freebsd/src.git
13 years agoVendor import of OpenSSL 0.9.8i.vendor/openssl/0.9.8i
Simon L. B. Nielsen [Sun, 21 Sep 2008 14:56:30 +0000 (21 14:56 +0000)]
Vendor import of OpenSSL 0.9.8i.

13 years ago- Remove files which aren't in the vendor distribution anymore.
Simon L. B. Nielsen [Sun, 21 Sep 2008 14:30:38 +0000 (21 14:30 +0000)]
- Remove files which aren't in the vendor distribution anymore.
- Remove all of include as there is only the openssl subdir with
  symlinks (which were always removed).

13 years ago- Change FREEBSD-Xlist so it can be used as input to tar(1).
Simon L. B. Nielsen [Sun, 21 Sep 2008 14:15:02 +0000 (21 14:15 +0000)]
- Change FREEBSD-Xlist so it can be used as input to tar(1).

13 years agoRemove files from vendor tree which were not part of OpenSSL 0.9.8e
Simon L. B. Nielsen [Sun, 21 Sep 2008 14:12:30 +0000 (21 14:12 +0000)]
Remove files from vendor tree which were not part of OpenSSL 0.9.8e
(last vendor import).

The file were removed in different earlier releases, but were not
removed from the CVS vendor branch at the time.

13 years agoThe vendor area is the proper home for these files now.
Simon L. B. Nielsen [Sun, 21 Sep 2008 13:18:25 +0000 (21 13:18 +0000)]
The vendor area is the proper home for these files now.

13 years agoDisable keyword expansion on vendor tree.
Simon L. B. Nielsen [Sun, 21 Sep 2008 11:02:23 +0000 (21 11:02 +0000)]
Disable keyword expansion on vendor tree.

13 years agoFlatten OpenSSL vendor tree.
Simon L. B. Nielsen [Sat, 23 Aug 2008 10:51:00 +0000 (23 10:51 +0000)]
Flatten OpenSSL vendor tree.

14 years agoImport DTLS security fix from upstream OpenSSL_0_9_8-stable branch.
Simon L. B. Nielsen [Thu, 18 Oct 2007 20:19:33 +0000 (18 20:19 +0000)]
Import DTLS security fix from upstream OpenSSL_0_9_8-stable branch.

From the OpenSSL advisory:

Andy Polyakov discovered a flaw in OpenSSL's DTLS
implementation which could lead to the compromise of clients
and servers with DTLS enabled.

DTLS is a datagram variant of TLS specified in RFC 4347 first
supported in OpenSSL version 0.9.8. Note that the
vulnerabilities do not affect SSL and TLS so only clients and
servers explicitly using DTLS are affected.

We believe this flaw will permit remote code execution.

Security: CVE-2007-4995
Security: http://www.openssl.org/news/secadv_20071012.txt

15 years agoImport fix from upstream OpenSSL_0_9_8-stable branch:
Simon L. B. Nielsen [Thu, 15 Mar 2007 20:26:26 +0000 (15 20:26 +0000)]
Import fix from upstream OpenSSL_0_9_8-stable branch:

EVP_CIPHER_CTX_key_length() should return the set key length
in the EVP_CIPHER_CTX structure which may not be the same as
the underlying cipher key length for variable length ciphers.

This fixes problems in OpenSSH using some ciphers, and possibly other
applications.

See also: http://bugzilla.mindrot.org/show_bug.cgi?id=1291

15 years agoVendor import of OpenSSL 0.9.8e.
Simon L. B. Nielsen [Thu, 15 Mar 2007 20:03:30 +0000 (15 20:03 +0000)]
Vendor import of OpenSSL 0.9.8e.

15 years agoImport from upstream OpenSSL 0.9.8 branch:
Simon L. B. Nielsen [Sun, 1 Oct 2006 08:09:46 +0000 (1 08:09 +0000)]
Import from upstream OpenSSL 0.9.8 branch:

Fix uninitialized free of ctx in compute_key() when the
OPENSSL_DH_MAX_MODULUS_BITS check is triggered.

This fixes the same issue as FreeBSD-SA-06:23.openssl v1.1.

15 years agoVendor import of OpenSSL 0.9.8d.
Simon L. B. Nielsen [Sun, 1 Oct 2006 07:38:44 +0000 (1 07:38 +0000)]
Vendor import of OpenSSL 0.9.8d.

15 years agoVendor import of OpenSSL 0.9.8b
Simon L. B. Nielsen [Sat, 29 Jul 2006 19:10:21 +0000 (29 19:10 +0000)]
Vendor import of OpenSSL 0.9.8b

17 years agoRemove files that are no longer part of OpenSSL from the vendor
Jacques Vidrine [Fri, 25 Feb 2005 06:14:53 +0000 (25 06:14 +0000)]
Remove files that are no longer part of OpenSSL from the vendor
branch.  This time, these are mostly the `Makefile.ssl' files.

17 years agoVendor import of OpenSSL 0.9.7e.
Jacques Vidrine [Fri, 25 Feb 2005 05:39:05 +0000 (25 05:39 +0000)]
Vendor import of OpenSSL 0.9.7e.

17 years agoClean up the OpenSSL vendor branch by removing files that are not
Jacques Vidrine [Fri, 25 Feb 2005 05:25:37 +0000 (25 05:25 +0000)]
Clean up the OpenSSL vendor branch by removing files that are not
part of recent releases.

17 years agoBring in support for VIA C3 Nehemiah Padlock crypto support (AES).
Mark Murray [Fri, 13 Aug 2004 19:37:23 +0000 (13 19:37 +0000)]
Bring in support for VIA C3 Nehemiah Padlock crypto support (AES).
This is from the upcoming OpenSSL 0.9.8 release.

18 years agoRepair a regression in OpenSSL 0.9.7d: processing an unsigned PKCS#7
Jacques Vidrine [Mon, 5 Apr 2004 19:01:57 +0000 (5 19:01 +0000)]
Repair a regression in OpenSSL 0.9.7d: processing an unsigned PKCS#7
object could cause a null pointer dereference.

Obtained from: OpenSSL CVS (change number 12080)
MFC After: 1 day
Reported by: Daniel Lang <dl@leo.org>

18 years agoVendor import of OpenSSL 0.9.7d.
Jacques Vidrine [Wed, 17 Mar 2004 15:49:33 +0000 (17 15:49 +0000)]
Vendor import of OpenSSL 0.9.7d.

18 years agoCorrect a denial-of-service vulnerability in OpenSSL (CAN-2004-0079).
Jacques Vidrine [Wed, 17 Mar 2004 12:11:08 +0000 (17 12:11 +0000)]
Correct a denial-of-service vulnerability in OpenSSL (CAN-2004-0079).

Obtained from: OpenSSL CVS (http://cvs.openssl.org/chngview?cn=12033)

18 years agoVendor import of OpenSSL 0.9.7c
Jacques Vidrine [Wed, 1 Oct 2003 12:32:41 +0000 (1 12:32 +0000)]
Vendor import of OpenSSL 0.9.7c

19 years agoEnable RSA blinding by default.
Chris D. Faulhaber [Thu, 20 Mar 2003 20:44:11 +0000 (20 20:44 +0000)]
Enable RSA blinding by default.
  http://www.openssl.org/news/secadv_20030317.txt

19 years agoImport of PKCS #1 security fix.
Chris D. Faulhaber [Thu, 20 Mar 2003 20:41:45 +0000 (20 20:41 +0000)]
Import of PKCS #1 security fix.
  http://www.openssl.org/news/secadv_20030319.txt

19 years agoVendor import of OpenSSL 0.9.7a.
Jacques Vidrine [Wed, 19 Feb 2003 23:17:42 +0000 (19 23:17 +0000)]
Vendor import of OpenSSL 0.9.7a.

19 years ago= Fix a bug in UI_UTIL_read_pw's error handling that caused
Jacques Vidrine [Wed, 29 Jan 2003 02:25:30 +0000 (29 02:25 +0000)]
= Fix a bug in UI_UTIL_read_pw's error handling that caused
  des_read_pw_string to break (and thus rather mysteriously
  breaking utilities such as kinit).

= Enable the BSD /dev/crypto interface.

(These changes are being imported on the vendor branch, as they have
already been accepted and committed to the OpenSSL CVS repository.)

19 years agoVendor import of OpenSSL release 0.9.7. This release includes
Mark Murray [Tue, 28 Jan 2003 21:43:22 +0000 (28 21:43 +0000)]
Vendor import of OpenSSL release 0.9.7. This release includes
support for AES and OpenBSD's hardware crypto.

19 years agoImport of OpenSSL 0.9.6g.
Jacques Vidrine [Sat, 10 Aug 2002 01:48:01 +0000 (10 01:48 +0000)]
Import of OpenSSL 0.9.6g.

19 years agoImport of OpenSSL 0.9.6f.
Jacques Vidrine [Sat, 10 Aug 2002 01:46:10 +0000 (10 01:46 +0000)]
Import of OpenSSL 0.9.6f.

19 years agoImport of OpenSSL 0.9.6f.
Jacques Vidrine [Sat, 10 Aug 2002 01:40:00 +0000 (10 01:40 +0000)]
Import of OpenSSL 0.9.6f.

19 years agoCorrect a bug in the ASN.1 decoder which was introduced with the
Jacques Vidrine [Mon, 5 Aug 2002 16:25:17 +0000 (5 16:25 +0000)]
Correct a bug in the ASN.1 decoder which was introduced with the
recent OpenSSL update.

Obtained from: OpenSSL CVS

19 years agoImport of OpenSSL 0.9.6e.
Jacques Vidrine [Tue, 30 Jul 2002 13:38:06 +0000 (30 13:38 +0000)]
Import of OpenSSL 0.9.6e.

19 years agoImport of OpenSSL 0.9.6d.
Jacques Vidrine [Tue, 30 Jul 2002 12:44:15 +0000 (30 12:44 +0000)]
Import of OpenSSL 0.9.6d.

20 years agoInitial import of OpenSSL 0.9.6c
Kris Kennaway [Sun, 27 Jan 2002 03:13:07 +0000 (27 03:13 +0000)]
Initial import of OpenSSL 0.9.6c

21 years agoInitial import of OpenSSL 0.9.6b
Kris Kennaway [Thu, 19 Jul 2001 19:59:37 +0000 (19 19:59 +0000)]
Initial import of OpenSSL 0.9.6b

21 years agoInitial import of OpenSSL 0.9.6a
Kris Kennaway [Sun, 20 May 2001 03:07:21 +0000 (20 03:07 +0000)]
Initial import of OpenSSL 0.9.6a

21 years agoImport of OpenSSL 0.9.6-STABLE snapshot dated 2001-02-10
Kris Kennaway [Sun, 18 Feb 2001 03:17:36 +0000 (18 03:17 +0000)]
Import of OpenSSL 0.9.6-STABLE snapshot dated 2001-02-10

21 years agoInitial import of OpenSSL 0.9.6
Kris Kennaway [Mon, 13 Nov 2000 01:03:58 +0000 (13 01:03 +0000)]
Initial import of OpenSSL 0.9.6

22 years agoVirgin import of OpenSSL v0.9.5a
Mark Murray [Sun, 16 Apr 2000 16:03:07 +0000 (16 16:03 +0000)]
Virgin import of OpenSSL v0.9.5a

22 years agoInitial import of OpenSSL 0.9.5a
Kris Kennaway [Thu, 13 Apr 2000 06:33:22 +0000 (13 06:33 +0000)]
Initial import of OpenSSL 0.9.5a

22 years agoImport the RSA support code. There shouldn't be any actual RSA
Kris Kennaway [Sun, 16 Jan 2000 05:14:57 +0000 (16 05:14 +0000)]
Import the RSA support code. There shouldn't be any actual RSA
cryptography here.

22 years agoThis commit was manufactured by cvs2svn to create branch
cvs2svn [Mon, 10 Jan 2000 06:27:13 +0000 (10 06:27 +0000)]
This commit was manufactured by cvs2svn to create branch
'VENDOR-crypto-openssl'.

22 years agoInitial import of OpenSSL 0.9.4, sans IDEA and RSA code for patent
Kris Kennaway [Mon, 10 Jan 2000 06:22:05 +0000 (10 06:22 +0000)]
Initial import of OpenSSL 0.9.4, sans IDEA and RSA code for patent
infringement reasons.

22 years agoInitial import of OpenSSL v0.9.4
Kris Kennaway [Sat, 25 Dec 1999 16:37:36 +0000 (25 16:37 +0000)]
Initial import of OpenSSL v0.9.4