- Jul 25, 2016
-
-
FdaSilvaYY authored
Old inactive inherited code, a code relic for sure. Reviewed-by:
Matt Caswell <matt@openssl.org> Reviewed-by:
Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1301)
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
X509_REVOKED_get0_extensions X509_check_private_key Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
- X509_NAME_entry_count, X509_ATTRIBUTE_count - X509_NAME_add_entry_by_OBJ, X509_NAME_ENTRY_create_by_OBJ, X509_NAME_ENTRY_set_object Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
simplify and reindent some related code. Reviewed-by:
-
Matt Caswell authored
Misc fixes impacting no-tls1_2. Also fixes no-dtls1_2. Reviewed-by: -
Matt Caswell authored
Also fixes some other options like no-dgram and no-sock. Reviewed-by: -
Matt Caswell authored
Ensure that we don't build/run the ct fuzzing code if no-ct is used. Reviewed-by:
-
- Jul 24, 2016
-
-
Jakub Zelenka authored
Reviewed-by:
Tim Hudson <tjh@openssl.org> Reviewed-by:
-
Jakub Zelenka authored
Reviewed-by:
Richard Levitte <levitte@openssl.org> Reviewed-by:
-
- Jul 23, 2016
-
-
Richard Levitte authored
Reviewed-by: -
Richard Levitte authored
This adds the function X509_set_proxy_flag(), which sets the internal flag EXFLAG_PROXY on a given X509 structure. Reviewed-by: -
Richard Levitte authored
RT#4619 Reviewed-by:
-
- Jul 22, 2016
-
-
Dr. Stephen Henson authored
If two CRLs are equivalent then use the one with a later lastUpdate field: this will result in the newest CRL available being used. RT#4615 Reviewed-by: -
Dr. Stephen Henson authored
RT#4511 Reviewed-by: -
Dr. Stephen Henson authored
TS_OBJ_print_bio() misuses OBJ_txt2obj: it should print the result as a null terminated buffer. The length value returned is the total length the complete text reprsentation would need not the amount of data written. CVE-2016-2180 Thanks to Shi Lei for reporting this bug. Reviewed-by: -
Emilia Kasper authored
Don't emit duplicate server/client sections when they are identical. Instead, just point to the same section. Reviewed-by: -
Emilia Kasper authored
Undo review mistake: I changed the wrong strcmp in a previous pull request. Add test. Reviewed-by: -
Dr. Stephen Henson authored
RT#4603 Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Richard Levitte authored
Reviewed-by: -
Richard Levitte authored
The way it was implemented before this change, the shared libraries were installed twice. On a file system that supports file generations, that's a waste. Slightly rearranging the install targets solves the problem. Reviewed-by:
-
- Jul 21, 2016
-
-
Emilia Kasper authored
Add tests for resuming with a different client version. This happens in reality when clients persist sessions on disk through upgrades. Reviewed-by:
-
- Jul 20, 2016
-
-
Kurt Roeckx authored
Reviewed-by: -
Kurt Roeckx authored
llvm's ubsan reported: runtime error: negation of -9223372036854775808 cannot be represented in type 'long'; cast to an unsigned type to negate this value to itself Found using afl Reviewed-by: -
Kurt Roeckx authored
Reviewed-by: -
Dr. Stephen Henson authored
To avoid having to immediately free up r/s when setting them don't allocate them automatically in DSA_SIG_new() and ECDSA_SIG_new(). RT#4590 Reviewed-by:
-
