summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2001-04-22CRT and DH+SSL fix from 0.9.6a, ok provos@/deraadt@Markus Friedl
2001-03-10Crank major number. openssl on m68k is now compiled in 32 bit mode insteadTheo de Raadt
of 64 bit mode. This makes ssh -2 run about 10x faster, because the 64 bit mul instructions no longer need emulation.
2001-01-12make sure s always has enough from for trailing \0. even though strlcpy willBob Beck
truncate, thanks to itojun@
2001-01-02do not honour environment variables if issetugid, and even more strongly ↵Theo de Raadt
support the random device
2000-12-18fix util script runs to not assume they are executable.Bob Beck
2000-12-15Oops, missed makefile change, and must crank major on these, someBob Beck
routines which used to be externally used are now macros. ugh.
2000-12-15openssl-engine0.9.6 mergeBob Beck
Again, be sure to whack an old /usr/obj/lib/libssl if you are doing builds
2000-12-15openssl-engine-0.9.6 mergeBob Beck
2000-12-15import openssl-0.9.7-beta1Bob Beck
2000-10-16fix missing closedir() that could allow apacheSSL to leak fd's,Bob Beck
from netbsd (taca) credited to TAKANO Yuji <takachan@running-dog.net>
2000-10-10Fix typo; claudio@core-sdi.com.Federico G. Schwindt
2000-08-02$HOME paranoia: never use getenv("HOME") w/o checking for NULL and non-zeroTodd C. Miller
2000-07-07use %s with fprintfTheo de Raadt
2000-06-15RSA goes in tree for next our next release, as it will be afterBob Beck
Sept 21. Note: This means you shouldn't really be running -current for anything in the United States. Either wait for Sept 21, or for the next release, or move to the free world :)
2000-04-16Fix strcpy/strcat abuse and fix stupid behaviour of the defaultBob Beck
RAND_file_name - changed so that it stats the filename it returns before returing it. If the file won't stat, return DEVRANDOM (for us /dev/arandom) instead, thus making the default behaviour moderately intelligent.
2000-04-16Fix randfile so it doesn't attempt to chmod and write entropy back toBob Beck
devices. This caused people's /dev/arandom's to be permitted 600, which causes rsa to fail to get random data, which results in all kinds of fun with ssh :)
2000-04-16link to correct renamed pagesTheo de Raadt
2000-04-16Fix this for the case where the file is a device - make sure we don'tBob Beck
attempt to read from a device forever.
2000-04-15OpenSSL 0.9.5a mergeBob Beck
2000-04-15import openssl-0.9.7-beta1Bob Beck
2000-04-13Fix an oopsie so these get initialized even when RSA isn't there,Bob Beck
thanks niklas@ *WARNING* - this breaks the patch used in the "ssl26" port - you'll need to use the new minty ssl-intl port, coming right after this
2000-04-03correct Xr to where we actually install the man pagesTheo de Raadt
2000-03-19No, I'm a luser and a moron. this is *not* supposed to be here.Bob Beck
2000-03-19this appears to be needed again.Bob Beck
2000-03-19OpenSSL 0.9.5 mergeBob Beck
*warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs
2000-03-19import openssl-0.9.7-beta1Bob Beck
2000-03-02$OpenBSD$Todd T. Fries
2000-02-24fread() of /dev/random reads an entire huge stdio buffer, instead of the 32Theo de Raadt
bytes that we actually need, thus wasting a lot of system entropy. found by alecm@coyote.uk.sun.com, passed on by Pete.Zaytsev@EBay.Sun.COM
1999-11-23do not assume shell scripts are +x; dTheo de Raadt
1999-09-29import openssl-0.9.7-beta1Bob Beck
1999-09-29new files for OpenSSL 0.9.4Bob Beck
1999-09-29OpenSSL 0.9.4 mergeBob Beck
1999-09-29import openssl-0.9.7-beta1Bob Beck
1999-09-28do not put a bad crypt() in libcrypt, it is in libcTheo de Raadt
1999-09-26crank to version 2 for release, in case any dependencies have crept inTheo de Raadt
1998-10-05Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD buildryker
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible.
2016-09-02make sure to explicitly clear memory that is used for password input.Gleydson Soares
OK tedu@
2016-09-02pool_setipl for pf bitsDavid Gwynne
ok phessler@ henning@
2016-09-02Variable 'imp' is set earlier in cd9660_mount() if it's needed (whenTom Cosgrove
MNT_UPDATE is set in mnt_flag), so remove an unnecessary assignment later. ok bluhm
2016-09-02Add switch(4) support to ifconfigKazuya Goda
ok deraadt@ yasuoka@ reyk@ henning@
2016-09-02If reading fails, do not go into infinite loop asking for a filenameOtto Moerbeek
Happens in bulf build where no tty is available. ok sthen@ naddy@ $(jot -b yes 1000) landry@
2016-09-02Don't bother with 'ghpartnum' in gpt_chk_hdr(); it's not usedTom Cosgrove
ok krw@
2016-09-02turn server preference for ciphers on by defaultGilles Chehade
ok jsing@
2016-09-02Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and addVincent Gross
the relevant counters. Ok mikeb@
2016-09-02Go through the set function like normal people; no functional change.Florian Obser
OK benno@
2016-09-02Do not free the configuration descriptor without setting ``dev->cdesc''Martin Pieuchot
to NULL. Prevent a use after free triggerable with invalid interface descriptor. Found with umap2 and a facedancer21.
2016-09-02Prevent a NULL dereference, triggerable with a crafted configurationMartin Pieuchot
descriptor with a bad type. Found with umap2 and a facedancer21.
2016-09-02Avoid calling usbd_set_config_index() in *_attach() and let the stackMartin Pieuchot
do it instead. If anything bad happen due to a malformed descriptor it makes no sense to try to attach a driver, and bail before probing.
2016-09-02Remove variables 'm' and 'uio' that are only ever assigned toTom Cosgrove
(in swcr_authenc()) ok mikeb@, who pointed out that I'd missed uio
2016-09-02No need to set 'error' to 0 at the beginning of acx_encap(), asTom Cosgrove
we're only going to set it again 10 lines later. ok mpi@