| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
follow soon.
Tweaks from an ok jim@
|
|
|
|
|
|
| |
#if OPENSSL_SYS_NOTYOURS
<whole file>
#endif
|
|
|
|
| |
ok deraadt@
|
| |
|
|
|
|
| |
ok beck deraadt
|
| |
|
|
|
|
|
|
| |
which did shutdown + close, all nasty and surprising. Use the raw
syscalls that everyone knows the behaviour of.
ok beck matthew
|
|
|
|
| |
ok deraadt@
|
|
|
|
|
| |
noticed by mattheew and deraadt
ok deraadt@
|
|
|
|
| |
ok deraadt@
|
|
|
|
| |
ok deraadt@
|
|
|
|
| |
ok miod@, deraadt@
|
|
|
|
|
|
|
| |
know that MS_STATIC doesn't mean it is static? How far can lies
and half-truths be layered? I wonder if anyone got fooled, and
actually returned a pointer..
ok beck
|
| |
|
| |
|
|
|
|
| |
ok deraadt@
|
|
|
|
|
| |
systems, most of which in any sane world will want to do something
more modern anyways.
|
| |
|
|
|
|
| |
ok miod@ deraadt@
|
|
|
|
|
|
|
|
|
| |
relevant anymore. OpenSSL should have a better way to include 3rd
party engines: either completely and free or external. But including
a wrapper for a non-free wrapper in the code base does not make much
sense and could also be provided by the vendor.
ok deraadt@
|
|
|
|
|
|
|
|
|
| |
non-free libraries. OpenSSL should have a better way to include 3rd
party engines: either completely free or external. But including a
wrapper for a non-free wrapper in the code base does not make much
sense and could also be provided by the vendor.
ok deraadt@
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
hardware.
The vendor_defns/cswift.h does not specify a copyright and
theoretically defaults to the OpenSSL license, but it also mentions
that it includes parts that have been "clipped" from CryptoSwift's
proprietary headers. This file should better include an explicit
copyright statement or mention OpenSSL's library instead of the
ambiguous "Attribution notice".
ok deraadt@
|
|
|
|
|
|
|
|
|
|
|
|
| |
The vendor_defns/sureware.h file by Baltimore Technologies Ltd. has a
copyright that does not grant rights!
Vendor files should either include a compatible license in the
copyright statement or use OpenSSL's defaults, but adding a copyright
statement without any terms is not acceptable. It should not have
been included in the first place.
ok deraadt@
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The vendor_defns/hw_ubsec.h file has a copyright that does not grant rights!
Vendor files should either include a compatible license in the
copyright statement or use OpenSSL's defaults, but adding a copyright
statement without any terms is not acceptable. It should not have
been included in the first place.
(The ubsec(4) kernel driver is not affected by this change)
ok deraadt@
|
|
|
|
|
|
| |
old PCI accelerator that was EOL'ed in 2005.
ok deraadt@
|
| |
|
| |
|
|
|
|
| |
ok miod
|
|
|
|
| |
ok miod
|
|
|
|
| |
by anything in userland.
|
|
|
|
|
|
| |
so that libssl no longer need to access the non-external headers of libcrypto
to build.
No library bump, riding upon the recent update.
|
|
|
|
| |
and libssl major (ssl_check_clienthello_tlsext split into two functions)
|
| |
|
| |
|
|\
| |
| | |
branch.
|
| | |
|
| | |
|
|\ \
| | |
| | | |
branch.
|
| | | |
|
| | | |
|
|\ \ \
| | | |
| | | | |
branch.
|
| | | | |
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
as configuration files; split manpages and .pc files between libcrypto and
libssl.
No functional change, only there to make engineering easier, and libcrypto
sources are still found in libssl/src/crypto at the moment.
ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects.
|
| | | | |
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
issue. Apply that version. Maybe someday upstream will wake up and then
we can have the same code.
https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest
|
| | | | |
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
I am completely blown away that the same IETF that cannot efficiently
allocate needed protocol, service numbers, or other such things when
they are needed, can so quickly and easily rubber stamp the addition
of a 64K Covert Channel in a critical protocol. The organization
should look at itself very carefully, find out how this this happened,
and everyone who allowed this to happen on their watch should be
evicted from the decision making process. IETF, I don't trust you.
ok tedu markus
|
| | | |
| | | |
| | | |
| | | | |
ok deraadt
|
| | | |
| | | |
| | | |
| | | | |
ok benno deraadt
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Notably this removes CAcert who it turns out have strict requirements on
redistribution (http://www.cacert.org/policy/RootDistributionLicense.php)
which we don't meet.
|