summaryrefslogtreecommitdiffstats
path: root/ssl (follow)
Commit message (Expand)AuthorAgeFilesLines
* Ensure libssl uses the new library context aware CT codeMatt Caswell2020-04-091-2/+2
* Explicitly cache the X509v3_extensions in one more place in libsslMatt Caswell2020-04-091-0/+6
* Use X509_STORE_CTX_new_with_libctx() in libsslMatt Caswell2020-04-092-3/+4
* TLS: Temporarly downgrade newly generated EVP_PKEYs to legacyRichard Levitte2020-04-084-0/+120
* EVP & TLS: Add necessary EC_KEY data extraction functions, and use themRichard Levitte2020-04-083-35/+36
* TLS Cipher Suite 0xC102 SupportNikolay Morozov2020-04-023-5/+23
* Make sure we use the libctx when creating an EVP_PKEY_CTX in libsslMatt Caswell2020-04-011-3/+28
* Use EVP_DigestSignInit_ex and EVP_DigestVerifyInit_ex in libsslMatt Caswell2020-04-016-8/+21
* Don't double free a DH objectMatt Caswell2020-04-011-1/+2
* Give a better error if we can't find a sig algMatt Caswell2020-03-301-2/+2
* Explicitly cache X509v3 extensions in libsslMatt Caswell2020-03-303-2/+25
* Don't attempt to up-ref an EVP_CIPHER if it is NULLMatt Caswell2020-03-301-1/+4
* Update libssl to use the new library context aware SRP functionsMatt Caswell2020-03-271-12/+18
* Ignore some fetch failuresMatt Caswell2020-03-271-3/+13
* Use a fetched cipher for the TLSv1.3 early secretMatt Caswell2020-03-263-19/+46
* Use a fetched cipher when decrypting a ticket in libsslMatt Caswell2020-03-261-4/+12
* Make sure we use a fetched cipher when encrypting stateless ticketsMatt Caswell2020-03-241-1/+10
* Use a fetched version of SHA256 in tls_process_new_session_ticket()Matt Caswell2020-03-242-3/+15
* Use correct libctx when fetching the TLS1 PRF in libsslMatt Caswell2020-03-231-1/+1
* Use the libctx and properties when constructing an EVP_PKEY_CTXMatt Caswell2020-03-231-1/+2
* Constify various mostly X509-related parameter types in crypto/ and apps/Dr. David von Oheimb2020-03-231-1/+1
* Use a flag in SSL3_BUFFER to track when an application buffer is reused.John Baldwin2020-03-164-1/+8
* Code to thread-safety in ChangeCipherStateBenjamin Kaduk2020-03-131-1/+9
* Don't write to the session when computing TLS 1.3 keysBenjamin Kaduk2020-03-132-2/+6
* Fix whitespace nit in ssl_generate_master_secret()Benjamin Kaduk2020-03-131-1/+1
* Deprecate the low level Diffie-Hellman functions.Pauli2020-02-204-12/+13
* Deprecate the low level RSA functions.Pauli2020-02-201-7/+5
* Handle max_fragment_length overflow for DTLSSimon Cornish2020-02-191-2/+8
* Fix coverity issuesShane Lontis2020-02-131-1/+1
* Fix a mem leak in libsslMatt Caswell2020-02-131-2/+12
* Check that ed25519 and ed448 are allowed by the security levelKurt Roeckx2020-02-111-18/+41
* Fix no-engineMatt Caswell2020-02-081-0/+4
* Use the OPENSSL_CTX and property query string in EVP_PKEY_CTXMatt Caswell2020-02-065-11/+23
* Explicitly fetch ciphers and digests in libsslMatt Caswell2020-02-0615-171/+324
* Params: change UTF8 construct calls to avoid explicit strlen(3) calls.Pauli2020-02-062-3/+3
* Detect EOF while reading in libsslMatt Caswell2020-02-042-1/+9
* Don't acknowledge a servername following warning alert in servername cbMatt Caswell2020-01-301-0/+1
* Fix SSL_get_servername() and SNI behaviourMatt Caswell2020-01-303-22/+86
* TLS: use EVP for HMAC throughout libssl.Pauli2020-01-294-29/+220
* Check that the default signature type is allowedKurt Roeckx2020-01-252-5/+13
* Make sure we use RAND_bytes_ex and RAND_priv_bytes_ex in libsslMatt Caswell2020-01-246-18/+22
* Introduce SSL_CTX_new_with_libex()Matt Caswell2020-01-222-8/+27
* libssl: Eliminate as much use of EVP_PKEY_size() as possibleMatt Caswell2020-01-193-64/+40
* Deprecate the low level MD5 functions.Pauli2020-01-191-1/+1
* Deprecate the low level SHA functions.Pauli2020-01-191-0/+6
* Update tls13_enc.cdcruette2020-01-021-1/+1
* Deprecate most of debug-memoryRich Salz2019-12-141-7/+0
* Parse large GOST ClientKeyExchange messagesDmitry Belyavskiy2019-12-131-31/+38
* Fix some typosVeres Lajos2019-12-113-6/+6
* Move constant time RSA code out of libsslMatt Caswell2019-12-051-93/+47