summaryrefslogtreecommitdiffstats
path: root/CHANGES
AgeCommit message (Expand)Author
2012-12-19correct CHANGESDr. Stephen Henson
2012-12-11Make openssl verify return errors.Ben Laurie
2012-12-07Fix OCSP checking.Ben Laurie
2012-12-06Add code to download CRLs based on CRLDP extension.Dr. Stephen Henson
2012-12-05Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-04initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson
2012-12-02New option to add CRLs for s_client and s_server.Dr. Stephen Henson
2012-11-28Generalise OCSP I/O functions to support dowloading of other ASN1Dr. Stephen Henson
2012-11-27New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson
2012-11-22Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-11-19new function ASN1_TIME_diff to calculate difference between two ASN1_TIME str...Dr. Stephen Henson
2012-11-18PR: 2909Dr. Stephen Henson
2012-11-16add SSL_CONF functions and documentationDr. Stephen Henson
2012-10-08New functions to check a hostname email or IP address against aDr. Stephen Henson
2012-09-19config: detect linux-mips* targets.Andy Polyakov
2012-09-14Add -rev test option to s_server to just reverse order of characters receivedDr. Stephen Henson
2012-09-12Add -brief option to s_client and s_server to summarise connection details.Dr. Stephen Henson
2012-09-12Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-09-11Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson
2012-09-11Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie
2012-08-29Harmonize CHANGES in HEAD.Andy Polyakov
2012-08-15Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-08-03add suite B chain validation flags and associated verify errorsDr. Stephen Henson
2012-07-27Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-07-24Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson
2012-07-24check EC tmp key matches preferencesDr. Stephen Henson
2012-07-23Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-07-18New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson
2012-07-08Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-07-03Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-06-29Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-06-28Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-06-25Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-06-22Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-06-18Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson
2012-06-15Initial record tracing code. Print out all fields in SSL/TLS recordsDr. Stephen Henson
2012-06-13New functions to retrieve certificate signatures and signature OID NID.Dr. Stephen Henson
2012-06-12print out issuer and subject unique identifier fields in certificatesDr. Stephen Henson
2012-05-30RFC 5878 support.Ben Laurie
2012-05-11PR: 2813Dr. Stephen Henson
2012-05-11PR: 2811Dr. Stephen Henson
2012-05-10Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 andDr. Stephen Henson
2012-05-10Reported by: Solar Designer of OpenwallDr. Stephen Henson
2012-04-26Don't try to use unvalidated composite ciphers in FIPS modeDr. Stephen Henson
2012-04-26CHANGES: clarify.Andy Polyakov
2012-04-26CHANGES: fix typos and clarify.Andy Polyakov
2012-04-25Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL andDr. Stephen Henson
2012-04-25s23_clnt.c: ensure interoperability by maitaining client "version capability"Andy Polyakov
2012-04-19Check for potentially exploitable overflows in asn1_d2i_read_bioDr. Stephen Henson
2012-04-17Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-06 08:31:49 +0000