summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2014-08-28Remove serverinfo checks.Dr. Stephen Henson
2014-08-28Add custom extension sanity checks.Dr. Stephen Henson
2014-08-28Custom extension revision.Dr. Stephen Henson
2014-08-28Revision of custom extension code.Dr. Stephen Henson
2014-08-28Constant-time utilitiesEmilia Kasper
2014-08-26RT2724: Remove extra declarationJohn Fitzgibbon
2014-08-22RT3060: Limit the number of empty records.Adam Langley
2014-08-15Fixed out-of-bounds read errors in ssl3_get_key_exchange.Matt Caswell
2014-08-09Fix SRP authentication ciphersuites.Dr. Stephen Henson
2014-08-06Check SRP parameters early.Dr. Stephen Henson
2014-08-06Fix SRP ciphersuite DoS vulnerability.Dr. Stephen Henson
2014-08-06Fix race condition in ssl_parse_serverhello_tlsextGabor Tyukasz
2014-08-06Fix DTLS anonymous EC(DH) denial of serviceEmilia Käsper
2014-08-06Fix protocol downgrade bug in case of fragmented packetsDavid Benjamin
2014-08-06Remove some duplicate DTLS code.Adam Langley
2014-08-06Applying same fix as in dtls1_process_out_of_seq_message. A truncated DTLS fr...Matt Caswell
2014-08-06Fix return code for truncated DTLS fragment.Adam Langley
2014-08-06Fix memory leak from zero-length DTLS fragments.Adam Langley
2014-08-06Fix DTLS handshake message size checks.Matt Caswell
2014-08-06Added comment for the frag->reassembly == NULL case as per feedback from EmiliaMatt Caswell
2014-08-06Avoid double free when processing DTLS packets.Adam Langley
2014-08-01make updateDr. Stephen Henson
2014-07-24Add conditional unit testing interface.Dr. Stephen Henson
2014-07-15Fix DTLS certificate requesting code.Dr. Stephen Henson
2014-07-14Use more common name for GOST key exchange.Dr. Stephen Henson
2014-07-13Add names of GOST algorithms.Peter Mosmans
2014-07-09Please Clang's sanitizer.Andy Polyakov
2014-07-05s3_pkt.c: fix typo.Andy Polyakov
2014-07-05Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson
2014-07-04Remove all RFC5878 code.Dr. Stephen Henson
2014-07-02Make disabling last cipher work.Thijs Alkemade
2014-07-02Fix possible buffer overrun.Ben Laurie
2014-06-29Fix memory leak.Dr. Stephen Henson
2014-06-28Don't disable state strings with no-ssl2Dr. Stephen Henson
2014-06-28Fix compilation with -DSSL_DEBUG -DTLS_DEBUG -DKSSL_DEBUGyogesh nagarkar
2014-06-27Remove redundant check.Ken Ballou
2014-06-27Don't advertise ECC ciphersuits in SSLv2 compatible client hello.Tomas Mraz
2014-06-22Fix off-by-one errors in ssl_cipher_get_evp()Miod Vallat
2014-06-22Revert "Fix off-by-one errors in ssl_cipher_get_evp()"Matt Caswell
2014-06-22Fixed Windows compilation failureMatt Caswell
2014-06-17Fix signed/unsigned comparisons.Felix Laurie von Massenbach
2014-06-17Remove unused DANE macros. This should be the last DANE stuff...Richard Levitte
2014-06-16Spaces were added in some strings for better readability. However, those spa...Richard Levitte
2014-06-14Accept CCS after sending finished.Dr. Stephen Henson
2014-06-14Adjust VMS build files to the Unix onesRichard Levitte
2014-06-14Make sure that disabling the MAYLOSEDATA3 warning is only done when theRichard Levitte
2014-06-13Fixed incorrect return code handling in ssl3_final_finish_mac.Matt Caswell
2014-06-13Revert "Fixed incorrect return code handling in ssl3_final_finish_mac"Matt Caswell
2014-06-12Fix off-by-one errors in ssl_cipher_get_evp()Kurt Cancemi
2014-06-12Added OPENSSL_assert check as per PR#3377 reported by Rainer Jung <rainer.jun...Matt Caswell