Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-01-04 | prepare for releaseOpenSSL_1_0_0f | Dr. Stephen Henson | |
2012-01-04 | update NEWS | Dr. Stephen Henson | |
2012-01-04 | make update | Dr. Stephen Henson | |
2012-01-04 | Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen ↵ | Dr. Stephen Henson | |
<tuexen@fh-muenster.de> Reviewed by: steve Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and Kenny Paterson. | |||
2012-01-04 | add missing part for SGC restart fix (CVE-2011-4619) | Dr. Stephen Henson | |
2012-01-04 | Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) ↵ | Dr. Stephen Henson | |
[include source patch this time!] | |||
2012-01-04 | Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) | Dr. Stephen Henson | |
2012-01-04 | Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619) | Dr. Stephen Henson | |
2012-01-04 | stop warning | Dr. Stephen Henson | |
2012-01-04 | Check GOST parameters are not NULL (CVE-2012-0027) | Dr. Stephen Henson | |
2012-01-04 | Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577) | Dr. Stephen Henson | |
2012-01-04 | fix warnings | Dr. Stephen Henson | |
2012-01-04 | Submitted by: Adam Langley <agl@chromium.org> | Dr. Stephen Henson | |
Reviewed by: steve Fix memory leaks. | |||
2011-12-26 | PR: 2326 | Dr. Stephen Henson | |
Submitted by: Tianjie Mao <tjmao@tjmao.net> Reviewed by: steve Fix incorrect comma expressions and goto f_err as alert has been set. | |||
2011-12-19 | PR: 2563 | Dr. Stephen Henson | |
Submitted by: Paul Green <Paul.Green@stratus.com> Reviewed by: steve Improved PRNG seeding for VOS. | |||
2011-12-09 | x86-mont.pl: fix bug in integer-only squaring path. | Andy Polyakov | |
PR: 2648 | |||
2011-12-06 | The default CN prompt message can be confusing when often the CN needs to | Dr. Stephen Henson | |
be the server FQDN: change it. [Reported by PSW Group] | |||
2011-12-02 | Resolve a stack set-up race condition (if the list of compression | Bodo Möller | |
methods isn't presorted, it will be sorted on first read). Submitted by: Adam Langley | |||
2011-12-02 | Fix ecdsatest.c. | Bodo Möller | |
Submitted by: Emilia Kasper | |||
2011-12-02 | Fix BIO_f_buffer(). | Bodo Möller | |
Submitted by: Adam Langley Reviewed by: Bodo Moeller | |||
2011-11-14 | Configure: fix corruption in RC4 implementation in darwin64-x86_64-cc. | Andy Polyakov | |
2011-11-05 | ppc.pl: fix bug in bn_mul_comba4 [from HEAD]. | Andy Polyakov | |
PR: 2636 Submitted by: Charles Bryant | |||
2011-10-30 | Teach mkshared.com to have a look for disabled algorithms in opensslconf.h | Richard Levitte | |
2011-10-27 | PR: 2628 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Send alert instead of assertion failure for incorrectly formatted DTLS fragments. | |||
2011-10-27 | PR: 2628 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix for ECC keys and DTLS. | |||
2011-10-26 | PR: 2632 | Dr. Stephen Henson | |
Submitted by: emmanuel.azencot@bull.net Reviewed by: steve Return -1 immediately if not affine coordinates as BN_CTX has not been set up. | |||
2011-10-19 | BN_BLINDING multi-threading fix. | Bodo Möller | |
Submitted by: Emilia Kasper (Google) | |||
2011-10-13 | use -no_ecdhe when using -no_dhe | Bodo Möller | |
2011-10-13 | Clarify warning | Bodo Möller | |
2011-10-13 | In ssl3_clear, preserve s3->init_extra along with s3->rbuf. | Bodo Möller | |
Submitted by: Bob Buckholz <bbuckholz@google.com> | |||
2011-10-09 | PR: 2482 | Dr. Stephen Henson | |
Submitted by: Rob Austein <sra@hactrn.net> Reviewed by: steve Don't allow inverted ranges in RFC3779 code, discovered by Frank Ellermann. | |||
2011-09-26 | fix signed/unsigned warning | Dr. Stephen Henson | |
2011-09-23 | use keyformat for -x509toreq, don't hard code PEM | Dr. Stephen Henson | |
2011-09-23 | PR: 2606 | Dr. Stephen Henson | |
Submitted by: Christoph Viethen <cv@kawo2.rwth-aachen.de> Reviewed by: steve Handle timezones correctly in UTCTime. | |||
2011-09-23 | PR: 2602 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix DTLS bug which prevents manual MTU setting | |||
2011-09-23 | PR: 2347 | Dr. Stephen Henson | |
Submitted by: Tomas Mraz <tmraz@redhat.com> Reviewed by: steve Fix usage message. | |||
2011-09-06 | prepare for next version | Dr. Stephen Henson | |
2011-09-06 | update versions and dates for releaseOpenSSL_1_0_0e | Dr. Stephen Henson | |
2011-09-06 | update NEWS | Dr. Stephen Henson | |
2011-09-06 | Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the past | Dr. Stephen Henson | |
produce an error (CVE-2011-3207) Fix TLS ephemeral DH crash bug (CVE-2011-3210) | |||
2011-09-05 | (EC)DH memory handling fixes. | Bodo Möller | |
Submitted by: Adam Langley | |||
2011-09-05 | Fix memory leak on bad inputs. | Bodo Möller | |
2011-09-05 | "make update" | Bodo Möller | |
2011-09-02 | Don't use *from++ in tolower as this is implemented as a macro on some | Dr. Stephen Henson | |
platforms. Thanks to Shayne Murray <Shayne.Murray@Polycom.com> for reporting this issue. | |||
2011-09-02 | PR: 2576 | Dr. Stephen Henson | |
Submitted by: Doug Goldstein <cardoe@gentoo.org> Reviewed by: steve Include header file stdlib.h which is needed on some platforms to get getenv() declaration. | |||
2011-09-01 | update NEWS | Dr. Stephen Henson | |
2011-09-01 | Add error checking to PKCS1_MGF1. From HEAD. | Dr. Stephen Henson | |
2011-09-01 | PR: 2340 | Dr. Stephen Henson | |
Submitted by: "Mauro H. Leggieri" <mxmauro@caiman.com.ar> Reviewed by: steve Stop warnings if OPENSSL_NO_DGRAM is defined. | |||
2011-09-01 | make timing attack protection unconditional | Dr. Stephen Henson | |
2011-09-01 | PR: 2573 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix DTLS buffering and decryption bug. |