summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_ciph.c
AgeCommit message (Expand)Author
2012-12-01return error if Suite B mode is selected and TLS 1.2 can't be used. Correct e...Dr. Stephen Henson
2012-11-26set auto ecdh parameter selction for Suite BDr. Stephen Henson
2012-11-24add Suite B 128 bit mode offering only combination 2Dr. Stephen Henson
2012-11-15add "missing" TLSv1.2 cipher aliasDr. Stephen Henson
2012-09-30If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" asDr. Stephen Henson
2012-09-12Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-08-31perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson
2012-08-15Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-04-26Don't try to use unvalidated composite ciphers in FIPS modeDr. Stephen Henson
2012-04-04ssl/ssl_ciph.c: interim solution for assertion in d1_pkt.c(444).Andy Polyakov
2012-01-16Support for fixed DH ciphersuites.Dr. Stephen Henson
2011-12-02Resolve a stack set-up race condition (if the list of compressionBodo Möller
2011-10-10disable GCM if not availableDr. Stephen Henson
2011-08-03Expand range of ctrls for AES GCM to support retrieval and setting ofDr. Stephen Henson
2011-07-25Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support andDr. Stephen Henson
2011-07-11ssl/ssl_ciph.c: allow to switch to predefined "composite" cipher/macAndy Polyakov
2011-05-19Implement FIPS_mode and FIPS_mode_setDr. Stephen Henson
2011-05-01Disable SHA256 if not supported.Dr. Stephen Henson
2011-04-29Initial incomplete TLS v1.2 support. New ciphersuites added, new versionDr. Stephen Henson
2011-04-29Initial "opaque SSL" framework. If an application definesDr. Stephen Henson
2011-03-12Add SRP support.Ben Laurie
2010-06-12Fix warnings.Ben Laurie
2009-09-12PR: 2025Dr. Stephen Henson
2009-04-07Update from 0.9.8-stable.Dr. Stephen Henson
2009-03-12Submitted by: Victor Duchovni <Victor.Duchovni@morganstanley.com>Dr. Stephen Henson
2009-01-05Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMPLutz Jänicke
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie
2008-12-20Make no-engine work again.Dr. Stephen Henson
2008-11-24Stop warning about different const qualifiers.Dr. Stephen Henson
2008-10-29Fix warning.Ben Laurie
2008-10-27Win32 fixes... add new directory to build system. Fix warnings.Dr. Stephen Henson
2008-10-12Type-checked (and modern C compliant) OBJ_bsearch.Ben Laurie
2008-09-10Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a newDr. Stephen Henson
2007-10-261. Changes for s_client.c to make it return non-zero exit code in caseDr. Stephen Henson
2007-09-07Change safestack reimplementation to match 0.9.8.Dr. Stephen Henson
2007-08-31Update ssl code to support digests other than MD5+SHA1 in handshake.Dr. Stephen Henson
2007-06-04Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.Dr. Stephen Henson
2007-04-23Add SEED encryption algorithm.Bodo Möller
2007-03-23Stage 1 GOST ciphersuite support.Dr. Stephen Henson
2007-02-21prefer SHA1 over MD5 (this affects the Kerberos ciphersuites)Bodo Möller
2007-02-20SSL_kKRB5 ciphersuites shouldn't be preferred by defaultBodo Möller
2007-02-20Improve ciphersuite order stability when disabling ciphersuites.Bodo Möller
2007-02-20fix a typo in the new ciphersuite ordering codeBodo Möller
2007-02-19Include "!eNULL" in SSL_DEFAULT_CIPHER_LIST to make sure that aBodo Möller
2007-02-17Reorganize the data used for SSL ciphersuite pattern matching.Bodo Möller
2007-01-03remove undefined constantNils Larsch
2006-09-11ensure that ciphersuite strings such as "RC4-MD5" match the SSL 2.0Bodo Möller
2006-08-28Make things static that should be. Declare stuff in headers that should be.Ben Laurie
2006-06-15Error messages for client ECC cert verification.Bodo Möller
2006-06-15Fix another new bug in the cipherstring logic.Bodo Möller