summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2016-09-07Avoid EVP_PKEY_cmp() crash on EC keys without public componentDavid Woodhouse
2016-09-06Misc BN fixesRich Salz
2016-08-31crypto/bn/*: x86[_64] division instruction doesn't handle constants, change c...Andy Polyakov
2016-08-30Ensure the CertStatus message adds a DTLS message header where neededMatt Caswell
2016-08-26SRP_create_verifier does not check for NULL before OPENSSL_cleanseMatt Caswell
2016-08-26Improve the definition of STITCHED_CALL in e_rc4_hmac_md5.cRichard Levitte
2016-08-26Fix a few leaks in X509_REQ_to_X509.FdaSilvaYY
2016-08-26Add basic test for Cisco DTLS1_BAD_VER and record replay handlingDavid Woodhouse
2016-08-26Fix ubsan 'left shift of negative value -1' error in satsub64be()David Woodhouse
2016-08-26Fix SSL_export_keying_material() for DTLS1_BAD_VERDavid Woodhouse
2016-08-26Fix the no-tls1 optionMatt Caswell
2016-08-26ec/asm/ecp_nistz256-x86_64.pl: /cmovb/cmovc/ as nasm doesn't recognize cmovb.Andy Polyakov
2016-08-26ec/ecp_nistz256: harmonize is_infinity with ec_GFp_simple_is_at_infinity.Andy Polyakov
2016-08-26ec/asm/ecp_nistz256-x86_64.pl: addition to perform stricter reduction.Andy Polyakov
2016-08-26Always use session_ctx when removing a sessionTodd Short
2016-08-24Avoid overflow in MDC2_Update()Dr. Stephen Henson
2016-08-24SWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUMRich Salz
2016-08-24Fix no-ecMatt Caswell
2016-08-23Sanity check ticket length.Dr. Stephen Henson
2016-08-23mk1mf: dtlstest needs ssltestlib, include it with a hackRichard Levitte
2016-08-22Don't check for malloc failure twice.David Benjamin
2016-08-22Fix overflow check in BN_bn2dec()Kazuki Yamaguchi
2016-08-22RT2676: Reject RSA eponent if even or 1Rich Salz
2016-08-22VMS: Use strict refdef extern model when building library object filesRichard Levitte
2016-08-22GOST: rearrange code so it's more like C rather than C++Richard Levitte
2016-08-22Make 'openssl req -x509' more equivalent to 'openssl req -new'Richard Levitte
2016-08-22bn/asm/x86[_64]-mont*.pl: implement slightly alternative page-walking.Andy Polyakov
2016-08-22ssltestlib: Tell compiler we don't care about the value when we don'tRichard Levitte
2016-08-22Prevent DTLS Finished message injectionMatt Caswell
2016-08-22Fix DTLS buffered message DoS attackMatt Caswell
2016-08-22Silence some "maybe used uninitialised" warningsMatt Caswell
2016-08-21ec/ecp_nistz256.c: get is_one on 32-bit platforms right.Andy Polyakov
2016-08-21Fix pointer/alloc prob from previous commitRich Salz
2016-08-21Fix incorrect return argument.Rich Salz
2016-08-20Fix off by 1 in ASN1_STRING_set()Kurt Roeckx
2016-08-19RT3940: For now, just document the issue.Rich Salz
2016-08-19Fix NULL-return checks in 1.0.2Rich Salz
2016-08-19Have dtlstest run on VMS as wellRichard Levitte
2016-08-19Update function error codeMatt Caswell
2016-08-19Fix DTLS replay protectionMatt Caswell
2016-08-19Add DTLS replay protection testMatt Caswell
2016-08-19Fix DTLS unprocessed records bugMatt Caswell
2016-08-19Add a DTLS unprocesed records testMatt Caswell
2016-08-19Back port ssltestlib code to 1.0.2Matt Caswell
2016-08-19VSI submission: RAND fixupsRichard Levitte
2016-08-19VSI submission: make better use of item lists in o_time.cRichard Levitte
2016-08-19VSI submission: avoid pointer size warnings in mem.cRichard Levitte
2016-08-19evp_test.c: avoid warning from having a pointer difference returned as intRichard Levitte
2016-08-18VMS: synchronise tests with UnixRichard Levitte
2016-08-16make update to have PEM_R_HEADER_TOO_LONG definedRichard Levitte