openssl/ssl
Dr. Stephen Henson 72245f340c Check for missing DSA parameters.
If DSA parameters are absent return -1 (for unknown) in DSA_security_bits.

If parameters are absent when a certificate is set in an SSL/SSL_CTX
structure this will reject the certificate by default. This will cause DSA
certificates which omit parameters to be rejected but that is never (?)
done in practice.

Thanks to Brian 'geeknik' Carpenter for reporting this issue.

Reviewed-by: Emilia Käsper <emilia@openssl.org>
2015-12-30 13:34:53 +00:00
..
record Remove SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER and SSL_OP_TLS_D5_BUG support. 2015-12-23 20:40:54 +01:00
statem Convert RSA encrypt to use EVP_PKEY 2015-12-29 23:20:20 +00:00
bio_ssl.c Handle SSL_ERROR_WANT_X509_LOOKUP 2015-09-20 14:19:49 +01:00
d1_lib.c Remove unused cert_verify_mac code 2015-11-25 18:22:12 +00:00
d1_msg.c Move in_handshake into STATEM 2015-10-30 08:39:47 +00:00
d1_srtp.c PACKETise ServerHello processing 2015-09-07 10:45:38 +01:00
install-ssl.com Updates following review comments 2015-05-16 09:20:52 +01:00
Makefile make update 2015-12-22 15:16:56 +00:00
methods.c Ensure the dtls1_get_*_methods work with DTLS_ANY_VERSION 2015-11-05 15:05:58 +00:00
packet_locl.h Add ossl_inline 2015-12-22 23:03:56 +00:00
s3_cbc.c Cleanup: fix all sources that used EVP_MD_CTX_(create|init|destroy) 2015-12-07 17:40:20 +01:00
s3_enc.c Cleanup: fix all sources that used EVP_MD_CTX_(create|init|destroy) 2015-12-07 17:40:20 +01:00
s3_lib.c fix no-ec 2015-12-24 00:23:29 +00:00
s3_msg.c Remove redundant code 2015-10-30 08:38:18 +00:00
ssl_algs.c Load module in SSL_library_init 2015-12-22 15:14:14 +00:00
ssl_asn1.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00
ssl_cert.c Server side EVP_PKEY DH support 2015-12-23 22:26:31 +00:00
ssl_ciph.c Remove fixed DH ciphersuites. 2015-12-19 16:14:51 +00:00
ssl_conf.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00
ssl_err2.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_err.c remove unused error code 2015-12-22 16:16:35 +00:00
ssl_lib.c Remove fixed DH ciphersuites. 2015-12-19 16:14:51 +00:00
ssl_locl.h fix no-ec 2015-12-24 00:23:29 +00:00
ssl_mcnf.c SSL library configuration module. 2015-12-22 15:14:14 +00:00
ssl_rsa.c Remove fixed DH ciphersuites. 2015-12-19 16:14:51 +00:00
ssl_sess.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00
ssl_stat.c Change SSL_state_string return strings to start with a T 2015-10-30 08:39:47 +00:00
ssl_txt.c Remove BIO_s_file_internal macro. 2015-10-02 14:22:05 -04:00
ssl_utst.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl-lib.com Move SSLv3_*method() functions 2015-05-16 09:20:58 +01:00
t1_enc.c Fix clang complaints about uninitialised variables. 2015-12-07 20:37:08 +01:00
t1_ext.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00
t1_lib.c Check for missing DSA parameters. 2015-12-30 13:34:53 +00:00
t1_reneg.c PACKETise ServerHello processing 2015-09-07 10:45:38 +01:00
t1_trce.c Remove fixed DH ciphersuites. 2015-12-19 16:14:51 +00:00
tls_srp.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00