Commits · 702eb4dc0aaae9d64bf913b0be71532aaaa71602 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Jul 21, 2003
- tolerate extra data at end of client hello for SSL 3.0 · 702eb4dc
  Bodo Möller authored Jul 21, 2003
  
  702eb4dc
- typo · a7a53184
  Bodo Möller authored Jul 21, 2003
  
  a7a53184
Jul 03, 2003
- Add a slash so grep doesn't return both ./crypto/bio/bss_mem.o and · 88489600
  Richard Levitte authored Jul 03, 2003
```
./crypto/mem.o when we're looking for mem.o.
```
  88489600
Jun 19, 2003
- Document the last change. · f6ab5d57
  Richard Levitte authored Jun 19, 2003
```
PR: 587
```
  f6ab5d57
- We set the export flag for 512 *bit* keys, not 512 *byte* ones. · a9745187
  Richard Levitte authored Jun 19, 2003
```
PR: 587
```
  a9745187
Jun 12, 2003
- Incorrect patching removed. · d84aa433
  Richard Levitte authored Jun 12, 2003
  
  d84aa433
- Typo. · 647cfb98
  Richard Levitte authored Jun 12, 2003
```
PR: 584
```
  647cfb98
- Make sure ssize_t is defined on SunOS4. · 9f0d2f6b
  Richard Levitte authored Jun 12, 2003
```
PR: 585
```
  9f0d2f6b
- Make sure DSO-dlfcn works properly on SunOS4. · 29e30106
  Richard Levitte authored Jun 12, 2003
```
PR: 585
```
  29e30106
Jun 11, 2003
- Remove debugging output that wasn't supposed to be committed in the first place. · b9c2b033
  Richard Levitte authored Jun 11, 2003
  
  b9c2b033
- Make sure to NUL-terminate the string on end-of-file (and error) · c2edb62b
  Richard Levitte authored Jun 11, 2003
```
PR: 643
```
  c2edb62b
May 22, 2003
- Correct a typo (basically, one can't just replace 'memset' with · 0a02757b
  Richard Levitte authored May 22, 2003
```
'OPENSSL_cleanse', there's an argument to remove as well).
```
  0a02757b
May 21, 2003
- String not properly NUL-terminated when no X509_NAME is given. · fd378564
  Richard Levitte authored May 21, 2003
```
PR: 618
```
  fd378564
- Don't forget that strlen() doesn't include the ending NUL. · 46956f06
  Richard Levitte authored May 21, 2003
```
PR: 618
```
  46956f06
- Cleanse the MD context properly when done adding or getting random data. · 528c1ad2
  Richard Levitte authored May 21, 2003
```
PR: 619
```
  528c1ad2
- Fix sign bugs. · 3b9e8c7c
  Richard Levitte authored May 21, 2003
```
PR: 621
```
  3b9e8c7c
Apr 22, 2003
- fix typo · 3ad23eb2
  Bodo Möller authored Apr 22, 2003
```
Submitted by: Nils Larsch
```
  3ad23eb2
Apr 17, 2003
- Typo. · adc88583
  Richard Levitte authored Apr 17, 2003
```
PR: 562
```
  adc88583
Apr 16, 2003

Memory leak fix: RSA_blinding_on() didn't free Ai under certain circumstances. · 19b11441

Richard Levitte authored Apr 16, 2003

Memory leak fix: RSA_blinding_on() would leave a dangling pointer in
rsa->blinding under certain circumstances.
Double definition fix: RSA_FLAG_NO_BLINDING was defined twice.

19b11441

Apr 15, 2003
- Memory leak fix: local blinding structure not freed in rsa_eay_private_decrypt() · 51c21d0f
  Richard Levitte authored Apr 15, 2003
  
  51c21d0f
Apr 10, 2003
- The release is tagged, time to hope we won't have to work on 0.9.6k. · 0698f54e
  Richard Levitte authored Apr 10, 2003
  
  0698f54e
- I forgot to change the status bits to release. · e352a9e6
  Richard Levitte authored Apr 10, 2003
```
This file will be retagged.
```
  OpenSSL_0_9_6j
  
  e352a9e6
- Time to release 0.9.6j. · 51c47546
  Richard Levitte authored Apr 10, 2003
```
The ticket will be OpenSSL_0_9_6j.
```
  51c47546
- make update · 335340af
  Richard Levitte authored Apr 10, 2003
  
  335340af
- Add the change from HEAD that allows us to parse multi-line comments. · d373ca98
  Richard Levitte authored Apr 10, 2003
  
  d373ca98
- new NEWS · 1db625bc
  Richard Levitte authored Apr 10, 2003
  
  1db625bc
Apr 09, 2003

Make the same changes for svr5 shared library building as in · 86d79b3c
Richard Levitte authored Apr 09, 2003
```
0.9.7-stable.
```
86d79b3c

Some ld implementations use LD_LIBRARY_PATH to find libraries, and · e45b2a62

Richard Levitte authored Apr 09, 2003

what's worse, they seem to use LD_LIBRARY_PATH as the first
directories to look into. This is documented in the manual page for
ld on OpenUNIX 8. Therefore, we need to hack LD_LIBRARY_PATH to
include the directory where the newly built libcrypto and libssl are.

e45b2a62

Apr 08, 2003
- Include rand.h, so RAND_status() and friends get properly declared. · 5d4bf96a
  Richard Levitte authored Apr 08, 2003
  
  5d4bf96a
Apr 02, 2003
- make RSA blinding thread-safe · 223c80ea
  Bodo Möller authored Apr 02, 2003
  
  223c80ea
Mar 27, 2003
- Fix the problem with missing definition of THREADS on VMS. · 60511b8b
  Richard Levitte authored Mar 27, 2003
```
Also produce a better configuration header file.
PR: 548
```
  60511b8b
Mar 20, 2003
- PR:make sure RSA blinding works when the PRNG is not properly seeded; · 20fda79f
  Bodo Möller authored Mar 20, 2003
```
enable it automatically only for the built-in engine
```
  20fda79f
- Blinding fix. · 66e1081a
  Ben Laurie authored Mar 20, 2003
  
  66e1081a
Mar 19, 2003
- countermeasure against new Klima-Pokorny-Rosa atack · ef42d6a4
  Bodo Möller authored Mar 19, 2003
  
  ef42d6a4
Mar 18, 2003
- fix formatting · 00223b96
  Bodo Möller authored Mar 18, 2003
  
  00223b96
Feb 24, 2003
- year 2003 · 3d1120f6
  Bodo Möller authored Feb 24, 2003
  
  3d1120f6
Feb 19, 2003
- Release of 0.9.6i is tagged, let's pretend to move on to 0.9.6j. · fc68e4a0
  Richard Levitte authored Feb 19, 2003
  
  fc68e4a0
- Time to release 0.9.6i. · 84c1d096
  Richard Levitte authored Feb 19, 2003
```
The tag will be OpenSSL_0_9_6i.
```
  OpenSSL_0_9_6i
  
  84c1d096
- Security fix: Vaudenay timing attack on CBC. · 39c06a8b
  Richard Levitte authored Feb 19, 2003
```
An advisory will be posted to the web.  Expect a release within the hour.
```
  39c06a8b
- Make sure the memory allocation routines check for negative sizes · c0a48f4c
  Richard Levitte authored Feb 19, 2003
  
  c0a48f4c