summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2016-05-19When strict SCT fails record verification failureViktor Dukhovni
2016-05-18Ensure verify error is set when X509_verify_cert() failsViktor Dukhovni
2016-05-17Copyright consolidation 01/10Rich Salz
2016-05-17Add a comment to explain the use of |num_recs|Matt Caswell
2016-05-17Use the current record offset in ssl3_get_recordMatt Caswell
2016-05-17There is only one read bufferMatt Caswell
2016-05-17Fix some out of date commentsMatt Caswell
2016-05-16session tickets: use more sizeofKurt Roeckx
2016-05-16Use AES256 for the default encryption algoritm for TLS session ticketsTJ Saunders
2016-05-16session tickets: Use sizeof() for the various fieldsTJ Saunders
2016-05-16Fold threads.h into crypto.h making API publicViktor Dukhovni
2016-05-16Add SSL_client_version() getter functionAlessandro Ghedini
2016-05-16Propagate tlsext_status_type from SSL_CTX to SSLjfigus
2016-05-16Fix NPN protocol name list validationKazuki Yamaguchi
2016-05-16Unify <TYPE>_up_ref methods signature and behaviour.FdaSilvaYY
2016-05-14Increment size limit for ClientHello messagesAlessandro Ghedini
2016-05-13The NewSessionTicket message is not optional.David Benjamin
2016-05-12Don't use GOST ciphersuites with DTLS.Dmitry Belyavsky
2016-05-12Don't leak memory if realloc fails.Dr. Stephen Henson
2016-05-11Make null_compression constMatt Caswell
2016-05-11Fix V2ClientHello handling.David Benjamin
2016-05-10IRIX fixes.Andy Polyakov
2016-05-09Don't send signature algorithms when client_version is below TLS 1.2.David Benjamin
2016-05-09Free any existing SRTP connection profileMatt Caswell
2016-05-09fix tab-space mixed indentationFdaSilvaYY
2016-05-05Move 3DES from HIGH to MEDIUMRich Salz
2016-05-05GH356: Change assert to normal errorSergio Garcia Murillo
2016-05-05Handle no async jobs in libsslMatt Caswell
2016-05-05Improve heartbeats coding styleMatt Caswell
2016-05-02Remove confusing comment.TJ Saunders
2016-05-02Issue #719:TJ Saunders
2016-05-02ssl/record/rec_layer_s3.c: fix typo from previous commit.Andy Polyakov
2016-05-02Remove obsolete defined(__INTEL__) condition.Andy Polyakov
2016-04-29Fix building with -DCHARSET_EBCDICMatt Caswell
2016-04-29Client side CKE processing can double free on errorMatt Caswell
2016-04-28Add checks on CRYPTO_new_ex_data return valueFdaSilvaYY
2016-04-28Fix an error code spelling.FdaSilvaYY
2016-04-28various spelling fixesFdaSilvaYY
2016-04-28Don't leak memory on error path in dane_ctx_enable()Matt Caswell
2016-04-27Fix no-gost no-srp no-ec no-dh.Ben Laurie
2016-04-27Fix enable-ssl-trace no-nextprotoneg.Ben Laurie
2016-04-27split_send_fragment should always be less than or equal to max_send_fragmentMatt Caswell
2016-04-27Fix BIO_CTRL_DUP for an SSL BIOMatt Caswell
2016-04-26Ensure we check i2d_X509 return valMatt Caswell
2016-04-22make updateViktor Dukhovni
2016-04-22Enabled DANE only when at least one TLSA RR was addedViktor Dukhovni
2016-04-22Don't set peer_tmp until we have finished constructing itMatt Caswell
2016-04-21Fix no-ocsp on Windows (and probably VMS)Matt Caswell
2016-04-20Remove --classic build entirelyRichard Levitte
2016-04-18Rename some lowercase API'sRich Salz