Commits · 0a02757b03168c5fd089d6e495e3e343ea4c7f86 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

May 22, 2003
- Correct a typo (basically, one can't just replace 'memset' with · 0a02757b
  Richard Levitte authored May 22, 2003
```
'OPENSSL_cleanse', there's an argument to remove as well).
```
  0a02757b
May 21, 2003
- String not properly NUL-terminated when no X509_NAME is given. · fd378564
  Richard Levitte authored May 21, 2003
```
PR: 618
```
  fd378564
- Don't forget that strlen() doesn't include the ending NUL. · 46956f06
  Richard Levitte authored May 21, 2003
```
PR: 618
```
  46956f06
- Cleanse the MD context properly when done adding or getting random data. · 528c1ad2
  Richard Levitte authored May 21, 2003
```
PR: 619
```
  528c1ad2
- Fix sign bugs. · 3b9e8c7c
  Richard Levitte authored May 21, 2003
```
PR: 621
```
  3b9e8c7c
Apr 22, 2003
- fix typo · 3ad23eb2
  Bodo Möller authored Apr 22, 2003
```
Submitted by: Nils Larsch
```
  3ad23eb2
Apr 17, 2003
- Typo. · adc88583
  Richard Levitte authored Apr 17, 2003
```
PR: 562
```
  adc88583
Apr 16, 2003

Memory leak fix: RSA_blinding_on() didn't free Ai under certain circumstances. · 19b11441

Richard Levitte authored Apr 16, 2003

Memory leak fix: RSA_blinding_on() would leave a dangling pointer in
rsa->blinding under certain circumstances.
Double definition fix: RSA_FLAG_NO_BLINDING was defined twice.

19b11441

Apr 15, 2003
- Memory leak fix: local blinding structure not freed in rsa_eay_private_decrypt() · 51c21d0f
  Richard Levitte authored Apr 15, 2003
  
  51c21d0f
Apr 10, 2003
- The release is tagged, time to hope we won't have to work on 0.9.6k. · 0698f54e
  Richard Levitte authored Apr 10, 2003
  
  0698f54e
- I forgot to change the status bits to release. · e352a9e6
  Richard Levitte authored Apr 10, 2003
```
This file will be retagged.
```
  OpenSSL_0_9_6j
  
  e352a9e6
- Time to release 0.9.6j. · 51c47546
  Richard Levitte authored Apr 10, 2003
```
The ticket will be OpenSSL_0_9_6j.
```
  51c47546
- make update · 335340af
  Richard Levitte authored Apr 10, 2003
  
  335340af
- Add the change from HEAD that allows us to parse multi-line comments. · d373ca98
  Richard Levitte authored Apr 10, 2003
  
  d373ca98
- new NEWS · 1db625bc
  Richard Levitte authored Apr 10, 2003
  
  1db625bc
Apr 09, 2003

Make the same changes for svr5 shared library building as in · 86d79b3c
Richard Levitte authored Apr 09, 2003
```
0.9.7-stable.
```
86d79b3c

Some ld implementations use LD_LIBRARY_PATH to find libraries, and · e45b2a62

Richard Levitte authored Apr 09, 2003

what's worse, they seem to use LD_LIBRARY_PATH as the first
directories to look into. This is documented in the manual page for
ld on OpenUNIX 8. Therefore, we need to hack LD_LIBRARY_PATH to
include the directory where the newly built libcrypto and libssl are.

e45b2a62

Apr 08, 2003
- Include rand.h, so RAND_status() and friends get properly declared. · 5d4bf96a
  Richard Levitte authored Apr 08, 2003
  
  5d4bf96a
Apr 02, 2003
- make RSA blinding thread-safe · 223c80ea
  Bodo Möller authored Apr 02, 2003
  
  223c80ea
Mar 27, 2003
- Fix the problem with missing definition of THREADS on VMS. · 60511b8b
  Richard Levitte authored Mar 27, 2003
```
Also produce a better configuration header file.
PR: 548
```
  60511b8b
Mar 20, 2003
- PR:make sure RSA blinding works when the PRNG is not properly seeded; · 20fda79f
  Bodo Möller authored Mar 20, 2003
```
enable it automatically only for the built-in engine
```
  20fda79f
- Blinding fix. · 66e1081a
  Ben Laurie authored Mar 20, 2003
  
  66e1081a
Mar 19, 2003
- countermeasure against new Klima-Pokorny-Rosa atack · ef42d6a4
  Bodo Möller authored Mar 19, 2003
  
  ef42d6a4
Mar 18, 2003
- fix formatting · 00223b96
  Bodo Möller authored Mar 18, 2003
  
  00223b96
Feb 24, 2003
- year 2003 · 3d1120f6
  Bodo Möller authored Feb 24, 2003
  
  3d1120f6
Feb 19, 2003
- Release of 0.9.6i is tagged, let's pretend to move on to 0.9.6j. · fc68e4a0
  Richard Levitte authored Feb 19, 2003
  
  fc68e4a0
- Time to release 0.9.6i. · 84c1d096
  Richard Levitte authored Feb 19, 2003
```
The tag will be OpenSSL_0_9_6i.
```
  OpenSSL_0_9_6i
  
  84c1d096
- Security fix: Vaudenay timing attack on CBC. · 39c06a8b
  Richard Levitte authored Feb 19, 2003
```
An advisory will be posted to the web.  Expect a release within the hour.
```
  39c06a8b
- Make sure the memory allocation routines check for negative sizes · c0a48f4c
  Richard Levitte authored Feb 19, 2003
  
  c0a48f4c
Feb 14, 2003
- Change no_rmd160 to no_ripemd for consistency. · 1254766d
  Richard Levitte authored Feb 14, 2003
```
PR: 500
```
  1254766d
Feb 12, 2003
- comments · b73de733
  Bodo Möller authored Feb 12, 2003
  
  b73de733
Feb 05, 2003
- typo in WIN16 section · a71f9eeb
  Bodo Möller authored Feb 05, 2003
```
Submitted by: Toni Andjelkovic <toni@soth.at>
```
  a71f9eeb
Feb 04, 2003
- typo · d76434fe
  Bodo Möller authored Feb 04, 2003
  
  d76434fe
- Update PRNG entry: · ac3b89d8
  Bodo Möller authored Feb 04, 2003
```
- OpenSSL version differences
- Sun /dev/urandom patch information
```
  ac3b89d8
Jan 14, 2003
- Correct an example that has a few typos. · e5919944
  Richard Levitte authored Jan 14, 2003
```
PR: 458
```
  e5919944
Jan 13, 2003
- fix release date (CHANGES as released with OpenSSL 0.9.6h on · 90f6da7b
  Bodo Möller authored Jan 13, 2003
```
2002-12-05 said '[21 Dec 2002]')
```
  90f6da7b
- typo · ad487598
  Bodo Möller authored Jan 13, 2003
  
  ad487598
Dec 28, 2002
- A function returning int should really return an int, even if it exits · b2359d51
  Richard Levitte authored Dec 28, 2002
```
first...
```
  b2359d51
- Make sure OPENSSL_cleanse is declared properly. · 84d964a5
  Richard Levitte authored Dec 28, 2002
  
  84d964a5
Dec 21, 2002
- Merge from HEAD... · 6c8aa1ec
  Richard Levitte authored Dec 21, 2002
  
  6c8aa1ec