summaryrefslogtreecommitdiffstats
path: root/CHANGES
AgeCommit message (Expand)Author
2013-01-18Add code to download CRLs based on CRLDP extension.Dr. Stephen Henson
2013-01-18New option to add CRLs for s_client and s_server.Dr. Stephen Henson
2013-01-17initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson
2013-01-17New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson
2013-01-16print out issuer and subject unique identifier fields in certificatesDr. Stephen Henson
2013-01-15Generalise OCSP I/O functions to support dowloading of other ASN1Dr. Stephen Henson
2012-12-29Delegate command line handling for many common options in s_client/s_server toDr. Stephen Henson
2012-12-29add SSL_CONF functions and documentation (backport from HEAD)Dr. Stephen Henson
2012-12-26SSL/TLS record tracing code (backport from HEAD).Dr. Stephen Henson
2012-12-26Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-12-26Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26add suite B chain validation flags and associated verify errorsDr. Stephen Henson
2012-12-26Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-12-26Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson
2012-12-26check EC tmp key matches preferencesDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26New functions to retrieve certificate signatures and signature OID NID.Dr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-12-26Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson
2012-12-19Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-19Backport X509 hostname, IP address and email checking code from HEAD.Dr. Stephen Henson
2012-12-14Backport OCSP fixes.Ben Laurie
2012-12-13Make verify return errors.Ben Laurie
2012-09-26add -trusted_first option and verify flag (backport from HEAD)Dr. Stephen Henson
2012-09-19MIPS assembly pack: jumbo update from HEAD.Andy Polyakov
2012-09-11Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson
2012-09-11Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie
2012-08-29Add linux-x32 target [from HEAD].Andy Polyakov
2012-05-29Missing from previous commit.Ben Laurie
2012-05-13Experimental multi-implementation support for FIPS capable OpenSSL.Dr. Stephen Henson
2012-05-11PR: 2813Dr. Stephen Henson
2012-05-11PR: 2811Dr. Stephen Henson
2012-05-10Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 andDr. Stephen Henson
2012-05-10Reported by: Solar Designer of OpenwallDr. Stephen Henson
2012-04-26Don't try to use unvalidated composite ciphers in FIPS modeDr. Stephen Henson
2012-04-26CHANGES: clarify.Andy Polyakov
2012-04-26CHANGES: fix typos and clarify.Andy Polyakov
2012-04-25Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL andDr. Stephen Henson
2012-04-25s23_clnt.c: ensure interoperability by maitaining client "version capability"Andy Polyakov
2012-04-19update dateDr. Stephen Henson
2012-04-19Check for potentially exploitable overflows in asn1_d2i_read_bioDr. Stephen Henson
2012-04-17Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller
2012-04-17Additional workaround for PR#2771Dr. Stephen Henson
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-26 17:25:56 +0000