summaryrefslogtreecommitdiffstats
path: root/ssl/s2_clnt.c
AgeCommit message (Expand)Author
2014-12-04Remove SSLv2 supportKurt Roeckx
2014-09-08RT2842: Remove spurious close-comment marker.Martin Olsson
2014-03-28Security framework.Dr. Stephen Henson
2013-09-08Experimental encrypt-then-mac support.Dr. Stephen Henson
2013-02-06Add and use a constant-time memcmp.Ben Laurie
2012-05-16s2_clnt.c: compensate for compiler bug.Andy Polyakov
2009-01-07Updatde from stable branch.Dr. Stephen Henson
2007-09-07Change safestack reimplementation to match 0.9.8.Dr. Stephen Henson
2007-06-04Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.Dr. Stephen Henson
2007-04-05Don't use a negative number as a length. Coverity ID 57.Ben Laurie
2006-09-28Fix buffer overflow in SSL_get_shared_ciphers() function.Mark J. Cox
2005-12-05Avoid warnings on VC++ 2005.Dr. Stephen Henson
2005-08-14Let the TLSv1_method() etc. functions return a const SSL_METHODNils Larsch
2005-08-05Initialize SSL_METHOD structures at compile time. This removes the needDr. Stephen Henson
2005-05-11Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabledBodo Möller
2005-04-29check return value of RAND_pseudo_bytes; backport from the stable branchNils Larsch
2004-03-15Constify d2i, s2i, c2i and r2i functions and other associatedRichard Levitte
2003-12-27Avoid including cryptlib.h, it's not really needed.Richard Levitte
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe
2003-01-15Really fix SSLv2 session ID handlingLutz Jänicke
2002-12-29Fix wrong handling of session ID in SSLv2 client code.Lutz Jänicke
2002-12-21Stop a possible memory leak.Richard Levitte
2002-11-15We need to read one more byte of the REQUEST-CERTIFICATE message.Richard Levitte
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie
2002-09-25really fix race conditionsBodo Möller
2002-09-23really fix race conditionBodo Möller
2002-08-02get rid of OpenSSLDieBodo Möller
2002-07-30OpenSSL Security Advisory [30 July 2002]Lutz Jänicke
2002-01-12Prototype info function.Ben Laurie
2001-11-10make code a little more similar to what it looked like before the fixes,Bodo Möller
2001-11-10Implement msg_callback for SSL 2.0.Bodo Möller
2001-10-24Fix SSL handshake functions and SSL_clear() such that SSL_clear()Bodo Möller
2001-10-16Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()Dr. Stephen Henson
2001-07-30Really add the EVP and all of the DES changes.Ben Laurie
2001-03-07Fix ERR_R_... problems.Bodo Möller
2001-02-20Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte
2001-02-09New Option SSL_OP_CIPHER_SERVER_PREFERENCE allows TLS/SSLv3 server to overrideLutz Jänicke
2000-11-29Store verify_result with sessions to avoid potential security hole.Lutz Jänicke
2000-05-27Bugfix: clear error queue after ignoring ssl_verify_cert_chain result.Bodo Möller
2000-02-03ispell (and minor modifications)Ulf Möller
2000-01-24Avoid a race condition.Bodo Möller
2000-01-21Don't "goto err" in client_master_key because no such label exists;Bodo Möller
2000-01-21Check RAND_bytes() return value or use RAND_pseudo_bytes().Ulf Möller
2000-01-16Add missing #ifndefs that caused missing symbols when building libsslUlf Möller
2000-01-13Precautions against using the PRNG uninitialized: RAND_bytes() nowUlf Möller
2000-01-08Make NO_RSA compile with pedantic.Ben Laurie
2000-01-04Rhapsody 5.5 (a.k.a. MacOS X) compiler bug workaround. At the very leastAndy Polyakov
1999-11-16Store verify_result with sessions to avoid potential security hole.Bodo Möller
1999-05-13New structure type SESS_CERT used instead of CERT inside SSL_SESSION.Bodo Möller
1999-05-09No actual change, but the cert_st member of struct ssl_session_st is nowBodo Möller