summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2016-10-14Degrade 3DES to MEDIUM in SSL2Vitezslav Cizek
2016-09-22Avoid KCI attack for GOSTDmitry Belyavsky
2016-09-22Fix OCSP Status Request extension unbounded memory growthMatt Caswell
2016-09-21Make message buffer slightly larger than message.Dr. Stephen Henson
2016-09-21Use SSL3_HM_HEADER_LENGTH instead of 4.Dr. Stephen Henson
2016-09-21Remove unnecessary check.Dr. Stephen Henson
2016-09-21Fix small OOB reads.Dr. Stephen Henson
2016-08-26Fix SSL_export_keying_material() for DTLS1_BAD_VERDavid Woodhouse
2016-08-24SWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUMRich Salz
2016-08-23Sanity check ticket length.Dr. Stephen Henson
2016-08-22Prevent DTLS Finished message injectionMatt Caswell
2016-08-22Fix DTLS buffered message DoS attackMatt Caswell
2016-08-19Update function error codeMatt Caswell
2016-08-19Fix DTLS replay protectionMatt Caswell
2016-08-19Fix DTLS unprocessed records bugMatt Caswell
2016-06-27Change usage of RAND_pseudo_bytes to RAND_bytesMatt Caswell
2016-06-01Avoid some undefined pointer arithmeticMatt Caswell
2016-05-26Ensure verify error is set when X509_verify_cert() failsViktor Dukhovni
2016-04-07Fix memory leak on invalid CertificateRequest.David Benjamin
2016-03-18Add a check for a failed mallocMatt Caswell
2016-03-18Ensure that memory allocated for the ticket is freedMatt Caswell
2016-03-14Add no-ssl2-methodKurt Roeckx
2016-03-09expose SSLv2 method prototypesViktor Dukhovni
2016-03-08Retain SSLv2 methods as functions that return NULLViktor Dukhovni
2016-03-07Remove LOW from the defaultKurt Roeckx
2016-03-01make updateMatt Caswell
2016-03-01Disable EXPORT and LOW SSLv3+ ciphers by defaultViktor Dukhovni
2016-03-01Disable SSLv2 default build, default negotiation and weak ciphers.Viktor Dukhovni
2016-01-28Better SSLv2 cipher-suite enforcementViktor Dukhovni
2016-01-28Always generate DH keys for ephemeral DH cipher suitesMatt Caswell
2016-01-19Validate ClientHello session_id field length and send alert on failureAlessandro Ghedini
2016-01-16Empty SNI names are not validViktor Dukhovni
2016-01-11Change minimum DH size from 768 to 1024Kurt Roeckx
2015-12-27Ensure we don't call the OCSP callback if resuming a sessionMatt Caswell
2015-12-27Fix error when server does not send CertificateStatus messageMatt Caswell
2015-12-19Fix more URLs mangled by reformatMatt Caswell
2015-12-18Remove the "eay" c-file-style indicatorsRichard Levitte
2015-12-10Ensure |rwstate| is set correctly on BIO_flushMatt Caswell
2015-12-10Fix DTLS handshake fragment retriesMatt Caswell
2015-12-02typoDr. Stephen Henson
2015-12-02_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE insteadRichard Levitte
2015-11-30Return errors even if the cookie validation has succeededMatt Caswell
2015-11-24ssl3_free(): Return if it wasn't createdPascal Cuoq
2015-11-24Set reference count earlierKurt Roeckx
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell
2015-11-10Stop DTLS servers asking for unsafe legacy renegotiationMatt Caswell
2015-11-10Only call ssl3_init_finished_mac once for DTLSMatt Caswell
2015-11-09Fix missing malloc return value checksMatt Caswell
2015-10-23Remove useless codeAlessandro Ghedini
2015-10-23Fix references to various RFCsAlessandro Ghedini
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-08 20:12:16 +0000