summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2014-11-27Add include of ssl.h which is required by srtp.hMatt Caswell
2014-11-26Fixed memory leak due to incorrect freeing of DTLS reassembly bit maskMatt Caswell
2014-11-25Corrected comments in ssl.h about SSLv23_method and friendsMatt Caswell
2014-11-20Do not resume a session if the negotiated protocol version does not matchDavid Benjamin
2014-11-20Ensure SSL3_FLAGS_CCS_OK (or d1->change_cipher_spec_ok for DTLS) is resetEmilia Kasper
2014-11-20Always require an advertised NewSessionTicket message.Emilia Kasper
2014-11-20Remove ssl3_check_finished.Emilia Kasper
2014-11-20Set s->hit when resuming from external pre-shared secret.Emilia Kasper
2014-11-20Reset s->tlsext_ticket_expected in ssl_scan_serverhello_tlsext.Emilia Kasper
2014-11-19New option no-ssl3-method which removes SSLv3_*methodDr. Stephen Henson
2014-11-18Added OPENSSL_NO_EC2M guards around the preferred EC curve listMatt Caswell
2014-10-28Tighten session ticket handlingEmilia Kasper
2014-10-27Fix ssltest logic when some protocols are compiled out.Emilia Kasper
2014-10-21Fix and improve SSL_MODE_SEND_FALLBACK_SCSV documentation.Bodo Moeller
2014-10-21When processing ClientHello.cipher_suites, don't ignore cipher suitesBodo Moeller
2014-10-21Keep old method in case of an unsupported protocolKurt Roeckx
2014-10-15Fix no-ssl3 configuration optionGeoff Thorpe
2014-10-15Fix for session tickets memory leak.Dr. Stephen Henson
2014-10-15Fix SRTP compile issues for windowsMatt Caswell
2014-10-15Fix for SRTP Memory LeakMatt Caswell
2014-10-15Spaces were added in some strings for better readability. However, those spac...Richard Levitte
2014-10-15Adjust VMS build to Unix build. Most of all, make it so the disabledRichard Levitte
2014-10-15Update the VMS build according to the latest unixly build. Partly provided by...Richard Levitte
2014-10-15Make sure that disabling the MAYLOSEDATA3 warning is only done when the compi...Richard Levitte
2014-10-15Support TLS_FALLBACK_SCSV.Bodo Moeller
2014-10-10Preserve digests for SNI.Dr. Stephen Henson
2014-09-24RT3067: simplify patchEmilia Kasper
2014-09-24This change alters the processing of invalid, RSA pre-master secrets soAdam Langley
2014-09-24RT3066: rewrite RSA padding checks to be slightly more constant time.Emilia Kasper
2014-09-22Fixed error introduced in commit f2be92b94dad3c6cbdf79d99a324804094cf1617Tim Hudson
2014-09-08RT3301: Discard too-long heartbeat requestsErik Auerswald
2014-09-05psk_client_callback, 128-byte id bug.Adam Langley
2014-08-28Constant-time utilitiesEmilia Kasper
2014-08-22RT3060: Limit the number of empty records.Adam Langley
2014-08-15Fixed out-of-bounds read errors in ssl3_get_key_exchange.Matt Caswell
2014-08-12Fix SRP ciphersuites.Dr. Stephen Henson
2014-08-09Fix SRP authentication ciphersuites.Dr. Stephen Henson
2014-08-06Check SRP parameters early.Dr. Stephen Henson
2014-08-06Fix SRP ciphersuite DoS vulnerability.Dr. Stephen Henson
2014-08-06Fix race condition in ssl_parse_serverhello_tlsextGabor Tyukasz
2014-08-06Fix DTLS anonymous EC(DH) denial of serviceEmilia Käsper
2014-08-06Fix protocol downgrade bug in case of fragmented packetsDavid Benjamin
2014-08-06Remove some duplicate DTLS code.Adam Langley
2014-08-06Applying same fix as in dtls1_process_out_of_seq_message. A truncated DTLS fr...Matt Caswell
2014-08-06Fix return code for truncated DTLS fragment.Adam Langley
2014-08-06Fix memory leak from zero-length DTLS fragments.Adam Langley
2014-08-06Fix DTLS handshake message size checks.Matt Caswell
2014-08-06Added comment for the frag->reassembly == NULL case as per feedback from EmiliaMatt Caswell
2014-08-06Avoid double free when processing DTLS packets.Adam Langley
2014-08-01make updateDr. Stephen Henson