summaryrefslogtreecommitdiffstats
path: root/ssl/s3_srvr.c
AgeCommit message (Expand)Author
2012-01-04Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)Dr. Stephen Henson
2012-01-04Submitted by: Adam Langley <agl@chromium.org>Dr. Stephen Henson
2011-09-05(EC)DH memory handling fixes.Bodo Möller
2011-05-19set encodedPoint to NULL after freeing itDr. Stephen Henson
2010-12-02fix for CVE-2010-4180Dr. Stephen Henson
2010-01-26PR: 1949Dr. Stephen Henson
2010-01-24The fix for PR#1949 unfortunately broke cases where the BIO_CTRL_WPENDINGDr. Stephen Henson
2010-01-22If legacy renegotiation is not permitted then send a fatal alert if a patchedDr. Stephen Henson
2009-12-08Add support for magic cipher suite value (MCSV). Make secure renegotiationDr. Stephen Henson
2009-12-01PR: 2115Dr. Stephen Henson
2009-11-08First cut of renegotiation extension.Ben Laurie
2009-11-05Disable renegotiation.Ben Laurie
2009-10-30Fix stateless session resumption so it can coexist with SNIDr. Stephen Henson
2009-09-20Typo presumably...Dr. Stephen Henson
2009-09-04PR: 2028Dr. Stephen Henson
2009-06-26PR: 1949Dr. Stephen Henson
2009-01-07Properly check EVP_VerifyFinal() and similar return valuesDr. Stephen Henson
2008-09-22Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can'tBodo Möller
2008-09-14oopsBodo Möller
2008-09-14Fix SSL state transitions.Bodo Möller
2008-06-16Make ssl code consistent with FIPS branch. The new code has no effectDr. Stephen Henson
2008-04-30TLS ticket key setting callback: this allows and application to setDr. Stephen Henson
2008-04-29Support ticket renewal in state machine (not used at present).Dr. Stephen Henson
2008-04-25Fix from HEAD.Dr. Stephen Henson
2007-10-14Make ssl compile.Andy Polyakov
2007-10-12Backport certificate status request TLS extension support to 0.9.8.Dr. Stephen Henson
2007-09-30Switch for RFC-compliant version encoding in DTLS. From HEAD with a twist:Andy Polyakov
2007-08-20Update from HEAD.Dr. Stephen Henson
2007-08-12Backport of TLS extension code to OpenSSL 0.9.8.Dr. Stephen Henson
2007-03-09Fix kerberos ciphersuite bugs introduced with PR:1336.Dr. Stephen Henson
2007-02-07ensure that a ec key is usedNils Larsch
2006-11-29fix support for receiving fragmented handshake messagesBodo Möller
2006-09-28Fixes for the following claims:Richard Levitte
2006-09-28Introduce limits to prevent malicious keys being able toMark J. Cox
2006-02-08backport recent changes from the cvs headNils Larsch
2005-12-13update TLS-ECC codeBodo Möller
2005-12-05Fix from HEAD.Dr. Stephen Henson
2005-09-30Update from HEAD.Dr. Stephen Henson
2005-08-05Initialize SSL_METHOD structures at compile time. This removes the needDr. Stephen Henson
2005-07-16makeNils Larsch
2005-05-23Fix WIN32+KRB5 issues.Dr. Stephen Henson
2005-05-16ecc api cleanup; summary:Nils Larsch
2005-05-08give EC_GROUP_*_nid functions a more meaningful nameNils Larsch
2005-05-03backport fix from the stable branchNils Larsch
2005-04-29check return value of RAND_pseudo_bytes; backport from the stable branchNils Larsch
2005-04-27Lots of Win32 fixes for DTLS.Dr. Stephen Henson
2005-04-26Fix various incorrect error function codes.Bodo Möller
2005-04-26fix SSLerr stuff for DTLS1 code;Bodo Möller
2005-04-26Add DTLS support.Ben Laurie
2005-04-23change prototype of the ecdh KDF: make input parameter const and the outlen a...Nils Larsch