Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-06-02 | swap /usr/include/openssl and /usr/include/ssl, clean up the Makefiles | Markus Friedl | |
get rid old include files; with itojun@ and tdeval@; ok itojun@, deraadt@ | |||
2003-05-12 | merge 0.9.7b with local changes; crank majors for libssl/libcrypto | Markus Friedl | |
2003-05-11 | import 0.9.7b (without idea and rc5) | Markus Friedl | |
2003-05-01 | don't cast pointer to integer, use intptr_t stuff off inttypes.h instead | Peter Valchev | |
ok millert | |||
2003-04-26 | string cleaning; ok tedu | Theo de Raadt | |
2003-04-26 | managment -> management; | Jason McIntyre | |
ok mickey@ | |||
2003-04-08 | remove printf("bar\n"); | Markus Friedl | |
2003-04-06 | sprintf->snprintf. deraadt@ suggestions and ok | Hakan Olsson | |
2003-04-05 | Trivial sprintf() -> snprintf() changes. ok deraadt@ | Hakan Olsson | |
2003-04-04 | oops | Theo de Raadt | |
2003-04-04 | incorrect bounds limit; spotted by ho | Theo de Raadt | |
2003-04-04 | more strcpy & sprintf murder; ho ok | Theo de Raadt | |
2003-04-03 | Correct off-by-one error in previous commit. millert@ ok. | Hakan Olsson | |
2003-04-03 | str{cat,cpy}/sprintf cleanup. markus@, deraadt@ ok | Hakan Olsson | |
2003-04-03 | Remove crypt macro, it conflicts with unistd.h | Hans Insulander | |
ok markus@ | |||
2003-03-19 | Fix for Klima-Pokorny-Rosa attack on RSA in SSL/TLS, see | Markus Friedl | |
http://marc.theaimsgroup.com/?l=bugtraq&m=104811162730834&w=2 | |||
2003-03-17 | update to official patch from openssl.org; ok deraadt@, millert@ | Markus Friedl | |
2003-03-16 | Less strcpy/strcat/sprintf. tdeval@ ok. | Hakan Olsson | |
2003-03-15 | Enforce blinding on RSA operations involving private keys. | Hakan Olsson | |
From http://www.openssl.org/~geoff, modified to be enabled at all times. | |||
2003-03-05 | jmc wrote a combination man page that covers all openssl(1) functionality, | Theo de Raadt | |
based on the pod files from openssl. This may need by-hand updating once in a while, but at least now people can read a real man page instead of the mess that the openssl team provides us with. | |||
2003-02-28 | DSAparams_print_pf() -> DSAparams_print_fp() | Cedric Berger | |
ok deraadt@ | |||
2003-02-21 | check for size < 0 when allocating memory, from openssl (-r1.34) | Markus Friedl | |
2003-02-19 | security fix from openssl 0.9.7a: | Markus Friedl | |
In ssl3_get_record (ssl/s3_pkt.c), minimize information leaked via timing by performing a MAC computation even if incorrrect block cipher padding has been found. This is a countermeasure against active attacks where the attacker has to distinguish between bad padding and a MAC verification error. (CAN-2003-0078) | |||
2003-02-12 | delete duplicate line; jason@ackley.net, 3090 | Theo de Raadt | |
2003-01-31 | we do not need that mess of -I | Theo de Raadt | |
2003-01-04 | spelling | Theo de Raadt | |
2002-12-16 | typo; torh@bogus.net | Markus Friedl | |
2002-12-09 | From Andrushock, s/sucess/success/g | Todd C. Miller | |
2002-12-03 | Crank all library major numbers. Needed due to the fact that we | Todd C. Miller | |
now build libraries with propolice enabled. Without this, existing binaries (such as ports/packages) that link with any system library other than libc will fail with an undefined symbol of "___guard" (__guard on ELF). Pointed out by markus@ and discussed with deraadt@ | |||
2002-10-09 | install SSL_do_handshake(3) as well; markus@ ok | Federico G. Schwindt | |
2002-09-26 | do not install mdc2 man pages; markus ok | Theo de Raadt | |
2002-09-26 | remove MDC2; patents | Markus Friedl | |
2002-09-25 | remove rc5 | Markus Friedl | |
2002-09-23 | pull in fix from openssl-0.9.7-stable-SNAP-20020921: | Markus Friedl | |
*) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller] | |||
2002-09-17 | use arc4random instead of /dev/arandom, | Markus Friedl | |
allows RAND_poll after chroot, ok deraadt, fgsch | |||
2002-09-17 | undo local change, HMAC_Init() already does HMAC_CTX_init if(key && md) | Markus Friedl | |
2002-09-16 | add -elapsed to usage() for USE_TOD, too | Markus Friedl | |
2002-09-16 | sync with 0.9.7-beta3 | Markus Friedl | |
2002-09-16 | remove old files | Markus Friedl | |
2002-09-16 | remove generated file (from -beta3) | Markus Friedl | |
2002-09-14 | merge with openssl-0.9.7-stable-SNAP-20020911, | Markus Friedl | |
new minor for libcrypto (_X509_REQ_print_ex) tested by miod@, pb@ | |||
2002-09-12 | import openssl-0.9.7-stable-SNAP-20020911 (without idea) | Markus Friedl | |
2002-09-12 | import openssl-0.9.7-stable-SNAP-20020911 (without idea) | Markus Friedl | |
2002-09-12 | import openssl-0.9.7-stable-SNAP-20020911 (without idea) | Markus Friedl | |
2002-09-10 | evp.h should not pull in all other header files, especially | Markus Friedl | |
since it's supposed to hid the specific ciphers. this change also avoids problems when evp is used together with kerberos (and <des.h>). ok deraadt@ | |||
2002-09-10 | merge openssl-0.9.7-beta3, tested on vax by miod@ | Markus Friedl | |
2002-09-05 | import openssl-0.9.7-beta3 | Markus Friedl | |
2002-09-05 | import openssl-0.9.7-beta3 | Markus Friedl | |
2002-09-05 | import openssl-0.9.7-beta3 | Markus Friedl | |
2002-09-05 | merge with 0.9.7-beta1 | Markus Friedl | |