summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2014-10-07Use strdup() instead of malloc() + memcpy().Miod Vallat
2014-10-07EC_KEY_set_group() does an EC_GROUP_dup() of its argument, so we don'tMiod Vallat
2014-10-05The fixes to X509_PURPOSE_add() in r1.18 actually could cause a globalMiod Vallat
2014-10-05Be sure to check the stack push operation for success in v2i_POLICY_MAPPINGS();Miod Vallat
2014-10-05In v2i_AUTHORITY_INFO_ACCESS(), separate object allocation from object pushMiod Vallat
2014-10-05Memory leak upon error in set_dist_point_name().Miod Vallat
2014-10-05Be sure to check object allocation for success before using them.Miod Vallat
2014-10-05Missing deallocation upon error.Miod Vallat
2014-10-05Fix memory leak in the error path of v2i_AUTHORITY_KEYID().Miod Vallat
2014-10-05compile with c89 (code / decl ordering); from Joakim.Tjernlund@transmode.seTheo de Raadt
2014-10-05Use more specific curves/formats naming for local variables inJoel Sing
2014-10-05Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather thanJoel Sing
2014-10-05Make tls1_get_formatlist() behave the same as tls1_get_curvelist() andJoel Sing
2014-10-03Bump minor version for ECDH auto.Joel Sing
2014-10-03Add support for automatic ephemeral EC keys.Joel Sing
2014-10-03Use string literals in printf style calls so gcc's -Wformat works.Doug Hogan
2014-09-30Clean up EC cipher handling in ssl3_choose_cipher().Joel Sing
2014-09-29Previous fix (1.12) would cause a NULL pointer dereference in the error pathMiod Vallat
2014-09-29check_cert(): be sure to reset ctx->current_crl to NULL before freeing it.Miod Vallat
2014-09-29X509_NAME_get_text_by_OBJ(): make sure we do not pass a negative size toMiod Vallat
2014-09-29X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the secondMiod Vallat
2014-09-28Bump minor after adding SSL_CTX_use_certificate_chain().Reyk Floeter
2014-09-28Add a new API function SSL_CTX_use_certificate_chain() that allows toReyk Floeter
2014-09-28X509v3_add_ext(): do not free stuff we did not allocate in the error path.Miod Vallat
2014-09-28X509_TRUST_add(): check X509_TRUST_get0() return value before dereferencing it,Miod Vallat
2014-09-28Someone (TM) thought it was smart to save memory by using malloc(1) andMiod Vallat
2014-09-27Doh, rev 1.4 had left out one routine with both 32-bit and 64-bit code, whereMiod Vallat
2014-09-27There is not much point checking ecdhp is not NULL... twice.Joel Sing
2014-09-27Check that the specified curve is one of the client preferences.Joel Sing
2014-09-26X509_STORE_new(): do not leak memory upon error.Miod Vallat
2014-09-26X509_issuer_and_serial_hash(): do not leak memory if an error occurs duringMiod Vallat
2014-09-26X509at_add1_attr(): do not free stuff we did not allocate in the error path.Miod Vallat
2014-09-26Now that we have a static version of the default EC formats, also use itJoel Sing
2014-09-23Fix regression introduced in revision 1.15 by using strndup() instead ofMiod Vallat
2014-09-22Refactor and simplify the ECC extension handling. The existing codeJoel Sing
2014-09-22Also check the result from final_finish_mac() against finish_mac_length inJoel Sing
2014-09-22It is possible (although unlikely in practice) for peer_finish_md_len toJoel Sing
2014-09-21Document SSL_OP_TLSEXT_PADDING.Joel Sing
2014-09-21Move the TLS padding extension under an SSL_OP_TLSEXT_PADDING option, whichJoel Sing
2014-09-21a_enum.c used to be a copy of a_int.c with s/INTEGER/ENUMERATED/g , butMiod Vallat
2014-09-21Fix a memory leak in the error path in ASN1_mbstring_ncopy().Miod Vallat
2014-09-19Add CHACHA20 as a cipher symmetric encryption alias.Joel Sing
2014-09-19remove obfuscating parens. man operator is your friend.Ted Unangst
2014-09-07Remove SSL_kDHr, SSL_kDHd and SSL_aDH. No supported ciphersuites use them,Joel Sing
2014-08-26Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is notJoel Sing
2014-08-24constify strerror return valueBrent Cook
2014-08-24Include <sys/time.h> to get struct timevalBrent Cook
2014-08-24Include <sys/select.h> to get selectBrent Cook
2014-08-24Let SSL_CIPHER_description() allocate the buffer for the description,Joel Sing
2014-08-24Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and aJoel Sing