wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/ssl
History
Bodo Möller e194fe8f47 From HEAD: 
Fix flaw if 'Server Key exchange message' is omitted from a TLS
handshake which could lead to a cilent crash as found using the
Codenomicon TLS test suite (CVE-2008-1672)

Reviewed by: openssl-security@openssl.org

Obtained from: mark@awe.com
2008-05-28 22:17:34 +00:00
..
.cvsignore Add emacs cache files to .cvsignore. 2005-04-11 14:17:07 +00:00
bio_ssl.c fix problems found by coverity: remove useless code 2006-03-15 17:45:43 +00:00
d1_both.c Don't let DTLS ChangeCipherSpec increment handshake sequence number. 2007-10-17 21:15:48 +00:00
d1_clnt.c Fix a variety of warnings generated by some elevated compiler-fascism, 2008-03-16 21:05:46 +00:00
d1_enc.c 1. Changes for s_client.c to make it return non-zero exit code in case 2007-10-26 12:06:36 +00:00
d1_lib.c Prohibit RC4 in DTLS. 2007-10-05 21:04:56 +00:00
d1_meth.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
d1_pkt.c Don't let DTLS ChangeCipherSpec increment handshake sequence number. 2007-10-17 21:15:48 +00:00
d1_srvr.c Fix a variety of warnings generated by some elevated compiler-fascism, 2008-03-16 21:05:46 +00:00
dtls1.h Oops! This was erroneously left out commit #16632. 2007-10-01 06:27:21 +00:00
install.com Synchronise more with the Unix build. 2005-05-31 20:28:41 +00:00
kssl.c use user-supplied malloc functions for persistent kssl objects 2007-02-10 10:42:48 +00:00
kssl.h Make kerberos ciphersuite code work with newer header files 2005-04-09 23:55:55 +00:00
kssl_lcl.h To avoid commit wars over dependencies, let's make it so things that 2001-10-10 07:55:02 +00:00
Makefile LHASH revamp. make depend. 2008-05-26 11:24:29 +00:00
s2_clnt.c Change safestack reimplementation to match 0.9.8. 2007-09-07 13:25:15 +00:00
s2_enc.c Update ssl library to support EVP_PKEY MAC API. Include generic MAC support. 2007-06-04 17:04:40 +00:00
s2_lib.c fix warnings/inconsistencies caused by the recent changes to the 2007-02-19 14:53:18 +00:00
s2_meth.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
s2_pkt.c Update ssl library to support EVP_PKEY MAC API. Include generic MAC support. 2007-06-04 17:04:40 +00:00
s2_srvr.c Change safestack reimplementation to match 0.9.8. 2007-09-07 13:25:15 +00:00
s3_both.c Update ssl code to support digests other than MD5+SHA1 in handshake. 2007-08-31 12:42:53 +00:00
s3_clnt.c From HEAD: 2008-05-28 22:17:34 +00:00
s3_enc.c Fix warnings: computed value not use, incompatible pointer initialization 2007-09-07 13:03:25 +00:00
s3_lib.c Update from stable branch. 2008-04-30 16:14:02 +00:00
s3_meth.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
s3_pkt.c Fix warnings: computed value not use, incompatible pointer initialization 2007-09-07 13:03:25 +00:00
s3_srvr.c Update from stable branch. 2008-04-30 16:14:02 +00:00
s23_clnt.c Support for certificate status TLS extension. 2007-09-26 21:56:59 +00:00
s23_lib.c remove unused internal foo_base_method functions 2005-08-08 19:04:37 +00:00
s23_meth.c recent changes from 0.9.8: fix cipher list order in s3_lib.c, 2006-01-15 17:35:28 +00:00
s23_pkt.c Reorder inclusion of header files: 2002-07-10 07:01:54 +00:00
s23_srvr.c fix support for receiving fragmented handshake messages 2006-11-29 14:45:50 +00:00
ssl-lib.com Synchronise more with the Unix build. 2005-05-31 20:28:41 +00:00
ssl.h LHASH revamp. make depend. 2008-05-26 11:24:29 +00:00
ssl2.h Implement msg_callback for SSL 2.0. 2001-11-10 01:16:28 +00:00
ssl3.h Support for certificate status TLS extension. 2007-09-26 21:56:59 +00:00
ssl23.h Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
ssl_algs.c Add SEED encryption algorithm. 2007-04-23 23:48:59 +00:00
ssl_asn1.c Fix from stable branch. 2007-10-17 11:49:27 +00:00
ssl_cert.c Change safestack reimplementation to match 0.9.8. 2007-09-07 13:25:15 +00:00
ssl_ciph.c 1. Changes for s_client.c to make it return non-zero exit code in case 2007-10-26 12:06:36 +00:00
ssl_err.c Fix duplicate error codes. 2007-10-26 23:54:46 +00:00
ssl_err2.c Use new-style system-id macros everywhere possible. I hope I haven't 2001-02-20 08:13:47 +00:00
ssl_lib.c LHASH revamp. make depend. 2008-05-26 11:24:29 +00:00
ssl_locl.h Prohibit RC4 in DTLS. 2007-10-05 21:04:56 +00:00
ssl_rsa.c Reword comment to be much shorter to stop other people from complaining 2008-05-26 06:21:13 +00:00
ssl_sess.c LHASH revamp. make depend. 2008-05-26 11:24:29 +00:00
ssl_stat.c Update from stable branch. 2008-04-29 16:39:03 +00:00
ssl_task.c Security fixes brought forward from 0.9.7. 2002-11-13 15:43:43 +00:00
ssl_txt.c RFC4507 (including RFC4507bis) TLS stateless session resumption support 2007-08-11 23:18:29 +00:00
ssltest.c There was a need to support thread ID types that couldn't be reliably cast 2008-03-28 02:49:43 +00:00
t1_clnt.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
t1_enc.c Fix unsigned/signed warnings in ssl. 2008-01-05 21:35:34 +00:00
t1_lib.c From HEAD: 2008-05-28 22:15:48 +00:00
t1_meth.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
t1_srvr.c Let the TLSv1_method() etc. functions return a const SSL_METHOD 2005-08-14 21:48:33 +00:00
tls1.h Update from stable branch. 2008-04-30 16:14:02 +00:00