- 17 Aug, 2016 5 commits
-
-
Dr. Stephen Henson authored
Reviewed-by:Richard Levitte <levitte@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by: -
Remi Gacogne authored
* SSL_SESSION_set1_id() * SSL_SESSION_get0_id_context() * SSL_CTX_get_tlsext_status_cb() * SSL_CTX_get_tlsext_status_arg() Reviewed-by:
Matt Caswell <matt@openssl.org>
-
Richard Levitte authored
Unfortunately, it means that the VMS IVP gets a bit crippled. This will be fixed later on. Reviewed-by: -
Richard Levitte authored
Correct small error from last config.com change Reviewed-by:
-
- 16 Aug, 2016 18 commits
-
-
Matt Caswell authored
Reviewed-by:
Viktor Dukhovni <viktor@openssl.org> Reviewed-by:
Stephen Henson <steve@openssl.org>
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
Emilia Käsper <emilia@openssl.org> Reviewed-by:
Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1461)
-
Gergely Nagy authored
The generated asm code from x86cpuid.pl contains CMOVE instructions which are only available on i686 and later CPUs. Reviewed-by:
Andy Polyakov <appro@openssl.org> Reviewed-by:
-
Matt Caswell authored
These functions are no longer relevant to 1.1.0 (we always have auto ecdh on) - but no reason to break old code that tries to call it. The macros will only return a dummy "success" result if the app was trying to enable ecdh. Disabling can't be done in quite this way any more. Fixes Github Issue #1437 Reviewed-by: -
Matt Caswell authored
The read pipelining code broke constant time unpadding. See GitHub issue #1438 Reviewed-by: -
Dr. Stephen Henson authored
If -badsig is selected corrupt the signature before printing out any details so the output reflects the modified signature. Reviewed-by: -
Dr. Stephen Henson authored
Reviewed-by: -
Dr. Stephen Henson authored
Deprecate the function ASN1_STRING_data() and replace with a new function ASN1_STRING_get0_data() which returns a constant pointer. Update library to use new function. Reviewed-by: -
Richard Levitte authored
Reviewed-by: -
Andy Polyakov authored
Reviewed-by:Tim Hudson <tjh@openssl.org>
-
Andy Polyakov authored
Reviewed-by: -
Andy Polyakov authored
Reviewed-by: -
David Woodhouse authored
Now we support (u)int64_t this can be very much simpler. Reviewed-by:
-
Emilia Kasper authored
Reviewed-by: -
Richard Levitte authored
Modify VMS config.com to match Reviewed-by: -
Richard Levitte authored
Reviewed-by:
-
- 15 Aug, 2016 16 commits
-
-
Dr. Stephen Henson authored
Apply a limit to the maximum blob length which can be read in do_d2i_bio() to avoid excessive allocation. Thanks to Shi Lei for reporting this. Reviewed-by: -
Dr. Stephen Henson authored
Check for error return in BN_div_word(). Reviewed-by: -
Dr. Stephen Henson authored
If an oversize BIGNUM is presented to BN_bn2dec() it can cause BN_div_word() to fail and not reduce the value of 't' resulting in OOB writes to the bn_data buffer and eventually crashing. Fix by checking return value of BN_div_word() and checking writes don't overflow buffer. Thanks to Shi Lei for reporting this bug. CVE-2016-2182 Reviewed-by: -
Tomas Mraz authored
The 64 bit pointer must not be cast to 32bit unsigned long on x32 platform. Reviewed-by:
-
Tomas Mraz authored
Reviewed-by:
-
Tomas Mraz authored
Add extra cast to unsigned long to avoid sign extension when converting pointer to 64 bit data. Reviewed-by:
-
Matt Caswell authored
Reviewed-by: -
Matt Caswell authored
Reviewed-by: -
Matt Caswell authored
Test that we handle a TLS ClientHello in an SSLv2 record correctly. Reviewed-by: -
Matt Caswell authored
If we receive a non-initial record but the version number isn't right then we should send an alert. Reviewed-by: -
Matt Caswell authored
Feedback on the previous SSLv2 ClientHello processing fix was that it breaks layering by reading init_num in the record layer. It also does not detect if there was a previous non-fatal warning. This is an alternative approach that directly tracks in the record layer whether this is the first record. GitHub Issue #1298 Reviewed-by: -
Rob Percival authored
Reviewed-by:
-
Rob Percival authored
They may fail if they cannot increment the reference count of the certificate they are storing a pointer for. They should return 0 if this occurs. Reviewed-by:
-
Rob Percival authored
Changes them to have clearer ownership semantics, as suggested in https://github.com/openssl/openssl/pull/1372#discussion_r73232196 . Reviewed-by:
-
Richard Levitte authored
Reviewed-by: -
Dr. Stephen Henson authored
Fix no-ec builds by having separate functions to create keys based on an existing EVP_PKEY and a curve id. Reviewed-by:
-
- 14 Aug, 2016 1 commit
-
-
Jakub Zelenka authored
Reviewed-by:
-
