summaryrefslogtreecommitdiffstats
path: root/ssl/s3_srvr.c
AgeCommit message (Expand)Author
2011-05-19set encodedPoint to NULL after freeing itDr. Stephen Henson
2010-12-02fix for CVE-2010-4180Dr. Stephen Henson
2010-11-14Get correct GOST private key instead of just assuming the last one isDr. Stephen Henson
2010-02-27Add Kerberos fix which was in 0.9.8-stable but never committed to HEAD andDr. Stephen Henson
2010-01-26PR: 1949Dr. Stephen Henson
2010-01-26oopsDr. Stephen Henson
2010-01-26export OPENSSL_isservice and make updateDr. Stephen Henson
2010-01-24The fix for PR#1949 unfortunately broke cases where the BIO_CTRL_WPENDINGDr. Stephen Henson
2010-01-22If legacy renegotiation is not permitted then send a fatal alert if a patchedDr. Stephen Henson
2010-01-01Client side compression algorithm sanity checks: ensure old compressionDr. Stephen Henson
2010-01-01Compression handling on session resume was badly broken: it alwaysDr. Stephen Henson
2009-12-08Add support for magic cipher suite value (MCSV). Make secure renegotiationDr. Stephen Henson
2009-12-08PR: 2121Dr. Stephen Henson
2009-12-01PR: 2115Dr. Stephen Henson
2009-10-30Fix statless session resumption so it can coexist with SNIDr. Stephen Henson
2009-09-06Typo presumably...Dr. Stephen Henson
2009-09-04PR: 2028Dr. Stephen Henson
2009-06-26Update from 0.9.8-stable.Dr. Stephen Henson
2009-06-24Update from HEAD.Dr. Stephen Henson
2009-06-16Updates from HEAD.Dr. Stephen Henson
2009-06-13Update from HEAD.Dr. Stephen Henson
2009-04-22Fix WIN32 warnings.Dr. Stephen Henson
2009-04-21Some fixes for kerberos builds.Dr. Stephen Henson
2009-04-19PR: 1751Dr. Stephen Henson
2009-01-07Updatde from stable branch.Dr. Stephen Henson
2009-01-02srvr_ecdh cannot be NULL at this point (Coverity ID 232).Ben Laurie
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie
2008-12-27Handle the unlikely event that BIO_get_mem_data() returns -ve.Ben Laurie
2008-11-15PR: 1574Dr. Stephen Henson
2008-09-22Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can'tBodo Möller
2008-09-14oopsBodo Möller
2008-09-14Fix SSL state transitions.Bodo Möller
2008-09-03Do not discard cached handshake records during resumed sessions:Dr. Stephen Henson
2008-04-30Update from stable branch.Dr. Stephen Henson
2008-04-29Update from stable branch.Dr. Stephen Henson
2008-04-25Don't send zero length session ID if stateless session resupmtion isDr. Stephen Henson
2007-10-261. Changes for s_client.c to make it return non-zero exit code in caseDr. Stephen Henson
2007-10-14Make ssl compile [from 098-stable, bug is masked by default].Andy Polyakov
2007-09-30Switch to RFC-compliant version encoding in DTLS.Andy Polyakov
2007-09-26Support for certificate status TLS extension.Dr. Stephen Henson
2007-08-31Update ssl code to support digests other than MD5+SHA1 in handshake.Dr. Stephen Henson
2007-08-20Use SHA256 for ticket HMAC if possible.Dr. Stephen Henson
2007-08-12Remove debugging fprintfs, fix typo.Dr. Stephen Henson
2007-08-11RFC4507 (including RFC4507bis) TLS stateless session resumption supportDr. Stephen Henson
2007-04-24fix function codes for errorBodo Möller
2007-02-17Reorganize the data used for SSL ciphersuite pattern matching.Bodo Möller
2007-02-07ensure that a ec key is usedNils Larsch
2006-11-29fix support for receiving fragmented handshake messagesBodo Möller
2006-09-28Fix buffer overflow in SSL_get_shared_ciphers() function.Mark J. Cox
2006-09-28Fixes for the following claims:Richard Levitte