summaryrefslogtreecommitdiff
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Adds multiple checks to avoid buffer over readsPhilippe Antoine2018-03-251-1/+13
* Unify s_client/s_server srtp profiles option handlingFdaSilvaYY2018-03-211-0/+4
* Fixes integer underflow with SSL_trace supportPhilippe Antoine2018-03-211-1/+1
* Don't wait for dry at the end of a handshakeMatt Caswell2018-03-211-9/+0
* Check for alerts while waiting for a dry eventMatt Caswell2018-03-211-1/+19
* Fix stack-use-after-scopePeter Wu2018-03-211-1/+3
* Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEERBenjamin Kaduk2018-03-201-0/+12
* Update copyright yearMatt Caswell2018-03-209-9/+9
* Place ticket keys into secure memoryTodd Short2018-03-195-25/+34
* Fix no-pskMatt Caswell2018-03-192-1/+5
* Apply system_default configuration on SSL_CTX_new().Tomas Mraz2018-03-193-6/+24
* Don't use a ssl specific DRBG anymoreKurt Roeckx2018-03-1911-58/+14
* Fix a crash in SSLfatal due to invalid enc_write_ctxBernd Edlinger2018-03-195-1/+10
* Add an anti-replay mechanismMatt Caswell2018-03-192-3/+11
* Don't update the session cache when processing a client certificate in TLSv1.3Matt Caswell2018-03-191-3/+0
* Always call the new_session_cb when issuing a NewSessionTicket in TLSv1.3Matt Caswell2018-03-193-5/+15
* Fix miscellaneous typos in docs and sourceDr. Matthias St. Pierre2018-03-171-2/+2
* Fix a memory leak in tls1_macBernd Edlinger2018-03-171-1/+3
* Fix a memory leak in n_ssl3_macBernd Edlinger2018-03-171-1/+1
* RAND_DRBG: add a function for setting the default DRBG type and flagsDr. Matthias St. Pierre2018-03-161-1/+1
* Publish the RAND_DRBG APIDr. Matthias St. Pierre2018-03-151-1/+1
* Rename EVP_PKEY_new_private_key()/EVP_PKEY_new_public_key()Matt Caswell2018-03-154-14/+16
* Add support for setting raw private HMAC keysMatt Caswell2018-03-154-11/+12
* Only update the server session cache when the session is readyMatt Caswell2018-03-152-7/+14
* Put the default set of TLSv1.3 ciphersuites in a header fileMatt Caswell2018-03-141-4/+1
* Split configuration of TLSv1.3 ciphers from older ciphersMatt Caswell2018-03-146-105/+256
* Only allow supported_versions in a TLSv1.3 ServerHelloMatt Caswell2018-03-143-17/+20
* Use the TLSv1.3 record header as AADMatt Caswell2018-03-144-13/+47
* update SRP copyright noticeTim Hudson2018-03-131-1/+5
* Fix enable-ssl-traceMatt Caswell2018-03-121-4/+4
* Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cbBenjamin Saunders2018-03-123-6/+31
* Session Ticket app dataTodd Short2018-03-127-66/+144
* Reuse extension_is_relevant() in should_add_extension()Benjamin Kaduk2018-03-091-10/+12
* Add SSL/SSL_CTX_use_cert_and_key()Todd Short2018-03-092-0/+118
* Give more information in the SSL_stateless return codeMatt Caswell2018-03-093-3/+13
* Fallback on old style PSK callbacks if the new style ones aren't presentMatt Caswell2018-03-092-2/+107
* Tolerate TLSv1.3 PSKs that are a different size to the hash sizeMatt Caswell2018-03-091-8/+4
* Duplicate entries ssl_handshake_tbl trace entries...FdaSilvaYY2018-03-081-13/+17
* If not sending key_share (no TLSv1.3), return appropriately.Todd Short2018-03-051-2/+3
* Fix status_request and SCT extensionsMatt Caswell2018-03-052-2/+14
* Add X448/Ed448 support to libsslMatt Caswell2018-03-055-3/+22
* Do not set a nonzero default max_early_dataBenjamin Kaduk2018-02-281-3/+15
* Tell the ciphers which DRBG to use for generating random bytes.Kurt Roeckx2018-02-284-0/+4
* Export keying material using early exporter master secretTatsuhiro Tsujikawa2018-02-265-0/+104
* Remove OSSLzu, and fix the one place that used it.Rich Salz2018-02-231-1/+1
* Remove unreachable statement.Pauli2018-02-231-1/+0
* Sanity check the ticket length before using key name/IVMatt Caswell2018-02-211-6/+12
* The record version for ClientHello2 should be TLS1.2Matt Caswell2018-02-191-1/+3
* If s->ctx is NULL then this is an internal errorMatt Caswell2018-02-151-3/+8
* Ignore an s_client psk in TLSv1.3 if not TLSv1.3 suitableMatt Caswell2018-02-141-1/+1