Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | MFC, fix by moritz:OPENBSD_4_0 | henning | 2007-10-11 | 1 | -15/+12 |
| | | | | The SSL_get_shared_ciphers() function contains an off-by-one overflow. | ||||
* | MFC: | brad | 2006-11-02 | 12 | -2/+84 |
| | | | | | | | Fix by pvalchev@ openssl security fixes, diff from markus@, ok & "commit it" djm@ http://www.openssl.org/news/secadv_20060928.txt for more | ||||
* | This commit was manufactured by cvs2git to create branch 'OPENBSD_4_0'. | cvs2svn | 2006-09-09 | 692 | -180171/+0 |
| | |||||
* | fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339; | djm | 2006-09-09 | 2 | -0/+34 |
| | | | | ok beck@ miod@ | ||||
* | no point mentioning functions if we have nothing useful to say | jmc | 2006-08-05 | 1 | -13/+1 |
| | | | | | | about them; ok djm | ||||
* | wording/grammar tweaks; | jmc | 2006-07-26 | 1 | -3/+4 |
| | |||||
* | better macros; | jmc | 2006-07-26 | 1 | -6/+6 |
| | |||||
* | document `iv'; | jmc | 2006-07-26 | 1 | -1/+4 |
| | | | | | from eren elci; tweaked by djm ok djm | ||||
* | updates from nicholas marriott; | jmc | 2006-07-25 | 1 | -5/+9 |
| | | | | re-worded and ok djm | ||||
* | allocate gsalt large enough; from Matthew R. Dempsky <mrd at alkemio | otto | 2006-07-04 | 1 | -2/+2 |
| | | | | dot org>; ok djm@ deraadt@ | ||||
* | sync with openssl-0.9.7j docs; | jmc | 2006-06-27 | 1 | -9/+9 |
| | |||||
* | crank shlib_version | djm | 2006-06-27 | 4 | -6/+7 |
| | |||||
* | resolve conflicts | djm | 2006-06-27 | 317 | -4778/+8553 |
| | |||||
* | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2006-06-27 | 7 | -15/+882 |
|\ | | | | | branch. | ||||
| * | import of openssl-0.9.7j | djm | 2006-06-27 | 116 | -2104/+4130 |
| | | |||||
| * | This commit was manufactured by cvs2git to create branch 'unlabeled-1.1.1'. | cvs2svn | 2005-05-10 | 1 | -0/+1541 |
| | | |||||
* | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2006-06-27 | 164 | -379/+27277 |
|\ \ | | | | | | | branch. | ||||
| * | | import of openssl-0.9.7j | djm | 2006-06-27 | 380 | -3153/+32917 |
| | | | |||||
* | | | This commit was generated by cvs2git to track changes on a CVS vendor | djm | 2006-06-27 | 4 | -0/+870 |
|\ \ \ | | | | | | | | | branch. | ||||
| * | | | import of openssl-0.9.7j | djm | 2006-06-27 | 4 | -0/+870 |
| | | | | |||||
| * | | | This commit was manufactured by cvs2git to create branch 'OPENSSL'. | cvs2svn | 2005-05-10 | 1 | -0/+1541 |
| | | | | |||||
* | | | | add class 1 and class 3 root certificates from CAcert.org. ok beck@ | jakob | 2006-06-12 | 1 | -0/+268 |
| | | | | |||||
* | | | | potential fd leak (we will fix this before we move to cloning) | deraadt | 2006-06-08 | 2 | -2/+6 |
| | | | | |||||
* | | | | remove expired certificates. ok beck@ | jakob | 2006-06-07 | 1 | -541/+0 |
| | | | | |||||
* | | | | update a couple of existing CAs that has been changed. ok beck@ | jakob | 2006-06-07 | 1 | -105/+87 |
| | | | | |||||
* | | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort by | jakob | 2006-06-07 | 1 | -2551/+2356 |
| | | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@ | ||||
* | | | | back out last patch due to updated committed prematurely | jakob | 2006-06-07 | 1 | -2356/+2551 |
| | | | | |||||
* | | | | reformat using 'openssl x509 -text -fingerprint -sha1' and sort by | jakob | 2006-06-07 | 1 | -2551/+2356 |
| | | | | | | | | | | | | | | | | 'openssl x509 -hash'. ok beck@ | ||||
* | | | | Fix 'double by a factor of two' and make cache options a bit more | pedro | 2006-06-06 | 1 | -4/+4 |
| | | | | | | | | | | | | | | | | descriptive while at it, input and okay jmc@ | ||||
* | | | | strtoul() -> strtonum(). Also change iflag to unsigned int, since | ray | 2006-06-02 | 1 | -23/+21 |
| | | | | | | | | | | | | | | | | | | | | | | | | sleep takes an unsigned integer. OK moritz@, jaredy@, and dhill@ | ||||
* | | | | start sentence with a capital letter; | jmc | 2006-06-01 | 1 | -2/+2 |
| | | | | |||||
* | | | | fix a !foo & bar. | thib | 2006-05-19 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | ok miod@, tedu@, pedro@ | ||||
* | | | | move an option to the right place; | jmc | 2006-05-17 | 1 | -2/+2 |
| | | | | |||||
* | | | | Don't forget to return 0 on success, doh. | otto | 2006-05-16 | 2 | -2/+4 |
| | | | | |||||
* | | | | Try harder to trigger an exception. On architectures where floating-point | kettenis | 2006-05-15 | 1 | -1/+7 |
| | | | | | | | | | | | | | | | | | | | | | | | | exceptions are deferred, we might not see the exception before another floating-point instruction is executed. This is especially true on the i387 where we don't see underflow/overflow until the result is stored into memory. | ||||
* | | | | Fix the second malloc_ulimit regression: maintaining the free list | otto | 2006-05-14 | 1 | -3/+12 |
| | | | | | | | | | | | | | | | | | | | | | | | | requires memory; try to make sure we have it. If all fails, leak instead of crash. Test case originally found by cloder@, fix tested by many. | ||||
* | | | | Add a -hex option to 'rand' to output hexadecimal output. | matthieu | 2006-05-14 | 2 | -2/+24 |
| | | | | | | | | | | | | | | | | ok djm@ miod@, man page help from jmc@. | ||||
* | | | | remove an 'is' from the comment to make the sentence correct. | fkr | 2006-05-12 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | ok jmc@, mbalmer@ | ||||
* | | | | Convert do {} while loop -> while {} for clarity. No binary change | millert | 2006-05-05 | 2 | -10/+10 |
| | | | | | | | | | | | | | | | | on most architectures. From Oliver Smith. OK deraadt@ and henning@ | ||||
* | | | | backport checks for degenerate Diffie-Hellman public exponents from | djm | 2006-05-04 | 9 | -1/+73 |
| | | | | | | | | | | | | | | | | | | | | OpenSSL-0.9.8a, where they were added without a corresponding patch to 0.9.7 or an advisory! ok theo@ markus@ | ||||
* | | | | strtonum does not require limits.h | tedu | 2006-04-25 | 1 | -2/+1 |
| | | | | | | | | | | | | | | | | spotted by ray some time ago | ||||
* | | | | Do not leave an hole in the directory list if allocation of the | otto | 2006-04-24 | 1 | -11/+32 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | region succeeds, but allocation a required page dir failed. This can happen if we're really close to ulimit after allocation the region of the size requested. See malloc_ulimit1 regress test. Tested by many; thanks. | ||||
* | | | | Hook new ulimit test cases | otto | 2006-04-18 | 1 | -2/+2 |
| | | | | |||||
* | | | | near ulimit test case 2 | otto | 2006-04-18 | 2 | -0/+46 |
| | | | | |||||
* | | | | Near ulimit test case 1 | otto | 2006-04-18 | 2 | -0/+48 |
| | | | | |||||
* | | | | delint; original from deraadt@ with fixes from tdeval@ and me; | otto | 2006-04-18 | 1 | -43/+60 |
| | | | | | | | | | | | | | | | | tested by quite a few developers. ok deraadt@ | ||||
* | | | | Clarify strlcpy code by explicitly naming variable `len' and | ray | 2006-04-18 | 1 | -5/+6 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | separating out each step. Inspired during miscommunication with tedu@. OK deraadt@ | ||||
* | | | | fix badly broken code. okay millert@, deraadt@ | espie | 2006-04-17 | 1 | -7/+7 |
| | | | | |||||
* | | | | Remove str2number(), use strtonum(3) instead. | ray | 2006-04-14 | 1 | -44/+20 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix some type mismatches. Replace magic numbers. Remove superfluous strlen(3) calls. Earlier diff OK kjell@, OK deraadt@ | ||||
* | | | | POSIX says tdelete() returns the parent of the deleted node. Sadly the | otto | 2006-04-04 | 1 | -1/+9 |
| | | | | | | | | | | | | | | | | | | | | | | | | root node doesn't have a parent, and POSIX does not say what should be done in that case. Warn developers that different implementations may do different things. |