summaryrefslogtreecommitdiffstats
path: root/ssl/s3_lib.c
AgeCommit message (Expand)Author
2016-08-24SWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUMRich Salz
2016-03-07Remove LOW from the defaultKurt Roeckx
2016-03-01Disable EXPORT and LOW SSLv3+ ciphers by defaultViktor Dukhovni
2016-01-28Always generate DH keys for ephemeral DH cipher suitesMatt Caswell
2016-01-16Empty SNI names are not validViktor Dukhovni
2015-11-24ssl3_free(): Return if it wasn't createdPascal Cuoq
2015-01-22Rerun util/openssl-format-source -v -c .OpenSSL_1_0_1-post-auto-reformatMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2014-12-17Clear warnings/errors within KSSL_DEBUG code sectionsRichard Levitte
2014-12-17Clear warnings/errors within CIPHER_DEBUG code sectionsRichard Levitte
2014-12-16Add OPENSSL_NO_ECDH guardsMatt Caswell
2014-10-15Support TLS_FALLBACK_SCSV.Bodo Moeller
2014-08-12Fix SRP ciphersuites.Dr. Stephen Henson
2014-06-09SRP ciphersuite correction.Dr. Stephen Henson
2014-06-09Update strength_bits for 3DES.Dr. Stephen Henson
2013-12-19Use version in SSL_METHOD not SSL structure.Dr. Stephen Henson
2013-11-06Enable PSK in FIPS mode.Dr. Stephen Henson
2013-09-16Tidy up comments.Rob Stradling
2013-09-16Fix compilation with no-ec and/or no-tlsext.Rob Stradling
2013-09-16Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling
2012-05-10PR: 2806Dr. Stephen Henson
2012-04-17Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller
2012-02-10PR: 2704Dr. Stephen Henson
2011-12-31PR: 2658Dr. Stephen Henson
2011-12-22New ctrl values to clear or retrieve extra chain certs from an SSL_CTX.Dr. Stephen Henson
2011-12-14PR: 1794Dr. Stephen Henson
2011-12-13SSL export fixes (from Adam Langley).Ben Laurie
2011-11-15Add TLS exporter.Ben Laurie
2011-11-13Add Next Protocol Negotiation.Ben Laurie
2011-10-13In ssl3_clear, preserve s3->init_extra along with s3->rbuf.Bodo Möller
2011-09-05(EC)DH memory handling fixes.Bodo Möller
2011-08-04Backport GCM support from HEAD.Dr. Stephen Henson
2011-07-25Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support andDr. Stephen Henson
2011-06-06Set SSL_FIPS flag in ECC ciphersuites.Dr. Stephen Henson
2011-05-25use TLS1_get_version macro to check version so TLS v1.2 changes don't interfe...Dr. Stephen Henson
2011-05-11Backport TLS v1.2 support from HEAD.Dr. Stephen Henson
2011-03-16Add SRP.Ben Laurie
2010-08-26Patch from PR #1833 was broken: there's no s->s3->new_sessionBodo Möller
2010-08-26PR: 1833Dr. Stephen Henson
2009-10-16PR: 2072Dr. Stephen Henson
2009-05-28Submitted by: Artem Chuprina <ran@cryptocom.ru>Dr. Stephen Henson
2009-04-23Some no-ec fixes (not complete yet).Dr. Stephen Henson
2009-04-07Update from 0.9.8-stable.Dr. Stephen Henson
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie
2008-10-22Create function of the form OBJ_bsearch_xxx() in bsearch typesafe macrosDr. Stephen Henson
2008-10-12Type-checked (and modern C compliant) OBJ_bsearch.Ben Laurie
2008-09-10Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a newDr. Stephen Henson
2008-06-03Memory saving patch.Ben Laurie
2008-04-30Update from stable branch.Dr. Stephen Henson
2007-10-261. Changes for s_client.c to make it return non-zero exit code in caseDr. Stephen Henson