| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2014-10-15 | Add cipher aliases for DHE (the correct name for EDH) and ECDHE (the | Joel Sing | |
| correct name for EECDH). The EDH and EECDH aliases remain for backwards compatibility. | |||
| 2014-10-03 | Use string literals in printf style calls so gcc's -Wformat works. | Doug Hogan | |
| ok tedu@, miod@ | |||
| 2014-09-19 | Add CHACHA20 as a cipher symmetric encryption alias. | Joel Sing | |
| From Ming <gzchenym at 126.com> | |||
| 2014-09-07 | Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them, | Joel Sing | |
| nor do we plan on supporting them. ok guenther@ | |||
| 2014-07-12 | The correct name for EDH is DHE, likewise EECDH should be ECDHE. | Joel Sing | |
| Based on changes to OpenSSL trunk. ok beck@ miod@ | |||
| 2014-07-12 | Remove remnants from PSK, KRB5 and SRP. | Joel Sing | |
| ok beck@ miod@ | |||
| 2014-07-12 | Make disabling last cipher work. | Philip Guenther | |
| From Thijs Alkemade via OpenSSL trunk ok miod@ | |||
| 2014-07-11 | Remove the PSK code. We don't need to drag around this | Bob Beck | |
| baggage. ok miod@ jsing@ | |||
| 2014-07-10 | Remove more compression tendrils. | Joel Sing | |
| ok tedu@ | |||
| 2014-07-10 | Remove more compression related code. | Joel Sing | |
| 2014-07-10 | Put back some parts of the public SSL API that should not have been | Joel Sing | |
| completely decompressed. | |||
| 2014-07-10 | decompress libssl. ok beck jsing | Ted Unangst | |
| 2014-07-09 | Clean up and simplify SSL_CIPHER_description by always using asprintf. If | Joel Sing | |
| a buffer was supplied then we copy the result into it. Also make the failure case return values match the documentation. Joint work with beck@ | |||
| 2014-07-09 | tedu the SSL export cipher handling - since we do not have enabled export | Joel Sing | |
| ciphers we no longer need the flags or code to support it. ok beck@ miod@ | |||
| 2014-07-08 | Remove SSL_FIPS. | Joel Sing | |
| ok deraadt@ miod@ | |||
| 2014-06-18 | Use asprintf() instead of a fixed 128-byte size in SSL_CIPHER_description() | Miod Vallat | |
| when no storage buffer is passed. ok deraadt@ tedu@ | |||
| 2014-06-18 | In SSL_COMP_add_compression_method(), make sure error cases actually return | Miod Vallat | |
| `error' rather than `success'. ok deraadt@ | |||
| 2014-06-13 | Add ChaCha20-Poly1305 based ciphersuites. | Joel Sing | |
| Based on Adam Langley's chromium patches. Tested by and ok sthen@ | |||
| 2014-06-12 | tags as requested by miod and tedu | Theo de Raadt | |
| 2014-06-08 | Add an SSL_CIPHER_ALGORITHM2_AEAD flag that is used to mark a cipher as | Joel Sing | |
| using EVP_AEAD. Also provide an EVP_AEAD-only equivalent of ssl_cipher_get_evp(). | |||
| 2014-06-01 | Use C99 initialisers for cipher_aliases. This improves readability, | Joel Sing | |
| removes the need for zero values to be specified (meaning that we usually specify two fields instead of 12), makes the field names grepable and protects from future field reordering/removal. ok beck@ miod@ | |||
| 2014-05-30 | More KNF. | Joel Sing | |
| 2014-05-29 | unidef DH, ECDH, and ECDSA. there's no purpose to a libssl without them. | Ted Unangst | |
| ok deraadt jsing | |||
| 2014-05-29 | repair KNF indent | Theo de Raadt | |
| 2014-05-27 | Wrap some long lines. | Joel Sing | |
| 2014-05-27 | Remove MemCheck_{on,off} that escaped last time around. | Joel Sing | |
| 2014-05-27 | More KNF. | Joel Sing | |
| 2014-05-26 | Unchecked malloc() return value in SSL_COMP_add_compression_method(), in the | Miod Vallat | |
| !OPENSSL_NO_COMP case. Does not affect OpenBSD as we compile the opposite code path. | |||
| 2014-05-25 | Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much of | Joel Sing | |
| this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@ | |||
| 2014-05-25 | Turn off MemCheck_on and MemCheck_off. These calls are pointless since the | Joel Sing | |
| crypto memory debugging code has been castrated. ok miod@ "kill it" beck@ | |||
| 2014-05-25 | The ssl_ciper_get_evp() function is currently overloaded to also return the | Joel Sing | |
| compression associated with the SSL session. Based on one of Adam Langley's chromium diffs, factor out the compression handling code into a separate ssl_cipher_get_comp() function. Rewrite the compression handling code to avoid pointless duplication and so that failures are actually returned to and detectable by the caller. ok miod@ | |||
| 2014-05-24 | In ssl_cipher_get_evp(), fix off-by-one in index validation before accessing | Miod Vallat | |
| arrays. "kind of scary" deraadt@, ok guenther@ | |||
| 2014-05-20 | KSSL is dead... nuke KSSL_DEBUG from orbit. | Joel Sing | |
| ok beck@ miod@ | |||
| 2014-05-05 | Remove SRP and Kerberos support from libssl. These are complex protocols | Ted Unangst | |
| all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | |||
| 2014-04-22 | switch to reallocarray | Ted Unangst | |
| 2014-04-21 | use mallocarray(a,b) instead of malloc(a*b) | Theo de Raadt | |
| 2014-04-21 | more malloc/realloc/calloc cleanups; ok beck kettenis | Theo de Raadt | |
| 2014-04-20 | Use calloc(a,b) instead of malloc(a*b) + memset(a*b). I don't know if | Theo de Raadt | |
| this instance is integer-overflowable, but we cannot keep hand-auditing every instance (or apathetically ignoring these issues) when the simple calloc idiom is better in the presence of a good calloc(). It is simply unfeasible to always enter correct range checks before the aggregate size calculation, just go find some 4000 lines of code, REPAIR THEM ALL, then come back and tell me I am wrong. This only works on systems where calloc() does the integer overflow check, but if your system doesn't do this, you need to ask your vendor WHY THEY ARE 10 YEARS BEHIND IN BEST PRACTICE? This is the kind of problem that needs to be solved at the right layer. malloc integer-overflow was implicated in the 2002 OpenSSH hole. OpenSSH and much other code is now written to use calloc(), for instance OpenSSH has 103 calls to it. We feel safer with our use of calloc(). It is a natural approach for us to use calloc(). How safe do you feel on systems which lack that range check in their calloc()? Good writeup from 2006: http://undeadly.org/cgi?action=article&sid=20060330071917 | |||
| 2014-04-19 | More KNF and style consistency tweaks | Philip Guenther | |
| 2014-04-17 | always build in RSA and DSA. ok deraadt miod | Ted Unangst | |
| 2014-04-17 | Change library to use intrinsic memory allocation functions instead of | Bob Beck | |
| OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||
| 2014-04-16 | add back SRP. i was being too greedy. | Ted Unangst | |
| 2014-04-16 | disentangle SRP code from TLS | Ted Unangst | |
| 2014-04-15 | repair some whitespace | Ted Unangst | |
| 2014-04-15 | remove FIPS mode support. people who require FIPS can buy something that | Ted Unangst | |
| meets their needs, but dumping it in here only penalizes the rest of us. ok miod | |||
| 2014-04-15 | Send the rotIBM stream cipher (ebcdic) to Valhalla to party for eternity | Bob Beck | |
| with the bearded ones... some API's that nobody should be using will dissapear with this commit. | |||
| 2014-04-14 | Flense all use of BIO_snprintf from ssl source - use the real one instead, | Bob Beck | |
| and allow for the normal posix mandated return values instead of the nonstandard one from BIO_snprintf. ok miod@ | |||
| 2014-04-14 | First pass at applying KNF to the OpenSSL code, which almost makes it | Joel Sing | |
| readable. This pass is whitespace only and can readily be verified using tr and md5. | |||
| 2014-04-13 | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | Miod Vallat | |
| 2012-10-13 | resolve conflicts | Damien Miller | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |