summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2018-03-27Update copyright yearMatt Caswell
2018-03-21Don't wait for dry at the end of a handshakeMatt Caswell
2018-03-21Check for alerts while waiting for a dry eventMatt Caswell
2018-03-20Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEERBenjamin Kaduk
2018-03-17Fix a memory leak in tls1_macBernd Edlinger
2018-03-17Fix a memory leak in n_ssl3_macBernd Edlinger
2018-02-21Sanity check the ticket length before using key name/IVMatt Caswell
2018-02-09Swap the check in ssl3_write_pending to avoid usingBernd Edlinger
2018-02-09Don't calculate the Finished MAC twiceMatt Caswell
2018-01-30Add the SSL_OP_NO_RENEGOTIATION option to 1.1.0Matt Caswell
2018-01-30Make sure we check an incoming reneg ClientHello in DTLSMatt Caswell
2018-01-10Make data argument const in SSL_dane_tlsa_addPatrick Schlangen
2018-01-09Tolerate DTLS alerts with an incorrect version numberMatt Caswell
2018-01-06Stop using unimplemented cipher classes.Bernd Edlinger
2017-12-18Add comments to NULL func ptrs in bio_method_stDaniel Bevenius
2017-12-16Fix invalid function type casts.Bernd Edlinger
2017-12-11Fix a switch statement fallthroughMatt Caswell
2017-12-10Make BIO_METHOD struct definitions consistentDaniel Bevenius
2017-12-08Standardize syntax of sizeof(foo)Rich Salz
2017-12-08Correct minor typo in ssl_locl.h commentDaniel Bevenius
2017-12-08In OPENSSL_init_ssl(), run the base ssl init before OPENSSL_init_crypto()Richard Levitte
2017-11-07Mark a zero length record as readMatt Caswell
2017-10-05Test mac-then-encryptEmilia Kasper
2017-10-05Add SSL_OP_NO_ENCRYPT_THEN_MACDavid Woodhouse
2017-10-04Remove an incorrect commentMatt Caswell
2017-09-15Provide getters for min/max proto versionChristian Heimes
2017-09-15Error out when forcing an unsupported TLS versionBenjamin Kaduk
2017-08-25NO_SYS_TYPES_H isn't defined anywhere, stop using it as a guardRichard Levitte
2017-08-22Fix ctype arguments.Pauli
2017-08-16Reorder extensions to put SigAlgs lastTodd Short
2017-08-03remove horrible pragma macro and remove __owur from SSL_CTX_add_session() dec...Lingmo Zhu
2017-08-03Remove the obsolete misleading comment and code related to it.Lingmo Zhu
2017-07-31Fix errors in SSL_state_string_longXiaoyin Liu
2017-07-14Fix gcc-7 warnings about missing fall thru comments.Bernd Edlinger
2017-07-09Fix cipher_compareRichard Levitte
2017-06-22Fix the names of ChaCha20-Poly1305 cipher suites in t1_trce.c.David Benjamin
2017-06-21Add documentation for the SSL_export_keying_material() functionMatt Caswell
2017-06-21Fix DTLS failure when used in a build which has SCTP enabledMatt Caswell
2017-06-21Don't fail the connection in SSLv3 if server selects ECDHEMatt Caswell
2017-06-14Fix ex_data and session_dup issuesTodd Short
2017-06-09fix broken implementations of GOST ciphersuitesRich Salz
2017-06-08Ignore -named_curve auto value to improve backwards compatibilityTomas Mraz
2017-06-08Use memset to clear SRP_CTX instead of NULL and zero assignmentsDiego Santa Cruz
2017-06-08Make SRP_CTX.info ownership and lifetime be the same as SRP_CTX.login.Diego Santa Cruz
2017-05-26Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATIONTodd Short
2017-05-19Make SSL_is_server() accept a const SSLMatt Caswell
2017-05-10Copy custom extension flags in a call to SSL_set_SSL_CTX()Matt Caswell
2017-05-09Remove support for OPENSSL_SSL_TRACE_CRYPTOMatt Caswell
2017-04-26CT_POLICY_EVAL_CTX_set_time expects milliseconds, but given secondsRob Percival
2017-04-25Don't attempt to send fragments > max_send_fragment in DTLSMatt Caswell