Commits · bc63a2ee0e129b0e2fec38771c1c5c87217b9a1d · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Jun 06, 2003

This memset() in the ubsec ENGINE is a bug. Zeroing out the result array · bc63a2ee

Geoff Thorpe authored Jun 06, 2003

should not be necessary in any case, but more importantly the result and
input BIGNUMs could be the same, in which case this is clearly a problem.

Submitted by: Jonathan Hersch
Reviewed by: Joe Orton
Approved by: Geoff Thorpe

bc63a2ee

Jun 04, 2003
- Really get X509_CRL_CHECK_ALL right this time... · 476f0971
  Dr. Stephen Henson authored Jun 04, 2003
  
  476f0971
Jun 03, 2003
- Clarify return value of SSL_connect() and SSL_accept() in case of the · fe0444b1
  Lutz Jänicke authored Jun 03, 2003
```
WANT_READ and WANT_WRITE conditions.
```
  fe0444b1
- Move the base64 BIO fixes to 0.9.7-stable · 16c91482
  Dr. Stephen Henson authored Jun 03, 2003
  
  16c91482
Jun 02, 2003
- Only count 'LF' as EOL in pk7_mime.c, this avoids incorrect · 9d92486c
  Dr. Stephen Henson authored Jun 02, 2003
```
results if CR+LF straddles the line buffer.
```
  9d92486c
- Stop checking for CRLF when start of buffer is reached. · bb41fdb5
  Dr. Stephen Henson authored Jun 02, 2003
  
  bb41fdb5
Jun 01, 2003
- Various S/MIME bug and compatibility fixes. · 3410aa1a
  Dr. Stephen Henson authored Jun 01, 2003
  
  3410aa1a
May 30, 2003
- Clarify ordering of certificates when using certificate chains · f50b911a
  Lutz Jänicke authored May 30, 2003
  
  f50b911a
May 29, 2003
- Include openssl/e_os.h so OPENSSL_SYSNAME_ULTRASPARC and other configuration · 2a948bd3
  Richard Levitte authored May 29, 2003
```
macros get properly defined.
```
  2a948bd3
- Have ASFLAGS be defined the same way as CFLAGS · d4e35514
  Richard Levitte authored May 29, 2003
  
  d4e35514
- PR: 630 · 3fd6b9f6
  Richard Levitte authored May 29, 2003
```
Avoid looking outside the key_data array.
```
  3fd6b9f6
May 28, 2003
- Add minimum POP3 STLS hack to s_client.c (as was provided for STARTTLS before) · a598524a
  Lutz Jänicke authored May 28, 2003
```
Submitted by: dg@sunet.ru (Daniel Ginsburg)

PR: #613
```
  a598524a
- Move header file inclusion to prevent irritation of users forgetting to · 828ce10c
  Lutz Jänicke authored May 28, 2003
```
call "make depend" after enabling or disabling ciphers...
Submitted by: Tal Mozes <talm@cyber-ark.com>

PR: #628
```
  828ce10c
- PR: 627 · 8939adba
  Dr. Stephen Henson authored May 28, 2003
```
Allocate certificatePolicies correctly if CPS field is absent.

Fix various memory leaks in certificatePolicies.
```
  8939adba
- PR: 631 · ff160dba
  Dr. Stephen Henson authored May 28, 2003
```
Submitted by: Doug Sauder <dws+001@hunnysoft.com>

Fix bug in X509V3_get_d2i() when idx in not NULL.
```
  ff160dba
- Make sure to compare unsigned against unsigned. · fb5b7317
  Richard Levitte authored May 28, 2003
  
  fb5b7317
May 21, 2003
- Fix sign bugs. · 457f692e
  Richard Levitte authored May 21, 2003
```
PR: 621
```
  457f692e
- Make sure EC_window_bits_for_scalar_size() returns a size_t · e077b545
  Richard Levitte authored May 21, 2003
  
  e077b545
May 18, 2003
- Fix docs. · a9cfd20d
  Dr. Stephen Henson authored May 18, 2003
  
  a9cfd20d
May 07, 2003
- Add correct DN entry for serialNumber. · 22e6c252
  Dr. Stephen Henson authored May 07, 2003
  
  22e6c252
- /usr/lib/pkgconfig/openssl.pc was never installed in the RPM. · 6d8cbdcb
  Richard Levitte authored May 07, 2003
```
Notified by Bennett Todd <bet@rahul.net>.
```
  6d8cbdcb
- DO NOT constify RSA* in RSA_sign() and RSA_verify(), since there are function · 54a7ea6f
  Richard Levitte authored May 07, 2003
```
called downstream that need it to be non-const.  The fact that the RSA_METHOD
functions take the RSA* as a const doesn't matter, it just expresses that
*they* won't touch it.
PR: 602
```
  54a7ea6f
May 05, 2003
- Constify RSA_sign() and RSA_verify(). · 0e2f5ec2
  Richard Levitte authored May 05, 2003
```
PR: 602
```
  0e2f5ec2
May 02, 2003
- Typo. · 8c5e375c
  Dr. Stephen Henson authored May 02, 2003
  
  8c5e375c
Apr 22, 2003
- fix typo · ce8a2028
  Bodo Möller authored Apr 22, 2003
```
Submitted by: Nils Larsch
```
  ce8a2028
Apr 21, 2003
- Make it possible to affect the extension of man pages. · 0ece1d30
  Richard Levitte authored Apr 21, 2003
```
PR: 578
```
  0ece1d30
Apr 16, 2003

Memory leak fix: RSA_blinding_on() didn't free Ai under certain circumstances. · 7f0f9f19

Richard Levitte authored Apr 16, 2003

Memory leak fix: RSA_blinding_on() would leave a dangling pointer in
rsa->blinding under certain circumstances.
Double definition fix: RSA_FLAG_NO_BLINDING was defined twice.

7f0f9f19

Apr 15, 2003
- Memory leak fix: local blinding structure not freed in rsa_eay_private_decrypt() · 8f09a154
  Richard Levitte authored Apr 15, 2003
  
  8f09a154
Apr 11, 2003
- include 'Changes between 0.9.6i and 0.9.6j' · 4e756657
  Bodo Möller authored Apr 11, 2003
  
  4e756657
Apr 10, 2003
- The release is tagged, time to work on 0.9.7c. · fba1cfa0
  Richard Levitte authored Apr 10, 2003
  
  fba1cfa0
- Include the 0.9.6j news. · 110c6f72
  Richard Levitte authored Apr 10, 2003
```
This file will be retagged.
```
  OpenSSL_0_9_7b
  
  110c6f72
- Forgot to code the status bits for release. This file will be · 27f7d430
  Richard Levitte authored Apr 10, 2003
```
retagged.
```
  27f7d430
- Time to release 0.9.7b. · 5964e95c
  Richard Levitte authored Apr 10, 2003
```
The tag will be OpenSSL_0_9_7b.
```
  5964e95c
- make update. · f78ae9c0
  Richard Levitte authored Apr 10, 2003
  
  f78ae9c0
- New NEWS · e072e16e
  Richard Levitte authored Apr 10, 2003
  
  e072e16e
- Remove all those infernal stupid CR characters · 7a79b560
  Richard Levitte authored Apr 10, 2003
  
  7a79b560
- There's a problem building shared libraries on the sco5-gcc target. However, · 74b0c41e
  Richard Levitte authored Apr 10, 2003
```
it's time for a release, so I'm just adding an enty in PROBLEMS, and will
hopefully solve this for a later release
```
  74b0c41e
- Explicitely tell the compiler we're mips3 for the target irix-mips3-cc. · bbfbd4b2
  Richard Levitte authored Apr 10, 2003
  
  bbfbd4b2
- Only call redirected rsa_sign or rsa_verify if the pointer is set. · 88ec5a63
  Dr. Stephen Henson authored Apr 10, 2003
```
This allows, for example, a smart card to redirect rsa_sign and keep
the default rsa_verify.
```
  88ec5a63
- Typo. · 75fcbb43
  Dr. Stephen Henson authored Apr 10, 2003
  
  75fcbb43