Commits · 70cd3c6b959b1cd116cb0f6e90e3c00b252e198a · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Dec 19, 2012
- Integrate host, email and IP address checks into X509_verify. · 70cd3c6b
  Dr. Stephen Henson authored Dec 19, 2012
```
Add new verify options to set checks.

(backport from HEAD)
```
  70cd3c6b
- Return success when the responder is active. · db05bc51
  Dr. Stephen Henson authored Dec 19, 2012
```
Don't verify our own responses.
(backport from HEAD)
```
  db05bc51
- Backport X509 hostname, IP address and email checking code from HEAD. · 45da1efc
  Dr. Stephen Henson authored Dec 19, 2012
  
  45da1efc
- Check chain is not NULL before assuming we have a validated chain. The · 54a0076e
  Dr. Stephen Henson authored Dec 19, 2012
```
modification to the OCSP helper purpose breaks normal OCSP verification. It is
no longer needed now we can trust partial chains.
```
  54a0076e
Dec 16, 2012
- VC-32.pl: fix typo [from HEAD]. · f8cab37b
  Andy Polyakov authored Dec 16, 2012
```
Submitted by: Pierre Delaage
```
  f8cab37b
Dec 14, 2012
- Use new partial chain flag instead of modifying input parameters. · 2e652776
  Dr. Stephen Henson authored Dec 14, 2012
```
(backport from HEAD)
```
  2e652776
- New verify flag to return success if we have any certificate in the trusted · 9a1f59cd
  Dr. Stephen Henson authored Dec 14, 2012
```
store instead of the default which is to return an error if we can't build
the complete chain. [backport from HEAD]
```
  9a1f59cd
- Documentation improvements by Chris Palmer (Google). · 4e72220f
  Ben Laurie authored Dec 14, 2012
  
  4e72220f
- Backport OCSP fixes. · d65b8b21
  Ben Laurie authored Dec 14, 2012
  
  d65b8b21
Dec 13, 2012
- Document -pubkey option. · 5dca1e33
  Ben Laurie authored Dec 13, 2012
  
  5dca1e33
- Make verify return errors. · 5f4cf088
  Ben Laurie authored Dec 13, 2012
  
  5f4cf088
- Ignore more. · 2a2e5379
  Ben Laurie authored Dec 13, 2012
  
  2a2e5379
Dec 12, 2012
- Add my 64-bit debug target. · d79fc8da
  Ben Laurie authored Dec 12, 2012
  
  d79fc8da
Dec 06, 2012
- Fix two bugs which affect delta CRL handling: · e04ccbc5
  Dr. Stephen Henson authored Dec 06, 2012
```
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
```
  e04ccbc5
Dec 05, 2012
- aes-s390x.pl: fix XTS bugs in z196-specific code path [from HEAD]. · bc946bfb
  Andy Polyakov authored Dec 05, 2012
  
  bc946bfb
Dec 04, 2012
- check mval for NULL too · 38680fa4
  Dr. Stephen Henson authored Dec 04, 2012
  
  38680fa4
Dec 03, 2012
- fix leak · a902b6bd
  Dr. Stephen Henson authored Dec 03, 2012
  
  a902b6bd
Dec 01, 2012
- aes-s390x.pl: harmonize software-only path [from HEAD]. · c5e91a9a
  Andy Polyakov authored Dec 01, 2012
  
  c5e91a9a
Nov 29, 2012

PR: 2803 · b5f57f45

Dr. Stephen Henson authored Nov 29, 2012

Submitted by: jean-etienne.schwartz@bull.net

In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.

b5f57f45

Nov 28, 2012
- Intel compiler support update from HEAD. · ad00a52f
  Andy Polyakov authored Nov 28, 2012
  
  ad00a52f
Nov 26, 2012
- change inaccurate error message · e08c7f15
  Dr. Stephen Henson authored Nov 26, 2012
  
  e08c7f15
Nov 22, 2012
- reject zero length point format list or supported curves extensions · 7469af44
  Dr. Stephen Henson authored Nov 22, 2012
  
  7469af44
Nov 21, 2012

PR: 2908 · ec76d850

Dr. Stephen Henson authored Nov 21, 2012

Submitted by: Dmitry Belyavsky <beldmit@gmail.com>

Fix DH double free if parameter generation fails.

ec76d850

Nov 20, 2012
- fix leaks · cedf19f3
  Dr. Stephen Henson authored Nov 20, 2012
  
  cedf19f3
Nov 19, 2012
- correct docs · 1d5f3f46
  Dr. Stephen Henson authored Nov 19, 2012
  
  1d5f3f46
- x86_64-gcc.c: resore early clobber constraint [from HEAD]. · a060fc3b
  Andy Polyakov authored Nov 19, 2012
```
Submitted by: Florian Weimer
```
  a060fc3b
Nov 18, 2012

PR: 2880 · bda51537

Dr. Stephen Henson authored Nov 18, 2012

Submitted by: "Florian RÃ¼chel" <florian.ruechel@ruhr-uni-bochum.de>

Correctly handle local machine keys in the capi ENGINE.

bda51537

Nov 15, 2012
- add "missing" TLSv1.2 cipher alias · 6f539399
  Dr. Stephen Henson authored Nov 15, 2012
  
  6f539399
Nov 12, 2012
- [vp]aes-x86[_64].pl: update from HEAD. · d90bf2ab
  Andy Polyakov authored Nov 12, 2012
  
  d90bf2ab
Oct 29, 2012
- Cumulative updates from HEAD. · 02620cfc
  Andy Polyakov authored Oct 29, 2012
  
  02620cfc
Oct 22, 2012
- use correct year automatically · 74daafaa
  Dr. Stephen Henson authored Oct 22, 2012
  
  74daafaa
Oct 21, 2012
- linux-ppc: make it more robust [from HEAD]. · aa963813
  Andy Polyakov authored Oct 21, 2012
  
  aa963813
Oct 16, 2012
- Don't require tag before ciphertext in AESGCM mode · 9a6aff50
  Dr. Stephen Henson authored Oct 16, 2012
  
  9a6aff50
- aix[64]-cc: get MT support right [from HEAD]. · c7d16ac8
  Andy Polyakov authored Oct 16, 2012
```
PR: 2896
```
  c7d16ac8
Oct 05, 2012
- Fix EC_KEY initialization race. · b626f039
  Bodo Möller authored Oct 05, 2012
```
Submitted by: Adam Langley
```
  b626f039
Sep 26, 2012
- add -trusted_first option and verify flag (backport from HEAD) · 9d2006d8
  Dr. Stephen Henson authored Sep 26, 2012
  
  9d2006d8
Sep 24, 2012
- Fix Valgrind warning. · abf1e32f
  Bodo Möller authored Sep 24, 2012
```
Submitted by: Adam Langley
```
  abf1e32f
- * Configure: make the debug-levitte-linux{elf,noasm} less extreme. · fc1e09bf
  Richard Levitte authored Sep 24, 2012
  
  fc1e09bf
Sep 21, 2012
- * ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in · 451cec33
  Richard Levitte authored Sep 21, 2012
```
  debugging code that's seldom used.
```
  451cec33
Sep 19, 2012
- Configure: allow for compiler options starting with double dash [from HEAD]. · 16c92916
  Andy Polyakov authored Sep 19, 2012
  
  16c92916