summaryrefslogtreecommitdiffstats
path: root/crypto/openssl
Commit message (Collapse)AuthorAgeFilesLines
* Merge OpenSSL 0.9.8k into head.simon2009-06-14795-14045/+76865
|\ | | | | | | Approved by: re
| * Flatten OpenSSL vendor tree.simon2008-08-231806-454887/+0
| |
* | Don't leak information via uninitialized space in db(3) records. [09:07]cperciva2009-04-223-0/+16
| | | | | | | | | | | | | | | | | | | | | | Sanity-check string lengths in order to stop OpenSSL crashing when printing corrupt BMPString or UniversalString objects. [09:08] Security: FreeBSD-SA-09:07.libc Security: FreeBSD-SA-09:08.openssl Security: CVE-2009-0590 Approved by: re (kensmith) Approved by: so (cperciva)
* | Prevent cross-site forgery attacks on lukemftpd(8) due to splittingsimon2009-01-079-13/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | long commands into multiple requests. [09:01] Fix incorrect OpenSSL checks for malformed signatures due to invalid check of return value from EVP_VerifyFinal(), DSA_verify, and DSA_do_verify. [09:02] Security: FreeBSD-SA-09:01.lukemftpd Security: FreeBSD-SA-09:02.openssl Obtained from: NetBSD [SA-09:01] Obtained from: OpenSSL Project [SA-09:02] Approved by: so (simon)
* | The vendor area is the proper home for these files now.simon2008-09-212-93/+0
| |
* | Unbreak detection of cryptodev support for FreeBSD which was brokensimon2008-01-131-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | with OpenSSL 0.9.8 import. Note that this does not enable cryptodev by default, as it was the case with OpenSSL 0.9.7 in FreeBSD base, but this change makes it possible to enable cryptodev at all. This has been submitted upstream as: http://rt.openssl.org/Ticket/Display.html?id=1624 Submitted by: nork
* | This commit was generated by cvs2svn to compensate for changes in r172767,simon2007-10-184-615/+544
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Import DTLS security fix from upstream OpenSSL_0_9_8-stable branch.simon2007-10-184-615/+544
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the OpenSSL advisory: Andy Polyakov discovered a flaw in OpenSSL's DTLS implementation which could lead to the compromise of clients and servers with DTLS enabled. DTLS is a datagram variant of TLS specified in RFC 4347 first supported in OpenSSL version 0.9.8. Note that the vulnerabilities do not affect SSL and TLS so only clients and servers explicitly using DTLS are affected. We believe this flaw will permit remote code execution. Security: CVE-2007-4995 Security: http://www.openssl.org/news/secadv_20071012.txt
* | Correct a buffer overflow in OpenSSL SSL_get_shared_ciphers().simon2007-10-031-11/+11
| | | | | | | | | | Security: FreeBSD-SA-07:08.openssl Approved by: re (security blanket)
* | Fix runtime crash in OpenSSL with "Illegal instruction" by making somesimon2007-05-223-23/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | casts a bit less evil. This was e.g. seen when using portsnap as: Fetching snapshot tag from portsnap3.FreeBSD.org... Illegal instruction Note the patch is slightly different from kan's original patch to match style in the OpenSSL source files a bit better. Submitted by: kan Tested by: many
* | - Bring upgrade produce up-to-date for OpenSSL 0.9.8e.simon2007-03-151-2/+3
| | | | | | | | - Add reminder to bump version numer in Makefile.inc.
* | This commit was generated by cvs2svn to compensate for changes in r167617,simon2007-03-151-1/+1
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Import fix from upstream OpenSSL_0_9_8-stable branch:simon2007-03-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | EVP_CIPHER_CTX_key_length() should return the set key length in the EVP_CIPHER_CTX structure which may not be the same as the underlying cipher key length for variable length ciphers. This fixes problems in OpenSSH using some ciphers, and possibly other applications. See also: http://bugzilla.mindrot.org/show_bug.cgi?id=1291
* | Resolve conflicts after import of OpenSSL 0.9.8e.simon2007-03-1511-48/+51
| |
* | This commit was generated by cvs2svn to compensate for changes in r167612,simon2007-03-15192-757/+4053
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor import of OpenSSL 0.9.8e.simon2007-03-15203-805/+4104
| |
* | This commit was generated by cvs2svn to compensate for changes in r162916,simon2006-10-011-1/+1
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Import from upstream OpenSSL 0.9.8 branch:simon2006-10-011-1/+1
| | | | | | | | | | | | | | Fix uninitialized free of ctx in compute_key() when the OPENSSL_DH_MAX_MODULUS_BITS check is triggered. This fixes the same issue as FreeBSD-SA-06:23.openssl v1.1.
* | Resolve conflicts after import of OpenSSL 0.9.8d.simon2006-10-018-27/+235
| |
* | This commit was generated by cvs2svn to compensate for changes in r162911,simon2006-10-0190-485/+5802
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor import of OpenSSL 0.9.8d.simon2006-10-0198-511/+6053
| |
* | Correct incorrect PKCS#1 v1.5 padding validation in crypto(3).simon2006-09-101-0/+17
| | | | | | | | | | Obtained from: OpenSSL project Security: FreeBSD-SA-06:19.openssl
* | Resolve conflicts after import of OpenSSL 0.9.8b.simon2006-07-301-53/+215
| | | | | | | | | | | | | | | | This was missed the first time around since eng_padlock.c was not part of OpenSSL 0.9.7e and therefor did not have the v0_9_7e CVS tag used during original resolve of conflicts. Noticed by: Antoine Brodin <antoine.brodin@laposte.net>
* | Sync FREEBSD-Xlist with what was actually excluded from OpenSSL 0.9.8bsimon2006-07-291-0/+4
| | | | | | | | import.
* | Add some rough notes on how to import a new OpenSSL version into thesimon2006-07-291-0/+42
| | | | | | | | FreeBSD base system. Parts are inspired by the OpenSSH upgrade notes.
* | Resolve conflicts after import of OpenSSL 0.9.8b.simon2006-07-29112-24404/+1759
| |
* | This commit was generated by cvs2svn to compensate for changes in r160814,simon2006-07-29892-19778/+97022
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor import of OpenSSL 0.9.8bsimon2006-07-29915-20663/+98999
| |
| * Remove files that are no longer part of OpenSSL from the vendornectar2005-02-2557-15302/+0
| | | | | | | | branch. This time, these are mostly the `Makefile.ssl' files.
* | Correct a man-in-the-middle SSL version rollback vulnerability.cperciva2005-10-111-6/+1
| | | | | | | | Security: FreeBSD-SA-05:21.openssl
* | File removed in update from OpenSSL 0.9.7d -> 0.9.7e.nectar2005-02-251-91/+0
| |
* | This commit was generated by cvs2svn to compensate for changes in r142430,nectar2005-02-2556-15211/+0
| | | | | | | | which included commits to RCS files with non-trunk default branches.
* | Resolve conflicts after import of OpenSSL 0.9.7e.nectar2005-02-2511-25/+80
| |
* | This commit was generated by cvs2svn to compensate for changes in r142425,nectar2005-02-25205-787/+17208
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor import of OpenSSL 0.9.7e.nectar2005-02-25216-812/+17288
| |
| * Clean up the OpenSSL vendor branch by removing files that are notnectar2005-02-25207-36723/+0
| | | | | | | | part of recent releases.
* | Update list of files to remove prior to import of OpenSSL 0.9.7e.nectar2005-02-251-0/+7
| |
* | This commit was generated by cvs2svn to compensate for changes in r142421,nectar2005-02-251-66/+0
| | | | | | | | which included commits to RCS files with non-trunk default branches.
* | Add support for C3 Nehemiah ACE ("Padlock") AES crypto. This comesmarkm2004-08-142-1/+4
| | | | | | | | from OpenSSL 0.9.5 (yet to be released), and is pretty complete.
* | This commit was generated by cvs2svn to compensate for changes in r133665,markm2004-08-131-0/+1054
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Bring in support for VIA C3 Nehemiah Padlock crypto support (AES).markm2004-08-131-0/+1054
| | | | | | | | This is from the upcoming OpenSSL 0.9.8 release.
* | This commit was generated by cvs2svn to compensate for changes in r127904,nectar2004-04-051-4/+9
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Repair a regression in OpenSSL 0.9.7d: processing an unsigned PKCS#7nectar2004-04-051-4/+9
| | | | | | | | | | | | | | | | object could cause a null pointer dereference. Obtained from: OpenSSL CVS (change number 12080) MFC After: 1 day Reported by: Daniel Lang <dl@leo.org>
* | Resolve conflicts after import of OpenSSL 0.9.7d.nectar2004-03-179-6/+17
| |
* | This commit was generated by cvs2svn to compensate for changes in r127128,nectar2004-03-17181-1511/+2602
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor import of OpenSSL 0.9.7d.nectar2004-03-17190-1517/+2619
| |
* | This commit was generated by cvs2svn to compensate for changes in r127114,nectar2004-03-171-0/+8
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Correct a denial-of-service vulnerability in OpenSSL (CAN-2004-0079).nectar2004-03-171-0/+8
| | | | | | | | Obtained from: OpenSSL CVS (http://cvs.openssl.org/chngview?cn=12033)
* | Re-add the FreeBSD RCS keyword for the benefit of mergemaster.nectar2004-01-091-0/+1
| | | | | | | | | | PR: conf/50040 Requested by: Dimitry Andric <dim@xs4all.nl>
* | Remove files no longer included with OpenSSL as of version 0.9.7c.nectar2003-10-011-4/+0
| |
OpenPOWER on IntegriCloud