Skip to content
  1. Aug 29, 2008
  2. Aug 27, 2008
  3. Aug 20, 2008
  4. Aug 13, 2008
  5. Aug 12, 2008
  6. Aug 08, 2008
  7. Aug 06, 2008
    • Geoff Thorpe's avatar
      Remove the dual-callback scheme for numeric and pointer thread IDs, · 4c329696
      Geoff Thorpe authored
      deprecate the original (numeric-only) scheme, and replace with the
      CRYPTO_THREADID object. This hides the platform-specifics and should reduce
      the possibility for programming errors (where failing to explicitly check
      both thread ID forms could create subtle, platform-specific bugs).
      
      Thanks to Bodo, for invaluable review and feedback.
      4c329696
  8. Jul 30, 2008
  9. Jul 03, 2008
  10. Jun 26, 2008
  11. Jun 23, 2008
  12. Jun 09, 2008
  13. Jun 05, 2008
  14. Jun 04, 2008
  15. Jun 03, 2008
  16. Jun 01, 2008
  17. May 28, 2008
    • Bodo Möller's avatar
      sync with 0.9.8 branch · 2cd81830
      Bodo Möller authored
      2cd81830
    • Bodo Möller's avatar
      From HEAD: · e194fe8f
      Bodo Möller authored
      Fix flaw if 'Server Key exchange message' is omitted from a TLS
      handshake which could lead to a cilent crash as found using the
      Codenomicon TLS test suite (CVE-2008-1672)
      
      Reviewed by: openssl-security@openssl.org
      
      Obtained from: mark@awe.com
      e194fe8f
    • Bodo Möller's avatar
      From HEAD: · 40a70628
      Bodo Möller authored
      Fix double-free in TLS server name extensions which could lead to a remote
      crash found by Codenomicon TLS test suite (CVE-2008-0891)
      
      Reviewed by: openssl-security@openssl.org
      
      Obtained from: jorton@redhat.com
      40a70628
  18. May 26, 2008
  19. May 23, 2008
  20. May 20, 2008
  21. May 19, 2008
  22. Apr 30, 2008
  23. Apr 28, 2008
  24. Apr 27, 2008
  25. Apr 02, 2008
  26. Mar 28, 2008
    • Dr. Stephen Henson's avatar
      eb9d8d8c
    • Geoff Thorpe's avatar
      There was a need to support thread ID types that couldn't be reliably cast · f7ccba3e
      Geoff Thorpe authored
      to 'unsigned long' (ie. odd platforms/compilers), so a pointer-typed
      version was added but it required portable code to check *both* modes to
      determine equality. This commit maintains the availability of both thread
      ID types, but deprecates the type-specific accessor APIs that invoke the
      callbacks - instead a single type-independent API is used.  This simplifies
      software that calls into this interface, and should also make it less
      error-prone - as forgetting to call and compare *both* thread ID accessors
      could have led to hard-to-debug/infrequent bugs (that might only affect
      certain platforms or thread implementations). As the CHANGES note says,
      there were corresponding deprecations and replacements in the
      thread-related functions for BN_BLINDING and ERR too.
      f7ccba3e
  27. Mar 15, 2008
  28. Mar 12, 2008
    • Dr. Stephen Henson's avatar
      And so it begins... · 8931b30d
      Dr. Stephen Henson authored
      Initial support for CMS.
      
      Add zlib compression BIO.
      
      Add AES key wrap implementation.
      
      Generalize S/MIME MIME code to support CMS and/or PKCS7.
      8931b30d
  29. Feb 27, 2008
  30. Jan 06, 2008
  31. Jan 03, 2008