aboutsummaryrefslogtreecommitdiffstats
path: root/package/libs/cyassl/patches/200-SSL_accept-handle-hello-garbage.patch
Commit message (Collapse)AuthorAgeFilesLines
* cyassl: update to wolfssl 3.6.0Hauke Mehrtens2015-07-031-13/+0
| | | | | | | | | Upstream wolfssl already has better checks to detect broken ssl v2 ClientHellos, we can remove our hack. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46168
* cyassl: version bump to 3.4.6Hauke Mehrtens2015-07-031-1/+1
| | | | | | | | | | | | This patch introduces a new build error into coova-chilli, but coova-chilli already fails to build even without it anyway. CyaSSL is now called wolfSSL, and all the API's have been renamed, and backward-compatibility headers added. Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46167
* cyassl: update to version 3.2.0Hauke Mehrtens2014-09-131-1/+1
| | | | | | | | | This fixes a security problem: Security fix for RSA Padding check vulnerability Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 42526
* cyassl: update to 3.1.0Steven Barth2014-08-081-1/+1
| | | | SVN-Revision: 42063
* cyassl: update to version 3.0.0Hauke Mehrtens2014-05-011-2/+2
| | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 40621
* change fixup method and fix CFLAGS handlingImre Kaloz2013-12-201-1/+1
| | | | | | Signed-off-by: Imre Kaloz <kaloz@openwrt.org> SVN-Revision: 39151
* cyassl: upgrade to v2.8.0Jo-Philipp Wich2013-10-301-3/+3
| | | | | | | | | Un-reverts the previous update commit and forward-ports the patch to improve legacy SSLv2 handshake handling. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 38609
* Revert "[cyassl]: upgrade to 2.8.0"Jo-Philipp Wich2013-10-291-0/+13
| | | | | | | | | | Reverts the CyaSSL version bump for now since the update completely broke trunk building due to incompatible changes in the IO callback API which in turn breaks the core ustream-ssl package. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 38576
* upgrade to 2.8.0Imre Kaloz2013-10-281-13/+0
| | | | | | Signed-off-by: Imre Kaloz <kaloz@openwrt.org> SVN-Revision: 38558
* cyassl: add a patch to better check legacy SSLv2 client hello recordsJo-Philipp Wich2012-10-091-0/+13
If junk data is received during SSL_accept(), cyassl will treat it as legacy SSLv2 record without performing further plausibility checks. Change the legacy code path to return UNKNOWN_HANDSHAKE_TYPE if the value of the third byte isn't 0x01 the hello message type. SVN-Revision: 33675