| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Oops! Correct version file. | Dr. Stephen Henson | 2007-02-23 | 1 | -1/+1 |
| | | |||||
| * | Prepare for release. | Dr. Stephen Henson | 2007-02-23 | 1 | -3/+3 |
| | | |||||
| * | Make update. | Dr. Stephen Henson | 2007-02-23 | 1 | -0/+22 |
| | | |||||
| * | Fix incorrect handling of special characters. | Lutz Jänicke | 2007-02-21 | 1 | -2/+2 |
| | | | | | | | PR: 1459 Submitted by: [email protected] Reviewed by: [email protected] | ||||
| * | Cleanse PEM buffers before freeing them. | Dr. Stephen Henson | 2007-02-21 | 2 | -1/+5 |
| | | | | | Submitted by: Benjamin Bennett <[email protected]> | ||||
| * | Update from fips2 branch. | Dr. Stephen Henson | 2007-02-03 | 3 | -3/+3 |
| | | |||||
| * | Typo. | Dr. Stephen Henson | 2007-01-23 | 1 | -1/+1 |
| | | |||||
| * | Constify tag table. | Dr. Stephen Henson | 2007-01-23 | 1 | -1/+1 |
| | | |||||
| * | Move some DSA functions between files to make it possible to use the DSA | Dr. Stephen Henson | 2007-01-23 | 4 | -66/+88 |
| | | | | | crypto without ASN1 dependency. | ||||
| * | Update from HEAD. | Dr. Stephen Henson | 2007-01-21 | 44 | -56/+56 |
| | | |||||
| * | Remove 'done' variable since it stops error codes being reloaded. | Dr. Stephen Henson | 2006-12-07 | 1 | -4/+0 |
| | | |||||
| * | fix function names in RSAerr calls | Nils Larsch | 2006-12-04 | 1 | -6/+6 |
| | | | | | PR: 1403 | ||||
| * | Rebuild error source files. | Dr. Stephen Henson | 2006-11-21 | 22 | -156/+90 |
| | | |||||
| * | Fix from HEAD. | Dr. Stephen Henson | 2006-11-13 | 2 | -2/+2 |
| | | |||||
| * | Initialise ctx to NULL to avoid uninitialized free, noticed by | Mark J. Cox | 2006-09-29 | 1 | -1/+1 |
| | | | | | Steve Kiernan | ||||
| * | After tagging, open up 0.9.7m-dev | Mark J. Cox | 2006-09-28 | 1 | -3/+3 |
| | | |||||
| * | Prepare for 0.9.7l releaseOpenSSL_0_9_7l | Mark J. Cox | 2006-09-28 | 1 | -3/+3 |
| | | |||||
| * | Introduce limits to prevent malicious keys being able to | Mark J. Cox | 2006-09-28 | 10 | -0/+90 |
| | | | | | | | | | | | | | | | | cause a denial of service. (CVE-2006-2940) [Steve Henson, Bodo Moeller] Fix ASN.1 parsing of certain invalid structures that can result in a denial of service. (CVE-2006-2937) [Steve Henson] Fix buffer overflow in SSL_get_shared_ciphers() function. (CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team] Fix SSL client code which could crash if connecting to a malicious SSLv2 server. (CVE-2006-4343) [Tavis Ormandy and Will Drewry, Google Security Team] | ||||
| * | Fix from head. | Dr. Stephen Henson | 2006-09-22 | 1 | -1/+1 |
| | | |||||
| * | Ensure that the addition mods[i]+delta cannot overflow in probable_prime(). | Bodo Möller | 2006-09-19 | 1 | -6/+3 |
| | | | | | [Problem pointed out by Adam Young <adamy (at) acm.org>] | ||||
| * | make consistent with 0.9.8-branch version of this file | Bodo Möller | 2006-09-06 | 3 | -13/+2 |
| | | |||||
| * | Bump for 0.9.7l-dev | Mark J. Cox | 2006-09-05 | 1 | -3/+3 |
| | | |||||
| * | Prepare 0.9.7k releaseOpenSSL_0_9_7k | Mark J. Cox | 2006-09-05 | 1 | -3/+3 |
| | | |||||
| * | Avoid PKCS #1 v1.5 signature attack discovered by Daniel Bleichenbacher | Mark J. Cox | 2006-09-05 | 4 | -0/+28 |
| | | | | | | | | (CVE-2006-4339) [Ben Laurie and Google Security Team] Submitted by: Ben Laurie, Google Security Team Reviewed by: bmoeller, mjc, shenson | ||||
| * | Update from HEAD. | Dr. Stephen Henson | 2006-08-31 | 1 | -1/+5 |
| | | |||||
| * | Fix from HEAD. | Dr. Stephen Henson | 2006-07-09 | 1 | -1/+2 |
| | | |||||
| * | use <poll.h> as by Single Unix Specification | Bodo Möller | 2006-06-30 | 1 | -2/+2 |
| | | |||||
| * | always read if we can't use select because of a too large FD | Bodo Möller | 2006-06-28 | 1 | -70/+71 |
| | | | | | (it's non-blocking mode anyway) | ||||
| * | Mitigate the hazard of cache-collision timing attack on last round | Andy Polyakov | 2006-06-28 | 1 | -199/+99 |
| | | | | | [from HEAD]. | ||||
| * | Use poll() when possible to gather Unix randomness entropy | Richard Levitte | 2006-06-27 | 1 | -7/+52 |
| | | |||||
| * | Synchronise with the Unix build | Richard Levitte | 2006-06-21 | 1 | -1/+1 |
| | | |||||
| * | Place hex_to_string and string_to_hex in separate source file to avoid | Dr. Stephen Henson | 2006-06-20 | 3 | -92/+155 |
| | | | | | dragging in extra dependencies when just these functions are used. | ||||
| * | Thread-safety fixes | Bodo Möller | 2006-06-16 | 2 | -11/+32 |
| | | |||||
| * | Thread-safety fixes | Bodo Möller | 2006-06-14 | 3 | -28/+107 |
| | | |||||
| * | Fix from HEAD. | Dr. Stephen Henson | 2006-05-17 | 1 | -3/+3 |
| | | |||||
| * | Update for next dev version. | Dr. Stephen Henson | 2006-05-04 | 1 | -3/+3 |
| | | |||||
| * | Prepare for releaseOpenSSL_0_9_7j | Dr. Stephen Henson | 2006-05-04 | 1 | -3/+3 |
| | | |||||
| * | Use new fips-1.0 directory in error library. | Dr. Stephen Henson | 2006-05-04 | 1 | -1/+1 |
| | | |||||
| * | Check pbe2->keyfunc->parameter is not NULL before dereferencing. | Dr. Stephen Henson | 2006-04-15 | 1 | -3/+8 |
| | | | | | PR: 1316 | ||||
| * | Check flag before calling FIPS_dsa_check(). | Dr. Stephen Henson | 2006-04-01 | 2 | -6/+6 |
| | | |||||
| * | Flag to allow use of DSA_METHOD in FIPS mode. | Dr. Stephen Henson | 2006-03-31 | 3 | -3/+13 |
| | | |||||
| * | apply fixes from the cvs head | Nils Larsch | 2006-03-14 | 2 | -3/+7 |
| | | |||||
| * | Check EVP_DigestInit return value in EVP_BytesToKey() and use supported | Dr. Stephen Henson | 2006-03-01 | 2 | -2/+11 |
| | | | | | algorithm in PKCS12_create in FIPS mode. | ||||
| * | fix "#ifndef HZ" statement | Nils Larsch | 2006-02-28 | 1 | -3/+3 |
| | | | | | PR: 1287 | ||||
| * | Fix from HEAD. | Dr. Stephen Henson | 2006-02-04 | 37 | -37/+37 |
| | | |||||
| * | Fix from HEAD. | Dr. Stephen Henson | 2006-02-04 | 1 | -1/+1 |
| | | |||||
| * | fix if statement: call conn_state() if the BIO is not in the BIO_CONN_S_OK state | Nils Larsch | 2006-02-02 | 1 | -1/+1 |
| | | |||||
| * | Fix from head. | Dr. Stephen Henson | 2006-01-31 | 1 | -1/+1 |
| | | |||||
| * | Replace detached signature with in-core fingerprinting. | Andy Polyakov | 2006-01-21 | 1 | -0/+6 |
| | | |||||
| * | Correctly encode FALSE for BOOL in ASN1_TYPE. | Dr. Stephen Henson | 2006-01-19 | 1 | -3/+6 |
| | | |||||
