Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-10-14 | more vxworks patches | Dr. Stephen Henson | |
2011-10-13 | In ssl3_clear, preserve s3->init_extra along with s3->rbuf. | Bodo Möller | |
Submitted by: Bob Buckholz <bbuckholz@google.com> | |||
2011-10-10 | add GCM ciphers in SSL_library_init | Dr. Stephen Henson | |
2011-10-10 | disable GCM if not available | Dr. Stephen Henson | |
2011-10-09 | Don't disable TLS v1.2 by default now. | Dr. Stephen Henson | |
2011-10-07 | use client version when eliminating TLS v1.2 ciphersuites in client hello | Dr. Stephen Henson | |
2011-09-26 | fix signed/unsigned warning | Dr. Stephen Henson | |
2011-09-24 | make sure eivlen is initialised | Dr. Stephen Henson | |
2011-09-23 | PR: 2602 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix DTLS bug which prevents manual MTU setting | |||
2011-09-05 | Fix session handling. | Bodo Möller | |
2011-09-05 | Fix d2i_SSL_SESSION. | Bodo Möller | |
2011-09-05 | (EC)DH memory handling fixes. | Bodo Möller | |
Submitted by: Adam Langley | |||
2011-09-01 | PR: 2573 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix DTLS buffering and decryption bug. | |||
2011-08-23 | Add RC4-MD5 and AESNI-SHA1 "stitched" implementations. | Andy Polyakov | |
2011-08-14 | Remove hard coded ecdsaWithSHA1 hack in ssl routines and check for RSA | Dr. Stephen Henson | |
using OBJ xref utilities instead of string comparison with OID name. This removes the arbitrary restriction on using SHA1 only with some ECC ciphersuites. | |||
2011-08-03 | Expand range of ctrls for AES GCM to support retrieval and setting of | Dr. Stephen Henson | |
invocation field. Add complete support for AES GCM ciphersuites including all those in RFC5288 and RFC5289. | |||
2011-07-25 | oops, remove debug option | Dr. Stephen Henson | |
2011-07-25 | Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support and | Dr. Stephen Henson | |
prohibit use of these ciphersuites for TLS < 1.2 | |||
2011-07-20 | PR: 2555 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix DTLS sequence number bug | |||
2011-07-20 | PR: 2550 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix DTLS HelloVerifyRequest Timer bug | |||
2011-07-11 | ssl/ssl_ciph.c: allow to switch to predefined "composite" cipher/mac | Andy Polyakov | |
combos that can be implemented as AEAD ciphers. | |||
2011-07-11 | ssl/t1_enc.c: initial support for AEAD ciphers. | Andy Polyakov | |
2011-06-22 | PR: 2543 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Correctly handle errors in DTLSv1_handle_timeout() | |||
2011-06-14 | set FIPS allow before initialising ctx | Dr. Stephen Henson | |
2011-06-08 | fix memory leak | Dr. Stephen Henson | |
2011-06-06 | Set SSL_FIPS flag in ECC ciphersuites. | Dr. Stephen Henson | |
2011-06-03 | fix error discrepancy | Dr. Stephen Henson | |
2011-06-01 | typo | Dr. Stephen Henson | |
2011-05-31 | set FIPS permitted flag before initalising digest | Dr. Stephen Henson | |
2011-05-31 | Don't round up partitioned premaster secret length if there is only one | Dr. Stephen Henson | |
digest in use: this caused the PRF to fail for an odd premaster secret length. | |||
2011-05-30 | Output supported curves in preference order instead of numerically. | Dr. Stephen Henson | |
2011-05-25 | Don't advertise or use MD5 for TLS v1.2 in FIPS mode | Dr. Stephen Henson | |
2011-05-25 | PR: 2533 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Setting SSL_MODE_RELEASE_BUFFERS should be ignored for DTLS, but instead causes the program to crash. This is due to missing version checks and is fixed with this patch. | |||
2011-05-25 | PR: 2529 | Dr. Stephen Henson | |
Submitted by: Marcus Meissner <meissner@suse.de> Reviewed by: steve Call ssl_new() to reallocate SSL BIO internals if we want to replace the existing internal SSL structure. | |||
2011-05-25 | Some nextproto patches broke DTLS: fix | Dr. Stephen Henson | |
2011-05-25 | Oops use up to date patch for PR#2506 | Dr. Stephen Henson | |
2011-05-25 | PR: 2506 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fully implement SSL_clear for DTLS. | |||
2011-05-25 | PR: 2505 | Dr. Stephen Henson | |
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de> Reviewed by: steve Fix DTLS session resumption timer bug. | |||
2011-05-25 | use TLS1_get_version macro to check version so TLS v1.2 changes don't ↵ | Dr. Stephen Henson | |
interfere with DTLS | |||
2011-05-20 | PR: 2295 | Dr. Stephen Henson | |
Submitted by: Alexei Khlebnikov <alexei.khlebnikov@opera.com> Reviewed by: steve OOM checking. Leak in OOM fix. Fall-through comment. Duplicate code elimination. | |||
2011-05-19 | Implement FIPS_mode and FIPS_mode_set | Dr. Stephen Henson | |
2011-05-19 | set encodedPoint to NULL after freeing it | Dr. Stephen Henson | |
2011-05-12 | Provisional support for TLS v1.2 client authentication: client side only. | Dr. Stephen Henson | |
Parse certificate request message and set digests appropriately. Generate new TLS v1.2 format certificate verify message. Keep handshake caches around for longer as they are needed for client auth. | |||
2011-05-12 | Process signature algorithms during TLS v1.2 client authentication. | Dr. Stephen Henson | |
Make sure message is long enough for signature algorithms. | |||
2011-05-11 | make kerberos work with OPENSSL_NO_SSL_INTERN | Dr. Stephen Henson | |
2011-05-11 | Reorder signature algorithms in strongest hash first order. | Dr. Stephen Henson | |
2011-05-09 | Initial TLS v1.2 client support. Include a default supported signature | Dr. Stephen Henson | |
algorithms extension (including everything we support). Swicth to new signature format where needed and relax ECC restrictions. Not TLS v1.2 client certifcate support yet but client will handle case where a certificate is requested and we don't have one. | |||
2011-05-06 | Continuing TLS v1.2 support: add support for server parsing of | Dr. Stephen Henson | |
signature algorithms extension and correct signature format for server key exchange. All ciphersuites should now work on the server but no client support and no client certificate support yet. | |||
2011-05-01 | Disable SHA256 if not supported. | Dr. Stephen Henson | |
2011-04-29 | Initial incomplete TLS v1.2 support. New ciphersuites added, new version | Dr. Stephen Henson | |
checking added, SHA256 PRF support added. At present only RSA key exchange ciphersuites work with TLS v1.2 as the new signature format is not yet implemented. |