summaryrefslogtreecommitdiffstats
path: root/CHANGES
AgeCommit message (Expand)Author
2013-09-18Add functions to set ECDSA_METHOD structure.Dr. Stephen Henson
2013-09-17Merge branch 'OpenSSL_1_0_2-stable' of openssl.net:openssl into OpenSSL_1_0_2...Bodo Moeller
2013-09-17Sync with version from master.Bodo Moeller
2013-09-16Update CHANGES.Rob Stradling
2013-09-16Sync CHANGES and NEWS files.Bodo Moeller
2013-08-19Time difference functions.Dr. Stephen Henson
2013-08-19Add -rev test option to s_server to just reverse order of characters receivedDr. Stephen Henson
2013-08-19Add -brief option to s_client and s_server to summarise connection details.Dr. Stephen Henson
2013-07-03Trying cherrypick:Trevor
2013-01-18Add code to download CRLs based on CRLDP extension.Dr. Stephen Henson
2013-01-18New option to add CRLs for s_client and s_server.Dr. Stephen Henson
2013-01-17initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson
2013-01-17New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson
2013-01-16print out issuer and subject unique identifier fields in certificatesDr. Stephen Henson
2013-01-15Generalise OCSP I/O functions to support dowloading of other ASN1Dr. Stephen Henson
2012-12-29Delegate command line handling for many common options in s_client/s_server toDr. Stephen Henson
2012-12-29add SSL_CONF functions and documentation (backport from HEAD)Dr. Stephen Henson
2012-12-26SSL/TLS record tracing code (backport from HEAD).Dr. Stephen Henson
2012-12-26Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-12-26Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26add suite B chain validation flags and associated verify errorsDr. Stephen Henson
2012-12-26Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-12-26Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson
2012-12-26check EC tmp key matches preferencesDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26New functions to retrieve certificate signatures and signature OID NID.Dr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-12-26Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson
2012-12-19Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-19Backport X509 hostname, IP address and email checking code from HEAD.Dr. Stephen Henson
2012-12-14Backport OCSP fixes.Ben Laurie
2012-12-13Make verify return errors.Ben Laurie
2012-09-26add -trusted_first option and verify flag (backport from HEAD)Dr. Stephen Henson
2012-09-19MIPS assembly pack: jumbo update from HEAD.Andy Polyakov
2012-09-11Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson
2012-09-11Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie
2012-08-29Add linux-x32 target [from HEAD].Andy Polyakov
2012-05-29Missing from previous commit.Ben Laurie
2012-05-13Experimental multi-implementation support for FIPS capable OpenSSL.Dr. Stephen Henson
2012-05-11PR: 2813Dr. Stephen Henson
2012-05-11PR: 2811Dr. Stephen Henson
2012-05-10Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 andDr. Stephen Henson
2012-05-10Reported by: Solar Designer of OpenwallDr. Stephen Henson