summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2021-09-07Update copyright yearRichard Levitte
2021-09-03Fix indentation of tls13_hkdf_expand parametersDaniel Bevenius
2021-08-31Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass testsTomas Mraz
2021-08-25Fix the array size of dtlsseq in tls1_encBernd Edlinger
2021-08-19Fix state name abbreviationTodd Short
2021-08-16Fix potential double-freeTodd Short
2021-08-11Omitted signature_algorithms extension alerts updatedDmitry Belyavskiy
2021-08-05tls/prov: move the TLS 1.3 KDF code to providersPauli
2021-07-29Fix dtls timeout dead codeyangyangtiantianlonglong
2021-07-29Update copyright yearMatt Caswell
2021-07-28Add missing session timeout calcTodd Short
2021-07-27KTLS: AES-CCM in TLS-1.3 is broken on 5.x kernels, disable itTomas Mraz
2021-07-21tls_process_{client,server}_certificate(): allow verify_callback return > 1Dr. David von Oheimb
2021-07-17Fix some minor record layer issuesMatt Caswell
2021-07-16Disallow SSL_key_update() if there are writes pendingMatt Caswell
2021-07-16Don't reset the packet pointer in ssl3_setup_read_bufferMatt Caswell
2021-07-06Avoid "excessive message size" for session ticketsMatt Caswell
2021-07-06fips module header inclusion fine-tunningTomas Mraz
2021-06-23Adapt other parts of the source to the changed EVP_Q_digest() and EVP_Q_mac()Richard Levitte
2021-06-23cross-reference the DH and RSA SECLEVEL to level of security mappingsHubert Kario
2021-06-19ssl: fix indentationPauli
2021-06-19ssl: fix indentationPauli
2021-06-19ssl: replace tabs with spacesPauli
2021-06-19ssl: do not choose auto DH groups that are weaker than the security levelPauli
2021-06-17Update copyright yearMatt Caswell
2021-06-15Disabling Encrypt-then-MAC extension in s_client/s_serverDmitry Belyavskiy
2021-06-14Do not duplicate symbols between libcrypto and libssl in static buildsTomas Mraz
2021-06-10Optimize session cache flushingTodd Short
2021-06-04Only call dtls1_start_timer() onceMatt Caswell
2021-06-02tls: remove TODOsPauli
2021-06-01Modify ssl_handshake_hash to call SSLfatalTrev Larock
2021-06-01Rename all getters to use get/get0 in nameTomas Mraz
2021-06-01ssl: ass size_t to RAND_bytes_ex()Pauli
2021-05-29ssl: add zero strenght arguments to BN and RAND RNG callsPauli
2021-05-27Call SSLfatal when the generate_ticket_cb returns 0Todd Short
2021-05-27Fix compilation warning with GCC11.Juergen Christ
2021-05-27Use "" for include crypto/xxxRich Salz
2021-05-27Use "" for include internal/xxxRich Salz
2021-05-26err: rename err_load_xxx_strings_int functionsPauli
2021-05-25Allow TLS13_AD_MISSING_EXTENSION for older versionsBenjamin Kaduk
2021-05-21Cleanup the peer point formats on regotiationDmitry Belyavskiy
2021-05-20Update copyright yearMatt Caswell
2021-05-19Let SSL_new_session_ticket() enter init immediatelyBenjamin Kaduk
2021-05-17Add SSL_OP_ALLOW_CLIENT_RENEGOTIATIONRich Salz
2021-05-15Promote SSL_get_negotiated_group() for non-TLSv1.3Benjamin Kaduk
2021-05-14Slightly reformat ssl.h.inRich Salz
2021-05-14Convert SSL_{CTX}_[gs]et_options to 64Rich Salz
2021-05-13Replace EVP_PKEY_supports_digest_nidTomas Mraz
2021-05-12Don't send key_share for PSK-only key exchangeBenjamin Kaduk
2021-05-12make updateBenjamin Kaduk