openbsd/src/lib, branch libressl-v2.4.1 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.1 2016-06-06T23:37:37+00:00 Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix. 2016-06-06T23:37:37+00:00 tedu 2016-06-06T23:37:37+00:00 urn:sha1:0b9d68ba4686a5c96c6c3285a4974e5db61ca786 Mistake noted by Billy Brumley. Many thanks. Correct a problem that prevents the DSA signing algorithm from running 2016-06-06T10:00:04+00:00 beck 2016-06-06T10:00:04+00:00 urn:sha1:228457974024ddf04bfe0e8cd259f8ed50bf30fd in constant time even if the flag BN_FLG_CONSTTIME is set. This issue was reported by Cesar Pereida (Aalto University), Billy Brumley (Tampere University of Technology), and Yuval Yarom (The University of Adelaide and NICTA). The fix was developed by Cesar Pereida. LibreSSL 2.4.1 2016-06-06T09:50:15+00:00 bcook 2016-06-06T09:50:15+00:00 urn:sha1:ab1edca4c21ed030bae72c16df3935ef7479cf23 Fix typo; the period should be outside the parens. From Michael McConville 2016-06-02T15:07:34+00:00 millert 2016-06-02T15:07:34+00:00 urn:sha1:91b1b86d4c340f75fbf72931ad3500149c41a45f deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final. 2016-05-30T13:42:54+00:00 beck 2016-05-30T13:42:54+00:00 urn:sha1:5841b6a630957adeb6dc4dbe8ff11ddc224d3de4 14 years ago these were changed in OpenSSL to be the same as the _ex functions. We use the _ex functions only internally to ensure it is obvious the ctx must be cleared. ok bcook@ The icdb magic number doesn't need to be visible to static links 2016-05-30T03:06:58+00:00 guenther 2016-05-30T03:06:58+00:00 urn:sha1:699bfceb6f3dc2a6d562a04cb2e321708af1faca ok tedu@ Remove dead support for changing BDB hash algorithm and cache of alternatives 2016-05-29T20:47:49+00:00 guenther 2016-05-29T20:47:49+00:00 urn:sha1:a7d48f2c5cfcdda763584971500cd5b275094529 ok natano@ millert@ deraadt@ Prefer AF_* over PF_* and 'address family' over 'protocol family' 2016-05-29T06:01:24+00:00 guenther 2016-05-29T06:01:24+00:00 urn:sha1:4748ef406f88568af5dc81963f80fcb0ba56c02a ok jung@ rcmd(3) and rcmdsh(3) use getaddrinfo(3) not gethostbyname(3). 2016-05-28T15:48:30+00:00 millert 2016-05-28T15:48:30+00:00 urn:sha1:dbcd27100a2df34cadd7a9ba529fe2697ab44765 Use getaddrinfo() instead of the non-standard gethostbyname2(). 2016-05-28T15:46:00+00:00 millert 2016-05-28T15:46:00+00:00 urn:sha1:bc4d67dba56c497c4f04fd3fec21cce6bd9268ea OK deraadt@ jca@ jung@ florian@