summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2020-11-26Update copyright yearMatt Caswell
2020-11-24ERR: Rebuild all generated error headers and source filesRichard Levitte
2020-11-24Modify the ERR init functions to use the internal ERR string loadersRichard Levitte
2020-11-23Move some libssl global variables into SSL_CTXMatt Caswell
2020-11-20SSL: Change SSLerr() to ERR_raise()Richard Levitte
2020-11-18Deprecate RSA harderRichard Levitte
2020-11-18Return sensible values for some SSL ctrlsMatt Caswell
2020-11-18Only disabled what we need to in a no-dh buildMatt Caswell
2020-11-18Implement a replacement for SSL_set_tmp_dh()Matt Caswell
2020-11-18Disable the DHParameters config option in a no-deprecated buildMatt Caswell
2020-11-18Remove DH usage from tls_process_cke_dheMatt Caswell
2020-11-18Remove DH usage in tls_construct_server_key_exchange()Matt Caswell
2020-11-18Avoid the use of a DH object in tls_construct_cke_dhe()Matt Caswell
2020-11-18Deprecate SSL_CTRL_SET_TMP_DH and other related ctrlsMatt Caswell
2020-11-18Convert TLS ServerKeyExchange processing to use an EVP_PKEYMatt Caswell
2020-11-18Convert TLS auto DH parameters to use EVP_PKEYMatt Caswell
2020-11-11SSL: refactor all SSLfatal() callsRichard Levitte
2020-11-11SSL: refactor ossl_statem_fatal() and SSLfatal()Richard Levitte
2020-11-11Convert all {NAME}err() in ssl/ to their corresponding ERR_raise() callRichard Levitte
2020-11-02Adjust error reason for ssl_get_min_max_version() failureBenjamin Kaduk
2020-11-02Clear error queue entries from bad DLTS recordsBenjamin Kaduk
2020-10-29Unify ssl3_get_cipher_by_std_name() implementationBenjamin Kaduk
2020-10-26Ensure we raise SSLfatal on errorMatt Caswell
2020-10-22Rename EVP_MAC_size() to EVP_MAC_CTX_get_mac_size().Shane Lontis
2020-10-20Rename EVP_PKEY_set1_tls_encodedpoint to EVP_PKEY_set1_encoded_public_keyMatt Caswell
2020-10-16Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callbackMatt Caswell
2020-10-16Concentrate deprecated libssl API usage in one fileMatt Caswell
2020-10-15Update copyright yearMatt Caswell
2020-10-15Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre
2020-10-14[ssl] Support ssl_encapsulate on server sideNicola Tuveri
2020-10-14[ssl] Support ssl_decapsulate on client sideNicola Tuveri
2020-10-14Define OSSL_CAPABILITY_TLS_GROUP_IS_KEMNicola Tuveri
2020-10-12Fixed typo in ssl_lib.cIkko Ashimine
2020-10-07Use size of target buffer for allocationBenny Baumann
2020-10-02TLS AEAD ciphers: more bytes for key_block than neededMaxim Masiutin
2020-10-01Run the withlibctx.pl scriptMatt Caswell
2020-09-27optimise ssl3_get_cipher_by_std_name()hklaas
2020-09-23Fix ssl_hmac_new() so that it uses the propqShane Lontis
2020-09-21Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP signNorman Ashley
2020-09-21Increase PSK_MAX_PSK_LEN to 512Rutger Hendriks
2020-09-17Disallow certs with explicit curve in verification chainTomas Mraz
2020-09-16DTLS: free allocated memory on error pathsPauli
2020-09-13Ignore unused return values from some sk_*() macrosMatt Caswell
2020-09-13Fix safestack issues in ct.hMatt Caswell
2020-09-13Fix safestack issues in ocsp.hMatt Caswell
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-09-13Fix safestack issues in ssl.hMatt Caswell
2020-09-12NonStop port updates for 3.0.0.Randall S. Becker
2020-09-09TLS fixes for CBC mode and no-deprecatedPauli
2020-09-09TLS: remove legacy code path supporting special CBC modePauli