summaryrefslogtreecommitdiff
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Fix coverity 1504433: unchecked return valuePauli2022-05-191-0/+1
* Add return value check of EVP_PKEY_copy_parameters () in ssl_set_cert_and_key()Zhou Qingyang2022-05-161-2/+8
* err: get rid of err_free_strings_int()Dr. Matthias St. Pierre2022-05-101-13/+1
* Fix leakage when the cacheline is 32-bytes in CBC_MAC_ROTATE_IN_PLACEbasavesh2022-05-091-3/+11
* tls: ban SSL3, TLS1, TLS1.1 and DTLS1.0 at security level one and abovePauli2022-05-081-10/+4
* Remove duplicated #include headersJHH202022-05-041-1/+0
* Update copyright yearMatt Caswell2022-05-0326-26/+26
* str[n]casecmp => OPENSSL_strncasecmpDmitry Belyavskiy2022-04-221-5/+6
* Fix an assertion in the DTLS server codeBernd Edlinger2022-04-141-3/+3
* SSL_conf_cmd: Allow DH Parameters at any position.Daniel Fiala2022-04-121-5/+9
* Add SSL_(CTX_)?get0_(verify|chain)_cert_store functionsHugo Landau2022-04-063-0/+19
* KTLS: Enable KTLS for receiving as well in TLS 1.3Daiki Ueno2022-04-061-11/+21
* KTLS: Handle TLS 1.3 in ssl3_get_record.Daiki Ueno2022-04-061-15/+31
* KTLS: Add using_ktls helper variable in ssl3_get_record().John Baldwin2022-04-061-10/+10
* KTLS: Check for unprocessed receive records in ktls_configure_crypto.John Baldwin2022-04-064-82/+91
* tls_process_server_hello: Disallow repeated HRRTomas Mraz2022-03-301-0/+4
* ticket_lifetime_hint may exceed 1 week in TLSv1.3Todd Short2022-03-251-6/+15
* Fix Coverity 1498611 & 1498608: uninitialised readPauli2022-03-231-0/+2
* print SSL session, fix build warnings on OpenBSD.David Carlier2022-03-181-2/+2
* Replace handling of negative verification result with SSL_set_retry_verify()Tomas Mraz2022-03-142-3/+7
* [ssl] Add SSL_kDHEPSK and SSL_kECDHEPSK as PFS ciphersuites for SECLEVEL >= 3Nicola Tuveri2022-03-011-2/+3
* [ssl] Prefer SSL_k(EC)?DHE to the SSL_kE(EC)?DH aliasNicola Tuveri2022-03-012-7/+7
* Add back check for the DH public key sizeTomas Mraz2022-02-174-5/+27
* Cleanup record length checks for KTLSBernd Edlinger2022-02-111-6/+21
* Move e_os.h to include/internalRichard Levitte2022-02-054-4/+4
* Add support for Chacha20-Poly1305 to kernel TLS on FreeBSD.John Baldwin2022-02-041-0/+10
* add SSL_get0_iana_groups() & SSL_client_hello_get_extension_order()Phus Lu2022-02-032-0/+42
* Update the comment on ssl3_write_pending()yangyangtiantianlonglong2022-02-011-1/+1
* Revert dropped usage of var thiswr in do_ssl3_write()yangyangtiantianlonglong2022-02-011-1/+1
* apps: Add option -no_ems to s_client/s_server appsyangyangtiantianlonglong2022-01-281-0/+3
* ssl: better support TSAN operationsPauli2022-01-196-27/+93
* ssl: replace ;; with ; as statement separatorPauli2022-01-183-3/+3
* ssl/t1_enc: Fix kTLS RX offload pathDmytro Podgornyi2022-01-171-1/+1
* Delete unused param about get_construct_message_fyangyangtiantianlonglong2022-01-094-6/+6
* Update alert to common protocolKan2022-01-081-11/+11
* Fix: some patches related to error exitingPeiwei Hu2022-01-071-1/+1
* fix the return check of EVP_PKEY_CTX_ctrl() in 5 spotsxkernel2022-01-072-5/+5
* properly free the resource from EVP_MD_CTX_new() at ssl3_record.c:1413xkernel2022-01-071-11/+11
* properly free the resource from CRYPTO_mallocxkernel2022-01-061-2/+2
* Fix typosDimitris Apostolou2022-01-051-1/+1
* add OSSL_STACK_OF_X509_free() for commonly used patternDr. David von Oheimb2021-12-217-15/+15
* Fix invalid handling of verify errors in libsslMatt Caswell2021-12-142-3/+14
* Don't free the EVP_PKEY on error in set0_tmp_dh_pkey() functionsMatt Caswell2021-12-072-4/+10
* No EtM for GOST ciphers in TLS 1.2Dmitry Belyavskiy2021-11-291-1/+5
* Don't include any TLSv1.3 ciphersuites that are disabledolszomal2021-11-291-6/+15
* Enable brainpool curves for TLS1.3Bernd Edlinger2021-11-268-46/+139
* Move more general parts of internal/cryptlib.h to new internal/common.hDr. David von Oheimb2021-11-171-1/+1
* Add and use HAS_PREFIX() and CHECK_AND_SKIP_PREFIX() for checking if string h...Dr. David von Oheimb2021-11-174-20/+21
* BIO_read_filename: fix return checkPeiwei Hu2021-11-161-2/+2
* RAND_bytes_ex: fix return checkPeiwei Hu2021-11-161-1/+1