Age | Commit message (Collapse) | Author | |
---|---|---|---|
2005-12-13 | update TLS-ECC code | Bodo Möller | |
Submitted by: Douglas Stebila | |||
2005-12-13 | add missing entry (the corresponding code *is* in the 0.9.8 branch, | Bodo Möller | |
and both the code and the CHANGES entry are in HEAD) | |||
2005-12-05 | Various zlib related fixes and enhancements. | Dr. Stephen Henson | |
2005-11-20 | Update from HEAD. | Dr. Stephen Henson | |
2005-11-06 | Update VC++ build engine to include supported engine DLL builds. | Dr. Stephen Henson | |
2005-11-01 | Document it | Richard Levitte | |
2005-10-26 | harmonize with 0.9.7-stable CHANGES | Bodo Möller | |
2005-10-19 | One time CAN->CVE change | Mark J. Cox | |
2005-10-15 | Add in CHANGES for 0.9.7i. | Richard Levitte | |
2005-10-11 | Bump after tag | Mark J. Cox | |
2005-10-11 | Add fixes for CAN-2005-2969OpenSSL_0_9_8a | Mark J. Cox | |
Bump release ready for OpenSSL_0_9_8a tag | |||
2005-09-02 | Add two extra verify flags functions. | Dr. Stephen Henson | |
2005-08-25 | Keep cipher lists sorted in the source instead of sorting them at | Nils Larsch | |
runtime, thus removing the need for a lock. Add a test to ssltest to verify that the cipher lists are sorted. | |||
2005-08-23 | recent DH change does not avoid *all* possible small-subgroup attacks; | Bodo Möller | |
let's be clear about that | |||
2005-08-20 | Missed stuff. | Ben Laurie | |
2005-08-20 | Avoid weak subgroups in Diffie Hellman. | Ben Laurie | |
2005-08-07 | Windows CE update from HEAD. | Andy Polyakov | |
2005-08-05 | Initialize SSL_METHOD structures at compile time. This removes the need | Dr. Stephen Henson | |
for locking code. The CRYPTO_LOCK_SSL_METHOD lock is now no longer used. | |||
2005-08-04 | Allow PKCS7_decrypt() to work if no cert supplied. | Dr. Stephen Henson | |
2005-07-05 | Now that 0.9.8 has been tagged, it's time to move on. | Richard Levitte | |
2005-07-05 | Time to release OpenSSL 0.9.8.OpenSSL_0_9_8 | Richard Levitte | |
The tag will be OpenSSL_0_9_8. | |||
2005-07-05 | Last additions to the release documentation. | Richard Levitte | |
2005-07-05 | Mention Win64 support in CHANGES and throw in building instructions. | Andy Polyakov | |
2005-07-04 | Add utf8 options to ca utility. | Dr. Stephen Henson | |
PR:1109 | |||
2005-06-02 | Typo. | Dr. Stephen Henson | |
2005-06-02 | Update CHANGES. | Dr. Stephen Henson | |
2005-05-29 | Change the source and output paths for 'chil' and '4758cca' engines so that | Geoff Thorpe | |
dynamic loading is consistent with respect to engine ids. | |||
2005-05-26 | make sure DSA signing exponentiations really are constant-time | Bodo Möller | |
2005-05-16 | Change wording for BN_mod_exp_mont_consttime() entry | Bodo Möller | |
2005-05-16 | Implement fixed-window exponentiation to mitigate hyper-threading | Bodo Möller | |
timing attacks. BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for RSA/DSA/DH private key computations unless RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/ DH_FLAG_NO_EXP_CONSTTIME is set. Submitted by: Matthew D Wood Reviewed by: Bodo Moeller | |||
2005-05-15 | Make -CSP option work again in pkcs12 utility by checking for | Dr. Stephen Henson | |
attribute in EVP_PKEY structure. | |||
2005-05-11 | Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled | Bodo Möller | |
with the SSL_OP_NO_SSLv2 option. | |||
2005-05-10 | give EC_GROUP_new_by_nid a more meanigful name: | Nils Larsch | |
EC_GROUP_new_by_nid -> EC_GROUP_new_by_curve_name | |||
2005-05-09 | give EC_GROUP_*_nid functions a more meaningful name | Bodo Möller | |
EC_GROUP_get_nid -> EC_GROUP_get_curve_name EC_GROUP_set_nid -> EC_GROUP_set_curve_name | |||
2005-05-01 | Support for smime-type MIME parameter. | Dr. Stephen Henson | |
2005-04-26 | Port BN_MONT_CTX_set_locked() from stable branch. | Dr. Stephen Henson | |
The function rsa_eay_mont_helper() has been removed because it is no longer needed after this change. | |||
2005-04-26 | some updates for the blinding code; summary: | Nils Larsch | |
- possibility of re-creation of the blinding parameters after a fixed number of uses (suggested by Bodo) - calculatition of the rsa::e in case it's absent and p and q are present (see bug report #785) - improve the performance when if one rsa structure is shared by more than a thread (see bug report #555) - fix the problem described in bug report #827 - hide the definition ot the BN_BLINDING structure in bn_blind.c | |||
2005-04-26 | Add DTLS support. | Ben Laurie | |
2005-04-25 | first step to melt down ChangeLog.0_9_7-stable_not-in-head :-) | Bodo Möller | |
2005-04-22 | - use BN_set_negative and BN_is_negative instead of BN_set_sign | Nils Larsch | |
and BN_get_sign - implement BN_set_negative as a function - always use "#define BN_is_zero(a) ((a)->top == 0)" | |||
2005-04-12 | Include error library value in C error source files instead of fixing up | Dr. Stephen Henson | |
at runtime. | |||
2005-04-09 | Make kerberos ciphersuite code work with newer header files | Dr. Stephen Henson | |
2005-04-09 | Added restrictions on the use of proxy certificates, as they may pose | Richard Levitte | |
a security threat on unexpecting applications. Document and test. | |||
2005-04-08 | add support for DER encoded private keys to SSL_CTX_use_PrivateKey_file() | Nils Larsch | |
and SSL_use_PrivateKey_file() PR: 1035 Submitted by: Walter Goulet Reviewed by: Nils Larsch | |||
2005-04-07 | get rid of very buggy and very imcomplete DH cert support | Nils Larsch | |
Reviewed by: Bodo Moeller | |||
2005-04-02 | use SHA-1 as the default digest for the apps/openssl commands | Nils Larsch | |
2005-03-31 | Give everything prototypes (well, everything that's actually used). | Ben Laurie | |
2005-03-24 | Harmonize with CHANGES as distributed in OpenSSL 0.9.7f. | Bodo Möller | |
2005-03-24 | undo Cygwin change | Ulf Möller | |
2005-03-22 | Ensure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server and | Dr. Stephen Henson | |
client random values. |