Commits · 51c21d0feca69d1aa5398243656fdb06c1505802 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Apr 15, 2003
- Memory leak fix: local blinding structure not freed in rsa_eay_private_decrypt() · 51c21d0f
  Richard Levitte authored Apr 15, 2003
  
  51c21d0f
Apr 10, 2003
- The release is tagged, time to hope we won't have to work on 0.9.6k. · 0698f54e
  Richard Levitte authored Apr 10, 2003
  
  0698f54e
- I forgot to change the status bits to release. · e352a9e6
  Richard Levitte authored Apr 10, 2003
```
This file will be retagged.
```
  OpenSSL_0_9_6j
  
  e352a9e6
- Time to release 0.9.6j. · 51c47546
  Richard Levitte authored Apr 10, 2003
```
The ticket will be OpenSSL_0_9_6j.
```
  51c47546
- make update · 335340af
  Richard Levitte authored Apr 10, 2003
  
  335340af
- Add the change from HEAD that allows us to parse multi-line comments. · d373ca98
  Richard Levitte authored Apr 10, 2003
  
  d373ca98
- new NEWS · 1db625bc
  Richard Levitte authored Apr 10, 2003
  
  1db625bc
Apr 09, 2003

Make the same changes for svr5 shared library building as in · 86d79b3c
Richard Levitte authored Apr 09, 2003
```
0.9.7-stable.
```
86d79b3c

Some ld implementations use LD_LIBRARY_PATH to find libraries, and · e45b2a62

Richard Levitte authored Apr 09, 2003

what's worse, they seem to use LD_LIBRARY_PATH as the first
directories to look into. This is documented in the manual page for
ld on OpenUNIX 8. Therefore, we need to hack LD_LIBRARY_PATH to
include the directory where the newly built libcrypto and libssl are.

e45b2a62

Apr 08, 2003
- Include rand.h, so RAND_status() and friends get properly declared. · 5d4bf96a
  Richard Levitte authored Apr 08, 2003
  
  5d4bf96a
Apr 02, 2003
- make RSA blinding thread-safe · 223c80ea
  Bodo Möller authored Apr 02, 2003
  
  223c80ea
Mar 27, 2003
- Fix the problem with missing definition of THREADS on VMS. · 60511b8b
  Richard Levitte authored Mar 27, 2003
```
Also produce a better configuration header file.
PR: 548
```
  60511b8b
Mar 20, 2003
- PR:make sure RSA blinding works when the PRNG is not properly seeded; · 20fda79f
  Bodo Möller authored Mar 20, 2003
```
enable it automatically only for the built-in engine
```
  20fda79f
- Blinding fix. · 66e1081a
  Ben Laurie authored Mar 20, 2003
  
  66e1081a
Mar 19, 2003
- countermeasure against new Klima-Pokorny-Rosa atack · ef42d6a4
  Bodo Möller authored Mar 19, 2003
  
  ef42d6a4
Mar 18, 2003
- fix formatting · 00223b96
  Bodo Möller authored Mar 18, 2003
  
  00223b96
Feb 24, 2003
- year 2003 · 3d1120f6
  Bodo Möller authored Feb 24, 2003
  
  3d1120f6
Feb 19, 2003
- Release of 0.9.6i is tagged, let's pretend to move on to 0.9.6j. · fc68e4a0
  Richard Levitte authored Feb 19, 2003
  
  fc68e4a0
- Time to release 0.9.6i. · 84c1d096
  Richard Levitte authored Feb 19, 2003
```
The tag will be OpenSSL_0_9_6i.
```
  OpenSSL_0_9_6i
  
  84c1d096
- Security fix: Vaudenay timing attack on CBC. · 39c06a8b
  Richard Levitte authored Feb 19, 2003
```
An advisory will be posted to the web.  Expect a release within the hour.
```
  39c06a8b
- Make sure the memory allocation routines check for negative sizes · c0a48f4c
  Richard Levitte authored Feb 19, 2003
  
  c0a48f4c
Feb 14, 2003
- Change no_rmd160 to no_ripemd for consistency. · 1254766d
  Richard Levitte authored Feb 14, 2003
```
PR: 500
```
  1254766d
Feb 12, 2003
- comments · b73de733
  Bodo Möller authored Feb 12, 2003
  
  b73de733
Feb 05, 2003
- typo in WIN16 section · a71f9eeb
  Bodo Möller authored Feb 05, 2003
```
Submitted by: Toni Andjelkovic <toni@soth.at>
```
  a71f9eeb
Feb 04, 2003
- typo · d76434fe
  Bodo Möller authored Feb 04, 2003
  
  d76434fe
- Update PRNG entry: · ac3b89d8
  Bodo Möller authored Feb 04, 2003
```
- OpenSSL version differences
- Sun /dev/urandom patch information
```
  ac3b89d8
Jan 14, 2003
- Correct an example that has a few typos. · e5919944
  Richard Levitte authored Jan 14, 2003
```
PR: 458
```
  e5919944
Jan 13, 2003
- fix release date (CHANGES as released with OpenSSL 0.9.6h on · 90f6da7b
  Bodo Möller authored Jan 13, 2003
```
2002-12-05 said '[21 Dec 2002]')
```
  90f6da7b
- typo · ad487598
  Bodo Möller authored Jan 13, 2003
  
  ad487598
Dec 28, 2002
- A function returning int should really return an int, even if it exits · b2359d51
  Richard Levitte authored Dec 28, 2002
```
first...
```
  b2359d51
- Make sure OPENSSL_cleanse is declared properly. · 84d964a5
  Richard Levitte authored Dec 28, 2002
  
  84d964a5
Dec 21, 2002
- Merge from HEAD... · 6c8aa1ec
  Richard Levitte authored Dec 21, 2002
  
  6c8aa1ec
Dec 12, 2002
- Skip DH-specific tests when no-dh has been configured. · 6d62e85d
  Richard Levitte authored Dec 12, 2002
```
PR: 353
```
  6d62e85d
Dec 11, 2002

In CRYPTO_lock(), check that the application cares about locking (provided · a01461da
Richard Levitte authored Dec 11, 2002
```
callbacks) before attempting to lock.
```
a01461da

sk_*_push() returns the number of items on the stack, not the index of the · 9576c150

Richard Levitte authored Dec 11, 2002

pushed item. The index is the number of items - 1. And if a NULL item was
found, actually use it.
Finally, provide a little bit of safety in CRYPTO_lock() by asserting the a
requested dynamic lock really must exist, instead of just being silent about it

9576c150

Dec 10, 2002
- A memset() too many got converted into a OPENSSL_cleanse(). · 56f940ed
  Richard Levitte authored Dec 10, 2002
```
PR: 393
```
  56f940ed
Dec 09, 2002
- Fix wrong URI. · aa61140a
  Lutz Jänicke authored Dec 09, 2002
```
Submitted by: assar@kth.se
Reviewed by:
PR: 390
```
  aa61140a
Dec 05, 2002
- Update version to 0.9.6i, even if that's never going to be released. · 8ca0db58
  Richard Levitte authored Dec 05, 2002
  
  8ca0db58
- Small fault corrected · 631cdb9f
  Richard Levitte authored Dec 05, 2002
  
  OpenSSL_0_9_6h
  
  631cdb9f
- make update · e98b0d68
  Richard Levitte authored Dec 05, 2002
  
  e98b0d68