Commits · 4e72220fd659c6ccf93945a40864f4499357bf0e · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Dec 14, 2012
- Documentation improvements by Chris Palmer (Google). · 4e72220f
  Ben Laurie authored Dec 14, 2012
  
  4e72220f
- Backport OCSP fixes. · d65b8b21
  Ben Laurie authored Dec 14, 2012
  
  d65b8b21
Dec 13, 2012
- Document -pubkey option. · 5dca1e33
  Ben Laurie authored Dec 13, 2012
  
  5dca1e33
- Make verify return errors. · 5f4cf088
  Ben Laurie authored Dec 13, 2012
  
  5f4cf088
- Ignore more. · 2a2e5379
  Ben Laurie authored Dec 13, 2012
  
  2a2e5379
Dec 12, 2012
- Add my 64-bit debug target. · d79fc8da
  Ben Laurie authored Dec 12, 2012
  
  d79fc8da
Dec 06, 2012
- Fix two bugs which affect delta CRL handling: · e04ccbc5
  Dr. Stephen Henson authored Dec 06, 2012
```
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
```
  e04ccbc5
Dec 05, 2012
- aes-s390x.pl: fix XTS bugs in z196-specific code path [from HEAD]. · bc946bfb
  Andy Polyakov authored Dec 05, 2012
  
  bc946bfb
Dec 04, 2012
- check mval for NULL too · 38680fa4
  Dr. Stephen Henson authored Dec 04, 2012
  
  38680fa4
Dec 03, 2012
- fix leak · a902b6bd
  Dr. Stephen Henson authored Dec 03, 2012
  
  a902b6bd
Dec 01, 2012
- aes-s390x.pl: harmonize software-only path [from HEAD]. · c5e91a9a
  Andy Polyakov authored Dec 01, 2012
  
  c5e91a9a
Nov 29, 2012

PR: 2803 · b5f57f45

Dr. Stephen Henson authored Nov 29, 2012

Submitted by: jean-etienne.schwartz@bull.net

In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.

b5f57f45

Nov 28, 2012
- Intel compiler support update from HEAD. · ad00a52f
  Andy Polyakov authored Nov 28, 2012
  
  ad00a52f
Nov 26, 2012
- change inaccurate error message · e08c7f15
  Dr. Stephen Henson authored Nov 26, 2012
  
  e08c7f15
Nov 22, 2012
- reject zero length point format list or supported curves extensions · 7469af44
  Dr. Stephen Henson authored Nov 22, 2012
  
  7469af44
Nov 21, 2012

PR: 2908 · ec76d850

Dr. Stephen Henson authored Nov 21, 2012

Submitted by: Dmitry Belyavsky <beldmit@gmail.com>

Fix DH double free if parameter generation fails.

ec76d850

Nov 20, 2012
- fix leaks · cedf19f3
  Dr. Stephen Henson authored Nov 20, 2012
  
  cedf19f3
Nov 19, 2012
- correct docs · 1d5f3f46
  Dr. Stephen Henson authored Nov 19, 2012
  
  1d5f3f46
- x86_64-gcc.c: resore early clobber constraint [from HEAD]. · a060fc3b
  Andy Polyakov authored Nov 19, 2012
```
Submitted by: Florian Weimer
```
  a060fc3b
Nov 18, 2012

PR: 2880 · bda51537

Dr. Stephen Henson authored Nov 18, 2012

Submitted by: "Florian RÃ¼chel" <florian.ruechel@ruhr-uni-bochum.de>

Correctly handle local machine keys in the capi ENGINE.

bda51537

Nov 15, 2012
- add "missing" TLSv1.2 cipher alias · 6f539399
  Dr. Stephen Henson authored Nov 15, 2012
  
  6f539399
Nov 12, 2012
- [vp]aes-x86[_64].pl: update from HEAD. · d90bf2ab
  Andy Polyakov authored Nov 12, 2012
  
  d90bf2ab
Oct 29, 2012
- Cumulative updates from HEAD. · 02620cfc
  Andy Polyakov authored Oct 29, 2012
  
  02620cfc
Oct 22, 2012
- use correct year automatically · 74daafaa
  Dr. Stephen Henson authored Oct 22, 2012
  
  74daafaa
Oct 21, 2012
- linux-ppc: make it more robust [from HEAD]. · aa963813
  Andy Polyakov authored Oct 21, 2012
  
  aa963813
Oct 16, 2012
- Don't require tag before ciphertext in AESGCM mode · 9a6aff50
  Dr. Stephen Henson authored Oct 16, 2012
  
  9a6aff50
- aix[64]-cc: get MT support right [from HEAD]. · c7d16ac8
  Andy Polyakov authored Oct 16, 2012
```
PR: 2896
```
  c7d16ac8
Oct 05, 2012
- Fix EC_KEY initialization race. · b626f039
  Bodo Möller authored Oct 05, 2012
```
Submitted by: Adam Langley
```
  b626f039
Sep 26, 2012
- add -trusted_first option and verify flag (backport from HEAD) · 9d2006d8
  Dr. Stephen Henson authored Sep 26, 2012
  
  9d2006d8
Sep 24, 2012
- Fix Valgrind warning. · abf1e32f
  Bodo Möller authored Sep 24, 2012
```
Submitted by: Adam Langley
```
  abf1e32f
- * Configure: make the debug-levitte-linux{elf,noasm} less extreme. · fc1e09bf
  Richard Levitte authored Sep 24, 2012
  
  fc1e09bf
Sep 21, 2012
- * ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in · 451cec33
  Richard Levitte authored Sep 21, 2012
```
  debugging code that's seldom used.
```
  451cec33
Sep 19, 2012
- Configure: allow for compiler options starting with double dash [from HEAD]. · 16c92916
  Andy Polyakov authored Sep 19, 2012
  
  16c92916
- MIPS assembly pack: jumbo update from HEAD. · 988037fe
  Andy Polyakov authored Sep 19, 2012
  
  988037fe
Sep 17, 2012
- Fix warning. · 9a7f80c8
  Bodo Möller authored Sep 17, 2012
```
Submitted by: Chromium Authors
```
  9a7f80c8
Sep 15, 2012
- e_aes.c: uninitialized variable in aes_ccm_init_key [from HEAD]. · 507e5c3a
  Andy Polyakov authored Sep 15, 2012
```
PR: 2874
Submitted by: Tomas Mraz
```
  507e5c3a
Sep 11, 2012
- fix memory leak · f8b90b5a
  Dr. Stephen Henson authored Sep 11, 2012
  
  f8b90b5a
- Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificate · dc144417
  Dr. Stephen Henson authored Sep 11, 2012
```
change the current certificate (in s->cert->key) to the one used and then
SSL_get_certificate and SSL_get_privatekey will automatically work.
```
  dc144417
- Call OCSP Stapling callback after ciphersuite has been chosen, so the · da8512aa
  Ben Laurie authored Sep 11, 2012
```
right response is stapled. Also change SSL_get_certificate() so it
returns the certificate actually sent.  See
http://rt.openssl.org/Ticket/Display.html?id=2836.
```
  da8512aa
Sep 01, 2012
- bn_lcl.h: gcc removed support for "h" constraint, which broke inline · d46a1a61
  Andy Polyakov authored Sep 01, 2012
```
assembler [from HEAD].
```
  d46a1a61