| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Make it substantially easier to identify protocol version requirements |   jsing | 2014-05-29 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | by adding an enc_flags field to the ssl3_enc_method, specifying four flags that are used with this field and providing macros for evaluating these conditions. Currently the version requirements are identified by continually checking the version number and other criteria. This change also adds separate SSL3_ENC_METHOD data for TLS v1.1 and v1.2, since they have different enc_flags from TLS v1. Based on changes in OpenSSL head. No objection from miod@ | |||||
| * | There is no point in checking if a pointer is non-NULL before calling free, | jsing | 2014-05-28 | 1 | -25/+14 | |
| | | | | | | | | | since free already does this for us. Also remove some pointless NULL assignments, where the result from malloc(3) is immediately assigned to the same variable. ok miod@ | |||||
| * | Replace the following logic: |   miod | 2014-05-26 | 1 | -8/+10 | |
| | | | | | | | | | | | | | | | | | | | | | | if (nothing to allocate) ptr = malloc(1) else { if ((ptr = malloc(size to allocate)) memcpy(ptr, data to copy, size to allocate) } if (ptr == NULL) OMG ERROR with a saner logic where the NULL pointer check if moved to the actual malloc branch, so that we do not need to malloc a single byte, just to avoid having a NULL pointer. Whoever thought allocating a single byte was a smart idea was obviously not taking his meds. ok beck@ guenther@ | |||||
| * | Remove TLS_DEBUG, SSL_DEBUG, CIPHER_DEBUG and OPENSSL_RI_DEBUG. Much of | jsing | 2014-05-25 | 1 | -24/+0 | |
| | | | | | | | | this is sporadic, hacked up and can easily be put back in an improved form should we ever need it. ok miod@ | |||||
| * | Use C99 initialisers for SSL3_ENC_METHOD structs. | jsing | 2014-05-24 | 1 | -14/+16 | |
| | | | | | ok miod@ | |||||
| * | Clean up the SSL cipher initialisation and use C99 initialisers for | jsing | 2014-05-23 | 1 | -1709/+1712 | |
| | | | | | | | clarity, grepability and to protect from future field reordering/removal. ok miod@ | |||||
| * | There are two actual uses of e_os2.h in libssl - an OPENSSL_GLOBAL (an | jsing | 2014-05-22 | 1 | -1/+1 | |
| | | | | | | | | | | empty define) and an OPENSSL_EXTERN (which is defined as, well... extern). The use of OPENSSL_EXTERN is already inconsistent since the lines above and below just use plain old "extern". Expand the two uses of these macros and stop including e_os2.h in libssl. ok miod@ | |||||
| * | Stop including kssl_lcl.h and nuke it from orbit - it is a no-op now. | jsing | 2014-05-22 | 1 | -1/+0 | |
| | | | | | ok beck@ miod@ | |||||
| * | KSSL is dead... nuke KSSL_DEBUG from orbit. | jsing | 2014-05-20 | 1 | -3/+0 | |
| | | | | | ok beck@ miod@ | |||||
| * | deleted seed some time ago |   tedu | 2014-05-17 | 1 | -101/+0 | |
| | | ||||||
| * | Remove SRP and Kerberos support from libssl. These are complex protocols | tedu | 2014-05-05 | 1 | -445/+0 | |
| | | | | | | all on their own and we can't effectively maintain them without using them, which we don't. If the need arises, the code can be resurrected. | |||||
| * | More KNF, things that couldn't be verified with md5(1), and some whitespace |   mcbride | 2014-04-24 | 1 | -7/+9 | |
| | | | | | I missed on the first go around. | |||||
| * | KNF | mcbride | 2014-04-24 | 1 | -99/+181 | |
| | | ||||||
| * | more malloc/realloc/calloc cleanups; ok beck kettenis |   deraadt | 2014-04-21 | 1 | -2/+1 | |
| | | ||||||
| * | More KNF and style consistency tweaks |   guenther | 2014-04-19 | 1 | -8/+9 | |
| | | ||||||
| * | spacing | tedu | 2014-04-18 | 1 | -10/+11 | |
| | | ||||||
| * | whack a bunch of disabled code. ok beck lteo | tedu | 2014-04-17 | 1 | -169/+0 | |
| | | ||||||
| * | always build in RSA and DSA. ok deraadt miod | tedu | 2014-04-17 | 1 | -42/+3 | |
| | | ||||||
| * | Change library to use intrinsic memory allocation functions instead of |   beck | 2014-04-17 | 1 | -14/+14 | |
| | | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | |||||
| * | add back SRP. i was being too greedy. | tedu | 2014-04-16 | 1 | -0/+209 | |
| | | ||||||
| * | disentangle SRP code from TLS | tedu | 2014-04-16 | 1 | -209/+0 | |
| | | ||||||
| * | make OPENSSL_NO_HEARTBLEED the default and only option. ok deraadt miod | tedu | 2014-04-14 | 1 | -21/+0 | |
| | | ||||||
| * | First pass at applying KNF to the OpenSSL code, which almost makes it | jsing | 2014-04-14 | 1 | -2688/+2605 | |
| | | | | | | readable. This pass is whitespace only and can readily be verified using tr and md5. | |||||
| * | Do not include "e_os.h" anymore. Simply pull in the necessary headers. |   mpi | 2014-04-13 | 1 | -2/+2 | |
| | | | | | ok miod@, deraadt@ | |||||
| * | remove more cases of MS_STATIC, MS_CALLBACK, and MS_FAR. Did you | deraadt | 2014-04-13 | 1 | -1/+1 | |
| | | | | | | | | know that MS_STATIC doesn't mean it is static? How far can lies and half-truths be layered? I wonder if anyone got fooled, and actually returned a pointer.. ok beck | |||||
| * | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 1 | -11/+23 | |
| | | ||||||
| * | SECURITY fixes backported from openssl-1.0.1f. ok mikeb@ |   jca | 2014-02-27 | 1 | -1/+1 | |
| | | | | | | | | | | | | | CVE-2013-4353 NULL pointer dereference with crafted Next Protocol Negotiation record in TLS handshake. Upstream: 197e0ea CVE-2013-6449 Fix crash with crafted traffic from a TLS 1.2 client. Upstream: ca98926, 0294b2b CVE-2013-6450 Fix DTLS retransmission from previous session. Upstream: 3462896 | |||||
| * | resolve conflicts |   djm | 2012-10-13 | 1 | -21/+965 | |
| | | ||||||
| * | OpenSSL 1.0.0f: merge | djm | 2012-01-05 | 1 | -0/+3 | |
| | | ||||||
| * | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 1 | -0/+6 | |
| | | ||||||
| * | resolve conflicts, fix local changes | djm | 2010-10-01 | 1 | -772/+1475 | |
| | | ||||||
| * | pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from |   markus | 2009-11-10 | 1 | -0/+3 | |
| | | | | | openssl 0.9.8l; crank minor version; ok djm@ deraadt@; initially from jsg@ | |||||
| * | update to openssl-0.9.8i; tested by several, especially krw@ | djm | 2009-01-05 | 1 | -20/+20 | |
| | | ||||||
| * | resolve conflicts | djm | 2008-09-06 | 1 | -337/+1161 | |
| | | ||||||
| * | resolve conflicts | djm | 2006-06-27 | 1 | -6/+6 | |
| | | ||||||
| * | resolve conflicts | djm | 2005-04-29 | 1 | -37/+37 | |
| | | ||||||
| * | merge 0.9.7b with local changes; crank majors for libssl/libcrypto | markus | 2003-05-12 | 1 | -38/+155 | |
| | | ||||||
| * | merge openssl-0.9.7-beta3, tested on vax by miod@ | markus | 2002-09-10 | 1 | -4/+4 | |
| | | ||||||
| * | do not propose IDEA cipher on SSL connection. tested by beck |   itojun | 2002-06-07 | 1 | -0/+2 | |
| | | | | | noticed by Sverre Froyen <sverre@viewmark.com> | |||||
| * | OpenSSL 0.9.7 stable 2002 05 08 merge | beck | 2002-05-15 | 1 | -51/+352 | |
| | | ||||||
| * | openssl-engine-0.9.6a merge | beck | 2001-06-22 | 1 | -24/+64 | |
| | | ||||||
| * | openssl-engine-0.9.6 merge | beck | 2000-12-15 | 1 | -7/+7 | |
| | | ||||||
| * | OpenSSL 0.9.5a merge | beck | 2000-04-15 | 1 | -25/+36 | |
| | | ||||||
| * | OpenSSL 0.9.5 merge | beck | 2000-03-19 | 1 | -78/+299 | |
| | | | | | | | *warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs | |||||
| * | OpenSSL 0.9.4 merge | beck | 1999-09-29 | 1 | -118/+264 | |
| | | ||||||
| * | Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD build |   ryker | 1998-10-05 | 1 | -0/+961 | |
| functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible. | ||||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |