summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2014-12-08Remove fipscanister build functionality from makefiles.Dr. Stephen Henson
2014-12-08Remove fipscanister from Configure, delete fips directoryDr. Stephen Henson
2014-12-08Remove some unnecessary OPENSSL_FIPS referencesDr. Stephen Henson
2014-12-08Add CHANGES entry for OCBMatt Caswell
2014-12-08Added OPENSSL_NO_OCB guardsMatt Caswell
2014-12-08Add documentation for OCB modeMatt Caswell
2014-12-08Add tests for OCB modeMatt Caswell
2014-12-08Add EVP support for OCB modeMatt Caswell
2014-12-08Add support for OCB mode as per RFC7253Matt Caswell
2014-12-05Clarify the return values for SSL_get_shared_curve.Emilia Kasper
2014-12-05Add extra checks for odd-length EC curve lists.Emilia Kasper
2014-12-05Reject elliptic curve lists of odd lengths.Emilia Kasper
2014-12-05Fix broken buildEmilia Kasper
2014-12-04Replace GOST_R_MALLOC_FAILURE and GOST_R_NO_MEMORY with ERR_R_MALLOC_FAILUREKurt Roeckx
2014-12-04capi_get_provname: Check return valuesKurt Roeckx
2014-12-04ssl_create_cipher_list: check whether push onto cipherstack succeedsJonas Maebe
2014-12-04ssl_cert_dup: Fix memory leakJonas Maebe
2014-12-04dtls1_new: free s on error pathKurt Roeckx
2014-12-04dtls1_heartbeat: check for NULL after allocating s->cert->ctypesJonas Maebe
2014-12-04dtls1_process_heartbeat: check for NULL after allocating bufferJonas Maebe
2014-12-04capi_get_key: check for NULL after allocating keyJonas Maebe
2014-12-04capi_cert_get_fname: check for NULL after allocating wfnameJonas Maebe
2014-12-04capi_get_provname: free name on error if it was malloc'edJonas Maebe
2014-12-04pkey_gost_mac_keygen: check for NULL after allocating keydataJonas Maebe
2014-12-04pkey_gost_ctrl: check for NULL after allocating pctx->shared_ukmJonas Maebe
2014-12-04Update changes to indicate that SSLv2 support has been removedKurt Roeckx
2014-12-04Remove incorrect code inadvertently introduced through commit 59669b6ab.Matt Caswell
2014-12-04Remove SSLv2 supportKurt Roeckx
2014-12-03New location on website for binaries.Rich Salz
2014-12-03Remove "#if 0" codeMatt Caswell
2014-12-03Only use the fallback mtu after 2 unsuccessful retransmissions if it is lessMatt Caswell
2014-12-03Updates to s_client and s_server to remove the constant 28 (for IPv4 headerMatt Caswell
2014-12-03If we really get a situation where the underlying mtu is less than the minimumMatt Caswell
2014-12-03Fix dtls_query_mtu so that it will always either complete with an mtu that isMatt Caswell
2014-12-03Remove instances in libssl of the constant 28 (for size of IPv4 header + UDP)Matt Caswell
2014-12-03There are a number of instances throughout the code where the constant 28 isMatt Caswell
2014-12-03The first call to query the mtu in dtls1_do_write correctly checks that theMatt Caswell
2014-12-03The SSL_OP_NO_QUERY_MTU option is supposed to stop the mtu from beingMatt Caswell
2014-12-03Verify that we have a sensible message len and fail if notMatt Caswell
2014-12-02Use the SSLv23 method by defaultKurt Roeckx
2014-11-28Remove all .cvsignore filesRich Salz
2014-11-28Check for FindNextFile when defining it rather than FindFirstFileRichard Levitte
2014-11-28[PR3597] Advance to the next state variant when reusing messages.Richard Levitte
2014-11-28Correct some layout issues, convert all remaining tabs to appropriate amounts...Richard Levitte
2014-11-28Improves the proxy certificates howto doc.Alok Menghrajani
2014-11-27Fix warning in ssl2_encMatt Caswell
2014-11-27Remove more references to dtls1_encMatt Caswell
2014-11-27Check EVP_Cipher return values for SSL2Matt Caswell
2014-11-27Delete unused fileMatt Caswell
2014-11-27Add checks to the return value of EVP_Cipher to prevent silent encryption fai...Matt Caswell