summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Prepare for release of 4.1.0openssl-4.1.0openssl-machine2 days3-4/+4
* make updateopenssl-machine2 days2-6/+6
* Copyright year updatesopenssl-machine2 days3-3/+3
* Document DTLS 1.3 handshake ACK known issueRyan Hooper3 days1-0/+6
* Document DTLS listener error-reporting known issuesRyan Hooper3 days1-0/+12
* DTLS listener: do not drive idle pending connections every tickMatt Caswell3 days4-16/+867
* DTLS listener: free a pending connection that fails after HVRMatt Caswell3 days2-1/+103
* DTLS 1.3: Fix WANT_READ while awaiting ServerHelloRyan Hooper3 days2-3/+207
* Configure: keep Siphash built even with no-siphashTomas Mraz4 days1-1/+4
* Fix wrong alignment in tho allocator used in quic_stream test.rainerjung4 days1-2/+16
* CHANGES.md, NEWS.md: 4.0.3 fixupsEugene Syromiatnikov4 days2-2/+3
* CI: give the cross-compile matrix jobs stable namesDmitry Misharov4 days3-0/+36
* x509: key the duplicate-extension hash with SipHash to resist floodingDaniel Kubec4 days2-13/+122
* DTLS 1.3: discard forbidden plaintext before replay checksMounir IDRASSI4 days2-7/+24
* Fix DTLS listener waiter cleanup in SSL_pollMounir IDRASSI4 days4-104/+860
* DTLS: Fix listener cleanup after failed SSL_clearRyan Hooper4 days3-43/+191
* CMS_get0_signers() returns only the signers that passed verificationIgor Ustinov4 days4-3/+21
* CMS_verify() stops at the first failure without CMS_VERIFY_PARTIALIgor Ustinov4 days2-4/+37
* Don't report held-back DTLS app data as readable in SSL_poll()Matt Caswell4 days5-12/+193
* Don't dereference a NULL rbio in dtls1_read_failed()Matt Caswell5 days2-1/+111
* Clear the next pointer when inserting into an empty pqueueMatt Caswell5 days1-0/+1
* DTLS 1.3: only accept plaintext alerts once the hellos are doneMatt Caswell5 days9-10/+150
* Fix SSL_poll() multi-reactor cleanup deadlockMounir IDRASSI5 days8-51/+672
* chore(bump): update FreeBSD and OpenBSD imagesEnji Cooper6 days2-12/+12
* chore(bump): update cross-platform-actions/action to v1.5.0Enji Cooper6 days2-12/+12
* TLS 1.3: Enforce the ticket lifetime when offering a ticketDaniel Kubec6 days1-3/+15
* test/ml_dsa_test.c: add a check for empty message finalisationAlberto Maschietto6 days1-0/+89
* ml_dsa_mu_prov.c: initialize ML-DSA-MU before empty-message finalizationAlberto Maschietto6 days1-1/+1
* fips: improve reporting of failure CRNG testsPauli7 days1-4/+12
* err: add two new errorsPauli7 days1-0/+4
* doc/man3/EC_GROUP_new.pod: document EC_GROUP_get_ecpkparameters functionmkpark7 days1-0/+5
* Fix use-after-free in EC_GROUP_get_ecpkparameters()Minkyung Park7 days2-4/+43
* test/cmp_vfy_test.c: prevent memory leak in test_msg_check_update_malicious_s...jdymitarai10 days1-9/+5
* test/dtlsssllistenertest.c: fix flaky zero-wait handshake loopsRyan Hooper11 days1-2/+8
* DTLS listener: bound the demux free listMounir IDRASSI11 days4-4/+200
* DTLS listener: make max_pending_conns a combined admission budgetMounir IDRASSI11 days6-24/+411
* DTLS listener: bound the per-connection receive queueMounir IDRASSI11 days3-0/+137
* crypto/x509/x509_lu.c: avoid freeing X509_OBJECTs in X509_STORE_get0_objects()Eugene Syromiatnikov12 days2-14/+51
* Fix set but unsued variable in lib/opt.cNeil Horman13 days1-2/+0
* Correct PEM X509 docs regarding TRUSTED CERTIFICATE blockschrissorr14 days1-2/+3
* crypto/mem.c: suppress benign TSan race in allocator initializationinsightlabs38-pixel14 days1-0/+3
* QUIC: don't answer a refused Retry token with another RetryNikolas Gauder14 days2-2/+238
* test/quic_stream_test.c: remove unused tho_heap1024_total global variableEugene Syromiatnikov2026-10-101-2/+1
* Fix up OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR history documentationEugene Syromiatnikov2026-10-102-5/+3
* Ensure self test is executed before SLH-DSA KeyGensimo Sorce2026-10-101-1/+1
* test/quicapitest.c: fix BIO leak in test_quic_amplification_limit()Nikolas Gauder2026-10-101-3/+9
* .github/workflows/style-checks.yml: re-enable the check for all PRsEugene Syromiatnikov2026-10-101-9/+1
* Fix deref before NULL check in ossl_method_store_fetch()Neil Horman2026-10-101-3/+3
* cipher_aes_hw_aesni.c: fix linux-x32 build failureRichard Levitte2026-10-101-0/+2
* CONF: reject a NUL list separator in CONF_parse_list()Darren Carreras2026-10-094-1/+127