| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Have ssl3_ssl3_send_client_verify() change the state to SSL3_ST_SW_CERT_VRFY_B. | Richard Levitte | 2003-09-27 | 1 | -0/+1 |
| * | Have ssl3_send_certificate_request() change the state to SSL3_ST_SW_CERT_REQ_B. | Richard Levitte | 2003-09-27 | 1 | -0/+1 |
| * | Include the instance in the Kerberos ticket information. | Richard Levitte | 2003-09-27 | 2 | -10/+27 |
| * | Free the Kerberos context upon freeing the SSL. | Richard Levitte | 2003-09-27 | 1 | -0/+5 |
| * | These should be write-locks, not read-locks. | Geoff Thorpe | 2003-09-08 | 1 | -2/+2 |
| * | Only accept a client certificate if the server requests | Dr. Stephen Henson | 2003-09-04 | 1 | -4/+5 |
| * | fix out-of-bounds check in lock_dbg_cb (was too lose to detect all | Bodo Möller | 2003-08-14 | 1 | -1/+1 |
| * | make sure no error is left in the queue that is intentionally ignored | Bodo Möller | 2003-08-11 | 1 | -1/+3 |
| * | tolerate extra data at end of client hello for SSL 3.0 | Bodo Möller | 2003-07-21 | 1 | -0/+4 |
| * | Fix ordering of compare functions: strncmp() must be used first, as it | Lutz Jänicke | 2003-04-08 | 1 | -3/+4 |
| * | Let's limit the extent of the definition of _XOPEN_SOURCE. | Richard Levitte | 2003-03-25 | 1 | -0/+1 |
| * | countermeasure against new Klima-Pokorny-Rosa atack | Bodo Möller | 2003-03-19 | 1 | -13/+11 |
| * | mingw related cleanups, as in head | Ulf Möller | 2003-02-22 | 1 | -1/+0 |
| * | Security fix: Vaudenay timing attack on CBC. | Richard Levitte | 2003-02-19 | 1 | -16/+31 |
| * | Make it possible to disable OCSP, the speed application, and the use of sockets. | Richard Levitte | 2003-02-14 | 1 | -0/+2 |
| * | Option to disable auto SSL chain building. | Dr. Stephen Henson | 2003-02-12 | 2 | -3/+16 |
| * | comments | Bodo Möller | 2003-02-12 | 1 | -1/+3 |
| * | SSL_add_dir_cert_subjects_to_stack now exists for WIN32 | Bodo Möller | 2003-02-05 | 2 | -3/+1 |
| * | A few small bugs with BIO popping. | Richard Levitte | 2003-01-30 | 1 | -0/+4 |
| * | Add the possibility to build without the ENGINE framework. | Richard Levitte | 2003-01-30 | 1 | -0/+4 |
| * | Fix a memory leak in SSL. | Richard Levitte | 2003-01-30 | 1 | -0/+1 |
| * | Fix possible NULL dereferencial. | Richard Levitte | 2003-01-16 | 1 | -14/+20 |
| * | Really fix SSLv2 session ID handling | Lutz Jänicke | 2003-01-15 | 1 | -1/+1 |
| * | Fix wrong handling of session ID in SSLv2 client code. | Lutz Jänicke | 2002-12-29 | 1 | -1/+1 |
| * | Some more adjustments | Lutz Jänicke | 2002-12-24 | 1 | -2/+3 |
| * | Stop a possible memory leak. | Richard Levitte | 2002-12-22 | 3 | -2/+13 |
| * | Fix Kerberos5/SSL interaction | Lutz Jänicke | 2002-12-20 | 1 | -38/+17 |
| * | We stupidly had a separate LIBKRB5 variable for KRB5 library dependencies, | Richard Levitte | 2002-12-19 | 1 | -1/+0 |
| * | If _XOPEN_SOURCE_EXTENDED or _XOPEN_SOURCE are defined, _POSIX_C_SOURCE gets | Richard Levitte | 2002-12-19 | 1 | -3/+7 |
| * | Protect loading routines with a lock. | Richard Levitte | 2002-12-16 | 1 | -1/+6 |
| * | gethostname() is more a BSD feature than an XOPEN one. | Richard Levitte | 2002-12-04 | 1 | -1/+1 |
| * | define USE_SOCKETS so sys/param.h gets included (and thusly, MAXHOSTNAMELEN | Richard Levitte | 2002-12-02 | 1 | -0/+1 |
| * | A few more memset()s converted to OPENSSL_cleanse(). | Richard Levitte | 2002-11-29 | 1 | -1/+1 |
| * | Have all tests use EXIT() to exit rather than exit(), since the latter doesn't | Richard Levitte | 2002-11-28 | 1 | -1/+1 |
| * | Cleanse memory using the new OPENSSL_cleanse() function. | Richard Levitte | 2002-11-28 | 8 | -22/+22 |
| * | Small bugfixes to the KSSL implementation. | Richard Levitte | 2002-11-26 | 3 | -4/+3 |
| * | Fix bug introduced by the attempt to fix client side external session | Lutz Jänicke | 2002-11-20 | 1 | -0/+5 |
| * | allocate bio_err before memory debugging is enabled to avoid memory leaks | Bodo Möller | 2002-11-19 | 1 | -2/+3 |
| * | WinCE patches | Richard Levitte | 2002-11-15 | 2 | -0/+31 |
| * | The pointer to the cipher object is not yet set, when session was reloaded | Lutz Jänicke | 2002-11-15 | 1 | -1/+1 |
| * | We need to read one more byte of the REQUEST-CERTIFICATE message. | Richard Levitte | 2002-11-15 | 1 | -2/+2 |
| * | Many security improvements (CHATS) and a warning fix. | Ben Laurie | 2002-11-12 | 22 | -137/+152 |
| * | avoid Purify warnings | Bodo Möller | 2002-11-05 | 1 | -0/+7 |
| * | Remove all referenses to RSAref, since that's been gone for more than | Richard Levitte | 2002-10-31 | 1 | -230/+50 |
| * | Bodo spotted this keyslip in my patch to 0.9.7-stable. | Geoff Thorpe | 2002-10-29 | 1 | -1/+1 |
| * | Correct and enhance the behaviour of "internal" session caching as it | Geoff Thorpe | 2002-10-29 | 3 | -7/+11 |
| * | increase permissible message length so that we can handle | Bodo Möller | 2002-10-28 | 1 | -1/+1 |
| * | Typos. | Richard Levitte | 2002-10-15 | 2 | -6/+6 |
| * | Typos. | Richard Levitte | 2002-10-15 | 1 | -2/+2 |
| * | makedepend complains when a header file is included more than once in | Richard Levitte | 2002-10-14 | 1 | -2/+0 |
