summaryrefslogtreecommitdiffstats
path: root/ssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* Add SSL_get[01]_peer_certificate()Todd Short2020-07-163-13/+14
* Providerized libssl fallout: cleanup initBenjamin Kaduk2020-07-121-61/+0
* Fix an incorrect error flow in add_provider_groupsMatt Caswell2020-07-081-1/+1
* Add support to zeroize plaintext in S3 record layerMartin Elshuber2020-07-073-0/+10
* Ensure TLS padding is added during encryption on the provider sideMatt Caswell2020-07-061-4/+16
* Convert SSLv3 handling to use provider side CBC/MAC removalMatt Caswell2020-07-064-46/+97
* Make libssl start using the TLS provider CBC supportMatt Caswell2020-07-062-50/+141
* Add provider support for TLS CBC padding and MAC removalMatt Caswell2020-07-061-0/+2
* Remove SSL dependencies from tls_pad.cMatt Caswell2020-07-063-77/+135
* Split the padding/mac removal functions out into a separate fileMatt Caswell2020-07-063-270/+283
* Move MAC removal responsibility to the various protocol "enc" functionsMatt Caswell2020-07-068-400/+375
* SSL: fix misuse of ERR_LIB_SYSRichard Levitte2020-07-051-1/+2
* Fix many MarkDown issues in {NOTES*,README*,HACKING,LICENSE}.md filesDr. David von Oheimb2020-07-052-79/+78
* Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txtDr. David von Oheimb2020-07-052-0/+0
* Free pre_proc_exts in SSL_free()MiƂosz Kaniewski2020-07-021-0/+2
* Reduce the security bits for MD5 and SHA1 based signatures in TLSKurt Roeckx2020-06-271-0/+18
* Don't attempt to duplicate the BIO state in SSL_dupMatt Caswell2020-06-231-15/+0
* Ensure that SSL_dup copies the min/max protocol versionMatt Caswell2020-06-231-0/+2
* Fix the DTLS1_COOKIE_LENGTH valueMatt Caswell2020-06-191-1/+1
* Create defines for TLS Group IdsMatt Caswell2020-06-191-35/+36
* Don't send supported groups if no-ec and we're doing DTLSMatt Caswell2020-06-191-1/+1
* Provider a better error message if we fail to copy parametersMatt Caswell2020-06-193-3/+5
* Update the various SSL group getting and setting functionsMatt Caswell2020-06-194-48/+78
* Modify libssl to discover supported groups based on available providersMatt Caswell2020-06-196-184/+341
* The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_*Pauli2020-06-112-7/+7
* kdf: make function naming consistent.Pauli2020-06-112-15/+15
* Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz2020-06-091-1/+14
* use safe primes in ssl_get_auto_dh()Hubert Kario2020-06-091-36/+38
* TLSv1.3: additional checks in SSL_set_record_padding_callbackVadim Fedorenko2020-06-081-2/+9
* TLSv13: add kTLS supportVadim Fedorenko2020-06-082-14/+72
* kTLS: add support for AES_CCM128 and AES_GCM256Vadim Fedorenko2020-06-081-26/+24
* Don't downgrade keys in libsslMatt Caswell2020-06-055-131/+0
* Check that Signature Algorithms are available before using themMatt Caswell2020-06-053-47/+114
* Add cipher list ciphersuites which using encryption algorithm in mode CBC.Otto Hollmann2020-06-042-0/+4
* Update copyright yearMatt Caswell2020-06-041-1/+1
* Move EC_METHOD to internal-onlyBilly Brumley2020-06-021-1/+1
* undeprecate SSL_CTX_load_verify_locations and X509_STORE_load_locationsTim Hudson2020-06-011-2/+0
* Rename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp_parameters() to EVP_P...Dr. David von Oheimb2020-05-271-1/+1
* t1_trce: Fix remaining places where the 24 bit shift overflow happensTomas Mraz2020-05-201-5/+16
* Introducing option SSL_OP_IGNORE_UNEXPECTED_EOFDmitry Belyavskiy2020-05-191-2/+7
* New Russian TLS 1.2 implementationDmitry Belyavskiy2020-05-1913-28/+428
* Fix crash in early data send with out-of-band PSK using AES CCMraja-ashok2020-05-151-2/+9
* SSL: refactor ssl_cert_lookup_by_pkey() to work with provider side keysRichard Levitte2020-05-151-10/+11
* Update copyright yearMatt Caswell2020-05-152-2/+2
* Correct alignment calculation in ssl3_setup_writeMatt Caswell2020-05-151-1/+1
* Fix use-after-free in BIO_C_SET_SSL callbackDr. Matthias St. Pierre2020-05-071-0/+1
* SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov2020-05-072-3/+4
* Don't offer or accept ciphersuites that we can't supportMatt Caswell2020-05-061-2/+10
* Fix up whitespace nits introduced by PR #11416Benjamin Kaduk2020-05-062-7/+7
* Add SSL_new_session_ticket() APIBenjamin Kaduk2020-05-024-6/+29