Commits · 20fda79fab874d061291975f2a23dc899b8d0ded · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Mar 20, 2003
- PR:make sure RSA blinding works when the PRNG is not properly seeded; · 20fda79f
  Bodo Möller authored Mar 20, 2003
```
enable it automatically only for the built-in engine
```
  20fda79f
- Blinding fix. · 66e1081a
  Ben Laurie authored Mar 20, 2003
  
  66e1081a
Mar 19, 2003
- countermeasure against new Klima-Pokorny-Rosa atack · ef42d6a4
  Bodo Möller authored Mar 19, 2003
  
  ef42d6a4
Mar 18, 2003
- fix formatting · 00223b96
  Bodo Möller authored Mar 18, 2003
  
  00223b96
Feb 24, 2003
- year 2003 · 3d1120f6
  Bodo Möller authored Feb 24, 2003
  
  3d1120f6
Feb 19, 2003
- Release of 0.9.6i is tagged, let's pretend to move on to 0.9.6j. · fc68e4a0
  Richard Levitte authored Feb 19, 2003
  
  fc68e4a0
- Time to release 0.9.6i. · 84c1d096
  Richard Levitte authored Feb 19, 2003
```
The tag will be OpenSSL_0_9_6i.
```
  OpenSSL_0_9_6i
  
  84c1d096
- Security fix: Vaudenay timing attack on CBC. · 39c06a8b
  Richard Levitte authored Feb 19, 2003
```
An advisory will be posted to the web.  Expect a release within the hour.
```
  39c06a8b
- Make sure the memory allocation routines check for negative sizes · c0a48f4c
  Richard Levitte authored Feb 19, 2003
  
  c0a48f4c
Feb 14, 2003
- Change no_rmd160 to no_ripemd for consistency. · 1254766d
  Richard Levitte authored Feb 14, 2003
```
PR: 500
```
  1254766d
Feb 12, 2003
- comments · b73de733
  Bodo Möller authored Feb 12, 2003
  
  b73de733
Feb 05, 2003
- typo in WIN16 section · a71f9eeb
  Bodo Möller authored Feb 05, 2003
```
Submitted by: Toni Andjelkovic <toni@soth.at>
```
  a71f9eeb
Feb 04, 2003
- typo · d76434fe
  Bodo Möller authored Feb 04, 2003
  
  d76434fe
- Update PRNG entry: · ac3b89d8
  Bodo Möller authored Feb 04, 2003
```
- OpenSSL version differences
- Sun /dev/urandom patch information
```
  ac3b89d8
Jan 14, 2003
- Correct an example that has a few typos. · e5919944
  Richard Levitte authored Jan 14, 2003
```
PR: 458
```
  e5919944
Jan 13, 2003
- fix release date (CHANGES as released with OpenSSL 0.9.6h on · 90f6da7b
  Bodo Möller authored Jan 13, 2003
```
2002-12-05 said '[21 Dec 2002]')
```
  90f6da7b
- typo · ad487598
  Bodo Möller authored Jan 13, 2003
  
  ad487598
Dec 28, 2002
- A function returning int should really return an int, even if it exits · b2359d51
  Richard Levitte authored Dec 28, 2002
```
first...
```
  b2359d51
- Make sure OPENSSL_cleanse is declared properly. · 84d964a5
  Richard Levitte authored Dec 28, 2002
  
  84d964a5
Dec 21, 2002
- Merge from HEAD... · 6c8aa1ec
  Richard Levitte authored Dec 21, 2002
  
  6c8aa1ec
Dec 12, 2002
- Skip DH-specific tests when no-dh has been configured. · 6d62e85d
  Richard Levitte authored Dec 12, 2002
```
PR: 353
```
  6d62e85d
Dec 11, 2002

In CRYPTO_lock(), check that the application cares about locking (provided · a01461da
Richard Levitte authored Dec 11, 2002
```
callbacks) before attempting to lock.
```
a01461da

sk_*_push() returns the number of items on the stack, not the index of the · 9576c150

Richard Levitte authored Dec 11, 2002

pushed item. The index is the number of items - 1. And if a NULL item was
found, actually use it.
Finally, provide a little bit of safety in CRYPTO_lock() by asserting the a
requested dynamic lock really must exist, instead of just being silent about it

9576c150

Dec 10, 2002
- A memset() too many got converted into a OPENSSL_cleanse(). · 56f940ed
  Richard Levitte authored Dec 10, 2002
```
PR: 393
```
  56f940ed
Dec 09, 2002
- Fix wrong URI. · aa61140a
  Lutz Jänicke authored Dec 09, 2002
```
Submitted by: assar@kth.se
Reviewed by:
PR: 390
```
  aa61140a
Dec 05, 2002
- Update version to 0.9.6i, even if that's never going to be released. · 8ca0db58
  Richard Levitte authored Dec 05, 2002
  
  8ca0db58
- Small fault corrected · 631cdb9f
  Richard Levitte authored Dec 05, 2002
  
  OpenSSL_0_9_6h
  
  631cdb9f
- make update · e98b0d68
  Richard Levitte authored Dec 05, 2002
  
  e98b0d68
- Time to release OpenSSL 0.9.6h. · f94e1dd2
  Richard Levitte authored Dec 05, 2002
```
The tag will be OpenSSL_0_9_6h.
```
  f94e1dd2
- Make sure using SSL_CERT_FILE actually works, and has priority over system defaults. · 3124dd9c
  Richard Levitte authored Dec 05, 2002
```
PR: 376
```
  3124dd9c
Dec 04, 2002
- Fixes for VxWorks. Are these needed for 0.9.7 and up as well? · e5040378
  Richard Levitte authored Dec 04, 2002
```
PR: 374
```
  e5040378
- Include crypto.h to pull in definition of OPENSSL_cleanse in various · 0b749731
  Dr. Stephen Henson authored Dec 04, 2002
```
places.
```
  0b749731
- Missing ")" · 98c3eccc
  Lutz Jänicke authored Dec 04, 2002
```
Submitted by: Christian Hohnstaedt <chohnstaedt@innominate.com>
Reviewed by:
PR:
```
  98c3eccc
- A gcc 3.0 bug is triggered by our code. Add a section about it in PROBLEMS. · 7000fd84
  Richard Levitte authored Dec 04, 2002
```
PR: 375
```
  7000fd84
Dec 03, 2002
- EXIT() may mean return(). That's confusing, so let's have it really mean · 811cd997
  Richard Levitte authored Dec 03, 2002
```
exit() in whatever way works for the intended platform, and define
OPENSSL_EXIT() to have the old meaning (the name is of course because
it's only used in the openssl program)
```
  811cd997
- Make CRYPTO_cleanse() independent of endianness. · 29a0f955
  Richard Levitte authored Dec 03, 2002
  
  29a0f955
Dec 01, 2002
- EXIT() needs to be in a function that returns int. · 5a6a8963
  Richard Levitte authored Dec 01, 2002
  
  5a6a8963
Nov 29, 2002
- Correct some names. · b7608800
  Richard Levitte authored Nov 29, 2002
  
  b7608800
- A few more memset()s converted to OPENSSL_cleanse(). · 6bad9d05
  Richard Levitte authored Nov 29, 2002
```
I *think* I got them all covered by now, bu please, if you find any more,
tell me and I'll correct it.
PR: 343
```
  6bad9d05
Nov 28, 2002
- Have all tests use EXIT() to exit rather than exit(), since the latter doesn't · dd546333
  Richard Levitte authored Nov 28, 2002
```
always give the expected result on some platforms.
```
  dd546333