summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_err.c
AgeCommit message (Expand)Author
2016-10-11Add missing error string for SSL_R_TOO_MANY_WARN_ALERTSKurt Cancemi
2016-08-19Fix DTLS replay protectionMatt Caswell
2016-02-08Handle SSL_shutdown while in init more appropriately #2Matt Caswell
2016-01-20Handle SSL_shutdown while in init more appropriatelyMatt Caswell
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell
2015-08-11Fix seg fault with 0 p val in SKEGuy Leaver (guleaver)
2015-06-02Fix race condition in NewSessionTicketMatt Caswell
2015-05-20client: reject handshakes with DH parameters < 768 bits.Emilia Kasper
2015-04-21Repair EAP-FAST session resumptionEmilia Kasper
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2014-12-16Add more meaningful OPENSSL_NO_ECDH error message for suite b modeMatt Caswell
2014-12-05Add extra checks for odd-length EC curve lists.Emilia Kasper
2014-11-27Remove more references to dtls1_encMatt Caswell
2014-11-19Process signature algorithms before deciding on certificate.Dr. Stephen Henson
2014-10-24Process signature algorithms in ClientHello late.Dr. Stephen Henson
2014-10-15Support TLS_FALLBACK_SCSV.Bodo Moeller
2014-08-06Check SRP parameters early.Dr. Stephen Henson
2014-07-04Remove all RFC5878 code.Dr. Stephen Henson
2014-05-01Fixed spelling error in error message. Fix supplied by Marcos MaradoMatt Caswell
2014-02-09fix error number clashDr. Stephen Henson
2014-02-08Add callbacks supporting generation and retrieval of supplemental data entrie...Scott Deboy
2013-09-24Show useful errors.Ben Laurie
2013-09-18Suite B support for DTLS 1.2Dr. Stephen Henson
2013-07-03Trying cherrypick:Trevor
2012-12-29add SSL_CONF functions and documentation (backport from HEAD)Dr. Stephen Henson
2012-12-26return error if Suite B mode is selected and TLS 1.2 can't be used.Dr. Stephen Henson
2012-12-26perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson
2012-12-26give more meaningful error if presented with wrong certificate type by serverDr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26Abort handshake if signature algorithm used not supported by peer.Dr. Stephen Henson
2012-12-26check EC tmp key matches preferencesDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26add ssl_locl.h to err header files, rebuild ssl error stringsDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-06-07Rearrange and test authz extension.Ben Laurie
2012-05-29RFC 5878 support.Ben Laurie
2012-04-24Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson
2012-04-18correct error codeDr. Stephen Henson
2012-04-06Backport: tidy/enhance certificate chain output code (from HEAD)Dr. Stephen Henson
2012-02-22ABI compliance fixes.Dr. Stephen Henson
2012-02-10Submitted by: Eric Rescorla <ekr@rtfm.com>Dr. Stephen Henson
2012-01-04Only allow one SGC handshake restart for SSL/TLS. (CVE-2011-4619)Dr. Stephen Henson
2011-12-31PR: 2658Dr. Stephen Henson
2011-11-15Add TLS exporter.Ben Laurie
2011-11-15Add DTLS-SRTP.Ben Laurie
2011-11-13Add Next Protocol Negotiation.Ben Laurie
2011-05-12Process signature algorithms during TLS v1.2 client authentication.Dr. Stephen Henson
2011-05-11Backport TLS v1.2 support from HEAD.Dr. Stephen Henson
2011-05-11Initial "opaque SSL" framework. If an application defines OPENSSL_NO_SSL_INTERNDr. Stephen Henson