- 28 Aug, 2017 1 commit
-
-
Rich Salz authored
Fixes CVE 2017-3735 Reviewed-by:
Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/4276) (cherry picked from commit b2317174)
-
- 26 Aug, 2017 1 commit
-
-
Rich Salz authored
Reviewed-by:
Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4261) (cherry picked from commit 32c13563)
-
- 25 Aug, 2017 4 commits
-
-
Bernd Edlinger authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4242) (cherry picked from commit 78f1e4d0)
-
Richard Levitte authored
This is a vestige from pre-1.1.0 OpenSSL Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
- 24 Aug, 2017 1 commit
-
-
Matt Caswell authored
Reviewed-by:
-
- 23 Aug, 2017 2 commits
-
-
Dr. Stephen Henson authored
Fix GCM documentation: the tag does not have to be supplied before decrypting any data any more. Reviewed-by:
-
Rich Salz authored
Reviewed-by:
Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4234) (cherry picked from commit a130950d)
-
- 21 Aug, 2017 3 commits
-
-
Pauli authored
Cast arguments to the various ctype functions to unsigned char to match their documentation. Reviewed-by:
-
Nicola Tuveri authored
Reviewed-by:
Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3246)
-
Nicola Tuveri authored
Reviewed-by:
-
- 18 Aug, 2017 5 commits
-
-
Balaji Marisetti authored
CLA: trivial Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
We changed directory to the wrong directory. This change also separates the preparation phase from the tarball building phase. Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Andy Polyakov authored
Reviewed-by:
-
- 17 Aug, 2017 1 commit
-
-
Bernd Edlinger authored
Reviewed-by:
-
- 16 Aug, 2017 2 commits
-
-
David von Oheimb authored
Now the certs arg is not any more neglected when building the signer cert chain. Added case to test/recipes/80-test_ocsp.t proving fix for 3-level CA hierarchy. See also http://rt.openssl.org/Ticket/Display.html?id=4620 Reviewed-by:
-
Todd Short authored
WebSphere application server cannot handle having an empty extension (e.g. EMS/EtM) as the last extension in a client hello. This moves the SigAlgs extension last (before any padding) for TLSv1.2 to avoid this issue. Force the padding extension to a minimum length of 1. Reviewed-by:
Viktor Dukhovni <viktor@openssl.org> Reviewed-by:
Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/3927)
-
- 10 Aug, 2017 2 commits
-
-
Dr. Stephen Henson authored
Fix warning and don't use binary field certificate for ECDH CMS key only test. Reviewed-by:
-
Dr. Stephen Henson authored
Reviewed-by:
-
- 09 Aug, 2017 1 commit
-
-
Xiaoyin Liu authored
In the generated HTML document, the `<pre>` tag is not closed. This patch also has a trivial code-style improvement, unrelated to the bug fix. Reviewed-by:
-
- 08 Aug, 2017 2 commits
-
-
Dr. Stephen Henson authored
Reviewed-by:
-
Dr. Stephen Henson authored
Reviewed-by:
-
- 07 Aug, 2017 1 commit
-
-
Bernd Edlinger authored
Reviewed-by:
-
- 05 Aug, 2017 1 commit
-
-
Xiaoyin Liu authored
Reviewed-by:
-
- 03 Aug, 2017 3 commits
-
-
Richard Levitte authored
This needs more change that what is appropriate for the 1.1.0 branch. This reverts commit 04011100 . Reviewed-by:
-
Lingmo Zhu authored
Reviewed-by:
Paul Dale <paul.dale@oracle.com> Reviewed-by:
-
Lingmo Zhu authored
The comment "The following should not return 1, otherwise, things are very strange" is from the very first commit of OpenSSL. The really meaning of the comment is if the identical session can be found from internal cache after calling get_session_cb but not found before calling get_session_cb, it is just strange. The value 1 was originated from the old doc of SSLeay, reversed from the actual return value of SSL_CTX_add_session(). Anyway either return value of SSL_CTX_add_session() should not interrupt the session resumption process. So the checking of return value of SSL_CTX_add_session() is not necessary. Reviewed-by:
-
- 01 Aug, 2017 2 commits
-
-
Paul Yang authored
Seems this documentation is not dead, so add this missing part Reviewed-by:
-
Ken Goldman authored
Document that the RSA_get0_ functions permit a NULL BIGNUM **. Those output parameters are ignored. Reviewed-by:
-
- 31 Jul, 2017 3 commits
-
-
Bernd Edlinger authored
The memory blocks contain secret data and must be cleared before returning to the system heap. Reviewed-by:
-
Xiaoyin Liu authored
TLS_ST_SR_NEXT_PROTO means "SSLv3/TLS read next proto" Fix typo in the message for TLS_ST_SW_CERT_STATUS Reviewed-by:
-
Xiaoyin Liu authored
I think it's better to use `GetFileAttributes` to obtain the attributes of a file than `FindFirstFile`. If the input name contains `*`, this function should return failure rather than check whether the first match happens to be a file or a directory. Reviewed-by:
Bernd Edlinger <bernd.edlinger@hotmail.de> (Merged from https://github.com/openssl/openssl/pull/3991) (cherry picked from commit 5bd051a0)
-
- 29 Jul, 2017 3 commits
-
-
Bernd Edlinger authored
Reviewed-by:
-
Bernd Edlinger authored
Use OPENSSL_secure_clear_free for secure mem BIOs and X25519 private keys. Reviewed-by:
-
Bernd Edlinger authored
and d2i_PKCS8PrivateKey_bio before it goes out of scope. Reviewed-by:
-
- 28 Jul, 2017 2 commits
-
-
Paul Yang authored
original problem: if a private key is invaild, nothing outputted. the error filter in apps/rsa.c is not working any more. Reviewed-by:
-
Paul Yang authored
Reviewed-by:
-
