| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | prefer limits.h over sys/limits.hlibressl-v2.2.7 | bcook | 2016-05-03 | 1 | -2/+2 |
| | | |||||
| * | bump to 2.2.7 | bcook | 2016-05-03 | 1 | -2/+2 |
| | | |||||
| * | backport patch from openssl for multiple issues: | tedu | 2016-05-03 | 7 | -30/+56 |
| | | | | | | | | missing padding check in aesni functions overflow in evp encode functions use of invalid negative asn.1 types ok beck | ||||
| * | This commit was manufactured by cvs2git to create branch 'OPENBSD_5_8'. | cvs2svn | 2016-05-03 | 1 | -0/+209 |
| | | |||||
| * | bump version.libressl-v2.2.6 | beck | 2016-01-28 | 1 | -3/+3 |
| | | | | | ok bcook@ | ||||
| * | deprecate SSL_OP_SINGLE_DH_USE | beck | 2016-01-27 | 2 | -37/+6 |
| | | | | | ok jsing@ | ||||
| * | Bump LibreSSL version number to 2.2.5 in 5.8 release branch.libressl-v2.2.5 | bcook | 2015-12-04 | 1 | -3/+3 |
| | | |||||
| * | Fix for OpenSSL CVE-2015-3195 | beck | 2015-12-04 | 1 | -3/+8 |
| | | |||||
| * | patch for OpenSSL CVE-2015-3194 | beck | 2015-12-04 | 1 | -2/+2 |
| | | |||||
| * | Bump LibreSSL version number to 2.2.4 in 5.8 release branch.libressl-v2.2.4 | bcook | 2015-10-15 | 1 | -3/+3 |
| | | |||||
| * | pull up fixes for leak and overrun | tedu | 2015-10-15 | 1 | -6/+4 |
| | | |||||
| * | Bump LibreSSL version number to 2.2.3 in 5.8 release branch.libressl-v2.2.3 | jsing | 2015-08-28 | 1 | -3/+3 |
| | | | | | Requested by bcook@ for libressl portable. | ||||
| * | MFC: Correctly handle a ClientHello that contains no TLS extensions, rather | jsing | 2015-08-28 | 1 | -1/+3 |
| | | | | | than treating it as invalid and aborting the handshake. | ||||
| * | This commit was manufactured by cvs2git to create branch 'OPENBSD_5_8'.libressl-v2.2.2 | cvs2svn | 2015-08-02 | 194 | -58450/+0 |
| | | |||||
| * | Fix SRTP parsing. | doug | 2015-07-31 | 2 | -6/+4 |
| | | | | | | | | jsing@ noticed that during the CBS conversion, an extra CBS_len comparison was introduced. It should be 0 after extracting MKI. ok jsing@ bcook@ deraadt@ | ||||
| * | Add linker warnings in case SSLv3_{,client,server}_method are referenced. | miod | 2015-07-29 | 5 | -5/+35 |
| | | | | | | | | Use of this symbols proves the existence of a code path willingly using SSLv3, even with OPENSSL_NO_SSL3 being defined, which hints that it needs fixing. Discussed with the LibreSSL cabal during c2k15; ok deraadt@ | ||||
| * | Use named initialisers for X509V3_EXT_METHOD structs (for the usual | jsing | 2015-07-29 | 19 | -228/+588 |
| | | | | | reasons) - only change in generated assembly is due to line numbering. | ||||
| * | Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generated | jsing | 2015-07-29 | 20 | -54/+54 |
| | | | | | | | assembly. ok bcook@ | ||||
| * | Expand obsolete M_ASN1_STRING_* macros in asn1_lib.c, apply some style(9) | jsing | 2015-07-29 | 1 | -6/+5 |
| | | | | | | | and drop an unnecessary return from a void function. ok bcook@ doug@ | ||||
| * | Less asn1_mac.h - asn1_lib.c does not need it and x_pkey.c should be | jsing | 2015-07-27 | 2 | -10/+5 |
| | | | | | | | using ASN1err() instead of ASN1_MAC_H_err(). ok miod@ | ||||
| * | double words fix; docs are slowly getting moved to mdoc, but this | sobrado | 2015-07-25 | 2 | -2/+2 |
| | | | | | | | change will help people translating them. ok jmc@, schwarze@ | ||||
| * | Place the ASN.1 template macros (and remaining implement macros) under | jsing | 2015-07-25 | 1 | -3/+6 |
| | | | | | #ifndef LIBRESSL_INTERNAL - we're not using these anymore! | ||||
| * | Expand another ASN.1 template macro that snuck through last time around. | jsing | 2015-07-25 | 1 | -2/+8 |
| | | | | | No change in generated assembly. | ||||
| * | Manually expand ASN.1 template macros - only change in generated assembly | jsing | 2015-07-25 | 3 | -16/+40 |
| | | | | | is due to line numbering. | ||||
| * | Expand ASN.1 template macros that got missed in the last pass - only change | jsing | 2015-07-25 | 3 | -11/+31 |
| | | | | | to generated assembly is due to line numbers. | ||||
| * | Expand ASN.1 template macros - the generated assembly only differs by | jsing | 2015-07-25 | 13 | -141/+806 |
| | | | | | changes to line numbers. | ||||
| * | Expand ASN.1 template macros - no change in generated assembly. | jsing | 2015-07-25 | 1 | -56/+294 |
| | | |||||
| * | Expand ASN.1 template macros - no change in generated assembly. | jsing | 2015-07-25 | 1 | -89/+545 |
| | | |||||
| * | Expand another wall of ASN.1 template macros - no change to generated | jsing | 2015-07-25 | 1 | -224/+1357 |
| | | | | | assembly. | ||||
| * | Expand ASN.1 template macros - no change in generated assembly. | jsing | 2015-07-25 | 2 | -136/+847 |
| | | |||||
| * | Expand ASN.1 template macros - the generated assembly only differs by | jsing | 2015-07-25 | 1 | -55/+351 |
| | | | | | changes to line numbers. | ||||
| * | Expand ASN.1 template macros - no change in generated assembly. | jsing | 2015-07-24 | 2 | -27/+171 |
| | | |||||
| * | Expand ASN.1 template macros - the generated assembly only differs by | jsing | 2015-07-24 | 1 | -51/+341 |
| | | | | | changes to line numbers. | ||||
| * | an TLS -> a TLS; from thanos tsouanas | jmc | 2015-07-24 | 4 | -12/+12 |
| | | |||||
| * | Expand ASN1_ITEM_TEMPLATE/ASN1_EX_TEMPLATE_TYPE/ASN1_ITEM_TEMPLATE_END | jsing | 2015-07-24 | 4 | -22/+106 |
| | | | | | macros - the generated assembly only differs by changes to line numbers. | ||||
| * | Expand IMPLEMENT_ASN1_MSTRING macros - the generated assembly only differs | jsing | 2015-07-24 | 2 | -6/+42 |
| | | | | | by changes to line numbers. | ||||
| * | Convert tls1_process_ticket to CBS. | doug | 2015-07-24 | 4 | -62/+76 |
| | | | | | ok miod@ jsing@ | ||||
| * | Convert tls1_process_sigalgs to CBS. | doug | 2015-07-24 | 2 | -10/+28 |
| | | | | | ok miod@ jsing@ | ||||
| * | Convert ssl3_get_record to CBS. | doug | 2015-07-24 | 2 | -44/+58 |
| | | | | | ok miod@ jsing@ | ||||
| * | Remove duplicate check in libssl. | doug | 2015-07-21 | 2 | -6/+2 |
| | | | | | | | | If len == 0, it already set try_session_cache so there's no need to check len again. Fixes Coverity issue 21687. ok bcook@ | ||||
| * | Correct #if/else logic in BIO's dgram_ctrl. | doug | 2015-07-20 | 1 | -3/+3 |
| | | | | | | | | | | Coverity issue 72741 noticed that ret is being overwritten before use. The actual issue is that the #if/else logic is guarding the wrong lines. Besides impacting ret, this also made the case's break logic wrong because it was in the wrong location. ok bcook@ beck@ | ||||
| * | prefer string.h to strings.h ok guenther@ doug@ | bcook | 2015-07-20 | 1 | -2/+2 |
| | | |||||
| * | Various memory leaks upon error or unchecked allocations. | miod | 2015-07-20 | 1 | -4/+13 |
| | | | | | ok doug@ | ||||
| * | Use V_ASN1_UNDEF instead of -1. | miod | 2015-07-20 | 1 | -7/+7 |
| | | | | | | | | Make sure ASN1_primitive_new() will return NULL in *pval in all error situations. ok bcook@ doug@ | ||||
| * | Check the return value of asn1_enc_save(). ok bcook@ doug@ | miod | 2015-07-20 | 1 | -2/+4 |
| | | |||||
| * | When freeing an X509_CRL, if freeing the user-maintained meth_data fails, | miod | 2015-07-20 | 1 | -3/+4 |
| | | | | | | do not forgot to nevertheless keep freeing the other fields. ok doug@ guenther@ | ||||
| * | In X509_PKEY_new(), make sure all allocation failures push an error to the | miod | 2015-07-20 | 1 | -7/+15 |
| | | | | | | error stack, not only the first one. ok guenther@ doug@ | ||||
| * | Remove OpenSSL engine RSAX. | doug | 2015-07-19 | 6 | -703/+5 |
| | | | | | | | | | | OpenSSL stopped building it last year and removed it this year. Based on OpenSSL commit c436e05bdc7f49985a750df64122c960240b3ae1. Also cranked major version in libcrypto, libssl and libtls. "fine with me" bcook@ miod@ | ||||
| * | Allow *_free() functions in libssl to handle NULL input. | doug | 2015-07-19 | 9 | -9/+34 |
| | | | | | | | This mimics free()'s behavior which makes error handling simpler. ok bcook@ miod@ | ||||
| * | Drop stupid (int) casts for the arguments of malloc() and friends. This is | miod | 2015-07-19 | 9 | -24/+24 |
| | | | | | | not 16-bit MS-DOS anymore. ok bcook@ tedu@ | ||||
