aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2011-02-16Include openssl/crypto.h first in several other files so FIPS renamingDr. Stephen Henson5-0/+5
2011-02-12New option to disable characteristic two fields in EC code.Dr. Stephen Henson1-0/+4
2011-02-08OCSP stapling fix (OpenSSL 0.9.8r/1.0.0d)Bodo Möller1-1/+7
2011-02-03Assorted bugfixes:Bodo Möller1-2/+3
2011-02-03CVE-2010-4180 fix (from OpenSSL_1_0_0-stable)Bodo Möller2-0/+8
2011-02-03make updateBodo Möller1-60/+62
2011-01-26FIPS_allow_md5() no longer exists and is no longer requiredDr. Stephen Henson2-70/+60
2011-01-04Don't use decryption_failed alert for TLS v1.1 or later.Dr. Stephen Henson1-0/+2
2011-01-04Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failedDr. Stephen Henson2-6/+3
2010-12-14First attempt at adding the possibility to set the pointer size for the build...Richard Levitte2-5/+64
2010-11-25PR: 2240Dr. Stephen Henson1-7/+4
2010-11-25using_ecc doesn't just apply to TLSv1Dr. Stephen Henson1-1/+1
2010-11-24oops, revert invalid changeDr. Stephen Henson1-2/+8
2010-11-24use generalise mac API for SSL key generationDr. Stephen Henson2-36/+36
2010-11-22Taken from OpenSSL_1_0_0-stable:Richard Levitte2-1/+5
2010-11-18remove duplicate statementDr. Stephen Henson1-2/+0
2010-11-17oops, reinstate TLSv1 stringDr. Stephen Henson1-0/+2
2010-11-17Don't assume a decode error if session tlsext_ecpointformatlist is not NULL: ...Dr. Stephen Henson1-2/+2
2010-11-16bring HEAD up to date, add CVE-2010-3864 fix, update NEWS filesDr. Stephen Henson1-18/+42
2010-11-14Only use explicit IV if cipher is in CBC mode.Dr. Stephen Henson2-3/+6
2010-11-14Get correct GOST private key instead of just assuming the last one isDr. Stephen Henson1-3/+10
2010-10-10PR: 2314Dr. Stephen Henson1-0/+1
2010-09-05Fixes to NPN from Adam Langley.Ben Laurie11-36/+36
2010-09-05NPN tests.Ben Laurie1-0/+128
2010-09-05Fix warnings.Ben Laurie1-1/+1
2010-08-27PR: 1833Dr. Stephen Henson2-4/+4
2010-08-26For better forward-security support, add functionsBodo Möller3-2/+42
2010-08-26Patch from PR #1833 was broken: there's no s->s3->new_sessionBodo Möller1-2/+10
2010-08-26PR: 1833Dr. Stephen Henson9-21/+44
2010-07-28Add Next Protocol Negotiation.Ben Laurie12-1/+524
2010-07-18PR: 1830Dr. Stephen Henson2-0/+27
2010-07-18oops, revert wrong patch..Dr. Stephen Henson2-27/+0
2010-07-18Fix warnings (From HEAD, original patch by Ben).Dr. Stephen Henson2-0/+27
2010-06-27no need for empty fragments with TLS 1.1 and later due to explicit IVDr. Stephen Henson1-1/+2
2010-06-12Fix warnings.Ben Laurie10-50/+17
2010-05-17PR: 2259Dr. Stephen Henson1-54/+97
2010-05-03PR: 2230Dr. Stephen Henson1-13/+14
2010-04-14fix signed/unsigned comparison warningsDr. Stephen Henson1-3/+3
2010-04-14PR: 2230Dr. Stephen Henson2-83/+232
2010-04-14PR: 2229Dr. Stephen Henson1-16/+11
2010-04-14PR: 2228Dr. Stephen Henson1-0/+3
2010-04-07Add SHA2 algorithms to SSL_library_init(). Although these aren't usedDr. Stephen Henson1-0/+8
2010-04-06PR: 2218Dr. Stephen Henson1-6/+6
2010-04-06PR: 2219Dr. Stephen Henson1-1/+1
2010-04-06PR: 2223Dr. Stephen Henson1-0/+10
2010-04-06PR: 2220Dr. Stephen Henson1-1/+1
2010-03-25Fix for "Record of death" vulnerability CVE-2010-0740.Bodo Möller1-3/+3
2010-03-24PR: 1731 and maybe 2197Dr. Stephen Henson3-0/+6
2010-03-03Submitted by: Tomas Hoger <thoger@redhat.com>Dr. Stephen Henson1-0/+3
2010-02-28algorithms field has changed in 1.0.0 and later: updateDr. Stephen Henson1-1/+1