- Jan 03, 2014
-
-
Andy Polyakov authored
but keep it disabled, too little gain... Add some Atom-specific optimization.
-
- Jan 02, 2014
-
-
Dr. Stephen Henson authored
When sending an invalid version number alert don't change the version number to the client version if a session is already established. Thanks to Marek Majkowski for additional analysis of this issue. PR#3191
-
- Dec 29, 2013
-
-
Dr. Stephen Henson authored
(cherry picked from commit cfa86987a8d9d2b8cc5e5fea2d3260c46542cdb9)
-
- Dec 28, 2013
-
-
Andy Polyakov authored
PR: 3202
-
Andy Polyakov authored
-
Andy Polyakov authored
-
- Dec 22, 2013
-
-
Dr. Stephen Henson authored
If content is detached and not binary mode translate the input to CRLF format. Before this change the input was verified verbatim which lead to a discrepancy between sign and verify.
-
- Dec 20, 2013
-
-
Dr. Stephen Henson authored
For DTLS we might need to retransmit messages from the previous session so keep a copy of write context in DTLS retransmission buffers instead of replacing it after sending CCS. CVE-2013-6450. (cherry picked from commit 34628967)
-
Dr. Stephen Henson authored
(cherry picked from commit a6c62f0c25a756c263a80ce52afbae888028e986)
-
- Dec 18, 2013
-
-
Andy Polyakov authored
(and ensure stack alignment in the process)
-
Andy Polyakov authored
It worked because it was never called.
-
Andy Polyakov authored
-
Andy Polyakov authored
SHA512_Transform was initially added rather as tribute to tradition than for practucal reasons. But use was recently found in ssl/s3_cbc.c and it turned to be problematic on platforms that don't tolerate misasligned references to memory and lack assembly subroutine.
-
Andy Polyakov authored
-
Dr. Stephen Henson authored
Partial mitigation of PR#3200 (cherry picked from commit 0294b2be)
-
Dr. Stephen Henson authored
-
- Dec 13, 2013
-
-
Dr. Stephen Henson authored
Move the IP, email and host checking fields from the public X509_VERIFY_PARAM structure into an opaque X509_VERIFY_PARAM_ID structure. By doing this the structure can be modified in future without risk of breaking any applications. (cherry picked from commit adc6bd73) Conflicts: crypto/x509/x509_vpm.c
-
Dr. Stephen Henson authored
Fix padding calculation for different SSL_METHOD types. Use the standard name as used in draft-agl-tls-padding-02
-
Dr. Stephen Henson authored
For consistency with other cases if we are performing partial chain verification with just one certificate notify the callback with ok==1. (cherry picked from commit 852553d9005e13aed7feb986a5d71cb885b994c7)
-
Dr. Stephen Henson authored
New functions to retrieve internal pointers to X509_VERIFY_PARAM for SSL_CTX and SSL structures. (cherry picked from commit be0c9270690ed9c1799900643cab91de146de857)
-
Dr. Stephen Henson authored
(cherry picked from commit 16898401bd47a153fbf799127ff57fdcfcbd324f)
-
- Dec 10, 2013
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
- Dec 09, 2013
-
-
Andy Polyakov authored
-
Andy Polyakov authored
This also eliminates code duplication between x86_64-mont and x86_64-mont and optimizes even original non-MULX code.
-
- Dec 04, 2013
-
-
Andy Polyakov authored
-
Andy Polyakov authored
Suggested by: Marcello Cerri
-
Andy Polyakov authored
Suggested by: Marcello Cerri
-
Andy Polyakov authored
-
Andy Polyakov authored
AIX assembler doesn't hanle .align, which is essential for vpaes module.
-
- Dec 03, 2013
-
-
Andy Polyakov authored
PR: 3189 Submitted by: Oscar Ciurana
-
Andy Polyakov authored
-
Andy Polyakov authored
rsaz_exp.c: harmonize line terminating; asm/rsaz-*.pl: minor optimizations.
-
Andy Polyakov authored
-
- Nov 30, 2013
-
-
Dr. Stephen Henson authored
-
- Nov 29, 2013
-
-
Andy Polyakov authored
-
- Nov 27, 2013
-
-
Andy Polyakov authored
-
Andy Polyakov authored
-
Andy Polyakov authored
-
- Nov 18, 2013
-
-
Dr. Stephen Henson authored
New functions to retrieve current certificate or private key from an SSL_CTX. Constify SSL_get_private_key().
-