MatrixSSL 1.8.7

Releases

New Features

• Windows project files for library and example application builds are now based on the freely available Microsoft Visual Studio C++ 2008 Express Edition

Functional Changes

• The USE_MULTITHREADING define in matrixConfig.h is now off by default so that POSIX platforms will not require pthreads by default.

Fixes

• Fixed the size calculations for SSL_FULL conditions when encoding the FINISHED flight of handshake messages
• Additional checks and proper error handling for the following types of malformed X.509 certificates as tested by Orange Labs. These do not constitute a remote attack vector for the Open Source release.
  • Testing for Serial Number encodings that use bad length specifications
  • Testing for Distinguished Name extension encodings that use bad length specifications
  • Error handling for Subject Alternate Name extensions that use bad length specifications

June 24, 2009