Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Pull patch from -current:OPENBSD_3_2 | brad | 2003-10-01 | 5 | -6/+22 |
| | | | | | | | | SECURITY FIX Fixed by markus@ security fix from http://www.openssl.org/news/secadv_20030930.txt ok markus@ deraadt@ | ||||
* | MFC: | brad | 2003-08-03 | 1 | -8/+8 |
| | | | | | | | | | | Fix by millert@ Rename rootd to needslash and invert its value. This fixes the check for ENAMETOOLONG, though since we use strlcpy() and strlcat() this is not a big deal. Problem found by vincent@ ok deraadt@ | ||||
* | Errata #11 (markus): | margarida | 2003-03-19 | 1 | -13/+12 |
| | | | | Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS | ||||
* | Errata #11 (markus): | margarida | 2003-03-19 | 2 | -5/+30 |
| | | | | | | Enforce blinding on RSA operations involving private keys. millert@ markus@ ok | ||||
* | Pull patch from current: | margarida | 2003-02-22 | 2 | -0/+12 |
| | | | | | | | | Fix by markus@ check for size < 0 when allocating memory, from openssl (-r1.34) markus@ deraadt@ ok | ||||
* | Pull patch from current: | margarida | 2003-02-22 | 1 | -16/+31 |
| | | | | | | | | | | | | | Fix by markus@ security fix from openssl 0.9.7a: In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078) markus@ ok | ||||
* | Apply http://www.isc.org/products/BIND/patches/bind4910.diff | millert | 2002-11-14 | 1 | -22/+37 |
| | | | | Fixes bugs listed in http://www.isc.org/products/BIND/bind-security.html | ||||
* | This commit was manufactured by cvs2git to create branch 'OPENBSD_3_2'. | cvs2svn | 2002-09-26 | 650 | -167445/+0 |
| | |||||
* | do not install mdc2 man pages; markus ok | deraadt | 2002-09-26 | 1 | -18/+1 |
| | |||||
* | remove MDC2; patents | markus | 2002-09-26 | 5 | -14/+11 |
| | |||||
* | missing arg; peterw@ifost.org.au | deraadt | 2002-09-25 | 1 | -2/+2 |
| | |||||
* | remove rc5 | markus | 2002-09-25 | 2 | -218/+0 |
| | |||||
* | pull in fix from openssl-0.9.7-stable-SNAP-20020921: | markus | 2002-09-23 | 2 | -32/+10 |
| | | | | | | *) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller] | ||||
* | use arc4random instead of /dev/arandom, | markus | 2002-09-17 | 2 | -60/+22 |
| | | | | allows RAND_poll after chroot, ok deraadt, fgsch | ||||
* | undo local change, HMAC_Init() already does HMAC_CTX_init if(key && md) | markus | 2002-09-17 | 2 | -2/+0 |
| | |||||
* | add -elapsed to usage() for USE_TOD, too | markus | 2002-09-16 | 1 | -1/+1 |
| | |||||
* | sync with 0.9.7-beta3 | markus | 2002-09-16 | 2 | -0/+8 |
| | |||||
* | remove old files | markus | 2002-09-16 | 6 | -1680/+0 |
| | |||||
* | remove generated file (from -beta3) | markus | 2002-09-16 | 2 | -360/+0 |
| | |||||
* | Move __cleanup into mprotect'ed page to prevent unintentional modifications | dhartmei | 2002-09-14 | 5 | -27/+90 |
| | | | | similar to the atexit handlers. Idea and help deraadt@, ok deraadt@ | ||||
* | merge with openssl-0.9.7-stable-SNAP-20020911, | markus | 2002-09-14 | 153 | -1211/+2465 |
| | | | | | new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@ | ||||
* | This commit was generated by cvs2git to track changes on a CVS vendor | markus | 2002-09-12 | 25 | -26/+5522 |
|\ | | | | | branch. | ||||
| * | import openssl-0.9.7-stable-SNAP-20020911 (without idea) | markus | 2002-09-12 | 128 | -519/+6497 |
| | | |||||
* | | This commit was generated by cvs2git to track changes on a CVS vendor | markus | 2002-09-12 | 1 | -0/+621 |
|\ \ | | | | | | | branch. | ||||
| * | | import openssl-0.9.7-stable-SNAP-20020911 (without idea) | markus | 2002-09-12 | 41 | -331/+1189 |
| | | | |||||
| * | | import openssl-0.9.7-beta3 | markus | 2002-09-05 | 78 | -149/+765 |
| | | | |||||
| * | | import openssl-0.9.7-beta1 | markus | 2002-09-05 | 476 | -27019/+46811 |
| | | | |||||
| * | | This commit was manufactured by cvs2git to create branch 'unlabeled-1.1.1'. | cvs2svn | 2002-05-15 | 299 | -0/+64443 |
| | | | |||||
* | | | evp.h should not pull in all other header files, especially | markus | 2002-09-10 | 2 | -114/+0 |
| | | | | | | | | | | | | | | | | | | | | | since it's supposed to hid the specific ciphers. this change also avoids problems when evp is used together with kerberos (and <des.h>). ok deraadt@ | ||||
* | | | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 354 | -4344/+9951 |
| | | | |||||
* | | | ansi pedantic. ok deraadt@ | jakob | 2002-09-07 | 1 | -11/+12 |
| | | | |||||
* | | | missing include, ok theo | henning | 2002-09-06 | 1 | -1/+2 |
| | | | |||||
* | | | use socklen_t where needed; henning pvalchev ok | deraadt | 2002-09-06 | 2 | -5/+5 |
| | | | |||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | markus | 2002-09-05 | 8 | -6/+245 |
|\ \ \ | | |/ | |/| | branch. | ||||
| * | | import openssl-0.9.7-beta3 | markus | 2002-09-05 | 205 | -746/+5180 |
| | | | |||||
* | | | merge with 0.9.7-beta1 | markus | 2002-09-05 | 45 | -193/+119 |
| | | | |||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | markus | 2002-09-05 | 14 | -0/+1683 |
|\| | | | | | | | | branch. | ||||
| * | | import openssl-0.9.7-beta1 | markus | 2002-09-05 | 1098 | -51321/+113317 |
| | | | |||||
| * | | This commit was manufactured by cvs2git to create branch 'openssl'. | cvs2svn | 2002-05-15 | 976 | -0/+214439 |
| | | | |||||
* | | | more cruft | markus | 2002-09-04 | 2 | -4/+0 |
| | | | |||||
* | | | more cruft. | markus | 2002-09-04 | 9 | -446/+0 |
| | | | |||||
* | | | sync formatting with 0.9.7 | markus | 2002-09-04 | 2 | -4/+2 |
| | | | |||||
* | | | no need to set $SHELL | markus | 2002-09-04 | 1 | -1/+1 |
| | | | |||||
* | | | execute bourne shell scripts with 'sh' and not with $SHELL | markus | 2002-09-04 | 86 | -90/+90 |
| | | | |||||
* | | | sync tests with 0.9.7-beta1 | markus | 2002-09-03 | 12 | -46/+138 |
| | | | |||||
* | | | remove whitespace changes (keep diffs to 0.9.7-beta1 minimal) | markus | 2002-09-03 | 10 | -10/+8 |
| | | | |||||
* | | | sync these files with openssl-0.9.7-beta1, too | markus | 2002-09-03 | 15 | -177/+359 |
| | | | |||||
* | | | build OpenSSL without symlink trees: | markus | 2002-09-03 | 14 | -1065/+2806 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * manpage related things moved to src/libssl/man/Makefile * there are now 3 obj directories src/libssl/{crypto,ssl,man}/ instead of one single src/libssl/obj * instead of running Configure (with generates lots of symlinks, and opensslconf.h) this patch stores pre-computed opensslconf.h files in src/libssl/crypto/arch * requires a make includes before the library can be built * libssl and libcrypto can be build separately (e.g. cd src/libssl/ssl && make obj && make) * make depend is now supported * no more symlink trees tested by miod@ and fries@ | ||||
* | | | evp_test.o should not be included in libcrypto (it defines _main !!) | markus | 2002-09-03 | 1 | -1/+1 |
| | | | | | | | | | | | | no version change for the shared libs; ok deraadt@ | ||||
* | | | not part of OpenSSL 0.9.7 | markus | 2002-09-03 | 3 | -39/+0 |
| | | |