summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Prepare for release of 4.0.3openssl-4.0.3openssl-machine2026-09-293-4/+4
* make updateopenssl-machine2026-09-293-38/+81
* Copyright year updatesopenssl-machine2026-09-29102-102/+102
* CHANGES.md, NEWS.md: update for 4.0.3Eugene Syromiatnikov2026-09-292-7/+396
* test verifies the connection level RX flow controlAlexandr Nedvedicky2026-09-291-1/+22
* CVE-2026-75804 QUIC connection-level flow control not enforced, remote memory...Alexandr Nedvedicky2026-09-291-1/+10
* Add a test to check for quic unvalidated creditNeil Horman2026-09-291-0/+342
* don't double count full databgram length on unvalidated connectionsNeil Horman2026-09-292-3/+2
* CVE-2026-84784 QUIC: unbounded RETIRE_CONNECTION_ID backlog (memory DoS)Alexandr Nedvedicky2026-09-292-0/+276
* CVE-2026-84784 QUIC: unbounded RETIRE_CONNECTION_ID backlog (memory DoS)Alexandr Nedvedicky2026-09-291-6/+27
* sm2: make sm2_sig_gen() constant timeIgor Ustinov2026-09-292-13/+55
* ec: make ossl_ec_scalar_mul_ladder() scalar padding constant timeIgor Ustinov2026-09-293-0/+77
* Add regression tests for the SSL_set_SSL_CTX() sigalg stateMatt Caswell2026-09-291-0/+416
* Fix out-of-bounds valid_flags access after SSL_set_SSL_CTX()Matt Caswell2026-09-291-0/+35
* dtls: reset init_off before retransmitting a messageRyan Hooper2026-09-293-2/+433
* Defer computation of relative CRLDP namesViktor Dukhovni2026-09-294-58/+115
* TLS: Reject undersized TLS 1.2 AEAD records before AEAD processingDaniel Kubec2026-09-292-1/+225
* Add test for CVE-2026-75805Norbert Pocs2026-09-291-0/+93
* Guard comparision when values are NULLNorbert Pocs2026-09-291-4/+11
* Make the ecp_sm2p256 scalar multiplication constant timeIgor Ustinov2026-09-291-86/+159
* FIPS: Adapt indicator changes for OpenSSL 4.0slontis2026-09-265-3/+10
* FIPS: Changes FIPS indicators so that all approved algorithms have a gettable...slontis2026-09-26107-119/+2603
* paramnames: Add support for constant FIPS indicatorsPaul Dale2026-09-261-2/+13
* Add a threads test for concurrent X509_self_signed() on one certificateBob Beck2026-09-261-0/+78
* Don't update the certificate in cache_extensions if we lost the race.Bob Beck2026-09-261-15/+50
* test: cover sc_data_trim_right() functionAlexandr Nedvedicky2026-09-261-0/+192
* test: cover cleansing of dropped duplicate bytesJakub Zelenka2026-09-261-0/+120
* test: cover two sided overlap of direct tail chunkJakub Zelenka2026-09-261-150/+75
* test: cover zero length read of a QUIC rstreamJakub Zelenka2026-09-261-0/+75
* test: cover FIN final size against buffered dataJakub Zelenka2026-09-261-0/+154
* Add explicit tests to check some typical stream reassembly situationAlexandr Nedvedicky2026-09-261-23/+137
* Enforce final size for streams.Alexandr Nedvedicky2026-09-264-81/+513
* Limit packet buffer overhead to ~64kB per stream.Alexandr Nedvedicky2026-09-269-146/+1176
* New implementation of stream reassembly for QUIC.Alexandr Nedvedicky2026-09-2610-629/+1397
* test: reassemble small out of order frames and check the bytesJakub Zelenka2026-09-261-0/+117
* test: cover a long lagging read of packet backed stream dataJakub Zelenka2026-09-261-0/+76
* test: cover the packet pinning path of QUIC stream reassemblyJakub Zelenka2026-09-261-14/+203
* quic: move the RXE definition to a local headerJakub Zelenka2026-09-262-55/+81
* test/cmp_hdr_test.c: check X509_NAME_add_entry_by_txt() resultEugene Syromiatnikov2026-09-251-3/+6
* aes-cbc-hmac-sha: align the multiblock range checks with the other branchesNorbert Pocs2026-09-253-120/+2
* apps/x509: Fix new output detection for -key signingMounir IDRASSI2026-09-252-2/+26
* Fix base64 BIO write retry handlingMounir IDRASSI2026-09-252-27/+466
* Restore QUIC token value after second urxe decodeNeil Horman2026-09-251-1/+8
* refcount: declare Windows CRYPTO_REF_COUNT as volatile longNikola Pajkovsky2026-09-251-6/+7
* Fix a memory leak in quicapitest.cBernd Edlinger2026-09-241-2/+4
* Use NO_ATEXIT in non-static legacy providerBernd Edlinger2026-09-241-0/+4
* test: cover non-legacy cipher parameter decodersPauli2026-09-241-0/+182
* aes-ctr-hmac: add range checking on AADPauli2026-09-243-6/+38
* ci: keep dispatched runs off the self-hosted os-zoo runnersGeorgy Karataev2026-09-241-0/+3
* ci: skip the openssh interop matrix on dispatched runsGeorgy Karataev2026-09-241-0/+1