src/crypto, branch release/9.3.0

Merge OpenSSL 0.9.8za.

2014-06-09T16:30:56Z

Approved by: re (kib), so (delphij)

Fix OpenSSL multiple vulnerabilities.

2014-06-05T12:53:06Z

Security: CVE-2014-0195, CVE-2014-0221, CVE-2014-0224, CVE-2014-3470 Security: SA-14:14.openssl Approved by: re (jpaetzel)

MFH (r264691): merge upstream patch for EC calculation bug

2014-04-20T13:12:32Z

Cherry-pick OpenSSL changeset 5be1ae2:

2014-04-17T20:09:41Z

==== Author: Dr. Stephen Henson Treat a zero length passed to ssleay_rand_add a no op: the existing logic zeroes the md value which is very bad. OpenSSL itself never does this internally and the actual call doesn't make sense as it would be passing zero bytes of entropy. Thanks to Marcus Meissner for reporting this bug. ==== This is a direct commit to stable/8 and stable/9. -HEAD and stable/10 already have this fix as part of OpenSSL 1.0.1g. Noticed by: koobs Reviewed by: benl (maintainer)

Fix NFS deadlock vulnerability. [SA-14:05]

2014-04-08T23:16:19Z

Fix ECDSA Cache Side-channel Attack in OpenSSL. [SA-14:06]

MFH (r237568, r255422, r255460, r255766, r255767, r255774, r255829,

2014-03-31T14:39:56Z

r256126, r257954, r261320, r261499, r263691, r263712): upgrade to OpenSSH 6.6p1 via 6.3p1, 6.4p1 and 6.5p1. Differences relative to head: - No DNSSEC support since stable/9 does not have LDNS - Sandboxing off by default, and uses rlimit instead of Capsicum - ED25519 moved to the bottom of the order of preference to avoid "new public key" warnings

Fix build breakage after r259448

2013-12-16T06:52:30Z

Approved by: hrs (mentor, src committer)

MFC r259286,259424,259425:

2013-12-16T02:25:28Z

Apply patch from upstream Heimdal for encoding fix RFC 4402 specifies the implementation of the gss_pseudo_random() function for the krb5 mechanism (and the C bindings therein). The implementation uses a PRF+ function that concatenates the output of individual krb5 pseudo-random operations produced with a counter and seed. The original implementation of this function in Heimdal incorrectly encoded the counter as a little-endian integer, but the RFC specifies the counter encoding as big-endian. The implementation initializes the counter to zero, so the first block of output (16 octets, for the modern AES enctypes 17 and 18) is unchanged. (RFC 4402 specifies that the counter should begin at 1, but both existing implementations begin with zero and it looks like the standard will be re-issued, with test vectors, to begin at zero.) This is upstream's commit f85652af868e64811f2b32b815d4198e7f9017f6, from 13 October, 2013: % Fix krb5's gss_pseudo_random() (n is big-endian) % % The first enctype RFC3961 prf output length's bytes are correct because % the little- and big-endian representations of unsigned zero are the % same. The second block of output was wrong because the counter was not % being encoded as big-endian. % % This change could break applications. But those applications would not % have been interoperating with other implementations anyways (in % particular: MIT's). Bump __FreeBSD_version accordingly and add a note in UPDATING. Approved by: hrs (mentor, src committer)

MFH (r254278): fix relative symlinks

2013-08-20T07:22:20Z

Insta-MFH (r252338): update docs to reflect correct default privsep setting

2013-06-28T09:55:00Z