openssl, branch OpenSSL_0_9_8r

OCSP stapling fix (OpenSSL 0.9.8r/1.0.0d)

2011-02-08T17:10:47Z

Submitted by: Neel Mehta, Adam Langley, Bodo Moeller

Assorted bugfixes:

2011-02-03T12:04:48Z

- RLE decompression boundary case - SSL 2.0 key arg length check Submitted by: Google (Neel Mehta, Bodo Moeller)

Update 0.9.7-branch section with information from 1.0.0-branch NEWS file

2011-02-03T11:44:00Z

"make update"

2011-02-03T10:28:14Z

PR: 2433

2011-01-24T16:21:00Z

Submitted by: Chris Wilson Reviewed by: steve Constify ASN1_STRING_set_default_mask_asc().

check EC public key isn't point at infinity

2011-01-24T15:08:12Z

PR: 1612

2011-01-24T14:42:11Z

Submitted by: Robert Jackson Reviewed by: steve Fix EC_POINT_cmp function for case where b but not a is the point at infinity.

PR: 2434

2011-01-20T22:12:50Z

Under Windows, there seems to be a problem relinking fips_premain_dso because that file is locked. Changing from backtick op to using system() with redirection and reading the hash from the output file seems to fix the problem. In an ideal world, there should be no difference, as a command in a backtick op should terminate before the backtick returns, same as it does with system(). We suspect, though, that the loaded binary is cached by Windows for a little while, and that reading the output from a file provides enough delay for the lock to drop before we try to relink.

Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failed

2011-01-04T19:33:01Z

alert.

PR: 2411

2011-01-03T01:40:22Z

Submitted by: Rob Austein Reviewed by: steve Fix corner cases in RFC3779 code.