summaryrefslogtreecommitdiffstats
path: root/ssl/s3_srvr.c
AgeCommit message (Expand)Author
2015-01-22Fix source where indent will not be able to copeMatt Caswell
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2015-01-08Unauthenticated DH client certificate fix.Dr. Stephen Henson
2015-01-06Only allow ephemeral RSA keys in export ciphersuites.Dr. Stephen Henson
2014-12-17Premaster secret handling fixesAdam Langley
2014-12-15Check return value of ssl3_output_cert_chainMatt Caswell
2014-12-08Fixed memory leak in the event of a failure of BUF_MEM_growMatt Caswell
2014-09-24RT3067: simplify patchEmilia Kasper
2014-09-24This change alters the processing of invalid, RSA pre-master secrets soAdam Langley
2014-07-05Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson
2014-06-03Fix for CVE-2014-0224Dr. Stephen Henson
2014-06-01Allocate extra space when NETSCAPE_HANG_BUG defined.David Ramos
2014-05-12Replace manual ASN1 decoder with ASN1_get_objectSerguei E. Leontiev
2013-02-09ssl/s3_[clnt|srvr].c: fix warnings and linking error.Andy Polyakov
2012-10-04Backport OCSP Stapling fix.Ben Laurie
2012-04-15s3_srvr.c: fix typo [from HEAD].Andy Polyakov
2012-02-16Fix bug in CVE-2011-4619: check we have really received a client helloDr. Stephen Henson
2012-01-04Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)Dr. Stephen Henson
2012-01-04Submitted by: Adam Langley <agl@chromium.org>Dr. Stephen Henson
2011-09-05(EC)DH memory handling fixes.Bodo Möller
2011-05-19set encodedPoint to NULL after freeing itDr. Stephen Henson
2010-12-02fix for CVE-2010-4180Dr. Stephen Henson
2010-11-14Get correct GOST private key instead of just assuming the last one isDr. Stephen Henson
2010-02-27Add Kerberos fix which was in 0.9.8-stable but never committed to HEAD andDr. Stephen Henson
2010-01-26PR: 1949Dr. Stephen Henson
2010-01-26oopsDr. Stephen Henson
2010-01-26export OPENSSL_isservice and make updateDr. Stephen Henson
2010-01-24The fix for PR#1949 unfortunately broke cases where the BIO_CTRL_WPENDINGDr. Stephen Henson
2010-01-22If legacy renegotiation is not permitted then send a fatal alert if a patchedDr. Stephen Henson
2010-01-01Client side compression algorithm sanity checks: ensure old compressionDr. Stephen Henson
2010-01-01Compression handling on session resume was badly broken: it alwaysDr. Stephen Henson
2009-12-08Add support for magic cipher suite value (MCSV). Make secure renegotiationDr. Stephen Henson
2009-12-08PR: 2121Dr. Stephen Henson
2009-12-01PR: 2115Dr. Stephen Henson
2009-10-30Fix statless session resumption so it can coexist with SNIDr. Stephen Henson
2009-09-06Typo presumably...Dr. Stephen Henson
2009-09-04PR: 2028Dr. Stephen Henson
2009-06-26Update from 0.9.8-stable.Dr. Stephen Henson
2009-06-24Update from HEAD.Dr. Stephen Henson
2009-06-16Updates from HEAD.Dr. Stephen Henson
2009-06-13Update from HEAD.Dr. Stephen Henson
2009-04-22Fix WIN32 warnings.Dr. Stephen Henson
2009-04-21Some fixes for kerberos builds.Dr. Stephen Henson
2009-04-19PR: 1751Dr. Stephen Henson
2009-01-07Updatde from stable branch.Dr. Stephen Henson
2009-01-02srvr_ecdh cannot be NULL at this point (Coverity ID 232).Ben Laurie
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie
2008-12-27Handle the unlikely event that BIO_get_mem_data() returns -ve.Ben Laurie
2008-11-15PR: 1574Dr. Stephen Henson
2008-09-22Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can'tBodo Möller