summaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Ignore -rle and -comp when compiled with OPENSSL_NO_COMP.Bernd Edlinger2017-05-251-2/+10
* Copy custom extension flags in a call to SSL_set_SSL_CTX()Matt Caswell2017-05-103-0/+24
* Additional check to handle BAD SSL_write retryRich Salz2017-04-111-1/+1
* Guard last few debugging printfs in libsslRichard Levitte2017-03-232-0/+8
* Fix BAD CCS alert in DTLSMatt Caswell2017-03-211-2/+2
* Avoid a mem leak on errorMatt Caswell2017-03-211-10/+6
* Fix DTLSv1_listen() sequence numbersMatt Caswell2017-03-132-13/+11
* Revert "Use the callbacks from the SSL object instead of the SSL_CTX object"Richard Levitte2017-03-111-6/+8
* Use the callbacks from the SSL object instead of the SSL_CTX objectPauli2017-03-101-8/+6
* Avoid questionable use of the value of a pointerBernd Edlinger2017-03-101-1/+2
* Prevent undefined behavior in memcpy call.Roberto Guimaraes2017-03-081-1/+2
* Restore the test coverage of COMP_rle and SSL_COMP_add_compression_methodBernd Edlinger2017-02-241-0/+1
* Add some more consistency checks in tls_decrypt_ticket.Bernd Edlinger2017-02-221-0/+5
* Fix some realloc error handling issues.Bernd Edlinger2017-02-152-10/+10
* mem leak on error path and error propagation fixYuchi2017-02-141-1/+1
* Don't read uninitialised data for short session IDs.David Benjamin2017-02-131-4/+12
* Fix issue #2113:Bernd Edlinger2017-02-098-12/+57
* Fix the crash due to inconsistent enc_write_ctxBernd Edlinger2017-02-091-29/+44
* Fix session ticket and SNITodd Short2017-02-083-2/+133
* Combined patch for the more or less obvious issuesBernd Edlinger2017-02-064-0/+8
* Use correct signature algorithm list when sending or checking.Dr. Stephen Henson2017-01-264-9/+9
* Better check of DH parameters in TLS dataRichard Levitte2017-01-261-11/+33
* Fix a ssl session leak due to OOM in lh_SSL_SESSION_insertBernd Edlinger2017-01-241-0/+9
* Fix SSL_VERIFY_CLIENT_ONCEMatt Caswell2017-01-231-1/+1
* Fix error handling in SSL_CTX_newBernd Edlinger2017-01-101-3/+1
* zero pad DHE public key in ServerKeyExchange message for interoprussor2016-12-141-0/+27
* Fix ssl_cert_dup: change one 'return NULL' to 'goto err'Richard Levitte2016-12-141-1/+1
* Make 'err' lable in ssl_cert_dup unconditionalRichard Levitte2016-12-141-2/+0
* Fix a bug in clienthello processingBenjamin Kaduk2016-12-133-54/+37
* Revert "Fix heartbeat_test"Matt Caswell2016-11-291-4/+4
* Make SSL_read and SSL_write return the old behaviour and document it.Kurt Roeckx2016-11-213-31/+13
* Solution proposal for issue #1647.Matthias Kraft2016-11-131-1/+4
* Fail if an unrecognised record type is receivedMatt Caswell2016-11-021-8/+5
* Fix heartbeat_testMatt Caswell2016-11-021-4/+4
* Implement length checks as a macroMatt Caswell2016-10-281-21/+26
* Ensure we have length checks for all extensionsMatt Caswell2016-10-281-52/+142
* Fix length check writing status request extensionMatt Caswell2016-10-281-1/+8
* A zero return from BIO_read/BIO_write() could be retryableMatt Caswell2016-10-283-8/+44
* Degrade 3DES to MEDIUM in SSL2Vitezslav Cizek2016-10-141-1/+1
* Add missing error string for SSL_R_TOO_MANY_WARN_ALERTSKurt Cancemi2016-10-111-0/+1
* Fix build with no-nextprotonegDirk Feytons2016-09-221-0/+2
* Avoid KCI attack for GOSTDmitry Belyavsky2016-09-221-19/+0
* Fix a mem leak in NPN handlingMatt Caswell2016-09-221-0/+5
* Fix OCSP Status Request extension unbounded memory growthMatt Caswell2016-09-221-7/+17
* Don't allow too many consecutive warning alertsMatt Caswell2016-09-214-0/+35
* Make message buffer slightly larger than message.Dr. Stephen Henson2016-09-212-2/+9
* Use SSL3_HM_HEADER_LENGTH instead of 4.Dr. Stephen Henson2016-09-211-10/+16
* Remove unnecessary check.Dr. Stephen Henson2016-09-211-5/+0
* Fix small OOB reads.Dr. Stephen Henson2016-09-212-0/+17
* Revert "Abort on unrecognised warning alerts"Matt Caswell2016-09-151-6/+1