| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2015-06-13 | Add comments about how the CBS constants are constructed. |   doug | 2 | -22/+84 |
| 2015-06-13 | Reject long-form tags in CBS_peek_asn1_tag. | doug | 2 | -2/+16 |
| 2015-06-13 | Fix bad indenting in LibreSSL. | doug | 8 | -18/+18 |
| 2015-06-11 | Avoid an infinite loop that can occur when verifying a message with an |   jsing | 1 | -2/+2 |
| 2015-06-11 | Avoid a potential out-of-bounds read in X509_cmp_time(), due to missing | jsing | 1 | -4/+27 |
| 2015-06-11 | Avoid an infinite loop that can be triggered by parsing an ASN.1 | jsing | 1 | -3/+8 |
| 2015-06-05 | Fix library search path so we link against the freshly built libcrypto.so |   tobiasu | 1 | -2/+2 |
| 2015-05-26 | Use a relative path against BSDOBJDIR to pick libcrypto; makes cross-lib |   miod | 1 | -2/+2 |
| 2015-05-26 | Add OPENSSL_NO_EGD to opensslfeatures.h. |   bcook | 1 | -0/+1 |
| 2015-05-25 | Make SSL_CIPHER_get_bits() report ChaCha20-Poly1305 ciphers as using |   guenther | 2 | -8/+8 |
| 2015-05-24 | Maximilian dot Fillinger at uni-duesseldorf dot de |   schwarze | 1 | -72/+0 |
| 2015-05-23 | bump to version 2.2 | bcook | 1 | -2/+2 |
| 2015-05-20 | No need to check the return value of memcpy() if you actually checked this | miod | 1 | -3/+2 |
| 2015-05-17 | Record inter-library dependencies between libcrypto, libssl and libtls |   kettenis | 3 | -1/+5 |
| 2015-05-15 | Fix return paths with missing EVP_CIPHER_CTX_cleanup() calls. |   jsg | 7 | -17/+20 |
| 2015-04-30 | use strdup() to init string |   deraadt | 1 | -3/+2 |
| 2015-04-29 | Add whitespace and replace OPENSSL_free with free in documentation. | doug | 6 | -22/+22 |
| 2015-04-29 | Call CBB_add_space() rather than reimplementing it. | doug | 2 | -4/+4 |
| 2015-04-29 | Rename cbb_buffer_add_u to cbb_add_u and remove redundant code. | doug | 2 | -30/+12 |
| 2015-04-29 | Added len_len error checking for internal cbb_buffer_add_u(). | doug | 2 | -2/+8 |
| 2015-04-29 | Call CBS_mem_equal() rather than reimplementing it. | doug | 2 | -6/+4 |
| 2015-04-29 | Avoid NULL deref in CBS_get_any_asn1_element(). | doug | 2 | -4/+6 |
| 2015-04-29 | Added error checking for len argument in cbs_get_u(). | doug | 2 | -2/+8 |
| 2015-04-29 | free() can handle NULL. | doug | 2 | -16/+8 |
| 2015-04-29 | Add missing BN_CTX_end() calls. | doug | 4 | -18/+18 |
| 2015-04-25 | Don't ignore the reference count in X509_STORE_free. | doug | 1 | -1/+5 |
| 2015-04-25 | Check for invalid leading zeros in CBS_get_asn1_uint64. | doug | 2 | -6/+16 |
| 2015-04-23 | Do not need to buf[0] = 0 before strlcpy(buf, ... | deraadt | 1 | -2/+1 |
| 2015-04-15 | Clean up the ssl_bytes_to_cipher_list() API - rather than having the | jsing | 6 | -42/+30 |
| 2015-04-12 | Remove d2i_X509_PKEY and i2d_X509_PKEY from the SSLeay days. | doug | 2 | -44/+2 |
| 2015-04-11 | Send OPENSSL_issetugid() straight to hell, no final cigarette. | deraadt | 2 | -15/+1 |
| 2015-04-11 | Remove all getenv() calls, especially those wrapped by issetugid(). | deraadt | 7 | -60/+16 |
| 2015-04-06 | readdir() is thread-safe when DIR handles aren't shared, so delete the lock. | guenther | 2 | -6/+2 |
| 2015-03-31 | Nuke the OPENSSL_MAX_TLS1_2_CIPHER_LENGTH hack - this has to be enabled at | jsing | 4 | -44/+4 |
| 2015-03-27 | Factor out the init_buf initialisation code, rather than duplicating it | jsing | 16 | -206/+112 |
| 2015-03-27 | BUF_MEM_free() has its own explicit NULL check. | jsing | 2 | -18/+12 |
| 2015-03-21 | Fix indentation that incorrectly implies a different control flow. | doug | 3 | -8/+11 |
| 2015-03-20 | Fix a memory leak in an error path. | doug | 1 | -1/+3 |
| 2015-03-19 | Fix several crash causing defects from OpenSSL. |   tedu | 13 | -64/+166 |
| 2015-03-15 | Avoid a NULL pointer deref when X509_get_pubkey() returns NULL. | doug | 1 | -2/+4 |
| 2015-03-11 | delay EVP_MD_CTX_init so we don't forget to clean it up. | tedu | 2 | -6/+8 |
| 2015-03-08 | Reject DH keys sent by a server if they are considered too small; inspired | miod | 2 | -2/+24 |
| 2015-03-02 | Fix a minor information leak that was introduced in t1_lib.c r1.71, whereby | jsing | 2 | -4/+4 |
| 2015-02-25 | Fix CVE-2014-3570: properly calculate the square of a BIGNUM value. | bcook | 3 | -645/+294 |
| 2015-02-25 | Fix CVE-2015-0205: Do not accept client authentication with Diffie-Hellman | bcook | 2 | -4/+4 |
| 2015-02-23 | fourth batch of perlpod(1) to mdoc(7) conversion | schwarze | 18 | -1273/+0 |
| 2015-02-22 | Bump libcrypto and libssl majors, due to various recent churn. | jsing | 2 | -2/+2 |
| 2015-02-22 | Reluctantly add server-side support for TLS_FALLBACK_SCSV. | jsing | 15 | -25/+159 |
| 2015-02-22 | There is not much point constructing an SSL_CIPHER, then calling | jsing | 2 | -14/+6 |
| 2015-02-22 | Remove IMPLEMENT_STACK_OF noops. | jsing | 3 | -6/+3 |
