summaryrefslogtreecommitdiff
path: root/lib/libssl
AgeCommit message (Expand)Author
2015-06-13Split up the logic in CBB_flush to separately handle the lengths.Doug Hogan
2015-06-13Explain the ASN.1 restriction that requires extra logic for encoding.Doug Hogan
2015-06-13When initial capacity is 0, always use NULL buffer.Doug Hogan
2015-06-13Add comments about how the CBS constants are constructed.Doug Hogan
2015-06-13Reject long-form tags in CBS_peek_asn1_tag.Doug Hogan
2015-06-13Fix bad indenting in LibreSSL.Doug Hogan
2015-06-11Avoid an infinite loop that can occur when verifying a message with anJoel Sing
2015-06-11Avoid a potential out-of-bounds read in X509_cmp_time(), due to missingJoel Sing
2015-06-11Avoid an infinite loop that can be triggered by parsing an ASN.1Joel Sing
2015-06-05Fix library search path so we link against the freshly built libcrypto.soTobias Ulmer
2015-05-26Use a relative path against BSDOBJDIR to pick libcrypto; makes cross-libMiod Vallat
2015-05-26Add OPENSSL_NO_EGD to opensslfeatures.h.Brent Cook
2015-05-25Make SSL_CIPHER_get_bits() report ChaCha20-Poly1305 ciphers as usingPhilip Guenther
2015-05-24Maximilian dot Fillinger at uni-duesseldorf dot deIngo Schwarze
2015-05-23bump to version 2.2Brent Cook
2015-05-20No need to check the return value of memcpy() if you actually checked thisMiod Vallat
2015-05-17*** empty log message ***Mark Kettenis
2015-05-15Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls.Jonathan Gray
2015-04-30use strdup() to init stringTheo de Raadt
2015-04-29Add whitespace and replace OPENSSL_free with free in documentation.Doug Hogan
2015-04-29Call CBB_add_space() rather than reimplementing it.Doug Hogan
2015-04-29Rename cbb_buffer_add_u to cbb_add_u and remove redundant code.Doug Hogan
2015-04-29Added len_len error checking for internal cbb_buffer_add_u().Doug Hogan
2015-04-29Call CBS_mem_equal() rather than reimplementing it.Doug Hogan
2015-04-29Avoid NULL deref in CBS_get_any_asn1_element().Doug Hogan
2015-04-29Added error checking for len argument in cbs_get_u().Doug Hogan
2015-04-29free() can handle NULL.Doug Hogan
2015-04-29Add missing BN_CTX_end() calls.Doug Hogan
2015-04-25Don't ignore the reference count in X509_STORE_free.Doug Hogan
2015-04-25Check for invalid leading zeros in CBS_get_asn1_uint64.Doug Hogan
2015-04-23Do not need to buf[0] = 0 before strlcpy(buf, ...Theo de Raadt
2015-04-15Clean up the ssl_bytes_to_cipher_list() API - rather than having theJoel Sing
2015-04-12Remove d2i_X509_PKEY and i2d_X509_PKEY from the SSLeay days.Doug Hogan
2015-04-11Send OPENSSL_issetugid() straight to hell, no final cigarette.Theo de Raadt
2015-04-11Remove all getenv() calls, especially those wrapped by issetugid().Theo de Raadt
2015-04-06readdir() is thread-safe when DIR handles aren't shared, so delete the lock.Philip Guenther
2015-03-31Nuke the OPENSSL_MAX_TLS1_2_CIPHER_LENGTH hack - this has to be enabled atJoel Sing
2015-03-27Factor out the init_buf initialisation code, rather than duplicating itJoel Sing
2015-03-27BUF_MEM_free() has its own explicit NULL check.Joel Sing
2015-03-21Fix indentation that incorrectly implies a different control flow.Doug Hogan
2015-03-20Fix a memory leak in an error path.Doug Hogan
2015-03-19Fix several crash causing defects from OpenSSL.Ted Unangst
2015-03-15Avoid a NULL pointer deref when X509_get_pubkey() returns NULL.Doug Hogan
2015-03-11delay EVP_MD_CTX_init so we don't forget to clean it up.Ted Unangst
2015-03-08Reject DH keys sent by a server if they are considered too small; inspiredMiod Vallat
2015-03-02Fix a minor information leak that was introduced in t1_lib.c r1.71, wherebyJoel Sing
2015-02-25Fix CVE-2014-3570: properly calculate the square of a BIGNUM value.Brent Cook
2012-10-13import OpenSSL-1.0.1cDamien Miller
2015-02-25Fix CVE-2015-0205: Do not accept client authentication with Diffie-HellmanBrent Cook
2015-02-23fourth batch of perlpod(1) to mdoc(7) conversionIngo Schwarze