Commit Graph

  • 0823800db3 Remove unimplemented functions. Adam Langley 2014-06-20 12:00:00 -0700
  • 20c57547d0 ghash-x86_64.pl: optimize for upcoming Atom. Adam Langley 2014-06-20 12:00:00 -0700
  • 0fbf33a691 Fixed incorrect return code handling in ssl3_final_finish_mac. Adam Langley 2014-06-20 12:00:00 -0700
  • e044fe4bc7 Fix null pointer errors. Adam Langley 2014-06-20 12:00:00 -0700
  • 8314351bcc Update strength_bits for 3DES. Adam Langley 2014-06-20 12:00:00 -0700
  • 6acf476eb6 Make tls_session_secret_cb work with CVE-2014-0224 fix. Adam Langley 2014-06-20 12:00:00 -0700
  • bed2214b3e Fix for CVE-2014-0195 Adam Langley 2014-06-20 12:00:00 -0700
  • ce7f9caa98 Fix for CVE-2014-0224 Adam Langley 2014-06-20 12:00:00 -0700
  • ec48ffc1fe Additional CVE-2014-0224 protection. Adam Langley 2014-06-20 12:00:00 -0700
  • 895780572b Fix CVE-2014-0221 Adam Langley 2014-06-20 12:00:00 -0700
  • d06eddd15c Fix CVE-2014-3470 Adam Langley 2014-06-20 12:00:00 -0700
  • b7bf53c808 Check there is enough room for extension. Adam Langley 2014-06-20 12:00:00 -0700
  • fb5cd20236 Free up s->d1->buffered_app_data.q properly. Adam Langley 2014-06-20 12:00:00 -0700
  • f10a63b050 Typo: set i to -1 before goto. Adam Langley 2014-06-20 12:00:00 -0700
  • d74d7d030c Added SSLErr call for internal error in dtls1_buffer_record Adam Langley 2014-06-20 12:00:00 -0700
  • 3a54f9e015 Delays the queue insertion until after the ssl3_setup_buffers() call due to use-after-free bug. Adam Langley 2014-06-20 12:00:00 -0700
  • a09d2127ea Set default global mask to UTF8 only. Adam Langley 2014-06-20 12:00:00 -0700
  • ce1cfe169a Allocate extra space when NETSCAPE_HANG_BUG defined. Adam Langley 2014-06-20 12:00:00 -0700
  • caddf1c4de Use correct digest when exporting keying material. Adam Langley 2014-06-20 12:00:00 -0700
  • 467c87e318 remove duplicate 0x for default RSASSA-PSS salt len Adam Langley 2014-06-20 12:00:00 -0700
  • dc160f84f5 Fixes to host checking. Adam Langley 2014-06-20 12:00:00 -0700
  • 3e449b1b05 Don't allocate more than is needed in BUF_strndup() Adam Langley 2014-06-20 12:00:00 -0700
  • b4b9914f74 Unit/regression test for TLS heartbeats. Adam Langley 2014-06-20 12:00:00 -0700
  • 45fb1eca0d Sync with upstream's fix for PR#3321. Adam Langley 2014-06-20 12:00:00 -0700
  • 041240485d Avoid out-of-bounds write in SSL_get_shared_ciphers Adam Langley 2014-06-20 12:00:00 -0700
  • 9611cfcb9f safety check to ensure we dont send out beyond the users buffer Adam Langley 2014-06-20 12:00:00 -0700
  • f77452c572 fix coverity issue 966597 - error line is not always initialised Adam Langley 2014-06-20 12:00:00 -0700
  • c8e91d5798 bignum: allow concurrent BN_MONT_CTX_set_locked() Adam Langley 2014-06-20 12:00:00 -0700
  • cdf96e5886 Double free in i2o_ECPublicKey Adam Langley 2014-06-20 12:00:00 -0700
  • eceb33d3af bignum: fix boundary condition in montgomery logic Adam Langley 2014-06-20 12:00:00 -0700
  • 6a57f92195 bn/asm/armv4-gf2m.pl, modes/asm/ghash-armv4.pl: faster multiplication algorithm suggested in following paper: Adam Langley 2014-06-20 12:00:00 -0700
  • 89b73fbafa aes/asm/bsaes-x86_64.pl: Atom-specific optimization. Adam Langley 2014-06-20 12:00:00 -0700
  • 4a35a93a12 Fix use after free. Adam Langley 2014-06-20 12:00:00 -0700
  • 548523fd5e Extension checking fixes. Adam Langley 2014-06-20 12:00:00 -0700
  • 56475207be Add heartbeat extension bounds check. Adam Langley 2014-06-20 12:00:00 -0700
  • 45ba42a94c vpaes-[x86_64|ppc].pl: fix typo, which for some reason triggers rkhunter. Adam Langley 2014-06-20 12:00:00 -0700
  • dacb502cf4 Set TLS padding extension value. Adam Langley 2014-06-20 12:00:00 -0700
  • e2c2f60c44 Don't try and verify signatures if key is NULL (CVE-2013-0166) Adam Langley 2014-06-20 12:00:00 -0700
  • db4f9521b5 Fix memory leak with client auth. Adam Langley 2014-06-20 12:00:00 -0700
  • 64c2223310 Update chain building function. Adam Langley 2014-06-20 12:00:00 -0700
  • dff7b9e11b Allow duplicate certs in ssl_build_cert_chain Adam Langley 2014-06-20 12:00:00 -0700
  • 33685b82ec dh/check.c: check BN_CTX_get's return value. Adam Langley 2014-06-20 12:00:00 -0700
  • e0ddf2706a For self signed root only indicate one error. Adam Langley 2014-06-20 12:00:00 -0700
  • 8f5b6b9b0f perlasm/x86asm.pl: recognize elf-1 denoting old ELF platforms. Adam Langley 2014-06-20 12:00:00 -0700
  • 9612b766ae perlasm/x86gas.pl: limit special OPENSSL_ia32cap_P treatment to ELF. Adam Langley 2014-06-20 12:00:00 -0700
  • 9a7cb38882 rc4/asm/rc4-586.pl: allow for 386-only build. Adam Langley 2014-06-20 12:00:00 -0700
  • 43134282d0 sha/asm/sha256-586.pl: don't try to compile SIMD with no-sse2. Adam Langley 2014-06-20 12:00:00 -0700
  • bd97c20c77 sha/asm/sha512-x86_64.pl: fix compilation error on Solaris. Adam Langley 2014-06-20 12:00:00 -0700
  • 9f61d7f4a1 ssl/t1_enc.c: check EVP_MD_CTX_copy return value. Adam Langley 2014-06-20 12:00:00 -0700
  • c83b1ceae2 x509/by_dir.c: fix run-away pointer. Adam Langley 2014-06-20 12:00:00 -0700
  • f669c2d91a New chain building flags. Adam Langley 2014-06-20 12:00:00 -0700
  • 5685363771 aes/asm/aesni-x86[_64].pl: minor Atom-specific performance tweak. Adam Langley 2014-06-20 12:00:00 -0700
  • 114a711f8b aes/asm/aesni-x86_64.pl: further optimization for Atom Silvermont. Adam Langley 2014-06-20 12:00:00 -0700
  • a993a70d6d Include self-signed flag in certificates. Adam Langley 2014-06-20 12:00:00 -0700
  • ec72cf5a1c Include TA in checks/callback with partial chains. Adam Langley 2014-06-20 12:00:00 -0700
  • 35163dc925 Add cert_self_signed function to simplify verify. Adam Langley 2014-06-20 12:00:00 -0700
  • a216d03d0e Simplify X509_STORE_CTX_get1_chain. Adam Langley 2014-06-20 12:00:00 -0700
  • d81f801f6d ghash-x86[_64].pl: ~15% improvement on Atom Silvermont Adam Langley 2014-06-20 12:00:00 -0700
  • b6333d600e Return per-certificate chain if extra chain is NULL. Adam Langley 2014-06-20 12:00:00 -0700
  • 6d43d0c4d6 Add extension free function. Adam Langley 2014-06-20 12:00:00 -0700
  • 29db55944b Remove redundant accessor. Adam Langley 2014-06-20 12:00:00 -0700
  • 7b29449086 AES-NI asm update from master. Adam Langley 2014-06-20 12:00:00 -0700
  • 5c6ca976c8 Update SHA asm from master. Adam Langley 2014-06-20 12:00:00 -0700
  • bdf8acc2d2 Add more accessors. Adam Langley 2014-06-20 12:00:00 -0700
  • b152b3d4ed Add accessor for x509.cert_info. Adam Langley 2014-06-20 12:00:00 -0700
  • 6887edb917 Improvements in constant-time OAEP decoding. Adam Langley 2014-06-20 12:00:00 -0700
  • aacec17a63 Add client functionality to helper tool. Adam Langley 2014-06-20 12:00:00 -0700
  • c5c0c7e853 Split the speed tests into their own file. Adam Langley 2014-06-20 12:00:00 -0700
  • 80842bdb44 Fix test of first of 255 CBC padding bytes. Adam Langley 2014-06-20 12:00:00 -0700
  • cd8128d618 This change merges upstream's updated ppc-xlate.pl. Adam Langley 2014-06-20 12:00:00 -0700
  • 01797e309f psk_client_callback, 128-byte id bug. Adam Langley 2014-06-20 12:00:00 -0700
  • aed2306b9d Refactor ssl3_send_client_verify. Adam Langley 2014-06-20 12:00:00 -0700
  • 28acbbc2d6 Add SSL_get_client_certificate_types. Adam Langley 2014-06-20 12:00:00 -0700
  • 64bda23cad Base64 padding fix. Adam Langley 2014-06-20 12:00:00 -0700
  • c3174b7b2d Move ECC extensions to end. Adam Langley 2014-06-20 12:00:00 -0700
  • c6c8ae8fae Fix use-after-free after a deferred alert. Adam Langley 2014-06-20 12:00:00 -0700
  • 0289c73051 Fix TLS-PSK identity hint implementation issues. Adam Langley 2014-06-20 12:00:00 -0700
  • aeb088ac09 EC infinity fix. Adam Langley 2014-06-20 12:00:00 -0700
  • a5dc545bbc Set SID from SSL_CTX Adam Langley 2014-06-20 12:00:00 -0700
  • dc9b141127 Early callback support. Adam Langley 2014-06-20 12:00:00 -0700
  • b0c235ed36 TLS extension limit check fixes. Adam Langley 2014-06-20 12:00:00 -0700
  • 2970779684 Fallback SCSV. Adam Langley 2014-06-20 12:00:00 -0700
  • 735107652b Const correctness. Adam Langley 2014-06-20 12:00:00 -0700
  • 858a88daf2 Equal preference cipher groups. Adam Langley 2014-06-20 12:00:00 -0700
  • c26c802a89 Implement ECDHE-PSK-WITH-AES-128-GCM-SHA256. Adam Langley 2014-06-20 12:00:00 -0700
  • d493d5289d CBC record splitting. Adam Langley 2014-06-20 12:00:00 -0700
  • 509e5ed201 Optionally no cert request if ChannelID. Adam Langley 2014-06-20 12:00:00 -0700
  • 5c270c590d Use AEAD for AES256-GCM. Adam Langley 2014-06-20 12:00:00 -0700
  • 77b7e63311 Adjust stack pointer in AES-NI CBC decryption. Adam Langley 2014-06-20 12:00:00 -0700
  • 409766d218 Add function to recover RSA CRT params. Adam Langley 2014-06-20 12:00:00 -0700
  • 88dfe26ff8 Add AEAD speed tests to the tool binary. Adam Langley 2014-06-20 12:00:00 -0700
  • de0b202684 ChaCha20-Poly1305 support. Adam Langley 2014-06-20 12:00:00 -0700
  • d8983ce0f2 Use AEAD for AES-GCM in TLS. Adam Langley 2014-06-20 12:00:00 -0700
  • dfe3053086 AEAD tests. Adam Langley 2014-06-20 12:00:00 -0700
  • c9fb37504f SSL AEAD support. Adam Langley 2014-06-20 12:00:00 -0700
  • fd772a5aeb AEAD interface. Adam Langley 2014-06-20 12:00:00 -0700
  • a5fa5b7bb6 tls1_change_cipher_state rewrite Adam Langley 2014-06-20 12:00:00 -0700
  • 1b9d47735c Optionally don't store client's cipher list. Adam Langley 2014-06-20 12:00:00 -0700
  • 0b5c1ac8ad TLS 1.1 ciphers. Adam Langley 2014-06-20 12:00:00 -0700
  • acff73f227 Constant-time, RSA PMS processing. Adam Langley 2014-06-20 12:00:00 -0700