aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2016-01-28Prepare for 1.0.2f releaseOpenSSL_1_0_2fMatt Caswell4-6/+6
2016-01-28Update CHANGES and NEWS for releaseMatt Caswell2-1/+45
2016-01-28Add a test for small subgroup attacks on DH/DHEMatt Caswell1-3/+82
2016-01-28Always generate DH keys for ephemeral DH cipher suitesMatt Caswell4-53/+9
2016-01-28Prevent small subgroup attacks on DH/DHEMatt Caswell2-10/+26
2016-01-28Better SSLv2 cipher-suite enforcementViktor Dukhovni1-2/+13
2016-01-22pkeyutl: allow peerkey for EC_DERIVE to reside on a hardware token (public ke...Mouse1-4/+8
2016-01-21RT3863 ECC: Add missing NULL check. Set a flagBilly Brumley2-0/+3
2016-01-20GH issue 572: Error in help messageRich Salz2-2/+2
2016-01-20Handle SSL_shutdown while in init more appropriatelyMatt Caswell4-4/+20
2016-01-19Fix BSD -rpath parameterRichard Levitte1-1/+1
2016-01-19Validate ClientHello session_id field length and send alert on failureAlessandro Ghedini3-3/+11
2016-01-19Update license year range to 2016Prayag Verma1-1/+1
2016-01-18Don't use "grep -q", "-q" is not POSIX, and fails on Solaris.Kristian Amlie1-2/+2
2016-01-17Empty SNI names are not validViktor Dukhovni2-3/+6
2016-01-15NGX-2040 - fix wildcard match on punycode/IDNA DNS namesZi Lin2-1/+12
2016-01-14To avoid possible time_t overflow use X509_time_adj_ex()Dr. Stephen Henson2-7/+2
2016-01-13Root cause discovered and fixed, this fix became unnecessaryMouse1-3/+2
2016-01-13Changed help outputUri Blumenthal1-2/+2
2016-01-13Pass engine=NULL to EVP_PKEY_CTX_new(), unless "-engine_impl" was givenMouse1-9/+17
2016-01-13Remove unnecessary debugging fprintfMouse1-1/+0
2016-01-13Fixed crash (SIGSEGV) when freeing of ex_data stumbles upon a NULL-pointer.Mouse1-2/+3
2016-01-13Fixed a bug preventing pkeyutl from accessing keys directly on the token via ...Mouse1-2/+7
2016-01-12Wrong definition of the macro SSL_set1_sigalgs in ssl.harijitnayak1-1/+1
2016-01-11Change minimum DH size from 768 to 1024Kurt Roeckx2-2/+3
2016-01-10File is about s_time, not s_clientKurt Roeckx1-2/+2
2016-01-02Fix X509_STORE_CTX_cleanup()Viktor Dukhovni4-43/+43
2015-12-28RT4202: Update rt URL's.Rich Salz2-9/+10
2015-12-27Add some documentation for the OCSP callback functionsMatt Caswell1-0/+73
2015-12-27Ensure we don't call the OCSP callback if resuming a sessionMatt Caswell1-1/+1
2015-12-27Fix error when server does not send CertificateStatus messageMatt Caswell2-34/+39
2015-12-23The functions take a SSL *, not a SSL_CTX *Daniel Kahn Gillmor1-4/+4
2015-12-22Fix memory leak in DSA redo case.David Benjamin1-4/+4
2015-12-20Don't check RSA_FLAG_SIGN_VER.Dr. Stephen Henson1-2/+2
2015-12-19BIO_s_datagram() ctrl doesn't support SEEK/TELL, so don't pretend it doesRichard Levitte1-2/+0
2015-12-19Correct or add comments indicating what controls belong to whatRichard Levitte1-1/+5
2015-12-19Document how BIO_get_conn_ip and BIO_get_conn_int_port actually workRichard Levitte1-2/+2
2015-12-19Have BIO_get_conn_int_port use BIO_ctrl instead BIO_int_ctrlRichard Levitte2-12/+21
2015-12-19Fix more URLs mangled by reformatMatt Caswell2-2/+2
2015-12-19Fix URLs mangled by reformatMatt Caswell3-3/+3
2015-12-18Remove the "eay" c-file-style indicatorsRichard Levitte74-74/+74
2015-12-16Provide better "make depend" warning.Rich Salz1-14/+17
2015-12-14Fix a ** 0 mod 1 = 0 for real this time.Emilia Kasper2-17/+104
2015-12-14Fix tarball production to keep test/bctest and util/pod2mantestRichard Levitte1-1/+2
2015-12-13x86_64 assembly pack: tune clang version detection even further.Andy Polyakov13-13/+13
2015-12-10ec/ecp_nistz256_table.c: fix potential misalignment problem with Sun C.Andy Polyakov1-1/+1
2015-12-10Ensure |rwstate| is set correctly on BIO_flushMatt Caswell1-1/+5
2015-12-10Fix DTLS handshake fragment retriesMatt Caswell1-20/+44
2015-12-10Add a return value checkMatt Caswell1-4/+4
2015-12-09Don't use applink for static builds.Dr Stephen Henson1-2/+6