summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2020-10-12Fixed typo in ssl_lib.cIkko Ashimine
2020-10-07Use size of target buffer for allocationBenny Baumann
2020-10-02TLS AEAD ciphers: more bytes for key_block than neededMaxim Masiutin
2020-10-01Run the withlibctx.pl scriptMatt Caswell
2020-09-27optimise ssl3_get_cipher_by_std_name()hklaas
2020-09-23Fix ssl_hmac_new() so that it uses the propqShane Lontis
2020-09-21Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP signNorman Ashley
2020-09-21Increase PSK_MAX_PSK_LEN to 512Rutger Hendriks
2020-09-17Disallow certs with explicit curve in verification chainTomas Mraz
2020-09-16DTLS: free allocated memory on error pathsPauli
2020-09-13Ignore unused return values from some sk_*() macrosMatt Caswell
2020-09-13Fix safestack issues in ct.hMatt Caswell
2020-09-13Fix safestack issues in ocsp.hMatt Caswell
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-09-13Fix safestack issues in ssl.hMatt Caswell
2020-09-12NonStop port updates for 3.0.0.Randall S. Becker
2020-09-09TLS fixes for CBC mode and no-deprecatedPauli
2020-09-09TLS: remove legacy code path supporting special CBC modePauli
2020-09-03Convert ssl3_cbc_digest_record() to use EVP_MD_is_a()Matt Caswell
2020-09-03Make ssl3_cbc_digest_record() use the real data_sizeMatt Caswell
2020-09-03Start using the provider side TLS HMAC implementationMatt Caswell
2020-09-03Add an HMAC implementation that is TLS awareMatt Caswell
2020-09-01also zero pad DHE public key in ClientKeyExchange message for interopFelix Monninger
2020-08-31Move KTLS inline functions only used by libssl into ssl/ktls.c.John Baldwin
2020-08-31Support for KTLS TX on FreeBSD for TLS 1.3.John Baldwin
2020-08-31Don't check errno if ktls_read_record() returned 0.John Baldwin
2020-08-31Add helper functions for FreeBSD KTLS.John Baldwin
2020-08-31Add a ktls_crypto_info_t typedef.John Baldwin
2020-08-29Check whether we have MD5-SHA1 and whether we need itMatt Caswell
2020-08-29Improve some error messages if a digest is not availableMatt Caswell
2020-08-29Ensure libssl creates libctx aware MAC keysMatt Caswell
2020-08-27apps: -msg flag enhancement 2/2Marc
2020-08-24Fix coverity CID #1465795 - Incorrect free deallocator used in SSL_add1_host()Shane Lontis
2020-08-13Appease -Werror=stringop-overflow=Patrick Steuer
2020-08-13Avoid segfault in SSL_export_keying_material if there is no sessionTomas Mraz
2020-08-12Mark SSL_CTX_set_ssl_version() as deprecated in 3.0Benjamin Kaduk
2020-08-09Add EVP signature with libctx methods.Shane Lontis
2020-08-07rand_drbg: remove RAND_DRBG.Pauli
2020-08-06Update copyright yearMatt Caswell
2020-08-03Disallow setting more than one IP address with SSL_add1_host()David Woodhouse
2020-08-03Make SSL_set1_host() and SSL_add1_host() take IP addressesDavid Woodhouse
2020-07-30unify spelling of serializePauli
2020-07-24Add X509 related libctx changes.Shane Lontis
2020-07-21Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni
2020-07-16Update copyright yearRichard Levitte
2020-07-16Revert "kdf: make function naming consistent."Matt Caswell
2020-07-16Revert "The EVP_MAC functions have been renamed for consistency. The EVP_MAC...Matt Caswell
2020-07-16deprecate engines in SSLPauli
2020-07-16Add SSL_get[01]_peer_certificate()Todd Short
2020-07-11Providerized libssl fallout: cleanup initBenjamin Kaduk