Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | | don't cast pointer to integer, use intptr_t stuff off inttypes.h instead | pvalchev | 2003-05-01 | 1 | -2/+3 | |
| | | | | | | | | | | | | | | | | ok millert | |||||
* | | | | string cleaning; ok tedu | deraadt | 2003-04-26 | 2 | -16/+20 | |
| | | | | ||||||
* | | | | managment -> management; | jmc | 2003-04-26 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | ok mickey@ | |||||
* | | | | remove printf("bar\n"); | markus | 2003-04-08 | 1 | -1/+0 | |
| | | | | ||||||
* | | | | sprintf->snprintf. deraadt@ suggestions and ok | ho | 2003-04-06 | 7 | -36/+49 | |
| | | | | ||||||
* | | | | Trivial sprintf() -> snprintf() changes. ok deraadt@ | ho | 2003-04-05 | 13 | -47/+65 | |
| | | | | ||||||
* | | | | oops | deraadt | 2003-04-04 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | incorrect bounds limit; spotted by ho | deraadt | 2003-04-04 | 1 | -6/+8 | |
| | | | | ||||||
* | | | | more strcpy & sprintf murder; ho ok | deraadt | 2003-04-04 | 10 | -41/+42 | |
| | | | | ||||||
* | | | | Correct off-by-one error in previous commit. millert@ ok. | ho | 2003-04-03 | 1 | -2/+3 | |
| | | | | ||||||
* | | | | str{cat,cpy}/sprintf cleanup. markus@, deraadt@ ok | ho | 2003-04-03 | 9 | -26/+32 | |
| | | | | ||||||
* | | | | Remove crypt macro, it conflicts with unistd.h | hin | 2003-04-03 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | | | ok markus@ | |||||
* | | | | Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS, see | markus | 2003-03-19 | 2 | -26/+24 | |
| | | | | | | | | | | | | | | | | http://marc.theaimsgroup.com/?l=bugtraq&m=104811162730834&w=2 | |||||
* | | | | update to official patch from openssl.org; ok deraadt@, millert@ | markus | 2003-03-17 | 2 | -26/+28 | |
| | | | | ||||||
* | | | | Less strcpy/strcat/sprintf. tdeval@ ok. | ho | 2003-03-16 | 8 | -36/+43 | |
| | | | | ||||||
* | | | | Enforce blinding on RSA operations involving private keys. | ho | 2003-03-15 | 2 | -4/+27 | |
| | | | | | | | | | | | | | | | | From http://www.openssl.org/~geoff, modified to be enabled at all times. | |||||
* | | | | jmc wrote a combination man page that covers all openssl(1) functionality, | deraadt | 2003-03-05 | 1 | -2/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | | | based on the pod files from openssl. This may need by-hand updating once in a while, but at least now people can read a real man page instead of the mess that the openssl team provides us with. | |||||
* | | | | DSAparams_print_pf() -> DSAparams_print_fp() | cedric | 2003-02-28 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | ok deraadt@ | |||||
* | | | | check for size < 0 when allocating memory, from openssl (-r1.34) | markus | 2003-02-21 | 1 | -0/+6 | |
| | | | | ||||||
* | | | | security fix from openssl 0.9.7a: | markus | 2003-02-19 | 2 | -32/+62 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078) | |||||
* | | | | delete duplicate line; jason@ackley.net, 3090 | deraadt | 2003-02-12 | 1 | -1/+0 | |
| | | | | ||||||
* | | | | we do not need that mess of -I | deraadt | 2003-01-31 | 1 | -42/+1 | |
| | | | | ||||||
* | | | | spelling | deraadt | 2003-01-04 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | typo; torh@bogus.net | markus | 2002-12-16 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | From Andrushock, s/sucess/success/g | millert | 2002-12-09 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | Crank all library major numbers. Needed due to the fact that we | millert | 2002-12-03 | 3 | -3/+3 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | now build libraries with propolice enabled. Without this, existing binaries (such as ports/packages) that link with any system library other than libc will fail with an undefined symbol of "___guard" (__guard on ELF). Pointed out by markus@ and discussed with deraadt@ | |||||
* | | | | install SSL_do_handshake(3) as well; markus@ ok | fgsch | 2002-10-09 | 1 | -1/+2 | |
| | | | | ||||||
* | | | | do not install mdc2 man pages; markus ok | deraadt | 2002-09-26 | 1 | -18/+1 | |
| | | | | ||||||
* | | | | remove MDC2; patents | markus | 2002-09-26 | 3 | -7/+9 | |
| | | | | ||||||
* | | | | remove rc5 | markus | 2002-09-25 | 1 | -109/+0 | |
| | | | | ||||||
* | | | | pull in fix from openssl-0.9.7-stable-SNAP-20020921: | markus | 2002-09-23 | 2 | -32/+10 | |
| | | | | | | | | | | | | | | | | | | | | | | | | *) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller] | |||||
* | | | | use arc4random instead of /dev/arandom, | markus | 2002-09-17 | 1 | -30/+11 | |
| | | | | | | | | | | | | | | | | allows RAND_poll after chroot, ok deraadt, fgsch | |||||
* | | | | undo local change, HMAC_Init() already does HMAC_CTX_init if(key && md) | markus | 2002-09-17 | 1 | -1/+0 | |
| | | | | ||||||
* | | | | add -elapsed to usage() for USE_TOD, too | markus | 2002-09-16 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | sync with 0.9.7-beta3 | markus | 2002-09-16 | 1 | -0/+4 | |
| | | | | ||||||
* | | | | remove old files | markus | 2002-09-16 | 6 | -1680/+0 | |
| | | | | ||||||
* | | | | remove generated file (from -beta3) | markus | 2002-09-16 | 1 | -180/+0 | |
| | | | | ||||||
* | | | | merge with openssl-0.9.7-stable-SNAP-20020911, | markus | 2002-09-14 | 113 | -879/+1922 | |
| | | | | | | | | | | | | | | | | | | | | new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@ | |||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | markus | 2002-09-12 | 24 | -17/+5509 | |
|\| | | | | | | | | | | | branch. | |||||
| * | | | import openssl-0.9.7-stable-SNAP-20020911 (without idea) | markus | 2002-09-12 | 120 | -497/+6463 | |
| | | | | ||||||
* | | | | evp.h should not pull in all other header files, especially | markus | 2002-09-10 | 1 | -57/+0 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | since it's supposed to hid the specific ciphers. this change also avoids problems when evp is used together with kerberos (and <des.h>). ok deraadt@ | |||||
* | | | | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 237 | -2611/+5966 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | markus | 2002-09-05 | 6 | -3/+223 | |
|\| | | | | | | | | | | | branch. | |||||
| * | | | import openssl-0.9.7-beta3 | markus | 2002-09-05 | 173 | -582/+3456 | |
| | | | | ||||||
* | | | | merge with 0.9.7-beta1 | markus | 2002-09-05 | 32 | -116/+88 | |
| | | | | ||||||
* | | | | This commit was generated by cvs2git to track changes on a CVS vendor | markus | 2002-09-05 | 11 | -0/+1435 | |
|\| | | | | | | | | | | | branch. | |||||
| * | | | import openssl-0.9.7-beta1 | markus | 2002-09-05 | 932 | -44202/+95388 | |
| | | | | ||||||
| * | | | This commit was manufactured by cvs2git to create branch 'openssl'. | cvs2svn | 2002-05-15 | 818 | -0/+172520 | |
| | | | | ||||||
* | | | | more cruft | markus | 2002-09-04 | 2 | -4/+0 | |
| | | | | ||||||
* | | | | more cruft. | markus | 2002-09-04 | 9 | -446/+0 | |
| | | | |