projects
/
oweals
/
openssl.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
zero pad DHE public key in ServerKeyExchange message for interop
[oweals/openssl.git]
/
ssl
/
2016-12-14
russor
zero pad DHE public key in ServerKeyExchange message...
tree
|
commitdiff
2016-12-14
Richard Levitte
Fix ssl_cert_dup: change one 'return NULL' to 'goto...
tree
|
commitdiff
2016-12-14
Richard Levitte
Make 'err' lable in ssl_cert_dup unconditional
tree
|
commitdiff
2016-12-13
Benjamin Kaduk
Fix a bug in clienthello processing
tree
|
commitdiff
2016-11-29
Matt Caswell
Revert "Fix heartbeat_test"
tree
|
commitdiff
2016-11-21
Kurt Roeckx
Make SSL_read and SSL_write return the old behaviour...
tree
|
commitdiff
2016-11-13
Matthias Kraft
Solution proposal for issue #1647.
tree
|
commitdiff
2016-11-02
Matt Caswell
Fail if an unrecognised record type is received
tree
|
commitdiff
2016-11-02
Matt Caswell
Fix heartbeat_test
tree
|
commitdiff
2016-10-28
Matt Caswell
Implement length checks as a macro
tree
|
commitdiff
2016-10-28
Matt Caswell
Ensure we have length checks for all extensions
tree
|
commitdiff
2016-10-28
Matt Caswell
Fix length check writing status request extension
tree
|
commitdiff
2016-10-28
Matt Caswell
A zero return from BIO_read/BIO_write() could be retryable
tree
|
commitdiff
2016-10-14
Vitezslav Cizek
Degrade 3DES to MEDIUM in SSL2
tree
|
commitdiff
2016-10-11
Kurt Cancemi
Add missing error string for SSL_R_TOO_MANY_WARN_ALERTS
tree
|
commitdiff
2016-09-22
Dirk Feytons
Fix build with no-nextprotoneg
tree
|
commitdiff
2016-09-22
Dmitry Belyavsky
Avoid KCI attack for GOST
tree
|
commitdiff
2016-09-22
Matt Caswell
Fix a mem leak in NPN handling
tree
|
commitdiff
2016-09-22
Matt Caswell
Fix OCSP Status Request extension unbounded memory...
tree
|
commitdiff
2016-09-21
Matt Caswell
Don't allow too many consecutive warning alerts
tree
|
commitdiff
2016-09-21
Dr. Stephen Henson
Make message buffer slightly larger than message.
tree
|
commitdiff
2016-09-21
Dr. Stephen Henson
Use SSL3_HM_HEADER_LENGTH instead of 4.
tree
|
commitdiff
2016-09-21
Dr. Stephen Henson
Remove unnecessary check.
tree
|
commitdiff
2016-09-21
Dr. Stephen Henson
Fix small OOB reads.
tree
|
commitdiff
2016-09-15
Matt Caswell
Revert "Abort on unrecognised warning alerts"
tree
|
commitdiff
2016-09-15
Dr. Stephen Henson
Fix memory leak on realloc error.
tree
|
commitdiff
2016-09-15
Dr. Stephen Henson
Fix memory leak on error.
tree
|
commitdiff
2016-09-13
Matt Caswell
Abort on unrecognised warning alerts
tree
|
commitdiff
2016-08-30
Matt Caswell
Ensure the CertStatus message adds a DTLS message heade...
tree
|
commitdiff
2016-08-26
David Woodhouse
Add basic test for Cisco DTLS1_BAD_VER and record repla...
tree
|
commitdiff
2016-08-26
David Woodhouse
Fix ubsan 'left shift of negative value -1' error in...
tree
|
commitdiff
2016-08-26
David Woodhouse
Fix SSL_export_keying_material() for DTLS1_BAD_VER
tree
|
commitdiff
2016-08-26
Matt Caswell
Fix the no-tls1 option
tree
|
commitdiff
2016-08-26
Todd Short
Always use session_ctx when removing a session
tree
|
commitdiff
2016-08-24
Rich Salz
SWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUM
tree
|
commitdiff
2016-08-24
Matt Caswell
Fix no-ec
tree
|
commitdiff
2016-08-23
Dr. Stephen Henson
Sanity check ticket length.
tree
|
commitdiff
2016-08-22
Richard Levitte
VMS: Use strict refdef extern model when building libra...
tree
|
commitdiff
2016-08-22
Matt Caswell
Prevent DTLS Finished message injection
tree
|
commitdiff
2016-08-22
Matt Caswell
Fix DTLS buffered message DoS attack
tree
|
commitdiff
2016-08-22
Matt Caswell
Silence some "maybe used uninitialised" warnings
tree
|
commitdiff
2016-08-19
Rich Salz
Fix NULL-return checks in 1.0.2
tree
|
commitdiff
2016-08-19
Matt Caswell
Update function error code
tree
|
commitdiff
2016-08-19
Matt Caswell
Fix DTLS replay protection
tree
|
commitdiff
2016-08-19
Matt Caswell
Add DTLS replay protection test
tree
|
commitdiff
2016-08-19
Matt Caswell
Fix DTLS unprocessed records bug
tree
|
commitdiff
2016-08-19
Matt Caswell
Add a DTLS unprocesed records test
tree
|
commitdiff
2016-07-28
Rich Salz
Add missing casts.
tree
|
commitdiff
2016-07-22
Dr. Stephen Henson
Send alert for bad DH CKE
tree
|
commitdiff
2016-07-19
Dr. Stephen Henson
Sanity check in ssl_get_algorithm2().
tree
|
commitdiff
2016-07-19
Dr. Stephen Henson
Send alert on CKE error.
tree
|
commitdiff
2016-07-01
Matt Caswell
Avoid an overflow in constructing the ServerKeyExchange...
tree
|
commitdiff
2016-06-27
Matt Caswell
Change usage of RAND_pseudo_bytes to RAND_bytes
tree
|
commitdiff
2016-06-01
Matt Caswell
Avoid some undefined pointer arithmetic
tree
|
commitdiff
2016-05-26
Matt Caswell
The ssl3_digest_cached_records() function does not...
tree
|
commitdiff
2016-05-19
Viktor Dukhovni
Ensure verify error is set when X509_verify_cert()...
tree
|
commitdiff
2016-05-19
Matt Caswell
Fix a double free in tls1_setup_key_block
tree
|
commitdiff
2016-05-17
Matt Caswell
Fix SSL compression symbol exporting
tree
|
commitdiff
2016-05-09
David Benjamin
Don't send signature algorithms when client_version...
tree
|
commitdiff
2016-05-02
TJ Saunders
Remove confusing comment.
tree
|
commitdiff
2016-05-02
TJ Saunders
Issue #719:
tree
|
commitdiff
2016-04-26
Matt Caswell
Ensure we check i2d_X509 return val
tree
|
commitdiff
2016-04-07
David Benjamin
Fix memory leak on invalid CertificateRequest.
tree
|
commitdiff
2016-04-04
Todd Short
Fix ALPN
tree
|
commitdiff
2016-03-18
Matt Caswell
Add a check for a failed malloc
tree
|
commitdiff
2016-03-18
Matt Caswell
Ensure that memory allocated for the ticket is freed
tree
|
commitdiff
2016-03-14
Kurt Roeckx
Add no-ssl2-method
tree
|
commitdiff
2016-03-09
Viktor Dukhovni
expose SSLv2 method prototypes
tree
|
commitdiff
2016-03-08
Viktor Dukhovni
Retain SSLv2 methods as functions that return NULL
tree
|
commitdiff
2016-03-07
Kurt Roeckx
Remove LOW from the default
tree
|
commitdiff
2016-03-01
Matt Caswell
make update
tree
|
commitdiff
2016-03-01
Viktor Dukhovni
Disable EXPORT and LOW SSLv3+ ciphers by default
tree
|
commitdiff
2016-03-01
Matt Caswell
Add a test for SSLv2 configuration
tree
|
commitdiff
2016-03-01
Viktor Dukhovni
Disable SSLv2 default build, default negotiation and...
tree
|
commitdiff
2016-02-08
Matt Caswell
Handle SSL_shutdown while in init more appropriately #2
tree
|
commitdiff
2016-01-28
Matt Caswell
Always generate DH keys for ephemeral DH cipher suites
tree
|
commitdiff
2016-01-28
Viktor Dukhovni
Better SSLv2 cipher-suite enforcement
tree
|
commitdiff
2016-01-20
Matt Caswell
Handle SSL_shutdown while in init more appropriately
tree
|
commitdiff
2016-01-19
Alessandro Ghedini
Validate ClientHello session_id field length and send...
tree
|
commitdiff
2016-01-17
Viktor Dukhovni
Empty SNI names are not valid
tree
|
commitdiff
2016-01-12
arijitnayak
Wrong definition of the macro SSL_set1_sigalgs in ssl.h
tree
|
commitdiff
2016-01-10
Kurt Roeckx
Change minimum DH size from 768 to 1024
tree
|
commitdiff
2015-12-27
Matt Caswell
Ensure we don't call the OCSP callback if resuming...
tree
|
commitdiff
2015-12-27
Matt Caswell
Fix error when server does not send CertificateStatus...
tree
|
commitdiff
2015-12-19
Matt Caswell
Fix more URLs mangled by reformat
tree
|
commitdiff
2015-12-18
Richard Levitte
Remove the "eay" c-file-style indicators
tree
|
commitdiff
2015-12-10
Matt Caswell
Ensure |rwstate| is set correctly on BIO_flush
tree
|
commitdiff
2015-12-10
Matt Caswell
Fix DTLS handshake fragment retries
tree
|
commitdiff
2015-12-10
Matt Caswell
Add a return value check
tree
|
commitdiff
2015-12-02
Richard Levitte
_BSD_SOURCE is deprecated, use _DEFAULT_SOURCE instead
tree
|
commitdiff
2015-12-01
Matt Caswell
Remove cookie validation return value trick
tree
|
commitdiff
2015-11-24
Pascal Cuoq
ssl3_free(): Return if it wasn't created
tree
|
commitdiff
2015-11-24
Kurt Roeckx
Set reference count earlier
tree
|
commitdiff
2015-11-21
Viktor Dukhovni
Good hygiene with size_t output argument.
tree
|
commitdiff
2015-11-20
Matt Caswell
Ensure all EVP calls have their returns checked where...
tree
|
commitdiff
2015-11-10
Matt Caswell
Stop DTLS servers asking for unsafe legacy renegotiation
tree
|
commitdiff
2015-11-10
Matt Caswell
Only call ssl3_init_finished_mac once for DTLS
tree
|
commitdiff
2015-11-09
Matt Caswell
Remove redundant check from tls1_get_curvelist
tree
|
commitdiff
2015-11-09
Matt Caswell
Fix missing malloc return value checks
tree
|
commitdiff
2015-11-08
Dr. Stephen Henson
Reject TLS 1.2 ciphersuites if not allowed.
tree
|
commitdiff
next