summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2016-01-28Prepare for 1.0.2f releaseOpenSSL_1_0_2fMatt Caswell
2016-01-28Update CHANGES and NEWS for releaseMatt Caswell
2016-01-28Add a test for small subgroup attacks on DH/DHEMatt Caswell
2016-01-28Always generate DH keys for ephemeral DH cipher suitesMatt Caswell
2016-01-28Prevent small subgroup attacks on DH/DHEMatt Caswell
2016-01-28Better SSLv2 cipher-suite enforcementViktor Dukhovni
2016-01-22pkeyutl: allow peerkey for EC_DERIVE to reside on a hardware token (public ke...Mouse
2016-01-21RT3863 ECC: Add missing NULL check. Set a flagBilly Brumley
2016-01-20GH issue 572: Error in help messageRich Salz
2016-01-20Handle SSL_shutdown while in init more appropriatelyMatt Caswell
2016-01-19Fix BSD -rpath parameterRichard Levitte
2016-01-19Validate ClientHello session_id field length and send alert on failureAlessandro Ghedini
2016-01-19Update license year range to 2016Prayag Verma
2016-01-18Don't use "grep -q", "-q" is not POSIX, and fails on Solaris.Kristian Amlie
2016-01-17Empty SNI names are not validViktor Dukhovni
2016-01-15NGX-2040 - fix wildcard match on punycode/IDNA DNS namesZi Lin
2016-01-14To avoid possible time_t overflow use X509_time_adj_ex()Dr. Stephen Henson
2016-01-13Root cause discovered and fixed, this fix became unnecessaryMouse
2016-01-13Changed help outputUri Blumenthal
2016-01-13Pass engine=NULL to EVP_PKEY_CTX_new(), unless "-engine_impl" was givenMouse
2016-01-13Remove unnecessary debugging fprintfMouse
2016-01-13Fixed crash (SIGSEGV) when freeing of ex_data stumbles upon a NULL-pointer.Mouse
2016-01-13Fixed a bug preventing pkeyutl from accessing keys directly on the token via ...Mouse
2016-01-12Wrong definition of the macro SSL_set1_sigalgs in ssl.harijitnayak
2016-01-11Change minimum DH size from 768 to 1024Kurt Roeckx
2016-01-10File is about s_time, not s_clientKurt Roeckx
2016-01-02Fix X509_STORE_CTX_cleanup()Viktor Dukhovni
2015-12-28RT4202: Update rt URL's.Rich Salz
2015-12-27Add some documentation for the OCSP callback functionsMatt Caswell
2015-12-27Ensure we don't call the OCSP callback if resuming a sessionMatt Caswell
2015-12-27Fix error when server does not send CertificateStatus messageMatt Caswell
2015-12-23The functions take a SSL *, not a SSL_CTX *Daniel Kahn Gillmor
2015-12-22Fix memory leak in DSA redo case.David Benjamin
2015-12-20Don't check RSA_FLAG_SIGN_VER.Dr. Stephen Henson
2015-12-19BIO_s_datagram() ctrl doesn't support SEEK/TELL, so don't pretend it doesRichard Levitte
2015-12-19Correct or add comments indicating what controls belong to whatRichard Levitte
2015-12-19Document how BIO_get_conn_ip and BIO_get_conn_int_port actually workRichard Levitte
2015-12-19Have BIO_get_conn_int_port use BIO_ctrl instead BIO_int_ctrlRichard Levitte
2015-12-19Fix more URLs mangled by reformatMatt Caswell
2015-12-19Fix URLs mangled by reformatMatt Caswell
2015-12-18Remove the "eay" c-file-style indicatorsRichard Levitte
2015-12-16Provide better "make depend" warning.Rich Salz
2015-12-14Fix a ** 0 mod 1 = 0 for real this time.Emilia Kasper
2015-12-14Fix tarball production to keep test/bctest and util/pod2mantestRichard Levitte
2015-12-13x86_64 assembly pack: tune clang version detection even further.Andy Polyakov
2015-12-10ec/ecp_nistz256_table.c: fix potential misalignment problem with Sun C.Andy Polyakov
2015-12-10Ensure |rwstate| is set correctly on BIO_flushMatt Caswell
2015-12-10Fix DTLS handshake fragment retriesMatt Caswell
2015-12-10Add a return value checkMatt Caswell
2015-12-09Don't use applink for static builds.Dr Stephen Henson