summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2022-03-30Fix usage of SSLfatalMatt Caswell
2022-03-30tls_process_server_hello: Disallow repeated HRRTomas Mraz
2022-03-25ticket_lifetime_hint may exceed 1 week in TLSv1.3Todd Short
2022-03-23Fix Coverity 1498611 & 1498608: uninitialised readPauli
2022-03-18print SSL session, fix build warnings on OpenBSD.David Carlier
2022-03-15Update copyright yearMatt Caswell
2022-03-03[ssl] Add SSL_kDHEPSK and SSL_kECDHEPSK as PFS ciphersuites for SECLEVEL >= 3Nicola Tuveri
2022-03-03[ssl] Prefer SSL_k(EC)?DHE to the SSL_kE(EC)?DH aliasNicola Tuveri
2021-12-14Update copyright yearMatt Caswell
2021-12-03Fix ssl_free() and thus BIO_free() to respect BIO_NOCLOSEDr. David von Oheimb
2021-12-01No EtM for GOST ciphersDmitry Belyavskiy
2021-11-16free the Post-Handshake Auth digest when there is an error saving the digestx2018
2021-11-15Reset the rwstate before calling ASYNC_start_job()Matt Caswell
2021-11-04Fix a memory leak in ssl_create_cipher_listBernd Edlinger
2021-11-04Fix a memory leak in tls_parse_stoc_key_shareBernd Edlinger
2021-10-11New extensions can be sent in a certificate requestMatt Caswell
2021-09-27ssl: Correct filename in READMETianjia Zhang
2021-09-01Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass testsTomas Mraz
2021-08-25Fix some strict gcc-12 warningsBernd Edlinger
2021-08-25Fix the array size of dtlsseq in tls1_encBernd Edlinger
2021-08-24Update copyright yearMatt Caswell
2021-08-16Fix potential double-freeTodd Short
2021-07-20Fix some minor record layer issuesMatt Caswell
2021-07-16Disallow SSL_key_update() if there are writes pendingMatt Caswell
2021-07-16Don't reset the packet pointer in ssl3_setup_read_bufferMatt Caswell
2021-07-12Avoid "excessive message size" for session ticketsMatt Caswell
2021-07-08ssl: do not choose auto DH groups that are weaker than the security levelPauli
2021-06-04Only call dtls1_start_timer() onceMatt Caswell
2021-06-02Modify ssl_handshake_hash to call SSLfatalTrev Larock
2021-05-29Put init_ec_point_formats() inside #ifndef OPENSSL_NO_ECTomas Mraz
2021-05-27Call SSLfatal when the generate_ticket_cb returns 0Todd Short
2021-05-21Cleanup the peer point formats on regotiationDmitry Belyavskiy
2021-05-14Don't send key_share for PSK-only key exchangeBenjamin Kaduk
2021-05-14make updateBenjamin Kaduk
2021-05-14Improve RFC 8446 PSK key exchange mode complianceBenjamin Kaduk
2021-05-06Avoid sending alerts after shutdownDmitry Belyavskiy
2021-05-04Use OCSP-specific error code for clarityDmitry Belyavskiy
2021-04-13Handle set_alpn_protos inputs better.Todd Short
2021-03-30Fix BIO_new_ssl_connect() to not leak memoryNan Xiao
2021-03-25Update copyright yearMatt Caswell
2021-03-25Ensure buffer/length pairs are always in syncMatt Caswell
2021-03-25ssl sigalg extension: fix NULL pointer dereferencePeter Kaestle
2021-03-22Fix missing INVALID_EXTENSIONChenglong Zhang
2021-03-18ssl: fix coverity 1451515: out of bounds memory accessPauli
2021-02-16Update copyright yearMatt Caswell
2021-02-09Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk
2021-01-09Fix for negative return value from `SSL_CTX_sess_accept()`anupamam13
2021-01-08Ensure DTLS free functions can handle NULLMatt Caswell
2020-12-10Modify is_tls13_capable() to take account of the servername cbMatt Caswell
2020-12-08Update copyright yearMatt Caswell
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-09 06:22:08 +0000