aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* Fix: Check for wrong object. The converted sc should be checked instead of th...Nachel722025-08-221-1/+1
* Fix reallocation failure condition in qtx_resize_txe()Niels Dossche2025-08-221-2/+2
* Make SSL_poll() and SSL_shutdown() better friendsAlexandr Nedvedicky2025-08-213-42/+121
* Avoid doublefree of OCSP_SINGLERESPTomas Mraz2025-08-201-3/+0
* Fail immediately if we have no key shares to sendMatt Caswell2025-08-201-2/+8
* set SSLfatal if tls1_set_shared_sigalgs has a malloc failureNeil Horman2025-08-151-1/+3
* Add CRYPTO_FREE_REF to ossl_quic_free_token_storeNeil Horman2025-08-141-0/+1
* Assert SSLFatal on keylog failureNeil Horman2025-08-121-1/+1
* quic_channel.c: NULL check SSL_CONNECTIONNorbert Pocs2025-08-101-0/+5
* ssl: use array memory (re)allocation routinesEugene Syromiatnikov2025-08-089-61/+68
* crypto/params_dup.c: add overflow check to ossl_param_buf_allocEugene Syromiatnikov2025-08-081-1/+1
* ssl: drop multiplication by sizeof(char) in allocation size calculationsEugene Syromiatnikov2025-08-081-4/+5
* Ensure that the largest_pn values are migrated to our channel qrxNeil Horman2025-08-072-0/+11
* quic_channel: Handle HRR and the second transport params extensionNorbert Pocs2025-08-071-1/+13
* ssl/quic/quic_channel.c: Fix endianness of supported versions from received v...Nikolas Gauder2025-08-061-1/+0
* ssl/quic/quic_port.c: Fix endianness of supported versions in sent version ne...Nikolas Gauder2025-08-061-1/+1
* - adding a missing fileAlexandr Nedvedicky2025-07-271-2/+2
* - fix RFC reference and indentationsashan2025-07-271-9/+9
* Update ssl/quic/quic_ackm.cSashan2025-07-271-1/+1
* Update ssl/quic/quic_ackm.cSashan2025-07-271-1/+1
* ACK manager must avoid infinite probe time when waiting handshake confirmationsashan2025-07-272-7/+27
* Add support for TLS 1.3 OCSP multi-stapling for server certsmartin2025-07-2510-71/+356
* Deprecate ASN1_METH internal usageNorbert Pocs2025-07-171-3/+15
* QUIC receiver may accidentally ACK packet it fails to processAlexandr Nedvedicky2025-07-101-23/+5
* Introduce SSL_OP_SERVER_PREFERENCE to replace SSL_OP_CIPHER_SERVER_PREFERENCE...Michael Baentsch2025-07-095-7/+7
* Add stream type flags to SSL_accept_streamAndrew Dinh2025-07-032-1/+27
* libssl: Silence warnings on Win64 buildsTomas Mraz2025-07-0232-94/+103
* fix: msg callback in dtls1_do_write that incorrectly shows message (like a ce...noctuelles2025-06-301-4/+16
* Enforce permissions 0600 for SSLKEYLOGFILEDmitry Belyavskiy2025-06-301-1/+33
* Preserve connection custom extensions in SSL_set_SSL_CTX()Sergey Kandaurov2025-06-203-1/+63
* Add a helper function to copy custom extensions with old style argumentsSergey Kandaurov2025-06-201-26/+27
* Ensure we pass the user SSL object for the SSL_set_verify callbackMatt Caswell2025-06-171-2/+2
* Begin incorporating stdbool usage when json encodingAlexis Goodfellow2025-06-132-5/+7
* ossl_rio_poll_builder_add_fd(): Fixup pfds after reallocationsashan2025-06-131-0/+3
* fix: add parsing check in TLS compress_certificate extension handleryexiaochuan2025-06-101-0/+4
* Fix DTLS handling when receiving a no_renegotiation alertMatt Caswell2025-06-042-3/+14
* Reset qtls->local_transport_params_consumed to 0 on SSL_clear()Andrew Dinh2025-06-032-0/+9
* Ensure client read app data secret change occurs after write for QUICMatt Caswell2025-06-033-2/+24
* Implement explicit storing of the server_finished_hashMatt Caswell2025-06-034-10/+20
* Ensure client read handshake secret change occurs after write for QUICMatt Caswell2025-06-032-6/+14
* Implement explicit storing of the handshake_traffic_hashMatt Caswell2025-06-034-3/+17
* quic_tls.c: Precede double free on EVP_MD variableNorbert Pocs2025-05-301-0/+2
* ssl/t1_lib.c: Free gix if sk_TLS_GROUP_IX_push() fails to avoid memory leakJiashengJiang2025-05-191-1/+3
* s3_lib.c: Use illegal_parameter for failing encapsulation in ml_kemNorbert Pocs2025-05-161-1/+1
* Add NULL check in ossl_quic_get_peer_tokenNeil Horman2025-05-151-0/+3
* s3_lib.c: Handle weak x keys as illegal_parameter alertNorbert Pocs2025-05-151-1/+4
* Stop a TLSv1.3 server emitting an unsolicited PSK extensionMatt Caswell2025-05-131-0/+3
* statem_srvr.c: Add check for empty ecdhe encoded keyNorbert Pocs2025-05-131-2/+5
* Add a test for app data received too earlyMatt Caswell2025-05-081-0/+4
* Ensure we properly release DTLS buffered app data recordsMatt Caswell2025-05-081-0/+1