summaryrefslogtreecommitdiffstats
path: root/ssl/s3_clnt.c
AgeCommit message (Expand)Author
2015-09-28RT2772: accept empty SessionTicketEmilia Kasper
2015-08-11Fix seg fault with 0 p val in SKEGuy Leaver (guleaver)
2015-07-02Fix PSK handling.Dr. Stephen Henson
2015-06-11Only allow a temporary rsa key exchange when they key is larger than 512.Kurt Roeckx
2015-06-11Properly check certificate in case of export ciphers.Kurt Roeckx
2015-06-04Remove misleading commentMatt Caswell
2015-06-02Fix race condition in NewSessionTicketMatt Caswell
2015-05-20Correctly check for export size limitKurt Roeckx
2015-05-20client: reject handshakes with DH parameters < 768 bits.Emilia Kasper
2015-05-05Add more error state transitions (client)Matt Caswell
2015-04-21Repair EAP-FAST session resumptionEmilia Kasper
2015-04-16Code style: space after 'if'Viktor Dukhovni
2015-03-25Fix RAND_(pseudo_)?_bytes returnsMatt Caswell
2015-01-22Re-align some comments after running the reformat script.OpenSSL_1_0_1-post-reformatMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22Fix source where indent will not be able to copeMatt Caswell
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2015-01-07fix error discrepancyDr. Stephen Henson
2015-01-06Only allow ephemeral RSA keys in export ciphersuites.Dr. Stephen Henson
2015-01-05ECDH downgrade bug fix.Dr. Stephen Henson
2014-12-17Clear warnings/errors within KSSL_DEBUG code sectionsRichard Levitte
2014-12-15Check return value of ssl3_output_cert_chainMatt Caswell
2014-11-20Ensure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is resetEmilia Kasper
2014-11-20Always require an advertised NewSessionTicket message.Emilia Kasper
2014-11-20Remove ssl3_check_finished.Emilia Kasper
2014-11-20Set s->hit when resuming from external pre-shared secret.Emilia Kasper
2014-11-20Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext.Emilia Kasper
2014-11-19New option no-ssl3-method which removes SSLv3_*methodDr. Stephen Henson
2014-10-28Tighten session ticket handlingEmilia Kasper
2014-09-22Fixed error introduced in commit f2be92b94dad3c6cbdf79d99a324804094cf1617Tim Hudson
2014-09-05psk_client_callback, 128-byte id bug.Adam Langley
2014-08-15Fixed out-of-bounds read errors in ssl3_get_key_exchange.Matt Caswell
2014-08-09Fix SRP authentication ciphersuites.Dr. Stephen Henson
2014-08-06Check SRP parameters early.Dr. Stephen Henson
2014-08-06Fix SRP ciphersuite DoS vulnerability.Dr. Stephen Henson
2014-08-06Fix DTLS anonymous EC(DH) denial of serviceEmilia Käsper
2014-06-14Accept CCS after sending finished.Dr. Stephen Henson
2014-06-07Make tls_session_secret_cb work with CVE-2014-0224 fix.Dr. Stephen Henson
2014-06-05Fix CVE-2014-3470Dr. Stephen Henson
2014-06-05Fix for CVE-2014-0224Dr. Stephen Henson
2013-10-09Refactor {client,server}_random to call an intermediate functionNick Mathewson
2013-09-16Do not include a timestamp in the ClientHello Random field.Nick Mathewson
2013-02-09ssl/s3_[clnt|srvr].c: fix warnings.Andy Polyakov
2012-06-08Reduce version skew.Ben Laurie
2012-04-17Additional workaround for PR#2771Dr. Stephen Henson
2012-02-09Modify client hello version when renegotiating to enhance interop withDr. Stephen Henson
2011-12-31PR: 2658Dr. Stephen Henson
2011-12-26PR: 2326Dr. Stephen Henson
2011-11-25PR: 1794Dr. Stephen Henson
2011-11-24Don't send NPN during renegotiation.Ben Laurie