summaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Update copyright yearMatt Caswell2021-02-165-5/+5
* Remove unused 'peer_type' from SSL_SESSIONBenjamin Kaduk2021-02-102-2/+0
* Fix for negative return value from `SSL_CTX_sess_accept()`anupamam132021-01-091-1/+2
* Ensure DTLS free functions can handle NULLMatt Caswell2021-01-082-4/+8
* Modify is_tls13_capable() to take account of the servername cbMatt Caswell2020-12-101-2/+13
* Update copyright yearMatt Caswell2020-12-083-3/+3
* Fix comment in do_dtls1_write()Benjamin Kaduk2020-12-031-2/+2
* Unify ssl3_get_cipher_by_std_name() implementationBenjamin Kaduk2020-10-291-13/+5
* optimise ssl3_get_cipher_by_std_name()hklaas2020-10-291-2/+1
* Ensure we raise SSLfatal on errorMatt Caswell2020-10-261-1/+1
* Avoid potential doublefree on dh object assigned to EVP_PKEYTomas Mraz2020-10-201-0/+1
* Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callbackMatt Caswell2020-10-161-6/+7
* Fixed typo in ssl_lib.cIkko Ashimine2020-10-131-1/+1
* Use size of target buffer for allocationBenny Baumann2020-10-071-1/+1
* Update copyright yearMatt Caswell2020-09-225-5/+5
* Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP signNorman Ashley2020-09-211-26/+0
* Disallow certs with explicit curve in verification chainTomas Mraz2020-09-211-0/+1
* Coverity FixesShane Lontis2020-09-071-1/+1
* Avoid segfault in SSL_export_keying_material if there is no sessionTomas Mraz2020-08-131-1/+2
* Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni2020-07-222-15/+26
* Free pre_proc_exts in SSL_free()MiƂosz Kaniewski2020-07-021-0/+2
* Don't attempt to duplicate the BIO state in SSL_dupMatt Caswell2020-06-301-15/+0
* Ensure that SSL_dup copies the min/max protocol versionMatt Caswell2020-06-301-0/+2
* use safe primes in ssl_get_auto_dh()Hubert Kario2020-06-171-36/+38
* Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz2020-06-111-1/+13
* t1_trce: Fix remaining places where the 24 bit shift overflow happensTomas Mraz2020-05-201-5/+16
* Fix crash in early data send with out-of-band PSK using AES CCMraja-ashok2020-05-151-2/+9
* Correct alignment calculation in ssl3_setup_writeMatt Caswell2020-05-151-1/+1
* Fix use-after-free in BIO_C_SET_SSL callbackDr. Matthias St. Pierre2020-05-071-0/+1
* Fix NULL dereference in SSL_check_chain() for TLS 1.3Benjamin Kaduk2020-04-211-1/+1
* Partially revert "Detect EOF while reading in libssl"Tomas Mraz2020-03-252-9/+1
* Update copyright yearMatt Caswell2020-03-1711-11/+11
* Code to thread-safety in ChangeCipherStateBenjamin Kaduk2020-03-141-1/+9
* Don't write to the session when computing TLS 1.3 keysBenjamin Kaduk2020-03-132-2/+6
* Fix whitespace nit in ssl_generate_master_secret()Benjamin Kaduk2020-03-131-1/+1
* Detect EOF while reading in libsslMatt Caswell2020-02-202-1/+9
* Handle max_fragment_length overflow for DTLSSimon Cornish2020-02-191-2/+8
* Check that ed25519 and ed448 are allowed by the security levelKurt Roeckx2020-02-161-18/+41
* Don't acknowledge a servername following warning alert in servername cbMatt Caswell2020-01-301-0/+1
* Fix SSL_get_servername() and SNI behaviourMatt Caswell2020-01-303-22/+86
* Check that the default signature type is allowedKurt Roeckx2020-01-252-5/+13
* Fix TLS not using aes_cbc_hmac_sha ciphersBernd Edlinger2020-01-211-1/+1
* Update tls13_enc.cdcruette2020-01-021-1/+1
* Parse large GOST ClientKeyExchange messagesDmitry Belyavskiy2019-12-141-31/+38
* Fix some typosVeres Lajos2019-12-113-6/+6
* Fix a race condition in SNI handlingBenjamin Kaduk2019-11-221-1/+1
* SSL: Document SSL_add_{file,dir}_cert_subjects_to_stack()Richard Levitte2019-11-121-28/+0
* Fix misspelled resumption_label for CHARSET_EBCDICIdo Ben-Natan2019-11-111-1/+1
* Workaround for Windows-based GOST implementationsDmitry Belyavskiy2019-11-101-0/+20
* ssl/statem/statem_lib.c: make servercontext/clientcontext arrays of chars ins...Artiom Vaskov2019-10-101-4/+4