aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2020-07-05Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txtDr. David von Oheimb2-0/+0
2020-07-01Free pre_proc_exts in SSL_free()MiƂosz Kaniewski1-0/+2
2020-06-27Reduce the security bits for MD5 and SHA1 based signatures in TLSKurt Roeckx1-0/+18
2020-06-23Don't attempt to duplicate the BIO state in SSL_dupMatt Caswell1-15/+0
2020-06-23Ensure that SSL_dup copies the min/max protocol versionMatt Caswell1-0/+2
2020-06-19Fix the DTLS1_COOKIE_LENGTH valueMatt Caswell1-1/+1
2020-06-19Create defines for TLS Group IdsMatt Caswell1-35/+36
2020-06-19Don't send supported groups if no-ec and we're doing DTLSMatt Caswell1-1/+1
2020-06-19Provider a better error message if we fail to copy parametersMatt Caswell3-3/+5
2020-06-19Update the various SSL group getting and setting functionsMatt Caswell4-48/+78
2020-06-19Modify libssl to discover supported groups based on available providersMatt Caswell6-184/+341
2020-06-11The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_*Pauli2-7/+7
2020-06-11kdf: make function naming consistent.Pauli2-15/+15
2020-06-09Do not allow dropping Extended Master Secret extension on renegotiatonTomas Mraz1-1/+14
2020-06-09use safe primes in ssl_get_auto_dh()Hubert Kario1-36/+38
2020-06-08TLSv1.3: additional checks in SSL_set_record_padding_callbackVadim Fedorenko1-2/+9
2020-06-08TLSv13: add kTLS supportVadim Fedorenko2-14/+72
2020-06-08kTLS: add support for AES_CCM128 and AES_GCM256Vadim Fedorenko1-26/+24
2020-06-05Don't downgrade keys in libsslMatt Caswell5-131/+0
2020-06-05Check that Signature Algorithms are available before using themMatt Caswell3-47/+114
2020-06-04Add cipher list ciphersuites which using encryption algorithm in mode CBC.Otto Hollmann2-0/+4
2020-06-04Update copyright yearMatt Caswell1-1/+1
2020-06-02Move EC_METHOD to internal-onlyBilly Brumley1-1/+1
2020-06-01undeprecate SSL_CTX_load_verify_locations and X509_STORE_load_locationsTim Hudson1-2/+0
2020-05-27Rename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp_parameters() to EVP_P...Dr. David von Oheimb1-1/+1
2020-05-20t1_trce: Fix remaining places where the 24 bit shift overflow happensTomas Mraz1-5/+16
2020-05-19Introducing option SSL_OP_IGNORE_UNEXPECTED_EOFDmitry Belyavskiy1-2/+7
2020-05-19New Russian TLS 1.2 implementationDmitry Belyavskiy13-28/+428
2020-05-15Fix crash in early data send with out-of-band PSK using AES CCMraja-ashok1-2/+9
2020-05-15SSL: refactor ssl_cert_lookup_by_pkey() to work with provider side keysRichard Levitte1-10/+11
2020-05-15Update copyright yearMatt Caswell2-2/+2
2020-05-15Correct alignment calculation in ssl3_setup_writeMatt Caswell1-1/+1
2020-05-07Fix use-after-free in BIO_C_SET_SSL callbackDr. Matthias St. Pierre1-0/+1
2020-05-07SSL_OP_DISABLE_TLSEXT_CA_NAMES option implementationNikolay Morozov2-3/+4
2020-05-06Don't offer or accept ciphersuites that we can't supportMatt Caswell1-2/+10
2020-05-05Fix up whitespace nits introduced by PR #11416Benjamin Kaduk2-7/+7
2020-05-01Add SSL_new_session_ticket() APIBenjamin Kaduk4-6/+29
2020-05-01Fix whitespace nit in ossl_statem_server_pre_workBenjamin Kaduk1-1/+2
2020-04-30coverity 1462581 Dereference after null checkPauli1-1/+4
2020-04-30coverity 1462570 Resource leakPauli1-0/+1
2020-04-28Fix GOST curve sec bitsNikolay Morozov1-7/+7
2020-04-24In OpenSSL builds, declare STACK for datatypes ...Rich Salz15-0/+52
2020-04-23Update copyright yearMatt Caswell24-24/+24
2020-04-22GOST2012 TLS Supported Groups Identifiers SupportNikolay Morozov2-0/+25
2020-04-21Fix test_ssl_new test failureMatt Caswell1-4/+6
2020-04-21Fix NULL dereference in SSL_check_chain() for TLS 1.3Benjamin Kaduk1-1/+1
2020-04-20Use a fetched MD if appropriate in ssl3_cbc_digest_recordMatt Caswell3-9/+16
2020-04-19Use the libctx for all EVP_PKEY_CTX operationsMatt Caswell3-83/+39
2020-04-18GOST2012 TLS ClientCertificateType Identifiers supportNikolay Morozov1-2/+4
2020-04-16TLSEXT_SIGALG_gostr34102012 0x0840 and 0x0841 supportNikolay Morozov3-2/+16