Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | poison for X509_VERIFY_PARAM's | beck | 2018-04-06 | 1 | -27/+42 |
| | | | | | | | | | | | | Tighten up checks for various X509_VERIFY_PARAM functions, and allow for the verify param to be poisoned (preculding future successful cert validation) if the setting of host, ip, or email for certificate validation fails. (since many callers do not check the return code in the wild and blunder along anyway) Inspired by some discussions with Adam Langley. ok jsing@ | ||||
* | Call strlen() if name length provided is 0, like OpenSSL does. | beck | 2018-03-22 | 1 | -1/+3 |
| | | | | | Issue notice by Christian Heimes <christian@python.org> ok deraadt@ jsing@ | ||||
* | Please variable decl before code. | deraadt | 2017-12-09 | 1 | -2/+2 |
| | |||||
* | Remove prototypes from the public header for X509_VERIFY_PARAM functions | jsing | 2016-12-21 | 1 | -1/+6 |
| | | | | | | that were recently added but not intended to be made public at this stage. Discussed with beck@ | ||||
* | Commit a reminder that the default is not the default. This needs to | beck | 2016-11-06 | 1 | -1/+2 |
| | | | | | be revisited. ok jsing@ | ||||
* | use the correct function for free | bcook | 2016-11-06 | 1 | -2/+2 |
| | | | | ok beck@ | ||||
* | Part one of the alt chains changes, bring in newer modifications to | beck | 2016-11-05 | 1 | -69/+311 |
| | | | | | VERIFY_PARAMS - based on boringssl. ok jsing@ miod@ | ||||
* | X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the second | miod | 2014-09-29 | 1 | -1/+2 |
| | | | | | parameter, correctly set param->name to NULL after having freed it. ok bcook@ | ||||
* | Kill a bunch more BUF_strdup's - these are converted to have a check for | beck | 2014-07-22 | 1 | -2/+4 |
| | | | | | NULL before an intrinsic strdup. ok miod@ | ||||
* | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 1 | -3/+2 |
| | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | ||||
* | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 1 | -1/+2 |
| | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | ||||
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 |
| | |||||
* | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -2/+1 |
| | |||||
* | calloc instead of malloc/memset. from Benjamin Baier | tedu | 2014-05-25 | 1 | -2/+1 |
| | |||||
* | KNF. | jsing | 2014-04-20 | 1 | -75/+96 |
| | |||||
* | blunt force knf | tedu | 2014-04-18 | 1 | -73/+62 |
| | |||||
* | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -3/+3 |
| | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | ||||
* | import OpenSSL-1.0.0a | djm | 2010-10-01 | 1 | -10/+18 |
| | |||||
* | import of OpenSSL 0.9.8k | djm | 2009-04-06 | 1 | -3/+13 |
| | |||||
* | import openssl-0.9.8j | djm | 2009-01-09 | 1 | -1/+1 |
| | |||||
* | import of OpenSSL 0.9.8h | djm | 2008-09-06 | 1 | -0/+420 |