Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | The ssl_ciper_get_evp() function is currently overloaded to also return the | jsing | 2014-05-25 | 1 | -0/+1 | |
| | | | | | | | | | | | compression associated with the SSL session. Based on one of Adam Langley's chromium diffs, factor out the compression handling code into a separate ssl_cipher_get_comp() function. Rewrite the compression handling code to avoid pointless duplication and so that failures are actually returned to and detectable by the caller. ok miod@ | |||||
* | Include <openssl/opensslconf.h> - currently ssl.h is relying on it being | jsing | 2014-05-24 | 1 | -1/+2 | |
| | | | | | | | pulled in elsewhere, even though it is makes use of the OPENSSL_NO_* defines. While here, remove kssl.h since it is a no-op. ok beck@ miod@ | |||||
* | There are two actual uses of e_os2.h in libssl - an OPENSSL_GLOBAL (an | jsing | 2014-05-22 | 1 | -2/+0 | |
| | | | | | | | | | empty define) and an OPENSSL_EXTERN (which is defined as, well... extern). The use of OPENSSL_EXTERN is already inconsistent since the lines above and below just use plain old "extern". Expand the two uses of these macros and stop including e_os2.h in libssl. ok miod@ | |||||
* | Remove SRP and Kerberos support from libssl. These are complex protocols | tedu | 2014-05-05 | 1 | -70/+0 | |
| | | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | |||||
* | Nuke OPENSSL_NO_SOCK since any half sane operating system has sockets. | jsing | 2014-05-02 | 1 | -2/+0 | |
| | | | | ok beck@ | |||||
* | i suck at math. b - 8 = 3, not 4. detected by Antoine Pitrou. thanks. | tedu | 2014-04-30 | 1 | -1/+1 | |
| | ||||||
* | SSL_OP_ALL is supposed to be all options and workarounds that are safe, | tedu | 2014-04-28 | 1 | -4/+6 | |
| | | | | | | | | but disabling attack mitigations is not safe. 0.9.6d contained a workaround for an attack against CBC modes. 0.9.6e disabled it by default because "some" implementations couldn't handle empty fragments. 12 years have passed. Does anybody still care? Let's find out. ok miod | |||||
* | Remove ending cplusplus guard followed by starting cplusplus guard; from | miod | 2014-04-28 | 1 | -7/+0 | |
| | | | | Gebruiker Schoot. | |||||
* | Bring back the SSL_OP_PKCS1_CHECK_* defines (defined to zero, as they already | miod | 2014-04-24 | 1 | -0/+4 | |
| | | | | were), after stumbling upon code (mis)using them in the wild. | |||||
* | Unifdef -UPKCS1_CHECK and remove SSL_OP_PKCS1_CHECK_[12], this is leftover | miod | 2014-04-23 | 1 | -8/+0 | |
| | | | | | | | | ``debug'' code from a 15+ years old bugfix and the SSL_OP_PKCS1_CHECK_* constants have had a value of zero since ages. No production code should use them. ok beck@ | |||||
* | Chop off more SSLv2 tentacles and start fixing and noting y2038 issues. | guenther | 2014-04-20 | 1 | -13/+7 | |
| | | | | | | | APIs that pass times as longs will have to change at some point... Bump major on both libcrypto and libssl. ok tedu@ | |||||
* | More KNF and style consistency tweaks | guenther | 2014-04-19 | 1 | -3/+2 | |
| | ||||||
* | always build in RSA and DSA. ok deraadt miod | tedu | 2014-04-17 | 1 | -6/+0 | |
| | ||||||
* | TANSTAAFL - delete the buf freelist code. if you need a better malloc, get | tedu | 2014-04-16 | 1 | -6/+0 | |
| | | | | a better malloc. ok beck deraadt | |||||
* | add back SRP. i was being too greedy. | tedu | 2014-04-16 | 1 | -0/+63 | |
| | ||||||
* | disentangle SRP code from TLS | tedu | 2014-04-16 | 1 | -63/+0 | |
| | ||||||
* | remove ssl2 support even more completely. | tedu | 2014-04-15 | 1 | -10/+0 | |
| | | | | | | in the process, always include ssl3 and tls1, we don't need config options for them. when the time comes to expire ssl3, it will be with an ax. checked by miod | |||||
* | First pass at applying KNF to the OpenSSL code, which almost makes it | jsing | 2014-04-15 | 1 | -257/+250 | |
| | | | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5. There is still a huge amount of inconsistency within these headers. | |||||
* | make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miod | tedu | 2014-04-14 | 1 | -10/+0 | |
| | ||||||
* | Cope with the removal of openssl/symhacks.h | deraadt | 2014-04-13 | 1 | -1/+0 | |
| | ||||||
* | Flense a variety of windows support stuff, and a strange gettimeofday function. | beck | 2014-04-13 | 1 | -4/+0 | |
| | | | | ok deraadt@ | |||||
* | Remove vms support stuff. | beck | 2014-04-13 | 1 | -6/+1 | |
| | | | | ok deraadt@ | |||||
* | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 1 | -3/+18 | |
| | ||||||
* | resolve conflicts | djm | 2012-10-13 | 1 | -22/+291 | |
| | ||||||
* | OpenSSL 1.0.0f: merge | djm | 2012-01-05 | 1 | -0/+2 | |
| | ||||||
* | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -156/+383 | |
| | ||||||
* | update to openssl-0.9.8i; tested by several, especially krw@ | djm | 2009-01-05 | 1 | -3/+13 | |
| | ||||||
* | resolve conflicts | djm | 2008-09-06 | 1 | -59/+271 | |
| | ||||||
* | resolve conflicts | djm | 2006-06-27 | 1 | -31/+26 | |
| | ||||||
* | resolve conflicts | djm | 2005-04-29 | 1 | -57/+61 | |
| | ||||||
* | merge 0.9.7d | markus | 2004-04-08 | 1 | -2/+2 | |
| | ||||||
* | merge 0.9.7b with local changes; crank majors for libssl/libcrypto | markus | 2003-05-12 | 1 | -7/+23 | |
| | ||||||
* | merge with openssl-0.9.7-stable-SNAP-20020911, | markus | 2002-09-14 | 1 | -0/+6 | |
| | | | | | new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@ | |||||
* | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 1 | -7/+37 | |
| | ||||||
* | apply patches from OpenSSL Security Advisory [30 July 2002], | markus | 2002-07-30 | 1 | -0/+2 | |
| | | | | http://marc.theaimsgroup.com/?l=openssl-dev&m=102802395104110&w=2 | |||||
* | OpenSSL 0.9.7 stable 2002 05 08 merge | beck | 2002-05-15 | 1 | -104/+338 | |
| | ||||||
* | openssl-engine-0.9.6a merge | beck | 2001-06-22 | 1 | -6/+10 | |
| | ||||||
* | openssl-engine-0.9.6 merge | beck | 2000-12-15 | 1 | -17/+46 | |
| | ||||||
* | OpenSSL 0.9.5a merge | beck | 2000-04-15 | 1 | -3/+3 | |
| | ||||||
* | OpenSSL 0.9.5 merge | beck | 2000-03-19 | 1 | -34/+83 | |
| | | | | | | *warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs | |||||
* | OpenSSL 0.9.4 merge | beck | 1999-09-29 | 1 | -565/+596 | |
| | ||||||
* | Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build | ryker | 1998-10-05 | 1 | -0/+1453 | |
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible. |