Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/crypto/external/bsd/openssl/dist from ftp.openssl.org
details: https://anonhg.NetBSD.org/src/rev/56e5409f2bed
branches: trunk
changeset: 780466:56e5409f2bed
user: christos <christos%NetBSD.org@localhost>
date: Thu Jul 26 14:58:16 2012 +0000
description:
from ftp.openssl.org
diffstat:
crypto/external/bsd/openssl/dist/CHANGES | 464 +-
crypto/external/bsd/openssl/dist/FAQ | 22 +-
crypto/external/bsd/openssl/dist/Makefile | 685 ++
crypto/external/bsd/openssl/dist/Makefile.org | 25 +-
crypto/external/bsd/openssl/dist/NEWS | 56 +
crypto/external/bsd/openssl/dist/README | 2 +-
crypto/external/bsd/openssl/dist/VMS/mkshared.com | 26 +-
crypto/external/bsd/openssl/dist/apps/CA.pl | 2 +-
crypto/external/bsd/openssl/dist/apps/Makefile | 179 +-
crypto/external/bsd/openssl/dist/apps/apps.c | 77 +-
crypto/external/bsd/openssl/dist/apps/apps.h | 10 +
crypto/external/bsd/openssl/dist/apps/client.pem | 68 +-
crypto/external/bsd/openssl/dist/apps/cms.c | 37 +-
crypto/external/bsd/openssl/dist/apps/dgst.c | 12 +
crypto/external/bsd/openssl/dist/apps/enc.c | 8 +
crypto/external/bsd/openssl/dist/apps/openssl-vms.cnf | 2 +-
crypto/external/bsd/openssl/dist/apps/progs.h | 6 +-
crypto/external/bsd/openssl/dist/apps/progs.pl | 2 +
crypto/external/bsd/openssl/dist/apps/req.c | 86 +-
crypto/external/bsd/openssl/dist/apps/s_cb.c | 74 +-
crypto/external/bsd/openssl/dist/apps/s_socket.c | 7 +-
crypto/external/bsd/openssl/dist/apps/server.pem | 413 +-
crypto/external/bsd/openssl/dist/apps/server2.pem | 420 +-
crypto/external/bsd/openssl/dist/apps/srp.c | 5 +-
crypto/external/bsd/openssl/dist/apps/tsget | 2 +-
crypto/external/bsd/openssl/dist/apps/verify.c | 1 +
crypto/external/bsd/openssl/dist/apps/x509.c | 34 +-
crypto/external/bsd/openssl/dist/config | 102 +-
crypto/external/bsd/openssl/dist/crypto/Makefile | 33 +-
crypto/external/bsd/openssl/dist/crypto/aes/aes_core.c | 12 +-
crypto/external/bsd/openssl/dist/crypto/aes/aes_misc.c | 21 +
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-586.pl | 14 +-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-armv4.pl | 182 +-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-mips.pl | 1611 +++++
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-parisc.pl | 1021 +++
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-ppc.pl | 444 +-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-s390x.pl | 1071 +++-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-sparcv9.pl | 3 +-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aes-x86_64.pl | 45 +-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-sha1-x86_64.pl | 1249 ++++
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-x86.pl | 1841 +++++-
crypto/external/bsd/openssl/dist/crypto/aes/asm/aesni-x86_64.pl | 2507 +++++++-
crypto/external/bsd/openssl/dist/crypto/aes/asm/bsaes-x86_64.pl | 3044 ++++++++++
crypto/external/bsd/openssl/dist/crypto/aes/asm/vpaes-x86.pl | 903 ++
crypto/external/bsd/openssl/dist/crypto/aes/asm/vpaes-x86_64.pl | 1206 +++
crypto/external/bsd/openssl/dist/crypto/alphacpuid.pl | 8 +-
crypto/external/bsd/openssl/dist/crypto/arm_arch.h | 51 +
crypto/external/bsd/openssl/dist/crypto/armcap.c | 80 +
crypto/external/bsd/openssl/dist/crypto/armv4cpuid.S | 154 +
crypto/external/bsd/openssl/dist/crypto/asn1/Makefile | 2 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_int.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_object.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_sign.c | 111 +-
crypto/external/bsd/openssl/dist/crypto/asn1/a_verify.c | 63 +-
crypto/external/bsd/openssl/dist/crypto/asn1/ameth_lib.c | 8 +
crypto/external/bsd/openssl/dist/crypto/asn1/asn1.h | 8 +-
crypto/external/bsd/openssl/dist/crypto/asn1/asn1_err.c | 5 +-
crypto/external/bsd/openssl/dist/crypto/asn1/asn1_locl.h | 11 +
crypto/external/bsd/openssl/dist/crypto/asn1/p5_pbev2.c | 142 +-
crypto/external/bsd/openssl/dist/crypto/asn1/t_crl.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/asn1/t_x509.c | 46 +-
crypto/external/bsd/openssl/dist/crypto/asn1/tasn_prn.c | 12 +-
crypto/external/bsd/openssl/dist/crypto/asn1/x_name.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/asn1/x_pubkey.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/bf/Makefile | 7 +-
crypto/external/bsd/openssl/dist/crypto/bio/bf_buff.c | 15 +-
crypto/external/bsd/openssl/dist/crypto/bio/bio.h | 79 +-
crypto/external/bsd/openssl/dist/crypto/bio/bio_err.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/bio/bio_lib.c | 28 +-
crypto/external/bsd/openssl/dist/crypto/bio/bss_bio.c | 18 +-
crypto/external/bsd/openssl/dist/crypto/bio/bss_dgram.c | 1014 +++-
crypto/external/bsd/openssl/dist/crypto/bn/Makefile | 25 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/alpha-mont.pl | 2 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/armv4-gf2m.pl | 278 +
crypto/external/bsd/openssl/dist/crypto/bn/asm/armv4-mont.pl | 25 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/ia64-mont.pl | 851 ++
crypto/external/bsd/openssl/dist/crypto/bn/asm/mips-mont.pl | 426 +
crypto/external/bsd/openssl/dist/crypto/bn/asm/mips.pl | 2585 ++++++++
crypto/external/bsd/openssl/dist/crypto/bn/asm/modexp512-x86_64.pl | 1496 ++++
crypto/external/bsd/openssl/dist/crypto/bn/asm/parisc-mont.pl | 993 +++
crypto/external/bsd/openssl/dist/crypto/bn/asm/ppc-mont.pl | 107 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/ppc.pl | 45 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/ppc64-mont.pl | 338 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/s390x-gf2m.pl | 221 +
crypto/external/bsd/openssl/dist/crypto/bn/asm/s390x-mont.pl | 102 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86-gf2m.pl | 313 +
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86-mont.pl | 4 +-
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-gf2m.pl | 389 +
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont.pl | 1490 ++++-
crypto/external/bsd/openssl/dist/crypto/bn/asm/x86_64-mont5.pl | 1070 +++
crypto/external/bsd/openssl/dist/crypto/bn/bn.h | 4 +
crypto/external/bsd/openssl/dist/crypto/bn/bn_blind.c | 39 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_div.c | 276 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_gf2m.c | 115 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_lcl.h | 23 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_nist.c | 338 +-
crypto/external/bsd/openssl/dist/crypto/bn/bn_shift.c | 27 +-
crypto/external/bsd/openssl/dist/crypto/camellia/Makefile | 17 +-
crypto/external/bsd/openssl/dist/crypto/camellia/asm/cmll-x86.pl | 6 +-
crypto/external/bsd/openssl/dist/crypto/camellia/camellia.h | 4 +
crypto/external/bsd/openssl/dist/crypto/camellia/cmll_locl.h | 5 +-
crypto/external/bsd/openssl/dist/crypto/camellia/cmll_misc.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/camellia/cmll_utl.c | 64 +
crypto/external/bsd/openssl/dist/crypto/cast/Makefile | 5 +-
crypto/external/bsd/openssl/dist/crypto/cmac/Makefile | 35 +
crypto/external/bsd/openssl/dist/crypto/cmac/cm_ameth.c | 2 +-
crypto/external/bsd/openssl/dist/crypto/cmac/cmac.c | 41 +-
crypto/external/bsd/openssl/dist/crypto/cms/Makefile | 24 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms.h | 22 +
crypto/external/bsd/openssl/dist/crypto/cms/cms_asn1.c | 9 +
crypto/external/bsd/openssl/dist/crypto/cms/cms_enc.c | 60 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms_env.c | 22 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms_err.c | 13 +-
crypto/external/bsd/openssl/dist/crypto/cms/cms_lcl.h | 12 +
crypto/external/bsd/openssl/dist/crypto/cms/cms_smime.c | 61 +-
crypto/external/bsd/openssl/dist/crypto/conf/conf_api.c | 1 +
crypto/external/bsd/openssl/dist/crypto/cryptlib.c | 37 +-
crypto/external/bsd/openssl/dist/crypto/cryptlib.h | 2 +-
crypto/external/bsd/openssl/dist/crypto/crypto-lib.com | 28 +-
crypto/external/bsd/openssl/dist/crypto/des/Makefile | 5 +-
crypto/external/bsd/openssl/dist/crypto/dh/dh.h | 20 +
crypto/external/bsd/openssl/dist/crypto/dh/dh_ameth.c | 1 +
crypto/external/bsd/openssl/dist/crypto/dh/dh_err.c | 7 +-
crypto/external/bsd/openssl/dist/crypto/dh/dh_gen.c | 17 +
crypto/external/bsd/openssl/dist/crypto/dh/dh_key.c | 33 +-
crypto/external/bsd/openssl/dist/crypto/dh/dh_lib.c | 15 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa.h | 19 +
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_ameth.c | 47 +
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_err.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_gen.c | 20 +
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_key.c | 16 +
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_lib.c | 22 +-
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_pmeth.c | 1 +
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_sign.c | 16 +
crypto/external/bsd/openssl/dist/crypto/dsa/dsa_vrf.c | 8 +
crypto/external/bsd/openssl/dist/crypto/dso/Makefile | 2 +-
crypto/external/bsd/openssl/dist/crypto/dso/dso_vms.c | 2 +-
crypto/external/bsd/openssl/dist/crypto/ec/Makefile | 37 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec.h | 48 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec2_mult.c | 4 +
crypto/external/bsd/openssl/dist/crypto/ec/ec2_oct.c | 407 +
crypto/external/bsd/openssl/dist/crypto/ec/ec2_smpl.c | 353 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_ameth.c | 1 +
crypto/external/bsd/openssl/dist/crypto/ec/ec_asn1.c | 24 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_curve.c | 28 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_cvt.c | 28 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_err.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_key.c | 29 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_lcl.h | 54 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_lib.c | 80 +-
crypto/external/bsd/openssl/dist/crypto/ec/ec_oct.c | 199 +
crypto/external/bsd/openssl/dist/crypto/ec/ec_pmeth.c | 1 +
crypto/external/bsd/openssl/dist/crypto/ec/eck_prn.c | 3 +-
crypto/external/bsd/openssl/dist/crypto/ec/ecp_mont.c | 14 +-
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nist.c | 13 +-
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistp224.c | 1268 ++-
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistp256.c | 2171 +++++++
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistp521.c | 2025 ++++++
crypto/external/bsd/openssl/dist/crypto/ec/ecp_nistputil.c | 197 +
crypto/external/bsd/openssl/dist/crypto/ec/ecp_oct.c | 433 +
crypto/external/bsd/openssl/dist/crypto/ec/ecp_smpl.c | 379 +-
crypto/external/bsd/openssl/dist/crypto/ecdh/ecdh.h | 2 +
crypto/external/bsd/openssl/dist/crypto/ecdh/ecdhtest.c | 6 +
crypto/external/bsd/openssl/dist/crypto/ecdh/ech_err.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/ecdh/ech_lib.c | 20 +
crypto/external/bsd/openssl/dist/crypto/ecdh/ech_locl.h | 8 +
crypto/external/bsd/openssl/dist/crypto/ecdh/ech_ossl.c | 2 +
crypto/external/bsd/openssl/dist/crypto/ecdsa/ecdsa.h | 2 +
crypto/external/bsd/openssl/dist/crypto/ecdsa/ecdsatest.c | 89 +-
crypto/external/bsd/openssl/dist/crypto/ecdsa/ecs_err.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/ecdsa/ecs_lib.c | 21 +-
crypto/external/bsd/openssl/dist/crypto/ecdsa/ecs_locl.h | 8 +
crypto/external/bsd/openssl/dist/crypto/ecdsa/ecs_ossl.c | 7 +-
crypto/external/bsd/openssl/dist/crypto/engine/eng_rdrand.c | 142 +
crypto/external/bsd/openssl/dist/crypto/engine/eng_rsax.c | 668 ++
crypto/external/bsd/openssl/dist/crypto/err/err.h | 6 -
crypto/external/bsd/openssl/dist/crypto/err/err_all.c | 7 +
crypto/external/bsd/openssl/dist/crypto/evp/Makefile | 64 +-
crypto/external/bsd/openssl/dist/crypto/evp/c_allc.c | 12 +
crypto/external/bsd/openssl/dist/crypto/evp/e_aes.c | 1311 +++-
crypto/external/bsd/openssl/dist/crypto/evp/e_aes_cbc_hmac_sha1.c | 406 +
crypto/external/bsd/openssl/dist/crypto/evp/e_null.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/evp/e_rc4.c | 1 +
crypto/external/bsd/openssl/dist/crypto/evp/e_rc4_hmac_md5.c | 298 +
crypto/external/bsd/openssl/dist/crypto/evp/evp.h | 40 +-
crypto/external/bsd/openssl/dist/crypto/evp/evp_enc.c | 25 +-
crypto/external/bsd/openssl/dist/crypto/evp/evp_err.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/evp/evp_fips.c | 1 +
crypto/external/bsd/openssl/dist/crypto/evp/evp_locl.h | 17 +
crypto/external/bsd/openssl/dist/crypto/evp/evp_pbe.c | 5 +
crypto/external/bsd/openssl/dist/crypto/evp/evp_test.c | 1 +
crypto/external/bsd/openssl/dist/crypto/evp/names.c | 3 +
crypto/external/bsd/openssl/dist/crypto/evp/p5_crpt.c | 1 +
crypto/external/bsd/openssl/dist/crypto/evp/p5_crpt2.c | 81 +-
crypto/external/bsd/openssl/dist/crypto/evp/p_sign.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/evp/p_verify.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/evp/pmeth_lib.c | 2 +
crypto/external/bsd/openssl/dist/crypto/fips_err.h | 209 +
crypto/external/bsd/openssl/dist/crypto/fips_ers.c | 7 +
crypto/external/bsd/openssl/dist/crypto/hmac/hm_ameth.c | 2 +-
crypto/external/bsd/openssl/dist/crypto/hmac/hmac.c | 37 +
crypto/external/bsd/openssl/dist/crypto/ia64cpuid.S | 2 +-
crypto/external/bsd/openssl/dist/crypto/idea/Makefile | 5 +-
crypto/external/bsd/openssl/dist/crypto/md4/Makefile | 8 +-
crypto/external/bsd/openssl/dist/crypto/md5/Makefile | 8 +-
crypto/external/bsd/openssl/dist/crypto/mdc2/Makefile | 14 +-
crypto/external/bsd/openssl/dist/crypto/modes/Makefile | 77 +-
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-alpha.pl | 451 +
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-armv4.pl | 429 +
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-ia64.pl | 463 +
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-parisc.pl | 730 ++
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-s390x.pl | 262 +
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-sparcv9.pl | 330 +
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-x86.pl | 1342 ++++
crypto/external/bsd/openssl/dist/crypto/modes/asm/ghash-x86_64.pl | 805 ++
crypto/external/bsd/openssl/dist/crypto/modes/cbc128.c | 10 +-
crypto/external/bsd/openssl/dist/crypto/modes/ccm128.c | 441 +
crypto/external/bsd/openssl/dist/crypto/modes/cfb128.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/modes/ctr128.c | 92 +-
crypto/external/bsd/openssl/dist/crypto/modes/cts128.c | 226 +-
crypto/external/bsd/openssl/dist/crypto/modes/gcm128.c | 1757 +++++
crypto/external/bsd/openssl/dist/crypto/modes/modes.h | 76 +
crypto/external/bsd/openssl/dist/crypto/modes/modes_lcl.h | 131 +
crypto/external/bsd/openssl/dist/crypto/modes/ofb128.c | 11 +-
crypto/external/bsd/openssl/dist/crypto/modes/xts128.c | 187 +
crypto/external/bsd/openssl/dist/crypto/o_fips.c | 15 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_dat.h | 36 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_mac.h | 29 +
crypto/external/bsd/openssl/dist/crypto/objects/obj_mac.num | 7 +
crypto/external/bsd/openssl/dist/crypto/objects/obj_xref.c | 9 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_xref.h | 4 +-
crypto/external/bsd/openssl/dist/crypto/objects/obj_xref.txt | 4 +
crypto/external/bsd/openssl/dist/crypto/objects/objects.txt | 9 +
crypto/external/bsd/openssl/dist/crypto/ossl_typ.h | 2 +
crypto/external/bsd/openssl/dist/crypto/pariscid.pl | 224 +
crypto/external/bsd/openssl/dist/crypto/perlasm/cbc.pl | 2 -
crypto/external/bsd/openssl/dist/crypto/perlasm/ppc-xlate.pl | 13 +-
crypto/external/bsd/openssl/dist/crypto/perlasm/x86_64-xlate.pl | 221 +-
crypto/external/bsd/openssl/dist/crypto/perlasm/x86asm.pl | 55 +-
crypto/external/bsd/openssl/dist/crypto/perlasm/x86gas.pl | 34 +-
crypto/external/bsd/openssl/dist/crypto/perlasm/x86masm.pl | 19 +-
crypto/external/bsd/openssl/dist/crypto/perlasm/x86nasm.pl | 15 +-
crypto/external/bsd/openssl/dist/crypto/pkcs12/p12_kiss.c | 2 +-
crypto/external/bsd/openssl/dist/crypto/pkcs7/pk7_doit.c | 77 +-
crypto/external/bsd/openssl/dist/crypto/pkcs7/pk7_smime.c | 25 +-
crypto/external/bsd/openssl/dist/crypto/ppccap.c | 115 +
crypto/external/bsd/openssl/dist/crypto/ppccpuid.pl | 48 +-
crypto/external/bsd/openssl/dist/crypto/rand/rand.h | 5 +
crypto/external/bsd/openssl/dist/crypto/rand/rand_err.c | 6 +-
crypto/external/bsd/openssl/dist/crypto/rand/rand_lib.c | 38 +-
crypto/external/bsd/openssl/dist/crypto/rc2/Makefile | 6 +-
crypto/external/bsd/openssl/dist/crypto/rc4/asm/rc4-586.pl | 162 +-
crypto/external/bsd/openssl/dist/crypto/rc4/asm/rc4-md5-x86_64.pl | 631 ++
crypto/external/bsd/openssl/dist/crypto/rc4/asm/rc4-parisc.pl | 313 +
crypto/external/bsd/openssl/dist/crypto/rc4/asm/rc4-s390x.pl | 47 +-
crypto/external/bsd/openssl/dist/crypto/rc4/asm/rc4-x86_64.pl | 290 +-
crypto/external/bsd/openssl/dist/crypto/rc4/rc4.h | 1 +
crypto/external/bsd/openssl/dist/crypto/rc4/rc4_skey.c | 36 +-
crypto/external/bsd/openssl/dist/crypto/rc4/rc4_utl.c | 62 +
crypto/external/bsd/openssl/dist/crypto/rc4/rc4test.c | 6 +
crypto/external/bsd/openssl/dist/crypto/ripemd/Makefile | 7 +-
crypto/external/bsd/openssl/dist/crypto/rsa/Makefile | 20 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa.h | 24 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_ameth.c | 351 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_asn1.c | 10 +
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_err.c | 8 +
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_gen.c | 16 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_lib.c | 16 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_pmeth.c | 36 +-
crypto/external/bsd/openssl/dist/crypto/rsa/rsa_sign.c | 16 +
crypto/external/bsd/openssl/dist/crypto/s390xcap.c | 12 +-
crypto/external/bsd/openssl/dist/crypto/s390xcpuid.S | 17 +-
crypto/external/bsd/openssl/dist/crypto/seed/seed.c | 4 +
crypto/external/bsd/openssl/dist/crypto/sha/Makefile | 39 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-586.pl | 1107 +++-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-alpha.pl | 12 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-armv4-large.pl | 38 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-ia64.pl | 192 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-mips.pl | 169 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-ppc.pl | 109 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-s390x.pl | 50 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha1-x86_64.pl | 1241 +++-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-586.pl | 52 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha256-armv4.pl | 55 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-armv4.pl | 359 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-mips.pl | 455 +
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-parisc.pl | 15 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-ppc.pl | 150 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-s390x.pl | 63 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-sparcv9.pl | 6 +-
crypto/external/bsd/openssl/dist/crypto/sha/asm/sha512-x86_64.pl | 94 +-
crypto/external/bsd/openssl/dist/crypto/sha/sha512.c | 50 +-
crypto/external/bsd/openssl/dist/crypto/sparcv9cap.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/srp/Makefile | 3 +-
crypto/external/bsd/openssl/dist/crypto/stack/safestack.h | 22 +
crypto/external/bsd/openssl/dist/crypto/symhacks.h | 15 +-
crypto/external/bsd/openssl/dist/crypto/ts/ts.h | 3 -
crypto/external/bsd/openssl/dist/crypto/ui/ui.h | 2 +-
crypto/external/bsd/openssl/dist/crypto/whrlpool/Makefile | 5 +-
crypto/external/bsd/openssl/dist/crypto/whrlpool/wp_block.c | 4 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509.h | 10 +
crypto/external/bsd/openssl/dist/crypto/x509/x509_cmp.c | 9 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509_lu.c | 2 +-
crypto/external/bsd/openssl/dist/crypto/x509/x509type.c | 32 +-
crypto/external/bsd/openssl/dist/crypto/x509/x_all.c | 19 +
crypto/external/bsd/openssl/dist/crypto/x509v3/v3_asid.c | 63 +-
crypto/external/bsd/openssl/dist/crypto/x86_64cpuid.pl | 87 +-
crypto/external/bsd/openssl/dist/crypto/x86cpuid.pl | 78 +-
crypto/external/bsd/openssl/dist/demos/easy_tls/Makefile | 2 +-
crypto/external/bsd/openssl/dist/demos/easy_tls/cacerts.pem | 2 +-
crypto/external/bsd/openssl/dist/demos/easy_tls/cert.pem | 2 +-
crypto/external/bsd/openssl/dist/demos/easy_tls/easy-tls.c | 4 +-
crypto/external/bsd/openssl/dist/demos/easy_tls/easy-tls.h | 2 +-
crypto/external/bsd/openssl/dist/demos/easy_tls/test.c | 2 +-
crypto/external/bsd/openssl/dist/demos/easy_tls/test.h | 2 +-
crypto/external/bsd/openssl/dist/doc/HOWTO/proxy_certificates.txt | 2 +-
crypto/external/bsd/openssl/dist/doc/crypto/EVP_DigestInit.pod | 66 +-
crypto/external/bsd/openssl/dist/doc/crypto/ecdsa.pod | 2 +-
crypto/external/bsd/openssl/dist/doc/ssl/SSL_alert_type_string.pod | 5 +
crypto/external/bsd/openssl/dist/doc/ssl/SSL_clear.pod | 14 +-
crypto/external/bsd/openssl/dist/doc/ssl/ssl.pod | 2 +-
crypto/external/bsd/openssl/dist/e_os.h | 12 -
crypto/external/bsd/openssl/dist/e_os2.h | 28 +-
crypto/external/bsd/openssl/dist/engines/ccgost/Makefile | 14 +-
crypto/external/bsd/openssl/dist/engines/ccgost/gost_ameth.c | 37 +
crypto/external/bsd/openssl/dist/engines/ccgost/gost_crypt.c | 3 +-
crypto/external/bsd/openssl/dist/engines/ccgost/gost_pmeth.c | 19 +-
crypto/external/bsd/openssl/dist/engines/e_aep.c | 1 -
crypto/external/bsd/openssl/dist/engines/e_capi.c | 50 +-
crypto/external/bsd/openssl/dist/engines/e_capi_err.h | 4 +
crypto/external/bsd/openssl/dist/engines/e_padlock.c | 8 +-
crypto/external/bsd/openssl/dist/engines/vendor_defns/hwcryptohook.h | 2 +-
crypto/external/bsd/openssl/dist/makevms.com | 14 +-
crypto/external/bsd/openssl/dist/ms/do_win64a.bat | 18 +-
crypto/external/bsd/openssl/dist/ms/do_win64i.bat | 6 +-
crypto/external/bsd/openssl/dist/ms/uplink.c | 3 +-
crypto/external/bsd/openssl/dist/ms/uplink.h | 4 +-
crypto/external/bsd/openssl/dist/openssl.spec | 6 +-
crypto/external/bsd/openssl/dist/ssl/Makefile | 532 +-
crypto/external/bsd/openssl/dist/ssl/bio_ssl.c | 2 +
crypto/external/bsd/openssl/dist/ssl/d1_both.c | 201 +-
crypto/external/bsd/openssl/dist/ssl/d1_clnt.c | 191 +-
crypto/external/bsd/openssl/dist/ssl/d1_lib.c | 63 +-
crypto/external/bsd/openssl/dist/ssl/d1_srtp.c | 493 +
crypto/external/bsd/openssl/dist/ssl/dtls1.h | 15 +-
crypto/external/bsd/openssl/dist/ssl/install-ssl.com | 2 +-
crypto/external/bsd/openssl/dist/ssl/s3_both.c | 36 +-
crypto/external/bsd/openssl/dist/ssl/srtp.h | 145 +
crypto/external/bsd/openssl/dist/ssl/ssl-lib.com | 2 +-
crypto/external/bsd/openssl/dist/ssl/ssl_algs.c | 9 +
crypto/external/bsd/openssl/dist/ssl/ssl_asn1.c | 15 +-
crypto/external/bsd/openssl/dist/ssl/ssl_lib.c | 204 +-
crypto/external/bsd/openssl/dist/ssl/ssl_sess.c | 152 +-
crypto/external/bsd/openssl/dist/ssl/ssl_stat.c | 8 -
crypto/external/bsd/openssl/dist/ssl/tls1.h | 128 +-
crypto/external/bsd/openssl/dist/ssl/tls_srp.c | 25 +-
crypto/external/bsd/openssl/dist/test/CAss.cnf | 2 +-
crypto/external/bsd/openssl/dist/test/Makefile | 27 +-
crypto/external/bsd/openssl/dist/test/P1ss.cnf | 2 +-
crypto/external/bsd/openssl/dist/test/P2ss.cnf | 2 +-
crypto/external/bsd/openssl/dist/test/Uss.cnf | 4 +-
crypto/external/bsd/openssl/dist/test/evptests.txt | 334 +
crypto/external/bsd/openssl/dist/test/pkits-test.pl | 9 +
crypto/external/bsd/openssl/dist/test/test.cnf | 2 +-
crypto/external/bsd/openssl/dist/test/testfipsssl | 113 +
crypto/external/bsd/openssl/dist/test/tests.com | 4 +
crypto/external/bsd/openssl/dist/test/testssl | 8 +-
crypto/external/bsd/openssl/dist/tools/c_rehash | 180 +
crypto/external/bsd/openssl/dist/util/cygwin.sh | 12 +-
crypto/external/bsd/openssl/dist/util/libeay.num | 185 +-
crypto/external/bsd/openssl/dist/util/mk1mf.pl | 79 +-
crypto/external/bsd/openssl/dist/util/mkdef.pl | 38 +-
crypto/external/bsd/openssl/dist/util/mkerr.pl | 2 +-
crypto/external/bsd/openssl/dist/util/mkfiles.pl | 1 +
crypto/external/bsd/openssl/dist/util/pl/BC-32.pl | 2 +-
crypto/external/bsd/openssl/dist/util/pl/Mingw32.pl | 2 +-
crypto/external/bsd/openssl/dist/util/pl/OS2-EMX.pl | 2 +-
crypto/external/bsd/openssl/dist/util/pl/VC-32.pl | 79 +-
crypto/external/bsd/openssl/dist/util/pl/linux.pl | 2 +-
crypto/external/bsd/openssl/dist/util/pl/unix.pl | 2 +-
crypto/external/bsd/openssl/dist/util/pod2man.pl | 4 +-
crypto/external/bsd/openssl/dist/util/ssleay.num | 24 +-
382 files changed, 56974 insertions(+), 5880 deletions(-)
diffs (truncated from 76557 to 300 lines):
diff -r b65554c66f93 -r 56e5409f2bed crypto/external/bsd/openssl/dist/CHANGES
--- a/crypto/external/bsd/openssl/dist/CHANGES Thu Jul 26 12:39:27 2012 +0000
+++ b/crypto/external/bsd/openssl/dist/CHANGES Thu Jul 26 14:58:16 2012 +0000
@@ -2,9 +2,261 @@
OpenSSL CHANGES
_______________
- Changes between 1.0.0d and 1.0.1 [xx XXX xxxx]
-
- *) Backport libcrypto audit of return value checking from HEAD, not
+ Changes between 1.0.1b and 1.0.1c [10 May 2012]
+
+ *) Sanity check record length before skipping explicit IV in TLS
+ 1.2, 1.1 and DTLS to fix DoS attack.
+
+ Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic
+ fuzzing as a service testing platform.
+ (CVE-2012-2333)
+ [Steve Henson]
+
+ *) Initialise tkeylen properly when encrypting CMS messages.
+ Thanks to Solar Designer of Openwall for reporting this issue.
+ [Steve Henson]
+
+ *) In FIPS mode don't try to use composite ciphers as they are not
+ approved.
+ [Steve Henson]
+
+ Changes between 1.0.1a and 1.0.1b [26 Apr 2012]
+
+ *) OpenSSL 1.0.0 sets SSL_OP_ALL to 0x80000FFFL and OpenSSL 1.0.1 and
+ 1.0.1a set SSL_OP_NO_TLSv1_1 to 0x00000400L which would unfortunately
+ mean any application compiled against OpenSSL 1.0.0 headers setting
+ SSL_OP_ALL would also set SSL_OP_NO_TLSv1_1, unintentionally disablng
+ TLS 1.1 also. Fix this by changing the value of SSL_OP_NO_TLSv1_1 to
+ 0x10000000L Any application which was previously compiled against
+ OpenSSL 1.0.1 or 1.0.1a headers and which cares about SSL_OP_NO_TLSv1_1
+ will need to be recompiled as a result. Letting be results in
+ inability to disable specifically TLS 1.1 and in client context,
+ in unlike event, limit maximum offered version to TLS 1.0 [see below].
+ [Steve Henson]
+
+ *) In order to ensure interoperabilty SSL_OP_NO_protocolX does not
+ disable just protocol X, but all protocols above X *if* there are
+ protocols *below* X still enabled. In more practical terms it means
+ that if application wants to disable TLS1.0 in favor of TLS1.1 and
+ above, it's not sufficient to pass SSL_OP_NO_TLSv1, one has to pass
+ SSL_OP_NO_TLSv1|SSL_OP_NO_SSLv3|SSL_OP_NO_SSLv2. This applies to
+ client side.
+ [Andy Polyakov]
+
+ Changes between 1.0.1 and 1.0.1a [19 Apr 2012]
+
+ *) Check for potentially exploitable overflows in asn1_d2i_read_bio
+ BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer
+ in CRYPTO_realloc_clean.
+
+ Thanks to Tavis Ormandy, Google Security Team, for discovering this
+ issue and to Adam Langley <agl%chromium.org@localhost> for fixing it.
+ (CVE-2012-2110)
+ [Adam Langley (Google), Tavis Ormandy, Google Security Team]
+
+ *) Don't allow TLS 1.2 SHA-256 ciphersuites in TLS 1.0, 1.1 connections.
+ [Adam Langley]
+
+ *) Workarounds for some broken servers that "hang" if a client hello
+ record length exceeds 255 bytes.
+
+ 1. Do not use record version number > TLS 1.0 in initial client
+ hello: some (but not all) hanging servers will now work.
+ 2. If we set OPENSSL_MAX_TLS1_2_CIPHER_LENGTH this will truncate
+ the number of ciphers sent in the client hello. This should be
+ set to an even number, such as 50, for example by passing:
+ -DOPENSSL_MAX_TLS1_2_CIPHER_LENGTH=50 to config or Configure.
+ Most broken servers should now work.
+ 3. If all else fails setting OPENSSL_NO_TLS1_2_CLIENT will disable
+ TLS 1.2 client support entirely.
+ [Steve Henson]
+
+ *) Fix SEGV in Vector Permutation AES module observed in OpenSSH.
+ [Andy Polyakov]
+
+ Changes between 1.0.0h and 1.0.1 [14 Mar 2012]
+
+ *) Add compatibility with old MDC2 signatures which use an ASN1 OCTET
+ STRING form instead of a DigestInfo.
+ [Steve Henson]
+
+ *) The format used for MDC2 RSA signatures is inconsistent between EVP
+ and the RSA_sign/RSA_verify functions. This was made more apparent when
+ OpenSSL used RSA_sign/RSA_verify for some RSA signatures in particular
+ those which went through EVP_PKEY_METHOD in 1.0.0 and later. Detect
+ the correct format in RSA_verify so both forms transparently work.
+ [Steve Henson]
+
+ *) Some servers which support TLS 1.0 can choke if we initially indicate
+ support for TLS 1.2 and later renegotiate using TLS 1.0 in the RSA
+ encrypted premaster secret. As a workaround use the maximum pemitted
+ client version in client hello, this should keep such servers happy
+ and still work with previous versions of OpenSSL.
+ [Steve Henson]
+
+ *) Add support for TLS/DTLS heartbeats.
+ [Robin Seggelmann <seggelmann%fh-muenster.de@localhost>]
+
+ *) Add support for SCTP.
+ [Robin Seggelmann <seggelmann%fh-muenster.de@localhost>]
+
+ *) Improved PRNG seeding for VOS.
+ [Paul Green <Paul.Green%stratus.com@localhost>]
+
+ *) Extensive assembler packs updates, most notably:
+
+ - x86[_64]: AES-NI, PCLMULQDQ, RDRAND support;
+ - x86[_64]: SSSE3 support (SHA1, vector-permutation AES);
+ - x86_64: bit-sliced AES implementation;
+ - ARM: NEON support, contemporary platforms optimizations;
+ - s390x: z196 support;
+ - *: GHASH and GF(2^m) multiplication implementations;
+
+ [Andy Polyakov]
+
+ *) Make TLS-SRP code conformant with RFC 5054 API cleanup
+ (removal of unnecessary code)
+ [Peter Sylvester <peter.sylvester%edelweb.fr@localhost>]
+
+ *) Add TLS key material exporter from RFC 5705.
+ [Eric Rescorla]
+
+ *) Add DTLS-SRTP negotiation from RFC 5764.
+ [Eric Rescorla]
+
+ *) Add Next Protocol Negotiation,
+ http://tools.ietf.org/html/draft-agl-tls-nextprotoneg-00. Can be
+ disabled with a no-npn flag to config or Configure. Code donated
+ by Google.
+ [Adam Langley <agl%google.com@localhost> and Ben Laurie]
+
+ *) Add optional 64-bit optimized implementations of elliptic curves NIST-P224,
+ NIST-P256, NIST-P521, with constant-time single point multiplication on
+ typical inputs. Compiler support for the nonstandard type __uint128_t is
+ required to use this (present in gcc 4.4 and later, for 64-bit builds).
+ Code made available under Apache License version 2.0.
+
+ Specify "enable-ec_nistp_64_gcc_128" on the Configure (or config) command
+ line to include this in your build of OpenSSL, and run "make depend" (or
+ "make update"). This enables the following EC_METHODs:
+
+ EC_GFp_nistp224_method()
+ EC_GFp_nistp256_method()
+ EC_GFp_nistp521_method()
+
+ EC_GROUP_new_by_curve_name() will automatically use these (while
+ EC_GROUP_new_curve_GFp() currently prefers the more flexible
+ implementations).
+ [Emilia Käsper, Adam Langley, Bodo Moeller (Google)]
+
+ *) Use type ossl_ssize_t instad of ssize_t which isn't available on
+ all platforms. Move ssize_t definition from e_os.h to the public
+ header file e_os2.h as it now appears in public header file cms.h
+ [Steve Henson]
+
+ *) New -sigopt option to the ca, req and x509 utilities. Additional
+ signature parameters can be passed using this option and in
+ particular PSS.
+ [Steve Henson]
+
+ *) Add RSA PSS signing function. This will generate and set the
+ appropriate AlgorithmIdentifiers for PSS based on those in the
+ corresponding EVP_MD_CTX structure. No application support yet.
+ [Steve Henson]
+
+ *) Support for companion algorithm specific ASN1 signing routines.
+ New function ASN1_item_sign_ctx() signs a pre-initialised
+ EVP_MD_CTX structure and sets AlgorithmIdentifiers based on
+ the appropriate parameters.
+ [Steve Henson]
+
+ *) Add new algorithm specific ASN1 verification initialisation function
+ to EVP_PKEY_ASN1_METHOD: this is not in EVP_PKEY_METHOD since the ASN1
+ handling will be the same no matter what EVP_PKEY_METHOD is used.
+ Add a PSS handler to support verification of PSS signatures: checked
+ against a number of sample certificates.
+ [Steve Henson]
+
+ *) Add signature printing for PSS. Add PSS OIDs.
+ [Steve Henson, Martin Kaiser <lists%kaiser.cx@localhost>]
+
+ *) Add algorithm specific signature printing. An individual ASN1 method
+ can now print out signatures instead of the standard hex dump.
+
+ More complex signatures (e.g. PSS) can print out more meaningful
+ information. Include DSA version that prints out the signature
+ parameters r, s.
+ [Steve Henson]
+
+ *) Password based recipient info support for CMS library: implementing
+ RFC3211.
+ [Steve Henson]
+
+ *) Split password based encryption into PBES2 and PBKDF2 functions. This
+ neatly separates the code into cipher and PBE sections and is required
+ for some algorithms that split PBES2 into separate pieces (such as
+ password based CMS).
+ [Steve Henson]
+
+ *) Session-handling fixes:
+ - Fix handling of connections that are resuming with a session ID,
+ but also support Session Tickets.
+ - Fix a bug that suppressed issuing of a new ticket if the client
+ presented a ticket with an expired session.
+ - Try to set the ticket lifetime hint to something reasonable.
+ - Make tickets shorter by excluding irrelevant information.
+ - On the client side, don't ignore renewed tickets.
+ [Adam Langley, Bodo Moeller (Google)]
+
+ *) Fix PSK session representation.
+ [Bodo Moeller]
+
+ *) Add RC4-MD5 and AESNI-SHA1 "stitched" implementations.
+
+ This work was sponsored by Intel.
+ [Andy Polyakov]
+
+ *) Add GCM support to TLS library. Some custom code is needed to split
+ the IV between the fixed (from PRF) and explicit (from TLS record)
+ portions. This adds all GCM ciphersuites supported by RFC5288 and
+ RFC5289. Generalise some AES* cipherstrings to inlclude GCM and
+ add a special AESGCM string for GCM only.
+ [Steve Henson]
+
+ *) Expand range of ctrls for AES GCM. Permit setting invocation
+ field on decrypt and retrieval of invocation field only on encrypt.
+ [Steve Henson]
+
+ *) Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support.
+ As required by RFC5289 these ciphersuites cannot be used if for
+ versions of TLS earlier than 1.2.
+ [Steve Henson]
+
+ *) For FIPS capable OpenSSL interpret a NULL default public key method
+ as unset and return the appopriate default but do *not* set the default.
+ This means we can return the appopriate method in applications that
+ swicth between FIPS and non-FIPS modes.
+ [Steve Henson]
+
+ *) Redirect HMAC and CMAC operations to FIPS module in FIPS mode. If an
+ ENGINE is used then we cannot handle that in the FIPS module so we
+ keep original code iff non-FIPS operations are allowed.
+ [Steve Henson]
+
+ *) Add -attime option to openssl utilities.
+ [Peter Eckersley <pde%eff.org@localhost>, Ben Laurie and Steve Henson]
+
+ *) Redirect DSA and DH operations to FIPS module in FIPS mode.
+ [Steve Henson]
+
+ *) Redirect ECDSA and ECDH operations to FIPS module in FIPS mode. Also use
+ FIPS EC methods unconditionally for now.
+ [Steve Henson]
+
+ *) New build option no-ec2m to disable characteristic 2 code.
+ [Steve Henson]
+
+ *) Backport libcrypto audit of return value checking from 1.1.0-dev; not
all cases can be covered as some introduce binary incompatibilities.
[Steve Henson]
@@ -35,13 +287,6 @@
This should be configurable so applications can judge speed vs strength.
[Steve Henson]
- *) Add protection against ECDSA timing attacks as mentioned in the paper
- by Billy Bob Brumley and Nicola Tuveri, see:
-
- http://eprint.iacr.org/2011/232.pdf
-
- [Billy Bob Brumley and Nicola Tuveri]
-
*) Add TLS v1.2 server support for client authentication.
[Steve Henson]
@@ -77,7 +322,7 @@
SSL_OP_PKCS1_CHECK flags with SSL_OP_NO_TLSv1_2. New TLSv1.2 methods
and version checking.
[Steve Henson]
-
+
*) New option OPENSSL_NO_SSL_INTERN. If an application can be compiled
with this defined it will not be affected by any changes to ssl internal
structures. Add several utility functions to allow openssl application
@@ -90,18 +335,6 @@
*) Add functions to copy EVP_PKEY_METHOD and retrieve flags and id.
[Steve Henson]
- *) Add EC_GFp_nistp224_method(), a 64-bit optimized implementation for
- elliptic curve NIST-P224 with constant-time single point multiplication on
- typical inputs. EC_GROUP_new_by_curve_name() will automatically use this
- (while EC_GROUP_new_curve_GFp() currently won't and prefers the more
- flexible implementations).
Home |
Main Index |
Thread Index |
Old Index