| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Move build machinery for libcrypto from libssl/crypto to libcrypto, as well | miod | 2014-04-11 | 42 | -977/+4998 |
| | | | | | | | | | | as configuration files; split manpages and .pc files between libcrypto and libssl. No functional change, only there to make engineering easier, and libcrypto sources are still found in libssl/src/crypto at the moment. ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects. | ||||
| * | oops, typo, spotted by Matthias Scheler | deraadt | 2014-04-10 | 1 | -2/+2 |
| | | |||||
| * | Piotr Sikora pointed me at a more refined diff for the buffer release | tedu | 2014-04-10 | 2 | -0/+4 |
| | | | | | | | issue. Apply that version. Maybe someday upstream will wake up and then we can have the same code. https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest | ||||
| * | crank major; struct ssl_ctx_st changes; ok tedu | deraadt | 2014-04-10 | 2 | -2/+2 |
| | | |||||
| * | Disable Segglemann's RFC520 hearbeat. | deraadt | 2014-04-10 | 1 | -2/+2 |
| | | | | | | | | | | | | | I am completely blown away that the same IETF that cannot efficiently allocate needed protocol, service numbers, or other such things when they are needed, can so quickly and easily rubber stamp the addition of a 64K Covert Channel in a critical protocol. The organization should look at itself very carefully, find out how this this happened, and everyone who allowed this to happen on their watch should be evicted from the decision making process. IETF, I don't trust you. ok tedu markus | ||||
| * | disable buf freelists. we'll see what happens next. | tedu | 2014-04-10 | 1 | -1/+2 |
| | | | | | ok deraadt | ||||
| * | don't release the read buffer if we're not done reading from it. | tedu | 2014-04-10 | 2 | -4/+0 |
| | | | | | ok benno deraadt | ||||
| * | Remove CA certificates which are not listed in Mozilla's certdata.txt. | sthen | 2014-04-09 | 1 | -1823/+0 |
| | | | | | | | Notably this removes CAcert who it turns out have strict requirements on redistribution (http://www.cacert.org/policy/RootDistributionLicense.php) which we don't meet. | ||||
| * | Use root CAs that are used by TeleSec (Deutsche Telekom AG): | reyk | 2014-04-09 | 1 | -0/+313 |
| | | | | | | | | | | - Baltimore CyberTrust Root - Deutsche Telekom Root CA 2 - T-TeleSec GlobalRoot Class 2 - T-TeleSec GlobalRoot Class 3 ok sthen@ | ||||
| * | use char * for strings, saving casts. add return codes to base64 functions | tedu | 2014-04-08 | 1 | -15/+26 |
| | | |||||
| * | cherrypick fix for CVE-2014-0160 "heartbleed" vulnerability from | djm | 2014-04-07 | 4 | -26/+54 |
| | | | | | OpenSSL git; ok sthen@ | ||||
| * | Add some missing names to the NAME sections. | schwarze | 2014-04-07 | 5 | -15/+19 |
| | | | | | | | For inet(3), go the other way, remove some bogus symlinks. Found while testing the new makewhatis(8). ok jmc@ | ||||
| * | Update Copyright notice; ok otto@ beck@ deraadt@. | schwarze | 2014-04-03 | 1 | -2/+4 |
| | | | | | | This is merely a by-product of figuring out the amount of phk@ code contained herein; i'm not planning to hack on this file. | ||||
| * | I have discussed these licenses with Poul-Henning Kamp and he has agreed to | beck | 2014-04-03 | 1 | -8/+17 |
| | | | | | this license change. We will remember that we all still like beer. | ||||
| * | Poul-Henning Kamp informed me he is allright with this licensing change. | beck | 2014-03-25 | 1 | -11/+4 |
| | | |||||
| * | oops, merge error | tedu | 2014-03-24 | 1 | -2/+2 |
| | | |||||
| * | clear stack variables, suggested by djm | tedu | 2014-03-23 | 1 | -1/+4 |
| | | |||||
| * | some improvements suggested by djm. | tedu | 2014-03-23 | 1 | -4/+6 |
| | | | | | | | use better constant for salt size. always copy ":" to gerror, in case somebody is dumb enough to overwrite it timingsafe_bcmp before somebody whines about strcmp | ||||
| * | two functions don't need to be exported | tedu | 2014-03-23 | 1 | -3/+3 |
| | | |||||
| * | minimal change to implementation of bcrypt to not require static globals. | tedu | 2014-03-23 | 1 | -39/+88 |
| | | | | | | | add some friendlier functions. move the classic static data api into wrapper functions. a few more changes to come... | ||||
| * | remove the never used bm string functions | tedu | 2014-03-23 | 3 | -329/+3 |
| | | |||||
| * | switch to shorter ISC license. this was ok with Niels Provos. | tedu | 2014-03-22 | 1 | -27/+12 |
| | | |||||
| * | consolidate the base64 code in one place, and remove inadequate test code | tedu | 2014-03-19 | 1 | -86/+56 |
| | | |||||
| * | right or wrong, bcrypt() is declared in pwd.h, not unistd.h | tedu | 2014-03-19 | 1 | -2/+3 |
| | | |||||
| * | Retire hp300, mvme68k and mvme88k ports. These ports have no users, keeping | miod | 2014-03-18 | 2 | -278/+3 |
| | | | | | | | | this hardware alive is becoming increasingly difficult, and I should heed the message sent by the three disks which have died on me over the last few days. Noone sane will mourn these ports anyway. So long, and thanks for the fish. | ||||
| * | * Fix another instance of directly writing to the target with a utility | schwarze | 2014-03-18 | 1 | -4/+6 |
| | | | | | | | | that might fail. * Keep the build log clean. * Make sure syntax checks run again when doing: make clean; make ok espie@ | ||||
| * | prevent failed command from generating bogus file | espie | 2014-03-18 | 1 | -2/+2 |
| | | | | | okay guenther@ | ||||
| * | prepare manpages for new perl. | espie | 2014-03-18 | 19 | -40/+48 |
| | | | | | | | | Note that I missed two of these in the diff shown initially, thx to the atrocious Makefile rule... okay millert@, sthen@, basically | ||||
| * | Sync with the way struct ether_addr is actually defined in | lteo | 2014-03-18 | 1 | -3/+3 |
| | | | | | netinet/if_ether.h | ||||
| * | lint is dead (long live the lint!), so stop using it as a cpp conditional | guenther | 2014-03-16 | 2 | -4/+4 |
| | | | | | | | (namespace pollution!) or talking about its opinion on code. ok krw@ | ||||
| * | SECURITY fixes backported from openssl-1.0.1f. ok mikeb@ | jca | 2014-02-27 | 12 | -26/+82 |
| | | | | | | | | | | | | | CVE-2013-4353 NULL pointer dereference with crafted Next Protocol Negotiation record in TLS handshake. Upstream: 197e0ea CVE-2013-6449 Fix crash with crafted traffic from a TLS 1.2 client. Upstream: ca98926, 0294b2b CVE-2013-6450 Fix DTLS retransmission from previous session. Upstream: 3462896 | ||||
| * | solar's testsuite revealed insufficient validation of invalid input hashes. | tedu | 2014-02-24 | 1 | -8/+10 |
| | | | | | add a more complete check for the rounds parameter. ok deraadt | ||||
| * | in HISTORY, say where this actually came from; | schwarze | 2014-02-23 | 1 | -5/+7 |
| | | | | | ok deraadt@ bentley@ | ||||
| * | replace spaces with tabs for indentation | stsp | 2014-02-17 | 1 | -2/+2 |
| | | |||||
| * | remove redundant test | tedu | 2014-02-17 | 1 | -3/+2 |
| | | |||||
| * | sticking strlen into a char leads to wraparound at 256. fix this and | tedu | 2014-02-17 | 1 | -5/+18 |
| | | | | | | | introduce a new 'b' hash minor. still generate 'a' minors for now. reported by solar designer. diff by some combination of solar and jca. ok deraadt | ||||
| * | Fix inet6_opt_init() to only check extlen when extbuff is not NULL | mpi | 2014-02-07 | 1 | -5/+2 |
| | | | | | | | as per RFC 3542, from DragonFlyBSD via Eitan Adler. ok bluhm@ | ||||
| * | Remove unnecessary stdio.h include. | stsp | 2014-02-05 | 1 | -2/+1 |
| | | | | | Patch by Jean-Philippe Ouellet ; ok krw@ | ||||
| * | Always set errno when returning NULL. OK kettenis@ henning@ | millert | 2014-02-05 | 1 | -7/+17 |
| | | |||||
| * | add explicit_bzero to NAME; | jmc | 2014-01-22 | 1 | -2/+3 |
| | | |||||
| * | add explicit_bzero to libc. implementation subject to change, but start | tedu | 2014-01-22 | 3 | -4/+37 |
| | | | | | the ball rolling. ok deraadt. | ||||
| * | Ouch... recommend arc4random, not random. | deraadt | 2014-01-21 | 1 | -3/+3 |
| | | | | | spotted by tedu | ||||
| * | obvious .Pa fixes; found with mandocdb(8) | schwarze | 2014-01-21 | 13 | -49/+49 |
| | | |||||
| * | Fix an obvious .Fn/.Fa typo, found while testing mandocdb(8). | schwarze | 2014-01-20 | 1 | -3/+3 |
| | | |||||
| * | Usually, you don't want macros in the .Nd line, so remove instances of .Tn | schwarze | 2014-01-19 | 1 | -5/+3 |
| | | | | | | | marking up words that are not trademarks (ASCII, I/O, NFS, TCP, TELNET). While here, remove .Tn markup from the same words in the body of these pages, too. | ||||
| * | Punctuation after macro arguments needs to be in a separate argument. | schwarze | 2014-01-19 | 1 | -3/+4 |
| | | | | | Found while testing mandocdb(8). | ||||
| * | don't try writing past the end unless we have to | tedu | 2013-12-31 | 1 | -8/+16 |
| | | | | | ok gilles millert | ||||
| * | Move atexit(3) into crtbegin.c and certbeginS.c such that we can pass the | kettenis | 2013-12-28 | 1 | -10/+1 |
| | | | | | | | | | | | right __dso_handle and have dlopen'ed shared objects run their atexit handlers when they get unloaded. This is what Linux does, and several ports depend on this behaviour (and will crash upon exit without this chang). Based on an earlier diff from matthew@ Tested by ajacoutot@ ok deraadt@ | ||||
| * | Install a bunch more of OpenSSL manpages. ok deraadt@ | jca | 2013-12-23 | 1 | -1/+49 |
| | | |||||
| * | Reliability fix for SHA384 SSL/TLS ciphers on strict alignment | jca | 2013-12-19 | 2 | -2/+16 |
| | | | | | | | | | | architectures. ok miod@ djm@ Upstream patch: commit cdd1acd788020d2c525331da1712ada778f1373c Author: Andy Polyakov <appro@openssl.org> Date: Wed Dec 18 21:27:35 2013 +0100 | ||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |