Skip to content
  1. Dec 19, 2013
    • Dr. Stephen Henson's avatar
      Use version in SSL_METHOD not SSL structure. · ca989269
      Dr. Stephen Henson authored
      When deciding whether to use TLS 1.2 PRF and record hash algorithms
      use the version number in the corresponding SSL_METHOD structure
      instead of the SSL structure. The SSL structure version is sometimes
      inaccurate. Note: OpenSSL 1.0.2 and later effectively do this already.
      (CVE-2013-6449)
      ca989269
  2. Dec 18, 2013
  3. Dec 10, 2013
  4. Dec 09, 2013
  5. Dec 08, 2013
    • Dr. Stephen Henson's avatar
      make update · 60df657b
      Dr. Stephen Henson authored
      60df657b
    • Dr. Stephen Henson's avatar
      Avoid multiple locks in FIPS mode. · 17a2d080
      Dr. Stephen Henson authored
      PR: 3176.
      
      In FIPS mode ssleay_rand_bytes is only used for PRNG seeding and is
      performed in either a single threaded context (when the PRNG is first
      initialised) or under a lock (reseeding). To avoid multiple locks disable
      use of CRYPTO_LOCK_RAND in FIPS mode in ssleay_rand_bytes.
      (cherry picked from commit 53142f72c9b9c9bad2f39ca6200a4f04f5c8001c)
      17a2d080
  6. Dec 03, 2013
  7. Nov 27, 2013
  8. Nov 12, 2013
  9. Nov 11, 2013
  10. Nov 10, 2013
  11. Nov 09, 2013
  12. Nov 08, 2013
  13. Nov 06, 2013
  14. Nov 03, 2013
  15. Nov 01, 2013
    • Robin Seggelmann's avatar
      DTLS/SCTP Finished Auth Bug · 025f7dbd
      Robin Seggelmann authored
      PR: 2808
      
      With DTLS/SCTP the SCTP extension SCTP-AUTH is used to protect DATA and
      FORWARD-TSN chunks. The key for this extension is derived from the
      master secret and changed with the next ChangeCipherSpec, whenever a new
      key has been negotiated. The following Finished then already uses the
      new key.  Unfortunately, the ChangeCipherSpec and Finished are part of
      the same flight as the ClientKeyExchange, which is necessary for the
      computation of the new secret. Hence, these messages are sent
      immediately following each other, leaving the server very little time to
      compute the new secret and pass it to SCTP before the finished arrives.
      So the Finished is likely to be discarded by SCTP and a retransmission
      becomes necessary. To prevent this issue, the Finished of the client is
      still sent with the old key.
      (cherry picked from commit 9fb523ad)
      (cherry picked from commit b9ef52b0)
      025f7dbd
    • Robin Seggelmann's avatar
      DTLS/SCTP struct authchunks Bug · 44f4934b
      Robin Seggelmann authored
      PR: 2809
      
      DTLS/SCTP requires DATA and FORWARD-TSN chunks to be protected with
      SCTP-AUTH.  It is checked if this has been activated successfully for
      the local and remote peer. Due to a bug, however, the
      gauth_number_of_chunks field of the authchunks struct is missing on
      FreeBSD, and was therefore not considered in the OpenSSL implementation.
      This patch sets the corresponding pointer for the check correctly
      whether or not this bug is present.
      (cherry picked from commit f596e3c4)
      (cherry picked from commit b8140811)
      44f4934b
  16. Oct 20, 2013
    • Nick Mathewson's avatar
      453ca706
    • Dr. Stephen Henson's avatar
      Don't use RSA+MD5 with TLS 1.2 · 5e1ff664
      Dr. Stephen Henson authored
      Since the TLS 1.2 supported signature algorithms extension is less
      sophisticaed in OpenSSL 1.0.1 this has to be done in two stages.
      
      RSA+MD5 is removed from supported signature algorithms extension:
      any compliant implementation should never use RSA+MD5 as a result.
      
      To cover the case of a broken implementation using RSA+MD5 anyway
      disable lookup of MD5 algorithm in TLS 1.2.
      5e1ff664
  17. Oct 19, 2013
  18. Oct 13, 2013
  19. Oct 12, 2013
  20. Oct 09, 2013
  21. Oct 03, 2013
  22. Oct 01, 2013
  23. Sep 30, 2013
  24. Sep 22, 2013
  25. Sep 16, 2013