aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2007-02-23Update FAQ,NEWS in HEAD.Dr. Stephen Henson2-1/+11
2007-02-22Fix incorrect substitution that happened during the recent ciphersuiteBodo Möller1-1/+1
selection remodeling Submitted by: Victor Duchovni
2007-02-22Fix problem with multi line responses in -starttls by using a bufferingLutz Jänicke1-8/+31
BIO and BIO_gets().
2007-02-21Extend SMTP and IMAP protocol handling to perform the requiredLutz Jänicke2-1/+35
EHLO or CAPABILITY handshake before sending STARTTLS Submitted by: Goetz Babin-Ebell <goetz@shomitefo.de>
2007-02-21Add automatic detection for Linux on SuperHLutz Jänicke1-0/+2
PR: 1152 Submitted by: Mike Frysinger <vapier@gentoo.org>
2007-02-21Add support for m68k linuxLutz Jänicke1-0/+1
PR: 1277 Submitted by: Mike Frysinger <vapier@gentoo.org>
2007-02-21Fix incorrect handling of special charactersLutz Jänicke1-2/+2
PR: 1459 Submitted by: tnitschke@innominate.com Reviewed by: steve@openssl.org
2007-02-21Update from 0.9.7-stable.Dr. Stephen Henson3-1/+9
2007-02-21prefer SHA1 over MD5 (this affects the Kerberos ciphersuites)Bodo Möller1-2/+5
2007-02-21delete obsolete commentBodo Möller1-4/+1
2007-02-20SSL_kKRB5 ciphersuites shouldn't be preferred by defaultBodo Möller1-0/+1
2007-02-20Improve ciphersuite order stability when disabling ciphersuites.Bodo Möller2-20/+98
Change ssl_create_cipher_list() to prefer ephemeral ECDH over ephemeral DH.
2007-02-20fix a typo in the new ciphersuite ordering codeBodo Möller1-2/+3
2007-02-19Include "!eNULL" in SSL_DEFAULT_CIPHER_LIST to make sure that aBodo Möller3-2/+62
ciphersuite string such as "DEFAULT:RSA" cannot enable authentication-only ciphersuites. Also, change ssl_create_cipher_list() so that it no longer starts with an arbitrary ciphersuite ordering, but instead uses the logic that we previously had in SSL_DEFEAULT_CIPHER_LIST. SSL_DEFAULT_CIPHER_LIST simplifies into just "ALL:!aNULL:!eNULL".
2007-02-19fix warnings for CIPHER_DEBUG buildsBodo Möller2-25/+25
2007-02-19fix warnings/inconsistencies caused by the recent changes to theBodo Möller5-7/+11
ciphersuite selection code in HEAD Submitted by: Victor Duchovni
2007-02-19fix incorrect strength bit values for certain Kerberos ciphersuitesBodo Möller1-4/+4
Submitted by: Victor Duchovni
2007-02-18Updates from 0.9.8-stable branch.Dr. Stephen Henson3-3/+3
2007-02-17Reorganize the data used for SSL ciphersuite pattern matching.Bodo Möller18-1368/+1838
This change resolves a number of problems and obviates multiple kludges. A new feature is that you can now say "AES256" or "AES128" (not just "AES", which enables both). In some cases the ciphersuite list generated from a given string is affected by this change. I hope this is just in those cases where the previous behaviour did not make sense.
2007-02-16ensure that the EVP_CIPHER_CTX object is initializedNils Larsch3-9/+18
PR: 1490
2007-02-16Add STARTTLS support for IMAP and FTP.Richard Levitte2-9/+45
Submitted by Kees Cook <kees@outflux.net>
2007-02-14- use OPENSSL_malloc() etc. in zlibNils Larsch1-15/+40
- move zlib_stateful_ex_idx initialization to COMP_zlib() PR: 1468
2007-02-11avoid shifting inputNils Larsch1-17/+10
2007-02-10use user-supplied malloc functions for persistent kssl objectsNils Larsch2-14/+33
PR: 1467 Submitted by: Andrei Pelinescu-Onciul <andrei@iptel.org>
2007-02-10remove unreachable codeNils Larsch1-13/+2
2007-02-09PR: 1483Dr. Stephen Henson1-0/+1
Add support for GOST 28147-89 in Gost ENGINE.
2007-02-08Add -hmac option to dgst from 0.9.7 stable branch.Dr. Stephen Henson4-13/+51
2007-02-07remove unused variableNils Larsch1-1/+1
2007-02-07ensure that a ec key is usedNils Larsch1-1/+1
PR: 1476
2007-02-07After objects have been freed, NULLify the pointers so there will be no doubleRichard Levitte1-2/+9
free of those objects
2007-02-06fix typoNils Larsch1-1/+1
2007-02-06add note about 56 bit ciphersNils Larsch1-1/+3
PR: 1461
2007-02-03Update from fips2 branch.Dr. Stephen Henson3-3/+3
2007-02-03add support for DSA with SHA2Nils Larsch16-75/+270
2007-02-03fix documentationNils Larsch2-6/+6
PR: 1466
2007-02-03fix potential memory leaksNils Larsch3-20/+85
PR: 1462
2007-01-25Minimize aes_core.c footprint when AES_[en|de]crypt is implemented inAndy Polyakov1-1/+200
assembler.
2007-01-25Minor touch to aes-armv4.pl.Andy Polyakov1-2/+6
2007-01-25AES for ARMv4.Andy Polyakov1-0/+652
2007-01-25Minor optimization for sha1-armv4 module.Andy Polyakov1-11/+14
2007-01-23Update from 0.9.7-stable.Dr. Stephen Henson1-1/+1
2007-01-22SHA1 for ARMv4 and Thumb.Andy Polyakov2-0/+478
2007-01-21Constify version strings is ssl lib.Dr. Stephen Henson4-4/+4
2007-01-21Constify version strings and some structures.Dr. Stephen Henson56-70/+70
2007-01-18Add AOL an AOLTW root CAs to bundle.Dr. Stephen Henson4-0/+112
2007-01-17Make armv4t-mont module backward binary compatible with armv4 and rename itAndy Polyakov1-2/+4
accordingly.
2007-01-12Update to new home pageLutz Jänicke1-1/+1
2007-01-11Montgomery multiplication for ARMv4.Andy Polyakov1-0/+202
2007-01-03remove undefined constantNils Larsch1-1/+1
2006-12-29opensslwrap.sh to respect $OPENSSL_ENGINES.Andy Polyakov1-1/+1