- 01 Nov, 2013 4 commits
-
-
Piotr Sikora authored
Don't require a public key in tls1_set_ec_id if compression status is not needed. This fixes a bug where SSL_OP_SINGLE_ECDH_USE wouldn't work. (cherry picked from commit 5ff68e8f6dac3b0d8997b8bc379f9111c2bab74f)
-
Dr. Stephen Henson authored
Add -ecdh_single option to set SSL_OP_SINGLE_ECDH_USE on the command line. (cherry picked from commit f14a4a861d2d221ed565a75441a218f85b8db530)
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 31 Oct, 2013 5 commits
-
-
Andy Polyakov authored
Submitted by: Marcelo Cerri
-
Andy Polyakov authored
-
Andy Polyakov authored
Submitted by: Marcelo Cerri
-
Andy Polyakov authored
sha/asm/sha512-ppc.pl: add little-endian support. Submitted by: Marcelo Cerri
-
Andy Polyakov authored
Submitted by: Marcelo Cerri
-
- 28 Oct, 2013 1 commit
-
-
Andy Polyakov authored
-
- 25 Oct, 2013 1 commit
-
-
Andy Polyakov authored
-
- 22 Oct, 2013 5 commits
-
-
Lubomir Rintel authored
This fixes problems in POD list formatting: extra or missing =back sequences. doc/ssl/SSL_CTX_set1_curves.pod around line 90: =back without =over doc/ssl/SSL_CTX_set1_verify_cert_store.pod around line 73: =back without =over doc/ssl/SSL_CTX_add1_chain_cert.pod around line 82: =back without =over doc/crypto/evp.pod around line 40: '=item' outside of any '=over' crypto/des/des.pod around line 184: You forgot a '=back' before '=head1' PR#3147
-
Lubomir Rintel authored
Newer pod2man considers =item [1-9] part of a numbered list, while =item 0 starts an unnumbered list. Add a zero effect formatting mark to override this. doc/apps/smime.pod around line 315: Expected text after =item, not a number ... PR#3146
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 21 Oct, 2013 5 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Ben Laurie authored
-
Nick Mathewson authored
-
Nick Mathewson authored
Instead, send random bytes, unless SSL_SEND_{CLIENT,SERVER}RANDOM_MODE is set. This is a forward-port of commits: 4af793036f6ef4f0a1078e5d7155426a98d50e37 f4c93b46edb51da71f09eda99e83eaf193a33c08 3da721dac9382c48812c8eba455528fd59af2eef 2583270191a8b27eed303c03ece1da97b9b69fd3 While the gmt_unix_time record was added in an ostensible attempt to mitigate the dangers of a bad RNG, its presence leaks the host's view of the current time in the clear. This minor leak can help fingerprint TLS instances across networks and protocols... and what's worse, it's doubtful thet the gmt_unix_time record does any good at all for its intended purpose, since: * It's quite possible to open two TLS connections in one second. * If the PRNG output is prone to repeat itself, ephemeral handshakes (and who knows what else besides) are broken.
-
- 20 Oct, 2013 9 commits
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Steve Marquess authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Extend SSL_CONF to return command value types. Add certificate and key options. Update documentation.
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
The function gettimeofday() is not supported on all platforms. Use more portable versions. Adapted from FIPS code.
-
Dr. Stephen Henson authored
Removing RSA+MD5 from the default signature algorithm list prevents its use by default. If a broken implementation attempts to use RSA+MD5 anyway the sanity checking of signature algorithms will cause a fatal alert.
-
Ben Laurie authored
-
- 15 Oct, 2013 6 commits
-
-
Andy Polyakov authored
Suggested by: Anton Blanchard
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- 14 Oct, 2013 2 commits
-
-
Andy Polyakov authored
-
Andy Polyakov authored
-
- 13 Oct, 2013 2 commits
-
-
Andy Polyakov authored
-
Andy Polyakov authored
Latest MIPS ISA specification declared 'branch likely' instructions obsolete. To makes code future-proof replace them with equivalent.
-