trust is easily compromised

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 25 of 61

Files

OpenSSL Toolkit 1.0.1a

Posted Apr 20, 2012

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Overflow in asn1_d2i_read_bio has been addressed. Various other updates.

tags | encryption, protocol

systems | unix

advisories | CVE-2012-2110

MD5 | a0104320c0997cd33e18b8ea798609d1

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.1

Posted Mar 15, 2012

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Initial TLSv1.1 support and TLS v1.2 support were implemented. Many improvements and minor bugfixes were made.

tags | encryption, protocol

systems | unix

MD5 | 134f168bc2a8333f19f81d684841710b

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0g

Posted Jan 19, 2012

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: This release fixed a DTLS DoS issue which was recently introduced by the fix for CVE-2011-4109.

tags | encryption, protocol

systems | unix

advisories | CVE-2011-4109

MD5 | 07ecbe4324f140d157478637d6beccf1

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0f

Posted Jan 7, 2012

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: A fix was introduced for a security issue where an extension of the Vaudenay padding oracle attack on CBC mode encryption enables an efficient plaintext recovery attack against the OpenSSL implementation of DTLS. Various other bugfixes and improvements were made.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2011-4108, CVE-2011-4576, CVE-2011-4619, CVE-2012-0027, CVE-2011-4577

MD5 | e358705fb4a8827b5e9224a73f442025

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0e

Posted Sep 7, 2011

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Initialization of X509_STORE_CTX was fixed to eliminate a case where CRLs with "nextUpdate" in the past were sometimes accepted. An error in SSL memory handling for (EC)DH ciphersuites was fixed. A memory leak on bad inputs to x509_name_ex_d2i was fixed. Some ECC ciphersuites are no longer restricted to SHA1. Protection against ECDSA timing attacks was introduced

tags | encryption, protocol

systems | unix

advisories | CVE-2011-3207, CVE-2011-3210

MD5 | 7040b89c4c58c7a1016c0dfa6e821c86

Download | Favorite | Comments (0)

OpenSSL-Based Signcode Utility 1.4

Posted Aug 14, 2011

Authored by mfive | Site sourceforge.net

OpenSSL-based signcode utility is used for Authenticode signing of EXE/CAB files. It also supports timestamping.

Changes: An improved build system. Support for reading cert+key from a PKCS12 file. Support for reading a key from a PEM file. Support for SHA-1/SHA-256 (the default hash is now SHA-1). A flag for commercial signing (the default is individual).

tags | encryption

systems | unix

MD5 | 018b12b3efc4a5250dd3977c2bada3cd

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0d

Posted Feb 10, 2011

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Parsing of the OCSP stapling ClientHello extension was fixed. This issue was reported as CVE-2011-0014. A bug in string printing code, where the escape character itself was not escaped, was fixed.

tags | encryption, protocol

systems | unix

advisories | CVE-2011-0014

MD5 | 40b6ea380cc8a5bf9734c2f8bf7e701e

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0c

Posted Dec 7, 2010

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: An error was fixed in the experimental J-PAKE implementation, which could lead to successful validation by someone with no knowledge of the shared secret. This issue was reported as CVE-2010-4252. An old bug in a workaround that allowed malicious clients to modify the stored session cache ciphersuite was fixed. This issue was reported as CVE-2010-4180.

tags | encryption, protocol

systems | unix

advisories | CVE-2010-4252, CVE-2010-4180

MD5 | ff8fb85610aef328315a9decbb2712e4

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0b

Posted Nov 18, 2010

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixed extension code to avoid race conditions which can result in a buffer overrun vulnerability.

tags | encryption, protocol

systems | unix

advisories | CVE-2010-3864

MD5 | 104deb3b7e6820cae6de3f49ba0ff2b0

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0a

Posted Jun 3, 2010

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: A security vulnerability which could potentially be exploited to bypass key validation was resolved.

tags | encryption, protocol

advisories | CVE-2010-1633

MD5 | e3873edfffc783624cfbdb65e2249cbd

Download | Favorite | Comments (0)

OpenSSL Toolkit 1.0.0

Posted Mar 31, 2010

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Connection renegotiation was vastly improved to overcome protocol weaknesses. A recently introduced "Record of death" vulnerability was resolved. A possible crash, reported as CVE-2010-0433, was fixed. Some memory leaks were resolved. Initial TLSv1.1 support was added. Handling of TLS versions 2.0 and later was improved, and the highest version is now selected. Support for MD2 has been deprecated. Support for companion-algorithm specific ASN1 signing routines was added. Signature dumping was improved. Many other improvements and minor bugfixes were made.

tags | encryption, protocol

advisories | CVE-2010-0433

MD5 | 89eaa86e25b2845f920ec00ae4c864ed

Download | Favorite | Comments (0)

OpenSSL 0.9.8l

Posted Nov 6, 2009

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixes to stateless session resumption handling were made. Error return checking was improved for several function calls. Leading 0x80 in OIDs are no longer tolerated. The server certificate chain building code now correctly uses X509_verify_cert(). A potential denial of service attack in dtls1_process_out_of_seq_message() was resolved. Several other bugs were fixed.

tags | encryption, protocol

advisories | CVE-2009-3555

MD5 | 05a0ece1372392a2cf310ebb96333025

Download | Favorite | Comments (0)

OpenSSL Toolkit

Posted Mar 30, 2009

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Three security flaws of moderate severity were fixed - Printing the contents of an ASN1 certificate with an illegal encoded length could cause an application crash. CMS verification could cause an invalid set of signed attributes to appear valid. A malformed ASN1 structure could cause invalid memory access. Further minor modifications were made.

tags | encryption, protocol

advisories | CVE-2009-0590, CVE-2009-0591, CVE-2009-0789

MD5 | e555c6d58d276aec7fdc53363e338ab3

Download | Favorite | Comments (0)

openssl-0.9.8i.tar.gz

Posted Sep 16, 2008

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Fixed a state transition in s3_srvr.c and d1_srvr.c. Various precautionary measures added. Support added for Local Machine Keyset attribute in PKCS#12 files. Various other additions as well.

tags | encryption, protocol

MD5 | 561e00f18821c74b2b86c8c7786f9d8b

Download | Favorite | Comments (0)

openssl-0.9.8h.tar.gz

Posted May 28, 2008

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Two crash related security flaws have been fixed in this version.

tags | encryption, protocol

advisories | CVE-2008-0891, CVE-2008-1672

MD5 | 7d3d41dafc76cf2fcb5559963b5783b3

Download | Favorite | Comments (0)

openssl-0.9.8g.tar.gz

Posted Oct 22, 2007

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Various bug fixes.

tags | encryption, protocol

MD5 | acf70a16359bf3658bdfb74bda1c4419

Download | Favorite | Comments (0)

openssl-0.9.8f.tar.gz

Posted Oct 13, 2007

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Multiple security fixes.

tags | encryption, protocol

advisories | CVE-2007-4995, CVE-2007-5135

MD5 | 114bf908eb1b293d11d3e6b18a09269f

Download | Favorite | Comments (0)

engine_pkcs11-0.1.4.tar.gz

Posted Jul 18, 2007

Site opensc-project.org

Engine_pkcs11 is an implementation of an engine for OpenSSL. It can be loaded using code, config file, or command line and will pass any function call by openssl to a PKCS#11 module. Engine_pkcs11 is meant to be used with smart cards and software for using smart cards in PKCS#11 format, such as OpenSC. Originally this engine was a part of OpenSC, until OpenSC was split into several small projects for improved flexibility.

Changes: Various bug fixes.

tags | encryption

MD5 | b9cf1ae8b8ae47ce7ab7f7a48583845b

Download | Favorite | Comments (0)

openssl-0.9.8e.tar.gz

Posted Mar 20, 2007

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: See changelog.

tags | encryption, protocol

MD5 | 3a7ff24f6ea5cd711984722ad654b927

Download | Favorite | Comments (0)

openssl-0.9.7k.tar.gz

Posted Sep 7, 2006

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: RSA Signature forgery security fix.

tags | encryption, protocol

advisories | CVE-2006-4339

MD5 | be6bba1d67b26eabb48cf1774925416f

Download | Favorite | Comments (0)

openssl-0.9.8c.tar.gz

Posted Sep 7, 2006

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: RSA Signature forgery security fix.

tags | encryption, protocol

advisories | CVE-2006-4339

MD5 | 78454bec556bcb4c45129428a766c886

Download | Favorite | Comments (0)

tinyca2-0.7.5.tar.gz

Posted Jul 26, 2006

Authored by Stephan Martin | Site tinyca.sm-zone.net

TinyCA is a simple GUI written in Perl-Gtk to manage a small certification authority. It works as a frontend to OpenSSL. TinyCA lets you manage x509 certificates. It is possible to export data in PEM or DER format for use with servers, as PKCS#12 for use with clients, or as S/MIME certificates for use with email programs. It is also possible to import your own PKCS#10 requests and generate certificates from them. It also lets you create and manage SubCAs for more complex setups. The most important certificate extensions can be configured with the graphical frontend. English and German translations are included.

Changes: Added swedish translation.

tags | perl, encryption

MD5 | d3b547305e89785fbe8262be244a2321

Download | Favorite | Comments (0)

tinyca2-0.7.4.tar.gz

Posted Jul 2, 2006

Authored by Stephan Martin | Site tinyca.sm-zone.net

TinyCA is a simple GUI written in Perl-Gtk to manage a small certification authority. It works as a frontend to OpenSSL. TinyCA lets you manage x509 certificates. It is possible to export data in PEM or DER format for use with servers, as PKCS#12 for use with clients, or as S/MIME certificates for use with email programs. It is also possible to import your own PKCS#10 requests and generate certificates from them. It also lets you create and manage SubCAs for more complex setups. The most important certificate extensions can be configured with the graphical frontend. English and German translations are included.

Changes: Fixed invalid filename encoding with German umlauts in base64. Fixed display of UTF8 characters in the GUI.

tags | perl, encryption

MD5 | 3410786b7602d4c38276451ef026af08

Download | Favorite | Comments (0)

tinyca2-0.7.3.tar.gz

Posted Jun 5, 2006

Authored by Stephan Martin | Site tinyca.sm-zone.net

TinyCA is a simple GUI written in Perl-Gtk to manage a small certification authority. It works as a frontend to OpenSSL. TinyCA lets you manage x509 certificates. It is possible to export data in PEM or DER format for use with servers, as PKCS#12 for use with clients, or as S/MIME certificates for use with email programs. It is also possible to import your own PKCS#10 requests and generate certificates from them. It also lets you create and manage SubCAs for more complex setups. The most important certificate extensions can be configured with the graphical frontend. English and German translations are included.

Changes: Enhanced version detection. Changed command for openssl due to changed openssl behavior regarding fingerprints. Added "friendly name" to PKCS#12 export.

tags | perl, encryption

MD5 | 0eead00edf55df82c7874a2e477dc46c

Download | Favorite | Comments (0)

openssl-0.9.8b.tar.gz

Posted May 4, 2006

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: Various bug fixes and enhancements.

tags | encryption, protocol

MD5 | 12cedbeb6813a0d7919dbf1f82134b86

Download | Favorite | Comments (0)