summaryrefslogtreecommitdiffstats
path: root/ssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* Following the license change, modify the boilerplates in ssl/Richard Levitte2018-12-0651-51/+51
* Refactor the computation of API version limitsRichard Levitte2018-12-062-2/+2
* Fix some SSL_export_keying_material() issuesMatt Caswell2018-12-055-28/+53
* Revert "Reduce stack usage in tls13_hkdf_expand"Matt Caswell2018-12-051-12/+4
* Fix usage of deprecated SSL_set_tmp_ecdh()Antoine Salon2018-12-011-7/+3
* Fix access zero memory if SSL_DEBUG is enabledPaul Yang2018-11-272-3/+6
* Update copyright yearMatt Caswell2018-11-203-3/+3
* Add a missing SSLfatal callMatt Caswell2018-11-152-3/+10
* Add SSL_CTX_set_tmp_ecdh.podAntoine Salon2018-11-151-4/+4
* Fix no-ec and no-tls1_2Matt Caswell2018-11-143-1/+12
* Added missing signature algorithm reflection functionsViktor Dukhovni2018-11-122-2/+30
* Separate ca_names handling for client and serverMatt Caswell2018-11-127-27/+76
* Don't negotiate TLSv1.3 if our EC cert isn't TLSv1.3 capableMatt Caswell2018-11-123-2/+48
* Unbreak SECLEVEL 3 regression causing it to not accept any ciphers.Tomas Mraz2018-11-101-2/+2
* Add EVP_PKEY_supports_digest_nid()David Woodhouse2018-11-101-25/+30
* Honour mandatory digest on private key in has_usable_cert()David Woodhouse2018-11-101-3/+18
* Give a better error if an attempt is made to set a zero length groups listMatt Caswell2018-11-081-0/+4
* Ignore disabled ciphers when deciding if we are using ECCMatt Caswell2018-11-081-5/+8
* Fix return formatting.Pauli2018-11-051-1/+2
* Cleanse the key log buffer.Pauli2018-11-051-2/+2
* Restore sensible "sess_accept" counter trackingBenjamin Kaduk2018-11-041-1/+1
* Don't call the client_cert_cb immediately in TLSv1.3Matt Caswell2018-10-302-1/+24
* ssl/statem: Don't compare size_t with less than zeroRichard Levitte2018-10-292-4/+7
* Add automatic initializations support for EVP_MAC objectsRichard Levitte2018-10-291-1/+2
* Properly handle duplicated messages from the next epochMatt Caswell2018-10-261-4/+1
* Buffer a ClientHello with a cookie received via DTLSv1_listenMatt Caswell2018-10-193-28/+47
* Use the read and write buffers in DTLSv1_listen()Matt Caswell2018-10-193-30/+19
* Fix a DTLS memory leakMatt Caswell2018-10-191-1/+3
* Fix tls_cbc_digest_record is slow using SHA-384 and short messagesarmfazh2018-10-191-2/+3
* Add a missing check on s->s3->tmp.pkeyMansour Ahmadi2018-10-171-0/+6
* ssl/s3_enc.c: fix logical errors in ssl3_final_finish_mac.Andy Polyakov2018-10-121-3/+5
* Remove SSL_version_strRichard Levitte2018-10-031-2/+0
* Fix no-pskMatt Caswell2018-09-251-1/+5
* Reduce stack usage in tls13_hkdf_expandBernd Edlinger2018-09-241-4/+12
* Fix the max psk len for TLSv1.3Matt Caswell2018-09-211-1/+1
* Delay setting the sig algs until after the cert_cb has been calledMatt Caswell2018-09-211-15/+17
* Reset TLS 1.3 ciphers in SSL_CTX_set_ssl_version()Benjamin Kaduk2018-09-191-0/+4
* ssl/ssl_ciph.c: make set_ciphersuites staticDr. Matthias St. Pierre2018-09-182-2/+1
* Fix a possible recursion in SSLfatal handlingBernd Edlinger2018-09-121-2/+3
* Update copyright yearMatt Caswell2018-09-111-1/+1
* Do not reset SNI data in SSL_do_handshake()Matt Caswell2018-09-072-7/+5
* Simplify SSL_get_servername() to avoid session referencesBen Kaduk2018-09-071-11/+7
* Restore historical SSL_get_servername() behaviorBen Kaduk2018-09-071-5/+2
* Ensure certificate callbacks work correctly in TLSv1.3Matt Caswell2018-09-071-2/+3
* Process KeyUpdate and NewSessionTicket messages after a close_notifyMatt Caswell2018-09-073-27/+49
* key zeroization fix for a branch path of tls13_final_finish_macShane Lontis2018-09-041-0/+1
* Don't use an RSA-PSS cert for RSA key exchangeMatt Caswell2018-09-041-3/+7
* Send a NewSessionTicket after using an external PSKMatt Caswell2018-09-041-0/+2
* Ignore EPIPE when sending NewSessionTickets in TLSv1.3Matt Caswell2018-09-041-1/+32
* Rename SSL[_CTX]_add1_CA_list -> SSL[_CTX]_add1_to_CA_listRichard Levitte2018-09-031-2/+6