Commits · 058ffd762331aa6dbd012bca85e28f939ca98b7b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

May 30, 2008
- Add new error codes, log unknown magic or algorithm IDs. · 058ffd76
  Dr. Stephen Henson authored May 30, 2008
  
  058ffd76
- Initial DSA public key loading support in CryptoAPI ENGINE. · 0330a13a
  Dr. Stephen Henson authored May 30, 2008
  
  0330a13a
- Add support for ENGINE loaded keys in dsa app. · 467325b8
  Dr. Stephen Henson authored May 30, 2008
  
  467325b8
- Add error codes for blob sanity checks, rebuild error table. · 00f716bb
  Dr. Stephen Henson authored May 30, 2008
  
  00f716bb
- Blob type and algorithm type sanity checks · 2f2f0324
  Dr. Stephen Henson authored May 30, 2008
  
  2f2f0324
- Don't set extended type is mbstring flag set. · feb200bb
  Dr. Stephen Henson authored May 30, 2008
  
  feb200bb
- Update default depflag. · 38946670
  Dr. Stephen Henson authored May 30, 2008
  
  38946670
May 29, 2008
- Load CryptoAPI engine if supported. · 203ac694
  Dr. Stephen Henson authored May 29, 2008
  
  203ac694
- Update mkdef.pl to recognize CAPIENG · bb592c75
  Dr. Stephen Henson authored May 29, 2008
  
  bb592c75
- Make CryptoAPI engine look more like the others.... · 777d717c
  Dr. Stephen Henson authored May 29, 2008
  
  777d717c
- Make dynamic engine link work with capi. · 143d8459
  Dr. Stephen Henson authored May 29, 2008
  
  143d8459
- Disable CryptoAPI engine compilation by default. · a29669d7
  Dr. Stephen Henson authored May 29, 2008
  
  a29669d7
- Create error codes, compile in source. · e5be1e16
  Dr. Stephen Henson authored May 29, 2008
  
  e5be1e16
- CryptoAPI ENGINE... initial version, not compiled in yet. · 9e47c347
  Dr. Stephen Henson authored May 29, 2008
  
  9e47c347
May 28, 2008
- FAQ updates from HEAD · cb896f89
  Bodo Möller authored May 28, 2008
  
  cb896f89
- fix whitespace · cec9bce1
  Bodo Möller authored May 28, 2008
  
  cec9bce1
- After tagging, bump ready for 0.9.8i development · 3f79793b
  Mark J. Cox authored May 28, 2008
  
  3f79793b
- Prepare for 0.9.8h release · 0d01d8a7
  Mark J. Cox authored May 28, 2008
  
  OpenSSL_0_9_8h
  
  0d01d8a7
- Fix flaw if 'Server Key exchange message' is omitted from a TLS · 2c0fa03d
  Mark J. Cox authored May 28, 2008
```
handshake which could lead to a cilent crash as found using the
Codenomicon TLS test suite (CVE-2008-1672)

Reviewed by: openssl-security@openssl.org

Obtained from: mark@awe.com
```
  2c0fa03d
- Fix double-free in TLS server name extensions which could lead to a remote · d3b3a6d3
  Mark J. Cox authored May 28, 2008
```
crash found by Codenomicon TLS test suite (CVE-2008-0891)

Reviewed by: openssl-security@openssl.org

Obtained from: jorton@redhat.com
```
  d3b3a6d3
May 27, 2008
- grammar · fc260b09
  Bodo Möller authored May 27, 2008
  
  fc260b09
- year 2008 · b3c79a8a
  Bodo Möller authored May 27, 2008
  
  b3c79a8a
May 26, 2008
- Add README about removed root CA certificates. · f0ecefc0
  Lutz Jänicke authored May 26, 2008
  
  f0ecefc0
- Reword comment to be much shorter to stop other people from complaining · b0118409
  Lutz Jänicke authored May 26, 2008
```
about "overcommenting"
```
  b0118409
May 23, 2008
- Clear error queue when starting SSL_CTX_use_certificate_chain_file · 5f232886
  Lutz Jänicke authored May 23, 2008
```
PR: 1417, 1513
Submitted by: Erik de Castro Lopo <mle+openssl@mega-nerd.com>
```
  5f232886
- Remove all root CA files (beyond test CAs including private key) · 45c58c7d
  Lutz Jänicke authored May 23, 2008
```
from the OpenSSL distribution.
```
  45c58c7d
May 20, 2008
- Fix off by one error ;-) · 112591be
  Dr. Stephen Henson authored May 20, 2008
  
  112591be
- Typo. · 1b8daa36
  Dr. Stephen Henson authored May 20, 2008
  
  1b8daa36
- Update ordinals. · 1cdbc755
  Dr. Stephen Henson authored May 20, 2008
  
  1cdbc755
- Oops... PEM_write_bio_ASN1_stream() shouldn't be in 0.9.8 CMS backport. · aa9c7e4b
  Dr. Stephen Henson authored May 20, 2008
  
  aa9c7e4b
- Remove deleted function definitions from header files · 6be69a16
  Dr. Stephen Henson authored May 20, 2008
```
so Windows build picks it up.

Recognize new option in mk1mf.pl
```
  6be69a16
- Remove old DES definition of deleted function too. · eaf76fee
  Dr. Stephen Henson authored May 20, 2008
  
  eaf76fee
- Correctly adjust location of comment · 03e79ed0
  Lutz Jänicke authored May 20, 2008
```
Submitted by: Ben Laurie <ben@links.org>
```
  03e79ed0
- Fix warning. · 56bef2df
  Ben Laurie authored May 20, 2008
  
  56bef2df
May 19, 2008
- Fix two invalid memory reads in RSA OAEP mode. · 10d3886c
  Dr. Stephen Henson authored May 19, 2008
```
Submitted by: Ivan Nestlerode <inestlerode@us.ibm.com>
Reviewed by: steve
```
  10d3886c
- Disable code that clearly doesn't currently serve any useful purpose. · f1c0cf5b
  Bodo Möller authored May 19, 2008
```
(Buggy line reported by Matthias Koenig.)
```
  f1c0cf5b
- Document "openssl s_server" -crl_check* options · 2a7ac69e
  Lutz Jänicke authored May 19, 2008
```
Submitted by: Daniel Black <daniel.subs@internode.on.net>
```
  2a7ac69e
- Provide information about "openssl dgst" -hmac option. · d13ea8e1
  Lutz Jänicke authored May 19, 2008
  
  d13ea8e1
May 18, 2008
- Typo. · 1820b04b
  Dr. Stephen Henson authored May 18, 2008
```
PR: 1672
```
  1820b04b
May 16, 2008

Another occurance of possible valgrind/purify "uninitialized memory" · 439b7ef4

Lutz Jänicke authored May 16, 2008

complaint related to the PRNG: with PURIFY policy don't feed uninitialized
memory into the PRNG.

Submitted by: Bodo Moeller <bmoeller@openssl.org> :-)

439b7ef4