summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* pull in upstream patch for CVE-2014-0160HEADmasterDennis Gilmore2014-04-082-1/+116
* add support for ppc64le architecture (#1072633)Tomas Mraz2014-04-033-2/+25
* properly detect encryption failure in BIOTomas Mraz2014-03-173-7/+713
* use the key length from configuration file if req -newkey rsa is invokedTomas Mraz2014-02-142-2/+45
* Avoid unnecessary reseeding in BN_rand in FIPS mode.Tomas Mraz2014-02-131-0/+19
* Remove obsolete sentence.Tomas Mraz2014-02-131-2/+0
* Add macro for performance build on certain arches.Tomas Mraz2014-02-121-0/+2
* print ephemeral key size negotiated in TLS handshake (#1057715)Tomas Mraz2014-02-123-8/+179
* make expiration and key length changeable by DAYS and KEYLENTomas Mraz2014-02-063-11/+38
* make 3des strength to be 128 bits instead of 168 (#1056616)Tomas Mraz2014-01-222-1/+177
* Two security fixesTomas Mraz2014-01-074-1/+138
* dh->q might be NULL.Tomas Mraz2014-01-071-1/+1
* fix CVE-2013-6449 - crash when version in SSL structure is incorrectTomas Mraz2013-12-202-1/+95
* Additional FIPS requirements changes.Tomas Mraz2013-12-191-72/+544
* drop weak ciphers from the default TLS ciphersuite listTomas Mraz2013-12-184-17/+264
* fix locking and reseeding problems with FIPS drbgTomas Mraz2013-11-192-18/+293
* Fix typos.Tomas Mraz2013-11-151-10/+10
* additional changes required for FIPS validationTomas Mraz2013-11-152-1/+152
* disable verification of certificate, CRL, and OCSP signatures using MD5Tomas Mraz2013-11-131-0/+25
* disable verification of certificate, CRL, and OCSP signatures using MD5Tomas Mraz2013-11-131-1/+10
* add back support for secp521r1 EC curveTomas Mraz2013-11-081-0/+47
* add back support for secp521r1 EC curveTomas Mraz2013-11-085-56/+111
* fix misdetection of RDRAND support on Cyrix CPUS (from upstream) (#1022346)Tomas Mraz2013-10-292-1/+24
* do not advertise ECC curves we do not support (#1022493)Tomas Mraz2013-10-242-5/+43
* Merge remote-tracking branch 'origin/f19' into f19Tomas Mraz2013-10-160-0/+0
|\
| * resolve bugzilla 319901 (phew! only took 6 years & 9 days)Tom Callaway2013-10-154-16/+2064
* | Merge remote-tracking branch 'origin/f20' into f20Tomas Mraz2013-10-160-0/+0
|\ \
| * | resolve bugzilla 319901 (phew! only took 6 years & 9 days)Tom Callaway2013-10-156-283/+2442
* | | only ECC NIST Suite B curves supportTomas Mraz2013-10-1610-604/+1714
* | | resolve bugzilla 319901 (phew! only took 6 years & 9 days)Tom Callaway2013-10-154-16/+2064
* | | Bump releaseTomas Mraz2013-09-271-1/+1
* | | make DTLS1 work in FIPS modeTomas Mraz2013-09-272-251/+285
* | | avoid dlopening libssl.so from libcrypto (#1010357)Tomas Mraz2013-09-232-9/+83
* | | fix small memory leak in FIPS aes selftestTomas Mraz2013-09-202-9/+12
|/ /
* | fix segfault in openssl speed hmac in the FIPS modeTomas Mraz2013-09-192-1/+12
* | Merge branch 'f20' of ssh://pkgs.fedoraproject.org/openssl into f20Tomas Mraz2013-09-130-0/+0
|\ \
| * | arm: use auxv to figure out armcap.c instead of using signals (#1006474)Kyle McMartin2013-09-112-1/+100
* | | Add documentation of -attime to verify manpageTomas Mraz2013-09-121-31/+55
* | | document the nextprotoneg option in manual pagesTomas Mraz2013-09-122-2/+101
|\ \ \
| * | | arm: use auxv to figure out armcap.c instead of using signals (#1006474)Kyle McMartin2013-09-112-1/+100
* | | | document the nextprotoneg option in manual pagesTomas Mraz2013-09-122-35/+88
|/ / /
* | | try to avoid some races when updating the -fips subpackageTomas Mraz2013-09-041-2/+8
|/ /
* | use version-release in .hmac suffix to avoid overwrite during upgradeTomas Mraz2013-09-022-13/+30
* | allow deinitialization of the FIPS modeTomas Mraz2013-08-292-2/+5
* | always perform the FIPS selftests in library constructorTomas Mraz2013-08-292-1/+109
* | add -fips subpackage that contains the FIPS module filesTomas Mraz2013-08-273-7/+39
* | fix use of rdrand if availableTomas Mraz2013-08-165-188/+560
* | Perl 5.18 rebuildPetr Písař2013-08-031-1/+4
* | use symbol versioning also for the textual versionTomas Mraz2013-07-263-45/+69
* | additional manual page fixesTomas Mraz2013-07-252-28/+99