summaryrefslogtreecommitdiff
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* SSL object refactoring using SSL_CONNECTION objectTomas Mraz2022-07-2844-2891/+4738
* Remove duplicated BIO_get_ktls_send calls in do_ssl3_writeBernd Edlinger2022-07-182-10/+12
* Check for EVP_MD being NULL inside ssl.slontis2022-07-135-11/+26
* ssl/tls_srp.c: Add check for BN_dupJiasheng Jiang2022-07-081-1/+1
* ssl: implement an event queuePauli2022-07-062-1/+195
* Add deprecation macro for 3.1 and deprecate OPENSSL_LH_statsHugo Landau2022-06-221-2/+2
* Improve diagnostics on setting groupsDmitry Belyavskiy2022-06-221-1/+6
* ssl: expose the get time function internallyPauli2022-06-223-23/+49
* build.info changes for priority queuePauli2022-06-221-0/+4
* add priority queue implementationPauli2022-06-221-0/+376
* add_provider_groups: Clean up algorithm pointer on failureTomas Mraz2022-06-101-1/+1
* Fix strict client chain check with TLS-1.3Tomas Mraz2022-06-031-8/+6
* Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl configTomas Mraz2022-06-031-1/+2
* Add a test_ssl_new testcaseTomas Mraz2022-06-032-10/+62
* First working empty protocol testTomas Mraz2022-06-032-18/+54
* Add empty implementations of quic method functionsTomas Mraz2022-06-035-0/+187
* Fix the erroneous checks of EVP_PKEY_CTX_set_group_namePeiwei Hu2022-06-021-2/+2
* The -no_legacy_server_connect option applies to clientTomas Mraz2022-05-271-1/+1
* Actually implement UnsafeLegacyServerConnect as documentedTomas Mraz2022-05-271-0/+2
* QUIC wire format supportHugo Landau2022-05-271-1/+1
* Fix check of dtls1_process_recordPeiwei Hu2022-05-263-6/+6
* Use safe pattern for buffer size determining in case of GOST key exchangeDmitry Belyavskiy2022-05-241-6/+8
* Fix a crash in ssl_security_cert_chainBernd Edlinger2022-05-241-0/+2
* Fix check of EVP_CIPHER_CTX_ctrlPeiwei Hu2022-05-242-10/+10
* Add more SRTP protection profilesKijin Kim2022-05-231-0/+32
* Fix coverity 1504433: unchecked return valuePauli2022-05-191-0/+1
* Add return value check of EVP_PKEY_copy_parameters () in ssl_set_cert_and_key()Zhou Qingyang2022-05-161-2/+8
* err: get rid of err_free_strings_int()Dr. Matthias St. Pierre2022-05-101-13/+1
* Fix leakage when the cacheline is 32-bytes in CBC_MAC_ROTATE_IN_PLACEbasavesh2022-05-091-3/+11
* tls: ban SSL3, TLS1, TLS1.1 and DTLS1.0 at security level one and abovePauli2022-05-081-10/+4
* Remove duplicated #include headersJHH202022-05-041-1/+0
* Update copyright yearMatt Caswell2022-05-0326-26/+26
* str[n]casecmp => OPENSSL_strncasecmpDmitry Belyavskiy2022-04-221-5/+6
* Fix an assertion in the DTLS server codeBernd Edlinger2022-04-141-3/+3
* SSL_conf_cmd: Allow DH Parameters at any position.Daniel Fiala2022-04-121-5/+9
* Add SSL_(CTX_)?get0_(verify|chain)_cert_store functionsHugo Landau2022-04-063-0/+19
* KTLS: Enable KTLS for receiving as well in TLS 1.3Daiki Ueno2022-04-061-11/+21
* KTLS: Handle TLS 1.3 in ssl3_get_record.Daiki Ueno2022-04-061-15/+31
* KTLS: Add using_ktls helper variable in ssl3_get_record().John Baldwin2022-04-061-10/+10
* KTLS: Check for unprocessed receive records in ktls_configure_crypto.John Baldwin2022-04-064-82/+91
* tls_process_server_hello: Disallow repeated HRRTomas Mraz2022-03-301-0/+4
* ticket_lifetime_hint may exceed 1 week in TLSv1.3Todd Short2022-03-251-6/+15
* Fix Coverity 1498611 & 1498608: uninitialised readPauli2022-03-231-0/+2
* print SSL session, fix build warnings on OpenBSD.David Carlier2022-03-181-2/+2
* Replace handling of negative verification result with SSL_set_retry_verify()Tomas Mraz2022-03-142-3/+7
* [ssl] Add SSL_kDHEPSK and SSL_kECDHEPSK as PFS ciphersuites for SECLEVEL >= 3Nicola Tuveri2022-03-011-2/+3
* [ssl] Prefer SSL_k(EC)?DHE to the SSL_kE(EC)?DH aliasNicola Tuveri2022-03-012-7/+7
* Add back check for the DH public key sizeTomas Mraz2022-02-174-5/+27
* Cleanup record length checks for KTLSBernd Edlinger2022-02-111-6/+21
* Move e_os.h to include/internalRichard Levitte2022-02-054-4/+4