summaryrefslogtreecommitdiff
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Ensure trace recognises X25519Matt Caswell2016-09-081-0/+1
* Add missing debug strings.Rich Salz2016-09-071-0/+20
* Ensure the CertStatus message adds a DTLS message header where neededMatt Caswell2016-08-301-13/+14
* Remove trailing zerosRich Salz2016-08-261-87/+73
* Put DES into "not default" category.Rich Salz2016-08-241-11/+11
* To avoid SWEET32 attack, move 3DES to weakRich Salz2016-08-241-0/+18
* Fix comment about return value of ct_extract_tls_extension_sctsRob Percival2016-08-241-1/+1
* Remove some dead code from rec_layer_s3.cMatt Caswell2016-08-241-6/+0
* Sanity check ticket length.Dr. Stephen Henson2016-08-231-3/+7
* Fix leak on error in tls_construct_cke_gostMatt Caswell2016-08-231-1/+1
* Prevent DTLS Finished message injectionMatt Caswell2016-08-221-0/+6
* Fix DTLS buffered message DoS attackMatt Caswell2016-08-225-20/+35
* Fix DTLS replay protectionMatt Caswell2016-08-194-14/+56
* Fix DTLS unprocessed records bugMatt Caswell2016-08-192-2/+21
* Indent ssl/Emilia Kasper2016-08-1838-1404/+1212
* Constify ssl_cert_type()Dr. Stephen Henson2016-08-172-2/+2
* Convert X509* functions to use const gettersDr. Stephen Henson2016-08-172-2/+2
* Add missing session id and tlsext_status accessorsRemi Gacogne2016-08-173-0/+31
* Convert SSL_SESSION* functions to use const gettersMatt Caswell2016-08-161-1/+1
* Ensure we unpad in constant time for read pipeliningMatt Caswell2016-08-161-3/+9
* Fix satsub64be() to unconditionally use 64-bit integersDavid Woodhouse2016-08-162-68/+21
* Address feedback on SSLv2 ClientHello processingMatt Caswell2016-08-153-14/+6
* Send an alert if we get a non-initial record with the wrong versionMatt Caswell2016-08-151-3/+11
* Address feedback on SSLv2 ClientHello processingMatt Caswell2016-08-154-7/+13
* Improves CTLOG_STORE settersRob Percival2016-08-151-3/+3
* Fix no-ecDr. Stephen Henson2016-08-154-28/+40
* Modify TLS support for new X25519 API.Dr. Stephen Henson2016-08-135-43/+66
* GH1446: Add SSL_SESSION_get0_cipherRich Salz2016-08-121-0/+5
* Fix test of first of 255 CBC padding bytes.Adam Langley2016-08-081-3/+3
* Fix CIPHER_DEBUGJimC2016-08-061-1/+1
* spelling fixes, just comments and readme.klemens2016-08-054-5/+5
* Remove OPENSSL_NO_STDIO guards around certain SSL cert/key functionsRichard Levitte2016-08-051-14/+0
* Fix ubsan 'left shift of negative value -1' error in satsub64be()David Woodhouse2016-08-041-19/+42
* Make DTLS1_BAD_VER work with DTLS_client_method()David Woodhouse2016-08-045-5/+17
* Fix cipher support for DTLS1_BAD_VERDavid Woodhouse2016-08-041-88/+88
* Fix DTLS_VERSION_xx() comparison macros for DTLS1_BAD_VERDavid Woodhouse2016-08-041-4/+7
* Fix ossl_statem_client_max_message_size() for DTLS1_BAD_VERDavid Woodhouse2016-08-041-0/+2
* Fix SSL_export_keying_material() for DTLS1_BAD_VERDavid Woodhouse2016-08-041-1/+1
* peer_tmp doesn't exist if no-ec no-dh.Ben Laurie2016-08-011-0/+2
* Fix crash as a result of MULTIBLOCKMatt Caswell2016-07-303-30/+29
* Simplify and rename SSL_set_rbio() and SSL_set_wbio()Matt Caswell2016-07-291-15/+50
* Fix BIO_pop for SSL BIOsMatt Caswell2016-07-291-10/+2
* Fix BIO_push ref counting for SSL BIOMatt Caswell2016-07-291-1/+5
* Don't double free the write bioMatt Caswell2016-07-291-1/+1
* Make the checks for an SSLv2 style record stricterMatt Caswell2016-07-291-5/+11
* zero pad DHE public key in ServerKeyExchange message for interoprussor2016-07-251-0/+25
* Enforce and explicit some const castingFdaSilvaYY2016-07-252-3/+3
* Correct misspelt OPENSSL_NO_SRPRichard Levitte2016-07-231-1/+1
* Send alert for bad DH CKEDr. Stephen Henson2016-07-221-6/+1
* Have load_buildtin_compression in ssl/ssl_ciph.c return RUN_ONCE resultRichard Levitte2016-07-221-3/+8