aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* QUIC: resend the whole ClientHello after a RetryNikolas Gauder2 days1-27/+34
* QUIC: release pseudo-lost packets from the congestion controllerNikolas Gauder2 days1-0/+7
* DTLS listener: do not drive idle pending connections every tickMatt Caswell3 days3-16/+126
* DTLS listener: free a pending connection that fails after HVRMatt Caswell3 days1-1/+2
* DTLS 1.3: Fix WANT_READ while awaiting ServerHelloRyan Hooper3 days1-3/+24
* TLS: Generate the server random before processing ClientHello extensionsDaniel Kubec4 days1-16/+19
* Cache decoded certs on client in CTX to avoid multiple asn1 parsingNeil Horman4 days3-13/+143
* Fix TLS 1.3 alert for missing key_shareAnuj Ramesh4 days1-4/+10
* ssl: handle session ID cache lock failureMounir IDRASSI4 days4-11/+35
* Adds a test that tests missing integrity only ciphers effect on TLS cipher su...Frederik Wedel-Heinen4 days1-1/+1
* Removes clean DES and RC2 as encryption methods for TLS ciphersuites and refa...Frederik Wedel-Heinen4 days3-133/+83
* DTLS 1.3: discard forbidden plaintext before replay checksMounir IDRASSI4 days1-6/+11
* Fix DTLS listener waiter cleanup in SSL_pollMounir IDRASSI4 days3-79/+132
* DTLS: Fix listener cleanup after failed SSL_clearRyan Hooper4 days2-43/+38
* Don't report held-back DTLS app data as readable in SSL_poll()Matt Caswell4 days4-12/+34
* Don't dereference a NULL rbio in dtls1_read_failed()Matt Caswell5 days1-1/+5
* Clear the next pointer when inserting into an empty pqueueMatt Caswell5 days1-0/+1
* DTLS 1.3: only accept plaintext alerts once the hellos are doneMatt Caswell5 days8-9/+54
* Fix SSL_poll() multi-reactor cleanup deadlockMounir IDRASSI5 days4-31/+115
* TLS 1.3: Enforce the ticket lifetime when offering a ticketDaniel Kubec6 days1-3/+15
* DTLS listener: bound the demux free listMounir IDRASSI11 days2-4/+42
* DTLS listener: make max_pending_conns a combined admission budgetMounir IDRASSI11 days2-6/+14
* DTLS listener: bound the per-connection receive queueMounir IDRASSI11 days1-0/+15
* QUIC: don't answer a refused Retry token with another RetryNikolas Gauder14 days1-2/+23
* Fix ECH server verify_result misuseViktor Dukhovni2026-10-091-1/+8
* PSK: Check for invalid server PSK ciphersViktor Dukhovni2026-10-091-0/+23
* Polish psk callback error path cleanupViktor Dukhovni2026-10-092-3/+9
* Test PHA verification results across session resumptionMounir IDRASSI2026-10-083-39/+54
* Keep pending client credentials out of cached sessionsMounir IDRASSI2026-10-083-30/+83
* DTLS Listener: Guard against a NULL read BIO when retrying DTLS readsRyan Hooper2026-10-071-4/+21
* make c-style check in CI happy again.Alexandr Nedvedicky2026-10-071-2/+1
* dtls: honour SSL_OP_COOKIE_EXCHANGE for DTLS 1.3Jakub Zelenka2026-10-063-24/+41
* Omit key_share from a cookie-only HelloRetryRequestJakub Zelenka2026-10-061-4/+8
* Change all files with OpenSSL License to ASL 2.0 LicenseTomas Mraz2026-10-055-5/+5
* Enforce the supported_groups/key_share pairing in TLS 1.3 ClientHellosPaul Grubbs2026-10-021-0/+17
* Bring recent comments into line with the STYLE.md comment rulesBob Beck2026-10-028-75/+43
* ssl: use generated parser for record optionsPauli2026-10-022-10/+43
* ssl: use generated parsers for TLS capabilitiesPauli2026-10-022-27/+92
* Removes redundant SSLv3 version checks and check against TLS1_VERSION_MAJOR i...Frederik Wedel-Heinen2026-10-028-13/+8
* Removes unused member variable 'alloced' from SSL_MAC_BUF struct.Frederik Wedel-Heinen2026-10-024-12/+3
* Build the qlog filename with asprintfBob Beck2026-10-021-29/+28
* Build the builtin sigalgs list with asprintf.Bob Beck2026-10-021-22/+15
* Clean up the groups settings string construction with asprintf()Bob Beck2026-10-021-11/+8
* Provide ossl_asprintf() and friends.Bob Beck2026-10-021-1/+1
* dtls: avoid meaningless retry on EMSGSIZE in dtls1_do_write (#27905)vatsal-dp2026-10-021-3/+10
* DTLS 1.3: Retain the previous read epoch to recover from lost ACKsRyan Hooper2026-10-028-35/+232
* DTLS 1.3: Track sent message ACKs by byte range across retransmitsRyan Hooper2026-10-014-10/+103
* Add Deprecation Macros for 4.2Bob Beck2026-10-011-1/+1
* DTLS: Expose dtls_listener_cookie_hmac() and add a regression testRyan Hooper2026-09-302-3/+5
* Bound DTLS 1.3 ACK bookkeeping and fit ACKs to recordsMounir IDRASSI2026-09-302-5/+43
generated by cgit (git 2.51.2) at 2026-10-25 13:58:50 +0100