summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2014-12-22Small typoRichard Levitte
2014-12-20Fix incorrect OPENSSL_assert() usage.Michael Tuexen
2014-12-19Fix a problem if CFLAGS is too long cversion.c fails to compile when configMatt Caswell
2014-12-18Return error when a bit string indicates an invalid amount of bits leftKurt Roeckx
2014-12-17Reject invalid constructed encodings.Dr. Stephen Henson
2014-12-17Add a comment noting the padding oracle.Emilia Kasper
2014-12-17Revert "RT3425: constant-time evp_enc"Emilia Kasper
2014-12-17Build fixesEmilia Kasper
2014-12-17Clear warnings/errors within RL_DEBUG code sections (RL_DEBUG should be renamed)Richard Levitte
2014-12-17Clear warnings/errors within TLS_DEBUG code sectionsRichard Levitte
2014-12-17Clear warnings/errors within KSSL_DEBUG code sectionsRichard Levitte
2014-12-17Clear warnings/errors within CIPHER_DEBUG code sectionsRichard Levitte
2014-12-17Clear warnings/errors within CIPHER_DEBUG code sectionsRichard Levitte
2014-12-17Clear warnings/errors within BN_CTX_DEBUG code sectionsRichard Levitte
2014-12-17Premaster secret handling fixesAdam Langley
2014-12-17Backport regression testBodo Möller
2014-12-17Check for invalid divisors in BN_div.Emilia Kasper
2014-12-16Check return value of ssl3_output_cert_chainDr. Stephen Henson
2014-12-16The dtls1_output_cert_chain function no longer exists so remove it fromMatt Caswell
2014-12-16Don't set client_version to the ServerHello version.Adam Langley
2014-12-16Add more meaningful OPENSSL_NO_ECDH error message for suite b modeMatt Caswell
2014-12-16Add OPENSSL_NO_ECDH guardsMatt Caswell
2014-12-16Remove extraneous white space, and add some bracesMatt Caswell
2014-12-16DTLS fixes for signed/unsigned issuesMatt Caswell
2014-12-15Fix unused variable warningEmilia Kasper
2014-12-13Fix memory leak in s2_srvr.c if BUF_MEM_grow failsMatt Caswell
2014-12-13Fixed memory leak if BUF_MEM_grow failsMatt Caswell
2014-12-08Fixed memory leak in the event of a failure of BUF_MEM_growMatt Caswell
2014-12-08Fix memory leak in SSL_new if errors occur.Matt Caswell
2014-12-05Clarify the return values for SSL_get_shared_curve.Emilia Kasper
2014-12-05Add extra checks for odd-length EC curve lists.Emilia Kasper
2014-12-05Make 'make update' succeed and run itEmilia Kasper
2014-12-05Reject elliptic curve lists of odd lengths.Emilia Kasper
2014-12-04s_client and s_server take -verify_{host,email,ip}, not -check*Richard Levitte
2014-12-04Remove incorrect code inadvertently introduced through commit 59669b6ab.Matt Caswell
2014-12-03Remove "#if 0" codeMatt Caswell
2014-12-03Only use the fallback mtu after 2 unsuccessful retransmissions if it is lessMatt Caswell
2014-12-03Updates to s_client and s_server to remove the constant 28 (for IPv4 headerMatt Caswell
2014-12-03If we really get a situation where the underlying mtu is less than the minimumMatt Caswell
2014-12-03Fix dtls_query_mtu so that it will always either complete with an mtu that isMatt Caswell
2014-12-03Remove instances in libssl of the constant 28 (for size of IPv4 header + UDP)Matt Caswell
2014-12-03There are a number of instances throughout the code where the constant 28 isMatt Caswell
2014-12-03The first call to query the mtu in dtls1_do_write correctly checks that theMatt Caswell
2014-12-03The SSL_OP_NO_QUERY_MTU option is supposed to stop the mtu from beingMatt Caswell
2014-12-03Verify that we have a sensible message len and fail if notMatt Caswell
2014-12-02Use the SSLv23 method by defaultKurt Roeckx
2014-11-28Check for FindNextFile when defining it rather than FindFirstFileRichard Levitte
2014-11-28[PR3597] Advance to the next state variant when reusing messages.Richard Levitte
2014-11-28Correct some layout issues, convert all remaining tabs to appropriate amounts...Richard Levitte
2014-11-28Improves the proxy certificates howto doc.Alok Menghrajani