aboutsummaryrefslogtreecommitdiffstats
path: root/ssl
Commit message (Expand)AuthorAgeFilesLines
* QUIC: resend the whole ClientHello after a RetryNikolas Gauder2 days1-27/+34
* QUIC: release pseudo-lost packets from the congestion controllerNikolas Gauder2 days1-0/+7
* Fix SSL_poll() multi-reactor cleanup deadlockMounir IDRASSI5 days4-30/+114
* QUIC: don't answer a refused Retry token with another RetryNikolas Gauder14 days1-2/+23
* Fix NULL dereference in SSL_get0_group_name() before a handshakeAlberto Maschietto2026-09-291-1/+3
* Copyright year updatesopenssl-machine2026-09-297-7/+7
* CVE-2026-75804 QUIC connection-level flow control not enforced, remote memory...Alexandr Nedvedicky2026-09-291-1/+10
* don't double count full databgram length on unvalidated connectionsNeil Horman2026-09-292-3/+2
* CVE-2026-84784 QUIC: unbounded RETIRE_CONNECTION_ID backlog (memory DoS)Alexandr Nedvedicky2026-09-291-6/+27
* Fix out-of-bounds valid_flags access after SSL_set_SSL_CTX()Matt Caswell2026-09-291-0/+35
* dtls: reset init_off before retransmitting a messageRyan Hooper2026-09-292-0/+19
* TLS: Reject undersized TLS 1.2 AEAD records before AEAD processingDaniel Kubec2026-09-291-0/+8
* make ch_cleanup() just safe enough to be called by quic_stream_testAlexandr Nedvedicky2026-09-261-2/+6
* Enforce final size for streams.Alexandr Nedvedicky2026-09-263-115/+128
* Limit packet buffer overhead to ~64kB per stream.Alexandr Nedvedicky2026-09-264-33/+128
* New implementation of stream reassembly for QUIC.Alexandr Nedvedicky2026-09-265-431/+1293
* quic: move the RXE definition to a local headerJakub Zelenka2026-09-262-55/+81
* Add a red-black tree implementationAlexandr Nedvedicky2026-09-261-1/+2
* Restore QUIC token value after second urxe decodeNeil Horman2026-09-251-1/+8
* quic: collect rejected incoming streams and return their stream creditJakub Zelenka2026-09-243-12/+34
* Re-format code after TypenameMacros and ForEachMacros additionsEugene Syromiatnikov2026-09-244-22/+19
* QUIC: initialize Retry WPACKET before error-path cleanupNikola Pajkovsky2026-09-211-1/+1
* Free WPACKETs on error pathsNorbert Pocs2026-09-151-4/+9
* TLS 1.3: Apply the cap to the lifetime hint in the sessionDaniel Kubec2026-09-011-1/+1
* ssl: restore missing SSLfatal in keylog outputJakub Zelenka2026-08-271-1/+3
* Fix build warnings in fuzzing and ANSI C buildsDaniel Kubec2026-08-261-4/+5
* Copyright year updatesopenssl-machine2026-08-2511-11/+11
* Avoid double free of qrx in port_default_packet_handler()Alexandr Nedvedicky2026-08-242-16/+56
* ssl/record: remove dead DTLS processed_rcds record queueMatt Caswell2026-08-242-60/+2
* ssl/record/methods/dtls_meth.c: lower the unprocessed_rcds queue limitMatt Caswell2026-08-241-1/+1
* Avoid full read buffer allocation when buffering DTLS next-epoch recordsMatt Caswell2026-08-241-16/+13
* Handle signature_algorithms_cert extension in key-only contextViktor Dukhovni2026-08-241-0/+14
* Don't store ACK-only frames in TX history for QUIC.Neil Horman2026-08-242-12/+66
* SSL_dup() should copy additional membersAlexandr Nedvedicky2026-08-191-0/+25
* test/quicapitest.c: add test for pending connections limit enforcementAlexandr Nedvedicky2026-08-121-0/+13
* QUIC server: limit number of pending QUIC channels/connectionsAlexandr Nedvedicky2026-08-123-0/+55
* Merge event masks for duplicate fds in the RIO poll builderMounir IDRASSI2026-08-111-1/+3
* statem: add missing SSLfatal in compressed certificate constructionJakub Zelenka2026-08-111-1/+3
* ssl: add missing SSLfatal in PSK premaster secret generationJakub Zelenka2026-08-111-1/+4
* quic: reject ACK of an unsent packet numberHaiyang Huang2026-08-112-2/+26
* statem: fix missing SSLfatal in TLSv1.3 ticket constructionJakub Zelenka2026-08-101-1/+1
* ssl: Remove shadowed variable in write retry pathMounir IDRASSI2026-08-031-1/+1
* Fix false success on zero BIO writeMounir IDRASSI2026-08-031-6/+18
* test: add regression test for SSL_poll() abort_blocking handlingMatt Caswell2026-07-292-0/+24
* SSL_poll: fix abort_blocking mishandling in poll_translate()/poll_block()Matt Caswell2026-07-291-3/+15
* Improve TLS handling of EC point formats (4.0)Viktor Dukhovni2026-07-241-59/+0
* Remove the rio_notifier run_once routineNeil Horman2026-07-131-12/+8
* NULL-pointer subtraction UB in tls_collect_extensions()Daniel Kubec2026-07-101-11/+14
* Don't attempt to check the security level on what signed our own certificate.Bob Beck2026-06-301-25/+6
* SSL_OP_SECOP is dead codeBob Beck2026-06-305-22/+18
generated by cgit (git 2.51.2) at 2026-10-25 14:46:57 +0100