Commits · 09272c56f14bcce1ae15bd902ab395a8fc71deee · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Jan 26, 2017
- Update CHANGES and NEWS for new release · 09272c56
  Matt Caswell authored Jan 24, 2017
  09272c56
- bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal. · a59b90bf
  Andy Polyakov authored Jan 21, 2017
  a59b90bf
- Document DH_check_params() · 20b69f66
  Richard Levitte authored Jan 15, 2017
  20b69f66
- Better check of DH parameters in TLS data · a39aa186
  Richard Levitte authored Dec 30, 2016
  a39aa186
- crypto/evp: harden AEAD ciphers. · 00d96547
  Andy Polyakov authored Jan 19, 2017
  00d96547
- crypto/evp: harden RC4_MD5 cipher. · f3a7e57c
  Andy Polyakov authored Jan 19, 2017
  f3a7e57c
Jan 25, 2017
- Remove assert from is_partially_overlapping() · b8552dc8
  Matt Caswell authored Jan 25, 2017
  b8552dc8
- Adjust in and in_len instead of donelen · 38a041a0
  Matt Caswell authored Jan 25, 2017
  38a041a0
- Fix the overlapping check for fragmented "Update" operations · 3258e29a
  Matt Caswell authored Jan 24, 2017
  3258e29a
- Update evp_test to make sure passing partial block to "Update" is ok · fd18736a
  Matt Caswell authored Jan 23, 2017
  fd18736a
- Properly handle a partial block in OCB mode · 6af62ee9
  Matt Caswell authored Jan 23, 2017
  6af62ee9
- Don't use magic numbers in aes_ocb_cipher() · d1257342
  Matt Caswell authored Jan 23, 2017
  d1257342
Jan 24, 2017
- s_client: Better response success check for CONNECT · 07cd2f84
  Richard Levitte authored Oct 05, 2016
  07cd2f84
- Replace div-spoiler hack with simpler code, GH#1027,2253. · 0e3200b5
  Andy Polyakov authored Jan 23, 2017
  0e3200b5
- Cleanup EVP_CIPH/EP_CTRL duplicate defines · f5eab25a
  Todd Short authored Jan 09, 2017
  f5eab25a
- Fix error handling in compute_key, BN_CTX_get can return NULL · 75249be2
  Bernd Edlinger authored Dec 22, 2016
  75249be2
- Do not overallocate for tmp.ciphers_raw · 722d42e1
  Benjamin Kaduk authored Jan 24, 2017
  722d42e1
- Fix SSL_get0_raw_cipherlist() · c088325b
  Matt Caswell authored Jan 24, 2017
  c088325b
- Add missing flags for EVP_chacha20() · 0de0fb88
  Kazuki Yamaguchi authored Dec 30, 2016
  0de0fb88
- Fix a ssl session leak due to OOM in lh_SSL_SESSION_insert · cee0cdbc
  Bernd Edlinger authored Dec 22, 2016
  cee0cdbc
- RAND_egd_bytes: No need to check RAND_status on connection error. · b81aadde
  ganesh authored Nov 11, 2016
  b81aadde
- Fixed the return code for RAND_egd_bytes. · 03f3575c
  ganesh authored Nov 10, 2016
  03f3575c
- Fixed the return code of RAND_query_egd_bytes when connect fails. · 73ff8472
  ganesh authored Nov 09, 2016
  73ff8472
Jan 23, 2017
- Fix use before assignment · 45789c28
  FdaSilvaYY authored Nov 16, 2016
  45789c28
- Extend the test_ssl_new renegotiation tests to include client auth · c4fec137
  Matt Caswell authored Nov 22, 2016
  c4fec137
- Stop server from expecting Certificate message when not requested · caa2427f
  Matt Caswell authored Nov 22, 2016
  caa2427f
- Stop client from sending Certificate message when not requested · 8a72eafb
  Matt Caswell authored Nov 22, 2016
  8a72eafb
- Fix SSL_VERIFY_CLIENT_ONCE · c25d172a
  Matt Caswell authored Nov 22, 2016
  c25d172a
- Add a test to check messsages sent are the ones we expect · f31917af
  Matt Caswell authored Nov 22, 2016
  f31917af
- Support renegotiation in TLSProxy · 4b684b54
  Matt Caswell authored Nov 22, 2016
  4b684b54
- Fix a bug in TLSProxy where zero length messages were not being recorded · 6bc3bcb3
  Matt Caswell authored Nov 22, 2016
  6bc3bcb3
- fix a memory leak in ssl3_generate_key_block fix the error handling in ssl3_change_cipher_state · 7bd011d7
  Bernd Edlinger authored Jan 01, 2017
  7bd011d7
- Check the exit code from the server process · 408eb66a
  Bernd Edlinger authored Jan 10, 2017
  408eb66a
Jan 20, 2017
- Fix DSA parameter generation control error · aaec49fa
  Richard Levitte authored Jan 18, 2017
  aaec49fa
Jan 19, 2017
- correct 3 mistakes · 34936413
  Markus Triska authored Jan 19, 2017
  34936413
Jan 18, 2017
- Skip ECDH tests for SSLv3 · df0d9c69
  Rich Salz authored Jan 16, 2017
  df0d9c69
- If client doesn't send curves list, don't assume all. · 8accb70e
  Rich Salz authored Sep 19, 2016
  8accb70e
- Clean dead macros and defines · bb2efaca
  FdaSilvaYY authored Nov 08, 2016
  bb2efaca
- Clean one unused variable, plus an useless one. · 17f4d259
  FdaSilvaYY authored Nov 10, 2016
  17f4d259
- Correct reference to SSL_get_peer_cert_chain(). · c9c36ee1
  Markus Triska authored Jan 18, 2017
  c9c36ee1