- 12 1月, 2015 2 次提交
-
-
由 Matt Caswell 提交于
Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
由 Matt Caswell 提交于
removed. Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
- 10 1月, 2015 1 次提交
-
-
由 Kurt Roeckx 提交于
It contained a date on when it was build. Reviewed-by: NRich Salz <rsalz@openssl.org>
-
- 09 1月, 2015 1 次提交
-
-
由 Matt Caswell 提交于
Reviewed-by: NTim Hudson <tjh@openssl.org>
-
- 08 1月, 2015 2 次提交
-
-
由 Andy Polyakov 提交于
Reviewed-by: NEmilia Kasper <emilia@openssl.org>
-
由 Andy Polyakov 提交于
Reviewed-by: NMatt Caswell <matt@openssl.org>
-
- 07 1月, 2015 3 次提交
-
-
由 Dr. Stephen Henson 提交于
Reviewed-by: NRich Salz <rsalz@openssl.org> Reviewed-by: NMatt Caswell <matt@openssl.org>
-
由 Dr. Stephen Henson 提交于
Change by SteveH from original by John Denker (in the RT) Reviewed-by: NRich Salz <rsalz@openssl.org>
-
由 Martin Brejcha 提交于
Fix memory leak by freeing up saved_message.data if it is not NULL. PR#3489 Reviewed-by: NStephen Henson <steve@openssl.org> Reviewed-by: NTim Hudson <tjh@openssl.org>
-
- 06 1月, 2015 3 次提交
-
-
由 Matt Caswell 提交于
Reviewed-by: NTim Hudson <tjh@openssl.org>
-
由 Andy Polyakov 提交于
This reverts commit 4fec9150. Reviewed-by: NMatt Caswell <matt@openssl.org>
-
由 Andy Polyakov 提交于
Reviewed-by: NMatt Caswell <matt@openssl.org>
-
- 05 1月, 2015 5 次提交
-
-
由 Dr. Stephen Henson 提交于
Reviewed-by: NEmilia Käsper <emilia@openssl.org>
-
由 Dr. Stephen Henson 提交于
By using non-DER or invalid encodings outside the signed portion of a certificate the fingerprint can be changed without breaking the signature. Although no details of the signed portion of the certificate can be changed this can cause problems with some applications: e.g. those using the certificate fingerprint for blacklists. 1. Reject signatures with non zero unused bits. If the BIT STRING containing the signature has non zero unused bits reject the signature. All current signature algorithms require zero unused bits. 2. Check certificate algorithm consistency. Check the AlgorithmIdentifier inside TBS matches the one in the certificate signature. NB: this will result in signature failure errors for some broken certificates. 3. Check DSA/ECDSA signatures use DER. Reencode DSA/ECDSA signatures and compare with the original received signature. Return an error if there is a mismatch. This will reject various cases including garbage after signature (thanks to Antti Karjalainen and Tuomo Untinen from the Codenomicon CROSS program for discovering this case) and use of BER or invalid ASN.1 INTEGERs (negative or with leading zeroes). CVE-2014-8275 Reviewed-by: NEmilia Käsper <emilia@openssl.org>
-
由 Andy Polyakov 提交于
This facilitates "universal" builds, ones that target multiple architectures, e.g. ARMv5 through ARMv7. See commentary in Configure for details. Reviewed-by: NArd Biesheuvel <ard.biesheuvel@linaro.org> Reviewed-by: NMatt Caswell <matt@openssl.org>
-
由 Andy Polyakov 提交于
RT: 3607 Reviewed-by: NAdam Langley <agl@google.com> Reviewed-by: NEmilia Kasper <emilia@openssl.org>
-
由 Rich Salz 提交于
Check for NULL return from X509_NAME_ENTRY_new() Reviewed-by: NDr. Stephen Henson <steve@openssl.org>
-
- 31 12月, 2014 2 次提交
-
-
由 Kurt Roeckx 提交于
gettimeofday was undefined Reviewed-by: NGeoff Thorpe <geoff@openssl.org>
-
由 Tim Hudson 提交于
indent will not alter them when reformatting comments Reviewed-by: NRich Salz <rsalz@openssl.org> Reviewed-by: NMatt Caswell <matt@openssl.org>
-
- 30 12月, 2014 1 次提交
-
-
由 Kurt Roeckx 提交于
We need this for the freebsd kernel with glibc as used in the Debian kfreebsd ports. There shouldn't be a problem defining this on systems not using glibc. Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
- 28 12月, 2014 1 次提交
-
-
由 Rich Salz 提交于
This commit removes DG-UX. It also flushes out some left-behinds in config. And regenerates TABLE from Configure (hadn't been done in awhile). Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
- 23 12月, 2014 1 次提交
-
-
由 Rich Salz 提交于
This commit removes MPE/iX Reviewed-by: NAndy Polyakov <appro@openssl.org>
-
- 22 12月, 2014 1 次提交
-
-
由 Rich Salz 提交于
This commit removes SunOS (a sentimental favorite of mine). Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
- 20 12月, 2014 2 次提交
-
-
由 Michael Tuexen 提交于
Return an error code for I/O errors instead of an assertion failure. PR#3470 Reviewed-by: NStephen Henson <steve@openssl.org> Reviewed-by: NTim Hudson <tjh@openssl.org>
-
由 Rich Salz 提交于
This commit removes all mention of NeXT and NextStep. Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
- 19 12月, 2014 5 次提交
-
-
由 Matt Caswell 提交于
is run with --strict-warnings. Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
由 Matt Caswell 提交于
with OPENSSL_NO_DEPRECATED defined Reviewed-by: NRich Salz <rsalz@openssl.org>
-
由 Matt Caswell 提交于
Introduce use of DECLARE_DEPRECATED Reviewed-by: NRich Salz <rsalz@openssl.org>
-
由 Matt Caswell 提交于
Reviewed-by: NRich Salz <rsalz@openssl.org>
-
由 Matt Caswell 提交于
Also introduce OPENSSL_USE_DEPRECATED. If OPENSSL_NO_DEPRECATED is defined at config stage then OPENSSL_USE_DEPRECATED has no effect - deprecated functions are not available. If OPENSSL_NO_DEPRECATED is not defined at config stage then applications must define OPENSSL_USE_DEPRECATED in order to access deprecated functions. Also introduce compiler warnings for gcc for applications using deprecated functions Reviewed-by: NRich Salz <rsalz@openssl.org>
-
- 18 12月, 2014 3 次提交
-
-
由 Kurt Roeckx 提交于
Reviewed-by: NMatt Caswell <matt@openssl.org>
-
由 Rich Salz 提交于
This commit removes BEOS. Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
由 Rich Salz 提交于
Reviewed-by: NRichard Levitte <levitte@openssl.org>
-
- 17 12月, 2014 7 次提交
-
-
由 Dr. Stephen Henson 提交于
According to X6.90 null, object identifier, boolean, integer and enumerated types can only have primitive encodings: return an error if any of these are received with a constructed encoding. Reviewed-by: NEmilia Käsper <emilia@openssl.org>
-
由 Emilia Kasper 提交于
Reviewed-by: NAndy Polyakov <appro@openssl.org>
-
由 Emilia Kasper 提交于
Causes more problems than it fixes: even though error codes are not part of the stable API, several users rely on the specific error code, and the change breaks them. Conversely, we don't have any concrete use-cases for constant-time behaviour here. This reverts commit 4aac102f. Reviewed-by: NAndy Polyakov <appro@openssl.org>
-
由 Emilia Kasper 提交于
Various build fixes, mostly uncovered by clang's unused-const-variable and unused-function errors. Reviewed-by: NKurt Roeckx <kurt@openssl.org> (cherry picked from commit 0e1c318ece3c82e96ae95a34a1badf58198d6b28)
-
由 Richard Levitte 提交于
Reviewed-by: NTim Hudson <tjh@openssl.org>
-
由 Richard Levitte 提交于
Reviewed-by: NTim Hudson <tjh@openssl.org>
-
由 Emilia Kasper 提交于
Invalid zero-padding in the divisor could cause a division by 0. Reviewed-by: NRichard Levitte <levitte@openssl.org> (cherry picked from commit a43bcd9e96c5180e5c6c82164ece643c0097485e)
-