summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Prepare for release of 3.5.9openssl-3.5.9openssl-machine2026-09-293-4/+4
* make updateopenssl-machine2026-09-293-37/+73
* Copyright year updatesopenssl-machine2026-09-29105-105/+105
* CHANGES.md, NEWS.md: update for 3.5.9Eugene Syromiatnikov2026-09-292-7/+359
* test verifies the connection level RX flow controlAlexandr Nedvedicky2026-09-291-1/+22
* CVE-2026-75804 QUIC connection-level flow control not enforced, remote memory...Alexandr Nedvedicky2026-09-291-1/+10
* Add a test to check for quic unvalidated creditNeil Horman2026-09-291-0/+342
* don't double count full databgram length on unvalidated connectionsNeil Horman2026-09-292-3/+2
* CVE-2026-84784 QUIC: unbounded RETIRE_CONNECTION_ID backlog (memory DoS)Alexandr Nedvedicky2026-09-292-0/+276
* CVE-2026-84784 QUIC: unbounded RETIRE_CONNECTION_ID backlog (memory DoS)Alexandr Nedvedicky2026-09-291-6/+27
* sm2: make sm2_sig_gen() constant timeIgor Ustinov2026-09-292-13/+55
* ec: make ossl_ec_scalar_mul_ladder() scalar padding constant timeIgor Ustinov2026-09-293-0/+77
* Add regression tests for the SSL_set_SSL_CTX() sigalg stateMatt Caswell2026-09-291-0/+416
* Fix out-of-bounds valid_flags access after SSL_set_SSL_CTX()Matt Caswell2026-09-291-0/+35
* dtls: reset init_off before retransmitting a messageRyan Hooper2026-09-293-2/+433
* Defer computation of relative CRLDP namesViktor Dukhovni2026-09-294-58/+112
* TLS: Reject undersized TLS 1.2 AEAD records before AEAD processingDaniel Kubec2026-09-292-1/+225
* Add test for CVE-2026-75805Norbert Pocs2026-09-291-0/+93
* Guard comparision when values are NULLNorbert Pocs2026-09-291-4/+11
* Make the ecp_sm2p256 scalar multiplication constant timeIgor Ustinov2026-09-291-86/+159
* FIPS: Add approved indicator to JITTER seed sourceMilan Broz2026-09-261-2/+4
* FIPS: Complete conditional indicator testsslontis2026-09-264-20/+169
* FIPS: Guard conditional indicators in default providerslontis2026-09-263-0/+12
* FIPS: Adapt static indicators to 3.5 contextsslontis2026-09-264-4/+4
* FIPS: Report ACVP RSA generation as unapprovedslontis2026-09-262-5/+23
* FIPS: Apply conditional approved indicatorsslontis2026-09-268-7/+55
* FIPS: Track externally restored GCM IVsslontis2026-09-262-0/+60
* FIPS: Propagate MAC signature indicatorsslontis2026-09-263-6/+65
* FIPS: Extend MAC indicator testsslontis2026-09-262-2/+25
* FIPS: Initialize cipher test resultslontis2026-09-261-1/+1
* FIPS: Refine approved indicator testsslontis2026-09-2618-11/+992
* FIPS: Change Indicators so that all approved algorithms have a gettable indic...slontis2026-09-2664-96/+964
* make ch_cleanup() just safe enough to be called by quic_stream_testAlexandr Nedvedicky2026-09-261-2/+6
* test: cover sc_data_trim_right() functionAlexandr Nedvedicky2026-09-261-0/+192
* test: cover cleansing of dropped duplicate bytesJakub Zelenka2026-09-261-0/+120
* test: cover two sided overlap of direct tail chunkJakub Zelenka2026-09-261-150/+75
* test: cover zero length read of a QUIC rstreamJakub Zelenka2026-09-261-0/+75
* test: cover FIN final size against buffered dataJakub Zelenka2026-09-261-0/+154
* Add explicit tests to check some typical stream reassembly situationAlexandr Nedvedicky2026-09-261-23/+137
* Enforce final size for streams.Alexandr Nedvedicky2026-09-265-137/+571
* Limit packet buffer overhead to ~64kB per stream.Alexandr Nedvedicky2026-09-269-146/+1177
* New implementation of stream reassembly for QUIC.Alexandr Nedvedicky2026-09-2610-629/+1397
* test: reassemble small out of order frames and check the bytesJakub Zelenka2026-09-261-0/+117
* test: cover a long lagging read of packet backed stream dataJakub Zelenka2026-09-261-0/+76
* test: cover the packet pinning path of QUIC stream reassemblyJakub Zelenka2026-09-261-14/+203
* quic: move the RXE definition to a local headerJakub Zelenka2026-09-262-55/+81
* Add a red-black tree implementationAlexandr Nedvedicky2026-09-2611-3/+1433
* test/cmp_hdr_test.c: check X509_NAME_add_entry_by_txt() resultEugene Syromiatnikov2026-09-251-3/+6
* Restore QUIC token value after second urxe decodeNeil Horman2026-09-251-1/+8
* refcount: declare Windows CRYPTO_REF_COUNT as volatile longNikola Pajkovsky2026-09-251-6/+7