summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Collapse)Author
2010-12-28- ensure ${DESTDIR}/usr/lib/pkgconfig/ as running make distrib-dirs is notJasper Lievisse Adriaanse
common/encouraged practice
2010-12-28- generate and install pkg-config files for openssl, which more and moreJasper Lievisse Adriaanse
projects depend on being present (e.g. various ports). as discussed with various porters in a hungarian spa help/feedback from ingo@ and also OK halex@ no objections from djm@
2010-12-16move CRYPTO_VIAC3_MAX out of cryptodev.h and into the onlyJonathan Gray
file it will be used from. requested by/ok mikeb@
2010-12-16The VIA ciphers are added to an array of CRYPTO_ALGORITHM_MAX lengthJonathan Gray
which should have been declared as CRYPTO_ALGORITHM_MAX + 1, fix this and reserve enough space for the VIA additions as well. ok/comments from mikeb & deraadt
2010-12-15Security fix for CVE-2010-4180 as mentioned in ↵Jasper Lievisse Adriaanse
http://www.openssl.org/news/secadv_20101202.txt. where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@
2010-11-17- Apply security fix for CVE-2010-3864 (+commit 19998 which fixes the fix).Jasper Lievisse Adriaanse
ok djm@ deraadt@
2010-10-18Disable use of dladdr() on a.out arches, they do not provide it (yet); ok djm@Miod Vallat
2010-10-07OpenSSL grows another undocumented header, apparently needed on armishDamien Miller
2010-10-06More OpenSSL fixes:Damien Miller
- Update local engines for the EVP API change (len u_int => size_t) - Use hw_cryptodev.c instead of eng_cryptodev.c - Make x86_64-xlate.pl always write to the output file and not stdout, fixing "make -j" builds (spotted by naddy@) ok naddy@
2010-10-06Retire SkipjackMike Belopuhov
There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts.
2010-10-04Our make already uses sh -e when executing commands.Christian Weisgerber
Revert the "set -e" additions and kill unneeded subshells. ok djm@
2010-10-03DES_LONG should be u_int on all platforms, it was spuriouslyDamien Miller
u_long on i386. suggested by deraadt@ and kettenis@
2010-10-02percolate up errors from perl asm scripts, correctly enable SHA-256 asm onDamien Miller
amd64
2010-10-01fix -Wall due to API changeDamien Miller
2010-10-01update supporting files, crank library majorsDamien Miller
2010-10-01add missing; yay for cvs!Damien Miller
2010-10-01resolve conflicts, fix local changesDamien Miller
2010-10-01import OpenSSL-1.0.0aDamien Miller
2010-09-09Use mandoc instead of groff to build PostScript manuals; note thatIngo Schwarze
these are not built by default, but only built when MANPS is set. kristaps@ and jmc@ agree with the idea, and the patch doesn't bother deraadt@ at all
2010-09-01Oracle has re-licensed sunrpc under a three-clause BSD license.Todd C. Miller
Update our sources appropriately. OK deraadt@ jsg@
2010-07-01oops. Missed this from my aes-ni commit.Thordur I. Bjornsson
2010-07-01import OpenSSL-1.0.1cThordur I. Bjornsson
2010-07-01AES-NI engine support for OpenSSL.Thordur I. Bjornsson
This is code mostly picked up from upstream OpenSSL, or to be more exact a diff from David Woodhouse <dwmw2 at infradead dot org>. Remember to make includes before doing a build! no objections from djm@ OK deraadt@, reyk@ (AES is about 4.25x faster on his x201 now)
2010-06-29VIA xcrypt for amd64, simpler version of a diff from deraadtJonathan Gray
with suggestions from miod. The codepath doesn't seem to be called yet, this will be investigated later. looks good miod@, ok deraadt@
2010-06-26Add the extendedKeyUsage flags serverAuth and clientAuth. Newer WindowsReyk Floeter
version require these flags to accept the X.509 certificates from the gateway or client; I just add both flags to make it work in both cases and verified it with win7, for example when authenticating against iked. go ahead beck@
2010-05-03When running in pic mode we don't have enough general registers for allJonathan Gray
the xcrypt inputs, hence the dance which is done to make this work. The constraint for the key however was "mr" which is both from memory and from a general register, it seems gcc3 went with the former and gcc4 went with the later in the pic case, so change the constraint for the key to just "m" which gives us more efficient code that both gcc3 and gcc4 are happy with. ok kettenis@
2010-04-20The openssl command line tool treats the non-null terminated bufferTheo de Raadt
"mbuf" as a C string when using the pop3 s_client feature. This causes a segmentation fault with malloc.conf option "J" set when BIO_printf() runs off the end of the buffer. The following patch fixes PR 6282 from Matthew Haub (asked to submit upstream), ok djm
2010-04-14Security fix for CVE-2010-0740Jasper Lievisse Adriaanse
"In TLS connections, certain incorrectly formatted records can cause an OpenSSL client or server to crash due to a read attempt at NULL." http://openssl.org/news/secadv_20100324.txt ok deraadt@ djm@ sthen@
2010-04-03Build all manual pages in base with mandoc(1) instead of groff,Ingo Schwarze
excepting the tbl(1) pages, which are less than twenty. "commit the diff that enables it, now" deraadt@
2010-03-04cherrypick patch from OpenSSL 0.9.8m:Damien Miller
*) Always check bn_wexpend() return values for failure. (CVE-2009-3245) [Martin Olsson, Neel Mehta]
2010-02-03Use MACHINE_CPU instead of MACHINE_ARCH to pick the correct machine dependentMiod Vallat
files or directories when applicable. The inspiration and name of MACHINE_CPU come from NetBSD, although the way to provide it to Makefiles is completely different. ok kettenis@
2010-01-31add a fix from OpenSSL CVS for SA38200.Jasper Lievisse Adriaanse
"Modify compression code so it avoids using ex_data free functions. This stops applications that call CRYPTO_free_all_ex_data() prematurely leaking memory." looks ok to markus@
2009-12-31new ipsca root.David Gwynne
2009-12-31ipsca has expiredDavid Gwynne
2009-12-11plug a memory leak; found by parfait, ok djmTheo de Raadt
2009-11-10pull Ben Lauries blind prefix injection fix for CVE-2009-3555 fromMarkus Friedl
openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@
2009-10-31s/Mhz/MHz/, MHz is a multiple of the SI unit hertz (whose symbol is Hz).Igor Sobrado
2009-10-12another cert that makes godaddy.com and launchpad.net (among others) happy.Federico G. Schwindt
found by Guillaume Protet (guillaume dot protet at mortheres dot info) while testing bzr update. deraadt@ ok
2009-08-08remove expired certificates and add startcom ltd.Federico G. Schwindt
beck@ ok
2009-08-07pull string for memcpy; ok hshoexer@Martynas Venckus
2009-05-25add ipsCA as a valid authority.David Gwynne
ok beck@
2009-04-10resync libssl/libcrypto pod documentation - quite a few more pages andDamien Miller
MLINKS; feedback and ok jmc@
2009-04-06crankus majorisDamien Miller
2009-04-06resolve conflictsDamien Miller
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2009-01-30missing ssl_sock_init() call in init_client() (used byDamien Miller
"openssl s_client"), fix an unlikely memory leak
2009-01-30remove some gratuitous changes that do nothing other than inreaseDamien Miller
the size of the diff against openssl mainline
2009-01-12convert a strdup (into a purpose-allocated buffer) in libcrypto to aDamien Miller
memcpy to avoid linker deprecation warnings; pointed out by dkrause@
2009-01-09openssl-0.9.8j enables RFC3546 TLS extensions by default (e.g. the veryDamien Miller
useful "server name indication" that allows multihomed TLS server), so remove the #define to disable it here
2009-01-09adjust Makefile and crank major for openssl-0.9.8jDamien Miller
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-04 05:36:10 +0000