summaryrefslogtreecommitdiff
path: root/src/lib (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Incorrect/unneeded fix for 5.8OPENBSD_5_8beck2016-06-272-33/+9
| | | | noticed by jsing@
* Fix several issues in the OCSP code that could result in the incorrectbeck2016-06-252-9/+33
| | | | | | | | | generation and parsing of OCSP requests. This remediates a lack of error checking on time parsing in these functions, and ensures that only GENERALIZEDTIME formats are accepted for OCSP, as per RFC 6960 Issues reported, and fixes provided by Kazuki Yamaguchi <k@rhe.jp> and Kinichiro Inoguchi <kinichiro.inoguchi@gmail.com>
* Set BN_FLG_CONSTTIME on the correct variable. beck committed wrong fix.libressl-v2.2.9tedu2016-06-061-2/+2
| | | | Mistake noted by Billy Brumley. Many thanks.
* Correct a problem that prevents the DSA signing algorithm from runningbeck2016-06-061-4/+6
| | | | | | | in constant time even if the flag BN_FLG_CONSTTIME is set. This issue was reported by Cesar Pereida (Aalto University), Billy Brumley (Tampere University of Technology), and Yuval Yarom (The University of Adelaide and NICTA). The fix was developed by Cesar Pereida
* LibreSSL 2.2.9bcook2016-06-061-3/+3
|
* bump to 2.2.8libressl-v2.2.8bcook2016-05-291-3/+3
|
* Fix a short-read bug in the previous version of asn1_d2i_read_biobcook2016-05-291-26/+28
| | | | | The outer while() loop is missing, so we only read up to chunk_max bytes. ok tedu
* prefer limits.h over sys/limits.hlibressl-v2.2.7bcook2016-05-031-2/+2
|
* bump to 2.2.7bcook2016-05-031-2/+2
|
* backport patch from openssl for multiple issues:tedu2016-05-037-30/+56
| | | | | | | missing padding check in aesni functions overflow in evp encode functions use of invalid negative asn.1 types ok beck
* This commit was manufactured by cvs2git to create branch 'OPENBSD_5_8'.cvs2svn2016-05-031-0/+209
|
* bump version.libressl-v2.2.6beck2016-01-281-3/+3
| | | | ok bcook@
* deprecate SSL_OP_SINGLE_DH_USEbeck2016-01-272-37/+6
| | | | ok jsing@
* remove O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authoritysthen2015-12-171-49/+0
| | | | from cert.pem in 5.8-stable, requested by Josh Grosse
* Bump LibreSSL version number to 2.2.5 in 5.8 release branch.libressl-v2.2.5bcook2015-12-041-3/+3
|
* Fix for OpenSSL CVE-2015-3195beck2015-12-041-3/+8
|
* patch for OpenSSL CVE-2015-3194beck2015-12-041-2/+2
|
* Bump LibreSSL version number to 2.2.4 in 5.8 release branch.libressl-v2.2.4bcook2015-10-151-3/+3
|
* pull up fixes for leak and overruntedu2015-10-151-6/+4
|
* Bump LibreSSL version number to 2.2.3 in 5.8 release branch.libressl-v2.2.3jsing2015-08-281-3/+3
| | | | Requested by bcook@ for libressl portable.
* MFC: Correctly handle a ClientHello that contains no TLS extensions, ratherjsing2015-08-281-1/+3
| | | | than treating it as invalid and aborting the handshake.
* This commit was manufactured by cvs2git to create branch 'OPENBSD_5_8'.libressl-v2.2.2cvs2svn2015-08-021185-381116/+0
|
* spelling; ok deraadtjmc2015-08-022-4/+4
|
* Fix SRTP parsing.doug2015-07-312-6/+4
| | | | | | | jsing@ noticed that during the CBS conversion, an extra CBS_len comparison was introduced. It should be 0 after extracting MKI. ok jsing@ bcook@ deraadt@
* Add linker warnings in case SSLv3_{,client,server}_method are referenced.miod2015-07-295-5/+35
| | | | | | | Use of this symbols proves the existence of a code path willingly using SSLv3, even with OPENSSL_NO_SSL3 being defined, which hints that it needs fixing. Discussed with the LibreSSL cabal during c2k15; ok deraadt@
* Use named initialisers for X509V3_EXT_METHOD structs (for the usualjsing2015-07-2938-456/+1176
| | | | reasons) - only change in generated assembly is due to line numbering.
* Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generatedjsing2015-07-2940-108/+108
| | | | | | assembly. ok bcook@
* Expand obsolete M_ASN1_STRING_* macros in asn1_lib.c, apply some style(9)jsing2015-07-292-12/+10
| | | | | | and drop an unnecessary return from a void function. ok bcook@ doug@
* Less asn1_mac.h - asn1_lib.c does not need it and x_pkey.c should bejsing2015-07-274-20/+10
| | | | | | using ASN1err() instead of ASN1_MAC_H_err(). ok miod@
* double words fix; docs are slowly getting moved to mdoc, but thissobrado2015-07-254-4/+4
| | | | | | change will help people translating them. ok jmc@, schwarze@
* Place the ASN.1 template macros (and remaining implement macros) underjsing2015-07-252-6/+12
| | | | #ifndef LIBRESSL_INTERNAL - we're not using these anymore!
* double word fix.sobrado2015-07-251-2/+2
| | | | ok jmc@, schwarze@
* Expand another ASN.1 template macro that snuck through last time around.jsing2015-07-252-4/+16
| | | | No change in generated assembly.
* Manually expand ASN.1 template macros - only change in generated assemblyjsing2015-07-256-32/+80
| | | | is due to line numbering.
* Expand ASN.1 template macros that got missed in the last pass - only changejsing2015-07-256-22/+62
| | | | to generated assembly is due to line numbers.
* Expand ASN.1 template macros - the generated assembly only differs byjsing2015-07-2526-282/+1612
| | | | changes to line numbers.
* Expand ASN.1 template macros - no change in generated assembly.jsing2015-07-252-112/+588
|
* Expand ASN.1 template macros - no change in generated assembly.jsing2015-07-252-178/+1090
|
* Expand another wall of ASN.1 template macros - no change to generatedjsing2015-07-252-448/+2714
| | | | assembly.
* Expand ASN.1 template macros - no change in generated assembly.jsing2015-07-254-272/+1694
|
* Expand ASN.1 template macros - the generated assembly only differs byjsing2015-07-252-110/+702
| | | | changes to line numbers.
* Expand ASN.1 template macros - no change in generated assembly.jsing2015-07-244-54/+342
|
* Expand ASN.1 template macros - the generated assembly only differs byjsing2015-07-242-102/+682
| | | | changes to line numbers.
* an TLS -> a TLS; from thanos tsouanasjmc2015-07-245-14/+14
|
* Expand ASN1_ITEM_TEMPLATE/ASN1_EX_TEMPLATE_TYPE/ASN1_ITEM_TEMPLATE_ENDjsing2015-07-248-44/+212
| | | | macros - the generated assembly only differs by changes to line numbers.
* Expand IMPLEMENT_ASN1_MSTRING macros - the generated assembly only differsjsing2015-07-244-12/+84
| | | | by changes to line numbers.
* Convert tls1_process_ticket to CBS.doug2015-07-244-62/+76
| | | | ok miod@ jsing@
* Convert tls1_process_sigalgs to CBS.doug2015-07-242-10/+28
| | | | ok miod@ jsing@
* Convert ssl3_get_record to CBS.doug2015-07-242-44/+58
| | | | ok miod@ jsing@
* call it bcrypt in the man page tootedu2015-07-231-3/+3
|
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-17 18:57:53 +0000