summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2016-09-16Use switch instead of multiple ifsAlessandro Ghedini
2016-09-15Revert "Abort on unrecognised warning alerts"Matt Caswell
2016-09-14Fix OCSP_RESPID processing bug introduced by WPACKET changesMatt Caswell
2016-09-14Encourage use of the macros for the various "sub" functionsMatt Caswell
2016-09-14Add a WPACKET_sub_allocate_bytes() functionMatt Caswell
2016-09-14Convert CKE construction to use the WPACKET APIMatt Caswell
2016-09-13Abort on unrecognised warning alertsMatt Caswell
2016-09-13Fix a few style nits in the wpacket codeMatt Caswell
2016-09-13Remove else after a return in packet codeMatt Caswell
2016-09-13Pull out some common packet code into a functionMatt Caswell
2016-09-13Add some soft asserts where applicableMatt Caswell
2016-09-13Address WPACKET review commentsMatt Caswell
2016-09-13Simplify the overflow checks in WPACKET_allocate_bytes()Matt Caswell
2016-09-13Move the WPACKET documentation comments to packet_locl.hMatt Caswell
2016-09-13Ensure the WPACKET gets cleaned up in the event of an errorMatt Caswell
2016-09-13Various bug fixes and tweaks to WPACKET implementationMatt Caswell
2016-09-13Add WPACKET_sub_memcpy() functionMatt Caswell
2016-09-13Move from explicit sub-packets to implicit onesMatt Caswell
2016-09-13Rename PACKETW to WPACKETMatt Caswell
2016-09-13Convert tls_construct_client_hello() to use PACKETWMatt Caswell
2016-09-13First pass at writing a writeable packets APIMatt Caswell
2016-09-08Ensure trace recognises X25519Matt Caswell
2016-09-07Add missing debug strings.Rich Salz
2016-08-30Ensure the CertStatus message adds a DTLS message header where neededMatt Caswell
2016-08-26Remove trailing zerosRich Salz
2016-08-24Put DES into "not default" category.Rich Salz
2016-08-24To avoid SWEET32 attack, move 3DES to weakRich Salz
2016-08-24Fix comment about return value of ct_extract_tls_extension_sctsRob Percival
2016-08-24Remove some dead code from rec_layer_s3.cMatt Caswell
2016-08-23Sanity check ticket length.Dr. Stephen Henson
2016-08-23Fix leak on error in tls_construct_cke_gostMatt Caswell
2016-08-22Prevent DTLS Finished message injectionMatt Caswell
2016-08-22Fix DTLS buffered message DoS attackMatt Caswell
2016-08-19Fix DTLS replay protectionMatt Caswell
2016-08-19Fix DTLS unprocessed records bugMatt Caswell
2016-08-18Indent ssl/Emilia Kasper
2016-08-17Constify ssl_cert_type()Dr. Stephen Henson
2016-08-17Convert X509* functions to use const gettersDr. Stephen Henson
2016-08-17Add missing session id and tlsext_status accessorsRemi Gacogne
2016-08-16Convert SSL_SESSION* functions to use const gettersMatt Caswell
2016-08-16Ensure we unpad in constant time for read pipeliningMatt Caswell
2016-08-16Fix satsub64be() to unconditionally use 64-bit integersDavid Woodhouse
2016-08-15Address feedback on SSLv2 ClientHello processingMatt Caswell
2016-08-15Send an alert if we get a non-initial record with the wrong versionMatt Caswell
2016-08-15Address feedback on SSLv2 ClientHello processingMatt Caswell
2016-08-15Improves CTLOG_STORE settersRob Percival
2016-08-15Fix no-ecDr. Stephen Henson
2016-08-13Modify TLS support for new X25519 API.Dr. Stephen Henson
2016-08-12GH1446: Add SSL_SESSION_get0_cipherRich Salz
2016-08-08Fix test of first of 255 CBC padding bytes.Adam Langley