Commits · fc6800d19f4a0ca852c07128952d4c347d2d7065 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Feb 09, 2012
- Modify client hello version when renegotiating to enhance interop with · fc6800d1
  Dr. Stephen Henson authored Feb 09, 2012
```
some servers.
```
  fc6800d1
Feb 02, 2012
- bn_nist.c: make new optimized code dependent on BN_LLONG [from HEAD]. · d06f047b
  Andy Polyakov authored Feb 02, 2012
  
  d06f047b
- hpux-parisc2-*: engage assembler [from HEAD] and make it link. · ddc899ba
  Andy Polyakov authored Feb 02, 2012
  
  ddc899ba
Jan 25, 2012
- ghash-x86.pl: engage original MMX version in no-sse2 builds [from HEAD]. · bd479e25
  Andy Polyakov authored Jan 25, 2012
  
  bd479e25
- x86_64-xlate.pl: 1.0.1-specific typo. · eaf5bd16
  Andy Polyakov authored Jan 25, 2012
  
  eaf5bd16
Jan 24, 2012
- only include bn.h once · d7ecc206
  Dr. Stephen Henson authored Jan 24, 2012
  
  d7ecc206
- only include evp.h once · 11ea212e
  Dr. Stephen Henson authored Jan 24, 2012
  
  11ea212e
- only include string.h once · cb29d8c1
  Dr. Stephen Henson authored Jan 24, 2012
  
  cb29d8c1
Jan 22, 2012
- return error if md is NULL · adcea5a0
  Dr. Stephen Henson authored Jan 22, 2012
  
  adcea5a0
Jan 21, 2012
- cryptlib.c: make even non-Windows builds "strtoull-agnostic" [from HEAD]. · f02f7c2c
  Andy Polyakov authored Jan 21, 2012
  
  f02f7c2c
- x86_64-xlate.pl: proper solution for RT#2620 [from HEAD]. · a1e44cc1
  Andy Polyakov authored Jan 21, 2012
  
  a1e44cc1
Jan 19, 2012
- change version to beta3-dev · d2d09bf6
  Dr. Stephen Henson authored Jan 19, 2012
  
  d2d09bf6
- update files for beta2 release · e2dfb655
  Dr. Stephen Henson authored Jan 19, 2012
  
  OpenSSL_1_0_1-beta2
  
  e2dfb655
- prepare for beta2 · 463e76b6
  Dr. Stephen Henson authored Jan 19, 2012
  
  463e76b6
Jan 18, 2012
- Fix for DTLS DoS issue introduced by fix for CVE-2011-4109. · 2dc4b0db
  Dr. Stephen Henson authored Jan 18, 2012
```
Thanks to Antonio Martin, Enterprise Secure Access Research and
Development, Cisco Systems, Inc. for discovering this bug and
preparing a fix. (CVE-2012-0050)
```
  2dc4b0db
- undef some symbols that cause problems with make depend for fips builds · 7b23c126
  Dr. Stephen Henson authored Jan 18, 2012
  
  7b23c126
Jan 17, 2012
- fix CHANGES entry · 25e3d222
  Dr. Stephen Henson authored Jan 17, 2012
  
  25e3d222
Jan 15, 2012
- 1.0.1-specific OPNESSL vs. OPENSSL typo. · c8e0b5d7
  Andy Polyakov authored Jan 15, 2012
```
PR: 2613
Submitted by: Leena Heino
```
  c8e0b5d7
- Fix OPNESSL vs. OPENSSL typos [from HEAD]. · 4fb7e2b4
  Andy Polyakov authored Jan 15, 2012
```
PR: 2613
Submitted by: Leena Heino
```
  4fb7e2b4
- fix warning · 9138e3c0
  Dr. Stephen Henson authored Jan 15, 2012
  
  9138e3c0
Jan 12, 2012
- Sanitize usage of <ctype.h> functions. It's important that characters · 9b2a2966
  Andy Polyakov authored Jan 12, 2012
```
are passed zero-extended, not sign-extended [from HEAD].
PR: 2682
```
  9b2a2966
- sparcv9cap.c: omit unused variable. · b7b4a9fa
  Andy Polyakov authored Jan 12, 2012
  
  b7b4a9fa
Jan 11, 2012
- doc/apps: formatting fixes [from HEAD]. · 1fb07a7d
  Andy Polyakov authored Jan 11, 2012
```
PR: 2683
Submitted by: Annie Yousar
```
  1fb07a7d
- speed.c: typo in pkey_print_message [from HEAD]. · b9cbcaad
  Andy Polyakov authored Jan 11, 2012
```
PR: 2681
Submitted by: Annie Yousar
```
  b9cbcaad
- ecdsa.pod: typo. · c6706a6f
  Andy Polyakov authored Jan 11, 2012
```
PR: 2678
Submitted by: Annie Yousar
```
  c6706a6f
- asn1/t_x509.c: fix serial number print, harmonize with a_int.c [from HEAD]. · 958e6a75
  Andy Polyakov authored Jan 11, 2012
```
PR: 2675
Submitted by: Annie Yousar
```
  958e6a75
- aes-sparcv9.pl: clean up regexp [from HEAD]. · 39797772
  Andy Polyakov authored Jan 11, 2012
```
PR: 2685
```
  39797772
Jan 05, 2012
- PR: 2652 · 285d9189
  Dr. Stephen Henson authored Jan 05, 2012
```
Submitted by: Arpadffy Zoltan <Zoltan.Arpadffy@scientificgames.se>

OpenVMS fixes.
```
  285d9189
- Update for 0.9.8s and 1.0.0f. · 767d3e00
  Bodo Möller authored Jan 05, 2012
```
(While the 1.0.0f CHANGES entry on VOS PRNG seeding was missing
in the 1.0.1 branch, the actual code is here already.)
```
  767d3e00
- Fix for builds without DTLS support. · 409d2a1b
  Bodo Möller authored Jan 05, 2012
```
Submitted by: Brian Carlstrom
```
  409d2a1b
- PR: 2671 · e0b9678d
  Dr. Stephen Henson authored Jan 05, 2012
```
Submitted by: steve

Update maximum message size for certifiate verify messages to support
4096 bit RSA keys again as TLS v1.2 messages is two bytes longer.
```
  e0b9678d
- Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> · 166dea6a
  Dr. Stephen Henson authored Jan 05, 2012
```
Reviewed by: steve

Send fatal alert if heartbeat extension has an illegal value.
```
  166dea6a
- disable heartbeats if tlsext disabled · 52bef4d6
  Dr. Stephen Henson authored Jan 05, 2012
  
  52bef4d6
Jan 04, 2012
- update CHANGES · 801e5ef8
  Dr. Stephen Henson authored Jan 04, 2012
  
  801e5ef8
- Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de> · 0044739a
  Dr. Stephen Henson authored Jan 04, 2012
```
Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.
```
  0044739a
- Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576) · 4e44bd36
  Dr. Stephen Henson authored Jan 04, 2012
  
  4e44bd36
- fix CHANGES · 0cffb0cd
  Dr. Stephen Henson authored Jan 04, 2012
  
  0cffb0cd
- Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619) · aaa3850c
  Dr. Stephen Henson authored Jan 04, 2012
  
  aaa3850c
- Check GOST parameters are not NULL (CVE-2012-0027) · a17b5d5a
  Dr. Stephen Henson authored Jan 04, 2012
  
  a17b5d5a
- Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577) · 2f97765b
  Dr. Stephen Henson authored Jan 04, 2012
  
  2f97765b