Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-07-04 | Add license info. | Dr. Stephen Henson | |
(cherry picked from commit 55707a36cce3584457f687ff020842c079624ee8) | |||
2014-07-02 | ASN1 sanity check. | Dr. Stephen Henson | |
Primitive encodings shouldn't use indefinite length constructed form. PR#2438 (partial). (cherry picked from commit 398e99fe5e06edb11f55a39ce0883d9aa633ffa9) | |||
2014-06-27 | Tolerate critical AKID in CRLs. | Dr. Stephen Henson | |
PR#3014 (cherry picked from commit 11da66f8b1fbe5777fe08cc6ace9e1f2c1576a50) | |||
2014-06-27 | Memory leak and NULL dereference fixes. | Dr. Stephen Henson | |
PR#3403 (cherry picked from commit d2aea038297e0c64ca66e6844cbb37377365885e) | |||
2014-06-01 | Set default global mask to UTF8 only. | Dr. Stephen Henson | |
(cherry picked from commit 3009244da47b989c4cc59ba02cf81a4e9d8f8431) | |||
2014-04-01 | Don't try and verify signatures if key is NULL (CVE-2013-0166) | Dr. Stephen Henson | |
Add additional check to catch this in ASN1_item_verify too. (cherry picked from commit 66e8211c0b1347970096e04b18aa52567c325200) | |||
2014-02-14 | Fix various spelling errors | Scott Schaefer | |
(cherry picked from commit 2b4ffc659eabec29f76821f0ac624a2b8c19e4c7) | |||
2013-12-01 | make update | Dr. Stephen Henson | |
2013-10-01 | Add KDF for DH. | Dr. Stephen Henson | |
Add X9.42 DH KDF. Move sharedinfo generation code to CMS library as the same structure is used by DH and ECDH. Move ASN1_OBJECT typedef to ossl_typ.h so it can be picked up by dh headers without the need to use ASN1. (cherry picked from commit dc1ce3bc64845d16314af1f11acf5384e4ae9b34) | |||
2013-08-19 | Time difference functions. | Dr. Stephen Henson | |
Backport of ASN1_TIME_diff and OPENSSL_gmtime_diff functions from master branch. | |||
2013-03-18 | Encode INTEGER correctly. | Dr. Stephen Henson | |
If an ASN1_INTEGER structure is allocated but not explicitly set encode it as zero: don't generate an invalid zero length INTEGER. (cherry picked from commit 1643edc63c3e15b6db5a15a728bc288f2cc2bbc7) | |||
2013-01-17 | initial support for delta CRL generations by diffing two full CRLs | Dr. Stephen Henson | |
2013-01-16 | print out issuer and subject unique identifier fields in certificates | Dr. Stephen Henson | |
2012-12-26 | New functions to retrieve certificate signatures and signature OID NID. | Dr. Stephen Henson | |
(backport from HEAD) | |||
2012-09-24 | Fix Valgrind warning. | Bodo Möller | |
Submitted by: Adam Langley | |||
2012-06-03 | Reduce version skew: trivia (I hope). | Ben Laurie | |
2012-05-11 | PR: 2813 | Dr. Stephen Henson | |
Reported by: Constantine Sapuntzakis <csapuntz@gmail.com> Fix possible deadlock when decoding public keys. | |||
2012-04-19 | Check for potentially exploitable overflows in asn1_d2i_read_bio | Dr. Stephen Henson | |
BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer in CRYPTO_realloc_clean. Thanks to Tavis Ormandy, Google Security Team, for discovering this issue and to Adam Langley <agl@chromium.org> for fixing it. (CVE-2012-2110) | |||
2012-04-07 | Initial experimental support for X9.42 DH parameter format to handle | Dr. Stephen Henson | |
RFC5114 parameters and X9.42 DH public and private keys. (backport from HEAD) | |||
2012-03-29 | ans1/tasn_prn.c: avoid bool in variable names [from HEAD]. | Andy Polyakov | |
PR: 2776 | |||
2012-03-12 | corrected fix to PR#2711 and also cover mime_param_cmp | Dr. Stephen Henson | |
2012-02-29 | PR: 2742 | Dr. Stephen Henson | |
Reported by: Dmitry Belyavsky <beldmit@gmail.com> If resigning with detached content in CMS just copy data across. | |||
2012-02-28 | Fix memory leak cause by race condition when creating public keys. | Dr. Stephen Henson | |
Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for reporting this bug. | |||
2012-02-27 | PR: 2736 | Dr. Stephen Henson | |
Reported by: Remi Gacogne <rgacogne-bugs@coredump.fr> Preserve unused bits value in non-canonicalised ASN1_STRING structures by using ASN1_STRING_copy which preseves flags. | |||
2012-02-27 | free headers after use in error message | Dr. Stephen Henson | |
2012-02-23 | PR: 2711 | Dr. Stephen Henson | |
Submitted by: Tomas Mraz <tmraz@redhat.com> Tolerate bad MIME headers in parser. | |||
2012-01-15 | fix warning | Dr. Stephen Henson | |
2012-01-12 | Sanitize usage of <ctype.h> functions. It's important that characters | Andy Polyakov | |
are passed zero-extended, not sign-extended [from HEAD]. PR: 2682 | |||
2012-01-11 | asn1/t_x509.c: fix serial number print, harmonize with a_int.c [from HEAD]. | Andy Polyakov | |
PR: 2675 Submitted by: Annie Yousar | |||
2011-10-19 | "make update" | Bodo Möller | |
2011-10-11 | update pkey method initialisation and copy | Dr. Stephen Henson | |
2011-10-09 | Backport PSS signature support from HEAD. | Dr. Stephen Henson | |
2011-10-09 | Fix memory leak. From HEAD. | Dr. Stephen Henson | |
2011-10-09 | Backport of password based CMS support from HEAD. | Dr. Stephen Henson | |
2011-09-16 | make depend | Dr. Stephen Henson | |
2011-09-16 | Improved error checking for DRBG calls. | Dr. Stephen Henson | |
New functionality to allow default DRBG type to be set during compilation or during runtime. | |||
2011-09-05 | Fix memory leak on bad inputs. | Bodo Möller | |
2011-09-02 | Don't use *from++ in tolower as this is implemented as a macro on some | Dr. Stephen Henson | |
platforms. Thanks to Shayne Murray <Shayne.Murray@Polycom.com> for reporting this issue. | |||
2011-07-14 | PR: 2556 (partial) | Dr. Stephen Henson | |
Reported by: Daniel Marschall <daniel-marschall@viathinksoft.de> Reviewed by: steve Fix OID routines. Check on encoding leading zero rejection should start at beginning of encoding. Allow for initial digit when testing when to use BIGNUMs which can increase first value by 2 * 40. | |||
2011-06-22 | correctly encode OIDs near 2^32 | Dr. Stephen Henson | |
2011-06-03 | Backport libcrypto audit: check return values of EVP functions instead | Dr. Stephen Henson | |
of assuming they will always suceed. | |||
2011-06-03 | New function X509_ALGOR_set_md() to set X509_ALGOR ↵ | Dr. Stephen Henson | |
(DigestAlgorithmIdentifier) from a digest algorithm (backport from HEAD). | |||
2011-06-03 | Backport CMAC support from HEAD. | Dr. Stephen Henson | |
2011-04-30 | no need to include memory.h | Dr. Stephen Henson | |
2011-01-24 | PR: 2433 | Dr. Stephen Henson | |
Submitted by: Chris Wilson <chris@qwirx.com> Reviewed by: steve Constify ASN1_STRING_set_default_mask_asc(). | |||
2011-01-13 | stop warning with no-engine | Dr. Stephen Henson | |
2011-01-03 | Fix escaping code for string printing. If *any* escaping is enabled we | Dr. Stephen Henson | |
must escape the escape character itself (backslash). | |||
2010-10-03 | Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(), | Dr. Stephen Henson | |
this means that some implementations will be used automatically, e.g. aesni, we do this for cryptodev anyway. Setup cpuid in ENGINE_load_builtin_engines() too as some ENGINEs use it. | |||
2010-06-15 | Fix warnings (From HEAD, original patch by Ben). | Dr. Stephen Henson | |
2010-03-07 | The OID sanity check was incorrect. It should only disallow *leading* 0x80 | Dr. Stephen Henson | |
values. |