openbsd/src/lib/libssl, branch OPENBSD_5_3_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_5_3_BASE 2013-02-14T15:11:45+00:00 This commit was manufactured by cvs2git to create tag 'OPENBSD_5_3_BASE'. 2013-02-14T15:11:45+00:00 cvs2svn admin@example.com 2013-02-14T15:11:45+00:00 urn:sha1:6f78006c046d1db00c07d2f9ba014243246a84cc cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt 2013-02-14T15:11:44+00:00 markus 2013-02-14T15:11:44+00:00 urn:sha1:4383d44ca79eba8836d9f92c612c44ba8aeb87bd from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@ remove ACSS, crank libcrypto major; ok markus@ deraadt@ 2013-01-26T06:10:22+00:00 djm 2013-01-26T06:10:22+00:00 urn:sha1:4fd69672e5f9867343486cefcdfdd970465430d6 New CA root certificates, ok beck@. 2012-12-03T10:19:09+00:00 sthen 2012-12-03T10:19:09+00:00 urn:sha1:345bc900a13adaa14ff6b12c1e68c0e306c360af - additional cert's from GlobalSign. - additional cert's from VeriSign and replace existing ones with 'Signature Algorithm: md2WithRSAEncryption' with their currently distributed sha1WithRSAEncryption versions. - new CAs: AddTrust (root for most Comodo certificates also heavily used in academic networks), Comodo (most of their certs are rooted in AddTrust but TERENA use the Comodo AAA Certificate Services root for some things so add that separately), UserTrust Network/UTN (part of Comodo) and Starfield (part of Go Daddy). Additional CA root certificates: GeoTrust/Equifax, Go Daddy, StartCom, thawte. 2012-12-01T09:22:33+00:00 sthen 2012-12-01T09:22:33+00:00 urn:sha1:a75d8a8f0bd651ead5696ecd12f58ee04c4789ed ok beck@ william@ todd@ Regenerate the text information for all certificates with recent openssl 2012-11-30T21:20:24+00:00 sthen 2012-11-30T21:20:24+00:00 urn:sha1:16bde10a05cda2c9dee534fd96ec70280d88b402 and include sha1 signatures for all certs (some were missing). No certificate changes, this is just for consistency. ok beck@ Remove retired Thawte/Verisign certificates. 2012-11-30T18:19:42+00:00 sthen 2012-11-30T18:19:42+00:00 urn:sha1:c3e74e2b3bf9fa43189627ce3848e4b407133920 Remove intermediate GoDaddy certificate, this file should just contain roots. ok beck@ phessler@ On amd64 OPENSSL_cpuid_setup and OPENSSL_ia32cap_P are now hidden so we don't 2012-10-31T11:19:35+00:00 kettenis 2012-10-31T11:19:35+00:00 urn:sha1:32d6b9fd8bf5ca2c2be1fa08a2528c8631540b9a have to go through the PLT/GOT to get at them anymore. In fact going through the GOT now fails since we no longer have a GOT entry for OPENSSL_ia32cap_P. Fixes the problem spotted by jasper@ and sthen@. Based on a diff from mikeb@ who did most of the actual work of tracking down the issue. ok millert@, mikeb@ Restore r1.10, lost during last update: 2012-10-22T17:11:37+00:00 miod 2012-10-22T17:11:37+00:00 urn:sha1:e20093d61c475a4cd15e9e663f32b4d0f86f7fc7 Disable use of dladdr() on a.out arches, they do not provide it (yet); Makefile and header changes for OpenSSL-1.0.1c 2012-10-13T21:31:56+00:00 djm 2012-10-13T21:31:56+00:00 urn:sha1:3ad9227df9edaac3e94f314891deeb4d52d16b4a major cranks