Commits · 27dfffd5b75ee1db114e32f6dc73e266513889c5 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Jan 04, 2012
- Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) · 27dfffd5
  Dr. Stephen Henson authored Jan 04, 2012
  
  27dfffd5
- fix CHANGES · 2ec0497f
  Dr. Stephen Henson authored Jan 04, 2012
  
  2ec0497f
- Check GOST parameters are not NULL (CVE-2012-0027) · 6bf896d9
  Dr. Stephen Henson authored Jan 04, 2012
  
  6bf896d9
- Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577) · be71c372
  Dr. Stephen Henson authored Jan 04, 2012
  
  be71c372
Dec 31, 2011
- update CHANGES · 0b9f5ef8
  Dr. Stephen Henson authored Dec 31, 2011
  
  0b9f5ef8
- PR: 2658 · 4817504d
  Dr. Stephen Henson authored Dec 31, 2011
```
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Support for TLS/DTLS heartbeats.
```
  4817504d
Dec 19, 2011
- PR: 2563 · ad89bf78
  Dr. Stephen Henson authored Dec 19, 2011
```
Submitted by: Paul Green <Paul.Green@stratus.com>
Reviewed by: steve

Improved PRNG seeding for VOS.
```
  ad89bf78
- update CHANGES. · e75440d2
  Andy Polyakov authored Dec 19, 2011
  
  e75440d2
- update CHANGES · 188c53f7
  Dr. Stephen Henson authored Dec 19, 2011
  
  188c53f7
Dec 13, 2011
- Back out redundant verification time change. · 9a436c0f
  Ben Laurie authored Dec 13, 2011
  
  9a436c0f
- Make it possible to set a time for verification. · 7fd5df6b
  Ben Laurie authored Dec 13, 2011
  
  7fd5df6b
Dec 10, 2011
- update CHANGES · 627b0445
  Dr. Stephen Henson authored Dec 10, 2011
  
  627b0445
Dec 07, 2011
- transparently handle X9.42 DH parameters · 2ca873e8
  Dr. Stephen Henson authored Dec 07, 2011
  
  2ca873e8
- Initial experimental support for X9.42 DH parameter format to handle · afb14cda
  Dr. Stephen Henson authored Dec 07, 2011
```
RFC5114 parameters and X9.42 DH public and private keys.
```
  afb14cda
Dec 02, 2011
- Resolve a stack set-up race condition (if the list of compression · 19b0d0e7
  Bodo Möller authored Dec 02, 2011
```
methods isn't presorted, it will be sorted on first read).

Submitted by: Adam Langley
```
  19b0d0e7
- Fix ecdsatest.c. · ea8c77a5
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Emilia Kasper
```
  ea8c77a5
- Update HEAD CHANGES file. · a7c71d89
  Bodo Möller authored Dec 02, 2011
  
  a7c71d89
- Fix BIO_f_buffer(). · 390c5795
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Adam Langley
Reviewed by: Bodo Moeller
```
  390c5795
Nov 15, 2011
- Add TLS exporter. · e0af0405
  Ben Laurie authored Nov 15, 2011
  
  e0af0405
- Add DTLS-SRTP. · 333f926d
  Ben Laurie authored Nov 15, 2011
  
  333f926d
Nov 13, 2011
- Add RFC5114 DH parameters to OpenSSL. Add test data to dhtest. · 20bee968
  Dr. Stephen Henson authored Nov 13, 2011
  
  20bee968
Nov 06, 2011
- Update fips_test_suite to take multiple command line options and · a98b8ce6
  Dr. Stephen Henson authored Nov 06, 2011
```
an induced error checking function.
```
  a98b8ce6
Nov 05, 2011
- Add single call public key sign and verify functions. · f4324e51
  Dr. Stephen Henson authored Nov 05, 2011
  
  f4324e51
Nov 02, 2011
- Add fips_algvs utility (from FIPS 2.0 stable branch). · 3ec9dceb
  Dr. Stephen Henson authored Nov 02, 2011
  
  3ec9dceb
Oct 19, 2011
- add authentication parameter to FIPS_module_mode_set · 5e4eb995
  Dr. Stephen Henson authored Oct 19, 2011
  
  5e4eb995
- BN_BLINDING multi-threading fix. · e5641d7f
  Bodo Möller authored Oct 19, 2011
```
Submitted by: Emilia Kasper (Google)
```
  e5641d7f
- Fix warnings. · e0d6132b
  Bodo Möller authored Oct 19, 2011
```
Also, use the common Configure mechanism for enabling/disabling the 64-bit ECC code.
```
  e0d6132b
Oct 18, 2011

Improve optional 64-bit NIST-P224 implementation, and add NIST-P256 and · 3e00b4c9

Bodo Möller authored Oct 18, 2011

NIST-P521. (Now -DEC_NISTP_64_GCC_128 enables all three of these;
-DEC_NISTP224_64_GCC_128 no longer works.)

Submitted by: Google Inc.

3e00b4c9

Oct 13, 2011
- typo · 8b37d33a
  Bodo Möller authored Oct 13, 2011
  
  8b37d33a
- In ssl3_clear, preserve s3->init_extra along with s3->rbuf. · 3ddc06f0
  Bodo Möller authored Oct 13, 2011
```
Submitted by: Bob Buckholz <bbuckholz@google.com>
```
  3ddc06f0
Oct 09, 2011
- fix CHANGES entry · ccbb9bad
  Dr. Stephen Henson authored Oct 09, 2011
  
  ccbb9bad
Sep 29, 2011
- Add FIPS selftests for ECDH algorithm. · 2bfeb7dc
  Dr. Stephen Henson authored Sep 29, 2011
  
  2bfeb7dc
Sep 22, 2011
- Use function name FIPS_drbg_health_check() for health check function. · cb71870d
  Dr. Stephen Henson authored Sep 22, 2011
```
Add explanatory comments to health check code.
```
  cb71870d
Sep 21, 2011

Revise DRBG to split between internal and external flags. · 4420b3b1

Dr. Stephen Henson authored Sep 21, 2011

One demand health check function.

Perform generation test in fips_test_suite.

Option to skip dh test if fips_test_suite.

4420b3b1

Sep 14, 2011
- new function to lookup FIPS supported ciphers by NID · 15094852
  Dr. Stephen Henson authored Sep 14, 2011
  
  15094852
Sep 12, 2011
- More extensive DRBG health check. New function to call health check · a11f06b2
  Dr. Stephen Henson authored Sep 12, 2011
```
for all DRBG combinations.
```
  a11f06b2
Sep 09, 2011
- Add support for Dual EC DRBG from SP800-90. Include updates to algorithm · 7fdcb457
  Dr. Stephen Henson authored Sep 09, 2011
```
tests and POST code.
```
  7fdcb457
Sep 06, 2011
- Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the past · 0486cce6
  Dr. Stephen Henson authored Sep 06, 2011
```
produce an error (CVE-2011-3207)
```
  0486cce6
Sep 05, 2011
- Fix session handling. · c519e89f
  Bodo Möller authored Sep 05, 2011
  
  c519e89f
- Fix d2i_SSL_SESSION. · 612fcfbd
  Bodo Möller authored Sep 05, 2011
  
  612fcfbd