summaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Fix PSK handling.Dr. Stephen Henson2015-07-022-15/+4
* typo: should be OPENSSL_freeDr. Stephen Henson2015-06-201-1/+1
* Allow a zero length extension blockAdam Langley2015-06-121-6/+6
* More ssl_session_dup fixesMatt Caswell2015-06-111-36/+37
* Only allow a temporary rsa key exchange when they key is larger than 512.Kurt Roeckx2015-06-111-1/+8
* Properly check certificate in case of export ciphers.Kurt Roeckx2015-06-111-11/+41
* DTLS handshake message fragments musn't span packetsMatt Caswell2015-06-101-8/+18
* Tighten extension handlingMatt Caswell2015-06-101-94/+64
* Fix Kerberos issue in ssl_session_dupMatt Caswell2015-06-101-1/+1
* Use CRYPTO_memcmp in s3_cbc.cEmilia Kasper2015-06-081-1/+1
* Allow all curves when the client doesn't send an supported elliptic curves ex...Kurt Roeckx2015-06-041-0/+14
* Remove misleading commentMatt Caswell2015-06-041-2/+0
* Clean premaster_secret for GOSTMatt Caswell2015-06-041-0/+1
* Clean Kerberos pre-master secretMatt Caswell2015-06-041-5/+16
* Fix DTLS session resumptionMatt Caswell2015-06-041-1/+1
* Fix race condition in NewSessionTicketMatt Caswell2015-06-025-0/+158
* Check the message type requested is the type received in DTLSMatt Caswell2015-06-011-0/+6
* Fix ssltest to use 1024-bit DHE parametersEmilia Kasper2015-05-261-9/+11
* Don't check for a negative SRP extension sizeMatt Caswell2015-05-261-1/+1
* Don't send an alert if we've just received oneMatt Caswell2015-05-251-1/+12
* Fix the update target and remove duplicate file updatesRichard Levitte2015-05-231-6/+7
* Fix typo setting up certificate masksMatt Caswell2015-05-231-1/+1
* Remove export static DH ciphersuitesMatt Caswell2015-05-231-2/+2
* Lost alert in DTLSLubom2015-05-221-1/+1
* Correctly check for export size limitKurt Roeckx2015-05-201-1/+4
* Only support >= 256-bit elliptic curves with ecdh_auto (server) or by default...Emilia Kasper2015-05-202-26/+49
* client: reject handshakes with DH parameters < 768 bits.Emilia Kasper2015-05-203-24/+55
* Don't allow a CCS when expecting a CertificateVerifyMatt Caswell2015-05-132-64/+28
* Check sk_SSL_CIPHER_new_null return valueMatt Caswell2015-05-111-2/+6
* Add more error state transitions (DTLS)Matt Caswell2015-05-052-1/+22
* Add more error state transitions (client)Matt Caswell2015-05-051-1/+25
* Add more error state transitionsMatt Caswell2015-05-051-13/+61
* Add Error stateMatt Caswell2015-05-053-1/+11
* Add sanity check to ssl_get_prev_sessionMatt Caswell2015-05-011-1/+1
* Sanity check the return from final_finish_macMatt Caswell2015-05-012-2/+1
* Add sanity check in ssl3_cbc_digest_recordMatt Caswell2015-05-011-2/+12
* Sanity check EVP_CTRL_AEAD_TLS_AADMatt Caswell2015-05-011-2/+5
* Add length sanity check in SSLv2 n_do_ssl_write()Matt Caswell2015-04-291-0/+14
* Repair EAP-FAST session resumptionEmilia Kasper2015-04-213-17/+106
* make updateEmilia Kasper2015-04-211-20/+21
* Error out immediately on empty ciphers list.Emilia Kasper2015-04-171-7/+6
* Code style: space after 'if'Viktor Dukhovni2015-04-166-10/+10
* Fix ssl_get_prev_session overrunMatt Caswell2015-04-141-0/+5
* Check for ClientHello message overrunsMatt Caswell2015-04-141-1/+41
* Harden SSLv2-supporting servers against Bleichenbacher's attack.Emilia Kasper2015-04-081-53/+51
* Fix RAND_(pseudo_)?_bytes returnsMatt Caswell2015-03-254-10/+30
* Add ticket length before buffering DTLS messageMatt Caswell2015-03-251-1/+1
* Ensure last_write_sequence is saved in DTLS1.2Matt Caswell2015-03-251-4/+4
* Don't send a for ServerKeyExchange for kDHr and kDHdKurt Roeckx2015-03-241-1/+1
* Don't check curves that haven't been sentMatt Caswell2015-03-231-0/+10
generated by cgit (git 2.51.2) at 2026-10-25 15:12:10 +0100