Commits · 623a01df491d79554136a9f09997bc72758071ea · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Jun 01, 2014

Option to disable padding extension. · 623a01df

Dr. Stephen Henson authored Jun 01, 2014

Add TLS padding extension to SSL_OP_ALL so it is used with other
"bugs" options and can be turned off.

This replaces SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG which is an ancient
option referring to SSLv2 and SSLREF.

PR#3336
(cherry picked from commit 758415b2259fa45d3fe17d8e53ae1341b7b6e482)

Conflicts:

	ssl/t1_lib.c

623a01df

Set default global mask to UTF8 only. · 08b172b9
Dr. Stephen Henson authored Jun 01, 2014
```
(cherry picked from commit 3009244d)
```
08b172b9

Allocate extra space when NETSCAPE_HANG_BUG defined. · 856a4585

David Ramos authored Jun 01, 2014

Make sure there is an extra 4 bytes for server done message when
NETSCAPE_HANG_BUG is defined.

PR#3361
(cherry picked from commit 92d81ba6)

856a4585

Initialise alg. · 3329765b
David Ramos authored Jun 01, 2014
```
PR#3313
(cherry picked from commit 7e2c6f7e)
```
3329765b

May 30, 2014
- Use correct digest when exporting keying material. · 87a0cbdf
  Dr. Stephen Henson authored May 30, 2014
```
PR#3319
(cherry picked from commit 84691390eae86befd33c83721dacedb539ae34e6)
```
  87a0cbdf
- Don't compile heartbeat test code on Windows (for now). · b5bdde9e
  Dr. Stephen Henson authored May 30, 2014
```
(cherry picked from commit 2c575907d2c8601a18716f718ce309ed4e1f1783)
```
  b5bdde9e
May 29, 2014
- Set version number correctly. · 1788072b
  Dr. Stephen Henson authored May 29, 2014
```
PR#3249
(cherry picked from commit 8909bf20269035d295743fca559207ef2eb84eb3)
```
  1788072b
- Fix memory leak. · 5f2b5e38
  František Bořánek authored May 29, 2014
```
PR#3278
(cherry picked from commit de56fe797081fc09ebd1add06d6e2df42a324fd5)
```
  5f2b5e38
- remove duplicate 0x for default RSASSA-PSS salt len · 42d73874
  Martin Kaiser authored May 28, 2014
```
(cherry picked from commit 3820fec3a09faecba7fe9912aa20ef7fcda8337b)
```
  42d73874
May 25, 2014
- Fixed error in args for SSL_set_msg_callback and SSL_set_msg_callback_arg · 88d3d6c9
  Matt Caswell authored May 25, 2014
  
  88d3d6c9
May 24, 2014
- Only copy opensslconf.h at init time. · 3435ef46
  Ben Laurie authored May 24, 2014
  
  3435ef46
May 23, 2014
- vpaes-ppc.pl: comply with ABI. · c90c694b
  Andy Polyakov authored May 23, 2014
```
(cherry picked from commit b83d09f5)
```
  c90c694b
May 22, 2014
- Fix heartbeat_test for -DOPENSSL_NO_HEARTBEATS · 8db2ba4b
  Mike Bland authored May 22, 2014
```
Replaces the entire test with a trivial implementation when
OPENSSL_NO_HEARTBEATS is defined.
```
  8db2ba4b
- Check length first in BUF_strnlen(). · d77501d8
  Ben Laurie authored May 22, 2014
  
  d77501d8
May 21, 2014
- Fixed minor copy&paste error, and stray space causing rendering problem · 15e45659
  Matt Caswell authored May 22, 2014
  
  15e45659
- Fixed unterminated B tag, causing build to fail with newer pod2man versions · 57577665
  Matt Caswell authored May 22, 2014
  
  57577665
- Remove redundant test. · 4f7236ed
  Ben Laurie authored May 21, 2014
  
  4f7236ed
- Implement BUF_strnlen() and use it instead of strlen(). · ed693e43
  Ben Laurie authored May 21, 2014
  
  ed693e43
- Fixes to host checking. · a2219f6b
  Viktor Dukhovni authored May 21, 2014
```
Fixes to host checking wild card support and add support for
setting host checking flags when verifying a certificate
chain.
(cherry picked from commit 397a8e74)
```
  a2219f6b
- Fix for PKCS12_create if no-rc2 specified. · 03b5b78c
  Dr. Stephen Henson authored May 21, 2014
```
Use triple DES for certificate encryption if no-rc2 is
specified.

PR#3357
```
  03b5b78c
- Change default cipher in smime app to des3. · cd302feb
  Dr. Stephen Henson authored May 21, 2014
```
PR#3357
(cherry picked from commit ca3ffd9670f2b589bf8cc04923f953e06d6fbc58)
```
  cd302feb
May 20, 2014
- Fix signed/unsigned warning. · 5cd1a6fc
  Ben Laurie authored May 20, 2014
  
  5cd1a6fc
- Don't allocate more than is needed in BUF_strndup(). · 4ceb430a
  Ben Laurie authored May 20, 2014
  
  4ceb430a
- For portability use BUF_strndup instead of strndup. · 81ce94f8
  Dr. Stephen Henson authored May 20, 2014
```
(cherry picked from commit dcca7b13)
```
  81ce94f8
- Adding padding extension to trace code. · feaa3b38
  Dr. Stephen Henson authored May 20, 2014
```
(cherry picked from commit 6db14dbc)
```
  feaa3b38
May 19, 2014
- Fix a wrong parameter count ERR_add_error_data · 5d8e9f2a
  Janpopan authored May 04, 2014
  
  5d8e9f2a
- Merge branch 'mbland-heartbeat-test-1.0.2' into OpenSSL_1_0_2-stable · 6c1d36a6
  Ben Laurie authored May 19, 2014
  
  6c1d36a6
May 18, 2014

Unit/regression test for TLS heartbeats. · 2312a84c

Mike Bland authored Apr 16, 2014

Regression test against CVE-2014-0160 (Heartbleed).

More info: http://mike-bland.com/tags/heartbleed.html

(based on commit 35cb55988b75573105eefd00d27d0138eebe40b1)

2312a84c

May 15, 2014

Moved note about lack of support for AEAD modes out of BUGS section to... · a99d2a22

Matt Caswell authored May 15, 2014

Moved note about lack of support for AEAD modes out of BUGS section to SUPPORTED CIPHERS section (bug has been fixed, but still no support for AEAD)

a99d2a22

Enc doesn't support AEAD ciphers. · 2fa65aa7
Dr. Stephen Henson authored May 15, 2014
```
(cherry picked from commit 09184dddead165901700b31eb39d540ba30f93c5)
```
2fa65aa7

May 14, 2014
- Fix grammar error in verify pod. PR#3355 · 4907cf08
  Jeffrey Walton authored May 14, 2014
  
  4907cf08
- Add information to BUGS section of enc documentation. PR#3354 · 28b4820f
  Jeffrey Walton authored May 14, 2014
  
  28b4820f
- Corrected POD syntax errors. PR#3353 · 72967d5b
  Michal Bozon authored May 14, 2014
  
  72967d5b
May 12, 2014
- Have the .pc files depend on each other rather than duplicating the · 4aebb2c8
  Mike Frysinger authored May 12, 2014
```
various link settings. PR#3332
```
  4aebb2c8
- Check sk_SSL_CIPHER_num() after assigning sk. · 1f5bce2d
  Kurt Roeckx authored May 12, 2014
  
  1f5bce2d
- Correct the return type on the signature for X509_STORE_CTX_get_ex_data given in the pod file. · b953b028
  Jean-Paul Calderone authored Apr 02, 2014
  
  b953b028
- Replace manual ASN1 decoder with ASN1_get_object · d6e55b40
  Serguei E. Leontiev authored May 11, 2014
```
Replace manual ASN.1 decoder with ASN1_get object. This
will decode the tag and length properly and check against
it does not exceed the supplied buffer length.

PR#3335
(cherry picked from commit b0308dddd1cc6a8e1de803ef29ba6da25ee072c2)
```
  d6e55b40
May 11, 2014
- Fixed NULL pointer dereference. See PR#3321 · f710c3f1
  Matt Caswell authored May 12, 2014
  
  f710c3f1
- Set authkey to NULL and check malloc return value. · 99a3d167
  Kurt Roeckx authored May 01, 2014
  
  99a3d167
- dgram_sctp_ctrl: authkey memory leak · c6226495
  Martin Brejcha authored May 01, 2014
```
PR: 3327
```
  c6226495