openbsd/src/lib/libssl, branch OPENBSD_5_5_BASE

This commit was manufactured by cvs2git to create tag 'OPENBSD_5_5_BASE'.

2014-02-27T21:04:58+00:00

SECURITY fixes backported from openssl-1.0.1f. ok mikeb@

2014-02-27T21:04:57+00:00

CVE-2013-4353 NULL pointer dereference with crafted Next Protocol Negotiation record in TLS handshake. Upstream: 197e0ea CVE-2013-6449 Fix crash with crafted traffic from a TLS 1.2 client. Upstream: ca98926, 0294b2b CVE-2013-6450 Fix DTLS retransmission from previous session. Upstream: 3462896

Install a bunch more of OpenSSL manpages. ok deraadt@

2013-12-23T00:09:22+00:00

Reliability fix for SHA384 SSL/TLS ciphers on strict alignment

2013-12-19T22:09:26+00:00

architectures. ok miod@ djm@ Upstream patch: commit cdd1acd788020d2c525331da1712ada778f1373c Author: Andy Polyakov Date: Wed Dec 18 21:27:35 2013 +0100

Switch time_t, ino_t, clock_t, and struct kevent's ident and data

2013-08-13T05:52:16+00:00

members to 64bit types. Assign new syscall numbers for (almost all) the syscalls that involve the affected types, including anything with time_t, timeval, itimerval, timespec, rusage, dirent, stat, or kevent arguments. Add a d_off member to struct dirent and replace getdirentries() with getdents(), thus immensely simplifying and accelerating telldir/seekdir. Build perl with -DBIG_TIME. Bump the major on every single base library: the compat bits included here are only good enough to make the transition; the T32 compat option will be burned as soon as we've reached the new world are are happy with the snapshots for all architectures. DANGER: ABI incompatibility. Updating to this kernel requires extra work or you won't be able to login: install a snapshot instead. Much assistance in fixing userland issues from deraadt@ and tedu@ and build assistance from todd@ and otto@

Remove no longer needed vax CFLAGS workarounds.

2013-07-13T16:34:43+00:00

VAX ELF userland bits. Consists mostly of register prefix additions.

2013-07-05T21:10:50+00:00

Switch to using unhyphenated VIA padlock mnemonics. VIA abandoned the

2013-05-30T15:37:51+00:00

hyphen in their official programming guide sometime between 2003 and 2005, and Clang's integrated assembler does not support hyphenated mnemonics. ok jsg, deraadt

cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt

2013-02-14T15:11:44+00:00

from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@

remove ACSS, crank libcrypto major; ok markus@ deraadt@

2013-01-26T06:10:22+00:00