openbsd/src/lib, branch OPENBSD_4_8

MFC:

2011-02-11T03:24:29+00:00

---------------------------- revision 1.8 date: 2011/02/10 22:40:27; author: djm; state: Exp; lines: +7 -1 fix for CVE-2011-0014 "OCSP stapling vulnerability"; ok markus@ jasper@ miod@ AFAIK nothing in base uses this, though apache2 from ports may be affected. ----------------------------

Security fix for CVE-2010-4180 as mentioned in http://www.openssl.org/news/secadv_20101202.txt.

2010-12-15T09:43:55+00:00

where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@

- Apply security fix for CVE-2010-3864.

2010-11-17T19:12:57+00:00

ok djm@ deraadt@

This commit was manufactured by cvs2git to create branch 'OPENBSD_4_8'.

2010-07-28T09:00:22+00:00

Sync hcreate(3) with NetBSD, adding some caveats.

2010-07-28T09:00:20+00:00

OK jmc

getopt_long.c replaced getopt.c 6+ years ago; we can retire

2010-07-22T19:31:53+00:00

the REPLACE_GETOPT macro, at long last ok millert@

Document new unsetenv() error returns.

2010-07-06T20:52:00+00:00

From Nicolas Legrand ; ok jmc@

getpeereid() can now be a library routine using getsockopt() with

2010-07-01T19:15:30+00:00

SOL_SOCKET and SO_PEERCRED, only issue being that it cannot return EFAULT for a page fault. The kernel code will soon be put into compat, and then in 10 years or so tedu will delete it. ok guenther millert

oops. Missed this from my aes-ni commit.

2010-07-01T17:44:57+00:00

AES-NI engine support for OpenSSL.

2010-07-01T17:44:20+00:00

This is code mostly picked up from upstream OpenSSL, or to be more exact a diff from David Woodhouse . Remember to make includes before doing a build! no objections from djm@ OK deraadt@, reyk@ (AES is about 4.25x faster on his x201 now)