Go to file
Andy Polyakov 6228b1dae2 TLSProxy/Proxy.pm: switch to dynamic ports and overhaul.
By asking for port 0, you get a free port dynamically assigned by OS.
TLSProxy::Proxy now asks for 0 and asks s_server to do the same. The
s_server's port is reported in "ACCEPT" line, which TLSProxy::Proxy
parses and uses.

Because the server port is now a random affair in TLSProxy::Proxy,
it's no longer possible to change it with the method 'server_port',
and it has become an accessor only. For the sake of orthogonality, so
has the method 'server_addr'.

Remove all fork calls on Windows, as fork is not to be trusted there.
This naturally minimized amount of fork calls on POSIX systems, to 1.

Sink s_server's output to 'perl -ne print' which ensures that output
is written strictly in lines. This keeps TAP parser happy.

Improve synchronization in -naccept +n cases by establishing next
connection to s_server *after* s_client finishes instead of before it
starts.

Improve error handling and clean up some methods.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5843)
2018-04-04 20:24:26 +02:00
.github Remind people to have 'Fixes #XXXX' in the commit message 2017-04-02 21:51:47 +02:00
apps openssl s_server: print the accepting address and socket 2018-04-04 20:24:26 +02:00
boringssl@2070f8ad91 Update ossl_config.json for later BoringSSL commit 2017-03-14 12:12:13 +00:00
Configurations Don't use CPP in Configurations/unix-Makefile.tmpl 2018-04-04 16:44:45 +02:00
crypto Remove ambiguity in rand_pool_add[_end] return value 2018-04-04 20:14:51 +02:00
demos Add "friendly name" extractor 2017-11-30 14:53:46 -05:00
doc Don't use getenv for critical functions when run as setuid/setgid 2018-04-04 14:45:49 +02:00
engines Update copyright year 2018-03-20 13:08:46 +00:00
external/perl Copyright consolidation; .pm and Configure 2016-04-20 10:40:05 -04:00
fuzz Update copyright year 2018-04-03 13:57:12 +01:00
include VMS: stricter acquisition of entropy for the pool 2018-04-03 18:24:41 +02:00
krb5@b9ad6c4950 [extended tests] Enable krb5 tests in Travis 2017-04-18 19:10:25 +02:00
ms Remove unused num.pl,segregnam scripts 2018-02-22 15:36:27 -05:00
os-dep Move Haiku configuration to separate config file to denote 2016-05-19 22:39:52 +02:00
pyca-cryptography@c1f8e46033 Update pyca-cryptography to latest commit 2017-08-11 11:16:44 +10:00
ssl Fix configuration of TLSv1.3 ciphersuites 2018-04-04 16:17:26 +01:00
test Fix configuration of TLSv1.3 ciphersuites 2018-04-04 16:17:26 +01:00
tools Update copyright year 2018-03-20 13:08:46 +00:00
util TLSProxy/Proxy.pm: switch to dynamic ports and overhaul. 2018-04-04 20:24:26 +02:00
VMS Simplify the handling of shared library version numbers 2017-07-26 22:53:03 +02:00
.gitattributes crypto/pkcs12: facilitate accessing data with non-interoperable password. 2016-08-22 13:52:59 +02:00
.gitignore Add test/versions to gitignore 2018-04-04 17:04:00 +01:00
.gitmodules [extended tests] Enable krb5 tests in Travis 2017-04-18 19:10:25 +02:00
.travis-apt-pin.preferences Fix travis clang-3.9 builds 2017-06-23 17:57:02 +01:00
.travis-create-release.sh Reduce travis-ci log output 2018-03-08 21:18:35 +01:00
.travis.yml .travis.yml: with fast fuzz testing, there is no point avoiding it 2018-03-29 09:24:56 +02:00
ACKNOWLEDGEMENTS Refer to website for acknowledgements. 2015-12-08 16:07:09 -05:00
appveyor.yml appveyor.yml: omit makedepend step. 2018-02-24 14:17:24 +01:00
AUTHORS Copyright consolidation: perl files 2016-04-20 09:45:40 -04:00
build.info VMS build.info: uppercase args to perl modules must be quoted 2017-12-18 07:49:53 +01:00
CHANGES Don't use getenv for critical functions when run as setuid/setgid 2018-04-04 14:45:49 +02:00
config Remove QNX support 2018-03-26 14:10:57 -04:00
config.com Update copyright year 2018-02-13 13:59:25 +00:00
Configure Fix minor typo in comment in Configure 2018-03-31 18:29:40 -04:00
CONTRIBUTING Update the location of the pod files 2016-11-18 07:28:03 -05:00
e_os.h Update copyright year 2018-02-27 13:59:42 +00:00
FAQ Move FAQ to the web. 2015-08-16 19:02:29 -04:00
INSTALL Add documentation for the RAND_DRBG API 2018-03-30 00:10:38 +02:00
LICENSE Update the license end year 2018-01-20 10:02:23 +01:00
NEWS Update CHANGES and NEWS for the new release 2018-03-27 13:31:51 +01:00
NOTES.ANDROID Configurations/15-android.conf: detect clang by PATH, not by CC. 2018-03-19 14:31:30 +01:00
NOTES.DJGPP Slight cleanup of the collection of READMEs, INSTALLs and NOTES 2016-05-23 16:02:53 +02:00
NOTES.PERL Tweaks to NOTES.PERL 2016-06-03 17:10:16 +01:00
NOTES.UNIX NOTES.UNIX: add additional note about --enable-new-dtags 2018-02-15 10:58:31 +01:00
NOTES.VMS More typo fixes 2017-03-29 07:14:29 +02:00
NOTES.WIN NOTES.WIN: classify targets to "native" and "hosted" and restructure. 2018-03-18 13:29:44 +01:00
README Prepare for 1.1.1-pre5-dev 2018-04-03 14:26:16 +01:00
README.ECC Add NSA sublicense info. 2011-05-11 12:50:57 +00:00
README.ENGINE Remove bsd_cryptodev engine 2017-06-19 09:31:45 -04:00
README.FIPS Remove more (rest?) of FIPS build stuff. 2016-01-06 12:07:26 -05:00

 OpenSSL 1.1.1-pre5-dev

 Copyright (c) 1998-2018 The OpenSSL Project
 Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
 All rights reserved.

 DESCRIPTION
 -----------

 The OpenSSL Project is a collaborative effort to develop a robust,
 commercial-grade, fully featured, and Open Source toolkit implementing the
 Transport Layer Security (TLS) protocols (including SSLv3) as well as a
 full-strength general purpose cryptographic library.

 OpenSSL is descended from the SSLeay library developed by Eric A. Young
 and Tim J. Hudson.  The OpenSSL toolkit is licensed under a dual-license (the
 OpenSSL license plus the SSLeay license), which means that you are free to
 get and use it for commercial and non-commercial purposes as long as you
 fulfill the conditions of both licenses.

 OVERVIEW
 --------

 The OpenSSL toolkit includes:

 libssl (with platform specific naming):
     Provides the client and server-side implementations for SSLv3 and TLS.

 libcrypto (with platform specific naming):
     Provides general cryptographic and X.509 support needed by SSL/TLS but
     not logically part of it.

 openssl:
     A command line tool that can be used for:
        Creation of key parameters
        Creation of X.509 certificates, CSRs and CRLs
        Calculation of message digests
        Encryption and decryption
        SSL/TLS client and server tests
        Handling of S/MIME signed or encrypted mail
        And more...

 INSTALLATION
 ------------

 See the appropriate file:
        INSTALL         Linux, Unix, Windows, OpenVMS, ...
        NOTES.*         INSTALL addendums for different platforms

 SUPPORT
 -------

 See the OpenSSL website www.openssl.org for details on how to obtain
 commercial technical support. Free community support is available through the
 openssl-users email list (see
 https://www.openssl.org/community/mailinglists.html for further details).

 If you have any problems with OpenSSL then please take the following steps
 first:

    - Download the latest version from the repository
      to see if the problem has already been addressed
    - Configure with no-asm
    - Remove compiler optimization flags

 If you wish to report a bug then please include the following information
 and create an issue on GitHub:

    - OpenSSL version: output of 'openssl version -a'
    - Configuration data: output of 'perl configdata.pm --dump'
    - OS Name, Version, Hardware platform
    - Compiler Details (name, version)
    - Application Details (name, version)
    - Problem Description (steps that will reproduce the problem, if known)
    - Stack Traceback (if the application dumps core)

 Just because something doesn't work the way you expect does not mean it
 is necessarily a bug in OpenSSL. Use the openssl-users email list for this type
 of query.

 HOW TO CONTRIBUTE TO OpenSSL
 ----------------------------

 See CONTRIBUTING

 LEGALITIES
 ----------

 A number of nations restrict the use or export of cryptography. If you
 are potentially subject to such restrictions you should seek competent
 professional legal advice before attempting to develop or distribute
 cryptographic code.