summaryrefslogtreecommitdiff
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* oops, revert unrelated changeDr. Stephen Henson2012-05-102-15/+1
* Reported by: Solar Designer of OpenwallDr. Stephen Henson2012-05-102-1/+15
* Don't try to use unvalidated composite ciphers in FIPS modeDr. Stephen Henson2012-04-261-0/+5
* Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL andDr. Stephen Henson2012-04-251-1/+1
* s23_clnt.c: ensure interoperability by maitaining client "version capability"Andy Polyakov2012-04-251-19/+36
* correct error codeDr. Stephen Henson2012-04-183-1/+3
* Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller2012-04-171-13/+13
* Additional workaround for PR#2771Dr. Stephen Henson2012-04-172-0/+18
* Partial workaround for PR#2771.Dr. Stephen Henson2012-04-172-3/+15
* OPENSSL_NO_SOCK fixes [from HEAD].Andy Polyakov2012-04-161-0/+2
* s3_srvr.c: fix typo [from HEAD].Andy Polyakov2012-04-151-1/+1
* e_aes_cbc_hmac_sha1.c: handle zero-length payload and engage empty fragAndy Polyakov2012-04-151-2/+6
* ssl/ssl_ciph.c: interim solution for assertion in d1_pkt.c(444) [from HEAD].Andy Polyakov2012-04-041-6/+7
* PR: 2778(part)Dr. Stephen Henson2012-03-311-1/+1
* Experimental workaround to large client hello issue (see PR#2771).Dr. Stephen Henson2012-03-291-2/+4
* use client version when deciding whether to send supported signature algorith...Dr. Stephen Henson2012-03-211-1/+1
* ssl/t1_enc.c: pay attention to EVP_CIPH_FLAG_CUSTOM_CIPHER [from HEAD].Andy Polyakov2012-03-131-1/+4
* Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson2012-03-091-7/+23
* PR: 2756Dr. Stephen Henson2012-03-093-23/+27
* PR: 2755Dr. Stephen Henson2012-03-062-2/+7
* PR: 2748Dr. Stephen Henson2012-03-062-5/+4
* PR: 2739Dr. Stephen Henson2012-02-272-2/+6
* ABI compliance fixes.Dr. Stephen Henson2012-02-223-65/+61
* typoDr. Stephen Henson2012-02-171-1/+1
* Fix bug in CVE-2011-4619: check we have really received a client helloDr. Stephen Henson2012-02-161-8/+7
* Submitted by: Eric Rescorla <ekr@rtfm.com>Dr. Stephen Henson2012-02-111-4/+14
* PR: 2704Dr. Stephen Henson2012-02-102-19/+35
* Submitted by: Eric Rescorla <ekr@rtfm.com>Dr. Stephen Henson2012-02-103-10/+61
* Modify client hello version when renegotiating to enhance interop withDr. Stephen Henson2012-02-091-0/+34
* return error if md is NULLDr. Stephen Henson2012-01-221-0/+2
* Fix for DTLS DoS issue introduced by fix for CVE-2011-4109.Dr. Stephen Henson2012-01-181-10/+7
* 1.0.1-specific OPNESSL vs. OPENSSL typo.Andy Polyakov2012-01-151-1/+1
* PR: 2652Dr. Stephen Henson2012-01-051-1/+1
* Fix for builds without DTLS support.Bodo Möller2012-01-051-0/+2
* PR: 2671Dr. Stephen Henson2012-01-051-1/+1
* Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>Dr. Stephen Henson2012-01-051-0/+5
* Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>, Michael Tuexen <t...Dr. Stephen Henson2012-01-041-10/+16
* Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)Dr. Stephen Henson2012-01-041-0/+3
* Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)Dr. Stephen Henson2012-01-044-0/+25
* Submitted by: Adam Langley <agl@chromium.org>Dr. Stephen Henson2012-01-042-0/+7
* only send heartbeat extension from server if client sent oneDr. Stephen Henson2012-01-031-11/+14
* make updateDr. Stephen Henson2012-01-021-8/+9
* PR: 2658Dr. Stephen Henson2011-12-3116-4/+520
* make updateDr. Stephen Henson2011-12-271-247/+291
* PR: 1794Dr. Stephen Henson2011-12-271-6/+17
* PR: 2326Dr. Stephen Henson2011-12-261-3/+3
* PR: 2535Dr. Stephen Henson2011-12-258-31/+474
* typoDr. Stephen Henson2011-12-231-4/+4
* delete unimplemented function from header file, update ordinalsDr. Stephen Henson2011-12-231-1/+0
* remove prototype for deleted SRP functionDr. Stephen Henson2011-12-221-2/+0