summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2014-06-01Allocate extra space when NETSCAPE_HANG_BUG defined.David Ramos
2014-05-29Fix signed/unsigned warning.Ben Laurie
2014-05-25Fix for non compilation with TLS_DEBUG definedMatt Caswell
2014-05-12Check sk_SSL_CIPHER_num() after assigning sk.Kurt Roeckx
2014-05-12Avoid out-of-bounds write in SSL_get_shared_ciphersGünther Noack
2014-05-11safety check to ensure we dont send out beyond the users bufferTim Hudson
2014-03-27Fix alert handling.mancha
2014-01-04Restore SSL_OP_MSIE_SSLV2_RSA_PADDINGDr. Stephen Henson
2013-10-04Fix compilation with this branch's definition of SSL_CIPHER.Rob Stradling
2013-10-04Remove empty line.Rob Stradling
2013-10-04Tidy up comments.Rob Stradling
2013-10-04Use TLS version supplied by client when fingerprinting Safari.Rob Stradling
2013-10-04Backport TLS 1.1/1.2 #definesRob Stradling
2013-10-04Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling
2013-08-13DTLS message_sequence number wrong in rehandshake ServerHelloMichael Tuexen
2013-08-08DTLS handshake fix.Michael Tuexen
2013-04-08Set s->d1 to NULL after freeing it.Dr. Stephen Henson
2013-03-19Disable compression for DTLS.Dr. Stephen Henson
2013-03-18Avoid unnecessary fragmentation.Michael Tuexen
2013-02-26Use orig_len, not rec->orig_lenGeoff Lowe
2013-02-12Check DTLS_BAD_VER for version number.David Woodhouse
2013-02-11Fix for SSL_get_certificateDr. Stephen Henson
2013-02-11Fix in ssltest is no-ssl2 configuredDr. Stephen Henson
2013-02-09ssl/s3_[clnt|srvr].c: fix warning and linking error.Andy Polyakov
2013-02-08s3_cbc.c: make CBC_MAC_ROTATE_IN_PLACE universal.Andy Polyakov
2013-02-08s3_cbc.c: get rid of expensive divisions [from master].Andy Polyakov
2013-02-08ssl/s3_enc.c: remove artefact.Andy Polyakov
2013-02-08ssl/[d1|s3]_pkt.c: harmomize orig_len handling.Andy Polyakov
2013-02-08Fix IV check and padding removal.Dr. Stephen Henson
2013-02-07ssl/*: remove SSL3_RECORD->orig_len to restore binary compatibility.Andy Polyakov
2013-02-06Fix for EXP-RC2-CBC-MD5Adam Langley
2013-02-05make updateDr. Stephen Henson
2013-02-05Fix error codes.Dr. Stephen Henson
2013-02-05s3/s3_cbc.c: allow for compilations with NO_SHA256|512.Andy Polyakov
2013-02-05ssl/s3_cbc.c: md_state alignment portability fix.Andy Polyakov
2013-02-05ssl/s3_cbc.c: uint64_t portability fix.Andy Polyakov
2013-02-05Don't access EVP_MD internals directly.Dr. Stephen Henson
2013-02-05Timing fix mitigation for FIPS mode.Dr. Stephen Henson
2013-02-05The cbc functions shouldn't be inside #ifdef OPENSSL_NO_TLSEXTDr. Stephen Henson
2013-02-05Update DTLS code to match CBC decoding in TLS.Ben Laurie
2013-02-05Don't crash when processing a zero-length, TLS >= 1.1 record.Ben Laurie
2013-02-05Fixups.Ben Laurie
2013-02-05Oops. Add missing file.Ben Laurie
2013-02-05Make CBC decoding constant time.Ben Laurie
2013-02-05Add and use a constant-time memcmp.Ben Laurie
2012-12-10PR: 2888Dr. Stephen Henson
2012-10-05backport OCSP fix enhancementDr. Stephen Henson
2012-10-05Backport OCSP fix.Ben Laurie
2012-09-21* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately inRichard Levitte
2012-05-10Sanity check record length before skipping explicit IV in DTLSDr. Stephen Henson
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-08 01:59:40 +0000