summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2013-02-04make updateDr. Stephen Henson
2013-02-04Fix error codes.Dr. Stephen Henson
2013-02-02e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.Andy Polyakov
2013-02-01ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov
2013-02-01Don't access EVP_MD_CTX internals directly.Dr. Stephen Henson
2013-02-01s3/s3_cbc.c: allow for compilations with NO_SHA256|512.Andy Polyakov
2013-02-01ssl/s3_cbc.c: md_state alignment portability fix.Andy Polyakov
2013-02-01ssl/s3_cbc.c: uint64_t portability fix.Andy Polyakov
2013-01-31typo.Dr. Stephen Henson
2013-01-31Timing fix mitigation for FIPS mode.Dr. Stephen Henson
2013-01-28Oops. Add missing file.Ben Laurie
2013-01-28Update DTLS code to match CBC decoding in TLS.Ben Laurie
2013-01-28Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie
2013-01-28Make CBC decoding constant time.Ben Laurie
2013-01-28Add and use a constant-time memcmp.Ben Laurie
2012-11-22reject zero length point format list or supported curves extensionsDr. Stephen Henson
2012-11-15add "missing" TLSv1.2 cipher aliasDr. Stephen Henson
2012-09-21Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson
2012-09-21* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately inRichard Levitte
2012-09-17Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie
2012-06-27don't use pseudo digests for default values of keysDr. Stephen Henson
2012-06-08Reduce version skew.Ben Laurie
2012-05-16s2_clnt.c: compensate for compiler bug [from HEAD].Andy Polyakov
2012-05-11PR: 2811Dr. Stephen Henson
2012-05-10PR: 2806Dr. Stephen Henson
2012-05-10Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 andDr. Stephen Henson
2012-05-10Don't forget to install srtp.h as wellRichard Levitte
2012-05-10oops, revert unrelated changeDr. Stephen Henson
2012-05-10Reported by: Solar Designer of OpenwallDr. Stephen Henson
2012-04-26Don't try to use unvalidated composite ciphers in FIPS modeDr. Stephen Henson
2012-04-25Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL andDr. Stephen Henson
2012-04-25s23_clnt.c: ensure interoperability by maitaining client "version capability"Andy Polyakov
2012-04-18correct error codeDr. Stephen Henson
2012-04-17Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller
2012-04-17Additional workaround for PR#2771Dr. Stephen Henson
2012-04-17Partial workaround for PR#2771.Dr. Stephen Henson
2012-04-16OPENSSL_NO_SOCK fixes [from HEAD].Andy Polyakov
2012-04-15s3_srvr.c: fix typo [from HEAD].Andy Polyakov
2012-04-15e_aes_cbc_hmac_sha1.c: handle zero-length payload and engage empty fragAndy Polyakov
2012-04-04ssl/ssl_ciph.c: interim solution for assertion in d1_pkt.c(444) [from HEAD].Andy Polyakov
2012-03-31PR: 2778(part)Dr. Stephen Henson
2012-03-29Experimental workaround to large client hello issue (see PR#2771).Dr. Stephen Henson
2012-03-21use client version when deciding whether to send supported signature algorith...Dr. Stephen Henson
2012-03-13ssl/t1_enc.c: pay attention to EVP_CIPH_FLAG_CUSTOM_CIPHER [from HEAD].Andy Polyakov
2012-03-09Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>Dr. Stephen Henson
2012-03-09PR: 2756Dr. Stephen Henson
2012-03-06PR: 2755Dr. Stephen Henson
2012-03-06PR: 2748Dr. Stephen Henson
2012-02-27PR: 2739Dr. Stephen Henson
2012-02-22ABI compliance fixes.Dr. Stephen Henson
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-14 22:37:12 +0000