summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2015-06-12Allow a zero length extension blockAdam Langley
2015-06-11More ssl_session_dup fixesMatt Caswell
2015-06-11Only allow a temporary rsa key exchange when they key is larger than 512.Kurt Roeckx
2015-06-11Properly check certificate in case of export ciphers.Kurt Roeckx
2015-06-10DTLS handshake message fragments musn't span packetsMatt Caswell
2015-06-10Tighten extension handlingMatt Caswell
2015-06-10Fix Kerberos issue in ssl_session_dupMatt Caswell
2015-06-08Use CRYPTO_memcmp in s3_cbc.cEmilia Kasper
2015-06-04Remove misleading commentMatt Caswell
2015-06-04Clean premaster_secret for GOSTMatt Caswell
2015-06-04Clean Kerberos pre-master secretMatt Caswell
2015-06-02Fix race condition in NewSessionTicketMatt Caswell
2015-06-02Clear state in DTLSv1_listenMatt Caswell
2015-06-01Check the message type requested is the type received in DTLSMatt Caswell
2015-05-26Fix ssltest to use 1024-bit DHE parametersEmilia Kasper
2015-05-26Don't check for a negative SRP extension sizeMatt Caswell
2015-05-25Don't send an alert if we've just received oneMatt Caswell
2015-05-23Fix the update target and remove duplicate file updatesRichard Levitte
2015-05-22Lost alert in DTLSLubom
2015-05-20Correctly check for export size limitKurt Roeckx
2015-05-20client: reject handshakes with DH parameters < 768 bits.Emilia Kasper
2015-05-13Don't allow a CCS when expecting a CertificateVerifyMatt Caswell
2015-05-11Check sk_SSL_CIPHER_new_null return valueMatt Caswell
2015-05-05Add more error state transitions (DTLS)Matt Caswell
2015-05-05Add more error state transitions (client)Matt Caswell
2015-05-05Add more error state transitionsMatt Caswell
2015-05-05Add Error stateMatt Caswell
2015-04-30Add sanity check to ssl_get_prev_sessionMatt Caswell
2015-04-30Sanity check the return from final_finish_macMatt Caswell
2015-04-30Add sanity check in ssl3_cbc_digest_recordMatt Caswell
2015-04-30Sanity check EVP_CTRL_AEAD_TLS_AADMatt Caswell
2015-04-29Add length sanity check in SSLv2 n_do_ssl_write()Matt Caswell
2015-04-21Repair EAP-FAST session resumptionEmilia Kasper
2015-04-21make updateEmilia Kasper
2015-04-17Error out immediately on empty ciphers list.Emilia Kasper
2015-04-16Code style: space after 'if'Viktor Dukhovni
2015-04-14Fix ssl_get_prev_session overrunMatt Caswell
2015-04-14Check for ClientHello message overrunsMatt Caswell
2015-04-08Harden SSLv2-supporting servers against Bleichenbacher's attack.Emilia Kasper
2015-03-25Fix RAND_(pseudo_)?_bytes returnsMatt Caswell
2015-03-24Don't send a for ServerKeyExchange for kDHr and kDHdKurt Roeckx
2015-03-19Fix unsigned/signed warningsMatt Caswell
2015-03-19Fix reachable assert in SSLv2 servers.Emilia Kasper
2015-03-17Add sanity check to PRFMatt Caswell
2015-03-11Cleanse buffersMatt Caswell
2015-03-10Harmonize return values in dtls1_buffer_recordEmilia Kasper
2015-03-08fix warningDr. Stephen Henson
2015-03-07Remove export ciphers from the DEFAULT cipher listKurt Roeckx
2015-03-05Use constants not numbersKurt Cancemi
2015-02-27Fix d2i_SSL_SESSION for DTLS1_BAD_VERMatt Caswell
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-11 10:17:57 +0000