| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist-1.0.1/; revision=306191
svn path=/vendor-crypto/openssl/1.0.1u/; revision=306192; tag=vendor/openssl/1.0.1u
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist-1.0.1/; revision=298993
svn path=/vendor-crypto/openssl/1.0.1t/; revision=298994; tag=vendor/openssl/1.0.1t
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist-1.0.1/; revision=296275
svn path=/vendor-crypto/openssl/1.0.1s/; revision=296276; tag=vendor/openssl/1.0.1s
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist-1.0.1/; revision=295003
svn path=/vendor-crypto/openssl/1.0.1r/; revision=295005; tag=vendor/openssl/1.0.1r
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist-1.0.1/; revision=291709
svn path=/vendor-crypto/openssl/1.0.1q/; revision=291710; tag=vendor/openssl/1.0.1q
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=285327
svn path=/vendor-crypto/openssl/1.0.1p/; revision=285328; tag=vendor/openssl/1.0.1p
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=284327
svn path=/vendor-crypto/openssl/1.0.1o/; revision=284328; tag=vendor/openssl/1.0.1o
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=284278
svn path=/vendor-crypto/openssl/1.0.1n/; revision=284279; tag=vendor/openssl/1.0.1n
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=280288
svn path=/vendor-crypto/openssl/1.0.1m/; revision=280289; tag=vendor/openssl/1.0.1m
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=277266
svn path=/vendor-crypto/openssl/1.0.1l/; revision=277267; tag=vendor/openssl/1.0.1l
|
|
|
|
|
|
|
| |
https://github.com/openssl/openssl/commit/5c5e7e1a7eb114cf136e1ae4b6a413bc48ba41eb
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=276862
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=276856
svn path=/vendor-crypto/openssl/1.0.1k/; revision=276858; tag=vendor/openssl/1.0.1k
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=273138
svn path=/vendor-crypto/openssl/1.0.1j/; revision=273139; tag=vendor/openssl/1.0.1j
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=269670
svn path=/vendor-crypto/openssl/1.0.1i/; revision=269671; tag=vendor/openssl/1.0.1i
|
|
|
|
|
|
|
|
| |
Approved by: so (delphij)
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=267188
svn path=/vendor-crypto/openssl/1.0.1h/; revision=267189; tag=vendor/openssl/1.0.1h
|
|
|
|
|
|
|
|
| |
Approved by: benl (maintainer)
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=264271
svn path=/vendor-crypto/openssl/1.0.1g/; revision=264272; tag=vendor/openssl/1.0.1g
|
|
|
|
|
|
|
|
| |
Approved by: so (delphij), benl (silence)
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=261035
svn path=/vendor-crypto/openssl/1.0.1f/; revision=261036; tag=vendor/openssl/1.0.1f
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
197e0ea Fix for TLS record tampering bug. (CVE-2013-4353).
3462896 For DTLS we might need to retransmit messages from the
previous session so keep a copy of write context in DTLS
retransmission buffers instead of replacing it after
sending CCS. (CVE-2013-6450).
ca98926 When deciding whether to use TLS 1.2 PRF and record hash
algorithms use the version number in the corresponding
SSL_METHOD structure instead of the SSL structure. The
SSL structure version is sometimes inaccurate.
Note: OpenSSL 1.0.2 and later effectively do this already.
(CVE-2013-6449).
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=260399
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Author: David Woodhouse <dwmw2@infradead.org>
Date: Tue Feb 12 14:55:32 2013 +0000
Check DTLS_BAD_VER for version number.
The version check for DTLS1_VERSION was redundant as
DTLS1_VERSION > TLS1_1_VERSION, however we do need to
check for DTLS1_BAD_VER for compatibility.
PR:2984
(cherry picked from commit d980abb22e22661e98e5cee33d760ab0c7584ecc)
Approved by: benl
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=254106
|
|
|
|
|
|
|
|
| |
Approved by: secteam (delphij, simon), benl (silence)
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=246769
svn path=/vendor-crypto/openssl/1.0.1e/; revision=246770; tag=vendor/openssl/1.0.1e
|
|
|
|
|
|
|
| |
bn_word.c: fix overflow bug in BN_add_word.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=244973
|
|
|
|
|
|
|
|
| |
Approved by: benl (maintainer)
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=238384
svn path=/vendor-crypto/openssl/1.0.1c/; revision=238385; tag=vendor/openssl/1.0.1c
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=237653
svn path=/vendor-crypto/openssl/0.9.8x/; revision=237654; tag=vendor/openssl/0.9.8x
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=216135
svn path=/vendor-crypto/openssl/0.9.8q/; revision=216136; tag=vendor/openssl/0.9.8q
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=215643
svn path=/vendor-crypto/openssl/0.9.8p/; revision=215644; tag=vendor/openssl/0.9.8p
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=206035
svn path=/vendor-crypto/openssl/0.9.8n/; revision=206037; tag=vendor/openssl/0.9.8n
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=204477
svn path=/vendor-crypto/openssl/0.9.8m/; revision=204478; tag=vendor/openssl/0.9.8m
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix DTLS fragment bug - out-of-sequence message handling which could
result in NULL pointer dereference in
dtls1_process_out_of_seq_message().
Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.
Security: CVE-2009-1387
Obtained from: OpenSSL CVS
http://cvs.openssl.org/chngview?cn=17958
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=196467
svn path=/vendor-crypto/openssl/0.9.8k-dtls-fixes/; revision=196468; tag=vendor/openssl/0.9.8k-dtls-fixes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Do not access freed data structure.
Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.
Security: CVE-2009-1379
Obtained from: OpenSSL CVS
http://cvs.openssl.org/chngview?cn=18156
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=196463
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix fragment handling memory leak.
Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.
Security: CVE-2009-1378
Obtained from: OpenSSL CVS
http://cvs.openssl.org/filediff?f=openssl/ssl/d1_both.c&v1=1.4.2.13&v2=1.4.2.15
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=196462
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix memory consumption bug with "future epoch" DTLS records.
Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.
Security: CVE-2009-1377
Obtained from: OpenSSL CVS
http://cvs.openssl.org/chngview?cn=18187
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=196461
|
|
|
|
|
|
|
|
| |
expension disabled on the vendor tree means merges to head
removes the attributes there which clutters the merge.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=193770
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=193763
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=193647
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=193645
svn path=/vendor-crypto/openssl/0.9.8k/; revision=193646; tag=vendor/openssl/0.9.8k
|
|
|
|
|
|
|
|
|
|
| |
FIPS works but at least now we have the support source in case it
does.
- Do not exclude rsaref - it's not part of the OpenSSL distribution
archive anymore.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=193587
|
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=183234
svn path=/vendor-crypto/openssl/0.9.8i/; revision=193572; tag=vendor/openssl/0.9.8i
|
|
|
|
|
|
|
|
| |
- Remove all of include as there is only the openssl subdir with
symlinks (which were always removed).
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=183233
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=183232
|
|
|
|
|
|
|
|
|
|
| |
(last vendor import).
The file were removed in different earlier releases, but were not
removed from the CVS vendor branch at the time.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=183231
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=183229
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=183226
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=182044
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
From the OpenSSL advisory:
Andy Polyakov discovered a flaw in OpenSSL's DTLS
implementation which could lead to the compromise of clients
and servers with DTLS enabled.
DTLS is a datagram variant of TLS specified in RFC 4347 first
supported in OpenSSL version 0.9.8. Note that the
vulnerabilities do not affect SSL and TLS so only clients and
servers explicitly using DTLS are affected.
We believe this flaw will permit remote code execution.
Security: CVE-2007-4995
Security: http://www.openssl.org/news/secadv_20071012.txt
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=172767
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
EVP_CIPHER_CTX_key_length() should return the set key length
in the EVP_CIPHER_CTX structure which may not be the same as
the underlying cipher key length for variable length ciphers.
This fixes problems in OpenSSH using some ciphers, and possibly other
applications.
See also: http://bugzilla.mindrot.org/show_bug.cgi?id=1291
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=167617
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=167612
|
|
|
|
|
|
|
|
|
|
| |
Fix uninitialized free of ctx in compute_key() when the
OPENSSL_DH_MAX_MODULUS_BITS check is triggered.
This fixes the same issue as FreeBSD-SA-06:23.openssl v1.1.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=162916
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=162911
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=160814
|
|
|
|
|
|
|
| |
branch. This time, these are mostly the `Makefile.ssl' files.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=142430
|