summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_lib.c
AgeCommit message (Expand)Author
2014-12-17Clear warnings/errors within CIPHER_DEBUG code sectionsRichard Levitte
2014-12-16Add OPENSSL_NO_ECDH guardsMatt Caswell
2014-12-08Fix memory leak in SSL_new if errors occur.Matt Caswell
2014-12-08Remove some unnecessary OPENSSL_FIPS referencesDr. Stephen Henson
2014-12-04Remove SSLv2 supportKurt Roeckx
2014-12-03Remove instances in libssl of the constant 28 (for size of IPv4 header + UDP)Matt Caswell
2014-10-24Copy negotiated parameters in SSL_set_SSL_CTX.Dr. Stephen Henson
2014-10-21When processing ClientHello.cipher_suites, don't ignore cipher suitesBodo Moeller
2014-10-15Support TLS_FALLBACK_SCSV.Bodo Moeller
2014-08-28Custom extension revision.Dr. Stephen Henson
2014-08-15Revision of custom extension code.Dr. Stephen Henson
2014-07-04Remove all RFC5878 code.Dr. Stephen Henson
2014-05-12Check sk_SSL_CIPHER_num() after assigning sk.Kurt Roeckx
2014-05-11Avoid out-of-bounds write in SSL_get_shared_ciphersGünther Noack
2014-03-28Security framework.Dr. Stephen Henson
2014-03-28Allow return of supported ciphers.Dr. Stephen Henson
2014-03-28Auto DH support.Dr. Stephen Henson
2014-02-21Option to set current cert to server certificate.Dr. Stephen Henson
2014-01-16Add new function SSL_CTX_get_ssl_method().Dr. Stephen Henson
2014-01-09use SSL_kDHE throughout instead of SSL_kEDHDaniel Kahn Gillmor
2014-01-09use SSL_kECDHE throughout instead of SSL_kEECDHDaniel Kahn Gillmor
2013-12-13Verify parameter retrieval functions.Dr. Stephen Henson
2013-11-18New functions to retrieve certificate from SSL_CTXDr. Stephen Henson
2013-11-14Fix compilation with no-nextprotoneg.Piotr Sikora
2013-09-06More cleanup.Ben Laurie
2013-09-06Add callbacks supporting generation and retrieval of supplemental data entrie...Scott Deboy
2013-08-17Make no-ec compilation work.Dr. Stephen Henson
2013-07-22Support ALPN.Adam Langley
2013-06-28Cosmetic touchups.Trevor
2013-06-12Add support for arbitrary TLS extensions.Trevor
2013-03-19Disable compression for DTLS.Dr. Stephen Henson
2013-03-18Use enc_flags when deciding protocol variations.Dr. Stephen Henson
2012-11-19fix typo and warningDr. Stephen Henson
2012-11-08new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for so...Dr. Stephen Henson
2012-09-30If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" asDr. Stephen Henson
2012-09-12Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-09-11Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson
2012-09-11Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie
2012-08-31perform sanity checks on server certificate type as soon as it is received in...Dr. Stephen Henson
2012-08-29Add compilation flag to disable certain protocol checks and allow use ofDr. Stephen Henson
2012-08-15Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-07-27Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-07-18New function ssl_set_client_disabled to set masks for any ciphersuitesDr. Stephen Henson
2012-07-03new function SSL_is_server to which returns 1 is the corresponding SSL contex...Dr. Stephen Henson
2012-06-29Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-06-28Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-06-18Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson
2012-06-03Version skew reduction: trivia (I hope).Ben Laurie
2012-05-30RFC 5878 support.Ben Laurie
2012-04-23oops, not yet ;-)Dr. Stephen Henson