Merge branch 'upstream' into tizen_5.5_base

Change-Id: I6d1f3c90fa10380849e672526efe35ba2ded787c

Imported Upstream version 1.0.2u

Merge branch 'upstream' into tizen_base

Change-Id: I052187c6bd9cc55d587fd63c000608ead364e629

Imported Upstream version 1.0.2t

Rework project packaging

- remove openssl-doc and openssl-misc
- libopenssl-devel conflicts with libopenssl1.1-devel
- openssl requires openssl1.1

Change-Id: Ibb053dafb1aa7e5800b28e99da3df0b598834861

Merge branch 'upstream' into tizen_base

Change-Id: If901de6e8c9317a458af4fa72b754a2a5332cd5b

Imported Upstream version 1.0.2s

Merge branch 'upstream' into tizen_base

Change-Id: I538101a584d936cc3761ecf426fee9cba05c43b0

Imported Upstream version 1.0.2r

Introduce versioned symbols in openssl.

Introduce versioned symbols in openssl, so that programs linked
to different libraries which in turn are linked to different versions of
openssl will not segfault or behave otherwise erratically.

More info about problem can be found here:
https://rt.openssl.org/Ticket/Display.html?id=1222
https://guru.multimedia.cx/ld-so-gnu-linkerloader

Source of this patch can be found here:
https://anonscm.debian.org/viewvc/pkg-openssl/openssl/branches/stretch1.0/debian/patches/version-script.patch

Change-Id: Iaad1f86f1465437253529ddad6536eba14a853db

Merge branch 'upstream' into tizen_base

Change-Id: If02e1fb86dfbd1760b7dbc2cfc31fd5145ce5991

Imported Upstream version 1.0.2q

Imported Upstream version 1.0.2p

Reject excessively large primes in DH key generation.

CVE-2018-0732

Signed-off-by: Guido Vranken <guidovranken@gmail.com>
(cherry picked from commit 91f7361f47b082ae61ffe1a7b17bb2adf213c7fe)

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6457)

Change-Id: I267b8ed8eb477c7da070e40dd978c0762e89d6dd

RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set.

CVE-2018-0737

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 6939eab03a6e23d2bd2c3f5e34fe1d48e542e787)

Change-Id: I7ff51315e409dd39d6e0e9174d43d3221940bed2

Merge branch 'upstream' into tizen_base

Change-Id: I37b6a986ef725c03bb9d29b3db75fee86580b2b5

Imported Upstream version 1.0.2o

Imported Upstream version 1.0.2n

Merge tag 'upstream/1.0.2m' into tizen_4.0_base

Upstream version 1.0.2m

Change-Id: I0324687ff87ce098888b7b6918c2f8c2bb4a5e73

Imported Upstream version 1.0.2m

Change-Id: Ia7d9ec321d4495bdbdb87e2845e87b8f9319bd55

Imported Upstream version 1.0.2m

Fixup PIE compilation flags

Change 'fPIE' to 'fPIC' (the former causes compilation failure on some
architectures).

Change-Id: Icd5930d8bd03715d82f5315cba7ee9a8f4bc6101
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>

Add PIE flags to config

Add flags for Configure script, as it passes them down to compiler and
linker. Fixes openssl binary not building as PIE (for ASLR).

Change-Id: Iaac6de23c28809aed8d5c92e85e5ef56e12b56b1
Signed-off-by: Igor Kotrasinski <i.kotrasinsk@partner.samsung.com>

Merge tag 'upstream/1.0.2k' into tizen_base

Upstream version 1.0.2k

Change-Id: Ibb94241d3263d8efc2c93a6f485049b24aea52f6
Signed-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>

Imported Upstream version 1.0.2k

make debug pakcages to strip binary

Change-Id: I97248db08b47ecdcada7469fc0c16f27654aaf11
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Add -64bit package for .NET i586 build

.NET runtime has a dependency with openssl library.
There is no toolchain for i586 build in .NET runtime,
so to build it for i586,
it needs i586 package which contains x86_64 library.

Signed-off-by: Jiyoung Yun <jy910.yun@samsung.com>
Change-Id: Ib6a6ed21006bf83c5de22bc2d88486f8115dad1b

Add license files to packaging

Change-Id: I073939ffc69ad49810129af5248d333948d9bcfe
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Change license name from BSD-2.0 to BSD-3-Clause

Change-Id: Id9f411da1e2272abff72472440d23a7ff3a2c65b
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Add Apache-2.0 and BSD-2.0 licenses in spec file

- BSD-2.0 : rasz_exp.h, rsaz-svx2.pl, rsaz-x86_64.pl
- Apache-2.0 : ecp_nistp224.c, ecp_nistp256.c, ecp_nistp512.c, ecp_nistputil.c,
               ecp_nistz256.c, ecp_nistz256-avx2.pl, ecp_nistz256-x86_64.pl

Change-Id: I6466e9f7a78869737b815cc2dcab2f9297511d59
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Merge tag 'upstream/1.0.2j' into tizen_base

Change-Id: I05036caf74c3d9b0b33053458c4a9ec8640dae79
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Imported Upstream version 1.0.2j

Change-Id: I57424e369a568144838d2a7b8e2ca3a5737adf58
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Merge tag 'upstream/1.0.2i' into tizen_base

Change-Id: I16b1811518d680619ab815e05e75a8c83bc8d0dc
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Imported Upstream version 1.0.2i

Change-Id: Ie36b37cac23a47c82793df31244ade44f98093fa
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Restore rpms (openssl, mic, doc) for compatability

Change-Id: I306944c611a4c870d98ee093bfcb3a174e3f41bb
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Cleanup packaging and spec

Clean up legacy configures which comes from opensuse project.
Newly fixed code is based on Tizen 2.4 and spec from upstream.

Change-Id: I44cc9b76855e9651cb666f2bb48d451559da3bce
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Upgrade upstream version to 1.0.2h

no-ssl2-method option added for not adding any symbol
compare with previous version(1.0.2g) because they're already removed

Change-Id: I89185548c0a04748d93ffcd3740f940e99fefb24
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Imported Upstream version 1.0.2h

Change-Id: Ica9a30d71f52395a402accf32110b52f46851c11
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

modify mcpu and march flag in case for mcpu=cortex-a15.cortex-a7 or march=armv7ve

Change-Id: I5cf5bae46a34aca5faf9ef049172118b41e542e6
Signed-off-by: Dongsun Lee <ds73.lee@samsung.com>

Revert "enable SSLV2 about openssl"

This reverts commit 28eaea79ada396f5eaf8c0609943e07ad4f666d5.

Change-Id: I81f0b114d56637216cbd68c55d1fa28d05988bbc

enable SSLV2 about openssl

Change-Id: I47ba88b5c8ce924e63f438f5474552337580379f
Signed-off-by: sangsu <sangsu.choi@samsung.com>

Merge branch 'upstream' into tizen_base

Change-Id: I6c175d41a528ea498db65ba5c8114f82881e5e91
Signed-off-by: sangsu <sangsu.choi@samsung.com>

Imported Upstream version 1.0.2g

Change-Id: I2b5f4248ba97b6abbe363a5da33c953e623e0a7e
Signed-off-by: sangsu <sangsu.choi@samsung.com>

Add missing license files

Change-Id: I6e9adc80f104a42722fdf0cd95a80648cdc19533
Signed-off-by: sangsu <sangsu.choi@samsung.com>

Update License in openssl.spec file

Change-Id: Iebe5bde3149fde75b16be390b30ee47cf1640061
Signed-off-by: sangsu <sangsu.choi@samsung.com>

Add no-asm option

Signal handler cannot registered on some target so SIGILL
makes crash when detecting cpu capability. To use HW capability
is dependent on individual product projects.

Change-Id: I8d96eee86601755f2aa6cd05dfb57669eb815427
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Merge upgrade commit (v1.0.2e) into tizen_base

Change-Id: If254724f73f6f886a7991afdd4782036278484ee
Signed-off-by: sangwan.kwon <sangwan.kwon@samsung.com>

Upgrade Upstream version 1.0.2e

Change-Id: If6afd73ecd5ef4548b9389eca6e53946aac3b9f2

Imported Upstream version 1.0.2e

Change-Id: Ib2b4a8546eecf9f4d4a80d8f91b48dbf50bff173

Remove /etc/ssl/certs dir from rpm files

ca-certificates package handles all of system certificates resource

Change-Id: Ifa25a170486dbccf34902096687d2f72673b64dd
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Move library path to default libdir

Change-Id: I70356e1ef2e74b817bd4008dc4e68473ed29d843
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Fix diff between upstream and tizen

Change-Id: I30681b310869557c60a2d8ab3b76d999c9c2fa97
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

Upgrade upstream version to 1.0.2d

Change-Id: I68b01267078a01007964c693440489151bc8ba2f

Imported Upstream version 1.0.2d

Change-Id: I565a3e3ac5176f83139175faa2d2a11a334e8908
Signed-off-by: Yury Usishchev <y.usishchev@samsung.com>

Upgrade openssl version to 1.0.1p

Change-Id: I4adbd2d17c72f228aea1396678f1e11a67b63bdc

Imported Upstream version 1.0.1p

Change-Id: I297624cdcb5d68a3442cdf4666722e66ce7a264b

Upgrade openssl version to 1.0.1m

Conflicts:
ssl/ssl_lib.c

Change-Id: Ib400e515e742c87075578ed5e7ff82ccf4f195af
Signed-off-by: kyungwook tak <k.tak@samsung.com>

Imported Upstream version 1.0.1m

Change-Id: Ifa60e86d772dade7afe158c8899e6d36c5561bba

Upgrade openssl version to 1.0.1l

Change-Id: Ia57c845afb0e9f2eb99fdb167441ef0b6157b50c

Imported Upstream version 1.0.1l

Change-Id: I99680d38528c4117e59bb5377cc54820b22b93a2

Move openssl version from 1.0.1h to 1.0.1j
for CVE-2014-3513 CVE-2014-3567 CVE-2014-3566 (SSLv3 POODLE)
CVE-2014-3568 fixes

Change-Id: I7f10ab3e6459da4553c298c2ed26db0dc3623d0e
Signed-off-by: Janusz Kozerski <j.kozerski@samsung.com>

Move openssl version from 1.0.1g to 1.0.1h
for CVE-2014-0224, CVE-2014-0221, CVE-2014-0195,
CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 fixes

Change-Id: Ifa69d7a46f9a000d0ee8cf4da86e3e1d7113cfdc
Signed-off-by: John L. Whiteman <john.l.whiteman@intel.com>

Move openssl version to 1.0.1g for CVE-2014-160 (Heartbleed)

Change-Id: Ia8dc1aada13143a27be097574f985414b998159f
Signed-off-by: Michael Demeter <michael.demeter@intel.com>

Move to OpenSSL 1.0.1e from 1.0.1c.

resetting manifest requested domain to floor

Fixed package groups

Fixed package group

Fixed package groups

enable md2

do not run tests for now

remove patches

enable md2

add packaging

Imported Upstream version 1.0.1e

Prepare for 1.0.1j release

Reviewed-by: Stephen Henson <steve@openssl.org>

Updates to NEWS

Reviewed-by: Dr Stephen Henson <steve@openssl.org>

Add updates to CHANGES file

Reviewed-by: Bodo Möller <bodo@openssl.org>

Fix no-ssl3 configuration option

CVE-2014-3568

Reviewed-by: Emilia Kasper <emilia@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>

Fix for session tickets memory leak.

CVE-2014-3567

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 5dc6070a03779cd524f0e67f76c945cb0ac38320)

Fix SRTP compile issues for windows

Related to CVE-2014-3513

This fix was developed by the OpenSSL Team

Reviewed-by: Tim Hudson <tjh@openssl.org>

Fix for SRTP Memory Leak

CVE-2014-3513

This issue was reported to OpenSSL on 26th September 2014, based on an origi
issue and patch developed by the LibreSSL project. Further analysis of the i
was performed by the OpenSSL team.

The fix was developed by the OpenSSL team.

Reviewed-by: Tim Hudson <tjh@openssl.org>

Fix SSL_R naming inconsistency.

Reviewed-by: Tim Hudson <tjh@openssl.org>

aesni-x86_64.pl: make ECB subroutine Windows ABI compliant.

RT: 3553
Reviewed-by: Emilia Kasper <emilia@openssl.org>
(cherry picked from commit 69d5747f90136aa026a96204f26ab39549dfc69b)

Add constant_time_locl.h to HEADERS,
so the Win32 compile picks it up correctly.

Reviewed-by: Richard Levitte <levitte@openssl.org>

Add the constant time test to the VMS build and tests

Reviewed-by: Tim Hudson <tjh@openssl.org>
Conflicts:
test/maketests.com
test/tests.com

Include "constant_time_locl.h" rather than "../constant_time_locl.h".
The different -I compiler parameters will take care of the rest...

Reviewed-by: Tim Hudson <tjh@openssl.org>

Spaces were added in some strings for better readability. However, those spaces do not belong in file names, so when picking out the individual parts, remove the spaces

Reviewed-by: Tim Hudson <tjh@openssl.org>

Adjust VMS build to Unix build.  Most of all, make it so the disabled
algorithms MD2 and RC5 don't get built.
Also, disable building the test apps in crypto/des and crypto/pkcs7, as
they have no support at all.

Reviewed-by: Tim Hudson <tjh@openssl.org>

Make sure test/tests.com exit gracefully, even when openssl.exe wasn't properly built.

Reviewed-by: Tim Hudson <tjh@openssl.org>

Update the VMS build according to the latest unixly build. Partly provided by Zoltan Arpadffy <arpadffy@polarhome.com>

Reviewed-by: Tim Hudson <tjh@openssl.org>

Make sure that disabling the MAYLOSEDATA3 warning is only done when the compiler supports it. Otherwise, there are warnings about it lacking everywhere, which is quite tedious to read through while trying to check for other warnings.

Reviewed-by: Tim Hudson <tjh@openssl.org>

Support TLS_FALLBACK_SCSV.

Reviewed-by: Rich Salz <rsalz@openssl.org>

Preserve digests for SNI.

SSL_set_SSL_CTX is normally called for SNI after ClientHello has
received and the digest to use for each certificate has been decided.
The original ssl->cert contains the negotiated digests and is now
copied to the new ssl->cert.

PR: 3560
Reviewed-by: Tim Hudson <tjh@openssl.org>

Removed duplicate definition of PKCS7_type_is_encrypted

Patch supplied by Matthieu Patou <mat@matws.net>, and modified to also
remove duplicate definition of PKCS7_type_is_digest.

PR#3551

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit e0fdea3e49e7454aa76bd5ecf3a3747641354c68)

Add additional DigestInfo checks.

Reencode DigestInto in DER and check against the original: this
will reject any improperly encoded DigestInfo structures.

Note: this is a precautionary measure, there is no known attack
which can exploit this.

Thanks to Brian Smith for reporting this issue.
Reviewed-by: Tim Hudson <tjh@openssl.org>

Add missing tests

Accidentally omitted from commit 455b65dfab0de51c9f67b3c909311770f2b3f801

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
(cherry picked from commit fdc35a9d3e8cf4cfd9330d5df9883f42cf5648ad)

Use correct function name: CMS_add1_signer()

Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 5886354dcca4f8445ed35b6995a035b75409590c)

crypto/bn/bn_nist.c: work around MSC ARM compiler bug.

RT: 3541
Reviewed-by: Emilia Kasper <emilia@openssl.org>
(cherry picked from commit 8b07c005fe006044d0e4a795421447deca3c9f2c)

RT3425: constant-time evp_enc

Do the final padding check in EVP_DecryptFinal_ex in constant time to
avoid a timing leak from padding failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 4aac102f75b517bdb56b1bcfd0a856052d559f6e)

Conflicts:
crypto/evp/evp_enc.c

(cherry picked from commit 738911cde68b2b3706e502cf8daf5b14738f2f42)

RT3067: simplify patch

(Original commit adb46dbc6dd7347750df2468c93e8c34bcb93a4b)

Use the new constant-time methods consistently in s3_srvr.c

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
(cherry picked from commit 455b65dfab0de51c9f67b3c909311770f2b3f801)