summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2014-08-22RT3060: Limit the number of empty records.Adam Langley
2014-08-15Fixed out-of-bounds read errors in ssl3_get_key_exchange.Matt Caswell
2014-08-12Fix SRP ciphersuites.Dr. Stephen Henson
2014-08-09Fix SRP authentication ciphersuites.Dr. Stephen Henson
2014-08-06Check SRP parameters early.Dr. Stephen Henson
2014-08-06Fix SRP ciphersuite DoS vulnerability.Dr. Stephen Henson
2014-08-06Fix race condition in ssl_parse_serverhello_tlsextGabor Tyukasz
2014-08-06Fix DTLS anonymous EC(DH) denial of serviceEmilia Käsper
2014-08-06Fix protocol downgrade bug in case of fragmented packetsDavid Benjamin
2014-08-06Remove some duplicate DTLS code.Adam Langley
2014-08-06Applying same fix as in dtls1_process_out_of_seq_message. A truncated DTLS fr...Matt Caswell
2014-08-06Fix return code for truncated DTLS fragment.Adam Langley
2014-08-06Fix memory leak from zero-length DTLS fragments.Adam Langley
2014-08-06Fix DTLS handshake message size checks.Matt Caswell
2014-08-06Added comment for the frag->reassembly == NULL case as per feedback from EmiliaMatt Caswell
2014-08-06Avoid double free when processing DTLS packets.Adam Langley
2014-08-01make updateDr. Stephen Henson
2014-07-24Add conditional unit testing interface.Dr. Stephen Henson
2014-07-15Fix DTLS certificate requesting code.Dr. Stephen Henson
2014-07-15Add ECC extensions with DTLS.Dr. Stephen Henson
2014-07-14Use more common name for GOST key exchange.Dr. Stephen Henson
2014-07-13Add names of GOST algorithms.Peter Mosmans
2014-07-05Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson
2014-07-02Make disabling last cipher work.Thijs Alkemade
2014-07-01Fix possible buffer overrun.Ben Laurie
2014-06-29Fix memory leak.Dr. Stephen Henson
2014-06-28Don't disable state strings with no-ssl2Dr. Stephen Henson
2014-06-28Fix compilation with -DSSL_DEBUG -DTLS_DEBUG -DKSSL_DEBUGyogesh nagarkar
2014-06-27Remove redundant check.Ken Ballou
2014-06-27Don't advertise ECC ciphersuits in SSLv2 compatible client hello.Tomas Mraz
2014-06-22Fix off-by-one errors in ssl_cipher_get_evp()Miod Vallat
2014-06-22Revert "Fix off-by-one errors in ssl_cipher_get_evp()"Matt Caswell
2014-06-14Accept CCS after sending finished.Dr. Stephen Henson
2014-06-13Fixed incorrect return code handling in ssl3_final_finish_mac.Matt Caswell
2014-06-13Revert "Fixed incorrect return code handling in ssl3_final_finish_mac"Matt Caswell
2014-06-12Fix off-by-one errors in ssl_cipher_get_evp()Kurt Cancemi
2014-06-10Fixed incorrect return code handling in ssl3_final_finish_macMatt Caswell
2014-06-10Create test/testutil.h for unit test helper macrosMike Bland
2014-06-10Fix null pointer errors.Dr. Stephen Henson
2014-06-09SRP ciphersuite correction.Dr. Stephen Henson
2014-06-09Update strength_bits for 3DES.Dr. Stephen Henson
2014-06-07Make tls_session_secret_cb work with CVE-2014-0224 fix.Dr. Stephen Henson
2014-06-05Fix CVE-2014-3470Dr. Stephen Henson
2014-06-05Fix CVE-2014-0221Dr. Stephen Henson
2014-06-05Additional CVE-2014-0224 protection.Dr. Stephen Henson
2014-06-05Fix for CVE-2014-0224Dr. Stephen Henson
2014-06-05Fix for CVE-2014-0195Dr. Stephen Henson
2014-06-02Check there is enough room for extension.David Benjamin
2014-06-02Free up s->d1->buffered_app_data.q properly.zhu qun-ying
2014-06-02Typo: set i to -1 before goto.Sami Farin