summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2013-04-08Set s->d1 to NULL after freeing it.Dr. Stephen Henson
2013-03-19Disable compression for DTLS.Dr. Stephen Henson
2013-03-18Avoid unnecessary fragmentation.Michael Tuexen
2013-02-12Check DTLS_BAD_VER for version number.David Woodhouse
2013-02-11Fix for SSL_get_certificateDr. Stephen Henson
2013-02-11Fix in ssltest is no-ssl2 configuredDr. Stephen Henson
2013-02-09ssl/*: fix linking errors with no-srtp.Andy Polyakov
2013-02-09ssl/s3_[clnt|srvr].c: fix warnings.Andy Polyakov
2013-02-08s3_cbc.c: make CBC_MAC_ROTATE_IN_PLACE universal.Andy Polyakov
2013-02-08s3_cbc.c: get rid of expensive divisions [from master].Andy Polyakov
2013-02-07Remove extraneous brackets (clang doesn't like them).Ben Laurie
2013-02-07ssl/[d1|s3]_pkt.c: harmomize orig_len handling.Andy Polyakov
2013-02-07Fix IV check and padding removal.Dr. Stephen Henson
2013-02-06Fix for EXP-RC2-CBC-MD5Adam Langley
2013-02-04make updateDr. Stephen Henson
2013-02-04Fix error codes.Dr. Stephen Henson
2013-02-02e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.Andy Polyakov
2013-02-01ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov
2013-02-01Don't access EVP_MD_CTX internals directly.Dr. Stephen Henson
2013-02-01s3/s3_cbc.c: allow for compilations with NO_SHA256|512.Andy Polyakov
2013-02-01ssl/s3_cbc.c: md_state alignment portability fix.Andy Polyakov
2013-02-01ssl/s3_cbc.c: uint64_t portability fix.Andy Polyakov
2013-01-31typo.Dr. Stephen Henson
2013-01-31Timing fix mitigation for FIPS mode.Dr. Stephen Henson
2013-01-28Oops. Add missing file.Ben Laurie
2013-01-28Update DTLS code to match CBC decoding in TLS.Ben Laurie
2013-01-28Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie
2013-01-28Make CBC decoding constant time.Ben Laurie
2013-01-28Add and use a constant-time memcmp.Ben Laurie
2012-11-22reject zero length point format list or supported curves extensionsDr. Stephen Henson
2012-11-15add "missing" TLSv1.2 cipher aliasDr. Stephen Henson
2012-09-21Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificateDr. Stephen Henson
2012-09-21* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately inRichard Levitte
2012-09-17Call OCSP Stapling callback after ciphersuite has been chosen, so theBen Laurie
2012-06-27don't use pseudo digests for default values of keysDr. Stephen Henson
2012-06-08Reduce version skew.Ben Laurie
2012-05-16s2_clnt.c: compensate for compiler bug [from HEAD].Andy Polyakov
2012-05-11PR: 2811Dr. Stephen Henson
2012-05-10PR: 2806Dr. Stephen Henson
2012-05-10Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 andDr. Stephen Henson
2012-05-10Don't forget to install srtp.h as wellRichard Levitte
2012-05-10oops, revert unrelated changeDr. Stephen Henson
2012-05-10Reported by: Solar Designer of OpenwallDr. Stephen Henson
2012-04-26Don't try to use unvalidated composite ciphers in FIPS modeDr. Stephen Henson
2012-04-25Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL andDr. Stephen Henson
2012-04-25s23_clnt.c: ensure interoperability by maitaining client "version capability"Andy Polyakov
2012-04-18correct error codeDr. Stephen Henson
2012-04-17Disable SHA-2 ciphersuites in < TLS 1.2 connections.Bodo Möller
2012-04-17Additional workaround for PR#2771Dr. Stephen Henson
2012-04-17Partial workaround for PR#2771.Dr. Stephen Henson
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-08 13:04:47 +0000