summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2016-05-03Prepare for 1.0.1t releaseOpenSSL_1_0_1tMatt Caswell
2016-05-03make updateMatt Caswell
2016-05-03Update CHANGES and NEWS for the new releaseMatt Caswell
2016-05-03Fix ASN1_INTEGER handling.Dr. Stephen Henson
2016-05-03Check that we have enough padding characters.Kurt Roeckx
2016-05-03Remove some documentation for functions not in 1.0.xMatt Caswell
2016-05-03Add documentation for EVP_EncodeInit() and similar functionsMatt Caswell
2016-05-03Ensure EVP_EncodeUpdate handles an output length that is too longMatt Caswell
2016-05-03Avoid overflow in EVP_EncodeUpdateMatt Caswell
2016-05-03Prevent EBCDIC overread for very long stringsMatt Caswell
2016-05-03Fix encrypt overflowMatt Caswell
2016-05-02Fix i2d_X509_AUX: pp can be NULL.Dr. Stephen Henson
2016-04-29Don't free ret->data if malloc fails.Dr. Stephen Henson
2016-04-29Add checks to X509_NAME_oneline()Dr. Stephen Henson
2016-04-29Sanity check buffer length.Dr. Stephen Henson
2016-04-29Add size limit to X509_NAME structure.Dr. Stephen Henson
2016-04-28Reject inappropriate private key encryption ciphers.Dr. Stephen Henson
2016-04-26Ensure we check i2d_X509 return valMatt Caswell
2016-04-25Fix a signed/unsigned warningMatt Caswell
2016-04-25Fix NULL deref in apps/pkcs7Rich Salz
2016-04-23Fix buffer overrun in ASN1_parse().Viktor Dukhovni
2016-04-23Harden ASN.1 BIO handling of large amounts of data.Dr. Stephen Henson
2016-04-07Fix memory leak on invalid CertificateRequest.David Benjamin
2016-03-26Fix FIPS SSLv2 testDr. Stephen Henson
2016-03-18Fix the no-comp option for WindowsMatt Caswell
2016-03-18Add a check for a failed mallocMatt Caswell
2016-03-18Ensure that memory allocated for the ticket is freedMatt Caswell
2016-03-18Fix a potential double free in EVP_DigestInit_exMatt Caswell
2016-03-14Add no-ssl2-methodKurt Roeckx
2016-03-09expose SSLv2 method prototypesViktor Dukhovni
2016-03-08Retain SSLv2 methods as functions that return NULLViktor Dukhovni
2016-03-07bn/asm/x86[_64]-mont*.pl: complement alloca with page-walking.Andy Polyakov
2016-03-07Remove LOW from the defaultKurt Roeckx
2016-03-07Don't shift serial number into sign bitDr. Stephen Henson
2016-03-04Sanity check PVK file fields.Dr. Stephen Henson
2016-03-01Prepare for 1.0.1t-devMatt Caswell
2016-03-01Prepare for 1.0.1s releaseOpenSSL_1_0_1sMatt Caswell
2016-03-01make updateMatt Caswell
2016-03-01Ensure mk1mf.pl is aware of no-weak-ssl-ciphers optionMatt Caswell
2016-03-01Update CHANGES and NEWS for new releaseMatt Caswell
2016-03-01perlasm/x86_64-xlate.pl: handle inter-bank movd.Andy Polyakov
2016-03-01crypto/bn/x86_64-mont5.pl: constant-time gather procedure.Andy Polyakov
2016-03-01bn/bn_exp.c: constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF.Andy Polyakov
2016-03-01Disable EXPORT and LOW SSLv3+ ciphers by defaultViktor Dukhovni
2016-03-01Bring SSL method documentation up to dateViktor Dukhovni
2016-03-01Disable SSLv2 default build, default negotiation and weak ciphers.Viktor Dukhovni
2016-02-29Fix BN_hex2bn/BN_dec2bn NULL ptr/heap corruptionMatt Caswell
2016-02-27Revert "Don't check RSA_FLAG_SIGN_VER."Kurt Roeckx
2016-02-25Fix memory issues in BIO_*printf functionsMatt Caswell
2016-02-25CVE-2016-0798: avoid memory leak in SRPEmilia Kasper