openssl, branch OpenSSL_0_9_8zd

Prepare for 0.9.8zd release

2015-01-08T14:33:47Z

Reviewed-by: Stephen Henson

make update

2015-01-08T14:33:47Z

Reviewed-by: Stephen Henson

CHANGES and NEWS updates for release

2015-01-08T14:31:42Z

Reviewed-by: Tim Hudson Reviewed-by: Steve Henson

Fix typo.

2015-01-08T14:31:19Z

Fix typo in ssl3_get_cert_verify: we can only skip certificate verify message if certificate is absent. NB: OpenSSL 0.9.8 is NOT vulnerable to CVE-2015-0205 as it doesn't support DH certificates and this typo prohibits skipping of certificate verify message for sign only certificates anyway. Reviewed-by: Matt Caswell

Follow on from CVE-2014-3571. This fixes the code that was the original source

2015-01-08T14:18:52Z

of the crash due to p being NULL. Steve's fix prevents this situation from occuring - however this is by no means obvious by looking at the code for dtls1_get_record. This fix just makes things look a bit more sane. Conflicts: ssl/d1_pkt.c Reviewed-by: Dr Stephen Henson

Fix crash in dtls1_get_record whilst in the listen state where you get two

2015-01-08T11:28:17Z

separate reads performed - one for the header and one for the body of the handshake record. CVE-2014-3571 Reviewed-by: Matt Caswell Conflicts: ssl/s3_pkt.c

Fix for CVE-2014-3570.

2015-01-08T11:28:17Z

Reviewed-by: Emilia Kasper (cherry picked from commit e793809ba50c1e90ab592fb640a856168e50f3de)

fix error discrepancy

2015-01-07T18:11:27Z

Reviewed-by: Matt Caswell (cherry picked from commit 4a4d4158572fd8b3dc641851b8378e791df7972d)

use correct credit in CHANGES

2015-01-06T22:44:40Z

Reviewed-by: Matt Caswell (cherry picked from commit 4138e3882556c762d77eb827b8be98507cde48df) Conflicts: CHANGES

use correct function name

2015-01-06T21:05:22Z

Reviewed-by: Rich Salz Reviewed-by: Matt Caswell (cherry picked from commit cb62ab4b17818fe66d2fed0a7fe71969131c811b)