summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz
2020-04-23Update copyright yearMatt Caswell
2020-04-22GOST2012 TLS Supported Groups Identifiers SupportNikolay Morozov
2020-04-21Fix test_ssl_new test failureMatt Caswell
2020-04-21Fix NULL dereference in SSL_check_chain() for TLS 1.3Benjamin Kaduk
2020-04-20Use a fetched MD if appropriate in ssl3_cbc_digest_recordMatt Caswell
2020-04-19Use the libctx for all EVP_PKEY_CTX operationsMatt Caswell
2020-04-18GOST2012 TLS ClientCertificateType Identifiers supportNikolay Morozov
2020-04-16TLSEXT_SIGALG_gostr34102012 0x0840 and 0x0841 supportNikolay Morozov
2020-04-15Make sure we always send an alert in libssl if we hit a fatal errorMatt Caswell
2020-04-15Make sure we use the libctx in libssl when loading PrivateKeysMatt Caswell
2020-04-09Ensure libssl uses the new library context aware CT codeMatt Caswell
2020-04-09Explicitly cache the X509v3_extensions in one more place in libsslMatt Caswell
2020-04-08Use X509_STORE_CTX_new_with_libctx() in libsslMatt Caswell
2020-04-08TLS: Temporarly downgrade newly generated EVP_PKEYs to legacyRichard Levitte
2020-04-08EVP & TLS: Add necessary EC_KEY data extraction functions, and use themRichard Levitte
2020-04-02TLS Cipher Suite 0xC102 SupportNikolay Morozov
2020-04-01Make sure we use the libctx when creating an EVP_PKEY_CTX in libsslMatt Caswell
2020-04-01Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libsslMatt Caswell
2020-04-01Don't double free a DH objectMatt Caswell
2020-03-30Give a better error if we can't find a sig algMatt Caswell
2020-03-30Explicitly cache X509v3 extensions in libsslMatt Caswell
2020-03-30Don't attempt to up-ref an EVP_CIPHER if it is NULLMatt Caswell
2020-03-27Update libssl to use the new library context aware SRP functionsMatt Caswell
2020-03-27Ignore some fetch failuresMatt Caswell
2020-03-26Use a fetched cipher for the TLSv1.3 early secretMatt Caswell
2020-03-26Use a fetched cipher when decrypting a ticket in libsslMatt Caswell
2020-03-24Make sure we use a fetched cipher when encrypting stateless ticketsMatt Caswell
2020-03-24Use a fetched version of SHA256 in tls_process_new_session_ticket()Matt Caswell
2020-03-23Use correct libctx when fetching the TLS1 PRF in libsslMatt Caswell
2020-03-23Use the libctx and properties when constructing an EVP_PKEY_CTXMatt Caswell
2020-03-23Constify various mostly X509-related parameter types in crypto/ and apps/Dr. David von Oheimb
2020-03-16Use a flag in SSL3_BUFFER to track when an application buffer is reused.John Baldwin
2020-03-13Code to thread-safety in ChangeCipherStateBenjamin Kaduk
2020-03-13Don't write to the session when computing TLS 1.3 keysBenjamin Kaduk
2020-03-13Fix whitespace nit in ssl_generate_master_secret()Benjamin Kaduk
2020-02-20Deprecate the low level Diffie-Hellman functions.Pauli
2020-02-20Deprecate the low level RSA functions.Pauli
2020-02-19Handle max_fragment_length overflow for DTLSSimon Cornish
2020-02-14Fix coverity issuesShane Lontis
2020-02-13Fix a mem leak in libsslMatt Caswell
2020-02-11Check that ed25519 and ed448 are allowed by the security levelKurt Roeckx
2020-02-07Fix no-engineMatt Caswell
2020-02-06Use the OPENSSL_CTX and property query string in EVP_PKEY_CTXMatt Caswell
2020-02-06Explicitly fetch ciphers and digests in libsslMatt Caswell
2020-02-06Params: change UTF8 construct calls to avoid explicit strlen(3) calls.Pauli
2020-02-04Detect EOF while reading in libsslMatt Caswell
2020-01-30Don't acknowledge a servername following warning alert in servername cbMatt Caswell
2020-01-30Fix SSL_get_servername() and SNI behaviourMatt Caswell
2020-01-29TLS: use EVP for HMAC throughout libssl.Pauli