openbsd/src/lib, branch OPENBSD_3_1

Bring back these two files to the 3.1 branch, after the latest libssl update

2003-05-25T22:49:37+00:00

destroyed them by mistake. Sorry for the inconvenience, 3.1-STABLE should build again now.

Errata #025 (markus):

2003-03-19T23:25:41+00:00

Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS

Errata #024 (markus):

2003-03-19T01:05:22+00:00

Enforce blinding on RSA operations involving private keys.

MFC (markus@):

2003-02-23T16:16:02+00:00

check for size < 0 when allocating memory, from openssl (-r1.34)

Errata 021:

2003-02-22T17:46:50+00:00

security fix from openssl 0.9.7a: In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078) adapted from a patch from Ryan W. Maple, via markus@

Apply http://www.isc.org/products/BIND/patches/bind4910.diff

2002-11-14T23:34:39+00:00

Fixes bugs listed in http://www.isc.org/products/BIND/bind-security.html

Disable the engine stuff

2002-09-26T22:08:25+00:00

Pull in patch from current:

2002-09-06T05:46:51+00:00

Fix (itojun): allocate 64K recieve buffer for DNS responses.

Pull in patch from current:

2002-08-05T19:23:24+00:00

Better fixes from openssl cvs; from markus@

Pull in patch from current:

2002-07-31T16:40:07+00:00

Fix (deraadt): permit calloc(0, N) and calloc(N, 0) -- malloc(0) does the right thing