mirror/openwrt
1
0
Fork 1
mirror of https://git.openwrt.org/openwrt/openwrt.git synced 2026-03-14 23:09:45 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
openwrt/package/libs/openssl/patches
History
Eneas U de Queiroz eea3a9625c openssl: revert EOF detection change in 1.1.1 
This adds patches to avoid possible application breakage caused by a
change in behavior introduced in 1.1.1e.  It affects at least nginx,
which logs error messages such as:
nginx[16652]: [crit] 16675#0: *358 SSL_read() failed (SSL: error:
4095126:SSL routines:ssl3_read_n:unexpected eof while reading) while
keepalive, client: xxxx, server: [::]:443

Openssl commits db943f4 (Detect EOF while reading in libssl), and
22623e0 (Teach more BIOs how to handle BIO_CTRL_EOF) changed the
behavior when encountering an EOF in SSL_read().  Previous behavior was
to return SSL_ERROR_SYSCALL, but errno would still be 0.  The commits
being reverted changed it to SSL_ERRO_SSL, and add an error to the
stack, which is correct.  Unfortunately this affects a number of
applications that counted on the old behavior, including nginx.

The reversion was discussed in openssl/openssl#11378, and implemented as
PR openssl/openssl#11400.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 2e8a4db9b6)
2020-03-29 18:46:51 +02:00
..
100-Configure-afalg-support.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
110-openwrt_targets.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
120-strip-cflags-from-binary.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
130-dont-build-tests-fuzz.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
140-allow-prefer-chacha20.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
150-openssl.cnf-add-engines-conf.patch openssl: add configuration example for afalg-sync 2020-03-22 23:03:24 +01:00
200-Partially-revert-Detect-EOF-while-reading-in-libssl.patch openssl: revert EOF detection change in 1.1.1 2020-03-29 18:46:51 +02:00
400-eng_devcrypto-save-ioctl-if-EVP_MD_.FLAG_ONESHOT.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
410-eng_devcrypto-add-configuration-options.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
420-eng_devcrypto-add-command-to-dump-driver-info.patch openssl: bump to 1.1.1d 2019-09-23 07:42:30 +02:00
430-e_devcrypto-make-the-dev-crypto-engine-dynamic.patch openssl: update to 1.1.1e 2020-03-22 23:03:24 +01:00
500-e_devcrypto-default-to-not-use-digests-in-engine.patch openssl: update to 1.1.1e 2020-03-22 23:03:24 +01:00
510-e_devcrypto-ignore-error-when-closing-session.patch openssl: update to 1.1.1e 2020-03-22 23:03:24 +01:00