Commits · ef7545a3e6d925e60252c5f5f435baeea8ad47bd · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Dec 19, 2011

PR: 2563 · ef7545a3

Dr. Stephen Henson authored Dec 19, 2011

Submitted by: Paul Green <Paul.Green@stratus.com>
Reviewed by: steve

Improved PRNG seeding for VOS.

ef7545a3

Dec 09, 2011
- x86-mont.pl: fix bug in integer-only squaring path. · fecb4ff3
  Andy Polyakov authored Dec 09, 2011
```
PR: 2648
```
  fecb4ff3
Dec 06, 2011
- The default CN prompt message can be confusing when often the CN needs to · 2a4adf19
  Dr. Stephen Henson authored Dec 06, 2011
```
 be the server FQDN: change it.
[Reported by PSW Group]
```
  2a4adf19
Dec 02, 2011
- Resolve a stack set-up race condition (if the list of compression · 44c854dd
  Bodo Möller authored Dec 02, 2011
```
methods isn't presorted, it will be sorted on first read).

Submitted by: Adam Langley
```
  44c854dd
- Fix ecdsatest.c. · 47091035
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Emilia Kasper
```
  47091035
- Fix BIO_f_buffer(). · f3d51d77
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Adam Langley
Reviewed by: Bodo Moeller
```
  f3d51d77
Nov 14, 2011
- Configure: fix corruption in RC4 implementation in darwin64-x86_64-cc. · 70d3b4b6
  Andy Polyakov authored Nov 14, 2011
  
  70d3b4b6
Nov 05, 2011
- ppc.pl: fix bug in bn_mul_comba4 [from HEAD]. · 2fb94e48
  Andy Polyakov authored Nov 05, 2011
```
PR: 2636
Submitted by: Charles Bryant
```
  2fb94e48
Oct 30, 2011
- Teach mkshared.com to have a look for disabled algorithms in opensslconf.h · 1b848939
  Richard Levitte authored Oct 30, 2011
  
  1b848939
Oct 27, 2011

PR: 2628 · 68b53300

Dr. Stephen Henson authored Oct 27, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Send alert instead of assertion failure for incorrectly formatted DTLS
fragments.

68b53300

PR: 2628 · da7ae62a

Dr. Stephen Henson authored Oct 27, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix for ECC keys and DTLS.

da7ae62a

Oct 26, 2011

PR: 2632 · f53337b8

Dr. Stephen Henson authored Oct 26, 2011

Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve

Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.

f53337b8

Oct 19, 2011
- BN_BLINDING multi-threading fix. · f70a5895
  Bodo Möller authored Oct 19, 2011
```
Submitted by: Emilia Kasper (Google)
```
  f70a5895
Oct 13, 2011
- use -no_ecdhe when using -no_dhe · d41bbd0d
  Bodo Möller authored Oct 13, 2011
  
  d41bbd0d
- Clarify warning · 49956294
  Bodo Möller authored Oct 13, 2011
  
  49956294
- In ssl3_clear, preserve s3->init_extra along with s3->rbuf. · 48373e55
  Bodo Möller authored Oct 13, 2011
```
Submitted by: Bob Buckholz <bbuckholz@google.com>
```
  48373e55
Oct 09, 2011

PR: 2482 · 42369021

Dr. Stephen Henson authored Oct 09, 2011

Submitted by: Rob Austein <sra@hactrn.net>
Reviewed by: steve

Don't allow inverted ranges in RFC3779 code, discovered by Frank Ellermann.

42369021

Sep 26, 2011
- fix signed/unsigned warning · b00fe7ce
  Dr. Stephen Henson authored Sep 26, 2011
  
  b00fe7ce
Sep 23, 2011

use keyformat for -x509toreq, don't hard code PEM · 872e3fd5
Dr. Stephen Henson authored Sep 23, 2011

872e3fd5

PR: 2606 · c11ada6c

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Christoph Viethen <cv@kawo2.rwth-aachen.de>
Reviewed by: steve

Handle timezones correctly in UTCTime.

c11ada6c

PR: 2602 · 8f096885

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS bug which prevents manual MTU setting

8f096885

PR: 2347 · 0b96f60a

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Tomas Mraz <tmraz@redhat.com>
Reviewed by: steve

Fix usage message.

0b96f60a

Sep 06, 2011
- prepare for next version · ab06ff6b
  Dr. Stephen Henson authored Sep 06, 2011
  
  ab06ff6b
- update versions and dates for release · bba8456e
  Dr. Stephen Henson authored Sep 06, 2011
  
  OpenSSL_1_0_0e
  
  bba8456e
- update NEWS · b493a057
  Dr. Stephen Henson authored Sep 06, 2011
  
  b493a057
- Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the past · c2a8133d
  Dr. Stephen Henson authored Sep 06, 2011
```
produce an error (CVE-2011-3207)

Fix TLS ephemeral DH crash bug (CVE-2011-3210)
```
  c2a8133d
Sep 05, 2011
- (EC)DH memory handling fixes. · e935440a
  Bodo Möller authored Sep 05, 2011
```
Submitted by: Adam Langley
```
  e935440a
- Fix memory leak on bad inputs. · 8eaf563c
  Bodo Möller authored Sep 05, 2011
  
  8eaf563c
- "make update" · 80d7e6b0
  Bodo Möller authored Sep 05, 2011
  
  80d7e6b0
Sep 02, 2011

Don't use *from++ in tolower as this is implemented as a macro on some · 9c44e332
Dr. Stephen Henson authored Sep 02, 2011
```
platforms. Thanks to Shayne Murray <Shayne.Murray@Polycom.com> for
reporting this issue.
```
9c44e332

PR: 2576 · b86f3197

Dr. Stephen Henson authored Sep 02, 2011

Submitted by: Doug Goldstein <cardoe@gentoo.org>
Reviewed by: steve

Include header file stdlib.h which is needed on some platforms to get
getenv() declaration.

b86f3197

Sep 01, 2011
- update NEWS · 0875c005
  Dr. Stephen Henson authored Sep 01, 2011
  
  0875c005
- Add error checking to PKCS1_MGF1. From HEAD. · dd3a770e
  Dr. Stephen Henson authored Sep 01, 2011
  
  dd3a770e
- PR: 2340 · 64763ce0
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: "Mauro H. Leggieri" <mxmauro@caiman.com.ar>
Reviewed by: steve

Stop warnings if OPENSSL_NO_DGRAM is defined.
```
  64763ce0
- make timing attack protection unconditional · 2fffc29b
  Dr. Stephen Henson authored Sep 01, 2011
  
  2fffc29b
- PR: 2573 · d2650c3a
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS buffering and decryption bug.
```
  d2650c3a
- PR: 2589 · b5bd966e
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Initialise p pointer.
```
  b5bd966e
- PR: 2588 · e71f7786
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Close file pointer.
```
  e71f7786
- PR: 2586 · e3b95e6b
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Zero structure fields properly.
```
  e3b95e6b
- PR: 2586 · 658eeec7
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Fix brace mismatch.
```
  658eeec7