Bodo Möller
a236373435
information on 0.9.6c-engine
2001-11-12 22:13:28 +00:00
Bodo Möller
7d555c8615
order entries as in main branch
2001-11-12 15:25:17 +00:00
Bodo Möller
d63b1678b5
'make update'
2001-11-12 15:15:46 +00:00
Mark J. Cox
beaa89def7
Sync ia64.S in 0.9.6c-dev with ia64.S in 0.9.7 (some fixes had been
...
applied since the initial patch was created)
Submitted by:
Reviewed by:
PR:
2001-11-12 14:08:49 +00:00
Mark J. Cox
b4bf34ce39
Add an entry for gcc on UnixWare
...
Submitted by: Gary Benson
Reviewed by: Mark Cox
PR:
2001-11-12 13:22:14 +00:00
Mark J. Cox
f99ac98efb
Add assembler implementation for IA-64
...
Submitted by: Andy Polyakov
Reviewed by: Mark Cox
PR:
2001-11-12 12:49:25 +00:00
Bodo Möller
c615cdd7cb
the PRNG race conditions were mostly a theoretical issue, remove from NEWS
2001-11-12 11:33:07 +00:00
Bodo Möller
e7d339b678
add changes between OpenSSL 0.9.6b and OpenSSL 0.9.6c
2001-11-12 11:27:34 +00:00
Bodo Möller
3f64d0bf3b
synchronize with HEAD branch
2001-11-12 11:22:45 +00:00
Bodo Möller
fab972b914
order chronologically: move entry for recent s2_clnt.c/s2_srvr.c fixes to the top
2001-11-10 15:09:47 +00:00
Bodo Möller
a10b85d9e6
make code a little more similar to what it looked like before the fixes
2001-11-10 10:43:51 +00:00
Bodo Möller
44cc9715ec
remove incorrect 'callback' prototype
2001-11-10 02:14:43 +00:00
Bodo Möller
a807f6460e
important SSL 2.0 bugfixes
2001-11-10 01:15:29 +00:00
Bodo Möller
19c3f1c40d
typo
2001-11-09 13:10:47 +00:00
Bodo Möller
b30504c61c
fix warning
2001-11-09 13:03:12 +00:00
Bodo Möller
cbb5f1f025
cast to 'unsigned long' before using ~ if we need an unsigned long result
...
Submitted by: "Stefan Marxen" <stefan.marxen@gmx.net>
2001-11-09 12:59:15 +00:00
Bodo Möller
b8556ab14b
clarify
2001-11-08 14:52:40 +00:00
Bodo Möller
48c269ad7f
Don't define _REENTRANT here in e_os.h. On systems where we need
...
_REENTRANT if threads support is enabled, the ./Configure entry must
define it so that it ends up in CFLAG.
2001-11-08 14:36:49 +00:00
Richard Levitte
d6945e10b5
Addapt VMS scripts to the newer disk layout system ODS-5, which allows more than one period and mixed size characters in file names
2001-10-29 13:06:29 +00:00
Bodo Möller
70bed0ca2d
typo
2001-10-26 14:03:51 +00:00
Bodo Möller
e20788700c
disable caching in BIO_gethostbyname
2001-10-26 13:03:28 +00:00
Bodo Möller
b60806a097
'make update'
2001-10-25 08:36:22 +00:00
Bodo Möller
0b9925be4f
Consistency with s2_... and s23_... variants (no real functional
...
change)
2001-10-25 08:18:56 +00:00
Bodo Möller
3e9ae0c462
Oops
2001-10-25 08:18:36 +00:00
Bodo Möller
96ec4ce0d2
Assume TLS 1.0 if ClientHello fragment is too short.
2001-10-25 06:06:50 +00:00
Bodo Möller
38b3e9edde
Fix SSL handshake functions and SSL_clear() such that SSL_clear()
...
never resets s->method to s->ctx->method when called from within one
of the SSL handshake functions.
2001-10-24 19:05:26 +00:00
Bodo Möller
9ccadf1c6f
In ssl3_get_client_hello (ssl/s3_srvr.c), generate a fatal alert if
...
client_version is smaller than the protocol version in use.
Also change ssl23_get_client_hello (ssl/s23_srvr.c) to select TLS 1.0
if the client demanded SSL 3.0 but only TLS 1.0 is enabled; then the
client will at least see that alert.
2001-10-20 17:52:40 +00:00
Dr. Stephen Henson
1e55e768c3
Typo.
2001-10-20 16:23:18 +00:00
Lutz Jänicke
b914a547e1
Flush buffers to prevent mixed output (Adam Back <adam@cypherspace.org>).
2001-10-16 14:25:27 +00:00
Bodo Möller
03b148f4a9
make sure .rnd exists
2001-10-15 17:57:27 +00:00
Bodo Möller
2dbdcd9734
Fix ssl3_get_message to handle message fragmentation correctly.
2001-10-15 17:42:43 +00:00
Bodo Möller
1147fa5a5f
the previous commit accidentily removed 'ret = 1' from the SSL_ST_OK
...
case of ssl3_accept
2001-10-15 17:40:22 +00:00
Ulf Möller
a9eba3f3f5
openbsd-x86 macros
...
Submitted by: Toomas Kiisk <vix@cyber.ee>
2001-10-14 00:58:32 +00:00
Lutz Jänicke
aa8a33c230
Update information as a partial response to the post
...
From: "Chris D. Peterson" <cpeterson@aventail.com>
Subject: Implementation Issues with OpenSSL
To: openssl-users@openssl.org
Date: Wed, 22 Aug 2001 16:13:17 -0700
The patch included in the original post may improve the internal session
list handling (and is therefore worth a seperate investigation).
No change to the list handling will however solve the problems of incorrect
SSL_SESSION_free() calls. The session list is only one possible point of
failure, dangling pointers would also occur for SSL object currently
using the session. The correct solution is to only use SSL_SESSION_free()
when applicable!
2001-10-12 12:29:57 +00:00
Richard Levitte
46ff8e0d0a
In certain cases, no encoding has been set up for the b64 filter. In
...
such cases, a flush should *not* attempt to finalise the encoding, as
the EVP_ENCODE_CTX structure will only be filled with garbage. For
the same reason, do the same check when a wpending is performed.
2001-10-11 19:43:45 +00:00
Richard Levitte
3f9077278a
Make sure the macro PEDANTIC is defined when we compile with
...
-pedantic, or some parts of the source will raise complaints from the
compiler.
2001-10-11 07:59:25 +00:00
Richard Levitte
accb6063f3
'make update'
2001-10-10 21:52:27 +00:00
Richard Levitte
744301ccd8
Add support for md4WithRSAEncryption.
2001-10-10 21:51:00 +00:00
Richard Levitte
a295ca8cf9
A few more OIDs, contributed by Peter Sylvester <Peter.Sylvester@EdelWeb.fr>
2001-10-10 06:15:42 +00:00
Lutz Jänicke
293c4d747c
Small documentation fixes (Howard Lum <howard@pumpkin.canada.sun.com>)
2001-10-08 08:38:12 +00:00
Lutz Jänicke
09389cbef5
Typos (Chris Pepper <pepper@mail.reppep.com>)
2001-10-01 14:39:23 +00:00
Richard Levitte
594a3e5bd5
In case of memory problems, the va_start() wasn't cleaned with a va_end().
...
Noticed by Thomas Klausner <wiz@danbala.ifoer.tuwien.ac.at>.
2001-09-24 15:06:44 +00:00
Bodo Möller
ae9010abd5
comment
2001-09-24 07:57:20 +00:00
Bodo Möller
ae3a6640b7
crypto/idea was missing in the list of directories that may have been deleted
2001-09-22 01:37:36 +00:00
Bodo Möller
029dfa64d4
bugfix: handle HelloRequest received during handshake correctly
2001-09-21 11:19:26 +00:00
Bodo Möller
f8845509b6
Disable session related stuff in SSL_ST_OK case of ssl3_accept if we
...
just sent a HelloRequest.
2001-09-21 07:01:04 +00:00
Bodo Möller
3f98e1dd11
Bugfix: correct cleanup after sending a HelloRequest
2001-09-21 00:03:00 +00:00
Bodo Möller
e53afa9e9b
fix ssl3_accept: don't call ssl_init_wbio_buffer() in HelloRequest case
2001-09-20 21:36:39 +00:00
Bodo Möller
e41c5bd730
Fix ssl/s3_enc.c, ssl/t1_enc.c and ssl/s3_pkt.c so that we don't
...
reveal whether illegal block cipher padding was found or a MAC
verification error occured.
In ssl/s2_pkt.c, verify that the purported number of padding bytes is in
the legal range.
2001-09-20 18:34:36 +00:00
Bodo Möller
10981a5c84
add comment
2001-09-14 13:48:37 +00:00