openbsd/src/lib/libcrypto, branch libressl-v2.2.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.2.0 2015-06-11T16:02:05+00:00 Avoid an infinite loop that can occur when verifying a message with an 2015-06-11T16:02:05+00:00 jsing 2015-06-11T16:02:05+00:00 urn:sha1:9d6d7f7cdb30dbe38e9e9706b374fd26c1ca588d unknown hash function OID. Diff based on OpenSSL. Fixes CVE-2015-1792 (however, this code is not enabled/built in LibreSSL). ok doug@ miod@ Avoid a potential out-of-bounds read in X509_cmp_time(), due to missing 2015-06-11T15:58:53+00:00 jsing 2015-06-11T15:58:53+00:00 urn:sha1:652913e0fc47c01c7ce25e6f73435f2bf88f6a2e length checks. Diff based on changes in OpenSSL. Fixes CVE-2015-1789. ok doug@ Avoid an infinite loop that can be triggered by parsing an ASN.1 2015-06-11T15:55:28+00:00 jsing 2015-06-11T15:55:28+00:00 urn:sha1:095e36cd429c313ee8361e8877bc677116a2a2ce ECParameters structure that has a specially malformed binary polynomial field. Issue reported by Joseph Barr-Pixton and fix based on OpenSSL. Fixes CVE-2015-1788. ok doug@ miod@ Add OPENSSL_NO_EGD to opensslfeatures.h. 2015-05-26T03:05:26+00:00 bcook 2015-05-26T03:05:26+00:00 urn:sha1:3fd29af5eddee4775e51770aa2f8323d34c0759b Since RAND_egd has been removed from LibreSSL, simplify porting software that relies on it. See https://github.com/libressl-portable/openbsd/pull/34 from Bernard Spil, ok deraadt@ Maximilian dot Fillinger at uni-duesseldorf dot de 2015-05-24T15:44:52+00:00 schwarze 2015-05-24T15:44:52+00:00 urn:sha1:72138e7dd9423eb110e858e00b54b32be6b5aa87 starts helping with the pod2mdoc(1)-based conversion of LibreSSL crypto manuals from perlpod(1) to mdoc(7). Here comes the first file, slightly tweaked by me. bump to version 2.2 2015-05-23T21:09:46+00:00 bcook 2015-05-23T21:09:46+00:00 urn:sha1:fa94b8e0a497408306ccc4012ef60535fc46200a ok deraadt@ No need to check the return value of memcpy() if you actually checked this 2015-05-20T04:33:35+00:00 miod 2015-05-20T04:33:35+00:00 urn:sha1:b4161a0eddcbbd3eef0ef0cd3f21b617d32177c3 pointer for NULL the line above; ok doug@ Record inter-library dependencies between libcrypto, libssl and libtls 2015-05-17T22:39:39+00:00 kettenis 2015-05-17T22:39:39+00:00 urn:sha1:c5f087c6c031837a968277278b7d6de4ae1692fb Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls. 2015-05-15T11:00:14+00:00 jsg 2015-05-15T11:00:14+00:00 urn:sha1:f8e03ddcf892381c04c6d2274d698a4db936d93b ok doug@ Add SwissSign CA root certificates. Requested by robert@, ok dcoppa@ aja@ miod@ 2015-05-04T19:02:57+00:00 sthen 2015-05-04T19:02:57+00:00 urn:sha1:04e7d07f147f49d798a09b2e497a302e3e1dcb81