summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2014-11-18Added OPENSSL_NO_EC2M guards around the preferred EC curve listMatt Caswell
2014-10-28Tighten session ticket handlingEmilia Kasper
2014-10-27Fix ssltest logic when some protocols are compiled out.Emilia Kasper
2014-10-21Fix and improve SSL_MODE_SEND_FALLBACK_SCSV documentation.Bodo Moeller
2014-10-21When processing ClientHello.cipher_suites, don't ignore cipher suitesBodo Moeller
2014-10-21Keep old method in case of an unsupported protocolKurt Roeckx
2014-10-15Fix no-ssl3 configuration optionGeoff Thorpe
2014-10-15Fix for session tickets memory leak.Dr. Stephen Henson
2014-10-15Fix SRTP compile issues for windowsMatt Caswell
2014-10-15Fix for SRTP Memory LeakMatt Caswell
2014-10-15Spaces were added in some strings for better readability. However, those spac...Richard Levitte
2014-10-15Adjust VMS build to Unix build. Most of all, make it so the disabledRichard Levitte
2014-10-15Update the VMS build according to the latest unixly build. Partly provided by...Richard Levitte
2014-10-15Make sure that disabling the MAYLOSEDATA3 warning is only done when the compi...Richard Levitte
2014-10-15Support TLS_FALLBACK_SCSV.Bodo Moeller
2014-10-10Preserve digests for SNI.Dr. Stephen Henson
2014-09-24RT3067: simplify patchEmilia Kasper
2014-09-24This change alters the processing of invalid, RSA pre-master secrets soAdam Langley
2014-09-24RT3066: rewrite RSA padding checks to be slightly more constant time.Emilia Kasper
2014-09-22Fixed error introduced in commit f2be92b94dad3c6cbdf79d99a324804094cf1617Tim Hudson
2014-09-08RT3301: Discard too-long heartbeat requestsErik Auerswald
2014-09-05psk_client_callback, 128-byte id bug.Adam Langley
2014-08-28Constant-time utilitiesEmilia Kasper
2014-08-22RT3060: Limit the number of empty records.Adam Langley
2014-08-15Fixed out-of-bounds read errors in ssl3_get_key_exchange.Matt Caswell
2014-08-12Fix SRP ciphersuites.Dr. Stephen Henson
2014-08-09Fix SRP authentication ciphersuites.Dr. Stephen Henson
2014-08-06Check SRP parameters early.Dr. Stephen Henson
2014-08-06Fix SRP ciphersuite DoS vulnerability.Dr. Stephen Henson
2014-08-06Fix race condition in ssl_parse_serverhello_tlsextGabor Tyukasz
2014-08-06Fix DTLS anonymous EC(DH) denial of serviceEmilia Käsper
2014-08-06Fix protocol downgrade bug in case of fragmented packetsDavid Benjamin
2014-08-06Remove some duplicate DTLS code.Adam Langley
2014-08-06Applying same fix as in dtls1_process_out_of_seq_message. A truncated DTLS fr...Matt Caswell
2014-08-06Fix return code for truncated DTLS fragment.Adam Langley
2014-08-06Fix memory leak from zero-length DTLS fragments.Adam Langley
2014-08-06Fix DTLS handshake message size checks.Matt Caswell
2014-08-06Added comment for the frag->reassembly == NULL case as per feedback from EmiliaMatt Caswell
2014-08-06Avoid double free when processing DTLS packets.Adam Langley
2014-08-01make updateDr. Stephen Henson
2014-07-24Add conditional unit testing interface.Dr. Stephen Henson
2014-07-15Fix DTLS certificate requesting code.Dr. Stephen Henson
2014-07-15Add ECC extensions with DTLS.Dr. Stephen Henson
2014-07-14Use more common name for GOST key exchange.Dr. Stephen Henson
2014-07-13Add names of GOST algorithms.Peter Mosmans
2014-07-05Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson
2014-07-02Make disabling last cipher work.Thijs Alkemade
2014-07-01Fix possible buffer overrun.Ben Laurie
2014-06-29Fix memory leak.Dr. Stephen Henson
2014-06-28Don't disable state strings with no-ssl2Dr. Stephen Henson