mtk-20170518/package/libs/openssl, branch v17.01.5 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker openssl: update to 1.0.2o 2018-04-01T13:21:14+00:00 Paul Wassi p.wassi@gmx.at 2018-03-30T06:15:00+00:00 c4b382934836231ba73678e7d240e85e8303913a Fixes CVE-2018-0739 Signed-off-by: Paul Wassi <p.wassi@gmx.at> 
Fixes CVE-2018-0739

Signed-off-by: Paul Wassi <p.wassi@gmx.at>
openssl: fix cryptodev config dependency 2017-12-13T15:46:02+00:00 Ralph Sennhauser ralph.sennhauser@gmail.com 2017-10-22T20:21:22+00:00 79024cd3be383820b3a97f5c58b97bee63997328 Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com> (cherry picked from commit f5468d248613fee51d19715e0fa6e37012c0eda7) 
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
(cherry picked from commit f5468d248613fee51d19715e0fa6e37012c0eda7)
openssl: update to 1.0.2n 2017-12-13T12:17:12+00:00 Peter Wagner tripolar@gmx.at 2017-12-08T05:23:26+00:00 50b478956a70a99c4b1b0e16d1cf4c38e0ef5325 add no-ssl3-method again as 1.0.2n compiles without the ssl3-method(s) Fixes CVEs: CVE-2017-3737, CVE-2017-3738 Signed-off-by: Peter Wagner <tripolar@gmx.at> (backported from commit 55e70c8b72dbb8e812ceb790bf08543d69fce86e) Signed-off-by: Jo-Philipp Wich <jo@mein.io> 
add no-ssl3-method again as 1.0.2n compiles without the ssl3-method(s)

Fixes CVEs: CVE-2017-3737, CVE-2017-3738

Signed-off-by: Peter Wagner <tripolar@gmx.at>
(backported from commit 55e70c8b72dbb8e812ceb790bf08543d69fce86e)
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
openssl: update to 1.0.2m 2017-11-12T23:53:35+00:00 Peter Wagner tripolar@gmx.at 2017-11-09T23:35:35+00:00 cda8ec7dd84d5382a5cead01de568893cf0be833 don't set no-ssl3-method when CONFIG_OPENSSL_WITH_SSL3 di disabled otherwise the compile breaks with this error: ../libssl.so: undefined reference to `SSLv3_client_method' Fixes CVE: CVE-2017-3735, CVE-2017-3736 Signed-off-by: Peter Wagner <tripolar@gmx.at> 
don't set no-ssl3-method when CONFIG_OPENSSL_WITH_SSL3 di disabled otherwise the compile breaks with this error:

../libssl.so: undefined reference to `SSLv3_client_method'

Fixes CVE: CVE-2017-3735, CVE-2017-3736

Signed-off-by: Peter Wagner <tripolar@gmx.at>
openssl: Use mkhash for STAMP_CONFIGURED 2017-04-22T10:43:51+00:00 Florian Fainelli f.fainelli@gmail.com 2017-03-01T18:48:32+00:00 72fcdb6286ad7be24296acbd36043ee3e96e5ec4 The current way of creating a STAMP_CONFIGURED filename for OpenSSL can lead to an extremely long filename that makes touch unable to create it, and fail the build. Use mkhash to produce a hash against OPENSSL_OPTIONS which creates a shortert stamp file, Fixes #572 Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> 
The current way of creating a STAMP_CONFIGURED filename for OpenSSL can
lead to an extremely long filename that makes touch unable to create it,
and fail the build.

Use mkhash to produce a hash against OPENSSL_OPTIONS which creates a
shortert stamp file,

Fixes #572

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
openssl: update to version 1.0.2k 2017-01-28T12:33:22+00:00 Hauke Mehrtens hauke@hauke-m.de 2017-01-27T22:36:45+00:00 f5ab082243f9822544204fc713c6bd4dab14a3a8 This fixes the following security problems: CVE-2017-3731: Truncated packet could crash via OOB read CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64 CVE-2016-7055: Montgomery multiplication may produce incorrect results Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes the following security problems:
CVE-2017-3731: Truncated packet could crash via OOB read
CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64
CVE-2016-7055: Montgomery multiplication may produce incorrect results

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
treewide: clean up download hashes 2016-12-16T21:39:22+00:00 Felix Fietkau nbd@nbd.name 2016-12-16T16:32:10+00:00 720b99215da295a2e7b4acdef30b58bec6acedc2 Replace *MD5SUM with *HASH, replace MD5 hashes with SHA256 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Replace *MD5SUM with *HASH, replace MD5 hashes with SHA256

Signed-off-by: Felix Fietkau <nbd@nbd.name>
openssl: update to 1.0.2j 2016-09-27T15:50:22+00:00 Magnus Kroken mkroken@gmail.com 2016-09-26T15:21:52+00:00 b1f39d3d7ee7ba0714e45af64a935b01877a5175 A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i. As a result any attempt to use CRLs in OpenSSL 1.0.2i will crash with a null pointer exception. Patches applied upstream: * 301-fix_no_nextprotoneg_build.patch * 302-Fix_typo_introduced_by_a03f81f4.patch Security advisory: https://www.openssl.org/news/secadv/20160926.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com> 
A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.

Patches applied upstream:
* 301-fix_no_nextprotoneg_build.patch
* 302-Fix_typo_introduced_by_a03f81f4.patch

Security advisory: https://www.openssl.org/news/secadv/20160926.txt

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
openssl: Make DTLS configurable. 2016-09-27T15:50:22+00:00 Rosen Penev rosenp@gmail.com 2016-09-26T20:00:04+00:00 c0b15b307201ddeeaf01aa4d6c85cdefbade035f Signed-off by: Rosen Penev <rosenp@gmail.com> 
Signed-off by: Rosen Penev <rosenp@gmail.com>
openssl: Remove J-PAKE. Nothing uses it. 2016-09-27T15:50:22+00:00 Rosen Penev rosenp@gmail.com 2016-09-26T19:56:14+00:00 aaa067ab0b3cfd6d26f976e2e5e43ac15a8f0ee6 Signed-off by: Rosen Penev <rosenp@gmail.com> 
Signed-off by: Rosen Penev <rosenp@gmail.com>