summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2016-07-28Add missing casts.Rich Salz
2016-07-22Send alert for bad DH CKEDr. Stephen Henson
2016-07-20Sanity check in ssl_get_algorithm2().Dr. Stephen Henson
2016-07-19Send alert on CKE error.Dr. Stephen Henson
2016-07-01Avoid an overflow in constructing the ServerKeyExchange messageMatt Caswell
2016-06-27Change usage of RAND_pseudo_bytes to RAND_bytesMatt Caswell
2016-06-01Avoid some undefined pointer arithmeticMatt Caswell
2016-05-26The ssl3_digest_cached_records() function does not handle errors properlyMatt Caswell
2016-05-19Ensure verify error is set when X509_verify_cert() failsViktor Dukhovni
2016-05-19Fix a double free in tls1_setup_key_blockMatt Caswell
2016-05-17Fix SSL compression symbol exportingMatt Caswell
2016-05-09Don't send signature algorithms when client_version is below TLS 1.2.David Benjamin
2016-05-02Remove confusing comment.TJ Saunders
2016-05-02Issue #719:TJ Saunders
2016-04-26Ensure we check i2d_X509 return valMatt Caswell
2016-04-07Fix memory leak on invalid CertificateRequest.David Benjamin
2016-04-04Fix ALPNTodd Short
2016-03-18Add a check for a failed mallocMatt Caswell
2016-03-18Ensure that memory allocated for the ticket is freedMatt Caswell
2016-03-14Add no-ssl2-methodKurt Roeckx
2016-03-09expose SSLv2 method prototypesViktor Dukhovni
2016-03-08Retain SSLv2 methods as functions that return NULLViktor Dukhovni
2016-03-07Remove LOW from the defaultKurt Roeckx
2016-03-01make updateMatt Caswell
2016-03-01Disable EXPORT and LOW SSLv3+ ciphers by defaultViktor Dukhovni
2016-03-01Add a test for SSLv2 configurationMatt Caswell
2016-03-01Disable SSLv2 default build, default negotiation and weak ciphers.Viktor Dukhovni
2016-02-08Handle SSL_shutdown while in init more appropriately #2Matt Caswell
2016-01-28Always generate DH keys for ephemeral DH cipher suitesMatt Caswell
2016-01-28Better SSLv2 cipher-suite enforcementViktor Dukhovni
2016-01-20Handle SSL_shutdown while in init more appropriatelyMatt Caswell
2016-01-19Validate ClientHello session_id field length and send alert on failureAlessandro Ghedini
2016-01-17Empty SNI names are not validViktor Dukhovni
2016-01-12Wrong definition of the macro SSL_set1_sigalgs in ssl.harijitnayak
2016-01-11Change minimum DH size from 768 to 1024Kurt Roeckx
2015-12-27Ensure we don't call the OCSP callback if resuming a sessionMatt Caswell
2015-12-27Fix error when server does not send CertificateStatus messageMatt Caswell
2015-12-19Fix more URLs mangled by reformatMatt Caswell
2015-12-18Remove the "eay" c-file-style indicatorsRichard Levitte
2015-12-10Ensure |rwstate| is set correctly on BIO_flushMatt Caswell
2015-12-10Fix DTLS handshake fragment retriesMatt Caswell
2015-12-10Add a return value checkMatt Caswell
2015-12-02_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE insteadRichard Levitte
2015-12-01Remove cookie validation return value trickMatt Caswell
2015-11-24ssl3_free(): Return if it wasn't createdPascal Cuoq
2015-11-24Set reference count earlierKurt Roeckx
2015-11-21Good hygiene with size_t output argument.Viktor Dukhovni
2015-11-20Ensure all EVP calls have their returns checked where appropriateMatt Caswell
2015-11-10Stop DTLS servers asking for unsafe legacy renegotiationMatt Caswell
2015-11-10Only call ssl3_init_finished_mac once for DTLSMatt Caswell
p">; } void __wrap_uv_cond_wait(uv_cond_t *cond_var, uv_mutex_t *mutex) { (void)cond_var; (void)mutex; } ssize_t __wrap_recv(int sockfd, void *buf, size_t len, int flags) { function_called(); check_expected(sockfd); check_expected_ptr(buf); check_expected(len); check_expected(flags); char *mock_string = "Test recv"; strcpy(buf, mock_string); return strlen(mock_string); } ssize_t __wrap_send(int sockfd, const void *buf, size_t len, int flags) { function_called(); check_expected(sockfd); check_expected_ptr(buf); check_expected_ptr(buf); check_expected(len); check_expected(flags); return strlen(buf); }