summaryrefslogtreecommitdiffstats
path: root/patches/README
blob: a1d53130e0df106894a07ad44e9e59c9dbe9c1bd (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
progs.patch:

Fixup sources under the apps/ directory that are not built under the android environment.


handshake_cutthrough.patch

Enables SSL3+ clients to send application data immediately following the
Finished message even when negotiating full-handshakes.  With this patch,
clients can negotiate SSL connections in 1-RTT even when performing
full-handshakes.

jsse.patch

Support for JSSE implementation based on OpenSSL.

sha1_armv4_large.patch

This patch eliminates memory stores to addresses below SP.


mips_private.patch:

Fix duplicate defines of labels AES_set_encrypt_key and AES_set_decrypt_key
by prefixing Mips version with private_ .
Revise import script to generate o32-abi .s files for Mips.


channelid.patch

Implements TLS Channel ID support as both a client and a server.
See http://tools.ietf.org/html/draft-balfanz-tls-channelid-00.


clang.patch

Fixes two minor compilation errors when building with the Clang compiler.


recursive_lock_fix.patch

Small fix to get rid of unwanted recursive mutex lock in X509_PUBKEY_get.
See http://cvs.openssl.org/chngview?cn=22568 for upstream patch, and
https://groups.google.com/d/topic/mailing.openssl.dev/4Z67vaaTChk/discussion
for the most recent discussion.


0001-Add-and-use-a-constant-time-memcmp.patch

constant time memcmp


0002-Make-CBC-decoding-constant-time.patch

Make CBC decoding constant time CVE-2013-0169