aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/statem
Commit message (Expand)AuthorAgeFilesLines
* Reject unknown TLS 1.3 ServerHello extensionsMounir IDRASSI2026-07-233-1/+64
* PSK: Handle non-empty client sid_ctxViktor Dukhovni2026-07-211-0/+20
* Fix TLS 1.3 PSKs with SSL_VERIFY_PEER and no sid_ctx.Viktor Dukhovni2026-07-212-9/+25
* Convert internal use of ASN1_STRING_set and ASN1_STRING_lengthBob Beck2026-07-181-2/+6
* NULL-pointer subtraction UB in tls_collect_extensions()Daniel Kubec2026-07-101-11/+14
* Improve TLS handling of EC point formatsViktor Dukhovni2026-07-104-116/+72
* Removes some stale SSLv3 support around the code and updated documentation to...Frederik Wedel-Heinen2026-06-302-13/+1
* SSL_OP_SECOP is dead codeBob Beck2026-06-301-2/+2
* statem: fail handshake if there is memory failure in negotiate_dheJakub Zelenka2026-06-301-3/+16
* Reject HelloRequest in TLS 1.3Mounir IDRASSI2026-06-241-1/+19
* Enforce RFC 8446 ticket lifetime limit for TLS 1.3 clientAbel Tom2026-06-181-0/+8
* There is no need to call custom_ext_copy_old_cb after reallocing dst->methsMatt Caswell2026-06-081-3/+0
* Reapply "Preserve connection custom extensions in SSL_set_SSL_CTX()"Matt Caswell2026-06-081-1/+52
* statem: fix missing fatal if valid_flags mfail in process cert reqJakub Zelenka2026-06-031-2/+4
* TLS1.3: Disable tickets when SSL_OP_NO_TICKET and SSL_SESS_CACHE_OFF are set.Daniel Kubec2026-05-201-2/+33
* Fix SSL_SESSION leak in tls_parse_ctos_psk() on ticket error pathsWeidong Wang2026-05-201-2/+2
* Revert "Preserve connection custom extensions in SSL_set_SSL_CTX()"Matt Caswell2026-05-131-52/+1
* Treat an unknown PSK identity the same way as a binder validation failureMatt Caswell2026-05-131-2/+18
* Make ssl includes self-containedBob Beck2026-05-061-2/+8
* Add missing header guards in sslBob Beck2026-05-061-0/+5
* According to RFC8446 there must always be one identity in the listMatt Caswell2026-05-031-0/+5
* Validate that a PSK identity is at least one byte longMatt Caswell2026-05-031-0/+4
* Check wrlmethod existence before sending alertJakub Zelenka2026-05-011-1/+1
* Use EVP_MD_fetch() instead of EVP_get_digestbynid() in X509/TLS pathsSamaresh Kumar Singh2026-04-261-1/+7
* Reject empty TLS 1.3 HRR cookieMounir IDRASSI2026-04-221-0/+1
* Grow the init_buf incrementally as we receive dataMatt Caswell2026-04-172-30/+34
* Limit the number of PSKs we acceptMatt Caswell2026-04-161-1/+2
* EAP-FAST: echo Session ID on PAC-based session resumptionDaniel Kubec2026-04-161-0/+13
* TLSv1.3: reissue session ticket after full handshake on ciphersuite mismatchDaniel Kubec2026-04-161-1/+6
* Skip parsing OCSP status_request when no status call is registeredBrenda So2026-04-131-0/+9
* Precompute some helper objects in each SSL_CTXViktor Dukhovni2026-04-132-36/+13
* curl ECH+QUIC fixsftcd2026-04-112-5/+29
* ECH: conformance test changes for echspec test toolsftcd2026-04-082-6/+28
* ECH: Conformance test changes in response to AISLE reviewsftcd2026-04-083-4/+27
* ssl/statem/statem_dtls.c: fix leak in dtls1_buffer_message()huanghuihui09042026-03-221-1/+5
* Fix OCSP_BASICRESP memory leak in ossl_get_ocsp_response()Weidong Wang2026-03-211-2/+4
* Implement RFC 8701 GREASE for TLS ClientHellomcrmck2026-03-173-2/+121
* dtls: buffer early CCS to handle UDP reordertlhc2026-03-163-35/+92
* Copyright year updatesopenssl-machine2026-03-109-9/+9
* Restrict the number of supported groups/sig algsMatt Caswell2026-03-061-1/+9
* Restrict the number of keyshares a server is willing to acceptMatt Caswell2026-03-061-36/+21
* SSL_get_error(): Check the error stack only in MSG_FLOW_ERROR stateIgor Ustinov2026-03-051-10/+0
* ECH: Add back code needed for correct ECH backend confirmationsftcd2026-03-041-0/+6
* add check before releaseing retry-configssftcd2026-03-021-0/+1
* Remove dead code in ossl_ech_copy_inner2outerNeil Horman2026-02-251-5/+2
* ssl/statem/statem_srvr.c: avoid WPACKET momory leak in tls_process_client_helloEugene Syromiatnikov2026-02-251-2/+6
* ssl/statem/extensions_srvr.c: free empty rcfgs in tls_construct_stoc_ech()Eugene Syromiatnikov2026-02-251-0/+1
* ssl/statem/extensions_clnt.c: superfluous NULL check in tls_construct_ctos_psk()Eugene Syromiatnikov2026-02-251-4/+0
* Make ASN1_STRING opaqueBob Beck2026-02-251-2/+2
* Fix being hoist on my own petard by my kind Irish friend.Bob Beck2026-02-241-1/+1
generated by cgit (git 2.51.2) at 2026-10-25 16:52:23 +0100