aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* OCSP stapling fix (OpenSSL 0.9.8r/1.0.0d)OpenSSL_0_9_8rBodo Möller2011-02-089-11/+28
| | | | Submitted by: Neel Mehta, Adam Langley, Bodo Moeller
* Assorted bugfixes:Bodo Möller2011-02-032-4/+4
| | | | | | | - RLE decompression boundary case - SSL 2.0 key arg length check Submitted by: Google (Neel Mehta, Bodo Moeller)
* Update 0.9.7-branch section with information from 1.0.0-branch NEWS fileBodo Möller2011-02-031-0/+5
|
* "make update"Bodo Möller2011-02-031-0/+27
|
* PR: 2433Dr. Stephen Henson2011-01-242-2/+2
| | | | | | | Submitted by: Chris Wilson <[email protected]> Reviewed by: steve Constify ASN1_STRING_set_default_mask_asc().
* check EC public key isn't point at infinityDr. Stephen Henson2011-01-241-1/+7
|
* PR: 1612Dr. Stephen Henson2011-01-242-0/+6
| | | | | | | Submitted by: Robert Jackson <[email protected]> Reviewed by: steve Fix EC_POINT_cmp function for case where b but not a is the point at infinity.
* PR: 2434Richard Levitte2011-01-201-1/+6
| | | | | | | | | | | | | | Under Windows, there seems to be a problem relinking fips_premain_dso because that file is locked. Changing from backtick op to using system() with redirection and reading the hash from the output file seems to fix the problem. In an ideal world, there should be no difference, as a command in a backtick op should terminate before the backtick returns, same as it does with system(). We suspect, though, that the loaded binary is cached by Windows for a little while, and that reading the output from a file provides enough delay for the lock to drop before we try to relink.
* Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failedDr. Stephen Henson2011-01-042-6/+3
| | | | alert.
* PR: 2411Dr. Stephen Henson2011-01-032-1/+7
| | | | | | | Submitted by: Rob Austein <[email protected]> Reviewed by: steve Fix corner cases in RFC3779 code.
* Fix escaping code for string printing. If *any* escaping is enabled weDr. Stephen Henson2011-01-032-6/+16
| | | | must escape the escape character itself (backslash).
* PR: 2410Dr. Stephen Henson2011-01-031-14/+13
| | | | | | | Submitted by: Rob Austein <[email protected]> Reviewed by: steve Use OPENSSL_assert() instead of assert().
* use fips-dev not dev-fipsDr. Stephen Henson2011-01-031-1/+1
|
* PR: 2416Dr. Stephen Henson2011-01-031-1/+1
| | | | | | | Submitted by: Mark Phalan <[email protected]> Reviewed by: steve Use L suffix in version number.
* Add missing explicit instruction size.Bodo Möller2010-12-131-1/+1
| | | | | | [CVS head and later branches have this since revision 1.7 of this file.] Submitted by: Chandler Carruth (Google)
* add Android changes from FIPS 1.2.2 moduleDr. Stephen Henson2010-12-112-0/+4
|
* update for next releaseDr. Stephen Henson2010-12-024-5/+9
|
* prepare for releaseOpenSSL_0_9_8qDr. Stephen Henson2010-12-024-6/+7
|
* update FAQDr. Stephen Henson2010-12-021-1/+1
|
* fix for CVE-2010-4180Dr. Stephen Henson2010-12-025-12/+15
|
* PR: 2386Dr. Stephen Henson2010-12-021-1/+1
| | | | | | | Submitted by: Stefan Birrer <[email protected]> Reviewed by: steve Correct SKM_ASN1_SET_OF_d2i macro.
* use consistent FAQ between versionDr. Stephen Henson2010-12-021-4/+47
|
* update READMEDr. Stephen Henson2010-12-011-1/+1
|
* oops, no corrected fix needed for 0.9.8 branchDr. Stephen Henson2010-12-011-1/+0
|
* update NEWSDr. Stephen Henson2010-12-011-0/+5
|
* add CVE to JPAKE fixDr. Stephen Henson2010-11-291-1/+1
|
* ../comm.txtDr. Stephen Henson2010-11-272-2/+2
|
* Backport J-PAKE fix.Ben Laurie2010-11-264-5/+42
|
* add acknowledgements file to 0.9.8 branch tooDr. Stephen Henson2010-11-221-0/+25
|
* update for next versionDr. Stephen Henson2010-11-163-4/+8
|
* oops, correct version numberOpenSSL_0_9_8pDr. Stephen Henson2010-11-161-2/+2
|
* prepare for releaseDr. Stephen Henson2010-11-165-8/+10
|
* fix CVE-2010-3864Dr. Stephen Henson2010-11-163-4/+23
|
* Submitted by: Jonathan Dixon <[email protected]>Dr. Stephen Henson2010-11-021-1/+1
| | | | | | Reviewed by: steve If store is NULL set flags correctly.
* PR: 2295Dr. Stephen Henson2010-10-126-20/+28
| | | | | | | | Submitted by: Alexei Khlebnikov <[email protected]> Reviewed by: steve OOM checking. Leak in OOM fix. Fall-through comment. Duplicate code elimination.
* PR: 2314Dr. Stephen Henson2010-10-102-0/+4
| | | | | | | Submitted by: Mounir IDRASSI <[email protected]> Reviewed by: steve Fix for double free bug in ssl/s3_clnt.c CVE-2010-2939
* We can't always read 6 bytes in an OCSP response: fix so error statusesDr. Stephen Henson2010-10-061-3/+9
| | | | are read correctly for non-blocking I/O.
* Minor documentation fixes, PR#2345Dr. Stephen Henson2010-10-041-1/+1
|
* Minor documentation fixes, PR#2344Dr. Stephen Henson2010-10-041-3/+3
|
* Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(),Dr. Stephen Henson2010-10-034-2/+9
| | | | | | | this means that some implementations will be used automatically, e.g. aesni, we do this for cryptodev anyway. Setup cpuid in ENGINE_load_builtin_engines() too as some ENGINEs use it.
* Don't announce tests run in empty directoriesDr. Stephen Henson2010-09-211-3/+7
|
* support customisable rm and mkdir commandsDr. Stephen Henson2010-09-191-2/+12
|
* update FIPS script generator to make output easier to hand editDr. Stephen Henson2010-09-191-4/+15
|
* fix bug in AES_unwrap()Dr. Stephen Henson2010-08-311-3/+3
|
* ECC library bugfixes.Bodo Möller2010-08-263-6/+17
| | | | Submitted by: Emilia Kapser (Google)
* Version tree clarification.Bodo Möller2010-08-261-0/+3
|
* PR: 2297Dr. Stephen Henson2010-07-091-3/+3
| | | | | | | Submitted by: Antony, Benoy <[email protected]> Approved by: [email protected] Fix bug in AES wrap code when t > 0xff.
* initialise pbe_tmpDr. Stephen Henson2010-07-081-3/+1
|
* rand_nw.c: compensate for gcc bug (using %edx instead of %eax at -O3)Andy Polyakov2010-07-081-2/+2
| | | | | [from HEAD]. PR: 2296
* PROBLEMS: MacOS X is not necessarily a problem anymore [from HEAD].Andy Polyakov2010-07-081-1/+3
|
generated by cgit (git 2.51.2) at 2026-10-25 11:13:14 +0100