Ulf Möller 
							
						 
					 
					
						
						
							
						
						9d1a01be8f 
					 
					
						
						
							
							Source code cleanups: Use void * rather than char * in lhash,  
						
						 
						
						... 
						
						
						
						eliminate some of the -Wcast-qual warnings (debug-ben-strict target) 
						
						
					 
					
						2000-01-30 22:20:28 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						a87030a1ed 
					 
					
						
						
							
							Make DSA_generate_parameters, and fix a couple of bug  
						
						 
						
						... 
						
						
						
						(including another problem in the s3_srvr.c state machine). 
						
						
					 
					
						2000-01-30 02:23:03 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						018e57c74d 
					 
					
						
						
							
							Apply Lutz Behnke's 56 bit cipher patch with a few  
						
						 
						
						... 
						
						
						
						minor changes.
Docs haven't been added at this stage. They are probably
best included in the 'ciphers' program docs. 
						
						
					 
					
						2000-01-22 03:17:06 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ulf Möller 
							
						 
					 
					
						
						
							
						
						e7f97e2d22 
					 
					
						
						
							
							Check RAND_bytes() return value or use RAND_pseudo_bytes().  
						
						 
						
						
						
						
					 
					
						2000-01-21 01:15:56 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ulf Möller 
							
						 
					 
					
						
						
							
						
						eb952088f0 
					 
					
						
						
							
							Precautions against using the PRNG uninitialized: RAND_bytes() now  
						
						 
						
						... 
						
						
						
						returns int (1 = ok, 0 = not seeded). New function RAND_add() is the
same as RAND_seed() but takes an estimate of the entropy as an additional
argument. 
						
						
					 
					
						2000-01-13 20:59:17 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						c51ae173a6 
					 
					
						
						
							
							Clean up some of the SSL server code.  
						
						 
						
						
						
						
					 
					
						2000-01-11 01:07:26 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						752d706aaf 
					 
					
						
						
							
							Make NO_RSA compile with pedantic.  
						
						 
						
						
						
						
					 
					
						2000-01-08 21:06:24 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						f2d9a32cf4 
					 
					
						
						
							
							Use separate arrays for certificate verify and for finished hashes.  
						
						 
						
						
						
						
					 
					
						2000-01-06 00:24:24 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						c44f754047 
					 
					
						
						
							
							Slight code cleanup for handling finished labels.  
						
						 
						
						
						
						
					 
					
						2000-01-05 23:11:51 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						3d14b9d04a 
					 
					
						
						
							
							Add support for MS "fast SGC".  
						
						 
						
						
						
						
					 
					
						2000-01-02 18:52:58 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						47134b7864 
					 
					
						
						
							
							Don't request client certificate in anonymous ciphersuites  
						
						 
						
						... 
						
						
						
						except when following the specs is bound to fail. 
						
						
					 
					
						1999-12-29 17:43:03 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						b1fe6ca175 
					 
					
						
						
							
							Store verify_result with sessions to avoid potential security hole.  
						
						 
						
						
						
						
					 
					
						1999-11-16 23:15:41 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						ca7fea9656 
					 
					
						
						
							
							Fix warnings.  
						
						 
						
						
						
						
					 
					
						1999-09-24 19:10:57 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						1c80019a2c 
					 
					
						
						
							
							Add new sign and verify members to RSA_METHOD and change SSL code to use sign  
						
						 
						
						... 
						
						
						
						and verify rather than direct encrypt/decrypt. 
						
						
					 
					
						1999-09-18 22:37:44 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						5bdae1675c 
					 
					
						
						
							
							Fix yet another bug for client hello handling.  
						
						 
						
						
						
						
					 
					
						1999-09-11 10:36:41 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						074309b7ee 
					 
					
						
						
							
							Fix server behaviour when facing backwards-compatible client hellos.  
						
						 
						
						
						
						
					 
					
						1999-09-03 16:33:11 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						8876bc0548 
					 
					
						
						
							
							Let ssl_get_prev_session reliably work in multi-threaded settings.  
						
						 
						
						
						
						
					 
					
						1999-05-23 13:07:03 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						b56bce4fc7 
					 
					
						
						
							
							New structure type SESS_CERT used instead of CERT inside SSL_SESSION.  
						
						 
						
						... 
						
						
						
						While modifying the sources, I found some inconsistencies on the use of
s->cert vs. s->session->sess_cert; I don't know if those could
really have caused problems, but possibly this is a proper bug-fix
and not just a clean-up. 
						
						
					 
					
						1999-05-13 15:09:38 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						9d5cceac6f 
					 
					
						
						
							
							No actual change, but the cert_st member of struct ssl_session_st is now  
						
						 
						
						... 
						
						
						
						called sess_cert instead of just cert.  This is in preparation of further
changes: Probably often when s->session->sess_cert is used, we should
use s->cert instead; s->session->sess_cert should be a new structure
containing only the stuff that is for just one connection (e.g.
the peer's certificate, which the SSL client implementations currently
store in s->session->[sess_]cert, which is a very confusing thing to do).
Submitted by:
Reviewed by:
PR: 
						
						
					 
					
						1999-05-09 21:22:45 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						ca8e5b9b8a 
					 
					
						
						
							
							Create a duplicate of the SSL_CTX's CERT in SSL_new instead of copying  
						
						 
						
						... 
						
						
						
						pointers.  The cert_st handling is changed by this in various ways.
Submitted by:
Reviewed by:
PR: 
						
						
					 
					
						1999-05-09 20:12:44 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						8051996a5b 
					 
					
						
						
							
							Annotate a bug.  
						
						 
						
						... 
						
						
						
						Submitted by:
Reviewed by:
PR: 
						
						
					 
					
						1999-05-02 04:03:22 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ulf Möller 
							
						 
					 
					
						
						
							
						
						d02f751ce1 
					 
					
						
						
							
							Message digest stuff.  
						
						 
						
						
						
						
					 
					
						1999-04-27 04:18:53 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ulf Möller 
							
						 
					 
					
						
						
							
						
						79df9d6272 
					 
					
						
						
							
							New Configure option no-<cipher> (rsa, idea, rc5, ...).  
						
						 
						
						
						
						
					 
					
						1999-04-27 03:19:12 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ulf Möller 
							
						 
					 
					
						
						
							
						
						a9be3af5ad 
					 
					
						
						
							
							Remove NOPROTO definitions and error code comments.  
						
						 
						
						
						
						
					 
					
						1999-04-26 16:43:10 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						ec577822f9 
					 
					
						
						
							
							Change #include filenames from <foo.h> to <openssl.h>.  
						
						 
						
						... 
						
						
						
						Submitted by:
Reviewed by:
PR: 
						
						
					 
					
						1999-04-23 22:13:45 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						5cc146f344 
					 
					
						
						
							
							Fixed some race conditions.  
						
						 
						
						... 
						
						
						
						Submitted by:
Reviewed by:
PR: 
						
						
					 
					
						1999-04-22 13:37:46 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ulf Möller 
							
						 
					 
					
						
						
							
						
						6b691a5c85 
					 
					
						
						
							
							Change functions to ANSI C.  
						
						 
						
						
						
						
					 
					
						1999-04-19 21:31:43 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						f73e07cf42 
					 
					
						
						
							
							Add type-safe STACKs and SETs.  
						
						 
						
						
						
						
					 
					
						1999-04-12 17:23:57 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						b4cadc6e13 
					 
					
						
						
							
							Fix security hole.  
						
						 
						
						
						
						
					 
					
						1999-03-22 12:22:14 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						f415fa3243 
					 
					
						
						
							
							Fix export ciphersuites, again.  
						
						 
						
						
						
						
					 
					
						1999-03-06 14:09:36 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						60e31c3a4b 
					 
					
						
						
							
							More stuff for new TLS ciphersuites.  
						
						 
						
						
						
						
					 
					
						1999-02-21 21:58:59 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						06ab81f9f7 
					 
					
						
						
							
							Add support for new TLS export ciphersuites.  
						
						 
						
						
						
						
					 
					
						1999-02-21 20:03:24 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Mark J. Cox 
							
						 
					 
					
						
						
							
						
						413c4f45ed 
					 
					
						
						
							
							Updates to the new SSL compression code  
						
						 
						
						... 
						
						
						
						[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
     via RSA, checks that if TLS was proposed, but we roll back to SSLv3
     (because the server will not accept higher), that the version number
     is 0x03,0x01, not 0x03,0x00
     [Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR: 
						
						
					 
					
						1999-02-16 09:22:21 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						a8236c8c32 
					 
					
						
						
							
							Fix various memory leaks in SSL, apps and DSA  
						
						 
						
						
						
						
					 
					
						1999-02-15 21:05:21 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						bf5dcd135f 
					 
					
						
						
							
							More exactitude with function arguments.  
						
						 
						
						
						
						
					 
					
						1999-02-09 23:01:08 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						9b3086fe38 
					 
					
						
						
							
							Fix various stuff: that VC++ 5.0 chokes on:  
						
						 
						
						... 
						
						
						
						1. Add *lots* of missing prototypes for static ssl functions.
2. VC++ doesn't understand the 'LL' suffix for 64 bits constants: change bn.org
3. Add a few missing prototypes in pem.org
Fix mk1mf.pl so it outputs a Makefile that doesn't choke Win95.
Fix mkdef.pl so it doesn't truncate longer names. 
						
						
					 
					
						1999-01-31 17:30:18 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						6fa89f94c4 
					 
					
						
						
							
							Fix DH key generation.  
						
						 
						
						... 
						
						
						
						Contributed by: Anonymous <nobody@replay.com > 
						
						
					 
					
						1999-01-07 00:37:01 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						5b00115ab0 
					 
					
						
						
							
							Fix export tests.  
						
						 
						
						
						
						
					 
					
						1999-01-06 23:18:08 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ralf S. Engelschall 
							
						 
					 
					
						
						
							
						
						dfeab0689f 
					 
					
						
						
							
							Import of old SSLeay release: SSLeay 0.9.1b (unreleased)  
						
						 
						
						
						
						
					 
					
						1998-12-21 11:00:56 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ralf S. Engelschall 
							
						 
					 
					
						
						
							
						
						58964a4922 
					 
					
						
						
							
							Import of old SSLeay release: SSLeay 0.9.0b  
						
						 
						
						
						
						
					 
					
						1998-12-21 10:56:39 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ralf S. Engelschall 
							
						 
					 
					
						
						
							
						
						d02b48c63a 
					 
					
						
						
							
							Import of old SSLeay release: SSLeay 0.8.1b  
						
						 
						
						
						
						
					 
					
						1998-12-21 10:52:47 +00:00