openbsd/src/lib, branch libressl-v2.2.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.2.0 2015-06-11T16:02:05+00:00 Avoid an infinite loop that can occur when verifying a message with an 2015-06-11T16:02:05+00:00 jsing 2015-06-11T16:02:05+00:00 urn:sha1:9d6d7f7cdb30dbe38e9e9706b374fd26c1ca588d unknown hash function OID. Diff based on OpenSSL. Fixes CVE-2015-1792 (however, this code is not enabled/built in LibreSSL). ok doug@ miod@ Avoid a potential out-of-bounds read in X509_cmp_time(), due to missing 2015-06-11T15:58:53+00:00 jsing 2015-06-11T15:58:53+00:00 urn:sha1:652913e0fc47c01c7ce25e6f73435f2bf88f6a2e length checks. Diff based on changes in OpenSSL. Fixes CVE-2015-1789. ok doug@ Avoid an infinite loop that can be triggered by parsing an ASN.1 2015-06-11T15:55:28+00:00 jsing 2015-06-11T15:55:28+00:00 urn:sha1:095e36cd429c313ee8361e8877bc677116a2a2ce ECParameters structure that has a specially malformed binary polynomial field. Issue reported by Joseph Barr-Pixton and fix based on OpenSSL. Fixes CVE-2015-1788. ok doug@ miod@ Link ssl and crypto via BSDOBJDIR, works with native and cross builds 2015-06-05T21:52:01+00:00 tobiasu 2015-06-05T21:52:01+00:00 urn:sha1:020815bd7a9c6eeda60d31af91ca5813e28b31d5 ok mpi@ Fix library search path so we link against the freshly built libcrypto.so 2015-06-05T21:42:37+00:00 tobiasu 2015-06-05T21:42:37+00:00 urn:sha1:8ce46ae0e138460a408afc9e1c03d795da02291e instead of a stale one. ok miod@ mpi@ force reseeding if pid has changed. 2015-06-04T19:26:39+00:00 eric 2015-06-04T19:26:39+00:00 urn:sha1:3264ecb55a0bdb0ed465192d7fa83ecd99a9998f ok deraadt@ Use a relative path against BSDOBJDIR to pick libcrypto; makes cross-lib 2015-05-26T19:38:13+00:00 miod 2015-05-26T19:38:13+00:00 urn:sha1:19fa1f9c8cb339119eed198792a4b256a71a1e1e work again. Add OPENSSL_NO_EGD to opensslfeatures.h. 2015-05-26T03:05:26+00:00 bcook 2015-05-26T03:05:26+00:00 urn:sha1:3fd29af5eddee4775e51770aa2f8323d34c0759b Since RAND_egd has been removed from LibreSSL, simplify porting software that relies on it. See https://github.com/libressl-portable/openbsd/pull/34 from Bernard Spil, ok deraadt@ Make SSL_CIPHER_get_bits() report ChaCha20-Poly1305 ciphers as using 2015-05-25T21:35:35+00:00 guenther 2015-05-25T21:35:35+00:00 urn:sha1:715676ba7476241561ad839bba86d0d21a9c4e3a 256bit keys problem noted by Tim Kuijsten (info (at) netsend.nl) ok deraadt@ miod@ bcook@ Maximilian dot Fillinger at uni-duesseldorf dot de 2015-05-24T15:44:52+00:00 schwarze 2015-05-24T15:44:52+00:00 urn:sha1:72138e7dd9423eb110e858e00b54b32be6b5aa87 starts helping with the pod2mdoc(1)-based conversion of LibreSSL crypto manuals from perlpod(1) to mdoc(7). Here comes the first file, slightly tweaked by me.