summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Collapse)Author
2003-08-25You shall NOT BREAK THE TREETheo de Raadt
2003-08-25Setup /dev/crypto early (SSL_library_init) to make sure it's actually doneJason Wright
for all applications; ok markus and deraadt
2003-08-06Remove some double semicolons (hmm, do two semis equal a maxi?).Todd C. Miller
I've skipped the GNU stuff for now. From Patrick Latifi.
2003-05-12merge 0.9.7b with local changes; crank majors for libssl/libcryptoMarkus Friedl
2003-05-11import 0.9.7b (without idea and rc5)Markus Friedl
2003-03-19Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS, seeMarkus Friedl
http://marc.theaimsgroup.com/?l=bugtraq&m=104811162730834&w=2
2003-02-19security fix from openssl 0.9.7a:Markus Friedl
In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078)
2002-12-03Crank all library major numbers. Needed due to the fact that weTodd C. Miller
now build libraries with propolice enabled. Without this, existing binaries (such as ports/packages) that link with any system library other than libc will fail with an undefined symbol of "___guard" (__guard on ELF). Pointed out by markus@ and discussed with deraadt@
2002-09-23pull in fix from openssl-0.9.7-stable-SNAP-20020921:Markus Friedl
*) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller]
2002-09-14merge with openssl-0.9.7-stable-SNAP-20020911,Markus Friedl
new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@
2002-09-10merge openssl-0.9.7-beta3, tested on vax by miod@Markus Friedl
2002-09-05import openssl-0.9.7-beta3Markus Friedl
2002-09-05merge with 0.9.7-beta1Markus Friedl
2002-09-04more cruftMarkus Friedl
2002-09-04more cruft.Markus Friedl
2002-09-04execute bourne shell scripts with 'sh' and not with $SHELLMarkus Friedl
2002-09-03sync tests with 0.9.7-beta1Markus Friedl
2002-09-03sync these files with openssl-0.9.7-beta1, tooMarkus Friedl
2002-08-30protect <openssl/krb5_asn.h> with OPENSSL_NO_KRB5Markus Friedl
2002-07-30sync with http://www.openssl.org/news/patch_20020730_0_9_7.txtMarkus Friedl
(adds fix for unused kerberos and engine code, and some more assertions, as well as a 64bit integer string fix for conf_mod.c)
2002-07-30apply patches from OpenSSL Security Advisory [30 July 2002],Markus Friedl
http://marc.theaimsgroup.com/?l=openssl-dev&m=102802395104110&w=2
2002-06-07do not propose IDEA cipher on SSL connection. tested by beckJun-ichiro itojun Hagino
noticed by Sverre Froyen <sverre@viewmark.com>
2002-06-07Merge OpenSSL 0.9.7-stable-20020605,Bob Beck
correctly autogenerate obj_mac.h
2002-05-21Merge openssl-0.9.7-stable-SNAP-20020519Bob Beck
2002-05-15OpenSSL 0.9.7 stable 2002 05 08 mergeBob Beck
2002-05-15OpenSSL 0.9.7Bob Beck
2001-08-01import openssl-0.9.7-beta1Bob Beck
2001-08-01merge openssl 0.9.6b-engineBob Beck
Note that this is a maintenence release, API's appear *not* to have changed. As such, I have only increased the minor number on these libraries
2001-06-22openssl-engine-0.9.6a mergeBob Beck
2001-04-23crank ssl lib version, just in caseTheo de Raadt
2001-04-22CRT and DH+SSL fix from 0.9.6a, ok provos@/deraadt@Markus Friedl
2001-03-10Crank major number. openssl on m68k is now compiled in 32 bit mode insteadTheo de Raadt
of 64 bit mode. This makes ssh -2 run about 10x faster, because the 64 bit mul instructions no longer need emulation.
2000-12-15Oops, missed makefile change, and must crank major on these, someBob Beck
routines which used to be externally used are now macros. ugh.
2000-12-15openssl-engine0.9.6 mergeBob Beck
Again, be sure to whack an old /usr/obj/lib/libssl if you are doing builds
2000-12-15openssl-engine-0.9.6 mergeBob Beck
2000-12-15import openssl-0.9.7-beta1Bob Beck
2000-10-16fix missing closedir() that could allow apacheSSL to leak fd's,Bob Beck
from netbsd (taca) credited to TAKANO Yuji <takachan@running-dog.net>
2000-06-15RSA goes in tree for next our next release, as it will be afterBob Beck
Sept 21. Note: This means you shouldn't really be running -current for anything in the United States. Either wait for Sept 21, or for the next release, or move to the free world :)
2000-04-15OpenSSL 0.9.5a mergeBob Beck
2000-03-19OpenSSL 0.9.5 mergeBob Beck
*warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs
1999-11-23do not assume shell scripts are +x; dTheo de Raadt
1999-09-29OpenSSL 0.9.4 mergeBob Beck
1999-09-29import openssl-0.9.7-beta1Bob Beck
1999-09-26crank to version 2 for release, in case any dependencies have crept inTheo de Raadt
1998-10-05Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD buildryker
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible.
2016-08-31Crank minor due to API additionBob Beck
2016-08-31Avoid undefined-behavior right-shifting by a word-size # of bits.Brent Cook
Found with STACK, originally from OpenSSL, ok @beck
2016-08-31Bring in functions used by stunnel and exim from BoringSSL - this bringsBob Beck
in X509_check_host, X509_check_email, X509_check_ip, and X509_check_ip_asc, with some cleanup on the way in by myself and jsing@ ok bcook@
2016-08-31Fix some very unnecessary convoultion.Bob Beck
ok krw@
2016-08-27Be more strict when parsing TLS extensions.Joel Sing
Based on a diff from Kinichiro Inoguchi. ok beck@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-28 23:39:15 +0000