summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2003-04-10I forgot to change the status bits to release.OpenSSL_0_9_6jRichard Levitte
This file will be retagged.
2003-04-10Time to release 0.9.6j.Richard Levitte
The ticket will be OpenSSL_0_9_6j.
2003-04-10make updateRichard Levitte
2003-04-10Add the change from HEAD that allows us to parse multi-line comments.Richard Levitte
2003-04-10new NEWSRichard Levitte
2003-04-09Make the same changes for svr5 shared library building as inRichard Levitte
0.9.7-stable.
2003-04-09Some ld implementations use LD_LIBRARY_PATH to find libraries, andRichard Levitte
what's worse, they seem to use LD_LIBRARY_PATH as the first directories to look into. This is documented in the manual page for ld on OpenUNIX 8. Therefore, we need to hack LD_LIBRARY_PATH to include the directory where the newly built libcrypto and libssl are.
2003-04-08Include rand.h, so RAND_status() and friends get properly declared.Richard Levitte
2003-04-02make RSA blinding thread-safeBodo Möller
2003-03-27Fix the problem with missing definition of THREADS on VMS.Richard Levitte
Also produce a better configuration header file. PR: 548
2003-03-20PR:make sure RSA blinding works when the PRNG is not properly seeded;Bodo Möller
enable it automatically only for the built-in engine
2003-03-20Blinding fix.Ben Laurie
2003-03-19countermeasure against new Klima-Pokorny-Rosa atackBodo Möller
2003-03-18fix formattingBodo Möller
2003-02-24year 2003Bodo Möller
2003-02-19Release of 0.9.6i is tagged, let's pretend to move on to 0.9.6j.Richard Levitte
2003-02-19Time to release 0.9.6i.OpenSSL_0_9_6iRichard Levitte
The tag will be OpenSSL_0_9_6i.
2003-02-19Security fix: Vaudenay timing attack on CBC.Richard Levitte
An advisory will be posted to the web. Expect a release within the hour.
2003-02-19Make sure the memory allocation routines check for negative sizesRichard Levitte
2003-02-14Change no_rmd160 to no_ripemd for consistency.Richard Levitte
PR: 500
2003-02-12commentsBodo Möller
2003-02-05typo in WIN16 sectionBodo Möller
Submitted by: Toni Andjelkovic <toni@soth.at>
2003-02-04typoBodo Möller
2003-02-04Update PRNG entry:Bodo Möller
- OpenSSL version differences - Sun /dev/urandom patch information
2003-01-14Correct an example that has a few typos.Richard Levitte
PR: 458
2003-01-13fix release date (CHANGES as released with OpenSSL 0.9.6h onBodo Möller
2002-12-05 said '[21 Dec 2002]')
2003-01-13typoBodo Möller
2002-12-28A function returning int should really return an int, even if it exitsRichard Levitte
first...
2002-12-28Make sure OPENSSL_cleanse is declared properly.Richard Levitte
2002-12-21Merge from HEAD...Richard Levitte
2002-12-12Skip DH-specific tests when no-dh has been configured.Richard Levitte
PR: 353
2002-12-11In CRYPTO_lock(), check that the application cares about locking (providedRichard Levitte
callbacks) before attempting to lock.
2002-12-11sk_*_push() returns the number of items on the stack, not the index of theRichard Levitte
pushed item. The index is the number of items - 1. And if a NULL item was found, actually use it. Finally, provide a little bit of safety in CRYPTO_lock() by asserting the a requested dynamic lock really must exist, instead of just being silent about it
2002-12-10A memset() too many got converted into a OPENSSL_cleanse().Richard Levitte
PR: 393
2002-12-09Fix wrong URI.Lutz Jänicke
Submitted by: assar@kth.se Reviewed by: PR: 390
2002-12-05Update version to 0.9.6i, even if that's never going to be released.Richard Levitte
2002-12-05Small fault correctedOpenSSL_0_9_6hRichard Levitte
2002-12-05make updateRichard Levitte
2002-12-05Time to release OpenSSL 0.9.6h.Richard Levitte
The tag will be OpenSSL_0_9_6h.
2002-12-05Make sure using SSL_CERT_FILE actually works, and has priority over system ↵Richard Levitte
defaults. PR: 376
2002-12-04Fixes for VxWorks. Are these needed for 0.9.7 and up as well?Richard Levitte
PR: 374
2002-12-04Include crypto.h to pull in definition of OPENSSL_cleanse in variousDr. Stephen Henson
places.
2002-12-04Missing ")"Lutz Jänicke
Submitted by: Christian Hohnstaedt <chohnstaedt@innominate.com> Reviewed by: PR:
2002-12-04A gcc 3.0 bug is triggered by our code. Add a section about it in PROBLEMS.Richard Levitte
PR: 375
2002-12-03EXIT() may mean return(). That's confusing, so let's have it really meanRichard Levitte
exit() in whatever way works for the intended platform, and define OPENSSL_EXIT() to have the old meaning (the name is of course because it's only used in the openssl program)
2002-12-03Make CRYPTO_cleanse() independent of endianness.Richard Levitte
2002-12-01EXIT() needs to be in a function that returns int.Richard Levitte
2002-11-29Correct some names.Richard Levitte
2002-11-29A few more memset()s converted to OPENSSL_cleanse().Richard Levitte
I *think* I got them all covered by now, bu please, if you find any more, tell me and I'll correct it. PR: 343
2002-11-28Have all tests use EXIT() to exit rather than exit(), since the latter doesn'tRichard Levitte
always give the expected result on some platforms.