oweals/openssl.git
12 years agoPR: 2735
Dr. Stephen Henson [Mon, 27 Feb 2012 16:33:34 +0000 (16:33 +0000)]
PR: 2735

Make cryptodev digests work. Thanks to Nikos Mavrogiannopoulos for
this fix.

12 years agofree headers after use in error message
Dr. Stephen Henson [Mon, 27 Feb 2012 16:27:17 +0000 (16:27 +0000)]
free headers after use in error message

12 years agoDetect symmetric crypto errors in PKCS7_decrypt.
Dr. Stephen Henson [Mon, 27 Feb 2012 15:22:41 +0000 (15:22 +0000)]
Detect symmetric crypto errors in PKCS7_decrypt.

Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for reporting this bug.

12 years agoConfigure: I remove adding of -D_XPG4_2 -D__EXTENSIONS__ in sctp builds for
Andy Polyakov [Sun, 26 Feb 2012 22:02:59 +0000 (22:02 +0000)]
Configure: I remove adding of -D_XPG4_2 -D__EXTENSIONS__ in sctp builds for
following reasons:

- it's not the way to engage XPG4v2 mode, defining _XOPEN_SOURCE to
  value less than 500 is (see standards(5));
- we need to work out strategy to handle _XOPEN_SOURCE, current state
  when we define e.g. _XOPEN_SOURCE to 500 in some files is inappropriate;
- sctp implementation on Solaris is incomplete, in sense that bss_dgram.c
  doesn't compile, because not all structures are defined, so that
  enabling sctp doesn't work anyway;

12 years agoseed.c: incredibly enough seed.c can fail to compile on Solaris with certain
Andy Polyakov [Sun, 26 Feb 2012 21:52:43 +0000 (21:52 +0000)]
seed.c: incredibly enough seed.c can fail to compile on Solaris with certain
flags, because SS is defined after inclusion of <stdlib.h>, in <sys/regset.h>

12 years agoPR: 2730
Dr. Stephen Henson [Sat, 25 Feb 2012 17:59:40 +0000 (17:59 +0000)]
PR: 2730
Submitted by: Arpadffy Zoltan <Zoltan.Arpadffy@scientificgames.se>

VMS fixes: disable SCTP by default.

12 years agoABI fixes from 1.0.1-stable
Dr. Stephen Henson [Thu, 23 Feb 2012 22:25:52 +0000 (22:25 +0000)]
ABI fixes from 1.0.1-stable

12 years agoPR: 2711
Dr. Stephen Henson [Thu, 23 Feb 2012 21:50:44 +0000 (21:50 +0000)]
PR: 2711
Submitted by: Tomas Mraz <tmraz@redhat.com>

Tolerate bad MIME headers in parser.

12 years agoPR: 2696
Dr. Stephen Henson [Thu, 23 Feb 2012 21:31:37 +0000 (21:31 +0000)]
PR: 2696
Submitted by: Rob Austein <sra@hactrn.net>

Fix inverted range problem in RFC3779 code.

Thanks to Andrew Chi for generating test cases for this bug.

12 years agoPR: 2727
Dr. Stephen Henson [Thu, 23 Feb 2012 13:49:35 +0000 (13:49 +0000)]
PR: 2727
Submitted by: Bruce Stephens <bruce.stephens@isode.com>

Use same construct for EXHEADER in srp/Makefile as other makefiles to cope
with possibly empty EXHEADER.

12 years agoABI compliance fixes.
Dr. Stephen Henson [Wed, 22 Feb 2012 15:39:54 +0000 (15:39 +0000)]
ABI compliance fixes.

Move new structure fields to end of structures.

12 years agoSSL export fixes (from Adam Langley) [original from 1.0.1]
Dr. Stephen Henson [Wed, 22 Feb 2012 15:06:56 +0000 (15:06 +0000)]
SSL export fixes (from Adam Langley) [original from 1.0.1]

12 years agoinitialise i if n == 0
Dr. Stephen Henson [Wed, 22 Feb 2012 15:03:44 +0000 (15:03 +0000)]
initialise i if n == 0

12 years agoAdd new APIs EC_curve_nist2nid and EC_curve_nid2nist which convert
Dr. Stephen Henson [Tue, 21 Feb 2012 14:41:13 +0000 (14:41 +0000)]
Add new APIs EC_curve_nist2nid and EC_curve_nid2nist which convert
between NIDs and the more common NIST names such as "P-256". Enhance
ecparam utility and ECC method to recognise the NIST names for curves.

12 years agoFix bug in CVE-2011-4619: check we have really received a client hello
Dr. Stephen Henson [Thu, 16 Feb 2012 15:26:04 +0000 (15:26 +0000)]
Fix bug in CVE-2011-4619: check we have really received a client hello
before rejecting multiple SGC restarts.

12 years agoAdditional compatibility fix for MDC2 signature format.
Dr. Stephen Henson [Wed, 15 Feb 2012 14:27:25 +0000 (14:27 +0000)]
Additional compatibility fix for MDC2 signature format.

Update RSA EVP_PKEY_METHOD to use the OCTET STRING form of MDC2 signature:
this will make all versions of MDC2 signature equivalent.

12 years agoAn incompatibility has always existed between the format used for RSA
Dr. Stephen Henson [Wed, 15 Feb 2012 14:04:00 +0000 (14:04 +0000)]
An incompatibility has always existed between the format used for RSA
signatures and MDC2 using EVP or RSA_sign. This has become more apparent
when the dgst utility in OpenSSL 1.0.0 and later switched to using the
EVP_DigestSign functions which call RSA_sign.

This means that the signature format OpenSSL 1.0.0 and later used with
dgst -sign and MDC2 is incompatible with previous versions.

Add detection in RSA_verify so either format works.

Note: MDC2 is disabled by default in OpenSSL and very rarely used in practice.

12 years agoPR: 2713
Dr. Stephen Henson [Sun, 12 Feb 2012 18:47:47 +0000 (18:47 +0000)]
PR: 2713
Submitted by: Tomas Mraz <tmraz@redhat.com>

Move libraries that are not needed for dynamic linking to Libs.private in
the .pc files

12 years agoPR: 2717
Dr. Stephen Henson [Sat, 11 Feb 2012 23:41:19 +0000 (23:41 +0000)]
PR: 2717
Submitted by: Tim Rice <tim@multitalents.net>

Make compilation work on OpenServer 5.0.7

12 years agoPR: 2716
Dr. Stephen Henson [Sat, 11 Feb 2012 23:20:53 +0000 (23:20 +0000)]
PR: 2716
Submitted by: Adam Langley <agl@google.com>

Fix handling of exporter return value and use OpenSSL indentation in
s_client, s_server.

12 years agoPR: 2703
Dr. Stephen Henson [Sat, 11 Feb 2012 23:13:10 +0000 (23:13 +0000)]
PR: 2703
Submitted by: Alexey Melnikov <alexey.melnikov@isode.com>

Fix some memory and resource leaks in CAPI ENGINE.

12 years agoPR: 2705
Dr. Stephen Henson [Sat, 11 Feb 2012 23:08:08 +0000 (23:08 +0000)]
PR: 2705
Submitted by: Alexey Melnikov <alexey.melnikov@isode.com>

Only create ex_data indices once for CAPI engine.

12 years agoSubmitted by: Eric Rescorla <ekr@rtfm.com>
Dr. Stephen Henson [Sat, 11 Feb 2012 22:53:31 +0000 (22:53 +0000)]
Submitted by: Eric Rescorla <ekr@rtfm.com>

Further fixes for use_srtp extension.

12 years agoapps/s_cb.c: recognized latest TLS version.
Andy Polyakov [Sat, 11 Feb 2012 13:30:47 +0000 (13:30 +0000)]
apps/s_cb.c: recognized latest TLS version.

12 years agoPR: 2704
Dr. Stephen Henson [Fri, 10 Feb 2012 20:08:36 +0000 (20:08 +0000)]
PR: 2704
Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>

Fix srp extension.

12 years agoPR: 2710
Dr. Stephen Henson [Fri, 10 Feb 2012 19:54:54 +0000 (19:54 +0000)]
PR: 2710
Submitted by: Tomas Mraz <tmraz@redhat.com>

Check return codes for load_certs_crls.

12 years agoPR: 2714
Dr. Stephen Henson [Fri, 10 Feb 2012 19:43:14 +0000 (19:43 +0000)]
PR: 2714
Submitted by: Tomas Mraz <tmraz@redhat.com>

Make no-srp work.

12 years agoonly cleanup ctx if we need to, save ctx flags when we do
Dr. Stephen Henson [Fri, 10 Feb 2012 16:55:17 +0000 (16:55 +0000)]
only cleanup ctx if we need to, save ctx flags when we do

12 years agoadd fips blocking overrides to command line utilities
Dr. Stephen Henson [Fri, 10 Feb 2012 16:47:40 +0000 (16:47 +0000)]
add fips blocking overrides to command line utilities

12 years agoSubmitted by: Eric Rescorla <ekr@rtfm.com>
Dr. Stephen Henson [Fri, 10 Feb 2012 00:07:18 +0000 (00:07 +0000)]
Submitted by: Eric Rescorla <ekr@rtfm.com>

Fix encoding of use_srtp extension to be compliant with RFC5764

12 years agooops, revert unrelated changes
Dr. Stephen Henson [Thu, 9 Feb 2012 15:43:58 +0000 (15:43 +0000)]
oops, revert unrelated changes

12 years agoModify client hello version when renegotiating to enhance interop with
Dr. Stephen Henson [Thu, 9 Feb 2012 15:42:10 +0000 (15:42 +0000)]
Modify client hello version when renegotiating to enhance interop with
some servers.

12 years agotypo
Dr. Stephen Henson [Thu, 2 Feb 2012 19:18:24 +0000 (19:18 +0000)]
typo

12 years agobn_nist.c: make new optimized code dependent on BN_LLONG.
Andy Polyakov [Thu, 2 Feb 2012 07:46:05 +0000 (07:46 +0000)]
bn_nist.c: make new optimized code dependent on BN_LLONG.

12 years agohpux-parisc2-*: engage assembler.
Andy Polyakov [Thu, 2 Feb 2012 07:41:29 +0000 (07:41 +0000)]
hpux-parisc2-*: engage assembler.

12 years agoAdd support for distinct certificate chains per key type and per SSL
Dr. Stephen Henson [Tue, 31 Jan 2012 14:00:10 +0000 (14:00 +0000)]
Add support for distinct certificate chains per key type and per SSL
structure.

Before this the only way to add a custom chain was in the parent SSL_CTX
(which is shared by all key types and SSL structures) or rely on auto
chain building (which is performed on each handshake) from the trust store.

12 years agocode tidy
Dr. Stephen Henson [Fri, 27 Jan 2012 14:21:38 +0000 (14:21 +0000)]
code tidy

12 years agoRevise ssl code to use a CERT_PKEY structure when outputting a
Dr. Stephen Henson [Thu, 26 Jan 2012 16:00:34 +0000 (16:00 +0000)]
Revise ssl code to use a CERT_PKEY structure when outputting a
certificate chain instead of an X509 structure.

This makes it easier to enhance code in future and the chain
output functions have access to the CERT_PKEY structure being
used.

12 years agoTidy/enhance certificate chain output code.
Dr. Stephen Henson [Thu, 26 Jan 2012 15:47:32 +0000 (15:47 +0000)]
Tidy/enhance certificate chain output code.

New function ssl_add_cert_chain which adds a certificate chain to
SSL internal BUF_MEM. Use this function in ssl3_output_cert_chain
and dtls1_output_cert_chain instead of partly duplicating code.

12 years agoallow key agreement for SSL/TLS certificates
Dr. Stephen Henson [Thu, 26 Jan 2012 14:57:45 +0000 (14:57 +0000)]
allow key agreement for SSL/TLS certificates

12 years agoinitialise dh_clnt
Dr. Stephen Henson [Thu, 26 Jan 2012 14:37:46 +0000 (14:37 +0000)]
initialise dh_clnt

12 years agoghash-x86.pl: engage original MMX version in no-sse2 builds.
Andy Polyakov [Wed, 25 Jan 2012 17:56:08 +0000 (17:56 +0000)]
ghash-x86.pl: engage original MMX version in no-sse2 builds.

12 years agoadd example for DH certificate generation
Dr. Stephen Henson [Wed, 25 Jan 2012 16:33:39 +0000 (16:33 +0000)]
add example for DH certificate generation

12 years agoadd support for use of fixed DH client certificates
Dr. Stephen Henson [Wed, 25 Jan 2012 14:51:49 +0000 (14:51 +0000)]
add support for use of fixed DH client certificates

12 years agooops revert debug change
Dr. Stephen Henson [Sun, 22 Jan 2012 13:52:39 +0000 (13:52 +0000)]
oops revert debug change

12 years agoreturn error if md is NULL
Dr. Stephen Henson [Sun, 22 Jan 2012 13:12:14 +0000 (13:12 +0000)]
return error if md is NULL

12 years agox86_64-xlate.pl: proper solution for RT#2620.
Andy Polyakov [Sat, 21 Jan 2012 11:34:53 +0000 (11:34 +0000)]
x86_64-xlate.pl: proper solution for RT#2620.

12 years agoFix for DTLS DoS issue introduced by fix for CVE-2011-4109.
Dr. Stephen Henson [Wed, 18 Jan 2012 18:15:27 +0000 (18:15 +0000)]
Fix for DTLS DoS issue introduced by fix for CVE-2011-4109.
Thanks to Antonio Martin, Enterprise Secure Access Research and
Development, Cisco Systems, Inc. for discovering this bug and
preparing a fix. (CVE-2012-0050)

12 years agofix CHANGES entry
Dr. Stephen Henson [Tue, 17 Jan 2012 14:20:32 +0000 (14:20 +0000)]
fix CHANGES entry

12 years agoSupport for fixed DH ciphersuites.
Dr. Stephen Henson [Mon, 16 Jan 2012 18:19:14 +0000 (18:19 +0000)]
Support for fixed DH ciphersuites.

The cipher definitions of these ciphersuites have been around since SSLeay
but were always disabled. Now OpenSSL supports DH certificates they can be
finally enabled.

Various additional changes were needed to make them work properly: many
unused fixed DH sections of code were untested.

12 years agocryptlib.c: sscanf warning.
Andy Polyakov [Sun, 15 Jan 2012 17:13:57 +0000 (17:13 +0000)]
cryptlib.c: sscanf warning.

12 years agoFix OPNESSL vs. OPENSSL typos.
Andy Polyakov [Sun, 15 Jan 2012 13:39:10 +0000 (13:39 +0000)]
Fix OPNESSL vs. OPENSSL typos.
PR: 2613
Submitted by: Leena Heino

12 years agofix warning
Dr. Stephen Henson [Sun, 15 Jan 2012 13:30:41 +0000 (13:30 +0000)]
fix warning

12 years agocryptlib.c: make even non-Windows builds "strtoull-agnostic".
Andy Polyakov [Sat, 14 Jan 2012 18:46:15 +0000 (18:46 +0000)]
cryptlib.c: make even non-Windows builds "strtoull-agnostic".

12 years agosha512-sparcv9.pl: work around V8+ warning.
Andy Polyakov [Fri, 13 Jan 2012 09:18:05 +0000 (09:18 +0000)]
sha512-sparcv9.pl: work around V8+ warning.

12 years agoaes-ppc.pl, sha512-ppc.pl: comply even with Embedded ABI specification
Andy Polyakov [Fri, 13 Jan 2012 09:16:52 +0000 (09:16 +0000)]
aes-ppc.pl, sha512-ppc.pl: comply even with Embedded ABI specification
(most restrictive about r2 and r13 usage).

12 years agoSanitize usage of <ctype.h> functions. It's important that characters
Andy Polyakov [Thu, 12 Jan 2012 16:21:35 +0000 (16:21 +0000)]
Sanitize usage of <ctype.h> functions. It's important that characters
are passed zero-extended, not sign-extended.
PR: 2682

12 years agoec_pmeth.c: fix typo in commentary.
Andy Polyakov [Thu, 12 Jan 2012 13:22:51 +0000 (13:22 +0000)]
ec_pmeth.c: fix typo in commentary.
PR: 2677
Submitted by: Annue Yousar

12 years agodoc/apps: formatting fixes.
Andy Polyakov [Wed, 11 Jan 2012 21:58:19 +0000 (21:58 +0000)]
doc/apps: formatting fixes.
PR: 2683
Submitted by: Annie Yousar

12 years agospeed.c: typo in pkey_print_message.
Andy Polyakov [Wed, 11 Jan 2012 21:48:31 +0000 (21:48 +0000)]
speed.c: typo in pkey_print_message.
PR: 2681
Submitted by: Annie Yousar

12 years agoecdsa.pod: typo.
Andy Polyakov [Wed, 11 Jan 2012 21:41:32 +0000 (21:41 +0000)]
ecdsa.pod: typo.
PR: 2678
Submitted by: Annie Yousar

12 years agoasn1/t_x509.c: fix serial number print, harmonize with a_int.c.
Andy Polyakov [Wed, 11 Jan 2012 21:12:22 +0000 (21:12 +0000)]
asn1/t_x509.c: fix serial number print, harmonize with a_int.c.
PR: 2675
Submitted by: Annie Yousar

12 years agoaes-sparcv9.pl: clean up regexp
Andy Polyakov [Wed, 11 Jan 2012 15:30:53 +0000 (15:30 +0000)]
aes-sparcv9.pl: clean up regexp
PR: 2685

12 years agofix warning (revert original patch)
Dr. Stephen Henson [Tue, 10 Jan 2012 14:36:41 +0000 (14:36 +0000)]
fix warning (revert original patch)

12 years agocmac.c: optimize make_kn and move zero_iv to const segment.
Andy Polyakov [Fri, 6 Jan 2012 13:19:16 +0000 (13:19 +0000)]
cmac.c: optimize make_kn and move zero_iv to const segment.

12 years agobn_nist.c: harmonize buf in BN_nist_mod_256 with other mod functions.
Andy Polyakov [Fri, 6 Jan 2012 13:17:47 +0000 (13:17 +0000)]
bn_nist.c: harmonize buf in BN_nist_mod_256 with other mod functions.

12 years agoUpdate for 0.9.8s and 1.0.0f, and for 1.0.1 branch.
Bodo Möller [Thu, 5 Jan 2012 13:48:55 +0000 (13:48 +0000)]
Update for 0.9.8s and 1.0.0f, and for 1.0.1 branch.

(While the 1.0.0f CHANGES entry on VOS PRNG seeding was missing
in HEAD, the actual code is here already.)

12 years agoFix usage indentation
Bodo Möller [Thu, 5 Jan 2012 13:16:30 +0000 (13:16 +0000)]
Fix usage indentation

12 years agoFix for builds without DTLS support.
Bodo Möller [Thu, 5 Jan 2012 10:22:41 +0000 (10:22 +0000)]
Fix for builds without DTLS support.

Submitted by: Brian Carlstrom

12 years agoPR: 2671
Dr. Stephen Henson [Thu, 5 Jan 2012 00:28:43 +0000 (00:28 +0000)]
PR: 2671
Submitted by: steve

Update maximum message size for certifiate verify messages to support
4096 bit RSA keys again as TLS v1.2 messages is two bytes longer.

12 years agoSubmitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Dr. Stephen Henson [Thu, 5 Jan 2012 00:23:17 +0000 (00:23 +0000)]
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Send fatal alert if heartbeat extension has an illegal value.

12 years agodisable heartbeats if tlsext disabled
Dr. Stephen Henson [Thu, 5 Jan 2012 00:07:46 +0000 (00:07 +0000)]
disable heartbeats if tlsext disabled

12 years agoupdate CHANGES
Dr. Stephen Henson [Wed, 4 Jan 2012 23:54:17 +0000 (23:54 +0000)]
update CHANGES

12 years agoSubmitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen...
Dr. Stephen Henson [Wed, 4 Jan 2012 23:52:26 +0000 (23:52 +0000)]
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <tuexen@fh-muenster.de>
Reviewed by: steve

Fix for DTLS plaintext recovery attack discovered by Nadhem Alfardan and
Kenny Paterson.

12 years agoClear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)
Dr. Stephen Henson [Wed, 4 Jan 2012 23:16:15 +0000 (23:16 +0000)]
Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)

12 years agoOnly allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)
Dr. Stephen Henson [Wed, 4 Jan 2012 23:15:51 +0000 (23:15 +0000)]
Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)

12 years agofix CHANGES
Dr. Stephen Henson [Wed, 4 Jan 2012 23:10:44 +0000 (23:10 +0000)]
fix CHANGES

12 years agoCheck GOST parameters are not NULL (CVE-2012-0027)
Dr. Stephen Henson [Wed, 4 Jan 2012 23:03:40 +0000 (23:03 +0000)]
Check GOST parameters are not NULL (CVE-2012-0027)

12 years agoPrevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577)
Dr. Stephen Henson [Wed, 4 Jan 2012 23:01:54 +0000 (23:01 +0000)]
Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577)

12 years agoupdate FAQ
Dr. Stephen Henson [Wed, 4 Jan 2012 20:05:58 +0000 (20:05 +0000)]
update FAQ

12 years agofix warnings
Dr. Stephen Henson [Wed, 4 Jan 2012 14:45:47 +0000 (14:45 +0000)]
fix warnings

12 years agoSubmitted by: Adam Langley <agl@chromium.org>
Dr. Stephen Henson [Wed, 4 Jan 2012 14:25:42 +0000 (14:25 +0000)]
Submitted by: Adam Langley <agl@chromium.org>
Reviewed by: steve

Fix memory leaks.

12 years agooops, revert wrong patch
Dr. Stephen Henson [Tue, 3 Jan 2012 22:06:21 +0000 (22:06 +0000)]
oops, revert wrong patch

12 years agoonly send heartbeat extension from server if client sent one
Dr. Stephen Henson [Tue, 3 Jan 2012 22:03:20 +0000 (22:03 +0000)]
only send heartbeat extension from server if client sent one

12 years agoincomplete provisional OAEP CMS decrypt support
Dr. Stephen Henson [Mon, 2 Jan 2012 18:25:37 +0000 (18:25 +0000)]
incomplete provisional OAEP CMS decrypt support

12 years agorecognise HEARTBEATS in mkdef.pl script
Dr. Stephen Henson [Sat, 31 Dec 2011 23:50:01 +0000 (23:50 +0000)]
recognise HEARTBEATS in mkdef.pl script

12 years agoupdate CHANGES
Dr. Stephen Henson [Sat, 31 Dec 2011 23:08:15 +0000 (23:08 +0000)]
update CHANGES

12 years agoPR: 2658
Dr. Stephen Henson [Sat, 31 Dec 2011 22:59:57 +0000 (22:59 +0000)]
PR: 2658
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Support for TLS/DTLS heartbeats.

12 years agomake update
Dr. Stephen Henson [Tue, 27 Dec 2011 14:46:03 +0000 (14:46 +0000)]
make update

12 years agoupdate default depflags
Dr. Stephen Henson [Tue, 27 Dec 2011 14:45:32 +0000 (14:45 +0000)]
update default depflags

12 years agofix error code
Dr. Stephen Henson [Tue, 27 Dec 2011 14:40:21 +0000 (14:40 +0000)]
fix error code

12 years agofix deprecated statement
Dr. Stephen Henson [Tue, 27 Dec 2011 14:39:13 +0000 (14:39 +0000)]
fix deprecated statement

12 years agoPR: 1794
Dr. Stephen Henson [Tue, 27 Dec 2011 14:21:45 +0000 (14:21 +0000)]
PR: 1794
Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>
Reviewed by: steve

- remove some unncessary SSL_err and permit
an srp user callback to allow a worker to obtain
a user verifier.

- cleanup and comments in s_server and demonstration
for asynchronous srp user lookup

12 years agoPR: 2326
Dr. Stephen Henson [Mon, 26 Dec 2011 19:37:58 +0000 (19:37 +0000)]
PR: 2326
Submitted by: Tianjie Mao <tjmao@tjmao.net>
Reviewed by: steve

Fix incorrect comma expressions and goto f_err as alert has been set.

12 years agorecognise no-sctp
Dr. Stephen Henson [Sun, 25 Dec 2011 14:59:52 +0000 (14:59 +0000)]
recognise no-sctp

12 years agorecognise SCTP in mkdef.pl script
Dr. Stephen Henson [Sun, 25 Dec 2011 14:46:15 +0000 (14:46 +0000)]
recognise SCTP in mkdef.pl script

12 years agoPR: 2535
Dr. Stephen Henson [Sun, 25 Dec 2011 14:45:15 +0000 (14:45 +0000)]
PR: 2535
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Add SCTP support for DTLS (RFC 6083).

12 years agotypo
Dr. Stephen Henson [Fri, 23 Dec 2011 15:03:03 +0000 (15:03 +0000)]
typo

12 years agorecognise DECLARE_PEM_write_const, update ordinals
Dr. Stephen Henson [Fri, 23 Dec 2011 14:58:30 +0000 (14:58 +0000)]
recognise DECLARE_PEM_write_const, update ordinals

12 years agodelete unimplemented function from header file, update ordinals
Dr. Stephen Henson [Fri, 23 Dec 2011 14:09:30 +0000 (14:09 +0000)]
delete unimplemented function from header file, update ordinals