Commits · d2d09bf68c2e6a28ba7f6876869c32a7b4779885 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

19 Jan, 2012 3 commits
- change version to beta3-dev · d2d09bf6
  Dr. Stephen Henson authored Jan 19, 2012
  
  d2d09bf6
- update files for beta2 release · e2dfb655
  Dr. Stephen Henson authored Jan 19, 2012
  
  OpenSSL_1_0_1-beta2
  
  e2dfb655
- prepare for beta2 · 463e76b6
  Dr. Stephen Henson authored Jan 19, 2012
  
  463e76b6
18 Jan, 2012 2 commits
- Fix for DTLS DoS issue introduced by fix for CVE-2011-4109. · 2dc4b0db
  Dr. Stephen Henson authored Jan 18, 2012
```
Thanks to Antonio Martin, Enterprise Secure Access Research and
Development, Cisco Systems, Inc. for discovering this bug and
preparing a fix. (CVE-2012-0050)
```
  2dc4b0db
- undef some symbols that cause problems with make depend for fips builds · 7b23c126
  Dr. Stephen Henson authored Jan 18, 2012
  
  7b23c126
17 Jan, 2012 1 commit
- fix CHANGES entry · 25e3d222
  Dr. Stephen Henson authored Jan 17, 2012
  
  25e3d222
15 Jan, 2012 3 commits
- 1.0.1-specific OPNESSL vs. OPENSSL typo. · c8e0b5d7
  Andy Polyakov authored Jan 15, 2012
```
PR: 2613
Submitted by: Leena Heino
```
  c8e0b5d7
- Fix OPNESSL vs. OPENSSL typos [from HEAD]. · 4fb7e2b4
  Andy Polyakov authored Jan 15, 2012
```
PR: 2613
Submitted by: Leena Heino
```
  4fb7e2b4
- fix warning · 9138e3c0
  Dr. Stephen Henson authored Jan 15, 2012
  
  9138e3c0
12 Jan, 2012 2 commits
- Sanitize usage of <ctype.h> functions. It's important that characters · 9b2a2966
  Andy Polyakov authored Jan 12, 2012
```
are passed zero-extended, not sign-extended [from HEAD].
PR: 2682
```
  9b2a2966
- sparcv9cap.c: omit unused variable. · b7b4a9fa
  Andy Polyakov authored Jan 12, 2012
  
  b7b4a9fa
11 Jan, 2012 5 commits
- doc/apps: formatting fixes [from HEAD]. · 1fb07a7d
  Andy Polyakov authored Jan 11, 2012
```
PR: 2683
Submitted by: Annie Yousar
```
  1fb07a7d
- speed.c: typo in pkey_print_message [from HEAD]. · b9cbcaad
  Andy Polyakov authored Jan 11, 2012
```
PR: 2681
Submitted by: Annie Yousar
```
  b9cbcaad
- ecdsa.pod: typo. · c6706a6f
  Andy Polyakov authored Jan 11, 2012
```
PR: 2678
Submitted by: Annie Yousar
```
  c6706a6f
- asn1/t_x509.c: fix serial number print, harmonize with a_int.c [from HEAD]. · 958e6a75
  Andy Polyakov authored Jan 11, 2012
```
PR: 2675
Submitted by: Annie Yousar
```
  958e6a75
- aes-sparcv9.pl: clean up regexp [from HEAD]. · 39797772
  Andy Polyakov authored Jan 11, 2012
```
PR: 2685
```
  39797772
05 Jan, 2012 6 commits
- PR: 2652 · 285d9189
  Dr. Stephen Henson authored Jan 05, 2012
```
Submitted by: Arpadffy Zoltan <Zoltan.Arpadffy@scientificgames.se>

OpenVMS fixes.
```
  285d9189
- Update for 0.9.8s and 1.0.0f. · 767d3e00
  Bodo Möller authored Jan 05, 2012
```
(While the 1.0.0f CHANGES entry on VOS PRNG seeding was missing
in the 1.0.1 branch, the actual code is here already.)
```
  767d3e00
- Fix for builds without DTLS support. · 409d2a1b
  Bodo Möller authored Jan 05, 2012
```
Submitted by: Brian Carlstrom
```
  409d2a1b
- PR: 2671 · e0b9678d
  Dr. Stephen Henson authored Jan 05, 2012
```
Submitted by: steve

Update maximum message size for certifiate verify messages to support
4096 bit RSA keys again as TLS v1.2 messages is two bytes longer.
```
  e0b9678d
- Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> · 166dea6a
  Dr. Stephen Henson authored Jan 05, 2012
```
Reviewed by: steve

Send fatal alert if heartbeat extension has an illegal value.
```
  166dea6a
- disable heartbeats if tlsext disabled · 52bef4d6
  Dr. Stephen Henson authored Jan 05, 2012
  
  52bef4d6
04 Jan, 2012 9 commits
- update CHANGES · 801e5ef8
  Dr. Stephen Henson authored Jan 04, 2012
  
  801e5ef8
- Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de> · 0044739a
  Dr. Stephen Henson authored Jan 04, 2012
```
Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.
```
  0044739a
- Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) · 4e44bd36
  Dr. Stephen Henson authored Jan 04, 2012
  
  4e44bd36
- fix CHANGES · 0cffb0cd
  Dr. Stephen Henson authored Jan 04, 2012
  
  0cffb0cd
- Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619) · aaa3850c
  Dr. Stephen Henson authored Jan 04, 2012
  
  aaa3850c
- Check GOST parameters are not NULL (CVE-2012-0027) · a17b5d5a
  Dr. Stephen Henson authored Jan 04, 2012
  
  a17b5d5a
- Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577) · 2f97765b
  Dr. Stephen Henson authored Jan 04, 2012
  
  2f97765b
- fix warnings · 3205ca8d
  Dr. Stephen Henson authored Jan 04, 2012
  
  3205ca8d
- Submitted by: Adam Langley <agl@chromium.org> · 1cb4d65b
  Dr. Stephen Henson authored Jan 04, 2012
```
Reviewed by: steve

Fix memory leaks.
```
  1cb4d65b
03 Jan, 2012 2 commits
- only send heartbeat extension from server if client sent one · 7b2dd292
  Dr. Stephen Henson authored Jan 03, 2012
  
  7b2dd292
- prepare for 1.0.1-beta1 · ab585551
  Dr. Stephen Henson authored Jan 03, 2012
  
  OpenSSL_1_0_1-beta1
  
  ab585551
02 Jan, 2012 4 commits
- OpenSSL 1.0.1 is now in beta. · 6cf0d7b9
  Dr. Stephen Henson authored Jan 02, 2012
  
  6cf0d7b9
- incomplete provisional OAEP CMS decrypt support · 9d972207
  Dr. Stephen Henson authored Jan 02, 2012
  
  9d972207
- make update · d9834ff2
  Dr. Stephen Henson authored Jan 02, 2012
  
  d9834ff2
- update NEWS · d9c3ba05
  Dr. Stephen Henson authored Jan 02, 2012
  
  d9c3ba05
31 Dec, 2011 3 commits
- recognise HEARTBEATS in mkdef.pl script · 03467ce6
  Dr. Stephen Henson authored Dec 31, 2011
  
  03467ce6
- update CHANGES · 6e750fcb
  Dr. Stephen Henson authored Dec 31, 2011
  
  6e750fcb
- PR: 2658 · bd6941cf
  Dr. Stephen Henson authored Dec 31, 2011
```
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Support for TLS/DTLS heartbeats.
```
  bd6941cf