Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-05-01 | Update with recently added objects. | Joel Sing | |
ok miod@ | |||
2012-10-13 | import OpenSSL-1.0.1c | Damien Miller | |
2009-04-06 | import of OpenSSL 0.9.8k | Damien Miller | |
2014-05-01 | Extend fread() and fwrite() to check for integer overflow, in which case | Theo de Raadt | |
errno EOVERFLOW is returned and error is set on the FILE. ok kettenis miod beck | |||
2014-05-01 | Nuke unused evptests.txt - the real one is over in regress. | Joel Sing | |
ok miod@ | |||
2014-05-01 | Provide an EVP implementation for ChaCha. | Joel Sing | |
ok miod@ | |||
2014-05-01 | Add ChaCha to libcrypto, based on djb's public domain implementation. | Joel Sing | |
ok deraadt@ | |||
2014-05-01 | Add support for the french ANSSI FRP256v1 elliptic curve. | Miod Vallat | |
While not to be considered a good choice of elliptic curve (refer to http://safecurves.cr.yp.to/ for more details), it is nevertheless deemed a good decision to allow developers with requirements to use such a curve, to be able to do this via a crypto library allowing for much better choices to be made, without having to change (much of) their code to get better crypto. ok beck@ deraadt@ | |||
2014-05-01 | Add Brainpool elliptic curves. From OpenSSL RT#2239 via ${DAYJOB}. | Miod Vallat | |
Be sure to rerun `make includes' after updating. ok tedu@ beck@ deraadt@ | |||
2014-05-01 | Remove fips_md_init() macro indirection for digest algorithms, used by the | Miod Vallat | |
OpenSSL FIPS module to prevent forbidden digests to be allowed. No functional change but readability. ok deraadt@ | |||
2010-10-01 | import OpenSSL-1.0.0a | Damien Miller | |
2008-09-06 | import of OpenSSL 0.9.8h | Damien Miller | |
2014-05-01 | nibbles aren't enough random, use bytes. does a better job of picking | Ted Unangst | |
a free chunk at random and may allow to increase delayed chunk array. ok otto | |||
2014-04-30 | first cut at documenting the change to malloc doing a partial 'junk' by | Stuart Henderson | |
default and the new 'j' option to disable this; ok jmc@ | |||
2014-04-30 | Avoid a potential null pointer dereference by checking that we actually | Joel Sing | |
managed to allocate a fragment, before trying to memcpy data into it. ok miod@ | |||
2014-04-30 | First pass at removing win64 support from the assembly generating Perl | Joel Sing | |
scripts. We certainly do not need an identical copy of the win64 exception handler in each script (surely one copy would be sufficient). ok miod@ | |||
2012-10-13 | import OpenSSL-1.0.1c | Damien Miller | |
2010-10-01 | import OpenSSL-1.0.0a | Damien Miller | |
2009-04-06 | import of OpenSSL 0.9.8k | Damien Miller | |
2008-09-06 | import of OpenSSL 0.9.8h | Damien Miller | |
2014-04-30 | i suck at math. b - 8 = 3, not 4. detected by Antoine Pitrou. thanks. | Ted Unangst | |
2014-04-30 | minor++ because of AI_ADDRCONFIG | sperreault | |
prodded by naddy, confirmed by Mark Kettenis | |||
2014-04-29 | Constrain bytes read/written to positive values. | Bob Beck | |
ok miod@ tedu@ | |||
2014-04-28 | Implement AI_ADDRCONFIG | sperreault | |
This is a getaddrinfo() flag that is defined thusly in RFC 3493: If the AI_ADDRCONFIG flag is specified, IPv4 addresses shall be returned only if an IPv4 address is configured on the local system, and IPv6 addresses shall be returned only if an IPv6 address is configured on the local system. The loopback address is not considered for this case as valid as a configured address. For example, when using the DNS, a query for AAAA records should occur only if the node has at least one IPv6 address configured (other than IPv6 loopback) and a query for A records should occur only if the node has at least one IPv4 address configured (other than the IPv4 loopback). The flag is set by default when hints is NULL. ok Eric Faurot, Jason McIntyre | |||
2014-04-28 | Remove WIN32, WIN64 and MINGW32 tentacles. | Miod Vallat | |
Also check for _LP64 rather than __arch64__ (the former being more reliable than __LP64__ or __arch64__) to tell 64-bit int platforms apart from 32-bit int platforms. Loosely based upon a diff from Martijn van Duren on tech@ | |||
2014-04-28 | use the correct algorithm mask. reported by satish lvr via | Ted Unangst | |
http://marc.info/?l=openssl-dev&m=139779977532459&w=2 ok miod | |||
2014-04-28 | SSL_OP_ALL is supposed to be all options and workarounds that are safe, | Ted Unangst | |
but disabling attack mitigations is not safe. 0.9.6d contained a workaround for an attack against CBC modes. 0.9.6e disabled it by default because "some" implementations couldn't handle empty fragments. 12 years have passed. Does anybody still care? Let's find out. ok miod | |||
2014-04-28 | Remove ending cplusplus guard followed by starting cplusplus guard; from | Miod Vallat | |
Gebruiker Schoot. | |||
2014-04-28 | Leftover includes and local declarations; from Gebruiker Schoot | Miod Vallat | |
2003-05-11 | import 0.9.7b (without idea and rc5) | Markus Friedl | |
2014-04-28 | Add support for 255 character file names in fuse. | Sylvestre Gallon | |
from Helg Bredow, thanks! input/OK reyk@ | |||
2014-04-27 | typo in comment | Miod Vallat | |
2014-04-27 | Remove orphaned l2n6 and n2l6 macros. | Miod Vallat | |
2014-04-27 | Use C99 initializers for the various FOO_METHOD structs. More readable, and | Miod Vallat | |
avoid unreadable/unmaintainable constructs like that: const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { EVP_PKEY_CMAC, EVP_PKEY_CMAC, 0, "CMAC", "OpenSSL CMAC method", 0,0,0,0, 0,0,0, cmac_size, 0, 0,0,0,0,0,0,0, cmac_key_free, 0, 0,0 }; ok matthew@ deraadt@ | |||
2014-04-27 | static const char * = "" -> static const char[] = "", to produce shorter code. | Miod Vallat | |
No functional change. | |||
2014-04-27 | Unifdef -U OPENSSL_BUILD_SHLIBCRYPTO, since all it causes under Unix is to | Miod Vallat | |
redefine OPENSSL_EXTERN from `extern' to `extern'. | |||
2014-04-27 | Put explicit (void) in function declarations and shuffle keywords in some | Miod Vallat | |
declaration to pass -Wextra, should we want to add it to CFLAGS. No binary change. | |||
2014-04-27 | zap trailing whitespace; | Jason McIntyre | |
2012-10-13 | import OpenSSL-1.0.1c | Damien Miller | |
2008-09-06 | import of OpenSSL 0.9.8h | Damien Miller | |
2014-04-27 | We do not need a separate file for two compatibility wrapper functions. | Joel Sing | |
ok miod@ | |||
2014-04-27 | Fix leak last commit introduced. Spotted by Sebastian Kapfer. | Bob Beck | |
2014-04-27 | Document net.inet6.ip6.dad_pending. | Loganaden Velvindron | |
OK from jmc@, and thanks to sthen@ for pointing out my mistake in the first version of the diff. | |||
2014-04-26 | Appease gcc3 -Wuninitialized. | Miod Vallat | |
2014-04-26 | Replace all use of ERR_add_error_data with ERR_asprintf_error_data. | Bob Beck | |
This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@ | |||
2014-04-26 | More KNF. | Joel Sing | |
2014-04-26 | KNF. | Joel Sing | |
2014-04-26 | This is not FreeBSD. | Joel Sing | |
ok miod@ | |||
2014-04-26 | Do you really want to build OpenSSL for 16-bit Windows? Well, we don't. | Joel Sing | |
ok miod@ | |||
2014-04-25 | KNF. | Joel Sing | |