summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Collapse)Author
2009-04-10resync libssl/libcrypto pod documentation - quite a few more pages andDamien Miller
MLINKS; feedback and ok jmc@
2009-04-06crankus majorisDamien Miller
2009-04-06resolve conflictsDamien Miller
2009-04-06import of OpenSSL 0.9.8kDamien Miller
2009-01-30missing ssl_sock_init() call in init_client() (used byDamien Miller
"openssl s_client"), fix an unlikely memory leak
2009-01-30remove some gratuitous changes that do nothing other than inreaseDamien Miller
the size of the diff against openssl mainline
2009-01-12convert a strdup (into a purpose-allocated buffer) in libcrypto to aDamien Miller
memcpy to avoid linker deprecation warnings; pointed out by dkrause@
2009-01-09openssl-0.9.8j enables RFC3546 TLS extensions by default (e.g. the veryDamien Miller
useful "server name indication" that allows multihomed TLS server), so remove the #define to disable it here
2009-01-09adjust Makefile and crank major for openssl-0.9.8jDamien Miller
2009-01-09resolve conflictsDamien Miller
2009-01-09import openssl-0.9.8jDamien Miller
2009-01-08Add a missing MLINK for BIO_new_socket.Owain Ainsworth
Noticed by blambert@. Ok jmc@.
2009-01-05import openssl-0.9.8jDamien Miller
2009-01-05update to openssl-0.9.8i; tested by several, especially krw@Damien Miller
2008-09-19fix some cause of bad TEXTREL on i386 and amd64Otto Moerbeek
- global function calls in .init sections (diff makes them via PLT) - calls to global functions in aes-586.S (made static or local) - global variable accesses in rc4-x86_64.S (now made via GOT) from djm@large; ok miod@
2008-09-10use one call to arc4random_buf() instead of lots of arc4random()Damien Miller
2008-09-08turn off CAST assembler code (i.e. use C implementation) as it has badDamien Miller
relocations that lead to libcrypto.so being marked TEXTREL; linker-fu from drahn@ "go ahead" deraadt@
2008-09-07sparc now requires this bloated library to be -fPICTheo de Raadt
2008-09-07Fix merge botch.Mark Kettenis
ok miod@
2008-09-06remove duplicate definition of OPENSSL_DSA_MAX_MODULUS_BITS spottedDamien Miller
by dtucker@
2008-09-06remerge local tweaks, update per-arch configuration headers, updateDamien Miller
Makefiles, crank shlib_version
2008-09-06resolve conflictsDamien Miller
2008-09-06import of OpenSSL 0.9.8hDamien Miller
2008-07-28Install man pages for the BIO_* libcrypto functions, but not bio.3Jonathan Gray
as the page doesn't directly describe any functions. ok deraadt@
2008-07-25i have to crank this for a ridiculous reason, to save me about 4 hours of workTheo de Raadt
2008-05-07remove duplicates; remove des_random_key; remove unused; sort MLINKS; ok jmc@Markus Friedl
2008-02-26fix memory leak (in one case of unaligned buffers); from Markus KvetterTheo de Raadt
ok markus
2007-10-10Replace use of strcpy(3) and other pointer goo inMoritz Jodeit
SSL_get_shared_ciphers() with strlcat(3). ok deraadt@ markus@
2007-09-27Fix off-by-one buffer overflow in SSL_get_shared_ciphers().Moritz Jodeit
From OpenSSL_0_9_8-stable branch. ok djm@
2007-09-10Proper use of fseek/fseeko macros.Tobias Stoeckmann
OK joris@, otto@
2007-08-21http://openssl.org/news/patch-CVE-2007-3108.txt; ok pval, deraadtMarkus Friedl
2007-08-06Correctly NUL terminate the message buffer that is used with theClaudio Jeker
-starttls option. Without this openssl s_client -starttls crashed with malloc.conf -> J. OK deraadt@, hshoexer@
2007-05-26More comment typos from Diego Casati. Including winners like funtion, allmost,Kenneth R Westerback
oustside, seqencer, toghether, nessissary, etc.
2007-04-06Add proper checks against fgets failure. From Charles Longeau.Ray Lai
OK moritz@, millert@, and jaredy@.
2007-03-28Add the cRLSign bit by default, so that certs generated using this fileChad Loder
will be able to sign CRLs. OK reyk, hshoexer, millert
2007-03-20remove some bogus *p tests from charles longeauTed Unangst
ok deraadt millert
2007-02-17remove two expired certificates, diff from <Christian_Rusch@genua.de>Alexander von Gernler
ok jakob@
2007-01-03Fix format string misuse in kssl_err_set(), which is notMoritz Jodeit
called with user-supplied strings at the moment. ok markus@
2006-11-09add openssl PEM_* manpages; ok deraadt, hshoexer, djmMarkus Friedl
2006-10-14architecture sh (landisk) is little endian.Dale Rahn
2006-10-11Initial config for sh, copied from arm.Jonathan Gray
ok miod@ drahn@
2006-10-04openssl security fixes, diff from markus@, ok & "commit it" djm@Peter Valchev
http://www.openssl.org/news/secadv_20060928.txt for more
2006-09-25Use S_IS* macros insted of masking with S_IF* flags. The latter mayOtto Moerbeek
have multiple bits set, which lead to surprising results. Spotted by Paul Stoeber. ok djm@
2006-09-09fix RSA signature padding vulnerability in OpenSSL libcrypto CVE-2006-4339;Damien Miller
ok beck@ miod@
2006-06-27crank shlib_versionDamien Miller
2006-06-27resolve conflictsDamien Miller
2006-06-27import of openssl-0.9.7jDamien Miller
2006-06-12add class 1 and class 3 root certificates from CAcert.org. ok beck@Jakob Schlyter
2006-06-08potential fd leak (we will fix this before we move to cloning)Theo de Raadt
2006-06-07remove expired certificates. ok beck@Jakob Schlyter