1. 18 Jan, 2012 1 commit
    • Yang Tse's avatar
      OpenSSL: SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG option is no longer enabled · a20daf90
      Yang Tse authored
      SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG option enabling allowed successfull
      interoperability with web server Netscape Enterprise Server 2.0.1 released
      back in 1996 more than 15 years ago.
      
      Due to CVE-2010-4180, option SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG has
      become ineffective as of OpenSSL 0.9.8q and 1.0.0c. In order to mitigate
      CVE-2010-4180 when using previous OpenSSL versions we no longer enable
      this option regardless of OpenSSL version and SSL_OP_ALL definition.
      a20daf90
  2. 17 Jan, 2012 3 commits
  3. 16 Jan, 2012 5 commits
  4. 15 Jan, 2012 2 commits
  5. 14 Jan, 2012 1 commit
  6. 13 Jan, 2012 3 commits
  7. 12 Jan, 2012 2 commits
  8. 09 Jan, 2012 2 commits
  9. 08 Jan, 2012 2 commits
  10. 06 Jan, 2012 1 commit
  11. 05 Jan, 2012 2 commits
  12. 04 Jan, 2012 8 commits
  13. 03 Jan, 2012 6 commits
  14. 02 Jan, 2012 2 commits