summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2014-08-06Fix DTLS anonymous EC(DH) denial of serviceEmilia Käsper
2014-08-06Fix protocol downgrade bug in case of fragmented packetsDavid Benjamin
2014-08-06Remove some duplicate DTLS code.Adam Langley
2014-08-06Applying same fix as in dtls1_process_out_of_seq_message. A truncated DTLS fr...Matt Caswell
2014-08-06Fix return code for truncated DTLS fragment.Adam Langley
2014-08-06Fix memory leak from zero-length DTLS fragments.Adam Langley
2014-08-06Fix DTLS handshake message size checks.Matt Caswell
2014-08-06Added comment for the frag->reassembly == NULL case as per feedback from EmiliaMatt Caswell
2014-08-06Avoid double free when processing DTLS packets.Adam Langley
2014-07-15Fix DTLS certificate requesting code.Dr. Stephen Henson
2014-07-07Fix ECC SSLv2 exclusion on OpenSSL 0.9.8.Dr. Stephen Henson
2014-07-05Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson
2014-06-29Fix memory leak.Dr. Stephen Henson
2014-06-28Don't disable state strings with no-ssl2Dr. Stephen Henson
2014-06-27Remove redundant check.Ken Ballou
2014-06-27Don't advertise ECC ciphersuits in SSLv2 compatible client hello.Tomas Mraz
2014-06-22 Fix off-by-one errors in ssl_cipher_get_evp()Miod Vallat
2014-06-22Revert " Fix off-by-one errors in ssl_cipher_get_evp()"Matt Caswell
2014-06-14Accept CCS after sending finished.Dr. Stephen Henson
2014-06-12 Fix off-by-one errors in ssl_cipher_get_evp()Kurt Cancemi
2014-06-12Allow the maximum value.Ben Laurie
2014-06-10Fix null pointer errors.Dr. Stephen Henson
2014-06-05Fixed Windows compilation failureMatt Caswell
2014-06-03Fix CVE-2014-3470Dr. Stephen Henson
2014-06-03Fix CVE-2014-0221Dr. Stephen Henson
2014-06-03Additional CVE-2014-0224 protection.Dr. Stephen Henson
2014-06-03Fix for CVE-2014-0224Dr. Stephen Henson
2014-06-03Fix for CVE-2014-0195Dr. Stephen Henson
2014-06-02Free up s->d1->buffered_app_data.q properly.zhu qun-ying
2014-06-02Typo: set i to -1 before goto.Sami Farin
2014-06-01Allocate extra space when NETSCAPE_HANG_BUG defined.David Ramos
2014-05-29Fix signed/unsigned warning.Ben Laurie
2014-05-25Fix for non compilation with TLS_DEBUG definedMatt Caswell
2014-05-12Check sk_SSL_CIPHER_num() after assigning sk.Kurt Roeckx
2014-05-12Avoid out-of-bounds write in SSL_get_shared_ciphersGünther Noack
2014-05-11safety check to ensure we dont send out beyond the users bufferTim Hudson
2014-03-27Fix alert handling.mancha
2014-01-04Restore SSL_OP_MSIE_SSLV2_RSA_PADDINGDr. Stephen Henson
2013-10-04Fix compilation with this branch's definition of SSL_CIPHER.Rob Stradling
2013-10-04Remove empty line.Rob Stradling
2013-10-04Tidy up comments.Rob Stradling
2013-10-04Use TLS version supplied by client when fingerprinting Safari.Rob Stradling
2013-10-04Backport TLS 1.1/1.2 #definesRob Stradling
2013-10-04Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling
2013-08-13DTLS message_sequence number wrong in rehandshake ServerHelloMichael Tuexen
2013-08-08DTLS handshake fix.Michael Tuexen
2013-04-08Set s->d1 to NULL after freeing it.Dr. Stephen Henson
2013-03-19Disable compression for DTLS.Dr. Stephen Henson
2013-03-18Avoid unnecessary fragmentation.Michael Tuexen
2013-02-26Use orig_len, not rec->orig_lenGeoff Lowe
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-22 22:52:19 +0000