summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* fix leakHEADoriginmastersteve2012-03-221-0/+1
|
* Submitted by: Markus Friedl <mfriedl@gmail.com>steve2012-03-221-2/+14
| | | | Fix memory leaks in 'goto err' cases.
* use client version when deciding whether to send supported signature ↵steve2012-03-211-1/+1
| | | | algorithms extension
* e_padlock-x86[_64].pl: better understanding of prefetch errata and properappro2012-03-192-78/+204
| | | | workaround.
* eng_all.c: revert previous "disable Padlock" commit, which was unjustified.appro2012-03-192-2/+3
|
* Always use SSLv23_{client,server}_method in s_client.c and s_server.c,steve2012-03-182-16/+0
| | | | the old code came from SSLeay days before TLS was even supported.
* vpaes-x86_64.pl: out-of-date Apple assembler fails to calculateappro2012-03-171-1/+1
| | | | | distance between local labels. PR: 2762
* bsaes-x86_64.pl: optimize key conversion.appro2012-03-161-39/+79
|
* bsaes-armv7.pl: optmize Sbox and key conversion.appro2012-03-161-46/+41
|
* oops, revert unrelated patchessteve2012-03-144-125/+12
|
* update FAQ, NEWSsteve2012-03-146-13/+139
|
* ghash-x86.pl: omit unreferenced rem_8bit from no-sse2 build.appro2012-03-131-13/+13
|
* ssl/t1_enc.c: pay attention to EVP_CIPH_FLAG_CUSTOM_CIPHER.appro2012-03-131-1/+4
|
* x86_64-xlate.pl: remove old kludge.appro2012-03-131-6/+2
| | | | PR: 2435,2440
* corrected fix to PR#2711 and also cover mime_param_cmpsteve2012-03-121-3/+4
|
* Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key andsteve2012-03-126-38/+139
| | | | | | | | continue with symmetric decryption process to avoid leaking timing information to an attacker. Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering this issue. (CVE-2012-0884)
* update NEWSsteve2012-03-121-0/+44
|
* PR: 2744steve2012-03-112-0/+43
| | | | | | Submitted by: Dmitry Belyavsky <beldmit@gmail.com> CMS support for ccgost engine
* Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>steve2012-03-092-13/+62
| | | | Add more extension names in s_cb.c extension printing code.
* PR: 2756steve2012-03-093-23/+27
| | | | | | Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Fix DTLS timeout handling.
* check return value of BIO_write in PKCS7_decryptsteve2012-03-081-1/+5
|
* New ctrls to retrieve supported signature algorithms and curves andsteve2012-03-0611-24/+197
| | | | | | extensions to s_client and s_server to print out retrieved valued. Extend CERT structure to cache supported signature algorithm data.
* PR: 2755steve2012-03-064-2/+29
| | | | | | Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reduce MTU after failed transmissions.
* PR: 2748steve2012-03-062-5/+4
| | | | | | Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Fix possible DTLS timer deadlock.
* don't do loop check for single self signed certificatesteve2012-03-051-0/+3
|
* Configure: make no-whirlpool work.appro2012-03-031-1/+3
|
* bsaes-armv7.pl: change preferred contact.appro2012-03-031-1/+1
|
* Add bit-sliced AES for ARM NEON. This initial version is effectivelyappro2012-03-031-0/+987
| | | | reference implementation, it does not interface to OpenSSL yet.
* PR: 2743steve2012-02-291-0/+1
| | | | | | Reported by: Dmitry Belyavsky <beldmit@gmail.com> Fix memory leak if invalid GOST MAC key given.
* PR: 2742steve2012-02-291-3/+7
| | | | | | Reported by: Dmitry Belyavsky <beldmit@gmail.com> If resigning with detached content in CMS just copy data across.
* Fix memory leak cause by race condition when creating public keys.steve2012-02-281-1/+10
| | | | Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for reporting this bug.
* x86cpuid.pl: fix processor capability detection on pre-586.appro2012-02-281-2/+3
|
* PR: 2736steve2012-02-271-2/+1
| | | | | | | Reported by: Remi Gacogne <rgacogne-bugs@coredump.fr> Preserve unused bits value in non-canonicalised ASN1_STRING structures by using ASN1_STRING_copy which preseves flags.
* PR: 2737steve2012-02-271-1/+1
| | | | | | Submitted by: Remi Gacogne <rgacogne-bugs@coredump.fr> Fix double free in PKCS12_parse if we run out of memory.
* PR: 2739steve2012-02-272-2/+6
| | | | | | Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Fix padding bugs in Heartbeat support.
* PR: 2735steve2012-02-271-20/+51
| | | | | Make cryptodev digests work. Thanks to Nikos Mavrogiannopoulos for this fix.
* free headers after use in error messagesteve2012-02-271-1/+1
|
* Detect symmetric crypto errors in PKCS7_decrypt.steve2012-02-271-2/+17
| | | | Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for reporting this bug.
* Configure: I remove adding of -D_XPG4_2 -D__EXTENSIONS__ in sctp builds forappro2012-02-261-8/+0
| | | | | | | | | | | | following reasons: - it's not the way to engage XPG4v2 mode, defining _XOPEN_SOURCE to value less than 500 is (see standards(5)); - we need to work out strategy to handle _XOPEN_SOURCE, current state when we define e.g. _XOPEN_SOURCE to 500 in some files is inappropriate; - sctp implementation on Solaris is incomplete, in sense that bss_dgram.c doesn't compile, because not all structures are defined, so that enabling sctp doesn't work anyway;
* seed.c: incredibly enough seed.c can fail to compile on Solaris with certainappro2012-02-261-0/+4
| | | | flags, because SS is defined after inclusion of <stdlib.h>, in <sys/regset.h>
* PR: 2730steve2012-02-252-1/+8
| | | | | | Submitted by: Arpadffy Zoltan <Zoltan.Arpadffy@scientificgames.se> VMS fixes: disable SCTP by default.
* ABI fixes from 1.0.1-stablesteve2012-02-231-6/+7
|
* PR: 2711steve2012-02-231-0/+4
| | | | | | Submitted by: Tomas Mraz <tmraz@redhat.com> Tolerate bad MIME headers in parser.
* PR: 2696steve2012-02-231-8/+55
| | | | | | | | Submitted by: Rob Austein <sra@hactrn.net> Fix inverted range problem in RFC3779 code. Thanks to Andrew Chi for generating test cases for this bug.
* PR: 2727steve2012-02-231-1/+2
| | | | | | | Submitted by: Bruce Stephens <bruce.stephens@isode.com> Use same construct for EXHEADER in srp/Makefile as other makefiles to cope with possibly empty EXHEADER.
* ABI compliance fixes.steve2012-02-224-74/+70
| | | | Move new structure fields to end of structures.
* SSL export fixes (from Adam Langley) [original from 1.0.1]steve2012-02-225-46/+55
|
* initialise i if n == 0steve2012-02-221-0/+2
|
* Add new APIs EC_curve_nist2nid and EC_curve_nid2nist which convertsteve2012-02-216-2/+71
| | | | | between NIDs and the more common NIST names such as "P-256". Enhance ecparam utility and ECC method to recognise the NIST names for curves.
* Fix bug in CVE-2011-4619: check we have really received a client hellosteve2012-02-162-8/+14
| | | | before rejecting multiple SGC restarts.
View Lorry Controller Status