summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2020-06-04Update copyright yearMatt Caswell
2020-06-02Move EC_METHOD to internal-onlyBilly Brumley
2020-06-01undeprecate SSL_CTX_load_verify_locations and X509_STORE_load_locationsTim Hudson
2020-05-27Rename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp_parameters() to EVP_P...Dr. David von Oheimb
2020-05-20t1_trce: Fix remaining places where the 24 bit shift overflow happensTomas Mraz
2020-05-19Introducing option SSL_OP_IGNORE_UNEXPECTED_EOFDmitry Belyavskiy
2020-05-19New Russian TLS 1.2 implementationDmitry Belyavskiy
2020-05-15Fix crash in early data send with out-of-band PSK using AES CCMraja-ashok
2020-05-15SSL: refactor ssl_cert_lookup_by_pkey() to work with provider side keysRichard Levitte
2020-05-15Update copyright yearMatt Caswell
2020-05-15Correct alignment calculation in ssl3_setup_writeMatt Caswell
2020-05-07Fix use-after-free in BIO_C_SET_SSL callbackDr. Matthias St. Pierre
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov
2020-05-06Don't offer or accept ciphersuites that we can't supportMatt Caswell
2020-05-05Fix up whitespace nits introduced by PR #11416Benjamin Kaduk
2020-05-01Add SSL_new_session_ticket() APIBenjamin Kaduk
2020-05-01Fix whitespace nit in ossl_statem_server_pre_workBenjamin Kaduk
2020-04-30coverity 1462581 Dereference after null checkPauli
2020-04-30coverity 1462570 Resource leakPauli
2020-04-28Fix GOST curve sec bitsNikolay Morozov
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2020-04-23Update copyright yearMatt Caswell
2020-04-22GOST2012 TLS Supported Groups Identifiers SupportNikolay Morozov
2020-04-21Fix test_ssl_new test failureMatt Caswell
2020-04-21Fix NULL dereference in SSL_check_chain() for TLS 1.3Benjamin Kaduk
2020-04-20Use a fetched MD if appropriate in ssl3_cbc_digest_recordMatt Caswell
2020-04-19Use the libctx for all EVP_PKEY_CTX operationsMatt Caswell
2020-04-18GOST2012 TLS ClientCertificateType Identifiers supportNikolay Morozov
2020-04-16TLSEXT_SIGALG_gostr34102012 0x0840 and 0x0841 supportNikolay Morozov
2020-04-15Make sure we always send an alert in libssl if we hit a fatal errorMatt Caswell
2020-04-15Make sure we use the libctx in libssl when loading PrivateKeysMatt Caswell
2020-04-09Ensure libssl uses the new library context aware CT codeMatt Caswell
2020-04-09Explicitly cache the X509v3_extensions in one more place in libsslMatt Caswell
2020-04-08Use X509_STORE_CTX_new_with_libctx() in libsslMatt Caswell
2020-04-08TLS: Temporarly downgrade newly generated EVP_PKEYs to legacyRichard Levitte
2020-04-08EVP & TLS: Add necessary EC_KEY data extraction functions, and use themRichard Levitte
2020-04-02TLS Cipher Suite 0xC102 SupportNikolay Morozov
2020-04-01Make sure we use the libctx when creating an EVP_PKEY_CTX in libsslMatt Caswell
2020-04-01Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libsslMatt Caswell
2020-04-01Don't double free a DH objectMatt Caswell
2020-03-30Give a better error if we can't find a sig algMatt Caswell
2020-03-30Explicitly cache X509v3 extensions in libsslMatt Caswell
2020-03-30Don't attempt to up-ref an EVP_CIPHER if it is NULLMatt Caswell
2020-03-27Update libssl to use the new library context aware SRP functionsMatt Caswell
2020-03-27Ignore some fetch failuresMatt Caswell
2020-03-26Use a fetched cipher for the TLSv1.3 early secretMatt Caswell
2020-03-26Use a fetched cipher when decrypting a ticket in libsslMatt Caswell
2020-03-24Make sure we use a fetched cipher when encrypting stateless ticketsMatt Caswell
2020-03-24Use a fetched version of SHA256 in tls_process_new_session_ticket()Matt Caswell
2020-03-23Use correct libctx when fetching the TLS1 PRF in libsslMatt Caswell