summaryrefslogtreecommitdiffstats
path: root/ssl/s3_pkt.c
AgeCommit message (Expand)Author
2014-08-22RT 3060: amend patchEmilia Kasper
2014-08-08RT 1505: Use SSL3_AL_FATAL not "2"Matthieu Crapet
2014-07-05s3_pkt.c: fix typo.Andy Polyakov
2014-07-05Reduce casting nastiness.Ben Laurie
2014-06-27Remove redundant check.Ken Ballou
2014-06-22Fixed Windows compilation failureMatt Caswell
2014-06-17Fix signed/unsigned comparisons.Felix Laurie von Massenbach
2014-06-12Added OPENSSL_assert check as per PR#3377 reported by Rainer Jung <rainer.jun...Matt Caswell
2014-06-05Fix for CVE-2014-0224Dr. Stephen Henson
2014-06-05Additional CVE-2014-0224 protection.Dr. Stephen Henson
2014-05-12Fixed NULL pointer dereference. See PR#3321Matt Caswell
2014-05-11Move length check earlier to ensure we don't go beyond the end of the user's ...Matt Caswell
2014-05-11safety check to ensure we dont send out beyond the users bufferTim Hudson
2014-04-23Fix use after free.Ben Laurie
2014-02-14ssl/s3_pkt.c: detect RAND_bytes error in multi-block.Andy Polyakov
2014-02-05Fix warnings.Ben Laurie
2014-02-05ssl/s3_pkt.c: move multi-block processing to ssl3_write_bytes.Andy Polyakov
2014-02-05s3_pkt.c: move ssl3_release_write_buffer to ssl3_write_bytes.Andy Polyakov
2014-01-02Don't change version number if session establishedDr. Stephen Henson
2013-12-18Check EVP errors for handshake digests.Dr. Stephen Henson
2013-10-08ssl/s3_pkt.c: add initial multi-block encrypt.Andy Polyakov
2013-09-08Experimental encrypt-then-mac support.Dr. Stephen Henson
2013-09-05misspellings fixes by https://github.com/vlajos/misspell_fixerVeres Lajos
2013-06-13Limit the number of empty records that will be processed consecutivelyAdam Langley
2013-03-18Use enc_flags when deciding protocol variations.Dr. Stephen Henson
2013-02-26Fix error codes.Dr. Stephen Henson
2013-02-08ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV".Andy Polyakov
2013-02-06ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov
2013-02-06Update DTLS code to match CBC decoding in TLS.Ben Laurie
2013-02-06Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie
2013-02-06Make CBC decoding constant time.Ben Laurie
2013-02-06Add and use a constant-time memcmp.Ben Laurie
2012-12-07send out the raw SSL/TLS headers to the msg_callback and display them in SSL_...Dr. Stephen Henson
2012-05-11PR: 2811Dr. Stephen Henson
2012-04-17Partial workaround for PR#2771.Dr. Stephen Henson
2012-04-15e_aes_cbc_hmac_sha1.c: handle zero-length payload and engage empty fragAndy Polyakov
2011-12-31PR: 2658Dr. Stephen Henson
2011-09-24make sure eivlen is initialisedDr. Stephen Henson
2011-08-03Expand range of ctrls for AES GCM to support retrieval and setting ofDr. Stephen Henson
2011-05-25PR: 2533Dr. Stephen Henson
2011-05-25Some nextproto patches broke DTLS: fixDr. Stephen Henson
2011-04-29Initial incomplete TLS v1.2 support. New ciphersuites added, new versionDr. Stephen Henson
2011-03-12Add SRP support.Ben Laurie
2010-11-14Only use explicit IV if cipher is in CBC mode.Dr. Stephen Henson
2010-09-05Fixes to NPN from Adam Langley.Ben Laurie
2010-08-26PR: 1833Dr. Stephen Henson
2010-07-28Add Next Protocol Negotiation.Ben Laurie
2010-03-25Fix for "Record of death" vulnerability CVE-2010-0740.Bodo Möller
2010-01-28oops revert test code accidentally committedDr. Stephen Henson
2010-01-26PR: 1949Dr. Stephen Henson