summaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Copyright year updatesTomas Mraz2023-09-111-1/+1
* A null pointer dereference occurs when memory allocation failsyangyangtiantianlonglong2023-08-021-1/+4
* Update copyright yearRichard Levitte2023-02-071-1/+1
* Ensure our buffer allocation allows for the Explicit IVMatt Caswell2023-01-241-1/+6
* Fix the ceiling on how much encryption growth we can haveMatt Caswell2022-12-051-5/+12
* Update copyright yearTomas Mraz2022-11-011-1/+1
* ssl_cipher_process_rulestr: don't read outside rule_str bufferTodd C. Miller2022-10-261-3/+1
* Update copyright yearMatt Caswell2022-10-116-6/+6
* Convert serverinfo in SSL_CTX_use_serverinfo() to v2.Daniel Fiala2022-09-091-21/+60
* Coverity 1508506: misuse of time_tPauli2022-08-223-11/+46
* Coverity 1508534 & 1508540: misuses of time_tPauli2022-08-192-6/+4
* Fix SSL_pending() and SSL_has_pending() with DTLSMatt Caswell2022-08-102-6/+32
* Fix a memory leak in tls13_generate_secretBernd Edlinger2022-07-071-0/+1
* Update copyright yearMatt Caswell2022-06-214-4/+4
* Fix strict client chain check with TLS-1.3Tomas Mraz2022-06-031-8/+6
* Fix a crash in ssl_security_cert_chainBernd Edlinger2022-05-241-0/+2
* Fix leakage when the cacheline is 32-bytes in CBC_MAC_ROTATE_IN_PLACEbasavesh2022-05-091-3/+11
* Do not send an empty supported groups extensionTomas Mraz2022-05-051-1/+15
* (1.1) Add SSL_(CTX_)?get0_(verify|chain)_cert_store functionsHugo Landau2022-05-053-0/+19
* Update copyright yearMatt Caswell2022-05-038-8/+8
* Fix an assertion in the DTLS server codeBernd Edlinger2022-04-141-3/+3
* Fix a DTLS server hangup due to TLS13_AD_MISSING_EXTENSIONBernd Edlinger2022-04-132-0/+4
* err: get rid of err_free_strings_int()Dr. Matthias St. Pierre2022-04-091-16/+1
* Fix usage of SSLfatalMatt Caswell2022-03-301-1/+2
* tls_process_server_hello: Disallow repeated HRRTomas Mraz2022-03-301-0/+4
* ticket_lifetime_hint may exceed 1 week in TLSv1.3Todd Short2022-03-251-6/+15
* Fix Coverity 1498611 & 1498608: uninitialised readPauli2022-03-231-0/+2
* print SSL session, fix build warnings on OpenBSD.David Carlier2022-03-181-2/+2
* Update copyright yearMatt Caswell2022-03-152-2/+2
* [ssl] Add SSL_kDHEPSK and SSL_kECDHEPSK as PFS ciphersuites for SECLEVEL >= 3Nicola Tuveri2022-03-031-2/+3
* [ssl] Prefer SSL_k(EC)?DHE to the SSL_kE(EC)?DH aliasNicola Tuveri2022-03-032-7/+7
* Update copyright yearMatt Caswell2021-12-145-5/+5
* Fix ssl_free() and thus BIO_free() to respect BIO_NOCLOSEDr. David von Oheimb2021-12-031-4/+3
* No EtM for GOST ciphersDmitry Belyavskiy2021-12-011-1/+3
* free the Post-Handshake Auth digest when there is an error saving the digestx20182021-11-161-0/+2
* Reset the rwstate before calling ASYNC_start_job()Matt Caswell2021-11-151-0/+2
* Fix a memory leak in ssl_create_cipher_listBernd Edlinger2021-11-041-0/+1
* Fix a memory leak in tls_parse_stoc_key_shareBernd Edlinger2021-11-041-0/+1
* New extensions can be sent in a certificate requestMatt Caswell2021-10-111-5/+6
* ssl: Correct filename in READMETianjia Zhang2021-09-271-1/+1
* Make the -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION pass testsTomas Mraz2021-09-011-1/+1
* Fix some strict gcc-12 warningsBernd Edlinger2021-08-252-2/+2
* Fix the array size of dtlsseq in tls1_encBernd Edlinger2021-08-251-1/+1
* Update copyright yearMatt Caswell2021-08-249-9/+9
* Fix potential double-freeTodd Short2021-08-161-1/+1
* Fix some minor record layer issuesMatt Caswell2021-07-202-20/+20
* Disallow SSL_key_update() if there are writes pendingMatt Caswell2021-07-161-0/+5
* Don't reset the packet pointer in ssl3_setup_read_bufferMatt Caswell2021-07-161-1/+0
* Avoid "excessive message size" for session ticketsMatt Caswell2021-07-122-1/+4
* ssl: do not choose auto DH groups that are weaker than the security levelPauli2021-07-083-10/+33