summaryrefslogtreecommitdiffstats
path: root/ssl/s3_enc.c
AgeCommit message (Expand)Author
2015-03-23Fix missing return value checksMatt Caswell
2015-03-11Cleanse buffersMatt Caswell
2015-01-22More comment realignmentmaster-post-reformatMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22Fix source where indent will not be able to copeMatt Caswell
2015-01-22More commentsMatt Caswell
2014-12-10ssl3_digest_cached_records: check for NULL after allocating s->s3->handshake_...Jonas Maebe
2014-12-08Remove some unnecessary OPENSSL_FIPS referencesDr. Stephen Henson
2014-12-04Remove SSLv2 supportKurt Roeckx
2014-11-27Add checks to the return value of EVP_Cipher to prevent silent encryption fai...Matt Caswell
2014-10-15Support TLS_FALLBACK_SCSV.Bodo Moeller
2014-08-18RT1815: More const'ness improvementsJustin Blanchard
2014-06-13Fixed incorrect return code handling in ssl3_final_finish_mac.Matt Caswell
2014-06-13Revert "Fixed incorrect return code handling in ssl3_final_finish_mac"Matt Caswell
2014-06-10Fixed incorrect return code handling in ssl3_final_finish_macMatt Caswell
2013-09-08Experimental encrypt-then-mac support.Dr. Stephen Henson
2013-09-05misspellings fixes by https://github.com/vlajos/misspell_fixerVeres Lajos
2013-02-08ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV".Andy Polyakov
2013-02-06ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov
2013-02-06Update DTLS code to match CBC decoding in TLS.Ben Laurie
2013-02-06Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie
2013-02-06Make CBC decoding constant time.Ben Laurie
2012-08-28oops, typoDr. Stephen Henson
2012-08-28New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passesDr. Stephen Henson
2012-01-04Clear bytes used for block padding of SSL 3.0 records. (CVE-2011-4576)Dr. Stephen Henson
2011-05-31set FIPS permitted flag before initalising digestDr. Stephen Henson
2011-05-20PR: 2295Dr. Stephen Henson
2011-05-19Implement FIPS_mode and FIPS_mode_setDr. Stephen Henson
2011-04-29Initial incomplete TLS v1.2 support. New ciphersuites added, new versionDr. Stephen Henson
2010-06-12Fix warnings.Ben Laurie
2009-04-20Updates from 1.0.0-stable branch.Dr. Stephen Henson
2009-04-06Updates from 1.0.0-stableDr. Stephen Henson
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie
2008-12-29Die earlier if hash is NULL. (Coverity IDs 137 & 138).Ben Laurie
2008-12-29Die earlier if we have no hash function.Ben Laurie
2008-12-27Handle the unlikely event that BIO_get_mem_data() returns -ve.Ben Laurie
2007-09-07Fix warnings: computed value not use, incompatible pointer initializationDr. Stephen Henson
2007-08-31Update ssl code to support digests other than MD5+SHA1 in handshake.Dr. Stephen Henson
2007-06-04Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.Dr. Stephen Henson
2007-02-17Reorganize the data used for SSL ciphersuite pattern matching.Bodo Möller
2007-02-16ensure that the EVP_CIPHER_CTX object is initializedNils Larsch
2006-03-10add initial support for RFC 4279 PSK SSL ciphersuitesNils Larsch
2006-01-07prepare for additional RFC3546 alertsBodo Möller
2006-01-07make sure that the unrecognized_name alert actually gets sentBodo Möller
2005-10-01Fix compilation without OPENSSL_NO_COMP :-)Dr. Stephen Henson
2005-09-30Make OPENSSL_NO_COMP compile again.Dr. Stephen Henson
2005-04-26Add DTLS support.Ben Laurie
2003-11-04Avoid some shadowed variable names.Geoff Thorpe
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe
2003-02-12commentsBodo Möller