aboutsummaryrefslogtreecommitdiff
path: root/crypto/openssl/ssl
Commit message (Collapse)AuthorAgeFilesLines
* Prevent cross-site forgery attacks on lukemftpd(8) due to splittingSimon L. B. Nielsen2009-01-075-8/+8
| | | | | | | | | | | | | | | | | long commands into multiple requests. [09:01] Fix incorrect OpenSSL checks for malformed signatures due to invalid check of return value from EVP_VerifyFinal(), DSA_verify, and DSA_do_verify. [09:02] Security: FreeBSD-SA-09:01.lukemftpd Security: FreeBSD-SA-09:02.openssl Obtained from: NetBSD [SA-09:01] Obtained from: OpenSSL Project [SA-09:02] Approved by: so (simon) Notes: svn path=/head/; revision=186872
* This commit was generated by cvs2svn to compensate for changes in r172767,Simon L. B. Nielsen2007-10-184-586/+515
|\ | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=172768
| * Import DTLS security fix from upstream OpenSSL_0_9_8-stable branch.Simon L. B. Nielsen2007-10-184-586/+515
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the OpenSSL advisory: Andy Polyakov discovered a flaw in OpenSSL's DTLS implementation which could lead to the compromise of clients and servers with DTLS enabled. DTLS is a datagram variant of TLS specified in RFC 4347 first supported in OpenSSL version 0.9.8. Note that the vulnerabilities do not affect SSL and TLS so only clients and servers explicitly using DTLS are affected. We believe this flaw will permit remote code execution. Security: CVE-2007-4995 Security: http://www.openssl.org/news/secadv_20071012.txt Notes: svn path=/vendor-crypto/openssl/dist/; revision=172767
* | Correct a buffer overflow in OpenSSL SSL_get_shared_ciphers().Simon L. B. Nielsen2007-10-031-11/+11
| | | | | | | | | | | | | | | | Security: FreeBSD-SA-07:08.openssl Approved by: re (security blanket) Notes: svn path=/head/; revision=172429
* | Resolve conflicts after import of OpenSSL 0.9.8e.Simon L. B. Nielsen2007-03-154-6/+7
| | | | | | | | Notes: svn path=/head/; revision=167615
* | This commit was generated by cvs2svn to compensate for changes in r167612,Simon L. B. Nielsen2007-03-1515-78/+208
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=167613
| * Vendor import of OpenSSL 0.9.8e.Simon L. B. Nielsen2007-03-1519-84/+215
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=167612
* | Resolve conflicts after import of OpenSSL 0.9.8d.Simon L. B. Nielsen2006-10-012-2/+3
| | | | | | | | Notes: svn path=/head/; revision=162914
* | This commit was generated by cvs2svn to compensate for changes in r162911,Simon L. B. Nielsen2006-10-0111-54/+406
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=162912
| * Vendor import of OpenSSL 0.9.8d.Simon L. B. Nielsen2006-10-0113-56/+409
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=162911
* | Resolve conflicts after import of OpenSSL 0.9.8b.Simon L. B. Nielsen2006-07-298-326/+258
| | | | | | | | Notes: svn path=/head/; revision=160817
* | This commit was generated by cvs2svn to compensate for changes in r160814,Simon L. B. Nielsen2006-07-2939-2646/+11414
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=160815
| * Vendor import of OpenSSL 0.9.8bSimon L. B. Nielsen2006-07-2947-2978/+11673
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=160814
| * Remove files that are no longer part of OpenSSL from the vendorJacques Vidrine2005-02-251-1019/+0
| | | | | | | | | | | | | | branch. This time, these are mostly the `Makefile.ssl' files. Notes: svn path=/vendor-crypto/openssl/dist/; revision=142430
* | Correct a man-in-the-middle SSL version rollback vulnerability.Colin Percival2005-10-111-6/+1
| | | | | | | | | | | | | | Security: FreeBSD-SA-05:21.openssl Notes: svn path=/head/; revision=151233
* | This commit was generated by cvs2svn to compensate for changes in r142430,Jacques Vidrine2005-02-251-1019/+0
| | | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=142431
* | Resolve conflicts after import of OpenSSL 0.9.7e.Jacques Vidrine2005-02-253-7/+16
| | | | | | | | Notes: svn path=/head/; revision=142428
* | This commit was generated by cvs2svn to compensate for changes in r142425,Jacques Vidrine2005-02-2513-84/+1238
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=142426
| * Vendor import of OpenSSL 0.9.7e.Jacques Vidrine2005-02-2516-91/+1254
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=142425
| * Clean up the OpenSSL vendor branch by removing files that are notJacques Vidrine2005-02-251-884/+0
| | | | | | | | | | | | | | part of recent releases. Notes: svn path=/vendor-crypto/openssl/dist/; revision=142421
* | Resolve conflicts after import of OpenSSL 0.9.7d.Jacques Vidrine2004-03-175-5/+2
| | | | | | | | Notes: svn path=/head/; revision=127134
* | This commit was generated by cvs2svn to compensate for changes in r127128,Jacques Vidrine2004-03-1713-311/+335
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=127129
| * Vendor import of OpenSSL 0.9.7d.Jacques Vidrine2004-03-1718-316/+337
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=127128
* | This commit was generated by cvs2svn to compensate for changes in r127114,Jacques Vidrine2004-03-171-0/+8
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=127115
| * Correct a denial-of-service vulnerability in OpenSSL (CAN-2004-0079).Jacques Vidrine2004-03-171-0/+8
| | | | | | | | | | | | | | Obtained from: OpenSSL CVS (http://cvs.openssl.org/chngview?cn=12033) Notes: svn path=/vendor-crypto/openssl/dist/; revision=127114
* | This commit was generated by cvs2svn to compensate for changes in r120631,Jacques Vidrine2003-10-019-23/+54
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=120632
| * Vendor import of OpenSSL 0.9.7cJacques Vidrine2003-10-019-23/+54
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=120631
* | This commit was generated by cvs2svn to compensate for changes in r112439,Chris D. Faulhaber2003-03-201-13/+12
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=112440
| * Import of PKCS #1 security fix.Chris D. Faulhaber2003-03-201-13/+12
| | | | | | | | | | | | | | http://www.openssl.org/news/secadv_20030319.txt Notes: svn path=/vendor-crypto/openssl/dist/; revision=112439
* | Resolve conflicts after import of OpenSSL 0.9.7a.Jacques Vidrine2003-02-191-1/+1
| | | | | | | | Notes: svn path=/head/; revision=111150
* | This commit was generated by cvs2svn to compensate for changes in r111147,Jacques Vidrine2003-02-198-37/+82
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=111148
| * Vendor import of OpenSSL 0.9.7a.Jacques Vidrine2003-02-199-38/+83
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=111147
* | Merge conflicts.Mark Murray2003-01-289-217/+286
| | | | | | | | | | | | | | This is cunning doublespeak for "use vendor code". Notes: svn path=/head/; revision=110007
* | This commit was generated by cvs2svn to compensate for changes in r109998,Mark Murray2003-01-2836-1437/+5959
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=109999
| * Vendor import of OpenSSL release 0.9.7. This release includesMark Murray2003-01-2845-1639/+6245
| | | | | | | | | | | | | | support for AES and OpenBSD's hardware crypto. Notes: svn path=/vendor-crypto/openssl/dist/; revision=109998
* | Resolve conflicts.Jacques Vidrine2002-08-104-34/+100
| | | | | | | | Notes: svn path=/head/; revision=101621
* | This commit was generated by cvs2svn to compensate for changes in r101615,Jacques Vidrine2002-08-107-6/+32
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=101616
| * Import of OpenSSL 0.9.6f.Jacques Vidrine2002-08-1011-40/+132
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=101615
* | Resolve conflicts after import of OpenSSL 0.9.6e.Jacques Vidrine2002-07-303-5/+33
| | | | | | | | Notes: svn path=/head/; revision=100943
* | This commit was generated by cvs2svn to compensate for changes in r100936,Jacques Vidrine2002-07-3011-68/+130
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=100937
| * Import of OpenSSL 0.9.6e.Jacques Vidrine2002-07-3014-69/+161
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=100936
* | Remove many obsolete files. The majority of these are simply noJacques Vidrine2002-07-301-884/+0
| | | | | | | | | | | | | | | | longer included as part of the OpenSSL distribution. However, a few we just don't need and are explicitly excluded in FREEBSD-Xlist. Notes: svn path=/head/; revision=100932
* | This commit was generated by cvs2svn to compensate for changes in r100928,Jacques Vidrine2002-07-3014-117/+489
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=100929
| * Import of OpenSSL 0.9.6d.Jacques Vidrine2002-07-3014-117/+489
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=100928
* | Resolve conflicts.Kris Kennaway2002-01-276-76/+327
| | | | | | | | Notes: svn path=/head/; revision=89840
* | This commit was generated by cvs2svn to compensate for changes in r89837,Kris Kennaway2002-01-2713-60/+304
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=89838
| * Initial import of OpenSSL 0.9.6cKris Kennaway2002-01-2719-136/+631
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=89837
* | Resolve conflictsKris Kennaway2001-07-191-1/+2
| | | | | | | | Notes: svn path=/head/; revision=80001
* | This commit was generated by cvs2svn to compensate for changes in r79998,Kris Kennaway2001-07-194-168/+266
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=79999
| * Initial import of OpenSSL 0.9.6bKris Kennaway2001-07-195-169/+268
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=79998