summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2016-01-28Better SSLv2 cipher-suite enforcementViktor Dukhovni
2016-01-28Always generate DH keys for ephemeral DH cipher suitesMatt Caswell
2016-01-19Validate ClientHello session_id field length and send alert on failureAlessandro Ghedini
2016-01-16Empty SNI names are not validViktor Dukhovni
2016-01-11Change minimum DH size from 768 to 1024Kurt Roeckx
2015-12-27Ensure we don't call the OCSP callback if resuming a sessionMatt Caswell
2015-12-27Fix error when server does not send CertificateStatus messageMatt Caswell
2015-12-19Fix more URLs mangled by reformatMatt Caswell
2015-12-18Remove the "eay" c-file-style indicatorsRichard Levitte
2015-12-10Ensure |rwstate| is set correctly on BIO_flushMatt Caswell
2015-12-10Fix DTLS handshake fragment retriesMatt Caswell
2015-12-02typoDr. Stephen Henson
2015-12-02_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE insteadRichard Levitte
2015-11-30Return errors even if the cookie validation has succeededMatt Caswell
2015-11-24ssl3_free(): Return if it wasn't createdPascal Cuoq
2015-11-24Set reference count earlierKurt Roeckx
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell
2015-11-10Stop DTLS servers asking for unsafe legacy renegotiationMatt Caswell
2015-11-10Only call ssl3_init_finished_mac once for DTLSMatt Caswell
2015-11-09Fix missing malloc return value checksMatt Caswell
2015-10-23Remove useless codeAlessandro Ghedini
2015-10-23Fix references to various RFCsAlessandro Ghedini
2015-10-23Fix memory leaks and other mistakes on errorsAlessandro Ghedini
2015-10-05Change functions to pass in a limit rather than calculate itMatt Caswell
2015-10-05Validate ClientHello extension field lengthAlessandro Ghedini
2015-09-28RT2772: accept empty SessionTicketEmilia Kasper
2015-09-20Handle SSL_ERROR_WANT_X509_LOOKUPDr. Stephen Henson
2015-09-16Make no-psk compile without warnings.Ivo Raisr
2015-09-15RT4044: Remove .cvsignore files.Rich Salz
2015-09-02Fix session resumptionMatt Caswell
2015-09-02Fix building with OPENSSL_NO_TLSEXT.Matt Caswell
2015-08-26Fix DTLS session ticket renewalMatt Caswell
2015-08-11Fix "make test" seg fault with SCTP enabledMatt Caswell
2015-08-11Fix missing return value checks in SCTPMatt Caswell
2015-08-11Fix seg fault with 0 p val in SKEGuy Leaver (guleaver)
2015-07-27Fix SSL_set_session_ticket_ext when used with SSLv23_methodMatt Caswell
2015-07-27Add test for SSL_set_session_ticket_extMatt Caswell
2015-07-02Fix PSK handling.Dr. Stephen Henson
2015-06-12Allow a zero length extension blockAdam Langley
2015-06-11More ssl_session_dup fixesMatt Caswell
2015-06-11Only allow a temporary rsa key exchange when they key is larger than 512.Kurt Roeckx
2015-06-11Properly check certificate in case of export ciphers.Kurt Roeckx
2015-06-10DTLS handshake message fragments musn't span packetsMatt Caswell
2015-06-10Tighten extension handlingMatt Caswell
2015-06-10Fix Kerberos issue in ssl_session_dupMatt Caswell
2015-06-08Use CRYPTO_memcmp in s3_cbc.cEmilia Kasper
2015-06-04Remove misleading commentMatt Caswell
2015-06-04Clean premaster_secret for GOSTMatt Caswell
2015-06-04Clean Kerberos pre-master secretMatt Caswell
2015-06-02Fix race condition in NewSessionTicketMatt Caswell
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-08 09:43:46 +0000