summaryrefslogtreecommitdiff
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Check SRP parameters early.Dr. Stephen Henson2014-08-066-11/+52
* Fix SRP ciphersuite DoS vulnerability.Dr. Stephen Henson2014-08-061-0/+7
* Fix race condition in ssl_parse_serverhello_tlsextGabor Tyukasz2014-08-061-7/+10
* Fix DTLS anonymous EC(DH) denial of serviceEmilia Käsper2014-08-061-0/+7
* Fix protocol downgrade bug in case of fragmented packetsDavid Benjamin2014-08-061-7/+23
* Remove some duplicate DTLS code.Adam Langley2014-08-061-12/+4
* Applying same fix as in dtls1_process_out_of_seq_message. A truncated DTLS fr...Matt Caswell2014-08-061-1/+3
* Fix return code for truncated DTLS fragment.Adam Langley2014-08-061-1/+3
* Fix memory leak from zero-length DTLS fragments.Adam Langley2014-08-061-3/+19
* Fix DTLS handshake message size checks.Matt Caswell2014-08-061-13/+16
* Added comment for the frag->reassembly == NULL case as per feedback from EmiliaMatt Caswell2014-08-061-1/+2
* Avoid double free when processing DTLS packets.Adam Langley2014-08-061-4/+2
* Add conditional unit testing interface.Dr. Stephen Henson2014-07-245-3/+99
* Update heartbeat_test #includesMike Bland2014-07-191-1/+2
* Use testutil registry in heartbeat_testMike Bland2014-07-191-22/+13
* Fix DTLS certificate requesting code.Dr. Stephen Henson2014-07-151-4/+5
* Use more common name for GOST key exchange.Dr. Stephen Henson2014-07-141-1/+1
* Add names of GOST algorithms.Peter Mosmans2014-07-131-0/+18
* Please Clang's sanitizer.Andy Polyakov2014-07-081-17/+21
* s3_pkt.c: fix typo.Andy Polyakov2014-07-051-1/+1
* Reduce casting nastiness.Ben Laurie2014-07-053-2/+11
* Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson2014-07-051-1/+1
* Remove all RFC5878 code.Dr. Stephen Henson2014-07-0411-760/+7
* Make disabling last cipher work.Thijs Alkemade2014-07-021-7/+11
* Fix possible buffer overrun.Ben Laurie2014-07-022-18/+20
* RT 1528; misleading debug print, "pre-master" should be "master key"Rich Salz2014-07-011-1/+1
* RT 1530; fix incorrect commentRich Salz2014-07-011-1/+1
* RT 1229; typo in comment "dont't"->"don't"Rich Salz2014-07-011-1/+1
* Fix warning.Dr. Stephen Henson2014-07-011-1/+1
* Make depend.Ben Laurie2014-06-301-15/+15
* More constification.Ben Laurie2014-06-292-6/+6
* Constification - mostly originally from Chromium.Ben Laurie2014-06-294-9/+9
* Fix memory leak.Dr. Stephen Henson2014-06-291-0/+4
* Don't disable state strings with no-ssl2Dr. Stephen Henson2014-06-281-4/+1
* Fix compilation with -DSSL_DEBUG -DTLS_DEBUG -DKSSL_DEBUGyogesh nagarkar2014-06-281-1/+1
* Remove redundant check.Ken Ballou2014-06-271-1/+1
* Add SHA256 Camellia ciphersuites from RFC5932PK2014-06-272-0/+226
* Don't advertise ECC ciphersuits in SSLv2 compatible client hello.Tomas Mraz2014-06-271-0/+7
* Fix off-by-one errors in ssl_cipher_get_evp()Miod Vallat2014-06-221-2/+2
* Revert "Fix off-by-one errors in ssl_cipher_get_evp()"Matt Caswell2014-06-221-2/+2
* Fixed Windows compilation failureMatt Caswell2014-06-221-0/+1
* Fix signed/unsigned comparisons.Felix Laurie von Massenbach2014-06-171-3/+3
* Accept CCS after sending finished.Dr. Stephen Henson2014-06-141-0/+1
* Fixed incorrect return code handling in ssl3_final_finish_mac.Matt Caswell2014-06-131-2/+10
* Revert "Fixed incorrect return code handling in ssl3_final_finish_mac"Matt Caswell2014-06-131-10/+2
* Fix off-by-one errors in ssl_cipher_get_evp()Kurt Cancemi2014-06-121-2/+2
* Added OPENSSL_assert check as per PR#3377 reported by Rainer Jung <rainer.jun...Matt Caswell2014-06-121-1/+2
* Enable multi-block support by default.Andy Polyakov2014-06-111-9/+26
* Fixed incorrect return code handling in ssl3_final_finish_macMatt Caswell2014-06-101-2/+10
* Create test/testutil.h for unit test helper macrosMike Bland2014-06-101-6/+4