| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Make use of SSL_IS_DTLS, SSL_USE_EXPLICIT_IV, SSL_USE_SIGALGS and | jsing | 2014-05-30 | 1 | -19/+13 | |
| | | | | | | | SSL_USE_TLS1_2_CIPHERS. Largely based on OpenSSL head. | |||||
| * | the comment says RAND_pseudo_bytes should be RAND_bytes. make it so. | tedu | 2014-05-29 | 1 | -6/+1 | |
| | | | | | ok deraadt | |||||
| * | unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them. | tedu | 2014-05-29 | 1 | -30/+0 | |
| | | | | | ok deraadt jsing | |||||
| * | There is no point in checking if a pointer is non-NULL before calling free, | jsing | 2014-05-28 | 1 | -6/+3 | |
| | | | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@ | |||||
| * | Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much of | jsing | 2014-05-25 | 1 | -19/+0 | |
| | | | | | | | | this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@ | |||||
| * | DeIMPLEMENT libssl. Expand the IMPLEMENT_* macros since it is far more | jsing | 2014-05-24 | 1 | -4/+38 | |
| | | | | | | | | | readable and one less layer of abstraction. Use C99 initialisers for clarity, grepability and to protect from future field reordering/removal. ok miod@ (tedu@ also thought it was a wonderful idea, beck@ also agreed, but ran away squealing since it reminded him of the VOP layer...) | |||||
| * | Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now. | jsing | 2014-05-22 | 1 | -1/+0 | |
| | | | | | ok beck@ miod@ | |||||
| * | In ssl3_send_certificate_request(), when adding the extra payload if | miod | 2014-05-18 | 1 | -1/+6 | |
| | | | | | | | | NETSCAPE_HANG_BUG is defined, make sure we BUF_MEM_grow() the buffer to accomodate for the payload size. Issue reported by David Ramos; ok beck@ | |||||
| * | Remove SRP and Kerberos support from libssl. These are complex protocols | tedu | 2014-05-05 | 1 | -317/+0 | |
| | | | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | |||||
| * | More KNF, things that couldn't be verified with md5(1), and some whitespace | mcbride | 2014-04-24 | 1 | -74/+92 | |
| | | | | | I missed on the first go around. | |||||
| * | Make libssl and libcrypto compile with -Werror | beck | 2014-04-23 | 1 | -1/+1 | |
| | | | | | ok miod@ | |||||
| * | more malloc/realloc/calloc cleanups; ok beck kettenis | deraadt | 2014-04-21 | 1 | -2/+1 | |
| | | ||||||
| * | More KNF and style consistency tweaks | guenther | 2014-04-19 | 1 | -4/+3 | |
| | | ||||||
| * | whack a bunch of disabled code. ok beck lteo | tedu | 2014-04-17 | 1 | -18/+0 | |
| | | ||||||
| * | always build in RSA and DSA. ok deraadt miod | tedu | 2014-04-17 | 1 | -16/+0 | |
| | | ||||||
| * | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 1 | -12/+12 | |
| | | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||||
| * | add back SRP. i was being too greedy. | tedu | 2014-04-16 | 1 | -0/+122 | |
| | | ||||||
| * | Thanks to the knobs in http://tools.ietf.org/html/rfc5746, we have a knob | beck | 2014-04-16 | 1 | -3/+1 | |
| | | | | | | | to say "allow this connection to negotiate insecurely". de-fang the code that respects this option to ignore it. ok miod@ | |||||
| * | disentangle SRP code from TLS | tedu | 2014-04-16 | 1 | -122/+0 | |
| | | ||||||
| * | strncpy(d, s, strlen(s)) is a special kind of stupid. even when it's right, | tedu | 2014-04-16 | 1 | -8/+9 | |
| | | | | | | it looks wrong. replace with auditable code and eliminate many strlen calls to improve efficiency. (wait, did somebody say FASTER?) ok beck | |||||
| * | KNF | mcbride | 2014-04-16 | 1 | -361/+619 | |
| | | ||||||
| * | make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miod | tedu | 2014-04-14 | 1 | -11/+0 | |
| | | ||||||
| * | So the OpenSSL codebase does "get the time, add it as a random seed" | deraadt | 2014-04-14 | 1 | -2/+1 | |
| | | | | | | | | in a bunch of places inside the TLS engine, to try to keep entropy high. I wonder if their moto is "If you can't solve a problem, at least try to do it badly". ok miod | |||||
| * | First pass at applying KNF to the OpenSSL code, which almost makes it | jsing | 2014-04-14 | 1 | -1892/+1597 | |
| | | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5. | |||||
| * | Do not include "e_os.h" anymore. Simply pull in the necessary headers. | mpi | 2014-04-13 | 1 | -1/+1 | |
| | | | | | ok miod@, deraadt@ | |||||
| * | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 1 | -16/+23 | |
| | | ||||||
| * | resolve conflicts | djm | 2012-10-13 | 1 | -86/+460 | |
| | | ||||||
| * | OpenSSL 1.0.0f: merge | djm | 2012-01-05 | 1 | -0/+11 | |
| | | ||||||
| * | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 1 | -10/+26 | |
| | | ||||||
| * | Security fix for CVE-2010-4180 as mentioned in ↵ | jasper | 2010-12-15 | 1 | -0/+5 | |
| | | | | | | | | | | | | http://www.openssl.org/news/secadv_20101202.txt. where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@ | |||||
| * | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -268/+595 | |
| | | ||||||
| * | pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from | markus | 2009-11-10 | 1 | -0/+8 | |
| | | | | | openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@ | |||||
| * | resolve conflicts | djm | 2009-01-09 | 1 | -14/+20 | |
| | | ||||||
| * | update to openssl-0.9.8i; tested by several, especially krw@ | djm | 2009-01-05 | 1 | -3/+5 | |
| | | ||||||
| * | resolve conflicts | djm | 2008-09-06 | 1 | -91/+846 | |
| | | ||||||
| * | resolve conflicts | djm | 2006-06-27 | 1 | -2/+2 | |
| | | ||||||
| * | resolve conflicts | djm | 2005-04-29 | 1 | -6/+11 | |
| | | ||||||
| * | out-of-bounds read in (unused) kerberos ciphersuites (CAN-2004-0112) | markus | 2004-03-17 | 1 | -0/+16 | |
| | | ||||||
| * | more fixes from 0.9.7c, ok deraadt, cloder | markus | 2003-09-30 | 1 | -4/+10 | |
| | | ||||||
| * | merge 0.9.7b with local changes; crank majors for libssl/libcrypto | markus | 2003-05-12 | 1 | -12/+18 | |
| | | ||||||
| * | Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS, see | markus | 2003-03-19 | 1 | -13/+12 | |
| | | | | | http://marc.theaimsgroup.com/?l=bugtraq&m=104811162730834&w=2 | |||||
| * | merge with openssl-0.9.7-stable-SNAP-20020911, | markus | 2002-09-14 | 1 | -1/+5 | |
| | | | | | | new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@ | |||||
| * | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 1 | -2/+2 | |
| | | ||||||
| * | merge with 0.9.7-beta1 | markus | 2002-09-05 | 1 | -2/+2 | |
| | | ||||||
| * | protect <openssl/krb5_asn.h> with OPENSSL_NO_KRB5 | markus | 2002-08-30 | 1 | -0/+2 | |
| | | ||||||
| * | sync with http://www.openssl.org/news/patch_20020730_0_9_7.txt | markus | 2002-07-30 | 1 | -4/+14 | |
| | | | | | | (adds fix for unused kerberos and engine code, and some more assertions, as well as a 64bit integer string fix for conf_mod.c) | |||||
| * | apply patches from OpenSSL Security Advisory [30 July 2002], | markus | 2002-07-30 | 1 | -0/+1 | |
| | | | | | http://marc.theaimsgroup.com/?l=openssl-dev&m=102802395104110&w=2 | |||||
| * | OpenSSL 0.9.7 stable 2002 05 08 merge | beck | 2002-05-15 | 1 | -66/+322 | |
| | | ||||||
| * | merge openssl 0.9.6b-engine | beck | 2001-08-01 | 1 | -2/+24 | |
| | | | | | | Note that this is a maintenence release, API's appear *not* to have changed. As such, I have only increased the minor number on these libraries | |||||
| * | CRT and DH+SSL fix from 0.9.6a, ok provos@/deraadt@ | markus | 2001-04-22 | 1 | -0/+1 | |
| | | ||||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |