summaryrefslogtreecommitdiffstats
path: root/lib/libssl
AgeCommit message (Expand)AuthorFilesLines
2014-10-22Avoid a NULL pointer dereference that can be triggered byjsing2-4/+4
2014-10-22Place most of the RAND_* functions under #ifndef LIBRESSL_INTERNAL (somejsing1-1/+4
2014-10-22Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().jsing27-130/+101
2014-10-20digests: *_LONG_LOG2 is not used, stop talking about it.bcook7-28/+11
2014-10-20SSL: Fix memory leak in d2i_SSL_SESSION.bcook2-2/+4
2014-10-18None of these need to include <openssl/rand.h>jsing31-64/+31
2014-10-18Sort/group includes.jsing1-25/+26
2014-10-18Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes().jsing34-130/+76
2014-10-18Typical malloc() with size multiplication to reallocarray().doug3-12/+12
2014-10-16Get rid of the last remaining BUF_strdup and BUF_strlcpy and friends, usebeck5-10/+14
2014-10-15Disable SSLv3 by default.jsing2-2/+8
2014-10-15Only require an EC public key in tls1_set_ec_id(), if we need to providejsing2-8/+8
2014-10-15Add cipher aliases for DHE (the correct name for EDH) and ECDHE (thejsing4-8/+32
2014-10-14Bump libressl version string to 2.1.bcook1-2/+2
2014-10-13The return value on success of fcntl(F_SETFL) is not actually specified,bcook1-3/+3
2014-10-13Use O_NONBLOCK over FIONBIO.bcook1-2/+8
2014-10-12Remove useless comments in DES_is_weak_key(). Do we really care that thismiod1-14/+10
2014-10-12Paranoia: in ASN1_mbstring_ncopy(), check for len < 0 instead of len == -1,miod1-2/+2
2014-10-12Convert libssl manpages from pod to mdoc(7).bentley249-7737/+19938
2014-10-07Use strdup() instead of malloc() + memcpy().miod1-8/+3
2014-10-07EC_KEY_set_group() does an EC_GROUP_dup() of its argument, so we don'tmiod1-8/+2
2014-10-05The fixes to X509_PURPOSE_add() in r1.18 actually could cause a globalmiod1-27/+29
2014-10-05Be sure to check the stack push operation for success in v2i_POLICY_MAPPINGS();miod1-17/+19
2014-10-05In v2i_AUTHORITY_INFO_ACCESS(), separate object allocation from object pushmiod1-3/+8
2014-10-05Memory leak upon error in set_dist_point_name().miod1-1/+2
2014-10-05Be sure to check object allocation for success before using them.miod1-5/+10
2014-10-05Missing deallocation upon error.miod1-2/+3
2014-10-05Fix memory leak in the error path of v2i_AUTHORITY_KEYID().miod1-3/+6
2014-10-05compile with c89 (code / decl ordering); from Joakim.Tjernlund@transmode.sederaadt1-2/+3
2014-10-05Use more specific curves/formats naming for local variables injsing2-60/+56
2014-10-05Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather thanjsing2-22/+4
2014-10-05Make tls1_get_formatlist() behave the same as tls1_get_curvelist() andjsing2-42/+58
2014-10-03Bump minor version for ECDH auto.jsing2-2/+2
2014-10-03Add support for automatic ephemeral EC keys.jsing14-26/+152
2014-10-03Use string literals in printf style calls so gcc's -Wformat works.doug5-23/+22
2014-09-30Clean up EC cipher handling in ssl3_choose_cipher().jsing6-290/+304
2014-09-29Previous fix (1.12) would cause a NULL pointer dereference in the error pathmiod1-4/+3
2014-09-29check_cert(): be sure to reset ctx->current_crl to NULL before freeing it.miod1-10/+5
2014-09-29X509_NAME_get_text_by_OBJ(): make sure we do not pass a negative size tomiod1-3/+5
2014-09-29X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the secondmiod1-1/+2
2014-09-28Bump minor after adding SSL_CTX_use_certificate_chain().reyk2-2/+2
2014-09-28Add a new API function SSL_CTX_use_certificate_chain() that allows toreyk5-38/+106
2014-09-28X509v3_add_ext(): do not free stuff we did not allocate in the error path.miod1-2/+2
2014-09-28X509_TRUST_add(): check X509_TRUST_get0() return value before dereferencing it,miod1-15/+23
2014-09-28Someone (TM) thought it was smart to save memory by using malloc(1) andmiod1-5/+4
2014-09-27Doh, rev 1.4 had left out one routine with both 32-bit and 64-bit code, wheremiod1-0/+2
2014-09-27There is not much point checking ecdhp is not NULL... twice.jsing4-28/+10
2014-09-27Check that the specified curve is one of the client preferences.jsing10-16/+140
2014-09-26X509_STORE_new(): do not leak memory upon error.miod1-14/+17
2014-09-26X509_issuer_and_serial_hash(): do not leak memory if an error occurs duringmiod1-1/+3