summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2022-04-12SSL_conf_cmd: Allow DH Parameters at any position.Daniel Fiala
2022-04-06Add SSL_(CTX_)?get0_(verify|chain)_cert_store functionsHugo Landau
2022-04-06KTLS: Enable KTLS for receiving as well in TLS 1.3Daiki Ueno
2022-04-06KTLS: Handle TLS 1.3 in ssl3_get_record.Daiki Ueno
2022-04-06KTLS: Add using_ktls helper variable in ssl3_get_record().John Baldwin
2022-04-06KTLS: Check for unprocessed receive records in ktls_configure_crypto.John Baldwin
2022-03-30tls_process_server_hello: Disallow repeated HRRTomas Mraz
2022-03-25ticket_lifetime_hint may exceed 1 week in TLSv1.3Todd Short
2022-03-23Fix Coverity 1498611 & 1498608: uninitialised readPauli
2022-03-18print SSL session, fix build warnings on OpenBSD.David Carlier
2022-03-14Replace handling of negative verification result with SSL_set_retry_verify()Tomas Mraz
2022-03-01[ssl] Add SSL_kDHEPSK and SSL_kECDHEPSK as PFS ciphersuites for SECLEVEL >= 3Nicola Tuveri
2022-03-01[ssl] Prefer SSL_k(EC)?DHE to the SSL_kE(EC)?DH aliasNicola Tuveri
2022-02-17Add back check for the DH public key sizeTomas Mraz
2022-02-11Cleanup record length checks for KTLSBernd Edlinger
2022-02-05Move e_os.h to include/internalRichard Levitte
2022-02-04Add support for Chacha20-Poly1305 to kernel TLS on FreeBSD.John Baldwin
2022-02-03add SSL_get0_iana_groups() & SSL_client_hello_get_extension_order()Phus Lu
2022-02-01Update the comment on ssl3_write_pending()yangyangtiantianlonglong
2022-02-01Revert dropped usage of var thiswr in do_ssl3_write()yangyangtiantianlonglong
2022-01-28apps: Add option -no_ems to s_client/s_server appsyangyangtiantianlonglong
2022-01-19ssl: better support TSAN operationsPauli
2022-01-18ssl: replace ;; with ; as statement separatorPauli
2022-01-17ssl/t1_enc: Fix kTLS RX offload pathDmytro Podgornyi
2022-01-09Delete unused param about get_construct_message_fyangyangtiantianlonglong
2022-01-08Update alert to common protocolKan
2022-01-07Fix: some patches related to error exitingPeiwei Hu
2022-01-07fix the return check of EVP_PKEY_CTX_ctrl() in 5 spotsxkernel
2022-01-07properly free the resource from EVP_MD_CTX_new() at ssl3_record.c:1413xkernel
2022-01-06properly free the resource from CRYPTO_mallocxkernel
2022-01-05Fix typosDimitris Apostolou
2021-12-21add OSSL_STACK_OF_X509_free() for commonly used patternDr. David von Oheimb
2021-12-14Fix invalid handling of verify errors in libsslMatt Caswell
2021-12-07Don't free the EVP_PKEY on error in set0_tmp_dh_pkey() functionsMatt Caswell
2021-11-29No EtM for GOST ciphers in TLS 1.2Dmitry Belyavskiy
2021-11-29Don't include any TLSv1.3 ciphersuites that are disabledolszomal
2021-11-26Enable brainpool curves for TLS1.3Bernd Edlinger
2021-11-17Move more general parts of internal/cryptlib.h to new internal/common.hDr. David von Oheimb
2021-11-17Add and use HAS_PREFIX() and CHECK_AND_SKIP_PREFIX() for checking if string h...Dr. David von Oheimb
2021-11-16BIO_read_filename: fix return checkPeiwei Hu
2021-11-16RAND_bytes_ex: fix return checkPeiwei Hu
2021-11-15Reset the rwstate before calling ASYNC_start_job()Matt Caswell
2021-11-12Add return value NULL checks that were missingPauli
2021-11-08KTLS: use EVP_CIPHER_is_a instead of nidTianjia Zhang
2021-11-04Fix a memory leak in ssl_create_cipher_listBernd Edlinger
2021-11-04Fix a memory leak in tls_parse_stoc_key_shareBernd Edlinger
2021-10-28fix some code with obvious wrong coding stylex2018
2021-10-27free the Post-Handshake Auth digest when there is an error saving the digestx2018
2021-10-11New extensions can be sent in a certificate requestMatt Caswell
2021-10-06Replace the AES-128-CBC-HMAC-SHA1 cipher in e_ossltest.cBernd Edlinger