Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-04-22 | CRT and DH+SSL fix from 0.9.6a, ok provos@/deraadt@ | Markus Friedl | |
2001-03-10 | Crank major number. openssl on m68k is now compiled in 32 bit mode instead | Theo de Raadt | |
of 64 bit mode. This makes ssh -2 run about 10x faster, because the 64 bit mul instructions no longer need emulation. | |||
2001-01-12 | make sure s always has enough from for trailing \0. even though strlcpy will | Bob Beck | |
truncate, thanks to itojun@ | |||
2001-01-02 | do not honour environment variables if issetugid, and even more strongly ↵ | Theo de Raadt | |
support the random device | |||
2000-12-18 | fix util script runs to not assume they are executable. | Bob Beck | |
2000-12-15 | Oops, missed makefile change, and must crank major on these, some | Bob Beck | |
routines which used to be externally used are now macros. ugh. | |||
2000-12-15 | openssl-engine0.9.6 merge | Bob Beck | |
Again, be sure to whack an old /usr/obj/lib/libssl if you are doing builds | |||
2000-12-15 | openssl-engine-0.9.6 merge | Bob Beck | |
2000-12-15 | import openssl-0.9.7-beta1 | Bob Beck | |
2000-10-16 | fix missing closedir() that could allow apacheSSL to leak fd's, | Bob Beck | |
from netbsd (taca) credited to TAKANO Yuji <takachan@running-dog.net> | |||
2000-10-10 | Fix typo; claudio@core-sdi.com. | Federico G. Schwindt | |
2000-08-02 | $HOME paranoia: never use getenv("HOME") w/o checking for NULL and non-zero | Todd C. Miller | |
2000-07-07 | use %s with fprintf | Theo de Raadt | |
2000-06-15 | RSA goes in tree for next our next release, as it will be after | Bob Beck | |
Sept 21. Note: This means you shouldn't really be running -current for anything in the United States. Either wait for Sept 21, or for the next release, or move to the free world :) | |||
2000-04-16 | Fix strcpy/strcat abuse and fix stupid behaviour of the default | Bob Beck | |
RAND_file_name - changed so that it stats the filename it returns before returing it. If the file won't stat, return DEVRANDOM (for us /dev/arandom) instead, thus making the default behaviour moderately intelligent. | |||
2000-04-16 | Fix randfile so it doesn't attempt to chmod and write entropy back to | Bob Beck | |
devices. This caused people's /dev/arandom's to be permitted 600, which causes rsa to fail to get random data, which results in all kinds of fun with ssh :) | |||
2000-04-16 | link to correct renamed pages | Theo de Raadt | |
2000-04-16 | Fix this for the case where the file is a device - make sure we don't | Bob Beck | |
attempt to read from a device forever. | |||
2000-04-15 | OpenSSL 0.9.5a merge | Bob Beck | |
2000-04-15 | import openssl-0.9.7-beta1 | Bob Beck | |
2000-04-13 | Fix an oopsie so these get initialized even when RSA isn't there, | Bob Beck | |
thanks niklas@ *WARNING* - this breaks the patch used in the "ssl26" port - you'll need to use the new minty ssl-intl port, coming right after this | |||
2000-04-03 | correct Xr to where we actually install the man pages | Theo de Raadt | |
2000-03-19 | No, I'm a luser and a moron. this is *not* supposed to be here. | Bob Beck | |
2000-03-19 | this appears to be needed again. | Bob Beck | |
2000-03-19 | OpenSSL 0.9.5 merge | Bob Beck | |
*warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs | |||
2000-03-19 | import openssl-0.9.7-beta1 | Bob Beck | |
2000-03-02 | $OpenBSD$ | Todd T. Fries | |
2000-02-24 | fread() of /dev/random reads an entire huge stdio buffer, instead of the 32 | Theo de Raadt | |
bytes that we actually need, thus wasting a lot of system entropy. found by alecm@coyote.uk.sun.com, passed on by Pete.Zaytsev@EBay.Sun.COM | |||
1999-11-23 | do not assume shell scripts are +x; d | Theo de Raadt | |
1999-09-29 | import openssl-0.9.7-beta1 | Bob Beck | |
1999-09-29 | new files for OpenSSL 0.9.4 | Bob Beck | |
1999-09-29 | OpenSSL 0.9.4 merge | Bob Beck | |
1999-09-29 | import openssl-0.9.7-beta1 | Bob Beck | |
1999-09-28 | do not put a bad crypt() in libcrypt, it is in libc | Theo de Raadt | |
1999-09-26 | crank to version 2 for release, in case any dependencies have crept in | Theo de Raadt | |
1998-10-05 | Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build | ryker | |
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible. | |||
2016-09-02 | make sure to explicitly clear memory that is used for password input. | Gleydson Soares | |
OK tedu@ | |||
2016-09-02 | pool_setipl for pf bits | David Gwynne | |
ok phessler@ henning@ | |||
2016-09-02 | Variable 'imp' is set earlier in cd9660_mount() if it's needed (when | Tom Cosgrove | |
MNT_UPDATE is set in mnt_flag), so remove an unnecessary assignment later. ok bluhm | |||
2016-09-02 | Add switch(4) support to ifconfig | Kazuya Goda | |
ok deraadt@ yasuoka@ reyk@ henning@ | |||
2016-09-02 | If reading fails, do not go into infinite loop asking for a filename | Otto Moerbeek | |
Happens in bulf build where no tty is available. ok sthen@ naddy@ $(jot -b yes 1000) landry@ | |||
2016-09-02 | Don't bother with 'ghpartnum' in gpt_chk_hdr(); it's not used | Tom Cosgrove | |
ok krw@ | |||
2016-09-02 | turn server preference for ciphers on by default | Gilles Chehade | |
ok jsing@ | |||
2016-09-02 | Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and add | Vincent Gross | |
the relevant counters. Ok mikeb@ | |||
2016-09-02 | Go through the set function like normal people; no functional change. | Florian Obser | |
OK benno@ | |||
2016-09-02 | Do not free the configuration descriptor without setting ``dev->cdesc'' | Martin Pieuchot | |
to NULL. Prevent a use after free triggerable with invalid interface descriptor. Found with umap2 and a facedancer21. | |||
2016-09-02 | Prevent a NULL dereference, triggerable with a crafted configuration | Martin Pieuchot | |
descriptor with a bad type. Found with umap2 and a facedancer21. | |||
2016-09-02 | Avoid calling usbd_set_config_index() in *_attach() and let the stack | Martin Pieuchot | |
do it instead. If anything bad happen due to a malformed descriptor it makes no sense to try to attach a driver, and bail before probing. | |||
2016-09-02 | Remove variables 'm' and 'uio' that are only ever assigned to | Tom Cosgrove | |
(in swcr_authenc()) ok mikeb@, who pointed out that I'd missed uio | |||
2016-09-02 | No need to set 'error' to 0 at the beginning of acx_encap(), as | Tom Cosgrove | |
we're only going to set it again 10 lines later. ok mpi@ |