aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2020-10-20Rename EVP_PKEY_set1_tls_encodedpoint to EVP_PKEY_set1_encoded_public_keyMatt Caswell4-14/+14
2020-10-16Pass an EVP_PKEY for SSL_SECOP_TMP_DH in the security callbackMatt Caswell1-1/+1
2020-10-16Concentrate deprecated libssl API usage in one fileMatt Caswell8-89/+179
2020-10-15Update copyright yearMatt Caswell1-1/+1
2020-10-15Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre7-23/+23
2020-10-14[ssl] Support ssl_encapsulate on server sideNicola Tuveri3-26/+149
2020-10-14[ssl] Support ssl_decapsulate on client sideNicola Tuveri3-34/+123
2020-10-14Define OSSL_CAPABILITY_TLS_GROUP_IS_KEMNicola Tuveri2-0/+9
2020-10-12Fixed typo in ssl_lib.cIkko Ashimine1-1/+1
2020-10-07Use size of target buffer for allocationBenny Baumann1-1/+1
2020-10-02TLS AEAD ciphers: more bytes for key_block than neededMaxim Masiutin1-9/+15
2020-10-01Run the withlibctx.pl scriptMatt Caswell10-81/+67
2020-09-27optimise ssl3_get_cipher_by_std_name()hklaas1-2/+1
2020-09-23Fix ssl_hmac_new() so that it uses the propqShane Lontis1-1/+1
2020-09-21Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP signNorman Ashley1-26/+0
2020-09-21Increase PSK_MAX_PSK_LEN to 512Rutger Hendriks1-1/+1
2020-09-17Disallow certs with explicit curve in verification chainTomas Mraz1-0/+1
2020-09-16DTLS: free allocated memory on error pathsPauli1-2/+6
2020-09-13Ignore unused return values from some sk_*() macrosMatt Caswell1-1/+1
2020-09-13Fix safestack issues in ct.hMatt Caswell1-2/+0
2020-09-13Fix safestack issues in ocsp.hMatt Caswell3-5/+0
2020-09-13Fix safestack issues in x509.hMatt Caswell12-28/+0
2020-09-13Fix safestack issues in ssl.hMatt Caswell10-17/+0
2020-09-12NonStop port updates for 3.0.0.Randall S. Becker1-0/+13
2020-09-09TLS fixes for CBC mode and no-deprecatedPauli3-24/+23
2020-09-09TLS: remove legacy code path supporting special CBC modePauli2-0/+8
2020-09-03Convert ssl3_cbc_digest_record() to use EVP_MD_is_a()Matt Caswell1-14/+7
2020-09-03Make ssl3_cbc_digest_record() use the real data_sizeMatt Caswell3-12/+9
2020-09-03Start using the provider side TLS HMAC implementationMatt Caswell1-24/+18
2020-09-03Add an HMAC implementation that is TLS awareMatt Caswell4-14/+50
2020-09-01also zero pad DHE public key in ClientKeyExchange message for interopFelix Monninger1-5/+9
2020-08-31Move KTLS inline functions only used by libssl into ssl/ktls.c.John Baldwin3-1/+241
2020-08-31Support for KTLS TX on FreeBSD for TLS 1.3.John Baldwin1-4/+0
2020-08-31Don't check errno if ktls_read_record() returned 0.John Baldwin1-1/+1
2020-08-31Add helper functions for FreeBSD KTLS.John Baldwin2-58/+10
2020-08-31Add a ktls_crypto_info_t typedef.John Baldwin2-5/+3
2020-08-29Check whether we have MD5-SHA1 and whether we need itMatt Caswell1-6/+49
2020-08-29Improve some error messages if a digest is not availableMatt Caswell3-2/+9
2020-08-29Ensure libssl creates libctx aware MAC keysMatt Caswell3-13/+29
2020-08-27apps: -msg flag enhancement 2/2Marc2-5/+9
2020-08-24Fix coverity CID #1465795 - Incorrect free deallocator used in SSL_add1_host()Shane Lontis1-1/+1
2020-08-13Appease -Werror=stringop-overflow=Patrick Steuer1-3/+2
2020-08-13Avoid segfault in SSL_export_keying_material if there is no sessionTomas Mraz1-1/+2
2020-08-12Mark SSL_CTX_set_ssl_version() as deprecated in 3.0Benjamin Kaduk1-0/+2
2020-08-09Add EVP signature with libctx methods.Shane Lontis6-21/+27
2020-08-07rand_drbg: remove RAND_DRBG.Pauli1-1/+0
2020-08-06Update copyright yearMatt Caswell1-1/+1
2020-08-03Disallow setting more than one IP address with SSL_add1_host()David Woodhouse1-2/+21
2020-08-03Make SSL_set1_host() and SSL_add1_host() take IP addressesDavid Woodhouse1-0/+10
2020-07-30unify spelling of serializePauli1-1/+1