summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2020-06-23Don't attempt to duplicate the BIO state in SSL_dupMatt Caswell
2020-06-23Ensure that SSL_dup copies the min/max protocol versionMatt Caswell
2020-06-19Fix the DTLS1_COOKIE_LENGTH valueMatt Caswell
2020-06-19Create defines for TLS Group IdsMatt Caswell
2020-06-19Don't send supported groups if no-ec and we're doing DTLSMatt Caswell
2020-06-19Provider a better error message if we fail to copy parametersMatt Caswell
2020-06-19Update the various SSL group getting and setting functionsMatt Caswell
2020-06-19Modify libssl to discover supported groups based on available providersMatt Caswell
2020-06-11The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_*Pauli
2020-06-11kdf: make function naming consistent.Pauli
2020-06-09Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz
2020-06-09use safe primes in ssl_get_auto_dh()Hubert Kario
2020-06-08TLSv1.3: additional checks in SSL_set_record_padding_callbackVadim Fedorenko
2020-06-08TLSv13: add kTLS supportVadim Fedorenko
2020-06-08kTLS: add support for AES_CCM128 and AES_GCM256Vadim Fedorenko
2020-06-05Don't downgrade keys in libsslMatt Caswell
2020-06-05Check that Signature Algorithms are available before using themMatt Caswell
2020-06-04Add cipher list ciphersuites which using encryption algorithm in mode CBC.Otto Hollmann
2020-06-04Update copyright yearMatt Caswell
2020-06-02Move EC_METHOD to internal-onlyBilly Brumley
2020-06-01undeprecate SSL_CTX_load_verify_locations and X509_STORE_load_locationsTim Hudson
2020-05-27Rename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp_parameters() to EVP_P...Dr. David von Oheimb
2020-05-20t1_trce: Fix remaining places where the 24 bit shift overflow happensTomas Mraz
2020-05-19Introducing option SSL_OP_IGNORE_UNEXPECTED_EOFDmitry Belyavskiy
2020-05-19New Russian TLS 1.2 implementationDmitry Belyavskiy
2020-05-15Fix crash in early data send with out-of-band PSK using AES CCMraja-ashok
2020-05-15SSL: refactor ssl_cert_lookup_by_pkey() to work with provider side keysRichard Levitte
2020-05-15Update copyright yearMatt Caswell
2020-05-15Correct alignment calculation in ssl3_setup_writeMatt Caswell
2020-05-07Fix use-after-free in BIO_C_SET_SSL callbackDr. Matthias St. Pierre
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov
2020-05-06Don't offer or accept ciphersuites that we can't supportMatt Caswell
2020-05-05Fix up whitespace nits introduced by PR #11416Benjamin Kaduk
2020-05-01Add SSL_new_session_ticket() APIBenjamin Kaduk
2020-05-01Fix whitespace nit in ossl_statem_server_pre_workBenjamin Kaduk
2020-04-30coverity 1462581 Dereference after null checkPauli
2020-04-30coverity 1462570 Resource leakPauli
2020-04-28Fix GOST curve sec bitsNikolay Morozov
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2020-04-23Update copyright yearMatt Caswell
2020-04-22GOST2012 TLS Supported Groups Identifiers SupportNikolay Morozov
2020-04-21Fix test_ssl_new test failureMatt Caswell
2020-04-21Fix NULL dereference in SSL_check_chain() for TLS 1.3Benjamin Kaduk
2020-04-20Use a fetched MD if appropriate in ssl3_cbc_digest_recordMatt Caswell
2020-04-19Use the libctx for all EVP_PKEY_CTX operationsMatt Caswell
2020-04-18GOST2012 TLS ClientCertificateType Identifiers supportNikolay Morozov
2020-04-16TLSEXT_SIGALG_gostr34102012 0x0840 and 0x0841 supportNikolay Morozov
2020-04-15Make sure we always send an alert in libssl if we hit a fatal errorMatt Caswell
2020-04-15Make sure we use the libctx in libssl when loading PrivateKeysMatt Caswell
2020-04-09Ensure libssl uses the new library context aware CT codeMatt Caswell