aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2007-10-07Make it possible to link VC static lib with either /MT or /MD application.Andy Polyakov1-4/+6
PR: 1230
2007-10-05Prohibit RC4 in DTLS.Andy Polyakov2-1/+22
2007-10-05Fix from fips branch.Dr. Stephen Henson1-2/+9
2007-10-04Off by one fix from stable branch.Dr. Stephen Henson1-11/+11
2007-10-01Switch to bn-s390x (it's faster on keys longer than 512 bits) and mentionAndy Polyakov4-2/+8
s390x assembler pack in CHANAGES.
2007-10-01Oops! This was erroneously left out commit #16632.Andy Polyakov1-1/+1
2007-09-30Basic idea behind explicit IV is to make it unpredictable for attacker.Andy Polyakov1-2/+9
Until now it was xor between CBC residue and 1st block from last datagram, or in other words still predictable.
2007-09-30Make ChangeCipherSpec compliant with DTLS RFC4347.Andy Polyakov2-38/+28
2007-09-30DTLS RFC4347 says HelloVerifyRequest resets Finished MAC.Andy Polyakov2-2/+7
2007-09-30DTLS RFC4347 requires client to use rame random field in reply toAndy Polyakov1-6/+16
HelloVerifyRequest.
2007-09-30Switch to RFC-compliant version encoding in DTLS.Andy Polyakov4-17/+16
2007-09-28Move no status notification to ssl_check_serverhello_tlsext() to ensureDr. Stephen Henson1-29/+29
no status is notified even if no server extensions are present.
2007-09-28Typo.Dr. Stephen Henson1-1/+1
2007-09-27Yet another ARM update. It appears to be more appropriate to makeAndy Polyakov7-4/+8
developers responsible for -march choice.
2007-09-27Move -march=armv4t to ./config.Andy Polyakov3-4/+7
2007-09-27Minor ARMv4 update.Andy Polyakov2-1/+30
2007-09-27ARMv4 assembler pack.Andy Polyakov8-2/+27
2007-09-2710% performance tweak in 64-bit mode.Andy Polyakov1-0/+71
2007-09-26Support for certificate status TLS extension.Dr. Stephen Henson26-56/+885
2007-09-26Make sha512-armv4.pl byte-order neutral.Andy Polyakov2-7/+56
2007-09-26Clarify commentary in sha512-sparcv9.pl.Andy Polyakov1-6/+14
2007-09-24TyposLutz Jänicke2-3/+3
PR: 1578 Submitted by: Charles Longeau <chl@tuxfamily.org>
2007-09-24Port from 0.9.8-stableLutz Jänicke3-2/+14
2007-09-23Use accept flag for new session ticket write.Dr. Stephen Henson1-2/+2
2007-09-23properly handle length-zero opaque PRF input valuesBodo Möller2-6/+20
(which are pointless, but still might occur)
2007-09-23fix length parameter in SSL_set_tlsext_opaque_prf_input() callsBodo Möller2-2/+2
2007-09-21Implement the Opaque PRF Input TLS extensionBodo Möller16-89/+544
(draft-rescorla-tls-opaque-prf-input-00.txt), and do some cleanups and bugfixes on the way. In particular, this fixes the buffer bounds checks in ssl_add_clienthello_tlsext() and in ssl_add_serverhello_tlsext(). Note that the opaque PRF Input TLS extension is not compiled by default; see CHANGES.
2007-09-19Fix indentation in d1_both.c.Andy Polyakov1-558/+557
2007-09-19Fix dependencies. Make depend.Ben Laurie6-78/+104
2007-09-19The other half of make errors.Ben Laurie1-0/+1
2007-09-19make errors.Ben Laurie1-0/+1
2007-09-19fix warningBodo Möller1-1/+1
2007-09-19Clean up error codes a bit.Bodo Möller4-18/+15
(engines/ccgost/ remains utter chaos, though; "make errors" is not happy.)
2007-09-18Addenum to "Constify obj_dat.[ch]."Andy Polyakov4-26/+36
2007-09-18Minor formatting fixes in crypto/sha/asm.Andy Polyakov2-5/+5
2007-09-18Wire RC4 key_table to read-only segment.Andy Polyakov1-1/+1
2007-09-18Constify obj_dat.[ch], as well as minimize linker relocations.Andy Polyakov3-2504/+2508
2007-09-18Wire DES weak_keys to read-only segment.Andy Polyakov1-1/+1
2007-09-18Eliminate redundant make rule.Andy Polyakov1-4/+0
2007-09-18Minimize stack utilization in probable_prime.Andy Polyakov3-4/+8
2007-09-18Remove excessive whitespaces from bio.hAndy Polyakov1-8/+8
2007-09-18Make sure that BN_from_montgomery keeps the BIGNUMS in proper formatBodo Möller1-0/+2
2007-09-17Update from stable branch.Dr. Stephen Henson1-1/+1
2007-09-17Update from stable branch.Dr. Stephen Henson1-0/+5
2007-09-17Mention aes in enc.pod.Andy Polyakov1-0/+8
PR: 1529
2007-09-17Mention SHA2 in openssl.pod.Andy Polyakov1-0/+16
PR: 1575
2007-09-16Remove pq_compat.h.Andy Polyakov2-149/+1
2007-09-16Minor sha[256|512]-586 performance tweaks.Andy Polyakov2-28/+36
2007-09-16It's inappropraite to override application signal, nor is it appropriateAndy Polyakov1-9/+1
to shut down Winsock unless we know it won't be used [and we never do]. PR: 1439
2007-09-16Minor fix in link_[oa].hpux.Andy Polyakov1-2/+2