index
:
openssl
OpenSSL-engine-0_9_6-stable
OpenSSL-fips-0_9_7-stable
OpenSSL-fips-0_9_8-stable
OpenSSL-fips-1_2-stable
OpenSSL-fips-2_0-dev
OpenSSL-fips-2_0-stable
OpenSSL-fips2-0_9_7-stable
OpenSSL_0_9_6-stable
OpenSSL_0_9_7-stable
OpenSSL_0_9_8-stable
OpenSSL_0_9_8fg-stable
OpenSSL_1_0_0-stable
OpenSSL_1_0_1-stable
OpenSSL_1_0_2-stable
OpenSSL_1_1_0-stable
OpenSSL_1_1_1-stable
SSLeay
dependabot/github_actions/actions/setup-python-7
dependabot/github_actions/coverallsapp/github-action-2.3.8
dependabot/github_actions/cross-platform-actions/action-1.6.0
dependabot/github_actions/docker/setup-docker-action-5.5.0
dependabot/github_actions/dtolnay/rust-toolchain-e2a55d2ffb04f378e9626c28d38b36d230d1e12f
feature/acert-cli
feature/dtls-1.3
feature/ech
feature/engineremoval
feature/evp_skey
feature/hqc
feature/hss
feature/merkle-tree-certificates
feature/method-store-freeze
feature/ossl_fn
feature/quic-0-rtt
feature/removesslv3
master
openssl-3.0
openssl-3.1
openssl-3.2
openssl-3.3
openssl-3.4
openssl-3.5
openssl-3.6
openssl-4.0
openssl-4.1
tls1.3-draft-18
tls1.3-draft-19
TLS/SSL and crypto library.
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
ssl
/
statem
Commit message (
Expand
)
Author
Age
Files
Lines
*
TLS: Generate the server random before processing ClientHello extensions
Daniel Kubec
4 days
1
-16
/
+19
*
Cache decoded certs on client in CTX to avoid multiple asn1 parsing
Neil Horman
4 days
1
-13
/
+22
*
Fix TLS 1.3 alert for missing key_share
Anuj Ramesh
4 days
1
-4
/
+10
*
ssl: handle session ID cache lock failure
Mounir IDRASSI
4 days
1
-1
/
+1
*
Don't dereference a NULL rbio in dtls1_read_failed()
Matt Caswell
5 days
1
-1
/
+5
*
DTLS 1.3: only accept plaintext alerts once the hellos are done
Matt Caswell
5 days
3
-9
/
+16
*
TLS 1.3: Enforce the ticket lifetime when offering a ticket
Daniel Kubec
6 days
1
-3
/
+15
*
PSK: Check for invalid server PSK ciphers
Viktor Dukhovni
2026-10-09
1
-0
/
+23
*
Polish psk callback error path cleanup
Viktor Dukhovni
2026-10-09
2
-3
/
+9
*
Test PHA verification results across session resumption
Mounir IDRASSI
2026-10-08
1
-39
/
+35
*
Keep pending client credentials out of cached sessions
Mounir IDRASSI
2026-10-08
1
-30
/
+76
*
dtls: honour SSL_OP_COOKIE_EXCHANGE for DTLS 1.3
Jakub Zelenka
2026-10-06
3
-24
/
+41
*
Omit key_share from a cookie-only HelloRetryRequest
Jakub Zelenka
2026-10-06
1
-4
/
+8
*
Enforce the supported_groups/key_share pairing in TLS 1.3 ClientHellos
Paul Grubbs
2026-10-02
1
-0
/
+17
*
Bring recent comments into line with the STYLE.md comment rules
Bob Beck
2026-10-02
2
-17
/
+10
*
Removes redundant SSLv3 version checks and check against TLS1_VERSION_MAJOR i...
Frederik Wedel-Heinen
2026-10-02
2
-2
/
+2
*
dtls: avoid meaningless retry on EMSGSIZE in dtls1_do_write (#27905)
vatsal-dp
2026-10-02
1
-3
/
+10
*
DTLS 1.3: Retain the previous read epoch to recover from lost ACKs
Ryan Hooper
2026-10-02
2
-8
/
+60
*
DTLS 1.3: Track sent message ACKs by byte range across retransmits
Ryan Hooper
2026-10-01
1
-6
/
+71
*
Bound DTLS 1.3 ACK bookkeeping and fit ACKs to records
Mounir IDRASSI
2026-09-30
1
-5
/
+35
*
ssl/statem/statem_srvr.c: drop needless s->d1 NULL check
Eugene Syromiatnikov
2026-09-29
1
-3
/
+1
*
ssl/statem/statem_dtls.c: remove a dead write in dtls1_do_write()
Eugene Syromiatnikov
2026-09-29
1
-1
/
+0
*
Fix TLS 1.3 ticket age decoding when the offset wraps
Mounir IDRASSI
2026-09-29
1
-2
/
+2
*
dtls: reset init_off before retransmitting a message
Ryan Hooper
2026-09-29
1
-0
/
+2
*
Suppress unusable PSK offers and 0-RTT client-side
Viktor Dukhovni
2026-09-23
3
-64
/
+167
*
dtls: read the rest of a DTLS 1.3 ACK body from the current record
Mounir IDRASSI
2026-09-22
1
-16
/
+21
*
DTLS: preserve outstanding flights after incomplete ACKs
Mounir IDRASSI
2026-09-21
4
-4
/
+73
*
Bound the DTLS 1.3 ACK body read by the record, not init_num
Matt Caswell
2026-09-18
1
-3
/
+9
*
DTLS: reject trailing bytes after the ACK record number vector
Mounir IDRASSI
2026-09-18
1
-1
/
+1
*
dtls: Don't check for NULL when it can't be
Norbert Pocs
2026-09-17
1
-3
/
+1
*
dtls: Add missing pqueue free
Norbert Pocs
2026-09-17
1
-1
/
+4
*
statem: fail ClientHello construction on ECH GREASE failure
Jakub Zelenka
2026-09-16
1
-1
/
+1
*
Fix double free in server client-certificate parse error path
Mounir IDRASSI
2026-09-16
1
-0
/
+1
*
Free WPACKETs on error paths
Norbert Pocs
2026-09-15
1
-1
/
+3
*
Fix clang-format violation in tls_process_client_hello()
Matt Caswell
2026-09-07
1
-1
/
+1
*
Keep GREASE key shares valid after HelloRetryRequest
F1xGOD
2026-09-01
1
-2
/
+8
*
TLS 1.3: Apply the cap to the lifetime hint in the session
Daniel Kubec
2026-09-01
1
-1
/
+1
*
Allow SSL_set_retry_verify() on server session
wfurt
2026-08-27
2
-51
/
+108
*
PSK: Fix ALPN handling
Daniel Kubec
2026-08-27
2
-0
/
+40
*
Make the TLS 1.3 resumption PSK check aware of DTLS 1.3
Matt Caswell
2026-08-25
1
-1
/
+2
*
DTLS 1.3 Fix no-dtls1_3 build configuration CI failures
Ryan Hooper
2026-08-25
1
-0
/
+4
*
Reject HelloRequest in TLS and DTLS 1.3
Mounir IDRASSI
2026-08-25
1
-9
/
+20
*
DTLS 1.3 SSL Listener does not currently buffer handshake messages
Ryan Hooper
2026-08-25
1
-8
/
+8
*
DTLS 1.3 Don't reset the handshake seq number after connection finish
Ryan Hooper
2026-08-25
1
-3
/
+10
*
DTLS 1.3 Fix CI failures
Ryan Hooper
2026-08-25
2
-4
/
+13
*
DTLS 1.3 Limit DTLSv1_listen to DTLS1.2 and add SSL Listener for DTLS
Ryan Hooper
2026-08-25
2
-32
/
+98
*
DTLS 1.3 Demo and Bug Fix
Ryan Hooper
2026-08-25
1
-4
/
+8
*
DTLS 1.3 Interop Issue with NSS using ChaCha20
Ryan Hooper
2026-08-25
1
-2
/
+2
*
Addressing how DTLS 1.3 handles Read Record Layer transitions.
Ryan Hooper
2026-08-25
3
-3
/
+26
*
DTLS 1.3 Enable Resumption Tests
Ryan Hooper
2026-08-25
1
-13
/
+21
[next]