| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | tedu the SSL export cipher handling - since we do not have enabled export | jsing | 2014-07-09 | 1 | -27/+6 | |
| | | | | | | | ciphers we no longer need the flags or code to support it. ok beck@ miod@ | |||||
| * | fix the identical leak in three different files. | tedu | 2014-06-30 | 1 | -2/+3 | |
| | | | | | reported by Brent Cook, original diff by logan | |||||
| * | convert CRYPTO_memcmp to timingsafe_memcmp based on current policy favoring | tedu | 2014-06-19 | 1 | -2/+2 | |
| | | | | | | | libc interfaces over libcrypto interfaces. for now we also prefer timingsafe_memcmp over timingsafe_bcmp, even when the latter is acceptable. ok beck deraadt matthew miod | |||||
| * | In ssl3_send_newsession_ticket(), fix a memory leak in an error path. | miod | 2014-06-18 | 1 | -2/+4 | |
| | | ||||||
| * | tags as requested by miod and tedu | deraadt | 2014-06-12 | 1 | -1/+1 | |
| | | ||||||
| * | Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored since | jsing | 2014-06-11 | 1 | -2/+0 | |
| | | | | | | | OpenSSL 1.0.0. ok miod@ (a little while back) | |||||
| * | c-file-style hints, begone; ok beck | deraadt | 2014-06-11 | 1 | -1/+1 | |
| | | ||||||
| * | http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2016265dfbab162e ↵ | deraadt | 2014-06-07 | 1 | -4/+1 | |
| | | | | | | | | | | | | | | | | | | | | c30718b5e7480add42598158 Don't know the full story, but it looks like a "can't do random perfectly, so do it god awful" problem was found in 2013, and replaced with "only do it badly if a flag is set". New flags (SSL_MODE_SEND_SERVERHELLO_TIME and SSL_MODE_SEND_SERVERHELLO_TIME) were added [Ben Laurie?] to support the old scheme of "use time_t for first 4 bytes of the random buffer". Nothing uses these flags [ecosystem scan by sthen] Fully discourage use of these flags in the future by removing support & definition of them. The buflen < 4 check is also interesting, because no entropy would be returned. No callers passed such small buffers. ok miod sthen | |||||
| * | The DH_free, EC_KEY_free, EVP_PKEY_free and RSA_free functions all have | jsing | 2014-06-07 | 1 | -11/+6 | |
| | | | | | | implicit NULL checks, so there is no point ensuring that the pointer is non-NULL before calling them. | |||||
| * | Be selective as to when ChangeCipherSpec messages will be accepted. | jsing | 2014-06-05 | 1 | -2/+5 | |
| | | | | | | | | | | | | | | | | | | Without this an early ChangeCipherSpec message would result in session keys being generated, along with the Finished hash for the handshake, using an empty master secret. For a detailed analysis see: https://www.imperialviolet.org/2014/06/05/earlyccs.html This is a fix for CVE-2014-0224, from OpenSSL. This issue was reported to OpenSSL by KIKUCHI Masashi. Unfortunately the recent OpenSSL commit was the first we were made aware of the issue. ok deraadt@ sthen@ | |||||
| * | without overthinking it, replace a few memcmp calls with CRYPTO_memcmp | tedu | 2014-06-04 | 1 | -1/+1 | |
| | | | | | where it is feasible to do so. better safe than sorry. | |||||
| * | More manual OPENSSL_NO_EC and OPENSSL_NO_TLSEXT cleanup. | jsing | 2014-05-31 | 1 | -4/+4 | |
| | | ||||||
| * | TLS would not be entirely functional without extensions, so unifdef | jsing | 2014-05-31 | 1 | -27/+0 | |
| | | | | | | | OPENSSL_NO_TLSEXT. ok tedu@ | |||||
| * | Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS and | jsing | 2014-05-30 | 1 | -19/+13 | |
| | | | | | | | SSL_USE_TLS1_2_CIPHERS. Largely based on OpenSSL head. | |||||
| * | the comment says RAND_pseudo_bytes should be RAND_bytes. make it so. | tedu | 2014-05-29 | 1 | -6/+1 | |
| | | | | | ok deraadt | |||||
| * | unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them. | tedu | 2014-05-29 | 1 | -30/+0 | |
| | | | | | ok deraadt jsing | |||||
| * | There is no point in checking if a pointer is non-NULL before calling free, | jsing | 2014-05-28 | 1 | -6/+3 | |
| | | | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@ | |||||
| * | Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much of | jsing | 2014-05-25 | 1 | -19/+0 | |
| | | | | | | | | this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@ | |||||
| * | DeIMPLEMENT libssl. Expand the IMPLEMENT_* macros since it is far more | jsing | 2014-05-24 | 1 | -4/+38 | |
| | | | | | | | | | readable and one less layer of abstraction. Use C99 initialisers for clarity, grepability and to protect from future field reordering/removal. ok miod@ (tedu@ also thought it was a wonderful idea, beck@ also agreed, but ran away squealing since it reminded him of the VOP layer...) | |||||
| * | Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now. | jsing | 2014-05-22 | 1 | -1/+0 | |
| | | | | | ok beck@ miod@ | |||||
| * | In ssl3_send_certificate_request(), when adding the extra payload if | miod | 2014-05-18 | 1 | -1/+6 | |
| | | | | | | | | NETSCAPE_HANG_BUG is defined, make sure we BUF_MEM_grow() the buffer to accomodate for the payload size. Issue reported by David Ramos; ok beck@ | |||||
| * | Remove SRP and Kerberos support from libssl. These are complex protocols | tedu | 2014-05-05 | 1 | -317/+0 | |
| | | | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | |||||
| * | More KNF, things that couldn't be verified with md5(1), and some whitespace | mcbride | 2014-04-24 | 1 | -74/+92 | |
| | | | | | I missed on the first go around. | |||||
| * | Make libssl and libcrypto compile with -Werror | beck | 2014-04-23 | 1 | -1/+1 | |
| | | | | | ok miod@ | |||||
| * | more malloc/realloc/calloc cleanups; ok beck kettenis | deraadt | 2014-04-21 | 1 | -2/+1 | |
| | | ||||||
| * | More KNF and style consistency tweaks | guenther | 2014-04-19 | 1 | -4/+3 | |
| | | ||||||
| * | whack a bunch of disabled code. ok beck lteo | tedu | 2014-04-17 | 1 | -18/+0 | |
| | | ||||||
| * | always build in RSA and DSA. ok deraadt miod | tedu | 2014-04-17 | 1 | -16/+0 | |
| | | ||||||
| * | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -12/+12 | |
| | | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||||
| * | add back SRP. i was being too greedy. | tedu | 2014-04-16 | 1 | -0/+122 | |
| | | ||||||
| * | Thanks to the knobs in http://tools.ietf.org/html/rfc5746, we have a knob | beck | 2014-04-16 | 1 | -3/+1 | |
| | | | | | | | to say "allow this connection to negotiate insecurely". de-fang the code that respects this option to ignore it. ok miod@ | |||||
| * | disentangle SRP code from TLS | tedu | 2014-04-16 | 1 | -122/+0 | |
| | | ||||||
| * | strncpy(d, s, strlen(s)) is a special kind of stupid. even when it's right, | tedu | 2014-04-16 | 1 | -8/+9 | |
| | | | | | | it looks wrong. replace with auditable code and eliminate many strlen calls to improve efficiency. (wait, did somebody say FASTER?) ok beck | |||||
| * | KNF | mcbride | 2014-04-16 | 1 | -361/+619 | |
| | | ||||||
| * | make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miod | tedu | 2014-04-14 | 1 | -11/+0 | |
| | | ||||||
| * | So the OpenSSL codebase does "get the time, add it as a random seed" | deraadt | 2014-04-14 | 1 | -2/+1 | |
| | | | | | | | | in a bunch of places inside the TLS engine, to try to keep entropy high. I wonder if their moto is "If you can't solve a problem, at least try to do it badly". ok miod | |||||
| * | First pass at applying KNF to the OpenSSL code, which almost makes it | jsing | 2014-04-14 | 1 | -1892/+1597 | |
| | | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5. | |||||
| * | Do not include "e_os.h" anymore. Simply pull in the necessary headers. | mpi | 2014-04-13 | 1 | -1/+1 | |
| | | | | | ok miod@, deraadt@ | |||||
| * | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 1 | -16/+23 | |
| | | ||||||
| * | resolve conflicts | djm | 2012-10-13 | 1 | -86/+460 | |
| | | ||||||
| * | OpenSSL 1.0.0f: merge | djm | 2012-01-05 | 1 | -0/+11 | |
| | | ||||||
| * | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 1 | -10/+26 | |
| | | ||||||
| * | Security fix for CVE-2010-4180 as mentioned in ↵ | jasper | 2010-12-15 | 1 | -0/+5 | |
| | | | | | | | | | | | | http://www.openssl.org/news/secadv_20101202.txt. where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@ | |||||
| * | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -268/+595 | |
| | | ||||||
| * | pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from | markus | 2009-11-10 | 1 | -0/+8 | |
| | | | | | openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@ | |||||
| * | resolve conflicts | djm | 2009-01-09 | 1 | -14/+20 | |
| | | ||||||
| * | update to openssl-0.9.8i; tested by several, especially krw@ | djm | 2009-01-05 | 1 | -3/+5 | |
| | | ||||||
| * | resolve conflicts | djm | 2008-09-06 | 1 | -91/+846 | |
| | | ||||||
| * | resolve conflicts | djm | 2006-06-27 | 1 | -2/+2 | |
| | | ||||||
| * | resolve conflicts | djm | 2005-04-29 | 1 | -6/+11 | |
| | | ||||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |