Mark Andrews
dbeb3f06ff
4264. [bug] Check const of strchr/strrchr assignments match
...
argument's const status. [RT #41150 ]
(cherry picked from commit 5b1c7ef35b )
2015-11-20 18:39:57 +11:00
Mark Andrews
0070bbe0d2
4340. [port] Fix LibreSSL compatibility. [RT #40977 ]
...
(cherry picked from commit f824c65d1f )
2015-10-19 10:46:27 +11:00
Evan Hunt
7163ce122d
[v9_10] address buffer accounting error
...
4168. [security] A buffer accounting error could trigger an
assertion failure when parsing certain malformed
DNSSEC keys. (CVE-2015-5722) [RT #40212 ]
(cherry picked from commit ce9f893e21 )
2015-08-07 13:23:03 -07:00
Mark Andrews
c9cb7502ec
silence coverity warnings
...
(cherry picked from commit e0fea0bf85 )
2015-05-30 17:45:12 +10:00
Tinderbox User
b3623d80ab
update copyright notice / whitespace
2015-05-28 23:45:50 +00:00
Mark Andrews
234af55779
4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532 ]
...
(cherry picked from commit 8bb630c751 )
2015-05-28 14:42:13 +10:00
Mark Andrews
c9ca5e3c87
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537 ]
...
(cherry picked from commit e53e202ef3 )
2015-05-28 13:17:24 +10:00
Mark Andrews
dfb6462891
3974. [bug] handle DH_compute_key() failure correctly in
...
openssldh_link.c. [RT #37477 ]
(cherry picked from commit 58a1051e92 )
2014-10-13 23:42:22 +11:00
Evan Hunt
3249da26fc
[master] rationalize external key handling
...
3723. [cleanup] Imported keys are now handled the same way
regardless of DNSSEC algorithm. [RT #35215 ]
2014-01-30 17:49:32 -08:00
Mark Andrews
e20788e121
update copyrights
2014-01-16 15:19:24 +11:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Mark Andrews
2bdfb330af
update copyrights
2013-12-05 15:04:53 +11:00
Mark Andrews
c3c8823fed
3681. [port] Update the Windows build system to support feature
...
selection and WIN64 builds. This is a work in
progress. [RT #34160 ]
2013-12-04 12:47:23 +11:00
Mark Andrews
6eb6af6732
3354. [func] Improve OpenSSL error logging. [RT #29932 ]
2012-07-23 15:08:21 +10:00
Tinderbox User
ef1963d83d
update copyright notice
2012-06-15 23:45:49 +00:00
Mark Andrews
7865ea9545
3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-14 15:44:20 +10:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Mark Andrews
8a0943e125
silence compiler warnings. [RT #20472 ]
2009-10-30 05:08:23 +00:00
Francis Dupont
775a8d86d9
keygen progress indication [RT #20284 ]
2009-10-24 09:46:19 +00:00
Automatic Updater
7b1894bec1
update copyright notice
2009-09-03 23:48:13 +00:00
Mark Andrews
bbc204a237
2669. [func] Update PKCS#11 support to support Keyper HSM.
...
Update PKCS#11 patch to be against openssl-0.9.8i.
2009-09-03 04:09:58 +00:00
Automatic Updater
e672951ed2
update copyright notice
2008-04-01 23:47:10 +00:00
Francis Dupont
2a31bd5310
add EVP and PKCS11
2008-03-31 14:42:51 +00:00
Automatic Updater
271c4c7ffa
update copyright notice
2007-08-28 07:20:43 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
f36c85c3ce
update copyright notice
2007-01-08 02:45:04 +00:00
Mark Andrews
2a5600ad8b
prime_len -> key->key_size
2007-01-08 02:35:58 +00:00
Mark Andrews
8eb4eca375
2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563 ]
2007-01-08 01:53:30 +00:00
Mark Andrews
289ae548d5
2105. [func] GSS-TSIG support (RFC 3645).
2006-12-04 01:54:53 +00:00
Mark Andrews
641f68d427
update copyright notice
2006-03-02 00:37:23 +00:00
Mark Andrews
25c18fded0
1994. [port] OpenSSL 0.9.8 support. [RT #15694 ]
2006-03-01 02:32:46 +00:00
Mark Andrews
016c0a82f1
1888. [func] "USE INTERNAL MALLOC" is now runtime selectable.
...
[RT #14892 ]
2005-06-17 02:22:45 +00:00
Mark Andrews
69fe9aaafd
update copyright notice
2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
494576ce20
1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
...
allow parallel make to succeed.
2004-12-09 01:41:25 +00:00