Thanks to Antonio Martin, Enterprise Secure Access Research and
Development, Cisco Systems, Inc. for discovering this bug and
preparing a fix. (CVE-2012-0050)

The cipher definitions of these ciphersuites have been around since SSLeay
but were always disabled. Now OpenSSL supports DH certificates they can be
finally enabled.

Various additional changes were needed to make them work properly: many
unused fixed DH sections of code were untested.

PR: 2613
Submitted by: Leena Heino

(most restrictive about r2 and r13 usage).

are passed zero-extended, not sign-extended.
PR: 2682

PR: 2677
Submitted by: Annue Yousar

PR: 2683
Submitted by: Annie Yousar

PR: 2681
Submitted by: Annie Yousar

PR: 2678
Submitted by: Annie Yousar

PR: 2675
Submitted by: Annie Yousar

PR: 2685

(While the 1.0.0f CHANGES entry on VOS PRNG seeding was missing
in HEAD, the actual code is here already.)

Submitted by: Brian Carlstrom

Submitted by: steve

Update maximum message size for certifiate verify messages to support
4096 bit RSA keys again as TLS v1.2 messages is two bytes longer.

Reviewed by: steve

Send fatal alert if heartbeat extension has an illegal value.

Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.