openbsd/src/lib, branch libressl-v2.4.3 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.4.3 2016-09-22T18:37:36+00:00 MFC: Avoid falling back to a weak digest for (EC)DH when using SNI with 2016-09-22T18:37:36+00:00 jsing 2016-09-22T18:37:36+00:00 urn:sha1:f02c35bac5b3e3187f9d1d489d25f8d67c1b7fa4 libssl. MFC: Avoid unbounded memory growth in libssl, which can be triggered by a 2016-09-22T18:36:57+00:00 jsing 2016-09-22T18:36:57+00:00 urn:sha1:37e72fb6e08643a1c5248bdac41896aaf7475191 TLS client repeatedly renegotiating and sending OCSP Status Request TLS extensions. bump version for 2.4.3 2016-09-22T05:06:06+00:00 bcook 2016-09-22T05:06:06+00:00 urn:sha1:6f54bb436e4633abd476c96a5007054cc7058672 back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Encrypt/DecryptFinal 2016-09-22T04:50:19+00:00 bcook 2016-09-22T04:50:19+00:00 urn:sha1:d76de4cceee8338ec29e0cafae1d5541066bc49e Software that refers to ctx after calling Final breaks with these changes. revert parts of 1.31. ok jsing@ This commit was manufactured by cvs2git to create branch 'OPENBSD_6_0'. 2016-07-23T19:31:37+00:00 cvs2svn admin@example.com 2016-07-23T19:31:37+00:00 urn:sha1:f62463c2c218cf95320c8841ba552dc2c8ce4738 don't mix code and decls, ok tedu@ 2016-07-18T01:04:52+00:00 bcook 2016-07-18T01:04:52+00:00 urn:sha1:c7c0c4b1ecb389c009d446c6c9253677915896dc use memset to initialize the union 2016-07-17T22:01:01+00:00 bcook 2016-07-17T22:01:01+00:00 urn:sha1:c5ec86df737ed666779cf51e5f3a89a62397e0de remove unused OPENSSL_NO_OBJECT case 2016-07-17T21:23:50+00:00 bcook 2016-07-17T21:23:50+00:00 urn:sha1:45c9aa3806e0d3ab3751cd424acd1b069b6d54ee ok tedu@ Initialize buffers before use, noted by Kinichiro Inoguchi. 2016-07-17T21:21:40+00:00 bcook 2016-07-17T21:21:40+00:00 urn:sha1:fdee4729e12ac97473d08c1a7e9d17c5468fe82c ok beck@ Clean up OCSP_check_validity() a bit more. 2016-07-16T16:14:28+00:00 beck 2016-07-16T16:14:28+00:00 urn:sha1:8109af5f2daf46b062aa3ffda9db6ff7889f818f - Return on first failure rather than continuing. - Don't compare times by comparing strings that possibly were not parsable as a time. ok deraadt@