openbsd, branch OPENBSD_5_8

Incorrect/unneeded fix for 5.8

2016-06-27T15:42:33+00:00

noticed by jsing@

Fix several issues in the OCSP code that could result in the incorrect

2016-06-25T16:42:42+00:00

generation and parsing of OCSP requests. This remediates a lack of error checking on time parsing in these functions, and ensures that only GENERALIZEDTIME formats are accepted for OCSP, as per RFC 6960 Issues reported, and fixes provided by Kazuki Yamaguchi and Kinichiro Inoguchi

Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.

2016-06-06T23:39:53+00:00

Mistake noted by Billy Brumley. Many thanks.

Correct a problem that prevents the DSA signing algorithm from running

2016-06-06T10:00:51+00:00

in constant time even if the flag BN_FLG_CONSTTIME is set. This issue was reported by Cesar Pereida (Aalto University), Billy Brumley (Tampere University of Technology), and Yuval Yarom (The University of Adelaide and NICTA). The fix was developed by Cesar Pereida

LibreSSL 2.2.9

2016-06-06T09:54:03+00:00

bump to 2.2.8

2016-05-29T20:39:14+00:00

Fix a short-read bug in the previous version of asn1_d2i_read_bio

2016-05-29T19:08:54+00:00

The outer while() loop is missing, so we only read up to chunk_max bytes. ok tedu

prefer limits.h over sys/limits.h

2016-05-03T13:57:23+00:00

bump to 2.2.7

2016-05-03T13:49:36+00:00

backport patch from openssl for multiple issues:

2016-05-03T12:39:27+00:00

missing padding check in aesni functions overflow in evp encode functions use of invalid negative asn.1 types ok beck