summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Collapse)Author
2003-06-02swap /usr/include/openssl and /usr/include/ssl, clean up the MakefilesMarkus Friedl
get rid old include files; with itojun@ and tdeval@; ok itojun@, deraadt@
2003-05-12merge 0.9.7b with local changes; crank majors for libssl/libcryptoMarkus Friedl
2003-05-11import 0.9.7b (without idea and rc5)Markus Friedl
2003-05-01don't cast pointer to integer, use intptr_t stuff off inttypes.h insteadPeter Valchev
ok millert
2003-04-26string cleaning; ok teduTheo de Raadt
2003-04-26managment -> management;Jason McIntyre
ok mickey@
2003-04-08remove printf("bar\n");Markus Friedl
2003-04-06sprintf->snprintf. deraadt@ suggestions and okHakan Olsson
2003-04-05Trivial sprintf() -> snprintf() changes. ok deraadt@Hakan Olsson
2003-04-04oopsTheo de Raadt
2003-04-04incorrect bounds limit; spotted by hoTheo de Raadt
2003-04-04more strcpy & sprintf murder; ho okTheo de Raadt
2003-04-03Correct off-by-one error in previous commit. millert@ ok.Hakan Olsson
2003-04-03str{cat,cpy}/sprintf cleanup. markus@, deraadt@ okHakan Olsson
2003-04-03Remove crypt macro, it conflicts with unistd.hHans Insulander
ok markus@
2003-03-19Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS, seeMarkus Friedl
http://marc.theaimsgroup.com/?l=bugtraq&m=104811162730834&w=2
2003-03-17update to official patch from openssl.org; ok deraadt@, millert@Markus Friedl
2003-03-16Less strcpy/strcat/sprintf. tdeval@ ok.Hakan Olsson
2003-03-15Enforce blinding on RSA operations involving private keys.Hakan Olsson
From http://www.openssl.org/~geoff, modified to be enabled at all times.
2003-03-05jmc wrote a combination man page that covers all openssl(1) functionality,Theo de Raadt
based on the pod files from openssl. This may need by-hand updating once in a while, but at least now people can read a real man page instead of the mess that the openssl team provides us with.
2003-02-28DSAparams_print_pf() -> DSAparams_print_fp()Cedric Berger
ok deraadt@
2003-02-21check for size < 0 when allocating memory, from openssl (-r1.34)Markus Friedl
2003-02-19security fix from openssl 0.9.7a:Markus Friedl
In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078)
2003-02-12delete duplicate line; jason@ackley.net, 3090Theo de Raadt
2003-01-31we do not need that mess of -ITheo de Raadt
2003-01-04spellingTheo de Raadt
2002-12-16typo; torh@bogus.netMarkus Friedl
2002-12-09From Andrushock, s/sucess/success/gTodd C. Miller
2002-12-03Crank all library major numbers. Needed due to the fact that weTodd C. Miller
now build libraries with propolice enabled. Without this, existing binaries (such as ports/packages) that link with any system library other than libc will fail with an undefined symbol of "___guard" (__guard on ELF). Pointed out by markus@ and discussed with deraadt@
2002-10-09install SSL_do_handshake(3) as well; markus@ okFederico G. Schwindt
2002-09-26do not install mdc2 man pages; markus okTheo de Raadt
2002-09-26remove MDC2; patentsMarkus Friedl
2002-09-25remove rc5Markus Friedl
2002-09-23pull in fix from openssl-0.9.7-stable-SNAP-20020921:Markus Friedl
*) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller]
2002-09-17use arc4random instead of /dev/arandom,Markus Friedl
allows RAND_poll after chroot, ok deraadt, fgsch
2002-09-17undo local change, HMAC_Init() already does HMAC_CTX_init if(key && md)Markus Friedl
2002-09-16add -elapsed to usage() for USE_TOD, tooMarkus Friedl
2002-09-16sync with 0.9.7-beta3Markus Friedl
2002-09-16remove old filesMarkus Friedl
2002-09-16remove generated file (from -beta3)Markus Friedl
2002-09-14merge with openssl-0.9.7-stable-SNAP-20020911,Markus Friedl
new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@
2002-09-12import openssl-0.9.7-stable-SNAP-20020911 (without idea)Markus Friedl
2002-09-12import openssl-0.9.7-stable-SNAP-20020911 (without idea)Markus Friedl
2002-09-12import openssl-0.9.7-stable-SNAP-20020911 (without idea)Markus Friedl
2002-09-10evp.h should not pull in all other header files, especiallyMarkus Friedl
since it's supposed to hid the specific ciphers. this change also avoids problems when evp is used together with kerberos (and <des.h>). ok deraadt@
2002-09-10merge openssl-0.9.7-beta3, tested on vax by miod@Markus Friedl
2002-09-05import openssl-0.9.7-beta3Markus Friedl
2002-09-05import openssl-0.9.7-beta3Markus Friedl
2002-09-05import openssl-0.9.7-beta3Markus Friedl
2002-09-05merge with 0.9.7-beta1Markus Friedl