openssl/ssl, branch OpenSSL_0_9_7m TLS/SSL and crypto library. http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_7m 2007-02-22T22:30:00Z Typo. 2007-02-22T22:30:00Z Dr. Stephen Henson steve@openssl.org 2007-02-22T22:30:00Z urn:sha1:dde967a5802eac9beef63f7df1e29f1ebbc5538b Include "!eNULL" in SSL_DEFAULT_CIPHER_LIST to make sure that a 2007-02-19T18:35:45Z Bodo Möller bodo@openssl.org 2007-02-19T18:35:45Z urn:sha1:3bd95a14ca76316e64e60c8e3f97a454eeb663bd ciphersuite string such as "DEFAULT:RSA" cannot enable authentication-only ciphersuites. fix incorrect strength bit values for certain Kerberos ciphersuites 2007-02-19T14:45:57Z Bodo Möller bodo@openssl.org 2007-02-19T14:45:57Z urn:sha1:fd31dfae391889a4d8a97620b043bf6ae6379159 Submitted by: Victor Duchovni Some fixes for ciphersuite string processing: 2007-02-17T06:53:10Z Bodo Möller bodo@openssl.org 2007-02-17T06:53:10Z urn:sha1:d875a212c3eb234f5d5eaf3832f3e008c2460fec - add a workaround provided by Victor Duchovni so that 128- and 256-bit variants of otherwise identical ciphersuites are treated correctly; - also, correctly skip invalid parts of ciphersuite description strings. Submitted by: Victor Duchovni, Bodo Moeller Update from HEAD. 2007-01-21T16:02:37Z Dr. Stephen Henson steve@openssl.org 2007-01-21T16:02:37Z urn:sha1:566933a8ba24f84aed23d8f9a2cf86451ba49ac6 fix no-ssl2 build 2006-12-06T16:52:55Z Nils Larsch nils@openssl.org 2006-12-06T16:52:55Z urn:sha1:54a2631eb3142df2639ede89c3c6e258966a5f2a fix support for receiving fragmented handshake messages 2006-11-29T14:44:07Z Bodo Möller bodo@openssl.org 2006-11-29T14:44:07Z urn:sha1:9dc705a2ac604054bf061222cb0672488d4733b3 Rebuild error source files. 2006-11-21T19:27:19Z Dr. Stephen Henson steve@openssl.org 2006-11-21T19:27:19Z urn:sha1:ea474c567f7172313474ccdfffc51e27119d797f Introduce limits to prevent malicious keys being able to 2006-09-28T11:53:51Z Mark J. Cox mark@openssl.org 2006-09-28T11:53:51Z urn:sha1:b213966415c35bafba6876127eecc9157077f81e cause a denial of service. (CVE-2006-2940) [Steve Henson, Bodo Moeller] Fix ASN.1 parsing of certain invalid structures that can result in a denial of service. (CVE-2006-2937) [Steve Henson] Fix buffer overflow in SSL_get_shared_ciphers() function. (CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team] Fix SSL client code which could crash if connecting to a malicious SSLv2 server. (CVE-2006-4343) [Tavis Ormandy and Will Drewry, Google Security Team] Backport from HEAD: fix ciphersuite selection 2006-09-12T14:41:50Z Bodo Möller bodo@openssl.org 2006-09-12T14:41:50Z urn:sha1:ea43804bdaa3e6f66f5316e225ced91c4297ec66