summaryrefslogtreecommitdiffstats
path: root/ssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP signNorman Ashley2020-09-211-26/+0
* Increase PSK_MAX_PSK_LEN to 512Rutger Hendriks2020-09-211-1/+1
* Disallow certs with explicit curve in verification chainTomas Mraz2020-09-171-0/+1
* DTLS: free allocated memory on error pathsPauli2020-09-151-2/+6
* Ignore unused return values from some sk_*() macrosMatt Caswell2020-09-131-1/+1
* Fix safestack issues in ct.hMatt Caswell2020-09-131-2/+0
* Fix safestack issues in ocsp.hMatt Caswell2020-09-133-5/+0
* Fix safestack issues in x509.hMatt Caswell2020-09-1312-28/+0
* Fix safestack issues in ssl.hMatt Caswell2020-09-1310-17/+0
* NonStop port updates for 3.0.0.Randall S. Becker2020-09-121-0/+13
* TLS fixes for CBC mode and no-deprecatedPauli2020-09-093-24/+23
* TLS: remove legacy code path supporting special CBC modePauli2020-09-092-0/+8
* Convert ssl3_cbc_digest_record() to use EVP_MD_is_a()Matt Caswell2020-09-031-14/+7
* Make ssl3_cbc_digest_record() use the real data_sizeMatt Caswell2020-09-033-12/+9
* Start using the provider side TLS HMAC implementationMatt Caswell2020-09-031-24/+18
* Add an HMAC implementation that is TLS awareMatt Caswell2020-09-034-14/+50
* also zero pad DHE public key in ClientKeyExchange message for interopFelix Monninger2020-09-011-5/+9
* Move KTLS inline functions only used by libssl into ssl/ktls.c.John Baldwin2020-08-313-1/+241
* Support for KTLS TX on FreeBSD for TLS 1.3.John Baldwin2020-08-311-4/+0
* Don't check errno if ktls_read_record() returned 0.John Baldwin2020-08-311-1/+1
* Add helper functions for FreeBSD KTLS.John Baldwin2020-08-312-58/+10
* Add a ktls_crypto_info_t typedef.John Baldwin2020-08-312-5/+3
* Check whether we have MD5-SHA1 and whether we need itMatt Caswell2020-08-291-6/+49
* Improve some error messages if a digest is not availableMatt Caswell2020-08-293-2/+9
* Ensure libssl creates libctx aware MAC keysMatt Caswell2020-08-293-13/+29
* apps: -msg flag enhancement 2/2Marc2020-08-272-5/+9
* Fix coverity CID #1465795 - Incorrect free deallocator used in SSL_add1_host()Shane Lontis2020-08-241-1/+1
* Appease -Werror=stringop-overflow=Patrick Steuer2020-08-131-3/+2
* Avoid segfault in SSL_export_keying_material if there is no sessionTomas Mraz2020-08-131-1/+2
* Mark SSL_CTX_set_ssl_version() as deprecated in 3.0Benjamin Kaduk2020-08-131-0/+2
* Add EVP signature with libctx methods.Shane Lontis2020-08-096-21/+27
* rand_drbg: remove RAND_DRBG.Pauli2020-08-071-1/+0
* Update copyright yearMatt Caswell2020-08-061-1/+1
* Disallow setting more than one IP address with SSL_add1_host()David Woodhouse2020-08-031-2/+21
* Make SSL_set1_host() and SSL_add1_host() take IP addressesDavid Woodhouse2020-08-031-0/+10
* unify spelling of serializePauli2020-07-301-1/+1
* Add X509 related libctx changes.Shane Lontis2020-07-248-77/+147
* Avoid errors with a priori inapplicable protocol boundsViktor Dukhovni2020-07-212-15/+26
* Update copyright yearRichard Levitte2020-07-162-2/+2
* Revert "kdf: make function naming consistent."Matt Caswell2020-07-162-15/+15
* Revert "The EVP_MAC functions have been renamed for consistency. The EVP_MAC...Matt Caswell2020-07-162-7/+7
* deprecate engines in SSLPauli2020-07-164-0/+12
* Add SSL_get[01]_peer_certificate()Todd Short2020-07-163-13/+14
* Providerized libssl fallout: cleanup initBenjamin Kaduk2020-07-121-61/+0
* Fix an incorrect error flow in add_provider_groupsMatt Caswell2020-07-081-1/+1
* Add support to zeroize plaintext in S3 record layerMartin Elshuber2020-07-073-0/+10
* Ensure TLS padding is added during encryption on the provider sideMatt Caswell2020-07-061-4/+16
* Convert SSLv3 handling to use provider side CBC/MAC removalMatt Caswell2020-07-064-46/+97
* Make libssl start using the TLS provider CBC supportMatt Caswell2020-07-062-50/+141
* Add provider support for TLS CBC padding and MAC removalMatt Caswell2020-07-061-0/+2