openssl-web.git
9 years agoUpdate all v4 keys to have the full fingerprint again.
Kurt Roeckx [Thu, 16 Oct 2014 17:53:23 +0000 (19:53 +0200)]
Update all v4 keys to have the full fingerprint again.

9 years agoMerge branch 'master' of openssl.net:openssl-web
Mark J. Cox [Thu, 16 Oct 2014 11:30:28 +0000 (12:30 +0100)]
Merge branch 'master' of openssl.net:openssl-web

9 years agoUpdate stylesheet so we don't have ugly CVE- when we have something without a CVE
Mark J. Cox [Thu, 16 Oct 2014 11:29:12 +0000 (12:29 +0100)]
Update stylesheet so we don't have ugly CVE- when we have something without a CVE

9 years agoupdate to roadmap; tweaked mirror information
Rich Salz [Thu, 16 Oct 2014 04:41:47 +0000 (00:41 -0400)]
update to roadmap; tweaked mirror information

14-oct-2014 update to roadmap:
    audit timetable and TLS1.3/CT added to features
said not interested in any more mirrors
pruned mirror list to only those that worked in a quick test

9 years agoFix bad commit
Mark J. Cox [Wed, 15 Oct 2014 19:26:59 +0000 (20:26 +0100)]
Fix bad commit

9 years agoinclude allocated CVE
Tim Hudson [Wed, 15 Oct 2014 14:40:16 +0000 (00:40 +1000)]
include allocated CVE

9 years agoSession tickets checks were not in earlier 0.9.8, remove them from
Mark J. Cox [Wed, 15 Oct 2014 14:32:29 +0000 (15:32 +0100)]
Session tickets checks were not in earlier 0.9.8, remove them from
affected list.

9 years agoRemove dupe CVE
Mark J. Cox [Wed, 15 Oct 2014 14:07:59 +0000 (15:07 +0100)]
Remove dupe CVE

9 years ago xsltproc vulnerabilities.xsl vulnerabilities.xml > vulnerabilities.wml
Mark J. Cox [Wed, 15 Oct 2014 14:00:20 +0000 (15:00 +0100)]
 xsltproc vulnerabilities.xsl vulnerabilities.xml > vulnerabilities.wml

9 years agoUpdate to vulnerabilities.xml
Matt Caswell [Wed, 15 Oct 2014 13:46:58 +0000 (14:46 +0100)]
Update to vulnerabilities.xml

9 years agoAdd security advisory
Matt Caswell [Wed, 15 Oct 2014 13:29:06 +0000 (14:29 +0100)]
Add security advisory

9 years agoUpdates to newsflash.txt
Matt Caswell [Wed, 15 Oct 2014 13:22:27 +0000 (14:22 +0100)]
Updates to newsflash.txt

9 years agoUpdate Lutz's PGP key info
Lutz Jaenicke [Mon, 13 Oct 2014 09:47:13 +0000 (11:47 +0200)]
Update Lutz's PGP key info

9 years agoUpdate my PGP data
Richard Levitte [Mon, 13 Oct 2014 09:30:02 +0000 (11:30 +0200)]
Update my PGP data

9 years agoUpdate location for Bodo.
Bodo Moeller [Mon, 13 Oct 2014 08:52:05 +0000 (10:52 +0200)]
Update location for Bodo.

9 years agonote Richard returning to active status
Tim Hudson [Mon, 13 Oct 2014 07:44:33 +0000 (17:44 +1000)]
note Richard returning to active status

9 years agoAdded Linux Foundation acknowledgment
Steve Marquess [Wed, 8 Oct 2014 16:31:56 +0000 (12:31 -0400)]
Added Linux Foundation acknowledgment

9 years agoUpdates for 1.0.2 beta 3
Matt Caswell [Thu, 25 Sep 2014 20:43:30 +0000 (21:43 +0100)]
Updates for 1.0.2 beta 3

9 years agoAdd html anchors for platform,release strategy
Rich Salz [Thu, 25 Sep 2014 18:36:14 +0000 (14:36 -0400)]
Add html anchors for platform,release strategy

This is so that I can post a link when I send email to
openssl-dev/users about removing platforms :)

9 years agoUpdate release info as noted by Jakob Bohm.
Rich Salz [Wed, 10 Sep 2014 17:56:23 +0000 (13:56 -0400)]
Update release info as noted by Jakob Bohm.

9 years agoRT2982: Update to use 1.0.1e
Rich Salz [Tue, 9 Sep 2014 17:10:58 +0000 (13:10 -0400)]
RT2982: Update to use 1.0.1e

The fix in 1.0.1d wasn't complete, so add a note saying
to use 1.0.1e or later.

9 years agoRemoved duplicate "last updated" message
Matt Caswell [Mon, 8 Sep 2014 22:39:26 +0000 (23:39 +0100)]
Removed duplicate "last updated" message

9 years agoAdd update on RT backlog objective.
Rich Salz [Mon, 8 Sep 2014 19:15:28 +0000 (15:15 -0400)]
Add update on RT backlog objective.

Also added text file and an activity graph.

9 years agoMinor tweak to wml for security strategy strike through
Matt Caswell [Sun, 7 Sep 2014 20:35:08 +0000 (21:35 +0100)]
Minor tweak to wml for security strategy strike through

9 years agoUpdated roadmap with security policy info
Matt Caswell [Sun, 7 Sep 2014 20:28:26 +0000 (21:28 +0100)]
Updated roadmap with security policy info

9 years agoPublished Security Policy
Matt Caswell [Sun, 7 Sep 2014 20:19:58 +0000 (21:19 +0100)]
Published Security Policy

9 years agoFixed vulnerabilities database to clarify that CVE-2014-3505 is only
Matt Caswell [Fri, 8 Aug 2014 18:25:22 +0000 (19:25 +0100)]
Fixed vulnerabilities database to clarify that CVE-2014-3505 is only
vulnerable from 0.9.8m onwards.

Also CVE-2014-3507 is only vulnerable from 0.9.8o onwards and 1.0.0a onwards.

9 years agowml wasn't regenerated from xml
Mark J. Cox [Thu, 7 Aug 2014 14:51:15 +0000 (15:51 +0100)]
wml wasn't regenerated from xml

9 years agoUpdates for new releases
Matt Caswell [Wed, 6 Aug 2014 21:53:29 +0000 (22:53 +0100)]
Updates for new releases

9 years agoAdd openssl-testing pointer
Rich Salz [Tue, 5 Aug 2014 01:01:13 +0000 (21:01 -0400)]
Add openssl-testing pointer

9 years agoa test blank line to see if email issue is fixed
Tim Hudson [Fri, 25 Jul 2014 23:17:40 +0000 (09:17 +1000)]
a test blank line to see if email issue is fixed

9 years agoremove references to long defunct email address for Eric
Tim Hudson [Thu, 24 Jul 2014 22:02:44 +0000 (08:02 +1000)]
remove references to long defunct email address for Eric
tone down the references to SSLeay
remove initials from references to Eric and Tim

9 years agoAdded Beta 2 release to newsflash
Matt Caswell [Tue, 22 Jul 2014 20:46:28 +0000 (21:46 +0100)]
Added Beta 2 release to newsflash

9 years agoadjust incorrect link
Tim Hudson [Sat, 19 Jul 2014 06:26:30 +0000 (16:26 +1000)]
adjust incorrect link

9 years agocorrect <80><99> as apostrophe from cut-n-paste
Tim Hudson [Wed, 16 Jul 2014 22:32:16 +0000 (08:32 +1000)]
correct <80><99> as apostrophe from cut-n-paste

9 years agokeep prior wording and note objective met as the style for updates
Tim Hudson [Wed, 16 Jul 2014 22:25:20 +0000 (08:25 +1000)]
keep prior wording and note objective met as the style for updates

9 years agoupdate code review section
Tim Hudson [Wed, 16 Jul 2014 21:05:32 +0000 (07:05 +1000)]
update code review section

9 years agoMerge branch 'master' of git.openssl.org:openssl-web
Rich Salz [Wed, 2 Jul 2014 10:51:51 +0000 (06:51 -0400)]
Merge branch 'master' of git.openssl.org:openssl-web

9 years agoAdd roadmap item
Rich Salz [Wed, 2 Jul 2014 10:51:30 +0000 (06:51 -0400)]
Add roadmap item

9 years agoMinor modification to explain what RT is for those that don't know
Matt Caswell [Tue, 1 Jul 2014 22:46:21 +0000 (23:46 +0100)]
Minor modification to explain what RT is for those that don't know

9 years agoAdded Roadmap
Matt Caswell [Mon, 30 Jun 2014 22:24:36 +0000 (23:24 +0100)]
Added Roadmap

9 years agoRemoved sentence saying that we do not have any sustainable subsidies from commercial...
Matt Caswell [Mon, 30 Jun 2014 19:37:58 +0000 (20:37 +0100)]
Removed sentence saying that we do not have any sustainable subsidies from commercial sponsors

9 years agoAdd new PSW logo
Steve Marquess [Mon, 30 Jun 2014 13:19:45 +0000 (09:19 -0400)]
Add new PSW logo

9 years agoChange case of sponsor name per sponsor request
Steve Marquess [Mon, 30 Jun 2014 12:10:17 +0000 (08:10 -0400)]
Change case of sponsor name per sponsor request

9 years agoManually build news/index.html
Dr. Stephen Henson [Fri, 27 Jun 2014 18:05:37 +0000 (19:05 +0100)]
Manually build news/index.html

9 years agoAdd full key fingerprint for rsalz; add linebreaks for readability.
Rich Salz [Thu, 26 Jun 2014 02:12:49 +0000 (22:12 -0400)]
Add full key fingerprint for rsalz; add linebreaks for readability.

9 years agoUse full fingerprint for v4 keys and long id for v3 keys
Kurt Roeckx [Wed, 25 Jun 2014 20:25:54 +0000 (22:25 +0200)]
Use full fingerprint for v4 keys and long id for v3 keys

The short id (32 bit) shouldn't be used since it's trivial to
generate a duplicate, even the long id (64 bit) is easy and
should be avoided but v3 keys can only be used with the long
key and not the fingerprint.

9 years agoDrop the "why buy ..." squib.
Rich Salz [Tue, 24 Jun 2014 11:21:44 +0000 (07:21 -0400)]
Drop the "why buy ..." squib.

9 years agoUnfortunately newsflashes are limited by characters so we can't go into
Mark J. Cox [Tue, 24 Jun 2014 09:45:11 +0000 (10:45 +0100)]
Unfortunately newsflashes are limited by characters so we can't go into
full detail of all the new names in the dev team and core change

9 years agoGenerate vulnerabilities.wml in UTF-8 instead of latin1
Kurt Roeckx [Mon, 23 Jun 2014 19:43:31 +0000 (21:43 +0200)]
Generate vulnerabilities.wml in UTF-8 instead of latin1

Also update the vulnerabilities.wml file.

9 years agoMake CVS-2014-0195 show up.
Geoff Thorpe [Mon, 23 Jun 2014 18:55:07 +0000 (14:55 -0400)]
Make CVS-2014-0195 show up.

9 years agoConvert file from latin1 to UTF-8
Kurt Roeckx [Sat, 21 Jun 2014 22:04:40 +0000 (00:04 +0200)]
Convert file from latin1 to UTF-8

The headers on the website say it's UTF-8, so it got rendered wrong.

9 years agoFix alphabetical order.
Dr. Stephen Henson [Sat, 21 Jun 2014 13:45:22 +0000 (14:45 +0100)]
Fix alphabetical order.

9 years agoTypo.
Dr. Stephen Henson [Sat, 21 Jun 2014 13:42:11 +0000 (14:42 +0100)]
Typo.

9 years agoAdd Kurt Roeckx
Steve Marquess [Sat, 21 Jun 2014 13:36:42 +0000 (09:36 -0400)]
Add Kurt Roeckx

9 years agoAdd Rich Salz
Steve Marquess [Fri, 20 Jun 2014 17:56:47 +0000 (13:56 -0400)]
Add Rich Salz

9 years agoAdded Emilia Kasper
Steve Marquess [Thu, 19 Jun 2014 17:21:11 +0000 (13:21 -0400)]
Added Emilia Kasper

9 years agoalso remove subedit historical SSLeay reference
Tim Hudson [Thu, 19 Jun 2014 16:55:12 +0000 (02:55 +1000)]
also remove subedit historical SSLeay reference

9 years agoupdate all related items removing any item for which the links no longer work
Tim Hudson [Thu, 19 Jun 2014 15:45:02 +0000 (01:45 +1000)]
update all related items removing any item for which the links no longer work
remove historical references to SSLeay

9 years agoI've been activated.
Geoff Thorpe [Mon, 16 Jun 2014 14:34:08 +0000 (10:34 -0400)]
I've been activated.

9 years agoupdate status
Dr. Stephen Henson [Sun, 15 Jun 2014 12:52:13 +0000 (13:52 +0100)]
update status

9 years agoUpdate team list for Andy, Tim, Viktor
Steve Marquess [Thu, 12 Jun 2014 12:03:47 +0000 (08:03 -0400)]
Update team list for Andy, Tim, Viktor

9 years agoFixed missing references to 0.9.8e
Matt Caswell [Fri, 6 Jun 2014 22:39:25 +0000 (23:39 +0100)]
Fixed missing references to 0.9.8e

9 years agoChange news title too.
Dr. Stephen Henson [Fri, 6 Jun 2014 13:12:36 +0000 (14:12 +0100)]
Change news title too.

9 years agoChange News to release notes.
Dr. Stephen Henson [Fri, 6 Jun 2014 13:09:09 +0000 (14:09 +0100)]
Change News to release notes.

9 years agoNote the 0076 fix in 0.9.8za
Mark J. Cox [Fri, 6 Jun 2014 12:00:21 +0000 (13:00 +0100)]
Note the 0076 fix in 0.9.8za

9 years agoRemember this is useless
Mark J. Cox [Fri, 6 Jun 2014 11:57:24 +0000 (12:57 +0100)]
Remember this is useless

9 years agoRegenerate by date
Mark J. Cox [Fri, 6 Jun 2014 11:54:34 +0000 (12:54 +0100)]
Regenerate by date

9 years agoSort by date not CVE name within a year
Mark J. Cox [Fri, 6 Jun 2014 11:54:24 +0000 (12:54 +0100)]
Sort by date not CVE name within a year

9 years agoRearrange sponsor logos
Steve Marquess [Thu, 5 Jun 2014 13:39:14 +0000 (09:39 -0400)]
Rearrange sponsor logos

9 years agoAdd flaws to vulnerabilities.xml
Mark J. Cox [Thu, 5 Jun 2014 11:34:47 +0000 (12:34 +0100)]
Add flaws to vulnerabilities.xml

9 years agoUpdate newsflash.
Dr. Stephen Henson [Thu, 5 Jun 2014 10:04:15 +0000 (11:04 +0100)]
Update newsflash.

9 years agoAdd security advisory.
Dr. Stephen Henson [Thu, 5 Jun 2014 10:00:04 +0000 (11:00 +0100)]
Add security advisory.

9 years agoChanged Smartisan logo per their request
Steve Marquess [Fri, 30 May 2014 10:38:18 +0000 (06:38 -0400)]
Changed Smartisan logo per their request

9 years agoAdd Milton Security Group as new sponsor.
Steve Marquess [Thu, 29 May 2014 16:45:30 +0000 (12:45 -0400)]
Add Milton Security Group as new sponsor.

10 years agoAdd Smartisan and Huawei acknowledgments
Steve Marquess [Tue, 27 May 2014 16:22:16 +0000 (12:22 -0400)]
Add Smartisan and Huawei acknowledgments

10 years agoAdd Globalsign logo
Steve Marquess [Tue, 13 May 2014 12:22:24 +0000 (08:22 -0400)]
Add Globalsign logo

10 years agoweb: add Geoff's key-id
Geoff Thorpe [Wed, 7 May 2014 00:59:25 +0000 (20:59 -0400)]
web: add Geoff's key-id

Signed-off-by: Geoff Thorpe <geoff@openssl.org>
10 years agoNew Opengear logo
Steve Marquess [Fri, 2 May 2014 18:32:56 +0000 (14:32 -0400)]
New Opengear logo

10 years agoMerge branch 'master' of openssl.net:openssl-web
Mark J. Cox [Fri, 2 May 2014 11:42:09 +0000 (12:42 +0100)]
Merge branch 'master' of openssl.net:openssl-web

10 years agoUpdate with the missing CVEs and advisories
Mark J. Cox [Thu, 1 May 2014 17:51:19 +0000 (18:51 +0100)]
Update with the missing CVEs and advisories

10 years agoTypo.
Dr. Stephen Henson [Thu, 1 May 2014 17:26:32 +0000 (18:26 +0100)]
Typo.

10 years agoRemove Contribution link, it's now under Source (since it's rarely updated)
Mark J. Cox [Thu, 1 May 2014 10:06:28 +0000 (11:06 +0100)]
Remove Contribution link, it's now under Source (since it's rarely updated)
Add Security link, how to report, discover vulns, and the database of CVE

10 years agoLink to contrib from source so we can remove from master navbar
Mark J. Cox [Thu, 1 May 2014 10:01:49 +0000 (11:01 +0100)]
Link to contrib from source so we can remove from master navbar

10 years agoAdd images for a "security" tab on the navbar (but don't enable it on
Mark J. Cox [Wed, 30 Apr 2014 20:16:50 +0000 (21:16 +0100)]
Add images for a "security" tab on the navbar (but don't enable it on
the site yet), will just point to the news/vulnerabilities page

10 years agoMake the vulnerability db into more of a useful security catch all page
Mark J. Cox [Wed, 30 Apr 2014 20:02:22 +0000 (21:02 +0100)]
Make the vulnerability db into more of a useful security catch all page
(at the moment the FAQ lists the contact methods, nowhere lists what
versions are EOL).  We'll then use a dedicated tab for this page.

10 years agoAdd Nokia acknowledgment
Steve Marquess [Wed, 30 Apr 2014 12:13:17 +0000 (08:13 -0400)]
Add Nokia acknowledgment

10 years agoMissing tag (Hard to test these changes locally)
Mark J. Cox [Tue, 29 Apr 2014 07:50:14 +0000 (08:50 +0100)]
Missing tag (Hard to test these changes locally)

10 years agoAdd key id to first table too otherwise it's confusing that you have to
Mark J. Cox [Tue, 29 Apr 2014 07:46:35 +0000 (08:46 +0100)]
Add key id to first table too otherwise it's confusing that you have to
cross-reference people into the 2nd table

10 years agoUse @openssl.org addresses for team members now available
Mark J. Cox [Tue, 29 Apr 2014 07:44:48 +0000 (08:44 +0100)]
Use @openssl.org addresses for team members now available

10 years agoAdded Matt Caswell to about page
Matt Caswell [Fri, 25 Apr 2014 23:36:05 +0000 (00:36 +0100)]
Added Matt Caswell to about page

10 years agoTypo in appro's link to key server.
Andy Polyakov [Thu, 24 Apr 2014 22:04:19 +0000 (00:04 +0200)]
Typo in appro's link to key server.

10 years agoAdd appro@openssl.org's GPG key
Andy Polyakov [Thu, 24 Apr 2014 21:52:57 +0000 (23:52 +0200)]
Add appro@openssl.org's GPG key

10 years agoAdd GPG key for SteveM
Steve Marquess [Thu, 24 Apr 2014 12:03:28 +0000 (08:03 -0400)]
Add GPG key for SteveM

10 years agoDelete obsolete announcement file.
Dr. Stephen Henson [Thu, 24 Apr 2014 11:56:18 +0000 (12:56 +0100)]
Delete obsolete announcement file.

10 years agoRemove extra email address on Emeritae table
Mark J. Cox [Wed, 23 Apr 2014 14:16:02 +0000 (15:16 +0100)]
Remove extra email address on Emeritae table

10 years agoMissed an extra underline header and bad spacing on one table
Mark J. Cox [Wed, 23 Apr 2014 14:14:16 +0000 (15:14 +0100)]
Missed an extra underline header and bad spacing on one table

10 years agoShorter newsflash makes home page look nicer
Mark J. Cox [Wed, 23 Apr 2014 14:12:34 +0000 (15:12 +0100)]
Shorter newsflash makes home page look nicer

10 years agoUpdate team members page and add Steve Marquess
Mark J. Cox [Wed, 23 Apr 2014 14:04:39 +0000 (15:04 +0100)]
Update team members page and add Steve Marquess

10 years agofix broken link
Dr. Stephen Henson [Tue, 22 Apr 2014 02:20:31 +0000 (03:20 +0100)]
fix broken link