- Jan 12, 2007
-
-
Lutz Jänicke authored
-
- Jan 04, 2007
-
-
Andy Polyakov authored
-
- Dec 29, 2006
-
-
Andy Polyakov authored
-
- Dec 27, 2006
-
-
Nils Larsch authored
PR: 1441
-
- Dec 26, 2006
-
-
Richard Levitte authored
-
- Dec 25, 2006
-
-
Richard Levitte authored
-
- Dec 22, 2006
-
-
Andy Polyakov authored
-
- Dec 21, 2006
-
-
Nils Larsch authored
PR: 1354, 1355, 1398
-
- Dec 19, 2006
-
-
Nils Larsch authored
PR: 1438
-
Bodo Möller authored
(need to prevent the removal of trailing zero bits).
-
- Dec 13, 2006
-
-
Nils Larsch authored
-
- Dec 07, 2006
-
-
Dr. Stephen Henson authored
-
- Dec 06, 2006
-
-
Dr. Stephen Henson authored
-
Nils Larsch authored
PR: 1343
-
- Dec 05, 2006
-
-
Nils Larsch authored
PR: 1407 Submitted by: Tomas Mraz <tmraz@redhat.com>
-
Nils Larsch authored
PR: 1435 Submitted by: "Haridharan" <haridharan@gmail.com>
-
- Dec 04, 2006
-
-
Nils Larsch authored
if it's NULL (in case of a malformed pkcs10 request) PR: 1347 Submitted by: Remo Inverardi <invi@your.toilet.ch>
-
Nils Larsch authored
"Subject Directory Attributes" OIDs PR: 1433
-
- Dec 02, 2006
-
-
Andy Polyakov authored
-
Andy Polyakov authored
Submitted by: Masashi Fujita, NTT
-
- Nov 30, 2006
-
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Use OPENSSL_NO_RFC3779 instead of OPENSSL_RFC3779: this makes the Win32 scripts work and is consistent with other options. Fix Win32 scripts and Configure to process OPENSSL_NO_RFC3779 properly. Update ordinals. Change some prototypes for LSB because VC++ 6 doesn't like the */ sequence and thinks it is an invalid end of comment.
-
- Nov 29, 2006
-
-
Nils Larsch authored
Submitted by: Tracy Camp <tracyx.e.camp@intel.com>
-
Bodo Möller authored
-
- Nov 27, 2006
-
-
Ben Laurie authored
-
- Nov 24, 2006
-
-
Nils Larsch authored
PR: 1431
-
- Nov 21, 2006
-
-
Ulf Möller authored
-
Dr. Stephen Henson authored
-
Dr. Stephen Henson authored
Improve mkerr.pl header file function name parsing.
-
- Nov 13, 2006
-
-
Dr. Stephen Henson authored
-
- Oct 27, 2006
-
-
Nils Larsch authored
-
- Oct 19, 2006
-
-
Andy Polyakov authored
-
- Oct 05, 2006
-
-
Dr. Stephen Henson authored
-
- Oct 04, 2006
-
-
Nils Larsch authored
-
- Sep 29, 2006
-
-
Mark J. Cox authored
Steve Kiernan
-
Richard Levitte authored
-
- Sep 28, 2006
-
-
Bodo Möller authored
-
Bodo Möller authored
-
Richard Levitte authored
1) Certificate Message with no certs OpenSSL implementation sends the Certificate message during SSL handshake, however as per the specification, these have been omitted. -- RFC 2712 -- CertificateRequest, and the ServerKeyExchange shown in Figure 1 will be omitted since authentication and the establishment of a master secret will be done using the client's Kerberos credentials for the TLS server. The client's certificate will be omitted for the same reason. -- RFC 2712 -- 3) Pre-master secret Protocol version The pre-master secret generated by OpenSSL does not have the correct client version. RFC 2712 says, if the Kerberos option is selected, the pre-master secret structure is the same as that used in the RSA case. TLS specification defines pre-master secret as: struct { ProtocolVersion client_version; opaque random[46]; } PreMasterSecret; where client_version is the latest protocol version supported by the client The pre-master secret generated by OpenSSL does not have the correct client version. The implementation does not update the first 2 bytes of random secret for Kerberos Cipher suites. At the server-end, the client version from the pre-master secret is not validated. PR: 1336
-