Commits · be16cc23c63043e3095a9f6c3bed38f284c5c32b · CYBER - Cyber Security / TS 103 523 MSP / ETS / ETS OpenSSL

Dec 11, 2011
- detect and use older PKITS data · be16cc23
  Dr. Stephen Henson authored Dec 11, 2011
  
  be16cc23
Dec 10, 2011
- Updates from fips2 branch: close streams in test utilities, use cofactor ECDH · 4fa35e73
  Dr. Stephen Henson authored Dec 10, 2011
```
add new key and signature generation tests to fips_test_suite.
```
  4fa35e73
- add cofactor ECDH support from fips branch · a3a2e3a4
  Dr. Stephen Henson authored Dec 10, 2011
  
  a3a2e3a4
- use different names for asm temp files to avoid problems on some platforms · 67ef4f63
  Dr. Stephen Henson authored Dec 10, 2011
  
  67ef4f63
- add commented out option to allow use of older PKITS data · 3bfe583b
  Dr. Stephen Henson authored Dec 10, 2011
  
  3bfe583b
- update CHANGES · 627b0445
  Dr. Stephen Henson authored Dec 10, 2011
  
  627b0445
- implement -attime option as a verify parameter then it works with all relevant applications · 16363c01
  Dr. Stephen Henson authored Dec 10, 2011
  
  16363c01
Dec 09, 2011
- perlasm/x86gas.pl: give a hand old assemblers assembling loop instruction. · 7ffa48ad
  Andy Polyakov authored Dec 09, 2011
  
  7ffa48ad
- x86-mont.pl: fix bug in integer-only squaring path. · 5711dd8e
  Andy Polyakov authored Dec 09, 2011
```
PR: 2648
```
  5711dd8e
Dec 08, 2011
- Replace expired test server and client certificates with new ones. · 990390ab
  Dr. Stephen Henson authored Dec 08, 2011
  
  990390ab
Dec 07, 2011
- transparently handle X9.42 DH parameters · 2ca873e8
  Dr. Stephen Henson authored Dec 07, 2011
  
  2ca873e8
- fix error discrepancy · 7a236261
  Dr. Stephen Henson authored Dec 07, 2011
  
  7a236261
- Document RFC5114 "generation" options. · 618eb125
  Dr. Stephen Henson authored Dec 07, 2011
  
  618eb125
- Initial experimental support for X9.42 DH parameter format to handle · afb14cda
  Dr. Stephen Henson authored Dec 07, 2011
```
RFC5114 parameters and X9.42 DH public and private keys.
```
  afb14cda
Dec 06, 2011
- The default CN prompt message can be confusing when often the CN needs to · df0cdf4c
  Dr. Stephen Henson authored Dec 06, 2011
```
 be the server FQDN: change it.
[Reported by PSW Group]
```
  df0cdf4c
Dec 02, 2011
- Resolve a stack set-up race condition (if the list of compression · 19b0d0e7
  Bodo Möller authored Dec 02, 2011
```
methods isn't presorted, it will be sorted on first read).

Submitted by: Adam Langley
```
  19b0d0e7
- Fix ecdsatest.c. · ea8c77a5
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Emilia Kasper
```
  ea8c77a5
- Update HEAD CHANGES file. · a7c71d89
  Bodo Möller authored Dec 02, 2011
  
  a7c71d89
- Fix BIO_f_buffer(). · 390c5795
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Adam Langley
Reviewed by: Bodo Moeller
```
  390c5795
Dec 01, 2011
- Update DH_check() to peform sensible checks when q parameter is present. · 07981709
  Dr. Stephen Henson authored Dec 01, 2011
  
  07981709
- Correct some parameter values. · 28ff1477
  Dr. Stephen Henson authored Dec 01, 2011
  
  28ff1477
- bn/asm/mips.pl: fix typos. · 66001268
  Andy Polyakov authored Dec 01, 2011
  
  66001268
Nov 25, 2011

return error if counter exceeds limit and seed value supplied · f6c0bd64
Dr. Stephen Henson authored Nov 25, 2011

f6c0bd64
check counter value against 4 * L, not 4096 · ea7fe214
Dr. Stephen Henson authored Nov 25, 2011

ea7fe214

PR: 1794 · ebba6c48

Dr. Stephen Henson authored Nov 25, 2011

Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>
Reviewed by: steve

Make SRP conformant to rfc 5054.

Changes are:

- removal of the addition state after client hello
- removal of all pre-rfc srp alert ids
- sending a fatal alert when there is no srp extension but when the
server wants SRP
- removal of unnecessary code in the client.

ebba6c48

Nov 24, 2011
- Fix NPN implementation for renegotiation. · 6f31dd72
  Bodo Möller authored Nov 24, 2011
```
(Problem pointed out by Ben Murphy.)

Submitted by: Adam Langley
```
  6f31dd72
Nov 22, 2011
- sync and update ordinals · 4521eda7
  Dr. Stephen Henson authored Nov 22, 2011
  
  4521eda7
- add cryptlib.h to mkdef.pl · 5b6aaac9
  Dr. Stephen Henson authored Nov 22, 2011
  
  5b6aaac9
Nov 21, 2011
- sync and update ordinals · 8ce64218
  Dr. Stephen Henson authored Nov 21, 2011
  
  8ce64218
- add strp.h to mkdef.pl headers · 2c3ee8ad
  Dr. Stephen Henson authored Nov 21, 2011
  
  2c3ee8ad
- move internal functions to ssl_locl.h · 1c78c43b
  Dr. Stephen Henson authored Nov 21, 2011
  
  1c78c43b
- bcmp doesn't exist on all platforms, replace with memcmp · 21b52dd3
  Dr. Stephen Henson authored Nov 21, 2011
  
  21b52dd3
Nov 16, 2011
- bsaes-x86_64.pl: fix buffer overrun in tail processing. · d127ef78
  Andy Polyakov authored Nov 16, 2011
  
  d127ef78
- In EC_KEY_set_public_key_affine_coordinates include explicit check to see... · d674bb4b
  Dr. Stephen Henson authored Nov 16, 2011
```
In EC_KEY_set_public_key_affine_coordinates include explicit check to see passed components do not exceed field order
```
  d674bb4b
Nov 15, 2011
- Add TLS exporter. · e0af0405
  Ben Laurie authored Nov 15, 2011
  
  e0af0405
- Add DTLS-SRTP. · 333f926d
  Ben Laurie authored Nov 15, 2011
  
  333f926d
- Configure: reimplement commit#21695. · dce7f142
  Andy Polyakov authored Nov 15, 2011
  
  dce7f142
- Configure, e_aes.c: allow for XTS assembler implementation. · 77aae965
  Andy Polyakov authored Nov 15, 2011
  
  77aae965
Nov 14, 2011
- Fix some warnings caused by __owur. Temporarily (I hope) remove the more · ae551760
  Ben Laurie authored Nov 14, 2011
```
aspirational __owur annotations.
```
  ae551760
Nov 13, 2011
- bsaes-x86_64.pl: add Win64 SEH and "hadrware" calls to aes-x86_64.pl. · fe068648
  Andy Polyakov authored Nov 13, 2011
  
  fe068648