Commits · 528c1ad2aee55aa26e0641a561f4cc01a6077116 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

21 May, 2003 2 commits
- Cleanse the MD context properly when done adding or getting random data. · 528c1ad2
  Richard Levitte authored May 21, 2003
```
PR: 619
```
  528c1ad2
- Fix sign bugs. · 3b9e8c7c
  Richard Levitte authored May 21, 2003
```
PR: 621
```
  3b9e8c7c
22 Apr, 2003 1 commit
- fix typo · 3ad23eb2
  Bodo Möller authored Apr 22, 2003
```
Submitted by: Nils Larsch
```
  3ad23eb2
17 Apr, 2003 1 commit
- Typo. · adc88583
  Richard Levitte authored Apr 17, 2003
```
PR: 562
```
  adc88583
16 Apr, 2003 1 commit

Memory leak fix: RSA_blinding_on() didn't free Ai under certain circumstances. · 19b11441

Richard Levitte authored Apr 16, 2003

Memory leak fix: RSA_blinding_on() would leave a dangling pointer in
rsa->blinding under certain circumstances.
Double definition fix: RSA_FLAG_NO_BLINDING was defined twice.

19b11441

15 Apr, 2003 1 commit
- Memory leak fix: local blinding structure not freed in rsa_eay_private_decrypt() · 51c21d0f
  Richard Levitte authored Apr 15, 2003
  
  51c21d0f
10 Apr, 2003 6 commits
- The release is tagged, time to hope we won't have to work on 0.9.6k. · 0698f54e
  Richard Levitte authored Apr 10, 2003
  
  0698f54e
- I forgot to change the status bits to release. · e352a9e6
  Richard Levitte authored Apr 10, 2003
```
This file will be retagged.
```
  OpenSSL_0_9_6j
  
  e352a9e6
- Time to release 0.9.6j. · 51c47546
  Richard Levitte authored Apr 10, 2003
```
The ticket will be OpenSSL_0_9_6j.
```
  51c47546
- make update · 335340af
  Richard Levitte authored Apr 10, 2003
  
  335340af
- Add the change from HEAD that allows us to parse multi-line comments. · d373ca98
  Richard Levitte authored Apr 10, 2003
  
  d373ca98
- new NEWS · 1db625bc
  Richard Levitte authored Apr 10, 2003
  
  1db625bc
09 Apr, 2003 2 commits

Make the same changes for svr5 shared library building as in · 86d79b3c
Richard Levitte authored Apr 09, 2003
```
0.9.7-stable.
```
86d79b3c

Some ld implementations use LD_LIBRARY_PATH to find libraries, and · e45b2a62

Richard Levitte authored Apr 09, 2003

what's worse, they seem to use LD_LIBRARY_PATH as the first
directories to look into. This is documented in the manual page for
ld on OpenUNIX 8. Therefore, we need to hack LD_LIBRARY_PATH to
include the directory where the newly built libcrypto and libssl are.

e45b2a62

08 Apr, 2003 1 commit
- Include rand.h, so RAND_status() and friends get properly declared. · 5d4bf96a
  Richard Levitte authored Apr 08, 2003
  
  5d4bf96a
02 Apr, 2003 1 commit
- make RSA blinding thread-safe · 223c80ea
  Bodo Möller authored Apr 02, 2003
  
  223c80ea
27 Mar, 2003 1 commit
- Fix the problem with missing definition of THREADS on VMS. · 60511b8b
  Richard Levitte authored Mar 27, 2003
```
Also produce a better configuration header file.
PR: 548
```
  60511b8b
20 Mar, 2003 2 commits
- PR:make sure RSA blinding works when the PRNG is not properly seeded; · 20fda79f
  Bodo Möller authored Mar 20, 2003
```
enable it automatically only for the built-in engine
```
  20fda79f
- Blinding fix. · 66e1081a
  Ben Laurie authored Mar 20, 2003
  
  66e1081a
19 Mar, 2003 1 commit
- countermeasure against new Klima-Pokorny-Rosa atack · ef42d6a4
  Bodo Möller authored Mar 19, 2003
  
  ef42d6a4
18 Mar, 2003 1 commit
- fix formatting · 00223b96
  Bodo Möller authored Mar 18, 2003
  
  00223b96
24 Feb, 2003 1 commit
- year 2003 · 3d1120f6
  Bodo Möller authored Feb 24, 2003
  
  3d1120f6
19 Feb, 2003 4 commits
- Release of 0.9.6i is tagged, let's pretend to move on to 0.9.6j. · fc68e4a0
  Richard Levitte authored Feb 19, 2003
  
  fc68e4a0
- Time to release 0.9.6i. · 84c1d096
  Richard Levitte authored Feb 19, 2003
```
The tag will be OpenSSL_0_9_6i.
```
  OpenSSL_0_9_6i
  
  84c1d096
- Security fix: Vaudenay timing attack on CBC. · 39c06a8b
  Richard Levitte authored Feb 19, 2003
```
An advisory will be posted to the web.  Expect a release within the hour.
```
  39c06a8b
- Make sure the memory allocation routines check for negative sizes · c0a48f4c
  Richard Levitte authored Feb 19, 2003
  
  c0a48f4c
14 Feb, 2003 1 commit
- Change no_rmd160 to no_ripemd for consistency. · 1254766d
  Richard Levitte authored Feb 14, 2003
```
PR: 500
```
  1254766d
12 Feb, 2003 1 commit
- comments · b73de733
  Bodo Möller authored Feb 12, 2003
  
  b73de733
05 Feb, 2003 1 commit
- typo in WIN16 section · a71f9eeb
  Bodo Möller authored Feb 05, 2003
```
Submitted by: Toni Andjelkovic <toni@soth.at>
```
  a71f9eeb
04 Feb, 2003 2 commits
- typo · d76434fe
  Bodo Möller authored Feb 04, 2003
  
  d76434fe
- Update PRNG entry: · ac3b89d8
  Bodo Möller authored Feb 04, 2003
```
- OpenSSL version differences
- Sun /dev/urandom patch information
```
  ac3b89d8
14 Jan, 2003 1 commit
- Correct an example that has a few typos. · e5919944
  Richard Levitte authored Jan 14, 2003
```
PR: 458
```
  e5919944
13 Jan, 2003 2 commits
- fix release date (CHANGES as released with OpenSSL 0.9.6h on · 90f6da7b
  Bodo Möller authored Jan 13, 2003
```
2002-12-05 said '[21 Dec 2002]')
```
  90f6da7b
- typo · ad487598
  Bodo Möller authored Jan 13, 2003
  
  ad487598
28 Dec, 2002 2 commits
- A function returning int should really return an int, even if it exits · b2359d51
  Richard Levitte authored Dec 28, 2002
```
first...
```
  b2359d51
- Make sure OPENSSL_cleanse is declared properly. · 84d964a5
  Richard Levitte authored Dec 28, 2002
  
  84d964a5
21 Dec, 2002 1 commit
- Merge from HEAD... · 6c8aa1ec
  Richard Levitte authored Dec 21, 2002
  
  6c8aa1ec
12 Dec, 2002 1 commit
- Skip DH-specific tests when no-dh has been configured. · 6d62e85d
  Richard Levitte authored Dec 12, 2002
```
PR: 353
```
  6d62e85d
11 Dec, 2002 2 commits

In CRYPTO_lock(), check that the application cares about locking (provided · a01461da
Richard Levitte authored Dec 11, 2002
```
callbacks) before attempting to lock.
```
a01461da

sk_*_push() returns the number of items on the stack, not the index of the · 9576c150

Richard Levitte authored Dec 11, 2002

pushed item. The index is the number of items - 1. And if a NULL item was
found, actually use it.
Finally, provide a little bit of safety in CRYPTO_lock() by asserting the a
requested dynamic lock really must exist, instead of just being silent about it

9576c150