Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Oops, revert changes commited by mistake. The previous commit was supposed | miod | 2014-08-07 | 1 | -9/+12 |
| | | | | to only apply to s23_srvr.c. | ||||
* | When you expect a function to return a particular value, don't put a comment | miod | 2014-08-07 | 1 | -12/+9 |
| | | | | | | | | | | | saying that you expect it to return that value and compare it against zero because it is supposedly faster, for this leads to bugs (especially given the high rate of sloppy cut'n'paste within ssl3 and dtls1 routines in this library). Instead, compare for the exact value it ought to return upon success. ok deraadt@ | ||||
* | decompress libssl. ok beck jsing | tedu | 2014-07-10 | 1 | -10/+1 |
| | |||||
* | convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoring | tedu | 2014-06-19 | 1 | -2/+2 |
| | | | | | | libc interfaces over libcrypto interfaces. for now we also prefer timingsafe_memcmp over timingsafe_bcmp, even when the latter is acceptable. ok beck deraadt matthew miod | ||||
* | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 |
| | |||||
* | BUF_MEM_grow_clean() takes a size_t as the size argument. Remove false comments | miod | 2014-05-31 | 1 | -8/+2 |
| | | | | | | | mentioning it's an int, bogus (int) casts and bounds checks against INT_MAX (BUF_MEM_grow_clean has its own integer bounds checks). ok deraadt@ | ||||
* | ECDH and ECDSA will not work overly well if there is no EC, so unifdef | jsing | 2014-05-31 | 1 | -2/+0 |
| | | | | | | OPENSSL_NO_EC. ok tedu@ | ||||
* | Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS and | jsing | 2014-05-30 | 1 | -2/+2 |
| | | | | | | SSL_USE_TLS1_2_CIPHERS. Largely based on OpenSSL head. | ||||
* | There is no point in checking if a pointer is non-NULL before calling free, | jsing | 2014-05-28 | 1 | -8/+4 |
| | | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@ | ||||
* | Fix indentation, adding braces and combining a nested if to reduce depth | guenther | 2014-04-20 | 1 | -12/+14 |
| | |||||
* | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -4/+4 |
| | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | ||||
* | TANSTAAFL - delete the buf freelist code. if you need a better malloc, get | tedu | 2014-04-16 | 1 | -74/+4 |
| | | | | a better malloc. ok beck deraadt | ||||
* | First pass at applying KNF to the OpenSSL code, which almost makes it | jsing | 2014-04-14 | 1 | -354/+314 |
| | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5. | ||||
* | Flense a variety of windows support stuff, and a strange gettimeofday function. | beck | 2014-04-13 | 1 | -7/+0 |
| | | | | ok deraadt@ | ||||
* | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 1 | -6/+9 |
| | |||||
* | SECURITY fixes backported from openssl-1.0.1f. ok mikeb@ | jca | 2014-02-27 | 1 | -0/+7 |
| | | | | | | | | | | | | CVE-2013-4353 NULL pointer dereference with crafted Next Protocol Negotiation record in TLS handshake. Upstream: 197e0ea CVE-2013-6449 Fix crash with crafted traffic from a TLS 1.2 client. Upstream: ca98926, 0294b2b CVE-2013-6450 Fix DTLS retransmission from previous session. Upstream: 3462896 | ||||
* | cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt | markus | 2013-02-14 | 1 | -1/+1 |
| | | | | | from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@ | ||||
* | resolve conflicts | djm | 2012-10-13 | 1 | -3/+33 |
| | |||||
* | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -62/+253 |
| | |||||
* | resolve conflicts | djm | 2008-09-06 | 1 | -27/+14 |
| | |||||
* | merge 0.9.7b with local changes; crank majors for libssl/libcrypto | markus | 2003-05-12 | 1 | -7/+18 |
| | |||||
* | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 1 | -1/+1 |
| | |||||
* | OpenSSL 0.9.7 stable 2002 05 08 merge | beck | 2002-05-15 | 1 | -19/+55 |
| | |||||
* | openssl-engine-0.9.6a merge | beck | 2001-06-22 | 1 | -2/+2 |
| | |||||
* | openssl-engine-0.9.6 merge | beck | 2000-12-15 | 1 | -2/+2 |
| | |||||
* | OpenSSL 0.9.5 merge | beck | 2000-03-19 | 1 | -22/+142 |
| | | | | | | *warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs | ||||
* | OpenSSL 0.9.4 merge | beck | 1999-09-29 | 1 | -43/+42 |
| | |||||
* | Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build | ryker | 1998-10-05 | 1 | -0/+469 |
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible. |