Commits · 7183aa6b9db22f161a93ca539d0e581f4aae742c · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Jan 04, 2012
- make update · 7183aa6b
  Dr. Stephen Henson authored Jan 04, 2012
  
  7183aa6b
- Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de> · eebefe35
  Dr. Stephen Henson authored Jan 04, 2012
```
Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.
```
  eebefe35
- Fix double free in policy check code (CVE-2011-4109) · 1db0bbdc
  Dr. Stephen Henson authored Jan 04, 2012
  
  1db0bbdc
- Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) · e643112d
  Dr. Stephen Henson authored Jan 04, 2012
  
  e643112d
- Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619) · 21c4b259
  Dr. Stephen Henson authored Jan 04, 2012
  
  21c4b259
- stop warning · 41cf2c3a
  Dr. Stephen Henson authored Jan 04, 2012
  
  41cf2c3a
- Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577) · 0e3a930f
  Dr. Stephen Henson authored Jan 04, 2012
  
  0e3a930f
- Submitted by: Adam Langley <agl@chromium.org> · 0c214e01
  Dr. Stephen Henson authored Jan 04, 2012
```
Reviewed by: steve

Fix memory leaks.
```
  0c214e01
Dec 26, 2011

PR: 2326 · 6c61cfbe

Dr. Stephen Henson authored Dec 26, 2011

Submitted by: Tianjie Mao <tjmao@tjmao.net>
Reviewed by: steve

Fix incorrect comma expressions and goto f_err as alert has been set.

6c61cfbe

Dec 09, 2011
- x86-mont.pl: fix bug in integer-only squaring path [from HEAD]. · 2ee77d36
  Andy Polyakov authored Dec 09, 2011
```
PR: 2648
```
  2ee77d36
Dec 06, 2011
- The default CN prompt message can be confusing when often the CN needs to · 24f441e0
  Dr. Stephen Henson authored Dec 06, 2011
```
 be the server FQDN: change it.
[Reported by PSW Group]
```
  24f441e0
Dec 02, 2011
- Resolve a stack set-up race condition (if the list of compression · 740da44f
  Bodo Möller authored Dec 02, 2011
```
methods isn't presorted, it will be sorted on first read).

Submitted by: Adam Langley
```
  740da44f
- Fix ecdsatest.c. · 72033fde
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Emilia Kasper
```
  72033fde
- Fix BIO_f_buffer(). · 9adf3fcf
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Adam Langley
Reviewed by: Bodo Moeller
```
  9adf3fcf
Nov 05, 2011
- ppc.pl: fix bug in bn_mul_comba4 [from HEAD]. · 65f74566
  Andy Polyakov authored Nov 05, 2011
```
PR: 2636
Submitted by: Charles Bryant
```
  65f74566
Oct 27, 2011

PR: 2628 · 8794569a

Dr. Stephen Henson authored Oct 27, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Send alert instead of assertion failure for incorrectly formatted DTLS
fragments.

8794569a

Oct 26, 2011

PR: 2632 · f8731bc2

Dr. Stephen Henson authored Oct 26, 2011

Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve

Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.

f8731bc2

Oct 19, 2011
- BN_BLINDING multi-threading fix. · 195d6bf7
  Bodo Möller authored Oct 19, 2011
```
Submitted by: Emilia Kasper (Google)
```
  195d6bf7
- Oops: this change (http://cvs.openssl.org/chngview?cn=21503) · dacd94b9
  Bodo Möller authored Oct 19, 2011
```
wasn't right for 0.9.8-stable (it's actually a fix for
http://cvs.openssl.org/chngview?cn=14494, which introduced
SSL_CTRL_SET_MAX_SEND_FRAGMENT).
```
  dacd94b9
Oct 13, 2011
- Clarify warning · 8070cb5f
  Bodo Möller authored Oct 13, 2011
  
  8070cb5f
- In ssl3_clear, preserve s3->init_extra along with s3->rbuf. · f7d514f4
  Bodo Möller authored Oct 13, 2011
```
Submitted by: Bob Buckholz <bbuckholz@google.com>
```
  f7d514f4
Oct 09, 2011

PR: 2482 · 6d50bce7

Dr. Stephen Henson authored Oct 09, 2011

Submitted by: Rob Austein <sra@hactrn.net>
Reviewed by: steve

Don't allow inverted ranges in RFC3779 code, discovered by Frank Ellermann.

6d50bce7

Sep 26, 2011
- fix signed/unsigned warning · 3cf0a38b
  Dr. Stephen Henson authored Sep 26, 2011
  
  3cf0a38b
Sep 23, 2011

use keyformat for -x509toreq, don't hard code PEM · 91a1d08a
Dr. Stephen Henson authored Sep 23, 2011

91a1d08a

PR: 2606 · 85e77688

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Christoph Viethen <cv@kawo2.rwth-aachen.de>
Reviewed by: steve

Handle timezones correctly in UTCTime.

85e77688

PR: 2602 · fc401532

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS bug which prevents manual MTU setting

fc401532

PR: 2347 · 6ec9ff83

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Tomas Mraz <tmraz@redhat.com>
Reviewed by: steve

Fix usage message.

6ec9ff83

Sep 05, 2011
- (EC)DH memory handling fixes. · db453084
  Bodo Möller authored Sep 05, 2011
```
Submitted by: Adam Langley
```
  db453084
- Fix memory leak on bad inputs. · 1c7c69a8
  Bodo Möller authored Sep 05, 2011
  
  1c7c69a8
- Move OPENSSL_init declaration out of auto-generated code section · 24ad0610
  Bodo Möller authored Sep 05, 2011
```
(it is not auto-generated).
```
  24ad0610
Sep 02, 2011

PR: 2576 · 92f96fa7

Dr. Stephen Henson authored Sep 02, 2011

Submitted by: Doug Goldstein <cardoe@gentoo.org>
Reviewed by: steve

Include header file stdlib.h which is needed on some platforms to get
getenv() declaration.

92f96fa7

Sep 01, 2011

PR: 2340 · 0d1e3623

Dr. Stephen Henson authored Sep 01, 2011

Submitted by: "Mauro H. Leggieri" <mxmauro@caiman.com.ar>
Reviewed by: steve

Stop warnings if OPENSSL_NO_DGRAM is defined.

0d1e3623

make timing attack protection unconditional · a0bf2c86
Dr. Stephen Henson authored Sep 01, 2011

a0bf2c86

PR: 2573 · 6a662a45

Dr. Stephen Henson authored Sep 01, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS buffering and decryption bug.

6a662a45

PR: 2588 · 24d0524f

Dr. Stephen Henson authored Sep 01, 2011

Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Close file pointer.

24d0524f

PR: 2586 · c081817c

Dr. Stephen Henson authored Sep 01, 2011

Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Fix brace mismatch.

c081817c

Jul 20, 2011

PR: 2559 · 46a1f248

Dr. Stephen Henson authored Jul 20, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS socket error bug

46a1f248

PR: 2555 · ac02a4b6

Dr. Stephen Henson authored Jul 20, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS sequence number bug

ac02a4b6

PR: 2550 · 4ba063d3

Dr. Stephen Henson authored Jul 20, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS HelloVerifyRequest Timer bug

4ba063d3

Jul 15, 2011
- config: detect if assembler supports --noexecstack and pass it down [from HEAD]. · e0e0818e
  Andy Polyakov authored Jul 15, 2011
  
  e0e0818e