Commits · 50c30153d3fe887d0f6c8c0514bc825c4f3dec6a · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Aug 26, 2016
- Add basic test for Cisco DTLS1_BAD_VER and record replay handling · 50c30153
  David Woodhouse authored Aug 03, 2016
  50c30153
- Fix ubsan 'left shift of negative value -1' error in satsub64be() · ba30f1a0
  David Woodhouse authored Aug 02, 2016
  ba30f1a0
- Fix SSL_export_keying_material() for DTLS1_BAD_VER · df426c06
  David Woodhouse authored Jul 08, 2016
  df426c06
- Fix the no-tls1 option · 847fe929
  Matt Caswell authored Aug 26, 2016
  847fe929
- ec/asm/ecp_nistz256-x86_64.pl: /cmovb/cmovc/ as nasm doesn't recognize cmovb. · 3953bf53
  Andy Polyakov authored Aug 24, 2016
  3953bf53
- ec/ecp_nistz256: harmonize is_infinity with ec_GFp_simple_is_at_infinity. · 09f05356
  Andy Polyakov authored Aug 19, 2016
  09f05356
- ec/asm/ecp_nistz256-x86_64.pl: addition to perform stricter reduction. · e76cf5c0
  Andy Polyakov authored Aug 20, 2016
  e76cf5c0
- Always use session_ctx when removing a session · 1f61e8f0
  Todd Short authored May 26, 2016
  1f61e8f0
Aug 24, 2016
- Avoid overflow in MDC2_Update() · 1027ad4f
  Dr. Stephen Henson authored Aug 19, 2016
  1027ad4f
- SWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUM · 0fff5065
  Rich Salz authored Aug 18, 2016
  0fff5065
- Fix no-ec · 0ec01043
  Matt Caswell authored Aug 24, 2016
  0ec01043
Aug 23, 2016
- Sanity check ticket length. · baaabfd8
  Dr. Stephen Henson authored Aug 23, 2016
  baaabfd8
Aug 22, 2016
- mk1mf: dtlstest needs ssltestlib, include it with a hack · 3cb28d18
  Richard Levitte authored Aug 19, 2016
  3cb28d18
- Don't check for malloc failure twice. · 01f879d3
  David Benjamin authored Aug 20, 2016
  01f879d3
- Fix overflow check in BN_bn2dec() · 67e11f1d
  Kazuki Yamaguchi authored Aug 22, 2016
  67e11f1d
- RT2676: Reject RSA eponent if even or 1 · 561530da
  Rich Salz authored Aug 22, 2016
  561530da
- VMS: Use strict refdef extern model when building library object files · 51690fb8
  Richard Levitte authored Aug 22, 2016
  51690fb8
- GOST: rearrange code so it's more like C rather than C++ · 93c616d6
  Richard Levitte authored Aug 22, 2016
  93c616d6
- Make 'openssl req -x509' more equivalent to 'openssl req -new' · fd7ca746
  Richard Levitte authored Aug 22, 2016
  fd7ca746
- bn/asm/x86[_64]-mont*.pl: implement slightly alternative page-walking. · 9c8bca1c
  Andy Polyakov authored Mar 16, 2016
  9c8bca1c
- ssltestlib: Tell compiler we don't care about the value when we don't · 91dc6054
  Richard Levitte authored Aug 22, 2016
  91dc6054
- Prevent DTLS Finished message injection · 20200681
  Matt Caswell authored Jun 30, 2016
  20200681
- Fix DTLS buffered message DoS attack · 26f2c577
  Matt Caswell authored Jun 30, 2016
  26f2c577
- Silence some "maybe used uninitialised" warnings · 0ee4f13b
  Matt Caswell authored Aug 22, 2016
  0ee4f13b
Aug 21, 2016
- ec/ecp_nistz256.c: get is_one on 32-bit platforms right. · eca5174b
  Andy Polyakov authored Aug 18, 2016
  eca5174b
- Fix pointer/alloc prob from previous commit · bc894569
  Rich Salz authored Aug 21, 2016
  bc894569
- Fix incorrect return argument. · 71da19b0
  Rich Salz authored Aug 21, 2016
  71da19b0
Aug 20, 2016
- Fix off by 1 in ASN1_STRING_set() · 061d6c25
  Kurt Roeckx authored Aug 06, 2016
  061d6c25
Aug 19, 2016
- RT3940: For now, just document the issue. · ff5537c2
  Rich Salz authored Aug 13, 2016
  ff5537c2
- Fix NULL-return checks in 1.0.2 · a03f81f4
  Rich Salz authored Aug 19, 2016
  a03f81f4
- Have dtlstest run on VMS as well · 66e70832
  Richard Levitte authored Aug 19, 2016
  66e70832
- Update function error code · 26aebca7
  Matt Caswell authored Aug 17, 2016
  26aebca7
- Fix DTLS replay protection · 3884b47b
  Matt Caswell authored Jul 05, 2016
  3884b47b
- Add DTLS replay protection test · 30ea36e6
  Matt Caswell authored Jul 05, 2016
  30ea36e6
- Fix DTLS unprocessed records bug · 20744f6b
  Matt Caswell authored Jul 05, 2016
  20744f6b
- Add a DTLS unprocesed records test · bc4d7e12
  Matt Caswell authored Jul 05, 2016
  bc4d7e12
- Back port ssltestlib code to 1.0.2 · 48e8df6e
  Matt Caswell authored Jul 05, 2016
  48e8df6e
- VSI submission: RAND fixups · 7b415b0e
  Richard Levitte authored Aug 03, 2016
  7b415b0e
- VSI submission: make better use of item lists in o_time.c · 23ffde2e
  Richard Levitte authored Aug 03, 2016
  23ffde2e
- VSI submission: avoid pointer size warnings in mem.c · 556c4b51
  Richard Levitte authored Aug 03, 2016
  556c4b51