From owner-svn-src-all@FreeBSD.ORG Thu Dec 9 22:05:17 2010 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B1ADB1065674; Thu, 9 Dec 2010 22:05:17 +0000 (UTC) (envelope-from simon@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id 9B5FB8FC0A; Thu, 9 Dec 2010 22:05:17 +0000 (UTC) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.3/8.14.3) with ESMTP id oB9M5HQW052399; Thu, 9 Dec 2010 22:05:17 GMT (envelope-from simon@svn.freebsd.org) Received: (from simon@localhost) by svn.freebsd.org (8.14.3/8.14.3/Submit) id oB9M5GSn052325; Thu, 9 Dec 2010 22:05:16 GMT (envelope-from simon@svn.freebsd.org) Message-Id: <201012092205.oB9M5GSn052325@svn.freebsd.org> From: "Simon L. Nielsen" Date: Thu, 9 Dec 2010 22:05:16 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-7@freebsd.org X-SVN-Group: stable-7 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r216342 - in stable/7: crypto/openssl crypto/openssl/crypto crypto/openssl/crypto/evp crypto/openssl/crypto/jpake crypto/openssl/crypto/stack crypto/openssl/doc/ssl crypto/openssl/ssl s... X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Dec 2010 22:05:17 -0000 Author: simon Date: Thu Dec 9 22:05:16 2010 New Revision: 216342 URL: http://svn.freebsd.org/changeset/base/216342 Log: MFC r216166, r216167: Merge in OpenSSL 0.9.8q. Approved by: re (kib) Security: CVE-2010-4180 Security: http://www.openssl.org/news/secadv_20101202.txt Added: stable/7/crypto/openssl/ACKNOWLEDGMENTS - copied unchanged from r216303, head/crypto/openssl/ACKNOWLEDGMENTS Modified: stable/7/crypto/openssl/CHANGES stable/7/crypto/openssl/FAQ stable/7/crypto/openssl/Makefile stable/7/crypto/openssl/NEWS stable/7/crypto/openssl/README stable/7/crypto/openssl/crypto/evp/p_sign.c stable/7/crypto/openssl/crypto/evp/p_verify.c stable/7/crypto/openssl/crypto/jpake/jpake.c stable/7/crypto/openssl/crypto/jpake/jpake.h stable/7/crypto/openssl/crypto/jpake/jpake_err.c stable/7/crypto/openssl/crypto/opensslv.h stable/7/crypto/openssl/crypto/stack/safestack.h stable/7/crypto/openssl/doc/ssl/SSL_CTX_set_options.pod stable/7/crypto/openssl/openssl.spec stable/7/crypto/openssl/ssl/s3_clnt.c stable/7/crypto/openssl/ssl/s3_srvr.c stable/7/secure/lib/libcrypto/Makefile.inc stable/7/secure/lib/libcrypto/man/ASN1_OBJECT_new.3 stable/7/secure/lib/libcrypto/man/ASN1_STRING_length.3 stable/7/secure/lib/libcrypto/man/ASN1_STRING_new.3 stable/7/secure/lib/libcrypto/man/ASN1_STRING_print_ex.3 stable/7/secure/lib/libcrypto/man/ASN1_generate_nconf.3 stable/7/secure/lib/libcrypto/man/BIO_ctrl.3 stable/7/secure/lib/libcrypto/man/BIO_f_base64.3 stable/7/secure/lib/libcrypto/man/BIO_f_buffer.3 stable/7/secure/lib/libcrypto/man/BIO_f_cipher.3 stable/7/secure/lib/libcrypto/man/BIO_f_md.3 stable/7/secure/lib/libcrypto/man/BIO_f_null.3 stable/7/secure/lib/libcrypto/man/BIO_f_ssl.3 stable/7/secure/lib/libcrypto/man/BIO_find_type.3 stable/7/secure/lib/libcrypto/man/BIO_new.3 stable/7/secure/lib/libcrypto/man/BIO_push.3 stable/7/secure/lib/libcrypto/man/BIO_read.3 stable/7/secure/lib/libcrypto/man/BIO_s_accept.3 stable/7/secure/lib/libcrypto/man/BIO_s_bio.3 stable/7/secure/lib/libcrypto/man/BIO_s_connect.3 stable/7/secure/lib/libcrypto/man/BIO_s_fd.3 stable/7/secure/lib/libcrypto/man/BIO_s_file.3 stable/7/secure/lib/libcrypto/man/BIO_s_mem.3 stable/7/secure/lib/libcrypto/man/BIO_s_null.3 stable/7/secure/lib/libcrypto/man/BIO_s_socket.3 stable/7/secure/lib/libcrypto/man/BIO_set_callback.3 stable/7/secure/lib/libcrypto/man/BIO_should_retry.3 stable/7/secure/lib/libcrypto/man/BN_BLINDING_new.3 stable/7/secure/lib/libcrypto/man/BN_CTX_new.3 stable/7/secure/lib/libcrypto/man/BN_CTX_start.3 stable/7/secure/lib/libcrypto/man/BN_add.3 stable/7/secure/lib/libcrypto/man/BN_add_word.3 stable/7/secure/lib/libcrypto/man/BN_bn2bin.3 stable/7/secure/lib/libcrypto/man/BN_cmp.3 stable/7/secure/lib/libcrypto/man/BN_copy.3 stable/7/secure/lib/libcrypto/man/BN_generate_prime.3 stable/7/secure/lib/libcrypto/man/BN_mod_inverse.3 stable/7/secure/lib/libcrypto/man/BN_mod_mul_montgomery.3 stable/7/secure/lib/libcrypto/man/BN_mod_mul_reciprocal.3 stable/7/secure/lib/libcrypto/man/BN_new.3 stable/7/secure/lib/libcrypto/man/BN_num_bytes.3 stable/7/secure/lib/libcrypto/man/BN_rand.3 stable/7/secure/lib/libcrypto/man/BN_set_bit.3 stable/7/secure/lib/libcrypto/man/BN_swap.3 stable/7/secure/lib/libcrypto/man/BN_zero.3 stable/7/secure/lib/libcrypto/man/CONF_modules_free.3 stable/7/secure/lib/libcrypto/man/CONF_modules_load_file.3 stable/7/secure/lib/libcrypto/man/CRYPTO_set_ex_data.3 stable/7/secure/lib/libcrypto/man/DH_generate_key.3 stable/7/secure/lib/libcrypto/man/DH_generate_parameters.3 stable/7/secure/lib/libcrypto/man/DH_get_ex_new_index.3 stable/7/secure/lib/libcrypto/man/DH_new.3 stable/7/secure/lib/libcrypto/man/DH_set_method.3 stable/7/secure/lib/libcrypto/man/DH_size.3 stable/7/secure/lib/libcrypto/man/DSA_SIG_new.3 stable/7/secure/lib/libcrypto/man/DSA_do_sign.3 stable/7/secure/lib/libcrypto/man/DSA_dup_DH.3 stable/7/secure/lib/libcrypto/man/DSA_generate_key.3 stable/7/secure/lib/libcrypto/man/DSA_generate_parameters.3 stable/7/secure/lib/libcrypto/man/DSA_get_ex_new_index.3 stable/7/secure/lib/libcrypto/man/DSA_new.3 stable/7/secure/lib/libcrypto/man/DSA_set_method.3 stable/7/secure/lib/libcrypto/man/DSA_sign.3 stable/7/secure/lib/libcrypto/man/DSA_size.3 stable/7/secure/lib/libcrypto/man/ERR_GET_LIB.3 stable/7/secure/lib/libcrypto/man/ERR_clear_error.3 stable/7/secure/lib/libcrypto/man/ERR_error_string.3 stable/7/secure/lib/libcrypto/man/ERR_get_error.3 stable/7/secure/lib/libcrypto/man/ERR_load_crypto_strings.3 stable/7/secure/lib/libcrypto/man/ERR_load_strings.3 stable/7/secure/lib/libcrypto/man/ERR_print_errors.3 stable/7/secure/lib/libcrypto/man/ERR_put_error.3 stable/7/secure/lib/libcrypto/man/ERR_remove_state.3 stable/7/secure/lib/libcrypto/man/ERR_set_mark.3 stable/7/secure/lib/libcrypto/man/EVP_BytesToKey.3 stable/7/secure/lib/libcrypto/man/EVP_DigestInit.3 stable/7/secure/lib/libcrypto/man/EVP_EncryptInit.3 stable/7/secure/lib/libcrypto/man/EVP_OpenInit.3 stable/7/secure/lib/libcrypto/man/EVP_PKEY_new.3 stable/7/secure/lib/libcrypto/man/EVP_PKEY_set1_RSA.3 stable/7/secure/lib/libcrypto/man/EVP_SealInit.3 stable/7/secure/lib/libcrypto/man/EVP_SignInit.3 stable/7/secure/lib/libcrypto/man/EVP_VerifyInit.3 stable/7/secure/lib/libcrypto/man/OBJ_nid2obj.3 stable/7/secure/lib/libcrypto/man/OPENSSL_Applink.3 stable/7/secure/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3 stable/7/secure/lib/libcrypto/man/OPENSSL_config.3 stable/7/secure/lib/libcrypto/man/OPENSSL_ia32cap.3 stable/7/secure/lib/libcrypto/man/OPENSSL_load_builtin_modules.3 stable/7/secure/lib/libcrypto/man/OpenSSL_add_all_algorithms.3 stable/7/secure/lib/libcrypto/man/PKCS12_create.3 stable/7/secure/lib/libcrypto/man/PKCS12_parse.3 stable/7/secure/lib/libcrypto/man/PKCS7_decrypt.3 stable/7/secure/lib/libcrypto/man/PKCS7_encrypt.3 stable/7/secure/lib/libcrypto/man/PKCS7_sign.3 stable/7/secure/lib/libcrypto/man/PKCS7_verify.3 stable/7/secure/lib/libcrypto/man/RAND_add.3 stable/7/secure/lib/libcrypto/man/RAND_bytes.3 stable/7/secure/lib/libcrypto/man/RAND_cleanup.3 stable/7/secure/lib/libcrypto/man/RAND_egd.3 stable/7/secure/lib/libcrypto/man/RAND_load_file.3 stable/7/secure/lib/libcrypto/man/RAND_set_rand_method.3 stable/7/secure/lib/libcrypto/man/RSA_blinding_on.3 stable/7/secure/lib/libcrypto/man/RSA_check_key.3 stable/7/secure/lib/libcrypto/man/RSA_generate_key.3 stable/7/secure/lib/libcrypto/man/RSA_get_ex_new_index.3 stable/7/secure/lib/libcrypto/man/RSA_new.3 stable/7/secure/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3 stable/7/secure/lib/libcrypto/man/RSA_print.3 stable/7/secure/lib/libcrypto/man/RSA_private_encrypt.3 stable/7/secure/lib/libcrypto/man/RSA_public_encrypt.3 stable/7/secure/lib/libcrypto/man/RSA_set_method.3 stable/7/secure/lib/libcrypto/man/RSA_sign.3 stable/7/secure/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3 stable/7/secure/lib/libcrypto/man/RSA_size.3 stable/7/secure/lib/libcrypto/man/SMIME_read_PKCS7.3 stable/7/secure/lib/libcrypto/man/SMIME_write_PKCS7.3 stable/7/secure/lib/libcrypto/man/X509_NAME_ENTRY_get_object.3 stable/7/secure/lib/libcrypto/man/X509_NAME_add_entry_by_txt.3 stable/7/secure/lib/libcrypto/man/X509_NAME_get_index_by_NID.3 stable/7/secure/lib/libcrypto/man/X509_NAME_print_ex.3 stable/7/secure/lib/libcrypto/man/X509_new.3 stable/7/secure/lib/libcrypto/man/bio.3 stable/7/secure/lib/libcrypto/man/blowfish.3 stable/7/secure/lib/libcrypto/man/bn.3 stable/7/secure/lib/libcrypto/man/bn_internal.3 stable/7/secure/lib/libcrypto/man/buffer.3 stable/7/secure/lib/libcrypto/man/crypto.3 stable/7/secure/lib/libcrypto/man/d2i_ASN1_OBJECT.3 stable/7/secure/lib/libcrypto/man/d2i_DHparams.3 stable/7/secure/lib/libcrypto/man/d2i_DSAPublicKey.3 stable/7/secure/lib/libcrypto/man/d2i_PKCS8PrivateKey.3 stable/7/secure/lib/libcrypto/man/d2i_RSAPublicKey.3 stable/7/secure/lib/libcrypto/man/d2i_X509.3 stable/7/secure/lib/libcrypto/man/d2i_X509_ALGOR.3 stable/7/secure/lib/libcrypto/man/d2i_X509_CRL.3 stable/7/secure/lib/libcrypto/man/d2i_X509_NAME.3 stable/7/secure/lib/libcrypto/man/d2i_X509_REQ.3 stable/7/secure/lib/libcrypto/man/d2i_X509_SIG.3 stable/7/secure/lib/libcrypto/man/des.3 stable/7/secure/lib/libcrypto/man/dh.3 stable/7/secure/lib/libcrypto/man/dsa.3 stable/7/secure/lib/libcrypto/man/ecdsa.3 stable/7/secure/lib/libcrypto/man/engine.3 stable/7/secure/lib/libcrypto/man/err.3 stable/7/secure/lib/libcrypto/man/evp.3 stable/7/secure/lib/libcrypto/man/hmac.3 stable/7/secure/lib/libcrypto/man/lh_stats.3 stable/7/secure/lib/libcrypto/man/lhash.3 stable/7/secure/lib/libcrypto/man/md5.3 stable/7/secure/lib/libcrypto/man/mdc2.3 stable/7/secure/lib/libcrypto/man/pem.3 stable/7/secure/lib/libcrypto/man/rand.3 stable/7/secure/lib/libcrypto/man/rc4.3 stable/7/secure/lib/libcrypto/man/ripemd.3 stable/7/secure/lib/libcrypto/man/rsa.3 stable/7/secure/lib/libcrypto/man/sha.3 stable/7/secure/lib/libcrypto/man/threads.3 stable/7/secure/lib/libcrypto/man/ui.3 stable/7/secure/lib/libcrypto/man/ui_compat.3 stable/7/secure/lib/libcrypto/man/x509.3 stable/7/secure/usr.bin/openssl/man/CA.pl.1 stable/7/secure/usr.bin/openssl/man/asn1parse.1 stable/7/secure/usr.bin/openssl/man/ca.1 stable/7/secure/usr.bin/openssl/man/ciphers.1 stable/7/secure/usr.bin/openssl/man/crl.1 stable/7/secure/usr.bin/openssl/man/crl2pkcs7.1 stable/7/secure/usr.bin/openssl/man/dgst.1 stable/7/secure/usr.bin/openssl/man/dhparam.1 stable/7/secure/usr.bin/openssl/man/dsa.1 stable/7/secure/usr.bin/openssl/man/dsaparam.1 stable/7/secure/usr.bin/openssl/man/ec.1 stable/7/secure/usr.bin/openssl/man/ecparam.1 stable/7/secure/usr.bin/openssl/man/enc.1 stable/7/secure/usr.bin/openssl/man/errstr.1 stable/7/secure/usr.bin/openssl/man/gendsa.1 stable/7/secure/usr.bin/openssl/man/genrsa.1 stable/7/secure/usr.bin/openssl/man/nseq.1 stable/7/secure/usr.bin/openssl/man/ocsp.1 stable/7/secure/usr.bin/openssl/man/openssl.1 stable/7/secure/usr.bin/openssl/man/passwd.1 stable/7/secure/usr.bin/openssl/man/pkcs12.1 stable/7/secure/usr.bin/openssl/man/pkcs7.1 stable/7/secure/usr.bin/openssl/man/pkcs8.1 stable/7/secure/usr.bin/openssl/man/rand.1 stable/7/secure/usr.bin/openssl/man/req.1 stable/7/secure/usr.bin/openssl/man/rsa.1 stable/7/secure/usr.bin/openssl/man/rsautl.1 stable/7/secure/usr.bin/openssl/man/s_client.1 stable/7/secure/usr.bin/openssl/man/s_server.1 stable/7/secure/usr.bin/openssl/man/s_time.1 stable/7/secure/usr.bin/openssl/man/sess_id.1 stable/7/secure/usr.bin/openssl/man/smime.1 stable/7/secure/usr.bin/openssl/man/speed.1 stable/7/secure/usr.bin/openssl/man/spkac.1 stable/7/secure/usr.bin/openssl/man/verify.1 stable/7/secure/usr.bin/openssl/man/version.1 stable/7/secure/usr.bin/openssl/man/x509.1 stable/7/secure/usr.bin/openssl/man/x509v3_config.1 Directory Properties: stable/7/crypto/openssl/ (props changed) stable/7/secure/lib/libcrypto/ (props changed) stable/7/secure/usr.bin/openssl/ (props changed) Copied: stable/7/crypto/openssl/ACKNOWLEDGMENTS (from r216303, head/crypto/openssl/ACKNOWLEDGMENTS) ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ stable/7/crypto/openssl/ACKNOWLEDGMENTS Thu Dec 9 22:05:16 2010 (r216342, copy of r216303, head/crypto/openssl/ACKNOWLEDGMENTS) @@ -0,0 +1,25 @@ +The OpenSSL project depends on volunteer efforts and financial support from +the end user community. That support comes in the form of donations and paid +sponsorships, software support contracts, paid consulting services +and commissioned software development. + +Since all these activities support the continued development and improvement +of OpenSSL we consider all these clients and customers as sponsors of the +OpenSSL project. + +We would like to identify and thank the following such sponsors for their past +or current significant support of the OpenSSL project: + +Very significant support: + + OpenGear: www.opengear.com + +Significant support: + + PSW Group: www.psw.net + +Please note that we ask permission to identify sponsors and that some sponsors +we consider eligible for inclusion here have requested to remain anonymous. + +Additional sponsorship or financial support is always welcome: for more +information please contact the OpenSSL Software Foundation. Modified: stable/7/crypto/openssl/CHANGES ============================================================================== --- stable/7/crypto/openssl/CHANGES Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/CHANGES Thu Dec 9 22:05:16 2010 (r216342) @@ -2,6 +2,18 @@ OpenSSL CHANGES _______________ + Changes between 0.9.8p and 0.9.8q [2 Dec 2010] + + *) Disable code workaround for ancient and obsolete Netscape browsers + and servers: an attacker can use it in a ciphersuite downgrade attack. + Thanks to Martin Rex for discovering this bug. CVE-2010-4180 + [Steve Henson] + + *) Fixed J-PAKE implementation error, originally discovered by + Sebastien Martini, further info and confirmation from Stefan + Arentz and Feng Hao. Note that this fix is a security fix. CVE-2010-4252 + [Ben Laurie] + Changes between 0.9.8o and 0.9.8p [16 Nov 2010] *) Fix extension code to avoid race conditions which can result in a buffer Modified: stable/7/crypto/openssl/FAQ ============================================================================== --- stable/7/crypto/openssl/FAQ Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/FAQ Thu Dec 9 22:05:16 2010 (r216342) @@ -52,6 +52,9 @@ OpenSSL - Frequently Asked Questions * Why does the OpenSSL test suite fail in sha512t on x86 CPU? * Why does compiler fail to compile sha512.c? * Test suite still fails, what to do? +* I think I've found a bug, what should I do? +* I'm SURE I've found a bug, how do I report it? +* I've found a security issue, how do I report it? [PROG] Questions about programming with OpenSSL @@ -79,7 +82,7 @@ OpenSSL - Frequently Asked Questions * Which is the current version of OpenSSL? The current version is available from . -OpenSSL 1.0.0b was released on Nov 16th, 2010. +OpenSSL 1.0.0c was released on Dec 2nd, 2010. In addition to the current stable release, you can also access daily snapshots of the OpenSSL development version at . Some applications that use OpenSSL are distributed in binary form. When using such an application, you don't need to install OpenSSL @@ -463,7 +466,7 @@ administrators. Other projects do have other policies so you can for example extract the CA bundle used by Mozilla and/or modssl as described in this article: - http://www.mail-archive.com/modssl-users@modssl.org/msg16980.html + [BUILD] ======================================================================= @@ -505,7 +508,7 @@ when you run the test suite (using "make "bc: 1 not implemented". The best way to deal with this is to find another implementation of bc -and compile/install it. GNU bc (see http://www.gnu.org/software/software.html +and compile/install it. GNU bc (see for download instructions) can be safely used, for example. @@ -516,7 +519,7 @@ that the OpenSSL bntest throws at it. T test suite (using "make test"). The message returned is "bc: stack empty". The best way to deal with this is to find another implementation of bc -and compile/install it. GNU bc (see http://www.gnu.org/software/software.html +and compile/install it. GNU bc (see for download instructions) can be safely used, for example. @@ -709,6 +712,46 @@ never make sense, and tend to emerge whe to identify one, drop optimization level, e.g. by editing CFLAG line in top-level Makefile, recompile and re-run the test. +* I think I've found a bug, what should I do? + +If you are a new user then it is quite likely you haven't found a bug and +something is happening you aren't familiar with. Check this FAQ, the associated +documentation and the mailing lists for similar queries. If you are still +unsure whether it is a bug or not submit a query to the openssl-users mailing +list. + + +* I'm SURE I've found a bug, how do I report it? + +Bug reports with no security implications should be sent to the request +tracker. This can be done by mailing the report to (or its +alias ), please note that messages sent to the +request tracker also appear in the public openssl-dev mailing list. + +The report should be in plain text. Any patches should be sent as +plain text attachments because some mailers corrupt patches sent inline. +If your issue affects multiple versions of OpenSSL check any patches apply +cleanly and, if possible include patches to each affected version. + +The report should be given a meaningful subject line briefly summarising the +issue. Just "bug in OpenSSL" or "bug in OpenSSL 0.9.8n" is not very helpful. + +By sending reports to the request tracker the bug can then be given a priority +and assigned to the appropriate maintainer. The history of discussions can be +accessed and if the issue has been addressed or a reason why not. If patches +are only sent to openssl-dev they can be mislaid if a team member has to +wade through months of old messages to review the discussion. + +See also + + +* I've found a security issue, how do I report it? + +If you think your bug has security implications then please send it to +openssl-security@openssl.org if you don't get a prompt reply at least +acknowledging receipt then resend or mail it directly to one of the +more active team members (e.g. Steve). + [PROG] ======================================================================== * Is OpenSSL thread-safe? Modified: stable/7/crypto/openssl/Makefile ============================================================================== --- stable/7/crypto/openssl/Makefile Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/Makefile Thu Dec 9 22:05:16 2010 (r216342) @@ -4,7 +4,7 @@ ## Makefile for OpenSSL ## -VERSION=0.9.8p +VERSION=0.9.8q MAJOR=0 MINOR=9.8 SHLIB_VERSION_NUMBER=0.9.8 Modified: stable/7/crypto/openssl/NEWS ============================================================================== --- stable/7/crypto/openssl/NEWS Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/NEWS Thu Dec 9 22:05:16 2010 (r216342) @@ -5,6 +5,11 @@ This file gives a brief overview of the major changes between each OpenSSL release. For more details please read the CHANGES file. + Major changes between OpenSSL 0.9.8p and OpenSSL 0.9.8q: + + o Fix for security issue CVE-2010-4180 + o Fix for CVE-2010-4252 + Major changes between OpenSSL 0.9.8o and OpenSSL 0.9.8p: o Fix for security issue CVE-2010-3864. Modified: stable/7/crypto/openssl/README ============================================================================== --- stable/7/crypto/openssl/README Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/README Thu Dec 9 22:05:16 2010 (r216342) @@ -1,5 +1,5 @@ - OpenSSL 0.9.8p 16 Nov 2010 + OpenSSL 0.9.8q 2 Dec 2010 Copyright (c) 1998-2009 The OpenSSL Project Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson Modified: stable/7/crypto/openssl/crypto/evp/p_sign.c ============================================================================== --- stable/7/crypto/openssl/crypto/evp/p_sign.c Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/crypto/evp/p_sign.c Thu Dec 9 22:05:16 2010 (r216342) @@ -81,7 +81,7 @@ int EVP_SignFinal(EVP_MD_CTX *ctx, unsig unsigned char m[EVP_MAX_MD_SIZE]; unsigned int m_len; int i,ok=0,v; - MS_STATIC EVP_MD_CTX tmp_ctx; + EVP_MD_CTX tmp_ctx; *siglen=0; for (i=0; i<4; i++) Modified: stable/7/crypto/openssl/crypto/evp/p_verify.c ============================================================================== --- stable/7/crypto/openssl/crypto/evp/p_verify.c Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/crypto/evp/p_verify.c Thu Dec 9 22:05:16 2010 (r216342) @@ -68,7 +68,7 @@ int EVP_VerifyFinal(EVP_MD_CTX *ctx, con unsigned char m[EVP_MAX_MD_SIZE]; unsigned int m_len; int i,ok=0,v; - MS_STATIC EVP_MD_CTX tmp_ctx; + EVP_MD_CTX tmp_ctx; for (i=0; i<4; i++) { Modified: stable/7/crypto/openssl/crypto/jpake/jpake.c ============================================================================== --- stable/7/crypto/openssl/crypto/jpake/jpake.c Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/crypto/jpake/jpake.c Thu Dec 9 22:05:16 2010 (r216342) @@ -283,23 +283,53 @@ int JPAKE_STEP1_generate(JPAKE_STEP1 *se return 1; } +/* g^x is a legal value */ +static int is_legal(const BIGNUM *gx, const JPAKE_CTX *ctx) + { + BIGNUM *t; + int res; + + if(BN_is_negative(gx) || BN_is_zero(gx) || BN_cmp(gx, ctx->p.p) >= 0) + return 0; + + t = BN_new(); + BN_mod_exp(t, gx, ctx->p.q, ctx->p.p, ctx->ctx); + res = BN_is_one(t); + BN_free(t); + + return res; + } + int JPAKE_STEP1_process(JPAKE_CTX *ctx, const JPAKE_STEP1 *received) { - /* verify their ZKP(xc) */ + if(!is_legal(received->p1.gx, ctx)) + { + JPAKEerr(JPAKE_F_JPAKE_STEP1_PROCESS, JPAKE_R_G_TO_THE_X3_IS_NOT_LEGAL); + return 0; + } + + if(!is_legal(received->p2.gx, ctx)) + { + JPAKEerr(JPAKE_F_JPAKE_STEP1_PROCESS, JPAKE_R_G_TO_THE_X4_IS_NOT_LEGAL); + return 0; + } + + + /* verify their ZKP(xc) */ if(!verify_zkp(&received->p1, ctx->p.g, ctx)) { JPAKEerr(JPAKE_F_JPAKE_STEP1_PROCESS, JPAKE_R_VERIFY_X3_FAILED); return 0; } - /* verify their ZKP(xd) */ + /* verify their ZKP(xd) */ if(!verify_zkp(&received->p2, ctx->p.g, ctx)) { JPAKEerr(JPAKE_F_JPAKE_STEP1_PROCESS, JPAKE_R_VERIFY_X4_FAILED); return 0; } - /* g^xd != 1 */ + /* g^xd != 1 */ if(BN_is_one(received->p2.gx)) { JPAKEerr(JPAKE_F_JPAKE_STEP1_PROCESS, JPAKE_R_G_TO_THE_X4_IS_ONE); Modified: stable/7/crypto/openssl/crypto/jpake/jpake.h ============================================================================== --- stable/7/crypto/openssl/crypto/jpake/jpake.h Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/crypto/jpake/jpake.h Thu Dec 9 22:05:16 2010 (r216342) @@ -115,6 +115,8 @@ void ERR_load_JPAKE_strings(void); #define JPAKE_F_VERIFY_ZKP 100 /* Reason codes. */ +#define JPAKE_R_G_TO_THE_X3_IS_NOT_LEGAL 108 +#define JPAKE_R_G_TO_THE_X4_IS_NOT_LEGAL 109 #define JPAKE_R_G_TO_THE_X4_IS_ONE 105 #define JPAKE_R_HASH_OF_HASH_OF_KEY_MISMATCH 106 #define JPAKE_R_HASH_OF_KEY_MISMATCH 107 Modified: stable/7/crypto/openssl/crypto/jpake/jpake_err.c ============================================================================== --- stable/7/crypto/openssl/crypto/jpake/jpake_err.c Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/crypto/jpake/jpake_err.c Thu Dec 9 22:05:16 2010 (r216342) @@ -1,6 +1,6 @@ /* crypto/jpake/jpake_err.c */ /* ==================================================================== - * Copyright (c) 1999-2008 The OpenSSL Project. All rights reserved. + * Copyright (c) 1999-2010 The OpenSSL Project. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions @@ -80,6 +80,8 @@ static ERR_STRING_DATA JPAKE_str_functs[ static ERR_STRING_DATA JPAKE_str_reasons[]= { +{ERR_REASON(JPAKE_R_G_TO_THE_X3_IS_NOT_LEGAL),"g to the x3 is not legal"}, +{ERR_REASON(JPAKE_R_G_TO_THE_X4_IS_NOT_LEGAL),"g to the x4 is not legal"}, {ERR_REASON(JPAKE_R_G_TO_THE_X4_IS_ONE) ,"g to the x4 is one"}, {ERR_REASON(JPAKE_R_HASH_OF_HASH_OF_KEY_MISMATCH),"hash of hash of key mismatch"}, {ERR_REASON(JPAKE_R_HASH_OF_KEY_MISMATCH),"hash of key mismatch"}, Modified: stable/7/crypto/openssl/crypto/opensslv.h ============================================================================== --- stable/7/crypto/openssl/crypto/opensslv.h Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/crypto/opensslv.h Thu Dec 9 22:05:16 2010 (r216342) @@ -25,11 +25,11 @@ * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for * major minor fix final patch/beta) */ -#define OPENSSL_VERSION_NUMBER 0x0090810f +#define OPENSSL_VERSION_NUMBER 0x0090811f #ifdef OPENSSL_FIPS -#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8p-fips 16 Nov 2010" +#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8q-fips 2 Dec 2010" #else -#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8p 16 Nov 2010" +#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8q 2 Dec 2010" #endif #define OPENSSL_VERSION_PTEXT " part of " OPENSSL_VERSION_TEXT Modified: stable/7/crypto/openssl/crypto/stack/safestack.h ============================================================================== --- stable/7/crypto/openssl/crypto/stack/safestack.h Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/crypto/stack/safestack.h Thu Dec 9 22:05:16 2010 (r216342) @@ -127,7 +127,7 @@ STACK_OF(type) \ sk_is_sorted(CHECKED_PTR_OF(STACK_OF(type), st)) #define SKM_ASN1_SET_OF_d2i(type, st, pp, length, d2i_func, free_func, ex_tag, ex_class) \ - (STACK_OF(type) *)d2i_ASN1_SET(CHECKED_PTR_OF(STACK_OF(type), st), \ + (STACK_OF(type) *)d2i_ASN1_SET(CHECKED_PTR_OF(STACK_OF(type)*, st), \ pp, length, \ CHECKED_D2I_OF(type, d2i_func), \ CHECKED_SK_FREE_FUNC(type, free_func), \ Modified: stable/7/crypto/openssl/doc/ssl/SSL_CTX_set_options.pod ============================================================================== --- stable/7/crypto/openssl/doc/ssl/SSL_CTX_set_options.pod Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/doc/ssl/SSL_CTX_set_options.pod Thu Dec 9 22:05:16 2010 (r216342) @@ -78,18 +78,7 @@ this breaks this server so 16 bytes is t =item SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG -ssl3.netscape.com:443, first a connection is established with RC4-MD5. -If it is then resumed, we end up using DES-CBC3-SHA. It should be -RC4-MD5 according to 7.6.1.3, 'cipher_suite'. - -Netscape-Enterprise/2.01 (https://merchant.netscape.com) has this bug. -It only really shows up when connecting via SSLv2/v3 then reconnecting -via SSLv3. The cipher list changes.... - -NEW INFORMATION. Try connecting with a cipher list of just -DES-CBC-SHA:RC4-MD5. For some weird reason, each new connection uses -RC4-MD5, but a re-connect tries to use DES-CBC-SHA. So netscape, when -doing a re-connect, always takes the first cipher in the cipher list. +As of OpenSSL 0.9.8q and 1.0.0c, this option has no effect. =item SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG Modified: stable/7/crypto/openssl/openssl.spec ============================================================================== --- stable/7/crypto/openssl/openssl.spec Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/openssl.spec Thu Dec 9 22:05:16 2010 (r216342) @@ -2,7 +2,7 @@ %define libmaj 0 %define libmin 9 %define librel 8 -%define librev p +%define librev q Release: 1 %define openssldir /var/ssl Modified: stable/7/crypto/openssl/ssl/s3_clnt.c ============================================================================== --- stable/7/crypto/openssl/ssl/s3_clnt.c Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/ssl/s3_clnt.c Thu Dec 9 22:05:16 2010 (r216342) @@ -814,8 +814,11 @@ int ssl3_get_server_hello(SSL *s) s->session->cipher_id = s->session->cipher->id; if (s->hit && (s->session->cipher_id != c->id)) { +/* Workaround is now obsolete */ +#if 0 if (!(s->options & SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG)) +#endif { al=SSL_AD_ILLEGAL_PARAMETER; SSLerr(SSL_F_SSL3_GET_SERVER_HELLO,SSL_R_OLD_SESSION_CIPHER_NOT_RETURNED); Modified: stable/7/crypto/openssl/ssl/s3_srvr.c ============================================================================== --- stable/7/crypto/openssl/ssl/s3_srvr.c Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/crypto/openssl/ssl/s3_srvr.c Thu Dec 9 22:05:16 2010 (r216342) @@ -927,6 +927,10 @@ int ssl3_get_client_hello(SSL *s) break; } } +/* Disabled because it can be used in a ciphersuite downgrade + * attack: CVE-2010-4180. + */ +#if 0 if (j == 0 && (s->options & SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG) && (sk_SSL_CIPHER_num(ciphers) == 1)) { /* Special case as client bug workaround: the previously used cipher may @@ -941,6 +945,7 @@ int ssl3_get_client_hello(SSL *s) j = 1; } } +#endif if (j == 0) { /* we need to have the cipher in the cipher Modified: stable/7/secure/lib/libcrypto/Makefile.inc ============================================================================== --- stable/7/secure/lib/libcrypto/Makefile.inc Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/Makefile.inc Thu Dec 9 22:05:16 2010 (r216342) @@ -3,8 +3,8 @@ .include # OpenSSL version used for manual page generation -OPENSSL_VER= 0.9.8p -OPENSSL_DATE= 2010-11-16 +OPENSSL_VER= 0.9.8q +OPENSSL_DATE= 2010-12-02 LCRYPTO_SRC= ${.CURDIR}/../../../crypto/openssl LCRYPTO_DOC= ${.CURDIR}/../../../crypto/openssl/doc Modified: stable/7/secure/lib/libcrypto/man/ASN1_OBJECT_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/ASN1_OBJECT_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/ASN1_OBJECT_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_OBJECT_new 3" -.TH ASN1_OBJECT_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH ASN1_OBJECT_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/ASN1_STRING_length.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/ASN1_STRING_length.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/ASN1_STRING_length.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_STRING_length 3" -.TH ASN1_STRING_length 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH ASN1_STRING_length 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/ASN1_STRING_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/ASN1_STRING_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/ASN1_STRING_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_STRING_new 3" -.TH ASN1_STRING_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH ASN1_STRING_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/ASN1_STRING_print_ex.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/ASN1_STRING_print_ex.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/ASN1_STRING_print_ex.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_STRING_print_ex 3" -.TH ASN1_STRING_print_ex 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH ASN1_STRING_print_ex 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/ASN1_generate_nconf.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/ASN1_generate_nconf.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/ASN1_generate_nconf.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_generate_nconf 3" -.TH ASN1_generate_nconf 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH ASN1_generate_nconf 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_ctrl.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_ctrl.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_ctrl.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_ctrl 3" -.TH BIO_ctrl 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_ctrl 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_f_base64.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_f_base64.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_f_base64.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_base64 3" -.TH BIO_f_base64 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_f_base64 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_f_buffer.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_f_buffer.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_f_buffer.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_buffer 3" -.TH BIO_f_buffer 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_f_buffer 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_f_cipher.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_f_cipher.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_f_cipher.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_cipher 3" -.TH BIO_f_cipher 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_f_cipher 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_f_md.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_f_md.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_f_md.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_md 3" -.TH BIO_f_md 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_f_md 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_f_null.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_f_null.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_f_null.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_null 3" -.TH BIO_f_null 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_f_null 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_f_ssl.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_f_ssl.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_f_ssl.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_ssl 3" -.TH BIO_f_ssl 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_f_ssl 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_find_type.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_find_type.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_find_type.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_find_type 3" -.TH BIO_find_type 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_find_type 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_new 3" -.TH BIO_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_push.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_push.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_push.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_push 3" -.TH BIO_push 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_push 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_read.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_read.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_read.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_read 3" -.TH BIO_read 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_read 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_accept.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_accept.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_accept.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_accept 3" -.TH BIO_s_accept 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_accept 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_bio.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_bio.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_bio.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_bio 3" -.TH BIO_s_bio 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_bio 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_connect.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_connect.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_connect.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_connect 3" -.TH BIO_s_connect 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_connect 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_fd.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_fd.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_fd.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_fd 3" -.TH BIO_s_fd 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_fd 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_file.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_file.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_file.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_file 3" -.TH BIO_s_file 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_file 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_mem.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_mem.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_mem.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_mem 3" -.TH BIO_s_mem 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_mem 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_null.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_null.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_null.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_null 3" -.TH BIO_s_null 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_null 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_s_socket.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_s_socket.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_s_socket.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_socket 3" -.TH BIO_s_socket 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_s_socket 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_set_callback.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_set_callback.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_set_callback.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_set_callback 3" -.TH BIO_set_callback 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_set_callback 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BIO_should_retry.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BIO_should_retry.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BIO_should_retry.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BIO_should_retry 3" -.TH BIO_should_retry 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BIO_should_retry 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_BLINDING_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_BLINDING_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_BLINDING_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_BLINDING_new 3" -.TH BN_BLINDING_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_BLINDING_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_CTX_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_CTX_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_CTX_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_CTX_new 3" -.TH BN_CTX_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_CTX_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_CTX_start.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_CTX_start.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_CTX_start.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_CTX_start 3" -.TH BN_CTX_start 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_CTX_start 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_add.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_add.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_add.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_add 3" -.TH BN_add 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_add 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_add_word.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_add_word.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_add_word.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_add_word 3" -.TH BN_add_word 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_add_word 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_bn2bin.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_bn2bin.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_bn2bin.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_bn2bin 3" -.TH BN_bn2bin 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_bn2bin 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_cmp.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_cmp.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_cmp.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_cmp 3" -.TH BN_cmp 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_cmp 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_copy.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_copy.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_copy.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_copy 3" -.TH BN_copy 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_copy 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_generate_prime.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_generate_prime.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_generate_prime.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_generate_prime 3" -.TH BN_generate_prime 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_generate_prime 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_mod_inverse.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_mod_inverse.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_mod_inverse.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_mod_inverse 3" -.TH BN_mod_inverse 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_mod_inverse 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_mod_mul_montgomery.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_mod_mul_montgomery.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_mod_mul_montgomery.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_mod_mul_montgomery 3" -.TH BN_mod_mul_montgomery 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_mod_mul_montgomery 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_mod_mul_reciprocal.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_mod_mul_reciprocal.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_mod_mul_reciprocal.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_mod_mul_reciprocal 3" -.TH BN_mod_mul_reciprocal 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_mod_mul_reciprocal 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_new 3" -.TH BN_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_num_bytes.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_num_bytes.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_num_bytes.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_num_bytes 3" -.TH BN_num_bytes 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_num_bytes 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_rand.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_rand.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_rand.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_rand 3" -.TH BN_rand 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_rand 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_set_bit.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_set_bit.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_set_bit.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_set_bit 3" -.TH BN_set_bit 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_set_bit 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_swap.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_swap.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_swap.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_swap 3" -.TH BN_swap 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_swap 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/BN_zero.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/BN_zero.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/BN_zero.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "BN_zero 3" -.TH BN_zero 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH BN_zero 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/CONF_modules_free.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/CONF_modules_free.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/CONF_modules_free.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "CONF_modules_free 3" -.TH CONF_modules_free 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH CONF_modules_free 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/CONF_modules_load_file.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/CONF_modules_load_file.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/CONF_modules_load_file.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "CONF_modules_load_file 3" -.TH CONF_modules_load_file 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH CONF_modules_load_file 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/CRYPTO_set_ex_data.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/CRYPTO_set_ex_data.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/CRYPTO_set_ex_data.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "CRYPTO_set_ex_data 3" -.TH CRYPTO_set_ex_data 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH CRYPTO_set_ex_data 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/DH_generate_key.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/DH_generate_key.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/DH_generate_key.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "DH_generate_key 3" -.TH DH_generate_key 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH DH_generate_key 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/DH_generate_parameters.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/DH_generate_parameters.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/DH_generate_parameters.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "DH_generate_parameters 3" -.TH DH_generate_parameters 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH DH_generate_parameters 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/DH_get_ex_new_index.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/DH_get_ex_new_index.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/DH_get_ex_new_index.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "DH_get_ex_new_index 3" -.TH DH_get_ex_new_index 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH DH_get_ex_new_index 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/DH_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/DH_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/DH_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "DH_new 3" -.TH DH_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH DH_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/DH_set_method.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/DH_set_method.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/DH_set_method.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "DH_set_method 3" -.TH DH_set_method 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH DH_set_method 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/DH_size.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/DH_size.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/DH_size.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "DH_size 3" -.TH DH_size 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH DH_size 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l Modified: stable/7/secure/lib/libcrypto/man/DSA_SIG_new.3 ============================================================================== --- stable/7/secure/lib/libcrypto/man/DSA_SIG_new.3 Thu Dec 9 22:03:53 2010 (r216341) +++ stable/7/secure/lib/libcrypto/man/DSA_SIG_new.3 Thu Dec 9 22:05:16 2010 (r216342) @@ -124,7 +124,7 @@ .\" ======================================================================== .\" .IX Title "DSA_SIG_new 3" -.TH DSA_SIG_new 3 "2010-11-16" "0.9.8p" "OpenSSL" +.TH DSA_SIG_new 3 "2010-12-02" "0.9.8q" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. *** DIFF OUTPUT TRUNCATED AT 1000 LINES ***