openssl - Mirror of https://github.com/openssl/openssl

Age	Commit message (Collapse)	Author
2019-09-11	crypto/threads_none.c: fix syntax error in openssl_get_fork_id()	Dr. Matthias St. Pierre
	Fixes #9858 Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9860)
2019-09-10	Update copyright year	Matt Caswell
	Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9847)
2019-09-09	drbg: ensure fork-safety without using a pthread_atfork handler	Dr. Matthias St. Pierre
	When the new OpenSSL CSPRNG was introduced in version 1.1.1, it was announced in the release notes that it would be fork-safe, which the old CSPRNG hadn't been. The fork-safety was implemented using a fork count, which was incremented by a pthread_atfork handler. Initially, this handler was enabled by default. Unfortunately, the default behaviour had to be changed for other reasons in commit b5319bdbd095, so the new OpenSSL CSPRNG failed to keep its promise. This commit restores the fork-safety using a different approach. It replaces the fork count by a fork id, which coincides with the process id on UNIX-like operating systems and is zero on other operating systems. It is used to detect when an automatic reseed after a fork is necessary. To prevent a future regression, it also adds a test to verify that the child reseeds after fork. CVE-2019-1549 Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9802)
2018-08-17	crypto/threads_*: remove CRYPTO_atomic_{read\|write}.	Andy Polyakov
	CRYPTO_atomic_read was added with intention to read statistics counters, but readings are effectively indistinguishable from regular load (even in non-lock-free case). This is because you can get out-dated value in both cases. CRYPTO_atomic_write was added for symmetry and was never used. Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/6883)
2018-04-17	Update copyright year	Richard Levitte
	Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5990)
2018-04-05	Set error code if alloc returns NULL	Rich Salz
	Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5886)
2017-10-10	Add atomic write call	Pauli
	Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4414)
2017-10-10	Add a CRYPTO_atomic_read call which allows an int variable to be read	Pauli
	in an atomic fashion. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4414)
2017-08-21	Remove OPENSSL_assert() from crypto/threads_none.c	Matt Caswell
	Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3740)
2017-08-06	Add missing include of cryptlib.h	Rich Salz
	Also use "" not <> for all include cryptlib Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4082)
2017-06-30	Fix build with no-threads no-ec	Dr. Stephen Henson
	Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3817)
2017-06-29	Add fork handlers, based on pthread_atfork	Rich Salz
	Only for Unix platforms Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3754)
2016-05-17	Copyright consolidation 04/10	Rich Salz
	Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-05-16	Fold threads.h into crypto.h making API public	Viktor Dukhovni
	Document thread-safe lock creation Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-02-26	Implement new multi-threading API	Alessandro Ghedini
	Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>