{"push_id":742782237,"size":8,"distinct_size":8,"ref":"refs/heads/OpenSSL_1_0_2-stable","head":"d1f3caf222d3815f21c1859305eaa076e726fb03","before":"3a78cefcc2dc1e9f4e625e9593318ee018208efe","commits":[{"sha":"4102d1a5034aea9cf3b070534bc97f5cee2f2296","author":{"email":"6521fc25e7624eef7c3a0d89b71de7e612d27d37@openssl.org","name":"Emilia Kasper"},"message":"rsaz_exp.h: align license with the rest of the contribution\n\nReviewed-by: Rich Salz <rsalz@openssl.org>\n(cherry picked from commit f4ee22be03bb8318b1e0f00e116be231ba12fdef)","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/4102d1a5034aea9cf3b070534bc97f5cee2f2296"},{"sha":"09368c044b4a0dfe694e4905cb13e9a293efd78d","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Add test for SSL_set_session_ticket_ext\n\nThe function SSL_set_session_ticket_ext sets the ticket data to be sent in\nthe ClientHello. This is useful for EAP-FAST. This commit adds a test to\nensure that when this function is called the expected ticket data actually\nappears in the ClientHello.\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/09368c044b4a0dfe694e4905cb13e9a293efd78d"},{"sha":"f0348c842e75a77f643e7d34cb88609145b2d320","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Fix SSL_set_session_ticket_ext when used with SSLv23_method\n\nThe function SSL_set_session_ticket_ext can be used to set custom session\nticket data passed in the initial ClientHello. This can be particularly\nuseful for EAP-FAST. However, when using SSLv23_method, the session does\nnot get created until the ServerHello has been received. The extension code\nwill only add the SessionTicket data to the ClientHello if a session already\nexists. Therefore SSL_set_session_ticket_ext has no impact when used in\nconjunction with SSLv23_method. The solution is to simply create the session\nduring creation of the ClientHello instead of waiting for the ServerHello.\n\nThis commit fixes the test failure introduced by the previous commit.\n\nReviewed-by: Viktor Dukhovni <viktor@openssl.org>","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/f0348c842e75a77f643e7d34cb88609145b2d320"},{"sha":"6b7d872e819449a19ea428386f25e90e5eaedc29","author":{"email":"c04971a99e5a9ee80eaab4b1deb37e845b0bd697@akamai.com","name":"Rich Salz"},"message":"Tweak README about rt and bug reporting.\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(cherry picked from commit 932af1617e277904bcca6e47729a420bba39785b)","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/6b7d872e819449a19ea428386f25e90e5eaedc29"},{"sha":"374fd385c2347b965c3490aa1c10025e1339d265","author":{"email":"5f9c4c11ab21521e9362928ca1d886cd27df778c@avg.com","name":"Martin Vejnar"},"message":"RT3774: double-free in DSA\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(cherry picked from commit fa4629b6a2518d202fd051f228c3d8770682b3be)","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/374fd385c2347b965c3490aa1c10025e1339d265"},{"sha":"9e43fe9a2bd38f06385b5b721f7c4b3ff0e4163f","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Fix write failure handling in DTLS1.2\n\nThe DTLS code is supposed to drop packets if we try to write them out but\nthe underlying BIO write buffers are full. ssl3_write_pending() contains\nan incorrect test for DTLS that controls this. The test only checks for\nDTLS1 so DTLS1.2 does not correctly clear the internal OpenSSL buffer which\ncan later cause an assert to be hit. This commit changes the test to cover\nall DTLS versions.\n\nRT#3967\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\n(cherry picked from commit 5e8b24dbfb98ed7c5b355cb6a959906a418e264b)","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/9e43fe9a2bd38f06385b5b721f7c4b3ff0e4163f"},{"sha":"d0c9a90640c8902fef3eb74e8ef05227f8e7dcb7","author":{"email":"9ce5770b3bb4b2a1d59be2d97e34379cd192299f@openssl.org","name":"Dr. Stephen Henson"},"message":"use X9.31 keygen by default in FIPS mode\n\nReviewed-by: Matt Caswell <matt@openssl.org>","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/d0c9a90640c8902fef3eb74e8ef05227f8e7dcb7"},{"sha":"d1f3caf222d3815f21c1859305eaa076e726fb03","author":{"email":"df1281b799990668e66a2d4dc048b6d42bd76a4b@gmail.com","name":"André Klitzing"},"message":"Introduce TLS-RSA-PSK support\n\nBuild on the existing PSK support and introduce RSA-PSK\n(cf. RFC 4279, 5487).\nBased on the original patch by Christian J. Dietrich.\n\nThis work has been sponsored by Governikus GmbH & Co. KG.\n\nPR: 2464","distinct":true,"url":"https://api.github.com/repos/misery/openssl/commits/d1f3caf222d3815f21c1859305eaa076e726fb03"}]}