aboutsummaryrefslogtreecommitdiff
path: root/ssl/t1_enc.c
AgeCommit message (Expand)AuthorFilesLines
2012-05-10Sanity check record length before skipping explicit IV in TLS 1.2, 1.1 andDr. Stephen Henson1-0/+2
2012-03-13ssl/t1_enc.c: pay attention to EVP_CIPH_FLAG_CUSTOM_CIPHER.Andy Polyakov1-1/+4
2012-02-22SSL export fixes (from Adam Langley) [original from 1.0.1]Dr. Stephen Henson1-29/+29
2011-12-13Remove redundant TLS exporter.Ben Laurie1-25/+1
2011-11-25PR: 1794Dr. Stephen Henson1-3/+0
2011-11-21bcmp doesn't exist on all platforms, replace with memcmpDr. Stephen Henson1-4/+4
2011-11-15Add TLS exporter.Ben Laurie1-0/+89
2011-08-03Expand range of ctrls for AES GCM to support retrieval and setting ofDr. Stephen Henson1-3/+19
2011-07-11ssl/t1_enc.c: initial support for AEAD ciphers.Andy Polyakov1-16/+65
2011-05-31Don't round up partitioned premaster secret length if there is only oneDr. Stephen Henson1-0/+2
2011-05-19Implement FIPS_mode and FIPS_mode_setDr. Stephen Henson1-0/+2
2011-05-09Initial TLS v1.2 client support. Include a default supported signatureDr. Stephen Henson1-0/+11
2011-04-29Initial incomplete TLS v1.2 support. New ciphersuites added, new versionDr. Stephen Henson1-7/+7
2011-03-12Add SRP support.Ben Laurie1-0/+3
2011-01-04Don't use decryption_failed alert for TLS v1.1 or later.Dr. Stephen Henson1-0/+2
2010-11-24use generalise mac API for SSL key generationDr. Stephen Henson1-28/+34
2010-11-14Only use explicit IV if cipher is in CBC mode.Dr. Stephen Henson1-2/+4
2010-07-18PR: 1830Dr. Stephen Henson1-0/+23
2010-07-18oops, revert wrong patch..Dr. Stephen Henson1-23/+0
2010-07-18Fix warnings (From HEAD, original patch by Ben).Dr. Stephen Henson1-0/+23
2010-06-27no need for empty fragments with TLS 1.1 and later due to explicit IVDr. Stephen Henson1-1/+2
2010-06-12Fix warnings.Ben Laurie1-10/+4
2010-05-17PR: 2259Dr. Stephen Henson1-54/+97
2009-12-07Initial experimental TLSv1.1 supportDr. Stephen Henson1-1/+28
2009-04-20Updates from 1.0.0-stable branch.Dr. Stephen Henson1-2/+2
2009-01-11Fix warnings properly this time ;-)Dr. Stephen Henson1-3/+3
2009-01-11Fix sign-compare warnings.Dr. Stephen Henson1-1/+1
2009-01-05Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMPLutz Jänicke1-0/+2
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie1-4/+16
2008-12-27Handle the unlikely event that BIO_get_mem_data() returns -ve.Ben Laurie1-4/+7
2008-11-12Revert the size_t modifications from HEAD that had led to moreGeoff Thorpe1-24/+19
2008-11-10Make -DKSSL_DEBUG work again.Dr. Stephen Henson1-19/+24
2008-01-05Fix unsigned/signed warnings in ssl.Andy Polyakov1-2/+2
2007-10-261. Changes for s_client.c to make it return non-zero exit code in caseDr. Stephen Henson1-3/+5
2007-10-09Make DTLS1 record layer MAC calculation RFC compliant.Andy Polyakov1-6/+19
2007-09-26Support for certificate status TLS extension.Dr. Stephen Henson1-1/+1
2007-09-21Implement the Opaque PRF Input TLS extensionBodo Möller1-65/+98
2007-08-31Update ssl code to support digests other than MD5+SHA1 in handshake.Dr. Stephen Henson1-31/+68
2007-06-04Update ssl library to support EVP_PKEY MAC API. Include generic MAC support.Dr. Stephen Henson1-23/+53
2007-02-17Reorganize the data used for SSL ciphersuite pattern matching.Bodo Möller1-5/+7
2007-02-16ensure that the EVP_CIPHER_CTX object is initializedNils Larsch1-5/+6
2006-05-07Fix from stable branch.Dr. Stephen Henson1-1/+9
2006-03-10add initial support for RFC 4279 PSK SSL ciphersuitesNils Larsch1-0/+27
2006-01-07There's no such things as DTLS1_AD_MISSING_HANDSHAKE_MESSAGE.Bodo Möller1-0/+2
2006-01-07prepare for additional RFC3546 alertsBodo Möller1-0/+4
2006-01-07make sure that the unrecognized_name alert actually gets sentBodo Möller1-0/+1
2005-09-30Make OPENSSL_NO_COMP compile again.Dr. Stephen Henson1-0/+8
2005-04-26Add DTLS support.Ben Laurie1-6/+15
2002-11-28Cleanse memory using the new OPENSSL_cleanse() function.Richard Levitte1-6/+6
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie1-4/+4