summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Expand)Author
2014-10-08use reallocarray() to detect multiplicative integer overflow; obviousTheo de Raadt
2014-10-08obvious realloc -> reallocarray conversionTheo de Raadt
2014-10-08obvious reallocarray()Theo de Raadt
2014-10-08using reallocarray() gives us multiplicative integer overflow checkingTheo de Raadt
2014-10-08obvious conversion of realloc() to reallocarray(). Luckily this isTheo de Raadt
2014-10-08obvious reallocarray(); ok dougTheo de Raadt
2014-10-08obvious malloc -> reallocarray, for mult int oflowTheo de Raadt
2014-10-08use reallocarray(); ok dougTheo de Raadt
2014-10-08reallocarray() to detect potential int overflow; ok dougTheo de Raadt
2014-10-08reallocarray() for mult int overflow detect; ok dougTheo de Raadt
2014-10-07Use strdup() instead of malloc() + memcpy().Miod Vallat
2014-10-07EC_KEY_set_group() does an EC_GROUP_dup() of its argument, so we don'tMiod Vallat
2014-10-06Remove the #ifdef HAVE_SIGACTION from libevent. The structAlexander Bluhm
2014-10-06When verifying whether an IP address is in the commonName of aJeremie Courreges-Anglas
2014-10-06If we have to match against a wildcard in a cert, verify that it containsJeremie Courreges-Anglas
2014-10-05The fixes to X509_PURPOSE_add() in r1.18 actually could cause a globalMiod Vallat
2014-10-05Be sure to check the stack push operation for success in v2i_POLICY_MAPPINGS();Miod Vallat
2014-10-05In v2i_AUTHORITY_INFO_ACCESS(), separate object allocation from object pushMiod Vallat
2014-10-05Memory leak upon error in set_dist_point_name().Miod Vallat
2014-10-05Be sure to check object allocation for success before using them.Miod Vallat
2014-10-05Missing deallocation upon error.Miod Vallat
2014-10-05Fix memory leak in the error path of v2i_AUTHORITY_KEYID().Miod Vallat
2014-10-05compile with c89 (code / decl ordering); from Joakim.Tjernlund@transmode.seTheo de Raadt
2014-10-05Use more specific curves/formats naming for local variables inJoel Sing
2014-10-05Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather thanJoel Sing
2014-10-05Make tls1_get_formatlist() behave the same as tls1_get_curvelist() andJoel Sing
2014-10-03verify changes are major changeTed Unangst
2014-10-03Strip trailing new-lines from syslog messages. This avoids emptyAlexander Bluhm
2014-10-03Bump minor for ECHD auto and other recent changes.Joel Sing
2014-10-03Bump minor version for ECDH auto.Joel Sing
2014-10-03allow disabling hostname and cert verification separately.Ted Unangst
2014-10-03Allow "auto" to be specified as an ECDH curve name and make this theJoel Sing
2014-10-03Add support for automatic ephemeral EC keys.Joel Sing
2014-10-03Use string literals in printf style calls so gcc's -Wformat works.Doug Hogan
2014-10-02Fix a crash when there is text after a failed %Z conversion in strptime.Doug Hogan
2014-10-01openssl.cnf tweaks following recent changes to usr.bin/openssl:Stuart Henderson
2014-09-30Clean up EC cipher handling in ssl3_choose_cipher().Joel Sing
2014-09-29Bump major to 28, regen .pc and header with new version info.James Turner
2014-09-29Merge conflicts.James Turner
2014-09-29Update sqlite3 to 3.8.6. A list of changes are available here:James Turner
2014-09-29Previous fix (1.12) would cause a NULL pointer dereference in the error pathMiod Vallat
2014-09-29Move cipher configuration handling to the shared SSL configuration functionJoel Sing
2014-09-29Add an option that allows the enabled SSL protocols to be explicitlyJoel Sing
2014-09-29When freeing the config, explicitly call ressl_config_clear_keys() ratherJoel Sing
2014-09-29check_cert(): be sure to reset ctx->current_crl to NULL before freeing it.Miod Vallat
2014-09-29X509_NAME_get_text_by_OBJ(): make sure we do not pass a negative size toMiod Vallat
2014-09-29X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the secondMiod Vallat
2014-09-28Wrap long lines and add missing argument name.Joel Sing
2014-09-28Bump minor after adding SSL_CTX_use_certificate_chain().Reyk Floeter
2014-09-28Provide a ressl config function that explicitly clears keys.Joel Sing