- Aug 15, 2016
-
-
Matt Caswell authored
Feedback on the previous SSLv2 ClientHello processing fix was that it breaks layering by reading init_num in the record layer. It also does not detect if there was a previous non-fatal warning. This is an alternative approach that directly tracks in the record layer whether this is the first record. GitHub Issue #1298 Reviewed-by:Tim Hudson <tjh@openssl.org>
-
Rob Percival authored
Reviewed-by:
Emilia Käsper <emilia@openssl.org> Reviewed-by:
Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1408)
-
Rob Percival authored
They may fail if they cannot increment the reference count of the certificate they are storing a pointer for. They should return 0 if this occurs. Reviewed-by:
-
Rob Percival authored
Changes them to have clearer ownership semantics, as suggested in https://github.com/openssl/openssl/pull/1372#discussion_r73232196 . Reviewed-by:
-
Richard Levitte authored
Reviewed-by: -
Dr. Stephen Henson authored
Fix no-ec builds by having separate functions to create keys based on an existing EVP_PKEY and a curve id. Reviewed-by:
-
- Aug 14, 2016
-
-
Jakub Zelenka authored
Reviewed-by:
-
- Aug 13, 2016
-
-
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
When handling ECDH check to see if the curve is "custom" (X25519 is currently the only curve of this type) and instead of setting a curve NID just allocate a key of appropriate type. Reviewed-by: -
Dr. Stephen Henson authored
Add encoded point ctrl support for other curves: this makes it possible to handle X25519 and other EC curve point encoding in a similar way for TLS. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Add ctrl operations to set or retrieve encoded point in EVP_PKEY structures containing X25519 keys. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Add X25519 methods to match current key format defined in draft-ietf-curdle-pkix-02 Reviewed-by: -
Dr. Stephen Henson authored
Since "ptr" is used to handle arbitrary other types it should be void *. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by:
-
- Aug 12, 2016
-
-
Rich Salz authored
Reviewed-by:
Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1451)
-
Rich Salz authored
Thanks to Brian Carpter for reporting this. Reviewed-by:Dr. Stephen Henson <steve@openssl.org>
-
Dr. Stephen Henson authored
RT#4590 Reviewed-by: -
Andy Polyakov authored
Reviewed-by:
-
- Aug 11, 2016
-
-
Andy Polyakov authored
Originally new-line was suppressed, because double new-line was observed under wine. But it appears rather to be a wine bug, because on real Windows new-line is much needed. Reviewed-by:Richard Levitte <levitte@openssl.org>
-
Andy Polyakov authored
Problem was introduced in 299ccadc as future extension, i.e. at this point it wasn't an actual problem, because uninitialized capability bit was not actually used. Reviewed-by:
-
Andy Polyakov authored
RT#4530 Reviewed-by: -
FdaSilvaYY authored
Reviewed-by:
-
- Aug 10, 2016
-
-
Emilia Kasper authored
In practice, CT isn't really functional without EC anyway, as most logs use EC keys. So, skip loading the log list with no-ec, and skip CT tests completely in that conf. Reviewed-by: -
jamercee authored
Reviewed-by:
-
JimC authored
Reviewed-by:
-
jamercee authored
Commit 417be660 broken BIO_new_accept() by changing the definition of the macro BIO_set_accept_port() which stopped acpt_ctrl() from calling BIO_parse_hostserv(). This commit completes the series of changes initiated in 417be660. Updated pods to reflect new definition introduced by 417be660 . Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Rich Salz authored
Binary- and backward-compatible. Just better. Reviewed-by:
-
Kurt Roeckx authored
Reviewed-by:
Kurt Roeckx <kurt@openssl.org> Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Emilia Kasper authored
Reviewed-by:
-
