tree 4178d9eb5e9c055fbfa0ea586bffc0f7e4126383
parent c28b4cd42d32af9fa8c8b710def868d0bb2bf637
author Piotr Sikora <piotrsikora@google.com> 1607324567 -0800
committer Piotr Sikora <piotrsikora@google.com> 1607547811 +0000

Bazel: update BoringSSL to 1607f54 / fbbf878 (master-with-bazel).

1607f54fe acvp: move inner MCT loops into subprocess.
17e530c43 Fix x509_rsa_ctx_to_pss when saltlen is md_size.
8591d539b Document the X509V3_get_d2i family of functions.
d83dcf58c runner: explicitly signal error from handshaker.
aec1b62b0 runner: add -skip
6dcce8003 Add functions for manipulating X.509 TBS structures.
f18638cca Remove ASN1_STRING_length_set prototype.
5709ccbd7 Update Go on the bots.
73b69308a Rework vs_toolchain.py and vs_env.py.
7c4a3f7d3 Add ECDSA verify KAT to FIPS self-tests.
83a3f462c Add AES-GCM AEADs with internal nonce generation.
d5b2b1772 Define a constant for the standard GCM nonce length.
1a751eefc Add test for X25519-containing certificate.
fa9796ece Add SSL_early_data_reason_string.
07827156c Add raw redeem API.
b67732a16 aarch64: Remove some flavour conditionals
c583dbea7 Have fewer opaque booleans in aead_test.cc
777e1ff3b acvp: RSA signature verification tests.
e44d977c5 acvp: RSA signature generation tests.
2e22d1b3c acvp: support RSA key generation tests.
80e3f957e Support 4096-bit keys in FIPS mode.
40f49428d Reland "Check AlgorithmIdentifier parameters for RSA and ECDSA signatures.""
9c12f01de acvp: add 3DES-CBC support
e796cc650 acvp: add 3DES-ECB support
043fba241 Clear some reported gcc -Wshadow warnings.
e9fce74f2 Const-correct X509V3_extensions_print.
1e8e5635b clang-format and convert comments in x509v3.h.
c46b1736a aarch64: Improve conditional compilation
fd83592b4 Silence some linter checks.
9d1bca3dd acvp: update subprocess_test.go
8c32f941a Update clang.
51607f1fe Implement draft-vvv-tls-alps-01.
e580e9ded Simplify 0-RTT tests.
3989c9970 Fix crash when flushing an SSL BIO.
6d904d5b8 Document low-level PEM read/write functions.
5e549fb64 clang-format pem.h and convert comments.
a673d0245 Add PSK variants of HPKE setup functions to BoGo.
6d2c79992 acvp: abstract out MCT iteration functions.
f42d5df92 Add Go implementation of HPKE draft 05 to runner.
974ac218e runner: Implement a more complete ClientHello consistency check.
f2b2ef840 Update TrustTokenV2 to use VOPRFs and assemble RR.
f94e6d7f9 acvp: add AES-CCM support.
56b28d844 acvp: highlight that the TOTP secret goes in the config file.
048f354b2 acvp: handle more private key formats.
6222fe767 runner: Refactor BoGo clientHelloMsg extension marshalling.
51b428153 Include rodata subsections in FIPS-shared build.
991835dfa Switch x509_test.cc to use C++ raw string literals.
723faad51 Fix some malloc error handling.
b117a3a0b acvp: add AES-KWP support.
81658a95c acvp: add AES-KW support.
35ee5ab8c acvp: support saving vectors.
5e086956f Fix handling of quic_early_data_context.
38bcb5368 Add a warning to des.h.
9bf1634b9 Move Trusty workaround to the OPENSSL_LINUX define.
fda92cd64 acvp: add AES-GCM support.
6b6b66bac Disable fork detection on Trusty.
67818bea6 acvp: add AES-CTR support.
63fa33d7e Tell clang-format that STACK_OF and LHASH_OF are types.
809763247 modulewrapper: fix unknown functions.
3ff161cc0 Print SSL_get_error in bssl_shim.
437eabd03 modulewrapper: fix sending empty spans.
bb72a8d64 Allow specifying different initial and resumption expectations.
0ee5808fe Add a few more OPENSSL_NO_* constants.
b0e98e408 Test SSL_get0_alpn_selected on both client and server.
a6386ea18 runner: Rewrite sessionState parsing with byteReader.
c4ec14c71 Switch ssl_parse_extensions to bool and Span.
5850a016b Disable check that X.509 extensions implies v3.
b13e7b5fd Silence some clang warnings on macOS and iOS CQ bots.
e0900ac5e Mirror dsa.h's deprecation notice in dh.h.
cefbf9cea Const-correct X509_get0_extensions.

Change-Id: I1335a5eb0cd4276cff609e6959f566c6d42b7392
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Reviewed-on: https://nginx-review.googlesource.com/c/nginx/+/3741
Reviewed-by: Patryk Lesiewicz <patryk@google.com>