aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* test/cmp_client_test.c: add RR tests with issuer or serialNumber missingopenssl-4.1Daniel Kubec21 hours1-0/+72
* apps/lib/cmp_mock_srv.c: Fix NULL dereference of ASN1_INTEGER in refcert_cmp()Daniel Kubec21 hours1-2/+5
* QUIC: resend the whole ClientHello after a RetryNikolas Gauder42 hours4-103/+390
* QUIC: release pseudo-lost packets from the congestion controllerNikolas Gauder42 hours2-0/+103
* doc: RAND(7): a restore from a saved image is not detected; reseed after itYuxiang Ji42 hours1-0/+13
* poly1305-armv9-sve2.pl: close STDOUT before exitingt0kubetsu42 hours1-1/+1
* Document the OSSL_PARAM_merge() entry limitMartin Mirchev42 hours1-0/+2
* doc: replace DES-EDE3-CBC with AES-256-CBC in PEM examplesJWWTSL42 hours1-6/+6
* Prepare for 4.1.1openssl-machine43 hours3-3/+11
* Prepare for release of 4.1.0openssl-4.1.0openssl-machine43 hours3-4/+4
* make updateopenssl-machine43 hours2-6/+6
* Copyright year updatesopenssl-machine43 hours3-3/+3
* Document DTLS 1.3 handshake ACK known issueRyan Hooper3 days1-0/+6
* Document DTLS listener error-reporting known issuesRyan Hooper3 days1-0/+12
* DTLS listener: do not drive idle pending connections every tickMatt Caswell3 days4-16/+867
* DTLS listener: free a pending connection that fails after HVRMatt Caswell3 days2-1/+103
* DTLS 1.3: Fix WANT_READ while awaiting ServerHelloRyan Hooper3 days2-3/+207
* Configure: keep Siphash built even with no-siphashTomas Mraz4 days1-1/+4
* Fix wrong alignment in tho allocator used in quic_stream test.rainerjung4 days1-2/+16
* CHANGES.md, NEWS.md: 4.0.3 fixupsEugene Syromiatnikov4 days2-2/+3
* CI: give the cross-compile matrix jobs stable namesDmitry Misharov4 days3-0/+36
* x509: key the duplicate-extension hash with SipHash to resist floodingDaniel Kubec4 days2-13/+122
* DTLS 1.3: discard forbidden plaintext before replay checksMounir IDRASSI4 days2-7/+24
* Fix DTLS listener waiter cleanup in SSL_pollMounir IDRASSI4 days4-104/+860
* DTLS: Fix listener cleanup after failed SSL_clearRyan Hooper4 days3-43/+191
* CMS_get0_signers() returns only the signers that passed verificationIgor Ustinov4 days4-3/+21
* CMS_verify() stops at the first failure without CMS_VERIFY_PARTIALIgor Ustinov4 days2-4/+37
* Don't report held-back DTLS app data as readable in SSL_poll()Matt Caswell4 days5-12/+193
* Don't dereference a NULL rbio in dtls1_read_failed()Matt Caswell5 days2-1/+111
* Clear the next pointer when inserting into an empty pqueueMatt Caswell5 days1-0/+1
* DTLS 1.3: only accept plaintext alerts once the hellos are doneMatt Caswell5 days9-10/+150
* Fix SSL_poll() multi-reactor cleanup deadlockMounir IDRASSI5 days8-51/+672
* chore(bump): update FreeBSD and OpenBSD imagesEnji Cooper6 days2-12/+12
* chore(bump): update cross-platform-actions/action to v1.5.0Enji Cooper6 days2-12/+12
* TLS 1.3: Enforce the ticket lifetime when offering a ticketDaniel Kubec6 days1-3/+15
* test/ml_dsa_test.c: add a check for empty message finalisationAlberto Maschietto6 days1-0/+89
* ml_dsa_mu_prov.c: initialize ML-DSA-MU before empty-message finalizationAlberto Maschietto6 days1-1/+1
* fips: improve reporting of failure CRNG testsPauli6 days1-4/+12
* err: add two new errorsPauli6 days1-0/+4
* doc/man3/EC_GROUP_new.pod: document EC_GROUP_get_ecpkparameters functionmkpark7 days1-0/+5
* Fix use-after-free in EC_GROUP_get_ecpkparameters()Minkyung Park7 days2-4/+43
* test/cmp_vfy_test.c: prevent memory leak in test_msg_check_update_malicious_s...jdymitarai10 days1-9/+5
* test/dtlsssllistenertest.c: fix flaky zero-wait handshake loopsRyan Hooper11 days1-2/+8
* DTLS listener: bound the demux free listMounir IDRASSI11 days4-4/+200
* DTLS listener: make max_pending_conns a combined admission budgetMounir IDRASSI11 days6-24/+411
* DTLS listener: bound the per-connection receive queueMounir IDRASSI11 days3-0/+137
* crypto/x509/x509_lu.c: avoid freeing X509_OBJECTs in X509_STORE_get0_objects()Eugene Syromiatnikov12 days2-14/+51
* Fix set but unsued variable in lib/opt.cNeil Horman13 days1-2/+0
* Correct PEM X509 docs regarding TRUSTED CERTIFICATE blockschrissorr13 days1-2/+3
* crypto/mem.c: suppress benign TSan race in allocator initializationinsightlabs38-pixel13 days1-0/+3