projects
/
oweals
/
openssl.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
Unix build: for mingw and cygwin, create the right location for DLLs
[oweals/openssl.git]
/
ssl
/
2018-11-14
Matt Caswell
Fix no-ec and no-tls1_2
tree
|
commitdiff
2018-11-12
Viktor Dukhovni
Added missing signature algorithm reflection functions
tree
|
commitdiff
2018-11-12
Matt Caswell
Separate ca_names handling for client and server
tree
|
commitdiff
2018-11-12
Matt Caswell
Don't negotiate TLSv1.3 if our EC cert isn't TLSv1...
tree
|
commitdiff
2018-11-10
Tomas Mraz
Unbreak SECLEVEL 3 regression causing it to not accept...
tree
|
commitdiff
2018-11-08
Matt Caswell
Give a better error if an attempt is made to set a...
tree
|
commitdiff
2018-11-08
Matt Caswell
Ignore disabled ciphers when deciding if we are using ECC
tree
|
commitdiff
2018-11-05
Pauli
Fix return formatting.
tree
|
commitdiff
2018-11-05
Pauli
Cleanse the key log buffer.
tree
|
commitdiff
2018-11-04
Benjamin Kaduk
Restore sensible "sess_accept" counter tracking
tree
|
commitdiff
2018-10-30
Matt Caswell
Don't call the client_cert_cb immediately in TLSv1.3
tree
|
commitdiff
2018-10-29
Richard Levitte
ssl/statem: Don't compare size_t with less than zero
tree
|
commitdiff
2018-10-26
Matt Caswell
Properly handle duplicated messages from the next epoch
tree
|
commitdiff
2018-10-19
Matt Caswell
Buffer a ClientHello with a cookie received via DTLSv1_...
tree
|
commitdiff
2018-10-19
Matt Caswell
Use the read and write buffers in DTLSv1_listen()
tree
|
commitdiff
2018-10-19
Matt Caswell
Fix a DTLS memory leak
tree
|
commitdiff
2018-10-18
armfazh
Fix tls_cbc_digest_record is slow using SHA-384 and...
tree
|
commitdiff
2018-10-17
Mansour Ahmadi
Add a missing check on s->s3->tmp.pkey
tree
|
commitdiff
2018-10-15
Matt Caswell
Fix no-psk
tree
|
commitdiff
2018-10-12
Andy Polyakov
ssl/s3_enc.c: fix logical errors in ssl3_final_finish_mac.
tree
|
commitdiff
2018-09-24
Bernd Edlinger
Reduce stack usage in tls13_hkdf_expand
tree
|
commitdiff
2018-09-21
Matt Caswell
Fix the max psk len for TLSv1.3
tree
|
commitdiff
2018-09-21
Matt Caswell
Delay setting the sig algs until after the cert_cb...
tree
|
commitdiff
2018-09-19
Benjamin Kaduk
Reset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()
tree
|
commitdiff
2018-09-18
Dr. Matthias St...
ssl/ssl_ciph.c: make set_ciphersuites static
tree
|
commitdiff
2018-09-12
Bernd Edlinger
Fix a possible recursion in SSLfatal handling
tree
|
commitdiff
2018-09-11
Matt Caswell
Update copyright year
tree
|
commitdiff
2018-09-07
Matt Caswell
Do not reset SNI data in SSL_do_handshake()
tree
|
commitdiff
2018-09-07
Ben Kaduk
Simplify SSL_get_servername() to avoid session references
tree
|
commitdiff
2018-09-07
Ben Kaduk
Restore historical SSL_get_servername() behavior
tree
|
commitdiff
2018-09-07
Matt Caswell
Ensure certificate callbacks work correctly in TLSv1.3
tree
|
commitdiff
2018-09-07
Matt Caswell
Process KeyUpdate and NewSessionTicket messages after...
tree
|
commitdiff
2018-09-04
Shane Lontis
key zeroization fix for a branch path of tls13_final_fi...
tree
|
commitdiff
2018-09-04
Matt Caswell
Don't use an RSA-PSS cert for RSA key exchange
tree
|
commitdiff
2018-09-04
Matt Caswell
Send a NewSessionTicket after using an external PSK
tree
|
commitdiff
2018-09-04
Matt Caswell
Ignore EPIPE when sending NewSessionTickets in TLSv1.3
tree
|
commitdiff
2018-09-03
Richard Levitte
Rename SSL[_CTX]_add1_CA_list -> SSL[_CTX]_add1_to_CA_list
tree
|
commitdiff
2018-09-01
Erik Forsberg
Fix ssl/t1_trce.c to parse certificate chains
tree
|
commitdiff
2018-08-30
Matt Caswell
Fix a mem leak on error in the PSK code
tree
|
commitdiff
2018-08-22
Matt Caswell
Don't detect a downgrade where the server has a protoco...
tree
|
commitdiff
2018-08-22
Matt Caswell
Use the same min-max version range on the client consis...
tree
|
commitdiff
2018-08-22
Tomas Mraz
Allow TLS-1.3 ciphersuites in @SECLEVEL=3 and above
tree
|
commitdiff
2018-08-20
Matt Caswell
Add support for SSL_CTX_set_post_handshake_auth()
tree
|
commitdiff
2018-08-20
Matt Caswell
Change Post Handshake auth so that it is opt-in
tree
|
commitdiff
2018-08-15
Matt Caswell
Turn on TLSv1.3 downgrade protection by default
tree
|
commitdiff
2018-08-15
Matt Caswell
Update code for the final RFC version of TLSv1.3 (RFC8446)
tree
|
commitdiff
2018-08-14
Dmitry Yakovlev
Move SSL_DEBUG md fprintf after assignment
tree
|
commitdiff
2018-08-09
Matt Caswell
Improve fallback protection
tree
|
commitdiff
2018-08-08
Matt Caswell
Tolerate encrypted or plaintext alerts
tree
|
commitdiff
2018-08-08
Matt Caswell
Ensure that we write out alerts correctly after early_data
tree
|
commitdiff
2018-08-08
Matt Caswell
Fix a missing call to SSLfatal
tree
|
commitdiff
2018-08-07
Rich Salz
Fix setting of ssl_strings_inited.
tree
|
commitdiff
2018-08-07
Andy Polyakov
ssl/*: switch to switch to Thread-Sanitizer-friendly...
tree
|
commitdiff
2018-08-07
Andy Polyakov
Harmonize use of sk_TYPE_find's return value.
tree
|
commitdiff
2018-08-06
Matt Caswell
Ensure we send an alert on error when processing a...
tree
|
commitdiff
2018-07-31
Matt Caswell
Fix some TLSv1.3 alert issues
tree
|
commitdiff
2018-07-26
Benjamin Kaduk
Improve backwards compat for SSL_get_servername()
tree
|
commitdiff
2018-07-20
Benjamin Kaduk
Add TODO comment for a nonsensical public API
tree
|
commitdiff
2018-07-20
Benjamin Kaduk
Normalize SNI hostname handling for SSL and SSL_SESSION
tree
|
commitdiff
2018-07-20
Benjamin Kaduk
const-ify some input SSL * arguments
tree
|
commitdiff
2018-07-20
Matt Caswell
Validate legacy_version
tree
|
commitdiff
2018-07-19
Matt Caswell
Don't skip over early_data if we sent an HRR
tree
|
commitdiff
2018-07-18
Matt Caswell
Check that the public key OID matches the sig alg
tree
|
commitdiff
2018-07-17
Matt Caswell
Fix no-psk
tree
|
commitdiff
2018-07-17
Matt Caswell
Always issue new tickets when using TLSv1.3 stateful...
tree
|
commitdiff
2018-07-17
Matt Caswell
Don't remove sessions from the cache during PHA in...
tree
|
commitdiff
2018-07-13
Matt Caswell
As a server don't select TLSv1.3 if we're not capable...
tree
|
commitdiff
2018-07-13
Matt Caswell
Use ssl_version_supported() when choosing server version
tree
|
commitdiff
2018-07-13
Matt Caswell
Do not use GOST sig algs in TLSv1.3 where possible
tree
|
commitdiff
2018-07-06
Matt Caswell
Introduce the recv_max_early_data setting
tree
|
commitdiff
2018-07-03
Matt Caswell
Remove TLSv1.3 tickets from the client cache as we...
tree
|
commitdiff
2018-07-03
Matt Caswell
Restore behaviour from commit 36ff232cf that was incorr...
tree
|
commitdiff
2018-07-02
Matt Caswell
Add the ability to configure anti-replay via SSL_CONF
tree
|
commitdiff
2018-07-02
Matt Caswell
Add setters to set the early_data callback
tree
|
commitdiff
2018-07-02
Matt Caswell
Make the anti-replay feature optional
tree
|
commitdiff
2018-07-02
Matt Caswell
Fix a NULL ptr deref in error path in tls_process_cke_dhe()
tree
|
commitdiff
2018-07-01
Benjamin Kaduk
Address coverity-reported NULL dereference in SSL_SESSI...
tree
|
commitdiff
2018-06-29
Pauli
Check return from BN_set_word.
tree
|
commitdiff
2018-06-27
Matt Caswell
Return a fatal error if application data is encountered...
tree
|
commitdiff
2018-06-27
Matt Caswell
Return SSL_ERROR_WANT_READ if SSL_shutdown() encounters...
tree
|
commitdiff
2018-06-27
Matt Caswell
Auto retry if we ditch records during shutdown
tree
|
commitdiff
2018-06-26
Matt Caswell
Use stateful tickets if we are doing anti-replay
tree
|
commitdiff
2018-06-26
Matt Caswell
Respect SSL_OP_NO_TICKET in TLSv1.3
tree
|
commitdiff
2018-06-26
Matt Caswell
Restructure the ticket construction code
tree
|
commitdiff
2018-06-26
Matt Caswell
Update SSL_SESSION_print for TLSv1.3
tree
|
commitdiff
2018-06-25
Matt Caswell
Don't change a session once its in the cache
tree
|
commitdiff
2018-06-22
Nicola Tuveri
Remove __cplusplus preamble from internal headers
tree
|
commitdiff
2018-06-21
Matt Caswell
Don't use OPENSSL_strdup() for copying alpn_selected
tree
|
commitdiff
2018-06-19
Matt Caswell
Fix enable-ssl3 enable-ssl3-method
tree
|
commitdiff
2018-06-11
Matt Caswell
Remodel the if sequence for handling alerts
tree
|
commitdiff
2018-06-11
Matt Caswell
Don't send a warning alert in TLSv1.3
tree
|
commitdiff
2018-06-11
Matt Caswell
Fix TLSv1.3 alert handling
tree
|
commitdiff
2018-06-07
Marcus Huewe
Do not free a session before calling the remove_session_cb
tree
|
commitdiff
2018-06-07
Matt Caswell
Reformulate the if condition in tls_process_new_session...
tree
|
commitdiff
2018-06-07
Matt Caswell
Don't store the ticket nonce in the session
tree
|
commitdiff
2018-06-07
Matt Caswell
Fix TLSv1.3 ticket nonces
tree
|
commitdiff
2018-06-07
Matt Caswell
Fix EAP-FAST
tree
|
commitdiff
2018-05-31
Matt Caswell
EVP_MD_size() can return an error
tree
|
commitdiff
2018-05-30
Dmitry Belyavskiy
Send GOST SignatureAlgorithms when TLS 1.2 in use
tree
|
commitdiff
2018-05-30
Dmitry Belyavskiy
Bugfix: GOST2012 certificates for GOST ciphersuites...
tree
|
commitdiff
next