aboutsummaryrefslogtreecommitdiff
path: root/crypto
Commit message (Collapse)AuthorAgeFilesLines
* Don't leak information via uninitialized space in db(3) records. [09:07]releng/7.0Colin Percival2009-04-223-0/+16
| | | | | | | | | | | | | | Sanity-check string lengths in order to stop OpenSSL crashing when printing corrupt BMPString or UniversalString objects. [09:08] Security: FreeBSD-SA-09:07.libc Security: FreeBSD-SA-09:08.openssl Security: CVE-2009-0590 Approved by: re (kensmith) Approved by: so (cperciva) Notes: svn path=/releng/7.0/; revision=191381
* Prevent cross-site forgery attacks on lukemftpd(8) due to splittingSimon L. B. Nielsen2009-01-079-13/+12
| | | | | | | | | | | | | | | | | long commands into multiple requests. [09:01] Fix incorrect OpenSSL checks for malformed signatures due to invalid check of return value from EVP_VerifyFinal(), DSA_verify, and DSA_do_verify. [09:02] Security: FreeBSD-SA-09:01.lukemftpd Security: FreeBSD-SA-09:02.openssl Obtained from: NetBSD [SA-09:01] Obtained from: OpenSSL Project [SA-09:02] Approved by: so (simon) Notes: svn path=/releng/7.0/; revision=186872
* Fix logic error in sshd(8) concerning the handling of failedColin Percival2008-04-171-3/+0
| | | | | | | | | | attempts to bind ports for X11 forwarding. Security: FreeBSD-SA-08:05.openssh Approved by: so (cperciva) Notes: svn path=/releng/7.0/; revision=178263
* MFC 1.2:Simon L. B. Nielsen2008-02-051-1/+2
| | | | | | | | | | | | | | Unbreak detection of cryptodev support for FreeBSD which was broken with OpenSSL 0.9.8 import. Note that this does not enable cryptodev by default, as it was the case with OpenSSL 0.9.7 in FreeBSD base, but this change makes it possible to enable cryptodev at all. Approved by: re (kensmith) Notes: svn path=/releng/7.0/; revision=176007
* MFC: remove some _FREEFALL_CONFIG hacks. We don't use ksu on thePeter Wemm2007-10-292-18/+2
| | | | | | | | | freebsd.org cluster any more. Approved by: re (kensmith) Notes: svn path=/stable/7/; revision=173158
* MFC: Import DTLS security fix from upstream OpenSSL_0_9_8-stable branch.Simon L. B. Nielsen2007-10-184-615/+544
| | | | | | | | | Security: CVE-2007-4995 Security: http://www.openssl.org/news/secadv_20071012.txt Approved by: re (kensmith) Notes: svn path=/stable/7/; revision=172778
* Correct a buffer overflow in OpenSSL SSL_get_shared_ciphers().Simon L. B. Nielsen2007-10-031-11/+11
| | | | | | | | Security: FreeBSD-SA-07:08.openssl Approved by: re (security blanket) Notes: svn path=/head/; revision=172429
* s/X11R6/local/gDag-Erling Smørgrav2007-05-243-4/+4
| | | | Notes: svn path=/head/; revision=169966
* Fix runtime crash in OpenSSL with "Illegal instruction" by making someSimon L. B. Nielsen2007-05-223-23/+25
| | | | | | | | | | | | | | | | | casts a bit less evil. This was e.g. seen when using portsnap as: Fetching snapshot tag from portsnap3.FreeBSD.org... Illegal instruction Note the patch is slightly different from kan's original patch to match style in the OpenSSL source files a bit better. Submitted by: kan Tested by: many Notes: svn path=/head/; revision=169883
* - Bring upgrade produce up-to-date for OpenSSL 0.9.8e.Simon L. B. Nielsen2007-03-151-2/+3
| | | | | | | - Add reminder to bump version numer in Makefile.inc. Notes: svn path=/head/; revision=167620
* This commit was generated by cvs2svn to compensate for changes in r167617,Simon L. B. Nielsen2007-03-151-1/+1
|\ | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=167618
| * Import fix from upstream OpenSSL_0_9_8-stable branch:Simon L. B. Nielsen2007-03-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | EVP_CIPHER_CTX_key_length() should return the set key length in the EVP_CIPHER_CTX structure which may not be the same as the underlying cipher key length for variable length ciphers. This fixes problems in OpenSSH using some ciphers, and possibly other applications. See also: http://bugzilla.mindrot.org/show_bug.cgi?id=1291 Notes: svn path=/vendor-crypto/openssl/dist/; revision=167617
* | Resolve conflicts after import of OpenSSL 0.9.8e.Simon L. B. Nielsen2007-03-1511-48/+51
| | | | | | | | Notes: svn path=/head/; revision=167615
* | This commit was generated by cvs2svn to compensate for changes in r167612,Simon L. B. Nielsen2007-03-15192-757/+4053
|\| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=167613
| * Vendor import of OpenSSL 0.9.8e.Simon L. B. Nielsen2007-03-15203-805/+4104
| | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=167612
* | Resolve conflicts.Dag-Erling Smørgrav2006-11-1022-127/+100
| | | | | | | | Notes: svn path=/head/; revision=164149
* | This commit was generated by cvs2svn to compensate for changes in r164146,Dag-Erling Smørgrav2006-11-1022-3061/+244
|\ \ | | | | | | | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=164147
| * | Vendor import of OpenSSH 4.5p1.Dag-Erling Smørgrav2006-11-1039-3128/+340
| | | | | | | | | | | | Notes: svn path=/vendor-crypto/openssh/dist/; revision=164146
| * | Apply vendor patch to fix detection of tap / tun headers and ENGINE support.Dag-Erling Smørgrav2006-10-041-133/+133
| | | | | | | | | | | | Notes: svn path=/vendor-crypto/openssh/dist/; revision=163002
| * | Dead files.Dag-Erling Smørgrav2006-10-0253-7013/+0
| | | | | | | | | | | | Notes: svn path=/vendor-crypto/openssh/dist/; revision=162955
* | | Don't define XAUTH_PATH here, we either pass it in on the compiler commandDag-Erling Smørgrav2006-10-061-1/+1
| | | | | | | | | | | | | | | | | | | | | line or rely on the built-in default. Notes: svn path=/head/; revision=163054
* | | Go figure how an extra $Id$ line crept in...Dag-Erling Smørgrav2006-10-041-1/+0
| | | | | | | | | | | | Notes: svn path=/head/; revision=163004
* | | Merge vendor patch.Dag-Erling Smørgrav2006-10-041-133/+133
| | | | | | | | | | | | Notes: svn path=/head/; revision=163003
* | | Tweak ifdefs for backward compatibility.Dag-Erling Smørgrav2006-10-031-1/+3
| | | | | | | | | | | | Notes: svn path=/head/; revision=162984
* | | Regenerate; no effect on the code as it doesn't actually use the handful ofDag-Erling Smørgrav2006-10-021-5/+5
| | | | | | | | | | | | | | | | | | | | | conditionals that changed in this revision. Notes: svn path=/head/; revision=162953
* | | Update configure options and add some missing steps.Dag-Erling Smørgrav2006-10-021-7/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | The section about our local changes needs reviewing, and some of those changes should probably be reconsidered (such as preferring DSA over RSA, which made sense when RSA was encumbered but probably doesn't any more) Notes: svn path=/head/; revision=162952
* | | This commit was generated by cvs2svn to compensate for changes in r162916,Simon L. B. Nielsen2006-10-011-1/+1
|\ \ \ | | |/ | |/| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=162917
| * | Import from upstream OpenSSL 0.9.8 branch:Simon L. B. Nielsen2006-10-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix uninitialized free of ctx in compute_key() when the OPENSSL_DH_MAX_MODULUS_BITS check is triggered. This fixes the same issue as FreeBSD-SA-06:23.openssl v1.1. Notes: svn path=/vendor-crypto/openssl/dist/; revision=162916
* | | Resolve conflicts after import of OpenSSL 0.9.8d.Simon L. B. Nielsen2006-10-018-27/+235
| | | | | | | | | | | | Notes: svn path=/head/; revision=162914
* | | This commit was generated by cvs2svn to compensate for changes in r162911,Simon L. B. Nielsen2006-10-0190-485/+5802
|\| | | | | | | | | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=162912
| * | Vendor import of OpenSSL 0.9.8d.Simon L. B. Nielsen2006-10-0198-511/+6053
| | | | | | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=162911
* | | Regenerate.Dag-Erling Smørgrav2006-09-301-9/+60
| | | | | | | | | | | | | | | | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=162860
* | | #include <errno.h>; this has the unfortunate side effect of taking the fileDag-Erling Smørgrav2006-09-301-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | off the vendor branch. MFC after: 1 week Notes: svn path=/head/; revision=162859
* | | Removed from vendor branch.Dag-Erling Smørgrav2006-09-301-58/+0
| | | | | | | | | | | | | | | | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=162858
* | | Bump version addendum.Dag-Erling Smørgrav2006-09-305-5/+5
| | | | | | | | | | | | | | | | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=162857
* | | Merge conflicts.Dag-Erling Smørgrav2006-09-3069-1973/+3349
| | | | | | | | | | | | | | | | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=162856
* | | This commit was generated by cvs2svn to compensate for changes in r162852,Dag-Erling Smørgrav2006-09-30182-745/+6505
|\ \ \ | | |/ | |/| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=162853
| * | Vendor import of OpenSSH 4.4p1.Dag-Erling Smørgrav2006-09-30250-2683/+9804
| | | | | | | | | | | | Notes: svn path=/vendor-crypto/openssh/dist/; revision=162852
| * | Vendor patch for a problem that prevented using protocol version 1 whenDag-Erling Smørgrav2006-09-161-4/+1
| | | | | | | | | | | | | | | | | | | | | BSM was enabled. Notes: svn path=/vendor-crypto/openssh/dist/; revision=162359
* | | Merge vendor patch for BSM problem in protocol version 1.Dag-Erling Smørgrav2006-09-161-4/+1
| | | | | | | | | | | | | | | | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=162360
* | | Correct incorrect PKCS#1 v1.5 padding validation in crypto(3).Simon L. B. Nielsen2006-09-101-0/+17
| | | | | | | | | | | | | | | | | | | | | | | | Obtained from: OpenSSL project Security: FreeBSD-SA-06:19.openssl Notes: svn path=/head/; revision=162207
* | | Resolve conflicts after import of OpenSSL 0.9.8b.Simon L. B. Nielsen2006-07-301-53/+215
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was missed the first time around since eng_padlock.c was not part of OpenSSL 0.9.7e and therefor did not have the v0_9_7e CVS tag used during original resolve of conflicts. Noticed by: Antoine Brodin <antoine.brodin@laposte.net> Notes: svn path=/head/; revision=160837
* | | Sync FREEBSD-Xlist with what was actually excluded from OpenSSL 0.9.8bSimon L. B. Nielsen2006-07-291-0/+4
| | | | | | | | | | | | | | | | | | | | | import. Notes: svn path=/head/; revision=160827
* | | Add some rough notes on how to import a new OpenSSL version into theSimon L. B. Nielsen2006-07-291-0/+42
| | | | | | | | | | | | | | | | | | | | | FreeBSD base system. Parts are inspired by the OpenSSH upgrade notes. Notes: svn path=/head/; revision=160826
* | | Resolve conflicts after import of OpenSSL 0.9.8b.Simon L. B. Nielsen2006-07-29112-24404/+1759
| | | | | | | | | | | | Notes: svn path=/head/; revision=160817
* | | This commit was generated by cvs2svn to compensate for changes in r160814,Simon L. B. Nielsen2006-07-29892-19778/+97022
|\ \ \ | | |/ | |/| | | | | | | | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=160815
| * | Vendor import of OpenSSL 0.9.8bSimon L. B. Nielsen2006-07-29915-20663/+98999
| | | | | | | | | | | | Notes: svn path=/vendor-crypto/openssl/dist/; revision=160814
| * | Remove files that are no longer part of OpenSSL from the vendorJacques Vidrine2005-02-2557-15302/+0
| | | | | | | | | | | | | | | | | | | | | branch. This time, these are mostly the `Makefile.ssl' files. Notes: svn path=/vendor-crypto/openssl/dist/; revision=142430
* | | Our glob(3) has all the required features.Dag-Erling Smørgrav2006-06-091-2/+2
| | | | | | | | | | | | | | | | | | | | | Submitted by: ache Notes: svn path=/head/; revision=159458
* | | Revert inadvertant commit of debugging code.Dag-Erling Smørgrav2006-06-091-2/+0
| | | | | | | | | | | | Notes: svn path=/head/; revision=159457
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-26 03:24:59 +0000