Simon L. B. Nielsen [Sun, 21 Sep 2008 14:56:30 +0000 (21 14:56 +0000)]
Vendor import of OpenSSL 0.9.8i.
Simon L. B. Nielsen [Sun, 21 Sep 2008 14:30:38 +0000 (21 14:30 +0000)]
- Remove files which aren't in the vendor distribution anymore.
- Remove all of include as there is only the openssl subdir with
symlinks (which were always removed).
Simon L. B. Nielsen [Sun, 21 Sep 2008 14:15:02 +0000 (21 14:15 +0000)]
- Change FREEBSD-Xlist so it can be used as input to tar(1).
Simon L. B. Nielsen [Sun, 21 Sep 2008 14:12:30 +0000 (21 14:12 +0000)]
Remove files from vendor tree which were not part of OpenSSL 0.9.8e
(last vendor import).
The file were removed in different earlier releases, but were not
removed from the CVS vendor branch at the time.
Simon L. B. Nielsen [Sun, 21 Sep 2008 13:18:25 +0000 (21 13:18 +0000)]
The vendor area is the proper home for these files now.
Simon L. B. Nielsen [Sun, 21 Sep 2008 11:02:23 +0000 (21 11:02 +0000)]
Disable keyword expansion on vendor tree.
Simon L. B. Nielsen [Sat, 23 Aug 2008 10:51:00 +0000 (23 10:51 +0000)]
Flatten OpenSSL vendor tree.
Simon L. B. Nielsen [Thu, 18 Oct 2007 20:19:33 +0000 (18 20:19 +0000)]
Import DTLS security fix from upstream OpenSSL_0_9_8-stable branch.
From the OpenSSL advisory:
Andy Polyakov discovered a flaw in OpenSSL's DTLS
implementation which could lead to the compromise of clients
and servers with DTLS enabled.
DTLS is a datagram variant of TLS specified in RFC 4347 first
supported in OpenSSL version 0.9.8. Note that the
vulnerabilities do not affect SSL and TLS so only clients and
servers explicitly using DTLS are affected.
We believe this flaw will permit remote code execution.
Security: CVE-2007-4995
Security: http://www.openssl.org/news/secadv_20071012.txt
Simon L. B. Nielsen [Thu, 15 Mar 2007 20:26:26 +0000 (15 20:26 +0000)]
Import fix from upstream OpenSSL_0_9_8-stable branch:
EVP_CIPHER_CTX_key_length() should return the set key length
in the EVP_CIPHER_CTX structure which may not be the same as
the underlying cipher key length for variable length ciphers.
This fixes problems in OpenSSH using some ciphers, and possibly other
applications.
See also: http://bugzilla.mindrot.org/show_bug.cgi?id=1291
Simon L. B. Nielsen [Thu, 15 Mar 2007 20:03:30 +0000 (15 20:03 +0000)]
Vendor import of OpenSSL 0.9.8e.
Simon L. B. Nielsen [Sun, 1 Oct 2006 08:09:46 +0000 (1 08:09 +0000)]
Import from upstream OpenSSL 0.9.8 branch:
Fix uninitialized free of ctx in compute_key() when the
OPENSSL_DH_MAX_MODULUS_BITS check is triggered.
This fixes the same issue as FreeBSD-SA-06:23.openssl v1.1.
Simon L. B. Nielsen [Sun, 1 Oct 2006 07:38:44 +0000 (1 07:38 +0000)]
Vendor import of OpenSSL 0.9.8d.
Simon L. B. Nielsen [Sat, 29 Jul 2006 19:10:21 +0000 (29 19:10 +0000)]
Vendor import of OpenSSL 0.9.8b
Jacques Vidrine [Fri, 25 Feb 2005 06:14:53 +0000 (25 06:14 +0000)]
Remove files that are no longer part of OpenSSL from the vendor
branch. This time, these are mostly the `Makefile.ssl' files.
Jacques Vidrine [Fri, 25 Feb 2005 05:39:05 +0000 (25 05:39 +0000)]
Vendor import of OpenSSL 0.9.7e.
Jacques Vidrine [Fri, 25 Feb 2005 05:25:37 +0000 (25 05:25 +0000)]
Clean up the OpenSSL vendor branch by removing files that are not
part of recent releases.
Mark Murray [Fri, 13 Aug 2004 19:37:23 +0000 (13 19:37 +0000)]
Bring in support for VIA C3 Nehemiah Padlock crypto support (AES).
This is from the upcoming OpenSSL 0.9.8 release.
Jacques Vidrine [Mon, 5 Apr 2004 19:01:57 +0000 (5 19:01 +0000)]
Repair a regression in OpenSSL 0.9.7d: processing an unsigned PKCS#7
object could cause a null pointer dereference.
Obtained from: OpenSSL CVS (change number 12080)
MFC After: 1 day
Reported by: Daniel Lang <dl@leo.org>
Jacques Vidrine [Wed, 17 Mar 2004 15:49:33 +0000 (17 15:49 +0000)]
Vendor import of OpenSSL 0.9.7d.
Jacques Vidrine [Wed, 17 Mar 2004 12:11:08 +0000 (17 12:11 +0000)]
Correct a denial-of-service vulnerability in OpenSSL (CAN-2004-0079).
Obtained from: OpenSSL CVS (http://cvs.openssl.org/chngview?cn=12033)
Jacques Vidrine [Wed, 1 Oct 2003 12:32:41 +0000 (1 12:32 +0000)]
Vendor import of OpenSSL 0.9.7c
Chris D. Faulhaber [Thu, 20 Mar 2003 20:44:11 +0000 (20 20:44 +0000)]
Enable RSA blinding by default.
http://www.openssl.org/news/secadv_20030317.txt
Chris D. Faulhaber [Thu, 20 Mar 2003 20:41:45 +0000 (20 20:41 +0000)]
Import of PKCS #1 security fix.
http://www.openssl.org/news/secadv_20030319.txt
Jacques Vidrine [Wed, 19 Feb 2003 23:17:42 +0000 (19 23:17 +0000)]
Vendor import of OpenSSL 0.9.7a.
Jacques Vidrine [Wed, 29 Jan 2003 02:25:30 +0000 (29 02:25 +0000)]
= Fix a bug in UI_UTIL_read_pw's error handling that caused
des_read_pw_string to break (and thus rather mysteriously
breaking utilities such as kinit).
= Enable the BSD /dev/crypto interface.
(These changes are being imported on the vendor branch, as they have
already been accepted and committed to the OpenSSL CVS repository.)
Mark Murray [Tue, 28 Jan 2003 21:43:22 +0000 (28 21:43 +0000)]
Vendor import of OpenSSL release 0.9.7. This release includes
support for AES and OpenBSD's hardware crypto.
Jacques Vidrine [Sat, 10 Aug 2002 01:48:01 +0000 (10 01:48 +0000)]
Import of OpenSSL 0.9.6g.
Jacques Vidrine [Sat, 10 Aug 2002 01:46:10 +0000 (10 01:46 +0000)]
Import of OpenSSL 0.9.6f.
Jacques Vidrine [Sat, 10 Aug 2002 01:40:00 +0000 (10 01:40 +0000)]
Import of OpenSSL 0.9.6f.
Jacques Vidrine [Mon, 5 Aug 2002 16:25:17 +0000 (5 16:25 +0000)]
Correct a bug in the ASN.1 decoder which was introduced with the
recent OpenSSL update.
Obtained from: OpenSSL CVS
Jacques Vidrine [Tue, 30 Jul 2002 13:38:06 +0000 (30 13:38 +0000)]
Import of OpenSSL 0.9.6e.
Jacques Vidrine [Tue, 30 Jul 2002 12:44:15 +0000 (30 12:44 +0000)]
Import of OpenSSL 0.9.6d.
Kris Kennaway [Sun, 27 Jan 2002 03:13:07 +0000 (27 03:13 +0000)]
Initial import of OpenSSL 0.9.6c
Kris Kennaway [Thu, 19 Jul 2001 19:59:37 +0000 (19 19:59 +0000)]
Initial import of OpenSSL 0.9.6b
Kris Kennaway [Sun, 20 May 2001 03:07:21 +0000 (20 03:07 +0000)]
Initial import of OpenSSL 0.9.6a
Kris Kennaway [Sun, 18 Feb 2001 03:17:36 +0000 (18 03:17 +0000)]
Import of OpenSSL 0.9.6-STABLE snapshot dated 2001-02-10
Kris Kennaway [Mon, 13 Nov 2000 01:03:58 +0000 (13 01:03 +0000)]
Initial import of OpenSSL 0.9.6
Mark Murray [Sun, 16 Apr 2000 16:03:07 +0000 (16 16:03 +0000)]
Virgin import of OpenSSL v0.9.5a
Kris Kennaway [Thu, 13 Apr 2000 06:33:22 +0000 (13 06:33 +0000)]
Initial import of OpenSSL 0.9.5a
Kris Kennaway [Sun, 16 Jan 2000 05:14:57 +0000 (16 05:14 +0000)]
Import the RSA support code. There shouldn't be any actual RSA
cryptography here.
cvs2svn [Mon, 10 Jan 2000 06:27:13 +0000 (10 06:27 +0000)]
This commit was manufactured by cvs2svn to create branch
'VENDOR-crypto-openssl'.
Kris Kennaway [Mon, 10 Jan 2000 06:22:05 +0000 (10 06:22 +0000)]
Initial import of OpenSSL 0.9.4, sans IDEA and RSA code for patent
infringement reasons.
Kris Kennaway [Sat, 25 Dec 1999 16:37:36 +0000 (25 16:37 +0000)]
Initial import of OpenSSL v0.9.4