openbsd, branch libressl-v2.4.3 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.3 2016-09-22T18:37:36+00:00 MFC: Avoid falling back to a weak digest for (EC)DH when using SNI with 2016-09-22T18:37:36+00:00 jsing 2016-09-22T18:37:36+00:00 urn:sha1:f02c35bac5b3e3187f9d1d489d25f8d67c1b7fa4 libssl. MFC: Avoid unbounded memory growth in libssl, which can be triggered by a 2016-09-22T18:36:57+00:00 jsing 2016-09-22T18:36:57+00:00 urn:sha1:37e72fb6e08643a1c5248bdac41896aaf7475191 TLS client repeatedly renegotiating and sending OCSP Status Request TLS extensions. bump version for 2.4.3 2016-09-22T05:06:06+00:00 bcook 2016-09-22T05:06:06+00:00 urn:sha1:6f54bb436e4633abd476c96a5007054cc7058672 back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Encrypt/DecryptFinal 2016-09-22T04:50:19+00:00 bcook 2016-09-22T04:50:19+00:00 urn:sha1:d76de4cceee8338ec29e0cafae1d5541066bc49e Software that refers to ctx after calling Final breaks with these changes. revert parts of 1.31. ok jsing@ This commit was manufactured by cvs2git to create branch 'OPENBSD_6_0'. 2016-07-23T19:31:37+00:00 cvs2svn admin@example.com 2016-07-23T19:31:37+00:00 urn:sha1:f62463c2c218cf95320c8841ba552dc2c8ce4738 rework crl2pkcs7; with help from jsing 2016-07-23T19:31:35+00:00 jmc 2016-07-23T19:31:35+00:00 urn:sha1:cd24674739573c5e6cb697331fb638ea66897f3d rework DESCRIPTION a little: no-command seems clearer than no-XXX; 2016-07-21T18:40:26+00:00 jmc 2016-07-21T18:40:26+00:00 urn:sha1:ee4df7aaca42c89129da6d4f67934e03d14e624d rename NOTES to COMMON SYNTAX (explains itself better); rework the 2016-07-21T18:33:27+00:00 jmc 2016-07-21T18:33:27+00:00 urn:sha1:0eedfc203d571fef6e453de4465099af05b882fc passphrase section a little; move the DER|PEM stuff in there to help avoid text repetition, and prefer the lowercase (less keys to press); adjust ENVIRONMENT to format a little more nicely; strip back openssl crl somewhat: remove the examples 2016-07-21T16:34:08+00:00 jmc 2016-07-21T16:34:08+00:00 urn:sha1:3efd438ad7fcc7e99858d14af7356108d80accef and move any relevant text into the main body; strip back openssl ciphers: 2016-07-20T14:42:03+00:00 jmc 2016-07-20T14:42:03+00:00 urn:sha1:2b01428c3caa4927f92d38bd9af125f40839bb8b - rearrange the descriptions of -V and -v to read more logically - move the cipherlist text into the cipherlist description - zap examples