openbsd, branch libressl-v2.3.4 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.3.4 2016-05-03T13:41:52+00:00 prefer limits.h over sys/limits.h 2016-05-03T13:41:52+00:00 bcook 2016-05-03T13:41:52+00:00 urn:sha1:575021001c555e822c36a5fbb07f185961f6453e bump to 2.3.4 2016-05-03T13:41:17+00:00 bcook 2016-05-03T13:41:17+00:00 urn:sha1:fb242d4814b4483cbc2314c94a976aa813dd88e4 backport patch from openssl for multiple issues: 2016-05-03T12:39:53+00:00 tedu 2016-05-03T12:39:53+00:00 urn:sha1:fbfd144af8bfbfe1e81cd93c27f7fd631975982b missing padding check in aesni functions overflow in evp encode functions use of invalid negative asn.1 types ok beck This commit was manufactured by cvs2git to create branch 'OPENBSD_5_9'. 2016-05-03T12:38:55+00:00 cvs2svn admin@example.com 2016-05-03T12:38:55+00:00 urn:sha1:c250a726eb27a4883cb8a57ea626cf4336561a9b bump for LibreSSL 2.3.3 2016-03-12T20:50:31+00:00 bcook 2016-03-12T20:50:31+00:00 urn:sha1:60b1b77ccb98110d65daf349ae93ccd93e0ef499 This commit was manufactured by cvs2git to create branch 'OPENBSD_5_9'. 2016-02-17T13:06:56+00:00 cvs2svn admin@example.com 2016-02-17T13:06:56+00:00 urn:sha1:90ce84455c27c87d71ff108edf7d3d0109e81775 Sync some root certificates with Mozilla's cert store. ok bcook@ 2016-02-17T13:06:54+00:00 sthen 2016-02-17T13:06:54+00:00 urn:sha1:5e028a458eda039db3f8d1a098b2934bd6d466e4 - Add new root certificates present in Mozilla cert store from CA organizations who are already in cert.pem (AddTrust, Comodo, DigiCert, Entrust, GeoTrust, USERTrust). - Replace Startcom's root with their updated sha256 version present in Mozilla cert store. (They maintained serial# etc so this is still valid for existing signed certificates). - Add two root certificates from CA not previously present: "C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority" "C=PL, O=Unizeto Sp. z o.o., CN=Certum CA" (the latter used by yandex.ru) We are still listing some certificates that have been removed from Mozilla's store (1024-bit etc) however these cannot be removed until cert validation is improved (we don't currently accept a certificate as valid unless the CA is at the end of a chain). word fix from previous; ok sthen 2016-02-12T13:03:19+00:00 jmc 2016-02-12T13:03:19+00:00 urn:sha1:4735edfba25d349bf1219440ad44e5f358c501a9 sslv3 has been removed; 2016-02-08T19:29:57+00:00 jmc 2016-02-08T19:29:57+00:00 urn:sha1:79b282441aad3c301292d8fbddc63e25ca6f5ecd prompted by a mail from jiri navratil help/ok sthen compare pointer to NULL in example code 2016-02-07T20:50:24+00:00 mmcc 2016-02-07T20:50:24+00:00 urn:sha1:64550dd44c759e7be9834a688c8b91cfd3f5593a