MEMORY CLEAN 3 1.0.2 WINDOWS

Return error when a bit string indicates an invalid amount of bits left Keep old method in case of an unsupported protocolДЇix warning about negative unsigned intergers Only inherit the session ID context in SSL_set_SSL_CTX if the existing context was also inherited (matches that of the existing SSL_CTX). Reject elliptic curve lists of odd lengths.ДЄdd extra checks for odd-length EC curve lists.Д¬larify the return values for SSL_get_shared_curve.ДЄdd a clang build target for linux-x86_64 This would allow a second CCS to arrive and would corrupt the server state. Previously, the server would set the flag once at SSе…ѓ_ST_SR_CERT_VRFY and again at SSе…ѓ_ST_SR_FINISHED. Set s->hit when resuming from external pre-shared secret.ДЄlways require an advertised NewSessionTicket message.Д®nsure SSе…ѓ_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is reset once the ChangeCipherSpec message is received. It also ensures that it applies to DTLS, too. This ensures that it's zeroed even if the SSL object is reused (as in ssltest.c). Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext. Unauthenticated DH client certificate fix.ДЄdd -d debug option to save preprocessed files.ДЇix ssltest logic when some protocols are compiled out. in nameConstraintsДЇix crash in dtls1_get_record whilst in the listen state where you get two separate reads performed - one for the header and one for the body of the handshake record. Only allow ephemeral RSA keys in export ciphersuites. New option no-ssl3-method which removes SSLv3_*methodД¬heck return value of ssl3_output_cert_chainДЇix various certificate fingerprint issues.Д¬onstify ASN1_TYPE_cmp add X509_ALGOR_cmp. Process signature algorithms before deciding on certificate. Process signature algorithms in ClientHello late.Д¬opy negotiated parameters in SSL_set_SSL_CTX. Drop outdated Cygwin targets.ДЄllow ECDHE and DHE as forward-compatible aliases for EECDH and EDHДo not resume a session if the negotiated protocol version does not match the session's version (server). Change OPENSSL_SYSNAME_CYGWIN32 to OPENSSL_SYSNAME_CYGWIN. When processing ClientHello.cipher_suites, don't ignore cipher suites listed after TLS_FALLBACK_SCSV.ДЇix and improve SSL_MODE_SEND_FALLBACK_SCSV documentation.Дrop redundant and outdated _CYGWIN32_ tests. Oop: revert unintentional change committed along with TLS_FALLBACK_SCSV support, restoring a reviewed state instead.ДЄdd TLS_FALLBACK_SCSV documentation, and move s_client -fallback_scsv handling out of #ifndef OPENSSL_NO_DTLS1 section. Modes/modes_lcl.h: make it indent-friendly.Д«n/asm/x86_64-gcc.cL make it indent-friendly.Д®c/ecp_nistz256.c: harmonize with latest indent script.Д¬rypto/ofb128.c: make it indent-friendly.Д®c/ecp_nistz256.c: further harmonization with latest rules.ДЇix macosx-ppc build (and typos in unwind info).ДTLS 1.2 support has been added to 1.0.2.

Revert 'CHANGES: mention 'universal' ARM support.'ДЇix for CVE-2014-3570 (with minor bn_asm.c revamp).Д®ngines/e_ubsec.c: make it indent-friendly.Д¬rypto/cryptlib.c: make it indent-friendly.Д¬rypto/mem_dbg.c: make it indent-friendly. See commentary in Configure for details.Д¬HANGES: mention 'universal' ARM support. This facilitates 'universal' builds, ones that target multiple architectures, e.g. Md32_common.h: address compiler warning in HOST_c2l.ДЄrmv4cpuid.S: fix compilation error in pre-ARMv7 build.Д®cp_nistz256-x86_64.pl: fix occasional failures.

MEMORY CLEAN 3 1.0.2 WINDOWS

Improves the proxy certificates howto doc.ДЄdd documentation on -timeout option in the ocsp utilityД®_os.h: refine inline override logic (to address warnings in debug build).ДЄesni-x86_64.pl: make ECB subroutine Windows ABI compliant. Log -Дon't set client_version to the ServerHello version.Д®nsure that the session ID context of an SSL* is updated when its SSL_CTX is updated. Previous message: OpenSSL_1_0_1l create.OpenSSL_1_0_2 create Matt Caswell matt at

Memory clean 3 1.0.2