- 16 Feb, 2012 1 commit
-
-
Dr. Stephen Henson authored
before rejecting multiple SGC restarts.
-
- 15 Feb, 2012 2 commits
-
-
Dr. Stephen Henson authored
Update RSA EVP_PKEY_METHOD to use the OCTET STRING form of MDC2 signature: this will make all versions of MDC2 signature equivalent.
-
Dr. Stephen Henson authored
signatures and MDC2 using EVP or RSA_sign. This has become more apparent when the dgst utility in OpenSSL 1.0.0 and later switched to using the EVP_DigestSign functions which call RSA_sign. This means that the signature format OpenSSL 1.0.0 and later used with dgst -sign and MDC2 is incompatible with previous versions. Add detection in RSA_verify so either format works. Note: MDC2 is disabled by default in OpenSSL and very rarely used in practice.
-
- 09 Feb, 2012 1 commit
-
-
Dr. Stephen Henson authored
some servers.
-
- 31 Jan, 2012 1 commit
-
-
Dr. Stephen Henson authored
structure. Before this the only way to add a custom chain was in the parent SSL_CTX (which is shared by all key types and SSL structures) or rely on auto chain building (which is performed on each handshake) from the trust store.
-
- 25 Jan, 2012 1 commit
-
-
Dr. Stephen Henson authored
-
- 18 Jan, 2012 1 commit
-
-
Dr. Stephen Henson authored
Thanks to Antonio Martin, Enterprise Secure Access Research and Development, Cisco Systems, Inc. for discovering this bug and preparing a fix. (CVE-2012-0050)
-
- 17 Jan, 2012 1 commit
-
-
Dr. Stephen Henson authored
-
- 16 Jan, 2012 1 commit
-
-
Dr. Stephen Henson authored
The cipher definitions of these ciphersuites have been around since SSLeay but were always disabled. Now OpenSSL supports DH certificates they can be finally enabled. Various additional changes were needed to make them work properly: many unused fixed DH sections of code were untested.
-
- 05 Jan, 2012 1 commit
-
-
Bodo Möller authored
(While the 1.0.0f CHANGES entry on VOS PRNG seeding was missing in HEAD, the actual code is here already.)
-
- 04 Jan, 2012 6 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Reviewed by: steve Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and Kenny Paterson.
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 31 Dec, 2011 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Support for TLS/DTLS heartbeats.
-
- 19 Dec, 2011 3 commits
-
-
Dr. Stephen Henson authored
Submitted by: Paul Green <Paul.Green@stratus.com> Reviewed by: steve Improved PRNG seeding for VOS.
-
Andy Polyakov authored
-
Dr. Stephen Henson authored
-
- 13 Dec, 2011 2 commits
-
-
Ben Laurie authored
-
Ben Laurie authored
-
- 10 Dec, 2011 1 commit
-
-
Dr. Stephen Henson authored
-
- 07 Dec, 2011 2 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
RFC5114 parameters and X9.42 DH public and private keys.
-
- 02 Dec, 2011 4 commits
-
-
Bodo Möller authored
methods isn't presorted, it will be sorted on first read). Submitted by: Adam Langley
-
Bodo Möller authored
Submitted by: Emilia Kasper
-
Bodo Möller authored
-
Bodo Möller authored
Submitted by: Adam Langley Reviewed by: Bodo Moeller
-
- 15 Nov, 2011 2 commits
-
-
Ben Laurie authored
-
Ben Laurie authored
-
- 13 Nov, 2011 1 commit
-
-
Dr. Stephen Henson authored
-
- 06 Nov, 2011 1 commit
-
-
Dr. Stephen Henson authored
an induced error checking function.
-
- 05 Nov, 2011 1 commit
-
-
Dr. Stephen Henson authored
-
- 02 Nov, 2011 1 commit
-
-
Dr. Stephen Henson authored
-
- 19 Oct, 2011 3 commits
-
-
Dr. Stephen Henson authored
-
Bodo Möller authored
Submitted by: Emilia Kasper (Google)
-
Bodo Möller authored
Also, use the common Configure mechanism for enabling/disabling the 64-bit ECC code.
-
- 18 Oct, 2011 1 commit
-
-
Bodo Möller authored
NIST-P521. (Now -DEC_NISTP_64_GCC_128 enables all three of these; -DEC_NISTP224_64_GCC_128 no longer works.) Submitted by: Google Inc.
-