freebsd

mirror of https://git.FreeBSD.org/src.git synced 2024-12-25 11:37:56 +00:00

History

Simon L. B. Nielsen 0a70456882 Fix Incorrectly formatted ClientHello SSL/TLS handshake messages could cause OpenSSL to parse past the end of the message. Note: Applications are only affected if they act as a server and call SSL_CTX_set_tlsext_status_cb on the server's SSL_CTX. This includes Apache httpd >= 2.3.3, if configured with "SSLUseStapling On". Security: http://www.openssl.org/news/secadv_20110208.txt Security: CVE-2011-0014 Obtained from: OpenSSL CVS		2011-02-12 21:30:46 +00:00
..
heimdal	The size of credential messages is limited by CMGROUP_MAX rather than	2010-01-03 20:45:49 +00:00
openssh	Upgrade to OpenSSH 5.6p1.	2010-11-11 11:46:19 +00:00
openssl	Fix Incorrectly formatted ClientHello SSL/TLS handshake messages could	2011-02-12 21:30:46 +00:00
README

README

$FreeBSD$

This directory is for the EXACT same use as src/contrib, except it
holds crypto sources.  In other words, this holds raw sources obtained
from various third party vendors, with FreeBSD patches applied.  No
compilation is done from this directory, it is all done from the
src/secure directory.  The separation between src/contrib and src/crypto
is the result of an old USA law, which made these sources export
controlled, so they had to be kept separate.