openssl/ssl
Tomas Mraz d5530efada Add back check for the DH public key size
This is needed for TLS-1.3.

Also add check for uncompressed point format for ECDHE as
the other formats are not allowed by RFC 8446.

Fixes #17667

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17678)
2022-02-17 13:21:01 +11:00
..
record Cleanup record length checks for KTLS 2022-02-11 11:52:41 +01:00
statem Add back check for the DH public key size 2022-02-17 13:21:01 +11:00
bio_ssl.c Fix ssl_free() and thus BIO_free() to respect BIO_NOCLOSE 2021-10-04 10:55:39 +02:00
build.info Do not duplicate symbols between libcrypto and libssl in static builds 2021-06-14 09:21:05 +10:00
d1_lib.c Move e_os.h to include/internal 2022-02-05 05:31:09 +01:00
d1_msg.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
d1_srtp.c
ktls.c Add support for Chacha20-Poly1305 to kernel TLS on FreeBSD. 2022-02-04 11:06:13 +01:00
methods.c
pqueue.c
s3_cbc.c fips module header inclusion fine-tunning 2021-07-06 10:52:27 +10:00
s3_enc.c tls: remove TODOs 2021-06-02 16:30:15 +10:00
s3_lib.c add SSL_get0_iana_groups() & SSL_client_hello_get_extension_order() 2022-02-03 13:45:41 +01:00
s3_msg.c Update copyright year 2021-05-20 14:22:33 +01:00
ssl_asn1.c Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass tests 2021-08-31 12:20:12 +02:00
ssl_cert_table.h
ssl_cert.c add OSSL_STACK_OF_X509_free() for commonly used pattern 2021-12-21 12:11:49 +01:00
ssl_ciph.c Don't include any TLSv1.3 ciphersuites that are disabled 2021-11-29 12:17:30 +10:00
ssl_conf.c apps: Add option -no_ems to s_client/s_server apps 2022-01-28 15:32:58 +01:00
ssl_err_legacy.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_err.c Update alert to common protocol 2022-01-08 10:18:26 +01:00
ssl_init.c Move e_os.h to include/internal 2022-02-05 05:31:09 +01:00
ssl_lib.c Move e_os.h to include/internal 2022-02-05 05:31:09 +01:00
ssl_local.h Add back check for the DH public key size 2022-02-17 13:21:01 +11:00
ssl_mcnf.c
ssl_rsa_legacy.c
ssl_rsa.c ssl: replace ;; with ; as statement separator 2022-01-18 15:10:38 +11:00
ssl_sess.c ssl: better support TSAN operations 2022-01-19 21:51:47 +11:00
ssl_stat.c Update copyright year 2021-09-07 13:35:43 +02:00
ssl_txt.c Update copyright year 2021-06-17 13:24:59 +01:00
ssl_utst.c
sslerr.h err: rename err_load_xxx_strings_int functions 2021-05-26 13:01:47 +10:00
t1_enc.c ssl/t1_enc: Fix kTLS RX offload path 2022-01-17 13:15:56 +11:00
t1_lib.c Add back check for the DH public key size 2022-02-17 13:21:01 +11:00
t1_trce.c Enable brainpool curves for TLS1.3 2021-11-26 06:45:19 +01:00
tls13_enc.c fix some code with obvious wrong coding style 2021-10-28 13:10:46 +10:00
tls_depr.c Replace the AES-128-CBC-HMAC-SHA1 cipher in e_ossltest.c 2021-10-06 15:18:10 +02:00
tls_srp.c ssl: add zero strenght arguments to BN and RAND RNG calls 2021-05-29 17:17:12 +10:00