0a4fda7 | Dr. Stephen Henson | 15 September 2008, 14:26:34 UTC | Oops... use correct version number this time.... | 15 September 2008, 14:26:34 UTC |
3745e57 | Dr. Stephen Henson | 15 September 2008, 12:19:09 UTC | Prepare for next version.... | 15 September 2008, 12:19:09 UTC |
b7e7aa0 | Dr. Stephen Henson | 15 September 2008, 10:28:13 UTC | Begin release of OpenSSL 0.9.8i. | 15 September 2008, 10:28:13 UTC |
1098fd4 | Andy Polyakov | 15 September 2008, 07:19:41 UTC | Compilation warning fix [from HEAD, "must have, as our Windows build does not tolerate warnings]. | 15 September 2008, 07:19:41 UTC |
393906d | Andy Polyakov | 15 September 2008, 05:45:36 UTC | Fix yesterday typos in bss_dgram.c [from HEAD]. | 15 September 2008, 05:45:36 UTC |
4468814 | Bodo Möller | 14 September 2008, 19:50:53 UTC | update comment | 14 September 2008, 19:50:53 UTC |
cfb95ba | Andy Polyakov | 14 September 2008, 19:23:46 UTC | Winsock handles SO_RCVTIMEO in unique manner... [from HEAD]. PR: 1648 | 14 September 2008, 19:23:46 UTC |
c198c26 | Bodo Möller | 14 September 2008, 18:16:09 UTC | oops | 14 September 2008, 18:16:09 UTC |
54d6ddb | Andy Polyakov | 14 September 2008, 17:57:03 UTC | dtls1_write_bytes consumers expect amount of bytes written per call, not overall [from HEAD]. PR: 1604 | 14 September 2008, 17:57:03 UTC |
1af12ff | Dr. Stephen Henson | 14 September 2008, 16:43:37 UTC | Fix error code discrepancy. Make update. | 14 September 2008, 16:43:37 UTC |
bd72b8e | Dr. Stephen Henson | 14 September 2008, 15:46:36 UTC | Stop warnings about value not used. | 14 September 2008, 15:46:36 UTC |
200d00c | Bodo Möller | 14 September 2008, 14:02:01 UTC | Fix SSL state transitions. Submitted by: Nagendra Modadugu | 14 September 2008, 14:02:01 UTC |
669b912 | Bodo Möller | 14 September 2008, 13:51:49 UTC | Really get rid of unsafe double-checked locking. Also, "CHANGES" clean-ups. | 14 September 2008, 13:51:49 UTC |
36a4a67 | Bodo Möller | 14 September 2008, 13:42:40 UTC | Some precautions to avoid potential security-relevant problems. | 14 September 2008, 13:42:40 UTC |
3413424 | Andy Polyakov | 13 September 2008, 18:25:36 UTC | DTLS didn't handle alerts correctly [from HEAD]. PR: 1632 | 13 September 2008, 18:25:36 UTC |
80fc840 | Dr. Stephen Henson | 12 September 2008, 17:44:26 UTC | file rc4_fblk.c was added on branch OpenSSL_0_9_8-stable on 2008-09-16 11:02:19 +0000 | 12 September 2008, 17:44:26 UTC |
6455100 | Andy Polyakov | 12 September 2008, 14:47:02 UTC | AIX build updates [from HEAD]. | 12 September 2008, 14:47:02 UTC |
b7c8b4f | Ben Laurie | 12 September 2008, 13:29:59 UTC | Allow soft-loading engines. | 12 September 2008, 13:29:59 UTC |
f58d0f7 | Ben Laurie | 12 September 2008, 13:26:07 UTC | Don't hide commands. | 12 September 2008, 13:26:07 UTC |
8f59c61 | Dr. Stephen Henson | 03 September 2008, 22:13:04 UTC | If tickets disabled behave as if no ticket received to support stateful resume. | 03 September 2008, 22:13:04 UTC |
fd43ae3 | Dr. Stephen Henson | 31 August 2008, 11:15:35 UTC | Fix flag clash... only used internally when policy checking is enabled. | 31 August 2008, 11:15:35 UTC |
cdd0f3b | Bodo Möller | 14 August 2008, 21:37:20 UTC | Don't use assertions to check application-provided arguments; and don't unnecessarily fail on input size 0. | 14 August 2008, 21:37:20 UTC |
f9f6f0e | Bodo Möller | 13 August 2008, 19:44:44 UTC | sanity check PR: 1679 | 13 August 2008, 19:44:44 UTC |
405f382 | Dr. Stephen Henson | 05 August 2008, 15:56:11 UTC | Fix from HEAD. | 05 August 2008, 15:56:11 UTC |
a750273 | Dr. Stephen Henson | 02 August 2008, 11:17:04 UTC | Fix from HEAD. | 02 August 2008, 11:17:04 UTC |
ddc5f6f | Lutz Jänicke | 01 August 2008, 15:03:22 UTC | Refer to SSL_pending from the man page for SSL_read | 01 August 2008, 15:03:22 UTC |
4231b35 | Dr. Stephen Henson | 30 July 2008, 15:42:19 UTC | Fix from HEAD. | 30 July 2008, 15:42:19 UTC |
df1f7b4 | Bodo Möller | 17 July 2008, 22:11:24 UTC | We should check the eight bytes starting at p[-9] for rollback attack detection, or the probability for an erroneous RSA_R_SSLV3_ROLLBACK_ATTACK will be larger than necessary. PR: 1695 | 17 July 2008, 22:11:24 UTC |
0b7545b | Andy Polyakov | 17 July 2008, 11:59:07 UTC | Harmonize darwin-i386-cc config line with HEAD. | 17 July 2008, 11:59:07 UTC |
3a72137 | Andy Polyakov | 17 July 2008, 10:00:18 UTC | darwin64-ppc-cc experimental line accidentally made it to stable:-( PR: 1699 | 17 July 2008, 10:00:18 UTC |
e5d289c | Andy Polyakov | 17 July 2008, 09:51:34 UTC | sha1-586.pl: update from HEAD. PR: 1681 | 17 July 2008, 09:51:34 UTC |
0ff3766 | Bodo Möller | 16 July 2008, 18:10:28 UTC | Make sure not to read beyond end of buffer | 16 July 2008, 18:10:28 UTC |
3562202 | Dr. Stephen Henson | 13 July 2008, 22:38:52 UTC | Fix from HEAD. | 13 July 2008, 22:38:52 UTC |
2bf4b96 | Dr. Stephen Henson | 13 July 2008, 15:56:01 UTC | Update from HEAD. | 13 July 2008, 15:56:01 UTC |
811e08a | Dr. Stephen Henson | 13 July 2008, 14:33:16 UTC | Update from HEAD. | 13 July 2008, 14:33:16 UTC |
dd6e904 | Dr. Stephen Henson | 26 June 2008, 23:26:52 UTC | Add support for Local Machine Keyset attribute in PKCS#12 files. | 26 June 2008, 23:26:52 UTC |
a86c626 | Dr. Stephen Henson | 26 June 2008, 23:20:52 UTC | Sync OIDs with HEAD so we don't need to rebuild OID database and change all NIDs every time an OID is added to 0.9.8. | 26 June 2008, 23:20:52 UTC |
705c3de | Dr. Stephen Henson | 25 June 2008, 10:41:48 UTC | Changes to allow capi ENGINE to compile with older headers on e.g. VC6. | 25 June 2008, 10:41:48 UTC |
4afcee8 | Bodo Möller | 23 June 2008, 20:46:28 UTC | avoid potential infinite loop in final reduction round of BN_GF2m_mod_arr() Submitted by: Huang Ying Reviewed by: Douglas Stebila | 23 June 2008, 20:46:28 UTC |
9627017 | Dr. Stephen Henson | 22 June 2008, 01:10:04 UTC | Update ordinals. | 22 June 2008, 01:10:04 UTC |
e0f6c15 | Dr. Stephen Henson | 21 June 2008, 23:28:02 UTC | Make WIN32 build work with no-rc4 | 21 June 2008, 23:28:02 UTC |
ecc20b7 | Dr. Stephen Henson | 18 June 2008, 14:42:27 UTC | Fix typo and filter on X509_PURPOSE_SSL_CLIENT when presenting certs. | 18 June 2008, 14:42:27 UTC |
540e455 | Dr. Stephen Henson | 18 June 2008, 12:05:23 UTC | Add support for machine stores and handle provider type errors properly in keys. | 18 June 2008, 12:05:23 UTC |
14748ad | Dr. Stephen Henson | 16 June 2008, 16:56:43 UTC | Make ssl code consistent with FIPS branch. The new code has no effect at present because it asserts either noop flags or is inside OPENSSL_FIPS #ifdef's. | 16 June 2008, 16:56:43 UTC |
ff2ab9e | Dr. Stephen Henson | 16 June 2008, 15:22:49 UTC | Add error code for FIPS library and make library numbers consistent. | 16 June 2008, 15:22:49 UTC |
cc5cc3b | Dr. Stephen Henson | 15 June 2008, 16:52:37 UTC | Sync ordinals with FIPS branch. FIPS specific functions currently are place holders to keep ordinals consistent. | 15 June 2008, 16:52:37 UTC |
1f32062 | Dr. Stephen Henson | 09 June 2008, 16:50:48 UTC | Add acknowledgement. | 09 June 2008, 16:50:48 UTC |
f113bb9 | Ben Laurie | 07 June 2008, 17:22:37 UTC | OPENSSL_isservice() is defined on all platforms. | 07 June 2008, 17:22:37 UTC |
4681147 | Dr. Stephen Henson | 06 June 2008, 20:48:57 UTC | Update from head. | 06 June 2008, 20:48:57 UTC |
52c3f23 | Dr. Stephen Henson | 06 June 2008, 15:54:00 UTC | Update ordinals. | 06 June 2008, 15:54:00 UTC |
3dc4664 | Dr. Stephen Henson | 06 June 2008, 15:52:32 UTC | Update CryptoAPI ENGINE from head. Export OPENSSL_isservice(). | 06 June 2008, 15:52:32 UTC |
353415c | Dr. Stephen Henson | 05 June 2008, 16:56:00 UTC | Make headers work with older versions of Window platform SDK. | 05 June 2008, 16:56:00 UTC |
1a12ce8 | Dr. Stephen Henson | 05 June 2008, 15:32:05 UTC | Update CHANGES. | 05 June 2008, 15:32:05 UTC |
0278e15 | Dr. Stephen Henson | 05 June 2008, 15:13:03 UTC | If auto load ENGINE lookup fails retry adding builtin ENGINEs. | 05 June 2008, 15:13:03 UTC |
f01f085 | Dr. Stephen Henson | 05 June 2008, 15:09:40 UTC | Configure options of form -Dfoo=bar should get added to CFLAGS in mk1mf.pl | 05 June 2008, 15:09:40 UTC |
bca68e9 | Dr. Stephen Henson | 05 June 2008, 11:44:53 UTC | Don't show choice dialog if only one cert. | 05 June 2008, 11:44:53 UTC |
a3f67ec | Dr. Stephen Henson | 05 June 2008, 11:38:03 UTC | Search $OPTIONS for -DOPENSSL_CAPIENG_DIALOG because $cflags is no complete at this point. | 05 June 2008, 11:38:03 UTC |
56ef1cb | Dr. Stephen Henson | 05 June 2008, 11:23:35 UTC | include engine.h if needed. | 05 June 2008, 11:23:35 UTC |
a141109 | Dr. Stephen Henson | 05 June 2008, 10:57:21 UTC | Update ordinals. | 05 June 2008, 10:57:21 UTC |
f35f7d9 | Dr. Stephen Henson | 05 June 2008, 10:56:51 UTC | Update from HEAD. | 05 June 2008, 10:56:51 UTC |
dfbf646 | Dr. Stephen Henson | 04 June 2008, 23:00:59 UTC | Remove some unneeded columns from dialog. | 04 June 2008, 23:00:59 UTC |
5913715 | Dr. Stephen Henson | 04 June 2008, 22:39:29 UTC | Update from HEAD. | 04 June 2008, 22:39:29 UTC |
5799b72 | Dr. Stephen Henson | 04 June 2008, 20:11:17 UTC | Oops... missed this part of backport. | 04 June 2008, 20:11:17 UTC |
1cfe684 | Dr. Stephen Henson | 04 June 2008, 19:52:36 UTC | Backport s_client changes. | 04 June 2008, 19:52:36 UTC |
f4c98a6 | Dr. Stephen Henson | 04 June 2008, 18:49:44 UTC | Update CryptoAPI ENGINE from HEAD. | 04 June 2008, 18:49:44 UTC |
4aefb1d | Dr. Stephen Henson | 04 June 2008, 18:35:27 UTC | Backport more ENGINE SSL client auth code to 0.9.8. | 04 June 2008, 18:35:27 UTC |
aa03989 | Dr. Stephen Henson | 04 June 2008, 18:01:40 UTC | Backport ssl client auth ENGINE support to 0.9.8. | 04 June 2008, 18:01:40 UTC |
a865b2c | Bodo Möller | 31 May 2008, 13:42:52 UTC | Everyone's had a few years to port their favorite additions to 0.9.7 to HEAD (and the 0.9.8 branch). Remove the reminder. | 31 May 2008, 13:42:52 UTC |
694ce31 | Dr. Stephen Henson | 30 May 2008, 17:44:36 UTC | DSA method slightly more tested and fixed ;-) | 30 May 2008, 17:44:36 UTC |
94299a3 | Dr. Stephen Henson | 30 May 2008, 17:07:18 UTC | Update error codes. | 30 May 2008, 17:07:18 UTC |
3aaeb5c | Dr. Stephen Henson | 30 May 2008, 17:03:16 UTC | Untested initial CryptoAPI dsa signing code. | 30 May 2008, 17:03:16 UTC |
80ec6cc | Dr. Stephen Henson | 30 May 2008, 16:31:51 UTC | Some DSA method structures and placeholders, not complete yet. | 30 May 2008, 16:31:51 UTC |
3d83320 | Dr. Stephen Henson | 30 May 2008, 16:14:34 UTC | Delete unused functions. | 30 May 2008, 16:14:34 UTC |
4ab252d | Dr. Stephen Henson | 30 May 2008, 15:28:40 UTC | Get BIO_snprintf() argument order right.... | 30 May 2008, 15:28:40 UTC |
058ffd7 | Dr. Stephen Henson | 30 May 2008, 15:24:19 UTC | Add new error codes, log unknown magic or algorithm IDs. | 30 May 2008, 15:24:19 UTC |
0330a13 | Dr. Stephen Henson | 30 May 2008, 15:05:39 UTC | Initial DSA public key loading support in CryptoAPI ENGINE. | 30 May 2008, 15:05:39 UTC |
467325b | Dr. Stephen Henson | 30 May 2008, 15:04:58 UTC | Add support for ENGINE loaded keys in dsa app. | 30 May 2008, 15:04:58 UTC |
00f716b | Dr. Stephen Henson | 30 May 2008, 11:58:50 UTC | Add error codes for blob sanity checks, rebuild error table. | 30 May 2008, 11:58:50 UTC |
2f2f032 | Dr. Stephen Henson | 30 May 2008, 11:54:51 UTC | Blob type and algorithm type sanity checks | 30 May 2008, 11:54:51 UTC |
feb200b | Dr. Stephen Henson | 30 May 2008, 10:57:13 UTC | Don't set extended type is mbstring flag set. | 30 May 2008, 10:57:13 UTC |
3894667 | Dr. Stephen Henson | 30 May 2008, 10:31:43 UTC | Update default depflag. | 30 May 2008, 10:31:43 UTC |
203ac69 | Dr. Stephen Henson | 29 May 2008, 23:47:40 UTC | Load CryptoAPI engine if supported. | 29 May 2008, 23:47:40 UTC |
bb592c7 | Dr. Stephen Henson | 29 May 2008, 23:15:41 UTC | Update mkdef.pl to recognize CAPIENG | 29 May 2008, 23:15:41 UTC |
777d717 | Dr. Stephen Henson | 29 May 2008, 21:03:48 UTC | Make CryptoAPI engine look more like the others.... | 29 May 2008, 21:03:48 UTC |
143d845 | Dr. Stephen Henson | 29 May 2008, 17:51:22 UTC | Make dynamic engine link work with capi. | 29 May 2008, 17:51:22 UTC |
a29669d | Dr. Stephen Henson | 29 May 2008, 17:20:42 UTC | Disable CryptoAPI engine compilation by default. | 29 May 2008, 17:20:42 UTC |
e5be1e1 | Dr. Stephen Henson | 29 May 2008, 17:13:15 UTC | Create error codes, compile in source. | 29 May 2008, 17:13:15 UTC |
9e47c34 | Dr. Stephen Henson | 29 May 2008, 16:46:38 UTC | CryptoAPI ENGINE... initial version, not compiled in yet. | 29 May 2008, 16:46:38 UTC |
cb896f8 | Bodo Möller | 28 May 2008, 22:30:39 UTC | FAQ updates from HEAD | 28 May 2008, 22:30:39 UTC |
cec9bce | Bodo Möller | 28 May 2008, 22:22:50 UTC | fix whitespace | 28 May 2008, 22:22:50 UTC |
3f79793 | Mark J. Cox | 28 May 2008, 07:47:50 UTC | After tagging, bump ready for 0.9.8i development | 28 May 2008, 07:47:50 UTC |
0d01d8a | Mark J. Cox | 28 May 2008, 07:37:14 UTC | Prepare for 0.9.8h release | 28 May 2008, 07:37:14 UTC |
2c0fa03 | Mark J. Cox | 28 May 2008, 07:29:27 UTC | Fix flaw if 'Server Key exchange message' is omitted from a TLS handshake which could lead to a cilent crash as found using the Codenomicon TLS test suite (CVE-2008-1672) Reviewed by: openssl-security@openssl.org Obtained from: mark@awe.com | 28 May 2008, 07:29:27 UTC |
d3b3a6d | Mark J. Cox | 28 May 2008, 07:26:33 UTC | Fix double-free in TLS server name extensions which could lead to a remote crash found by Codenomicon TLS test suite (CVE-2008-0891) Reviewed by: openssl-security@openssl.org Obtained from: jorton@redhat.com | 28 May 2008, 07:26:33 UTC |
fc260b0 | Bodo Möller | 27 May 2008, 18:43:30 UTC | grammar | 27 May 2008, 18:43:30 UTC |
b3c79a8 | Bodo Möller | 27 May 2008, 18:41:02 UTC | year 2008 | 27 May 2008, 18:41:02 UTC |
f0ecefc | Lutz Jänicke | 26 May 2008, 06:23:55 UTC | Add README about removed root CA certificates. | 26 May 2008, 06:23:55 UTC |
b011840 | Lutz Jänicke | 26 May 2008, 06:21:10 UTC | Reword comment to be much shorter to stop other people from complaining about "overcommenting" | 26 May 2008, 06:21:10 UTC |
5f23288 | Lutz Jänicke | 23 May 2008, 10:37:22 UTC | Clear error queue when starting SSL_CTX_use_certificate_chain_file PR: 1417, 1513 Submitted by: Erik de Castro Lopo <mle+openssl@mega-nerd.com> | 23 May 2008, 10:37:22 UTC |
45c58c7 | Lutz Jänicke | 23 May 2008, 08:59:56 UTC | Remove all root CA files (beyond test CAs including private key) from the OpenSSL distribution. | 23 May 2008, 08:59:56 UTC |