openbsd/src/lib/libssl, branch OPENBSD_5_3 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_5_3 2014-04-12T17:00:23+00:00 from head, will become 5.3 015_openssl.patch 2014-04-12T17:00:23+00:00 deraadt 2014-04-12T17:00:23+00:00 urn:sha1:3d18da11930bfd9f79d956f61dac9ed80a59c9d1 Changes by: tedu@cvs.openbsd.org 2014/04/10 13:01:37 Piotr Sikora pointed me at a more refined diff for the buffer release issue. Apply that version. Maybe someday upstream will wake up and then we can have the same code. https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest MFC: 2014-04-08T00:55:05+00:00 djm 2014-04-08T00:55:05+00:00 urn:sha1:d33a9925ec86de1237af4e277e13519e6db8c02a cherrypick fix for CVE-2014-0160 "heartbleed" vulnerability from OpenSSL git; ok sthen@ MFC: Reliability fix for SHA384 SSL/TLS ciphers on strict alignment 2013-12-20T02:17:26+00:00 jca 2013-12-20T02:17:26+00:00 urn:sha1:db10c49019c97238542fb1bf4dbf020a0d9345c7 architectures. ok miod@ djm@ This commit was manufactured by cvs2git to create branch 'OPENBSD_5_3'. 2013-02-14T15:11:46+00:00 cvs2svn admin@example.com 2013-02-14T15:11:46+00:00 urn:sha1:ea8e2e523f2d3c4f8a5344a44b0a6b62b2baffb0 cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt 2013-02-14T15:11:44+00:00 markus 2013-02-14T15:11:44+00:00 urn:sha1:4383d44ca79eba8836d9f92c612c44ba8aeb87bd from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@ remove ACSS, crank libcrypto major; ok markus@ deraadt@ 2013-01-26T06:10:22+00:00 djm 2013-01-26T06:10:22+00:00 urn:sha1:4fd69672e5f9867343486cefcdfdd970465430d6 New CA root certificates, ok beck@. 2012-12-03T10:19:09+00:00 sthen 2012-12-03T10:19:09+00:00 urn:sha1:345bc900a13adaa14ff6b12c1e68c0e306c360af - additional cert's from GlobalSign. - additional cert's from VeriSign and replace existing ones with 'Signature Algorithm: md2WithRSAEncryption' with their currently distributed sha1WithRSAEncryption versions. - new CAs: AddTrust (root for most Comodo certificates also heavily used in academic networks), Comodo (most of their certs are rooted in AddTrust but TERENA use the Comodo AAA Certificate Services root for some things so add that separately), UserTrust Network/UTN (part of Comodo) and Starfield (part of Go Daddy). Additional CA root certificates: GeoTrust/Equifax, Go Daddy, StartCom, thawte. 2012-12-01T09:22:33+00:00 sthen 2012-12-01T09:22:33+00:00 urn:sha1:a75d8a8f0bd651ead5696ecd12f58ee04c4789ed ok beck@ william@ todd@ Regenerate the text information for all certificates with recent openssl 2012-11-30T21:20:24+00:00 sthen 2012-11-30T21:20:24+00:00 urn:sha1:16bde10a05cda2c9dee534fd96ec70280d88b402 and include sha1 signatures for all certs (some were missing). No certificate changes, this is just for consistency. ok beck@ Remove retired Thawte/Verisign certificates. 2012-11-30T18:19:42+00:00 sthen 2012-11-30T18:19:42+00:00 urn:sha1:c3e74e2b3bf9fa43189627ce3848e4b407133920 Remove intermediate GoDaddy certificate, this file should just contain roots. ok beck@ phessler@