Mark J. Cox 82d63d3028 Fix null-pointer assignment in do_change_cipher_spec() revealed ...

by using the Codenomicon TLS Test Tool (CAN-2004-0079)
Fix flaw in SSL/TLS handshaking when using Kerberos ciphersuites
(CAN-2004-0112)
Ready for 0.9.7d build

Submitted by: Steven Henson
Reviewed by: Joe Orton
Approved by: Mark Cox

2004-03-17 12:01:19 +00:00

..

.cvsignore

Ignore Makefile.save

1999-04-29 16:04:54 +00:00

bio_ssl.c

Make it possible to disable OCSP, the speed application, and the use of sockets.

2003-02-14 01:03:06 +00:00

install.com

Update VMS build procedures to match the current status.

2000-12-28 22:26:11 +00:00

kssl_lcl.h

To avoid commit wars over dependencies, let's make it so things that

2001-10-10 07:55:02 +00:00

kssl.c

Avoid warnings.

2004-03-16 13:50:18 +00:00

kssl.h

Include the instance in the Kerberos ticket information.

2003-09-27 17:55:18 +00:00

Makefile.ssl

make update

2004-01-29 10:23:54 +00:00

s2_clnt.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

s2_enc.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

s2_lib.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

s2_meth.c

fix more race conditions

2002-09-26 15:54:15 +00:00

s2_pkt.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

s2_srvr.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

s3_both.c

Option to disable auto SSL chain building.

2003-02-12 17:05:17 +00:00

s3_clnt.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

s3_enc.c

Change 'exp' to something else, as 'exp' is predefined by GNU C. This

2003-12-27 14:24:20 +00:00

s3_lib.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

s3_meth.c

fix more race conditions

2002-09-26 15:54:15 +00:00

s3_pkt.c

Fix null-pointer assignment in do_change_cipher_spec() revealed

2004-03-17 12:01:19 +00:00

s3_srvr.c

Fix null-pointer assignment in do_change_cipher_spec() revealed

2004-03-17 12:01:19 +00:00

s23_clnt.c

Stop a possible memory leak.

2002-12-21 23:49:25 +00:00

s23_lib.c

add ssl23_peek

2001-03-08 21:54:02 +00:00

s23_meth.c

fix more race conditions

2002-09-26 15:54:15 +00:00

s23_pkt.c

Reorder inclusion of header files:

2002-07-10 06:57:54 +00:00

s23_srvr.c

Many security improvements (CHATS) and a warning fix.

2002-11-12 13:23:40 +00:00

ssl2.h

Implement msg_callback for SSL 2.0.

2001-11-10 01:16:28 +00:00

ssl3.h

Small bugfixes to the KSSL implementation.

2002-11-26 10:09:28 +00:00

ssl23.h

Import of old SSLeay release: SSLeay 0.9.0b

1998-12-21 10:56:39 +00:00

ssl_algs.c

Use new-style system-id macros everywhere possible. I hope I haven't

2001-02-20 08:13:47 +00:00

ssl_asn1.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

ssl_cert.c

We're getting a clash with C++ because it has a type called 'list'.

2003-11-29 10:25:42 +00:00

ssl_ciph.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

ssl_err2.c

Use new-style system-id macros everywhere possible. I hope I haven't

2001-02-20 08:13:47 +00:00

ssl_err.c

Many security improvements (CHATS) and a warning fix.

2002-11-12 13:23:40 +00:00

ssl_lib.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

ssl_locl.h

get rid of OpenSSLDie

2002-08-02 11:47:24 +00:00

ssl_rsa.c

make sure no error is left in the queue that is intentionally ignored

2003-08-11 18:56:19 +00:00

ssl_sess.c

Avoid including cryptlib.h, it's not really needed.

2003-12-27 16:09:59 +00:00

ssl_stat.c

Prototype info function.

2002-01-12 15:56:13 +00:00

ssl_task.c

Many security improvements (CHATS) and a warning fix.

2002-11-12 13:23:40 +00:00

ssl_txt.c

Fix ASN1 additions for KRB5

2002-03-12 13:33:20 +00:00

ssl-lib.com

Remove all referenses to RSAref, since that's been gone for more than

2002-10-31 16:46:18 +00:00

ssl.h

We're getting a clash with C++ because it has a type called 'list'.

2003-11-29 10:25:42 +00:00

ssltest.c

unintptr_t and <inttypes.h> are not strictly portable with respect to

2004-01-04 17:54:02 +00:00

t1_clnt.c

really fix race conditions

2002-09-25 15:38:17 +00:00

t1_enc.c

Cleanse memory using the new OPENSSL_cleanse() function.

2002-11-28 08:09:03 +00:00

t1_lib.c

Move the registration of callback functions to special functions

2000-02-20 23:43:02 +00:00

t1_meth.c

fix more race conditions

2002-09-26 15:54:15 +00:00

t1_srvr.c

really fix race conditions

2002-09-25 15:38:17 +00:00

tls1.h

AES cipher suites are now official (RFC3268)

2002-07-04 08:50:33 +00:00