summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2009-01-09resolve conflictsDamien Miller
2009-01-09import openssl-0.9.8jDamien Miller
2009-01-05update to openssl-0.9.8i; tested by several, especially krw@Damien Miller
2008-09-19fix some cause of bad TEXTREL on i386 and amd64Otto Moerbeek
- global function calls in .init sections (diff makes them via PLT) - calls to global functions in aes-586.S (made static or local) - global variable accesses in rc4-x86_64.S (now made via GOT) from djm@large; ok miod@
2008-09-10use one call to arc4random_buf() instead of lots of arc4random()Damien Miller
2008-09-07Fix merge botch.Mark Kettenis
ok miod@
2008-09-06remove duplicate definition of OPENSSL_DSA_MAX_MODULUS_BITS spottedDamien Miller
by dtucker@
2008-09-06remerge local tweaks, update per-arch configuration headers, updateDamien Miller
Makefiles, crank shlib_version
2008-09-06resolve conflictsDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2008-02-26fix memory leak (in one case of unaligned buffers); from Markus KvetterTheo de Raadt
ok markus
2007-10-10Replace use of strcpy(3) and other pointer goo inMoritz Jodeit
SSL_get_shared_ciphers() with strlcat(3). ok deraadt@ markus@
2007-09-27Fix off-by-one buffer overflow in SSL_get_shared_ciphers().Moritz Jodeit
From OpenSSL_0_9_8-stable branch. ok djm@
2007-09-10Proper use of fseek/fseeko macros.Tobias Stoeckmann
OK joris@, otto@
2007-08-21http://openssl.org/news/patch-CVE-2007-3108.txt; ok pval, deraadtMarkus Friedl
2007-04-06Add proper checks against fgets failure. From Charles Longeau.Ray Lai
OK moritz@, millert@, and jaredy@.
2007-03-20remove some bogus *p tests from charles longeauTed Unangst
ok deraadt millert
2006-10-04openssl security fixes, diff from markus@, ok & "commit it" djm@Peter Valchev
http://www.openssl.org/news/secadv_20060928.txt for more
2006-09-09fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339;Damien Miller
ok beck@ miod@
2006-06-27crank shlib_versionDamien Miller
2006-06-27resolve conflictsDamien Miller
2006-06-27import of openssl-0.9.7jDamien Miller
2006-06-08potential fd leak (we will fix this before we move to cloning)Theo de Raadt
2006-05-04backport checks for degenerate Diffie-Hellman public exponents fromDamien Miller
OpenSSL-0.9.8a, where they were added without a corresponding patch to 0.9.7 or an advisory! ok theo@ markus@
2006-03-14make BN_is_prime() realise that 2 is, in fact, a prime number.Damien Miller
from OpenSSL CVS; ok otto@ deraadt@
2005-10-11fix potential SSL 2.0 rollback ↵Markus Friedl
(http://www.openssl.org//news/secadv_20051011.txt) from http://www.openssl.org/news/patch-CAN-2005-2969.txt
2005-08-01kernal->kernel;Jason McIntyre
from netbsd pr #30872 (anonymous post); ok deraadt@ krw@
2005-05-23no need to byteswap for AES_ASM, from tom@Markus Friedl
2005-05-10import of OpenSSL 0.9.8hMarkus Friedl
2005-05-10import i386 AES asm code from openssl.org; ok and help with testing djm@Markus Friedl
2005-04-29crankDamien Miller
2005-04-29increase EVP_MAX_MD_SIZE to something sane (big enough for SHA512)Damien Miller
2005-04-29resolve conflictsDamien Miller
2005-04-29import of openssl-0.9.7g; tested on platforms from alpha to zaurus, ok deraadt@Damien Miller
2005-04-25typoMiod Vallat
2005-04-23fix lies about snprintfTheo de Raadt
2005-03-30enable openssl DSO (typo, it's -DDSO_DLFCN not -DSO_DLFCN); Douglas SantosMarkus Friedl
2005-03-29belive -> believeMiod Vallat
2005-01-29adjust comment, open_dev_crypto() returns -1 on error.Hans-Joerg Hoexer
ok markus@
2005-01-26on error set correct pointer to NULL.Hans-Joerg Hoexer
From phk@freebsd.org ok markus@
2004-07-13errno changes, lib major version bumps, and general flag dayMarco S Hyman
To build you must: cd /usr/src && make obj && make includes cd lib/libc && make depend && make && NOMAN=1 sudo make install cd /usr/src && make build
2004-06-15machdep.xcrypt now has a different meaning: Instead of > 0 indicatingTheo de Raadt
that AES is there, we now have 3 flag bits: C3_HAS_AES, C3_HAS_SHA (SHA1 & SHA256), and C3_HAS_MM (RSA). Change this code to only look at C3_HAS_AES for now.
2004-04-25update missing pieces from 0.9.7d; ok henningMarkus Friedl
crank minor for API extensions
2004-04-25from openssl, 1.50.2.9, make S/MIME encrypt work again.Markus Friedl
2004-04-08backout for nowMarkus Friedl
2004-04-08merge 0.9.7dMarkus Friedl
2004-04-07import openssl-0.9.7dMarkus Friedl
2004-03-22Unbreak rmd160. Was broken on sparc64 when compiled with gcc3. Fix and reportHans-Joerg Hoexer
by Simon Kellner. XXX This is only a temporary work-around and we still need a REAL fix for XXX this issue. Testing on different archs by marc@ tdvall@ millert@ otto@ ho@ miod@ hshoexer@ ok deraadt@
2004-03-21Insert missing ABORT if EC_GROUP_copy() fails.Tom Cosgrove
ok markus@
2004-03-17return(00); -> return(0); markus@ okAaron Campbell