| 75917fa | Dr. Stephen Henson | 09 February 2014, 19:59:54 UTC | Make upate. Revert libssl ordinals to OpenSSL 1.0.1 values first to tidy up and avoid entries for deleted functions. | 09 February 2014, 19:59:54 UTC |
| 295fd05 | Dr. Stephen Henson | 09 February 2014, 19:57:27 UTC | fix error number clash | 09 February 2014, 19:57:27 UTC |
| 8c4e09f | Ben Laurie | 09 February 2014, 19:31:07 UTC | Whitespace fixes. | 09 February 2014, 19:31:07 UTC |
| e32cbae | Ben Laurie | 09 February 2014, 19:17:42 UTC | Merge branch '102_stable_tlsext_suppdata_changes' of git://github.com/scottdeboy/openssl into scottdeboy-102_stable_tlsext_suppdata_changes | 09 February 2014, 19:17:42 UTC |
| f6fd8db | Scott Deboy | 09 February 2014, 16:26:04 UTC | Restore copyright symbol - ISO-8859-1 encoding for Configure file | 09 February 2014, 16:26:04 UTC |
| d65db21 | Ben Laurie | 06 September 2013, 13:03:28 UTC | Const fix. | 09 February 2014, 16:07:16 UTC |
| 8acf1ff | Ben Laurie | 01 August 2013, 11:33:15 UTC | More cleanup. (cherry picked from commit 5eda213ebe382009c2f37a8eade5cbcdae6017ed) Conflicts: apps/s_client.c apps/s_server.c | 09 February 2014, 16:07:04 UTC |
| 8b41df4 | Ben Laurie | 01 August 2013, 10:14:23 UTC | Make it build. (cherry picked from commit a6a48e87bc469f37ed1c53d0e4d22faaa0a5adf3) Conflicts: ssl/s3_clnt.c ssl/t1_lib.c | 09 February 2014, 16:02:40 UTC |
| c32ebef | Scott Deboy | 09 February 2014, 15:49:44 UTC | Reverting 1.0.2-only changes supporting the prior authz RFC5878-based tests from commit 835d104f46c4448a27844a9309de456c7972a943 | 09 February 2014, 15:49:44 UTC |
| ed0dc93 | Ben Laurie | 09 February 2014, 12:18:16 UTC | Add new asm modules. | 09 February 2014, 12:18:16 UTC |
| 5a32dd8 | Scott Deboy | 05 February 2014, 02:48:59 UTC | Don't break out of the custom extension callback loop - continue instead The contract for custom extension callbacks has changed - all custom extension callbacks are triggered | 09 February 2014, 00:19:30 UTC |
| 130ebe3 | Ben Laurie | 04 February 2014, 23:16:46 UTC | Fix whitespace, new-style comments. | 09 February 2014, 00:19:30 UTC |
| 7612511 | Scott Deboy | 04 February 2014, 21:08:43 UTC | Re-add alert variables removed during rebase Whitespace fixes (cherry picked from commit e9add063b50e8a460d5636055156d2760c2fe29f) Conflicts: ssl/s3_clnt.c | 09 February 2014, 00:19:01 UTC |
| 19a28a8 | Scott Deboy | 07 November 2013, 09:08:29 UTC | Updating DTCP authorization type to expected value | 09 February 2014, 00:18:11 UTC |
| fc21321 | Scott Deboy | 12 September 2013, 19:03:40 UTC | Update custom TLS extension and supplemental data 'generate' callbacks to support sending an alert. If multiple TLS extensions are expected but not received, the TLS extension and supplemental data 'generate' callbacks are the only chance for the receive-side to trigger a specific TLS alert during the handshake. Removed logic which no-op'd TLS extension generate callbacks (as the generate callbacks need to always be called in order to trigger alerts), and updated the serverinfo-specific custom TLS extension callbacks to track which custom TLS extensions were received by the client, where no-ops for 'generate' callbacks are appropriate. (cherry picked from commit ac20719d994729970eb3b775c7bffa81f0e9f960) Conflicts: ssl/t1_lib.c | 09 February 2014, 00:17:24 UTC |
| 7198c5a | Trevor Perrin | 14 September 2013, 01:31:48 UTC | Redo deletion of some serverinfo code that supplemental data code mistakenly reinstated. | 09 February 2014, 00:15:10 UTC |
| 40632f6 | Scott Deboy | 01 August 2013, 18:54:09 UTC | Free generated supp data after handshake completion, add comment regarding use of num_renegotiations in TLS and supp data generation callbacks (cherry picked from commit 67c408cee9b01a7c8c7ca002d36b4f8c0612b08c) Conflicts: apps/s_client.c apps/s_server.c | 09 February 2014, 00:14:23 UTC |
| 038bec7 | Scott Deboy | 18 June 2013, 21:34:38 UTC | Add callbacks supporting generation and retrieval of supplemental data entries, facilitating RFC 5878 (TLS auth extensions) Removed prior audit proof logic - audit proof support was implemented using the generic TLS extension API Tests exercising the new supplemental data registration and callback api can be found in ssltest.c. Implemented changes to s_server and s_client to exercise supplemental data callbacks via the -auth argument, as well as additional flags to exercise supplemental data being sent only during renegotiation. (cherry picked from commit 36086186a9b90cdad0d2cd0a598a10f03f8f4bcc) Conflicts: Configure apps/s_client.c apps/s_server.c ssl/ssl.h ssl/ssl3.h ssl/ssltest.c | 09 February 2014, 00:12:15 UTC |
| f407eec | Dr. Stephen Henson | 06 February 2014, 14:31:09 UTC | make update | 06 February 2014, 14:31:09 UTC |
| bd618be | Dr. Stephen Henson | 06 February 2014, 14:28:49 UTC | update default depflags | 06 February 2014, 14:28:49 UTC |
| e2884b3 | Andy Polyakov | 08 October 2013, 21:41:31 UTC | Configure: recognize experimental-multiblock. (cherry picked from commit 2d752737c53d0cf4953c11551d6d2a9df3655329) | 06 February 2014, 14:26:01 UTC |
| c41e242 | Dr. Stephen Henson | 06 February 2014, 13:57:26 UTC | Return previous compression methods when setting them. (cherry picked from commit b45e874d7c4a8fdac7ec10cff43f21d02e75d511) | 06 February 2014, 13:58:18 UTC |
| 9578319 | Andy Polyakov | 05 February 2014, 20:43:17 UTC | ssl/s3_pkt.c: add multi-block processing [from master]. | 05 February 2014, 20:43:17 UTC |
| 16eaca2 | Andy Polyakov | 05 February 2014, 19:36:11 UTC | config: recognize little-endian Linux PPC64. | 05 February 2014, 19:36:11 UTC |
| 3bff195 | Dr. Stephen Henson | 05 February 2014, 18:55:37 UTC | Oops, get selection logic right. (cherry picked from commit 3880579240d476d21f68fd01a391dd325920f479) | 05 February 2014, 18:57:23 UTC |
| 41cf2d2 | Andy Polyakov | 05 February 2014, 18:52:38 UTC | evp/e_aes_cbc_hmac_sha[1|256].c: add multi-block implementations [from master]. | 05 February 2014, 18:52:38 UTC |
| e0d4272 | Dr. Stephen Henson | 05 February 2014, 16:56:58 UTC | Return per-certificate chain if extra chain is NULL. If an application calls the macro SSL_CTX_get_extra_chain_certs return either the old "shared" extra certificates or those associated with the current certificate. This means applications which call SSL_CTX_use_certificate_chain_file and retrieve the additional chain using SSL_CTX_get_extra_chain_certs will still work. An application which only wants to check the shared extra certificates can call the new macro SSL_CTX_get_extra_chain_certs_only (cherry picked from commit a51f767645c117667d337f77fe1dd9c0a66d8410) | 05 February 2014, 17:06:56 UTC |
| 41c373f | Andy Polyakov | 05 February 2014, 13:33:44 UTC | [aesni|sha*]-mb-x86_64.pl: add multi-block assembly modules [from master]. | 05 February 2014, 13:33:44 UTC |
| 7f6e09b | Dr. Stephen Henson | 03 February 2014, 14:13:04 UTC | Add quotes as CC can contain spaces. PR#3253 | 03 February 2014, 14:13:04 UTC |
| e2f0680 | Dr. Stephen Henson | 02 February 2014, 02:51:30 UTC | New ctrl to set current certificate. New ctrl sets current certificate based on certain criteria. Currently two options: set the first valid certificate as current and set the next valid certificate as current. Using these an application can iterate over all certificates in an SSL_CTX or SSL structure. (cherry picked from commit 0f78819c8ccb7c526edbe90d5b619281366ce75c) | 02 February 2014, 23:12:06 UTC |
| 1180833 | Dr. Stephen Henson | 20 October 2013, 21:31:00 UTC | Fix various typos. (cherry picked from commit f3efeaad540b000779277b4fc49a239529ee616e) | 02 February 2014, 23:12:06 UTC |
| 130eed0 | Dr. Stephen Henson | 18 December 2013, 13:28:44 UTC | Update demo. (cherry picked from commit 88c21c47a3d187d4f8c4e87e3c6088198cb08a99) | 02 February 2014, 23:06:16 UTC |
| 2ded873 | Dr. Stephen Henson | 20 October 2013, 21:34:14 UTC | Update demos/bio/README (cherry picked from commit ea131a0644bcebeaa5e911217aadbc9dac241fec) | 02 February 2014, 23:05:52 UTC |
| b1ae02e | Dr. Stephen Henson | 20 October 2013, 21:21:09 UTC | Modify sample accept.cnf (cherry picked from commit d80b0eeee59fa48f2506fe103de1b52ef6de3f4f) | 02 February 2014, 23:05:34 UTC |
| 3814170 | Dr. Stephen Henson | 18 October 2013, 15:28:38 UTC | Add demo for SSL server using SSL_CONF. (cherry picked from commit ebd14bfce9ef6b4bf41129a329823130d1002f42) | 02 February 2014, 23:05:15 UTC |
| 984a304 | Ben Laurie | 02 February 2014, 15:22:10 UTC | Add extension free function. | 02 February 2014, 15:22:47 UTC |
| 2ad673c | Andy Polyakov | 01 February 2014, 23:17:38 UTC | engines/e_capi.c: TCHAR support (cumilative update from master). | 01 February 2014, 23:17:38 UTC |
| 0693dd9 | Andy Polyakov | 01 February 2014, 23:09:17 UTC | modes/asm/ghash-s390x.pl: +15% performance improvement on z10. (cherry picked from commit d162584b1154153d997fed18a9df2e60771fe06c) | 01 February 2014, 23:10:41 UTC |
| 9071b36 | Andy Polyakov | 01 February 2014, 23:05:02 UTC | Add AES-NI+SHA256 stitch registrations (from master). | 01 February 2014, 23:05:02 UTC |
| eb6af20 | Andy Polyakov | 18 December 2012, 18:19:54 UTC | dso/dso_win32.c: fix compiler warning. (cherry picked from commit 0a2d5003df1a9ecf801ac3b4a5cb7dda85449315) | 01 February 2014, 22:32:19 UTC |
| 8087969 | Andy Polyakov | 01 February 2014, 22:27:49 UTC | crypto/cryptlib.c: remove stdio dependency (update from master). | 01 February 2014, 22:27:49 UTC |
| cb437c6 | Andy Polyakov | 01 February 2014, 22:14:33 UTC | camellia/asm/cmll-x86_64.pl: fix symptomless bugs (update from master). | 01 February 2014, 22:14:33 UTC |
| 40b0d07 | Ben Laurie | 01 February 2014, 21:53:09 UTC | Remove redundant accessor (you can do the same thing, and more, with X509_ALGOR_[gs]et0()). | 01 February 2014, 22:03:40 UTC |
| 41235f3 | Andy Polyakov | 18 December 2012, 18:07:20 UTC | util/pl/VC-32.pl fix typo. (cherry picked from commit fb0a520897778ebeebe9aaaf116f207a838ebb3f) | 01 February 2014, 21:55:25 UTC |
| 130c15e | Andy Polyakov | 18 December 2012, 09:42:31 UTC | util/pl/VC-32.pl: refresh, switch to ws2, add crypt32, fix typo (based on suggestions from Pierre Delaage). (cherry picked from commit 668bcfd5ca237fdf6fbef1ab463697a4a48caf39) Resolved conflicts: util/pl/VC-32.pl | 01 February 2014, 21:53:24 UTC |
| 2cc5142 | Andy Polyakov | 19 January 2013, 20:23:13 UTC | Improve WINCE support. Submitted by: Pierre Delaage (cherry picked from commit a006fef78e56b078549a80f4bb4518b6a02eba84) Resolved conflicts: crypto/bio/bss_dgram.c ssl/d1_lib.c util/pl/VC-32.pl | 01 February 2014, 21:48:56 UTC |
| d451ece | Andy Polyakov | 11 June 2012, 08:52:11 UTC | b_sock.c: make getsockopt work in cases when optlen is 64-bit value. (cherry picked from commit 80c42f3e0c34451dd7cfc65e07bc639759ef07d2) | 01 February 2014, 21:33:02 UTC |
| 1121ba1 | Andy Polyakov | 15 July 2012, 13:29:23 UTC | wp-mmx.pl: ~10% performance improvement. (cherry picked from commit ae007d4d09f2ed9940c6e581bab9290d78615506) | 01 February 2014, 21:27:07 UTC |
| 1fb039f | Andy Polyakov | 15 July 2012, 13:37:35 UTC | wp-x86_64.pl: ~10% performance improvement. (cherry picked from commit 701d593f7095db84459c76265349a83d30a4cae5) | 01 February 2014, 21:26:45 UTC |
| 3073927 | Andy Polyakov | 15 July 2012, 13:36:25 UTC | sha512-ia64.pl: 15-20% performance improvement. (cherry picked from commit 46a2b3387a3feb044527a58a89555029c809190d) | 01 February 2014, 21:21:57 UTC |
| b6c2029 | Andy Polyakov | 22 April 2012, 21:18:30 UTC | objxref.pl: improve portability. (cherry picked from commit 71fa3bc5ece9121d1aa9bb513b5641e9ea605e14) | 01 February 2014, 21:17:36 UTC |
| 45d0102 | Adam Langley | 03 June 2013, 19:45:11 UTC | Add volatile qualifications to two blocks of inline asm to stop GCC from eliminating them as dead code. Both volatile and "memory" are used because of some concern that the compiler may still cache values across the asm block without it, and because this was such a painful debugging session that I wanted to ensure that it's never repeated. (cherry picked from commit 7753a3a68431aa81b82beea4c3f5374b41454679) | 01 February 2014, 21:01:46 UTC |
| 7e56902 | Andy Polyakov | 01 February 2014, 20:51:51 UTC | PPC assembly pack: ppc64-mont update from master. | 01 February 2014, 20:51:51 UTC |
| 50f1b47 | Andy Polyakov | 01 February 2014, 20:48:31 UTC | PPC assembly pack: jumbo update from master. Add Vector Permutation AES and little-endian support. | 01 February 2014, 20:48:31 UTC |
| 5572bc4 | Andy Polyakov | 01 February 2014, 20:27:46 UTC | crypto/aes/asm/aesni-x86[_64].pl: jumbo update from master. | 01 February 2014, 20:27:46 UTC |
| 729d334 | Andy Polyakov | 01 February 2014, 20:24:55 UTC | crypto/sha/asm/sha1-x86_64.pl: jumbo update from master. | 01 February 2014, 20:24:55 UTC |
| cacdfcb | Ben Laurie | 01 February 2014, 18:29:26 UTC | Add more accessors. | 01 February 2014, 18:30:23 UTC |
| 519ad9b | Ben Laurie | 01 February 2014, 17:52:26 UTC | Add accessor for x509.cert_info. | 01 February 2014, 18:30:23 UTC |
| 7b2d785 | Ben Laurie | 29 January 2014, 16:57:32 UTC | Fix warning. | 29 January 2014, 16:57:32 UTC |
| f2d678e | Dr. Stephen Henson | 29 January 2014, 00:59:35 UTC | Clarify docs. Remove reference to ERR_TXT_MALLOCED in the error library as that is only used internally. Indicate that returned error data must not be freed. | 29 January 2014, 00:59:35 UTC |
| 448e9b7 | Dr. Stephen Henson | 28 January 2014, 15:35:16 UTC | typo (cherry picked from commit cb2182676bdf652070bc272a3896d957763a4324) | 28 January 2014, 15:36:15 UTC |
| 2c4c986 | Dr. Stephen Henson | 28 January 2014, 15:15:26 UTC | Fix demo comment: 0.9.9 never released. (cherry picked from commit 717cc8589540b95122a652dee68e6a75b6262d93) | 28 January 2014, 15:17:32 UTC |
| a99540a | Dr. Stephen Henson | 28 January 2014, 15:10:27 UTC | Check i before r[i]. PR#3244 (cherry picked from commit 9614d2c676ffe74ce0c919d9e5c0d622a011cbed) | 28 January 2014, 15:14:47 UTC |
| 9614ed6 | Dr. Stephen Henson | 28 January 2014, 13:51:58 UTC | Add loaded dynamic ENGINEs to list. Always add a dynamically loaded ENGINE to list. Otherwise it can cause problems when multiply loaded, especially if it adds new public key methods. For all current engines we only want a single implementation anyway. (cherry picked from commit e933f91f50108a43c0198cdc63ecdfdbc77b4d0d) | 28 January 2014, 13:57:14 UTC |
| aabfee6 | Dr. Stephen Henson | 25 January 2014, 23:20:34 UTC | Certificate callback doc. (cherry picked from commit 46ab9bbd7fa610d775fe645dd0fe6d509c8dff3a) | 28 January 2014, 13:38:55 UTC |
| cee1d9e | Dr. Stephen Henson | 27 January 2014, 14:59:46 UTC | make update | 27 January 2014, 14:59:46 UTC |
| 285f7fb | Dr. Stephen Henson | 26 January 2014, 00:51:09 UTC | Add cert callback retry test. (cherry picked from commit 3323314fc1c6d18e650a2de97f7cf9892ac92a60) | 27 January 2014, 14:41:38 UTC |
| ede90b1 | Dr. Stephen Henson | 25 January 2014, 13:31:07 UTC | Support retries in certificate callback (cherry picked from commit 0ebc965b9ca4352e407bb7cfa65ac235942117f6) Conflicts: ssl/s3_srvr.c ssl/ssl3.h | 27 January 2014, 14:41:38 UTC |
| 5e7329d | Dr. Stephen Henson | 26 January 2014, 16:28:27 UTC | Compare encodings in X509_cmp as well as hash. (cherry picked from commit ec492c8a5a1491949166c4b37df8666741180f4d) | 27 January 2014, 14:33:10 UTC |
| 9f1979b | Dr. Stephen Henson | 27 January 2014, 14:30:29 UTC | New function to set compression methods so they can be safely freed. (cherry picked from commit cbb67448277232c8403f96edad4931c4203e7746) | 27 January 2014, 14:32:44 UTC |
| 3fcf327 | Dr. Stephen Henson | 05 March 2010, 13:28:21 UTC | Add -engine_impl option to dgst which will use an implementation of an algorithm from the supplied engine instead of just the default one. (cherry picked from commit bb845ee044587a91589357a772a02cffb0ba4454) | 23 January 2014, 18:35:42 UTC |
| 3f4742b | Dr. Stephen Henson | 23 January 2014, 17:13:37 UTC | make update | 23 January 2014, 17:13:37 UTC |
| c4f01c5 | Dr. Stephen Henson | 16 January 2014, 14:06:19 UTC | Add new function SSL_CTX_get_ssl_method(). Partial fix for PR#3183. (cherry picked from commit ba168244a14bbd056e502d7daa04cae4aabe9d0d) | 16 January 2014, 14:08:42 UTC |
| b7a8550 | Kaspar Brand | 16 January 2014, 13:46:31 UTC | Omit initial status request callback check. PR#3178 (cherry picked from commit d0b039d4a3a19b106cc2cb938125b86aca4974aa) | 16 January 2014, 13:48:23 UTC |
| e775891 | Zoltan Arpadffy | 11 January 2014, 22:44:04 UTC | VMS fixes | 11 January 2014, 22:44:04 UTC |
| ae6fbb5 | Jeff Trawick | 10 January 2014, 23:00:50 UTC | typo (cherry picked from commit 5edce5685f26c1bb7854d4cdf291b9604fcc5dbf) | 10 January 2014, 23:02:46 UTC |
| f9c1f03 | Jeff Trawick | 10 January 2014, 23:01:30 UTC | typo (cherry picked from commit 4b64e0cbdb563e13a6f7cd8631b31532c04f1234) | 10 January 2014, 23:02:20 UTC |
| 50701af | Dr. Stephen Henson | 09 January 2014, 22:47:22 UTC | Fix bug in X509_V_FLAG_IGNORE_CRITICAL CRL handling. (cherry picked from commit 8f4077ca69076cebaca51b7b666db1ed49e46b9e) | 09 January 2014, 22:53:50 UTC |
| 1d6af3d | Dr. Stephen Henson | 07 January 2014, 15:44:09 UTC | update NEWS | 09 January 2014, 22:50:07 UTC |
| 392fd8f | Andy Polyakov | 09 January 2014, 12:44:59 UTC | bn/asm/x86_64-mont5.pl: fix compilation error on Solaris. (cherry picked from commit eedab5241e32f9f185cfee23a0c67264d3e3ecf2) | 09 January 2014, 12:47:53 UTC |
| 802db0f | Dr. Stephen Henson | 07 January 2014, 15:38:15 UTC | Sync CHANGES | 07 January 2014, 15:41:11 UTC |
| 2f97241 | Dr. Stephen Henson | 07 January 2014, 15:37:35 UTC | Add fix for CVE-2013-4353 | 07 January 2014, 15:41:11 UTC |
| a05a2c6 | Dr. Stephen Henson | 07 January 2014, 15:26:19 UTC | Update NEWS. | 07 January 2014, 15:41:04 UTC |
| e341406 | Andy Polyakov | 04 January 2014, 17:04:53 UTC | sha/asm/sha256-armv4.pl: add NEON code path. (and shave off cycle even from integer-only code) (cherry picked from commit ad0d2579cf3a293a35a5b606afc5a97c71cf6ca7) | 04 January 2014, 17:06:36 UTC |
| acd9121 | Andy Polyakov | 04 January 2014, 16:40:13 UTC | aesni-sha1-x86_64.pl: harmonize [Atom-specific optimizations] with master branch. | 04 January 2014, 16:42:13 UTC |
| b17d6b8 | Dr. Stephen Henson | 04 January 2014, 13:50:52 UTC | Restore SSL_OP_MSIE_SSLV2_RSA_PADDING The flag SSL_OP_MSIE_SSLV2_RSA_PADDING hasn't done anything since OpenSSL 0.9.7h but deleting it will break source compatibility with any software that references it. Restore it but #define to zero. | 04 January 2014, 13:58:51 UTC |
| b9fa413 | Dr. Stephen Henson | 03 January 2014, 22:38:03 UTC | Use algorithm specific chains for certificates. Fix a limitation in SSL_CTX_use_certificate_chain_file(): use algorithm specific chains instead of the shared chain. Update docs. (cherry picked from commit a4339ea3ba045b7da038148f0d48ce25f2996971) Conflicts: CHANGES | 03 January 2014, 22:45:20 UTC |
| 4abe148 | Andy Polyakov | 03 January 2014, 20:52:49 UTC | ssl/t1_enc.c: optimize PRF (suggested by Intel). (cherry picked from commit e8b0dd57c0e9c53fd0708f0f458a7a2fd7a95c91) | 03 January 2014, 20:56:03 UTC |
| 04d6940 | Dr. Stephen Henson | 02 January 2014, 19:12:47 UTC | update NEWS | 02 January 2014, 19:12:47 UTC |
| 8511b5f | Dr. Stephen Henson | 24 December 2013, 18:17:00 UTC | Don't change version number if session established When sending an invalid version number alert don't change the version number to the client version if a session is already established. Thanks to Marek Majkowski for additional analysis of this issue. PR#3191 (cherry picked from commit b77b58a398c8b9b4113f3fb6b48e162a3b8d4527) | 02 January 2014, 15:07:51 UTC |
| 546d676 | Dr. Stephen Henson | 24 December 2013, 18:15:28 UTC | Update curve list size. | 29 December 2013, 16:30:34 UTC |
| ccbb8d5 | Andy Polyakov | 28 December 2013, 12:31:14 UTC | sparcv9cap.c: omit random detection. PR: 3202 (cherry picked from commit 926725b3d7c1528f2dc116a48623c42264188277) | 28 December 2013, 12:32:45 UTC |
| d7d7e7b | Andy Polyakov | 28 December 2013, 11:17:08 UTC | ARM assembly pack: make it work with older toolchain. (cherry picked from commit 2218c296b4981af6f2639bbd7eabfb89437fe776) | 28 December 2013, 11:18:11 UTC |
| 80b6d97 | Dr. Stephen Henson | 20 December 2013, 15:26:50 UTC | Fix DTLS retransmission from previous session. For DTLS we might need to retransmit messages from the previous session so keep a copy of write context in DTLS retransmission buffers instead of replacing it after sending CCS. CVE-2013-6450. (cherry picked from commit 34628967f1e65dc8f34e000f0f5518e21afbfc7b) | 20 December 2013, 23:25:41 UTC |
| ff64ab3 | Dr. Stephen Henson | 20 December 2013, 15:12:26 UTC | Ignore NULL parameter in EVP_MD_CTX_destroy. (cherry picked from commit a6c62f0c25a756c263a80ce52afbae888028e986) | 20 December 2013, 23:24:26 UTC |
| fc9c9e4 | Andy Polyakov | 18 December 2013, 21:12:08 UTC | sha1-x86_64.pl: harmonize Win64 SE handlers for SIMD code pathes. (and ensure stack alignment in the process) (cherry picked from commit fc0503a25cd638b93f7af04640c20042e0329b3b) | 18 December 2013, 21:57:14 UTC |
| 68e6ac4 | Andy Polyakov | 18 December 2013, 20:42:46 UTC | evp/e_[aes|camellia].c: fix typo in CBC subroutine. It worked because it was never called. (cherry picked from commit e9c80e04c1a3b5a0de8e666155ab4ecb2697a77d) | 18 December 2013, 21:56:24 UTC |
| e34b7e9 | Andy Polyakov | 18 December 2013, 20:27:35 UTC | sha512.c: fullfull implicit API contract in SHA512_Transform. SHA512_Transform was initially added rather as tribute to tradition than for practucal reasons. But use was recently found in ssl/s3_cbc.c and it turned to be problematic on platforms that don't tolerate misasligned references to memory and lack assembly subroutine. (cherry picked from commit cdd1acd788020d2c525331da1712ada778f1373c) | 18 December 2013, 21:56:00 UTC |
| a32ba49 | Dr. Stephen Henson | 14 December 2013, 13:55:48 UTC | Check EVP errors for handshake digests. Partial mitigation of PR#3200 (cherry picked from commit 0294b2be5f4c11e60620c0018674ff0e17b14238) | 18 December 2013, 13:27:15 UTC |
| 3a0c715 | Dr. Stephen Henson | 25 February 2010, 00:08:23 UTC | verify parameter enumeration functions (cherry picked from commit 9b3d75706ef0114362f04665a3c745bfef59d023) Conflicts: crypto/x509/x509_vpm.c | 13 December 2013, 15:52:27 UTC |
