Commits · fecb4ff3314f9b8b790608207363ff520f92e165 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

09 Dec, 2011 1 commit
- x86-mont.pl: fix bug in integer-only squaring path. · fecb4ff3
  Andy Polyakov authored Dec 09, 2011
```
PR: 2648
```
  fecb4ff3
06 Dec, 2011 1 commit
- The default CN prompt message can be confusing when often the CN needs to · 2a4adf19
  Dr. Stephen Henson authored Dec 06, 2011
```
 be the server FQDN: change it.
[Reported by PSW Group]
```
  2a4adf19
02 Dec, 2011 3 commits
- Resolve a stack set-up race condition (if the list of compression · 44c854dd
  Bodo Möller authored Dec 02, 2011
```
methods isn't presorted, it will be sorted on first read).

Submitted by: Adam Langley
```
  44c854dd
- Fix ecdsatest.c. · 47091035
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Emilia Kasper
```
  47091035
- Fix BIO_f_buffer(). · f3d51d77
  Bodo Möller authored Dec 02, 2011
```
Submitted by: Adam Langley
Reviewed by: Bodo Moeller
```
  f3d51d77
14 Nov, 2011 1 commit
- Configure: fix corruption in RC4 implementation in darwin64-x86_64-cc. · 70d3b4b6
  Andy Polyakov authored Nov 14, 2011
  
  70d3b4b6
05 Nov, 2011 1 commit
- ppc.pl: fix bug in bn_mul_comba4 [from HEAD]. · 2fb94e48
  Andy Polyakov authored Nov 05, 2011
```
PR: 2636
Submitted by: Charles Bryant
```
  2fb94e48
30 Oct, 2011 1 commit
- Teach mkshared.com to have a look for disabled algorithms in opensslconf.h · 1b848939
  Richard Levitte authored Oct 30, 2011
  
  1b848939
27 Oct, 2011 2 commits

PR: 2628 · 68b53300

Dr. Stephen Henson authored Oct 27, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Send alert instead of assertion failure for incorrectly formatted DTLS
fragments.

68b53300

PR: 2628 · da7ae62a

Dr. Stephen Henson authored Oct 27, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix for ECC keys and DTLS.

da7ae62a

26 Oct, 2011 1 commit

PR: 2632 · f53337b8

Dr. Stephen Henson authored Oct 26, 2011

Submitted by: emmanuel.azencot@bull.net
Reviewed by: steve

Return -1 immediately if not affine coordinates as BN_CTX has not been
set up.

f53337b8

19 Oct, 2011 1 commit
- BN_BLINDING multi-threading fix. · f70a5895
  Bodo Möller authored Oct 19, 2011
```
Submitted by: Emilia Kasper (Google)
```
  f70a5895
13 Oct, 2011 3 commits
- use -no_ecdhe when using -no_dhe · d41bbd0d
  Bodo Möller authored Oct 13, 2011
  
  d41bbd0d
- Clarify warning · 49956294
  Bodo Möller authored Oct 13, 2011
  
  49956294
- In ssl3_clear, preserve s3->init_extra along with s3->rbuf. · 48373e55
  Bodo Möller authored Oct 13, 2011
```
Submitted by: Bob Buckholz <bbuckholz@google.com>
```
  48373e55
09 Oct, 2011 1 commit

PR: 2482 · 42369021

Dr. Stephen Henson authored Oct 09, 2011

Submitted by: Rob Austein <sra@hactrn.net>
Reviewed by: steve

Don't allow inverted ranges in RFC3779 code, discovered by Frank Ellermann.

42369021

26 Sep, 2011 1 commit
- fix signed/unsigned warning · b00fe7ce
  Dr. Stephen Henson authored Sep 26, 2011
  
  b00fe7ce
23 Sep, 2011 4 commits

use keyformat for -x509toreq, don't hard code PEM · 872e3fd5
Dr. Stephen Henson authored Sep 23, 2011

872e3fd5

PR: 2606 · c11ada6c

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Christoph Viethen <cv@kawo2.rwth-aachen.de>
Reviewed by: steve

Handle timezones correctly in UTCTime.

c11ada6c

PR: 2602 · 8f096885

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS bug which prevents manual MTU setting

8f096885

PR: 2347 · 0b96f60a

Dr. Stephen Henson authored Sep 23, 2011

Submitted by: Tomas Mraz <tmraz@redhat.com>
Reviewed by: steve

Fix usage message.

0b96f60a

06 Sep, 2011 4 commits
- prepare for next version · ab06ff6b
  Dr. Stephen Henson authored Sep 06, 2011
  
  ab06ff6b
- update versions and dates for release · bba8456e
  Dr. Stephen Henson authored Sep 06, 2011
  
  OpenSSL_1_0_0e
  
  bba8456e
- update NEWS · b493a057
  Dr. Stephen Henson authored Sep 06, 2011
  
  b493a057
- Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the past · c2a8133d
  Dr. Stephen Henson authored Sep 06, 2011
```
produce an error (CVE-2011-3207)

Fix TLS ephemeral DH crash bug (CVE-2011-3210)
```
  c2a8133d
05 Sep, 2011 3 commits
- (EC)DH memory handling fixes. · e935440a
  Bodo Möller authored Sep 05, 2011
```
Submitted by: Adam Langley
```
  e935440a
- Fix memory leak on bad inputs. · 8eaf563c
  Bodo Möller authored Sep 05, 2011
  
  8eaf563c
- "make update" · 80d7e6b0
  Bodo Möller authored Sep 05, 2011
  
  80d7e6b0
02 Sep, 2011 2 commits

Don't use *from++ in tolower as this is implemented as a macro on some · 9c44e332
Dr. Stephen Henson authored Sep 02, 2011
```
platforms. Thanks to Shayne Murray <Shayne.Murray@Polycom.com> for
reporting this issue.
```
9c44e332

PR: 2576 · b86f3197

Dr. Stephen Henson authored Sep 02, 2011

Submitted by: Doug Goldstein <cardoe@gentoo.org>
Reviewed by: steve

Include header file stdlib.h which is needed on some platforms to get
getenv() declaration.

b86f3197

01 Sep, 2011 9 commits
- update NEWS · 0875c005
  Dr. Stephen Henson authored Sep 01, 2011
  
  0875c005
- Add error checking to PKCS1_MGF1. From HEAD. · dd3a770e
  Dr. Stephen Henson authored Sep 01, 2011
  
  dd3a770e
- PR: 2340 · 64763ce0
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: "Mauro H. Leggieri" <mxmauro@caiman.com.ar>
Reviewed by: steve

Stop warnings if OPENSSL_NO_DGRAM is defined.
```
  64763ce0
- make timing attack protection unconditional · 2fffc29b
  Dr. Stephen Henson authored Sep 01, 2011
  
  2fffc29b
- PR: 2573 · d2650c3a
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS buffering and decryption bug.
```
  d2650c3a
- PR: 2589 · b5bd966e
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Initialise p pointer.
```
  b5bd966e
- PR: 2588 · e71f7786
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Close file pointer.
```
  e71f7786
- PR: 2586 · e3b95e6b
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Zero structure fields properly.
```
  e3b95e6b
- PR: 2586 · 658eeec7
  Dr. Stephen Henson authored Sep 01, 2011
```
Submitted by: Thomas Jarosch <thomas.jarosch@intra2net.com>
Reviewed by: steve

Fix brace mismatch.
```
  658eeec7
14 Aug, 2011 1 commit

Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA · e1c3d65f

Dr. Stephen Henson authored Aug 14, 2011

using OBJ xref utilities instead of string comparison with OID name.

This removes the arbitrary restriction on using SHA1 only with some ECC
ciphersuites.

e1c3d65f