openssl, branch OpenSSL_1_0_1f TLS/SSL and crypto library. http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_1_0_1f 2014-01-06T14:36:07Z Prepare for 1.0.1f release 2014-01-06T14:36:07Z Dr. Stephen Henson steve@openssl.org 2014-01-06T14:36:07Z urn:sha1:0d8776344cd7965fadd870e361503985df9c45bb Fix for TLS record tampering bug CVE-2013-4353 2014-01-06T14:35:04Z Dr. Stephen Henson steve@openssl.org 2014-01-06T14:35:04Z urn:sha1:197e0ea817ad64820789d86711d55ff50d71f631 make update 2014-01-06T13:33:27Z Dr. Stephen Henson steve@openssl.org 2014-01-06T13:33:27Z urn:sha1:c776a3f398b1fd0d59e9247c0c4c6b79f5692b33 Restore SSL_OP_MSIE_SSLV2_RSA_PADDING 2014-01-04T14:00:44Z Dr. Stephen Henson steve@openssl.org 2014-01-04T13:50:52Z urn:sha1:25c9fa6026e6a200a291bc4fd3464718aae9775e The flag SSL_OP_MSIE_SSLV2_RSA_PADDING hasn't done anything since OpenSSL 0.9.7h but deleting it will break source compatibility with any software that references it. Restore it but #define to zero. (cherry picked from commit b17d6b8d1d49fa4732deff17cfd1833616af0d9c) update NEWS 2014-01-02T19:02:28Z Dr. Stephen Henson steve@openssl.org 2014-01-02T19:02:28Z urn:sha1:d2dc33d57c82b85ff0a33114d04f9ecde3d897bf Don't change version number if session established 2014-01-02T15:12:48Z Dr. Stephen Henson steve@openssl.org 2013-12-24T18:17:00Z urn:sha1:f3dcc8411e518fb0835c7d72df4a58718205260d When sending an invalid version number alert don't change the version number to the client version if a session is already established. Thanks to Marek Majkowski for additional analysis of this issue. PR#3191 Don't use rdrand engine as default unless explicitly requested. 2013-12-22T16:08:01Z Dr. Stephen Henson steve@openssl.org 2013-12-11T14:45:12Z urn:sha1:1c2c5e402a757a63d690bd2390bd6b8b491ef184 (cherry picked from commit 8f68678989a198ead3ab59a698302ecb0f1c8fb1) Fix DTLS retransmission from previous session. 2013-12-20T23:12:18Z Dr. Stephen Henson steve@openssl.org 2013-12-20T15:26:50Z urn:sha1:34628967f1e65dc8f34e000f0f5518e21afbfc7b For DTLS we might need to retransmit messages from the previous session so keep a copy of write context in DTLS retransmission buffers instead of replacing it after sending CCS. CVE-2013-6450. Ignore NULL parameter in EVP_MD_CTX_destroy. 2013-12-20T22:52:41Z Dr. Stephen Henson steve@openssl.org 2013-12-20T15:12:26Z urn:sha1:a6c62f0c25a756c263a80ce52afbae888028e986 Use version in SSL_METHOD not SSL structure. 2013-12-19T21:04:28Z Dr. Stephen Henson steve@openssl.org 2013-12-19T14:37:39Z urn:sha1:ca989269a2876bae79393bd54c3e72d49975fc75 When deciding whether to use TLS 1.2 PRF and record hash algorithms use the version number in the corresponding SSL_METHOD structure instead of the SSL structure. The SSL structure version is sometimes inaccurate. Note: OpenSSL 1.0.2 and later effectively do this already. (CVE-2013-6449)