openbsd/src/lib/libssl/s3_pkt.c, branch OPENBSD_4_2_BASE

This commit was manufactured by cvs2git to create tag 'OPENBSD_4_2_BASE'.

2007-08-08T21:24:30+00:00

resolve conflicts

2005-04-29T05:39:33+00:00

avoid null-pointer deref (aka CAN-2004-0079)

2004-03-17T12:28:29+00:00

see http://www.openssl.org/news/secadv_20040317.txt

security fix from openssl 0.9.7a:

2003-02-19T20:37:46+00:00

In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078)

merge openssl-0.9.7-beta3, tested on vax by miod@

2002-09-10T16:31:57+00:00

OpenSSL 0.9.7 stable 2002 05 08 merge

2002-05-15T02:29:21+00:00

openssl-engine-0.9.6a merge

2001-06-22T00:03:44+00:00

openssl-engine-0.9.6 merge

2000-12-15T02:58:47+00:00

OpenSSL 0.9.5 merge

2000-03-19T11:13:58+00:00

*warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/) on cvs or ~beck/src-patent.tar.gz on cvs

OpenSSL 0.9.4 merge

1999-09-29T04:37:45+00:00