summaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Add a test for CVE-2017-3737Matt Caswell2017-12-062-1/+111
* Don't allow read/write after fatal errorMatt Caswell2017-12-061-1/+1
* Don't use SSLv3_client_method internally with no-ssl3Richard Levitte2017-11-141-1/+1
* Resolve warnings in VC-WIN32 build, which allows to add /WX.Andy Polyakov2017-11-133-13/+13
* ssltest.c: cb_ticket2 appears to not return a value when it "should"Richard Levitte2017-11-111-0/+1
* Fix error handling in heartbeat processingBernd Edlinger2017-11-071-2/+8
* Fix no-ssl3-method buildKurt Roeckx2017-11-031-0/+2
* Fix weak digest in TLS 1.2 with SNI.David Benjamin2017-11-012-9/+66
* Use casts for arguments to ctype functions.Pauli2017-08-221-1/+1
* Backport of 5b8fa43 and remove resolved TODO: see PR#3924.Bernd Edlinger2017-07-161-7/+29
* Add documentation for the SSL_export_keying_material() functionMatt Caswell2017-06-212-4/+4
* Fix ex_data memory leakTodd Short2017-06-011-2/+4
* Send a protocol version alertMatt Caswell2017-06-011-0/+28
* Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION (1.0.2)Todd Short2017-05-261-1/+1
* Ignore -rle and -comp when compiled with OPENSSL_NO_COMP.Bernd Edlinger2017-05-251-2/+10
* Copy custom extension flags in a call to SSL_set_SSL_CTX()Matt Caswell2017-05-103-0/+24
* Additional check to handle BAD SSL_write retryRich Salz2017-04-111-1/+1
* Guard last few debugging printfs in libsslRichard Levitte2017-03-232-0/+8
* Fix BAD CCS alert in DTLSMatt Caswell2017-03-211-2/+2
* Avoid a mem leak on errorMatt Caswell2017-03-211-10/+6
* Fix DTLSv1_listen() sequence numbersMatt Caswell2017-03-132-13/+11
* Revert "Use the callbacks from the SSL object instead of the SSL_CTX object"Richard Levitte2017-03-111-6/+8
* Use the callbacks from the SSL object instead of the SSL_CTX objectPauli2017-03-101-8/+6
* Avoid questionable use of the value of a pointerBernd Edlinger2017-03-101-1/+2
* Prevent undefined behavior in memcpy call.Roberto Guimaraes2017-03-081-1/+2
* Restore the test coverage of COMP_rle and SSL_COMP_add_compression_methodBernd Edlinger2017-02-241-0/+1
* Add some more consistency checks in tls_decrypt_ticket.Bernd Edlinger2017-02-221-0/+5
* Fix some realloc error handling issues.Bernd Edlinger2017-02-152-10/+10
* mem leak on error path and error propagation fixYuchi2017-02-141-1/+1
* Don't read uninitialised data for short session IDs.David Benjamin2017-02-131-4/+12
* Fix issue #2113:Bernd Edlinger2017-02-098-12/+57
* Fix the crash due to inconsistent enc_write_ctxBernd Edlinger2017-02-091-29/+44
* Fix session ticket and SNITodd Short2017-02-083-2/+133
* Combined patch for the more or less obvious issuesBernd Edlinger2017-02-064-0/+8
* Use correct signature algorithm list when sending or checking.Dr. Stephen Henson2017-01-264-9/+9
* Better check of DH parameters in TLS dataRichard Levitte2017-01-261-11/+33
* Fix a ssl session leak due to OOM in lh_SSL_SESSION_insertBernd Edlinger2017-01-241-0/+9
* Fix SSL_VERIFY_CLIENT_ONCEMatt Caswell2017-01-231-1/+1
* Fix error handling in SSL_CTX_newBernd Edlinger2017-01-101-3/+1
* zero pad DHE public key in ServerKeyExchange message for interoprussor2016-12-141-0/+27
* Fix ssl_cert_dup: change one 'return NULL' to 'goto err'Richard Levitte2016-12-141-1/+1
* Make 'err' lable in ssl_cert_dup unconditionalRichard Levitte2016-12-141-2/+0
* Fix a bug in clienthello processingBenjamin Kaduk2016-12-133-54/+37
* Revert "Fix heartbeat_test"Matt Caswell2016-11-291-4/+4
* Make SSL_read and SSL_write return the old behaviour and document it.Kurt Roeckx2016-11-213-31/+13
* Solution proposal for issue #1647.Matthias Kraft2016-11-131-1/+4
* Fail if an unrecognised record type is receivedMatt Caswell2016-11-021-8/+5
* Fix heartbeat_testMatt Caswell2016-11-021-4/+4
* Implement length checks as a macroMatt Caswell2016-10-281-21/+26
* Ensure we have length checks for all extensionsMatt Caswell2016-10-281-52/+142