summaryrefslogtreecommitdiffstats
path: root/ssl/s3_srvr.c
AgeCommit message (Expand)Author
2018-08-14Update copyright yearMatt Caswell
2018-07-03Don't create an invalid CertificateRequestMatt Caswell
2018-06-25Fix some more gcc-9 warnings [-Wstringop-truncation]Bernd Edlinger
2017-12-08Standardize syntax around sizeof(foo)Rich Salz
2017-07-16Backport of 5b8fa43 and remove resolved TODO: see PR#3924.Bernd Edlinger
2017-03-23Guard last few debugging printfs in libsslRichard Levitte
2017-03-21Avoid a mem leak on errorMatt Caswell
2017-02-09Fix issue #2113:Bernd Edlinger
2017-02-08Fix session ticket and SNITodd Short
2017-02-06Combined patch for the more or less obvious issuesBernd Edlinger
2017-01-26Use correct signature algorithm list when sending or checking.Dr. Stephen Henson
2017-01-23Fix SSL_VERIFY_CLIENT_ONCEMatt Caswell
2016-12-14zero pad DHE public key in ServerKeyExchange message for interoprussor
2016-12-13Fix a bug in clienthello processingBenjamin Kaduk
2016-09-21Fix small OOB reads.Dr. Stephen Henson
2016-08-30Ensure the CertStatus message adds a DTLS message header where neededMatt Caswell
2016-07-28Add missing casts.Rich Salz
2016-07-22Send alert for bad DH CKEDr. Stephen Henson
2016-07-19Send alert on CKE error.Dr. Stephen Henson
2016-07-01Avoid an overflow in constructing the ServerKeyExchange messageMatt Caswell
2016-06-27Change usage of RAND_pseudo_bytes to RAND_bytesMatt Caswell
2016-06-01Avoid some undefined pointer arithmeticMatt Caswell
2016-01-28Always generate DH keys for ephemeral DH cipher suitesMatt Caswell
2016-01-19Validate ClientHello session_id field length and send alert on failureAlessandro Ghedini
2015-12-18Remove the "eay" c-file-style indicatorsRichard Levitte
2015-12-01Remove cookie validation return value trickMatt Caswell
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell
2015-11-09Fix missing malloc return value checksMatt Caswell
2015-10-23Remove useless codeAlessandro Ghedini
2015-10-05Change functions to pass in a limit rather than calculate itMatt Caswell
2015-07-02Fix PSK handling.Dr. Stephen Henson
2015-06-04Clean premaster_secret for GOSTMatt Caswell
2015-06-04Clean Kerberos pre-master secretMatt Caswell
2015-05-13Don't allow a CCS when expecting a CertificateVerifyMatt Caswell
2015-05-05Add more error state transitionsMatt Caswell
2015-05-05Add Error stateMatt Caswell
2015-04-17Error out immediately on empty ciphers list.Emilia Kasper
2015-04-14Check for ClientHello message overrunsMatt Caswell
2015-03-25Add ticket length before buffering DTLS messageMatt Caswell
2015-03-19Fix DHE Null CKE vulnerabilityMatt Caswell
2015-02-27Fix missing return value checks.Matt Caswell
2015-01-22Re-align some comments after running the reformat script.OpenSSL_1_0_2-post-reformatMatt Caswell
2015-01-22Rerun util/openssl-format-source -v -c .OpenSSL_1_0_2-post-auto-reformatMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22Tweaks for comments due to indent's inability to handle themMatt Caswell
2015-01-22Fix source where indent will not be able to copeMatt Caswell
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2015-01-08Unauthenticated DH client certificate fix.Dr. Stephen Henson
2015-01-06Only allow ephemeral RSA keys in export ciphersuites.Dr. Stephen Henson
2015-01-02Remove MS SGCDr. Stephen Henson