openssl/ssl/ssl_lib.c, branch OpenSSL_0_9_7cTLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_7c2003-09-27T07:33:28ZFree the Kerberos context upon freeing the SSL.2003-09-27T07:33:28ZRichard Levittelevitte@openssl.org2003-09-27T07:33:28Zurn:sha1:c9b552534e5a256782caf296553edc443c65427a
Contributed by Andrew Mann <amann@tccgi.com>
Fix a memory leak in SSL.2003-01-30T11:00:37ZRichard Levittelevitte@openssl.org2003-01-30T11:00:37Zurn:sha1:8f94b2010f1d7813d9ca18a365cf59db37fa98ba
PR: 477
Fix possible NULL dereferencial.2003-01-16T06:00:59ZRichard Levittelevitte@openssl.org2003-01-16T06:00:59Zurn:sha1:bc35d57932c3441d91ee94d2e25b4fdad306d807
Notified by Verdon Walker <VWalker@novell.com>
Many security improvements (CHATS) and a warning fix.2002-11-12T13:23:40ZBen Laurieben@openssl.org2002-11-12T13:23:40Zurn:sha1:9831d941ca3d46eab3e61e6983921220b9d5d09aCorrect and enhance the behaviour of "internal" session caching as it2002-10-29T00:31:14ZGeoff Thorpegeoff@openssl.org2002-10-29T00:31:14Zurn:sha1:6f7ba4be1f8019aa784a203ef05fad7b173cf559
relates to SSL_CTX flags and the use of "external" session caching. The
existing flag, "SSL_SESS_CACHE_NO_INTERNAL_LOOKUP" remains but is
supplemented with a complimentary flag, "SSL_SESS_CACHE_NO_INTERNAL_STORE".
The bitwise OR of the two flags is also defined as
"SSL_SESS_CACHE_NO_INTERNAL" and is the flag that should be used by most
applications wanting to implement session caching *entirely* by its own
provided callbacks. As the documented behaviour contradicted actual
behaviour up until recently, and since that point behaviour has itself been
inconsistent anyway, this change should not introduce any compatibility
problems. I've adjusted the relevant documentation to elaborate about how
this works.
Kudos to "Nadav Har'El" <nyh@math.technion.ac.il> for diagnosing these
anomalies and testing this patch for correctness.
PR: 311
Reorder cleanup sequence in SSL_CTX_free() to leave ex_data for remove_cb().2002-08-16T17:02:30ZLutz Jänickejaenicke@openssl.org2002-08-16T17:02:30Zurn:sha1:68a9ee13e81fcb21e6ef43fa8a7de1a6b6ee0a9a
Submitted by:
Reviewed by:
PR: 212
Reorder inclusion of header files:2002-07-10T06:57:54ZLutz Jänickejaenicke@openssl.org2002-07-10T06:57:54Zurn:sha1:7e8852c54950cd2a66db322dd6338e47da6dcfc8
des_old.h redefines crypt:
#define crypt(b,s)\
DES_crypt((b),(s))
This scheme leads to failure, if header files with the OS's true definition
of crypt() are processed _after_ des_old.h was processed. This is e.g. the
case on HP-UX with unistd.h.
As evp.h now again includes des.h (which includes des_old.h), this problem
only came up after this modification.
Solution: move header files (indirectly) including e_os.h before the header
files (indirectly) including evp.h.
Submitted by:
Reviewed by:
PR:
Add 'void *' argument to app_verify_callback.2002-02-28T10:55:52ZBodo Möllerbodo@openssl.org2002-02-28T10:55:52Zurn:sha1:48781ef7f7ca116e2bc9aed2801a40aee6be03e3
Submitted by: D. K. Smetters <smetters@parc.xerox.com>
Reviewed by: Bodo Moeller
Fix the fix (Yoram Zahavi)...2002-02-27T11:24:39ZLutz Jänickejaenicke@openssl.org2002-02-27T11:24:39Zurn:sha1:21f422ca5e3fac01ca2966cdca9c516b1a044f87
Submitted by:
Reviewed by:
PR:
Make sure that bad sessions are removed in SSL_clear() (found by2002-02-26T21:44:07ZLutz Jänickejaenicke@openssl.org2002-02-26T21:44:07Zurn:sha1:3b79d2789db948c544932336fd1f1a392728f072
Yoram Zahavi).
Submitted by:
Reviewed by:
PR: