summaryrefslogtreecommitdiffstats
path: root/ssl/t1_lib.c
AgeCommit message (Expand)Author
2014-12-16Add OPENSSL_NO_ECDH guardsMatt Caswell
2014-12-10tls1_heartbeat: check for NULL after allocating bufJonas Maebe
2014-12-10tls1_process_heartbeat: check for NULL after allocating bufferJonas Maebe
2014-12-08Remove some unnecessary OPENSSL_FIPS referencesDr. Stephen Henson
2014-12-05Clarify the return values for SSL_get_shared_curve.Emilia Kasper
2014-12-05Add extra checks for odd-length EC curve lists.Emilia Kasper
2014-12-05Reject elliptic curve lists of odd lengths.Emilia Kasper
2014-11-20Fix SuiteB chain checking logic.Dr. Stephen Henson
2014-11-20Ensure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is resetEmilia Kasper
2014-11-20Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext.Emilia Kasper
2014-11-19Only handle RI extension for SSLv3Dr. Stephen Henson
2014-11-19Process signature algorithms before deciding on certificate.Dr. Stephen Henson
2014-11-18Added references to RFC 7027Matt Caswell
2014-11-18Prevent use of binary curves when OPENSSL_NO_EC2M is definedDr. Stephen Henson
2014-11-18Updated comment references to draft-ietf-tls-ecc-12 to refer to RFC4492 insteadMatt Caswell
2014-10-24Process signature algorithms in ClientHello late.Dr. Stephen Henson
2014-10-15Fix for session tickets memory leak.Dr. Stephen Henson
2014-10-15Fix for SRTP Memory LeakMatt Caswell
2014-10-10Disable encrypt them mac for SSL 3.0 and stream ciphers (RC4 only).Dr. Stephen Henson
2014-09-30Parse custom extensions after internal extensions.Dr. Stephen Henson
2014-08-28New extension callback features.Dr. Stephen Henson
2014-08-28Remove serverinfo checks.Dr. Stephen Henson
2014-08-28Add custom extension sanity checks.Dr. Stephen Henson
2014-08-28Custom extension revision.Dr. Stephen Henson
2014-08-18RT1815: More const'ness improvementsJustin Blanchard
2014-08-15Revision of custom extension code.Dr. Stephen Henson
2014-08-06Fix SRP ciphersuite DoS vulnerability.Dr. Stephen Henson
2014-08-06Fix race condition in ssl_parse_serverhello_tlsextGabor Tyukasz
2014-07-02Fix possible buffer overrun.Ben Laurie
2014-06-29More constification.Ben Laurie
2014-06-29Fix memory leak.Dr. Stephen Henson
2014-06-02Check there is enough room for extension.David Benjamin
2014-06-01Option to disable padding extension.Dr. Stephen Henson
2014-05-26Fix cast of boolean where cast of LHS intended.Juli Mallett
2014-05-20Fix bug in signature algorithm copy.Dr. Stephen Henson
2014-04-07Add heartbeat extension bounds check.Dr. Stephen Henson
2014-04-05Set TLS padding extension value.Dr. Stephen Henson
2014-03-28Security framework.Dr. Stephen Henson
2014-03-28Allow return of supported ciphers.Dr. Stephen Henson
2014-03-28Auto DH support.Dr. Stephen Henson
2014-03-27Fix memory leak with client auth.Dr. Stephen Henson
2014-02-20Move CT viewer extension code to crypto/x509v3Dr. Stephen Henson
2014-02-19Make i2r_sctlist static.Ben Laurie
2014-02-19Move the SCT List extension parser into libssl.Rob Stradling
2014-02-05Don't break out of the custom extension callback loop - continue insteadScott Deboy
2014-02-05Fix whitespace, new-style comments.Ben Laurie
2014-02-05Re-add alert variables removed during rebaseScott Deboy
2014-02-05Update custom TLS extension and supplemental data 'generate' callbacks to sup...Scott Deboy
2014-01-16Omit initial status request callback check.Kaspar Brand
2014-01-09use SSL_kECDHE throughout instead of SSL_kEECDHDaniel Kahn Gillmor