summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2020-07-16Update copyright yearRichard Levitte
2020-07-16Revert "kdf: make function naming consistent."Matt Caswell
2020-07-16Revert "The EVP_MAC functions have been renamed for consistency. The EVP_MAC...Matt Caswell
2020-07-16deprecate engines in SSLPauli
2020-07-16Add SSL_get[01]_peer_certificate()Todd Short
2020-07-11Providerized libssl fallout: cleanup initBenjamin Kaduk
2020-07-08Fix an incorrect error flow in add_provider_groupsMatt Caswell
2020-07-07Add support to zeroize plaintext in S3 record layerMartin Elshuber
2020-07-06Ensure TLS padding is added during encryption on the provider sideMatt Caswell
2020-07-06Convert SSLv3 handling to use provider side CBC/MAC removalMatt Caswell
2020-07-06Make libssl start using the TLS provider CBC supportMatt Caswell
2020-07-06Add provider support for TLS CBC padding and MAC removalMatt Caswell
2020-07-06Remove SSL dependencies from tls_pad.cMatt Caswell
2020-07-06Split the padding/mac removal functions out into a separate fileMatt Caswell
2020-07-06Move MAC removal responsibility to the various protocol "enc" functionsMatt Caswell
2020-07-05SSL: fix misuse of ERR_LIB_SYSRichard Levitte
2020-07-05Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md filesDr. David von Oheimb
2020-07-05Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txtDr. David von Oheimb
2020-07-01Free pre_proc_exts in SSL_free()MiƂosz Kaniewski
2020-06-27Reduce the security bits for MD5 and SHA1 based signatures in TLSKurt Roeckx
2020-06-23Don't attempt to duplicate the BIO state in SSL_dupMatt Caswell
2020-06-23Ensure that SSL_dup copies the min/max protocol versionMatt Caswell
2020-06-19Fix the DTLS1_COOKIE_LENGTH valueMatt Caswell
2020-06-19Create defines for TLS Group IdsMatt Caswell
2020-06-19Don't send supported groups if no-ec and we're doing DTLSMatt Caswell
2020-06-19Provider a better error message if we fail to copy parametersMatt Caswell
2020-06-19Update the various SSL group getting and setting functionsMatt Caswell
2020-06-19Modify libssl to discover supported groups based on available providersMatt Caswell
2020-06-11The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_*Pauli
2020-06-11kdf: make function naming consistent.Pauli
2020-06-09Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz
2020-06-09use safe primes in ssl_get_auto_dh()Hubert Kario
2020-06-08TLSv1.3: additional checks in SSL_set_record_padding_callbackVadim Fedorenko
2020-06-08TLSv13: add kTLS supportVadim Fedorenko
2020-06-08kTLS: add support for AES_CCM128 and AES_GCM256Vadim Fedorenko
2020-06-05Don't downgrade keys in libsslMatt Caswell
2020-06-05Check that Signature Algorithms are available before using themMatt Caswell
2020-06-04Add cipher list ciphersuites which using encryption algorithm in mode CBC.Otto Hollmann
2020-06-04Update copyright yearMatt Caswell
2020-06-02Move EC_METHOD to internal-onlyBilly Brumley
2020-06-01undeprecate SSL_CTX_load_verify_locations and X509_STORE_load_locationsTim Hudson
2020-05-27Rename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp_parameters() to EVP_P...Dr. David von Oheimb
2020-05-20t1_trce: Fix remaining places where the 24 bit shift overflow happensTomas Mraz
2020-05-19Introducing option SSL_OP_IGNORE_UNEXPECTED_EOFDmitry Belyavskiy
2020-05-19New Russian TLS 1.2 implementationDmitry Belyavskiy
2020-05-15Fix crash in early data send with out-of-band PSK using AES CCMraja-ashok
2020-05-15SSL: refactor ssl_cert_lookup_by_pkey() to work with provider side keysRichard Levitte
2020-05-15Update copyright yearMatt Caswell
2020-05-15Correct alignment calculation in ssl3_setup_writeMatt Caswell
2020-05-07Fix use-after-free in BIO_C_SET_SSL callbackDr. Matthias St. Pierre