tree 86debfcfafd03b8aeedfcd72af0447e9343b8cab
parent 59204f5912b3d2bce96aeed15f76994b9e1c3cf6
author Piotr Sikora <piotrsikora@google.com> 1615610300 -0800
committer Piotr Sikora <piotrsikora@google.com> 1617862263 +0000

Bazel: update BoringSSL to f6bd54e / 8d60b0d (master-with-bazel).

f6bd54efb Check for OBJ_nid2obj failures in X509_ATTRIBUTE_create.
e7c0c9734 Don't overflow the output length in EVP_CipherUpdate calls.
ca2162d71 Remove X509_issuer_and_serial_hash.
238a25831 Fix Bazel build breakage.
85bda4b24 Specify VS toolchain by command-line argument.
a99308fa9 Update Android Bazel build support in BUILD.toplevel.
c02c19e0d Honor SSL_TLSEXT_ERR_ALERT_FATAL in the ALPN callback.
3b7029a54 acvp: detect header element in JSON.
ce9b002eb Align the ARM capability functions.
f9bd455c8 Skip runtime NEON checks if __ARM_NEON is defined.
fc2330016 acvp: don't include CMAC-AES in regcap dump.
4d3e540cc acvp: fix CMAC verify
a2278d4d2 Include bn/internal.h for non-bcm.c builds.
48cbd69de Add various function calls to test_fips.
bb43a45d6 Add missing include to self_check.c.
4251d0d3f Revert "Disable check that X.509 extensions implies v3."
c5e4538e3 Fix TLS13SessionID-TLS13 test.
ae2bb6417 Use ID instead of Id in Go.
4a196ccf9 acvp: move CMAC verification into the module wrapper.
ab5edbe7f Benchmark BORINGSSL_self_test in FIPS mode.
1c919724d Support MOVLPS and MOVHPS in delocate.
5cf02188f Add FFDH FIPS self-test.
d09962d5c acvp: update to newer FFDH test.
e133345db Add basic BLAKE2b-256 support.
16c42cc79 acvp: check that the payloadLen of cipher tests is correct.
1fa6b7ffd acvp: update test expectations in light of 8dcdcb39a7
b0d71a290 Support cross-compiling AArch64 FIPS to Android.
8dcdcb39a acvp: drop 3DES fields from output when unused.
0f0e2bce6 acvp: don't advertise SHA-1 RSA signature generation.
39093c1bf Fix comments that refer to old draft of HPKE.
c47bfce06 Define TLSEXT_TYPE_quic_transport_parameters to the old code point for now.
2d691ca60 Make BN_clear_free a wrapper around BN_free.
c5e2cf3c0 delocate: support Aarch64
c1e156ae1 Add DH_compute_key_padded.
a9319d9b0 Fix client 0-RTT handling with ALPS.
2f2d27eb5 acvp: add XTS support.
595cdc29d doc: fix SSL_set0_rbio
3d8b8c3df Add support for the new QUIC TLS extension codepoint
f8f35c955 delocate: preprocess perlasm output on Aarch64
c3ee9c804 Replace MockQUICTransport tags with record types.
e606f79c5 Run extension tests at all protocols.
47d1274fd Make QUIC tests work with early data.
7a55c8027 Make QUIC work with -async tests.
71ed9d753 Fix ALPS state machine in QUIC servers.
f4a88296f runner: Allow tokbind without RI/EMS in TLS 1.3.
41676bfd8 Test that ALPS can be deferred to the ALPN callback.
c295935a9 Send ECH acceptance signal from backend server.
5d54832f1 delocate: handle Aarch64 assembly in parser.
afd5dba75 Add ASM optimizations for Windows on Arm
571c3e78b Use gai_strerrorA on Windows.
13da18050 Optimize suffix building in FileTest::ReadNext().
5dd18d017 A handful more compatibility functions.
7dfb4721d Update HPKE to draft-irtf-cfrg-hpke-07.
ab6a8f49f acvp: drop subprocess_test.go
76164b1bc Add some OpenSSL-compatibility aliases
c42baf84d delocate: eliminate expression from vpaes assembly.
e4843750e delocate: support alternative comment indicators
4df05c523 Update third_party/googletest.
4f75b76ef acvp: add tests
9422ac61f Fix chacha20_poly1305_x86_64.pl comments.
bac5544e9 Fix awkward wording in comment.
92c48be84 Update ECH GREASE to draft-ietf-tls-esni-09
78f15a6aa Gerrit ignores <sup>; use Unicode superscript instead.
e02dd70f5 acvp: better document the subprocess protocol.
082cd7860 Add .text.unlikely.* pattern to fips_shared.lds.
4ab14ea27 acvp: fix silly errors.
86854828e acvp: load config later.
e56dfcf9f Allow some non-minimal lengths in BER.
bb0cb95e6 Export tool_sources to GN.
62634262d Use more efficient std::string::find overload.
ca058c064 Revert "Add support for the new QUIC TLS extension codepoint"
df75139be Move DH parameter generation out of the FIPS module.
7ba96a675 Add support for the new QUIC TLS extension codepoint
061a7f559 Use stdlib.h instead of cstdlib in span.h.
60926d353 Check for trailing data in X509Test.GeneralName.
f2adafe73 Fix ChaCha20-Poly1305 x86-64 asm on Windows
cd204d8e1 Include bn.h from bn/internal.h
28cab640d acvp: add support for finite-field Diffie–Hellman.
ce7f08827 Move DH code into the FIPS module.
49587b2c1 Remove unused Netware codepaths in x86 perlasm.
a929e3274 Finish switching to NASM.
a3a98944f Switch to passive entropy collection for Android FIPS.
4ae71a4c7 Skip ASN.1 template tests in Windows shared library builds.
66feb2c55 Add TLS_KDF to documented break tests.
0898b077a acvp: add support for KAS
a6b6b804a Align armv8.pl references to OPENSSL_armcap_P.
92de0b53a Reject bad ASN.1 templates with implicitly-tagged CHOICEs.
1920c6f2c Implement GREASE for ECH (draft-ietf-tls-esni-08).
f0400014b acvp: add TLS KDF support
9ac743e0b acvp: tweak config
329c0cbb2 acvp: fix subprocess_test.go
225961dc4 Const-correct GENERAL_NAME_cmp.
aa4ecb492 Fix EDIPartyName parsing and GENERAL_NAME_cmp.
455b78d5f PWCT failures should clear the generated key.
3094902fc Get closer to Ed25519 boundary conditions.
41a14304d draft-ietf-tls-certificate-compression is now RFC 8879.
576389988 Update FIPS.md to include latest FIPS certificate.
c3f4612d8 Only accept little-endian ARM and MIPS variants in base.h.
eb57cc1e8 aesv8-armx.pl: avoid 32-bit lane assignment in CTR mode
f8047e2d4 Improve sk_dup.
1bec25297 Poly1305: Use |size_t|; assert |poly1305_state| is large enough.
bb6f9c44b util/fipstools/acvp/acvptool: buffer signal channel to avoid losing signal
9dae0ac4f Add digest.h to self_check.c
4a265be4d Document ASN1_STRING.
806c505b7 acvp: add SHA-512/256 support.
884653374 Add FIPS self test for the TLS KDF.
5351c8bf3 Rename the master_key field in SSL_SESSION to secret.
0a6bfa36c Always check the TLS 1.3 downgrade signal.
5656fec51 Fix NETSCAPE_SPKI_get_pubkey documentation.
53bbb1803 Const-correct and document more X509 functions.
354e1e998 Add APIs for checking ASN.1 INTEGERs.
43f375699 Remove some unnecessary pointer casts.
236167767 Document the basic ASN1_STRING functions.
b16bd3313 Document some defaults for the EVP RSA interface.
2e5f38a1d Rearrange ASN1_STRING_copy slightly.
a4954e5ac Remove the legacy MSTRING M_ASN1 macros.
c509ee3fa Switch M_ASN1_TIME macros within the library.
c6ffcde8c Unwind M_ASN1_* macros for primitive types.
7a26f97c9 Reformat and convert comments in asn1.h.
25f9d7a9f aarch64: Fix name of gnu property note section
7be158d18 Re-reformat x509.h.
df00df603 Document X509V3_add1_i2d and friends.
9bdec296a Remove ASN1_STRING_FLAG_NDEF.
e4da107b6 Unexport internal crypto/asn1 functions.
9e282c9a7 Unwind some old ASN.1 ifdefs.
3de5949ba Unwind ASN1_PRIMITIVE_FUNCS.
2c8445c5f Remove some unused types from asn1t.h.
45858ae2a Unwind ASN1_TFLG_NDEF.
75a05d159 Unwind ASN1_ITYPE_COMPAT.
cf1c925dd Unwind ASN1_AFLG_BROKEN.
a93545c2e Const-correct various X509 string parameters.
5eb8c877c Document the next few functions in x509.h
352351b5c Remove sk_new_null call.

Change-Id: Ia4601a90f8fa1d80e80bf55a369df527e6f4b5c7
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Reviewed-on: https://nginx-review.googlesource.com/c/nginx/+/3820