summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2015-01-06Only allow ephemeral RSA keys in export ciphersuites.Dr. Stephen Henson
2015-01-05ECDH downgrade bug fix.Dr. Stephen Henson
2015-01-05Fix various certificate fingerprint issues.Dr. Stephen Henson
2015-01-05Update ordinals.Dr. Stephen Henson
2015-01-05Add ASN1_TYPE_cmp and X509_ALGOR_cmp.Dr. Stephen Henson
2015-01-05Return error when a bit string indicates an invalid amount of bits leftKurt Roeckx
2015-01-05Reject invalid constructed encodings.Dr. Stephen Henson
2014-12-17Revert "RT3425: constant-time evp_enc"Emilia Kasper
2014-11-11Fix warning about negative unsigned intergersKurt Roeckx
2014-10-29md32_common.h: address compiler warning in HOST_c2l.Andy Polyakov
2014-10-28Use only unsigned arithmetic in constant-time operationsSamuel Neves
2014-10-21Fix and improve SSL_MODE_SEND_FALLBACK_SCSV documentation.Bodo Moeller
2014-10-21When processing ClientHello.cipher_suites, don't ignore cipher suitesBodo Moeller
2014-10-21Fix warningKurt Roeckx
2014-10-21Keep old method in case of an unsupported protocolKurt Roeckx
2014-10-20no-ssl2 with no-ssl3 does not mean drop the ssl libTim Hudson
2014-10-17Add constant_time_locl.h to HEADERS,Tim Hudson
2014-10-17Include "constant_time_locl.h" rather than "../constant_time_locl.h".Richard Levitte
2014-10-17e_os.h: refine inline override logic (to address warnings in debug build).Andy Polyakov
2014-10-17e_os.h: allow inline functions to be compiled by legacy compilers.Andy Polyakov
2014-10-17RT3547: Add missing static qualifierKurt Cancemi
2014-10-16Don't try 1**0 test with FIPS.Dr. Stephen Henson
2014-10-15Prepare for 0.9.8zd-devMatt Caswell
2014-10-15Prepare for 0.9.8zc releaseOpenSSL_0_9_8zcMatt Caswell
2014-10-15make updateMatt Caswell
2014-10-15Updates to NEWSMatt Caswell
2014-10-15Updates to CHANGES fileMatt Caswell
2014-10-15Fix no-ssl3 configuration optionGeoff Thorpe
2014-10-15Fix for session tickets memory leak.Dr. Stephen Henson
2014-10-15Fix SSL_R naming inconsistency.Bodo Moeller
2014-10-15Add TLS_FALLBACK_SCSV documentation, and move s_client -fallback_scsvBodo Moeller
2014-10-15Oops -- fix typo in coment added with TLS_FALLBACK_SCSV support.Bodo Moeller
2014-10-15Support TLS_FALLBACK_SCSV.Bodo Moeller
2014-09-29Add additional DigestInfo checks.Dr. Stephen Henson
2014-09-25Add missing testsEmilia Kasper
2014-09-24RT3425: constant-time evp_encEmilia Kasper
2014-09-24RT3067: simplify patchEmilia Kasper
2014-09-24This change alters the processing of invalid, RSA pre-master secrets soAdam Langley
2014-09-24RT3066: rewrite RSA padding checks to be slightly more constant time.Emilia Kasper
2014-09-22Fixed error introduced in commit f2be92b94dad3c6cbdf79d99a324804094cf1617Tim Hudson
2014-09-04Ensure that x**0 mod 1 = 0.Adam Langley
2014-09-03Followup on RT3334 fix: make sure that a directory that's the emptyRichard Levitte
2014-09-03RT3334: Fix crypto/LPdir_win.cPhil Mesnier
2014-09-02Make the inline const-time functions static.Emilia Kasper
2014-08-29Fixed double inclusion of string.hMatt Caswell
2014-08-28Constant-time utilitiesEmilia Kasper
2014-08-22RT3060: Limit the number of empty records.Adam Langley
2014-08-21define inline for Visual StudioEmilia Kasper
2014-08-19Add volatile qualifications to two blocks of inline asm to stop GCC fromAdam Langley
2014-08-15Fixed out-of-bounds read errors in ssl3_get_key_exchange.Matt Caswell