summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Prepare for 0.9.8zd releaseOpenSSL_0_9_8zdMatt Caswell2015-01-084-6/+6
* make updateMatt Caswell2015-01-081-6/+7
* CHANGES and NEWS updates for releaseMatt Caswell2015-01-082-1/+31
* Fix typo.Dr. Stephen Henson2015-01-081-1/+1
* Follow on from CVE-2014-3571. This fixes the code that was the original sourceMatt Caswell2015-01-081-1/+2
* Fix crash in dtls1_get_record whilst in the listen state where you get twoDr. Stephen Henson2015-01-082-2/+2
* Fix for CVE-2014-3570.Andy Polyakov2015-01-084-306/+360
* fix error discrepancyDr. Stephen Henson2015-01-071-1/+1
* use correct credit in CHANGESDr. Stephen Henson2015-01-061-2/+4
* use correct function nameDr. Stephen Henson2015-01-061-1/+1
* Only allow ephemeral RSA keys in export ciphersuites.Dr. Stephen Henson2015-01-067-55/+30
* ECDH downgrade bug fix.Dr. Stephen Henson2015-01-062-2/+20
* Fix various certificate fingerprint issues.Dr. Stephen Henson2015-01-055-4/+78
* Update ordinals.Dr. Stephen Henson2015-01-051-0/+2
* Add ASN1_TYPE_cmp and X509_ALGOR_cmp.Dr. Stephen Henson2015-01-054-0/+58
* Return error when a bit string indicates an invalid amount of bits leftKurt Roeckx2015-01-053-1/+8
* Reject invalid constructed encodings.Dr. Stephen Henson2015-01-053-1/+11
* Revert "RT3425: constant-time evp_enc"Emilia Kasper2014-12-172-30/+22
* Fix warning about negative unsigned intergersKurt Roeckx2014-11-111-1/+1
* md32_common.h: address compiler warning in HOST_c2l.Andy Polyakov2014-10-291-4/+2
* Use only unsigned arithmetic in constant-time operationsSamuel Neves2014-10-281-13/+3
* Fix and improve SSL_MODE_SEND_FALLBACK_SCSV documentation.Bodo Moeller2014-10-212-4/+13
* When processing ClientHello.cipher_suites, don't ignore cipher suitesBodo Moeller2014-10-211-0/+1
* Fix warningKurt Roeckx2014-10-211-1/+1
* Keep old method in case of an unsupported protocolKurt Roeckx2014-10-211-2/+4
* no-ssl2 with no-ssl3 does not mean drop the ssl libTim Hudson2014-10-201-6/+0
* Add constant_time_locl.h to HEADERS,Tim Hudson2014-10-171-1/+2
* Include "constant_time_locl.h" rather than "../constant_time_locl.h".Richard Levitte2014-10-173-3/+3
* e_os.h: refine inline override logic (to address warnings in debug build).Andy Polyakov2014-10-171-3/+3
* e_os.h: allow inline functions to be compiled by legacy compilers.Andy Polyakov2014-10-171-9/+17
* RT3547: Add missing static qualifierKurt Cancemi2014-10-171-1/+1
* Don't try 1**0 test with FIPS.Dr. Stephen Henson2014-10-161-3/+8
* Prepare for 0.9.8zd-devMatt Caswell2014-10-155-5/+13
* Prepare for 0.9.8zc releaseOpenSSL_0_9_8zcMatt Caswell2014-10-154-6/+6
* make updateMatt Caswell2014-10-151-2/+5
* Updates to NEWSMatt Caswell2014-10-151-2/+5
* Updates to CHANGES fileMatt Caswell2014-10-151-0/+19
* Fix no-ssl3 configuration optionGeoff Thorpe2014-10-152-8/+16
* Fix for session tickets memory leak.Dr. Stephen Henson2014-10-151-0/+3
* Fix SSL_R naming inconsistency.Bodo Moeller2014-10-151-1/+1
* Add TLS_FALLBACK_SCSV documentation, and move s_client -fallback_scsvBodo Moeller2014-10-153-7/+17
* Oops -- fix typo in coment added with TLS_FALLBACK_SCSV support.Bodo Moeller2014-10-151-4/+1
* Support TLS_FALLBACK_SCSV.Bodo Moeller2014-10-1516-25/+141
* Add additional DigestInfo checks.Dr. Stephen Henson2014-09-292-2/+29
* Add missing testsEmilia Kasper2014-09-251-5/+7
* RT3425: constant-time evp_encEmilia Kasper2014-09-242-22/+30
* RT3067: simplify patchEmilia Kasper2014-09-244-73/+95
* This change alters the processing of invalid, RSA pre-master secrets soAdam Langley2014-09-241-40/+84
* RT3066: rewrite RSA padding checks to be slightly more constant time.Emilia Kasper2014-09-248-112/+303
* Fixed error introduced in commit f2be92b94dad3c6cbdf79d99a324804094cf1617Tim Hudson2014-09-211-3/+4