buildroot.git/package/openssl, branch 2012.05_rc3

openssl: security bump to version 1.0.0j

2012-05-14T12:36:17Z

Bump to version 1.0.0j to fix CVE-2012-2333 Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: switch to the ocf-linux package

2012-05-05T14:21:49Z

Remove builtin OCF support from the openssl package into a new package. Even though ocf support is just a header file we'd rather have it in a separate package because of unrelated version bumps and to fetch it from source. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: security bump to version 1.0.0i

2012-04-19T18:44:50Z

Fix for CVE-2012-2110 Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: security bump to version 1.0.0h

2012-03-15T22:33:52Z

Bump to version 1.0.0h to fix CMS and S/MIME Bleichenbacher attack (CVE-2012-0884) Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: security bump to version 1.0.0g

2012-01-22T20:45:09Z

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: security bump to version 1.0.0f

2012-01-06T10:03:50Z

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

package: remove useless arguments from GENTARGETS

2011-09-29T21:09:58Z

Thanks to the pkgparentdir and pkgname functions, we can rewrite the GENTARGETS macro in a way that avoids the need for each package to repeat its name and the directory in which it is present. [Peter: pkgdir->pkgparentdir] Signed-off-by: Thomas Petazzoni Signed-off-by: Peter Korsgaard

openssl: bump to 1.0.0e

2011-09-12T22:17:15Z

Changes between 1.0.0d and 1.0.0e [6 Sep 2011] *) Fix bug where CRLs with nextUpdate in the past are sometimes accepted by initialising X509_STORE_CTX properly. (CVE-2011-3207) [Kaspar Brand ] *) Fix SSL memory handling for (EC)DH ciphersuites, in particular for multi-threaded use of ECDH. (CVE-2011-3210) [Adam Langley (Google)] *) Fix x509_name_ex_d2i memory leak on bad inputs. [Bodo Moeller] *) Remove hard coded ecdsaWithSHA1 signature tests in ssl code and check signature public key algorithm by using OID xref utilities instead. Before this you could only use some ECC ciphersuites with SHA1 only. [Steve Henson] *) Add protection against ECDSA timing attacks as mentioned in the paper by Billy Bob Brumley and Nicola Tuveri, see: http://eprint.iacr.org/2011/232.pdf [Billy Bob Brumley and Nicola Tuveri] Signed-off-by: Yegor Yefremov Acked-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: fix compilation for i386

2011-04-01T19:56:21Z

Closes #3445. OpenSSL emits bswap instructions when building for i386 targets which unfortunately is only available on 486+ class processors. Since the normal workaround is detected at build time and we are cross compiling we need to specify this. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: fix libdir issue

2011-02-23T22:31:49Z

Closes #3205 OpenSSL's build system tries to be too wise for it's own good when guessing what libdir should be. This causes problems like the one reported in bug #3205 so just specify libdir to point to /lib (since it's prefixed it would finally be /usr/lib) since it should be present on 32 and 64 bit targets. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard