summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2017-10-05Test mac-then-encryptEmilia Kasper
2017-10-05Add SSL_OP_NO_ENCRYPT_THEN_MACDavid Woodhouse
2017-10-04Remove an incorrect commentMatt Caswell
2017-09-15Provide getters for min/max proto versionChristian Heimes
2017-09-15Error out when forcing an unsupported TLS versionBenjamin Kaduk
2017-08-25NO_SYS_TYPES_H isn't defined anywhere, stop using it as a guardRichard Levitte
2017-08-22Fix ctype arguments.Pauli
2017-08-16Reorder extensions to put SigAlgs lastTodd Short
2017-08-03remove horrible pragma macro and remove __owur from SSL_CTX_add_session() dec...Lingmo Zhu
2017-08-03Remove the obsolete misleading comment and code related to it.Lingmo Zhu
2017-07-31Fix errors in SSL_state_string_longXiaoyin Liu
2017-07-14Fix gcc-7 warnings about missing fall thru comments.Bernd Edlinger
2017-07-09Fix cipher_compareRichard Levitte
2017-06-22Fix the names of ChaCha20-Poly1305 cipher suites in t1_trce.c.David Benjamin
2017-06-21Add documentation for the SSL_export_keying_material() functionMatt Caswell
2017-06-21Fix DTLS failure when used in a build which has SCTP enabledMatt Caswell
2017-06-21Don't fail the connection in SSLv3 if server selects ECDHEMatt Caswell
2017-06-14Fix ex_data and session_dup issuesTodd Short
2017-06-09fix broken implementations of GOST ciphersuitesRich Salz
2017-06-08Ignore -named_curve auto value to improve backwards compatibilityTomas Mraz
2017-06-08Use memset to clear SRP_CTX instead of NULL and zero assignmentsDiego Santa Cruz
2017-06-08Make SRP_CTX.info ownership and lifetime be the same as SRP_CTX.login.Diego Santa Cruz
2017-05-26Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATIONTodd Short
2017-05-19Make SSL_is_server() accept a const SSLMatt Caswell
2017-05-10Copy custom extension flags in a call to SSL_set_SSL_CTX()Matt Caswell
2017-05-09Remove support for OPENSSL_SSL_TRACE_CRYPTOMatt Caswell
2017-04-26CT_POLICY_EVAL_CTX_set_time expects milliseconds, but given secondsRob Percival
2017-04-25Don't attempt to send fragments > max_send_fragment in DTLSMatt Caswell
2017-04-25Remove special case code for SCTP reneg handlingMatt Caswell
2017-04-13ASN.1: adapt SSL_SESSION_ASN1 by explicitely embedding INTxx et alRichard Levitte
2017-04-11Remove ECDH(E) ciphers from SSLv3Todd Short
2017-04-11Additional check to handle BAD SSL_write retryRich Salz
2017-04-11Allow an ALPN callback to pretend to not existBenjamin Kaduk
2017-04-04Convert SSL_SESSION_ASN1 to use size specific integersRichard Levitte
2017-03-30More typo fixesFdaSilvaYY
2017-03-28Fix a few more typosFdaSilvaYY
2017-03-14Fix some -Wshadow warningsBenjamin Kaduk
2017-03-10Use the callbacks from the SSL object instead of the SSL_CTX objectPauli
2017-03-10Avoid questionable use of the value of a pointer that refers to spaceBernd Edlinger
2017-03-08prevent undefined behavior when src and dst are equalRoberto Guimaraes
2017-03-07Provide a function to test whether we have unread records pendingMatt Caswell
2017-03-07Get pointer type right in BIO_ssl_shutdown()Rich Salz
2017-03-02Check for zero records and return immediatelyJon Spillett
2017-02-22Add some more consistency checks in tls_decrypt_ticket.Bernd Edlinger
2017-02-22Fix i2d_SSL_SESSION pp output parameter should point to end of asn1 data.Bernd Edlinger
2017-02-16Remove an OPENSSL_assert() and replace with a soft assert and checkMatt Caswell
2017-02-16Don't change the state of the ETM flags until CCS processingMatt Caswell
2017-02-15Rework error handling of custom_ext_meth_add towards strong exception safety.Bernd Edlinger
2017-02-14Use TLSEXT_KEYNAME_LENGTH in tls_decrypt_ticket.Bernd Edlinger
2017-02-14mem leak on error path and error propagation fixYuchi