summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2021-12-14Update copyright yearMatt Caswell
2021-12-03Fix ssl_free() and thus BIO_free() to respect BIO_NOCLOSEDr. David von Oheimb
2021-12-01No EtM for GOST ciphersDmitry Belyavskiy
2021-11-16free the Post-Handshake Auth digest when there is an error saving the digestx2018
2021-11-15Reset the rwstate before calling ASYNC_start_job()Matt Caswell
2021-11-04Fix a memory leak in ssl_create_cipher_listBernd Edlinger
2021-11-04Fix a memory leak in tls_parse_stoc_key_shareBernd Edlinger
2021-10-11New extensions can be sent in a certificate requestMatt Caswell
2021-09-27ssl: Correct filename in READMETianjia Zhang
2021-09-01Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass testsTomas Mraz
2021-08-25Fix some strict gcc-12 warningsBernd Edlinger
2021-08-25Fix the array size of dtlsseq in tls1_encBernd Edlinger
2021-08-24Update copyright yearMatt Caswell
2021-08-16Fix potential double-freeTodd Short
2021-07-20Fix some minor record layer issuesMatt Caswell
2021-07-16Disallow SSL_key_update() if there are writes pendingMatt Caswell
2021-07-16Don't reset the packet pointer in ssl3_setup_read_bufferMatt Caswell
2021-07-12Avoid "excessive message size" for session ticketsMatt Caswell
2021-07-08ssl: do not choose auto DH groups that are weaker than the security levelPauli
2021-06-04Only call dtls1_start_timer() onceMatt Caswell
2021-06-02Modify ssl_handshake_hash to call SSLfatalTrev Larock
2021-05-29Put init_ec_point_formats() inside #ifndef OPENSSL_NO_ECTomas Mraz
2021-05-27Call SSLfatal when the generate_ticket_cb returns 0Todd Short
2021-05-21Cleanup the peer point formats on regotiationDmitry Belyavskiy
2021-05-14Don't send key_share for PSK-only key exchangeBenjamin Kaduk
2021-05-14make updateBenjamin Kaduk
2021-05-14Improve RFC 8446 PSK key exchange mode complianceBenjamin Kaduk
2021-05-06Avoid sending alerts after shutdownDmitry Belyavskiy
2021-05-04Use OCSP-specific error code for clarityDmitry Belyavskiy
2021-04-13Handle set_alpn_protos inputs better.Todd Short
2021-03-30Fix BIO_new_ssl_connect() to not leak memoryNan Xiao
2021-03-25Update copyright yearMatt Caswell
2021-03-25Ensure buffer/length pairs are always in syncMatt Caswell
2021-03-25ssl sigalg extension: fix NULL pointer dereferencePeter Kaestle
2021-03-22Fix missing INVALID_EXTENSIONChenglong Zhang
2021-03-18ssl: fix coverity 1451515: out of bounds memory accessPauli
2021-02-16Update copyright yearMatt Caswell
2021-02-09Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk
2021-01-09Fix for negative return value from `SSL_CTX_sess_accept()`anupamam13
2021-01-08Ensure DTLS free functions can handle NULLMatt Caswell
2020-12-10Modify is_tls13_capable() to take account of the servername cbMatt Caswell
2020-12-08Update copyright yearMatt Caswell
2020-12-02Fix comment in do_dtls1_write()Benjamin Kaduk
2020-10-29Unify ssl3_get_cipher_by_std_name() implementationBenjamin Kaduk
2020-10-29optimise ssl3_get_cipher_by_std_name()hklaas
2020-10-26Ensure we raise SSLfatal on errorMatt Caswell
2020-10-20Avoid potential doublefree on dh object assigned to EVP_PKEYTomas Mraz
2020-10-16Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callbackMatt Caswell
2020-10-12Fixed typo in ssl_lib.cIkko Ashimine
2020-10-07Use size of target buffer for allocationBenny Baumann