From 64932f9e4aab568f758ad8318ea99774bbcfbbbd Mon Sep 17 00:00:00 2001 From: "Mark J. Cox" Date: Tue, 11 Oct 2005 10:16:21 +0000 Subject: Add fixes for CAN-2005-2969 Bump release ready for OpenSSL_0_9_8a tag --- CHANGES | 27 +++++++++++++++++++++++++-- FAQ | 2 +- NEWS | 5 +++++ README | 2 +- STATUS | 4 +++- crypto/opensslv.h | 6 +++--- doc/ssl/SSL_CTX_set_options.pod | 2 +- ssl/s23_srvr.c | 7 +------ ssl/ssl.h | 2 +- 9 files changed, 41 insertions(+), 16 deletions(-) diff --git a/CHANGES b/CHANGES index 4125b9daa6..a84cebf5fc 100644 --- a/CHANGES +++ b/CHANGES @@ -2,7 +2,17 @@ OpenSSL CHANGES _______________ - Changes between 0.9.8 and 0.9.8a [XX xxx XXXX] + Changes between 0.9.8 and 0.9.8a [11 Oct 2005] + + *) Remove the functionality of SSL_OP_MSIE_SSLV2_RSA_PADDING + (part of SSL_OP_ALL). This option used to disable the + countermeasure against man-in-the-middle protocol-version + rollback in the SSL 2.0 server implementation, which is a bad + idea. (CAN-2005-2969) + + [Bodo Moeller; problem pointed out by Yutaka Oiwa (Research Center + for Information Security, National Institute of Advanced Industrial + Science and Technology [AIST], Japan)] *) Add two function to clear and return the verify parameter flags. [Steve Henson] @@ -848,7 +858,17 @@ differing sizes. [Richard Levitte] - Changes between 0.9.7g and 0.9.7h [XX xxx XXXX] + Changes between 0.9.7g and 0.9.7h [11 Oct 2005] + + *) Remove the functionality of SSL_OP_MSIE_SSLV2_RSA_PADDING + (part of SSL_OP_ALL). This option used to disable the + countermeasure against man-in-the-middle protocol-version + rollback in the SSL 2.0 server implementation, which is a bad + idea. + + [Bodo Moeller; problem pointed out by Yutaka Oiwa (Research Center + for Information Security, National Institute of Advanced Industrial + Science and Technology [AIST], Japan)] *) Minimal support for X9.31 signatures and PSS padding modes. This is mainly for FIPS compliance and not fully integrated at this stage. @@ -899,6 +919,9 @@ Changes between 0.9.7f and 0.9.7g [11 Apr 2005] + [NB: OpenSSL 0.9.7h and later 0.9.7 patch levels were released after + OpenSSL 0.9.8.] + *) Fixes for newer kerberos headers. NB: the casts are needed because the 'length' field is signed on one version and unsigned on another with no (?) obvious way to tell the difference, without these VC++ diff --git a/FAQ b/FAQ index 82d8a6f887..0755cb24eb 100644 --- a/FAQ +++ b/FAQ @@ -72,7 +72,7 @@ OpenSSL - Frequently Asked Questions * Which is the current version of OpenSSL? The current version is available from . -OpenSSL 0.9.8 was released on July 5th, 2005. +OpenSSL 0.9.8a was released on October 11th, 2005. In addition to the current stable release, you can also access daily snapshots of the OpenSSL development version at state == SSL23_ST_SR_CLNT_HELLO_A) { @@ -501,9 +498,7 @@ int ssl23_get_client_hello(SSL *s) } s->state=SSL2_ST_GET_CLIENT_HELLO_A; - if ((s->options & SSL_OP_MSIE_SSLV2_RSA_PADDING) || - use_sslv2_strong || - (s->options & SSL_OP_NO_TLSv1 && s->options & SSL_OP_NO_SSLv3)) + if (s->options & SSL_OP_NO_TLSv1 && s->options & SSL_OP_NO_SSLv3) s->s2->ssl2_rollback=0; else /* reject SSL 2.0 session if client supports SSL 3.0 or TLS 1.0 diff --git a/ssl/ssl.h b/ssl/ssl.h index ab4626b2e7..1a96f04df0 100644 --- a/ssl/ssl.h +++ b/ssl/ssl.h @@ -480,7 +480,7 @@ typedef struct ssl_session_st #define SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG 0x00000008L #define SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG 0x00000010L #define SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER 0x00000020L -#define SSL_OP_MSIE_SSLV2_RSA_PADDING 0x00000040L +#define SSL_OP_MSIE_SSLV2_RSA_PADDING 0x00000040L /* no effect since 0.9.7h and 0.9.8b */ #define SSL_OP_SSLEAY_080_CLIENT_DH_BUG 0x00000080L #define SSL_OP_TLS_D5_BUG 0x00000100L #define SSL_OP_TLS_BLOCK_PADDING_BUG 0x00000200L -- cgit v1.2.3