openssl/ssl
Bodo Möller 3e8b6485b3 Fix for "Record of death" vulnerability CVE-2010-0740.
Also, add missing CHANGES entry for CVE-2009-3245 (code changes submitted to this branch on 23 Feb 2010),
and further harmonize this version of CHANGES with the versions in the current branches.
2010-03-25 11:25:30 +00:00
..
.cvsignore
bio_ssl.c
d1_both.c PR: 1731 and maybe 2197 2010-03-24 23:17:15 +00:00
d1_clnt.c PR: 1949 2010-01-26 19:47:37 +00:00
d1_enc.c
d1_lib.c PR: 2121 2009-12-08 11:37:40 +00:00
d1_meth.c
d1_pkt.c
d1_srvr.c PR: 2160 2010-02-01 16:51:09 +00:00
dtls1.h
install.com
kssl_lcl.h
kssl.c Submitted by: Tomas Hoger <thoger@redhat.com> 2010-03-03 15:41:18 +00:00
kssl.h
Makefile make update 2010-01-15 15:24:19 +00:00
s2_clnt.c
s2_enc.c
s2_lib.c
s2_meth.c
s2_pkt.c
s2_srvr.c
s3_both.c PR: 1731 and maybe 2197 2010-03-24 23:17:15 +00:00
s3_clnt.c algorithms field has changed in 1.0.0 and later: update 2010-02-28 00:24:04 +00:00
s3_enc.c
s3_lib.c
s3_meth.c
s3_pkt.c Fix for "Record of death" vulnerability CVE-2010-0740. 2010-03-25 11:25:30 +00:00
s3_srvr.c Add Kerberos fix which was in 0.9.8-stable but never committed to HEAD and 2010-02-27 23:02:41 +00:00
s23_clnt.c PR: 2171 2010-02-16 14:21:11 +00:00
s23_lib.c
s23_meth.c return v1.1 methods for client/server 2009-12-28 00:31:16 +00:00
s23_pkt.c
s23_srvr.c PR: 2171 2010-02-16 14:21:11 +00:00
ssl2.h
ssl3.h oops 2010-01-20 17:59:53 +00:00
ssl23.h
ssl_algs.c The use of NIDs in the password based encryption table can result in 2010-01-19 19:56:06 +00:00
ssl_asn1.c PR: 2160 2010-02-01 16:51:09 +00:00
ssl_cert.c PR: 1731 and maybe 2197 2010-03-24 23:17:15 +00:00
ssl_ciph.c
ssl_err2.c
ssl_err.c Updates to conform with draft-ietf-tls-renegotiation-03.txt: 2010-01-06 17:37:09 +00:00
ssl_lib.c OR default SSL_OP_LEGACY_SERVER_CONNECT so existing options are preserved 2010-02-17 19:43:56 +00:00
ssl_locl.h PR: 2121 2009-12-08 11:37:40 +00:00
ssl_rsa.c
ssl_sess.c PR: 2160 2010-02-01 16:51:09 +00:00
ssl_stat.c PR: 2133 2010-01-16 19:20:52 +00:00
ssl_task.c
ssl_txt.c
ssl-lib.com Compile t1_reneg on VMS as well. 2010-01-25 00:19:31 +00:00
ssl.h Updates to conform with draft-ietf-tls-renegotiation-03.txt: 2010-01-06 17:37:09 +00:00
ssltest.c PR: 2153, 2125 2010-01-24 16:57:20 +00:00
t1_clnt.c
t1_enc.c
t1_lib.c Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as 2010-02-17 18:38:31 +00:00
t1_meth.c
t1_reneg.c Update RI to match latest spec. 2009-12-27 22:58:55 +00:00
t1_srvr.c
tls1.h