summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2021-03-25Ensure buffer/length pairs are always in syncMatt Caswell
2021-03-25ssl sigalg extension: fix NULL pointer dereferencePeter Kaestle
2021-03-20ssl: coverity 1465527 - dereference after null checkPauli
2021-03-20ssl: fix coverity 1451495: resource leakPauli
2021-03-18ssl: fix coverity 1451515: out of bounds memory accessPauli
2021-03-18Add ossl_gost symbolsShane Lontis
2021-03-14Always check CRYPTO_LOCK_{read,write}_lockRich Salz
2021-03-13ssl: fix format specifier for size_t argument to BIO_printfPauli
2021-03-12ssl: support params arguments to init functionsPauli
2021-03-11Increase the upper limit on group name lengthAnthony Hu
2021-03-09Reword repeated words.Shane Lontis
2021-03-08Fix the check for suitable groups and TLSv1.3Matt Caswell
2021-03-03Fix NULL access in ssl_build_cert_chain() when ctx is NULL.Shane Lontis
2021-03-03statem_lib.c: Remove TODOs that are unnecessaryTomas Mraz
2021-02-28tls: adjust for extra argument to KDF derive callPauli
2021-02-28tls: updates for the new additional MAC_init argumentsPauli
2021-02-23Remove disabled TLS 1.3 ciphers from the SSL(_CTX)Benjamin Kaduk
2021-02-18Update copyright yearMatt Caswell
2021-02-17Rename OSSL_ENCODER_CTX_new_by_EVP_PKEY and OSSL_DECODER_CTX_new_by_EVP_PKEYTomas Mraz
2021-02-15Implement EVP_PKEY_param_check_quick() and use it in libsslMatt Caswell
2021-02-12tls_valid_group: Add missing dereference of okfortls13Tomas Mraz
2021-02-12Use ERR_R_*_LIB instead of ERR_LIB_* as reason code for sub-librariesRichard Levitte
2021-02-12Deprecate the libssl level SRP APIsMatt Caswell
2021-02-12Deprecate the low level SRP APIsMatt Caswell
2021-02-09Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk
2021-02-08Simplify the EVP_PKEY_XXX_fromdata_XX methods.Shane Lontis
2021-02-05Remove all OPENSSL_NO_XXX from libssl where XXX is a crypto algMatt Caswell
2021-02-05Remove OPENSSL_NO_EC guards from libsslMatt Caswell
2021-02-05Make sure we don't use sigalgs that are not availableMatt Caswell
2021-02-05Add the nist group names as aliases for the normal TLS group namesMatt Caswell
2021-02-05Remove compile time guard checking from ssl3_get_req_cert_typeMatt Caswell
2021-02-05Check for availability of ciphersuites at run timeMatt Caswell
2021-02-05Make supported_groups code independent of EC and DHMatt Caswell
2021-02-05Ensure default supported groups works even with no-ec and no-dhMatt Caswell
2021-02-05Remove OPENSSL_NO_DH guards from libsslMatt Caswell
2021-02-04Remove some TODO(OpenSSL1.2) referencesMatt Caswell
2021-01-28Update copyright yearRichard Levitte
2021-01-26TLS client: allow cert verify callback return -1 for SSL_ERROR_WANT_RETRY_VERIFYDr. David von Oheimb
2021-01-26Avoid using OSSL_PKEY_PARAM_GROUP_NAME when the key might be legacyTomas Mraz
2021-01-26Add EVP_PKEY functions to get EC conv form and field typeMatt Caswell
2021-01-26Deprecate EC_KEY + Update ec apps to use EVP_PKEYShane Lontis
2021-01-22Don't copy parameters on setting a key in libsslMatt Caswell
2021-01-20ktls: Initial support for ChaCha20-Poly1305Vadim Fedorenko
2021-01-18Rename EVP_CIPHER_CTX_get_iv and EVP_CIPHER_CTX_get_iv_state for clarityTomas Mraz
2021-01-18Update SERVER_HELLO_MAX_LENGTHMichael Baentsch
2021-01-13Add X509_NAME_hash_ex() to be able to check if it failed due to unsupported SHA1Dr. David von Oheimb
2021-01-12Clean away extraneous library specific FETCH_FAILED reason codesRichard Levitte
2021-01-09Fix for negative return value from `SSL_CTX_sess_accept()`anupamam13
2021-01-09replace 'unsigned const char' with 'const unsigned char'Thomas De Schampheleire
2021-01-08Adding TLS group name retrievalMichael Baentsch