Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | no space before label | tedu | 2014-05-29 | 1 | -18/+18 | |
| | ||||||
* | line up else better | tedu | 2014-05-29 | 1 | -5/+2 | |
| | ||||||
* | unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them. | tedu | 2014-05-29 | 1 | -40/+0 | |
| | | | | ok deraadt jsing | |||||
* | EVP_MD_CTX_create() calls malloc and can return NULL. However, only one of | jsing | 2014-05-28 | 1 | -0/+5 | |
| | | | | | | | the calls in libssl actually checks the return value before using it. Add NULL checks for the remaining three calls. ok miod@ | |||||
* | There is no point in checking if a pointer is non-NULL before calling free, | jsing | 2014-05-28 | 1 | -18/+9 | |
| | | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@ | |||||
* | Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much of | jsing | 2014-05-25 | 1 | -8/+0 | |
| | | | | | | | this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@ | |||||
* | DeIMPLEMENT libssl. Expand the IMPLEMENT_* macros since it is far more | jsing | 2014-05-24 | 1 | -3/+38 | |
| | | | | | | | | readable and one less layer of abstraction. Use C99 initialisers for clarity, grepability and to protect from future field reordering/removal. ok miod@ (tedu@ also thought it was a wonderful idea, beck@ also agreed, but ran away squealing since it reminded him of the VOP layer...) | |||||
* | Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now. | jsing | 2014-05-22 | 1 | -1/+0 | |
| | | | | ok beck@ miod@ | |||||
* | KSSL is dead... nuke KSSL_DEBUG from orbit. | jsing | 2014-05-20 | 1 | -7/+0 | |
| | | | | ok beck@ miod@ | |||||
* | Remove SRP and Kerberos support from libssl. These are complex protocols | tedu | 2014-05-05 | 1 | -258/+0 | |
| | | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | |||||
* | Fix indentation. | mcbride | 2014-04-24 | 1 | -211/+208 | |
| | ||||||
* | Make it compile again. | jsing | 2014-04-24 | 1 | -1/+1 | |
| | ||||||
* | More KNF, things that couldn't be verified with md5(1), and some whitespace | mcbride | 2014-04-24 | 1 | -45/+42 | |
| | | | | I missed on the first go around. | |||||
* | KNF | mcbride | 2014-04-24 | 1 | -636/+890 | |
| | ||||||
* | remove redundant asign. from David Hill | tedu | 2014-04-24 | 1 | -1/+0 | |
| | ||||||
* | Unifdef -UPKCS1_CHECK and remove SSL_OP_PKCS1_CHECK_[12], this is leftover | miod | 2014-04-23 | 1 | -6/+0 | |
| | | | | | | | | ``debug'' code from a 15+ years old bugfix and the SSL_OP_PKCS1_CHECK_* constants have had a value of zero since ages. No production code should use them. ok beck@ | |||||
* | more malloc/realloc/calloc cleanups; ok beck kettenis | deraadt | 2014-04-21 | 1 | -3/+1 | |
| | ||||||
* | More KNF and style consistency tweaks | guenther | 2014-04-19 | 1 | -4/+3 | |
| | ||||||
* | whack a bunch of disabled code. ok beck lteo | tedu | 2014-04-17 | 1 | -17/+3 | |
| | ||||||
* | no longer need to fool emacs indentation and other if (0) oddities. | tedu | 2014-04-17 | 1 | -6/+2 | |
| | ||||||
* | always build in RSA and DSA. ok deraadt miod | tedu | 2014-04-17 | 1 | -51/+0 | |
| | ||||||
* | quick pass at removing ability to disable sha256 and sha512. ok miod | tedu | 2014-04-17 | 1 | -4/+0 | |
| | ||||||
* | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -11/+11 | |
| | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||||
* | add back SRP. i was being too greedy. | tedu | 2014-04-16 | 1 | -0/+106 | |
| | ||||||
* | disentangle SRP code from TLS | tedu | 2014-04-16 | 1 | -106/+0 | |
| | ||||||
* | remove FIPS mode support. people who require FIPS can buy something that | tedu | 2014-04-15 | 1 | -3/+0 | |
| | | | | | meets their needs, but dumping it in here only penalizes the rest of us. ok miod | |||||
* | make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miod | tedu | 2014-04-14 | 1 | -11/+0 | |
| | ||||||
* | So the OpenSSL codebase does "get the time, add it as a random seed" | deraadt | 2014-04-14 | 1 | -2/+0 | |
| | | | | | | | in a bunch of places inside the TLS engine, to try to keep entropy high. I wonder if their moto is "If you can't solve a problem, at least try to do it badly". ok miod | |||||
* | First pass at applying KNF to the OpenSSL code, which almost makes it | jsing | 2014-04-14 | 1 | -1790/+1539 | |
| | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5. | |||||
* | Do not include "e_os.h" anymore. Simply pull in the necessary headers. | mpi | 2014-04-13 | 1 | -1/+1 | |
| | | | | ok miod@, deraadt@ | |||||
* | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 1 | -5/+6 | |
| | ||||||
* | resolve conflicts | djm | 2012-10-13 | 1 | -38/+359 | |
| | ||||||
* | OpenSSL 1.0.0f: merge | djm | 2012-01-05 | 1 | -3/+3 | |
| | ||||||
* | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 1 | -0/+3 | |
| | ||||||
* | Security fix for CVE-2010-4180 as mentioned in ↵ | jasper | 2010-12-15 | 1 | -0/+3 | |
| | | | | | | | | | | | http://www.openssl.org/news/secadv_20101202.txt. where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@ | |||||
* | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -162/+462 | |
| | ||||||
* | resolve conflicts | djm | 2009-01-09 | 1 | -5/+5 | |
| | ||||||
* | update to openssl-0.9.8i; tested by several, especially krw@ | djm | 2009-01-05 | 1 | -8/+34 | |
| | ||||||
* | resolve conflicts | djm | 2008-09-06 | 1 | -144/+877 | |
| | ||||||
* | resolve conflicts | djm | 2006-06-27 | 1 | -3/+3 | |
| | ||||||
* | resolve conflicts | djm | 2005-04-29 | 1 | -1/+6 | |
| | ||||||
* | merge 0.9.7d | markus | 2004-04-08 | 1 | -2/+2 | |
| | ||||||
* | more fixes from 0.9.7c, ok deraadt, cloder | markus | 2003-09-30 | 1 | -0/+1 | |
| | ||||||
* | Remove some double semicolons (hmm, do two semis equal a maxi?). | millert | 2003-08-06 | 1 | -1/+1 | |
| | | | | I've skipped the GNU stuff for now. From Patrick Latifi. | |||||
* | merge 0.9.7b with local changes; crank majors for libssl/libcrypto | markus | 2003-05-12 | 1 | -18/+34 | |
| | ||||||
* | pull in fix from openssl-0.9.7-stable-SNAP-20020921: | markus | 2002-09-23 | 1 | -16/+5 | |
| | | | | | | *) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller] | |||||
* | merge with openssl-0.9.7-stable-SNAP-20020911, | markus | 2002-09-14 | 1 | -2/+10 | |
| | | | | | new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@ | |||||
* | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 1 | -2/+2 | |
| | ||||||
* | sync with http://www.openssl.org/news/patch_20020730_0_9_7.txt | markus | 2002-07-30 | 1 | -0/+1 | |
| | | | | | (adds fix for unused kerberos and engine code, and some more assertions, as well as a 64bit integer string fix for conf_mod.c) | |||||
* | apply patches from OpenSSL Security Advisory [30 July 2002], | markus | 2002-07-30 | 1 | -0/+9 | |
| | | | | http://marc.theaimsgroup.com/?l=openssl-dev&m=102802395104110&w=2 |