Path to this page:
./
security/openssl,
Secure Socket Layer and cryptographic library
Branch: pkgsrc-2011Q1,
Version: 0.9.8qnb2,
Package name: openssl-0.9.8qnb2,
Maintainer: pkgsrc-usersThe OpenSSL Project is a collaborative effort to develop a
robust, commercial-grade, full-featured, and Open Source
toolkit implementing the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols as well as
a full-strength general purpose cryptography library. The
project is managed by a worldwide community of volunteers
that use the Internet to communicate, plan, and develop the
OpenSSL toolkit and its related documentation.
MESSAGE.SunOS [+/-]===========================================================================
$NetBSD: MESSAGE.SunOS,v 1.1 2011/01/20 16:25:21 tez Exp $
openssl may dump core on SunOS due to a bug in the Solaris linker which
erroneously pads .init segment with zeros [instead of nops]. Since the
bug is triggered at initialization, it can be seen with a simple test like
'openssl version'.
Some versions of gcc already contain a workaround, and the linker may be
fixed in some release. If you see the problem, there are details and a
fix for gcc at http://www.openssl.org/~appro/values.c which solves the
problem.
See also http://gnats.netbsd.org/43939
===========================================================================
Required to build:[
archivers/gtar-base] [
lang/perl5] [
devel/gmake]
Master sites: (Expand)
SHA1: 12b6859698ca299fa0cba594686c25d5c01e410d
RMD160: 2a6583fc059f83232b16d0dad8855fc8086f2450
Filesize: 3685.509 KB
Version history: (Expand)
- (2011-06-04) Updated to version: openssl-0.9.8qnb2
- (2011-04-04) Package added to pkgsrc.se, version openssl-0.9.8qnb1 (created)
CVS history: (Expand)
2011-06-04 03:42:24 by Steven Drake | Files touched by this commit (3) |
Log message:
Pullup ticket #3447 - requested by tez
security/openssl security fix
Revisions pulled up:
- security/openssl/Makefile 1.156
- security/openssl/distinfo 1.81
- security/openssl/patches/patch-crypto_ecdsa_ecs__ossl.c 1.1
---
Module Name: pkgsrc
Committed By: tez
Date: Tue May 31 17:18:42 UTC 2011
Modified Files:
pkgsrc/security/openssl: Makefile distinfo
Added Files:
pkgsrc/security/openssl/patches: patch-crypto_ecdsa_ecs__ossl.c
Log message:
Add protection against ECDSA timing attacks as mentioned in the paper
by Billy Bob Brumley and Nicola Tuveri, see:
http://eprint.iacr.org/2011/232.pdf
[Billy Bob Brumley and Nicola Tuveri]
(patch confirmed in upstream cvs)
|