| Commit message (Collapse) | Author | Files | Lines |
|
signatures.
This is caused by an attempt to do fast modular arithmetic, which
introduces branches that leak information regarding secret values.
Issue identified and reported by Keegan Ryan of NCC Group.
ok beck@ tb@
|
|
|
|
|
|
Remove incorrect NULL checks in DH_set0_key().
Reported by Ondrej Sury, LibreSSL-portable issue #92.
ok inoguchi, jsing
|
|
This was inadvertently clearing the keypair, which includes the OCSP staple
and pubkey hash - if an application called tls_configure() followed by
tls_config_clear_keys(), this would prevent OCSP staples from working.
ok beck@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
from matt schwartz
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Issue notice by Christian Heimes <christian@python.org>
ok deraadt@ jsing@
|
|
* Say more precisely what OPENSSL_config(3) and OPENSSL_no_config(3) do.
* Revert the deprecation notice for them, nothing wrong with them.
* Document OPENSSL_INIT_LOAD_CONFIG.
* Deprecate OpenSSL_add_all_algorithms(3), it's now automatic.
* Add OpenSSL_add_all_algorithms(3) HISTORY.
Substantial feedback and OK beck@.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Produced using curl's make-ca-bundle.pl and then reformatted with our
format-pem.pl from:
https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
OK benno@. juanfra agrees with syncing with Mozilla. No objections received.
|
|
"o=" in their subject.
|
|
|
|
|
|
|
|
|
|
|
|
|