openssl - Mirror of https://github.com/openssl/openssl

Age	Commit message (Expand)	Author
2020-09-22	Update copyright year	Matt Caswell
2020-09-21	Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP sign	Norman Ashley
2020-09-21	Disallow certs with explicit curve in verification chain	Tomas Mraz
2020-09-07	Coverity Fixes	Shane Lontis
2020-08-13	Avoid segfault in SSL_export_keying_material if there is no session	Tomas Mraz
2020-07-22	Avoid errors with a priori inapplicable protocol bounds	Viktor Dukhovni
2020-07-01	Free pre_proc_exts in SSL_free()	Miłosz Kaniewski
2020-06-30	Don't attempt to duplicate the BIO state in SSL_dup	Matt Caswell
2020-06-30	Ensure that SSL_dup copies the min/max protocol version	Matt Caswell
2020-06-17	use safe primes in ssl_get_auto_dh()	Hubert Kario
2020-06-11	Do not allow dropping Extended Master Secret extension on renegotiaton	Tomas Mraz
2020-05-20	t1_trce: Fix remaining places where the 24 bit shift overflow happens	Tomas Mraz
2020-05-15	Fix crash in early data send with out-of-band PSK using AES CCM	raja-ashok
2020-05-15	Correct alignment calculation in ssl3_setup_write	Matt Caswell
2020-05-07	Fix use-after-free in BIO_C_SET_SSL callback	Dr. Matthias St. Pierre
2020-04-21	Fix NULL dereference in SSL_check_chain() for TLS 1.3	Benjamin Kaduk
2020-03-25	Partially revert "Detect EOF while reading in libssl"	Tomas Mraz
2020-03-17	Update copyright year	Matt Caswell
2020-03-13	Code to thread-safety in ChangeCipherState	Benjamin Kaduk
2020-03-13	Don't write to the session when computing TLS 1.3 keys	Benjamin Kaduk
2020-03-13	Fix whitespace nit in ssl_generate_master_secret()	Benjamin Kaduk
2020-02-20	Detect EOF while reading in libssl	Matt Caswell
2020-02-19	Handle max_fragment_length overflow for DTLS	Simon Cornish
2020-02-16	Check that ed25519 and ed448 are allowed by the security level	Kurt Roeckx
2020-01-30	Don't acknowledge a servername following warning alert in servername cb	Matt Caswell
2020-01-30	Fix SSL_get_servername() and SNI behaviour	Matt Caswell
2020-01-25	Check that the default signature type is allowed	Kurt Roeckx
2020-01-21	Fix TLS not using aes_cbc_hmac_sha ciphers	Bernd Edlinger
2020-01-02	Update tls13_enc.c	dcruette
2019-12-14	Parse large GOST ClientKeyExchange messages	Dmitry Belyavskiy
2019-12-11	Fix some typos	Veres Lajos
2019-11-21	Fix a race condition in SNI handling	Benjamin Kaduk
2019-11-12	SSL: Document SSL_add_{file,dir}_cert_subjects_to_stack()	Richard Levitte
2019-11-11	Fix misspelled resumption_label for CHARSET_EBCDIC	Ido Ben-Natan
2019-11-10	Workaround for Windows-based GOST implementations	Dmitry Belyavskiy
2019-10-10	ssl/statem/statem_lib.c: make servercontext/clientcontext arrays of chars ins...	Artiom Vaskov
2019-10-07	Send bad_record_mac instead of decryption_failed	Matt Caswell
2019-10-03	'init_buf' memory can be freed when DTLS is used over SCTP (not over UDP).	NaveenShivanna86
2019-10-03	Do not print extensions in Certificate message for TLS1.2 and lower	Daniil Zotkin
2019-09-27	Fix header file include guard names	Dr. Matthias St. Pierre
2019-09-27	Reorganize local header files	Dr. Matthias St. Pierre
2019-09-10	Update copyright year	Matt Caswell
2019-09-06	Don't send a status_request extension in a CertificateRequest message	Matt Caswell
2019-09-04	Fix SSL_set_ciphersuites to set even if no call to SSL_set_cipher_list	raja-ashok
2019-09-04	Fix bogus check for EVP_PKEY mandatory digest in check_cert_usable()	David Woodhouse
2019-08-14	Fix SSL_check_chain()	Matt Caswell
2019-08-14	Add missing EBCDIC strings	opensslonzos-github
2019-08-05	Fix SSL_MODE_RELEASE_BUFFERS functionality	Matt Caswell
2019-08-01	Use allow_early_data_cb from SSL instead of SSL_CTX	raja-ashok
2019-07-25	Don't generate an unnecessary Diffie-Hellman key in TLS 1.3 clients.	David Benjamin