summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2013-02-26Fix error codes.Dr. Stephen Henson
2013-02-21Fix ignored return value warnings.Ben Laurie
2013-02-21make depend.Ben Laurie
2013-02-12Check DTLS_BAD_VER for version number.David Woodhouse
2013-02-11Fix in ssltest is no-ssl2 configuredDr. Stephen Henson
2013-02-08s3_cbc.c: make CBC_MAC_ROTATE_IN_PLACE universal.Andy Polyakov
2013-02-08s3_cbc.c: get rid of expensive divisions.Andy Polyakov
2013-02-08s3_cbc.c: fix warning [in Windows build].Andy Polyakov
2013-02-08ssl/*: revert "remove SSL_RECORD->orig_len" and merge "fix IV".Andy Polyakov
2013-02-06Fix for EXP-RC2-CBC-MD5Adam Langley
2013-02-06e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.Andy Polyakov
2013-02-06ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov
2013-02-06Don't access EVP_MD_CTX internals directly.Dr. Stephen Henson
2013-02-06s3/s3_cbc.c: allow for compilations with NO_SHA256|512.Andy Polyakov
2013-02-06ssl/s3_cbc.c: md_state alignment portability fix.Andy Polyakov
2013-02-06ssl/s3_cbc.c: uint64_t portability fix.Andy Polyakov
2013-02-06typo.Dr. Stephen Henson
2013-02-06Timing fix mitigation for FIPS mode.Dr. Stephen Henson
2013-02-06Oops. Add missing file.Ben Laurie
2013-02-06Update DTLS code to match CBC decoding in TLS.Ben Laurie
2013-02-06Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie
2013-02-06Make CBC decoding constant time.Ben Laurie
2013-02-06Add and use a constant-time memcmp.Ben Laurie
2013-02-04Fix for trace code: SSL3 doesn't include a length value forDr. Stephen Henson
2013-01-24Fix warning: lenmax isn't used any more.Dr. Stephen Henson
2013-01-19Improve WINCE support.Andy Polyakov
2013-01-19Remove extraneous brackets (clang doesn't like them).Ben Laurie
2013-01-19Can't check a size_t for < 0.Ben Laurie
2013-01-19Make "make depend" work on MacOS out of the box.Ben Laurie
2012-12-29stop warning when compiling with no-compDr. Stephen Henson
2012-12-26typoDr. Stephen Henson
2012-12-18Use client version when deciding which cipher suites to disable.Dr. Stephen Henson
2012-12-16d1_lib.c,bss_dgram.c: eliminate dependency on _ftime.Andy Polyakov
2012-12-10revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 i...Dr. Stephen Henson
2012-12-09allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY modeDr. Stephen Henson
2012-12-07send out the raw SSL/TLS headers to the msg_callback and display them in SSL_...Dr. Stephen Henson
2012-12-07typoDr. Stephen Henson
2012-12-07really fix automatic ;-)Dr. Stephen Henson
2012-12-06fix handling of "automatic" in file modeDr. Stephen Henson
2012-12-01return error if Suite B mode is selected and TLS 1.2 can't be used. Correct e...Dr. Stephen Henson
2012-11-26Print out point format list for clients too.Dr. Stephen Henson
2012-11-26Use default point formats extension for server side as well as clientDr. Stephen Henson
2012-11-26change inaccurate error messageDr. Stephen Henson
2012-11-26set auto ecdh parameter selction for Suite BDr. Stephen Henson
2012-11-24add Suite B 128 bit mode offering only combination 2Dr. Stephen Henson
2012-11-22Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-11-22reject zero length point format list or supported curves extensionsDr. Stephen Henson
2012-11-21curves can be set in both client and serverDr. Stephen Henson
2012-11-21use correct return values when callin cmdDr. Stephen Henson
2012-11-19make dependDr. Stephen Henson