summaryrefslogtreecommitdiffstats
path: root/ssl/s3_clnt.c
AgeCommit message (Expand)Author
2017-12-08Standardize syntax around sizeof(foo)Rich Salz
2017-02-09Fix issue #2113:Bernd Edlinger
2017-02-06Combined patch for the more or less obvious issuesBernd Edlinger
2017-01-26Better check of DH parameters in TLS dataRichard Levitte
2016-09-22Avoid KCI attack for GOSTDmitry Belyavsky
2016-09-21Fix small OOB reads.Dr. Stephen Henson
2016-08-19Fix NULL-return checks in 1.0.2Rich Salz
2016-04-07Fix memory leak on invalid CertificateRequest.David Benjamin
2016-01-11Change minimum DH size from 768 to 1024Kurt Roeckx
2015-12-27Fix error when server does not send CertificateStatus messageMatt Caswell
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell
2015-11-09Fix missing malloc return value checksMatt Caswell
2015-11-08Reject TLS 1.2 ciphersuites if not allowed.Dr. Stephen Henson
2015-10-23Remove useless codeAlessandro Ghedini
2015-10-23Fix memory leaks and other mistakes on errorsAlessandro Ghedini
2015-09-28RT2772: accept empty SessionTicketEmilia Kasper
2015-08-11Fix seg fault with 0 p val in SKEGuy Leaver (guleaver)
2015-07-02Fix PSK handling.Dr. Stephen Henson
2015-06-11Only allow a temporary rsa key exchange when they key is larger than 512.Kurt Roeckx
2015-06-11Properly check certificate in case of export ciphers.Kurt Roeckx
2015-06-04Remove misleading commentMatt Caswell
2015-06-04Fix DTLS session resumptionMatt Caswell
2015-06-02Fix race condition in NewSessionTicketMatt Caswell
2015-05-20Correctly check for export size limitKurt Roeckx
2015-05-20client: reject handshakes with DH parameters < 768 bits.Emilia Kasper
2015-05-05Add more error state transitions (client)Matt Caswell
2015-04-21Repair EAP-FAST session resumptionEmilia Kasper
2015-04-16Code style: space after 'if'Viktor Dukhovni
2015-03-25Fix RAND_(pseudo_)?_bytes returnsMatt Caswell
2015-03-10Prevent handshake with unseeded PRNGMatt Caswell
2015-01-22Re-align some comments after running the reformat script.OpenSSL_1_0_2-post-reformatMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22Fix source where indent will not be able to copeMatt Caswell
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2015-01-07fix error discrepancyDr. Stephen Henson
2015-01-06Only allow ephemeral RSA keys in export ciphersuites.Dr. Stephen Henson
2015-01-05ECDH downgrade bug fix.Dr. Stephen Henson
2014-12-17Clear warnings/errors within KSSL_DEBUG code sectionsRichard Levitte
2014-12-16Check return value of ssl3_output_cert_chainDr. Stephen Henson
2014-12-16Don't set client_version to the ServerHello version.Adam Langley
2014-11-20Ensure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is resetEmilia Kasper
2014-11-20Always require an advertised NewSessionTicket message.Emilia Kasper
2014-11-20Remove ssl3_check_finished.Emilia Kasper
2014-11-20Set s->hit when resuming from external pre-shared secret.Emilia Kasper
2014-11-20Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext.Emilia Kasper
2014-11-19New option no-ssl3-method which removes SSLv3_*methodDr. Stephen Henson
2014-10-28Tighten session ticket handlingEmilia Kasper
2014-10-24Process signature algorithms in ClientHello late.Dr. Stephen Henson
2014-09-22Fixed error introduced in commit f2be92b94dad3c6cbdf79d99a324804094cf1617Tim Hudson
2014-09-05psk_client_callback, 128-byte id bug.Adam Langley