (clickhouse+0x203b74e6) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #5 get_cert_by_subject_ex build_docker/./contrib/openssl/crypto/x509/by_dir.c:333:22 (clickhouse+0x203b684c) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #6 X509_LOOKUP_by_subject_ex build_docker/./contrib/openssl/crypto/x509/x509_lu.c:105:16 (clickhouse+0x203d46ec) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #7 ossl_x509_store_ctx_get_by_subject build_docker/./contrib/openssl/crypto/x509/x509_lu.c:360:17 (clickhouse+0x203d46ec)\n #8 X509_STORE_CTX_get1_issuer build_docker/./contrib/openssl/crypto/x509/x509_lu.c:782:10 (clickhouse+0x203d56cb) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #9 get1_trusted_issuer build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3194:10 (clickhouse+0x203db4a9) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #10 build_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3324:40 (clickhouse+0x203db4a9)\n #11 verify_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:240:15 (clickhouse+0x203dbe27) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #12 x509_verify_x509 build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:358 (clickhouse+0x203d7fd8) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #13 X509_verify_cert build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:293:56 (clickhouse+0x203d8215) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #14 ssl_verify_internal build_docker/./contrib/openssl/ssl/ssl_cert.c:496:13 (clickhouse+0x2019a2a4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #15 ssl_verify_cert_chain build_docker/./contrib/openssl/ssl/ssl_cert.c:543:12 (clickhouse+0x2019a402) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #16 tls_post_process_server_certificate build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:2072:9 (clickhouse+0x20227658) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #17 ossl_statem_client_post_process_message build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:1159:16 (clickhouse+0x202272ee) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #18 read_state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:712:35 (clickhouse+0x2021e96d) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #19 state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:478:21 (clickhouse+0x2021e96d)\n #20 ossl_statem_connect build_docker/./contrib/openssl/ssl/statem/statem.c:297:12 (clickhouse+0x2021ddce) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #21 SSL_do_handshake build_docker/./contrib/openssl/ssl/ssl_lib.c:4746:19 (clickhouse+0x201a5781) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #22 SSL_connect build_docker/./contrib/openssl/ssl/ssl_lib.c:2208:12 (clickhouse+0x201a5893) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #23 Poco::Net::SecureSocketImpl::connectSSL(bool) build_docker/./base/poco/NetSSL_OpenSSL/src/SecureSocketImpl.cpp:206:11 (clickhouse+0x1d179567) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n\n[2] Previous read of size 4 at 0x7b08003d6810 by thread T553 (mutexes: write M4, write M5, write M6):\n #0 OPENSSL_sk_is_sorted build_docker/./contrib/openssl/crypto/stack/stack.c:490:33 (clickhouse+0x203adcff) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #1 get_cert_by_subject_ex build_docker/./contrib/openssl/crypto/x509/by_dir.c:423:10 (clickhouse+0x203b6d8f) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #2 X509_LOOKUP_by_subject_ex build_docker/./contrib/openssl/crypto/x509/x509_lu.c:105:16 (clickhouse+0x203d46ec) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #3 ossl_x509_store_ctx_get_by_subject build_docker/./contrib/openssl/crypto/x509/x509_lu.c:360:17 (clickhouse+0x203d46ec)\n #4 X509_STORE_CTX_get1_issuer build_docker/./contrib/openssl/crypto/x509/x509_lu.c:782:10 (clickhouse+0x203d56cb) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #5 get1_trusted_issuer build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3194:10 (clickhouse+0x203db4a9) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #6 build_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:3324:40 (clickhouse+0x203db4a9)\n #7 verify_chain build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:240:15 (clickhouse+0x203dbe27) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #8 x509_verify_x509 build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:358 (clickhouse+0x203d7fd8) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #9 X509_verify_cert build_docker/./contrib/openssl/crypto/x509/x509_vfy.c:293:56 (clickhouse+0x203d8215) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #10 ssl_verify_internal build_docker/./contrib/openssl/ssl/ssl_cert.c:496:13 (clickhouse+0x2019a2a4) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #11 ssl_verify_cert_chain build_docker/./contrib/openssl/ssl/ssl_cert.c:543:12 (clickhouse+0x2019a402) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #12 tls_post_process_server_certificate build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:2072:9 (clickhouse+0x20227658) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #13 ossl_statem_client_post_process_message build_docker/./contrib/openssl/ssl/statem/statem_clnt.c:1159:16 (clickhouse+0x202272ee) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #14 read_state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:712:35 (clickhouse+0x2021e96d) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #15 state_machine build_docker/./contrib/openssl/ssl/statem/statem.c:478:21 (clickhouse+0x2021e96d)\n #16 ossl_statem_connect build_docker/./contrib/openssl/ssl/statem/statem.c:297:12 (clickhouse+0x2021ddce) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #17 SSL_do_handshake build_docker/./contrib/openssl/ssl/ssl_lib.c:4746:19 (clickhouse+0x201a5781) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #18 SSL_connect build_docker/./contrib/openssl/ssl/ssl_lib.c:2208:12 (clickhouse+0x201a5893) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n #19 Poco::Net::SecureSocketImpl::connectSSL(bool) build_docker/./base/poco/NetSSL_OpenSSL/src/SecureSocketImpl.cpp:206:11 (clickhouse+0x1d179567) (BuildId: 3ceefd39df36d762f06bf9aab19cfc3467e4558b)\n\nCLA: trivial\n\nReviewed-by: Todd Short \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24295)\n\n(cherry picked from commit af75373eeab6040aba243dd7629fb6f8244f2f5d)","shortMessageHtmlLink":"Fix race for X509 store found by thread sanitizer"}},{"before":"789f7c65406cb2f69710e6337ecde662a68e91fc","after":"d6e88b0a713b2066fb1baf2663b676b1a13f5f59","ref":"refs/heads/feature/dtls-1.3","pushedAt":"2024-04-30T14:39:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix ssl_lib functions for dtls 1.3\n\nReviewed-by: Matt Caswell \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/22378)","shortMessageHtmlLink":"Fix ssl_lib functions for dtls 1.3"}},{"before":"2d29a8a7e8ef42050d2b08ca8cec9e4d9f0a0bb7","after":"c04901be78768eb698d575d0b046940a5cb2aa5b","ref":"refs/heads/master","pushedAt":"2024-04-30T10:56:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"Fix alignment errors in hashtable fuzzer\n\nwe extract several values (uint16_t and uint64_t from the fuzzer buff\npassed in, but they weren't aligned on 2 and 8 byte boundaries. Adjust\nthe fuzzer to memcpy data to the target variables to avoid unalignment\nissues\n\nFixes #24272\n\nReviewed-by: Paul Dale \nReviewed-by: Tom Cosgrove \n(Merged from https://github.com/openssl/openssl/pull/24276)","shortMessageHtmlLink":"Fix alignment errors in hashtable fuzzer"}},{"before":"d76fc993a9a83ce251040f3fe30f5f38a980b115","after":"8d0d05e9cb132d6baec7c1e9aa9c0bf4ebfeebee","ref":"refs/heads/openssl-3.0","pushedAt":"2024-04-30T07:23:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS\n\nThis fixes an incorrect error message.\n\nFixes #24224\nCLA: trivial\n\nReviewed-by: Paul Dale \nReviewed-by: Richard Levitte \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24290)\n\n(cherry picked from commit 2d29a8a7e8ef42050d2b08ca8cec9e4d9f0a0bb7)","shortMessageHtmlLink":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS"}},{"before":"361c6ee5f55f73f530eadd6a2a20e98bf2964f3e","after":"d68a21fc9548afd8af100df2129d153b43956262","ref":"refs/heads/openssl-3.2","pushedAt":"2024-04-30T07:23:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS\n\nThis fixes an incorrect error message.\n\nFixes #24224\nCLA: trivial\n\nReviewed-by: Paul Dale \nReviewed-by: Richard Levitte \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24290)\n\n(cherry picked from commit 2d29a8a7e8ef42050d2b08ca8cec9e4d9f0a0bb7)","shortMessageHtmlLink":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS"}},{"before":"364b67017440d22c526cb84c8f1701e403e65e69","after":"e4a87616c07aa5e9bc32fa815e5ead4c17ce8fd9","ref":"refs/heads/openssl-3.1","pushedAt":"2024-04-30T07:23:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS\n\nThis fixes an incorrect error message.\n\nFixes #24224\nCLA: trivial\n\nReviewed-by: Paul Dale \nReviewed-by: Richard Levitte \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24290)\n\n(cherry picked from commit 2d29a8a7e8ef42050d2b08ca8cec9e4d9f0a0bb7)","shortMessageHtmlLink":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS"}},{"before":"6a4a714045415be6720f4165c4d70a0ff229a26a","after":"2d29a8a7e8ef42050d2b08ca8cec9e4d9f0a0bb7","ref":"refs/heads/master","pushedAt":"2024-04-30T07:23:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS\n\nThis fixes an incorrect error message.\n\nFixes #24224\nCLA: trivial\n\nReviewed-by: Paul Dale \nReviewed-by: Richard Levitte \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24290)","shortMessageHtmlLink":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS"}},{"before":"6de46a0896df368d99a86223f6e9b35e0c95464b","after":"d65c1de5e2cc8d59bb6ac1ebc41dbbe77bda0493","ref":"refs/heads/openssl-3.3","pushedAt":"2024-04-30T07:23:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS\n\nThis fixes an incorrect error message.\n\nFixes #24224\nCLA: trivial\n\nReviewed-by: Paul Dale \nReviewed-by: Richard Levitte \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24290)\n\n(cherry picked from commit 2d29a8a7e8ef42050d2b08ca8cec9e4d9f0a0bb7)","shortMessageHtmlLink":"ess_lib.c: Changed ERR_LIB_CMS to ERR_LIB_ESS"}},{"before":"55f390c79f8c4c2225149588cd9f9e63bfb28909","after":"361c6ee5f55f73f530eadd6a2a20e98bf2964f3e","ref":"refs/heads/openssl-3.2","pushedAt":"2024-04-29T09:09:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"doc: clarify SSL_CIPHER_description allocation\n\nPreviously the documentation for `SSL_CIPHER_description` said:\n> If buf is provided, it must be at least 128 bytes, otherwise a buffer\n> will be allocated using OPENSSL_malloc().\n\nIn reality, `OPENSSL_malloc` is only invoked if the provided `buf`\nargument is `NULL`. If the `buf` arg is not `NULL`, but smaller than\n128 bytes, the function returns `NULL` without attempting to allocate\na new buffer for the description.\n\nThis commit adjusts the documentation to better describe the implemented\nbehaviour.\n\nCLA: trivial\n\nReviewed-by: Matt Caswell \nReviewed-by: Tom Cosgrove \nReviewed-by: Paul Dale \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/23921)\n\n(cherry picked from commit 6a4a714045415be6720f4165c4d70a0ff229a26a)","shortMessageHtmlLink":"doc: clarify SSL_CIPHER_description allocation"}},{"before":"a380ec952f138f644d227637eeba90fd1e17f72f","after":"364b67017440d22c526cb84c8f1701e403e65e69","ref":"refs/heads/openssl-3.1","pushedAt":"2024-04-29T09:09:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"doc: clarify SSL_CIPHER_description allocation\n\nPreviously the documentation for `SSL_CIPHER_description` said:\n> If buf is provided, it must be at least 128 bytes, otherwise a buffer\n> will be allocated using OPENSSL_malloc().\n\nIn reality, `OPENSSL_malloc` is only invoked if the provided `buf`\nargument is `NULL`. If the `buf` arg is not `NULL`, but smaller than\n128 bytes, the function returns `NULL` without attempting to allocate\na new buffer for the description.\n\nThis commit adjusts the documentation to better describe the implemented\nbehaviour.\n\nCLA: trivial\n\nReviewed-by: Matt Caswell \nReviewed-by: Tom Cosgrove \nReviewed-by: Paul Dale \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/23921)\n\n(cherry picked from commit 6a4a714045415be6720f4165c4d70a0ff229a26a)","shortMessageHtmlLink":"doc: clarify SSL_CIPHER_description allocation"}},{"before":"d0b039a5ef97cc360e2008035fe66dc353724ff6","after":"6de46a0896df368d99a86223f6e9b35e0c95464b","ref":"refs/heads/openssl-3.3","pushedAt":"2024-04-29T09:09:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"doc: clarify SSL_CIPHER_description allocation\n\nPreviously the documentation for `SSL_CIPHER_description` said:\n> If buf is provided, it must be at least 128 bytes, otherwise a buffer\n> will be allocated using OPENSSL_malloc().\n\nIn reality, `OPENSSL_malloc` is only invoked if the provided `buf`\nargument is `NULL`. If the `buf` arg is not `NULL`, but smaller than\n128 bytes, the function returns `NULL` without attempting to allocate\na new buffer for the description.\n\nThis commit adjusts the documentation to better describe the implemented\nbehaviour.\n\nCLA: trivial\n\nReviewed-by: Matt Caswell \nReviewed-by: Tom Cosgrove \nReviewed-by: Paul Dale \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/23921)\n\n(cherry picked from commit 6a4a714045415be6720f4165c4d70a0ff229a26a)","shortMessageHtmlLink":"doc: clarify SSL_CIPHER_description allocation"}},{"before":"491ff1b13bdabad24384cc0c19c6dd7532693613","after":"d76fc993a9a83ce251040f3fe30f5f38a980b115","ref":"refs/heads/openssl-3.0","pushedAt":"2024-04-29T09:09:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"doc: clarify SSL_CIPHER_description allocation\n\nPreviously the documentation for `SSL_CIPHER_description` said:\n> If buf is provided, it must be at least 128 bytes, otherwise a buffer\n> will be allocated using OPENSSL_malloc().\n\nIn reality, `OPENSSL_malloc` is only invoked if the provided `buf`\nargument is `NULL`. If the `buf` arg is not `NULL`, but smaller than\n128 bytes, the function returns `NULL` without attempting to allocate\na new buffer for the description.\n\nThis commit adjusts the documentation to better describe the implemented\nbehaviour.\n\nCLA: trivial\n\nReviewed-by: Matt Caswell \nReviewed-by: Tom Cosgrove \nReviewed-by: Paul Dale \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/23921)\n\n(cherry picked from commit 6a4a714045415be6720f4165c4d70a0ff229a26a)","shortMessageHtmlLink":"doc: clarify SSL_CIPHER_description allocation"}},{"before":"58ffcbbdc3302a35cea317aeee6b76987907ee60","after":"6a4a714045415be6720f4165c4d70a0ff229a26a","ref":"refs/heads/master","pushedAt":"2024-04-29T09:06:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"doc: clarify SSL_CIPHER_description allocation\n\nPreviously the documentation for `SSL_CIPHER_description` said:\n> If buf is provided, it must be at least 128 bytes, otherwise a buffer\n> will be allocated using OPENSSL_malloc().\n\nIn reality, `OPENSSL_malloc` is only invoked if the provided `buf`\nargument is `NULL`. If the `buf` arg is not `NULL`, but smaller than\n128 bytes, the function returns `NULL` without attempting to allocate\na new buffer for the description.\n\nThis commit adjusts the documentation to better describe the implemented\nbehaviour.\n\nCLA: trivial\n\nReviewed-by: Matt Caswell \nReviewed-by: Tom Cosgrove \nReviewed-by: Paul Dale \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/23921)","shortMessageHtmlLink":"doc: clarify SSL_CIPHER_description allocation"}},{"before":"8a5a6a15e2338ccde91d5970f64f3d66ae5d18bd","after":"d0b039a5ef97cc360e2008035fe66dc353724ff6","ref":"refs/heads/openssl-3.3","pushedAt":"2024-04-29T08:37:08.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"archive artifacts before upload\n\nSome CI jobs produce a significant amount artifacts and it takes a lot\nof time to upload them into GitHub artifacts storage. It will be much\nfaster to upload only one archive with artifacts.\n\nReviewed-by: Neil Horman \nReviewed-by: Tom Cosgrove \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24264)\n\n(cherry picked from commit 58ffcbbdc3302a35cea317aeee6b76987907ee60)","shortMessageHtmlLink":"archive artifacts before upload"}},{"before":"7b1829fa37922a37ef9259fc1bc4038829e4fd73","after":"58ffcbbdc3302a35cea317aeee6b76987907ee60","ref":"refs/heads/master","pushedAt":"2024-04-29T08:36:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"archive artifacts before upload\n\nSome CI jobs produce a significant amount artifacts and it takes a lot\nof time to upload them into GitHub artifacts storage. It will be much\nfaster to upload only one archive with artifacts.\n\nReviewed-by: Neil Horman \nReviewed-by: Tom Cosgrove \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24264)","shortMessageHtmlLink":"archive artifacts before upload"}},{"before":"c1584a658c23d447f33ef3ebc60f0182aa1cbbd4","after":"55f390c79f8c4c2225149588cd9f9e63bfb28909","ref":"refs/heads/openssl-3.2","pushedAt":"2024-04-29T08:31:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"updated to oqs-provider 0.6.0\n\nReviewed-by: Dmitry Belyavskiy \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24261)\n\n(cherry picked from commit 7b1829fa37922a37ef9259fc1bc4038829e4fd73)","shortMessageHtmlLink":"updated to oqs-provider 0.6.0"}},{"before":"f4fcc21fdccfde90bda6f8a94d7f4e07f947e38f","after":"7b1829fa37922a37ef9259fc1bc4038829e4fd73","ref":"refs/heads/master","pushedAt":"2024-04-29T08:31:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"updated to oqs-provider 0.6.0\n\nReviewed-by: Dmitry Belyavskiy \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24261)","shortMessageHtmlLink":"updated to oqs-provider 0.6.0"}},{"before":"6bd3d18330c7bd2fe6d97aa538605a95c96b57ad","after":"8a5a6a15e2338ccde91d5970f64f3d66ae5d18bd","ref":"refs/heads/openssl-3.3","pushedAt":"2024-04-29T08:31:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"updated to oqs-provider 0.6.0\n\nReviewed-by: Dmitry Belyavskiy \nReviewed-by: Tomas Mraz \n(Merged from https://github.com/openssl/openssl/pull/24261)\n\n(cherry picked from commit 7b1829fa37922a37ef9259fc1bc4038829e4fd73)","shortMessageHtmlLink":"updated to oqs-provider 0.6.0"}},{"before":"b4604d5252633de9a50191795edf76d2a8e836dc","after":"6bd3d18330c7bd2fe6d97aa538605a95c96b57ad","ref":"refs/heads/openssl-3.3","pushedAt":"2024-04-29T08:28:11.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"openssl-machine","name":null,"path":"/openssl-machine","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25405787?s=80&v=4"},"commit":{"message":"82-test_ocsp_cert_chain.t: kill -HUP the server after client quits\n\nThis ensures even if the connection for some reason\nfails, the server will terminate and the test won't get\nstuck.\n\nReviewed-by: Matt Caswell \nReviewed-by: Tom Cosgrove \n(Merged from https://github.com/openssl/openssl/pull/23857)\n\n(cherry picked from commit f4fcc21fdccfde90bda6f8a94d7f4e07f947e38f)","shortMessageHtmlLink":"82-test_ocsp_cert_chain.t: kill -HUP the server after client quits"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEP_gDuwA","startCursor":null,"endCursor":null}},"title":"Activity ยท openssl/openssl"}